npm - tokentracker-cli - Versions diffs - 0.83.4 → 0.83.6 - Mend

tokentracker-cli 0.83.4 → 0.83.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (93) hide show

package/dashboard/dist/ip-check.html ADDED Viewed

@@ -0,0 +1,202 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Claude IP Check — Exit IP Reputation, Geo &amp; Risk Score</title>
+    <meta name="description" content="Free Claude IP check: see the exit IP used to reach Claude Code plus reputation, geo and cleanliness/risk (纯净度/风险) signals that can trigger sign-in blocks or rate limits." />
+    <meta property="og:site_name" content="Token Tracker" />
+    <meta property="og:title" content="Claude IP Check — Exit IP Reputation, Geo &amp; Risk Score" />
+    <meta property="og:description" content="Free Claude IP check: see the exit IP used to reach Claude Code plus reputation, geo and cleanliness/risk (纯净度/风险) signals that can trigger sign-in blocks or rate limits." />
+    <meta property="og:image" content="https://www.tokentracker.cc/dashboard-dark.png" />
+    <meta property="og:type" content="website" />
+    <meta property="og:url" content="https://www.tokentracker.cc/ip-check" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <meta name="twitter:title" content="Claude IP Check — Exit IP Reputation, Geo &amp; Risk Score" />
+    <meta name="twitter:description" content="Free Claude IP check: see the exit IP used to reach Claude Code plus reputation, geo and cleanliness/risk (纯净度/风险) signals that can trigger sign-in blocks or rate limits." />
+    <meta name="twitter:image" content="https://www.tokentracker.cc/dashboard-dark.png" />
+    <link rel="canonical" href="https://www.tokentracker.cc/ip-check" />
+    <link rel="icon" href="/icon.svg" type="image/svg+xml" />
+    <link rel="icon" href="/favicon.ico" sizes="any" />
+    <link rel="icon" href="/favicon-32.png" sizes="32x32" type="image/png" />
+    <link rel="icon" href="/favicon-16.png" sizes="16x16" type="image/png" />
+    <link rel="apple-touch-icon" href="/apple-touch-icon.png" sizes="180x180" />
+    <meta name="theme-color" content="#fafafa" media="(prefers-color-scheme: light)" />
+    <meta name="theme-color" content="#000000" media="(prefers-color-scheme: dark)" />
+    <script>
+      // ES2022 built-in polyfills for WebKit < 15.4 (macOS 12.0 Monterey ships Safari 15.0).
+      // Base UI uses Object.hasOwn and TrendMonitor uses Array.prototype.at — both land in
+      // Safari 15.4; esbuild down-levels syntax but never polyfills built-ins, so without this
+      // the dashboard crashes with "Object.hasOwn is not a function". Run before the bundle.
+      (function () {
+        try {
+          if (typeof Object.hasOwn !== "function") {
+            Object.defineProperty(Object, "hasOwn", {
+              value: function (o, k) { return Object.prototype.hasOwnProperty.call(o, k); },
+              configurable: true, writable: true,
+            });
+          }
+          function at(n) {
+            n = Math.trunc(n) || 0;
+            if (n < 0) n += this.length;
+            return n < 0 || n >= this.length ? undefined : this[n];
+          }
+          if (typeof Array.prototype.at !== "function") {
+            Object.defineProperty(Array.prototype, "at", { value: at, configurable: true, writable: true });
+          }
+          if (typeof String.prototype.at !== "function") {
+            Object.defineProperty(String.prototype, "at", { value: at, configurable: true, writable: true });
+          }
+        } catch (e) {}
+      })();
+      document.documentElement.classList.add("js");
+      // TokenTrackerBar WKWebView: mark before first paint so inline CSS below can clear html/body (NSVisualEffectView shows through).
+      (function () {
+        try {
+          if (window.webkit && window.webkit.messageHandlers && window.webkit.messageHandlers.nativeBridge) {
+            document.documentElement.classList.add("native-app");
+          }
+        } catch (e) {}
+      })();
+      // Sync theme before first paint to prevent dark→light flash (FOUC)
+      (function(){
+        var t;
+        try { t = localStorage.getItem("tokentracker-theme"); } catch(e) {}
+        var dark = t === "dark" || (t !== "light" && matchMedia("(prefers-color-scheme:dark)").matches);
+        if (dark) document.documentElement.classList.add("dark");
+      })();
+    </script>
+    <style>
+      /* Prevent dark flash: set background before CSS loads */
+      html { background: #fafafa; }
+      html.dark { background: #0a0a0a; }
+      /* Native app: must override the two lines above — otherwise WKWebView stays opaque over NSVisualEffectView */
+      html.native-app,
+      html.native-app.dark {
+        background: transparent !important;
+      }
+      html.native-app body {
+        background: transparent !important;
