codex-token-tracker 0.1.1 → 0.2.0

package/dist/main.js

@@ -24,10 +24,10 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 
 // src/main.ts
 var import_electron = require("electron");
-var import_node_fs8 = __toESM(require("node:fs"));
+var import_node_fs9 = __toESM(require("node:fs"));
 var import_node_os7 = __toESM(require("node:os"));
-var import_node_path10 = __toESM(require("node:path"));
-var import_node_child_process3 = require("node:child_process");
+var import_node_path11 = __toESM(require("node:path"));
+var import_node_child_process4 = require("node:child_process");
 var import_menubar = require("menubar");
 
 // ../shared/src/usage.ts
@@ -50,20 +50,53 @@ function cacheHitRate(u) {
 }
 
 // ../shared/src/pricing.ts
+var LONG_CONTEXT_THRESHOLD = 272e3;
+var long = (threshold, input, cachedInput, output) => ({
+  threshold,
+  input,
+  cachedInput,
+  output
+});
 var DEFAULT_PRICING = {
-  // GPT-5.x family
+  // GPT-5.6 family
+  "gpt-5.6-sol": { input: 4, cachedInput: 0.4, output: 20, long: long(LONG_CONTEXT_THRESHOLD, 8, 0.8, 30) },
+  "gpt-5.6-sol-codex": { input: 4, cachedInput: 0.4, output: 20, long: long(LONG_CONTEXT_THRESHOLD, 8, 0.8, 30) },
+  "gpt-5.6-terra": { input: 2, cachedInput: 0.2, output: 12, long: long(LONG_CONTEXT_THRESHOLD, 4, 0.4, 18) },
+  "gpt-5.6-terra-codex": { input: 2, cachedInput: 0.2, output: 12, long: long(LONG_CONTEXT_THRESHOLD, 4, 0.4, 18) },
+  "gpt-5.6-luna": { input: 0.2, cachedInput: 0.02, output: 1.2, long: long(LONG_CONTEXT_THRESHOLD, 0.4, 0.04, 1.8) },
+  "gpt-5.6-cyber": { input: 12.5, cachedInput: 1.25, output: 75 },
+  // GPT-5.5 family
+  "gpt-5.5": { input: 5, cachedInput: 0.5, output: 30, long: long(LONG_CONTEXT_THRESHOLD, 10, 1, 45) },
+  "gpt-5.5-codex": { input: 5, cachedInput: 0.5, output: 30, long: long(LONG_CONTEXT_THRESHOLD, 10, 1, 45) },
+  "gpt-5.5-pro": { input: 30, cachedInput: 30, output: 180, long: long(LONG_CONTEXT_THRESHOLD, 60, 60, 270) },
+  "gpt-5.5-cyber": { input: 12.5, cachedInput: 1.25, output: 75 },
+  // GPT-5.4 family
+  "gpt-5.4": { input: 2.5, cachedInput: 0.25, output: 15, long: long(LONG_CONTEXT_THRESHOLD, 5, 0.5, 22.5) },
+  "gpt-5.4-codex": { input: 2.5, cachedInput: 0.25, output: 15, long: long(LONG_CONTEXT_THRESHOLD, 5, 0.5, 22.5) },
+  "gpt-5.4-mini": { input: 0.75, cachedInput: 0.075, output: 4.5 },
+  "gpt-5.4-nano": { input: 0.2, cachedInput: 0.02, output: 1.25 },
+  "gpt-5.4-pro": { input: 30, cachedInput: 30, output: 180, long: long(LONG_CONTEXT_THRESHOLD, 60, 60, 270) },
+  // GPT-5.3 family (Codex-only release)
+  "gpt-5.3": { input: 1.75, cachedInput: 0.175, output: 14 },
+  "gpt-5.3-codex": { input: 1.75, cachedInput: 0.175, output: 14 },
+  // GPT-5.2 family
+  "gpt-5.2": { input: 1.75, cachedInput: 0.175, output: 14 },
+  "gpt-5.2-codex": { input: 1.75, cachedInput: 0.175, output: 14 },
+  "gpt-5.2-pro": { input: 21, cachedInput: 21, output: 168 },
+  // GPT-5.1 family
+  "gpt-5.1": { input: 1.25, cachedInput: 0.125, output: 10 },
+  "gpt-5.1-codex": { input: 1.25, cachedInput: 0.125, output: 10 },
+  "gpt-5.1-codex-max": { input: 1.25, cachedInput: 0.125, output: 10 },
+  "gpt-5.1-codex-mini": { input: 0.25, cachedInput: 0.025, output: 2 },
+  // GPT-5 family
   "gpt-5": { input: 1.25, cachedInput: 0.125, output: 10 },
   "gpt-5-codex": { input: 1.25, cachedInput: 0.125, output: 10 },
   "gpt-5-mini": { input: 0.25, cachedInput: 0.025, output: 2 },
   "gpt-5-nano": { input: 0.05, cachedInput: 5e-3, output: 0.4 },
   "gpt-5-pro": { input: 15, cachedInput: 15, output: 120 },
-  "gpt-5.1": { input: 1.25, cachedInput: 0.125, output: 10 },
-  "gpt-5.1-codex": { input: 1.25, cachedInput: 0.125, output: 10 },
-  "gpt-5.1-codex-max": { input: 1.25, cachedInput: 0.125, output: 10 },
-  "gpt-5.1-codex-mini": { input: 0.25, cachedInput: 0.025, output: 2 },
-  "gpt-5.2": { input: 1.75, cachedInput: 0.175, output: 14 },
-  "gpt-5.2-codex": { input: 1.75, cachedInput: 0.175, output: 14 },
-  "gpt-5.2-pro": { input: 21, cachedInput: 21, output: 168 },
+  "gpt-5-search-api": { input: 1.25, cachedInput: 0.125, output: 10 },
+  // ChatGPT-tuned endpoint
+  "chat-latest": { input: 5, cachedInput: 0.5, output: 30 },
   // GPT-4.1 / 4o family
   "gpt-4.1": { input: 2, cachedInput: 0.5, output: 8 },
   "gpt-4.1-mini": { input: 0.4, cachedInput: 0.1, output: 1.6 },
@@ -79,7 +112,7 @@ var DEFAULT_PRICING = {
   "o4-mini": { input: 1.1, cachedInput: 0.275, output: 4.4 },
   "codex-mini-latest": { input: 1.5, cachedInput: 0.375, output: 6 }
 };
-var FALLBACK_PRICE_KEY = "gpt-5.2";
+var FALLBACK_PRICE_KEY = "gpt-5.3-codex";
 var TIERS = ["mini", "nano", "pro"];
 function normalizeModelName(model) {
   let m = (model || "").trim().toLowerCase();
@@ -89,6 +122,11 @@ function normalizeModelName(model) {
   m = m.replace(/-preview$/, "");
   return m;
 }
+function isOpenAIModel(model) {
+  const m = normalizeModelName(model);
+  if (m === "unknown") return true;
+  return /^(gpt[-.]|chatgpt|chat-latest|o[1-9](?:[-.]|$)|codex|text-|davinci|babbage|ada|curie)/.test(m);
+}
 function tierOf(name) {
   for (const t2 of TIERS) if (name.split("-").includes(t2)) return t2;
   return null;
@@ -128,11 +166,12 @@ function resolvePrice(model, overrides) {
 }
 function computeCost(u, p) {
   const input = u.input ?? 0;
+  const rate = p.long && input > p.long.threshold ? p.long : p;
   const cached = Math.min(u.cached ?? 0, input);
   const cacheWrite = Math.min(u.cacheWrite ?? 0, Math.max(0, input - cached));
   const fresh = Math.max(0, input - cached - cacheWrite);
   const output = u.output ?? 0;
-  const cost = fresh * p.input + cached * p.cachedInput + cacheWrite * (p.cacheWrite ?? p.input) + output * p.output;
+  const cost = fresh * rate.input + cached * rate.cachedInput + cacheWrite * (p.cacheWrite ?? rate.input) + output * rate.output;
   return cost / 1e6;
 }
 
