npm - burnwatch - Versions diffs - 0.2.0 → 0.3.0 - Mend

burnwatch 0.2.0 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (12) hide show

package/dist/cli.js +139 -103
package/dist/cli.js.map +1 -1
package/dist/hooks/on-file-change.js.map +1 -1
package/dist/hooks/on-prompt.js.map +1 -1
package/dist/hooks/on-session-start.js +104 -26
package/dist/hooks/on-session-start.js.map +1 -1
package/dist/index.d.ts +3 -3
package/dist/index.js +104 -26
package/dist/index.js.map +1 -1
package/dist/mcp-server.js +104 -26
package/dist/mcp-server.js.map +1 -1
package/package.json +1 -1

package/dist/hooks/on-file-change.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../../src/hooks/on-file-change.ts","../../src/core/config.ts","../../src/detection/detector.ts","../../src/core/registry.ts","../../src/core/ledger.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/*\n PostToolUse hook (Edit\|Write) — fires when files are changed.\n \n Scans changed files for new service introductions:\n * - New dependencies in package.json\n * - New env vars in .env files\n * - New import statements in source files\n /\n\nimport as fs from \"node:fs\";\nimport type { HookInput, HookOutput } from \"../core/types.js\";\nimport {\n readProjectConfig,\n writeProjectConfig,\n isInitialized,\n} from \"../core/config.js\";\nimport { detectInFileChange } from \"../detection/detector.js\";\nimport { logEvent } from \"../core/ledger.js\";\nimport type { TrackedService } from \"../core/types.js\";\n\nfunction main(): void {\n // Read hook input from stdin\n let input: HookInput;\n try {\n const stdin = fs.readFileSync(0, \"utf-8\");\n input = JSON.parse(stdin) as HookInput;\n } catch {\n process.exit(0);\n return;\n }\n\n const projectRoot = input.cwd;\n\n // Guard: not initialized\n if (!isInitialized(projectRoot)) {\n process.exit(0);\n return;\n }\n\n // Get file path and content from tool input\n const filePath = input.tool_input?.file_path;\n if (!filePath) {\n process.exit(0);\n return;\n }\n\n // Read the current file content\n let content: string;\n try {\n content = fs.readFileSync(filePath, \"utf-8\");\n } catch {\n process.exit(0);\n return;\n }\n\n // Detect new services in this file change\n const detected = detectInFileChange(filePath, content, projectRoot);\n if (detected.length === 0) {\n process.exit(0);\n return;\n }\n\n const config = readProjectConfig(projectRoot)!;\n const newServices: string[] = [];\n\n for (const det of detected) {\n const serviceId = det.service.id;\n\n // Skip if already tracked\n if (config.services[serviceId]) continue;\n\n // Auto-register as a new tracked service (BLIND until configured)\n const tracked: TrackedService = {\n serviceId,\n detectedVia: det.sources,\n hasApiKey: false,\n firstDetected: new Date().toISOString(),\n };\n\n config.services[serviceId] = tracked;\n newServices.push(serviceId);\n\n // Log the detection\n logEvent(\n {\n timestamp: new Date().toISOString(),\n sessionId: input.session_id,\n type: \"service_detected\",\n data: {\n serviceId,\n sources: det.sources,\n details: det.details,\n file: filePath,\n },\n },\n projectRoot,\n );\n }\n\n // Save updated config\n if (newServices.length > 0) {\n writeProjectConfig(config, projectRoot);\n }\n\n // Alert about new services\n if (newServices.length > 0) {\n const alerts = newServices.map(\n (id) =>\n `[BURNWATCH] 🆕 New paid service detected: ${id}\\n Run 'burnwatch add ${id}' to configure budget and tracking.`,\n );\n\n const output: HookOutput = {\n hookSpecificOutput: {\n hookEventName: \"PostToolUse\",\n additionalContext: alerts.join(\"\\n\\n\"),\n },\n };\n\n process.stdout.write(JSON.stringify(output));\n }\n}\n\nmain();\n","import * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport * as os from \"node:os\";\nimport type { TrackedService } from \"./types.js\";\n\n/*\n Paths for burnwatch configuration and data.\n \n Hybrid model:\n * - Global config (API keys, service credentials): ~/.config/burnwatch/\n * - Project config (budgets, tracked services): .burnwatch/\n * - Project data (ledger, events, cache): .burnwatch/data/\n /\n\n/* Global config directory — stores API keys, never in project dirs. /\nexport function globalConfigDir(): string {\n const xdgConfig = process.env[\"XDG_CONFIG_HOME\"];\n if (xdgConfig) return path.join(xdgConfig, \"burnwatch\");\n return path.join(os.homedir(), \".config\", \"burnwatch\");\n}\n\n/* Project config directory — stores budgets, tracked services. /\nexport function projectConfigDir(projectRoot?: string): string {\n const root = projectRoot ?? process.cwd();\n return path.join(root, \".burnwatch\");\n}\n\n/* Project data directory — stores ledger, events, cache. /\nexport function projectDataDir(projectRoot?: string): string {\n return path.join(projectConfigDir(projectRoot), \"data\");\n}\n\n// --- Global config (API keys) ---\n\nexport interface GlobalConfig {\n services: Record<\n string,\n {\n apiKey?: string;\n token?: string;\n orgId?: string;\n }\n >;\n}\n\nexport function readGlobalConfig(): GlobalConfig {\n const configPath = path.join(globalConfigDir(), \"config.json\");\n try {\n const raw = fs.readFileSync(configPath, \"utf-8\");\n return JSON.parse(raw) as GlobalConfig;\n } catch {\n return { services: {} };\n }\n}\n\nexport function writeGlobalConfig(config: GlobalConfig): void {\n const dir = globalConfigDir();\n fs.mkdirSync(dir, { recursive: true });\n const configPath = path.join(dir, \"config.json\");\n fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + \"\\n\", \"utf-8\");\n // Restrict permissions — this file contains API keys\n fs.chmodSync(configPath, 0o600);\n}\n\n// --- Project config (budgets, tracked services) ---\n\nexport interface ProjectConfig {\n projectName: string;\n services: Record<string, TrackedService>;\n createdAt: string;\n updatedAt: string;\n}\n\nexport function readProjectConfig(projectRoot?: string): ProjectConfig \| null {\n const configPath = path.join(projectConfigDir(projectRoot), \"config.json\");\n try {\n const raw = fs.readFileSync(configPath, \"utf-8\");\n return JSON.parse(raw) as ProjectConfig;\n } catch {\n return null;\n }\n}\n\nexport function writeProjectConfig(\n config: ProjectConfig,\n projectRoot?: string,\n): void {\n const dir = projectConfigDir(projectRoot);\n fs.mkdirSync(dir, { recursive: true });\n config.updatedAt = new Date().toISOString();\n const configPath = path.join(dir, \"config.json\");\n fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + \"\\n\", \"utf-8\");\n}\n\n/* Ensure all project directories exist. /\nexport function ensureProjectDirs(projectRoot?: string): void {\n const dirs = [\n projectConfigDir(projectRoot),\n projectDataDir(projectRoot),\n path.join(projectDataDir(projectRoot), \"cache\"),\n path.join(projectDataDir(projectRoot), \"snapshots\"),\n ];\n for (const dir of dirs) {\n fs.mkdirSync(dir, { recursive: true });\n }\n}\n\n/* Check if burnwatch is initialized in the given project. /\nexport function isInitialized(projectRoot?: string): boolean {\n return readProjectConfig(projectRoot) !== null;\n}\n","import as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { loadRegistry } from \"../core/registry.js\";\nimport type { ServiceDefinition, DetectionSource } from \"../core/types.js\";\n\nexport interface DetectionResult {\n service: ServiceDefinition;\n sources: DetectionSource[];\n details: string[];\n}\n\n/*\n Run all detection surfaces against the current project.\n * Returns services detected via any combination of:\n * - package.json dependencies\n * - environment variable patterns\n * - import statement scanning\n * - (prompt mention scanning is handled separately in hooks)\n /\nexport function detectServices(projectRoot: string): DetectionResult[] {\n const registry = loadRegistry(projectRoot);\n const results = new Map<string, DetectionResult>();\n\n // Surface 1: Package manifest scanning\n const pkgDeps = scanPackageJson(projectRoot);\n for (const [serviceId, service] of registry) {\n const matchedPkgs = service.packageNames.filter((pkg) =>\n pkgDeps.has(pkg),\n );\n if (matchedPkgs.length > 0) {\n getOrCreate(results, serviceId, service).sources.push(\"package_json\");\n getOrCreate(results, serviceId, service).details.push(\n `package.json: ${matchedPkgs.join(\", \")}`,\n );\n }\n }\n\n // Surface 2: Environment variable pattern matching\n const envVars = new Set(Object.keys(process.env));\n for (const [serviceId, service] of registry) {\n const matchedEnvs = service.envPatterns.filter((pattern) =>\n envVars.has(pattern),\n );\n if (matchedEnvs.length > 0) {\n getOrCreate(results, serviceId, service).sources.push(\"env_var\");\n getOrCreate(results, serviceId, service).details.push(\n `env vars: ${matchedEnvs.join(\", \")}`,\n );\n }\n }\n\n // Surface 3: Import statement analysis (lightweight — scan key files only)\n const importHits = scanImports(projectRoot);\n for (const [serviceId, service] of registry) {\n const matchedImports = service.importPatterns.filter((pattern) =>\n importHits.has(pattern),\n );\n if (matchedImports.length > 0) {\n if (\n !getOrCreate(results, serviceId, service).sources.includes(\n \"import_scan\",\n )\n ) {\n getOrCreate(results, serviceId, service).sources.push(\"import_scan\");\n getOrCreate(results, serviceId, service).details.push(\n `imports: ${matchedImports.join(\", \")}`,\n );\n }\n }\n }\n\n return Array.from(results.values());\n}\n\n/\n Detect services mentioned in a prompt string.\n * Used by the UserPromptSubmit hook.\n /\nexport function detectMentions(\n prompt: string,\n projectRoot?: string,\n): DetectionResult[] {\n const registry = loadRegistry(projectRoot);\n const results: DetectionResult[] = [];\n const promptLower = prompt.toLowerCase();\n\n for (const [, service] of registry) {\n const matched = service.mentionKeywords.some((keyword) =>\n promptLower.includes(keyword.toLowerCase()),\n );\n if (matched) {\n results.push({\n service,\n sources: [\"prompt_mention\"],\n details: [`mentioned in prompt`],\n });\n }\n }\n\n return results;\n}\n\n/\n Detect new services introduced in a file change.\n * Used by the PostToolUse hook for Write/Edit events.\n /\nexport function detectInFileChange(\n filePath: string,\n content: string,\n projectRoot?: string,\n): DetectionResult[] {\n const registry = loadRegistry(projectRoot);\n const results: DetectionResult[] = [];\n const fileName = path.basename(filePath);\n\n // Check if it's a package.json change\n if (fileName === \"package.json\") {\n try {\n const pkg = JSON.parse(content) as {\n dependencies?: Record<string, string>;\n devDependencies?: Record<string, string>;\n };\n const allDeps = new Set([\n ...Object.keys(pkg.dependencies ?? {}),\n ...Object.keys(pkg.devDependencies ?? {}),\n ]);\n\n for (const [, service] of registry) {\n const matched = service.packageNames.filter((p) => allDeps.has(p));\n if (matched.length > 0) {\n results.push({\n service,\n sources: [\"package_json\"],\n details: [`new dependency: ${matched.join(\", \")}`],\n });\n }\n }\n } catch {\n // Not valid JSON, skip\n }\n return results;\n }\n\n // Check if it's an env file change\n if (fileName.startsWith(\".env\")) {\n const envKeys = content\n .split(\"\\n\")\n .filter((line) => line.includes(\"=\") && !line.startsWith(\"#\"))\n .map((line) => line.split(\"=\")[0]!.trim());\n\n for (const [, service] of registry) {\n const matched = service.envPatterns.filter((p) => envKeys.includes(p));\n if (matched.length > 0) {\n results.push({\n service,\n sources: [\"env_var\"],\n details: [`new env var: ${matched.join(\", \")}`],\n });\n }\n }\n return results;\n }\n\n // Check for import statements in source files\n if (/\\.(ts\|tsx\|js\|jsx\|mjs\|cjs)$/.test(filePath)) {\n for (const [, service] of registry) {\n const matched = service.importPatterns.filter(\n (pattern) =>\n content.includes(`from \"${pattern}`) \|\|\n content.includes(`from '${pattern}`) \|\|\n content.includes(`require(\"${pattern}`) \|\|\n content.includes(`require('${pattern}`),\n );\n if (matched.length > 0) {\n results.push({\n service,\n sources: [\"import_scan\"],\n details: [`import added: ${matched.join(\", \")}`],\n });\n }\n }\n }\n\n return results;\n}\n\n// --- Helpers ---\n\nfunction getOrCreate(\n map: Map<string, DetectionResult>,\n serviceId: string,\n service: ServiceDefinition,\n): DetectionResult {\n let result = map.get(serviceId);\n if (!result) {\n result = { service, sources: [], details: [] };\n map.set(serviceId, result);\n }\n return result;\n}\n\n/* Scan package.json for all dependencies. /\nfunction scanPackageJson(projectRoot: string): Set<string> {\n const deps = new Set<string>();\n const pkgPath = path.join(projectRoot, \"package.json\");\n\n try {\n const raw = fs.readFileSync(pkgPath, \"utf-8\");\n const pkg = JSON.parse(raw) as {\n dependencies?: Record<string, string>;\n devDependencies?: Record<string, string>;\n };\n for (const name of Object.keys(pkg.dependencies ?? {})) deps.add(name);\n for (const name of Object.keys(pkg.devDependencies ?? {})) deps.add(name);\n } catch {\n // No package.json or not valid JSON\n }\n\n return deps;\n}\n\n/\n Lightweight import scanning.\n * Scans src/ directory for import/require statements.\n * Does NOT do a full AST parse — just string matching.\n /\nfunction scanImports(projectRoot: string): Set<string> {\n const imports = new Set<string>();\n const srcDir = path.join(projectRoot, \"src\");\n\n if (!fs.existsSync(srcDir)) return imports;\n\n const files = walkDir(srcDir, /\\.(ts\|tsx\|js\|jsx\|mjs\|cjs)$/);\n for (const file of files) {\n try {\n const content = fs.readFileSync(file, \"utf-8\");\n // Match: import ... from \"package\" or require(\"package\")\n const importRegex =\n /(?:from\\s+[\"']\|require\\s\\(\\s[\"'])([^./][^\"']?)(?:[\"'])/g;\n let match: RegExpExecArray \| null;\n while ((match = importRegex.exec(content)) !== null) {\n const pkg = match[1];\n if (pkg) {\n // Normalize scoped packages: @scope/pkg/subpath -> @scope/pkg\n const parts = pkg.split(\"/\");\n if (parts[0]?.startsWith(\"@\") && parts.length >= 2) {\n imports.add(`${parts[0]}/${parts[1]}`);\n } else if (parts[0]) {\n imports.add(parts[0]);\n }\n }\n }\n } catch {\n // Skip unreadable files\n }\n }\n\n return imports;\n}\n\n/** Recursively walk a directory, returning files matching the pattern. /\nfunction walkDir(dir: string, pattern: RegExp, maxDepth = 5): string[] {\n const results: string[] = [];\n if (maxDepth <= 0) return results;\n\n try {\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n for (const entry of entries) {\n if (entry.name.startsWith(\".\") \|\| entry.name === \"node_modules\") continue;\n const fullPath = path.join(dir, entry.name);\n if (entry.isDirectory()) {\n results.push(...walkDir(fullPath, pattern, maxDepth - 1));\n } else if (pattern.test(entry.name)) {\n results.push(fullPath);\n }\n }\n } catch {\n // Skip unreadable directories\n }\n\n return results;\n}\n","import as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport * as url from \"node:url\";\nimport type { ServiceDefinition } from \"./types.js\";\n\nconst __dirname = path.dirname(url.fileURLToPath(import.meta.url));\n\ninterface RegistryFile {\n version: string;\n lastUpdated: string;\n services: Record<string, ServiceDefinition>;\n}\n\nlet cachedRegistry: Map<string, ServiceDefinition> \| null = null;\n\n/*\n Load the service registry.\n * Checks project-local override first, then falls back to bundled registry.\n /\nexport function loadRegistry(projectRoot?: string): Map<string, ServiceDefinition> {\n if (cachedRegistry) return cachedRegistry;\n\n const registry = new Map<string, ServiceDefinition>();\n\n // Load bundled registry (shipped with package)\n // Try multiple possible locations — depends on whether running from src/ or dist/\n const candidates = [\n path.resolve(__dirname, \"../../registry.json\"), // from src/core/\n path.resolve(__dirname, \"../registry.json\"), // from dist/\n ];\n for (const candidate of candidates) {\n if (fs.existsSync(candidate)) {\n loadRegistryFile(candidate, registry);\n break;\n }\n }\n\n // Load project-local override (if exists)\n if (projectRoot) {\n const localPath = path.join(projectRoot, \".burnwatch\", \"registry.json\");\n if (fs.existsSync(localPath)) {\n loadRegistryFile(localPath, registry);\n }\n }\n\n cachedRegistry = registry;\n return registry;\n}\n\nfunction loadRegistryFile(\n filePath: string,\n registry: Map<string, ServiceDefinition>,\n): void {\n try {\n const raw = fs.readFileSync(filePath, \"utf-8\");\n const data = JSON.parse(raw) as RegistryFile;\n for (const [id, service] of Object.entries(data.services)) {\n registry.set(id, { ...service, id });\n }\n } catch {\n // Silently skip missing or malformed registry files\n }\n}\n\n/* Clear the cached registry (for testing). /\nexport function clearRegistryCache(): void {\n cachedRegistry = null;\n}\n\n/* Get a single service definition by ID. /\nexport function getService(\n id: string,\n projectRoot?: string,\n): ServiceDefinition \| undefined {\n return loadRegistry(projectRoot).get(id);\n}\n\n/* Get all service definitions. /\nexport function getAllServices(\n projectRoot?: string,\n): ServiceDefinition[] {\n return Array.from(loadRegistry(projectRoot).values());\n}\n","import as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport type { SpendBrief, SpendEvent } from \"./types.js\";\nimport { CONFIDENCE_BADGES } from \"./types.js\";\nimport { projectConfigDir, projectDataDir } from \"./config.js\";\n\n/*\n Write the spend ledger as a human-readable markdown file.