+      }
+      .js .aeo-seed-content {
+        display: none;
+      }
+      .aeo-seed-content {
+        margin: 0;
+        padding: 1.5rem;
+        font-family: Inter, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        line-height: 1.55;
+      }
+      .aeo-seed-content h1,
+      .aeo-seed-content h2,
+      .aeo-seed-content h3 {
+        margin: 0.75rem 0;
+      }
+    </style>
+    <script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@graph": [
+    {
+      "@type": "Organization",
+      "@id": "https://www.tokentracker.cc/#organization",
+      "name": "Token Tracker",
+      "url": "https://www.tokentracker.cc/"
+    },
+    {
+      "@type": "WebPage",
+      "@id": "https://www.tokentracker.cc/ip-check#webpage",
+      "url": "https://www.tokentracker.cc/ip-check",
+      "name": "Claude IP Check — Exit IP Reputation, Geo & Risk Score",
+      "isPartOf": {
+        "@id": "https://www.tokentracker.cc/#website"
+      },
+      "description": "Check the exit IP used to reach Claude Code, with reputation, geolocation and cleanliness/risk (纯净度/风险) signals."
+    },
+    {
+      "@type": "BreadcrumbList",
+      "itemListElement": [
+        {
+          "@type": "ListItem",
+          "position": 1,
+          "name": "Home",
+          "item": "https://www.tokentracker.cc/"
+        },
+        {
+          "@type": "ListItem",
+          "position": 2,
+          "name": "Claude IP Check",
+          "item": "https://www.tokentracker.cc/ip-check"
+        }
+      ]
+    },
+    {
+      "@type": "FAQPage",
+      "mainEntity": [
+        {
+          "@type": "Question",
+          "name": "What is a Claude IP check?",
+          "acceptedAnswer": {
+            "@type": "Answer",
+            "text": "A Claude IP check shows the public exit IP that your network uses to reach Claude Code and Claude.ai, along with its reputation, geolocation and cleanliness/risk score, so you can tell whether the IP is likely to trigger sign-in blocks, verification, or rate limits."
+          }
+        },
+        {
+          "@type": "Question",
+          "name": "Why does my Claude exit IP reputation matter?",
+          "acceptedAnswer": {
+            "@type": "Answer",
+            "text": "Anthropic and its anti-abuse providers score the reputation of the exit IP. Shared, datacenter, VPN, or previously abused IPs (low 纯净度 / high 风险) are more likely to face extra verification, throttling, or blocked logins, even on a paid plan."
+          }
+        },
+        {
+          "@type": "Question",
+          "name": "How do I check the exit IP used for Claude Code?",
+          "acceptedAnswer": {
+            "@type": "Answer",
+            "text": "Open the Token Tracker IP check page. It detects your current public exit IP and shows its geolocation, network type, and reputation/risk signals so you can decide whether to switch networks before using Claude Code."
+          }
+        }
+      ]
+    }
+  ]
+}
+    </script>
+    <script type="module" crossorigin src="/assets/__vite-browser-external-D6Ldq3Qx.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/__vite-browser-external-ByIYTB6l.css">
+  </head>
+  <body>
+    <main class="aeo-seed-content" aria-label="Claude IP Check AI-readable summary">
+      <h1>Claude IP Check: exit IP reputation, geolocation and cleanliness/risk score</h1>
+      <p>
+        This free Claude IP check detects the public exit IP your network uses to reach Claude Code and
+        Claude.ai, then reports its reputation, geolocation, network type, and a cleanliness/risk score.
+        A low-reputation, datacenter, VPN, or previously abused exit IP is more likely to trigger extra
+        sign-in verification, rate limiting, or blocked logins — even on a paid Claude plan.
+      </p>
+      <h2>Claude IP 纯净度与风险检测</h2>
+      <p>
+        本页用于检测你访问 Claude Code / Claude.ai 时使用的出口 IP：展示该 IP 的归属地、网络类型、
+        信誉度与"纯净度 / 风险"评分。共享 IP、机房 IP、VPN 或历史被滥用的 IP 通常纯净度低、风险高，
+        更容易触发 Claude 的登录验证、限速甚至封禁。检测后可据此决定是否更换网络再使用 Claude Code。
+      </p>
+      <h2>What this Claude IP check reports</h2>
+      <ul>
+        <li>Your current public exit IP address (the IP Anthropic actually sees).</li>
+        <li>Geolocation and network type (residential, datacenter, mobile, VPN/proxy).</li>
+        <li>IP reputation and a cleanliness/risk score (纯净度 / 风险).</li>
+        <li>Whether the IP is likely to trigger Claude sign-in verification or rate limits.</li>
+      </ul>
+      <h2>Part of Token Tracker</h2>
+      <p>
+        Token Tracker is a free, open-source, local-first dashboard that monitors AI token usage and cost
+        across 27 AI coding tools including Claude Code. Install with <code>npx tokentracker-cli</code>.
+      </p>
+    </main>
+    <div id="root"></div>
+  </body>
+</html>

