tokentrace 0.18.0 → 0.18.1

package/CHANGELOG.md

@@ -4,6 +4,41 @@ All notable changes to TokenTrace are documented here.
 
 ## Unreleased
 
+## [0.18.1] - 2026-05-28
+
+### Fixed
+
+- **Scheduled scans now coalesce concurrent runs.** `runDueScheduledScan`
+  fires on every overview page load; two overlapping loads (a second tab, a
+  quick refresh, a prefetch) previously both passed the due-check and both
+  called `runScan`, producing duplicate scan runs. A module-scoped in-flight
+  promise guard now coalesces concurrent callers into a single scan within
+  the server process.
+- **`tokentrace repair auto-classify --apply` is now atomic.** The alias
+  writes and cost backfills for a batch run inside a single SQLite
+  transaction, and `backfillAlias` wraps its per-row updates in a transaction
+  too, so a failure partway can no longer leave the local database
+  half-applied with inaccurate reported counts.
+- **`tokentrace query` surfaces range errors cleanly.** Range validation
+  (e.g. `--from` after `--to`, or a preset combined with explicit dates) now
+  prints the validation message plus usage and exits non-zero, instead of
+  letting a raw stack trace escape.
+- **Anomaly z-scores survive JSON.** The flat-window (`mad === 0`) severe
+  branch reported `Infinity`, which `JSON.stringify` turned into `null` and
+  silently dropped the signal. It now reports a finite sentinel z-score.
+- **Stricter query CLI parsing.** Empty `--flag=` values are rejected with a
+  clear "Missing value" message rather than flowing through as empty strings.
+
+### Internal
+
+- **Test suite no longer flakes under parallel load.** CLI/MCP integration
+  tests spawn `bin/tokentrace.js`, which itself spawns `db-migrate` and
+  `db-seed`, fanning out to ~3x the core count in node processes. The Vitest
+  fork pool is now capped at roughly half the available cores with one
+  generous global timeout, removing the scattered per-test timeout overrides.
+- Removed the dead `tailwind.config.ts` left over from the Tailwind 4
+  (CSS-first) migration.
+
 ## [0.18.0] - 2026-05-28
 
 ### Local intelligence

package/dist/runtime/anomalies.mjs

@@ -846,7 +846,7 @@ function scoreValue(value, window, thresholds) {
     }
     const flatRunLength = window.filter((entry) => entry === baseline).length;
     if (value > 2 * baseline && flatRunLength >= 3) {
-      return { severity: "severe", baseline, zScore: Number.POSITIVE_INFINITY };
+      return { severity: "severe", baseline, zScore: FLAT_RUN_Z };
     }
     return { severity: null, baseline, zScore: 0 };
   }
@@ -907,7 +907,7 @@ function detectAnomalies(points, options2 = {}) {
     summary
   };
 }
-var DEFAULT_WINDOW, DEFAULT_MIN_WINDOW, DEFAULT_THRESHOLDS, MAD_TO_STDDEV, METRICS;
+var DEFAULT_WINDOW, DEFAULT_MIN_WINDOW, DEFAULT_THRESHOLDS, MAD_TO_STDDEV, FLAT_RUN_Z, METRICS;
 var init_anomaly_detection = __esm({
   "src/lib/anomaly-detection.ts"() {
     "use strict";
@@ -915,6 +915,7 @@ var init_anomaly_detection = __esm({
     DEFAULT_MIN_WINDOW = 5;
     DEFAULT_THRESHOLDS = { notable: 3, high: 4.5, severe: 6 };
     MAD_TO_STDDEV = 0.6745;
+    FLAT_RUN_Z = 999;
     METRICS = [
       { metric: "tokens", valueOf: (point) => point.totalTokens },
       { metric: "cost", valueOf: (point) => point.cost }

package/dist/runtime/db-seed.mjs

@@ -1659,7 +1659,6 @@ function recalculateInteractionCosts() {
         currency: interaction.alias_currency ?? "USD"
       } : null;
       const resolvedPrice = aliasPrice ?? directPrice;
-      const resolvedViaAlias = aliasPrice != null;
       const cost = calculateInteractionCost(
         {
           inputTokens: interaction.input_tokens,
@@ -1671,6 +1670,7 @@ function recalculateInteractionCosts() {
         },
         resolvedPrice
       );
+      const resolvedViaAlias = aliasPrice != null && cost.amount != null;
       if (cost.status === "unknown") unknownCostInteractions += 1;
       const metadata = {
         ...existingMetadata,

