token-usage-insights 0.9.0

package/npm/cli.cjs

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+'use strict';
+
+const { spawnSync } = require('node:child_process');
+const { join } = require('node:path');
+const { installBinary, isReleaseRoot } = require('./install.cjs');
+
+const BINARY_NAME = 'token-usage-insights';
+const executableName = process.platform === 'win32' ? `${BINARY_NAME}.exe` : BINARY_NAME;
+const installDirectory = join(__dirname, `${BINARY_NAME}-bin`);
+const executable = join(__dirname, `${BINARY_NAME}-bin`, executableName);
+
+async function main() {
+  if (!isReleaseRoot(installDirectory, executableName)) await installBinary();
+
+  if (!isReleaseRoot(installDirectory, executableName)) {
+    throw new Error(
+      `${BINARY_NAME} 原生執行檔尚未建置；請先執行 cargo build --release。`,
+    );
+  }
+
+  const result = spawnSync(executable, process.argv.slice(2), { stdio: 'inherit' });
+  if (result.error) throw result.error;
+  process.exitCode = result.status ?? 1;
+}
+
+main().catch((error) => {
+  console.error(`${BINARY_NAME} 啟動失敗：${error.message}`);
+  process.exitCode = 1;
+});

package/npm/install.cjs

@@ -0,0 +1,232 @@
+#!/usr/bin/env node
+'use strict';
+
+const { createHash } = require('node:crypto');
+const { spawnSync } = require('node:child_process');
+const {
+  chmodSync,
+  copyFileSync,
+  cpSync,
+  createWriteStream,
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readFileSync,
+  readdirSync,
+  rmSync,
+} = require('node:fs');
+const { get } = require('node:https');
+const { tmpdir } = require('node:os');
+const { basename, join } = require('node:path');
+const { pipeline } = require('node:stream/promises');
+const { URL } = require('node:url');
+
+const PACKAGE_ROOT = join(__dirname, '..');
+const BINARY_NAME = 'token-usage-insights';
+const GITHUB_OWNER = 'doggy8088';
+const GITHUB_REPO = 'TokenUsageInsights';
+const INSTALL_DIR = join(__dirname, `${BINARY_NAME}-bin`);
+const EXECUTABLE_NAME = process.platform === 'win32' ? `${BINARY_NAME}.exe` : BINARY_NAME;
+const TARGETS = Object.freeze({
+  'darwin-arm64': 'aarch64-apple-darwin',
+  'darwin-x64': 'x86_64-apple-darwin',
+  'linux-x64': 'x86_64-unknown-linux-gnu',
+  'win32-x64': 'x86_64-pc-windows-msvc',
+});
+
+function platformKey(platform = process.platform, arch = process.arch) {
+  return `${platform}-${arch}`;
+}
+
+function cargoTarget(platform = process.platform, arch = process.arch) {
+  const target = TARGETS[platformKey(platform, arch)];
+  if (!target) {
+    throw new Error(
+      `不支援的平台：${platform}/${arch}。` +
+        '目前支援 Windows x64、Linux x64、Intel Mac 與 Apple Silicon Mac。',
+    );
+  }
+  return target;
+}
+
+function packageVersion() {
+  return require(join(PACKAGE_ROOT, 'package.json')).version;
+}
+
+function artifactName(target, version = packageVersion()) {
+  const extension = target.includes('windows') ? 'zip' : 'tar.gz';
+  return `${BINARY_NAME}-v${version}-${target}.${extension}`;
+}
+
+function releaseBaseUrl(version = packageVersion()) {
