mcp-baggage 0.1.0

package/dist/config.js

@@ -0,0 +1,163 @@
+/**
+ * Where the servers are declared, and what they are.
+ *
+ * Every client keeps its own file in its own shape, and most people have the
+ * same handful of servers in two or three of them. This finds the files, reads
+ * whichever exist, and folds identical servers together — a server is the same
+ * server when it is the same command or the same URL, whatever each config
+ * chose to call it.
+ */
+import { homedir } from 'node:os';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { parseToml } from "./toml.js";
+/**
+ * The files worth looking at, in the order a report should mention them.
+ *
+ * Project files come after the user ones for each client so that a project
+ * entry overrides the machine-wide one of the same name, which is how every
+ * client resolves it.
+ */
+export function candidates(cwd, home = homedir()) {
+    return [
+        { client: 'claude-code', scope: 'user', path: join(home, '.claude.json'), format: 'json' },
+        { client: 'claude-code', scope: 'project', path: join(cwd, '.mcp.json'), format: 'json' },
+        { client: 'cursor', scope: 'user', path: join(home, '.cursor', 'mcp.json'), format: 'json' },
+        { client: 'cursor', scope: 'project', path: join(cwd, '.cursor', 'mcp.json'), format: 'json' },
+        { client: 'vscode', scope: 'project', path: join(cwd, '.vscode', 'mcp.json'), format: 'json' },
+        { client: 'windsurf', scope: 'user', path: join(home, '.codeium', 'windsurf', 'mcp_config.json'), format: 'json' },
+        { client: 'codex', scope: 'user', path: join(home, '.codex', 'config.toml'), format: 'toml' },
+    ];
+}
+const asRecord = (v) => v && typeof v === 'object' && !Array.isArray(v) ? v : {};
+const asStrings = (v) => Array.isArray(v) ? v.filter((x) => typeof x === 'string') : [];
+const asStringMap = (v) => {
+    const out = {};
+    for (const [k, val] of Object.entries(asRecord(v)))
+        if (typeof val === 'string')
+            out[k] = val;
+    return out;
+};
+/**
+ * One entry from a config, whatever the client called its fields.
+ *
+ * `disabled: true`, `enabled: false` and Claude Code's `disabledMcpjsonServers`
+ * all mean the same thing and all end up here as `enabled: false` — a switched
+ * off server is still listed, because knowing what you would pay to switch it
+ * back on is half the question.
+ */
+function toSpec(name, raw, at, offSwitch) {
+    const entry = asRecord(raw);
+    const url = typeof entry['url'] === 'string' ? entry['url'] : undefined;
+    const command = typeof entry['command'] === 'string' ? entry['command'] : undefined;
+    if (!url && !command)
+        return null;
+    const declared = typeof entry['type'] === 'string' ? entry['type'] : undefined;
+    const transport = url || declared === 'http' || declared === 'sse' ? 'http' : 'stdio';
+    const enabled = entry['disabled'] !== true && entry['enabled'] !== false && !offSwitch.has(name);
+    const spec = {
+        name,
+        client: at.client,
+        source: at.path,
+        scope: at.scope,
+        transport,
+        enabled,
+        carriedBy: [at.client],
+    };
+    if (command)
+        spec.command = command;
+    const args = asStrings(entry['args']);
+    if (args.length)
+        spec.args = args;
+    const env = asStringMap(entry['env']);
+    if (Object.keys(env).length)
+        spec.env = env;
+    if (typeof entry['cwd'] === 'string')
+        spec.cwd = entry['cwd'];
+    if (url)
+        spec.url = url;
+    const headers = asStringMap(entry['headers']);
+    if (Object.keys(headers).length)
+        spec.headers = headers;
+    return spec;
+}
+/**
+ * The servers one file declares.
+ *
+ * Exported and taking text rather than a path so that it can be tested against
+ * every client's shape without a filesystem: `mcpServers` for Claude Code,
+ * Cursor and Windsurf, `servers` for VS Code, `mcp_servers` for Codex.
+ */
+export function parseConfig(text, at, cwd) {
+    let root;
+    try {
+        root = at.format === 'toml' ? parseToml(text) : asRecord(JSON.parse(text));
+    }
+    catch {
+        return [];
+    }
+    const offSwitch = new Set(asStrings(root['disabledMcpjsonServers']));
+    // Claude Code's user config keeps per-project servers under the project's own
+    // path, and those are the ones that apply when you are standing in it.
+    const scoped = cwd ? asRecord(asRecord(root['projects'])[cwd]) : {};
+    const tables = [root['mcpServers'], root['servers'], root['mcp_servers'], scoped['mcpServers']];