package/dist/runtime/pricing-refresh.mjs

@@ -940,7 +940,6 @@ function recalculateInteractionCosts() {
         currency: interaction.alias_currency ?? "USD"
       } : null;
       const resolvedPrice = aliasPrice ?? directPrice;
-      const resolvedViaAlias = aliasPrice != null;
       const cost = calculateInteractionCost(
         {
           inputTokens: interaction.input_tokens,
@@ -952,6 +951,7 @@ function recalculateInteractionCosts() {
         },
         resolvedPrice
       );
+      const resolvedViaAlias = aliasPrice != null && cost.amount != null;
       if (cost.status === "unknown") unknownCostInteractions += 1;
       const metadata = {
         ...existingMetadata,

package/dist/runtime/query.mjs

@@ -942,7 +942,11 @@ var SORT = ["asc", "desc"];
 var PRESET = ["today", "7d", "30d", "60d", "90d", "all"];
 function valueOf(arg, next) {
   const eq = arg.indexOf("=");
-  if (eq >= 0) return { value: arg.slice(eq + 1), consumedNext: false };
+  if (eq >= 0) {
+    const value = arg.slice(eq + 1);
+    if (!value) throw new Error(`Missing value for ${arg.slice(0, eq)}`);
+    return { value, consumedNext: false };
+  }
   if (next == null || next.startsWith("-")) {
     throw new Error(`Missing value for ${arg}`);
   }
@@ -1075,7 +1079,14 @@ if (parsed.help) {
   process.exit(0);
 }
 var { runStructuredQuery: runStructuredQuery2 } = await Promise.resolve().then(() => (init_structured_query(), structured_query_exports));
-var result = runStructuredQuery2(parsed.args);
+var result;
+try {
+  result = runStructuredQuery2(parsed.args);
+} catch (error) {
+  console.error(error instanceof Error ? error.message : "Invalid query.");
+  console.error(structuredQueryUsage());
+  process.exit(1);
+}
 if (parsed.json) {
   console.log(JSON.stringify(result, null, 2));
 } else {

package/dist/runtime/repair.mjs

@@ -897,6 +897,12 @@ var init_schema = __esm({
 });
 
