@node9/proxy 2.7.2 → 2.7.4

package/dist/cli.js

@@ -11883,6 +11883,132 @@ var init_cost_codex = __esm({
   }
 });
 
+// src/cost-copilot.ts
+function copilotSessionsDir() {
+  return import_path22.default.join(import_os19.default.homedir(), ".copilot", "session-state");
+}
+function safeReaddir3(dir) {
+  try {
+    return import_fs20.default.readdirSync(dir);
+  } catch {
+    return [];
+  }
+}
+function priceTokens(model, u) {
+  const tuple = pricingFor(model);
+  if (!tuple || !u) return 0;
+  const [pin, pout, pcw, pcr] = tuple;
+  return (u.inputTokens ?? 0) * pin + (u.outputTokens ?? 0) * pout + (u.cacheWriteTokens ?? 0) * pcw + (u.cacheReadTokens ?? 0) * pcr;
+}
+function parseCopilotSession(lines) {
+  let sessionId = "";
+  let cwd = "";
+  let startDate = "";
+  let shutdownDate = "";
+  let modelMetrics = null;
+  for (const raw of lines) {
+    if (!raw.trim()) continue;
+    let o;
+    try {
+      o = JSON.parse(raw);
+    } catch {
+      continue;
+    }
+    const d = o.data ?? {};
+    if (o.type === "session.start") {
+      if (typeof d["sessionId"] === "string") sessionId = d["sessionId"];
+      if (typeof d["startTime"] === "string") startDate = d["startTime"];
+      const ctx = d["context"] ?? {};
+      if (typeof ctx["cwd"] === "string") cwd = ctx["cwd"];
+    } else if (o.type === "session.shutdown") {
+      if (d["modelMetrics"] && typeof d["modelMetrics"] === "object") {
+        modelMetrics = d["modelMetrics"];
+      }
+      if (typeof o.timestamp === "string") shutdownDate = o.timestamp;
+    }
+  }
+  if (!modelMetrics) return [];
+  const date = (startDate || shutdownDate).slice(0, 10);
+  if (!date) return [];
+  const rows = [];
+  for (const [rawModel, m] of Object.entries(modelMetrics)) {
+    const u = m.usage ?? {};
+    const inputTokens = u.inputTokens ?? 0;
+    const outputTokens = u.outputTokens ?? 0;
+    const cacheReadTokens = u.cacheReadTokens ?? 0;
+    const cacheWriteTokens = u.cacheWriteTokens ?? 0;
+    if (inputTokens === 0 && outputTokens === 0 && cacheReadTokens === 0 && cacheWriteTokens === 0) {
+      continue;
+    }
+    const model = normalizeModel(rawModel);
+    const costUSD = typeof m.requests?.cost === "number" && m.requests.cost > 0 ? m.requests.cost : priceTokens(rawModel, u);
+    rows.push({
+      date,
+      model,
+      workingDir: cwd,
+      runId: sessionId,
+      costUSD,
+      inputTokens,
+      outputTokens,
+      cacheReadTokens,
+      cacheWriteTokens
+    });
+  }
+  return rows;
+}
+var import_fs20, import_os19, import_path22, copilotSource;
+var init_cost_copilot = __esm({
+  "src/cost-copilot.ts"() {
+    "use strict";
+    import_fs20 = __toESM(require("fs"));
+    import_os19 = __toESM(require("os"));
+    import_path22 = __toESM(require("path"));
+    init_litellm();
+    copilotSource = {
+      id: "copilot",
+      available() {
+        try {
+          return import_fs20.default.existsSync(copilotSessionsDir());
+        } catch {
+          return false;
+        }
+      },
+      collect(sinceMs) {
+        const base = copilotSessionsDir();
+        const combined = /* @__PURE__ */ new Map();
+        for (const sid of safeReaddir3(base)) {
+          const file = import_path22.default.join(base, sid, "events.jsonl");
+          try {
+            if (sinceMs !== void 0 && import_fs20.default.statSync(file).mtimeMs < sinceMs) continue;
+          } catch {
+            continue;
+          }
+          let content;
+          try {
+            content = import_fs20.default.readFileSync(file, "utf8");
+          } catch {
+            continue;
+          }
+          for (const e of parseCopilotSession(content.split("\n"))) {
+            const key = `${e.date}::${e.model}::${e.workingDir ?? ""}::${e.runId ?? ""}`;
+            const prev = combined.get(key);
+            if (prev) {
+              prev.costUSD += e.costUSD;
+              prev.inputTokens += e.inputTokens;
+              prev.outputTokens += e.outputTokens;
+              prev.cacheReadTokens += e.cacheReadTokens;
+              prev.cacheWriteTokens += e.cacheWriteTokens;
+            } else {
+              combined.set(key, { ...e });
+            }
+          }
+        }
+        return [...combined.values()];
+      }
+    };
+  }
+});
+
 // src/utils/hook-payload.ts
 function extractToolName(payload, defaultValue = "") {
   return payload.tool_name ?? payload.name ?? payload.toolCall?.name ?? defaultValue;
@@ -12197,79 +12323,79 @@ var init_scan_summary = __esm({
 function buildSensitivePaths(home, cwd) {
   return [
     {
-      full: import_path22.default.join(home, ".ssh", "id_rsa"),
+      full: import_path23.default.join(home, ".ssh", "id_rsa"),
       label: "~/.ssh/id_rsa",
