lh-ops 0.1.0

package/README.md

@@ -0,0 +1,93 @@
+# lh-ops
+
+Platform Operator CLI for LH Enterprise. Smoke-A subset of issue #36 — see
+`docs/requirements/platform-admin-user-stories.md` for the full surface.
+
+## Installation (local dev)
+
+```bash
+cd packages/lh-ops
+npm install
+npm run build
+npm link        # makes `lh-ops` globally available
+```
+
+## Configuration
+
+| Source            | Purpose                                     |
+|-------------------|---------------------------------------------|
+| `LH_OPS_API_BASE` | Default API base URL (default `http://localhost:3002`) |
+| `~/.lh-ops/credentials.json` | Persisted access token (mode `0600`) — written by `lh-ops login` |
+| `--token <jwt>`   | Per-call override (skip login)              |
+| `--api-base <url>`| Per-call override                           |
+| `--json`          | Emit JSON instead of human-readable output  |
+
+## Smoke-A subset commands
+
+```bash
+# 1. Authenticate (persists token to ~/.lh-ops/credentials.json)
+lh-ops login --email admin@lh.dev --password "${PLATFORM_BOOTSTRAP_PASSWORD}"
+
+# 2. Catalog: publish + manage plans / pricebooks (#434, ADR-020 §2)
+lh-ops plan publish --file ./plans/coding-pro.json
+lh-ops plan list --status ACTIVE                 # also --family CODING
+lh-ops plan show <planId>                         # prints updatedAt = --if-match token
+lh-ops plan update <planId> --file ./plans/coding-pro.json --if-match <updatedAt>
+lh-ops plan archive <planId> --if-match <updatedAt>
+lh-ops pricebook publish --file ./pricebook/2026-q1.json
+lh-ops pricebook activate 2026-q1
+lh-ops pricebook list
+
+# 3. Provision org + Enterprise Admin (US-12). Temp password is shown once.
+lh-ops org create \
+  --name "Acme" \
+  --admin-email alice@acme.com \
+  --admin-name "Alice Smith" \
+  --plan <planId>
+
+# 4. Top up org balance
+lh-ops topup execute --org <orgId> --usd 100 --memo "wire 2026-04-30"
+
+# 10. Show org snapshot (used by Smoke A step 10)
+lh-ops org show <orgId>
+```
+
+Add `--json` to any command for machine-friendly output (e.g. piping into
+`jq` or another LLM-driven script).
+
+## Command taxonomy
+
+- Each resource is a top-level **singular** noun group with verb subcommands:
+  `plan`, `pricebook`, `org`, `subscription`, `topup`, `audit`, `scanners`,
+  `models` (`org`, not `orgs`).
+- Operations scoped to one org take `<orgId>` and live under `org`
+  (`org show`, `org statement`, `org tokens`, `org export-keys`,
+  `org rename/suspend/activate`); a command stays **top-level** when it manages
+  a resource type across the platform (`plan`, `pricebook`, `subscription`,
+  `topup`, `audit query`, `models list`, `scanners status`) even when it takes
+  `--org` as a parameter.
+
+## Deferred (post-Smoke-A)
+
+Shipped since Smoke-A: `plan list/show/update/archive`, `pricebook list`,
+`org list / statement / export-{audit,keys} / tokens`, `org suspend/resume`,
+`topup execute/list`, `audit query`, `scanners status`, `phase2-status`.
+
+Still deferred:
+
+- `org close` — needs #27 close flow
+- `org contract show/extend/change-tier` — needs #29
+- `topup record/approve/retry-sync` — needs the full state machine (#28)
+- `checkpoint run/show/export` — async monthly reconciliation job (#30);
+  distinct from the synchronous `org statement` (US-OP-10, shipped)
+- `operator invite/deactivate/reset-password` — deferred indefinitely
+  (ADR-020 §5: single shared operator account)
+- `alias publish/show/history` — **withdrawn** (ADR-019; routing lives in new-api)
+- OpenAPI auto-generation; npm publishing (private package)
+
+## Tests
+
+```bash
+npm test          # jest unit tests (commands + renderers)
+npm run build     # tsc → dist/
+```