package/dashboard/dist/leaderboard.html ADDED Viewed

@@ -0,0 +1,167 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>AI Coding Token Usage Leaderboard — Claude, Codex, Cursor</title>
+    <meta name="description" content="Public Token Tracker leaderboard ranking AI coding token usage across Claude Code, Codex, Cursor, Gemini and 27 tools. Opt-in, privacy-first — token counts only, never prompts." />
+    <meta property="og:site_name" content="Token Tracker" />
+    <meta property="og:title" content="AI Coding Token Usage Leaderboard — Claude, Codex, Cursor" />
+    <meta property="og:description" content="Public Token Tracker leaderboard ranking AI coding token usage across Claude Code, Codex, Cursor, Gemini and 27 tools. Opt-in, privacy-first — token counts only, never prompts." />
+    <meta property="og:image" content="https://www.tokentracker.cc/dashboard-dark.png" />
+    <meta property="og:type" content="website" />
+    <meta property="og:url" content="https://www.tokentracker.cc/leaderboard" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <meta name="twitter:title" content="AI Coding Token Usage Leaderboard — Claude, Codex, Cursor" />
+    <meta name="twitter:description" content="Public Token Tracker leaderboard ranking AI coding token usage across Claude Code, Codex, Cursor, Gemini and 27 tools. Opt-in, privacy-first — token counts only, never prompts." />
+    <meta name="twitter:image" content="https://www.tokentracker.cc/dashboard-dark.png" />
+    <link rel="canonical" href="https://www.tokentracker.cc/leaderboard" />
+    <link rel="icon" href="/icon.svg" type="image/svg+xml" />
+    <link rel="icon" href="/favicon.ico" sizes="any" />
+    <link rel="icon" href="/favicon-32.png" sizes="32x32" type="image/png" />
+    <link rel="icon" href="/favicon-16.png" sizes="16x16" type="image/png" />
+    <link rel="apple-touch-icon" href="/apple-touch-icon.png" sizes="180x180" />
+    <meta name="theme-color" content="#fafafa" media="(prefers-color-scheme: light)" />
+    <meta name="theme-color" content="#000000" media="(prefers-color-scheme: dark)" />
+    <script>
+      // ES2022 built-in polyfills for WebKit < 15.4 (macOS 12.0 Monterey ships Safari 15.0).
+      // Base UI uses Object.hasOwn and TrendMonitor uses Array.prototype.at — both land in
+      // Safari 15.4; esbuild down-levels syntax but never polyfills built-ins, so without this
+      // the dashboard crashes with "Object.hasOwn is not a function". Run before the bundle.
+      (function () {
+        try {
+          if (typeof Object.hasOwn !== "function") {
+            Object.defineProperty(Object, "hasOwn", {
+              value: function (o, k) { return Object.prototype.hasOwnProperty.call(o, k); },
+              configurable: true, writable: true,
+            });
+          }
+          function at(n) {
+            n = Math.trunc(n) || 0;
+            if (n < 0) n += this.length;
+            return n < 0 || n >= this.length ? undefined : this[n];
+          }
+          if (typeof Array.prototype.at !== "function") {
+            Object.defineProperty(Array.prototype, "at", { value: at, configurable: true, writable: true });
+          }
+          if (typeof String.prototype.at !== "function") {
+            Object.defineProperty(String.prototype, "at", { value: at, configurable: true, writable: true });
+          }
+        } catch (e) {}
+      })();
+      document.documentElement.classList.add("js");
+      // TokenTrackerBar WKWebView: mark before first paint so inline CSS below can clear html/body (NSVisualEffectView shows through).
+      (function () {
+        try {
+          if (window.webkit && window.webkit.messageHandlers && window.webkit.messageHandlers.nativeBridge) {
+            document.documentElement.classList.add("native-app");
+          }
+        } catch (e) {}
+      })();
