TALLYGRAPHUNIFIED SPEND CONSOLE

Changelog

What changed in each release of the tallygraph CLI on npm.

The CLI is published to npm as tallygraph. Install or upgrade with npm i -g tallygraph, or pin a version with npx tallygraph@0.5.0. Published versions: npmjs.com/package/tallygraph.

0.5.0 · 2026-11-04

  • collect sends a runtime report after each delivery: the CLI version, the Node version and the runtime versions seen in the batch. It feeds the security findings for bad runtimes. A failed report warns but does not change the exit code.
  • findings, spend and guard activity send the terminal's locale as Accept-Language, so finding titles and reasons come back in your language when a translation exists.
  • Injection findings now tag instructions that came from agent context files (AGENTS.md, CLAUDE.md, .cursorrules, .mcp.json) with the context_file source.

0.4.0 · 2026-11-03

  • Opt-in session security: per-session risk reports, suspected prompt-injection detection in local transcripts, MCP observation and definition-drift signals, a shadow policy evaluator and a fail-closed runtime gate.
  • Pricing now covers Qwen, MiniMax, Doubao, ERNIE and Hunyuan, with model tiers and pricing coverage in each batch.
  • Clearer errors for old Node versions and machines with no agent history; warns before picking a token that can expire; provider errors are redacted.

0.3.0 · 2026-11-01

  • tallygraph trifecta lists local sessions that mixed private data, untrusted content and a way to send data out. Runs offline; the report carries rule ids and tool names, never content or paths.
  • tallygraph scan checks the repository for secrets before they get committed.
  • tallygraph guard activity shows Guard blocks, health and privacy counters; the MCP server exposes it as get_guard_activity.
  • collect reports the Claude plan tier. agent no longer passes the shell's provider credentials to the spawned client.

0.2.0 · 2026-10-23

  • tallygraph spend and tallygraph findings: read-only commands that answer from your workspace without opening the dashboard.
  • tallygraph mcp: a read-only MCP server over stdio so agents can query spend, findings and Guard activity.

0.1.x · 2026-09-25

  • First public release: tallygraph collect finds the AI coding agents on the machine, reads their history read-only and uploads usage records.
  • 0.1.1 fixes the published package: production endpoint, license and local storage.