package/bin/lh-ops

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('../dist/index.js');

package/dist/commands/audit.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.queryAudit = queryAudit;
+exports.formatAudit = formatAudit;
+exports.renderAudit = renderAudit;
+const resolve_client_1 = require("../lib/resolve-client");
+// Matches strict ISO8601 with date + time + Z/offset (e.g. 2026-05-01T00:00:00.000Z).
+// We reject loose formats client-side so the operator sees a useful error rather
+// than a 400 from the backend's class-validator @IsISO8601 check.
+const ISO_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:?\d{2})$/;
+function assertIso(label, value) {
+    if (value === undefined)
+        return;
+    if (!ISO_RE.test(value) || Number.isNaN(Date.parse(value))) {
+        throw new Error(`--${label} must be ISO8601 (e.g. 2026-04-01T00:00:00.000Z), got: ${value}`);
+    }
+}
+async function queryAudit(input) {
+    assertIso('from', input.from);
+    assertIso('to', input.to);
+    const client = await (0, resolve_client_1.resolveClient)(input);
+    const query = {
+        orgId: input.orgId,
+        action: input.action,
+        actor: input.actor,
+        from: input.from,
+        to: input.to,
+        limit: input.limit,
+    };
+    return client.request('/platform/audit', {
+        method: 'GET',
+        query,
+    });
+}
+/**
+ * Format audit rows for the default (non-JSON) CLI output.
+ * One line per row: `<occurredAt> <action> <actor> <orgId-short> <payload>`.
+ * orgId is truncated to the first 8 chars to keep lines readable for cuid/ulid.
+ */
+function formatAudit(rows) {
+    return (rows
+        .map((r) => {
+        const orgShort = r.orgId ? r.orgId.slice(0, 8) : '-';
+        const payload = r.payload === null || r.payload === undefined
+            ? ''
+            : JSON.stringify(r.payload);
+        return `${r.occurredAt} ${r.action} ${r.actor} ${orgShort} ${payload}`.trimEnd();
+    })
+        .join('\n') + (rows.length > 0 ? '\n' : ''));
+}
+/**
+ * Top-level renderer: branches on `--json` (raw JSON pass-through) vs the
+ * default human-readable line format. Kept separate from formatAudit so
+ * --json bypasses the formatter entirely — operators piping into `jq` get
+ * the raw backend response shape.
+ */
+function renderAudit(rows, opts) {
+    if (opts.json) {
+        return JSON.stringify(rows, null, 2);
+    }
+    if (rows.length === 0) {
+        return '(no audit records match)\n';
+    }
+    return formatAudit(rows);
+}
+//# sourceMappingURL=audit.js.map

package/dist/commands/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":";;AAoCA,gCAiBC;AAOD,kCAYC;AAQD,kCAQC;AAxFD,0DAAmE;AAsBnE,sFAAsF;AACtF,iFAAiF;AACjF,kEAAkE;AAClE,MAAM,MAAM,GAAG,mEAAmE,CAAC;AAEnF,SAAS,SAAS,CAAC,KAAa,EAAE,KAAyB;IACzD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,KAAK,KAAK,0DAA0D,KAAK,EAAE,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,UAAU,CAAC,KAAsB;IACrD,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAE1B,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAa,EAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAgD;QACzD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAa,iBAAiB,EAAE;QACnD,MAAM,EAAE,KAAK;QACb,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAC,IAAgB;IAC1C,OAAO,CACL,IAAI;SACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACrD,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAC3D,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACnF,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,IAAgB,EAAE,IAAuB;IACnE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,4BAA4B,CAAC;IACtC,CAAC;IACD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC"}