\n * Designed to be git-committable and readable in 10 seconds.\n /\nexport function writeLedger(brief: SpendBrief, projectRoot?: string): void {\n const now = new Date();\n const lines: string[] = [];\n\n lines.push(`# Burnwatch Ledger — ${brief.projectName}`);\n lines.push(`Last updated: ${now.toISOString()}`);\n lines.push(\"\");\n lines.push(`## This Month (${brief.period})`);\n lines.push(\"\");\n lines.push(\"\| Service \| Spend \| Conf \| Budget \| Status \|\");\n lines.push(\"\|---------\|-------\|------\|--------\|--------\|\");\n\n for (const svc of brief.services) {\n const spendStr = svc.isEstimate\n ? `~$${svc.spend.toFixed(2)}`\n : `$${svc.spend.toFixed(2)}`;\n const badge = CONFIDENCE_BADGES[svc.tier];\n const budgetStr = svc.budget ? `$${svc.budget}` : \"—\";\n\n lines.push(\n `\| ${svc.serviceId} \| ${spendStr} \| ${badge} \| ${budgetStr} \| ${svc.statusLabel} \|`,\n );\n }\n\n lines.push(\"\");\n const totalStr = brief.totalIsEstimate\n ? `~$${brief.totalSpend.toFixed(2)}`\n : `$${brief.totalSpend.toFixed(2)}`;\n const marginStr =\n brief.estimateMargin > 0\n ? ` (±$${brief.estimateMargin.toFixed(0)} estimated margin)`\n : \"\";\n lines.push(`## TOTAL: ${totalStr}${marginStr}`);\n lines.push(`## Untracked services: ${brief.untrackedCount}`);\n lines.push(\"\");\n\n if (brief.alerts.length > 0) {\n lines.push(\"## Alerts\");\n for (const alert of brief.alerts) {\n const icon = alert.severity === \"critical\" ? \"🚨\" : \"⚠️\";\n lines.push(`- ${icon} ${alert.message}`);\n }\n lines.push(\"\");\n }\n\n const ledgerPath = path.join(\n projectConfigDir(projectRoot),\n \"spend-ledger.md\",\n );\n fs.mkdirSync(path.dirname(ledgerPath), { recursive: true });\n fs.writeFileSync(ledgerPath, lines.join(\"\\n\") + \"\\n\", \"utf-8\");\n}\n\n/\n Append an event to the append-only event log.\n /\nexport function logEvent(event: SpendEvent, projectRoot?: string): void {\n const logPath = path.join(projectDataDir(projectRoot), \"events.jsonl\");\n fs.mkdirSync(path.dirname(logPath), { recursive: true });\n fs.appendFileSync(logPath, JSON.stringify(event) + \"\\n\", \"utf-8\");\n}\n\n/\n Read recent events from the event log.\n /\nexport function readRecentEvents(\n count: number,\n projectRoot?: string,\n): SpendEvent[] {\n const logPath = path.join(projectDataDir(projectRoot), \"events.jsonl\");\n try {\n const raw = fs.readFileSync(logPath, \"utf-8\");\n const lines = raw.trim().split(\"\\n\").filter(Boolean);\n return lines\n .slice(-count)\n .map((line) => JSON.parse(line) as SpendEvent);\n } catch {\n return [];\n }\n}\n\n/\n Save a spend snapshot to the snapshots directory.\n * Used for delta computation across sessions.\n /\nexport function saveSnapshot(brief: SpendBrief, projectRoot?: string): void {\n const snapshotDir = path.join(projectDataDir(projectRoot), \"snapshots\");\n fs.mkdirSync(snapshotDir, { recursive: true });\n const filename = `snapshot-${new Date().toISOString().replace(/[:.]/g, \"-\")}.json`;\n fs.writeFileSync(\n path.join(snapshotDir, filename),\n JSON.stringify(brief, null, 2) + \"\\n\",\n \"utf-8\",\n );\n}\n\n/\n Read the most recent snapshot, if any.\n */\nexport function readLatestSnapshot(\n projectRoot?: string,\n): SpendBrief \| null {\n const snapshotDir = path.join(projectDataDir(projectRoot), \"snapshots\");\n try {\n const files = fs\n .readdirSync(snapshotDir)\n .filter((f) => f.startsWith(\"snapshot-\") && f.endsWith(\".json\"))\n .sort()\n .reverse();\n\n if (files.length === 0) return null;\n\n const raw = fs.readFileSync(\n path.join(snapshotDir, files[0]!),\n \"utf-8\",\n );\n return JSON.parse(raw) as SpendBrief;\n } catch {\n return null;\n }\n}\n"],"mappings":";;;AAWA,YAAYA,SAAQ;;;ACXpB,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AAoBb,SAAS,iBAAiB,aAA8B;AAC7D,QAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,SAAY,UAAK,MAAM,YAAY;AACrC;AAGO,SAAS,eAAe,aAA8B;AAC3D,SAAY,UAAK,iBAAiB,WAAW,GAAG,MAAM;AACxD;AA2CO,SAAS,kBAAkB,aAA4C;AAC5E,QAAM,aAAkB,UAAK,iBAAiB,WAAW,GAAG,aAAa;AACzE,MAAI;AACF,UAAM,MAAS,gBAAa,YAAY,OAAO;AAC/C,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBACd,QACA,aACM;AACN,QAAM,MAAM,iBAAiB,WAAW;AACxC,EAAG,aAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACrC,SAAO,aAAY,oBAAI,KAAK,GAAE,YAAY;AAC1C,QAAM,aAAkB,UAAK,KAAK,aAAa;AAC/C,EAAG,iBAAc,YAAY,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,MAAM,OAAO;AAC9E;AAgBO,SAAS,cAAc,aAA+B;AAC3D,SAAO,kBAAkB,WAAW,MAAM;AAC5C;;;AC9GA,YAAYC,SAAQ;AACpB,YAAYC,WAAU;;;ACDtB,YAAYC,SAAQ;AACpB,YAAYC,WAAU;AACtB,YAAY,SAAS;AAGrB,IAAM,YAAiB,cAAY,kBAAc,YAAY,GAAG,CAAC;AAQjE,IAAI,iBAAwD;AAMrD,SAAS,aAAa,aAAsD;AACjF,MAAI,eAAgB,QAAO;AAE3B,QAAM,WAAW,oBAAI,IAA+B;AAIpD,QAAM,aAAa;AAAA,IACZ,cAAQ,WAAW,qBAAqB;AAAA;AAAA,IACxC,cAAQ,WAAW,kBAAkB;AAAA;AAAA,EAC5C;AACA,aAAW,aAAa,YAAY;AAClC,QAAO,eAAW,SAAS,GAAG;AAC5B,uBAAiB,WAAW,QAAQ;AACpC;AAAA,IACF;AAAA,EACF;AAGA,MAAI,aAAa;AACf,UAAM,YAAiB,WAAK,aAAa,cAAc,eAAe;AACtE,QAAO,eAAW,SAAS,GAAG;AAC5B,uBAAiB,WAAW,QAAQ;AAAA,IACtC;AAAA,EACF;AAEA,mBAAiB;AACjB,SAAO;AACT;AAEA,SAAS,iBACP,UACA,UACM;AACN,MAAI;AACF,UAAM,MAAS,iBAAa,UAAU,OAAO;AAC7C,UAAM,OAAO,KAAK,MAAM,GAAG;AAC3B,eAAW,CAAC,IAAI,OAAO,KAAK,OAAO,QAAQ,KAAK,QAAQ,GAAG;AACzD,eAAS,IAAI,IAAI,EAAE,GAAG,SAAS,GAAG,CAAC;AAAA,IACrC;AAAA,EACF,QAAQ;AAAA,EAER;AACF;;;AD4CO,SAAS,mBACd,UACA,SACA,aACmB;AACnB,QAAM,WAAW,aAAa,WAAW;AACzC,QAAM,UAA6B,CAAC;AACpC,QAAM,WAAgB,eAAS,QAAQ;AAGvC,MAAI,aAAa,gBAAgB;AAC/B,QAAI;AACF,YAAM,MAAM,KAAK,MAAM,OAAO;AAI9B,YAAM,UAAU,oBAAI,IAAI;AAAA,QACtB,GAAG,OAAO,KAAK,IAAI,gBAAgB,CAAC,CAAC;AAAA,QACrC,GAAG,OAAO,KAAK,IAAI,mBAAmB,CAAC,CAAC;AAAA,MAC1C,CAAC;AAED,iBAAW,CAAC,EAAE,OAAO,KAAK,UAAU;AAClC,cAAM,UAAU,QAAQ,aAAa,OAAO,CAAC,MAAM,QAAQ,IAAI,CAAC,CAAC;AACjE,YAAI,QAAQ,SAAS,GAAG;AACtB,kBAAQ,KAAK;AAAA,YACX;AAAA,YACA,SAAS,CAAC,cAAc;AAAA,YACxB,SAAS,CAAC,mBAAmB,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,UACnD,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AACA,WAAO;AAAA,EACT;AAGA,MAAI,SAAS,WAAW,MAAM,GAAG;AAC/B,UAAM,UAAU,QACb,MAAM,IAAI,EACV,OAAO,CAAC,SAAS,KAAK,SAAS,GAAG,KAAK,CAAC,KAAK,WAAW,GAAG,CAAC,EAC5D,IAAI,CAAC,SAAS,KAAK,MAAM,GAAG,EAAE,CAAC,EAAG,KAAK,CAAC;AAE3C,eAAW,CAAC,EAAE,OAAO,KAAK,UAAU;AAClC,YAAM,UAAU,QAAQ,YAAY,OAAO,CAAC,MAAM,QAAQ,SAAS,CAAC,CAAC;AACrE,UAAI,QAAQ,SAAS,GAAG;AACtB,gBAAQ,KAAK;AAAA,UACX;AAAA,UACA,SAAS,CAAC,SAAS;AAAA,UACnB,SAAS,CAAC,gBAAgB,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,QAChD,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAGA,MAAI,6BAA6B,KAAK,QAAQ,GAAG;AAC/C,eAAW,CAAC,EAAE,OAAO,KAAK,UAAU;AAClC,YAAM,UAAU,QAAQ,eAAe;AAAA,QACrC,CAAC,YACC,QAAQ,SAAS,SAAS,OAAO,EAAE,KACnC,QAAQ,SAAS,SAAS,OAAO,EAAE,KACnC,QAAQ,SAAS,YAAY,OAAO,EAAE,KACtC,QAAQ,SAAS,YAAY,OAAO,EAAE;AAAA,MAC1C;AACA,UAAI,QAAQ,SAAS,GAAG;AACtB,gBAAQ,KAAK;AAAA,UACX;AAAA,UACA,SAAS,CAAC,aAAa;AAAA,UACvB,SAAS,CAAC,iBAAiB,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,QACjD,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;;;AExLA,YAAYC,SAAQ;AACpB,YAAYC,WAAU;AAiEf,SAAS,SAAS,OAAmB,aAA4B;AACtE,QAAM,UAAe,WAAK,eAAe,WAAW,GAAG,cAAc;AACrE,EAAG,cAAe,cAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,EAAG,mBAAe,SAAS,KAAK,UAAU,KAAK,IAAI,MAAM,OAAO;AAClE;;;AJhDA,SAAS,OAAa;AAEpB,MAAI;AACJ,MAAI;AACF,UAAM,QAAW,iBAAa,GAAG,OAAO;AACxC,YAAQ,KAAK,MAAM,KAAK;AAAA,EAC1B,QAAQ;AACN,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAEA,QAAM,cAAc,MAAM;AAG1B,MAAI,CAAC,cAAc,WAAW,GAAG;AAC/B,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAGA,QAAM,WAAW,MAAM,YAAY;AACnC,MAAI,CAAC,UAAU;AACb,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAGA,MAAI;AACJ,MAAI;AACF,cAAa,iBAAa,UAAU,OAAO;AAAA,EAC7C,QAAQ;AACN,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAGA,QAAM,WAAW,mBAAmB,UAAU,SAAS,WAAW;AAClE,MAAI,SAAS,WAAW,GAAG;AACzB,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAEA,QAAM,SAAS,kBAAkB,WAAW;AAC5C,QAAM,cAAwB,CAAC;AAE/B,aAAW,OAAO,UAAU;AAC1B,UAAM,YAAY,IAAI,QAAQ;AAG9B,QAAI,OAAO,SAAS,SAAS,EAAG;AAGhC,UAAM,UAA0B;AAAA,MAC9B;AAAA,MACA,aAAa,IAAI;AAAA,MACjB,WAAW;AAAA,MACX,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,IACxC;AAEA,WAAO,SAAS,SAAS,IAAI;AAC7B,gBAAY,KAAK,SAAS;AAG1B;AAAA,MACE;AAAA,QACE,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,WAAW,MAAM;AAAA,QACjB,MAAM;AAAA,QACN,MAAM;AAAA,UACJ;AAAA,UACA,SAAS,IAAI;AAAA,UACb,SAAS,IAAI;AAAA,UACb,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAGA,MAAI,YAAY,SAAS,GAAG;AAC1B,uBAAmB,QAAQ,WAAW;AAAA,EACxC;AAGA,MAAI,YAAY,SAAS,GAAG;AAC1B,UAAM,SAAS,YAAY;AAAA,MACzB,CAAC,OACC,oDAA6C,EAAE;AAAA,uBAA0B,EAAE;AAAA,IAC/E;AAEA,UAAM,SAAqB;AAAA,MACzB,oBAAoB;AAAA,QAClB,eAAe;AAAA,QACf,mBAAmB,OAAO,KAAK,MAAM;AAAA,MACvC;AAAA,IACF;AAEA,YAAQ,OAAO,MAAM,KAAK,UAAU,MAAM,CAAC;AAAA,EAC7C;AACF;AAEA,KAAK;","names":["fs","fs","path","fs","path","fs","path"]}
1	+ {"version":3,"sources":["../../src/hooks/on-file-change.ts","../../src/core/config.ts","../../src/detection/detector.ts","../../src/core/registry.ts","../../src/core/ledger.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/*\n PostToolUse hook (Edit\|Write) — fires when files are changed.\n \n Scans changed files for new service introductions:\n * - New dependencies in package.json\n * - New env vars in .env files\n * - New import statements in source files\n /\n\nimport as fs from \"node:fs\";\nimport type { HookInput, HookOutput } from \"../core/types.js\";\nimport {\n readProjectConfig,\n writeProjectConfig,\n isInitialized,\n} from \"../core/config.js\";\nimport { detectInFileChange } from \"../detection/detector.js\";\nimport { logEvent } from \"../core/ledger.js\";\nimport type { TrackedService } from \"../core/types.js\";\n\nfunction main(): void {\n // Read hook input from stdin\n let input: HookInput;\n try {\n const stdin = fs.readFileSync(0, \"utf-8\");\n input = JSON.parse(stdin) as HookInput;\n } catch {\n process.exit(0);\n return;\n }\n\n const projectRoot = input.cwd;\n\n // Guard: not initialized\n if (!isInitialized(projectRoot)) {\n process.exit(0);\n return;\n }\n\n // Get file path and content from tool input\n const filePath = input.tool_input?.file_path;\n if (!filePath) {\n process.exit(0);\n return;\n }\n\n // Read the current file content\n let content: string;\n try {\n content = fs.readFileSync(filePath, \"utf-8\");\n } catch {\n process.exit(0);\n return;\n }\n\n // Detect new services in this file change\n const detected = detectInFileChange(filePath, content, projectRoot);\n if (detected.length === 0) {\n process.exit(0);\n return;\n }\n\n const config = readProjectConfig(projectRoot)!;\n const newServices: string[] = [];\n\n for (const det of detected) {\n const serviceId = det.service.id;\n\n // Skip if already tracked\n if (config.services[serviceId]) continue;\n\n // Auto-register as a new tracked service (BLIND until configured)\n const tracked: TrackedService = {\n serviceId,\n detectedVia: det.sources,\n hasApiKey: false,\n firstDetected: new Date().toISOString(),\n };\n\n config.services[serviceId] = tracked;\n newServices.push(serviceId);\n\n // Log the detection\n logEvent(\n {\n timestamp: new Date().toISOString(),\n sessionId: input.session_id,\n type: \"service_detected\",\n data: {\n serviceId,\n sources: det.sources,\n details: det.details,\n file: filePath,\n },\n },\n projectRoot,\n );\n }\n\n // Save updated config\n if (newServices.length > 0) {\n writeProjectConfig(config, projectRoot);\n }\n\n // Alert about new services\n if (newServices.length > 0) {\n const alerts = newServices.map(\n (id) =>\n `[BURNWATCH] 🆕 New paid service detected: ${id}\\n Run 'burnwatch add ${id}' to configure budget and tracking.`,\n );\n\n const output: HookOutput = {\n hookSpecificOutput: {\n hookEventName: \"PostToolUse\",\n additionalContext: alerts.join(\"\\n\\n\"),\n },\n };\n\n process.stdout.write(JSON.stringify(output));\n }\n}\n\nmain();\n","import * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport * as os from \"node:os\";\nimport type { TrackedService } from \"./types.js\";\n\n/*\n Paths for burnwatch configuration and data.\n \n Hybrid model:\n * - Global config (API keys, service credentials): ~/.config/burnwatch/\n * - Project config (budgets, tracked services): .burnwatch/\n * - Project data (ledger, events, cache): .burnwatch/data/\n /\n\n/* Global config directory — stores API keys, never in project dirs. /\nexport function globalConfigDir(): string {\n const xdgConfig = process.env[\"XDG_CONFIG_HOME\"];\n if (xdgConfig) return path.join(xdgConfig, \"burnwatch\");\n return path.join(os.homedir(), \".config\", \"burnwatch\");\n}\n\n/* Project config directory — stores budgets, tracked services. /\nexport function projectConfigDir(projectRoot?: string): string {\n const root = projectRoot ?? process.cwd();\n return path.join(root, \".burnwatch\");\n}\n\n/* Project data directory — stores ledger, events, cache. /\nexport function projectDataDir(projectRoot?: string): string {\n return path.join(projectConfigDir(projectRoot), \"data\");\n}\n\n// --- Global config (API keys) ---\n\nexport interface GlobalConfig {\n services: Record<\n string,\n {\n apiKey?: string;\n token?: string;\n orgId?: string;\n }\n >;\n}\n\nexport function readGlobalConfig(): GlobalConfig {\n const configPath = path.join(globalConfigDir(), \"config.json\");\n try {\n const raw = fs.readFileSync(configPath, \"utf-8\");\n return JSON.parse(raw) as GlobalConfig;\n } catch {\n return { services: {} };\n }\n}\n\nexport function writeGlobalConfig(config: GlobalConfig): void {\n const dir = globalConfigDir();\n fs.mkdirSync(dir, { recursive: true });\n const configPath = path.join(dir, \"config.json\");\n fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + \"\\n\", \"utf-8\");\n // Restrict permissions — this file contains API keys\n fs.chmodSync(configPath, 0o600);\n}\n\n// --- Project config (budgets, tracked services) ---\n\nexport interface ProjectConfig {\n projectName: string;\n services: Record<string, TrackedService>;\n createdAt: string;\n updatedAt: string;\n}\n\nexport function readProjectConfig(projectRoot?: string): ProjectConfig \| null {\n const configPath = path.join(projectConfigDir(projectRoot), \"config.json\");\n try {\n const raw = fs.readFileSync(configPath, \"utf-8\");\n return JSON.parse(raw) as ProjectConfig;\n } catch {\n return null;\n }\n}\n\nexport function writeProjectConfig(\n config: ProjectConfig,\n projectRoot?: string,\n): void {\n const dir = projectConfigDir(projectRoot);\n fs.mkdirSync(dir, { recursive: true });\n config.updatedAt = new Date().toISOString();\n const configPath = path.join(dir, \"config.json\");\n fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + \"\\n\", \"utf-8\");\n}\n\n/* Ensure all project directories exist. /\nexport function ensureProjectDirs(projectRoot?: string): void {\n const dirs = [\n projectConfigDir(projectRoot),\n projectDataDir(projectRoot),\n path.join(projectDataDir(projectRoot), \"cache\"),\n path.join(projectDataDir(projectRoot), \"snapshots\"),\n ];\n for (const dir of dirs) {\n fs.mkdirSync(dir, { recursive: true });\n }\n}\n\n/* Check if burnwatch is initialized in the given project. /\nexport function isInitialized(projectRoot?: string): boolean {\n return readProjectConfig(projectRoot) !== null;\n}\n","import as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { loadRegistry } from \"../core/registry.js\";\nimport type { ServiceDefinition, DetectionSource } from \"../core/types.js\";\n\nexport interface DetectionResult {\n service: ServiceDefinition;\n sources: DetectionSource[];\n details: string[];\n}\n\n/*\n Run all detection surfaces against the current project.\n * Returns services detected via any combination of:\n * - package.json dependencies (recursive — finds monorepo subdirectories)\n * - environment variable patterns (process.env + .env* files recursive)\n * - import statement scanning (recursive from project root)\n * - (prompt mention scanning is handled separately in hooks)\n /\nexport function detectServices(projectRoot: string): DetectionResult[] {\n const registry = loadRegistry(projectRoot);\n const results = new Map<string, DetectionResult>();\n\n // Surface 1: Package manifest scanning (recursive — finds all package.json files)\n const pkgDeps = scanAllPackageJsons(projectRoot);\n for (const [serviceId, service] of registry) {\n const matchedPkgs = service.packageNames.filter((pkg) =>\n pkgDeps.has(pkg),\n );\n if (matchedPkgs.length > 0) {\n getOrCreate(results, serviceId, service).sources.push(\"package_json\");\n getOrCreate(results, serviceId, service).details.push(\n `package.json: ${matchedPkgs.join(\", \")}`,\n );\n }\n }\n\n // Surface 2: Environment variable pattern matching\n // Check both process.env AND .env files in the project tree\n const envVars = collectEnvVars(projectRoot);\n for (const [serviceId, service] of registry) {\n const matchedEnvs = service.envPatterns.filter((pattern) =>\n envVars.has(pattern),\n );\n if (matchedEnvs.length > 0) {\n getOrCreate(results, serviceId, service).sources.push(\"env_var\");\n getOrCreate(results, serviceId, service).details.push(\n `env vars: ${matchedEnvs.join(\", \")}`,\n );\n }\n }\n\n // Surface 3: Import statement analysis (recursive from project root)\n const importHits = scanImports(projectRoot);\n for (const [serviceId, service] of registry) {\n const matchedImports = service.importPatterns.filter((pattern) =>\n importHits.has(pattern),\n );\n if (matchedImports.length > 0) {\n if (\n !getOrCreate(results, serviceId, service).sources.includes(\n \"import_scan\",\n )\n ) {\n getOrCreate(results, serviceId, service).sources.push(\"import_scan\");\n getOrCreate(results, serviceId, service).details.push(\n `imports: ${matchedImports.join(\", \")}`,\n );\n }\n }\n }\n\n return Array.from(results.values());\n}\n\n/*\n Detect services mentioned in a prompt string.