panopticon-cli 0.4.30 → 0.4.32

package/dist/index.js

@@ -1,25 +1,14 @@
 import {
-  GitHubTracker,
-  GitLabTracker,
-  IssueNotFoundError,
-  LinearTracker,
   LinkManager,
-  NotImplementedError,
-  TrackerAuthError,
   addAlias,
   cleanOldBackups,
   createBackup,
   createBackupTimestamp,
-  createTracker,
-  createTrackerFromConfig,
   detectShell,
   executeSync,
   formatIssueRef,
   getAliasInstructions,
-  getAllTrackers,
   getLinkManager,
-  getPrimaryTracker,
-  getSecondaryTracker,
   getShellRcFile,
   hasAlias,
   isPanopticonSymlink,
@@ -29,17 +18,28 @@ import {
   planSync,
   restoreBackup,
   syncHooks
-} from "./chunk-SUMIHS2B.js";
+} from "./chunk-ELK6Q7QI.js";
 import {
+  GitHubTracker,
+  GitLabTracker,
+  IssueNotFoundError,
+  LinearTracker,
+  NotImplementedError,
   PROVIDERS,
+  TrackerAuthError,
+  createTracker,
+  createTrackerFromConfig,
   getAgentCommand,
+  getAllTrackers,
   getAvailableModels,
   getClaudeModelFlag,
   getDefaultSettings,
   getDirectProviders,
+  getPrimaryTracker,
   getProviderEnv,
   getProviderForModel,
   getRouterProviders,
+  getSecondaryTracker,
   init_providers,
   init_settings,
   isAnthropicModel,
@@ -48,14 +48,15 @@ import {
   requiresRouter,
   saveSettings,
   validateSettings
-} from "./chunk-J3J32DIR.js";
+} from "./chunk-LYSBSZYV.js";
 import "./chunk-BBCUK6N2.js";
 import {
   getDashboardApiUrl,
   getDefaultConfig,
+  init_config,
   loadConfig,
   saveConfig
-} from "./chunk-VTMXR7JF.js";
+} from "./chunk-VU4FLXV5.js";
 import {
   AGENTS_DIR,
   BACKUPS_DIR,
@@ -97,6 +98,7 @@ import {
 // src/index.ts
 init_esm_shims();
 init_paths();
+init_config();
 init_providers();
 init_settings();
 export {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// Panopticon CLI - Main exports for library usage\nexport * from './lib/paths.js';\nexport * from './lib/config.js';\nexport * from './lib/shell.js';\nexport * from './lib/backup.js';\nexport * from './lib/sync.js';\nexport * from './lib/tracker/index.js';\nexport * from './lib/providers.js';\nexport * from './lib/settings.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AACA;AAMA;AACA;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// Panopticon CLI - Main exports for library usage\nexport * from './lib/paths.js';\nexport * from './lib/config.js';\nexport * from './lib/shell.js';\nexport * from './lib/backup.js';\nexport * from './lib/sync.js';\nexport * from './lib/tracker/index.js';\nexport * from './lib/providers.js';\nexport * from './lib/settings.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AACA;AACA;AAKA;AACA;","names":[]}

package/dist/{remote-workspace-FNXLMNBG.js → remote-workspace-2G6V2KNP.js}

@@ -1,9 +1,6 @@
 import {
   saveWorkspaceMetadata
 } from "./chunk-44EOY2ZL.js";
-import {
-  loadConfig
-} from "./chunk-VTMXR7JF.js";
 import {
   extractTeamPrefix,
   findProjectByTeam,
@@ -13,6 +10,10 @@ import {
   createExeProvider,
   init_exe_provider
 } from "./chunk-JM6V62LT.js";
+import {
+  init_config,
+  loadConfig
+} from "./chunk-VU4FLXV5.js";
 import "./chunk-6HXKTOD7.js";
 import {
   init_esm_shims
@@ -20,10 +21,11 @@ import {
 
 // src/lib/remote-workspace.ts
 init_esm_shims();
+init_config();
+init_exe_provider();
 import chalk from "chalk";
 import { exec } from "child_process";
 import { promisify } from "util";
-init_exe_provider();
 init_projects();
 var execAsync = promisify(exec);
 async function createRemoteWorkspace(issueId, options = {}) {
@@ -176,4 +178,4 @@ EOF`);
 export {
   createRemoteWorkspace
 };
-//# sourceMappingURL=remote-workspace-FNXLMNBG.js.map
+//# sourceMappingURL=remote-workspace-2G6V2KNP.js.map

