crosscheck-cli 0.0.6

package/dist/mcp-register.js

@@ -0,0 +1,74 @@
+/**
+ * Self-register the crosscheck MCP server with Claude Code so the user never
+ * hand-edits JSON.
+ *
+ * Primary path: the `claude` CLI — `claude mcp add --scope user crosscheck --
+ * npx -y crosscheck-cli@latest serve`. User scope means it's available in
+ * every workspace, which matches a per-seat license.
+ *
+ * Fallback: if the `claude` CLI isn't on PATH, merge-write the user's
+ * ~/.claude.json `mcpServers` map in place — never clobbering existing
+ * servers or other settings.
+ */
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { CLI_PACKAGE } from "./config.js";
+const SERVER_NAME = "crosscheck";
+const SERVER_COMMAND = "npx";
+const SERVER_ARGS = ["-y", `${CLI_PACKAGE}@latest`, "serve"];
+function claudeCliAvailable() {
+    try {
+        const r = spawnSync("claude", ["--version"], { stdio: "ignore" });
+        return r.status === 0;
+    }
+    catch {
+        return false;
+    }
+}
+function mcpJsonSnippet() {
+    return JSON.stringify({
+        mcpServers: {
+            [SERVER_NAME]: { command: SERVER_COMMAND, args: SERVER_ARGS },
+        },
+    }, null, 2);
+}
+/** Merge our server into ~/.claude.json without disturbing anything else. */
+function writeUserConfig() {
+    const configPath = path.join(os.homedir(), ".claude.json");
+    try {
+        let config = {};
+        if (existsSync(configPath)) {
+            const raw = readFileSync(configPath, "utf8").trim();
+            if (raw)
+                config = JSON.parse(raw);
+        }
+        const servers = config.mcpServers ?? {};
+        servers[SERVER_NAME] = { command: SERVER_COMMAND, args: SERVER_ARGS };
+        config.mcpServers = servers;
+        writeFileSync(configPath, `${JSON.stringify(config, null, 2)}\n`, "utf8");
+        return { ok: true, configPath };
+    }
+    catch (err) {
+        return { ok: false, reason: err instanceof Error ? err.message : "unknown error" };
+    }
+}
+export function registerMcpServer() {
+    if (claudeCliAvailable()) {
+        const r = spawnSync("claude", ["mcp", "add", "--scope", "user", SERVER_NAME, "--", SERVER_COMMAND, ...SERVER_ARGS], { stdio: "ignore" });
+        if (r.status === 0)
+            return { method: "cli" };
+        // `claude` exists but the add failed (e.g. already registered) — fall
+        // through to the file path, which is idempotent.
+    }
+    const written = writeUserConfig();
+    if (written.ok)
+        return { method: "file", configPath: written.configPath };
+    return {
+        method: "manual",
+        snippet: mcpJsonSnippet(),
+        reason: written.reason,
+    };
+}
+//# sourceMappingURL=mcp-register.js.map

package/dist/mcp-register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-register.js","sourceRoot":"","sources":["../src/mcp-register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,GAAG,YAAY,CAAC;AACjC,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,GAAG,WAAW,SAAS,EAAE,OAAO,CAAC,CAAC;AAO7D,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,UAAU,EAAE;YACV,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE;SAC9D;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,eAAe;IACtB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,IAAI,MAAM,GAA4B,EAAE,CAAC;QACzC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,GAAG;gBAAE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC/D,CAAC;QACD,MAAM,OAAO,GACV,MAAM,CAAC,UAAkD,IAAI,EAAE,CAAC;QACnE,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACtE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC;QAC5B,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;IACrF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,IAAI,kBAAkB,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,SAAS,CACjB,QAAQ,EACR,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC,EACpF,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAC;QACF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC7C,sEAAsE;QACtE,iDAAiD;IACnD,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,IAAI,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;IAE1E,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,cAAc,EAAE;QACzB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC"}