@@ -312,14 +351,14 @@ function createSessionParser(fallbackSessionId) {
     if (ts2 > lastActivityAt) lastActivityAt = ts2;
   }
   function onTokenCount(ts2, payload) {
-    const info = payload.info;
+    const info2 = payload.info;
     let cumulative = null;
     let last = null;
-    if (info && typeof info === "object") {
-      cumulative = toUsage(info.total_token_usage);
-      last = toUsage(info.last_token_usage);
-      if (typeof info.model_context_window === "number") contextWindow = info.model_context_window;
-    } else if (info === void 0) {
+    if (info2 && typeof info2 === "object") {
+      cumulative = toUsage(info2.total_token_usage);
+      last = toUsage(info2.last_token_usage);
+      if (typeof info2.model_context_window === "number") contextWindow = info2.model_context_window;
+    } else if (info2 === void 0) {
       cumulative = toUsage(payload);
     }
     const rl = payload.rate_limits;
@@ -1022,7 +1061,8 @@ var DEFAULT_CONFIG = {
   sources: { ...DEFAULT_SOURCES },
   trackAllProviders: false,
   liveRateLimits: true,
-  usageRefreshSec: 60
+  usageRefreshSec: 60,
+  checkUpdates: true
 };
 function configDir() {
   return process.env.CODEX_TRACKER_HOME || import_node_path.default.join(import_node_os.default.homedir(), ".codex-tracker");
@@ -1076,6 +1116,7 @@ function loadConfig() {
   cfg.sources = normalizeSources(stored.sources);
   cfg.trackAllProviders = stored.trackAllProviders === true;
   cfg.liveRateLimits = stored.liveRateLimits !== false;
+  cfg.checkUpdates = stored.checkUpdates !== false;
   if (!(cfg.usageRefreshSec >= 15)) cfg.usageRefreshSec = DEFAULT_CONFIG.usageRefreshSec;
   if (!["auto", "en", "zh"].includes(cfg.language)) cfg.language = "auto";
   if (!(cfg.uploadIntervalSec >= 10)) cfg.uploadIntervalSec = DEFAULT_CONFIG.uploadIntervalSec;
@@ -1215,8 +1256,20 @@ var en = {
   never: "never",
   local: "Local",
   remote: "Other devices",
+  // updates
+  update: "Update",
+  updateAvailable: "Update to v{version}",
+  updateNewVersion: "Version {version} is available (you have v{current})",
+  updateUpToDate: "Up to date",
+  updateChecking: "Checking\u2026",
+  updateInstalling: "Installing\u2026",
+  updateInstalled: "Updated to v{version} \u2014 restart to apply",
+  updateFailed: "Update failed \u2014 run this yourself:",
+  updateCheckFailed: "Update check failed: {message}",
+  checkForUpdates: "Check for updates",
+  releaseNotes: "Release notes",
   // CLI
-  cliUsage: `Usage: codex-tracker [command] [options]
+  cliUsage: `Usage: codex-token-tracker [command] [options]      (alias: codex-tracker)
 
 Commands:
   (none)            Start the menu bar app (falls back to agent mode without a display)
@@ -1227,10 +1280,12 @@ Commands:
   logout            Disconnect this device
   status            Print today's usage, live session and rate limits
   paths             Show detected session directories (Codex, pi, OpenCode, Cline/Roo/Kilo, Hermes, custom)
+  update            Install the newest published version (--check only reports)
   config get|set    Read or change settings (config set uploadIntervalSec 30, config set sources.pi false)
   lang <en|zh|auto> Set the display language
 