package/dist/{remote-workspace-FNXLMNBG.js.map → remote-workspace-2G6V2KNP.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/lib/remote-workspace.ts"],"sourcesContent":["/**\n * Remote Workspace Creation\n *\n * Shared module for creating remote workspaces.\n * Used by both workspace.ts (explicit creation) and work/issue.ts (auto-creation).\n */\n\nimport chalk from 'chalk';\nimport { existsSync } from 'fs';\nimport { join } from 'path';\nimport { exec } from 'child_process';\nimport { promisify } from 'util';\nimport { loadConfig } from './config.js';\nimport { createExeProvider } from './remote/exe-provider.js';\nimport { saveWorkspaceMetadata } from './remote/workspace-metadata.js';\nimport type { RemoteWorkspaceMetadata } from './remote/interface.js';\nimport { extractTeamPrefix, findProjectByTeam, resolveProjectFromIssue } from './projects.js';\n\nconst execAsync = promisify(exec);\n\nexport interface CreateRemoteWorkspaceOptions {\n  dryRun?: boolean;\n  spinner?: { text: string };\n}\n\n/**\n * Create a remote workspace on exe.dev\n */\nexport async function createRemoteWorkspace(\n  issueId: string,\n  options: CreateRemoteWorkspaceOptions = {}\n): Promise<RemoteWorkspaceMetadata> {\n  const config = loadConfig();\n  const remoteConfig = config.remote;\n\n  if (!remoteConfig?.enabled) {\n    throw new Error('Remote workspaces not enabled. Run `pan remote setup`');\n  }\n\n  const normalizedId = issueId.toLowerCase().replace(/[^a-z0-9-]/g, '-');\n  const branchName = `feature/${normalizedId}`;\n  const infraVm = remoteConfig.exe?.infra_vm || 'pan-infra';\n  const exe = createExeProvider({ infraVm });\n\n  // Determine project context\n  const teamPrefix = extractTeamPrefix(issueId);\n  const projectConfig = teamPrefix ? findProjectByTeam(teamPrefix) : null;\n  const projectRoot = projectConfig?.path || process.cwd();\n\n  // Determine project identifier for VM name\n  let projectId = teamPrefix?.toLowerCase();\n  if (!projectId && projectConfig?.linear_team) {\n    projectId = projectConfig.linear_team.toLowerCase();\n  }\n  if (!projectId) {\n    try {\n      const { stdout } = await execAsync('git remote get-url origin', {\n        cwd: projectRoot,\n        encoding: 'utf-8',\n      });\n      const repoMatch = stdout.trim().match(/\\/([^\\/]+?)(\\.git)?$/);\n      projectId = repoMatch ? repoMatch[1].toLowerCase().replace(/[^a-z0-9-]/g, '-') : 'proj';\n    } catch {\n      projectId = 'proj';\n    }\n  }\n\n  // VM names must be valid hostnames (start with letter, alphanumeric + hyphens)\n  const vmName = `${projectId}-${normalizedId}-ws`.toLowerCase().replace(/[^a-z0-9-]/g, '-');\n\n  if (options.dryRun) {\n    console.log(chalk.bold('Would create remote workspace:'));\n    console.log(`  VM:        ${chalk.cyan(vmName)}`);\n    console.log(`  Project:   ${chalk.dim(projectId)}`);\n    console.log(`  Infra:     ${chalk.dim(infraVm)}`);\n    console.log(`  Branch:    ${chalk.dim(branchName)}`);\n    throw new Error('Dry run - not implemented in this module');\n  }\n\n  // Get git remote URL\n  let repoUrl = '';\n  try {\n    const { stdout } = await execAsync('git remote get-url origin', {\n      cwd: projectRoot,\n      encoding: 'utf-8',\n    });\n    repoUrl = stdout.trim();\n  } catch {\n    throw new Error('Could not determine git remote URL. Make sure you are in a git repository with a remote origin.');\n  }\n\n  if (options.spinner) {\n    options.spinner.text = 'Creating VM (this may take 1-2 minutes)...';\n  }\n\n  // Step 1: Create VM\n  await exe.createVm(vmName);\n\n  // Step 2: Add GitHub host key and clone repository on VM\n  if (options.spinner) {\n    options.spinner.text = 'Cloning repository on VM...';\n  }\n  await exe.ssh(vmName, 'mkdir -p ~/.ssh && ssh-keyscan -t ed25519,rsa github.com >> ~/.ssh/known_hosts 2>/dev/null');\n  const cloneResult = await exe.ssh(vmName, `git clone ${repoUrl} ~/workspace`);\n  if (cloneResult.exitCode !== 0) {\n    await exe.deleteVm(vmName);\n    throw new Error(`Failed to clone: ${cloneResult.stderr}`);\n  }\n\n  // Step 3: Create feature branch\n  if (options.spinner) {\n    options.spinner.text = 'Creating feature branch...';\n  }\n  const branchResult = await exe.ssh(vmName, `cd ~/workspace && git checkout -b ${branchName}`);\n  if (branchResult.exitCode !== 0) {\n    await exe.ssh(vmName, `cd ~/workspace && git checkout ${branchName} || git checkout -b ${branchName}`);\n  }\n\n  // Step 4: Configure environment for shared infra\n  const envContent = `\n# Panopticon Remote Workspace\nWORKSPACE_ID=${normalizedId}\nISSUE_ID=${issueId.toUpperCase()}\n\n# Shared Infrastructure\nPOSTGRES_HOST=${infraVm}\nPOSTGRES_PORT=5432\nPOSTGRES_USER=postgres\nPOSTGRES_PASSWORD=\\${PAN_POSTGRES_PASSWORD:-panopticon}\nDATABASE_NAME=myn_${normalizedId.replace(/-/g, '_')}\n\nREDIS_HOST=${infraVm}\nREDIS_PORT=6379\nREDIS_DATABASE=0\n\n# Spring Boot (if applicable)\nSPRING_DATASOURCE_URL=jdbc:postgresql://${infraVm}:5432/myn_${normalizedId.replace(/-/g, '_')}\nSPRING_DATA_REDIS_HOST=${infraVm}\n`;\n\n  await exe.ssh(vmName, `cat > ~/workspace/.env.remote << 'EOF'\n${envContent}\nEOF`);\n\n  // Step 5: Create database on shared postgres\n  const dbName = `myn_${normalizedId.replace(/-/g, '_')}`;\n  try {\n    await exe.ssh(infraVm, `docker exec pan-postgres psql -U postgres -c \"CREATE DATABASE ${dbName}\" 2>/dev/null || true`);\n  } catch {\n    // Non-fatal - database might