package/dist/mcp.js

@@ -0,0 +1,117 @@
+/**
+ * MCP server façade. Spawns the TypeScript crosscheck-mcp engine as a
+ * subprocess and lets the IDE's MCP stdio JSON-RPC traffic flow through it.
+ *
+ * (Previously this bundled and spawned a Python server. crosscheck-mcp is now
+ * pure TypeScript and ships as a normal npm dependency — no Python required.)
+ *
+ * Pre-flight (before spawning the child):
+ *   1. Verify the activation JWT from the OS keychain — refuse to serve if
+ *      missing, expired, or revoked.
+ *   2. Resolve the crosscheck-mcp engine entry from node_modules (falling back
+ *      to `npx -y crosscheck-mcp` if it isn't installed alongside).
+ *   3. Pull every upstream LLM key from the keychain into the child's env
+ *      (ANTHROPIC_API_KEY, OPENAI_API_KEY, GEMINI_API_KEY, XAI_API_KEY,
+ *      GROQ_API_KEY, DEEPSEEK_API_KEY, MISTRAL_API_KEY). The customer never
+ *      hand-manages env vars.
+ *
+ * The child inherits stdio so the IDE's MCP client talks to it directly; we
+ * don't proxy or interpret the JSON-RPC traffic. The CLI is the
+ * license/onboarding wrapper; crosscheck-mcp is the engine.
+ */
+import { spawn } from "node:child_process";
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import { createRequire } from "node:module";
+import { ENGINE_PACKAGE, SERVER_URL } from "./config.js";
+import { getSecret } from "./keychain.js";
+import { verifyJwt } from "./jwt.js";
+const require = createRequire(import.meta.url);
+/** Keychain key name -> engine env var name. Mirrors crosscheck-mcp's providers. */
+const KEY_BINDINGS = [
+    ["key:anthropic", "ANTHROPIC_API_KEY"],
+    ["key:openai", "OPENAI_API_KEY"],
+    ["key:gemini", "GEMINI_API_KEY"],
+    ["key:grok", "XAI_API_KEY"],
+    ["key:groq", "GROQ_API_KEY"],
+    ["key:deepseek", "DEEPSEEK_API_KEY"],
+    ["key:mistral", "MISTRAL_API_KEY"],
+];
+async function loadUpstreamKeys() {
+    const out = {};
+    for (const [name, envVar] of KEY_BINDINGS) {
+        const v = await getSecret(name);
+        if (v)
+            out[envVar] = v;
+    }
+    return out;
+}
+/**
+ * How to launch the engine. Prefer a locally-installed crosscheck-mcp (fast,
+ * offline, version-pinned via our dependency). Fall back to `npx -y` so the
+ * CLI still works if the dependency tree was flattened oddly.
+ */
+function resolveEngineLauncher() {
+    try {
+        const pkgJsonPath = require.resolve(`${ENGINE_PACKAGE}/package.json`);
+        const pkg = JSON.parse(readFileSync(pkgJsonPath, "utf8"));
+        const binRel = typeof pkg.bin === "string"
+            ? pkg.bin
+            : (pkg.bin?.[ENGINE_PACKAGE] ?? Object.values(pkg.bin ?? {})[0]);
+        if (binRel) {
+            const entry = path.join(path.dirname(pkgJsonPath), binRel);
+            // Spawn with the same Node that's running us — robust across installs.
+            return { command: process.execPath, args: [entry] };
+        }
+    }
+    catch {
+        // Not resolvable locally — fall through to npx.
+    }
+    const npx = process.platform === "win32" ? "npx.cmd" : "npx";
+    return { command: npx, args: ["-y", ENGINE_PACKAGE] };
+}
+export async function startMcpServer() {
+    // 1. License gate.
+    const jwt = await getSecret("jwt");
+    if (!jwt) {
+        process.stderr.write("Not activated. Run `crosscheck activate` first.\n");
+        process.exit(1);
+    }
+    const verified = await verifyJwt(jwt);
+    if (!verified.ok) {
+        process.stderr.write(`Activation is ${verified.reason}. Re-activate by running \`crosscheck activate\` ` +
+            `(or manage devices at ${SERVER_URL}/account).\n`);
+        process.exit(1);
+    }
+    // 2. Pull upstream LLM keys from keychain into the child's env.
+    const keys = await loadUpstreamKeys();
+    if (Object.keys(keys).length === 0) {
+        process.stderr.write("No upstream LLM keys configured. Run `crosscheck keys setup` first.\n");
+        process.exit(1);
+    }
+    // 3. Launch the engine.
+    const { command, args } = resolveEngineLauncher();
+    const env = {
+        ...process.env,
+        ...keys,
+        CROSSCHECK_DATA_DIR: process.env.CROSSCHECK_DATA_DIR ||
+            path.join(process.env.HOME ?? process.env.USERPROFILE ?? "", ".crosscheck"),
+    };
+    const child = spawn(command, args, { env, stdio: "inherit" });
+    child.on("exit", (code, signal) => {
+        if (signal) {
+            process.stderr.write(`crosscheck-mcp exited on ${signal}\n`);
+            process.exit(1);
+        }
+        process.exit(code ?? 0);
+    });
+    child.on("error", (err) => {
+        process.stderr.write(`Failed to start the crosscheck engine (${ENGINE_PACKAGE}): ${err.message}\n` +
+            `Try reinstalling: npx -y crosscheck-cli@latest install\n`);
+        process.exit(1);
+    });
+    for (const sig of ["SIGINT", "SIGTERM"]) {
+        process.on(sig, () => child.kill(sig));
+    }
+}
+//# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,oFAAoF;AACpF,MAAM,YAAY,GAA4B;IAC5C,CAAC,eAAe,EAAE,mBAAmB,CAAC;IACtC,CAAC,YAAY,EAAE,gBAAgB,CAAC;IAChC,CAAC,YAAY,EAAE,gBAAgB,CAAC;IAChC,CAAC,UAAU,EAAE,aAAa,CAAC;IAC3B,CAAC,UAAU,EAAE,cAAc,CAAC;IAC5B,CAAC,cAAc,EAAE,kBAAkB,CAAC;IACpC,CAAC,aAAa,EAAE,iBAAiB,CAAC;CACnC,CAAC;AAEF,KAAK,UAAU,gBAAgB;IAC7B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC;YAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB;IAC5B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,cAAc,eAAe,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAEvD,CAAC;QACF,MAAM,MAAM,GACV,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;YACzB,CAAC,CAAC,GAAG,CAAC,GAAG;YACT,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;YAC3D,uEAAuE;YACvE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,mBAAmB;IACnB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iBAAiB,QAAQ,CAAC,MAAM,mDAAmD;YACjF,yBAAyB,UAAU,cAAc,CACpD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,gEAAgE;IAChE,MAAM,IAAI,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACtC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uEAAuE,CACxE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,wBAAwB;IACxB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAClD,MAAM,GAAG,GAAsB;QAC7B,GAAG,OAAO,CAAC,GAAG;QACd,GAAG,IAAI;QACP,mBAAmB,EACjB,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,aAAa,CAAC;KAC9E,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAE9D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,MAAM,IAAI,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,cAAc,MAAM,GAAG,CAAC,OAAO,IAAI;YAC3E,0DAA0D,CAC7D,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACjD,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/open-browser.js

