@georgedong32/ccs 7.67.1 → 8.0.1

package/dist/web-server/usage/model-identity.d.ts

@@ -0,0 +1,16 @@
+export interface ProviderModelIdentity {
+    modelName: string;
+    provider?: string;
+}
+export interface MergeableProviderModelBreakdown extends ProviderModelIdentity {
+    inputTokens: number;
+    outputTokens: number;
+    cacheCreationTokens: number;
+    cacheReadTokens: number;
+    cost: number;
+}
+export declare function normalizeUsageProvider(provider: string | undefined): string | undefined;
+export declare function getProviderModelKey(item: ProviderModelIdentity): string;
+export declare function getModelsUsed(items: ProviderModelIdentity[]): string[];
+export declare function coalesceLegacyProviderlessBreakdowns<T extends MergeableProviderModelBreakdown>(items: T[]): T[];
+//# sourceMappingURL=model-identity.d.ts.map

package/dist/web-server/usage/model-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-identity.d.ts","sourceRoot":"","sources":["../../../src/web-server/usage/model-identity.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,+BAAgC,SAAQ,qBAAqB;IAC5E,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAEvF;AAcD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAEvE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,qBAAqB,EAAE,GAAG,MAAM,EAAE,CAetE;AAUD,wBAAgB,oCAAoC,CAAC,CAAC,SAAS,+BAA+B,EAC5F,KAAK,EAAE,CAAC,EAAE,GACT,CAAC,EAAE,CA+BL"}

package/dist/web-server/usage/model-identity.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.coalesceLegacyProviderlessBreakdowns = exports.getModelsUsed = exports.getProviderModelKey = exports.normalizeUsageProvider = void 0;
+const pricing_resolver_1 = require("../models-dev/pricing-resolver");
+function normalizeUsageProvider(provider) {
+    return (0, pricing_resolver_1.normalizeModelsDevProviderId)(provider);
+}
+exports.normalizeUsageProvider = normalizeUsageProvider;
+function getProviderKey(provider) {
+    return normalizeUsageProvider(provider) ?? '';
+}
+function getModelUsageLabel(item, ambiguousModelNames) {
+    const provider = getProviderKey(item.provider);
+    if (provider && ambiguousModelNames.has(item.modelName)) {
+        return `${provider}/${item.modelName}`;
+    }
+    return item.modelName;
+}
+function getProviderModelKey(item) {
+    return `${getProviderKey(item.provider)}\u0000${item.modelName}`;
+}
+exports.getProviderModelKey = getProviderModelKey;
+function getModelsUsed(items) {
+    const providersByModel = new Map();
+    for (const item of items) {
+        const providers = providersByModel.get(item.modelName) ?? new Set();
+        providers.add(getProviderKey(item.provider));
+        providersByModel.set(item.modelName, providers);
+    }
+    const ambiguousModelNames = new Set(Array.from(providersByModel.entries())
+        .filter(([, providers]) => providers.size > 1)
+        .map(([modelName]) => modelName));
+    return [...new Set(items.map((item) => getModelUsageLabel(item, ambiguousModelNames)))];
+}
+exports.getModelsUsed = getModelsUsed;
+function addBreakdownTokens(target, source) {
+    target.inputTokens += source.inputTokens;
+    target.outputTokens += source.outputTokens;
+    target.cacheCreationTokens += source.cacheCreationTokens;
+    target.cacheReadTokens += source.cacheReadTokens;
+    target.cost += source.cost;
+}
+function coalesceLegacyProviderlessBreakdowns(items) {
+    const byModel = new Map();
+    for (const item of items) {
+        const existing = byModel.get(item.modelName) ?? [];
+        existing.push(item);
+        byModel.set(item.modelName, existing);
+    }
+    const coalesced = [];
+    for (const group of byModel.values()) {
+        const providerBreakdowns = group.filter((item) => getProviderKey(item.provider));
+        const legacyBreakdowns = group.filter((item) => !getProviderKey(item.provider));
+        const providerKeys = new Set(providerBreakdowns.map((item) => getProviderKey(item.provider)));
+        if (legacyBreakdowns.length > 0 && providerKeys.size === 1 && providerBreakdowns.length > 0) {
+            const provider = Array.from(providerKeys)[0];
+            const [firstProviderBreakdown, ...remainingProviderBreakdowns] = providerBreakdowns;
+            const merged = { ...firstProviderBreakdown, provider };
+            for (const breakdown of [...remainingProviderBreakdowns, ...legacyBreakdowns]) {
+                addBreakdownTokens(merged, breakdown);
+            }
+            coalesced.push(merged);
+            continue;
+        }
+        coalesced.push(...group.map((item) => ({ ...item })));
+    }
+    return coalesced;
+}
+exports.coalesceLegacyProviderlessBreakdowns = coalesceLegacyProviderlessBreakdowns;
+//# sourceMappingURL=model-identity.js.map