already exist\n  }\n\n  // Step 6: Install beads CLI globally on remote VM\n  if (options.spinner) {\n    options.spinner.text = 'Installing beads CLI...';\n  }\n  const bdInstalled = await exe.installBeads(vmName);\n  if (bdInstalled) {\n    await exe.initBeads(vmName, '~/workspace');\n  }\n\n  // Step 6.5: Copy essential skills to remote VM\n  if (options.spinner) {\n    options.spinner.text = 'Copying skills to remote VM...';\n  }\n  await exe.copySkillsToVm(vmName);\n\n  // Step 7: Start containers if docker compose exists\n  let containersStarted = false;\n  let frontendUrl = '';\n  let apiUrl = '';\n\n  const composeCheck = await exe.ssh(vmName, 'ls ~/workspace/docker-compose.yml ~/workspace/.devcontainer/docker-compose.yml 2>/dev/null | head -1');\n\n  if (composeCheck.stdout.trim()) {\n    if (options.spinner) {\n      options.spinner.text = 'Starting containers...';\n    }\n    const composeDir = composeCheck.stdout.includes('.devcontainer')\n      ? '~/workspace/.devcontainer'\n      : '~/workspace';\n\n    const upResult = await exe.ssh(vmName, `cd ${composeDir} && docker compose up -d 2>&1`);\n    containersStarted = upResult.exitCode === 0;\n\n    if (containersStarted) {\n      if (options.spinner) {\n        options.spinner.text = 'Exposing ports...';\n      }\n      try {\n        frontendUrl = await exe.exposePort(vmName, 4173);\n        apiUrl = await exe.exposePort(vmName, 7000);\n      } catch {\n        // Port exposure failed - not critical\n      }\n    }\n  }\n\n  // Step 8: Save workspace metadata\n  const metadata: RemoteWorkspaceMetadata = {\n    id: normalizedId,\n    issue: issueId.toUpperCase(),\n    provider: 'exe',\n    vmName,\n    infraVm,\n    database: dbName,\n    redisDb: 0,\n    urls: {\n      frontend: frontendUrl || undefined,\n      api: apiUrl || undefined,\n    },\n    created: new Date(),\n    location: 'remote',\n  };\n\n  saveWorkspaceMetadata(metadata);\n\n  return metadata;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAOA,OAAO,WAAW;AAGlB,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAE1B;AAGA;AAEA,IAAM,YAAY,UAAU,IAAI;AAUhC,eAAsB,sBACpB,SACA,UAAwC,CAAC,GACP;AAClC,QAAM,SAAS,WAAW;AAC1B,QAAM,eAAe,OAAO;AAE5B,MAAI,CAAC,cAAc,SAAS;AAC1B,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AAEA,QAAM,eAAe,QAAQ,YAAY,EAAE,QAAQ,eAAe,GAAG;AACrE,QAAM,aAAa,WAAW,YAAY;AAC1C,QAAM,UAAU,aAAa,KAAK,YAAY;AAC9C,QAAM,MAAM,kBAAkB,EAAE,QAAQ,CAAC;AAGzC,QAAM,aAAa,kBAAkB,OAAO;AAC5C,QAAM,gBAAgB,aAAa,kBAAkB,UAAU,IAAI;AACnE,QAAM,cAAc,eAAe,QAAQ,QAAQ,IAAI;AAGvD,MAAI,YAAY,YAAY,YAAY;AACxC,MAAI,CAAC,aAAa,eAAe,aAAa;AAC5C,gBAAY,cAAc,YAAY,YAAY;AAAA,EACpD;AACA,MAAI,CAAC,WAAW;AACd,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM,UAAU,6BAA6B;AAAA,QAC9D,KAAK;AAAA,QACL,UAAU;AAAA,MACZ,CAAC;AACD,YAAM,YAAY,OAAO,KAAK,EAAE,MAAM,sBAAsB;AAC5D,kBAAY,YAAY,UAAU,CAAC,EAAE,YAAY,EAAE,QAAQ,eAAe,GAAG,IAAI;AAAA,IACnF,QAAQ;AACN,kBAAY;AAAA,IACd;AAAA,EACF;AAGA,QAAM,SAAS,GAAG,SAAS,IAAI,YAAY,MAAM,YAAY,EAAE,QAAQ,eAAe,GAAG;AAEzF,MAAI,QAAQ,QAAQ;AAClB,YAAQ,IAAI,MAAM,KAAK,gCAAgC,CAAC;AACxD,YAAQ,IAAI,gBAAgB,MAAM,KAAK,MAAM,CAAC,EAAE;AAChD,YAAQ,IAAI,gBAAgB,MAAM,IAAI,SAAS,CAAC,EAAE;AAClD,YAAQ,IAAI,gBAAgB,MAAM,IAAI,OAAO,CAAC,EAAE;AAChD,YAAQ,IAAI,gBAAgB,MAAM,IAAI,UAAU,CAAC,EAAE;AACnD,UAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AAGA,MAAI,UAAU;AACd,MAAI;AACF,UAAM,EAAE,OAAO,IAAI,MAAM,UAAU,6BAA6B;AAAA,MAC9D,KAAK;AAAA,MACL,UAAU;AAAA,IACZ,CAAC;AACD,cAAU,OAAO,KAAK;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,MAAM,iGAAiG;AAAA,EACnH;AAEA,MAAI,QAAQ,SAAS;AACnB,YAAQ,QAAQ,OAAO;AAAA,EACzB;AAGA,QAAM,IAAI,SAAS,MAAM;AAGzB,MAAI,QAAQ,SAAS;AACnB,YAAQ,QAAQ,OAAO;AAAA,EACzB;AACA,QAAM,IAAI,IAAI,QAAQ,4FAA4F;AAClH,QAAM,cAAc,MAAM,IAAI,IAAI,QAAQ,aAAa,OAAO,cAAc;AAC5E,MAAI,YAAY,aAAa,GAAG;AAC9B,UAAM,IAAI,SAAS,MAAM;AACzB,UAAM,IAAI,MAAM,oBAAoB,YAAY,MAAM,EAAE;AAAA,EAC1D;AAGA,MAAI,QAAQ,SAAS;AACnB,YAAQ,QAAQ,OAAO;AAAA,EACzB;AACA,QAAM,eAAe,MAAM,IAAI,IAAI,QAAQ,qCAAqC,UAAU,EAAE;AAC5F,MAAI,aAAa,aAAa,GAAG;AAC/B,UAAM,IAAI,IAAI,QAAQ,kCAAkC,UAAU,uBAAuB,UAAU,EAAE;AAAA,EACvG;AAGA,QAAM,aAAa;AAAA;AAAA,eAEN,YAAY;AAAA,WAChB,QAAQ,YAAY,CAAC;AAAA;AAAA;AAAA,gBAGhB,OAAO;AAAA;AAAA;AAAA;AAAA,oBAIH,aAAa,QAAQ,MAAM,GAAG,CAAC;AAAA;AAAA,aAEtC,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,0CAKsB,OAAO,aAAa,aAAa,QAAQ,MAAM,GAAG,CAAC;AAAA,yBACpE,OAAO;AAAA;AAG9B,QAAM,IAAI,IAAI,QAAQ;AAAA,EACtB,UAAU;AAAA,IACR;AAGF,QAAM,SAAS,OAAO,aAAa,QAAQ,MAAM,GAAG,CAAC;AACrD,MAAI;AACF,UAAM,IAAI,IAAI,SAAS,iEAAiE,MAAM,uBAAuB;AAAA,EACvH,QAAQ;AAAA,EAER;AAGA,MAAI,QAAQ,SAAS;AACnB,YAAQ,QAAQ,OAAO;AAAA,EACzB;AACA,QAAM,cAAc,MAAM,IAAI,aAAa,MAAM;AACjD,MAAI,aAAa;AACf,UAAM,IAAI,UAAU,QAAQ,aAAa;AAAA,EAC3C;AAGA,MAAI,QAAQ,SAAS;AACnB,YAAQ,QAAQ,OAAO;AAAA,EACzB;AACA,QAAM,IAAI,eAAe,MAAM;AAG/B,MAAI,oBAAoB;AACxB,MAAI,cAAc;AAClB,MAAI,SAAS;AAEb,QAAM,eAAe,MAAM,IAAI,IAAI,QAAQ,sGAAsG;AAEjJ,MAAI,aAAa,OAAO,KAAK,GAAG;AAC9B,QAAI,QAAQ,SAAS;AACnB,cAAQ,QAAQ,OAAO;AAAA,IACzB;AACA,UAAM,aAAa,aAAa,OAAO,SAAS,eAAe,IAC3D,8BACA;AAEJ,UAAM,WAAW,MAAM,IAAI,IAAI,QAAQ,MAAM,UAAU,+BAA+B;AACtF,wBAAoB,SAAS,aAAa;AAE1C,QAAI,mBAAmB;AACrB,UAAI,QAAQ,SAAS;AACnB,gBAAQ,QAAQ,OAAO;AAAA,MACzB;AACA,UAAI;AACF,sBAAc,MAAM,IAAI,WAAW,QAAQ,IAAI;AAC/C,iBAAS,MAAM,IAAI,WAAW,QAAQ,GAAI;AAAA,MAC5C,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAGA,QAAM,WAAoC;AAAA,IACxC,IAAI;AAAA,IACJ,OAAO,QAAQ,YAAY;AAAA,IAC3B,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,UAAU,eAAe;AAAA,MACzB,KAAK,UAAU;AAAA,IACjB;AAAA,IACA,SAAS,oBAAI,KAAK;AAAA,IAClB,UAAU;AAAA,EACZ;AAEA,wBAAsB,QAAQ;AAE9B,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/lib/remote-workspace.ts"],"sourcesContent":["/**\n * Remote Workspace Creation\n *\n * Shared module for creating remote workspaces.