 Options:
+  --check           update: report the newest version without installing it
   --dashboard <url> Dashboard URL (self-hosted)
   --background      Start the menu bar app detached and return
   --version, -v     Print version
@@ -1272,7 +1327,13 @@ Options:
   cliConfigSet: "Set {key} = {value}",
   cliConfigUnknownKey: "Unknown config key: {key}. Keys: {keys}",
   cliLangSet: "Language set to {lang}",
-  cliConfigDir: "Config: {dir}"
+  cliConfigDir: "Config: {dir}",
+  cliUpdateLatest: "codex-token-tracker {version} is the latest version.",
+  cliUpdateAvailable: "Update available: {current} \u2192 {latest}",
+  cliUpdateRunning: "Running: {command}",
+  cliUpdateDone: "Updated to {version}. Restart the menu bar app (or rerun the CLI) to use it.",
+  cliUpdateFailed: "Update failed (exit {code}). Run it yourself: {command}",
+  cliUpdateCheckFailed: "Could not reach the npm registry: {message}"
 };
 
 // src/i18n/zh.ts
@@ -1346,7 +1407,18 @@ var zh = {
   never: "\u4ECE\u672A",
   local: "\u672C\u673A",
   remote: "\u5176\u4ED6\u8BBE\u5907",
-  cliUsage: `\u7528\u6CD5\uFF1Acodex-tracker [\u547D\u4EE4] [\u9009\u9879]
+  update: "\u66F4\u65B0",
+  updateAvailable: "\u66F4\u65B0\u5230 v{version}",
+  updateNewVersion: "\u6709\u65B0\u7248\u672C {version}\uFF08\u5F53\u524D v{current}\uFF09",
+  updateUpToDate: "\u5DF2\u662F\u6700\u65B0\u7248\u672C",
+  updateChecking: "\u68C0\u67E5\u4E2D\u2026",
+  updateInstalling: "\u5B89\u88C5\u4E2D\u2026",
+  updateInstalled: "\u5DF2\u66F4\u65B0\u5230 v{version} \u2014 \u91CD\u542F\u540E\u751F\u6548",
+  updateFailed: "\u66F4\u65B0\u5931\u8D25 \u2014 \u8BF7\u624B\u52A8\u6267\u884C\uFF1A",
+  updateCheckFailed: "\u68C0\u67E5\u66F4\u65B0\u5931\u8D25\uFF1A{message}",
+  checkForUpdates: "\u68C0\u67E5\u66F4\u65B0",
+  releaseNotes: "\u66F4\u65B0\u65E5\u5FD7",
+  cliUsage: `\u7528\u6CD5\uFF1Acodex-token-tracker [\u547D\u4EE4] [\u9009\u9879]      \uFF08\u522B\u540D\uFF1Acodex-tracker\uFF09
 
 \u547D\u4EE4\uFF1A
   (\u65E0)              \u542F\u52A8\u83DC\u5355\u680F\u5E94\u7528\uFF08\u65E0\u663E\u793A\u73AF\u5883\u65F6\u81EA\u52A8\u5207\u6362\u4E3A agent \u6A21\u5F0F\uFF09
@@ -1357,10 +1429,12 @@ var zh = {
   logout            \u65AD\u5F00\u672C\u8BBE\u5907
   status            \u6253\u5370\u4ECA\u65E5\u7528\u91CF\u3001\u5B9E\u65F6\u4F1A\u8BDD\u4E0E\u9650\u989D
   paths             \u663E\u793A\u68C0\u6D4B\u5230\u7684\u4F1A\u8BDD\u76EE\u5F55\uFF08Codex\u3001pi\u3001OpenCode\u3001Cline/Roo/Kilo\u3001Hermes\u3001\u81EA\u5B9A\u4E49\uFF09
+  update            \u5B89\u88C5\u6700\u65B0\u53D1\u5E03\u7248\u672C\uFF08--check \u53EA\u68C0\u67E5\u4E0D\u5B89\u88C5\uFF09
   config get|set    \u8BFB\u53D6\u6216\u4FEE\u6539\u8BBE\u7F6E\uFF08config set uploadIntervalSec 30\uFF0Cconfig set sources.pi false\uFF09
   lang <en|zh|auto> \u8BBE\u7F6E\u663E\u793A\u8BED\u8A00
 
 \u9009\u9879\uFF1A
+  --check           update\uFF1A\u53EA\u62A5\u544A\u6700\u65B0\u7248\u672C\uFF0C\u4E0D\u6267\u884C\u5B89\u88C5
   --dashboard <url> \u4EEA\u8868\u76D8\u5730\u5740\uFF08\u81EA\u6258\u7BA1\uFF09
   --background      \u4EE5\u540E\u53F0\u65B9\u5F0F\u542F\u52A8\u83DC\u5355\u680F\u5E94\u7528\u5E76\u7ACB\u5373\u8FD4\u56DE
   --version, -v     \u663E\u793A\u7248\u672C
@@ -1402,7 +1476,13 @@ var zh = {
   cliConfigSet: "\u5DF2\u8BBE\u7F6E {key} = {value}",
   cliConfigUnknownKey: "\u672A\u77E5\u914D\u7F6E\u9879\uFF1A{key}\u3002\u53EF\u7528\uFF1A{keys}",
   cliLangSet: "\u8BED\u8A00\u5DF2\u8BBE\u7F6E\u4E3A {lang}",
-  cliConfigDir: "\u914D\u7F6E\u76EE\u5F55\uFF1A{dir}"
+  cliConfigDir: "\u914D\u7F6E\u76EE\u5F55\uFF1A{dir}",
+  cliUpdateLatest: "codex-token-tracker {version} \u5DF2\u662F\u6700\u65B0\u7248\u672C\u3002",
+  cliUpdateAvailable: "\u53D1\u73B0\u65B0\u7248\u672C\uFF1A{current} \u2192 {latest}",
+  cliUpdateRunning: "\u6B63\u5728\u6267\u884C\uFF1A{command}",
+  cliUpdateDone: "\u5DF2\u66F4\u65B0\u5230 {version}\u3002\u8BF7\u91CD\u542F\u83DC\u5355\u680F\u5E94\u7528\uFF08\u6216\u91CD\u65B0\u8FD0\u884C CLI\uFF09\u4EE5\u751F\u6548\u3002",
+  cliUpdateFailed: "\u66F4\u65B0\u5931\u8D25\uFF08\u9000\u51FA\u7801 {code}\uFF09\u3002\u8BF7\u624B\u52A8\u6267\u884C\uFF1A{command}",
+  cliUpdateCheckFailed: "\u65E0\u6CD5\u8BBF\u95EE npm registry\uFF1A{message}"
 };
 