\n * Used by the UserPromptSubmit hook.\n /\nexport function detectMentions(\n prompt: string,\n projectRoot?: string,\n): DetectionResult[] {\n const registry = loadRegistry(projectRoot);\n const results: DetectionResult[] = [];\n const promptLower = prompt.toLowerCase();\n\n for (const [, service] of registry) {\n const matched = service.mentionKeywords.some((keyword) =>\n promptLower.includes(keyword.toLowerCase()),\n );\n if (matched) {\n results.push({\n service,\n sources: [\"prompt_mention\"],\n details: [`mentioned in prompt`],\n });\n }\n }\n\n return results;\n}\n\n/\n Detect new services introduced in a file change.\n * Used by the PostToolUse hook for Write/Edit events.\n /\nexport function detectInFileChange(\n filePath: string,\n content: string,\n projectRoot?: string,\n): DetectionResult[] {\n const registry = loadRegistry(projectRoot);\n const results: DetectionResult[] = [];\n const fileName = path.basename(filePath);\n\n // Check if it's a package.json change\n if (fileName === \"package.json\") {\n try {\n const pkg = JSON.parse(content) as {\n dependencies?: Record<string, string>;\n devDependencies?: Record<string, string>;\n };\n const allDeps = new Set([\n ...Object.keys(pkg.dependencies ?? {}),\n ...Object.keys(pkg.devDependencies ?? {}),\n ]);\n\n for (const [, service] of registry) {\n const matched = service.packageNames.filter((p) => allDeps.has(p));\n if (matched.length > 0) {\n results.push({\n service,\n sources: [\"package_json\"],\n details: [`new dependency: ${matched.join(\", \")}`],\n });\n }\n }\n } catch {\n // Not valid JSON, skip\n }\n return results;\n }\n\n // Check if it's an env file change\n if (fileName.startsWith(\".env\")) {\n const envKeys = content\n .split(\"\\n\")\n .filter((line) => line.includes(\"=\") && !line.startsWith(\"#\"))\n .map((line) => line.split(\"=\")[0]!.trim());\n\n for (const [, service] of registry) {\n const matched = service.envPatterns.filter((p) => envKeys.includes(p));\n if (matched.length > 0) {\n results.push({\n service,\n sources: [\"env_var\"],\n details: [`new env var: ${matched.join(\", \")}`],\n });\n }\n }\n return results;\n }\n\n // Check for import statements in source files\n if (/\\.(ts\|tsx\|js\|jsx\|mjs\|cjs)$/.test(filePath)) {\n for (const [, service] of registry) {\n const matched = service.importPatterns.filter(\n (pattern) =>\n content.includes(`from \"${pattern}`) \|\|\n content.includes(`from '${pattern}`) \|\|\n content.includes(`require(\"${pattern}`) \|\|\n content.includes(`require('${pattern}`),\n );\n if (matched.length > 0) {\n results.push({\n service,\n sources: [\"import_scan\"],\n details: [`import added: ${matched.join(\", \")}`],\n });\n }\n }\n }\n\n return results;\n}\n\n// --- Helpers ---\n\nfunction getOrCreate(\n map: Map<string, DetectionResult>,\n serviceId: string,\n service: ServiceDefinition,\n): DetectionResult {\n let result = map.get(serviceId);\n if (!result) {\n result = { service, sources: [], details: [] };\n map.set(serviceId, result);\n }\n return result;\n}\n\n/\n Recursively find and scan ALL package.json files in the project tree.\n * Handles monorepos where dependencies live in subdirectories.\n /\nfunction scanAllPackageJsons(projectRoot: string): Set<string> {\n const deps = new Set<string>();\n const pkgFiles = findFiles(projectRoot, \"package.json\", 4);\n\n for (const pkgPath of pkgFiles) {\n try {\n const raw = fs.readFileSync(pkgPath, \"utf-8\");\n const pkg = JSON.parse(raw) as {\n dependencies?: Record<string, string>;\n devDependencies?: Record<string, string>;\n };\n for (const name of Object.keys(pkg.dependencies ?? {})) deps.add(name);\n for (const name of Object.keys(pkg.devDependencies ?? {})) deps.add(name);\n } catch {\n // Skip malformed package.json\n }\n }\n\n return deps;\n}\n\n/\n Collect environment variable names from both process.env\n * and all .env* files found recursively in the project tree.\n /\nfunction collectEnvVars(projectRoot: string): Set<string> {\n const envVars = new Set(Object.keys(process.env));\n\n // Find all .env files in the project tree\n const envFiles = findEnvFiles(projectRoot, 3);\n\n for (const envFile of envFiles) {\n try {\n const content = fs.readFileSync(envFile, \"utf-8\");\n const keys = content\n .split(\"\\n\")\n .filter((line) => line.includes(\"=\") && !line.startsWith(\"#\"))\n .map((line) => line.split(\"=\")[0]!.trim())\n .filter(Boolean);\n\n for (const key of keys) {\n envVars.add(key);\n }\n } catch {\n // Skip unreadable files\n }\n }\n\n return envVars;\n}\n\n/*\n Find all .env* files recursively (but not in node_modules, .git, dist, etc.)\n /\nfunction findEnvFiles(dir: string, maxDepth: number): string[] {\n const results: string[] = [];\n if (maxDepth <= 0) return results;\n\n try {\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n for (const entry of entries) {\n if (entry.name === \"node_modules\" \|\| entry.name === \".git\" \|\| entry.name === \"dist\") continue;\n const fullPath = path.join(dir, entry.name);\n if (entry.isDirectory()) {\n results.push(...findEnvFiles(fullPath, maxDepth - 1));\n } else if (entry.name.startsWith(\".env\")) {\n results.push(fullPath);\n }\n }\n } catch {\n // Skip unreadable directories\n }\n\n return results;\n}\n\n/\n Find files with a specific name recursively.\n * Used to find package.json files across monorepo subdirectories.\n /\nfunction findFiles(dir: string, fileName: string, maxDepth: number): string[] {\n const results: string[] = [];\n if (maxDepth <= 0) return results;\n\n try {\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n for (const entry of entries) {\n if (entry.name === \"node_modules\" \|\| entry.name === \".git\" \|\| entry.name === \"dist\") continue;\n const fullPath = path.join(dir, entry.name);\n if (entry.isDirectory()) {\n results.push(...findFiles(fullPath, fileName, maxDepth - 1));\n } else if (entry.name === fileName) {\n results.push(fullPath);\n }\n }\n } catch {\n // Skip unreadable directories\n }\n\n return results;\n}\n\n/\n Lightweight import scanning.\n * Recursively scans the project for import/require statements.\n * Looks in src/, app/, lib/, pages/, and any other code directories.\n * Does NOT do a full AST parse — just string matching.\n /\nfunction scanImports(projectRoot: string): Set<string> {\n const imports = new Set<string>();\n\n // Scan common code directories + the root itself for source files\n const codeDirs = [\"src\", \"app\", \"lib\", \"pages\", \"components\", \"utils\", \"services\", \"hooks\"];\n const dirsToScan: string[] = [];\n\n for (const dir of codeDirs) {\n const fullPath = path.join(projectRoot, dir);\n if (fs.existsSync(fullPath)) {\n dirsToScan.push(fullPath);\n }\n }\n\n // Also check subdirectories (monorepo support)\n try {\n const entries = fs.readdirSync(projectRoot, { withFileTypes: true });\n for (const entry of entries) {\n if (!entry.isDirectory()) continue;\n if (entry.name === \"node_modules\" \|\| entry.name === \".git\" \|\| entry.name === \"dist\" \|\| entry.name.startsWith(\".\")) continue;\n\n // Check if this subdirectory has its own package.json (monorepo package)\n const subPkgPath = path.join(projectRoot, entry.name, \"package.json\");\n if (fs.existsSync(subPkgPath)) {\n // Scan this subpackage's code directories\n for (const dir of codeDirs) {\n const fullPath = path.join(projectRoot, entry.name, dir);\n if (fs.existsSync(fullPath)) {\n dirsToScan.push(fullPath);\n }\n }\n }\n }\n } catch {\n // Skip if root is unreadable\n }\n\n for (const dir of dirsToScan) {\n const files = walkDir(dir, /\\.(ts\|tsx\|js\|jsx\|mjs\|cjs)$/);\n for (const file of files) {\n try {\n const content = fs.readFileSync(file, \"utf-8\");\n // Match: import ... from \"package\" or require(\"package\")\n const importRegex =\n /(?:from\\s+[\"']\|require\\s\\(\\s[\"'])([^./][^\"']?)(?:[\"'])/g;\n let match: RegExpExecArray \| null;\n while ((match = importRegex.exec(content)) !== null) {\n const pkg = match[1];\n if (pkg) {\n // Normalize scoped packages: @scope/pkg/subpath -> @scope/pkg\n const parts = pkg.split(\"/\");\n if (parts[0]?.startsWith(\"@\") && parts.length >= 2) {\n imports.add(`${parts[0]}/${parts[1]}`);\n } else if (parts[0]) {\n imports.add(parts[0]);\n }\n }\n }\n } catch {\n // Skip unreadable files\n }\n }\n }\n\n return imports;\n}\n\n/** Recursively walk a directory, returning files matching the pattern. /\nfunction walkDir(dir: string, pattern: RegExp, maxDepth = 5): string[] {\n const results: string[] = [];\n if (maxDepth <= 0) return results;\n\n try {\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n for (const entry of entries) {\n if (entry.name.startsWith(\".\") \|\| entry.name === \"node_modules\") continue;\n const fullPath = path.join(dir, entry.name);\n if (entry.isDirectory()) {\n results.push(...walkDir(fullPath, pattern, maxDepth - 1));\n } else if (pattern.test(entry.name)) {\n results.push(fullPath);\n }\n }\n } catch {\n // Skip unreadable directories\n }\n\n return results;\n}\n","import as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport * as url from \"node:url\";\nimport type { ServiceDefinition } from \"./types.js\";\n\nconst __dirname = path.dirname(url.fileURLToPath(import.meta.url));\n\ninterface RegistryFile {\n version: string;\n lastUpdated: string;\n services: Record<string, ServiceDefinition>;\n}\n\nlet cachedRegistry: Map<string, ServiceDefinition> \| null = null;\n\n/*\n Load the service registry.\n * Checks project-local override first, then falls back to bundled registry.\n /\nexport function loadRegistry(projectRoot?: string): Map<string, ServiceDefinition> {\n if (cachedRegistry) return cachedRegistry;\n\n const registry = new Map<string, ServiceDefinition>();\n\n // Load bundled registry (shipped with package)\n // Try multiple possible locations — depends on whether running from src/ or dist/\n const candidates = [\n path.resolve(__dirname, \"../../registry.json\"), // from src/core/\n path.resolve(__dirname, \"../registry.json\"), // from dist/\n ];\n for (const candidate of candidates) {\n if (fs.existsSync(candidate)) {\n loadRegistryFile(candidate, registry);\n break;\n }\n }\n\n // Load project-local override (if exists)\n if (projectRoot) {\n const localPath = path.join(projectRoot, \".burnwatch\", \"registry.json\");\n if (fs.existsSync(localPath)) {\n loadRegistryFile(localPath, registry);\n }\n }\n\n cachedRegistry = registry;\n return registry;\n}\n\nfunction loadRegistryFile(\n filePath: string,\n registry: Map<string, ServiceDefinition>,\n): void {\n try {\n const raw = fs.readFileSync(filePath, \"utf-8\");\n const data = JSON.parse(raw) as RegistryFile;\n for (const [id, service] of Object.entries(data.services)) {\n registry.set(id, { ...service, id });\n }\n } catch {\n // Silently skip missing or malformed registry files\n }\n}\n\n/* Clear the cached registry (for testing). /\nexport function clearRegistryCache(): void {\n cachedRegistry = null;\n}\n\n/* Get a single service definition by ID. /\nexport function getService(\n id: string,\n projectRoot?: string,\n): ServiceDefinition \| undefined {\n return loadRegistry(projectRoot).get(id);\n}\n\n/* Get all service definitions. /\nexport function getAllServices(\n projectRoot?: string,\n): ServiceDefinition[] {\n return Array.from(loadRegistry(projectRoot).values());\n}\n","import as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport type { SpendBrief, SpendEvent } from \"./types.js\";\nimport { CONFIDENCE_BADGES } from \"./types.js\";\nimport { projectConfigDir, projectDataDir } from \"./config.js\";\n\n/*\n Write the spend ledger as a human-readable markdown file.\n * Designed to be git-committable and readable in 10 seconds.\n /\nexport function writeLedger(brief: SpendBrief, projectRoot?: string): void {\n const now = new Date();\n const lines: string[] = [];\n\n lines.push(`# Burnwatch Ledger — ${brief.projectName}`);\n lines.push(`Last updated: ${now.toISOString()}`);\n lines.push(\"\");\n lines.push(`## This Month (${brief.period})`);\n lines.push(\"\");\n lines.push(\"\| Service \| Spend \| Conf \| Budget \| Status \|\");\n lines.push(\"\|---------\|-------\|------\|--------\|--------\|\");\n\n for (const svc of brief.services) {\n const spendStr = svc.isEstimate\n ? `~$${svc.spend.toFixed(2)}`\n : `$${svc.spend.toFixed(2)}`;\n const badge = CONFIDENCE_BADGES[svc.tier];\n const budgetStr = svc.budget ? `$${svc.budget}` : \"—\";\n\n lines.push(\n `\| ${svc.serviceId} \| ${spendStr} \| ${badge} \| ${budgetStr} \| ${svc.statusLabel} \|`,\n );\n }\n\n lines.push(\"\");\n const totalStr = brief.totalIsEstimate\n ? `~$${brief.totalSpend.toFixed(2)}`\n : `$${brief.totalSpend.toFixed(2)}`;\n const marginStr =\n brief.estimateMargin > 0\n ? ` (±$${brief.estimateMargin.toFixed(0)} estimated margin)`\n : \"\";\n lines.push(`## TOTAL: ${totalStr}${marginStr}`);\n lines.push(`## Untracked services: ${brief.untrackedCount}`);\n lines.push(\"\");\n\n if (brief.alerts.length > 0) {\n lines.push(\"## Alerts\");\n for (const alert of brief.alerts) {\n const icon = alert.severity === \"critical\" ? \"🚨\" : \"⚠️\";\n lines.push(`- ${icon} ${alert.message}`);\n }\n lines.push(\"\");\n }\n\n const ledgerPath = path.join(\n projectConfigDir(projectRoot),\n \"spend-ledger.md\",\n );\n fs.mkdirSync(path.dirname(ledgerPath), { recursive: true });\n fs.writeFileSync(ledgerPath, lines.join(\"\\n\") + \"\\n\", \"utf-8\");\n}\n\n/\n Append an event to the append-only event log.\n /\nexport function logEvent(event: SpendEvent, projectRoot?: string): void {\n const logPath = path.join(projectDataDir(projectRoot), \"events.jsonl\");\n fs.mkdirSync(path.dirname(logPath), { recursive: true });\n fs.appendFileSync(logPath, JSON.stringify(event) + \"\\n\", \"utf-8\");\n}\n\n/\n Read recent events from the event log.\n /\nexport function readRecentEvents(\n count: number,\n projectRoot?: string,\n): SpendEvent[] {\n const logPath = path.join(projectDataDir(projectRoot), \"events.jsonl\");\n try {\n const raw = fs.readFileSync(logPath, \"utf-8\");\n const lines = raw.trim().split(\"\\n\").filter(Boolean);\n return lines\n .slice(-count)\n .map((line) => JSON.parse(line) as SpendEvent);\n } catch {\n return [];\n }\n}\n\n/\n Save a spend snapshot to the snapshots directory.\n * Used for delta computation across sessions.\n /\nexport function saveSnapshot(brief: SpendBrief, projectRoot?: string): void {\n const snapshotDir = path.join(projectDataDir(projectRoot), \"snapshots\");\n fs.mkdirSync(snapshotDir, { recursive: true });\n const filename = `snapshot-${new Date().toISOString().replace(/[:.]/g, \"-\")}.json`;\n fs.writeFileSync(\n path.join(snapshotDir, filename),\n JSON.stringify(brief, null, 2) + \"\\n\",\n \"utf-8\",\n );\n}\n\n/\n Read the most recent snapshot, if any.