tokenoscopy 0.3.2 → 0.4.0

package/README.md

@@ -4,12 +4,14 @@
 
 ```bash
 npm install -g tokenoscopy
-tokenoscopy init --key tok_…
+tokenoscopy init
 ```
 
-Sign in at [tokenoscopy.com](https://tokenoscopy.com) and the **Setup** screen
-hands you that command with your key already written into it, then waits for
-your first session and shows it to you as it lands.
+No key to paste: `init` opens your browser to pair the machine with your
+workspace, you confirm the code it shows, and it finishes in the terminal.
+The **Setup** screen at [tokenoscopy.com](https://tokenoscopy.com) then waits
+for your first session and shows it to you as it lands. Headless or CI? Pass
+a key from Settings → Ingest keys with `--key tok_…` (or `TOKENOSCOPY_KEY`).
 
 Install globally rather than relying on `npx`: the budget guard runs before
 every Bash and MCP tool call, and `npx` re-resolves the package each time.

package/dist/cli.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { detectAuth, GUARD_TIMEOUT_MS, parseTranscript, detectAuthMode, withRelPath, redactValue, ALLOW_CACHE_MS, truncatePayload, naturalDedupKey } from './chunk-AZYPMFOF.js';
+import { detectAuth, GUARD_TIMEOUT_MS, parseTranscript, detectAuthMode, withRelPath, redactValue, ALLOW_CACHE_MS, truncatePayload, naturalDedupKey } from './chunk-KU3AJVVR.js';
 import { existsSync, readFileSync, readdirSync, statSync, watch, copyFileSync, writeFileSync, mkdirSync } from 'fs';
 import { homedir, userInfo, hostname, tmpdir } from 'os';
 import { join } from 'path';
-import { execFileSync } from 'child_process';
+import { execFileSync, spawn } from 'child_process';
 import { createInterface } from 'readline/promises';
 