       description: "RSA private key \u2014 grants SSH access to your servers",
       score: 20
     },
     {
-      full: import_path22.default.join(home, ".ssh", "id_ed25519"),
+      full: import_path23.default.join(home, ".ssh", "id_ed25519"),
       label: "~/.ssh/id_ed25519",
       description: "Ed25519 private key \u2014 grants SSH access to your servers",
       score: 20
     },
     {
-      full: import_path22.default.join(home, ".ssh", "id_ecdsa"),
+      full: import_path23.default.join(home, ".ssh", "id_ecdsa"),
       label: "~/.ssh/id_ecdsa",
       description: "ECDSA private key \u2014 grants SSH access to your servers",
       score: 20
     },
     {
-      full: import_path22.default.join(home, ".aws", "credentials"),
+      full: import_path23.default.join(home, ".aws", "credentials"),
       label: "~/.aws/credentials",
       description: "AWS access keys \u2014 full cloud account access",
       score: 20
     },
     {
-      full: import_path22.default.join(home, ".aws", "config"),
+      full: import_path23.default.join(home, ".aws", "config"),
       label: "~/.aws/config",
       description: "AWS configuration \u2014 account and region settings",
       score: 5
     },
     {
-      full: import_path22.default.join(home, ".config", "gcloud", "credentials.db"),
+      full: import_path23.default.join(home, ".config", "gcloud", "credentials.db"),
       label: "~/.config/gcloud/credentials.db",
       description: "Google Cloud credentials",
       score: 15
     },
     {
-      full: import_path22.default.join(home, ".docker", "config.json"),
+      full: import_path23.default.join(home, ".docker", "config.json"),
       label: "~/.docker/config.json",
       description: "Docker registry auth tokens",
       score: 10
     },
     {
-      full: import_path22.default.join(home, ".netrc"),
+      full: import_path23.default.join(home, ".netrc"),
       label: "~/.netrc",
       description: "FTP/HTTP credentials in plain text",
       score: 15
     },
     {
-      full: import_path22.default.join(home, ".npmrc"),
+      full: import_path23.default.join(home, ".npmrc"),
       label: "~/.npmrc",
       description: "npm auth token \u2014 can publish packages as you",
       score: 10
     },
     {
-      full: import_path22.default.join(home, ".node9", "credentials.json"),
+      full: import_path23.default.join(home, ".node9", "credentials.json"),
       label: "~/.node9/credentials.json",
       description: "Node9 cloud API key",
       score: 10
     },
     {
-      full: import_path22.default.join(cwd, ".env"),
+      full: import_path23.default.join(cwd, ".env"),
       label: ".env  (current folder)",
       description: "App secrets \u2014 database passwords, API keys",
       score: 20
     },
     {
-      full: import_path22.default.join(cwd, ".env.local"),
+      full: import_path23.default.join(cwd, ".env.local"),
       label: ".env.local  (current folder)",
       description: "Local overrides \u2014 often contains real credentials",
       score: 15
     },
     {
-      full: import_path22.default.join(cwd, ".env.production"),
+      full: import_path23.default.join(cwd, ".env.production"),
       label: ".env.production  (current folder)",
       description: "Production secrets",
       score: 20
@@ -12278,7 +12404,7 @@ function buildSensitivePaths(home, cwd) {
 }
 function isReadable(filePath) {
   try {
-    import_fs20.default.accessSync(filePath, import_fs20.default.constants.R_OK);
+    import_fs21.default.accessSync(filePath, import_fs21.default.constants.R_OK);
     return true;
   } catch {
     return false;
@@ -12291,13 +12417,13 @@ function scoreLabel(score) {
   return import_chalk3.default.red.bold(`${score}/100  Critical`);
 }
 function runBlast() {
-  const home = import_os19.default.homedir();
+  const home = import_os20.default.homedir();
   const cwd = process.cwd();
   const paths = buildSensitivePaths(home, cwd);
   let scoreDeduction = 0;
   const reachable = [];
   for (const p of paths) {
-    if (import_fs20.default.existsSync(p.full) && isReadable(p.full)) {
+    if (import_fs21.default.existsSync(p.full) && isReadable(p.full)) {
       reachable.push(p);
       scoreDeduction += p.score;
     }
@@ -12315,7 +12441,7 @@ function runBlast() {
 }
 function registerBlastCommand(program2) {
   program2.command("blast").description("Map what an AI agent can currently reach on this machine").action(() => {
-    const home = import_os19.default.homedir();
+    const home = import_os20.default.homedir();
     const cwd = process.cwd();
     const { reachable, envFindings, score } = runBlast();
     console.log("");
@@ -12362,14 +12488,14 @@ function registerBlastCommand(program2) {
     console.log("");
   });
 }