package/dist/commands/cache-coverage.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCacheCoverage = getCacheCoverage;
+exports.renderCacheCoverage = renderCacheCoverage;
+const lh_api_client_1 = require("lh-api-client");
+const resolve_client_1 = require("../lib/resolve-client");
+/**
+ * #595 — `lh-ops cache-coverage`. Platform-wide cache-hit audit (which models
+ * return prompt-cache tokens + hit rate). CLI wrapper around lh-api-client's
+ * `getCacheCoverage`; server stays JSON-only, md rendering is client-side.
+ */
+async function getCacheCoverage(input) {
+    const client = await (0, resolve_client_1.resolveClient)(input);
+    return (0, lh_api_client_1.getCacheCoverage)(client);
+}
+/** Format dispatch: json (canonical) | md (human-readable audit). */
+function renderCacheCoverage(c, opts) {
+    if (opts.format === 'json')
+        return JSON.stringify(c, null, 2);
+    return renderCacheCoverageMd(c);
+}
+function renderCacheCoverageMd(c) {
+    const tok = (n) => compactTokens(n);
+    const lines = [];
+    lines.push('# Cache coverage (platform-wide)');
+    lines.push('');
+    lines.push(`- Rows: ${c.totals.rows}`);
+    lines.push(`- Cache tokens: ${tok(c.totals.cacheTokens)}`);
+    lines.push(`- Rows with cache: ${c.totals.rowsWithCache} (${c.totals.pctCache}%)`);
+    lines.push('');
+    if (c.models.length > 0) {
+        lines.push('## By model (sorted by rows DESC)');
+        lines.push('');
+        lines.push('| Model | Rows | Cache tokens | Rows w/ cache | % cache |');
+        lines.push('|---|---|---|---|---|');
+        for (const m of c.models) {
+            // ⚠️ flags 0%-cache models — either tiny sample or an upstream that
+            // doesn't return cache (worth a routing check).
+            const flag = m.pctCache === 0 ? ' ⚠️' : '';
+            lines.push(`| ${m.model} | ${m.rows} | ${tok(m.cacheTokens)} | ${m.rowsWithCache} | ${m.pctCache}%${flag} |`);
+        }
+        lines.push('');
+    }
+    return lines.join('\n') + '\n';
+}
+// mirrors org-usage compactTokens: 106711192 → "106.7M", 6506111 → "6.5M".
+function compactTokens(n) {
+    if (n >= 1_000_000)
+        return `${(n / 1_000_000).toFixed(1)}M`;
+    if (n >= 1_000)
+        return `${(n / 1_000).toFixed(1)}K`;
+    return String(n);
+}
+//# sourceMappingURL=cache-coverage.js.map

package/dist/commands/cache-coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-coverage.js","sourceRoot":"","sources":["../../src/commands/cache-coverage.ts"],"names":[],"mappings":";;AAeA,4CAKC;AAGD,kDAMC;AA7BD,iDAGuB;AACvB,0DAAmE;AAMnE;;;;GAIG;AACI,KAAK,UAAU,gBAAgB,CACpC,KAA4B;IAE5B,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAa,EAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,IAAA,gCAAmB,EAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,qEAAqE;AACrE,SAAgB,mBAAmB,CACjC,CAAuB,EACvB,IAA+B;IAE/B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAuB;IACpD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CACR,sBAAsB,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,CACvE,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACzB,oEAAoE;YACpE,gDAAgD;YAChD,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,aAAa,MAAM,CAAC,CAAC,QAAQ,IAAI,IAAI,IAAI,CAClG,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC,IAAI,SAAS;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,IAAI,CAAC,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC"}