\n * Used by both workspace.ts (explicit creation) and work/issue.ts (auto-creation).\n */\n\nimport chalk from 'chalk';\nimport { existsSync } from 'fs';\nimport { join } from 'path';\nimport { exec } from 'child_process';\nimport { promisify } from 'util';\nimport { loadConfig } from './config.js';\nimport { createExeProvider } from './remote/exe-provider.js';\nimport { saveWorkspaceMetadata } from './remote/workspace-metadata.js';\nimport type { RemoteWorkspaceMetadata } from './remote/interface.js';\nimport { extractTeamPrefix, findProjectByTeam, resolveProjectFromIssue } from './projects.js';\n\nconst execAsync = promisify(exec);\n\nexport interface CreateRemoteWorkspaceOptions {\n  dryRun?: boolean;\n  spinner?: { text: string };\n}\n\n/**\n * Create a remote workspace on exe.dev\n */\nexport async function createRemoteWorkspace(\n  issueId: string,\n  options: CreateRemoteWorkspaceOptions = {}\n): Promise<RemoteWorkspaceMetadata> {\n  const config = loadConfig();\n  const remoteConfig = config.remote;\n\n  if (!remoteConfig?.enabled) {\n    throw new Error('Remote workspaces not enabled. Run `pan remote setup`');\n  }\n\n  const normalizedId = issueId.toLowerCase().replace(/[^a-z0-9-]/g, '-');\n  const branchName = `feature/${normalizedId}`;\n  const infraVm = remoteConfig.exe?.infra_vm || 'pan-infra';\n  const exe = createExeProvider({ infraVm });\n\n  // Determine project context\n  const teamPrefix = extractTeamPrefix(issueId);\n  const projectConfig = teamPrefix ? findProjectByTeam(teamPrefix) : null;\n  const projectRoot = projectConfig?.path || process.cwd();\n\n  // Determine project identifier for VM name\n  let projectId = teamPrefix?.toLowerCase();\n  if (!projectId && projectConfig?.linear_team) {\n    projectId = projectConfig.linear_team.toLowerCase();\n  }\n  if (!projectId) {\n    try {\n      const { stdout } = await execAsync('git remote get-url origin', {\n        cwd: projectRoot,\n        encoding: 'utf-8',\n      });\n      const repoMatch = stdout.trim().match(/\\/([^\\/]+?)(\\.git)?$/);\n      projectId = repoMatch ? repoMatch[1].toLowerCase().replace(/[^a-z0-9-]/g, '-') : 'proj';\n    } catch {\n      projectId = 'proj';\n    }\n  }\n\n  // VM names must be valid hostnames (start with letter, alphanumeric + hyphens)\n  const vmName = `${projectId}-${normalizedId}-ws`.toLowerCase().replace(/[^a-z0-9-]/g, '-');\n\n  if (options.dryRun) {\n    console.log(chalk.bold('Would create remote workspace:'));\n    console.log(`  VM:        ${chalk.cyan(vmName)}`);\n    console.log(`  Project:   ${chalk.dim(projectId)}`);\n    console.log(`  Infra:     ${chalk.dim(infraVm)}`);\n    console.log(`  Branch:    ${chalk.dim(branchName)}`);\n    throw new Error('Dry run - not implemented in this module');\n  }\n\n  // Get git remote URL\n  let repoUrl = '';\n  try {\n    const { stdout } = await execAsync('git remote get-url origin', {\n      cwd: projectRoot,\n      encoding: 'utf-8',\n    });\n    repoUrl = stdout.trim();\n  } catch {\n    throw new Error('Could not determine git remote URL. Make sure you are in a git repository with a remote origin.');\n  }\n\n  if (options.spinner) {\n    options.spinner.text = 'Creating VM (this may take 1-2 minutes)...';\n  }\n\n  // Step 1: Create VM\n  await exe.createVm(vmName);\n\n  // Step 2: Add GitHub host key and clone repository on VM\n  if (options.spinner) {\n    options.spinner.text = 'Cloning repository on VM...';\n  }\n  await exe.ssh(vmName, 'mkdir -p ~/.ssh && ssh-keyscan -t ed25519,rsa github.com >> ~/.ssh/known_hosts 2>/dev/null');\n  const cloneResult = await exe.ssh(vmName, `git clone ${repoUrl} ~/workspace`);\n  if (cloneResult.exitCode !== 0) {\n    await exe.deleteVm(vmName);\n    throw new Error(`Failed to clone: ${cloneResult.stderr}`);\n  }\n\n  // Step 3: Create feature branch\n  if (options.spinner) {\n    options.spinner.text = 'Creating feature branch...';\n  }\n  const branchResult = await exe.ssh(vmName, `cd ~/workspace && git checkout -b ${branchName}`);\n  if (branchResult.exitCode !== 0) {\n    await exe.ssh(vmName, `cd ~/workspace && git checkout ${branchName} || git checkout -b ${branchName}`);\n  }\n\n  // Step 4: Configure environment for shared infra\n  const envContent = `\n# Panopticon Remote Workspace\nWORKSPACE_ID=${normalizedId}\nISSUE_ID=${issueId.toUpperCase()}\n\n# Shared Infrastructure\nPOSTGRES_HOST=${infraVm}\nPOSTGRES_PORT=5432\nPOSTGRES_USER=postgres\nPOSTGRES_PASSWORD=\\${PAN_POSTGRES_PASSWORD:-panopticon}\nDATABASE_NAME=myn_${normalizedId.replace(/-/g, '_')}\n\nREDIS_HOST=${infraVm}\nREDIS_PORT=6379\nREDIS_DATABASE=0\n\n# Spring Boot (if applicable)\nSPRING_DATASOURCE_URL=jdbc:postgresql://${infraVm}:5432/myn_${normalizedId.replace(/-/g, '_')}\nSPRING_DATA_REDIS_HOST=${infraVm}\n`;\n\n  await exe.ssh(vmName, `cat > ~/workspace/.env.remote << 'EOF'\n${envContent}\nEOF`);\n\n  // Step 5: Create database on shared postgres\n  const dbName = `myn_${normalizedId.replace(/-/g, '_')}`;\n  try {\n    await exe.ssh(infraVm, `docker exec pan-postgres psql -U postgres -c \"CREATE DATABASE ${dbName}\" 2>/dev/null || true`);\n  } catch {\n    // Non-fatal - database might already exist\n  }\n\n  // Step 6: Install beads CLI