\n */\nexport function readLatestSnapshot(\n projectRoot?: string,\n): SpendBrief \| null {\n const snapshotDir = path.join(projectDataDir(projectRoot), \"snapshots\");\n try {\n const files = fs\n .readdirSync(snapshotDir)\n .filter((f) => f.startsWith(\"snapshot-\") && f.endsWith(\".json\"))\n .sort()\n .reverse();\n\n if (files.length === 0) return null;\n\n const raw = fs.readFileSync(\n path.join(snapshotDir, files[0]!),\n \"utf-8\",\n );\n return JSON.parse(raw) as SpendBrief;\n } catch {\n return null;\n }\n}\n"],"mappings":";;;AAWA,YAAYA,SAAQ;;;ACXpB,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AAoBb,SAAS,iBAAiB,aAA8B;AAC7D,QAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,SAAY,UAAK,MAAM,YAAY;AACrC;AAGO,SAAS,eAAe,aAA8B;AAC3D,SAAY,UAAK,iBAAiB,WAAW,GAAG,MAAM;AACxD;AA2CO,SAAS,kBAAkB,aAA4C;AAC5E,QAAM,aAAkB,UAAK,iBAAiB,WAAW,GAAG,aAAa;AACzE,MAAI;AACF,UAAM,MAAS,gBAAa,YAAY,OAAO;AAC/C,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBACd,QACA,aACM;AACN,QAAM,MAAM,iBAAiB,WAAW;AACxC,EAAG,aAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACrC,SAAO,aAAY,oBAAI,KAAK,GAAE,YAAY;AAC1C,QAAM,aAAkB,UAAK,KAAK,aAAa;AAC/C,EAAG,iBAAc,YAAY,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,MAAM,OAAO;AAC9E;AAgBO,SAAS,cAAc,aAA+B;AAC3D,SAAO,kBAAkB,WAAW,MAAM;AAC5C;;;AC9GA,YAAYC,SAAQ;AACpB,YAAYC,WAAU;;;ACDtB,YAAYC,SAAQ;AACpB,YAAYC,WAAU;AACtB,YAAY,SAAS;AAGrB,IAAM,YAAiB,cAAY,kBAAc,YAAY,GAAG,CAAC;AAQjE,IAAI,iBAAwD;AAMrD,SAAS,aAAa,aAAsD;AACjF,MAAI,eAAgB,QAAO;AAE3B,QAAM,WAAW,oBAAI,IAA+B;AAIpD,QAAM,aAAa;AAAA,IACZ,cAAQ,WAAW,qBAAqB;AAAA;AAAA,IACxC,cAAQ,WAAW,kBAAkB;AAAA;AAAA,EAC5C;AACA,aAAW,aAAa,YAAY;AAClC,QAAO,eAAW,SAAS,GAAG;AAC5B,uBAAiB,WAAW,QAAQ;AACpC;AAAA,IACF;AAAA,EACF;AAGA,MAAI,aAAa;AACf,UAAM,YAAiB,WAAK,aAAa,cAAc,eAAe;AACtE,QAAO,eAAW,SAAS,GAAG;AAC5B,uBAAiB,WAAW,QAAQ;AAAA,IACtC;AAAA,EACF;AAEA,mBAAiB;AACjB,SAAO;AACT;AAEA,SAAS,iBACP,UACA,UACM;AACN,MAAI;AACF,UAAM,MAAS,iBAAa,UAAU,OAAO;AAC7C,UAAM,OAAO,KAAK,MAAM,GAAG;AAC3B,eAAW,CAAC,IAAI,OAAO,KAAK,OAAO,QAAQ,KAAK,QAAQ,GAAG;AACzD,eAAS,IAAI,IAAI,EAAE,GAAG,SAAS,GAAG,CAAC;AAAA,IACrC;AAAA,EACF,QAAQ;AAAA,EAER;AACF;;;AD6CO,SAAS,mBACd,UACA,SACA,aACmB;AACnB,QAAM,WAAW,aAAa,WAAW;AACzC,QAAM,UAA6B,CAAC;AACpC,QAAM,WAAgB,eAAS,QAAQ;AAGvC,MAAI,aAAa,gBAAgB;AAC/B,QAAI;AACF,YAAM,MAAM,KAAK,MAAM,OAAO;AAI9B,YAAM,UAAU,oBAAI,IAAI;AAAA,QACtB,GAAG,OAAO,KAAK,IAAI,gBAAgB,CAAC,CAAC;AAAA,QACrC,GAAG,OAAO,KAAK,IAAI,mBAAmB,CAAC,CAAC;AAAA,MAC1C,CAAC;AAED,iBAAW,CAAC,EAAE,OAAO,KAAK,UAAU;AAClC,cAAM,UAAU,QAAQ,aAAa,OAAO,CAAC,MAAM,QAAQ,IAAI,CAAC,CAAC;AACjE,YAAI,QAAQ,SAAS,GAAG;AACtB,kBAAQ,KAAK;AAAA,YACX;AAAA,YACA,SAAS,CAAC,cAAc;AAAA,YACxB,SAAS,CAAC,mBAAmB,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,UACnD,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AACA,WAAO;AAAA,EACT;AAGA,MAAI,SAAS,WAAW,MAAM,GAAG;AAC/B,UAAM,UAAU,QACb,MAAM,IAAI,EACV,OAAO,CAAC,SAAS,KAAK,SAAS,GAAG,KAAK,CAAC,KAAK,WAAW,GAAG,CAAC,EAC5D,IAAI,CAAC,SAAS,KAAK,MAAM,GAAG,EAAE,CAAC,EAAG,KAAK,CAAC;AAE3C,eAAW,CAAC,EAAE,OAAO,KAAK,UAAU;AAClC,YAAM,UAAU,QAAQ,YAAY,OAAO,CAAC,MAAM,QAAQ,SAAS,CAAC,CAAC;AACrE,UAAI,QAAQ,SAAS,GAAG;AACtB,gBAAQ,KAAK;AAAA,UACX;AAAA,UACA,SAAS,CAAC,SAAS;AAAA,UACnB,SAAS,CAAC,gBAAgB,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,QAChD,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAGA,MAAI,6BAA6B,KAAK,QAAQ,GAAG;AAC/C,eAAW,CAAC,EAAE,OAAO,KAAK,UAAU;AAClC,YAAM,UAAU,QAAQ,eAAe;AAAA,QACrC,CAAC,YACC,QAAQ,SAAS,SAAS,OAAO,EAAE,KACnC,QAAQ,SAAS,SAAS,OAAO,EAAE,KACnC,QAAQ,SAAS,YAAY,OAAO,EAAE,KACtC,QAAQ,SAAS,YAAY,OAAO,EAAE;AAAA,MAC1C;AACA,UAAI,QAAQ,SAAS,GAAG;AACtB,gBAAQ,KAAK;AAAA,UACX;AAAA,UACA,SAAS,CAAC,aAAa;AAAA,UACvB,SAAS,CAAC,iBAAiB,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,QACjD,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;;;AEzLA,YAAYC,SAAQ;AACpB,YAAYC,WAAU;AAiEf,SAAS,SAAS,OAAmB,aAA4B;AACtE,QAAM,UAAe,WAAK,eAAe,WAAW,GAAG,cAAc;AACrE,EAAG,cAAe,cAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,EAAG,mBAAe,SAAS,KAAK,UAAU,KAAK,IAAI,MAAM,OAAO;AAClE;;;AJhDA,SAAS,OAAa;AAEpB,MAAI;AACJ,MAAI;AACF,UAAM,QAAW,iBAAa,GAAG,OAAO;AACxC,YAAQ,KAAK,MAAM,KAAK;AAAA,EAC1B,QAAQ;AACN,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAEA,QAAM,cAAc,MAAM;AAG1B,MAAI,CAAC,cAAc,WAAW,GAAG;AAC/B,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAGA,QAAM,WAAW,MAAM,YAAY;AACnC,MAAI,CAAC,UAAU;AACb,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAGA,MAAI;AACJ,MAAI;AACF,cAAa,iBAAa,UAAU,OAAO;AAAA,EAC7C,QAAQ;AACN,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAGA,QAAM,WAAW,mBAAmB,UAAU,SAAS,WAAW;AAClE,MAAI,SAAS,WAAW,GAAG;AACzB,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAEA,QAAM,SAAS,kBAAkB,WAAW;AAC5C,QAAM,cAAwB,CAAC;AAE/B,aAAW,OAAO,UAAU;AAC1B,UAAM,YAAY,IAAI,QAAQ;AAG9B,QAAI,OAAO,SAAS,SAAS,EAAG;AAGhC,UAAM,UAA0B;AAAA,MAC9B;AAAA,MACA,aAAa,IAAI;AAAA,MACjB,WAAW;AAAA,MACX,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,IACxC;AAEA,WAAO,SAAS,SAAS,IAAI;AAC7B,gBAAY,KAAK,SAAS;AAG1B;AAAA,MACE;AAAA,QACE,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,WAAW,MAAM;AAAA,QACjB,MAAM;AAAA,QACN,MAAM;AAAA,UACJ;AAAA,UACA,SAAS,IAAI;AAAA,UACb,SAAS,IAAI;AAAA,UACb,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAGA,MAAI,YAAY,SAAS,GAAG;AAC1B,uBAAmB,QAAQ,WAAW;AAAA,EACxC;AAGA,MAAI,YAAY,SAAS,GAAG;AAC1B,UAAM,SAAS,YAAY;AAAA,MACzB,CAAC,OACC,oDAA6C,EAAE;AAAA,uBAA0B,EAAE;AAAA,IAC/E;AAEA,UAAM,SAAqB;AAAA,MACzB,oBAAoB;AAAA,QAClB,eAAe;AAAA,QACf,mBAAmB,OAAO,KAAK,MAAM;AAAA,MACvC;AAAA,IACF;AAEA,YAAQ,OAAO,MAAM,KAAK,UAAU,MAAM,CAAC;AAAA,EAC7C;AACF;AAEA,KAAK;","names":["fs","fs","path","fs","path","fs","path"]}

package/dist/hooks/on-prompt.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../../src/hooks/on-prompt.ts","../../src/core/config.ts","../../src/detection/detector.ts","../../src/core/registry.ts","../../src/core/ledger.ts","../../src/core/types.ts","../../src/core/brief.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/*\n UserPromptSubmit hook — fires when the user submits a prompt.\n \n Scans the prompt text for service mentions and injects a spend card\n * for any tracked service that's mentioned.\n /\n\nimport as fs from \"node:fs\";\nimport type { HookInput, HookOutput } from \"../core/types.js\";\nimport { readProjectConfig, isInitialized } from \"../core/config.js\";\nimport { detectMentions } from \"../detection/detector.js\";\nimport { readLatestSnapshot } from \"../core/ledger.js\";\nimport { formatSpendCard } from \"../core/brief.js\";\nimport { logEvent } from \"../core/ledger.js\";\n\nfunction main(): void {\n // Read hook input from stdin\n let input: HookInput;\n try {\n const stdin = fs.readFileSync(0, \"utf-8\");\n input = JSON.parse(stdin) as HookInput;\n } catch {\n process.exit(0);\n return;\n }\n\n const projectRoot = input.cwd;\n const prompt = input.prompt;\n\n // Guard: not initialized or no prompt\n if (!isInitialized(projectRoot) \|\| !prompt) {\n process.exit(0);\n return;\n }\n\n const config = readProjectConfig(projectRoot)!;\n\n // Detect service mentions in the prompt\n const mentions = detectMentions(prompt, projectRoot);\n if (mentions.length === 0) {\n process.exit(0);\n return;\n }\n\n // Get the latest snapshot for spend data\n const snapshot = readLatestSnapshot(projectRoot);\n\n // Build spend cards for mentioned services\n const cards: string[] = [];\n\n for (const mention of mentions) {\n const serviceId = mention.service.id;\n const trackedService = config.services[serviceId];\n\n // Find this service's snapshot data\n const serviceSnapshot = snapshot?.services.find(\n (s) => s.serviceId === serviceId,\n );\n\n if (serviceSnapshot) {\n cards.push(formatSpendCard(serviceSnapshot));\n } else if (trackedService) {\n // Service is tracked but no snapshot data — show what we know\n cards.push(\n `[BURNWATCH] ${serviceId} — tracked, no spend data yet. Budget: ${trackedService.budget ? `$${trackedService.budget}` : \"not set\"}`,\n );\n } else {\n // Service detected but not tracked — flag it\n cards.push(\n `[BURNWATCH] ${serviceId} — detected in project but NOT tracked. Run 'burnwatch add ${serviceId}' to configure.`,\n );\n }\n\n // Log the mention\n logEvent(\n {\n timestamp: new Date().toISOString(),\n sessionId: input.session_id,\n type: \"service_mentioned\",\n data: { serviceId, prompt: prompt.slice(0, 200) },\n },\n projectRoot,\n );\n }\n\n if (cards.length === 0) {\n process.exit(0);\n return;\n }\n\n // Output spend cards for injection into context\n const output: HookOutput = {\n hookSpecificOutput: {\n hookEventName: \"UserPromptSubmit\",\n additionalContext: cards.join(\"\\n\\n\"),\n },\n };\n\n process.stdout.write(JSON.stringify(output));\n}\n\nmain();\n","import * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport * as os from \"node:os\";\nimport type { TrackedService } from \"./types.js\";\n\n/*\n Paths for burnwatch configuration and data.\n \n Hybrid model:\n * - Global config (API keys, service credentials): ~/.config/burnwatch/\n * - Project config (budgets, tracked services): .burnwatch/\n * - Project data (ledger, events, cache): .burnwatch/data/\n /\n\n/* Global config directory — stores API keys, never in project dirs. /\nexport function globalConfigDir(): string {\n const xdgConfig = process.env[\"XDG_CONFIG_HOME\"];\n if (xdgConfig) return path.join(xdgConfig, \"burnwatch\");\n return path.join(os.homedir(), \".config\", \"burnwatch\");\n}\n\n/* Project config directory — stores budgets, tracked services. /\nexport function projectConfigDir(projectRoot?: string): string {\n const root = projectRoot ?? process.cwd();\n return path.join(root, \".burnwatch\");\n}\n\n/* Project data directory — stores ledger, events, cache. /\nexport function projectDataDir(projectRoot?: string): string {\n return path.join(projectConfigDir(projectRoot), \"data\");\n}\n\n// --- Global config (API keys) ---\n\nexport interface GlobalConfig {\n services: Record<\n string,\n {\n apiKey?: string;\n token?: string;\n orgId?: string;\n }\n >;\n}\n\nexport function readGlobalConfig(): GlobalConfig {\n const configPath = path.join(globalConfigDir(), \"config.json\");\n try {\n const raw = fs.readFileSync(configPath, \"utf-8\");\n return JSON.parse(raw) as GlobalConfig;\n } catch {\n return { services: {} };\n }\n}\n\nexport function writeGlobalConfig(config: GlobalConfig): void {\n const dir = globalConfigDir();\n fs.mkdirSync(dir, { recursive: true });\n const configPath = path.join(dir, \"config.json\");\n fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + \"\\n\", \"utf-8\");\n // Restrict permissions — this file contains API keys\n fs.chmodSync(configPath, 0o600);\n}\n\n// --- Project config (budgets, tracked services) ---\n\nexport interface ProjectConfig {\n projectName: string;\n services: Record<string, TrackedService>;\n createdAt: string;\n updatedAt: string;\n}\n\nexport function readProjectConfig(projectRoot?: string): ProjectConfig \| null {\n const configPath = path.join(projectConfigDir(projectRoot), \"config.json\");\n try {\n const raw = fs.readFileSync(configPath, \"utf-8\");\n return JSON.parse(raw) as ProjectConfig;\n } catch {\n return null;\n }\n}\n\nexport function writeProjectConfig(\n config: ProjectConfig,\n projectRoot?: string,\n): void {\n const dir = projectConfigDir(projectRoot);\n fs.mkdirSync(dir, { recursive: true });\n config.updatedAt = new Date().toISOString();\n const configPath = path.join(dir, \"config.json\");\n fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + \"\\n\", \"utf-8\");\n}\n\n/* Ensure all project directories exist. /\nexport function ensureProjectDirs(projectRoot?: string): void {\n const dirs = [\n projectConfigDir(projectRoot),\n projectDataDir(projectRoot),\n path.join(projectDataDir(projectRoot), \"cache\"),\n path.join(projectDataDir(projectRoot), \"snapshots\"),\n ];\n for (const dir of dirs) {\n fs.mkdirSync(dir, { recursive: true });\n }\n}\n\n/* Check if burnwatch is initialized in the given project. /\nexport function isInitialized(projectRoot?: string): boolean {\n return readProjectConfig(projectRoot) !== null;\n}\n","import as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { loadRegistry } from \"../core/registry.js\";\nimport type { ServiceDefinition, DetectionSource } from \"../core/types.js\";\n\nexport interface DetectionResult {\n service: ServiceDefinition;\n sources: DetectionSource[];\n details: string[];\n}\n\n/*\n Run all detection surfaces against the current project.\n * Returns services detected via any combination of:\n * - package.json dependencies\n * - environment variable patterns\n * - import statement scanning\n * - (prompt mention scanning is handled separately in hooks)\n /\nexport function detectServices(projectRoot: string): DetectionResult[] {\n const registry = loadRegistry(projectRoot);\n const results = new Map<string, DetectionResult>();\n\n // Surface 1: Package manifest scanning\n const pkgDeps = scanPackageJson(projectRoot);\n for (const [serviceId, service] of registry) {\n const matchedPkgs = service.packageNames.filter((pkg) =>\n pkgDeps.has(pkg),\n );\n if (matchedPkgs.length > 0) {\n getOrCreate(results, serviceId, service).sources.push(\"package_json\");\n getOrCreate(results, serviceId, service).details.push(\n `package.json: ${matchedPkgs.join(\", \")}`,\n );\n }\n }\n\n // Surface 2: Environment variable pattern matching\n const envVars = new Set(Object.keys(process.env));\n for (const [serviceId, service] of registry) {\n const matchedEnvs = service.envPatterns.filter((pattern) =>\n envVars.has(pattern),\n );\n if (matchedEnvs.length > 0) {\n getOrCreate(results, serviceId, service).sources.push(\"env_var\");\n getOrCreate(results, serviceId, service).details.push(\n `env vars: ${matchedEnvs.join(\", \")}`,\n );\n }\n }\n\n // Surface 3: Import statement analysis (lightweight — scan key files only)\n const importHits = scanImports(projectRoot);\n for (const [serviceId, service] of registry) {\n const matchedImports = service.importPatterns.filter((pattern) =>\n importHits.has(pattern),\n );\n if (matchedImports.length > 0) {\n if (\n !getOrCreate(results, serviceId, service).sources.includes(\n \"import_scan\",\n )\n ) {\n getOrCreate(results, serviceId, service).sources.push(\"import_scan\");\n getOrCreate(results, serviceId, service).details.push(\n `imports: ${matchedImports.join(\", \")}`,\n );\n }\n }\n }\n\n return Array.from(results.values());\n}\n\n/\n Detect services mentioned in a prompt string.\n * Used by the UserPromptSubmit hook.\n /\nexport function detectMentions(\n prompt: string,\n projectRoot?: string,\n): DetectionResult[] {\n const registry = loadRegistry(projectRoot);\n const results: DetectionResult[] = [];\n const promptLower = prompt.toLowerCase();\n\n for (const [, service] of registry) {\n const matched = service.mentionKeywords.some((keyword) =>\n promptLower.includes(keyword.toLowerCase()),\n );\n if (matched) {\n results.push({\n service,\n sources: [\"prompt_mention\"],\n details: [`mentioned in prompt`],\n });\n }\n }\n\n return results;\n}\n\n/\n Detect new services introduced in a file change.\n * Used by the PostToolUse hook for Write/Edit events.\n /\nexport function detectInFileChange(\n filePath: string,\n content: string,\n projectRoot?: string,\n): DetectionResult[] {\n const registry = loadRegistry(projectRoot);\n const results: DetectionResult[] = [];\n const fileName = path.basename(filePath);\n\n // Check if it's a package.json change\n if (fileName === \"package.json\") {\n try {\n const pkg = JSON.parse(content) as {\n dependencies?: Record<string, string>;\n devDependencies?: Record<string, string>;\n };\n const allDeps = new Set([\n ...Object.keys(pkg.dependencies ?? {}),\n ...Object.keys(pkg.devDependencies ?? {}),\n ]);\n\n for (const [, service] of registry) {\n const matched = service.packageNames.filter((p) => allDeps.has(p));\n if (matched.length > 0) {\n results.push({\n service,\n sources: [\"package_json\"],\n details: [`new dependency: ${matched.join(\", \")}`],\n });\n }\n }\n } catch {\n // Not valid JSON, skip\n }\n return results;\n }\n\n // Check if it's an env file change\n if (fileName.startsWith(\".env\")) {\n const envKeys = content\n .split(\"\\n\")\n .filter((line) => line.includes(\"=\") && !line.startsWith(\"#\"))\n .map((line) => line.split(\"=\")[0]!.trim());\n\n for (const [, service] of registry) {\n const matched = service.envPatterns.filter((p) => envKeys.includes(p));\n if (matched.length > 0) {\n results.push({\n service,\n sources: [\"env_var\"],\n details: [`new env var: ${matched.join(\", \")}`],\n });\n }\n }\n return results;\n }\n\n // Check for import statements in source files\n if (/\\.(ts\|tsx\|js\|jsx\|mjs\|cjs)$/.test(filePath)) {\n for (const [, service] of registry) {\n const matched = service.importPatterns.filter(\n (pattern) =>\n content.includes(`from \"${pattern}`) \|\|\n content.includes(`from '${pattern}`) \|\|\n content.includes(`require(\"${pattern}`) \|\|\n content.includes(`require('${pattern}`),\n );\n if (matched.length > 0) {\n results.push({\n service,\n sources: [\"import_scan\"],\n details: [`import added: ${matched.join(\", \")}`],\n });\n }\n }\n }\n\n return results;\n}\n\n// --- Helpers ---\n\nfunction getOrCreate(\n map: Map<string, DetectionResult>,\n serviceId: string,\n service: ServiceDefinition,\n): DetectionResult {\n let result = map.get(serviceId);\n if (!result) {\n result = { service, sources: [], details: [] };\n map.set(serviceId, result);\n }\n return result;\n}\n\n/* Scan package.json for all dependencies. /\nfunction scanPackageJson(projectRoot: string): Set<string> {\n const deps = new Set<string>();\n const pkgPath = path.join(projectRoot, \"package.json\");\n\n try {\n const raw = fs.readFileSync(pkgPath, \"utf-8\");\n const pkg = JSON.parse(raw) as {\n dependencies?: Record<string, string>;\n devDependencies?: Record<string, string>;\n };\n for (const name of Object.keys(pkg.dependencies ?? {})) deps.add(name);\n for (const name of Object.keys(pkg.devDependencies ?? {})) deps.add(name);\n } catch {\n // No package.json or not valid JSON\n }\n\n return deps;\n}\n\n/\n Lightweight import scanning.\n * Scans src/ directory for import/require statements.\n * Does NOT do a full AST parse — just string matching.\n /\nfunction scanImports(projectRoot: string): Set<string> {\n const imports = new Set<string>();\n const srcDir = path.join(projectRoot, \"src\");\n\n if (!fs.existsSync(srcDir)) return imports;\n\n const files = walkDir(srcDir, /\\.(ts\|tsx\|js\|jsx\|mjs\|cjs)$/);\n for (const file of files) {\n try {\n const content = fs.readFileSync(file, \"utf-8\");\n // Match: import ... from \"package\" or require(\"package\")\n const importRegex =\n /(?:from\\s+[\"']\|require\\s\\(\\s[\"'])([^./][^\"']?)(?:[\"'])/g;\n let match: RegExpExecArray \| null;\n while ((match = importRegex.exec(content)) !== null) {\n const pkg = match[1];\n if (pkg) {\n // Normalize scoped packages: @scope/pkg/subpath -> @scope/pkg\n const parts = pkg.split(\"/\");\n if (parts[0]?.startsWith(\"@\") && parts.length >= 2) {\n imports.add(`${parts[0]}/${parts[1]}`);\n } else if (parts[0]) {\n imports.add(parts[0]);\n }\n }\n }\n } catch {\n // Skip unreadable files\n }\n }\n\n return imports;\n}\n\n/** Recursively walk a directory, returning files matching the pattern. /\nfunction walkDir(dir: string, pattern: RegExp, maxDepth = 5): string[] {\n const results: string[] = [];\n if (maxDepth <= 0) return results;\n\n try {\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n for (const entry of entries) {\n if (entry.name.startsWith(\".