package/dist/commands/export.js

@@ -0,0 +1,138 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.chainOfCustodySha256 = chainOfCustodySha256;
+exports.exportAudit = exportAudit;
+exports.exportKeys = exportKeys;
+exports.renderAuditExportCsv = renderAuditExportCsv;
+exports.renderAuditExportJson = renderAuditExportJson;
+exports.renderKeysExportCsv = renderKeysExportCsv;
+exports.renderKeysExportJson = renderKeysExportJson;
+const crypto_1 = require("crypto");
+const resolve_client_1 = require("../lib/resolve-client");
+const AUDIT_PAGE_SIZE = 200;
+/**
+ * Cycle 3 — Chain-of-custody hash. Deterministic JSON.stringify with
+ * sorted keys, sha256 over the resulting bytes. Operators re-running
+ * the export against the same DB state must get the same hash;
+ * mutation of any field changes the hash.
+ */
+function chainOfCustodySha256(rows) {
+    const canonical = JSON.stringify(rows, sortedReplacer());
+    return (0, crypto_1.createHash)('sha256').update(canonical).digest('hex');
+}
+function sortedReplacer() {
+    return (_key, value) => {
+        if (value && typeof value === 'object' && !Array.isArray(value)) {
+            const sorted = {};
+            for (const k of Object.keys(value).sort()) {
+                sorted[k] = value[k];
+            }
+            return sorted;
+        }
+        return value;
+    };
+}
+/**
+ * Cycle 4 — Audit export: loop /platform/audit with offsets until a
+ * short page (< AUDIT_PAGE_SIZE) signals end. Backend caps limit at 200;
+ * 90-day windows can easily exceed that, so the CLI handles pagination.
+ */
+async function exportAudit(input) {
+    const client = await (0, resolve_client_1.resolveClient)(input);
+    const all = [];
+    let offset = 0;
+    while (true) {
+        const page = await client.request('/platform/audit', {
+            method: 'GET',
+            query: {
+                orgId: input.orgId,
+                from: input.from,
+                to: input.to,
+                action: input.action,
+                actor: input.actor,
+                limit: String(AUDIT_PAGE_SIZE),
+                offset: String(offset),
+            },
+        });
+        all.push(...page);
+        if (page.length < AUDIT_PAGE_SIZE)
+            break;
+        offset += AUDIT_PAGE_SIZE;
+    }
+    return all;
+}
+/**
+ * Cycle 7 — Keys export client call. Always passes include-revoked=1
+ * because the compliance use case wants every key the org has ever
+ * had, not just the active set.
+ */
+async function exportKeys(input) {
+    const client = await (0, resolve_client_1.resolveClient)(input);
+    return client.request(`/platform/orgs/${encodeURIComponent(input.orgId)}/keys`, {
+        method: 'GET',
+        query: { 'include-revoked': '1' },
+    });
+}
+/**
+ * Cycle 5 — CSV serializer for audit export. Trailing
+ * `# chain-of-custody-sha256: <hex>` line satisfies acceptance criteria.
+ * Header row + empty body + hash for empty input.
+ */
+const AUDIT_COLUMNS = [
+    'id',
+    'actor',
+    'action',
+    'orgId',
+    'occurredAt',
+    'payload',
+];
+function renderAuditExportCsv(rows) {
+    return renderCsv(rows, AUDIT_COLUMNS);
+}
+function renderAuditExportJson(rows) {
+    return renderJson(rows);
+}
+const KEY_COLUMNS = [
+    'id',
+    'keyPrefix',
+    'label',
+    'status',
+    'memberId',
+    'subscriptionId',
+    'createdAt',
+    'claimedAt',
+    'acknowledgedBy',
+    'lastUsageAt',
+];
+function renderKeysExportCsv(rows) {
+    return renderCsv(rows, KEY_COLUMNS);
+}
+function renderKeysExportJson(rows) {
+    return renderJson(rows);
+}
+function renderCsv(rows, columns) {
+    const header = columns.join(',');
+    const bodyLines = rows.map((row) => columns.map((col) => csvCell(row[col])).join(','));
+    const hash = chainOfCustodySha256(rows);
+    // Always: header + (zero or more) body lines + hash comment.
+    return ([header, ...bodyLines, `# chain-of-custody-sha256: ${hash}`].join('\n') +
+        '\n');
+}
+function csvCell(value) {
+    if (value === null || value === undefined)
+        return '';
+    const s = typeof value === 'string' ? value : JSON.stringify(value);
+    // Escape per RFC 4180: any cell containing a comma, quote, or newline
+    // must be wrapped in quotes with internal quotes doubled.
+    if (/[,"\n]/.test(s)) {
+        return `"${s.replace(/"/g, '""')}"`;
+    }
+    return s;
+}
+function renderJson(rows) {
+    return JSON.stringify({
+        data: rows,
+        chain_of_custody_sha256: chainOfCustodySha256(rows),
+    });
+}
+//# sourceMappingURL=export.js.map