+  return `https://github.com/${GITHUB_OWNER}/${GITHUB_REPO}/releases/download/v${version}`;
+}
+
+function sha256(filePath) {
+  return createHash('sha256').update(readFileSync(filePath)).digest('hex');
+}
+
+function checksumForArtifact(checksumText, artifact) {
+  for (const line of checksumText.split(/\r?\n/)) {
+    const match = line.match(/^([a-fA-F0-9]{64})\s+\*?(.+?)\s*$/);
+    if (match && basename(match[2]) === artifact) return match[1].toLowerCase();
+  }
+  throw new Error(`SHA256SUMS 找不到 ${artifact}`);
+}
+
+function verifyChecksum(filePath, checksumText, artifact = basename(filePath)) {
+  const expected = checksumForArtifact(checksumText, artifact);
+  const actual = sha256(filePath);
+  if (actual !== expected) {
+    throw new Error(`${artifact} 校驗失敗：預期 ${expected}，實際 ${actual}`);
+  }
+}
+
+function download(url, destination, redirectsRemaining = 5) {
+  return new Promise((resolve, reject) => {
+    const request = get(url, { headers: { 'User-Agent': `${BINARY_NAME}-npm-installer` } }, (response) => {
+      const { statusCode, headers } = response;
+      if (statusCode >= 300 && statusCode < 400 && headers.location && redirectsRemaining > 0) {
+        response.resume();
+        const nextUrl = new URL(headers.location, url).toString();
+        download(nextUrl, destination, redirectsRemaining - 1).then(resolve, reject);
+        return;
+      }
+      if (statusCode !== 200) {
+        response.resume();
+        reject(new Error(`下載失敗 HTTP ${statusCode}：${url}`));
+        return;
+      }
+      pipeline(response, createWriteStream(destination, { mode: 0o600 })).then(resolve, reject);
+    });
+    request.setTimeout(30_000, () => request.destroy(new Error(`下載逾時：${url}`)));
+    request.on('error', reject);
+  });
+}
+
+function run(command, args, options = {}) {
+  const result = spawnSync(command, args, { stdio: 'inherit', ...options });
+  if (result.error) throw result.error;
+  if (result.status !== 0) throw new Error(`命令執行失敗：${command}`);
+}
+
+function extract(archive, destination) {
+  mkdirSync(destination, { recursive: true });
+  if (archive.endsWith('.zip') && process.platform === 'win32') {
+    run(
+      'powershell.exe',
+      [
+        '-NoProfile',
+        '-NonInteractive',
+        '-Command',
+        'Expand-Archive -LiteralPath $env:TUI_ARCHIVE -DestinationPath $env:TUI_DESTINATION -Force',
+      ],
+      { env: { ...process.env, TUI_ARCHIVE: archive, TUI_DESTINATION: destination } },
+    );
+    return;
+  }
+  run('tar', [archive.endsWith('.tar.gz') ? '-xzf' : '-xf', archive, '-C', destination]);
+}
+
+function isReleaseRoot(directory, executableName = EXECUTABLE_NAME) {
+  return (
+    existsSync(join(directory, executableName)) &&
+    existsSync(join(directory, 'static')) &&
+    existsSync(join(directory, 'pricing.csv'))
+  );
+}
+
+function findReleaseRoot(directory, executableName = EXECUTABLE_NAME) {
+  if (isReleaseRoot(directory, executableName)) return directory;
+  for (const entry of readdirSync(directory, { withFileTypes: true })) {
+    if (!entry.isDirectory()) continue;