+    const specs = [];
+    for (const table of tables) {
+        for (const [name, raw] of Object.entries(asRecord(table))) {
+            const spec = toSpec(name, raw, at, offSwitch);
+            if (spec)
+                specs.push(spec);
+        }
+    }
+    return specs;
+}
+/** What makes two entries the same server: the thing that gets run, not the name. */
+export function identity(spec) {
+    if (spec.transport === 'http')
+        return `http:${spec.url}`;
+    return `stdio:${spec.command} ${(spec.args ?? []).join(' ')}`.trim();
+}
+/**
+ * Folds duplicates together.
+ *
+ * The first sighting wins the name and the file shown, later ones only add
+ * their client to `carriedBy` — except that a project-scoped entry replaces a
+ * user-scoped one, which is the override every client applies.
+ */
+export function merge(specs) {
+    const byIdentity = new Map();
+    for (const spec of specs) {
+        const id = identity(spec);
+        const held = byIdentity.get(id);
+        if (!held) {
+            byIdentity.set(id, { ...spec, carriedBy: [...spec.carriedBy] });
+            continue;
+        }
+        if (!held.carriedBy.includes(spec.client))
+            held.carriedBy.push(spec.client);
+        if (spec.scope === 'project' && held.scope === 'user') {
+            byIdentity.set(id, { ...spec, carriedBy: held.carriedBy });
+        }
+    }
+    return [...byIdentity.values()];
+}
+/** Every server declared on this machine, for this directory. */
+export async function discover(cwd, home) {
+    const files = [];
+    const found = [];
+    for (const at of candidates(cwd, home)) {
+        let text;
+        try {
+            text = await readFile(at.path, 'utf8');
+        }
+        catch {
+            continue;
+        }
+        const specs = parseConfig(text, at, cwd);
+        if (specs.length)
+            files.push(at.path);
+        found.push(...specs);
+    }
+    return { specs: merge(found), files };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAMtC;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,OAAe,OAAO,EAAE;IAC9D,OAAO;QACL,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;QAC1F,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;QACzF,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;QAC5F,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;QAC9F,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;QAC9F,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;QAClH,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;KAC9F,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAA2B,EAAE,CACvD,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;AAExF,MAAM,SAAS,GAAG,CAAC,CAAU,EAAY,EAAE,CACzC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAE9E,MAAM,WAAW,GAAG,CAAC,CAAU,EAA0B,EAAE;IACzD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IAC9F,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,MAAM,CAAC,IAAY,EAAE,GAAY,EAAE,EAAa,EAAE,SAAsB;IAC/E,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAEtF,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAEjG,MAAM,IAAI,GAAe;QACvB,IAAI;QACJ,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,MAAM,EAAE,EAAE,CAAC,IAAI;QACf,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,SAAS;QACT,OAAO;QACP,SAAS,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC;KACvB,CAAC;IACF,IAAI,OAAO;QAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACpC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAClC,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM;QAAE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IAC5C,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ;QAAE,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,GAAG;QAAE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACxB,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM;QAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,EAAa,EAAE,GAAY;IACnE,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;IAErE,8EAA8E;IAC9E,uEAAuE;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEpE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAChG,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9C,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,QAAQ,CAAC,IAAgB;IACvC,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;IACzD,OAAO,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,KAAK,CAAC,KAA4B;IAChD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YACtD,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,IAAa;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC"}