globally on remote VM\n  if (options.spinner) {\n    options.spinner.text = 'Installing beads CLI...';\n  }\n  const bdInstalled = await exe.installBeads(vmName);\n  if (bdInstalled) {\n    await exe.initBeads(vmName, '~/workspace');\n  }\n\n  // Step 6.5: Copy essential skills to remote VM\n  if (options.spinner) {\n    options.spinner.text = 'Copying skills to remote VM...';\n  }\n  await exe.copySkillsToVm(vmName);\n\n  // Step 7: Start containers if docker compose exists\n  let containersStarted = false;\n  let frontendUrl = '';\n  let apiUrl = '';\n\n  const composeCheck = await exe.ssh(vmName, 'ls ~/workspace/docker-compose.yml ~/workspace/.devcontainer/docker-compose.yml 2>/dev/null | head -1');\n\n  if (composeCheck.stdout.trim()) {\n    if (options.spinner) {\n      options.spinner.text = 'Starting containers...';\n    }\n    const composeDir = composeCheck.stdout.includes('.devcontainer')\n      ? '~/workspace/.devcontainer'\n      : '~/workspace';\n\n    const upResult = await exe.ssh(vmName, `cd ${composeDir} && docker compose up -d 2>&1`);\n    containersStarted = upResult.exitCode === 0;\n\n    if (containersStarted) {\n      if (options.spinner) {\n        options.spinner.text = 'Exposing ports...';\n      }\n      try {\n        frontendUrl = await exe.exposePort(vmName, 4173);\n        apiUrl = await exe.exposePort(vmName, 7000);\n      } catch {\n        // Port exposure failed - not critical\n      }\n    }\n  }\n\n  // Step 8: Save workspace metadata\n  const metadata: RemoteWorkspaceMetadata = {\n    id: normalizedId,\n    issue: issueId.toUpperCase(),\n    provider: 'exe',\n    vmName,\n    infraVm,\n    database: dbName,\n    redisDb: 0,\n    urls: {\n      frontend: frontendUrl || undefined,\n      api: apiUrl || undefined,\n    },\n    created: new Date(),\n    location: 'remote',\n  };\n\n  saveWorkspaceMetadata(metadata);\n\n  return metadata;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA;AAYA;AACA;AANA,OAAO,WAAW;AAGlB,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAK1B;AAEA,IAAM,YAAY,UAAU,IAAI;AAUhC,eAAsB,sBACpB,SACA,UAAwC,CAAC,GACP;AAClC,QAAM,SAAS,WAAW;AAC1B,QAAM,eAAe,OAAO;AAE5B,MAAI,CAAC,cAAc,SAAS;AAC1B,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AAEA,QAAM,eAAe,QAAQ,YAAY,EAAE,QAAQ,eAAe,GAAG;AACrE,QAAM,aAAa,WAAW,YAAY;AAC1C,QAAM,UAAU,aAAa,KAAK,YAAY;AAC9C,QAAM,MAAM,kBAAkB,EAAE,QAAQ,CAAC;AAGzC,QAAM,aAAa,kBAAkB,OAAO;AAC5C,QAAM,gBAAgB,aAAa,kBAAkB,UAAU,IAAI;AACnE,QAAM,cAAc,eAAe,QAAQ,QAAQ,IAAI;AAGvD,MAAI,YAAY,YAAY,YAAY;AACxC,MAAI,CAAC,aAAa,eAAe,aAAa;AAC5C,gBAAY,cAAc,YAAY,YAAY;AAAA,EACpD;AACA,MAAI,CAAC,WAAW;AACd,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM,UAAU,6BAA6B;AAAA,QAC9D,KAAK;AAAA,QACL,UAAU;AAAA,MACZ,CAAC;AACD,YAAM,YAAY,OAAO,KAAK,EAAE,MAAM,sBAAsB;AAC5D,kBAAY,YAAY,UAAU,CAAC,EAAE,YAAY,EAAE,QAAQ,eAAe,GAAG,IAAI;AAAA,IACnF,QAAQ;AACN,kBAAY;AAAA,IACd;AAAA,EACF;AAGA,QAAM,SAAS,GAAG,SAAS,IAAI,YAAY,MAAM,YAAY,EAAE,QAAQ,eAAe,GAAG;AAEzF,MAAI,QAAQ,QAAQ;AAClB,YAAQ,IAAI,MAAM,KAAK,gCAAgC,CAAC;AACxD,YAAQ,IAAI,gBAAgB,MAAM,KAAK,MAAM,CAAC,EAAE;AAChD,YAAQ,IAAI,gBAAgB,MAAM,IAAI,SAAS,CAAC,EAAE;AAClD,YAAQ,IAAI,gBAAgB,MAAM,IAAI,OAAO,CAAC,EAAE;AAChD,YAAQ,IAAI,gBAAgB,MAAM,IAAI,UAAU,CAAC,EAAE;AACnD,UAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AAGA,MAAI,UAAU;AACd,MAAI;AACF,UAAM,EAAE,OAAO,IAAI,MAAM,UAAU,6BAA6B;AAAA,MAC9D,KAAK;AAAA,MACL,UAAU;AAAA,IACZ,CAAC;AACD,cAAU,OAAO,KAAK;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,MAAM,iGAAiG;AAAA,EACnH;AAEA,MAAI,QAAQ,SAAS;AACnB,YAAQ,QAAQ,OAAO;AAAA,EACzB;AAGA,QAAM,IAAI,SAAS,MAAM;AAGzB,MAAI,QAAQ,SAAS;AACnB,YAAQ,QAAQ,OAAO;AAAA,EACzB;AACA,QAAM,IAAI,IAAI,QAAQ,4FAA4F;AAClH,QAAM,cAAc,MAAM,IAAI,IAAI,QAAQ,aAAa,OAAO,cAAc;AAC5E,MAAI,YAAY,aAAa,GAAG;AAC9B,UAAM,IAAI,SAAS,MAAM;AACzB,UAAM,IAAI,MAAM,oBAAoB,YAAY,MAAM,EAAE;AAAA,EAC1D;AAGA,MAAI,QAAQ,SAAS;AACnB,YAAQ,QAAQ,OAAO;AAAA,EACzB;AACA,QAAM,eAAe,MAAM,IAAI,IAAI,QAAQ,qCAAqC,UAAU,EAAE;AAC5F,MAAI,aAAa,aAAa,GAAG;AAC/B,UAAM,IAAI,IAAI,QAAQ,kCAAkC,UAAU,uBAAuB,UAAU,EAAE;AAAA,EACvG;AAGA,QAAM,aAAa;AAAA;AAAA,eAEN,YAAY;AAAA,WAChB,QAAQ,YAAY,CAAC;AAAA;AAAA;AAAA,gBAGhB,OAAO;AAAA;AAAA;AAAA;AAAA,oBAIH,aAAa,QAAQ,MAAM,GAAG,CAAC;AAAA;AAAA,aAEtC,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,0CAKsB,OAAO,aAAa,aAAa,QAAQ,MAAM,GAAG,CAAC;AAAA,yBACpE,OAAO;AAAA;AAG9B,QAAM,IAAI,IAAI,QAAQ;AAAA,EACtB,UAAU;AAAA,IACR;AAGF,QAAM,SAAS,OAAO,aAAa,QAAQ,MAAM,GAAG,CAAC;AACrD,MAAI;AACF,UAAM,IAAI,IAAI,SAAS,iEAAiE,MAAM,uBAAuB;AAAA,EACvH,QAAQ;AAAA,EAER;AAGA,MAAI,QAAQ,SAAS;AACnB,YAAQ,QAAQ,OAAO;AAAA,EACzB;AACA,QAAM,cAAc,MAAM,IAAI,aAAa,MAAM;AACjD,MAAI,aAAa;AACf,UAAM,IAAI,UAAU,QAAQ,aAAa;AAAA,EAC3C;AAGA,MAAI,QAAQ,SAAS;AACnB,YAAQ,QAAQ,OAAO;AAAA,EACzB;AACA,QAAM,IAAI,eAAe,MAAM;AAG/B,MAAI,oBAAoB;AACxB,MAAI,cAAc;AAClB,MAAI,SAAS;AAEb,QAAM,eAAe,MAAM,IAAI,IAAI,QAAQ,sGAAsG;AAEjJ,MAAI,aAAa,OAAO,KAAK,GAAG;AAC9B,QAAI,QAAQ,SAAS;AACnB,cAAQ,QAAQ,OAAO;AAAA,IACzB;AACA,UAAM,aAAa,aAAa,OAAO,SAAS,eAAe,IAC3D,8BACA;AAEJ,UAAM,WAAW,MAAM,IAAI,IAAI,QAAQ,MAAM,UAAU,+BAA+B;AACtF,wBAAoB,SAAS,aAAa;AAE1C,QAAI,mBAAmB;AACrB,UAAI,QAAQ,SAAS;AACnB,gBAAQ,QAAQ,OAAO;AAAA,MACzB;AACA,UAAI;AACF,sBAAc,MAAM,IAAI,WAAW,QAAQ,IAAI;AAC/C,iBAAS,MAAM,IAAI,WAAW,QAAQ,GAAI;AAAA,MAC5C,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAGA,QAAM,WAAoC;AAAA,IACxC,IAAI;AAAA,IACJ,OAAO,QAAQ,YAAY;AAAA,IAC3B,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,UAAU,eAAe;AAAA,MACzB,KAAK,UAAU;AAAA,IACjB;AAAA,IACA,SAAS,oBAAI,KAAK;AAAA,IAClB,UAAU;AAAA,EACZ;AAEA,wBAAsB,QAAQ;AAE9B,SAAO;AACT;","names":[]}