\") \|\| entry.name === \"node_modules\") continue;\n const fullPath = path.join(dir, entry.name);\n if (entry.isDirectory()) {\n results.push(...walkDir(fullPath, pattern, maxDepth - 1));\n } else if (pattern.test(entry.name)) {\n results.push(fullPath);\n }\n }\n } catch {\n // Skip unreadable directories\n }\n\n return results;\n}\n","import as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport * as url from \"node:url\";\nimport type { ServiceDefinition } from \"./types.js\";\n\nconst __dirname = path.dirname(url.fileURLToPath(import.meta.url));\n\ninterface RegistryFile {\n version: string;\n lastUpdated: string;\n services: Record<string, ServiceDefinition>;\n}\n\nlet cachedRegistry: Map<string, ServiceDefinition> \| null = null;\n\n/*\n Load the service registry.\n * Checks project-local override first, then falls back to bundled registry.\n /\nexport function loadRegistry(projectRoot?: string): Map<string, ServiceDefinition> {\n if (cachedRegistry) return cachedRegistry;\n\n const registry = new Map<string, ServiceDefinition>();\n\n // Load bundled registry (shipped with package)\n // Try multiple possible locations — depends on whether running from src/ or dist/\n const candidates = [\n path.resolve(__dirname, \"../../registry.json\"), // from src/core/\n path.resolve(__dirname, \"../registry.json\"), // from dist/\n ];\n for (const candidate of candidates) {\n if (fs.existsSync(candidate)) {\n loadRegistryFile(candidate, registry);\n break;\n }\n }\n\n // Load project-local override (if exists)\n if (projectRoot) {\n const localPath = path.join(projectRoot, \".burnwatch\", \"registry.json\");\n if (fs.existsSync(localPath)) {\n loadRegistryFile(localPath, registry);\n }\n }\n\n cachedRegistry = registry;\n return registry;\n}\n\nfunction loadRegistryFile(\n filePath: string,\n registry: Map<string, ServiceDefinition>,\n): void {\n try {\n const raw = fs.readFileSync(filePath, \"utf-8\");\n const data = JSON.parse(raw) as RegistryFile;\n for (const [id, service] of Object.entries(data.services)) {\n registry.set(id, { ...service, id });\n }\n } catch {\n // Silently skip missing or malformed registry files\n }\n}\n\n/* Clear the cached registry (for testing). /\nexport function clearRegistryCache(): void {\n cachedRegistry = null;\n}\n\n/* Get a single service definition by ID. /\nexport function getService(\n id: string,\n projectRoot?: string,\n): ServiceDefinition \| undefined {\n return loadRegistry(projectRoot).get(id);\n}\n\n/* Get all service definitions. /\nexport function getAllServices(\n projectRoot?: string,\n): ServiceDefinition[] {\n return Array.from(loadRegistry(projectRoot).values());\n}\n","import as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport type { SpendBrief, SpendEvent } from \"./types.js\";\nimport { CONFIDENCE_BADGES } from \"./types.js\";\nimport { projectConfigDir, projectDataDir } from \"./config.js\";\n\n/*\n Write the spend ledger as a human-readable markdown file.\n * Designed to be git-committable and readable in 10 seconds.\n /\nexport function writeLedger(brief: SpendBrief, projectRoot?: string): void {\n const now = new Date();\n const lines: string[] = [];\n\n lines.push(`# Burnwatch Ledger — ${brief.projectName}`);\n lines.push(`Last updated: ${now.toISOString()}`);\n lines.push(\"\");\n lines.push(`## This Month (${brief.period})`);\n lines.push(\"\");\n lines.push(\"\| Service \| Spend \| Conf \| Budget \| Status \|\");\n lines.push(\"\|---------\|-------\|------\|--------\|--------\|\");\n\n for (const svc of brief.services) {\n const spendStr = svc.isEstimate\n ? `~$${svc.spend.toFixed(2)}`\n : `$${svc.spend.toFixed(2)}`;\n const badge = CONFIDENCE_BADGES[svc.tier];\n const budgetStr = svc.budget ? `$${svc.budget}` : \"—\";\n\n lines.push(\n `\| ${svc.serviceId} \| ${spendStr} \| ${badge} \| ${budgetStr} \| ${svc.statusLabel} \|`,\n );\n }\n\n lines.push(\"\");\n const totalStr = brief.totalIsEstimate\n ? `~$${brief.totalSpend.toFixed(2)}`\n : `$${brief.totalSpend.toFixed(2)}`;\n const marginStr =\n brief.estimateMargin > 0\n ? ` (±$${brief.estimateMargin.toFixed(0)} estimated margin)`\n : \"\";\n lines.push(`## TOTAL: ${totalStr}${marginStr}`);\n lines.push(`## Untracked services: ${brief.untrackedCount}`);\n lines.push(\"\");\n\n if (brief.alerts.length > 0) {\n lines.push(\"## Alerts\");\n for (const alert of brief.alerts) {\n const icon = alert.severity === \"critical\" ? \"🚨\" : \"⚠️\";\n lines.push(`- ${icon} ${alert.message}`);\n }\n lines.push(\"\");\n }\n\n const ledgerPath = path.join(\n projectConfigDir(projectRoot),\n \"spend-ledger.md\",\n );\n fs.mkdirSync(path.dirname(ledgerPath), { recursive: true });\n fs.writeFileSync(ledgerPath, lines.join(\"\\n\") + \"\\n\", \"utf-8\");\n}\n\n/\n Append an event to the append-only event log.\n /\nexport function logEvent(event: SpendEvent, projectRoot?: string): void {\n const logPath = path.join(projectDataDir(projectRoot), \"events.jsonl\");\n fs.mkdirSync(path.dirname(logPath), { recursive: true });\n fs.appendFileSync(logPath, JSON.stringify(event) + \"\\n\", \"utf-8\");\n}\n\n/\n Read recent events from the event log.\n /\nexport function readRecentEvents(\n count: number,\n projectRoot?: string,\n): SpendEvent[] {\n const logPath = path.join(projectDataDir(projectRoot), \"events.jsonl\");\n try {\n const raw = fs.readFileSync(logPath, \"utf-8\");\n const lines = raw.trim().split(\"\\n\").filter(Boolean);\n return lines\n .slice(-count)\n .map((line) => JSON.parse(line) as SpendEvent);\n } catch {\n return [];\n }\n}\n\n/\n Save a spend snapshot to the snapshots directory.\n * Used for delta computation across sessions.\n /\nexport function saveSnapshot(brief: SpendBrief, projectRoot?: string): void {\n const snapshotDir = path.join(projectDataDir(projectRoot), \"snapshots\");\n fs.mkdirSync(snapshotDir, { recursive: true });\n const filename = `snapshot-${new Date().toISOString().replace(/[:.]/g, \"-\")}.json`;\n fs.writeFileSync(\n path.join(snapshotDir, filename),\n JSON.stringify(brief, null, 2) + \"\\n\",\n \"utf-8\",\n );\n}\n\n/\n Read the most recent snapshot, if any.\n /\nexport function readLatestSnapshot(\n projectRoot?: string,\n): SpendBrief \| null {\n const snapshotDir = path.join(projectDataDir(projectRoot), \"snapshots\");\n try {\n const files = fs\n .readdirSync(snapshotDir)\n .filter((f) => f.startsWith(\"snapshot-\") && f.endsWith(\".json\"))\n .sort()\n .reverse();\n\n if (files.length === 0) return null;\n\n const raw = fs.readFileSync(\n path.join(snapshotDir, files[0]!),\n \"utf-8\",\n );\n return JSON.parse(raw) as SpendBrief;\n } catch {\n return null;\n }\n}\n","/\n Confidence tiers for spend tracking.\n \n LIVE — Real billing API data\n * CALC — Fixed monthly cost, user-entered\n * EST — Estimated from usage signals + pricing formula\n * BLIND — Detected in project, no tracking configured\n /\nexport type ConfidenceTier = \"live\" \| \"calc\" \| \"est\" \| \"blind\";\n\nexport const CONFIDENCE_BADGES: Record<ConfidenceTier, string> = {\n live: \"✅ LIVE\",\n calc: \"🟡 CALC\",\n est: \"🟠 EST\",\n blind: \"🔴 BLIND\",\n};\n\n/* How a service charges — determines tracking strategy. /\nexport type BillingModel =\n \| \"token_usage\" // Per-token (Anthropic, OpenAI, Gemini)\n \| \"credit_pool\" // Fixed credit bucket (Scrapfly)\n \| \"per_unit\" // Per-email, per-session, per-command (Resend, Browserbase, Upstash)\n \| \"percentage\" // Percentage of transaction (Stripe)\n \| \"flat_monthly\" // Fixed monthly subscription (PostHog, Inngest free tier)\n \| \"tiered\" // Free up to X, then jumps (PostHog, Supabase)\n \| \"compute\" // Compute-time based (Vercel, AWS)\n \| \"unknown\";\n\n/* How cost scales — helps the agent reason about future spend. /\nexport type ScalingShape =\n \| \"linear\" // Each unit costs the same\n \| \"linear_burndown\" // Fixed pool, each use depletes it\n \| \"tiered_jump\" // Free until threshold, then expensive\n \| \"percentage\" // Proportional to revenue/volume\n \| \"fixed\" // Flat monthly, no scaling\n \| \"unknown\";\n\n/* A service definition from the registry. /\nexport interface ServiceDefinition {\n /* Unique service identifier /\n id: string;\n /* Human-readable name /\n name: string;\n /* Package names in npm/pip that indicate this service /\n packageNames: string[];\n /* Env var patterns that indicate this service /\n envPatterns: string[];\n /* Import patterns to scan for (regex strings) /\n importPatterns: string[];\n /* Keywords that indicate mentions in prompts /\n mentionKeywords: string[];\n /* Billing model /\n billingModel: BillingModel;\n /* How cost scales /\n scalingShape: ScalingShape;\n /* What tier of tracking is available /\n apiTier: ConfidenceTier;\n /* Billing API endpoint, if available /\n apiEndpoint?: string;\n /* Pricing details /\n pricing?: {\n /* Human-readable formula /\n formula?: string;\n /* Rate per unit, if applicable /\n unitRate?: number;\n /* Unit name (token, credit, email, session, etc.) /\n unitName?: string;\n /* Monthly base cost, if flat /\n monthlyBase?: number;\n };\n /* Known gotchas that affect cost /\n gotchas?: string[];\n /* Alternative services (free or cheaper) /\n alternatives?: string[];\n /* Documentation URL /\n docsUrl?: string;\n /* Last time pricing was verified /\n lastVerified?: string;\n /* Notes about recent pricing changes /\n pricingNotes?: string;\n}\n\n/* A tracked service instance — a service definition + user config. /\nexport interface TrackedService {\n /* Service definition ID /\n serviceId: string;\n /* How this service was detected /\n detectedVia: DetectionSource[];\n /* User-configured monthly budget /\n budget?: number;\n /* Whether the user has provided an API/billing key /\n hasApiKey: boolean;\n /* Override confidence tier (e.g., user provided billing key upgrades to LIVE) /\n tierOverride?: ConfidenceTier;\n /* User-entered monthly plan cost (for CALC tier) /\n planCost?: number;\n /* When this service was first detected /\n firstDetected: string;\n}\n\nexport type DetectionSource =\n \| \"package_json\"\n \| \"env_var\"\n \| \"import_scan\"\n \| \"prompt_mention\"\n \| \"git_diff\"\n \| \"manual\";\n\n/* A spend snapshot for a single service at a point in time. /\nexport interface SpendSnapshot {\n serviceId: string;\n /* Current period spend (or estimate) /\n spend: number;\n /* Is the spend figure exact or estimated? /\n isEstimate: boolean;\n /* Confidence tier for this reading /\n tier: ConfidenceTier;\n /* Budget allocated /\n budget?: number;\n /* Percentage of budget consumed /\n budgetPercent?: number;\n /* Budget status /\n status: \"healthy\" \| \"caution\" \| \"over\" \| \"unknown\";\n /* Human-readable status label /\n statusLabel: string;\n /* Raw data from billing API, if available /\n raw?: Record<string, unknown>;\n /* Timestamp of this snapshot /\n timestamp: string;\n}\n\n/* The full spend brief, injected at session start. /\nexport interface SpendBrief {\n projectName: string;\n generatedAt: string;\n period: string;\n services: SpendSnapshot[];\n totalSpend: number;\n totalIsEstimate: boolean;\n estimateMargin: number;\n untrackedCount: number;\n alerts: SpendAlert[];\n}\n\nexport interface SpendAlert {\n serviceId: string;\n type: \"over_budget\" \| \"near_budget\" \| \"new_service\" \| \"stale_data\" \| \"blind_service\";\n message: string;\n severity: \"warning\" \| \"critical\" \| \"info\";\n}\n\n/* Ledger entry — one row in spend-ledger.md /\nexport interface LedgerEntry {\n serviceId: string;\n serviceName: string;\n spend: number;\n isEstimate: boolean;\n tier: ConfidenceTier;\n budget?: number;\n statusLabel: string;\n}\n\n/* Event logged to events.jsonl /\nexport interface SpendEvent {\n timestamp: string;\n sessionId: string;\n type:\n \| \"session_start\"\n \| \"session_end\"\n \| \"service_detected\"\n \| \"service_mentioned\"\n \| \"spend_polled\"\n \| \"budget_alert\"\n \| \"ledger_written\";\n data: Record<string, unknown>;\n}\n\n/\n Hook input — the JSON received via stdin from Claude Code.\n * Subset of fields we care about.\n /\nexport interface HookInput {\n session_id: string;\n transcript_path?: string;\n cwd: string;\n hook_event_name: string;\n // SessionStart\n source?: string;\n // UserPromptSubmit\n prompt?: string;\n // PostToolUse\n tool_name?: string;\n tool_input?: {\n file_path?: string;\n command?: string;\n content?: string;\n old_string?: string;\n new_string?: string;\n };\n}\n\n/\n Hook output — the JSON we write to stdout for Claude Code.\n /\nexport interface HookOutput {\n hookSpecificOutput?: {\n hookEventName: string;\n additionalContext?: string;\n };\n}\n","import type {\n SpendBrief,\n SpendSnapshot,\n SpendAlert,\n ConfidenceTier,\n} from \"./types.js\";\nimport { CONFIDENCE_BADGES } from \"./types.js\";\n\n/\n Format a spend brief as a text block for injection into Claude's context.\n /\nexport function formatBrief(brief: SpendBrief): string {\n const lines: string[] = [];\n const width = 62;\n const hrDouble = \"═\".repeat(width);\n const hrSingle = \"─\".repeat(width - 4);\n\n lines.push(`╔${hrDouble}╗`);\n lines.push(\n `║ BURNWATCH — ${brief.projectName} — ${brief.period}`.padEnd(\n width + 1,\n ) + \"║\",\n );\n lines.push(`╠${hrDouble}╣`);\n\n // Header\n lines.push(\n formatRow(\"Service\", \"Spend\", \"Conf\", \"Budget\", \"Left\", width),\n );\n lines.push(`║ ${hrSingle} ║`);\n\n // Service rows\n for (const svc of brief.services) {\n const spendStr = svc.isEstimate\n ? `~$${svc.spend.toFixed(2)}`\n : `$${svc.spend.toFixed(2)}`;\n const badge = CONFIDENCE_BADGES[svc.tier];\n const budgetStr = svc.budget ? `$${svc.budget}` : \"—\";\n const leftStr = formatLeft(svc);\n\n lines.push(formatRow(svc.serviceId, spendStr, badge, budgetStr, leftStr, width));\n }\n\n // Footer\n lines.push(`╠${hrDouble}╣`);\n const totalStr = brief.totalIsEstimate\n ? `~$${brief.totalSpend.toFixed(2)}`\n : `$${brief.totalSpend.toFixed(2)}`;\n const marginStr = brief.estimateMargin > 0\n ? ` Est margin: ±$${brief.estimateMargin.toFixed(0)}`\n : \"\";\n const untrackedStr =\n brief.untrackedCount > 0\n ? `Untracked: ${brief.untrackedCount} ⚠️`\n : `Untracked: 0 ✅`;\n\n lines.push(\n `║ TOTAL: ${totalStr} ${untrackedStr}${marginStr}`.padEnd(\n width + 1,\n ) + \"║\",\n );\n\n // Alerts\n for (const alert of brief.alerts) {\n const icon = alert.severity === \"critical\" ? \"🚨\" : \"⚠️\";\n lines.push(\n `║ ${icon} ${alert.message}`.padEnd(width + 1) + \"║\",\n );\n }\n\n lines.push(`╚${hrDouble}╝`);\n\n return lines.join(\"\\n\");\n}\n\n/\n Format a single-service spend card for injection on mention.\n /\nexport function formatSpendCard(snapshot: SpendSnapshot): string {\n const badge = CONFIDENCE_BADGES[snapshot.tier];\n const spendStr = snapshot.isEstimate\n ? `~$${snapshot.spend.toFixed(2)}`\n : `$${snapshot.spend.toFixed(2)}`;\n const budgetStr = snapshot.budget\n ? `Budget: $${snapshot.budget}`\n : \"No budget set\";\n const statusStr = snapshot.statusLabel;\n\n const lines = [\n `[BURNWATCH] ${snapshot.serviceId} — current period`,\n ` Spend: ${spendStr} \| ${budgetStr} \| ${statusStr}`,\n ` Confidence: ${badge}`,\n ];\n\n if (snapshot.status === \"over\" && snapshot.budgetPercent) {\n lines.push(\n ` ⚠️ ${snapshot.budgetPercent.toFixed(0)}% of budget consumed`,\n );\n }\n\n return lines.join(\"\\n\");\n}\n\n/\n Build a SpendBrief from snapshots and project config.\n /\nexport function buildBrief(\n projectName: string,\n snapshots: SpendSnapshot[],\n blindCount: number,\n): SpendBrief {\n const now = new Date();\n const period = now.toLocaleDateString(\"en-US\", {\n month: \"long\",\n year: \"numeric\",\n });\n\n let totalSpend = 0;\n let hasEstimates = false;\n let estimateMargin = 0;\n const alerts: SpendAlert[] = [];\n\n for (const snap of snapshots) {\n totalSpend += snap.spend;\n if (snap.isEstimate) {\n hasEstimates = true;\n estimateMargin += snap.spend 0.15; // ±15% margin on estimates\n }\n\n if (snap.status === \"over\") {\n alerts.push({\n serviceId: snap.serviceId,\n type: \"over_budget\",\n message: `${snap.serviceId.toUpperCase()} ${snap.budgetPercent?.toFixed(0) ?? \"?\"}% OVER BUDGET — review before use`,\n severity: \"critical\",\n });\n } else if (snap.status === \"caution\" && snap.budgetPercent && snap.budgetPercent >= 80) {\n alerts.push({\n serviceId: snap.serviceId,\n type: \"near_budget\",\n message: `${snap.serviceId} at ${snap.budgetPercent.toFixed(0)}% of budget`,\n severity: \"warning\",\n });\n }\n }\n\n if (blindCount > 0) {\n alerts.push({\n serviceId: \"_blind\",\n type: \"blind_service\",\n message: `${blindCount} service${blindCount > 1 ? \"s\" : \"\"} detected but untracked — run 'burnwatch status' to see`,\n severity: \"warning\",\n });\n }\n\n return {\n projectName,\n generatedAt: now.toISOString(),\n period,\n services: snapshots,\n totalSpend,\n totalIsEstimate: hasEstimates,\n estimateMargin,\n untrackedCount: blindCount,\n alerts,\n };\n}\n\n// --- Helpers ---\n\nfunction formatRow(\n service: string,\n spend: string,\n conf: string,\n budget: string,\n left: string,\n width: number,\n): string {\n const row = ` ${service.padEnd(14)} ${spend.padEnd(11)} ${conf.padEnd(7)} ${budget.padEnd(7)} ${left}`;\n return `║${row}`.padEnd(width + 1) + \"║\";\n}\n\nfunction formatLeft(snap: SpendSnapshot): string {\n if (!snap.budget) return \"—\";\n if (snap.status === \"over\") return \"⚠️ OVR\";\n if (snap.budgetPercent !