 var DEFAULT_API_URL = "https://tokenoscopy.com";
@@ -421,6 +421,121 @@ async function runGuard() {
     return 0;
   }
 }
+function interpretPoll(status, body) {
+  const b = body && typeof body === "object" ? body : {};
+  if (status === 202) {
+    const interval = typeof b.interval === "number" && b.interval > 0 ? b.interval : 3;
+    return { kind: "pending", interval };
+  }
+  if (status === 200 && typeof b.key === "string" && b.key.startsWith("tok_")) {
+    return {
+      kind: "paired",
+      key: b.key,
+      hostname: typeof b.hostname === "string" ? b.hostname : "this machine"
+    };
+  }
+  if (status === 410 || status === 404) {
+    return { kind: "gone", reason: typeof b.error === "string" ? b.error : "gone" };
+  }
+  return { kind: "retry" };
+}
+function goneMessage(reason) {
+  switch (reason) {
+    case "expired":
+      return "The pairing code expired before it was confirmed.";
+    case "consumed":
+      return "That pairing was already collected by another init.";
+    default:
+      return "That pairing is no longer valid.";
+  }
+}
+function openBrowser(url) {
+  const cmd = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
+  try {
+    const child = spawn(cmd[0], cmd[1], {
+      stdio: "ignore",
+      detached: true
+    });
+    child.on("error", () => void 0);
+    child.unref();
+  } catch {
+  }
+}
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function startPairing(apiUrl) {
+  try {
+    const res = await fetch(`${apiUrl}/api/pair/start`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ hostname: hostname() }),
+      signal: AbortSignal.timeout(8e3)
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    if (typeof body.device_code !== "string" || typeof body.user_code !== "string" || typeof body.verification_url !== "string") {
+      return null;
+    }
+    return {
+      device_code: body.device_code,
+      user_code: body.user_code,
+      verification_url: body.verification_url,
+      expires_in: typeof body.expires_in === "number" ? body.expires_in : 600,
+      interval: typeof body.interval === "number" ? body.interval : 3
+    };
+  } catch {
+    return null;
+  }
+}
+async function pairMachine(apiUrl, opts = { browser: true }) {
+  const out = opts.out ?? ((line) => process.stderr.write(`${line}
+`));
+  const start = await startPairing(apiUrl);
+  if (!start) {
+    out(`\u2717 Couldn't start pairing with ${apiUrl}.`);
+    return null;
+  }
+  out(`  Open  ${start.verification_url}`);
+  out(`  Code  ${start.user_code}   (this machine: ${hostname()})`);
+  if (opts.browser) openBrowser(start.verification_url);
+  out("  waiting for you to confirm in the browser\u2026");
+  const deadline = Date.now() + start.expires_in * 1e3;
+  let interval = start.interval;
+  while (Date.now() < deadline) {
+    await sleep(interval * 1e3);
+    let outcome;
+    try {
+      const res = await fetch(`${apiUrl}/api/pair/poll`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ device_code: start.device_code }),
+        signal: AbortSignal.timeout(8e3)
+      });
+      let body = null;
+      try {
+        body = await res.json();
+      } catch {
+        body = null;
+      }
+      outcome = interpretPoll(res.status, body);
+    } catch {
+      outcome = { kind: "retry" };
+    }
+    if (outcome.kind === "paired") {
+      out(`\u2713 paired as ${outcome.hostname}`);
+      return outcome.key;
+    }
+    if (outcome.kind === "gone") {
+      out(`\u2717 ${goneMessage(outcome.reason)}`);
+      return null;
+    }
+    if (outcome.kind === "pending") interval = outcome.interval;
+    else interval = Math.min(interval * 2, 15);
+  }
+  out("\u2717 Timed out waiting for the browser.");
+  return null;
+}
+
+// src/commands/init.ts
 var MARKER = "tokenoscopy";
 function isOurs(group) {
   return JSON.stringify(group).toLowerCase().includes(MARKER);
@@ -489,11 +604,20 @@ async function runInit(args) {
   const flags = /* @__PURE__ */ new Map();
   for (let i = 0; i < args.length; i++) {
     const a = args[i];
-    if (a === "--project" || a === "--print") flags.set(a, true);
+    if (a === "--project" || a === "--print" || a === "--no-browser") flags.set(a, true);
     else if (a.startsWith("--")) flags.set(a, args[++i] ?? "");
   }
   const apiUrl = flags.get("--url") || process.env.TOKENOSCOPY_API_URL || DEFAULT_API_URL;
   let key = flags.get("--key") || process.env.TOKENOSCOPY_KEY || "";
+  if (!key && process.stdin.isTTY) {
+    const paired = await pairMachine(apiUrl, { browser: !flags.get("--no-browser") });
+    if (paired) key = paired;
+    else {
+      process.stderr.write(
+        "  Paste a key from Settings \u2192 Ingest keys instead, or re-run with --key tok_\u2026\n"
+      );
+    }
+  }
   if (!key) {
     const rl = createInterface({ input: process.stdin, output: process.stderr });
     key = (await rl.question("Paste your ingest key (tok_\u2026): ")).trim();
@@ -627,7 +751,9 @@ Usage: tokenoscopy <command> [options]
 
 Commands:
   init      Wire Claude Code hooks + transcript flush to your workspace
-              --key tok_\u2026      ingest key (or TOKENOSCOPY_KEY)
+              (no key: opens the browser to pair this machine)
+              --key tok_\u2026      ingest key (or TOKENOSCOPY_KEY) \u2014 headless / CI
+              --no-browser     print the pairing link instead of opening it
               --url https://\u2026  API base (default https://tokenoscopy.com)
               --project        write hooks to ./.claude/settings.json (CI)
               --print          print the hook config instead of writing

package/dist/index.js

@@ -1 +1 @@
-export { classifyAuth, costIsRealMoney, detectAuth, detectAuthMode, parseTranscript, readClaudeJson, redactText, redactValue, repoLabelFromCwd } from './chunk-AZYPMFOF.js';
+export { classifyAuth, costIsRealMoney, detectAuth, detectAuthMode, parseTranscript, readClaudeJson, redactText, redactValue, repoLabelFromCwd } from './chunk-KU3AJVVR.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tokenoscopy",
-  "version": "0.3.2",
+  "version": "0.4.0",
   "description": "Flight recorder & spend control for coding-agent fleets. Records Claude Code sessions (hooks + transcripts), replays them, and enforces budgets.",
   "license": "MIT",
   "type": "module",