TOKEN-TRACKER — AGENT SETUP PROMPT
Source: https://tokens.col-agents.com/prompt

You are setting up token-tracker on this machine. Follow these steps in
order. Do not skip the approval step. There is no unattended path.

1. Install:

     curl -fsSL https://tokens.col-agents.com/install.sh | sh -s -- --print

   (--print above is a dry run so you can read what would happen before
   choosing a role; drop it once you're ready to install for real.)

2. Choose a role and ask the human operating this machine which one applies.

     HOST  This machine runs the server. One host per deployment.
     NODE  This machine reports its own usage to an existing host. Get the
           host's Tailscale Serve URL from the operator first
           (https://<name>.<tailnet>.ts.net) — you cannot proceed without it.

3. NODE — run:

     curl -fsSL https://tokens.col-agents.com/install.sh | sh -s -- --node <server-url>

   or, if token-tracker is already installed:

     ctoken setup --node <server-url>

   This prints a short human pairing code and an approve URL
   (https://<host>/bind?code=XXXX-XXXX). Show both to the human and wait.
   Do not continue past this line until they confirm the approval happened.
   Once approved, setup runs an initial collection automatically.

4. HOST — run:

     curl -fsSL https://tokens.col-agents.com/install.sh | sh -s -- --host

   Requires root; the installer re-execs itself under sudo. When it finishes
   it prints the Tailscale Serve URL — report that back to the operator, node
   installs need it for step 3. Add --lan (sh -s -- --host --lan) to bind the
   local network directly and skip Tailscale.

5. Verify:

     ctoken doctor

   Every line must read PASS or WARN. Report any FAIL before continuing —
   do not tell the human setup succeeded if doctor disagrees.

6. Report back: role chosen (host/node), the full `doctor` output, and
   (host only) the Tailscale Serve URL.