-var import_chalk3, import_fs20, import_path22, import_os19;
+var import_chalk3, import_fs21, import_path23, import_os20;
 var init_blast = __esm({
   "src/cli/commands/blast.ts"() {
     "use strict";
     import_chalk3 = __toESM(require("chalk"));
-    import_fs20 = __toESM(require("fs"));
-    import_path22 = __toESM(require("path"));
-    import_os19 = __toESM(require("os"));
+    import_fs21 = __toESM(require("fs"));
+    import_path23 = __toESM(require("path"));
+    import_os20 = __toESM(require("os"));
     init_dlp();
   }
 });
@@ -12514,13 +12640,13 @@ function listSessionFiles(dir, maxDepth = 6) {
     if (depth > maxDepth) return;
     let entries;
     try {
-      entries = fs22.readdirSync(d, { withFileTypes: true });
+      entries = fs23.readdirSync(d, { withFileTypes: true });
     } catch {
       return;
     }
     for (const e of entries) {
-      const childRel = rel ? path24.join(rel, e.name) : e.name;
-      if (e.isDirectory()) walk(path24.join(d, e.name), childRel, depth + 1);
+      const childRel = rel ? path25.join(rel, e.name) : e.name;
+      if (e.isDirectory()) walk(path25.join(d, e.name), childRel, depth + 1);
       else if (e.name.endsWith(".jsonl")) out.push(childRel);
     }
   };
@@ -12528,26 +12654,26 @@ function listSessionFiles(dir, maxDepth = 6) {
   return out;
 }
 function sessionIdOf(relPath) {
-  return path24.basename(relPath).replace(/\.jsonl$/, "");
+  return path25.basename(relPath).replace(/\.jsonl$/, "");
 }
-var fs22, path24;
+var fs23, path25;
 var init_session_files = __esm({
   "src/session-files.ts"() {
     "use strict";
-    fs22 = __toESM(require("fs"));
-    path24 = __toESM(require("path"));
+    fs23 = __toESM(require("fs"));
+    path25 = __toESM(require("path"));
   }
 });
 
 // src/cli/render/scan-history.ts
 function defaultHistoryPath() {
-  return import_path23.default.join(import_os20.default.homedir(), ".node9", "scan-history.json");
+  return import_path24.default.join(import_os21.default.homedir(), ".node9", "scan-history.json");
 }
 function readPreviousScan(opts = {}) {
   const filePath = opts.path ?? defaultHistoryPath();
   try {
-    if (!import_fs21.default.existsSync(filePath)) return null;
-    const raw = import_fs21.default.readFileSync(filePath, "utf8");
+    if (!import_fs22.default.existsSync(filePath)) return null;
+    const raw = import_fs22.default.readFileSync(filePath, "utf8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed) || parsed.length === 0) return null;
     const last = parsed[parsed.length - 1];
@@ -12561,11 +12687,11 @@ function appendScanHistory(record, opts = {}) {
   const filePath = opts.path ?? defaultHistoryPath();
   const cap = opts.cap ?? SCAN_HISTORY_CAP;
   try {
-    import_fs21.default.mkdirSync(import_path23.default.dirname(filePath), { recursive: true });
+    import_fs22.default.mkdirSync(import_path24.default.dirname(filePath), { recursive: true });
     let history = [];
-    if (import_fs21.default.existsSync(filePath)) {
+    if (import_fs22.default.existsSync(filePath)) {
       try {
-        const parsed = JSON.parse(import_fs21.default.readFileSync(filePath, "utf8"));
+        const parsed = JSON.parse(import_fs22.default.readFileSync(filePath, "utf8"));
         if (Array.isArray(parsed)) {
           history = parsed.filter(isValidRecord);
         }
@@ -12576,7 +12702,7 @@ function appendScanHistory(record, opts = {}) {
     if (history.length > cap) {
       history = history.slice(history.length - cap);
     }
-    import_fs21.default.writeFileSync(filePath, JSON.stringify(history, null, 2));
+    import_fs22.default.writeFileSync(filePath, JSON.stringify(history, null, 2));
   } catch (err2) {
     process.stderr.write(
       `[node9] Warning: could not write scan-history.json: ${err2.message}
@@ -12598,140 +12724,14 @@ function isValidRecord(x) {
   const r = x;
   return typeof r.timestamp === "string" && typeof r.score === "number" && typeof r.blocked === "number" && typeof r.review === "number" && typeof r.leaks === "number" && typeof r.loops === "number" && typeof r.totalCalls === "number";
 }
-var import_fs21, import_path23, import_os20, SCAN_HISTORY_CAP;
+var import_fs22, import_path24, import_os21, SCAN_HISTORY_CAP;
 var init_scan_history = __esm({
   "src/cli/render/scan-history.ts"() {
-    "use strict";
-    import_fs21 = __toESM(require("fs"));
-    import_path23 = __toESM(require("path"));
-    import_os20 = __toESM(require("os"));
-    SCAN_HISTORY_CAP = 30;
-  }
-});
-
-// src/cost-copilot.ts
-function copilotSessionsDir() {
-  return import_path24.default.join(import_os21.default.homedir(), ".copilot", "session-state");
-}
-function safeReaddir3(dir) {
-  try {
-    return import_fs22.default.readdirSync(dir);
-  } catch {
-    return [];
-  }
-}