+    const candidate = join(directory, entry.name);
+    if (isReleaseRoot(candidate, executableName)) return candidate;
+  }
+  throw new Error('GitHub Release 壓縮包缺少執行檔、static 或 pricing.csv');
+}
+
+function copyReleaseContents(source, destination, executableName = EXECUTABLE_NAME) {
+  rmSync(destination, { recursive: true, force: true });
+  mkdirSync(destination, { recursive: true });
+  for (const entry of readdirSync(source, { withFileTypes: true })) {
+    cpSync(join(source, entry.name), join(destination, entry.name), {
+      recursive: entry.isDirectory(),
+      force: true,
+    });
+  }
+  chmodSync(join(destination, executableName), 0o755);
+}
+
+function installFromLocalBuild() {
+  const localBinary = join(PACKAGE_ROOT, 'target', 'release', EXECUTABLE_NAME);
+  if (!existsSync(localBinary)) return false;
+
+  rmSync(INSTALL_DIR, { recursive: true, force: true });
+  mkdirSync(INSTALL_DIR, { recursive: true });
+  copyFileSync(localBinary, join(INSTALL_DIR, EXECUTABLE_NAME));
+  chmodSync(join(INSTALL_DIR, EXECUTABLE_NAME), 0o755);
+  for (const item of ['static', 'shell', 'scripts', 'pricing.csv', 'README.md', 'LICENSE']) {
+    const source = join(PACKAGE_ROOT, item);
+    if (existsSync(source)) {
+      cpSync(source, join(INSTALL_DIR, item), { recursive: true, force: true });
+    }
+  }
+  console.log(`已安裝本機建置的 ${BINARY_NAME}`);
+  return true;
+}
+
+async function installFromRelease() {
+  const version = packageVersion();
+  const target = cargoTarget();
+  const artifact = artifactName(target, version);
+  const baseUrl = releaseBaseUrl(version);
+  const temporaryDirectory = mkdtempSync(join(tmpdir(), `${BINARY_NAME}-`));
+  const archive = join(temporaryDirectory, artifact);
+  const checksums = join(temporaryDirectory, 'SHA256SUMS');
+  const extracted = join(temporaryDirectory, 'extracted');
+
+  try {
+    console.log(`正在下載 ${BINARY_NAME} v${version}：${target}`);
+    await download(`${baseUrl}/${artifact}`, archive);
+    await download(`${baseUrl}/SHA256SUMS`, checksums);
+    verifyChecksum(archive, readFileSync(checksums, 'utf8'), artifact);
+    extract(archive, extracted);
+    copyReleaseContents(findReleaseRoot(extracted), INSTALL_DIR);
+    console.log(`已安裝 ${BINARY_NAME} v${version}`);
+  } finally {
+    rmSync(temporaryDirectory, { recursive: true, force: true });
+  }
+}
+
+async function installBinary() {
+  if (installFromLocalBuild()) return;
+  if (existsSync(join(PACKAGE_ROOT, 'Cargo.toml'))) {
+    console.log('偵測到原始碼工作目錄；略過 npm 原生執行檔下載。');
+    return;
+  }
+  await installFromRelease();
+}
+
+if (require.main === module) {
+  installBinary().catch((error) => {
+    rmSync(INSTALL_DIR, { recursive: true, force: true });
+    console.error(`安裝 ${BINARY_NAME} 失敗：${error.message}`);
+    process.exit(1);
+  });
+}
+
+module.exports = {
+  TARGETS,
+  artifactName,
+  cargoTarget,
+  checksumForArtifact,
+  copyReleaseContents,
+  findReleaseRoot,
+  installBinary,
+  isReleaseRoot,
+  platformKey,
+  releaseBaseUrl,
+  sha256,
+  verifyChecksum,
+};

