burnwatch 0.11.0 → 0.12.1

package/CHANGELOG.md

@@ -5,6 +5,77 @@ All notable changes to burnwatch will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.12.1] - 2026-03-25
+
+### Fixed
+
+- **`keysFoundInEnv` always 0 in interview JSON**: The env scanner in `burnwatch interview --json` used a fragile regex (`^KEY=(.+)$`) and hardcoded 3 file names. It failed on `export KEY=value` format, spaces around `=`, and missed `.env` files in subdirectories. Now uses the same recursive `findEnvFiles()` + `parseEnvKeys()` as the detector — proven to work since v0.1.0.
+- **`autoConfigureServices` missed keys in `.env` files**: The `findEnvKey()` helper only checked `process.env`, which is empty in agent contexts. Now also scans `.env*` files on disk, finding keys the same way the detector does.
+
+### Added
+
+- **`parseEnvKeys()` utility**: Shared env file parser handles `export` prefix, quoted values, `\r\n` line endings, inline comments, and spaces around `=`. Used by both the detector and interview scanner.
+- **10 new tests** (60 → 70): `parseEnvKeys` edge cases (7 tests), `findEnvFiles` behavior (2 tests), `detectInFileChange` with `export` prefix (1 test).
+
+## [0.12.0] - 2026-03-25
+
+### Added
+
+- **10 new services in registry** (14 → 24): Firebase, Cloudflare, Neon Postgres, MongoDB Atlas, Twilio, SendGrid, Sentry, Clerk, DeepSeek, Replicate. All with plans, pricing, gotchas, detection patterns, and cost-impact SDK call patterns.
+- **EST tier activated**: BLIND services with accumulated cost-impact data from file change analysis are now upgraded to EST tier in the spend brief. Uses the midpoint of projected cost range. The EST tier was defined since v0.1.0 but never produced — now it is.
+- **Connector and probe tests**: 20 new tests with mocked HTTP covering all 6 billing connectors and 9 service probes. Total test count: 40 → 60.
+- **Registry cache invalidation**: The registry cache now tracks file mtime and auto-invalidates when `registry.json` is modified. Prevents stale data in long-running processes (MCP server).
+- **Community contribution guide**: Rewrote `CONTRIBUTING.md` with tiered contribution path — registry-only (5 min, JSON), billing connector (30 min, TypeScript), and probe (plan auto-detection). Documented `.burnwatch/registry.json` project-local override for custom services.
+
+### Fixed
+
+- **Registry `apiTier` reconciled with actual connectors**: `browserbase` changed from `"est"` to `"live"` (has a working connector). `stripe` changed from `"live"` to `"calc"` (no billing connector — only has a probe for balance checking, not Stripe's fees to you).
+- **MCP server version**: Was hardcoded at `"0.1.2"` since initial release. Now reads dynamically from `package.json`.
+
+### Changed
+
+- Cost-impact SDK call patterns added for Firebase, Twilio, SendGrid, MongoDB, Clerk, and Replicate.
+
+## [0.11.0] - 2026-03-25
+
+### Fixed
+
+- **CALC services showed ~$0.00 in session brief**: Session-start hook was passing raw `planCost` as spend instead of projecting based on day of month. Now correctly calculates `(planCost / daysInMonth) * dayOfMonth`.
+- **envKeysFound always empty**: `.env` file scanning only ran conditionally. Now always scans `.env`, `.env.local`, `.env.development` on disk and populates `envKeysFound` regardless of global key status.
+- **Box-drawing characters render poorly in agent/IDE contexts**: Added `formatBriefMarkdown()` using markdown tables. Session-start hook now uses markdown format.
+- **Excluded services showing as BLIND in brief**: Added `filter(s => s.tier !== "excluded")` to brief display.
+- **`configure --key` silent when LIVE not possible**: Now returns `tierNote` explaining why a key didn't enable LIVE tracking (e.g., no billing connector for that service).
+
+### Added
+
+- **`burnwatch reset` command**: Removes `.burnwatch/`, skills from `.claude/skills/`, and hooks from `.claude/settings.json`. Preserves global API keys in `~/.config/burnwatch/`.