package/dist/{specialist-context-QVRSHPYN.js → specialist-context-N32QBNNQ.js}

@@ -1,7 +1,7 @@
 import {
   getRecentRunLogs,
   init_specialist_logs
-} from "./chunk-42O6XJWZ.js";
+} from "./chunk-2NIAOCIC.js";
 import {
   getModelId,
   init_work_type_router
@@ -253,4 +253,4 @@ export {
   regenerateContextDigest,
   scheduleDigestGeneration
 };
-//# sourceMappingURL=specialist-context-QVRSHPYN.js.map
+//# sourceMappingURL=specialist-context-N32QBNNQ.js.map

package/dist/{specialist-logs-7TQMHCUN.js → specialist-logs-GF3YV4KL.js}

@@ -16,7 +16,7 @@ import {
   isRunLogActive,
   listRunLogs,
   parseLogMetadata
-} from "./chunk-42O6XJWZ.js";
+} from "./chunk-2NIAOCIC.js";
 import "./chunk-VIWUCJ4V.js";
 import "./chunk-BBCUK6N2.js";
 import "./chunk-JY7R7V4G.js";
@@ -41,4 +41,4 @@ export {
   listRunLogs,
   parseLogMetadata
 };
-//# sourceMappingURL=specialist-logs-7TQMHCUN.js.map
+//# sourceMappingURL=specialist-logs-GF3YV4KL.js.map

package/dist/{specialists-UUXB5KFV.js → specialists-JBIW6MP4.js}

@@ -55,7 +55,7 @@ import {
   wakeSpecialist,
   wakeSpecialistOrQueue,
   wakeSpecialistWithTask
-} from "./chunk-42O6XJWZ.js";
+} from "./chunk-2NIAOCIC.js";
 import "./chunk-VIWUCJ4V.js";
 import "./chunk-BBCUK6N2.js";
 import "./chunk-JY7R7V4G.js";
@@ -119,4 +119,4 @@ export {
   wakeSpecialistOrQueue,
   wakeSpecialistWithTask
 };
-//# sourceMappingURL=specialists-UUXB5KFV.js.map
+//# sourceMappingURL=specialists-JBIW6MP4.js.map

package/dist/{traefik-7OLLXUD7.js → traefik-CUJM6K5Z.js}

@@ -1,12 +1,12 @@
 import {
   cleanupTemplateFiles,
   generatePanopticonTraefikConfig
-} from "./chunk-SIAUVHVO.js";
-import "./chunk-VTMXR7JF.js";
+} from "./chunk-3XAB4IXF.js";
+import "./chunk-VU4FLXV5.js";
 import "./chunk-6HXKTOD7.js";
 import "./chunk-ZHC57RCV.js";
 export {
   cleanupTemplateFiles,
   generatePanopticonTraefikConfig
 };
-//# sourceMappingURL=traefik-7OLLXUD7.js.map
+//# sourceMappingURL=traefik-CUJM6K5Z.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "panopticon-cli",
-  "version": "0.4.30",
+  "version": "0.4.32",
   "description": "Multi-agent orchestration for AI coding assistants (Claude Code, Codex, Cursor, Gemini CLI)",
   "keywords": [
     "ai-agents",
@@ -48,8 +48,9 @@
   },
   "scripts": {
     "dev": "tsx watch src/cli/index.ts",
-    "build": "npm run build:cli && npm run build:dashboard",
+    "build": "npm run build:cli && npm run build:scripts && npm run build:dashboard",
     "build:cli": "tsup",
+    "build:scripts": "esbuild scripts/record-cost-event.ts --bundle --platform=node --format=esm --outfile=scripts/record-cost-event.js",
     "build:dashboard": "npm run build:dashboard:frontend && npm run build:dashboard:server",
     "build:dashboard:frontend": "cd src/dashboard/frontend && npm run build",
     "build:dashboard:server": "cd src/dashboard/server && npm run build",

package/scripts/record-cost-event.js

@@ -1,94 +1,258 @@
 #!/usr/bin/env node
-/**
- * Record a cost event from Claude Code tool usage
- * Called by heartbeat-hook with JSON input on stdin
- */
 
-import { readFileSync } from 'fs';
-import { calculateCost, getPricing } from '../src/lib/cost.js';
-import { appendCostEvent } from '../src/lib/costs/events.js';
+// scripts/record-cost-event.ts
+import { readFileSync as readFileSync2, existsSync as existsSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, openSync, readSync, fstatSync, closeSync } from "fs";
+import { join as join4 } from "path";
+import { homedir as homedir3 } from "os";
 
-// Read tool info from stdin
-let toolInfo;
-try {
-  const input = readFileSync(0, 'utf-8');
-  toolInfo = JSON.parse(input);
-} catch (err) {
-  // Silent failure - don't break Claude Code execution
-  process.exit(0);
-}
+// src/lib/cost.ts
+import { join as join2 } from "path";
 