package/dist/web-server/usage/model-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-identity.js","sourceRoot":"","sources":["../../../src/web-server/usage/model-identity.ts"],"names":[],"mappings":";;;AAAA,qEAA8E;AAe9E,SAAgB,sBAAsB,CAAC,QAA4B;IACjE,OAAO,IAAA,+CAA4B,EAAC,QAAQ,CAAC,CAAC;AAChD,CAAC;AAFD,wDAEC;AAED,SAAS,cAAc,CAAC,QAA4B;IAClD,OAAO,sBAAsB,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,kBAAkB,CAAC,IAA2B,EAAE,mBAAgC;IACvF,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,OAAO,GAAG,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC;AACxB,CAAC;AAED,SAAgB,mBAAmB,CAAC,IAA2B;IAC7D,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;AACnE,CAAC;AAFD,kDAEC;AAED,SAAgB,aAAa,CAAC,KAA8B;IAC1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC5E,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;SACnC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CACnC,CAAC;IAEF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAfD,sCAeC;AAED,SAAS,kBAAkB,CAA4C,MAAS,EAAE,MAAS;IACzF,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;IACzC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;IAC3C,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,mBAAmB,CAAC;IACzD,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC;IACjD,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC;AAC7B,CAAC;AAED,SAAgB,oCAAoC,CAClD,KAAU;IAEV,MAAM,OAAO,GAAG,IAAI,GAAG,EAAe,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,SAAS,GAAQ,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACrC,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjF,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAE9F,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5F,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,MAAM,CAAC,sBAAsB,EAAE,GAAG,2BAA2B,CAAC,GAAG,kBAAkB,CAAC;YACpF,MAAM,MAAM,GAAG,EAAE,GAAG,sBAAsB,EAAE,QAAQ,EAAO,CAAC;YAE5D,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,2BAA2B,EAAE,GAAG,gBAAgB,CAAC,EAAE,CAAC;gBAC9E,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxC,CAAC;YAED,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAjCD,oFAiCC"}

package/dist/web-server/usage/profile-filter.d.ts

@@ -0,0 +1,13 @@
+import type { DailyUsage, HourlyUsage, MonthlyUsage, SessionUsage } from './types';
+export interface ProfileScopedUsageData {
+    daily: DailyUsage[];
+    hourly: HourlyUsage[];
+    monthly: MonthlyUsage[];
+    session: SessionUsage[];
+}
+export declare function normalizeProfileQuery(profile?: unknown): string | undefined;
+export declare function annotateUsageProfile(data: ProfileScopedUsageData, profile: string): ProfileScopedUsageData;
+export declare function filterByProfile<T extends {
+    profile?: string;
+}>(data: T[], profile?: string): T[];
+//# sourceMappingURL=profile-filter.d.ts.map

package/dist/web-server/usage/profile-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-filter.d.ts","sourceRoot":"","sources":["../../../src/web-server/usage/profile-filter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnF,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB;AAID,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAY3E;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,MAAM,GACd,sBAAsB,CAOxB;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,CAGhG"}

package/dist/web-server/usage/profile-filter.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.filterByProfile = exports.annotateUsageProfile = exports.normalizeProfileQuery = void 0;
+const PROFILE_NAME_REGEX = /^[A-Za-z0-9._-]+$/;
+function normalizeProfileQuery(profile) {
+    if (profile === undefined)
+        return undefined;
+    if (typeof profile !== 'string') {
+        throw new Error('Invalid profile filter');
+    }
+    const value = profile.trim();
+    if (!value || value === 'all')
+        return undefined;
+    if (!PROFILE_NAME_REGEX.test(value)) {
+        throw new Error('Invalid profile filter');
+    }
+    return value;
+}
+exports.normalizeProfileQuery = normalizeProfileQuery;
+function annotateUsageProfile(data, profile) {
+    return {
+        daily: data.daily.map((item) => ({ ...item, profile })),
+        hourly: data.hourly.map((item) => ({ ...item, profile })),
+        monthly: data.monthly.map((item) => ({ ...item, profile })),
+        session: data.session.map((item) => ({ ...item, profile })),
+    };
+}
+exports.annotateUsageProfile = annotateUsageProfile;
+function filterByProfile(data, profile) {
+    if (!profile)
+        return data;
+    return data.filter((item) => item.profile === profile);
+}
+exports.filterByProfile = filterByProfile;
+//# sourceMappingURL=profile-filter.js.map

