tokentracker-cli 0.83.11 → 0.84.1

package/src/lib/git-outcomes.js

@@ -60,10 +60,63 @@ async function writeAtomic(filePath, content) {
   await fsp.rename(temp, filePath);
 }
 
+// Attribution walks into the working directory of every recent session and
+// runs git there. On macOS each distinct protected location that gets touched
+// (~/Documents, ~/Downloads, another app's container) raises its own TCC
+// consent prompt, so probing must happen only when there is new work to
+// attribute — never on every dashboard poll.
+const GIT_PROBE_TTL_MS = 30 * 60 * 1000;
+
+// A data-only fingerprint of the sessions we would attribute. Computing it
+// touches no filesystem and spawns no git, so an unchanged fingerprint lets us
+// serve the cached sidecar without entering a single project directory.
+function sessionsFingerprint(sessions, cutoff, maxAgeDays) {
+  const hash = crypto.createHash("sha256");
+  hash.update(`v1\0${maxAgeDays}\n`);
+  const rows = [];
+  for (const session of sessions || []) {
+    if (!session?.project_ref || !session.started_at || !session.ended_at) continue;
+    if (Date.parse(session.ended_at) < cutoff) continue;
+    rows.push(`${session.project_ref}\0${session.session_hash}\0${session.started_at}\0${session.ended_at}`);
+  }
+  for (const row of rows.sort()) hash.update(`${row}\n`);
+  return hash.digest("hex");
+}
+
+function gitAttributionDisabled() {
+  return ["1", "true"].includes(String(process.env.TOKENTRACKER_DISABLE_GIT_ATTRIBUTION || "").toLowerCase());
+}
+
 async function buildGitOutcomesInternal(sessions, { home = os.homedir(), force = false, maxAgeDays = 90 } = {}) {
+  const outputPath = resolveAutoOutcomesPath(home);
+  const metaPath = `${outputPath}.meta.json`;
+  const cutoff = Date.now() - Math.max(1, Number(maxAgeDays) || 90) * 86400_000;
+
+  // Escape hatch for anyone who would rather keep TokenTracker out of their
+  // project directories entirely. Serves whatever was already attributed.
+  if (gitAttributionDisabled()) return readJsonl(outputPath);
+
+  // Cheap gate, before any filesystem access: same sessions as last time and
+  // the last probe is recent, so there is nothing new to attribute.
+  const sessionSignature = sessionsFingerprint(sessions, cutoff, maxAgeDays);
+  if (!force) {
+    try {
+      const meta = JSON.parse(fs.readFileSync(metaPath, "utf8"));
+      const age = Date.now() - Date.parse(meta.generated_at || "");
+      if (
+        meta.version === 2
+        && meta.session_signature === sessionSignature
+        && Number.isFinite(age)
+        && age >= 0
+        && age < GIT_PROBE_TTL_MS
+      ) {
+        return readJsonl(outputPath);
+      }
+    } catch { /* first run, or a v1 sidecar written before this gate existed */ }
+  }
+
   const groups = new Map();
   const rootCache = new Map();
-  const cutoff = Date.now() - Math.max(1, Number(maxAgeDays) || 90) * 86400_000;
   for (const session of sessions || []) {
     if (!session?.project_ref || !session.started_at || !session.ended_at) continue;
     if (Date.parse(session.ended_at) < cutoff) continue;
@@ -77,8 +130,6 @@ async function buildGitOutcomesInternal(sessions, { home = os.homedir(), force =
     groups.get(root).push(session);
   }
 
-  const outputPath = resolveAutoOutcomesPath(home);
-  const metaPath = `${outputPath}.meta.json`;
   const signatureHash = crypto.createHash("sha256");
   for (const [root, repoSessions] of [...groups.entries()].sort(([a], [b]) => a.localeCompare(b))) {
     signatureHash.update(`${root}\0${await runGit(root, ["for-each-ref", "--format=%(objectname)"])}\n`);
@@ -88,7 +139,12 @@ async function buildGitOutcomesInternal(sessions, { home = os.homedir(), force =
   if (!force) {
     try {
       const meta = JSON.parse(fs.readFileSync(metaPath, "utf8"));
-      if (meta.version === 1 && meta.signature === signature) return readJsonl(outputPath);
+      // Git state is unchanged too — refresh the timestamp so the cheap gate
+      // above can short-circuit the next poll instead of re-probing.
+      if (meta.signature === signature) {
+        await writeAtomic(metaPath, `${JSON.stringify({ ...meta, version: 2, session_signature: sessionSignature, generated_at: new Date().toISOString() })}\n`);
+        return readJsonl(outputPath);
+      }
     } catch { /* first run */ }
   }
 