 // src/i18n/index.ts
@@ -1849,21 +1929,21 @@ function findSessionInfo(storage, sessionID) {
   const key = `${storage}|${sessionID}`;
   const cached = sessionCache.get(key);
   if (cached && (cached.info || Date.now() - cached.at < 6e4)) return cached.info;
-  let info = null;
+  let info2 = null;
   const sessionDir = import_node_path6.default.join(storage, "session");
   const direct = import_node_path6.default.join(sessionDir, "info", `${sessionID}.json`);
-  if (import_node_fs4.default.existsSync(direct)) info = readJsonFile(direct);
-  if (!info) {
+  if (import_node_fs4.default.existsSync(direct)) info2 = readJsonFile(direct);
+  if (!info2) {
     for (const project of listDirs(sessionDir)) {
       const p = import_node_path6.default.join(sessionDir, project, `${sessionID}.json`);
       if (import_node_fs4.default.existsSync(p)) {
-        info = readJsonFile(p);
+        info2 = readJsonFile(p);
         break;
       }
     }
   }
-  sessionCache.set(key, { at: Date.now(), info });
-  return info;
+  sessionCache.set(key, { at: Date.now(), info: info2 });
+  return info2;
 }
 function openaiIsOAuth(dataDir) {
   const file = import_node_path6.default.join(dataDir, "auth.json");
@@ -1933,16 +2013,16 @@ var opencodeSource = {
       provider,
       usage: { input, cached, cacheWrite, output, reasoning: t2.reasoning ?? 0, total: input + output, requests: 1 }
     };
-    const info = storage ? findSessionInfo(storage, m.sessionID) : null;
-    const cwd = info?.directory ?? null;
+    const info2 = storage ? findSessionInfo(storage, m.sessionID) : null;
+    const cwd = info2?.directory ?? null;
     return {
       sessionId: m.sessionID,
       agent: file.root.agent,
       provider,
-      startedAt: info?.time?.created ?? ts2,
+      startedAt: info2?.time?.created ?? ts2,
       lastActivityAt: ts2,
       cwd,
-      projectName: projectNameOf(cwd) ?? info?.title ?? null,
+      projectName: projectNameOf(cwd) ?? info2?.title ?? null,
       originator: "opencode",
       source: "opencode",
       cliVersion: null,
@@ -2366,7 +2446,20 @@ var SessionStore = class {
 