 // src/db/client.ts
+var client_exports = {};
+__export(client_exports, {
+  db: () => db,
+  getDatabasePath: () => getDatabasePath,
+  sqlite: () => sqlite
+});
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
@@ -910,6 +916,9 @@ function databaseUrlPath(value) {
     return value.slice("file:".length);
   }
 }
+function getDatabasePath() {
+  return dbPath;
+}
 var defaultDbPath, dbPath, sqlite, db;
 var init_client = __esm({
   "src/db/client.ts"() {
@@ -2001,9 +2010,12 @@ function backfillAlias(alias, options2 = {}) {
     const stmt = prepareCached(
       "UPDATE interactions SET cost = ?, cost_estimated = 1 WHERE id = ?"
     );
-    for (const update of updates) {
-      stmt.run(update.cost, update.id);
-    }
+    const writeAll = sqlite.transaction((rows4) => {
+      for (const update of rows4) {
+        stmt.run(update.cost, update.id);
+      }
+    });
+    writeAll(updates);
   }
   return {
     alias,
@@ -2016,6 +2028,7 @@ function backfillAlias(alias, options2 = {}) {
 var init_backfill = __esm({
   "src/lib/model-aliases/backfill.ts"() {
     "use strict";
+    init_client();
     init_prepared();
     init_cost();
   }
@@ -2248,10 +2261,11 @@ if (args[0] === "auto-classify") {
   const workbench2 = buildUnknownCostRepairWorkbench3();
   const result = buildAutoClassifyResult2(workbench2, { minConfidence: options2.minConfidence });
   if (options2.apply) {
-    const [{ upsertAlias: upsertAlias2 }, { backfillAlias: backfillAlias2 }, { prepareCached: prepareCached2 }] = await Promise.all([
+    const [{ upsertAlias: upsertAlias2 }, { backfillAlias: backfillAlias2 }, { prepareCached: prepareCached2 }, { sqlite: sqlite2 }] = await Promise.all([
       Promise.resolve().then(() => (init_store(), store_exports)),
       Promise.resolve().then(() => (init_backfill(), backfill_exports)),
-      Promise.resolve().then(() => (init_prepared(), prepared_exports))
+      Promise.resolve().then(() => (init_prepared(), prepared_exports)),
+      Promise.resolve().then(() => (init_client(), client_exports))
     ]);
     const outcome = {
       dryRun: options2.dryRun,
@@ -2271,18 +2285,18 @@ if (args[0] === "auto-classify") {
       ).get(modelName, providerName, providerName);
       return row2 ?? null;
     };
-    for (const suggestion of result.suggestions) {
+    const processSuggestion = (suggestion) => {
       const c = suggestion.classification;
       if (c.rule === "none" || !c.suggestedModel) {
         outcome.skipped.push({ key: suggestion.key, reason: "No suggested model." });
-        continue;
+        return;
       }
       if (c.rule === "parser-source") {
         outcome.skipped.push({
           key: suggestion.key,
           reason: "parser-source suggestions have no (provider, observed-model) pair; fix the parser instead."
         });
-        continue;
+        return;
       }
       const resolved = resolvePricedModelId(
         c.suggestedProvider ?? suggestion.provider,
@@ -2293,7 +2307,7 @@ if (args[0] === "auto-classify") {
           key: suggestion.key,
           reason: `Could not resolve priced model "${c.suggestedModel}" under provider "${suggestion.provider}".`
         });
-        continue;
+        return;
       }
       if (!options2.dryRun) {
         upsertAlias2({
@@ -2325,6 +2339,14 @@ if (args[0] === "auto-classify") {
         affectedInteractions: backfill.affectedInteractions,
         addedCost: backfill.totalCost
       });
+    };
+    if (options2.dryRun) {
+      for (const suggestion of result.suggestions) processSuggestion(suggestion);
+    } else {
+      const applyBatch = sqlite2.transaction(() => {
+        for (const suggestion of result.suggestions) processSuggestion(suggestion);
+      });
+      applyBatch();
     }
     result.applied = outcome;
   }

package/dist/runtime/reset.mjs

@@ -1659,7 +1659,6 @@ function recalculateInteractionCosts() {
         currency: interaction.alias_currency ?? "USD"
       } : null;
       const resolvedPrice = aliasPrice ?? directPrice;
-      const resolvedViaAlias = aliasPrice != null;
       const cost = calculateInteractionCost(
         {
           inputTokens: interaction.input_tokens,
@@ -1671,6 +1670,7 @@ function recalculateInteractionCosts() {
         },
         resolvedPrice
       );
+      const resolvedViaAlias = aliasPrice != null && cost.amount != null;
       if (cost.status === "unknown") unknownCostInteractions += 1;
       const metadata = {
         ...existingMetadata,

package/dist/runtime/scan.mjs

@@ -4337,7 +4337,6 @@ function recalculateInteractionCosts() {
         currency: interaction.alias_currency ?? "USD"
       } : null;
       const resolvedPrice = aliasPrice ?? directPrice;
-      const resolvedViaAlias = aliasPrice != null;
       const cost = calculateInteractionCost(
         {
           inputTokens: interaction.input_tokens,
@@ -4349,6 +4348,7 @@ function recalculateInteractionCosts() {
         },
         resolvedPrice
       );
+      const resolvedViaAlias = aliasPrice != null && cost.amount != null;
       if (cost.status === "unknown") unknownCostInteractions += 1;
       const metadata = {
         ...existingMetadata,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tokentrace",
-  "version": "0.18.0",
+  "version": "0.18.1",
   "mcpName": "io.github.abhiyoheswaran1/tokentrace",
   "description": "Local-first dashboard for AI CLI token, cost, and session analytics.",
   "author": {

package/scripts/query.ts

@@ -17,7 +17,18 @@ if (parsed.help) {
 }
 
 const { runStructuredQuery } = await import("@/src/lib/structured-query");
-const result = runStructuredQuery(parsed.args);
+
+let result: ReturnType<typeof runStructuredQuery>;
+try {
+  // Range/argument validation (e.g. from >= to, preset + from/to together)
+  // lives in runStructuredQuery, so surface those the same clean way as parse
+  // errors instead of letting a raw stack trace escape.
+  result = runStructuredQuery(parsed.args);
+} catch (error) {
+  console.error(error instanceof Error ? error.message : "Invalid query.");
+  console.error(structuredQueryUsage());
+  process.exit(1);
+}
 