@@ -123,7 +179,13 @@ async function buildGitOutcomesInternal(sessions, { home = os.homedir(), force =
   }
   outcomes.sort((a, b) => a.timestamp.localeCompare(b.timestamp));
   await writeAtomic(outputPath, outcomes.map((row) => JSON.stringify(row)).join("\n") + (outcomes.length ? "\n" : ""));
-  await writeAtomic(metaPath, `${JSON.stringify({ version: 1, signature, generated_at: new Date().toISOString(), max_age_days: maxAgeDays })}\n`);
+  await writeAtomic(metaPath, `${JSON.stringify({
+    version: 2,
+    signature,
+    session_signature: sessionSignature,
+    generated_at: new Date().toISOString(),
+    max_age_days: maxAgeDays,
+  })}\n`);
   return outcomes;
 }
 

package/src/lib/local-api.js

@@ -2169,7 +2169,10 @@ function createLocalApiHandler({ queuePath }) {
         const result = listSessionsForBrowser(sessions, { from, to, limit });
         json(res, { from, to, ...result });
       } catch (error) {
-        json(res, { available: false, error: error?.message || "Session browser failed" }, 500);
+        // Node fs errors embed the absolute path ("EACCES ... open '/Users/…'").
+        // Keep that out of the HTTP body and log it locally instead.
+        console.warn("[local-api] session browser failed:", error?.message || error);
+        json(res, { available: false, error: "Session browser failed" }, 500);
       }
       return true;
     }

package/src/lib/pricing/curated-overrides.json

@@ -6,6 +6,8 @@
   },
   "exact": {
     "claude-fable-5":   { "input": 10,   "output": 50,   "cache_read": 1,     "cache_write": 12.5, "note": "Fable 5 — Anthropic's top tier above Opus. Not yet in LiteLLM. $10/$50 per MTok; cache_read 0.1x, cache_write 1.25x. Remove once LiteLLM carries it." },
+    "claude-opus-5":     { "input": 5,    "output": 25,   "cache_read": 0.5,   "cache_write": 6.25, "note": "Opus 5 (public 2026-07). Standard Opus tier, unchanged from 4.6/4.7/4.8: $5/$25 per MTok, cache_read 0.1x, cache_write 1.25x. Not yet in LiteLLM. Fast mode is billed at $10/$50 — see claude-opus-5-fast. Remove once LiteLLM carries it." },
+    "claude-opus-5-fast":{ "input": 10,   "output": 50,   "cache_read": 1,     "cache_write": 12.5, "note": "Opus 5 fast mode (speed=\"fast\", beta fast-mode-2026-02-01) is priced at $10/$50 per MTok — 2x standard Opus. Kept separate so a -fast model id is not silently priced at the standard tier. See claude-opus-5." },
     "claude-opus-4-8":  { "input": 5,    "output": 25,   "cache_read": 0.5,   "cache_write": 6.25, "note": "Opus 4.8 not yet in LiteLLM. Pin to the standard Opus tier (same as 4.6/4.7); remove once LiteLLM carries it." },
     "claude-sonnet-5":  { "input": 3,    "output": 15,   "cache_read": 0.3,   "cache_write": 3.75, "note": "Sonnet 5. LiteLLM added this model on ~2026-06-30 with matching rates, but pin explicitly so pricing is correct immediately rather than depending on the 24h local pricing-cache refresh cycle." },
     "claude-haiku-4-5": { "input": 1,    "output": 5,    "cache_read": 0.1,   "cache_write": 1.25, "note": "Canonical undated alias emitted by Cursor. Pin to the same rates as claude-haiku-4-5-20251001 so local cost does not depend on which dated LiteLLM aliases are present in the current cache." },
@@ -79,6 +81,8 @@
     { "match": "kiro",                   "ref": "kiro-cli-agent" },
     { "match": "hy3",                    "ref": "hy3-preview-agent" },
     { "match": "composer",               "ref": "composer-1" },
+    { "match": "claude-opus-5-fast",      "ref": "claude-opus-5-fast" },
+    { "match": "claude-opus-5",           "ref": "claude-opus-5" },
     { "match": "claude-opus-4-8",         "ref": "claude-opus-4-8" },
     { "match": "minimax-m3",            "ref": "minimax-m3" },
     { "match": "minimax-m2.7-highspeed", "ref": "MiniMax-M2.7-highspeed" },