== undefined) {\n const remaining = 100 - snap.budgetPercent;\n return `${remaining.toFixed(0)}%`;\n }\n return \"—\";\n}\n\n/*\n Build a SpendSnapshot from tracked service data.\n /\nexport function buildSnapshot(\n serviceId: string,\n tier: ConfidenceTier,\n spend: number,\n budget?: number,\n): SpendSnapshot {\n const isEstimate = tier === \"est\" \|\| tier === \"calc\";\n const budgetPercent = budget ? (spend / budget) 100 : undefined;\n\n let status: SpendSnapshot[\"status\"] = \"unknown\";\n let statusLabel = \"no budget\";\n\n if (budget) {\n if (budgetPercent! > 100) {\n status = \"over\";\n statusLabel = `⚠️ ${budgetPercent!.toFixed(0)}% over`;\n } else if (budgetPercent! >= 75) {\n status = \"caution\";\n statusLabel = `${(100 - budgetPercent!).toFixed(0)}% — caution`;\n } else {\n status = \"healthy\";\n statusLabel = `${(100 - budgetPercent!).toFixed(0)}% — healthy`;\n }\n }\n\n if (tier === \"calc\" && budget) {\n statusLabel = `flat — on plan`;\n status = \"healthy\";\n }\n\n return {\n serviceId,\n spend,\n isEstimate,\n tier,\n budget,\n budgetPercent,\n status,\n statusLabel,\n timestamp: new Date().toISOString(),\n };\n}\n"],"mappings":";;;AASA,YAAYA,SAAQ;;;ACTpB,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AAoBb,SAAS,iBAAiB,aAA8B;AAC7D,QAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,SAAY,UAAK,MAAM,YAAY;AACrC;AAGO,SAAS,eAAe,aAA8B;AAC3D,SAAY,UAAK,iBAAiB,WAAW,GAAG,MAAM;AACxD;AA2CO,SAAS,kBAAkB,aAA4C;AAC5E,QAAM,aAAkB,UAAK,iBAAiB,WAAW,GAAG,aAAa;AACzE,MAAI;AACF,UAAM,MAAS,gBAAa,YAAY,OAAO;AAC/C,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AA2BO,SAAS,cAAc,aAA+B;AAC3D,SAAO,kBAAkB,WAAW,MAAM;AAC5C;;;AC9GA,YAAYC,SAAQ;AACpB,YAAYC,WAAU;;;ACDtB,YAAYC,SAAQ;AACpB,YAAYC,WAAU;AACtB,YAAY,SAAS;AAGrB,IAAM,YAAiB,cAAY,kBAAc,YAAY,GAAG,CAAC;AAQjE,IAAI,iBAAwD;AAMrD,SAAS,aAAa,aAAsD;AACjF,MAAI,eAAgB,QAAO;AAE3B,QAAM,WAAW,oBAAI,IAA+B;AAIpD,QAAM,aAAa;AAAA,IACZ,cAAQ,WAAW,qBAAqB;AAAA;AAAA,IACxC,cAAQ,WAAW,kBAAkB;AAAA;AAAA,EAC5C;AACA,aAAW,aAAa,YAAY;AAClC,QAAO,eAAW,SAAS,GAAG;AAC5B,uBAAiB,WAAW,QAAQ;AACpC;AAAA,IACF;AAAA,EACF;AAGA,MAAI,aAAa;AACf,UAAM,YAAiB,WAAK,aAAa,cAAc,eAAe;AACtE,QAAO,eAAW,SAAS,GAAG;AAC5B,uBAAiB,WAAW,QAAQ;AAAA,IACtC;AAAA,EACF;AAEA,mBAAiB;AACjB,SAAO;AACT;AAEA,SAAS,iBACP,UACA,UACM;AACN,MAAI;AACF,UAAM,MAAS,iBAAa,UAAU,OAAO;AAC7C,UAAM,OAAO,KAAK,MAAM,GAAG;AAC3B,eAAW,CAAC,IAAI,OAAO,KAAK,OAAO,QAAQ,KAAK,QAAQ,GAAG;AACzD,eAAS,IAAI,IAAI,EAAE,GAAG,SAAS,GAAG,CAAC;AAAA,IACrC;AAAA,EACF,QAAQ;AAAA,EAER;AACF;;;ADgBO,SAAS,eACd,QACA,aACmB;AACnB,QAAM,WAAW,aAAa,WAAW;AACzC,QAAM,UAA6B,CAAC;AACpC,QAAM,cAAc,OAAO,YAAY;AAEvC,aAAW,CAAC,EAAE,OAAO,KAAK,UAAU;AAClC,UAAM,UAAU,QAAQ,gBAAgB;AAAA,MAAK,CAAC,YAC5C,YAAY,SAAS,QAAQ,YAAY,CAAC;AAAA,IAC5C;AACA,QAAI,SAAS;AACX,cAAQ,KAAK;AAAA,QACX;AAAA,QACA,SAAS,CAAC,gBAAgB;AAAA,QAC1B,SAAS,CAAC,qBAAqB;AAAA,MACjC,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;;;AEpGA,YAAYC,SAAQ;AACpB,YAAYC,WAAU;;;ACSf,IAAM,oBAAoD;AAAA,EAC/D,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,OAAO;AACT;;;ADmDO,SAAS,SAAS,OAAmB,aAA4B;AACtE,QAAM,UAAe,WAAK,eAAe,WAAW,GAAG,cAAc;AACrE,EAAG,cAAe,cAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,EAAG,mBAAe,SAAS,KAAK,UAAU,KAAK,IAAI,MAAM,OAAO;AAClE;AAuCO,SAAS,mBACd,aACmB;AACnB,QAAM,cAAmB,WAAK,eAAe,WAAW,GAAG,WAAW;AACtE,MAAI;AACF,UAAM,QACH,gBAAY,WAAW,EACvB,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW,KAAK,EAAE,SAAS,OAAO,CAAC,EAC9D,KAAK,EACL,QAAQ;AAEX,QAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,UAAM,MAAS;AAAA,MACR,WAAK,aAAa,MAAM,CAAC,CAAE;AAAA,MAChC;AAAA,IACF;AACA,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AEpDO,SAAS,gBAAgB,UAAiC;AAC/D,QAAM,QAAQ,kBAAkB,SAAS,IAAI;AAC7C,QAAM,WAAW,SAAS,aACtB,KAAK,SAAS,MAAM,QAAQ,CAAC,CAAC,KAC9B,IAAI,SAAS,MAAM,QAAQ,CAAC,CAAC;AACjC,QAAM,YAAY,SAAS,SACvB,YAAY,SAAS,MAAM,KAC3B;AACJ,QAAM,YAAY,SAAS;AAE3B,QAAM,QAAQ;AAAA,IACZ,eAAe,SAAS,SAAS;AAAA,IACjC,YAAY,QAAQ,QAAQ,SAAS,QAAQ,SAAS;AAAA,IACtD,iBAAiB,KAAK;AAAA,EACxB;AAEA,MAAI,SAAS,WAAW,UAAU,SAAS,eAAe;AACxD,UAAM;AAAA,MACJ,kBAAQ,SAAS,cAAc,QAAQ,CAAC,CAAC;AAAA,IAC3C;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;;;ANpFA,SAAS,OAAa;AAEpB,MAAI;AACJ,MAAI;AACF,UAAM,QAAW,iBAAa,GAAG,OAAO;AACxC,YAAQ,KAAK,MAAM,KAAK;AAAA,EAC1B,QAAQ;AACN,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAEA,QAAM,cAAc,MAAM;AAC1B,QAAM,SAAS,MAAM;AAGrB,MAAI,CAAC,cAAc,WAAW,KAAK,CAAC,QAAQ;AAC1C,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAEA,QAAM,SAAS,kBAAkB,WAAW;AAG5C,QAAM,WAAW,eAAe,QAAQ,WAAW;AACnD,MAAI,SAAS,WAAW,GAAG;AACzB,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAGA,QAAM,WAAW,mBAAmB,WAAW;AAG/C,QAAM,QAAkB,CAAC;AAEzB,aAAW,WAAW,UAAU;AAC9B,UAAM,YAAY,QAAQ,QAAQ;AAClC,UAAM,iBAAiB,OAAO,SAAS,SAAS;AAGhD,UAAM,kBAAkB,UAAU,SAAS;AAAA,MACzC,CAAC,MAAM,EAAE,cAAc;AAAA,IACzB;AAEA,QAAI,iBAAiB;AACnB,YAAM,KAAK,gBAAgB,eAAe,CAAC;AAAA,IAC7C,WAAW,gBAAgB;AAEzB,YAAM;AAAA,QACJ,eAAe,SAAS,+CAA0C,eAAe,SAAS,IAAI,eAAe,MAAM,KAAK,SAAS;AAAA,MACnI;AAAA,IACF,OAAO;AAEL,YAAM;AAAA,QACJ,eAAe,SAAS,mEAA8D,SAAS;AAAA,MACjG;AAAA,IACF;AAGA;AAAA,MACE;AAAA,QACE,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,WAAW,MAAM;AAAA,QACjB,MAAM;AAAA,QACN,MAAM,EAAE,WAAW,QAAQ,OAAO,MAAM,GAAG,GAAG,EAAE;AAAA,MAClD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,MAAM,WAAW,GAAG;AACtB,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAGA,QAAM,SAAqB;AAAA,IACzB,oBAAoB;AAAA,MAClB,eAAe;AAAA,MACf,mBAAmB,MAAM,KAAK,MAAM;AAAA,IACtC;AAAA,EACF;AAEA,UAAQ,OAAO,MAAM,KAAK,UAAU,MAAM,CAAC;AAC7C;AAEA,KAAK;","names":["fs","fs","path","fs","path","fs","path"]}
1	+ {"version":3,"sources":["../../src/hooks/on-prompt.ts","../../src/core/config.ts","../../src/detection/detector.ts","../../src/core/registry.ts","../../src/core/ledger.ts","../../src/core/types.ts","../../src/core/brief.ts"],"sourcesContent":["#!/usr/bin/env node\n\n/*\n UserPromptSubmit hook — fires when the user submits a prompt.\n \n Scans the prompt text for service mentions and injects a spend card\n * for any tracked service that's mentioned.\n /\n\nimport as fs from \"node:fs\";\nimport type { HookInput, HookOutput } from \"../core/types.js\";\nimport { readProjectConfig, isInitialized } from \"../core/config.js\";\nimport { detectMentions } from \"../detection/detector.js\";\nimport { readLatestSnapshot } from \"../core/ledger.js\";\nimport { formatSpendCard } from \"../core/brief.js\";\nimport { logEvent } from \"../core/ledger.js\";\n\nfunction main(): void {\n // Read hook input from stdin\n let input: HookInput;\n try {\n const stdin = fs.readFileSync(0, \"utf-8\");\n input = JSON.parse(stdin) as HookInput;\n } catch {\n process.exit(0);\n return;\n }\n\n const projectRoot = input.cwd;\n const prompt = input.prompt;\n\n // Guard: not initialized or no prompt\n if (!isInitialized(projectRoot) \|\| !prompt) {\n process.exit(0);\n return;\n }\n\n const config = readProjectConfig(projectRoot)!;\n\n // Detect service mentions in the prompt\n const mentions = detectMentions(prompt, projectRoot);\n if (mentions.length === 0) {\n process.exit(0);\n return;\n }\n\n // Get the latest snapshot for spend data\n const snapshot = readLatestSnapshot(projectRoot);\n\n // Build spend cards for mentioned services\n const cards: string[] = [];\n\n for (const mention of mentions) {\n const serviceId = mention.service.id;\n const trackedService = config.services[serviceId];\n\n // Find this service's snapshot data\n const serviceSnapshot = snapshot?.services.find(\n (s) => s.serviceId === serviceId,\n );\n\n if (serviceSnapshot) {\n cards.push(formatSpendCard(serviceSnapshot));\n } else if (trackedService) {\n // Service is tracked but no snapshot data — show what we know\n cards.push(\n `[BURNWATCH] ${serviceId} — tracked, no spend data yet. Budget: ${trackedService.budget ? `$${trackedService.budget}` : \"not set\"}`,\n );\n } else {\n // Service detected but not tracked — flag it\n cards.push(\n `[BURNWATCH] ${serviceId} — detected in project but NOT tracked. Run 'burnwatch add ${serviceId}' to configure.`,\n );\n }\n\n // Log the mention\n logEvent(\n {\n timestamp: new Date().toISOString(),\n sessionId: input.session_id,\n type: \"service_mentioned\",\n data: { serviceId, prompt: prompt.slice(0, 200) },\n },\n projectRoot,\n );\n }\n\n if (cards.length === 0) {\n process.exit(0);\n return;\n }\n\n // Output spend cards for injection into context\n const output: HookOutput = {\n hookSpecificOutput: {\n hookEventName: \"UserPromptSubmit\",\n additionalContext: cards.join(\"\\n\\n\"),\n },\n };\n\n process.stdout.write(JSON.stringify(output));\n}\n\nmain();\n","import * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport * as os from \"node:os\";\nimport type { TrackedService } from \"./types.js\";\n\n/*\n Paths for burnwatch configuration and data.\n \n Hybrid model:\n * - Global config (API keys, service credentials): ~/.config/burnwatch/\n * - Project config (budgets, tracked services): .burnwatch/\n * - Project data (ledger, events, cache): .burnwatch/data/\n /\n\n/* Global config directory — stores API keys, never in project dirs. /\nexport function globalConfigDir(): string {\n const xdgConfig = process.env[\"XDG_CONFIG_HOME\"];\n if (xdgConfig) return path.join(xdgConfig, \"burnwatch\");\n return path.join(os.homedir(), \".config\", \"burnwatch\");\n}\n\n/* Project config directory — stores budgets, tracked services. /\nexport function projectConfigDir(projectRoot?: string): string {\n const root = projectRoot ?? process.cwd();\n return path.join(root, \".burnwatch\");\n}\n\n/* Project data directory — stores ledger, events, cache. /\nexport function projectDataDir(projectRoot?: string): string {\n return path.join(projectConfigDir(projectRoot), \"data\");\n}\n\n// --- Global config (API keys) ---\n\nexport interface GlobalConfig {\n services: Record<\n string,\n {\n apiKey?: string;\n token?: string;\n orgId?: string;\n }\n >;\n}\n\nexport function readGlobalConfig(): GlobalConfig {\n const configPath = path.join(globalConfigDir(), \"config.json\");\n try {\n const raw = fs.readFileSync(configPath, \"utf-8\");\n return JSON.parse(raw) as GlobalConfig;\n } catch {\n return { services: {} };\n }\n}\n\nexport function writeGlobalConfig(config: GlobalConfig): void {\n const dir = globalConfigDir();\n fs.mkdirSync(dir, { recursive: true });\n const configPath = path.join(dir, \"config.json\");\n fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + \"\\n\", \"utf-8\");\n // Restrict permissions — this file contains API keys\n fs.chmodSync(configPath, 0o600);\n}\n\n// --- Project config (budgets, tracked services) ---\n\nexport interface ProjectConfig {\n projectName: string;\n services: Record<string, TrackedService>;\n createdAt: string;\n updatedAt: string;\n}\n\nexport function readProjectConfig(projectRoot?: string): ProjectConfig \| null {\n const configPath = path.join(projectConfigDir(projectRoot), \"config.json\");\n try {\n const raw = fs.readFileSync(configPath, \"utf-8\");\n return JSON.parse(raw) as ProjectConfig;\n } catch {\n return null;\n }\n}\n\nexport function writeProjectConfig(\n config: ProjectConfig,\n projectRoot?: string,\n): void {\n const dir = projectConfigDir(projectRoot);\n fs.mkdirSync(dir, { recursive: true });\n config.updatedAt = new Date().toISOString();\n const configPath = path.join(dir, \"config.json\");\n fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + \"\\n\", \"utf-8\");\n}\n\n/* Ensure all project directories exist. /\nexport function ensureProjectDirs(projectRoot?: string): void {\n const dirs = [\n projectConfigDir(projectRoot),\n projectDataDir(projectRoot),\n path.join(projectDataDir(projectRoot), \"cache\"),\n path.join(projectDataDir(projectRoot), \"snapshots\"),\n ];\n for (const dir of dirs) {\n fs.mkdirSync(dir, { recursive: true });\n }\n}\n\n/* Check if burnwatch is initialized in the given project. /\nexport function isInitialized(projectRoot?: string): boolean {\n return readProjectConfig(projectRoot) !== null;\n}\n","import as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { loadRegistry } from \"../core/registry.js\";\nimport type { ServiceDefinition, DetectionSource } from \"../core/types.js\";\n\nexport interface DetectionResult {\n service: ServiceDefinition;\n sources: DetectionSource[];\n details: string[];\n}\n\n/*\n Run all detection surfaces against the current project.\n * Returns services detected via any combination of:\n * - package.json dependencies (recursive — finds monorepo subdirectories)\n * - environment variable patterns (process.env + .env* files recursive)\n * - import statement scanning (recursive from project root)\n * - (prompt mention scanning is handled separately in hooks)\n /\nexport function detectServices(projectRoot: string): DetectionResult[] {\n const registry = loadRegistry(projectRoot);\n const results = new Map<string, DetectionResult>();\n\n // Surface 1: Package manifest scanning (recursive — finds all package.json files)\n const pkgDeps = scanAllPackageJsons(projectRoot);\n for (const [serviceId, service] of registry) {\n const matchedPkgs = service.packageNames.filter((pkg) =>\n pkgDeps.has(pkg),\n );\n if (matchedPkgs.length > 0) {\n getOrCreate(results, serviceId, service).sources.push(\"package_json\");\n getOrCreate(results, serviceId, service).details.push(\n `package.json: ${matchedPkgs.join(\", \")}`,\n );\n }\n }\n\n // Surface 2: Environment variable pattern matching\n // Check both process.env AND .env files in the project tree\n const envVars = collectEnvVars(projectRoot);\n for (const [serviceId, service] of registry) {\n const matchedEnvs = service.envPatterns.filter((pattern) =>\n envVars.has(pattern),\n );\n if (matchedEnvs.length > 0) {\n getOrCreate(results, serviceId, service).sources.push(\"env_var\");\n getOrCreate(results, serviceId, service).details.push(\n `env vars: ${matchedEnvs.join(\", \")}`,\n );\n }\n }\n\n // Surface 3: Import statement analysis (recursive from project root)\n const importHits = scanImports(projectRoot);\n for (const [serviceId, service] of registry) {\n const matchedImports = service.importPatterns.filter((pattern) =>\n importHits.has(pattern),\n );\n if (matchedImports.length > 0) {\n if (\n !getOrCreate(results, serviceId, service).sources.includes(\n \"import_scan\",\n )\n ) {\n getOrCreate(results, serviceId, service).sources.push(\"import_scan\");\n getOrCreate(results, serviceId, service).details.push(\n `imports: ${matchedImports.join(\", \")}`,\n );\n }\n }\n }\n\n return Array.from(results.values());\n}\n\n/*\n Detect services mentioned in a prompt string.\n * Used by the UserPromptSubmit hook.\n /\nexport function detectMentions(\n prompt: string,\n projectRoot?: string,\n): DetectionResult[] {\n const registry = loadRegistry(projectRoot);\n const results: DetectionResult[] = [];\n const promptLower = prompt.toLowerCase();\n\n for (const [, service] of registry) {\n const matched = service.mentionKeywords.some((keyword) =>\n promptLower.includes(keyword.toLowerCase()),\n );\n if (matched) {\n results.push({\n service,\n sources: [\"prompt_mention\"],\n details: [`mentioned in prompt`],\n });\n }\n }\n\n return results;\n}\n\n/\n Detect new services introduced in a file change.\n * Used by the PostToolUse hook for Write/Edit events.\n /\nexport function detectInFileChange(\n filePath: string,\n content: string,\n projectRoot?: string,\n): DetectionResult[] {\n const registry = loadRegistry(projectRoot);\n const results: DetectionResult[] = [];\n const fileName = path.basename(filePath);\n\n // Check if it's a package.json change\n if (fileName === \"package.json\") {\n try {\n const pkg = JSON.parse(content) as {\n dependencies?: Record<string, string>;\n devDependencies?: Record<string, string>;\n };\n const allDeps = new Set([\n ...Object.keys(pkg.dependencies ?? {}),\n ...Object.keys(pkg.devDependencies ?? {}),\n ]);\n\n for (const [, service] of registry) {\n const matched = service.packageNames.filter((p) => allDeps.has(p));\n if (matched.length > 0) {\n results.push({\n service,\n sources: [\"package_json\"],\n details: [`new dependency: ${matched.join(\", \")}`],\n });\n }\n }\n } catch {\n // Not valid JSON, skip\n }\n return results;\n }\n\n // Check if it's an env file change\n if (fileName.startsWith(\".env\")) {\n const envKeys = content\n .split(\"\\n\")\n .filter((line) => line.includes(\"=\") && !line.startsWith(\"#\"))\n .map((line) => line.split(\"=\")[0]!.trim());\n\n for (const [, service] of registry) {\n const matched = service.envPatterns.filter((p) => envKeys.includes(p));\n if (matched.length > 0) {\n results.push({\n service,\n sources: [\"env_var\"],\n details: [`new env var: ${matched.join(\", \")}`],\n });\n }\n }\n return results;\n }\n\n // Check for import statements in source files\n if (/\\.(ts\|tsx\|js\|jsx\|mjs\|cjs)$/.test(filePath)) {\n for (const [, service] of registry) {\n const matched = service.importPatterns.filter(\n (pattern) =>\n content.includes(`from \"${pattern}`) \|\|\n content.includes(`from '${pattern}`) \|\|\n content.includes(`require(\"${pattern}`) \|\|\n content.includes(`require('${pattern}`),\n );\n if (matched.length > 0) {\n results.push({\n service,\n sources: [\"import_scan\"],\n details: [`import added: ${matched.join(\", \")}`],\n });\n }\n }\n }\n\n return results;\n}\n\n// --- Helpers ---\n\nfunction getOrCreate(\n map: Map<string, DetectionResult>,\n serviceId: string,\n service: ServiceDefinition,\n): DetectionResult {\n let result = map.get(serviceId);\n if (!result) {\n result = { service, sources: [], details: [] };\n map.set(serviceId, result);\n }\n return result;\n}\n\n/\n Recursively find and scan ALL package.json files in the project tree.