+      // Sync theme before first paint to prevent dark→light flash (FOUC)
+      (function(){
+        var t;
+        try { t = localStorage.getItem("tokentracker-theme"); } catch(e) {}
+        var dark = t === "dark" || (t !== "light" && matchMedia("(prefers-color-scheme:dark)").matches);
+        if (dark) document.documentElement.classList.add("dark");
+      })();
+    </script>
+    <style>
+      /* Prevent dark flash: set background before CSS loads */
+      html { background: #fafafa; }
+      html.dark { background: #0a0a0a; }
+      /* Native app: must override the two lines above — otherwise WKWebView stays opaque over NSVisualEffectView */
+      html.native-app,
+      html.native-app.dark {
+        background: transparent !important;
+      }
+      html.native-app body {
+        background: transparent !important;
+      }
+      .js .aeo-seed-content {
+        display: none;
+      }
+      .aeo-seed-content {
+        margin: 0;
+        padding: 1.5rem;
+        font-family: Inter, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        line-height: 1.55;
+      }
+      .aeo-seed-content h1,
+      .aeo-seed-content h2,
+      .aeo-seed-content h3 {
+        margin: 0.75rem 0;
+      }
+    </style>
+    <script type="application/ld+json">
+{
+  "@context": "https://schema.org",
+  "@graph": [
+    {
+      "@type": "Organization",
+      "@id": "https://www.tokentracker.cc/#organization",
+      "name": "Token Tracker",
+      "url": "https://www.tokentracker.cc/"
+    },
+    {
+      "@type": "WebPage",
+      "@id": "https://www.tokentracker.cc/leaderboard#webpage",
+      "url": "https://www.tokentracker.cc/leaderboard",
+      "name": "AI Coding Token Usage Leaderboard",
+      "isPartOf": {
+        "@id": "https://www.tokentracker.cc/#website"
+      },
+      "description": "Public leaderboard ranking opt-in AI coding token usage across Claude Code, Codex, Cursor, Gemini and 27 tools."
+    },
+    {
+      "@type": "BreadcrumbList",
+      "itemListElement": [
+        {
+          "@type": "ListItem",
+          "position": 1,
+          "name": "Home",
+          "item": "https://www.tokentracker.cc/"
+        },
+        {
+          "@type": "ListItem",
+          "position": 2,
+          "name": "Leaderboard",
+          "item": "https://www.tokentracker.cc/leaderboard"
+        }
+      ]
+    }
+  ]
+}
+    </script>
+    <script type="module" crossorigin src="/assets/__vite-browser-external-D6Ldq3Qx.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/__vite-browser-external-ByIYTB6l.css">
+  </head>
+  <body>
+    <main class="aeo-seed-content" aria-label="AI Coding Token Usage Leaderboard AI-readable summary">
+      <h1>AI coding token usage leaderboard</h1>
+      <p>
+        The Token Tracker leaderboard ranks opt-in AI coding token usage across Claude Code, OpenAI Codex,
+        Cursor, Gemini CLI and 27 supported tools. It is privacy-first: entries are opt-in and expose token
+        counts only — never prompts or conversation content. See how your AI coding token consumption
+        compares with other developers by model, tool, and time window.
+      </p>
+      <h2>How the leaderboard works</h2>
+      <ul>
+        <li>Opt-in only — you choose whether to appear, using a public display name.</li>
+        <li>Token counts only — never prompts, code, or conversation content.</li>
+        <li>Ranks usage across Claude Code, Codex, Cursor, Gemini and 27 AI coding tools.</li>
+        <li>Powered by optional Token Tracker cloud sync; local-first by default.</li>
+      </ul>
+      <h2>Part of Token Tracker</h2>
+      <p>
+        Token Tracker is a free, open-source, local-first dashboard that monitors AI token usage and cost
+        across 27 AI coding tools. Install with <code>npx tokentracker-cli</code>.
+      </p>
+    </main>
+    <div id="root"></div>
+  </body>
+</html>