 if (parsed.json) {
   console.log(JSON.stringify(result, null, 2));

package/scripts/repair.ts

@@ -49,10 +49,11 @@ if (args[0] === "auto-classify") {
   const result = buildAutoClassifyResult(workbench, { minConfidence: options.minConfidence });
 
   if (options.apply) {
-    const [{ upsertAlias }, { backfillAlias }, { prepareCached }] = await Promise.all([
+    const [{ upsertAlias }, { backfillAlias }, { prepareCached }, { sqlite }] = await Promise.all([
       import("@/src/lib/model-aliases/store"),
       import("@/src/lib/model-aliases/backfill"),
-      import("@/src/db/prepared")
+      import("@/src/db/prepared"),
+      import("@/src/db/client")
     ]);
 
     const outcome: NonNullable<typeof result.applied> = {
@@ -79,18 +80,18 @@ if (args[0] === "auto-classify") {
       return row ?? null;
     };
 
-    for (const suggestion of result.suggestions) {
+    const processSuggestion = (suggestion: (typeof result.suggestions)[number]) => {
       const c = suggestion.classification;
       if (c.rule === "none" || !c.suggestedModel) {
         outcome.skipped.push({ key: suggestion.key, reason: "No suggested model." });
-        continue;
+        return;
       }
       if (c.rule === "parser-source") {
         outcome.skipped.push({
           key: suggestion.key,
           reason: "parser-source suggestions have no (provider, observed-model) pair; fix the parser instead."
         });
-        continue;
+        return;
       }
       const resolved = resolvePricedModelId(
         c.suggestedProvider ?? suggestion.provider,
@@ -101,7 +102,7 @@ if (args[0] === "auto-classify") {
           key: suggestion.key,
           reason: `Could not resolve priced model "${c.suggestedModel}" under provider "${suggestion.provider}".`
         });
-        continue;
+        return;
       }
 
       if (!options.dryRun) {
@@ -136,6 +137,18 @@ if (args[0] === "auto-classify") {
         affectedInteractions: backfill.affectedInteractions,
         addedCost: backfill.totalCost
       });
+    };
+
+    if (options.dryRun) {
+      for (const suggestion of result.suggestions) processSuggestion(suggestion);
+    } else {
+      // Apply the whole batch atomically: every alias + cost backfill commits
+      // together, or none does, so a failure partway can't leave the local
+      // database half-applied with inaccurate reported counts.
+      const applyBatch = sqlite.transaction(() => {
+        for (const suggestion of result.suggestions) processSuggestion(suggestion);
+      });
+      applyBatch();
     }
 
     result.applied = outcome;

package/server.json

@@ -8,12 +8,12 @@
     "url": "https://github.com/abhiyoheswaran1/tokentrace",
     "source": "github"
   },
-  "version": "0.18.0",
+  "version": "0.18.1",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "tokentrace",
-      "version": "0.18.0",
+      "version": "0.18.1",
       "runtimeHint": "npx",
       "packageArguments": [
         {

package/src/lib/anomaly-detection.ts

@@ -42,6 +42,12 @@ const DEFAULT_THRESHOLDS: AnomalyThresholds = { notable: 3, high: 4.5, severe: 6
 // Makes MAD a consistent estimator of stddev under normality.
 const MAD_TO_STDDEV = 0.6745;
 
+// When the trailing window has zero spread (mad === 0) a true modified z-score
+// is undefined/infinite. We still flag a large jump as severe, but report a
+// finite sentinel z-score so the value round-trips through JSON (JSON.stringify
+// serializes Infinity as null, which would silently drop the signal).
+const FLAT_RUN_Z = 999;
+
 function median(values: number[]): number {
   if (values.length === 0) return 0;
   const sorted = values.slice().sort((a, b) => a - b);
@@ -81,7 +87,7 @@ function scoreValue(value: number, window: number[], thresholds: AnomalyThreshol
     }
     const flatRunLength = window.filter((entry) => entry === baseline).length;
     if (value > 2 * baseline && flatRunLength >= 3) {
-      return { severity: "severe", baseline, zScore: Number.POSITIVE_INFINITY };
+      return { severity: "severe", baseline, zScore: FLAT_RUN_Z };
     }
     return { severity: null, baseline, zScore: 0 };
   }