-// Extract usage data from tool info
-const usage = toolInfo?.usage || toolInfo?.message?.usage;
-if (!usage) {
-  // No usage data - not a Claude API call
-  process.exit(0);
+// src/lib/paths.ts
+import { homedir } from "os";
+import { join } from "path";
+import { fileURLToPath } from "url";
+import { dirname } from "path";
+var PANOPTICON_HOME = process.env.PANOPTICON_HOME || join(homedir(), ".panopticon");
+var CONFIG_DIR = PANOPTICON_HOME;
+var SKILLS_DIR = join(PANOPTICON_HOME, "skills");
+var COMMANDS_DIR = join(PANOPTICON_HOME, "commands");
+var AGENTS_DIR = join(PANOPTICON_HOME, "agents");
+var BIN_DIR = join(PANOPTICON_HOME, "bin");
+var BACKUPS_DIR = join(PANOPTICON_HOME, "backups");
+var COSTS_DIR = join(PANOPTICON_HOME, "costs");
+var HEARTBEATS_DIR = join(PANOPTICON_HOME, "heartbeats");
+var TRAEFIK_DIR = join(PANOPTICON_HOME, "traefik");
+var TRAEFIK_DYNAMIC_DIR = join(TRAEFIK_DIR, "dynamic");
+var TRAEFIK_CERTS_DIR = join(TRAEFIK_DIR, "certs");
+var CERTS_DIR = join(PANOPTICON_HOME, "certs");
+var CONFIG_FILE = join(CONFIG_DIR, "config.toml");
+var SETTINGS_FILE = join(CONFIG_DIR, "settings.json");
+var CLAUDE_DIR = join(homedir(), ".claude");
+var CODEX_DIR = join(homedir(), ".codex");
+var CURSOR_DIR = join(homedir(), ".cursor");
+var GEMINI_DIR = join(homedir(), ".gemini");
+var OPENCODE_DIR = join(homedir(), ".opencode");
+var SYNC_TARGETS = {
+  claude: {
+    skills: join(CLAUDE_DIR, "skills"),
+    commands: join(CLAUDE_DIR, "commands"),
+    agents: join(CLAUDE_DIR, "agents")
+  },
+  codex: {
+    skills: join(CODEX_DIR, "skills"),
+    commands: join(CODEX_DIR, "commands"),
+    agents: join(CODEX_DIR, "agents")
+  },
+  cursor: {
+    skills: join(CURSOR_DIR, "skills"),
+    commands: join(CURSOR_DIR, "commands"),
+    agents: join(CURSOR_DIR, "agents")
+  },
+  gemini: {
+    skills: join(GEMINI_DIR, "skills"),
+    commands: join(GEMINI_DIR, "commands"),
+    agents: join(GEMINI_DIR, "agents")
+  },
+  opencode: {
+    skills: join(OPENCODE_DIR, "skills"),
+    commands: join(OPENCODE_DIR, "commands"),
+    agents: join(OPENCODE_DIR, "agents")
+  }
+};
+var TEMPLATES_DIR = join(PANOPTICON_HOME, "templates");
+var CLAUDE_MD_TEMPLATES = join(TEMPLATES_DIR, "claude-md", "sections");
+var currentFile = fileURLToPath(import.meta.url);
+var currentDir = dirname(currentFile);
+var packageRoot;
+if (currentDir.includes("/src/")) {
+  packageRoot = dirname(dirname(currentDir));
+} else {
+  packageRoot = currentDir.endsWith("/lib") ? dirname(dirname(currentDir)) : dirname(currentDir);
 }
+var SOURCE_TEMPLATES_DIR = join(packageRoot, "templates");
+var SOURCE_TRAEFIK_TEMPLATES = join(SOURCE_TEMPLATES_DIR, "traefik");
+var SOURCE_SCRIPTS_DIR = join(packageRoot, "scripts");
+var SOURCE_SKILLS_DIR = join(packageRoot, "skills");
+var SOURCE_DEV_SKILLS_DIR = join(packageRoot, "dev-skills");
 
-// Extract token counts
-const inputTokens = usage.input_tokens || 0;
-const outputTokens = usage.output_tokens || 0;
-const cacheReadTokens = usage.cache_read_input_tokens || 0;
-const cacheWriteTokens = usage.cache_creation_input_tokens || 0;
-
-// Must have at least some tokens to record
-if (inputTokens === 0 && outputTokens === 0 && cacheReadTokens === 0 && cacheWriteTokens === 0) {
-  process.exit(0);
+// src/lib/cost.ts
+var DEFAULT_PRICING = [
+  // Anthropic - 4.6 series
+  { provider: "anthropic", model: "claude-opus-4.6", inputPer1k: 5e-3, outputPer1k: 0.025, cacheReadPer1k: 5e-4, cacheWrite5mPer1k: 625e-5, cacheWrite1hPer1k: 0.01, currency: "USD" },
+  { provider: "anthropic", model: "claude-sonnet-4.5", inputPer1k: 3e-3, outputPer1k: 0.015, cacheReadPer1k: 3e-4, cacheWrite5mPer1k: 375e-5, cacheWrite1hPer1k: 6e-3, currency: "USD" },
+  { provider: "anthropic", model: "claude-haiku-4.5", inputPer1k: 1e-3, outputPer1k: 5e-3, cacheReadPer1k: 1e-4, cacheWrite5mPer1k: 125e-5, cacheWrite1hPer1k: 2e-3, currency: "USD" },
+  // Anthropic - 4.x series
+  { provider: "anthropic", model: "claude-opus-4-1", inputPer1k: 0.015, outputPer1k: 0.075, cacheReadPer1k: 15e-4, cacheWrite5mPer1k: 0.01875, cacheWrite1hPer1k: 0.03, currency: "USD" },
+  { provider: "anthropic", model: "claude-opus-4", inputPer1k: 0.015, outputPer1k: 0.075, cacheReadPer1k: 15e-4, cacheWrite5mPer1k: 0.01875, cacheWrite1hPer1k: 0.03, currency: "USD" },
+  { provider: "anthropic", model: "claude-sonnet-4", inputPer1k: 3e-3, outputPer1k: 0.015, cacheReadPer1k: 3e-4, cacheWrite5mPer1k: 375e-5, cacheWrite1hPer1k: 6e-3, currency: "USD" },
+  // Anthropic - Legacy
+  { provider: "anthropic", model: "claude-haiku-3", inputPer1k: 25e-5, outputPer1k: 125e-5, cacheReadPer1k: 3e-5, cacheWrite5mPer1k: 3e-4, cacheWrite1hPer1k: 5e-4, currency: "USD" },
+  // OpenAI
+  { provider: "openai", model: "gpt-4-turbo", inputPer1k: 0.01, outputPer1k: 0.03, currency: "USD" },
+  { provider: "openai", model: "gpt-4o", inputPer1k: 5e-3, outputPer1k: 0.015, currency: "USD" },
+  { provider: "openai", model: "gpt-4o-mini", inputPer1k: 15e-5, outputPer1k: 6e-4, currency: "USD" },
+  // Google
+  { provider: "google", model: "gemini-1.5-pro", inputPer1k: 125e-5, outputPer1k: 5e-3, currency: "USD" },
+  { provider: "google", model: "gemini-1.5-flash", inputPer1k: 75e-6, outputPer1k: 3e-4, currency: "USD" },
+  // Moonshot AI (Kimi)
+  { provider: "custom", model: "kimi-for-coding", inputPer1k: 6e-4, outputPer1k: 2e-3, cacheReadPer1k: 6e-5, cacheWrite5mPer1k: 75e-5, currency: "USD" },
+  { provider: "custom", model: "kimi-k2.5", inputPer1k: 6e-4, outputPer1k: 2e-3, cacheReadPer1k: 6e-5, cacheWrite5mPer1k: 75e-5, currency: "USD" }
+];
+function calculateCost(usage, pricing) {
+  let cost = 0;
+  let inputMultiplier = 1;
+  let outputMultiplier = 1;
+  const totalInputTokens = usage.inputTokens + (usage.cacheReadTokens || 0) + (usage.cacheWriteTokens || 0);
+  if ((pricing.model === "claude-sonnet-4" || pricing.model === "claude-sonnet-4.5") && totalInputTokens > 2e5) {
+    inputMultiplier = 2;
+    outputMultiplier = 1.5;
+  }
+  cost += usage.inputTokens / 1e3 * pricing.inputPer1k * inputMultiplier;
+  cost += usage.outputTokens / 1e3 * pricing.outputPer1k * outputMultiplier;
+  if (usage.cacheReadTokens && pricing.cacheReadPer1k) {
+    cost += usage.cacheReadTokens / 1e3 * pricing.cacheReadPer1k;
+  }
+  if (usage.cacheWriteTokens) {
+    const ttl = usage.cacheTTL || "5m";
+    const cacheWritePrice = ttl === "1h" ? pricing.cacheWrite1hPer1k : pricing.cacheWrite5mPer1k;
+    if (cacheWritePrice) {
+      cost += usage.cacheWriteTokens / 1e3 * cacheWritePrice;
+    }
+  }
+  return Math.round(cost * 1e6) / 1e6;
 }
+function getPricing(provider, model) {
+  let pricing = DEFAULT_PRICING.find(
+    (p) => p.provider === provider && p.model === model
+  );
+  if (!pricing) {
+    pricing = DEFAULT_PRICING.find(
+      (p) => p.provider === provider && model.startsWith(p.model)
+    );
+  }
+  return pricing || null;
+}
+var BUDGETS_FILE = join2(COSTS_DIR, "budgets.json");
 