@@ -0,0 +1,25 @@
+/**
+ * Best-effort cross-platform browser opener. Failure is silent — callers
+ * always print the URL too, so a headless box just falls back to copy-paste.
+ * Kept dependency-light (no `open` package) on purpose.
+ */
+import { spawn } from "node:child_process";
+export function openBrowser(url) {
+    const opener = process.platform === "darwin"
+        ? "open"
+        : process.platform === "win32"
+            ? "cmd"
+            : "xdg-open";
+    const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
+    try {
+        const child = spawn(opener, args, { stdio: "ignore", detached: true });
+        child.unref();
+        child.on("error", () => {
+            /* swallow — URL was printed for manual open */
+        });
+    }
+    catch {
+        /* ignore */
+    }
+}
+//# sourceMappingURL=open-browser.js.map

package/dist/open-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-browser.js","sourceRoot":"","sources":["../src/open-browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,UAAU,CAAC;IACnB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,+CAA+C;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC"}

package/dist/signing.js

@@ -0,0 +1,37 @@
+/**
+ * Canonical event signing. MUST match the server's
+ * src/lib/crosscheck/crypto.ts byte-for-byte. Any drift breaks telemetry
+ * ingest because the server re-derives the seat HMAC key and recomputes
+ * the signature with the canonical body — if the strings differ, the
+ * signature won't verify.
+ *
+ * If the server adds a field to SignableEvent, this file must change in
+ * lockstep. Tests on both sides should sign + verify the same fixture to
+ * catch divergence.
+ */
+import crypto from "node:crypto";
+export function canonicalEventBody(e) {
+    return [
+        e.eventId,
+        e.seatId,
+        e.orgId,
+        e.ts,
+        e.provider,
+        e.model,
+        e.pattern,
+        String(e.promptTokens),
+        String(e.completionTokens),
+        e.costUsdEstimate.toFixed(6),
+        String(e.latencyMs),
+        e.status,
+        e.errorClass ?? "",
+    ].join("|");
+}
+/** Sign a usage event with the per-seat HMAC key obtained at activation. */
+export function signEvent(seatSigningKey, e) {
+    return crypto
+        .createHmac("sha256", seatSigningKey)
+        .update(canonicalEventBody(e))
+        .digest("hex");
+}
+//# sourceMappingURL=signing.js.map

package/dist/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAuBjC,MAAM,UAAU,kBAAkB,CAAC,CAAgB;IACjD,OAAO;QACL,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,OAAO;QACT,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;QACtB,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC1B,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACnB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,UAAU,IAAI,EAAE;KACnB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,SAAS,CAAC,cAAsB,EAAE,CAAgB;IAChE,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC;SACpC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;SAC7B,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC"}