package/dist/exact.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The exact count, when an estimate is not good enough.
+ *
+ * Anthropic's `count_tokens` endpoint takes the same `tools` array a real
+ * request would and answers with the number the model would actually be
+ * charged — framing, separators and all. It bills nothing and needs no
+ * inference, so `--exact` costs an API key and a second, not money.
+ *
+ * A baseline call with no tools is subtracted, because the endpoint counts the
+ * whole request and the question here is only what the tools added.
+ */
+import type { Inventory } from './types.ts';
+/**
+ * Exact totals, one server at a time.
+ *
+ * Per server rather than per tool: a server with forty tools would be forty
+ * round trips for a breakdown nobody acts on, and the decision this informs —
+ * keep it or switch it off — is made at the server.
+ *
+ * Returns a map of server name to tokens. A server that errors is left out,
+ * and the caller keeps its estimate.
+ */
+export declare function exactly(inventories: readonly Inventory[], apiKey: string): Promise<Map<string, number>>;

package/dist/exact.js

@@ -0,0 +1,69 @@
+/**
+ * The exact count, when an estimate is not good enough.
+ *
+ * Anthropic's `count_tokens` endpoint takes the same `tools` array a real
+ * request would and answers with the number the model would actually be
+ * charged — framing, separators and all. It bills nothing and needs no
+ * inference, so `--exact` costs an API key and a second, not money.
+ *
+ * A baseline call with no tools is subtracted, because the endpoint counts the
+ * whole request and the question here is only what the tools added.
+ */
+import { qualify } from "./weigh.js";
+const ENDPOINT = 'https://api.anthropic.com/v1/messages/count_tokens';
+/** Any model prices the same count; this one is picked for being cheap to name. */
+const MODEL = 'claude-sonnet-5';
+const toApi = (tool, server) => ({
+    name: qualify(server, tool.name),
+    description: tool.description ?? '',
+    input_schema: tool.inputSchema ?? { type: 'object', properties: {} },
+});
+async function count(tools, apiKey) {
+    const response = await fetch(ENDPOINT, {
+        method: 'POST',
+        headers: {
+            'content-type': 'application/json',
+            'x-api-key': apiKey,
+            'anthropic-version': '2023-06-01',
+        },
+        body: JSON.stringify({
+            model: MODEL,
+            messages: [{ role: 'user', content: 'x' }],
+            ...(tools.length ? { tools } : {}),
+        }),
+    });
+    if (!response.ok) {
+        throw new Error(`count_tokens: HTTP ${response.status} ${await response.text().catch(() => '')}`.trim());
+    }
+    const body = (await response.json());
+    if (typeof body.input_tokens !== 'number')
+        throw new Error('count_tokens: no input_tokens in the answer');
+    return body.input_tokens;
+}
+/**
+ * Exact totals, one server at a time.
+ *
+ * Per server rather than per tool: a server with forty tools would be forty
+ * round trips for a breakdown nobody acts on, and the decision this informs —
+ * keep it or switch it off — is made at the server.
+ *
+ * Returns a map of server name to tokens. A server that errors is left out,
+ * and the caller keeps its estimate.
+ */
+export async function exactly(inventories, apiKey) {
+    const out = new Map();
+    const baseline = await count([], apiKey);
+    for (const inv of inventories) {
+        if (inv.error || inv.tools.length === 0)
+            continue;
+        try {
+            const withTools = await count(inv.tools.map((t) => toApi(t, inv.server.name)), apiKey);
+            out.set(inv.server.name, Math.max(0, withTools - baseline));
+        }
+        catch {
+            // Keep the estimate for this one; one refused server is not a failed run.
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=exact.js.map

package/dist/exact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exact.js","sourceRoot":"","sources":["../src/exact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGrC,MAAM,QAAQ,GAAG,oDAAoD,CAAC;AAEtE,mFAAmF;AACnF,MAAM,KAAK,GAAG,iBAAiB,CAAC;AAIhC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,MAAc,EAAW,EAAE,CAAC,CAAC;IACzD,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;IAChC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;IACnC,YAAY,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;CACrE,CAAC,CAAC;AAEH,KAAK,UAAU,KAAK,CAAC,KAAgB,EAAE,MAAc;IACnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,MAAM;YACnB,mBAAmB,EAAE,YAAY;SAClC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YAC1C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnC,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA8B,CAAC;IAClE,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC1G,OAAO,IAAI,CAAC,YAAY,CAAC;AAC3B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,WAAiC,EAAE,MAAc;IAC7E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAEzC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAC3B,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAC/C,MAAM,CACP,CAAC;YACF,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The library, for anything that wants the figures without the table.
+ *
+ * A CI check that fails when a config grows past a budget is the obvious one,
+ * and it needs `scan()` and a number — not a report.
+ */
+import type { WeighedServer } from './types.ts';
+export type ScanOptions = {
+    cwd?: string;
+    /** Days of transcripts to read for usage; `0` skips them and leaves usage unknown. */
+    days?: number;
+    timeout?: number;
+    /** Include servers the config has switched off. */
+    all?: boolean;
+};
+export type Scan = {
+    servers: WeighedServer[];
+    /** Tokens every request carries, across every server that answered. */
+    tokens: number;
+    /** The config files that had something in them. */
+    files: string[];
+};
+/** Find every server, weigh it, and say what it costs. */
+export declare function scan(options?: ScanOptions): Promise<Scan>;
+export { candidates, discover, identity, merge, parseConfig } from './config.ts';
+export { exactly } from './exact.ts';
+export { inspect, inspectAll } from './mcp.ts';
+export { asJson, breakdown, compact, DEFAULT_WINDOW, idleness, origin, report, shorten } from './report.ts';
+export { estimate, TOOL_FRAMING } from './tokens.ts';
+export { callsInLine, lookup, readUsage } from './usage.ts';
+export { heaviestFirst, qualify, serialize, totalTokens, unused, weigh } from './weigh.ts';
+export type * from './types.ts';