package/npm/prepublish-check.cjs

@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+'use strict';
+
+const { spawnSync } = require('node:child_process');
+const { readFileSync } = require('node:fs');
+const { request } = require('node:https');
+const { join } = require('node:path');
+const { URL } = require('node:url');
+const { artifactName, releaseBaseUrl, TARGETS } = require('./install.cjs');
+
+const PACKAGE_ROOT = join(__dirname, '..');
+const MAX_REDIRECTS = 5;
+
+function packageVersion() {
+  return require('../package.json').version;
+}
+
+function cargoVersion() {
+  const cargo = readFileSync(join(PACKAGE_ROOT, 'Cargo.toml'), 'utf8');
+  const packageSection = cargo.match(/^\[package\]\s*([\s\S]*?)(?=^\[|\Z)/m)?.[1] ?? '';
+  const version = packageSection.match(/^version\s*=\s*"([^"]+)"/m)?.[1];
+  if (!version) throw new Error('無法讀取 Cargo.toml 的 package.version');
+  return version;
+}
+
+function expectedReleaseUrls(version = packageVersion()) {
+  const base = releaseBaseUrl(version);
+  return [
+    ...Object.values(TARGETS).map((target) => `${base}/${artifactName(target, version)}`),
+    `${base}/SHA256SUMS`,
+  ];
+}
+
+function checkUrl(url, redirectsRemaining = MAX_REDIRECTS) {
+  return new Promise((resolve) => {
+    const req = request(
+      url,
+      { method: 'HEAD', headers: { 'User-Agent': 'token-usage-insights-publish-check' } },
+      (response) => {
+        const { statusCode, headers } = response;
+        response.resume();
+        if (statusCode >= 300 && statusCode < 400 && headers.location && redirectsRemaining > 0) {
+          const nextUrl = new URL(headers.location, url).toString();
+          checkUrl(nextUrl, redirectsRemaining - 1).then((result) => resolve({ ...result, url }));
+          return;
+        }
+        resolve({ url, ok: statusCode >= 200 && statusCode < 300, statusCode });
+      },
+    );
+    req.setTimeout(30_000, () => req.destroy(new Error(`request timed out: ${url}`)));
+    req.on('error', (error) => resolve({ url, ok: false, errorMessage: error.message }));
+    req.end();
+  });
+}
+
+function retryCountFromEnv() {
+  return Number.parseInt(process.env.TOKEN_USAGE_INSIGHTS_RELEASE_ASSET_RETRIES ?? '1', 10);
+}
+
+function retryDelayMsFromEnv() {
+  return Number.parseInt(
+    process.env.TOKEN_USAGE_INSIGHTS_RELEASE_ASSET_RETRY_DELAY_MS ?? '1000',
+    10,
+  );
+}
+
+function sleep(milliseconds) {
+  return new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
+
+function assertVersionAlignment(version = packageVersion()) {
+  const rustVersion = cargoVersion();
+  if (version !== rustVersion) {
+    throw new Error(`版本不一致：package.json=${version}，Cargo.toml=${rustVersion}`);
+  }
+}
+
+function assertExactReleaseTag(version = packageVersion()) {
+  const result = spawnSync('git', ['describe', '--tags', '--exact-match', 'HEAD'], {
+    cwd: PACKAGE_ROOT,
+    encoding: 'utf8',
+  });
+  const actual = result.status === 0 ? result.stdout.trim() : '';
+  if (actual !== `v${version}`) {
+    throw new Error(`npm 僅能從對應 Release commit 發布；預期目前 tag 為 v${version}`);
+  }
+}
+
+async function verifyReleaseAssets({
+  version = packageVersion(),
+  check = checkUrl,
+  retries = retryCountFromEnv(),
+  retryDelayMs = retryDelayMsFromEnv(),
+} = {}) {
+  const urls = expectedReleaseUrls(version);
+  let failures = [];
+  for (let attempt = 1; attempt <= retries; attempt += 1) {
+    const results = await Promise.all(urls.map((url) => check(url)));
+    failures = results.filter((result) => !result.ok);
+    if (failures.length === 0) return urls;
+    if (attempt < retries) await sleep(retryDelayMs);
+  }
+  const details = failures.map((failure) => {
+    const reason = failure.statusCode ? `HTTP ${failure.statusCode}` : failure.errorMessage;
+    return `- ${failure.url}：${reason}`;
+  });
+  throw new Error(
+    [`v${version} 的 GitHub Release 資產尚未備妥：`, ...details].join('\n'),
+  );
+}
+
+async function main() {
+  const version = packageVersion();
+  assertVersionAlignment(version);
+  assertExactReleaseTag(version);
+  const urls = await verifyReleaseAssets({ version });
+  console.log(`已驗證 v${version} 的 ${urls.length} 個 GitHub Release 下載項目。`);
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error.message);
+    process.exit(1);
+  });
+}
+
+module.exports = {
+  assertVersionAlignment,
+  cargoVersion,
+  checkUrl,
+  expectedReleaseUrls,
+  verifyReleaseAssets,
+};

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "token-usage-insights",
+  "version": "0.9.0",
+  "description": "Local-first AI coding agent token usage dashboard and CLI",
+  "bin": {
+    "token-usage-insights": "npm/cli.cjs"
+  },
+  "scripts": {
+    "test": "node --test tests/npm-package.test.cjs",
+    "check:package": "npm test && npm pack --dry-run --ignore-scripts && node npm/prepublish-check.cjs",
+    "prepublishOnly": "npm run check:package"
+  },
+  "files": [
+    "npm/cli.cjs",
+    "npm/install.cjs",
+    "npm/prepublish-check.cjs",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18.18"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/doggy8088/TokenUsageInsights.git"
+  },
+  "homepage": "https://token.gh.miniasp.com/",
+  "bugs": {
+    "url": "https://github.com/doggy8088/TokenUsageInsights/issues"
+  },
+  "keywords": [
+    "ai",
+    "coding-agent",
+    "token-usage",
+    "codex",
+    "claude-code",
+    "copilot",
+    "rust",
+    "cli"
+  ],
+  "author": "Will and contributors",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}