 // src/core/stats.ts
 var LIVE_WINDOW_MS = 5 * 60 * 1e3;
+var RATE_WINDOW_MS = 6e4;
+var BURST_WINDOW_MS = 1e4;
 var DAY3 = 864e5;
+function outputRate(events, now, windowMs, sessionStart) {
+  const from = now - windowMs;
+  let output = 0;
+  for (const e of events) {
+    if (e.ts <= from) continue;
+    output += e.usage.output;
+  }
+  if (output <= 0) return 0;
+  const elapsedSec = Math.max(1, (now - Math.max(from, sessionStart)) / 1e3);
+  return output / elapsedSec;
+}
 var PriceCache = class {
   constructor(overrides) {
     this.overrides = overrides;
@@ -2443,7 +2536,9 @@ function agentStats(sessions, since, prices) {
 function computeStats(input) {
   const now = input.now ?? Date.now();
   const prices = new PriceCache(input.pricing);
-  const sessions = input.sessions;
+  const sessions = input.sessions.map(
+    (s) => s.events.every((e) => isOpenAIModel(e.model)) ? s : { ...s, events: s.events.filter((e) => isOpenAIModel(e.model)) }
+  );
   const allEvents = [];
   const sessionCosts = /* @__PURE__ */ new Map();
   let lastActivityAt = null;
@@ -2469,14 +2564,8 @@ function computeStats(input) {
   let live = null;
   const liveSession = sessions.filter((s) => s.events.length && now - s.lastActivityAt <= LIVE_WINDOW_MS).sort((a, b) => b.lastActivityAt - a.lastActivityAt)[0];
   if (liveSession) {
-    let t60 = 0;
-    let t10 = 0;
-    for (const e of liveSession.events) {
-      const age = now - e.ts;
-      if (age <= 6e4) t60 += e.usage.total;
-      if (age <= 1e4) t10 += e.usage.total;
-    }
     const last = liveSession.events[liveSession.events.length - 1];
+    const start = liveSession.startedAt || liveSession.events[0].ts;
     live = {
       sessionId: liveSession.sessionId,
       agent: liveSession.agent,
@@ -2484,8 +2573,8 @@ function computeStats(input) {
       model: liveSession.model,
       startedAt: liveSession.startedAt,
       lastEventAt: last.ts,
-      tokensPerSecond: t60 / 60,
-      tokensPerSecond10s: t10 / 10,
+      tokensPerSecond: outputRate(liveSession.events, now, RATE_WINDOW_MS, start),
+      tokensPerSecond10s: outputRate(liveSession.events, now, BURST_WINDOW_MS, start),
       contextUsed: last.usage.input + last.usage.output,
       contextWindow: liveSession.contextWindow,
       sessionUsage: { ...liveSession.cumulative },
@@ -2512,6 +2601,7 @@ function computeStats(input) {
   }
   return {
     buckets,
+    sessions: sessions.filter((s) => s.events.length),
     today,
     week,
     month,
@@ -3869,12 +3959,12 @@ function createApi(pathParts = []) {
             `API path is expected to be of the form \`api.moduleName.functionName\`. Found: \`${found}\``
           );
         }
-        const path11 = pathParts.slice(0, -1).join("/");
+        const path12 = pathParts.slice(0, -1).join("/");
         const exportName = pathParts[pathParts.length - 1];
         if (exportName === "default") {
-          return path11;
+          return path12;
         } else {
-          return path11 + ":" + exportName;
+          return path12 + ":" + exportName;
         }
       } else if (prop === Symbol.toStringTag) {
         return "FunctionReference";
@@ -4038,8 +4128,8 @@ var require_constants = __commonJS({
 });
 var require_node_gyp_build = __commonJS({
   "../node_modules/.pnpm/node-gyp-build@4.8.4/node_modules/node-gyp-build/node-gyp-build.js"(exports2, module2) {
-    var fs9 = __require("fs");
-    var path11 = __require("path");
+    var fs10 = __require("fs");
+    var path12 = __require("path");
     var os8 = __require("os");
     var runtimeRequire = typeof __webpack_require__ === "function" ? __non_webpack_require__ : __require;
     var vars2 = process.config && process.config.variables || {};
@@ -4056,21 +4146,21 @@ var require_node_gyp_build = __commonJS({
       return runtimeRequire(load.resolve(dir));
     }
     load.resolve = load.path = function(dir) {
-      dir = path11.resolve(dir || ".");
+      dir = path12.resolve(dir || ".");
       try {
-        var name = runtimeRequire(path11.join(dir, "package.json")).name.toUpperCase().replace(/-/g, "_");
+        var name = runtimeRequire(path12.join(dir, "package.json")).name.toUpperCase().replace(/-/g, "_");
         if (process.env[name + "_PREBUILD"]) dir = process.env[name + "_PREBUILD"];
       } catch (err) {
       }
       if (!prebuildsOnly) {
-        var release = getFirst(path11.join(dir, "build/Release"), matchBuild);
+        var release = getFirst(path12.join(dir, "build/Release"), matchBuild);
         if (release) return release;
-        var debug = getFirst(path11.join(dir, "build/Debug"), matchBuild);
+        var debug = getFirst(path12.join(dir, "build/Debug"), matchBuild);
         if (debug) return debug;
       }
       var prebuild = resolve(dir);
       if (prebuild) return prebuild;
-      var nearby = resolve(path11.dirname(process.execPath));
+      var nearby = resolve(path12.dirname(process.execPath));
       if (nearby) return nearby;
       var target = [
         "platform=" + platform,
@@ -4087,26 +4177,26 @@ var require_node_gyp_build = __commonJS({
       ].filter(Boolean).join(" ");
       throw new Error("No native build was found for " + target + "\n    loaded from: " + dir + "\n");
       function resolve(dir2) {
-        var tuples = readdirSync(path11.join(dir2, "prebuilds")).map(parseTuple);
+        var tuples = readdirSync(path12.join(dir2, "prebuilds")).map(parseTuple);
         var tuple = tuples.filter(matchTuple(platform, arch)).sort(compareTuples)[0];
         if (!tuple) return;
-        var prebuilds = path11.join(dir2, "prebuilds", tuple.name);
+        var prebuilds = path12.join(dir2, "prebuilds", tuple.name);
         var parsed = readdirSync(prebuilds).map(parseTags);
         var candidates = parsed.filter(matchTags(runtime, abi));
         var winner = candidates.sort(compareTags(runtime))[0];
-        if (winner) return path11.join(prebuilds, winner.file);
+        if (winner) return path12.join(prebuilds, winner.file);
       }
     };
     function readdirSync(dir) {
       try {
-        return fs9.readdirSync(dir);
+        return fs10.readdirSync(dir);
       } catch (err) {
         return [];
       }
     }
     function getFirst(dir, filter) {
       var files = readdirSync(dir).filter(filter);
-      return files[0] && path11.join(dir, files[0]);
+      return files[0] && path12.join(dir, files[0]);
     }
     function matchBuild(name) {
       return /\.node$/.test(name);
@@ -4193,7 +4283,7 @@ var require_node_gyp_build = __commonJS({
       return typeof window !== "undefined" && window.process && window.process.type === "renderer";
     }
     function isAlpine(platform2) {
-      return platform2 === "linux" && fs9.existsSync("/etc/alpine-release");
+      return platform2 === "linux" && fs10.existsSync("/etc/alpine-release");
     }
     load.parseTags = parseTags;
     load.matchTags = matchTags;
@@ -7739,13 +7829,13 @@ var require_websocket_server = __commonJS({
           }
         }
         if (this.options.verifyClient) {
-          const info = {
+          const info2 = {
             origin: req.headers[`${version2 === 8 ? "sec-websocket-origin" : "origin"}`],
             secure: !!(req.socket.authorized || req.socket.encrypted),
             req
           };
           if (this.options.verifyClient.length === 2) {
-            this.options.verifyClient(info, (verified, code2, message, headers) => {
+            this.options.verifyClient(info2, (verified, code2, message, headers) => {
               if (!verified) {
                 return abortHandshake(socket, code2 || 401, message, headers);
               }
@@ -7761,7 +7851,7 @@ var require_websocket_server = __commonJS({
             });
             return;
           }
-          if (!this.options.verifyClient(info)) return abortHandshake(socket, 401);
+          if (!this.options.verifyClient(info2)) return abortHandshake(socket, 401);
         }
         this.completeUpgrade(extensions, key, protocols, req, socket, head, cb);
       }
@@ -8967,10 +9057,174 @@ async function fetchLiveRateLimits(appVersion, timeoutMs = 1e4) {
   }
 }
 
+// src/core/update.ts
+var import_node_fs8 = __toESM(require("node:fs"));
+var import_node_path10 = __toESM(require("node:path"));
+var import_node_child_process3 = require("node:child_process");
+
 // src/version.ts
-var APP_VERSION = true ? "0.1.1" : "0.0.0-dev";
+var APP_VERSION = true ? "0.2.0" : "0.0.0-dev";
 var APP_NAME = "Codex Tracker";
 