-function priceTokens(model, u) {
-  const tuple = pricingFor(model);
-  if (!tuple || !u) return 0;
-  const [pin, pout, pcw, pcr] = tuple;
-  return (u.inputTokens ?? 0) * pin + (u.outputTokens ?? 0) * pout + (u.cacheWriteTokens ?? 0) * pcw + (u.cacheReadTokens ?? 0) * pcr;
-}
-function parseCopilotSession(lines) {
-  let sessionId = "";
-  let cwd = "";
-  let startDate = "";
-  let shutdownDate = "";
-  let modelMetrics = null;
-  for (const raw of lines) {
-    if (!raw.trim()) continue;
-    let o;
-    try {
-      o = JSON.parse(raw);
-    } catch {
-      continue;
-    }
-    const d = o.data ?? {};
-    if (o.type === "session.start") {
-      if (typeof d["sessionId"] === "string") sessionId = d["sessionId"];
-      if (typeof d["startTime"] === "string") startDate = d["startTime"];
-      const ctx = d["context"] ?? {};
-      if (typeof ctx["cwd"] === "string") cwd = ctx["cwd"];
-    } else if (o.type === "session.shutdown") {
-      if (d["modelMetrics"] && typeof d["modelMetrics"] === "object") {
-        modelMetrics = d["modelMetrics"];
-      }
-      if (typeof o.timestamp === "string") shutdownDate = o.timestamp;
-    }
-  }
-  if (!modelMetrics) return [];
-  const date = (startDate || shutdownDate).slice(0, 10);
-  if (!date) return [];
-  const rows = [];
-  for (const [rawModel, m] of Object.entries(modelMetrics)) {
-    const u = m.usage ?? {};
-    const inputTokens = u.inputTokens ?? 0;
-    const outputTokens = u.outputTokens ?? 0;
-    const cacheReadTokens = u.cacheReadTokens ?? 0;
-    const cacheWriteTokens = u.cacheWriteTokens ?? 0;
-    if (inputTokens === 0 && outputTokens === 0 && cacheReadTokens === 0 && cacheWriteTokens === 0) {
-      continue;
-    }
-    const model = normalizeModel(rawModel);
-    const costUSD = typeof m.requests?.cost === "number" && m.requests.cost > 0 ? m.requests.cost : priceTokens(rawModel, u);
-    rows.push({
-      date,
-      model,
-      workingDir: cwd,
-      runId: sessionId,
-      costUSD,
-      inputTokens,
-      outputTokens,
-      cacheReadTokens,
-      cacheWriteTokens
-    });
-  }
-  return rows;
-}
-var import_fs22, import_os21, import_path24, copilotSource;
-var init_cost_copilot = __esm({
-  "src/cost-copilot.ts"() {
     "use strict";
     import_fs22 = __toESM(require("fs"));
-    import_os21 = __toESM(require("os"));
     import_path24 = __toESM(require("path"));
-    init_litellm();
-    copilotSource = {
-      id: "copilot",
-      available() {
-        try {
-          return import_fs22.default.existsSync(copilotSessionsDir());
-        } catch {
-          return false;
-        }
-      },
-      collect(sinceMs) {
-        const base = copilotSessionsDir();
-        const combined = /* @__PURE__ */ new Map();
-        for (const sid of safeReaddir3(base)) {
-          const file = import_path24.default.join(base, sid, "events.jsonl");
-          try {
-            if (sinceMs !== void 0 && import_fs22.default.statSync(file).mtimeMs < sinceMs) continue;
-          } catch {
-            continue;
-          }
-          let content;
-          try {
-            content = import_fs22.default.readFileSync(file, "utf8");
-          } catch {
-            continue;
-          }
-          for (const e of parseCopilotSession(content.split("\n"))) {
-            const key = `${e.date}::${e.model}::${e.workingDir ?? ""}::${e.runId ?? ""}`;
-            const prev = combined.get(key);
-            if (prev) {
-              prev.costUSD += e.costUSD;
-              prev.inputTokens += e.inputTokens;
-              prev.outputTokens += e.outputTokens;
-              prev.cacheReadTokens += e.cacheReadTokens;
-              prev.cacheWriteTokens += e.cacheWriteTokens;
-            } else {
-              combined.set(key, { ...e });
-            }
-          }
-        }
-        return [...combined.values()];
-      }
-    };
+    import_os21 = __toESM(require("os"));
+    SCAN_HISTORY_CAP = 30;
   }
 });
 
@@ -14776,6 +14776,10 @@ function scanCopilotHistory(startDate, onProgress, onLine) {
     let projLabel = sessionId.slice(0, 8);
     const sessionCalls = [];
     result.sessions++;
+    for (const row of parseCopilotSession(raw.split("\n"))) {
+      if (startDate && row.date && new Date(row.date) < startDate) continue;
+      result.totalCostUSD += row.costUSD;
+    }
     for (const line of raw.split("\n")) {
       if (!line.trim()) continue;
       onLine?.();
@@ -15152,11 +15156,14 @@ function scanCodexHistory(startDate, onProgress, onLine) {
         }
       }
     }
-    result.totalCostUSD += codexSessionCost(model, {
-      input: lastTotalInput,
-      cached: lastTotalCached,
-      output: lastTotalOutput
-    });
+    const withinWindow = !startDate || startTime !== "" && new Date(startTime) >= startDate;