package/src/lib/cost-recalculation.ts

@@ -238,7 +238,6 @@ export function recalculateInteractionCosts(): CostRecalculationResult {
             }
           : null;
       const resolvedPrice = aliasPrice ?? directPrice;
-      const resolvedViaAlias = aliasPrice != null;
 
       const cost = calculateInteractionCost(
         {
@@ -252,6 +251,11 @@ export function recalculateInteractionCosts(): CostRecalculationResult {
         resolvedPrice
       );
 
+      // Only treat the row as alias-resolved if the alias actually produced a
+      // cost. An alias pointing at a model that itself lacks complete pricing
+      // must not be labelled as estimated/alias-sourced with a null amount.
+      const resolvedViaAlias = aliasPrice != null && cost.amount != null;
+
       if (cost.status === "unknown") unknownCostInteractions += 1;
       const metadata = {
         ...existingMetadata,

package/src/lib/model-aliases/backfill.ts

@@ -1,3 +1,4 @@
+import { sqlite } from "@/src/db/client";
 import { prepareCached } from "@/src/db/prepared";
 import { calculateInteractionCost, type PriceConfig } from "@/src/lib/cost";
 
@@ -115,9 +116,14 @@ export function backfillAlias(
     const stmt = prepareCached(
       "UPDATE interactions SET cost = ?, cost_estimated = 1 WHERE id = ?"
     );
-    for (const update of updates) {
-      stmt.run(update.cost, update.id);
-    }
+    // Atomic: either every matched interaction is backfilled or none are, so a
+    // mid-loop failure can't leave the cost column half-updated.
+    const writeAll = sqlite.transaction((rows: Array<{ id: string; cost: number }>) => {
+      for (const update of rows) {
+        stmt.run(update.cost, update.id);
+      }
+    });
+    writeAll(updates);
   }
 
   return {

package/src/lib/scheduled-scan.ts

@@ -10,7 +10,24 @@ function latestScanDate() {
   return row?.scanAt ? new Date(row.scanAt) : null;
 }
 
-export async function runDueScheduledScan(now = new Date()) {
+type ScheduledScanOutcome = Awaited<ReturnType<typeof runScheduledScan>>;
+
+// The dashboard fires runDueScheduledScan() on every overview page load. Two
+// overlapping loads (a second tab, a quick refresh, prefetch) would otherwise
+// both pass the due-check and both call runScan(), producing duplicate scan
+// runs and wasted work. The Next.js server is a single process, so a
+// module-scoped promise guard coalesces concurrent callers into one scan.
+let inFlightScheduledScan: Promise<ScheduledScanOutcome> | null = null;
+
+export function runDueScheduledScan(now = new Date()): Promise<ScheduledScanOutcome> {
+  if (inFlightScheduledScan) return inFlightScheduledScan;
+  inFlightScheduledScan = runScheduledScan(now).finally(() => {
+    inFlightScheduledScan = null;
+  });
+  return inFlightScheduledScan;
+}
+
+async function runScheduledScan(now: Date) {
   const settings = getAppSettings();
   if (!isScanDue(settings.scanSchedule, latestScanDate(), now)) {
     return {

package/src/lib/structured-query-cli.ts

@@ -47,7 +47,11 @@ const PRESET: readonly StructuredQueryRangePreset[] = ["today", "7d", "30d", "60
 
 function valueOf(arg: string, next: string | undefined): { value: string; consumedNext: boolean } {
   const eq = arg.indexOf("=");
-  if (eq >= 0) return { value: arg.slice(eq + 1), consumedNext: false };
+  if (eq >= 0) {
+    const value = arg.slice(eq + 1);
+    if (!value) throw new Error(`Missing value for ${arg.slice(0, eq)}`);
+    return { value, consumedNext: false };
+  }
   if (next == null || next.startsWith("-")) {
     throw new Error(`Missing value for ${arg}`);
   }

package/tsconfig.json

@@ -38,7 +38,6 @@
     ".next/dev/types/**/*.ts"
   ],
   "exclude": [
-    "node_modules",
-    "tailwind.config.ts"
+    "node_modules"
   ]
 }