+// src/core/update.ts
+var NPM_PACKAGE = "codex-token-tracker";
+var CHECK_TTL_MS = 6 * 60 * 60 * 1e3;
+var REQUEST_TIMEOUT_MS = 8e3;
+var INSTALL_TIMEOUT_MS = 10 * 60 * 1e3;
+var LOG_TAIL_CHARS = 4e3;
+function parseVersion(v2) {
+  const s = String(v2 ?? "").trim().replace(/^v/, "");
+  const i2 = s.indexOf("-");
+  const core = i2 === -1 ? s : s.slice(0, i2);
+  const pre = i2 === -1 ? "" : s.slice(i2 + 1);
+  const n = core.split(".").map((x) => Number.parseInt(x, 10) || 0);
+  return { nums: [n[0] ?? 0, n[1] ?? 0, n[2] ?? 0], pre };
+}
+function compareVersions(a, b) {
+  const A = parseVersion(a);
+  const B = parseVersion(b);
+  for (let i2 = 0; i2 < 3; i2++) if (A.nums[i2] !== B.nums[i2]) return A.nums[i2] < B.nums[i2] ? -1 : 1;
+  if (A.pre === B.pre) return 0;
+  if (!A.pre) return 1;
+  if (!B.pre) return -1;
+  return A.pre < B.pre ? -1 : 1;
+}
+function isDevBuild(version2) {
+  return version2.startsWith("0.0.0");
+}
+function registryBase() {
+  const r = process.env.CODEX_TRACKER_REGISTRY || process.env.npm_config_registry || process.env.NPM_CONFIG_REGISTRY || "https://registry.npmjs.org";
+  return r.replace(/\/+$/, "");
+}
+async function fetchLatestVersion(signal) {
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), REQUEST_TIMEOUT_MS);
+  signal?.addEventListener("abort", () => ctrl.abort(), { once: true });
+  try {
+    const res = await fetch(`${registryBase()}/-/package/${NPM_PACKAGE}/dist-tags`, {
+      signal: ctrl.signal,
+      headers: { accept: "application/json" }
+    });
+    if (!res.ok) throw new Error(`registry responded ${res.status}`);
+    const json = await res.json();
+    const latest = json?.latest;
+    if (typeof latest !== "string" || !latest) throw new Error("registry returned no `latest` tag");
+    return latest;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function detectPackageManager(installDir = import_node_path10.default.resolve(__dirname, "..")) {
+  const p = installDir.replace(/\\/g, "/").toLowerCase();
+  if (/\/\.?bun\//.test(p)) return "bun";
+  if (/\/\.?pnpm[/-]/.test(p)) return "pnpm";
+  if (/\/\.?yarn\//.test(p)) return "yarn";
+  const ua = (process.env.npm_config_user_agent ?? "").toLowerCase();
+  if (ua.startsWith("pnpm")) return "pnpm";
+  if (ua.startsWith("yarn")) return "yarn";
+  if (ua.startsWith("bun")) return "bun";
+  return "npm";
+}
+function updateArgs(pm, spec = `${NPM_PACKAGE}@latest`) {
+  switch (pm) {
+    case "pnpm":
+      return ["add", "-g", spec];
+    case "yarn":
+      return ["global", "add", spec];
+    case "bun":
+      return ["add", "-g", spec];
+    default:
+      return ["install", "-g", spec];
+  }
+}
+function updateCommand(pm, spec) {
+  return `${pm} ${updateArgs(pm, spec).join(" ")}`;
+}
+function cachePath() {
+  return import_node_path10.default.join(configDir(), "update.json");
+}
+function readCache() {
+  try {
+    const raw = JSON.parse(import_node_fs8.default.readFileSync(cachePath(), "utf8"));
+    if (typeof raw?.latest === "string" && typeof raw.checkedAt === "number") {
+      return { latest: raw.latest, checkedAt: raw.checkedAt };
+    }
+  } catch {
+  }
+  return null;
+}
+function writeCache(c) {
+  try {
+    import_node_fs8.default.mkdirSync(import_node_path10.default.dirname(cachePath()), { recursive: true });
+    import_node_fs8.default.writeFileSync(cachePath(), JSON.stringify(c, null, 2));
+  } catch {
+  }
+}
+function info(current, latest, checkedAt, error) {
+  const pm = detectPackageManager();
+  return {
+    current,
+    latest,
+    available: Boolean(latest) && !isDevBuild(current) && compareVersions(latest, current) > 0,
+    checkedAt,
+    error,
+    packageManager: pm,
+    command: updateCommand(pm)
+  };
+}
+async function checkForUpdate(opts = {}) {
+  const current = opts.current ?? APP_VERSION;
+  const cached = readCache();
+  if (!opts.force && cached && Date.now() - cached.checkedAt < CHECK_TTL_MS) {
+    return info(current, cached.latest, cached.checkedAt, null);
+  }
+  try {
+    const latest = await fetchLatestVersion(opts.signal);
+    const checkedAt = Date.now();
+    writeCache({ latest, checkedAt });
+    return info(current, latest, checkedAt, null);
+  } catch (err) {
+    return info(current, cached?.latest ?? null, cached?.checkedAt ?? null, err.message);
+  }
+}
+function runUpdate(opts = {}) {
+  const pm = detectPackageManager();
+  const spec = opts.version ? `${NPM_PACKAGE}@${opts.version}` : `${NPM_PACKAGE}@latest`;
+  const args = updateArgs(pm, spec);
+  const command = `${pm} ${args.join(" ")}`;
+  return new Promise((resolve) => {
+    let output = "";
+    const collect = (chunk) => {
+      const text = chunk.toString();
+      opts.onOutput?.(text);
+      output = (output + text).slice(-LOG_TAIL_CHARS);
+    };
+    let child;
+    try {
+      child = (0, import_node_child_process3.spawn)(pm, args, {
+        // Electron's bundled Node has no shell PATH resolution for `npm.cmd` on Windows.