package/dist/commands/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../src/commands/export.ts"],"names":[],"mappings":";;AAmCA,oDAGC;AA4BD,kCAwBC;AAWD,gCAWC;AAgBD,oDAEC;AAED,sDAEC;AAeD,kDAEC;AAED,oDAEC;AA3JD,mCAAoC;AACpC,0DAAmE;AA0BnE,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,IAAe;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IACzD,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACrB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrE,MAAM,CAAC,CAAC,CAAC,GAAI,KAAiC,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAUD;;;;GAIG;AACI,KAAK,UAAU,WAAW,CAC/B,KAAuB;IAEvB,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAa,EAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAmB,iBAAiB,EAAE;YACrE,MAAM,EAAE,KAAK;YACb,KAAK,EAAE;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC;gBAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;aACvB;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClB,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe;YAAE,MAAM;QACzC,MAAM,IAAI,eAAe,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAMD;;;;GAIG;AACI,KAAK,UAAU,UAAU,CAC9B,KAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAa,EAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,OAAO,CACnB,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EACxD;QACE,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE;KAClC,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,aAAa,GAAgC;IACjD,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,SAAS;CACV,CAAC;AAEF,SAAgB,oBAAoB,CAAC,IAAsB;IACzD,OAAO,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,qBAAqB,CAAC,IAAsB;IAC1D,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,WAAW,GAA8B;IAC7C,IAAI;IACJ,WAAW;IACX,OAAO;IACP,QAAQ;IACR,UAAU;IACV,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,gBAAgB;IAChB,aAAa;CACd,CAAC;AAEF,SAAgB,mBAAmB,CAAC,IAAoB;IACtD,OAAO,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACtC,CAAC;AAED,SAAgB,oBAAoB,CAAC,IAAoB;IACvD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAI,IAAS,EAAE,OAAuB;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAClD,CAAC;IACF,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxC,6DAA6D;IAC7D,OAAO,CACL,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE,8BAA8B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACvE,IAAI,CACL,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpE,sEAAsE;IACtE,0DAA0D;IAC1D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAI,IAAS;IAC9B,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,IAAI;QACV,uBAAuB,EAAE,oBAAoB,CAAC,IAAI,CAAC;KACpD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/login.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.login = login;
+exports.readJsonFile = readJsonFile;
+exports.renderLogin = renderLogin;
+const fs_1 = require("fs");
+const client_1 = require("../lib/client");
+const credentials_1 = require("../lib/credentials");
+const output_1 = require("../lib/output");
+/**
+ * Authenticate against /platform/auth/login and persist the access token.
+ * Returns the operator info so callers can render `--json` output.
+ */
+async function login(input) {
+    const client = new client_1.Client({ apiBase: input.apiBase });
+    const result = await client.request('/platform/auth/login', {
+        method: 'POST',
+        body: { email: input.email, password: input.password },
+    });
+    await (0, credentials_1.saveCredentials)({
+        accessToken: result.accessToken,
+        apiBase: input.apiBase,
+        operatorEmail: result.operator.email,
+        savedAt: new Date().toISOString(),
+    }, input.credentialsPath);
+    return result;
+}
+/**
+ * Read a JSON file (used by `plan publish --file` etc.). Kept colocated with
+ * the login command for now since both are I/O helpers; future PR can move
+ * to lib/ if more callers appear.
+ */
+async function readJsonFile(filePath) {
+    const raw = await fs_1.promises.readFile(filePath, 'utf8');
+    return JSON.parse(raw);
+}
+function renderLogin(result, json) {
+    if (json) {
+        (0, output_1.printValue)(result, { json: true });
+        return;
+    }
+    (0, output_1.printValue)({
+        operatorId: result.operator.id,
+        email: result.operator.email,
+        name: result.operator.name,
+        role: result.operator.role,
+    }, { json: false });
+    (0, output_1.printSecret)('Access token saved to ~/.lh-ops/credentials.json', result.accessToken.slice(0, 24) + '…');
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":";;AAsBA,sBAkBC;AAOD,oCAGC;AAED,kCAkBC;AAtED,2BAA4C;AAC5C,0CAAuC;AACvC,oDAAqD;AACrD,0CAAwD;AAexD;;;GAGG;AACI,KAAK,UAAU,KAAK,CAAC,KAAiB;IAC3C,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAgB,sBAAsB,EAAE;QACzE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;KACvD,CAAC,CAAC;IAEH,MAAM,IAAA,6BAAe,EACnB;QACE,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;QACpC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAClC,EACD,KAAK,CAAC,eAAe,CACtB,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,YAAY,CAAc,QAAgB;IAC9D,MAAM,GAAG,GAAG,MAAM,aAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;AAC9B,CAAC;AAED,SAAgB,WAAW,CAAC,MAAqB,EAAE,IAAa;IAC9D,IAAI,IAAI,EAAE,CAAC;QACT,IAAA,mBAAU,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IACD,IAAA,mBAAU,EACR;QACE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE;QAC9B,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;QAC5B,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;QAC1B,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;KAC3B,EACD,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,IAAA,oBAAW,EACT,kDAAkD,EAClD,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CACtC,CAAC;AACJ,CAAC"}