package/dist/index.js

@@ -0,0 +1,29 @@
+/**
+ * The library, for anything that wants the figures without the table.
+ *
+ * A CI check that fails when a config grows past a budget is the obvious one,
+ * and it needs `scan()` and a number — not a report.
+ */
+import { discover } from "./config.js";
+import { inspectAll } from "./mcp.js";
+import { lookup, readUsage } from "./usage.js";
+import { heaviestFirst, totalTokens, weigh } from "./weigh.js";
+/** Find every server, weigh it, and say what it costs. */
+export async function scan(options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const { specs, files } = await discover(cwd);
+    const wanted = specs.filter((s) => options.all || s.enabled);
+    const inventories = await inspectAll(wanted, { timeout: options.timeout });
+    const usage = options.days === 0 ? null : await readUsage(options.days);
+    const callsOf = lookup(usage);
+    const servers = heaviestFirst(inventories.map((inv) => weigh(inv, callsOf)));
+    return { servers, tokens: totalTokens(servers.filter((s) => !s.error)), files };
+}
+export { candidates, discover, identity, merge, parseConfig } from "./config.js";
+export { exactly } from "./exact.js";
+export { inspect, inspectAll } from "./mcp.js";
+export { asJson, breakdown, compact, DEFAULT_WINDOW, idleness, origin, report, shorten } from "./report.js";
+export { estimate, TOOL_FRAMING } from "./tokens.js";
+export { callsInLine, lookup, readUsage } from "./usage.js";
+export { heaviestFirst, qualify, serialize, totalTokens, unused, weigh } from "./weigh.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAoB/D,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,UAAuB,EAAE;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAE9B,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AAClF,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC5G,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC"}

package/dist/mcp.d.ts

@@ -0,0 +1,50 @@
+/**
+ * A minimal MCP client — enough to ask a server what it carries, and no more.
+ *
+ * The official SDK would do this, and would also pull a dependency tree into a
+ * tool whose whole subject is weight. What is needed here is four messages:
+ * `initialize`, the `initialized` notification, and then the three listings.
+ * No tool is ever called, nothing is written, and the connection is closed as
+ * soon as the listing is in hand.
+ *
+ * Both transports are spoken because both are in people's configs: stdio,
+ * where the server is a process this spawns, and streamable HTTP, where it is
+ * a URL. A server that fails is reported as a failed row rather than taken as
+ * a reason to stop — one broken entry in a config should not cost the run.
+ */
+import type { Inventory, ServerSpec } from './types.ts';
+/** How long one server gets, all in, before it is written off. */
+export declare const DEFAULT_TIMEOUT = 20000;
+/**
+ * How to start the process.
+ *
+ * Almost every server in a config is `npx` or `uvx`, which on Windows are
+ * `.cmd` shims that `CreateProcess` will not run — the shell has to. So on
+ * Windows the whole thing becomes one quoted command line handed to `cmd`,
+ * rather than a command plus an argument array: passing both is what Node
+ * deprecated, because the arguments would be concatenated unescaped.
+ */
+export declare function stdioOptions(spec: ServerSpec): {
+    command: string;
+    args: string[];
+    shell: boolean;
+};
+/**
+ * Ask one server what it carries.
+ *
+ * Never throws: a server that cannot be reached comes back as an inventory
+ * with an `error` and no tools, which is a row in the report like any other.
+ */
+export declare function inspect(spec: ServerSpec, timeout?: number): Promise<Inventory>;
+/**
+ * Every server, a few at a time.
+ *
+ * Each one is a process to spawn, so they are not all started at once; four in
+ * flight keeps a machine with a dozen servers responsive and still finishes in
+ * about the time the slowest handful take.
+ */
+export declare function inspectAll(specs: readonly ServerSpec[], options?: {
+    timeout?: number;
+    lanes?: number;
+    onDone?: (inv: Inventory) => void;
+}): Promise<Inventory[]>;