+        shell: process.platform === "win32",
+        env: { ...process.env, ELECTRON_RUN_AS_NODE: void 0 },
+        windowsHide: true
+      });
+    } catch (err) {
+      resolve({ ok: false, code: null, command, output: err.message });
+      return;
+    }
+    const timer = setTimeout(() => child.kill(), INSTALL_TIMEOUT_MS);
+    child.stdout?.on("data", collect);
+    child.stderr?.on("data", collect);
+    child.on("error", (err) => {
+      clearTimeout(timer);
+      resolve({ ok: false, code: null, command, output: output + err.message });
+    });
+    child.on("close", (code2) => {
+      clearTimeout(timer);
+      resolve({ ok: code2 === 0, code: code2, command, output });
+    });
+  });
+}
+
 // src/core/engine.ts
 var SHALLOW_MS = 3e3;
 var DEEP_MS = 6e4;
@@ -8978,6 +9232,7 @@ var TICK_MS = 2e3;
 var REMOTE_MS = 6e4;
 var LIVE_LIMITS_DEBOUNCE_MS = 1e4;
 var LIVE_LIMITS_MIN_GAP_MS = 2e4;
+var UPDATE_CHECK_MS = 6 * 60 * 60 * 1e3;
 var Engine = class extends import_node_events.EventEmitter {
   constructor(opts) {
     super();
@@ -9014,6 +9269,9 @@ var Engine = class extends import_node_events.EventEmitter {
   liveLimitsInFlight = false;
   liveLimitsTimer = null;
   lastLiveLimitsAttempt = 0;
+  update = null;
+  updateStatus = "idle";
+  updateLog = null;
   get heatmapWeeks() {
     return this.opts.heatmapWeeks ?? 16;
   }
@@ -9035,6 +9293,8 @@ var Engine = class extends import_node_events.EventEmitter {
       return;
     }
     void this.refreshLiveLimits(true);
+    void this.checkUpdate(false);
+    this.timers.push(setInterval(() => void this.checkUpdate(false), UPDATE_CHECK_MS));
     this.store.startWatching(() => void this.refresh(false));
     this.timers.push(setInterval(() => void this.refresh(false), SHALLOW_MS));
     this.timers.push(setInterval(() => void this.refresh(true), DEEP_MS));
@@ -9141,7 +9401,7 @@ var Engine = class extends import_node_events.EventEmitter {
     if (!this.signedIn) return { buckets: 0, sessions: 0 };
     if (!this.stats) this.recompute();
     try {
-      const r = await this.uploader.pushAll(this.stats.buckets, this.store.sessions(), this.stats.sessionCosts);
+      const r = await this.uploader.pushAll(this.stats.buckets, this.stats.sessions, this.stats.sessionCosts);
       this.emitSnapshot();
       return r;
     } catch (err) {
@@ -9165,6 +9425,48 @@ var Engine = class extends import_node_events.EventEmitter {
     await this.uploader.fetchRemote(this.heatmapWeeks);
     this.recompute();
   }
+  /**
+   * Ask the npm registry for the newest published version (cached for 6 h unless `force`).
+   * Best-effort: a failure is recorded on the snapshot, never thrown.
+   */
+  async checkUpdate(force) {
+    if (!this.config.checkUpdates) {
+      this.update = null;
+      return null;
+    }
+    if (this.updateStatus === "checking" || this.updateStatus === "installing") return this.update;
+    this.updateStatus = "checking";
+    this.emitSnapshot();
+    this.update = await checkForUpdate({ force });
+    this.updateStatus = "idle";
+    if (this.update.error) this.opts.log?.(`update check failed: ${this.update.error}`);
+    this.emitSnapshot();
+    return this.update;
+  }
+  /**
+   * Install the newest version globally with the package manager this copy came from.
+   * The new code only takes effect once the app is restarted, so the UI says so rather than
+   * pretending to hot-swap itself.
+   */
+  async installUpdate() {
+    if (this.updateStatus === "installing") return false;
+    if (!this.update?.available) await this.checkUpdate(true);
+    if (!this.update?.available) return false;
+    this.updateStatus = "installing";
+    this.updateLog = null;
+    this.emitSnapshot();
+    const r = await runUpdate({ version: this.update.latest ?? void 0 });
+    this.updateStatus = r.ok ? "installed" : "failed";
+    this.updateLog = r.ok ? null : `${r.command}
+${r.output}`.trim();
+    if (!r.ok) this.opts.log?.(`update install failed (${r.code}): ${r.output}`);
+    this.emitSnapshot();
+    return r.ok;
+  }
+  updateState() {
+    if (!this.config.checkUpdates || !this.update) return null;
+    return { ...this.update, status: this.updateStatus, log: this.updateLog };
+  }
   /** Start the device-code login flow (resolves when approved / denied / expired / cancelled). */
   async login(openBrowser, onCode) {
     if (this.pending) return { status: "cancelled" };
@@ -9257,6 +9559,7 @@ var Engine = class extends import_node_events.EventEmitter {
       rateLimits: this.liveLimits ?? fromLogRateLimits(s.logRateLimits),
       rateLimitsError: this.config.liveRateLimits ? this.liveLimitsError : null,
       rateLimitsUpdatedAt: this.liveLimits ? this.liveLimitsAt : s.logRateLimits?.observedAt ?? null,
+      update: this.updateState(),
       modelsToday: s.modelsToday,
       modelsMonth: s.modelsMonth,
       byAgentToday: s.byAgentToday,
@@ -9281,9 +9584,9 @@ var Engine = class extends import_node_events.EventEmitter {
 