package/dist/commands/member.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.unfreezeMember = unfreezeMember;
+exports.setMemberBudgetCap = setMemberBudgetCap;
+const resolve_client_1 = require("../lib/resolve-client");
+/**
+ * Lift a budget-guardian freeze (FROZEN → ACTIVE). Mirrors
+ * `POST /platform/orgs/:orgId/members/:memberId/unfreeze`. The backend 409s if
+ * the member is not frozen.
+ */
+async function unfreezeMember(input) {
+    const client = await (0, resolve_client_1.resolveClient)(input);
+    return client.request(`/platform/orgs/${encodeURIComponent(input.orgId)}/members/${encodeURIComponent(input.memberId)}/unfreeze`, { method: 'POST' });
+}
+/**
+ * Set, change, or clear a member's daily budget cap. The amount is in the
+ * org's settlement currency (backend converts to USD-canonical). `null`
+ * clears the cap. Mirrors
+ * `PATCH /platform/orgs/:orgId/members/:memberId/budget-cap`.
+ */
+async function setMemberBudgetCap(input) {
+    const client = await (0, resolve_client_1.resolveClient)(input);
+    return client.request(`/platform/orgs/${encodeURIComponent(input.orgId)}/members/${encodeURIComponent(input.memberId)}/budget-cap`, { method: 'PATCH', body: { dailyBudgetCap: input.dailyBudgetCap } });
+}
+//# sourceMappingURL=member.js.map

package/dist/commands/member.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member.js","sourceRoot":"","sources":["../../src/commands/member.ts"],"names":[],"mappings":";;AAgBA,wCAUC;AAeD,gDAUC;AAnDD,0DAAmE;AAWnE;;;;GAIG;AACI,KAAK,UAAU,cAAc,CAClC,KAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAa,EAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,OAAO,CACnB,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,kBAAkB,CAC7E,KAAK,CAAC,QAAQ,CACf,WAAW,EACZ,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;AACJ,CAAC;AASD;;;;;GAKG;AACI,KAAK,UAAU,kBAAkB,CACtC,KAA8B;IAE9B,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAa,EAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,OAAO,CACnB,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,kBAAkB,CAC7E,KAAK,CAAC,QAAQ,CACf,aAAa,EACd,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,CACpE,CAAC;AACJ,CAAC"}

package/dist/commands/models.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listModels = listModels;
+exports.renderModels = renderModels;
+const lh_api_client_1 = require("lh-api-client");
+const resolve_client_1 = require("../lib/resolve-client");
+/**
+ * Canary prep (#445): list the models the upstream new-api offers, so the
+ * operator knows the real canonical names to put in plan / price-book JSON.
+ */
+async function listModels(input) {
+    const client = await (0, resolve_client_1.resolveClient)(input);
+    return (0, lh_api_client_1.listUpstreamModels)(client);
+}
+function renderModels(models, opts) {
+    if (opts.json)
+        return JSON.stringify(models);
+    if (models.length === 0) {
+        return '(no models reported by upstream new-api)\n';
+    }
+    return models.join('\n') + '\n';
+}
+//# sourceMappingURL=models.js.map