+- **Interview JSON enrichment**: `hasConnector`, `canGoLive`, `envKeysFound[]`, `suggestedAction`, and `instructions{}` fields guide agent behavior during the interview.
+
+## [0.10.0] - 2026-03-25
+
+### Added
+
+- **Supabase billing connector**: Uses Management API via Personal Access Token (PAT). Detects plan tier (free/pro/team), maps to monthly cost, and checks usage endpoint for overages.
+- **Browserbase billing connector**: Uses projects/usage API to track session count and browser minutes. Estimates spend from minutes × rate.
+
+### Changed
+
+- **Interview skill rewritten**: Complete rewrite of `/burnwatch-interview` SKILL.md. Now leads with API key discovery from `.env` files BEFORE asking questions. Enforces one-service-at-a-time pacing. Includes smart inference (e.g., `gpt-4o-mini` → low budget suggestion). Budget philosophy: LIVE → track actual + alert threshold; CALC → budget = plan cost; BLIND → safety net budget.
+- **BLIND services no longer show $0.00**: Shows "—" instead of "$0.00" to avoid false confidence. Status label says "needs API key" instead of "no budget".
+- **Brief footer says "No billing data: N"** instead of "Untracked: N" — because services ARE configured with budgets, they just lack billing API access.
+- **`pollService` returns explicit error context** when LIVE fails instead of silently falling through to CALC/BLIND.
+
+## [0.9.0] - 2026-03-25
+
+### Added
+
+- **Skill auto-installation during init**: `registerHooks()` now copies `/burnwatch-interview`, `/setup-burnwatch`, and `/spend` skills to `.claude/skills/` so agents can discover them.
+- **Non-TTY init suggests `/burnwatch-interview`**: When running in an agent context, init output recommends the conversational interview skill instead of manual CLI commands.
+
+### Changed
+
+- **Terminology update**: All references to "vibe coding" changed to "AI-assisted development" across package description, README, llms.txt, and source files.
+
 ## [0.8.0] - 2026-03-25
 
 ### Added
@@ -133,6 +204,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Snapshot system for delta computation across sessions
 - Claude Code skills: `/spend` (on-demand brief), `/setup-burnwatch` (guided onboarding)
 
+[0.12.1]: https://github.com/RaleighSF/burnwatch/compare/v0.12.0...v0.12.1
+[0.12.0]: https://github.com/RaleighSF/burnwatch/compare/v0.11.0...v0.12.0
+[0.11.0]: https://github.com/RaleighSF/burnwatch/compare/v0.10.0...v0.11.0
+[0.10.0]: https://github.com/RaleighSF/burnwatch/compare/v0.9.0...v0.10.0
+[0.9.0]: https://github.com/RaleighSF/burnwatch/compare/v0.8.0...v0.9.0
 [0.8.0]: https://github.com/RaleighSF/burnwatch/compare/v0.7.0...v0.8.0
 [0.7.0]: https://github.com/RaleighSF/burnwatch/compare/v0.6.0...v0.7.0
 [0.6.0]: https://github.com/RaleighSF/burnwatch/compare/v0.5.2...v0.6.0

package/dist/cli.js

@@ -287,8 +287,8 @@ var init_probes = __esm({
 });
 
 // src/cli.ts
-import * as fs5 from "fs";
-import * as path5 from "path";
+import * as fs6 from "fs";
+import * as path6 from "path";
 
 // src/core/config.ts
 import * as fs from "fs";
@@ -363,9 +363,22 @@ import * as path2 from "path";
 import * as url from "url";
 var __dirname = path2.dirname(url.fileURLToPath(import.meta.url));
 var cachedRegistry = null;
+var cachedRegistryPath = null;
+var cachedRegistryMtime = null;
 function loadRegistry(projectRoot) {
+  if (cachedRegistry && cachedRegistryPath && cachedRegistryMtime !== null) {
+    try {
+      const stat = fs2.statSync(cachedRegistryPath);
+      if (stat.mtimeMs !== cachedRegistryMtime) {
+        cachedRegistry = null;
+      }
+    } catch {
+      cachedRegistry = null;
+    }