 // src/main.ts
 var DEBUG = Boolean(process.env.CODEX_TRACKER_DEBUG);
-var assetsDir = import_node_path10.default.join(__dirname, "..", "assets");
-var rendererIndex = import_node_path10.default.join(__dirname, "renderer", "index.html");
-var preloadPath = import_node_path10.default.join(__dirname, "preload.js");
+var assetsDir = import_node_path11.default.join(__dirname, "..", "assets");
+var rendererIndex = import_node_path11.default.join(__dirname, "renderer", "index.html");
+var preloadPath = import_node_path11.default.join(__dirname, "preload.js");
 var isMac = process.platform === "darwin";
 var isWin = process.platform === "win32";
 var mb = null;
@@ -9294,12 +9597,12 @@ function log2(...args) {
 }
 function trayIcon() {
   if (isMac) {
-    const img2 = import_electron.nativeImage.createFromPath(import_node_path10.default.join(assetsDir, "trayTemplate.png"));
+    const img2 = import_electron.nativeImage.createFromPath(import_node_path11.default.join(assetsDir, "trayTemplate.png"));
     img2.setTemplateImage(true);
     return img2;
   }
   const file = import_electron.nativeTheme.shouldUseDarkColors || !isWin ? "tray-win.png" : "tray-win-light.png";
-  const img = import_electron.nativeImage.createFromPath(import_node_path10.default.join(assetsDir, file));
+  const img = import_electron.nativeImage.createFromPath(import_node_path11.default.join(assetsDir, file));
   return isWin ? img.resize({ width: 16, height: 16 }) : img;
 }
 function trayText(s) {
@@ -9319,7 +9622,7 @@ function updateTray(s) {
   mb.tray.setToolTip(`${APP_NAME} \u2014 ${t(L, "today")}: ${formatTokens(s.today.usage.total)} \xB7 ${formatUSD(s.today.cost)}${live}`);
   if (isMac) mb.tray.setTitle(trayText(s), { fontType: "monospacedDigit" });
 }
-var launchAgentPath = import_node_path10.default.join(import_node_os7.default.homedir(), "Library", "LaunchAgents", "dev.codex-tracker.menubar.plist");
+var launchAgentPath = import_node_path11.default.join(import_node_os7.default.homedir(), "Library", "LaunchAgents", "dev.codex-tracker.menubar.plist");
 function setLaunchAtLogin(enabled) {
   if (isMac) {
     if (enabled) {
@@ -9327,20 +9630,20 @@ function setLaunchAtLogin(enabled) {
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0"><dict>
   <key>Label</key><string>dev.codex-tracker.menubar</string>
-  <key>ProgramArguments</key><array><string>${process.execPath}</string><string>${import_node_path10.default.join(__dirname, "main.js")}</string></array>
+  <key>ProgramArguments</key><array><string>${process.execPath}</string><string>${import_node_path11.default.join(__dirname, "main.js")}</string></array>
   <key>RunAtLoad</key><true/>
   <key>KeepAlive</key><false/>
   <key>ProcessType</key><string>Interactive</string>
 </dict></plist>
 `;
-      import_node_fs8.default.mkdirSync(import_node_path10.default.dirname(launchAgentPath), { recursive: true });
-      import_node_fs8.default.writeFileSync(launchAgentPath, plist);
-      (0, import_node_child_process3.execFile)("launchctl", ["load", "-w", launchAgentPath], () => {
+      import_node_fs9.default.mkdirSync(import_node_path11.default.dirname(launchAgentPath), { recursive: true });
+      import_node_fs9.default.writeFileSync(launchAgentPath, plist);
+      (0, import_node_child_process4.execFile)("launchctl", ["load", "-w", launchAgentPath], () => {
       });
-    } else if (import_node_fs8.default.existsSync(launchAgentPath)) {
-      (0, import_node_child_process3.execFile)("launchctl", ["unload", "-w", launchAgentPath], () => {
+    } else if (import_node_fs9.default.existsSync(launchAgentPath)) {
+      (0, import_node_child_process4.execFile)("launchctl", ["unload", "-w", launchAgentPath], () => {
         try {
-          import_node_fs8.default.unlinkSync(launchAgentPath);
+          import_node_fs9.default.unlinkSync(launchAgentPath);
         } catch {
         }
       });
@@ -9348,7 +9651,7 @@ function setLaunchAtLogin(enabled) {
     return;
   }
   if (isWin) {
-    import_electron.app.setLoginItemSettings({ openAtLogin: enabled, path: process.execPath, args: [import_node_path10.default.join(__dirname, "main.js")] });
+    import_electron.app.setLoginItemSettings({ openAtLogin: enabled, path: process.execPath, args: [import_node_path11.default.join(__dirname, "main.js")] });
   }
 }
 function buildMenu(s) {
@@ -9385,6 +9688,9 @@ function buildMenu(s) {
       }
     ] : [],
     { label: t(L, "refresh"), click: () => void engine?.refresh(true) },
+    ...s.update ? [
+      s.update.available ? { label: t(L, "updateAvailable", { version: s.update.latest ?? "?" }), click: () => void engine?.installUpdate() } : { label: t(L, "checkForUpdates"), click: () => void engine?.checkUpdate(true) }
+    ] : [],
     { type: "separator" },
     { label: t(L, "quit"), click: () => import_electron.app.quit() }
   ];
@@ -9441,6 +9747,8 @@ if (!import_electron.app.requestSingleInstanceLock()) {
   import_electron.ipcMain.handle("auth:cancel", () => engine?.cancelLogin());
   import_electron.ipcMain.handle("auth:logout", () => engine?.logout());
   import_electron.ipcMain.handle("refresh", () => engine?.refresh(true).then(() => void 0));
+  import_electron.ipcMain.handle("update:check", () => engine?.checkUpdate(true).then(() => void 0));
+  import_electron.ipcMain.handle("update:install", () => engine?.installUpdate().then(() => void 0));
   import_electron.ipcMain.handle("quit", () => import_electron.app.quit());
   mb.on("ready", async () => {
     if (isMac) import_electron.app.dock?.hide();
@@ -9466,7 +9774,7 @@ if (!import_electron.app.requestSingleInstanceLock()) {
       setTimeout(async () => {
         try {
           const img = await mb.window.webContents.capturePage();
-          import_node_fs8.default.writeFileSync(shot, img.toPNG());
+          import_node_fs9.default.writeFileSync(shot, img.toPNG());
           log2("screenshot written", shot);
         } catch (err) {
           log2("screenshot failed", errorMessage(err));
@@ -9482,7 +9790,7 @@ if (!import_electron.app.requestSingleInstanceLock()) {
       return { action: "deny" };
     });
     win.webContents.on("console-message", (_e, level, message, line, sourceId) => {
-      if (DEBUG || level >= 2) console.error(`[renderer:${level}] ${message} (${import_node_path10.default.basename(sourceId)}:${line})`);
+      if (DEBUG || level >= 2) console.error(`[renderer:${level}] ${message} (${import_node_path11.default.basename(sourceId)}:${line})`);
     });
     win.webContents.on("render-process-gone", (_e, details) => log2("renderer gone", details));
     if (process.env.CODEX_TRACKER_DEVTOOLS) win.webContents.openDevTools({ mode: "detach" });