+    if (withinWindow) {
+      result.totalCostUSD += codexSessionCost(model, {
+        input: lastTotalInput,
+        cached: lastTotalCached,
+        output: lastTotalOutput
+      });
+    }
     result.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "codex"));
   }
   return result;
@@ -16253,6 +16260,7 @@ var init_scan = __esm({
     init_litellm();
     init_cost_gemini();
     init_cost_codex();
+    init_cost_copilot();
     init_hook_payload();
     init_dist();
     init_scan_summary();

package/dist/cli.mjs

@@ -11884,6 +11884,132 @@ var init_cost_codex = __esm({
   }
 });
 
+// src/cost-copilot.ts
+import fs21 from "fs";
+import os20 from "os";
+import path23 from "path";
+function copilotSessionsDir() {
+  return path23.join(os20.homedir(), ".copilot", "session-state");
+}
+function safeReaddir3(dir) {
+  try {
+    return fs21.readdirSync(dir);
+  } catch {
+    return [];
+  }
+}
+function priceTokens(model, u) {
+  const tuple = pricingFor(model);
+  if (!tuple || !u) return 0;
+  const [pin, pout, pcw, pcr] = tuple;
+  return (u.inputTokens ?? 0) * pin + (u.outputTokens ?? 0) * pout + (u.cacheWriteTokens ?? 0) * pcw + (u.cacheReadTokens ?? 0) * pcr;
+}
+function parseCopilotSession(lines) {
+  let sessionId = "";
+  let cwd = "";
+  let startDate = "";
+  let shutdownDate = "";
+  let modelMetrics = null;
+  for (const raw of lines) {
+    if (!raw.trim()) continue;
+    let o;
+    try {
+      o = JSON.parse(raw);
+    } catch {
+      continue;
+    }
+    const d = o.data ?? {};
+    if (o.type === "session.start") {
+      if (typeof d["sessionId"] === "string") sessionId = d["sessionId"];
+      if (typeof d["startTime"] === "string") startDate = d["startTime"];
+      const ctx = d["context"] ?? {};
+      if (typeof ctx["cwd"] === "string") cwd = ctx["cwd"];
+    } else if (o.type === "session.shutdown") {
+      if (d["modelMetrics"] && typeof d["modelMetrics"] === "object") {
+        modelMetrics = d["modelMetrics"];
+      }
+      if (typeof o.timestamp === "string") shutdownDate = o.timestamp;
+    }
+  }
+  if (!modelMetrics) return [];
+  const date = (startDate || shutdownDate).slice(0, 10);
+  if (!date) return [];
+  const rows = [];
+  for (const [rawModel, m] of Object.entries(modelMetrics)) {
+    const u = m.usage ?? {};
+    const inputTokens = u.inputTokens ?? 0;
+    const outputTokens = u.outputTokens ?? 0;
+    const cacheReadTokens = u.cacheReadTokens ?? 0;
+    const cacheWriteTokens = u.cacheWriteTokens ?? 0;
+    if (inputTokens === 0 && outputTokens === 0 && cacheReadTokens === 0 && cacheWriteTokens === 0) {
+      continue;
+    }
+    const model = normalizeModel(rawModel);
+    const costUSD = typeof m.requests?.cost === "number" && m.requests.cost > 0 ? m.requests.cost : priceTokens(rawModel, u);
+    rows.push({
+      date,
+      model,
+      workingDir: cwd,
+      runId: sessionId,
+      costUSD,
+      inputTokens,
+      outputTokens,
+      cacheReadTokens,
+      cacheWriteTokens
+    });
+  }
+  return rows;
+}
+var copilotSource;
+var init_cost_copilot = __esm({
+  "src/cost-copilot.ts"() {
+    "use strict";
+    init_litellm();
+    copilotSource = {
+      id: "copilot",
+      available() {
+        try {
+          return fs21.existsSync(copilotSessionsDir());
+        } catch {
+          return false;
+        }
+      },
+      collect(sinceMs) {
+        const base = copilotSessionsDir();
+        const combined = /* @__PURE__ */ new Map();
+        for (const sid of safeReaddir3(base)) {
+          const file = path23.join(base, sid, "events.jsonl");
+          try {
+            if (sinceMs !== void 0 && fs21.statSync(file).mtimeMs < sinceMs) continue;
+          } catch {
+            continue;
+          }
+          let content;
+          try {
+            content = fs21.readFileSync(file, "utf8");
+          } catch {
+            continue;
+          }
+          for (const e of parseCopilotSession(content.split("\n"))) {
+            const key = `${e.date}::${e.model}::${e.workingDir ?? ""}::${e.runId ?? ""}`;
+            const prev = combined.get(key);
+            if (prev) {
+              prev.costUSD += e.costUSD;
+              prev.inputTokens += e.inputTokens;
+              prev.outputTokens += e.outputTokens;
+              prev.cacheReadTokens += e.cacheReadTokens;
+              prev.cacheWriteTokens += e.cacheWriteTokens;
+            } else {
+              combined.set(key, { ...e });
+            }
+          }
+        }
+        return [...combined.values()];
+      }
+    };
+  }
+});
+
 // src/utils/hook-payload.ts
 function extractToolName(payload, defaultValue = "") {
   return payload.tool_name ?? payload.name ?? payload.toolCall?.name ?? defaultValue;