+  }
   if (cachedRegistry) return cachedRegistry;
   const registry = /* @__PURE__ */ new Map();
+  let resolvedPath = null;
   const candidates = [
     path2.resolve(__dirname, "../../registry.json"),
     // from src/core/
@@ -375,6 +388,7 @@ function loadRegistry(projectRoot) {
   for (const candidate of candidates) {
     if (fs2.existsSync(candidate)) {
       loadRegistryFile(candidate, registry);
+      resolvedPath = candidate;
       break;
     }
   }
@@ -382,9 +396,19 @@ function loadRegistry(projectRoot) {
     const localPath = path2.join(projectRoot, ".burnwatch", "registry.json");
     if (fs2.existsSync(localPath)) {
       loadRegistryFile(localPath, registry);
+      resolvedPath = localPath;
     }
   }
   cachedRegistry = registry;
+  if (resolvedPath) {
+    try {
+      cachedRegistryPath = resolvedPath;
+      cachedRegistryMtime = fs2.statSync(resolvedPath).mtimeMs;
+    } catch {
+      cachedRegistryPath = null;
+      cachedRegistryMtime = null;
+    }
+  }
   return registry;
 }
 function loadRegistryFile(filePath, registry) {
@@ -478,8 +502,7 @@ function collectEnvVars(projectRoot) {
   for (const envFile of envFiles) {
     try {
       const content = fs3.readFileSync(envFile, "utf-8");
-      const keys = content.split("\n").filter((line) => line.includes("=") && !line.startsWith("#")).map((line) => line.split("=")[0].trim()).filter(Boolean);
-      for (const key of keys) {
+      for (const key of parseEnvKeys(content)) {
         envVars.add(key);
       }
     } catch {
@@ -487,6 +510,19 @@ function collectEnvVars(projectRoot) {
   }
   return envVars;
 }
+function parseEnvKeys(content) {
+  const keys = /* @__PURE__ */ new Set();
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const stripped = trimmed.startsWith("export ") ? trimmed.slice(7).trim() : trimmed;
+    const eqIdx = stripped.indexOf("=");
+    if (eqIdx > 0) {
+      keys.add(stripped.slice(0, eqIdx).trim());
+    }
+  }
+  return keys;
+}
 function findEnvFiles(dir, maxDepth) {
   const results = [];
   if (maxDepth <= 0) return results;
@@ -1243,6 +1279,8 @@ function saveSnapshot(brief, projectRoot) {
 
 // src/interactive-init.ts
 import * as readline from "readline";
+import * as fs5 from "fs";
+import "path";
 init_probes();
 function formatUnits(n) {
   if (n >= 1e6) return `${(n / 1e6).toFixed(n % 1e6 === 0 ? 0 : 1)}M`;
@@ -1289,11 +1327,27 @@ function ask(rl, question) {
     });
   });
 }
-function findEnvKey(service) {
+function findEnvKey(service, projectRoot = process.cwd()) {
   for (const pattern of service.envPatterns) {
     const val = process.env[pattern];
     if (val && val.length > 0) return val;
   }
+  if (projectRoot) {
+    const envFiles = findEnvFiles(projectRoot, 3);
+    for (const filePath of envFiles) {
+      try {
+        const content = fs5.readFileSync(filePath, "utf-8");
+        for (const pattern of service.envPatterns) {
+          const regex = new RegExp(`^(?:export\\s+)?${pattern}\\s*=\\s*(.+)$`, "m");
+          const match = content.match(regex);
+          if (match?.[1]) {
+            return match[1].trim().replace(/^["']|["']$/g, "");
+          }
+        }
+      } catch {
+      }
+    }
+  }
   return void 0;
 }
 async function autoConfigureServices(detected) {
@@ -1622,10 +1676,10 @@ async function cmdInit() {
   const projectRoot = process.cwd();
   const nonInteractive = flags.has("--non-interactive") || flags.has("--ni");
   const alreadyInitialized = isInitialized(projectRoot);
-  let projectName = path5.basename(projectRoot);
+  let projectName = path6.basename(projectRoot);
   try {