-// Extract model name
-const model = toolInfo?.model || toolInfo?.message?.model || 'claude-sonnet-4';
-
-// Determine provider from model name
-let provider = 'anthropic';
-if (model.includes('gpt')) {
-  provider = 'openai';
-} else if (model.includes('gemini')) {
-  provider = 'google';
+// src/lib/costs/events.ts
+import { existsSync, mkdirSync, readFileSync, appendFileSync, writeFileSync, renameSync } from "fs";
+import { join as join3 } from "path";
+import { homedir as homedir2 } from "os";
+function getCostsDir() {
+  return join3(process.env.HOME || homedir2(), ".panopticon", "costs");
+}
+function getEventsFile() {
+  return join3(getCostsDir(), "events.jsonl");
+}
+function ensureEventsFile() {
+  const costsDir = getCostsDir();
+  const eventsFile = getEventsFile();
+  mkdirSync(costsDir, { recursive: true });
+  if (!existsSync(eventsFile)) {
+    writeFileSync(eventsFile, "", "utf-8");
+  }
+}
+function appendCostEvent(event2) {
+  ensureEventsFile();
+  if (!event2.ts || !event2.agentId || !event2.issueId || !event2.model) {
+    throw new Error("Missing required event fields: ts, agentId, issueId, model");
+  }
+  const line = JSON.stringify(event2) + "\n";
+  appendFileSync(getEventsFile(), line, "utf-8");
 }
 
-// Get pricing and calculate cost
-const pricing = getPricing(provider, model);
-if (!pricing) {
-  console.warn(`No pricing found for ${provider}/${model}`);
+// scripts/record-cost-event.ts
+var event;
+try {
+  const input = readFileSync2(0, "utf-8");
+  event = JSON.parse(input);
+} catch {
   process.exit(0);
 }
-
-const cost = calculateCost({
-  inputTokens,
-  outputTokens,
-  cacheReadTokens,
-  cacheWriteTokens,
-  cacheTTL: '5m',
-}, pricing);
-
-// Get agent and issue context from environment
-// PANOPTICON_AGENT_ID should always be set by pan work or heartbeat-hook
-// If not set, use a fallback that makes it clear costs are unattributed
-const agentId = process.env.PANOPTICON_AGENT_ID || 'unattributed';
-
-const issueId = process.env.PANOPTICON_ISSUE_ID || 'UNKNOWN';
-const sessionType = process.env.PANOPTICON_SESSION_TYPE || 'implementation';
-
-// Record cost event
+var transcriptPath = event?.transcript_path;
+if (!transcriptPath || !existsSync2(transcriptPath)) {
+  process.exit(0);
+}
+var sessionId = event?.session_id || "unknown";
+var stateDir = join4(process.env.HOME || homedir3(), ".panopticon", "costs", "state");
+mkdirSync2(stateDir, { recursive: true });
+var stateFile = join4(stateDir, `${sessionId}.offset`);
+var lastOffset = 0;
+if (existsSync2(stateFile)) {
+  try {
+    lastOffset = parseInt(readFileSync2(stateFile, "utf-8").trim(), 10) || 0;
+  } catch {
+  }
+}
+var fd;
 try {
-  appendCostEvent({
-    ts: new Date().toISOString(),
-    type: 'cost',
-    agentId,
-    issueId,
-    sessionType,
-    provider,
-    model,
-    input: inputTokens,
-    output: outputTokens,
-    cacheRead: cacheReadTokens,
-    cacheWrite: cacheWriteTokens,
-    cost,
-  });
-} catch (err) {
-  // Silent failure - don't break Claude Code execution
-  console.error('Failed to record cost event:', err);
+  fd = openSync(transcriptPath, "r");
+} catch {
+  process.exit(0);
 }
-
+var stat = fstatSync(fd);
+if (stat.size <= lastOffset) {
+  closeSync(fd);
+  writeFileSync2(stateFile, String(stat.size), "utf-8");
+  process.exit(0);
+}
+var bytesToRead = stat.size - lastOffset;
+var buffer = Buffer.alloc(bytesToRead);
+readSync(fd, buffer, 0, bytesToRead, lastOffset);
+closeSync(fd);
+var newContent = buffer.toString("utf-8");
+var lines = newContent.split("\n");
+var agentId = process.env.PANOPTICON_AGENT_ID || "unattributed";
+var issueId = process.env.PANOPTICON_ISSUE_ID || "UNKNOWN";
+var sessionType = process.env.PANOPTICON_SESSION_TYPE || "implementation";
+for (const line of lines) {
+  if (!line.trim()) continue;
+  try {
+    const entry = JSON.parse(line);
+    if (entry.type !== "assistant" || !entry.message?.usage) {
+      continue;
+    }
+    const usage = entry.message.usage;
+    const model = entry.message.model || "claude-sonnet-4";
+    const inputTokens = usage.input_tokens || 0;
+    const outputTokens = usage.output_tokens || 0;
+    const cacheReadTokens = usage.cache_read_input_tokens || 0;
+    const cacheWriteTokens = usage.cache_creation_input_tokens || 0;
+    if (inputTokens === 0 && outputTokens === 0 && cacheReadTokens === 0 && cacheWriteTokens === 0) {
+      continue;
+    }
+    let provider = "anthropic";
+    if (model.includes("gpt")) {
+      provider = "openai";
+    } else if (model.includes("gemini")) {
+      provider = "google";
+    }
+    const pricing = getPricing(provider, model);
+    if (!pricing) continue;
+    const cost = calculateCost({
+      inputTokens,
+      outputTokens,
+      cacheReadTokens,
+      cacheWriteTokens,
+      cacheTTL: "5m"
+    }, pricing);
+    appendCostEvent({
+      ts: (/* @__PURE__ */ new Date()).toISOString(),
+      type: "cost",
+      agentId,
+      issueId,
+      sessionType,
+      provider,
+      model,
+      input: inputTokens,
+      output: outputTokens,
+      cacheRead: cacheReadTokens,
+      cacheWrite: cacheWriteTokens,
+      cost
+    });
+  } catch {
+  }
+}
+writeFileSync2(stateFile, String(stat.size), "utf-8");
 process.exit(0);