@@ -12196,85 +12322,85 @@ var init_scan_summary = __esm({
 
 // src/cli/commands/blast.ts
 import chalk3 from "chalk";
-import fs21 from "fs";
-import path23 from "path";
-import os20 from "os";
+import fs22 from "fs";
+import path24 from "path";
+import os21 from "os";
 function buildSensitivePaths(home, cwd) {
   return [
     {
-      full: path23.join(home, ".ssh", "id_rsa"),
+      full: path24.join(home, ".ssh", "id_rsa"),
       label: "~/.ssh/id_rsa",
       description: "RSA private key \u2014 grants SSH access to your servers",
       score: 20
     },
     {
-      full: path23.join(home, ".ssh", "id_ed25519"),
+      full: path24.join(home, ".ssh", "id_ed25519"),
       label: "~/.ssh/id_ed25519",
       description: "Ed25519 private key \u2014 grants SSH access to your servers",
       score: 20
     },
     {
-      full: path23.join(home, ".ssh", "id_ecdsa"),
+      full: path24.join(home, ".ssh", "id_ecdsa"),
       label: "~/.ssh/id_ecdsa",
       description: "ECDSA private key \u2014 grants SSH access to your servers",
       score: 20
     },
     {
-      full: path23.join(home, ".aws", "credentials"),
+      full: path24.join(home, ".aws", "credentials"),
       label: "~/.aws/credentials",
       description: "AWS access keys \u2014 full cloud account access",
       score: 20
     },
     {
-      full: path23.join(home, ".aws", "config"),
+      full: path24.join(home, ".aws", "config"),
       label: "~/.aws/config",
       description: "AWS configuration \u2014 account and region settings",
       score: 5
     },
     {
-      full: path23.join(home, ".config", "gcloud", "credentials.db"),
+      full: path24.join(home, ".config", "gcloud", "credentials.db"),
       label: "~/.config/gcloud/credentials.db",
       description: "Google Cloud credentials",
       score: 15
     },
     {
-      full: path23.join(home, ".docker", "config.json"),
+      full: path24.join(home, ".docker", "config.json"),
       label: "~/.docker/config.json",
       description: "Docker registry auth tokens",
       score: 10
     },
     {
-      full: path23.join(home, ".netrc"),
+      full: path24.join(home, ".netrc"),
       label: "~/.netrc",
       description: "FTP/HTTP credentials in plain text",
       score: 15
     },
     {
-      full: path23.join(home, ".npmrc"),
+      full: path24.join(home, ".npmrc"),
       label: "~/.npmrc",
       description: "npm auth token \u2014 can publish packages as you",
       score: 10
     },
     {
-      full: path23.join(home, ".node9", "credentials.json"),
+      full: path24.join(home, ".node9", "credentials.json"),
       label: "~/.node9/credentials.json",
       description: "Node9 cloud API key",
       score: 10
     },
     {
-      full: path23.join(cwd, ".env"),
+      full: path24.join(cwd, ".env"),
       label: ".env  (current folder)",
       description: "App secrets \u2014 database passwords, API keys",
       score: 20
     },
     {
-      full: path23.join(cwd, ".env.local"),
+      full: path24.join(cwd, ".env.local"),
       label: ".env.local  (current folder)",
       description: "Local overrides \u2014 often contains real credentials",
       score: 15
     },
     {
-      full: path23.join(cwd, ".env.production"),
+      full: path24.join(cwd, ".env.production"),
       label: ".env.production  (current folder)",
       description: "Production secrets",
       score: 20
@@ -12283,7 +12409,7 @@ function buildSensitivePaths(home, cwd) {
 }
 function isReadable(filePath) {
   try {
-    fs21.accessSync(filePath, fs21.constants.R_OK);
+    fs22.accessSync(filePath, fs22.constants.R_OK);
     return true;
   } catch {
     return false;
@@ -12296,13 +12422,13 @@ function scoreLabel(score) {
   return chalk3.red.bold(`${score}/100  Critical`);
 }
 function runBlast() {
-  const home = os20.homedir();
+  const home = os21.homedir();
   const cwd = process.cwd();
   const paths = buildSensitivePaths(home, cwd);
   let scoreDeduction = 0;
   const reachable = [];
   for (const p of paths) {
-    if (fs21.existsSync(p.full) && isReadable(p.full)) {
+    if (fs22.existsSync(p.full) && isReadable(p.full)) {
       reachable.push(p);
       scoreDeduction += p.score;
     }
@@ -12320,7 +12446,7 @@ function runBlast() {
 }
 function registerBlastCommand(program2) {
   program2.command("blast").description("Map what an AI agent can currently reach on this machine").action(() => {
-    const home = os20.homedir();
+    const home = os21.homedir();
     const cwd = process.cwd();
     const { reachable, envFindings, score } = runBlast();
     console.log("");
@@ -12508,21 +12634,21 @@ var init_scan_json = __esm({
 });
 
 // src/session-files.ts
-import * as fs22 from "fs";
-import * as path24 from "path";
+import * as fs23 from "fs";
+import * as path25 from "path";
 function listSessionFiles(dir, maxDepth = 6) {
   const out = [];
   const walk = (d, rel, depth) => {
     if (depth > maxDepth) return;
     let entries;
     try {
-      entries = fs22.readdirSync(d, { withFileTypes: true });
+      entries = fs23.readdirSync(d, { withFileTypes: true });
     } catch {
       return;
     }
     for (const e of entries) {
-      const childRel = rel ? path24.join(rel, e.name) : e.name;
-      if (e.isDirectory()) walk(path24.join(d, e.name), childRel, depth + 1);
+      const childRel = rel ? path25.join(rel, e.name) : e.name;
+      if (e.isDirectory()) walk(path25.join(d, e.name), childRel, depth + 1);
       else if (e.name.endsWith(".jsonl")) out.push(childRel);
     }
   };
@@ -12530,7 +12656,7 @@ function listSessionFiles(dir, maxDepth = 6) {
   return out;
 }
 function sessionIdOf(relPath) {
-  return path24.basename(relPath).replace(/\.jsonl$/, "");
+  return path25.basename(relPath).replace(/\.jsonl$/, "");
 }
 var init_session_files = __esm({
   "src/session-files.ts"() {
@@ -12539,17 +12665,17 @@ var init_session_files = __esm({
 });
 
 // src/cli/render/scan-history.ts
-import fs23 from "fs";
-import path25 from "path";
-import os21 from "os";
+import fs24 from "fs";
+import path26 from "path";
+import os22 from "os";
 function defaultHistoryPath() {
-  return path25.join(os21.homedir(), ".node9", "scan-history.json");
+  return path26.join(os22.homedir(), ".node9", "scan-history.json");
 }
 function readPreviousScan(opts = {}) {
   const filePath = opts.path ?? defaultHistoryPath();
   try {
-    if (!fs23.existsSync(filePath)) return null;
-    const raw = fs23.readFileSync(filePath, "utf8");
+    if (!fs24.existsSync(filePath)) return null;
+    const raw = fs24.readFileSync(filePath, "utf8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed) || parsed.length === 0) return null;
     const last = parsed[parsed.length - 1];
@@ -12563,11 +12689,11 @@ function appendScanHistory(record, opts = {}) {
   const filePath = opts.path ?? defaultHistoryPath();
   const cap = opts.cap ?? SCAN_HISTORY_CAP;
   try {
-    fs23.mkdirSync(path25.dirname(filePath), { recursive: true });
+    fs24.mkdirSync(path26.dirname(filePath), { recursive: true });
     let history = [];
-    if (fs23.existsSync(filePath)) {
+    if (fs24.existsSync(filePath)) {
       try {
-        const parsed = JSON.parse(fs23.readFileSync(filePath, "utf8"));
+        const parsed = JSON.parse(fs24.readFileSync(filePath, "utf8"));
         if (Array.isArray(parsed)) {
           history = parsed.filter(isValidRecord);
         }
@@ -12578,7 +12704,7 @@ function appendScanHistory(record, opts = {}) {
     if (history.length > cap) {
       history = history.slice(history.length - cap);
     }
-    fs23.writeFileSync(filePath, JSON.stringify(history, null, 2));
+    fs24.writeFileSync(filePath, JSON.stringify(history, null, 2));
   } catch (err2) {
     process.stderr.write(
       `[node9] Warning: could not write scan-history.json: ${err2.message}
@@ -12608,132 +12734,6 @@ var init_scan_history = __esm({
   }
 });
 
-// src/cost-copilot.ts
-import fs24 from "fs";
-import os22 from "os";
-import path26 from "path";
-function copilotSessionsDir() {
-  return path26.join(os22.homedir(), ".copilot", "session-state");
-}
-function safeReaddir3(dir) {
-  try {
-    return fs24.readdirSync(dir);
-  } catch {
-    return [];
-  }
-}
-function priceTokens(model, u) {
-  const tuple = pricingFor(model);
-  if (!tuple || !u) return 0;
-  const [pin, pout, pcw, pcr] = tuple;
-  return (u.inputTokens ?? 0) * pin + (u.outputTokens ?? 0) * pout + (u.cacheWriteTokens ?? 0) * pcw + (u.cacheReadTokens ?? 0) * pcr;
-}
-function parseCopilotSession(lines) {
-  let sessionId = "";
-  let cwd = "";
-  let startDate = "";
-  let shutdownDate = "";
-  let modelMetrics = null;
-  for (const raw of lines) {
-    if (!raw.trim()) continue;
-    let o;
-    try {
-      o = JSON.parse(raw);
-    } catch {
-      continue;
-    }
-    const d = o.data ?? {};
-    if (o.type === "session.start") {
-      if (typeof d["sessionId"] === "string") sessionId = d["sessionId"];
-      if (typeof d["startTime"] === "string") startDate = d["startTime"];
-      const ctx = d["context"] ?? {};
-      if (typeof ctx["cwd"] === "string") cwd = ctx["cwd"];
-    } else if (o.type === "session.shutdown") {
-      if (d["modelMetrics"] && typeof d["modelMetrics"] === "object") {
-        modelMetrics = d["modelMetrics"];
-      }
-      if (typeof o.timestamp === "string") shutdownDate = o.timestamp;
-    }
-  }
-  if (!modelMetrics) return [];
-  const date = (startDate || shutdownDate).slice(0, 10);
-  if (!date) return [];
-  const rows = [];
-  for (const [rawModel, m] of Object.entries(modelMetrics)) {