package/dist/commands/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/commands/models.ts"],"names":[],"mappings":";;AAOA,gCAGC;AAED,oCASC;AArBD,iDAA4E;AAC5E,0DAAmE;AAEnE;;;GAGG;AACI,KAAK,UAAU,UAAU,CAAC,KAAkB;IACjD,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAa,EAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,IAAA,kCAAqB,EAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,SAAgB,YAAY,CAC1B,MAAgB,EAChB,IAAuB;IAEvB,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,4CAA4C,CAAC;IACtD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAClC,CAAC"}

package/dist/commands/org-list.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listOrgs = listOrgs;
+exports.formatOrgList = formatOrgList;
+exports.renderOrgList = renderOrgList;
+const lh_api_client_1 = require("lh-api-client");
+const resolve_client_1 = require("../lib/resolve-client");
+/**
+ * US-OP-9 (T2 of v0.1.7 #279 / #280). Cross-org overview for platform
+ * operators — CLI-side wrapper around lh-api-client's `listOrgs`. The
+ * SDK owns query-param shaping; this wrapper just resolves the client
+ * from CLI options (token+apiBase or stored credentials).
+ */
+async function listOrgs(input) {
+    const client = await (0, resolve_client_1.resolveClient)(input);
+    return (0, lh_api_client_1.listOrgs)(client, input);
+}
+/**
+ * Cycle 10 — default human-readable formatter.
+ * One line per row: `<orgId-short> <name> <status> <balance> <currency>`.
+ * id truncated to first 8 chars to keep lines readable for uuid identifiers.
+ */
+function formatOrgList(rows) {
+    return (rows
+        .map((r) => {
+        const idShort = r.id.slice(0, 8);
+        return `${idShort} ${r.name} ${r.status} ${r.balance} ${r.currency}`;
+    })
+        .join('\n') + (rows.length > 0 ? '\n' : ''));
+}
+/**
+ * Cycle 11 (--json) + Cycle 12 (empty branch) — top-level renderer.
+ * Mirrors `renderAudit` (audit.ts): --json bypasses the formatter so
+ * operators piping into jq get the raw backend response.
+ */
+function renderOrgList(rows, opts) {
+    if (opts.json) {
+        return JSON.stringify(rows);
+    }
+    if (rows.length === 0) {
+        return '(no orgs match)\n';
+    }
+    return formatOrgList(rows);
+}
+//# sourceMappingURL=org-list.js.map

