@xerg/cli 0.5.2 → 0.5.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@xerg/cli",
3
- "version": "0.5.2",
3
+ "version": "0.5.3",
4
4
  "description": "Audit OpenClaw, Hermes, and Cursor spend in dollars with provenance-aware waste findings and compare output.",
5
5
  "keywords": [
6
6
  "xerg",
@@ -37,8 +37,11 @@
37
37
  },
38
38
  "files": ["dist", "README.md", "LICENSE", "skills"],
39
39
  "main": "./dist/index.js",
40
+ "browser": "./dist/browser.js",
40
41
  "exports": {
41
42
  ".": {
43
+ "browser": "./dist/browser.js",
44
+ "node": "./dist/index.js",
42
45
  "default": "./dist/index.js"
43
46
  }
44
47
  },
@@ -53,8 +56,8 @@
53
56
  "typecheck": "tsc --noEmit -p tsconfig.json"
54
57
  },
55
58
  "dependencies": {
56
- "@inquirer/prompts": "^8.4.1",
57
- "better-sqlite3": "^12.11.1"
59
+ "@inquirer/confirm": "^6.1.1",
60
+ "@inquirer/select": "^5.2.1"
58
61
  },
59
62
  "devDependencies": {
60
63
  "@xerg/schemas": "workspace:*",
@@ -97,11 +97,11 @@ Additional requirements:
97
97
 
98
98
  ## Security And Data Flow
99
99
 
100
- Default `doctor`, `init`, `audit`, `--compare`, `--json`, and `--markdown` commands analyze data on the local machine. They read OpenClaw, Hermes, or Cursor usage files, compute economic summaries, print reports, and may write local SQLite snapshots for future comparison.
100
+ Default `doctor`, `init`, `audit`, `--compare`, `--json`, and `--markdown` commands analyze data on the local machine. They read OpenClaw, Hermes, or Cursor usage files, compute economic summaries, print reports, and may write local JSON snapshots for future comparison.
101
101
 
102
102
  Remote OpenClaw audits over SSH, Railway, or `--remote-config` pull selected gateway logs and session files to local temporary storage, then run the same local audit engine. These flows require the corresponding remote transport credentials already configured on the machine.
103
103
 
104
- Hosted sync is opt-in. `connect`, `audit --push`, `push`, and `mcp-setup` use `XERG_API_KEY`, `~/.xerg/config.json`, or browser login credentials only for Xerg Cloud actions. The push payload contains audit totals, daily rollups, findings, recommendations, comparison deltas, and source metadata; it does not include raw prompt or response content, local source file paths, local database paths, or internal finding details.
104
+ Hosted sync is opt-in. `connect`, `audit --push`, `push`, and `mcp-setup` use `XERG_API_KEY`, `~/.xerg/config.json`, or browser login credentials only for Xerg Cloud actions. The push payload contains audit totals, daily rollups, findings, recommendations, comparison deltas, and source metadata; it does not include raw prompt or response content, local source file paths, local snapshot store paths, or internal finding details.
105
105
 
106
106
  Local JSON findings may include `signalSource`, `ruleId`, and evidence references. Use those fields to distinguish observed signals from inferred or legacy unknown provenance. These provenance fields are local-only in this release and are not part of the pushed v2 wire payload.
107
107