@tokenade/cli 0.7.4 → 0.7.6

package/README.md

@@ -160,7 +160,7 @@ When reporting, please include your OS, `tokenade --version`, your coding agent,
 | **System & network** | `table` · `disk` · `netstat` · `dns` · `vmstat` · `filelist` · `grep` |
 | **Web & docs** | `web` · `serp` (aliases `google`/`bing`/`ddg`) · `snapshot` · `stealth` · `curl` · `docs` · `pdf` · `notebook` |
 
-**Your own compactors.** `add-compactor --file <rules.toml>` teaches Tokenade to fold output from a command it doesn't cover yet (alias `add-filter`); `add-compactor --list` shows the ones you've added, and `add-compactor --help` prints the file format.
+**Your own compactors.** `add-compactor --file <rules.toml>` teaches Tokenade to fold output from a command it doesn't cover yet (alias `add-filter`); `add-compactor --list` shows the ones you've added, and `add-compactor --help` prints the file format. Filters shipped INSIDE a repo (`.tokenade/filters/`) apply only after you approve them once with `trust-filters` — a cloned project can't silently rewrite your outputs.
 
 ### Savings, receipts & reporting
 
@@ -362,6 +362,7 @@ some-noisy-cmd | tokenade auto -   # …or pipe stdin
 
 tokenade add-compactor --file my-rules.toml   # teach Tokenade a new compactor
 tokenade add-compactor --list                 # list the ones you've added
+tokenade trust-filters                        # approve a repo's bundled filters
 ```
 
 ### Savings, receipts & reporting

package/install.js

@@ -171,19 +171,24 @@ function get(targetUrl, redirects = 0) {
 					err.httpStatus = res.statusCode;
 					return reject(err);
 				}
-				https
-					.get(
-						{
-							host: t.hostname,
-							port,
-							path: `${t.pathname}${t.search}`,
-							socket,
-							agent: false,
-							servername: t.hostname,
-						},
-						onResponse,
-					)
-					.on("error", reject);
+				const tunneled = https.get(
+					{
+						host: t.hostname,
+						port,
+						path: `${t.pathname}${t.search}`,
+						socket,
+						agent: false,
+						servername: t.hostname,
+					},
+					onResponse,
+				);
+				tunneled.on("error", reject);
+				// The outer setTimeout only guards the CONNECT request — a
+				// stall AFTER the tunnel is established used to hang the
+				// attempt until the OS TCP timeout.
+				tunneled.setTimeout(REQUEST_TIMEOUT_MS, () => {
+					tunneled.destroy(new Error(`timeout after ${REQUEST_TIMEOUT_MS}ms (tunneled)`));
+				});
 			});
 			req = connectReq;
 		} else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenade/cli",
-  "version": "0.7.4",
+  "version": "0.7.6",
   "description": "Tokenade — cut your AI coding agent's token bill. Installs the Tokenade CLI (a local, paid token-reduction tool; activate via your browser).",
   "homepage": "https://tokenade.net",
   "license": "UNLICENSED",