-    const pkgPath = path5.join(projectRoot, "package.json");
-    const pkg = JSON.parse(fs5.readFileSync(pkgPath, "utf-8"));
+    const pkgPath = path6.join(projectRoot, "package.json");
+    const pkg = JSON.parse(fs6.readFileSync(pkgPath, "utf-8"));
     if (pkg.name) projectName = pkg.name;
   } catch {
   }
@@ -1664,8 +1718,8 @@ async function cmdInit() {
     config.services = result.services;
   }
   writeProjectConfig(config, projectRoot);
-  const gitignorePath = path5.join(projectConfigDir(projectRoot), ".gitignore");
-  fs5.writeFileSync(
+  const gitignorePath = path6.join(projectConfigDir(projectRoot), ".gitignore");
+  fs6.writeFileSync(
     gitignorePath,
     [
       "# Burnwatch \u2014 ignore cache and snapshots, keep ledger and config",
@@ -1695,10 +1749,10 @@ async function cmdInterview() {
   if (!isInitialized(projectRoot)) {
     ensureProjectDirs(projectRoot);
     const detected = detectServices(projectRoot);
-    let projectName = path5.basename(projectRoot);
+    let projectName = path6.basename(projectRoot);
     try {
       const pkg = JSON.parse(
-        fs5.readFileSync(path5.join(projectRoot, "package.json"), "utf-8")
+        fs6.readFileSync(path6.join(projectRoot, "package.json"), "utf-8")
       );
       if (pkg.name) projectName = pkg.name;
     } catch {
@@ -1730,20 +1784,19 @@ async function cmdInterview() {
         if (!keySource && !globalKey) keySource = `env:${pattern}`;
       }
     }
-    const envFiles = [".env", ".env.local", ".env.development"];
-    for (const envFile of envFiles) {
+    const envFiles = findEnvFiles(projectRoot, 3);
+    for (const envFilePath of envFiles) {
       try {
-        const envPath = path5.join(projectRoot, envFile);
-        const envContent = fs5.readFileSync(envPath, "utf-8");
+        const envContent = fs6.readFileSync(envFilePath, "utf-8");
+        const envKeys = parseEnvKeys(envContent);
+        const envFileName = path6.relative(projectRoot, envFilePath);
         for (const pattern of definition.envPatterns) {
-          const regex = new RegExp(`^${pattern}=(.+)$`, "m");
-          const match = envContent.match(regex);
-          if (match?.[1]) {
-            const label = `${pattern} (in ${envFile})`;
+          if (envKeys.has(pattern)) {
+            const label = `${pattern} (in ${envFileName})`;
             if (!envKeysFound.some((k) => k.startsWith(pattern))) {
               envKeysFound.push(label);
             }
-            if (!keySource && !globalKey) keySource = `file:${envFile}:${pattern}`;
+            if (!keySource && !globalKey) keySource = `file:${envFileName}:${pattern}`;
           }
         }
       } catch {
@@ -1759,8 +1812,9 @@ async function cmdInterview() {
       const envFile = parts[1];
       const envVar = parts[2];
       try {
-        const envContent = fs5.readFileSync(path5.join(projectRoot, envFile), "utf-8");
-        const match = envContent.match(new RegExp(`^${envVar}=(.+)$`, "m"));
+        const envContent = fs6.readFileSync(path6.join(projectRoot, envFile), "utf-8");
+        const regex = new RegExp(`^(?:export\\s+)?${envVar}\\s*=\\s*(.+)$`, "m");
+        const match = envContent.match(regex);
         if (match?.[1]) apiKey = match[1].trim().replace(/^["']|["']$/g, "");
       } catch {
       }
@@ -2160,26 +2214,26 @@ async function cmdReconcile() {
 }
 function cmdReset() {
   const projectRoot = process.cwd();
-  const burnwatchDir = path5.join(projectRoot, ".burnwatch");
-  const claudeSkillsDir = path5.join(projectRoot, ".claude", "skills");
-  if (!fs5.existsSync(burnwatchDir)) {
+  const burnwatchDir = path6.join(projectRoot, ".burnwatch");
