TokenTracker: Instructions file for Claude Code

CLAUDE.md

TokenTracker CLAUDE.md is an instructions file for Claude Code from xiufengsun/TokenTracker. It costs 5,321 tokens per session, scanned A, original, MIT.

A project instruction file for Token Tracker, a local application that records AI token use through a command-line tool, web dashboard, and desktop apps.

In plain words
What is it for?
Use it when working on the tracker’s command-line interface, dashboard, local server, macOS app, Windows app, packaging, or deployment.
Why use it?
It explains the repository layout, build commands, and conventions so coding agents know where changes belong across its Node.js, React, macOS, and Windows parts.

Instructions file for Claude Code

Written for Claude Code: the file is CLAUDE.md. Also seen: reads .claude/ paths; mentions CLAUDE.md; mentions subagents.

This is xiufengsun/TokenTracker's own configuration. It tells Claude Code how to work on TokenTracker itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything TokenTracker configures →

About the project

Token Tracker is a local-first dashboard and desktop application that records AI token usage and costs across coding tools. It is for developers who want to monitor their coding-tool consumption, model usage, rate limits, and spending without relying on a cloud account.

xiufengsun/TokenTracker · 2,143 stars · on GitHub · tokentracker.cc

Reuse

Borrowing it

Nothing to install: this file belongs to xiufengsun/TokenTracker. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/xiufengsun/TokenTracker/main/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/xiufengsun/TokenTracker

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for TokenTracker CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/xiufengsun/tokentracker/claude-md/github.svg)](https://agentmods.dev/instructions/xiufengsun/tokentracker/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/xiufengsun/tokentracker/claude-md"><img src="https://agentmods.dev/badge/instructions/xiufengsun/tokentracker/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for TokenTracker CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/xiufengsun/tokentracker/claude-md"><img src="https://agentmods.dev/badge/instructions/xiufengsun/tokentracker/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 5,321 This file is loaded in full into every session.
When invoked 5,321 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.05321 $0.05321
Opus 5.5 $0.02128 $0.02128
Sonnet 5.5 $0.01064 $0.01064
Haiku 4.5 $0.00532 $0.00532

Measured 12d ago against content hash 1df8d49e5793, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

TokenTracker CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 190 lines

How it starts

The opening of the file, as written. The whole thing — 190 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

Guidance for Claude Code working in this repository. Every line here is loaded into every conversation turn — keep it lean and current.

Project shape

Token Tracker is a local-first AI token usage tracker.

  • CLI (src/, CommonJS, Node ≥20) — entry bin/tracker.js → src/cli.js. serve runs a local HTTP server on :7680, sync parses logs into ~/.tokentracker/queue.jsonl.
  • Dashboard (dashboard/, React 18 + Vite 7 + TS strict + Tailwind) — built to dashboard/dist/, served by the CLI locally and by Vercel at www.tokentracker.cc.
  • macOS app (TokenTrackerBar/, Swift 5.9, XcodeGen) — menu bar + WidgetKit. EmbeddedServer/ bundles the CLI runtime + built dashboard so the .app is self-contained.
  • Windows app (TokenTrackerWin/, .NET 8 WinForms + WPF + WebView2) — system-tray counterpart of the macOS app. Launches the bundled CLI serve on a dynamic loopback port (avoids the DoSvc-held :7680), hosts the dashboard in WebView2, registers the tokentracker:// deep-link for OAuth. Built EmbeddedServer/ (Node + CLI + dashboard) is bundled by scripts/bundle-node.ps1 so the .exe is self-contained. Dashboard adaptations are gated behind isNativeWindowsApp() (dashboard/src/lib/native-bridge.js) so macOS/web paths are untouched.

Data flow: AI CLI runs → hook fires → rollout.js parses → queue.jsonl → local API → dashboard.

For the canonical list of supported providers, grep parse*Incremental in src/lib/rollout.js — the source of truth, not this file.

Frequently used commands

npm test                                  # node --test test/*.test.js  (209 files)
node --test test/<name>.test.js           # single test file
npm run ci:local                          # tests + validations + builds
npm run dashboard:dev                     # Vite dev server with local API mock (port 5173)
npm run dashboard:build                   # build to dashboard/dist/
npm run validate:copy                     # copy registry completeness
npm run validate:ui-hardcode              # no hardcoded UI strings
npm run validate:guardrails               # architecture guardrails
node bin/tracker.js serve --no-sync       # local dashboard server on :7680

Read the full file on GitHub · 190 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 12d ago Changed · +4 tokens per session 1df8d49e5793
  2. 17d ago Changed · +1 lines · +89 tokens per session 06523e2c5721
  3. 1mo ago Changed · +14 tokens per session 36eaacb00aaa
  4. 1mo ago Changed · +5 lines · +212 tokens per session 14677bd0b0f2
  5. 1mo ago Changed · +1 lines · +116 tokens per session f6eff96be9a3
  6. 1mo ago Changed · +8 lines · +256 tokens per session df7ce153fe03
  7. 1mo ago First seen · 175 lines · 4,630 tokens per session scan A 7cc5ea909446

Subscribe to this mod's changes

TokenTracker CLAUDE.md is an instructions file published in the GitHub repository xiufengsun/TokenTracker (2,143 stars, last pushed today), licensed MIT. It adds 5,321 tokens to every session, about $0.0213 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories