@revenium/claude-code-metering 0.1.0 → 0.1.2

package/dist/core/config/validator.d.ts

@@ -1,4 +1,4 @@
-import type { ReveniumConfig, ValidationResult } from '../../types/index.js';
+import type { ReveniumConfig, ValidationResult } from "../../types/index.js";
 /**
  * Validates that an API key has the correct format.
  * Valid format: hak_{tenant}_{random}
@@ -12,6 +12,10 @@ export declare function validateEmail(email: string): ValidationResult;
  * Validates a subscription tier.
  */
 export declare function validateSubscriptionTier(tier: string): ValidationResult;
+/**
+ * Validates an endpoint URL and ensures it uses HTTPS.
+ */
+export declare function validateEndpointUrl(endpoint: string): ValidationResult;
 /**
  * Validates a complete Revenium configuration.
  */

package/dist/core/config/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../src/core/config/validator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7E;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CA2B/D;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAiB7D;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAmBvE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,gBAAgB,CA4BhF"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../src/core/config/validator.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7E;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CA2B/D;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAiB7D;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAmBvE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAuBtE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,GAC9B,gBAAgB,CAqBlB"}

package/dist/core/config/validator.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateApiKey = validateApiKey;
 exports.validateEmail = validateEmail;
 exports.validateSubscriptionTier = validateSubscriptionTier;
+exports.validateEndpointUrl = validateEndpointUrl;
 exports.validateConfig = validateConfig;
 const constants_js_1 = require("../../utils/constants.js");
 const VALID_TIERS = Object.keys(constants_js_1.SUBSCRIPTION_TIER_CONFIG);
@@ -12,21 +13,21 @@ const VALID_TIERS = Object.keys(constants_js_1.SUBSCRIPTION_TIER_CONFIG);
  */
 function validateApiKey(apiKey) {
     const errors = [];
-    if (!apiKey || apiKey.trim() === '') {
-        errors.push('API key is required');
+    if (!apiKey || apiKey.trim() === "") {
+        errors.push("API key is required");
         return { valid: false, errors };
     }
     if (!apiKey.startsWith(constants_js_1.API_KEY_PREFIX)) {
         errors.push(`API key must start with "${constants_js_1.API_KEY_PREFIX}"`);
     }
     // Check for at least two underscores (hak_tenant_random)
-    const parts = apiKey.split('_');
+    const parts = apiKey.split("_");
     if (parts.length < 3) {
-        errors.push('API key format should be: hak_{tenant}_{key}');
+        errors.push("API key format should be: hak_{tenant}_{key}");
     }
     // Minimum length check
     if (apiKey.length < 12) {
-        errors.push('API key appears too short');
+        errors.push("API key appears too short");
     }
     return {
         valid: errors.length === 0,
@@ -38,13 +39,13 @@ function validateApiKey(apiKey) {
  */
 function validateEmail(email) {
     const errors = [];
-    if (!email || email.trim() === '') {
+    if (!email || email.trim() === "") {
         // Email is optional
         return { valid: true, errors: [] };
     }
     const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
     if (!emailRegex.test(email)) {
-        errors.push('Invalid email format');
+        errors.push("Invalid email format");
     }
     return {
         valid: errors.length === 0,
@@ -56,13 +57,36 @@ function validateEmail(email) {
  */
 function validateSubscriptionTier(tier) {
     const errors = [];
-    if (!tier || tier.trim() === '') {
+    if (!tier || tier.trim() === "") {
         // Tier is optional
         return { valid: true, errors: [] };
     }
     const lowerTier = tier.toLowerCase();
     if (!VALID_TIERS.includes(lowerTier)) {
-        errors.push(`Invalid subscription tier. Valid options: ${VALID_TIERS.join(', ')}`);
+        errors.push(`Invalid subscription tier. Valid options: ${VALID_TIERS.join(", ")}`);
+    }
+    return {
+        valid: errors.length === 0,
+        errors,
+    };
+}
+/**
+ * Validates an endpoint URL and ensures it uses HTTPS.
+ */
+function validateEndpointUrl(endpoint) {
+    const errors = [];
+    if (!endpoint || endpoint.trim() === "") {
+        errors.push("Endpoint URL is required");
+        return { valid: false, errors };
+    }
+    try {
+        const url = new URL(endpoint);
+        if (url.protocol !== "https:") {
+            errors.push("Insecure endpoint: HTTPS is required. Only HTTPS endpoints are allowed.");
+        }
+    }
+    catch {
+        errors.push("Invalid endpoint URL format");
     }
     return {
         valid: errors.length === 0,
@@ -74,25 +98,16 @@ function validateSubscriptionTier(tier) {
  */
 function validateConfig(config) {
     const allErrors = [];
-    const apiKeyResult = validateApiKey(config.apiKey || '');
+    const apiKeyResult = validateApiKey(config.apiKey || "");
     allErrors.push(...apiKeyResult.errors);
-    const emailResult = validateEmail(config.email || '');
+    const emailResult = validateEmail(config.email || "");
     allErrors.push(...emailResult.errors);
     if (config.subscriptionTier) {
         const tierResult = validateSubscriptionTier(config.subscriptionTier);
         allErrors.push(...tierResult.errors);
     }
-    if (!config.endpoint || config.endpoint.trim() === '') {
-        allErrors.push('Endpoint URL is required');
-    }
-    else {
-        try {
-            new URL(config.endpoint);
-        }
-        catch {
-            allErrors.push('Invalid endpoint URL format');
-        }
-    }
+    const endpointResult = validateEndpointUrl(config.endpoint || "");
+    allErrors.push(...endpointResult.errors);
     return {
         valid: allErrors.length === 0,
         errors: allErrors,

package/dist/core/config/validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/core/config/validator.ts"],"names":[],"mappings":";;AASA,wCA2BC;AAKD,sCAiBC;AAKD,4DAmBC;AAKD,wCA4BC;AAnHD,2DAAoF;AAEpF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,uCAAwB,CAAC,CAAC;AAG1D;;;GAGG;AACH,SAAgB,cAAc,CAAC,MAAc;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,6BAAc,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,4BAA4B,6BAAc,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,yDAAyD;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC9D,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,KAAa;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClC,oBAAoB;QACpB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,UAAU,GAAG,4BAA4B,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,wBAAwB,CAAC,IAAY;IACnD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChC,mBAAmB;QACnB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CACT,6CAA6C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,MAA+B;IAC5D,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACzD,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACtD,SAAS,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAEtC,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrE,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtD,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC;QAC7B,MAAM,EAAE,SAAS;KAClB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/core/config/validator.ts"],"names":[],"mappings":";;AAYA,wCA2BC;AAKD,sCAiBC;AAKD,4DAmBC;AAKD,kDAuBC;AAKD,wCAuBC;AA7ID,2DAGkC;AAElC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,uCAAwB,CAAC,CAAC;AAG1D;;;GAGG;AACH,SAAgB,cAAc,CAAC,MAAc;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,6BAAc,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,4BAA4B,6BAAc,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,yDAAyD;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC9D,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,KAAa;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClC,oBAAoB;QACpB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,UAAU,GAAG,4BAA4B,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,wBAAwB,CAAC,IAAY;IACnD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChC,mBAAmB;QACnB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CACT,6CAA6C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,QAAgB;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CACT,yEAAyE,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAC5B,MAA+B;IAE/B,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACzD,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACtD,SAAS,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAEtC,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrE,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAClE,SAAS,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEzC,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC;QAC7B,MAAM,EAAE,SAAS;KAClB,CAAC;AACJ,CAAC"}

package/dist/core/config/writer.d.ts

@@ -1,4 +1,4 @@
-import type { ReveniumConfig } from '../../types/index.js';
+import type { ReveniumConfig } from "../../types/index.js";
 /**
  * Writes the Revenium configuration to ~/.claude/revenium.env.
  * Creates the directory if it doesn't exist and sets file permissions to 600.

package/dist/core/config/writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"writer.d.ts","sourceRoot":"","sources":["../../../src/core/config/writer.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA4H3D;;;GAGG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAezE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}
+{"version":3,"file":"writer.d.ts","sourceRoot":"","sources":["../../../src/core/config/writer.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA8K3D;;;GAGG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAezE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/dist/core/config/writer.js

@@ -7,6 +7,13 @@ const node_path_1 = require("node:path");
 const promises_1 = require("node:fs/promises");
 const constants_js_1 = require("../../utils/constants.js");
 const loader_js_1 = require("./loader.js");
+/**
+ * Escapes a value for use in shell export statements.
+ * Wraps the value in double quotes and escapes special characters.
+ */
+function escapeShellValue(value) {
+    return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\$/g, "\\$").replace(/`/g, "\\`")}"`;
+}
 /**
  * Escapes a value for use in OTEL_RESOURCE_ATTRIBUTES.
  * OTEL_RESOURCE_ATTRIBUTES uses comma as delimiter and equals as key-value separator.
@@ -15,10 +22,10 @@ const loader_js_1 = require("./loader.js");
  */
 function escapeResourceAttributeValue(value) {
     return value
-        .replace(/%/g, '%25') // Escape % first to avoid double-encoding
-        .replace(/,/g, '%2C')
-        .replace(/=/g, '%3D')
-        .replace(/"/g, '%22');
+        .replace(/%/g, "%25") // Escape % first to avoid double-encoding
+        .replace(/,/g, "%2C")
+        .replace(/=/g, "%3D")
+        .replace(/"/g, "%22");
 }
 /**
  * Gets the path to the Claude config directory.
@@ -32,93 +39,94 @@ function getClaudeConfigDir() {
 function generateEnvContent(config) {
     const fullEndpoint = (0, loader_js_1.getFullOtlpEndpoint)(config.endpoint);
     const lines = [
-        '# Revenium Claude Code Metering Configuration',
-        '# Generated by @revenium/claude-code-metering',
-        '#',
-        '# To load these variables, add to your shell profile:',
-        '#   source ~/.claude/revenium.env',
-        '',
-        '# Enable Claude Code telemetry export',
+        "# Revenium Claude Code Metering Configuration",
+        "# Generated by @revenium/claude-code-metering",
+        "#",
+        "# To load these variables, add to your shell profile:",
+        "#   source ~/.claude/revenium.env",
+        "",
+        "# Enable Claude Code telemetry export",
         `export ${constants_js_1.ENV_VARS.TELEMETRY_ENABLED}=1`,
-        '',
-        '# OTLP endpoint for Revenium metering',
-        `export ${constants_js_1.ENV_VARS.OTLP_ENDPOINT}=${fullEndpoint}`,
-        '',
-        '# Authentication header with API key',
-        `export ${constants_js_1.ENV_VARS.OTLP_HEADERS}="x-api-key=${config.apiKey}"`,
-        '',
-        '# OTLP protocol (required for Claude Code)',
+        "",
+        "# OTLP endpoint for Revenium metering",
+        `export ${constants_js_1.ENV_VARS.OTLP_ENDPOINT}=${escapeShellValue(fullEndpoint)}`,
+        "",
+        "# Authentication header with API key",
+        `export ${constants_js_1.ENV_VARS.OTLP_HEADERS}=${escapeShellValue(`x-api-key=${config.apiKey}`)}`,
+        "",
+        "# OTLP protocol (required for Claude Code)",
         `export ${constants_js_1.ENV_VARS.OTLP_PROTOCOL}=http/json`,
-        '',
-        '# Enable OTLP metrics exporter (required to send telemetry)',
-        'export OTEL_METRICS_EXPORTER=otlp',
+        "",
+        "# Enable OTLP logs exporter (required to send telemetry)",
+        "export OTEL_LOGS_EXPORTER=otlp",
     ];
     // Add optional fields
     if (config.email) {
-        lines.push('');
-        lines.push('# Subscriber email for attribution');
-        lines.push(`export ${constants_js_1.ENV_VARS.SUBSCRIBER_EMAIL}=${config.email}`);
+        lines.push("");
+        lines.push("# Subscriber email for attribution");
+        lines.push(`export ${constants_js_1.ENV_VARS.SUBSCRIBER_EMAIL}=${escapeShellValue(config.email)}`);
     }
     if (config.subscriptionTier) {
         const tier = config.subscriptionTier;
         const costMultiplier = config.costMultiplierOverride ?? (0, constants_js_1.getCostMultiplier)(tier);
         const discountPercent = Math.round((1 - costMultiplier) * 100);
-        lines.push('');
-        lines.push('# Claude Code subscription tier');
-        lines.push(`export ${constants_js_1.ENV_VARS.SUBSCRIPTION}=${config.subscriptionTier}`);
-        lines.push('');
-        lines.push('# Cost multiplier for subscription tier');
-        lines.push('# This adjusts Claude Code costs based on your subscription discount');
+        lines.push("");
+        lines.push("# Claude Code subscription tier");
+        lines.push(`export ${constants_js_1.ENV_VARS.SUBSCRIPTION}=${escapeShellValue(config.subscriptionTier)}`);
+        lines.push("");
+        lines.push("# Cost multiplier for subscription tier");
+        lines.push("# This adjusts Claude Code costs based on your subscription discount");
         lines.push(`# ${tier}: ${discountPercent}% discount vs API rates`);
         if (config.costMultiplierOverride !== undefined) {
-            lines.push('# (custom override applied)');
+            lines.push("# (custom override applied)");
             lines.push(`export ${constants_js_1.ENV_VARS.COST_MULTIPLIER}=${costMultiplier}`);
         }
-        // Build OTEL_RESOURCE_ATTRIBUTES with cost_multiplier and optional fields
-        // Special characters (,=") in values are URL-encoded to ensure safe parsing
+        // Build OTEL_RESOURCE_ATTRIBUTES with cost_multiplier and optional organization.name/product.name.
+        // Special characters (,=") in values are URL-encoded to ensure safe parsing.
+        // Note: The backend ONLY reads organization.name and product.name from resourceAttributes,
+        // ignoring any auto-generated values in log record attributes from Claude Code.
         const resourceAttrs = [`cost_multiplier=${costMultiplier}`];
-        if (config.organizationId) {
-            resourceAttrs.push(`organization.id=${escapeResourceAttributeValue(config.organizationId)}`);
+        // Support both new (organizationName) and old (organizationId) field names with fallback
+        const organizationValue = config.organizationName || config.organizationId;
+        if (organizationValue) {
+            resourceAttrs.push(`organization.name=${escapeResourceAttributeValue(organizationValue)}`);
         }
-        if (config.productId) {
-            resourceAttrs.push(`product.id=${escapeResourceAttributeValue(config.productId)}`);
+        // Support both new (productName) and old (productId) field names with fallback
+        const productValue = config.productName || config.productId;
+        if (productValue) {
+            resourceAttrs.push(`product.name=${escapeResourceAttributeValue(productValue)}`);
         }
-        lines.push(`export OTEL_RESOURCE_ATTRIBUTES="${resourceAttrs.join(',')}"`);
-    }
-    // Add advanced configuration section (commented out by default)
-    lines.push('');
-    lines.push('# ─────────────────────────────────────────────────────────────────────────────');
-    lines.push('# Advanced Configuration (Optional)');
-    lines.push('# ─────────────────────────────────────────────────────────────────────────────');
-    lines.push('#');
-    lines.push('# IMPORTANT: If you enable organization/product attribution below, you must also');
-    lines.push('# update OTEL_RESOURCE_ATTRIBUTES above to include them. For example:');
-    lines.push('#   export OTEL_RESOURCE_ATTRIBUTES="cost_multiplier=0.08,organization.id=my-org,product.id=my-product"');
-    lines.push('# Otherwise, the telemetry sent to Revenium will not include the attribution data.');
-    lines.push('# Run `npx @revenium/claude-code-metering setup` again to regenerate this file with');
-    lines.push('# the correct OTEL_RESOURCE_ATTRIBUTES if you want automatic configuration.');
-    lines.push('#');
-    lines.push('# Organization ID: Attribute Claude Code costs to a specific customer or company.');
-    lines.push('# Use this when you want to track AI development costs by client/organization.');
-    lines.push('# Example: Your consulting firm tracks costs per client project.');
-    if (config.organizationId) {
-        lines.push(`export ${constants_js_1.ENV_VARS.ORGANIZATION_ID}=${config.organizationId}`);
-    }
-    else {
-        lines.push(`# export ${constants_js_1.ENV_VARS.ORGANIZATION_ID}=your-organization-id`);
-    }
-    lines.push('#');
-    lines.push('# Product ID: Attribute Claude Code costs to a specific product or project.');
-    lines.push('# Use this when you want to track AI development costs by internal product.');
-    lines.push('# Example: Separate AI costs for "mobile-app" vs "backend-api" development.');
-    if (config.productId) {
-        lines.push(`export ${constants_js_1.ENV_VARS.PRODUCT_ID}=${config.productId}`);
-    }
-    else {
-        lines.push(`# export ${constants_js_1.ENV_VARS.PRODUCT_ID}=your-product-id`);
+        lines.push(`export OTEL_RESOURCE_ATTRIBUTES="${resourceAttrs.join(",")}"`);
     }
-    lines.push('');
-    return lines.join('\n');
+    // Add advanced configuration section
+    lines.push("");
+    lines.push("# ─────────────────────────────────────────────────────────────────────────────");
+    lines.push("# Organization & Product Attribution (Optional)");
+    lines.push("# ─────────────────────────────────────────────────────────────────────────────");
+    lines.push("#");
+    lines.push("# To attribute Claude Code costs to a specific organization or product, you must");
+    lines.push("# add them to OTEL_RESOURCE_ATTRIBUTES above. The backend ONLY reads these values");
+    lines.push("# from OTEL_RESOURCE_ATTRIBUTES - standalone environment variables are NOT sent.");
+    lines.push("#");
+    lines.push("# HOW TO CONFIGURE:");
+    lines.push("# Edit the OTEL_RESOURCE_ATTRIBUTES line above to include organization.name and/or product.name:");
+    lines.push("#");
+    // Get current cost multiplier for the example
+    const exampleMultiplier = config.subscriptionTier && config.costMultiplierOverride === undefined
+        ? (0, constants_js_1.getCostMultiplier)(config.subscriptionTier)
+        : (config.costMultiplierOverride ?? "0.08");
+    lines.push(`#   OTEL_RESOURCE_ATTRIBUTES="cost_multiplier=${exampleMultiplier},organization.name=my-org,product.name=my-product"`);
+    lines.push("#");
+    lines.push("# ATTRIBUTE DESCRIPTIONS:");
+    lines.push("#   organization.name - Attribute costs to a customer/company (e.g., client name, team)");
+    lines.push("#   product.name      - Attribute costs to a product/project (e.g., mobile-app, backend-api)");
+    lines.push("#");
+    lines.push("# After editing, restart your terminal or run: source ~/.claude/revenium.env");
+    lines.push("#");
+    lines.push("# Alternatively, re-run setup with --organization and --product flags:");
+    lines.push("#   npx @revenium/claude-code-metering setup --organization my-org --product my-product");
+    lines.push("");
+    return lines.join("\n");
 }
 /**
  * Writes the Revenium configuration to ~/.claude/revenium.env.
@@ -131,7 +139,7 @@ async function writeConfig(config) {
     await (0, promises_1.mkdir)(configDir, { recursive: true });
     // Generate and write the content
     const content = generateEnvContent(config);
-    await (0, promises_1.writeFile)(configPath, content, { encoding: 'utf-8' });
+    await (0, promises_1.writeFile)(configPath, content, { encoding: "utf-8" });
     // Set restrictive permissions (owner read/write only)
     await (0, promises_1.chmod)(configPath, constants_js_1.CONFIG_FILE_MODE);
     return configPath;

package/dist/core/config/writer.js.map

@@ -1 +1 @@
-{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../../src/core/config/writer.ts"],"names":[],"mappings":";;AA2IA,kCAeC;AAKD,8CAEC;AAjKD,qCAAkC;AAClC,yCAA0C;AAC1C,+CAA2D;AAC3D,2DAOkC;AAElC,2CAAkD;AAElD;;;;;GAKG;AACH,SAAS,4BAA4B,CAAC,KAAa;IACjD,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,0CAA0C;SAC/D,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB;IACzB,OAAO,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,gCAAiB,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,MAAsB;IAChD,MAAM,YAAY,GAAG,IAAA,+BAAmB,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAa;QACtB,+CAA+C;QAC/C,+CAA+C;QAC/C,GAAG;QACH,uDAAuD;QACvD,mCAAmC;QACnC,EAAE;QACF,uCAAuC;QACvC,UAAU,uBAAQ,CAAC,iBAAiB,IAAI;QACxC,EAAE;QACF,uCAAuC;QACvC,UAAU,uBAAQ,CAAC,aAAa,IAAI,YAAY,EAAE;QAClD,EAAE;QACF,sCAAsC;QACtC,UAAU,uBAAQ,CAAC,YAAY,eAAe,MAAM,CAAC,MAAM,GAAG;QAC9D,EAAE;QACF,4CAA4C;QAC5C,UAAU,uBAAQ,CAAC,aAAa,YAAY;QAC5C,EAAE;QACF,6DAA6D;QAC7D,mCAAmC;KACpC,CAAC;IAEF,sBAAsB;IACtB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,UAAU,uBAAQ,CAAC,gBAAgB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAoC,CAAC;QACzD,MAAM,cAAc,GAAG,MAAM,CAAC,sBAAsB,IAAI,IAAA,gCAAiB,EAAC,IAAI,CAAC,CAAC;QAChF,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,GAAG,GAAG,CAAC,CAAC;QAE/D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,UAAU,uBAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAEzE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACnF,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,eAAe,yBAAyB,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,UAAU,uBAAQ,CAAC,eAAe,IAAI,cAAc,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,0EAA0E;QAC1E,4EAA4E;QAC5E,MAAM,aAAa,GAAa,CAAC,mBAAmB,cAAc,EAAE,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,aAAa,CAAC,IAAI,CAAC,mBAAmB,4BAA4B,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,aAAa,CAAC,IAAI,CAAC,cAAc,4BAA4B,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,oCAAoC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IAC9F,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IAC9F,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;IAC/F,KAAK,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CAAC,yGAAyG,CAAC,CAAC;IACtH,KAAK,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;IACjG,KAAK,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IAClG,KAAK,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAC1F,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;IAChG,KAAK,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;IAC7F,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,UAAU,uBAAQ,CAAC,eAAe,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,YAAY,uBAAQ,CAAC,eAAe,uBAAuB,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAC1F,KAAK,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAC1F,KAAK,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,UAAU,uBAAQ,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,YAAY,uBAAQ,CAAC,UAAU,kBAAkB,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,WAAW,CAAC,MAAsB;IACtD,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,gCAAiB,CAAC,CAAC;IAEtD,8BAA8B;IAC9B,MAAM,IAAA,gBAAK,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,iCAAiC;IACjC,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,IAAA,oBAAS,EAAC,UAAU,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAE5D,sDAAsD;IACtD,MAAM,IAAA,gBAAK,EAAC,UAAU,EAAE,+BAAgB,CAAC,CAAC;IAE1C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB;IAC/B,OAAO,IAAA,gBAAI,EAAC,kBAAkB,EAAE,EAAE,gCAAiB,CAAC,CAAC;AACvD,CAAC"}
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../../src/core/config/writer.ts"],"names":[],"mappings":";;AA6LA,kCAeC;AAKD,8CAEC;AAnND,qCAAkC;AAClC,yCAAiC;AACjC,+CAA2D;AAC3D,2DAOkC;AAElC,2CAAkD;AAElD;;;GAGG;AACH,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAC7G,CAAC;AAED;;;;;GAKG;AACH,SAAS,4BAA4B,CAAC,KAAa;IACjD,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,0CAA0C;SAC/D,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB;IACzB,OAAO,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,gCAAiB,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,MAAsB;IAChD,MAAM,YAAY,GAAG,IAAA,+BAAmB,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAa;QACtB,+CAA+C;QAC/C,+CAA+C;QAC/C,GAAG;QACH,uDAAuD;QACvD,mCAAmC;QACnC,EAAE;QACF,uCAAuC;QACvC,UAAU,uBAAQ,CAAC,iBAAiB,IAAI;QACxC,EAAE;QACF,uCAAuC;QACvC,UAAU,uBAAQ,CAAC,aAAa,IAAI,gBAAgB,CAAC,YAAY,CAAC,EAAE;QACpE,EAAE;QACF,sCAAsC;QACtC,UAAU,uBAAQ,CAAC,YAAY,IAAI,gBAAgB,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QACnF,EAAE;QACF,4CAA4C;QAC5C,UAAU,uBAAQ,CAAC,aAAa,YAAY;QAC5C,EAAE;QACF,0DAA0D;QAC1D,gCAAgC;KACjC,CAAC;IAEF,sBAAsB;IACtB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CACR,UAAU,uBAAQ,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxE,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAoC,CAAC;QACzD,MAAM,cAAc,GAClB,MAAM,CAAC,sBAAsB,IAAI,IAAA,gCAAiB,EAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,GAAG,GAAG,CAAC,CAAC;QAE/D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC9C,KAAK,CAAC,IAAI,CACR,UAAU,uBAAQ,CAAC,YAAY,IAAI,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAC/E,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CACR,sEAAsE,CACvE,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,eAAe,yBAAyB,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,UAAU,uBAAQ,CAAC,eAAe,IAAI,cAAc,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,mGAAmG;QACnG,6EAA6E;QAC7E,2FAA2F;QAC3F,gFAAgF;QAChF,MAAM,aAAa,GAAa,CAAC,mBAAmB,cAAc,EAAE,CAAC,CAAC;QAEtE,yFAAyF;QACzF,MAAM,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,cAAc,CAAC;QAC3E,IAAI,iBAAiB,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAChB,qBAAqB,4BAA4B,CAAC,iBAAiB,CAAC,EAAE,CACvE,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,CAAC;QAC5D,IAAI,YAAY,EAAE,CAAC;YACjB,aAAa,CAAC,IAAI,CAChB,gBAAgB,4BAA4B,CAAC,YAAY,CAAC,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,oCAAoC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,iFAAiF,CAClF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAC9D,KAAK,CAAC,IAAI,CACR,iFAAiF,CAClF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CACR,kFAAkF,CACnF,CAAC;IACF,KAAK,CAAC,IAAI,CACR,mFAAmF,CACpF,CAAC;IACF,KAAK,CAAC,IAAI,CACR,kFAAkF,CACnF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CACR,kGAAkG,CACnG,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhB,8CAA8C;IAC9C,MAAM,iBAAiB,GACrB,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS;QACpE,CAAC,CAAC,IAAA,gCAAiB,EAAC,MAAM,CAAC,gBAAoC,CAAC;QAChE,CAAC,CAAC,CAAC,MAAM,CAAC,sBAAsB,IAAI,MAAM,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CACR,iDAAiD,iBAAiB,oDAAoD,CACvH,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CACR,yFAAyF,CAC1F,CAAC;IACF,KAAK,CAAC,IAAI,CACR,8FAA8F,CAC/F,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CACR,8EAA8E,CAC/E,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CACR,wEAAwE,CACzE,CAAC;IACF,KAAK,CAAC,IAAI,CACR,yFAAyF,CAC1F,CAAC;IAEF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,WAAW,CAAC,MAAsB;IACtD,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,gCAAiB,CAAC,CAAC;IAEtD,8BAA8B;IAC9B,MAAM,IAAA,gBAAK,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,iCAAiC;IACjC,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,IAAA,oBAAS,EAAC,UAAU,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAE5D,sDAAsD;IACtD,MAAM,IAAA,gBAAK,EAAC,UAAU,EAAE,+BAAgB,CAAC,CAAC;IAE1C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB;IAC/B,OAAO,IAAA,gBAAI,EAAC,kBAAkB,EAAE,EAAE,gCAAiB,CAAC,CAAC;AACvD,CAAC"}

package/dist/core/shell/detector.d.ts

@@ -1,4 +1,4 @@
-import type { ShellType } from '../../types/index.js';
+import type { ShellType } from "../../types/index.js";
 /**
  * Detects the current shell type based on environment variables.
  */
@@ -7,8 +7,15 @@ export declare function detectShell(): ShellType;
  * Gets the profile file path for a given shell type.
  */
 export declare function getProfilePath(shellType: ShellType): string | null;
+/**
+ * Validates that a config path contains only safe characters.
+ * Throws an error if the path contains potentially dangerous characters.
+ * Allows spaces since paths are properly quoted in shell commands.
+ */
+export declare function validateConfigPath(path: string): void;
 /**
  * Generates the source command for a given shell type.
+ * Validates the config path before generating the command.
  */
 export declare function getSourceCommand(shellType: ShellType, configPath: string): string;
 //# sourceMappingURL=detector.d.ts.map

package/dist/core/shell/detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../../src/core/shell/detector.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD;;GAEG;AACH,wBAAgB,WAAW,IAAI,SAAS,CA0BvC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAiBlE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CASjF"}
+{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../../src/core/shell/detector.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD;;GAEG;AACH,wBAAgB,WAAW,IAAI,SAAS,CA0BvC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAiBlE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAQrD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,MAAM,GACjB,MAAM,CAWR"}

package/dist/core/shell/detector.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.detectShell = detectShell;
 exports.getProfilePath = getProfilePath;
+exports.validateConfigPath = validateConfigPath;
 exports.getSourceCommand = getSourceCommand;
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
@@ -10,28 +11,28 @@ const node_fs_1 = require("node:fs");
  * Detects the current shell type based on environment variables.
  */
 function detectShell() {
-    const shell = process.env.SHELL || '';
-    if (shell.includes('zsh')) {
-        return 'zsh';
+    const shell = process.env.SHELL || "";
+    if (shell.includes("zsh")) {
+        return "zsh";
     }
-    if (shell.includes('fish')) {
-        return 'fish';
+    if (shell.includes("fish")) {
+        return "fish";
     }
-    if (shell.includes('bash')) {
-        return 'bash';
+    if (shell.includes("bash")) {
+        return "bash";
     }
     // Fallback: check for rc files
     const home = (0, node_os_1.homedir)();
-    if ((0, node_fs_1.existsSync)((0, node_path_1.join)(home, '.zshrc'))) {
-        return 'zsh';
+    if ((0, node_fs_1.existsSync)((0, node_path_1.join)(home, ".zshrc"))) {
+        return "zsh";
     }
-    if ((0, node_fs_1.existsSync)((0, node_path_1.join)(home, '.config', 'fish', 'config.fish'))) {
-        return 'fish';
+    if ((0, node_fs_1.existsSync)((0, node_path_1.join)(home, ".config", "fish", "config.fish"))) {
+        return "fish";
     }
-    if ((0, node_fs_1.existsSync)((0, node_path_1.join)(home, '.bashrc'))) {
-        return 'bash';
+    if ((0, node_fs_1.existsSync)((0, node_path_1.join)(home, ".bashrc"))) {
+        return "bash";
     }
-    return 'unknown';
+    return "unknown";
 }
 /**
  * Gets the profile file path for a given shell type.
@@ -39,28 +40,41 @@ function detectShell() {
 function getProfilePath(shellType) {
     const home = (0, node_os_1.homedir)();
     switch (shellType) {
-        case 'zsh':
-            return (0, node_path_1.join)(home, '.zshrc');
-        case 'bash':
+        case "zsh":
+            return (0, node_path_1.join)(home, ".zshrc");
+        case "bash":
             // Prefer .bashrc, fallback to .bash_profile
-            if ((0, node_fs_1.existsSync)((0, node_path_1.join)(home, '.bashrc'))) {
-                return (0, node_path_1.join)(home, '.bashrc');
+            if ((0, node_fs_1.existsSync)((0, node_path_1.join)(home, ".bashrc"))) {
+                return (0, node_path_1.join)(home, ".bashrc");
             }
-            return (0, node_path_1.join)(home, '.bash_profile');
-        case 'fish':
-            return (0, node_path_1.join)(home, '.config', 'fish', 'config.fish');
+            return (0, node_path_1.join)(home, ".bash_profile");
+        case "fish":
+            return (0, node_path_1.join)(home, ".config", "fish", "config.fish");
         default:
             return null;
     }
 }
+/**
+ * Validates that a config path contains only safe characters.
+ * Throws an error if the path contains potentially dangerous characters.
+ * Allows spaces since paths are properly quoted in shell commands.
+ */
+function validateConfigPath(path) {
+    const unsafeCharsRegex = /[;|&$`"'\\<>(){}[\]!*?#\n\r\t]/;
+    if (unsafeCharsRegex.test(path)) {
+        throw new Error(`Invalid config path: contains unsafe characters. Path must not contain shell metacharacters like semicolons, pipes, backticks, or quotes.`);
+    }
+}
 /**
  * Generates the source command for a given shell type.
+ * Validates the config path before generating the command.
  */
 function getSourceCommand(shellType, configPath) {
+    validateConfigPath(configPath);
     switch (shellType) {
-        case 'fish':
+        case "fish":
             // Fish uses a different syntax for sourcing env files
-            return `# Source Revenium Claude Code metering config\nif test -f ${configPath}\n    export (cat ${configPath} | grep -v '^#' | xargs -L 1)\nend`;
+            return `# Source Revenium Claude Code metering config\nif test -f "${configPath}"\n    export (cat "${configPath}" | grep -v '^#' | xargs -L 1)\nend`;
         default:
             // Bash and Zsh use the same syntax
             return `# Source Revenium Claude Code metering config\nif [ -f "${configPath}" ]; then\n    source "${configPath}"\nfi`;

package/dist/core/shell/detector.js.map

@@ -1 +1 @@
-{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../../src/core/shell/detector.ts"],"names":[],"mappings":";;AAQA,kCA0BC;AAKD,wCAiBC;AAKD,4CASC;AAtED,qCAAkC;AAClC,yCAAiC;AACjC,qCAAqC;AAGrC;;GAEG;AACH,SAAgB,WAAW;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IAEtC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+BAA+B;IAC/B,MAAM,IAAI,GAAG,IAAA,iBAAO,GAAE,CAAC;IACvB,IAAI,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,SAAoB;IACjD,MAAM,IAAI,GAAG,IAAA,iBAAO,GAAE,CAAC;IAEvB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,IAAA,gBAAI,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9B,KAAK,MAAM;YACT,4CAA4C;YAC5C,IAAI,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;gBACtC,OAAO,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,IAAA,gBAAI,EAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACrC,KAAK,MAAM;YACT,OAAO,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QACtD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,SAAoB,EAAE,UAAkB;IACvE,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,MAAM;YACT,sDAAsD;YACtD,OAAO,6DAA6D,UAAU,qBAAqB,UAAU,oCAAoC,CAAC;QACpJ;YACE,mCAAmC;YACnC,OAAO,2DAA2D,UAAU,0BAA0B,UAAU,OAAO,CAAC;IAC5H,CAAC;AACH,CAAC"}
+{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../../src/core/shell/detector.ts"],"names":[],"mappings":";;AAQA,kCA0BC;AAKD,wCAiBC;AAOD,gDAQC;AAMD,4CAcC;AA3FD,qCAAkC;AAClC,yCAAiC;AACjC,qCAAqC;AAGrC;;GAEG;AACH,SAAgB,WAAW;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IAEtC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+BAA+B;IAC/B,MAAM,IAAI,GAAG,IAAA,iBAAO,GAAE,CAAC;IACvB,IAAI,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,SAAoB;IACjD,MAAM,IAAI,GAAG,IAAA,iBAAO,GAAE,CAAC;IAEvB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,IAAA,gBAAI,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9B,KAAK,MAAM;YACT,4CAA4C;YAC5C,IAAI,IAAA,oBAAU,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;gBACtC,OAAO,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,IAAA,gBAAI,EAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACrC,KAAK,MAAM;YACT,OAAO,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QACtD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,IAAY;IAC7C,MAAM,gBAAgB,GAAG,gCAAgC,CAAC;IAE1D,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,2IAA2I,CAC5I,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAC9B,SAAoB,EACpB,UAAkB;IAElB,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAE/B,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,MAAM;YACT,sDAAsD;YACtD,OAAO,8DAA8D,UAAU,uBAAuB,UAAU,qCAAqC,CAAC;QACxJ;YACE,mCAAmC;YACnC,OAAO,2DAA2D,UAAU,0BAA0B,UAAU,OAAO,CAAC;IAC5H,CAAC;AACH,CAAC"}

package/dist/core/shell/profile-updater.d.ts

@@ -1,4 +1,4 @@
-import type { ShellType, ShellUpdateResult } from '../../types/index.js';
+import type { ShellType, ShellUpdateResult } from "../../types/index.js";
 /**
  * Updates the shell profile to source the Revenium configuration file.
  * Returns details about the update operation.

package/dist/core/shell/profile-updater.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profile-updater.d.ts","sourceRoot":"","sources":["../../../src/core/shell/profile-updater.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AA6CzE;;;GAGG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAuDrE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAMlE"}
+{"version":3,"file":"profile-updater.d.ts","sourceRoot":"","sources":["../../../src/core/shell/profile-updater.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AA+CzE;;;GAGG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAkErE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAMlE"}