package/dist/telemetry.js

@@ -0,0 +1,80 @@
+/**
+ * Telemetry emitter. Signs each event with the per-seat HMAC key from
+ * activation and flushes batches to /api/crosscheck/telemetry on size or
+ * time threshold.
+ *
+ * Hard rule: nothing prompt-shaped goes in the event. The server's strict
+ * Zod schema rejects keys named prompt/messages/content/input/text/
+ * completion/response/output, so even an accidental log line never makes
+ * it past ingest. Don't add a "prompt_preview" field. Don't.
+ */
+import { randomUUID } from "node:crypto";
+import { request } from "undici";
+import { SERVER_URL, TELEMETRY_BATCH_SIZE, TELEMETRY_FLUSH_MS, } from "./config.js";
+import { getSecret } from "./keychain.js";
+import { signEvent } from "./signing.js";
+const queue = [];
+let flushTimer = null;
+export async function emit(args) {
+    const hmacKey = await getSecret("hmacSigningKey");
+    if (!hmacKey)
+        throw new Error("Not activated. No HMAC signing key on file.");
+    const base = {
+        eventId: randomUUID(),
+        seatId: args.seatId,
+        orgId: args.orgId,
+        ts: new Date().toISOString(),
+        provider: args.provider,
+        model: args.model,
+        pattern: args.pattern,
+        promptTokens: args.promptTokens,
+        completionTokens: args.completionTokens,
+        costUsdEstimate: args.costUsdEstimate,
+        latencyMs: args.latencyMs,
+        status: args.status,
+        errorClass: args.errorClass,
+    };
+    const signatureHmac = signEvent(hmacKey, base);
+    queue.push({ ...base, signatureHmac });
+    if (queue.length >= TELEMETRY_BATCH_SIZE) {
+        await flush();
+    }
+    else if (!flushTimer) {
+        flushTimer = setTimeout(() => void flush(), TELEMETRY_FLUSH_MS);
+    }
+}
+export async function flush() {
+    if (flushTimer) {
+        clearTimeout(flushTimer);
+        flushTimer = null;
+    }
+    if (queue.length === 0)
+        return;
+    const batch = queue.splice(0, queue.length);
+    try {
+        const res = await request(`${SERVER_URL}/api/crosscheck/telemetry`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ events: batch }),
+        });
+        if (res.statusCode !== 200) {
+            // Re-queue on failure so we retry on next flush. Don't retry on 400 —
+            // a malformed event will fail forever; drop it and log.
+            if (res.statusCode === 400) {
+                // eslint-disable-next-line no-console
+                console.error("[telemetry] 400 from server (events dropped):");
+                // eslint-disable-next-line no-console
+                console.error(await res.body.text());
+            }
+            else {
+                queue.unshift(...batch);
+            }
+        }
+    }
+    catch (err) {
+        queue.unshift(...batch);
+        // eslint-disable-next-line no-console
+        console.error("[telemetry] network error, re-queued:", err instanceof Error ? err.message : err);
+    }
+}
+//# sourceMappingURL=telemetry.js.map

package/dist/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEjC,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAsB,MAAM,cAAc,CAAC;AA6B7D,MAAM,KAAK,GAAkB,EAAE,CAAC;AAChC,IAAI,UAAU,GAA0B,IAAI,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAmB;IAC5C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAE7E,MAAM,IAAI,GAAkB;QAC1B,OAAO,EAAE,UAAU,EAAE;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;IACF,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAEvC,IAAI,KAAK,CAAC,MAAM,IAAI,oBAAoB,EAAE,CAAC;QACzC,MAAM,KAAK,EAAE,CAAC;IAChB,CAAC;SAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvB,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK;IACzB,IAAI,UAAU,EAAE,CAAC;QACf,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,UAAU,2BAA2B,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YAC3B,sEAAsE;YACtE,wDAAwD;YACxD,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC3B,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBAC/D,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;QACxB,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACnG,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "crosscheck-cli",
+  "version": "0.0.6",
+  "description": "Crosscheck — multi-LLM orchestration MCP for the terminal. Single-machine activation, BYO upstream LLM keys, content-free telemetry. Installs into Claude Code in one command.",
+  "license": "SEE LICENSE.md",
+  "type": "module",
+  "bin": {
+    "crosscheck": "./dist/cli.js"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx src/cli.ts",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "lint": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "argon2": "^0.41.0",
+    "crosscheck-mcp": "^0.1.0",
+    "keytar": "^7.9.0",
+    "undici": "^7.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0",
+    "vitest": "^4.1.0"
+  }
+}