\n * Handles monorepos where dependencies live in subdirectories.\n /\nfunction scanAllPackageJsons(projectRoot: string): Set<string> {\n const deps = new Set<string>();\n const pkgFiles = findFiles(projectRoot, \"package.json\", 4);\n\n for (const pkgPath of pkgFiles) {\n try {\n const raw = fs.readFileSync(pkgPath, \"utf-8\");\n const pkg = JSON.parse(raw) as {\n dependencies?: Record<string, string>;\n devDependencies?: Record<string, string>;\n };\n for (const name of Object.keys(pkg.dependencies ?? {})) deps.add(name);\n for (const name of Object.keys(pkg.devDependencies ?? {})) deps.add(name);\n } catch {\n // Skip malformed package.json\n }\n }\n\n return deps;\n}\n\n/\n Collect environment variable names from both process.env\n * and all .env* files found recursively in the project tree.\n /\nfunction collectEnvVars(projectRoot: string): Set<string> {\n const envVars = new Set(Object.keys(process.env));\n\n // Find all .env files in the project tree\n const envFiles = findEnvFiles(projectRoot, 3);\n\n for (const envFile of envFiles) {\n try {\n const content = fs.readFileSync(envFile, \"utf-8\");\n const keys = content\n .split(\"\\n\")\n .filter((line) => line.includes(\"=\") && !line.startsWith(\"#\"))\n .map((line) => line.split(\"=\")[0]!.trim())\n .filter(Boolean);\n\n for (const key of keys) {\n envVars.add(key);\n }\n } catch {\n // Skip unreadable files\n }\n }\n\n return envVars;\n}\n\n/*\n Find all .env* files recursively (but not in node_modules, .git, dist, etc.)\n /\nfunction findEnvFiles(dir: string, maxDepth: number): string[] {\n const results: string[] = [];\n if (maxDepth <= 0) return results;\n\n try {\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n for (const entry of entries) {\n if (entry.name === \"node_modules\" \|\| entry.name === \".git\" \|\| entry.name === \"dist\") continue;\n const fullPath = path.join(dir, entry.name);\n if (entry.isDirectory()) {\n results.push(...findEnvFiles(fullPath, maxDepth - 1));\n } else if (entry.name.startsWith(\".env\")) {\n results.push(fullPath);\n }\n }\n } catch {\n // Skip unreadable directories\n }\n\n return results;\n}\n\n/\n Find files with a specific name recursively.\n * Used to find package.json files across monorepo subdirectories.\n /\nfunction findFiles(dir: string, fileName: string, maxDepth: number): string[] {\n const results: string[] = [];\n if (maxDepth <= 0) return results;\n\n try {\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n for (const entry of entries) {\n if (entry.name === \"node_modules\" \|\| entry.name === \".git\" \|\| entry.name === \"dist\") continue;\n const fullPath = path.join(dir, entry.name);\n if (entry.isDirectory()) {\n results.push(...findFiles(fullPath, fileName, maxDepth - 1));\n } else if (entry.name === fileName) {\n results.push(fullPath);\n }\n }\n } catch {\n // Skip unreadable directories\n }\n\n return results;\n}\n\n/\n Lightweight import scanning.\n * Recursively scans the project for import/require statements.\n * Looks in src/, app/, lib/, pages/, and any other code directories.\n * Does NOT do a full AST parse — just string matching.\n /\nfunction scanImports(projectRoot: string): Set<string> {\n const imports = new Set<string>();\n\n // Scan common code directories + the root itself for source files\n const codeDirs = [\"src\", \"app\", \"lib\", \"pages\", \"components\", \"utils\", \"services\", \"hooks\"];\n const dirsToScan: string[] = [];\n\n for (const dir of codeDirs) {\n const fullPath = path.join(projectRoot, dir);\n if (fs.existsSync(fullPath)) {\n dirsToScan.push(fullPath);\n }\n }\n\n // Also check subdirectories (monorepo support)\n try {\n const entries = fs.readdirSync(projectRoot, { withFileTypes: true });\n for (const entry of entries) {\n if (!entry.isDirectory()) continue;\n if (entry.name === \"node_modules\" \|\| entry.name === \".git\" \|\| entry.name === \"dist\" \|\| entry.name.startsWith(\".\")) continue;\n\n // Check if this subdirectory has its own package.json (monorepo package)\n const subPkgPath = path.join(projectRoot, entry.name, \"package.json\");\n if (fs.existsSync(subPkgPath)) {\n // Scan this subpackage's code directories\n for (const dir of codeDirs) {\n const fullPath = path.join(projectRoot, entry.name, dir);\n if (fs.existsSync(fullPath)) {\n dirsToScan.push(fullPath);\n }\n }\n }\n }\n } catch {\n // Skip if root is unreadable\n }\n\n for (const dir of dirsToScan) {\n const files = walkDir(dir, /\\.(ts\|tsx\|js\|jsx\|mjs\|cjs)$/);\n for (const file of files) {\n try {\n const content = fs.readFileSync(file, \"utf-8\");\n // Match: import ... from \"package\" or require(\"package\")\n const importRegex =\n /(?:from\\s+[\"']\|require\\s\\(\\s[\"'])([^./][^\"']?)(?:[\"'])/g;\n let match: RegExpExecArray \| null;\n while ((match = importRegex.exec(content)) !== null) {\n const pkg = match[1];\n if (pkg) {\n // Normalize scoped packages: @scope/pkg/subpath -> @scope/pkg\n const parts = pkg.split(\"/\");\n if (parts[0]?.startsWith(\"@\") && parts.length >= 2) {\n imports.add(`${parts[0]}/${parts[1]}`);\n } else if (parts[0]) {\n imports.add(parts[0]);\n }\n }\n }\n } catch {\n // Skip unreadable files\n }\n }\n }\n\n return imports;\n}\n\n/** Recursively walk a directory, returning files matching the pattern. /\nfunction walkDir(dir: string, pattern: RegExp, maxDepth = 5): string[] {\n const results: string[] = [];\n if (maxDepth <= 0) return results;\n\n try {\n const entries = fs.readdirSync(dir, { withFileTypes: true });\n for (const entry of entries) {\n if (entry.name.startsWith(\".\") \|\| entry.name === \"node_modules\") continue;\n const fullPath = path.join(dir, entry.name);\n if (entry.isDirectory()) {\n results.push(...walkDir(fullPath, pattern, maxDepth - 1));\n } else if (pattern.test(entry.name)) {\n results.push(fullPath);\n }\n }\n } catch {\n // Skip unreadable directories\n }\n\n return results;\n}\n","import as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport * as url from \"node:url\";\nimport type { ServiceDefinition } from \"./types.js\";\n\nconst __dirname = path.dirname(url.fileURLToPath(import.meta.url));\n\ninterface RegistryFile {\n version: string;\n lastUpdated: string;\n services: Record<string, ServiceDefinition>;\n}\n\nlet cachedRegistry: Map<string, ServiceDefinition> \| null = null;\n\n/*\n Load the service registry.\n * Checks project-local override first, then falls back to bundled registry.\n /\nexport function loadRegistry(projectRoot?: string): Map<string, ServiceDefinition> {\n if (cachedRegistry) return cachedRegistry;\n\n const registry = new Map<string, ServiceDefinition>();\n\n // Load bundled registry (shipped with package)\n // Try multiple possible locations — depends on whether running from src/ or dist/\n const candidates = [\n path.resolve(__dirname, \"../../registry.json\"), // from src/core/\n path.resolve(__dirname, \"../registry.json\"), // from dist/\n ];\n for (const candidate of candidates) {\n if (fs.existsSync(candidate)) {\n loadRegistryFile(candidate, registry);\n break;\n }\n }\n\n // Load project-local override (if exists)\n if (projectRoot) {\n const localPath = path.join(projectRoot, \".burnwatch\", \"registry.json\");\n if (fs.existsSync(localPath)) {\n loadRegistryFile(localPath, registry);\n }\n }\n\n cachedRegistry = registry;\n return registry;\n}\n\nfunction loadRegistryFile(\n filePath: string,\n registry: Map<string, ServiceDefinition>,\n): void {\n try {\n const raw = fs.readFileSync(filePath, \"utf-8\");\n const data = JSON.parse(raw) as RegistryFile;\n for (const [id, service] of Object.entries(data.services)) {\n registry.set(id, { ...service, id });\n }\n } catch {\n // Silently skip missing or malformed registry files\n }\n}\n\n/* Clear the cached registry (for testing). /\nexport function clearRegistryCache(): void {\n cachedRegistry = null;\n}\n\n/* Get a single service definition by ID. /\nexport function getService(\n id: string,\n projectRoot?: string,\n): ServiceDefinition \| undefined {\n return loadRegistry(projectRoot).get(id);\n}\n\n/* Get all service definitions. /\nexport function getAllServices(\n projectRoot?: string,\n): ServiceDefinition[] {\n return Array.from(loadRegistry(projectRoot).values());\n}\n","import as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport type { SpendBrief, SpendEvent } from \"./types.js\";\nimport { CONFIDENCE_BADGES } from \"./types.js\";\nimport { projectConfigDir, projectDataDir } from \"./config.js\";\n\n/*\n Write the spend ledger as a human-readable markdown file.\n * Designed to be git-committable and readable in 10 seconds.\n /\nexport function writeLedger(brief: SpendBrief, projectRoot?: string): void {\n const now = new Date();\n const lines: string[] = [];\n\n lines.push(`# Burnwatch Ledger — ${brief.projectName}`);\n lines.push(`Last updated: ${now.toISOString()}`);\n lines.push(\"\");\n lines.push(`## This Month (${brief.period})`);\n lines.push(\"\");\n lines.push(\"\| Service \| Spend \| Conf \| Budget \| Status \|\");\n lines.push(\"\|---------\|-------\|------\|--------\|--------\|\");\n\n for (const svc of brief.services) {\n const spendStr = svc.isEstimate\n ? `~$${svc.spend.toFixed(2)}`\n : `$${svc.spend.toFixed(2)}`;\n const badge = CONFIDENCE_BADGES[svc.tier];\n const budgetStr = svc.budget ? `$${svc.budget}` : \"—\";\n\n lines.push(\n `\| ${svc.serviceId} \| ${spendStr} \| ${badge} \| ${budgetStr} \| ${svc.statusLabel} \|`,\n );\n }\n\n lines.push(\"\");\n const totalStr = brief.totalIsEstimate\n ? `~$${brief.totalSpend.toFixed(2)}`\n : `$${brief.totalSpend.toFixed(2)}`;\n const marginStr =\n brief.estimateMargin > 0\n ? ` (±$${brief.estimateMargin.toFixed(0)} estimated margin)`\n : \"\";\n lines.push(`## TOTAL: ${totalStr}${marginStr}`);\n lines.push(`## Untracked services: ${brief.untrackedCount}`);\n lines.push(\"\");\n\n if (brief.alerts.length > 0) {\n lines.push(\"## Alerts\");\n for (const alert of brief.alerts) {\n const icon = alert.severity === \"critical\" ? \"🚨\" : \"⚠️\";\n lines.push(`- ${icon} ${alert.message}`);\n }\n lines.push(\"\");\n }\n\n const ledgerPath = path.join(\n projectConfigDir(projectRoot),\n \"spend-ledger.md\",\n );\n fs.mkdirSync(path.dirname(ledgerPath), { recursive: true });\n fs.writeFileSync(ledgerPath, lines.join(\"\\n\") + \"\\n\", \"utf-8\");\n}\n\n/\n Append an event to the append-only event log.\n /\nexport function logEvent(event: SpendEvent, projectRoot?: string): void {\n const logPath = path.join(projectDataDir(projectRoot), \"events.jsonl\");\n fs.mkdirSync(path.dirname(logPath), { recursive: true });\n fs.appendFileSync(logPath, JSON.stringify(event) + \"\\n\", \"utf-8\");\n}\n\n/\n Read recent events from the event log.\n /\nexport function readRecentEvents(\n count: number,\n projectRoot?: string,\n): SpendEvent[] {\n const logPath = path.join(projectDataDir(projectRoot), \"events.jsonl\");\n try {\n const raw = fs.readFileSync(logPath, \"utf-8\");\n const lines = raw.trim().split(\"\\n\").filter(Boolean);\n return lines\n .slice(-count)\n .map((line) => JSON.parse(line) as SpendEvent);\n } catch {\n return [];\n }\n}\n\n/\n Save a spend snapshot to the snapshots directory.\n * Used for delta computation across sessions.\n /\nexport function saveSnapshot(brief: SpendBrief, projectRoot?: string): void {\n const snapshotDir = path.join(projectDataDir(projectRoot), \"snapshots\");\n fs.mkdirSync(snapshotDir, { recursive: true });\n const filename = `snapshot-${new Date().toISOString().replace(/[:.]/g, \"-\")}.json`;\n fs.writeFileSync(\n path.join(snapshotDir, filename),\n JSON.stringify(brief, null, 2) + \"\\n\",\n \"utf-8\",\n );\n}\n\n/\n Read the most recent snapshot, if any.\n /\nexport function readLatestSnapshot(\n projectRoot?: string,\n): SpendBrief \| null {\n const snapshotDir = path.join(projectDataDir(projectRoot), \"snapshots\");\n try {\n const files = fs\n .readdirSync(snapshotDir)\n .filter((f) => f.startsWith(\"snapshot-\") && f.endsWith(\".json\"))\n .sort()\n .reverse();\n\n if (files.length === 0) return null;\n\n const raw = fs.readFileSync(\n path.join(snapshotDir, files[0]!),\n \"utf-8\",\n );\n return JSON.parse(raw) as SpendBrief;\n } catch {\n return null;\n }\n}\n","/\n Confidence tiers for spend tracking.\n \n LIVE — Real billing API data\n * CALC — Fixed monthly cost, user-entered\n * EST — Estimated from usage signals + pricing formula\n * BLIND — Detected in project, no tracking configured\n /\nexport type ConfidenceTier = \"live\" \| \"calc\" \| \"est\" \| \"blind\";\n\nexport const CONFIDENCE_BADGES: Record<ConfidenceTier, string> = {\n live: \"✅ LIVE\",\n calc: \"🟡 CALC\",\n est: \"🟠 EST\",\n blind: \"🔴 BLIND\",\n};\n\n/* How a service charges — determines tracking strategy. /\nexport type BillingModel =\n \| \"token_usage\" // Per-token (Anthropic, OpenAI, Gemini)\n \| \"credit_pool\" // Fixed credit bucket (Scrapfly)\n \| \"per_unit\" // Per-email, per-session, per-command (Resend, Browserbase, Upstash)\n \| \"percentage\" // Percentage of transaction (Stripe)\n \| \"flat_monthly\" // Fixed monthly subscription (PostHog, Inngest free tier)\n \| \"tiered\" // Free up to X, then jumps (PostHog, Supabase)\n \| \"compute\" // Compute-time based (Vercel, AWS)\n \| \"unknown\";\n\n/* How cost scales — helps the agent reason about future spend. /\nexport type ScalingShape =\n \| \"linear\" // Each unit costs the same\n \| \"linear_burndown\" // Fixed pool, each use depletes it\n \| \"tiered_jump\" // Free until threshold, then expensive\n \| \"percentage\" // Proportional to revenue/volume\n \| \"fixed\" // Flat monthly, no scaling\n \| \"unknown\";\n\n/* A service definition from the registry. /\nexport interface ServiceDefinition {\n /* Unique service identifier /\n id: string;\n /* Human-readable name /\n name: string;\n /* Package names in npm/pip that indicate this service /\n packageNames: string[];\n /* Env var patterns that indicate this service /\n envPatterns: string[];\n /* Import patterns to scan for (regex strings) /\n importPatterns: string[];\n /* Keywords that indicate mentions in prompts /\n mentionKeywords: string[];\n /* Billing model /\n billingModel: BillingModel;\n /* How cost scales /\n scalingShape: ScalingShape;\n /* What tier of tracking is available /\n apiTier: ConfidenceTier;\n /* Billing API endpoint, if available /\n apiEndpoint?: string;\n /* Pricing details /\n pricing?: {\n /* Human-readable formula /\n formula?: string;\n /* Rate per unit, if applicable /\n unitRate?: number;\n /* Unit name (token, credit, email, session, etc.) /\n unitName?: string;\n /* Monthly base cost, if flat /\n monthlyBase?: number;\n };\n /* Known gotchas that affect cost /\n gotchas?: string[];\n /* Alternative services (free or cheaper) /\n alternatives?: string[];\n /* Documentation URL /\n docsUrl?: string;\n /* Last time pricing was verified /\n lastVerified?: string;\n /* Notes about recent pricing changes /\n pricingNotes?: string;\n}\n\n/* A tracked service instance — a service definition + user config. /\nexport interface TrackedService {\n /* Service definition ID /\n serviceId: string;\n /* How this service was detected /\n detectedVia: DetectionSource[];\n /* User-configured monthly budget /\n budget?: number;\n /* Whether the user has provided an API/billing key /\n hasApiKey: boolean;\n /* Override confidence tier (e.g., user provided billing key upgrades to LIVE) /\n tierOverride?: ConfidenceTier;\n /* User-entered monthly plan cost (for CALC tier) /\n planCost?: number;\n /* When this service was first detected /\n firstDetected: string;\n}\n\nexport type DetectionSource =\n \| \"package_json\"\n \| \"env_var\"\n \| \"import_scan\"\n \| \"prompt_mention\"\n \| \"git_diff\"\n \| \"manual\";\n\n/* A spend snapshot for a single service at a point in time. /\nexport interface SpendSnapshot {\n serviceId: string;\n /* Current period spend (or estimate) /\n spend: number;\n /* Is the spend figure exact or estimated? /\n isEstimate: boolean;\n /* Confidence tier for this reading /\n tier: ConfidenceTier;\n /* Budget allocated /\n budget?: number;\n /* Percentage of budget consumed /\n budgetPercent?: number;\n /* Budget status /\n status: \"healthy\" \| \"caution\" \| \"over\" \| \"unknown\";\n /* Human-readable status label /\n statusLabel: string;\n /* Raw data from billing API, if available /\n raw?: Record<string, unknown>;\n /* Timestamp of this snapshot /\n timestamp: string;\n}\n\n/* The full spend brief, injected at session start. /\nexport interface SpendBrief {\n projectName: string;\n generatedAt: string;\n period: string;\n services: SpendSnapshot[];\n totalSpend: number;\n totalIsEstimate: boolean;\n estimateMargin: number;\n untrackedCount: number;\n alerts: SpendAlert[];\n}\n\nexport interface SpendAlert {\n serviceId: string;\n type: \"over_budget\" \| \"near_budget\" \| \"new_service\" \| \"stale_data\" \| \"blind_service\";\n message: string;\n severity: \"warning\" \| \"critical\" \| \"info\";\n}\n\n/* Ledger entry — one row in spend-ledger.md /\nexport interface LedgerEntry {\n serviceId: string;\n serviceName: string;\n spend: number;\n isEstimate: boolean;\n tier: ConfidenceTier;\n budget?: number;\n statusLabel: string;\n}\n\n/* Event logged to events.jsonl /\nexport interface SpendEvent {\n timestamp: string;\n sessionId: string;\n type:\n \| \"session_start\"\n \| \"session_end\"\n \| \"service_detected\"\n \| \"service_mentioned\"\n \| \"spend_polled\"\n \| \"budget_alert\"\n \| \"ledger_written\";\n data: Record<string, unknown>;\n}\n\n/\n Hook input — the JSON received via stdin from Claude Code.