+  const claudeSkillsDir = path6.join(projectRoot, ".claude", "skills");
+  if (!fs6.existsSync(burnwatchDir)) {
     console.log("burnwatch is not initialized in this project.");
     return;
   }
-  fs5.rmSync(burnwatchDir, { recursive: true, force: true });
+  fs6.rmSync(burnwatchDir, { recursive: true, force: true });
   console.log(`\u{1F5D1}\uFE0F  Removed ${burnwatchDir}`);
   const skillNames = ["setup-burnwatch", "burnwatch-interview", "spend"];
   for (const skill of skillNames) {
-    const skillDir = path5.join(claudeSkillsDir, skill);
-    if (fs5.existsSync(skillDir)) {
-      fs5.rmSync(skillDir, { recursive: true, force: true });
+    const skillDir = path6.join(claudeSkillsDir, skill);
+    if (fs6.existsSync(skillDir)) {
+      fs6.rmSync(skillDir, { recursive: true, force: true });
     }
   }
   console.log("\u{1F5D1}\uFE0F  Removed burnwatch skills from .claude/skills/");
-  const settingsPath = path5.join(projectRoot, ".claude", "settings.json");
-  if (fs5.existsSync(settingsPath)) {
+  const settingsPath = path6.join(projectRoot, ".claude", "settings.json");
+  if (fs6.existsSync(settingsPath)) {
     try {
-      const settings = JSON.parse(fs5.readFileSync(settingsPath, "utf-8"));
+      const settings = JSON.parse(fs6.readFileSync(settingsPath, "utf-8"));
       const hooks = settings["hooks"];
       if (hooks) {
         for (const [event, hookList] of Object.entries(hooks)) {
@@ -2189,7 +2243,7 @@ function cmdReset() {
           if (hooks[event].length === 0) delete hooks[event];
         }
         if (Object.keys(hooks).length === 0) delete settings["hooks"];
-        fs5.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf-8");
+        fs6.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf-8");
         console.log("\u{1F5D1}\uFE0F  Removed burnwatch hooks from .claude/settings.json");
       }
     } catch {
@@ -2239,23 +2293,23 @@ Examples:
 }
 function cmdVersion() {
   try {
-    const pkgPath = path5.resolve(
-      path5.dirname(new URL(import.meta.url).pathname),
+    const pkgPath = path6.resolve(
+      path6.dirname(new URL(import.meta.url).pathname),
       "../package.json"
     );
-    const pkg = JSON.parse(fs5.readFileSync(pkgPath, "utf-8"));
+    const pkg = JSON.parse(fs6.readFileSync(pkgPath, "utf-8"));
     console.log(`burnwatch v${pkg.version}`);
   } catch {
     console.log("burnwatch v0.1.0");
   }
 }
 function registerHooks(projectRoot) {
-  const sourceHooksDir = path5.resolve(
-    path5.dirname(new URL(import.meta.url).pathname),
+  const sourceHooksDir = path6.resolve(
+    path6.dirname(new URL(import.meta.url).pathname),
     "hooks"
   );
-  const localHooksDir = path5.join(projectRoot, ".burnwatch", "hooks");
-  fs5.mkdirSync(localHooksDir, { recursive: true });
+  const localHooksDir = path6.join(projectRoot, ".burnwatch", "hooks");
+  fs6.mkdirSync(localHooksDir, { recursive: true });
   const hookFiles = [
     "on-session-start.js",
     "on-prompt.js",
@@ -2263,45 +2317,45 @@ function registerHooks(projectRoot) {
     "on-stop.js"
   ];
   for (const file of hookFiles) {
-    const src = path5.join(sourceHooksDir, file);
-    const dest = path5.join(localHooksDir, file);
+    const src = path6.join(sourceHooksDir, file);
+    const dest = path6.join(localHooksDir, file);
     try {
-      fs5.copyFileSync(src, dest);
+      fs6.copyFileSync(src, dest);
       const mapSrc = src + ".map";
-      if (fs5.existsSync(mapSrc)) {
-        fs5.copyFileSync(mapSrc, dest + ".map");
+      if (fs6.existsSync(mapSrc)) {
+        fs6.copyFileSync(mapSrc, dest + ".map");
       }
     } catch (err) {