package/dashboard/dist/share.html CHANGED Viewed

@@ -75,8 +75,8 @@
         "description": "Shareable Token Tracker dashboard snapshot."
       }
     </script>
-    <script type="module" crossorigin src="/assets/__vite-browser-external-BRzJpYc1.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/__vite-browser-external-C44tPAD-.css">
+    <script type="module" crossorigin src="/assets/__vite-browser-external-D6Ldq3Qx.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/__vite-browser-external-ByIYTB6l.css">
   </head>
   <body>
     <main class="aeo-seed-content" aria-label="Token Tracker share page summary">

package/dashboard/dist/sitemap.xml CHANGED Viewed

@@ -2,25 +2,25 @@
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
   <url>
     <loc>https://www.tokentracker.cc/</loc>
-    <lastmod>2026-05-07</lastmod>
+    <lastmod>2026-07-22</lastmod>
     <changefreq>weekly</changefreq>
     <priority>1.0</priority>
   </url>
   <url>
     <loc>https://www.tokentracker.cc/leaderboard</loc>
-    <lastmod>2026-05-07</lastmod>
+    <lastmod>2026-07-22</lastmod>
     <changefreq>daily</changefreq>
     <priority>0.9</priority>
   </url>
   <url>
     <loc>https://www.tokentracker.cc/ip-check</loc>
-    <lastmod>2026-05-07</lastmod>
-    <changefreq>monthly</changefreq>
-    <priority>0.5</priority>
+    <lastmod>2026-07-22</lastmod>
+    <changefreq>weekly</changefreq>
+    <priority>0.7</priority>
   </url>
   <url>
     <loc>https://www.tokentracker.cc/share</loc>
-    <lastmod>2026-05-07</lastmod>
+    <lastmod>2026-07-22</lastmod>
     <changefreq>weekly</changefreq>
     <priority>0.4</priority>
   </url>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "tokentracker-cli",
-  "version": "0.83.4",
+  "version": "0.83.6",
   "description": "Local-first AI coding token usage and cost tracker for 27 tools, with a dashboard, desktop pet, widgets, achievements, and native macOS/Windows apps.",
   "main": "src/cli.js",
   "bin": {

package/src/commands/init.js CHANGED Viewed

@@ -1225,6 +1225,7 @@ function spawnDetached(argv) {
   try {
     const child = cp.spawn(argv[0], argv.slice(1), {
       detached: true,
+      windowsHide: true,
       stdio: 'ignore',
       env: process.env
     });