\n * Subset of fields we care about.\n /\nexport interface HookInput {\n session_id: string;\n transcript_path?: string;\n cwd: string;\n hook_event_name: string;\n // SessionStart\n source?: string;\n // UserPromptSubmit\n prompt?: string;\n // PostToolUse\n tool_name?: string;\n tool_input?: {\n file_path?: string;\n command?: string;\n content?: string;\n old_string?: string;\n new_string?: string;\n };\n}\n\n/\n Hook output — the JSON we write to stdout for Claude Code.\n /\nexport interface HookOutput {\n hookSpecificOutput?: {\n hookEventName: string;\n additionalContext?: string;\n };\n}\n","import type {\n SpendBrief,\n SpendSnapshot,\n SpendAlert,\n ConfidenceTier,\n} from \"./types.js\";\nimport { CONFIDENCE_BADGES } from \"./types.js\";\n\n/\n Format a spend brief as a text block for injection into Claude's context.\n /\nexport function formatBrief(brief: SpendBrief): string {\n const lines: string[] = [];\n const width = 62;\n const hrDouble = \"═\".repeat(width);\n const hrSingle = \"─\".repeat(width - 4);\n\n lines.push(`╔${hrDouble}╗`);\n lines.push(\n `║ BURNWATCH — ${brief.projectName} — ${brief.period}`.padEnd(\n width + 1,\n ) + \"║\",\n );\n lines.push(`╠${hrDouble}╣`);\n\n // Header\n lines.push(\n formatRow(\"Service\", \"Spend\", \"Conf\", \"Budget\", \"Left\", width),\n );\n lines.push(`║ ${hrSingle} ║`);\n\n // Service rows\n for (const svc of brief.services) {\n const spendStr = svc.isEstimate\n ? `~$${svc.spend.toFixed(2)}`\n : `$${svc.spend.toFixed(2)}`;\n const badge = CONFIDENCE_BADGES[svc.tier];\n const budgetStr = svc.budget ? `$${svc.budget}` : \"—\";\n const leftStr = formatLeft(svc);\n\n lines.push(formatRow(svc.serviceId, spendStr, badge, budgetStr, leftStr, width));\n }\n\n // Footer\n lines.push(`╠${hrDouble}╣`);\n const totalStr = brief.totalIsEstimate\n ? `~$${brief.totalSpend.toFixed(2)}`\n : `$${brief.totalSpend.toFixed(2)}`;\n const marginStr = brief.estimateMargin > 0\n ? ` Est margin: ±$${brief.estimateMargin.toFixed(0)}`\n : \"\";\n const untrackedStr =\n brief.untrackedCount > 0\n ? `Untracked: ${brief.untrackedCount} ⚠️`\n : `Untracked: 0 ✅`;\n\n lines.push(\n `║ TOTAL: ${totalStr} ${untrackedStr}${marginStr}`.padEnd(\n width + 1,\n ) + \"║\",\n );\n\n // Alerts\n for (const alert of brief.alerts) {\n const icon = alert.severity === \"critical\" ? \"🚨\" : \"⚠️\";\n lines.push(\n `║ ${icon} ${alert.message}`.padEnd(width + 1) + \"║\",\n );\n }\n\n lines.push(`╚${hrDouble}╝`);\n\n return lines.join(\"\\n\");\n}\n\n/\n Format a single-service spend card for injection on mention.\n /\nexport function formatSpendCard(snapshot: SpendSnapshot): string {\n const badge = CONFIDENCE_BADGES[snapshot.tier];\n const spendStr = snapshot.isEstimate\n ? `~$${snapshot.spend.toFixed(2)}`\n : `$${snapshot.spend.toFixed(2)}`;\n const budgetStr = snapshot.budget\n ? `Budget: $${snapshot.budget}`\n : \"No budget set\";\n const statusStr = snapshot.statusLabel;\n\n const lines = [\n `[BURNWATCH] ${snapshot.serviceId} — current period`,\n ` Spend: ${spendStr} \| ${budgetStr} \| ${statusStr}`,\n ` Confidence: ${badge}`,\n ];\n\n if (snapshot.status === \"over\" && snapshot.budgetPercent) {\n lines.push(\n ` ⚠️ ${snapshot.budgetPercent.toFixed(0)}% of budget consumed`,\n );\n }\n\n return lines.join(\"\\n\");\n}\n\n/\n Build a SpendBrief from snapshots and project config.\n /\nexport function buildBrief(\n projectName: string,\n snapshots: SpendSnapshot[],\n blindCount: number,\n): SpendBrief {\n const now = new Date();\n const period = now.toLocaleDateString(\"en-US\", {\n month: \"long\",\n year: \"numeric\",\n });\n\n let totalSpend = 0;\n let hasEstimates = false;\n let estimateMargin = 0;\n const alerts: SpendAlert[] = [];\n\n for (const snap of snapshots) {\n totalSpend += snap.spend;\n if (snap.isEstimate) {\n hasEstimates = true;\n estimateMargin += snap.spend 0.15; // ±15% margin on estimates\n }\n\n if (snap.status === \"over\") {\n alerts.push({\n serviceId: snap.serviceId,\n type: \"over_budget\",\n message: `${snap.serviceId.toUpperCase()} ${snap.budgetPercent?.toFixed(0) ?? \"?\"}% OVER BUDGET — review before use`,\n severity: \"critical\",\n });\n } else if (snap.status === \"caution\" && snap.budgetPercent && snap.budgetPercent >= 80) {\n alerts.push({\n serviceId: snap.serviceId,\n type: \"near_budget\",\n message: `${snap.serviceId} at ${snap.budgetPercent.toFixed(0)}% of budget`,\n severity: \"warning\",\n });\n }\n }\n\n if (blindCount > 0) {\n alerts.push({\n serviceId: \"_blind\",\n type: \"blind_service\",\n message: `${blindCount} service${blindCount > 1 ? \"s\" : \"\"} detected but untracked — run 'burnwatch status' to see`,\n severity: \"warning\",\n });\n }\n\n return {\n projectName,\n generatedAt: now.toISOString(),\n period,\n services: snapshots,\n totalSpend,\n totalIsEstimate: hasEstimates,\n estimateMargin,\n untrackedCount: blindCount,\n alerts,\n };\n}\n\n// --- Helpers ---\n\nfunction formatRow(\n service: string,\n spend: string,\n conf: string,\n budget: string,\n left: string,\n width: number,\n): string {\n const row = ` ${service.padEnd(14)} ${spend.padEnd(11)} ${conf.padEnd(7)} ${budget.padEnd(7)} ${left}`;\n return `║${row}`.padEnd(width + 1) + \"║\";\n}\n\nfunction formatLeft(snap: SpendSnapshot): string {\n if (!snap.budget) return \"—\";\n if (snap.status === \"over\") return \"⚠️ OVR\";\n if (snap.budgetPercent !== undefined) {\n const remaining = 100 - snap.budgetPercent;\n return `${remaining.toFixed(0)}%`;\n }\n return \"—\";\n}\n\n/*\n Build a SpendSnapshot from tracked service data.\n /\nexport function buildSnapshot(\n serviceId: string,\n tier: ConfidenceTier,\n spend: number,\n budget?: number,\n): SpendSnapshot {\n const isEstimate = tier === \"est\" \|\| tier === \"calc\";\n const budgetPercent = budget ? (spend / budget) 100 : undefined;\n\n let status: SpendSnapshot[\"status\"] = \"unknown\";\n let statusLabel = \"no budget\";\n\n if (budget) {\n if (budgetPercent! > 100) {\n status = \"over\";\n statusLabel = `⚠️ ${budgetPercent!.toFixed(0)}% over`;\n } else if (budgetPercent! >= 75) {\n status = \"caution\";\n statusLabel = `${(100 - budgetPercent!).toFixed(0)}% — caution`;\n } else {\n status = \"healthy\";\n statusLabel = `${(100 - budgetPercent!).toFixed(0)}% — healthy`;\n }\n }\n\n if (tier === \"calc\" && budget) {\n statusLabel = `flat — on plan`;\n status = \"healthy\";\n }\n\n return {\n serviceId,\n spend,\n isEstimate,\n tier,\n budget,\n budgetPercent,\n status,\n statusLabel,\n timestamp: new Date().toISOString(),\n };\n}\n"],"mappings":";;;AASA,YAAYA,SAAQ;;;ACTpB,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AAoBb,SAAS,iBAAiB,aAA8B;AAC7D,QAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,SAAY,UAAK,MAAM,YAAY;AACrC;AAGO,SAAS,eAAe,aAA8B;AAC3D,SAAY,UAAK,iBAAiB,WAAW,GAAG,MAAM;AACxD;AA2CO,SAAS,kBAAkB,aAA4C;AAC5E,QAAM,aAAkB,UAAK,iBAAiB,WAAW,GAAG,aAAa;AACzE,MAAI;AACF,UAAM,MAAS,gBAAa,YAAY,OAAO;AAC/C,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AA2BO,SAAS,cAAc,aAA+B;AAC3D,SAAO,kBAAkB,WAAW,MAAM;AAC5C;;;AC9GA,YAAYC,SAAQ;AACpB,YAAYC,WAAU;;;ACDtB,YAAYC,SAAQ;AACpB,YAAYC,WAAU;AACtB,YAAY,SAAS;AAGrB,IAAM,YAAiB,cAAY,kBAAc,YAAY,GAAG,CAAC;AAQjE,IAAI,iBAAwD;AAMrD,SAAS,aAAa,aAAsD;AACjF,MAAI,eAAgB,QAAO;AAE3B,QAAM,WAAW,oBAAI,IAA+B;AAIpD,QAAM,aAAa;AAAA,IACZ,cAAQ,WAAW,qBAAqB;AAAA;AAAA,IACxC,cAAQ,WAAW,kBAAkB;AAAA;AAAA,EAC5C;AACA,aAAW,aAAa,YAAY;AAClC,QAAO,eAAW,SAAS,GAAG;AAC5B,uBAAiB,WAAW,QAAQ;AACpC;AAAA,IACF;AAAA,EACF;AAGA,MAAI,aAAa;AACf,UAAM,YAAiB,WAAK,aAAa,cAAc,eAAe;AACtE,QAAO,eAAW,SAAS,GAAG;AAC5B,uBAAiB,WAAW,QAAQ;AAAA,IACtC;AAAA,EACF;AAEA,mBAAiB;AACjB,SAAO;AACT;AAEA,SAAS,iBACP,UACA,UACM;AACN,MAAI;AACF,UAAM,MAAS,iBAAa,UAAU,OAAO;AAC7C,UAAM,OAAO,KAAK,MAAM,GAAG;AAC3B,eAAW,CAAC,IAAI,OAAO,KAAK,OAAO,QAAQ,KAAK,QAAQ,GAAG;AACzD,eAAS,IAAI,IAAI,EAAE,GAAG,SAAS,GAAG,CAAC;AAAA,IACrC;AAAA,EACF,QAAQ;AAAA,EAER;AACF;;;ADiBO,SAAS,eACd,QACA,aACmB;AACnB,QAAM,WAAW,aAAa,WAAW;AACzC,QAAM,UAA6B,CAAC;AACpC,QAAM,cAAc,OAAO,YAAY;AAEvC,aAAW,CAAC,EAAE,OAAO,KAAK,UAAU;AAClC,UAAM,UAAU,QAAQ,gBAAgB;AAAA,MAAK,CAAC,YAC5C,YAAY,SAAS,QAAQ,YAAY,CAAC;AAAA,IAC5C;AACA,QAAI,SAAS;AACX,cAAQ,KAAK;AAAA,QACX;AAAA,QACA,SAAS,CAAC,gBAAgB;AAAA,QAC1B,SAAS,CAAC,qBAAqB;AAAA,MACjC,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;;;AErGA,YAAYC,SAAQ;AACpB,YAAYC,WAAU;;;ACSf,IAAM,oBAAoD;AAAA,EAC/D,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,OAAO;AACT;;;ADmDO,SAAS,SAAS,OAAmB,aAA4B;AACtE,QAAM,UAAe,WAAK,eAAe,WAAW,GAAG,cAAc;AACrE,EAAG,cAAe,cAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,EAAG,mBAAe,SAAS,KAAK,UAAU,KAAK,IAAI,MAAM,OAAO;AAClE;AAuCO,SAAS,mBACd,aACmB;AACnB,QAAM,cAAmB,WAAK,eAAe,WAAW,GAAG,WAAW;AACtE,MAAI;AACF,UAAM,QACH,gBAAY,WAAW,EACvB,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW,KAAK,EAAE,SAAS,OAAO,CAAC,EAC9D,KAAK,EACL,QAAQ;AAEX,QAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,UAAM,MAAS;AAAA,MACR,WAAK,aAAa,MAAM,CAAC,CAAE;AAAA,MAChC;AAAA,IACF;AACA,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AEpDO,SAAS,gBAAgB,UAAiC;AAC/D,QAAM,QAAQ,kBAAkB,SAAS,IAAI;AAC7C,QAAM,WAAW,SAAS,aACtB,KAAK,SAAS,MAAM,QAAQ,CAAC,CAAC,KAC9B,IAAI,SAAS,MAAM,QAAQ,CAAC,CAAC;AACjC,QAAM,YAAY,SAAS,SACvB,YAAY,SAAS,MAAM,KAC3B;AACJ,QAAM,YAAY,SAAS;AAE3B,QAAM,QAAQ;AAAA,IACZ,eAAe,SAAS,SAAS;AAAA,IACjC,YAAY,QAAQ,QAAQ,SAAS,QAAQ,SAAS;AAAA,IACtD,iBAAiB,KAAK;AAAA,EACxB;AAEA,MAAI,SAAS,WAAW,UAAU,SAAS,eAAe;AACxD,UAAM;AAAA,MACJ,kBAAQ,SAAS,cAAc,QAAQ,CAAC,CAAC;AAAA,IAC3C;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;;;ANpFA,SAAS,OAAa;AAEpB,MAAI;AACJ,MAAI;AACF,UAAM,QAAW,iBAAa,GAAG,OAAO;AACxC,YAAQ,KAAK,MAAM,KAAK;AAAA,EAC1B,QAAQ;AACN,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAEA,QAAM,cAAc,MAAM;AAC1B,QAAM,SAAS,MAAM;AAGrB,MAAI,CAAC,cAAc,WAAW,KAAK,CAAC,QAAQ;AAC1C,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAEA,QAAM,SAAS,kBAAkB,WAAW;AAG5C,QAAM,WAAW,eAAe,QAAQ,WAAW;AACnD,MAAI,SAAS,WAAW,GAAG;AACzB,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAGA,QAAM,WAAW,mBAAmB,WAAW;AAG/C,QAAM,QAAkB,CAAC;AAEzB,aAAW,WAAW,UAAU;AAC9B,UAAM,YAAY,QAAQ,QAAQ;AAClC,UAAM,iBAAiB,OAAO,SAAS,SAAS;AAGhD,UAAM,kBAAkB,UAAU,SAAS;AAAA,MACzC,CAAC,MAAM,EAAE,cAAc;AAAA,IACzB;AAEA,QAAI,iBAAiB;AACnB,YAAM,KAAK,gBAAgB,eAAe,CAAC;AAAA,IAC7C,WAAW,gBAAgB;AAEzB,YAAM;AAAA,QACJ,eAAe,SAAS,+CAA0C,eAAe,SAAS,IAAI,eAAe,MAAM,KAAK,SAAS;AAAA,MACnI;AAAA,IACF,OAAO;AAEL,YAAM;AAAA,QACJ,eAAe,SAAS,mEAA8D,SAAS;AAAA,MACjG;AAAA,IACF;AAGA;AAAA,MACE;AAAA,QACE,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QAClC,WAAW,MAAM;AAAA,QACjB,MAAM;AAAA,QACN,MAAM,EAAE,WAAW,QAAQ,OAAO,MAAM,GAAG,GAAG,EAAE;AAAA,MAClD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,MAAM,WAAW,GAAG;AACtB,YAAQ,KAAK,CAAC;AACd;AAAA,EACF;AAGA,QAAM,SAAqB;AAAA,IACzB,oBAAoB;AAAA,MAClB,eAAe;AAAA,MACf,mBAAmB,MAAM,KAAK,MAAM;AAAA,IACtC;AAAA,EACF;AAEA,UAAQ,OAAO,MAAM,KAAK,UAAU,MAAM,CAAC;AAC7C;AAEA,KAAK;","names":["fs","fs","path","fs","path","fs","path"]}

package/dist/hooks/on-session-start.js CHANGED Viewed

@@ -316,7 +316,7 @@ function getService(id, projectRoot) {
 function detectServices(projectRoot) {
   const registry = loadRegistry(projectRoot);
   const results = /* @__PURE__ */ new Map();
-  const pkgDeps = scanPackageJson(projectRoot);
+  const pkgDeps = scanAllPackageJsons(projectRoot);
   for (const [serviceId, service] of registry) {
     const matchedPkgs = service.packageNames.filter(
       (pkg) => pkgDeps.has(pkg)
@@ -328,7 +328,7 @@ function detectServices(projectRoot) {
       );
     }
   }
-  const envVars = new Set(Object.keys(process.env));
+  const envVars = collectEnvVars(projectRoot);
   for (const [serviceId, service] of registry) {
     const matchedEnvs = service.envPatterns.filter(
       (pattern) => envVars.has(pattern)
@@ -366,40 +366,118 @@ function getOrCreate(map, serviceId, service) {
   }
   return result;
 }
-function scanPackageJson(projectRoot) {
+function scanAllPackageJsons(projectRoot) {
   const deps = /* @__PURE__ */ new Set();
-  const pkgPath = path4.join(projectRoot, "package.json");
+  const pkgFiles = findFiles(projectRoot, "package.json", 4);
+  for (const pkgPath of pkgFiles) {
+    try {
+      const raw = fs4.readFileSync(pkgPath, "utf-8");
+      const pkg = JSON.parse(raw);
+      for (const name of Object.keys(pkg.dependencies ?? {})) deps.add(name);
+      for (const name of Object.keys(pkg.devDependencies ?? {})) deps.add(name);
+    } catch {
+    }
+  }
+  return deps;
+}
+function collectEnvVars(projectRoot) {
+  const envVars = new Set(Object.keys(process.env));
+  const envFiles = findEnvFiles(projectRoot, 3);
+  for (const envFile of envFiles) {
+    try {
+      const content = fs4.readFileSync(envFile, "utf-8");
+      const keys = content.split("\n").filter((line) => line.includes("=") && !line.startsWith("#")).map((line) => line.split("=")[0].trim()).filter(Boolean);
+      for (const key of keys) {
+        envVars.add(key);
+      }
+    } catch {
+    }
+  }
+  return envVars;
+}
+function findEnvFiles(dir, maxDepth) {
+  const results = [];
+  if (maxDepth <= 0) return results;
   try {
-    const raw = fs4.readFileSync(pkgPath, "utf-8");
-    const pkg = JSON.parse(raw);
-    for (const name of Object.keys(pkg.dependencies ?? {})) deps.add(name);
-    for (const name of Object.keys(pkg.devDependencies ?? {})) deps.add(name);
+    const entries = fs4.readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+      if (entry.name === "node_modules" || entry.name === ".git" || entry.name === "dist") continue;
+      const fullPath = path4.join(dir, entry.name);
+      if (entry.isDirectory()) {
+        results.push(...findEnvFiles(fullPath, maxDepth - 1));
+      } else if (entry.name.startsWith(".env")) {
+        results.push(fullPath);
+      }
+    }
   } catch {
   }
-  return deps;
+  return results;
+}
+function findFiles(dir, fileName, maxDepth) {
+  const results = [];
+  if (maxDepth <= 0) return results;
+  try {
+    const entries = fs4.readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+      if (entry.name === "node_modules" || entry.name === ".git" || entry.name === "dist") continue;
+      const fullPath = path4.join(dir, entry.name);
+      if (entry.isDirectory()) {
+        results.push(...findFiles(fullPath, fileName, maxDepth - 1));
+      } else if (entry.name === fileName) {
+        results.push(fullPath);
+      }
+    }
+  } catch {
+  }
+  return results;
 }
 function scanImports(projectRoot) {
   const imports = /* @__PURE__ */ new Set();
-  const srcDir = path4.join(projectRoot, "src");
-  if (!fs4.existsSync(srcDir)) return imports;
-  const files = walkDir(srcDir, /\.(ts|tsx|js|jsx|mjs|cjs)$/);
-  for (const file of files) {
-    try {
-      const content = fs4.readFileSync(file, "utf-8");
-      const importRegex = /(?:from\s+["']|require\s*\(\s*["'])([^./][^"']*?)(?:["'])/g;
-      let match;
-      while ((match = importRegex.exec(content)) !== null) {
-        const pkg = match[1];
-        if (pkg) {
-          const parts = pkg.split("/");
-          if (parts[0]?.startsWith("@") && parts.length >= 2) {
-            imports.add(`${parts[0]}/${parts[1]}`);
-          } else if (parts[0]) {
-            imports.add(parts[0]);
+  const codeDirs = ["src", "app", "lib", "pages", "components", "utils", "services", "hooks"];
+  const dirsToScan = [];
+  for (const dir of codeDirs) {
+    const fullPath = path4.join(projectRoot, dir);
+    if (fs4.existsSync(fullPath)) {
+      dirsToScan.push(fullPath);
+    }
+  }
+  try {
+    const entries = fs4.readdirSync(projectRoot, { withFileTypes: true });
+    for (const entry of entries) {
+      if (!entry.isDirectory()) continue;
+      if (entry.name === "node_modules" || entry.name === ".git" || entry.name === "dist" || entry.name.startsWith(".")) continue;
+      const subPkgPath = path4.join(projectRoot, entry.name, "package.json");
+      if (fs4.existsSync(subPkgPath)) {
+        for (const dir of codeDirs) {
+          const fullPath = path4.join(projectRoot, entry.name, dir);
+          if (fs4.existsSync(fullPath)) {
+            dirsToScan.push(fullPath);
           }
         }
       }
-    } catch {
+    }
+  } catch {
+  }
+  for (const dir of dirsToScan) {
+    const files = walkDir(dir, /\.(ts|tsx|js|jsx|mjs|cjs)$/);
+    for (const file of files) {
+      try {
+        const content = fs4.readFileSync(file, "utf-8");
+        const importRegex = /(?:from\s+["']|require\s*\(\s*["'])([^./][^"']*?)(?:["'])/g;
+        let match;
+        while ((match = importRegex.exec(content)) !== null) {
+          const pkg = match[1];
+          if (pkg) {
+            const parts = pkg.split("/");
+            if (parts[0]?.startsWith("@") && parts.length >= 2) {
+              imports.add(`${parts[0]}/${parts[1]}`);
+            } else if (parts[0]) {
+              imports.add(parts[0]);
+            }
+          }
+        }
+      } catch {
+      }
     }
   }
   return imports;