       console.error(`   Warning: Could not copy hook ${file}: ${err instanceof Error ? err.message : err}`);
     }
   }
   console.log(`   Hook scripts copied to ${localHooksDir}`);
-  const sourceSkillsDir = path5.resolve(
-    path5.dirname(new URL(import.meta.url).pathname),
+  const sourceSkillsDir = path6.resolve(
+    path6.dirname(new URL(import.meta.url).pathname),
     "../skills"
   );
   const skillNames = ["setup-burnwatch", "burnwatch-interview", "spend"];
-  const claudeSkillsDir = path5.join(projectRoot, ".claude", "skills");
+  const claudeSkillsDir = path6.join(projectRoot, ".claude", "skills");
   for (const skillName of skillNames) {
-    const srcSkill = path5.join(sourceSkillsDir, skillName, "SKILL.md");
-    const destDir = path5.join(claudeSkillsDir, skillName);
-    const destSkill = path5.join(destDir, "SKILL.md");
+    const srcSkill = path6.join(sourceSkillsDir, skillName, "SKILL.md");
+    const destDir = path6.join(claudeSkillsDir, skillName);
+    const destSkill = path6.join(destDir, "SKILL.md");
     try {
-      if (fs5.existsSync(srcSkill)) {
-        fs5.mkdirSync(destDir, { recursive: true });
-        fs5.copyFileSync(srcSkill, destSkill);
+      if (fs6.existsSync(srcSkill)) {
+        fs6.mkdirSync(destDir, { recursive: true });
+        fs6.copyFileSync(srcSkill, destSkill);
       }
     } catch (err) {
       console.error(`   Warning: Could not copy skill ${skillName}: ${err instanceof Error ? err.message : err}`);
     }
   }
   console.log(`   Skills installed to ${claudeSkillsDir}`);
-  const claudeDir = path5.join(projectRoot, ".claude");
-  const settingsPath = path5.join(claudeDir, "settings.json");
-  fs5.mkdirSync(claudeDir, { recursive: true });
+  const claudeDir = path6.join(projectRoot, ".claude");
+  const settingsPath = path6.join(claudeDir, "settings.json");
+  fs6.mkdirSync(claudeDir, { recursive: true });
   let settings = {};
   try {
-    const existing = fs5.readFileSync(settingsPath, "utf-8");
+    const existing = fs6.readFileSync(settingsPath, "utf-8");
     settings = JSON.parse(existing);
     console.log(`   Merging into existing ${settingsPath}`);
   } catch {
@@ -2317,7 +2371,7 @@ function registerHooks(projectRoot) {
     hooks: [
       {
         type: "command",
-        command: `node "${path5.join(hooksDir, "on-session-start.js")}"`,
+        command: `node "${path6.join(hooksDir, "on-session-start.js")}"`,
         timeout: 15
       }
     ]
@@ -2330,7 +2384,7 @@ function registerHooks(projectRoot) {
       hooks: [
         {
           type: "command",
-          command: `node "${path5.join(hooksDir, "on-prompt.js")}"`,
+          command: `node "${path6.join(hooksDir, "on-prompt.js")}"`,
           timeout: 5
         }
       ]
@@ -2342,7 +2396,7 @@ function registerHooks(projectRoot) {
     hooks: [
       {
         type: "command",
-        command: `node "${path5.join(hooksDir, "on-file-change.js")}"`,
+        command: `node "${path6.join(hooksDir, "on-file-change.js")}"`,
         timeout: 5
       }
     ]
@@ -2352,14 +2406,14 @@ function registerHooks(projectRoot) {
     hooks: [
       {
         type: "command",
-        command: `node "${path5.join(hooksDir, "on-stop.js")}"`,
+        command: `node "${path6.join(hooksDir, "on-stop.js")}"`,
         timeout: 15,
         async: true
       }
     ]
   });
   settings["hooks"] = hooks;
-  fs5.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf-8");
+  fs6.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n", "utf-8");
   console.log(`   Hooks registered in ${settingsPath}`);
 }
 function addHookIfMissing(hookArray, _eventName, hookConfig) {