package/dist/commands/org-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-list.js","sourceRoot":"","sources":["../../src/commands/org-list.ts"],"names":[],"mappings":";;AAaA,4BAGC;AAOD,sCASC;AAOD,sCAWC;AAlDD,iDAAkF;AAClF,0DAAmE;AAMnE;;;;;GAKG;AACI,KAAK,UAAU,QAAQ,CAAC,KAAoB;IACjD,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAa,EAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,IAAA,wBAAW,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,IAAkB;IAC9C,OAAO,CACL,IAAI;SACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjC,OAAO,GAAG,OAAO,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvE,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAC3B,IAAkB,EAClB,IAAuB;IAEvB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/dist/commands/org-usage.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOrgUsage = getOrgUsage;
+exports.renderOrgUsage = renderOrgUsage;
+const lh_api_client_1 = require("lh-api-client");
+const resolve_client_1 = require("../lib/resolve-client");
+/**
+ * #589 — `lh-ops org usage <id>`. All-time reconciliation view (current
+ * balance + lifetime deposits/charges + usage by billing-decision + by model).
+ * CLI-side wrapper around lh-api-client's `getOrgUsage`; server stays
+ * JSON-only, presentation (md) is dispatched client-side in `renderOrgUsage`.
+ */
+async function getOrgUsage(input) {
+    const client = await (0, resolve_client_1.resolveClient)(input);
+    return (0, lh_api_client_1.getOrgUsage)(client, { orgId: input.orgId });
+}
+/**
+ * Format dispatch: json (canonical) | md (human-readable reconciliation).
+ */
+function renderOrgUsage(s, opts) {
+    if (opts.format === 'json')
+        return JSON.stringify(s, null, 2);
+    return renderOrgUsageMd(s);
+}
+function renderOrgUsageMd(s) {
+    const rate = s.contractRate ? Number(s.contractRate) : null;
+    const ccy = s.currency;
+    // amount → "24.1581 USD (≈173.94 CNY)" when a contract rate exists, else raw.
+    const amt = (usd) => rate ? `${usd} USD (≈${(Number(usd) * rate).toFixed(2)} ${ccy})` : `${usd} ${ccy}`;
+    const tok = (n) => compactTokens(n);
+    const lines = [];
+    lines.push(`# Usage — ${s.name} (${s.orgId})`);
+    lines.push('');
+    lines.push('## Balance');
+    lines.push(`- Current: ${amt(s.balance)}`);
+    lines.push(`- Deposits: ${s.deposits.count} txn, ${amt(s.deposits.amount)}`);
+    lines.push(`- Charges:  ${s.charges.count} txn, ${amt(s.charges.amount)}`);
+    lines.push('');
+    lines.push('## Totals (all-time)');
+    lines.push(`- Requests: ${s.totals.requests}`);
+    lines.push(`- Cost: ${amt(s.totals.cost)}`);
+    if (s.totals.firstSeen) {
+        lines.push(`- Window: ${s.totals.firstSeen} → ${s.totals.lastSeen}`);
+    }
+    lines.push('');
+    if (s.byBillingDecision.length > 0) {
+        lines.push('## By billing decision');
+        lines.push('');
+        lines.push('| Decision | Requests | Cost |');
+        lines.push('|---|---|---|');
+        for (const d of s.byBillingDecision) {
+            lines.push(`| ${d.billingDecision} | ${d.requests} | ${amt(d.cost)} |`);
+        }
+        lines.push('');
+    }
+    if (s.byModel.length > 0) {
+        lines.push('## By model');
+        lines.push('');
+        lines.push('| Model | Requests | Prompt | Completion | Cache | Cost |');
+        lines.push('|---|---|---|---|---|---|');
+        for (const m of s.byModel) {
+            lines.push(`| ${m.model} | ${m.requests} | ${tok(m.promptTokens)} | ${tok(m.completionTokens)} | ${tok(m.cacheTokens)} | ${amt(m.cost)} |`);
+        }
+        lines.push('');
+    }
+    return lines.join('\n') + '\n';
+}
+// 118294229 → "118.3M", 6506111 → "6.5M", 140 → "140". Keeps the model table
+// scannable without losing order-of-magnitude intuition.
+function compactTokens(n) {
+    if (n >= 1_000_000)
+        return `${(n / 1_000_000).toFixed(1)}M`;
+    if (n >= 1_000)
+        return `${(n / 1_000).toFixed(1)}K`;
+    return String(n);
+}
+//# sourceMappingURL=org-usage.js.map

package/dist/commands/org-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-usage.js","sourceRoot":"","sources":["../../src/commands/org-usage.ts"],"names":[],"mappings":";;AAkBA,kCAKC;AAKD,wCAMC;AAlCD,iDAGuB;AACvB,0DAAmE;AAQnE;;;;;GAKG;AACI,KAAK,UAAU,WAAW,CAC/B,KAAuB;IAEvB,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAa,EAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,IAAA,2BAAc,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAC5B,CAAyB,EACzB,IAA+B;IAE/B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAyB;IACjD,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC;IACvB,8EAA8E;IAC9E,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAC1B,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;IACrF,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,KAAK,SAAS,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7E,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,SAAS,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,eAAe,MAAM,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAChI,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,6EAA6E;AAC7E,yDAAyD;AACzD,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC,IAAI,SAAS;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,IAAI,CAAC,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC"}