Token Studio v6.0.8

Token Studio v6.0.8

This release closes the v6 release gate for the local-first Token Studio ROI workflow.

npm is published: token-studio@6.0.8.

Fixed

• /api/live no longer reports a hard 500-event sample as the 24h request count. Live totals are now based on the requested time window.
• Browser /live and Desktop Pulse use the same local structured token data source, so the realtime surface no longer diverges from the desktop companion.
• Release gate process cleanup was hardened so Windows smoke:npx and cross-platform CI can validate the installed-package path reliably.
• npm Trusted Publishing metadata was corrected so the published package, GitHub tag, and Release point to the same commit.

Security and privacy

• /api/ingest is disabled by default and requires INGEST_TOKEN when explicitly enabled.
• Token Studio stores local structured token metadata only. It does not save prompt, response, transcript, diff, or full local file path content.
• Desktop Pulse is a local realtime companion for burn rate, budget windows, reset countdown, unpriced models, and open actions. The Web Review and Trust pages remain the full ROI review workflow.

Cost wording

• Dollar values are official public token-price conversions for review and strategy simulation. They are not provider invoices or financial reconciliation.

Install and verify

npx token-studio@6.0.8 --dry-run-only --no-open
npx token-studio@6.0.8 demo --no-open
npx token-studio@6.0.8 statusline --format=text

Source checkout verification

git checkout v6.0.8
npm ci
npm test
npm run smoke:npx
npm run smoke:browser
npm run desktop:smoke

Token Studio v4.8.6

Token Studio v4.8.6

This release hardens the public npx token-studio path before npm publication.

Highlights

• npx token-studio is the primary real-data path: it runs read-only coverage, applies trusted Claude/Codex event-level usage when safe, then starts the local UI.
• npx token-studio demo remains synthetic demo data only and never proves real collection success.
• Added tarball install smoke (npm run smoke:npx) so source-checkout success is not enough for release.
• Added browser console smoke (npm run smoke:browser) to catch Dashboard ReferenceError, duplicate React keys, and UI-port API proxy failures.
• Fixed repeated table row keys for missing or synthetic session identities.
• Hardened real collection visibility: Cursor detected-only/no-token-fields is not marketed as successful usage collection.

Privacy and billing boundaries

• Token Studio reads structured local token metadata only.
• It does not save prompt, response, transcript, diff, or full local file paths.
• Cost is official public token-price conversion for review and strategy, not a provider invoice.
• Historical coverage is limited to local logs that still exist and contain reliable token fields; gaps are reported instead of silently estimated.

Release gate run locally

• npm test
• npm run build
• npm run privacy:check
• node src/cli.mjs privacy-check --include-untracked
• npm audit --audit-level=low
• npm run smoke:npx
• npm run smoke:browser
• npm pack --dry-run
• git diff --check

Token Studio ROI v4.8.1

Patch release for npm one-command launch.\n\n- Fixes npx token-studio demo/start when npm hoists vite beside the package instead of inside token-studio/node_modules.\n- Adds runtime path tests for npx hoisted dependency layout and local source checkout layout.\n\nVerification:\n- npm test\n- npm run build\n- npm run privacy:check\n- node src/cli.mjs privacy-check --include-untracked\n- npm audit --audit-level=low\n- npm pack --dry-run

Token Studio ROI v4.7.0

Token Studio ROI v4.7.0

• Adds Dashboard ccusage CLI Bridge UX that generates copyable local commands without running external scanners from the browser.
• Adds rolling/fixed quota profiles with reset anchors and warning thresholds.
• Adds statusline integration docs/snippets for Claude Code, tmux, PowerShell, and JSON scripts.
• Adds ROI playbook export via token-studio policy --format=markdown|claude-md|agents-md.

Privacy boundary: no prompt, response, transcript, diff, or full-path storage. Cost remains official public token-price conversion, not a provider invoice.

Token Studio ROI v4.6.0

Token Studio ROI v4.6.0

This release closes the competitive gap around structured import and terminal guardrails without adding desktop widgets, background daemons, or real log scans by default.

Added

• ccusage CLI Bridge: \ oken-studio import-usage --format=ccusage-cli --report=session --dry-run --yes.
• Explicit non-interactive --yes\ gating before running external ccusage scans.
• Statusline Guardrails: \ oken-studio statusline --format=text|json\ for terminal prompts, tmux, or Claude Code statusline use.
• Weekly ccusage JSON shape support.
• Apply-time SQLite backup for ccusage imports.

Privacy and Cost Boundary

• No npm publish in this release.
• No real \collect\ was run for release validation.
• No real ccusage scan was run in automated tests.
• Prompt, response, transcript, diff, content, and full path fields remain blocked.
• ccusage cost fields are ignored; Token Studio recomputes official-price conversion.

Validation

• 
  pm test: 144 tests passed.
• 
  pm run build: passed.
• 
  pm run privacy:check: passed.
• 
  ode src/cli.mjs privacy-check --include-untracked: passed.
• 
  pm audit --audit-level=low: 0 vulnerabilities.
• 
  pm pack --dry-run: checked package contents.
• \git diff --check: passed.

Token Studio ROI v4.5.0

Token Studio ROI v4.5.0 closes the first-run onboarding release candidate.

Highlights:

• Dashboard first-run guidance for empty data, missing Advisor Actions, and budget windows without recent event-level live data.
• token-studio open for launching the local UI directly.
• token-studio import-usage --help with ccusage JSON examples and privacy boundaries.
• Updated demo screenshots from synthetic/demo data only.
• /review mobile page controls adjusted for 375px layouts.

Safety:

• No npm publish in this release.
• No real collect was run.
• No prompt, response, transcript, diff, full path, real SQLite, .env, .claude, or .codex content is included.
• Costs remain official public token-price conversions, not provider invoices.

Verified:

• npm test
• npm run build
• npm run privacy:check
• node src/cli.mjs privacy-check --include-untracked
• npm audit --audit-level=low
• npm pack --dry-run
• git diff --check

Token Studio ROI v4.4.0

Token Studio ROI v4.4.0

Token Studio ROI is a local AI coding ROI review workspace. It connects token usage to projects, tasks, work evidence, model policy, live guardrails, and advisor actions.

Highlights

• ccusage JSON import with dry-run first and explicit SQLite apply.
• Dashboard Import / Budget Wizard for structured usage import and custom budget windows.
• Live budget guardrails with near/over/exceeded warnings.
• ROI Savings Simulator and Advisor Action Loop with Markdown review exports.
• Public demo screenshots generated from demo/sanitized data only.

Privacy and Cost Boundary

• Does not store prompt, response, transcript, diff, command body, or full file path.
• Costs are official public token-price conversions and simulations, not provider invoices.
• npm is not published in this release; use git clone + npm run demo.