package/src/commands/sync.js CHANGED Viewed

@@ -436,7 +436,9 @@ async function cmdSync(argv, context = {}) {
       : null;
     const autoSourceScope = resolveAutoSourceScope(opts);
-    const isBackgroundLightweightSync = opts.auto && opts.background && !opts.drain;
+    // --background controls local scan breadth; --drain only controls upload
+    // depth and lock priority. Plain `sync --drain` remains a full source scan.
+    const isBackgroundLightweightSync = opts.auto && opts.background;
     const isBackgroundAllLocalSync = isBackgroundLightweightSync && opts.allLocalSources;
     const isFullSourceScan = !autoSourceScope && !isBackgroundLightweightSync;
     const sourceAllowed = (...sources) => {

package/src/lib/local-api.js CHANGED Viewed

@@ -15,6 +15,19 @@ const { getOrCreateMachineId, computeStableMachineId } = require("./machine-id")
 const SYNC_TIMEOUT_MS = 120_000;
 const TRACKER_BIN = path.resolve(__dirname, "../../bin/tracker.js");
+const MAX_DEVICE_NAME_LENGTH = 128;
+function getSystemDeviceName() {
+  try {
+    const hostname = os.hostname()
+      .replace(/[\u0000-\u001f\u007f]/g, "")
+      .trim()
+      .slice(0, MAX_DEVICE_NAME_LENGTH);
+    return hostname || null;
+  } catch {
+    return null;
+  }
+}
 // Avatar proxy (see /api/avatar-proxy below). In-memory LRU; survives the
 // CLI server lifetime, which is good enough — the dashboard reloads cheaply.
@@ -1356,7 +1369,7 @@ function createLocalApiHandler({ queuePath }) {
           // 必须和 dashboard/src/lib/cloud-sync.ts 使用同一个设备身份。
           // 旧云端设备按 (platform, device_name) 认领；如果这里发明
           // local-sync 身份，会多出一个 active device，账户视图会把历史求和两次。
-          device_name: `Token Tracker (dashboard) #${machineId.slice(0, 8)}`,
+          device_name: getSystemDeviceName() || `Token Tracker (dashboard) #${machineId.slice(0, 8)}`,
           platform: dashboardPlatform,
           machine_id: machineId,
         }),
@@ -1906,7 +1919,9 @@ function createLocalApiHandler({ queuePath }) {
         }
         const extraEnv = {};
         const drain = body.drain === true;
-        const auto = body.auto === true && !drain;
+        // Native Sync Now combines an incremental background scan with a full
+        // cloud drain. A plain {drain:true} request remains an exhaustive sync.
+        const auto = body.auto === true;
         const background =
           auto && (body.background === true || body.lightweight === true);
         // The local server is the trust boundary for cloud-sync preferences.
@@ -2577,7 +2592,10 @@ function createLocalApiHandler({ queuePath }) {
     // device_name keys on the MACHINE, not the browser — see
     // getOrCreateMachineId above and dashboard/src/lib/cloud-sync.ts.
     if (p === "/functions/tokentracker-machine-id") {
-      json(res, { machineId: getOrCreateMachineId(qp) });
+      json(res, {
+        machineId: getOrCreateMachineId(qp),
+        deviceName: getSystemDeviceName(),
+      });
       return true;
     }
@@ -2891,10 +2909,10 @@ module.exports = {
   // queue, wrapped aggregator) reports the same numbers for the same data.
   normalizeQueueRow,
   // Machine-stable identity (config.json machineId) — shared with
-  // `tracker device-login` so the CLI device-flow anchors its cloud device
-  // to the machine, not the hostname.
+  // `tracker device-login`; the hostname is only a human-readable label.
   getOrCreateMachineId,
   computeStableMachineId,
+  getSystemDeviceName,
   // Local achievement compute — exported for test/local-achievements.test.js.
   computeLocalAchievements,
   LOCAL_BADGE_THRESHOLDS,