-    const u = m.usage ?? {};
-    const inputTokens = u.inputTokens ?? 0;
-    const outputTokens = u.outputTokens ?? 0;
-    const cacheReadTokens = u.cacheReadTokens ?? 0;
-    const cacheWriteTokens = u.cacheWriteTokens ?? 0;
-    if (inputTokens === 0 && outputTokens === 0 && cacheReadTokens === 0 && cacheWriteTokens === 0) {
-      continue;
-    }
-    const model = normalizeModel(rawModel);
-    const costUSD = typeof m.requests?.cost === "number" && m.requests.cost > 0 ? m.requests.cost : priceTokens(rawModel, u);
-    rows.push({
-      date,
-      model,
-      workingDir: cwd,
-      runId: sessionId,
-      costUSD,
-      inputTokens,
-      outputTokens,
-      cacheReadTokens,
-      cacheWriteTokens
-    });
-  }
-  return rows;
-}
-var copilotSource;
-var init_cost_copilot = __esm({
-  "src/cost-copilot.ts"() {
-    "use strict";
-    init_litellm();
-    copilotSource = {
-      id: "copilot",
-      available() {
-        try {
-          return fs24.existsSync(copilotSessionsDir());
-        } catch {
-          return false;
-        }
-      },
-      collect(sinceMs) {
-        const base = copilotSessionsDir();
-        const combined = /* @__PURE__ */ new Map();
-        for (const sid of safeReaddir3(base)) {
-          const file = path26.join(base, sid, "events.jsonl");
-          try {
-            if (sinceMs !== void 0 && fs24.statSync(file).mtimeMs < sinceMs) continue;
-          } catch {
-            continue;
-          }
-          let content;
-          try {
-            content = fs24.readFileSync(file, "utf8");
-          } catch {
-            continue;
-          }
-          for (const e of parseCopilotSession(content.split("\n"))) {
-            const key = `${e.date}::${e.model}::${e.workingDir ?? ""}::${e.runId ?? ""}`;
-            const prev = combined.get(key);
-            if (prev) {
-              prev.costUSD += e.costUSD;
-              prev.inputTokens += e.inputTokens;
-              prev.outputTokens += e.outputTokens;
-              prev.cacheReadTokens += e.cacheReadTokens;
-              prev.cacheWriteTokens += e.cacheWriteTokens;
-            } else {
-              combined.set(key, { ...e });
-            }
-          }
-        }
-        return [...combined.values()];
-      }
-    };
-  }
-});
-
 // src/costSync.ts
 import fs25 from "fs";
 import path27 from "path";
@@ -14780,6 +14780,10 @@ function scanCopilotHistory(startDate, onProgress, onLine) {
     let projLabel = sessionId.slice(0, 8);
     const sessionCalls = [];
     result.sessions++;
+    for (const row of parseCopilotSession(raw.split("\n"))) {
+      if (startDate && row.date && new Date(row.date) < startDate) continue;
+      result.totalCostUSD += row.costUSD;
+    }
     for (const line of raw.split("\n")) {
       if (!line.trim()) continue;
       onLine?.();
@@ -15156,11 +15160,14 @@ function scanCodexHistory(startDate, onProgress, onLine) {
         }
       }
     }
-    result.totalCostUSD += codexSessionCost(model, {
-      input: lastTotalInput,
-      cached: lastTotalCached,
-      output: lastTotalOutput
-    });
+    const withinWindow = !startDate || startTime !== "" && new Date(startTime) >= startDate;
+    if (withinWindow) {
+      result.totalCostUSD += codexSessionCost(model, {
+        input: lastTotalInput,
+        cached: lastTotalCached,
+        output: lastTotalOutput
+      });
+    }
     result.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "codex"));
   }
   return result;
@@ -16253,6 +16260,7 @@ var init_scan = __esm({
     init_litellm();
     init_cost_gemini();
     init_cost_codex();
+    init_cost_copilot();
     init_hook_payload();
     init_dist();
     init_scan_summary();

package/dist/dashboard.mjs

@@ -5829,11 +5829,14 @@ function scanCodexHistory(startDate, onProgress, onLine) {
         }
       }
     }
-    result.totalCostUSD += codexSessionCost(model, {
-      input: lastTotalInput,
-      cached: lastTotalCached,
-      output: lastTotalOutput
-    });
+    const withinWindow = !startDate || startTime !== "" && new Date(startTime) >= startDate;
+    if (withinWindow) {
+      result.totalCostUSD += codexSessionCost(model, {
+        input: lastTotalInput,
+        cached: lastTotalCached,
+        output: lastTotalOutput
+      });
+    }
     result.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "codex"));
   }
   return result;
@@ -5850,6 +5853,7 @@ var init_scan = __esm({
     init_litellm();
     init_cost_gemini();
     init_cost_codex();
+    init_cost_copilot();
     init_hook_payload();
     init_dist();
     init_scan_summary();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.7.2",
+  "version": "2.7.4",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",