package/dist/web-server/usage/profile-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-filter.js","sourceRoot":"","sources":["../../../src/web-server/usage/profile-filter.ts"],"names":[],"mappings":";;;AASA,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAE/C,SAAgB,qBAAqB,CAAC,OAAiB;IACrD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAZD,sDAYC;AAED,SAAgB,oBAAoB,CAClC,IAA4B,EAC5B,OAAe;IAEf,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;KAC5D,CAAC;AACJ,CAAC;AAVD,oDAUC;AAED,SAAgB,eAAe,CAAiC,IAAS,EAAE,OAAgB;IACzF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;AACzD,CAAC;AAHD,0CAGC"}

package/dist/web-server/usage/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/web-server/usage/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmBH,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAQzF,eAAO,MAAM,WAAW,4CAAW,CAAC"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/web-server/usage/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAqBH,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAEzF,eAAO,MAAM,WAAW,4CAAW,CAAC"}

package/dist/web-server/usage/routes.js

@@ -14,17 +14,28 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.usageRoutes = exports.getLastFetchTimestamp = exports.clearUsageCache = exports.prewarmUsageCache = void 0;
 const express_1 = require("express");
 const multer_1 = __importDefault(require("multer"));
+const auth_middleware_1 = require("../middleware/auth-middleware");
 const handlers_1 = require("./handlers");
 var aggregator_1 = require("./aggregator");
 Object.defineProperty(exports, "prewarmUsageCache", { enumerable: true, get: function () { return aggregator_1.prewarmUsageCache; } });
 Object.defineProperty(exports, "clearUsageCache", { enumerable: true, get: function () { return aggregator_1.clearUsageCache; } });
 Object.defineProperty(exports, "getLastFetchTimestamp", { enumerable: true, get: function () { return aggregator_1.getLastFetchTimestamp; } });
-// Multer configuration for CSV upload (memory storage, 10MB limit)
-const upload = (0, multer_1.default)({
+exports.usageRoutes = (0, express_1.Router)();
+const USAGE_WRITE_ACCESS_ERROR = 'Usage refresh requires localhost access when dashboard auth is disabled.';
+// Multer config for Cursor CSV upload — memory storage, 10MB limit
+const cursorUpload = (0, multer_1.default)({
     storage: multer_1.default.memoryStorage(),
     limits: { fileSize: 10 * 1024 * 1024 },
 });
-exports.usageRoutes = (0, express_1.Router)();
+exports.usageRoutes.use((req, res, next) => {
+    if (req.method.toUpperCase() !== 'POST') {
+        next();
+        return;
+    }
+    if ((0, auth_middleware_1.requireLocalAccessWhenAuthDisabled)(req, res, USAGE_WRITE_ACCESS_ERROR)) {
+        next();
+    }
+});
 // Summary endpoint
 exports.usageRoutes.get('/summary', handlers_1.handleSummary);
 // Daily usage endpoint
@@ -37,14 +48,18 @@ exports.usageRoutes.get('/models', handlers_1.handleModels);
 exports.usageRoutes.get('/sessions', handlers_1.handleSessions);
 // Monthly usage endpoint
 exports.usageRoutes.get('/monthly', handlers_1.handleMonthly);
-// Cache refresh endpoint
+// Cache refresh endpoint (async — returns immediately)
 exports.usageRoutes.post('/refresh', handlers_1.handleRefresh);
+// Refresh status polling endpoint
+exports.usageRoutes.get('/refresh-status', handlers_1.handleRefreshStatus);
 // Status endpoint
 exports.usageRoutes.get('/status', handlers_1.handleStatus);
 // Insights endpoint (anomaly detection)
 exports.usageRoutes.get('/insights', handlers_1.handleInsights);
-// Cursor usage endpoints
-exports.usageRoutes.post('/cursor/import', upload.single('file'), handlers_1.handleCursorImport);
+// Cursor usage data import (multipart CSV upload)
+exports.usageRoutes.post('/cursor/import', cursorUpload.single('file'), handlers_1.handleCursorImport);
+// Cursor usage data status
 exports.usageRoutes.get('/cursor/status', handlers_1.handleCursorStatus);
-exports.usageRoutes.delete('/cursor/data', handlers_1.handleCursorDataClear);
+// Clear all stored Cursor usage data
+exports.usageRoutes.post('/cursor/clear', handlers_1.handleCursorDataClear);
 //# sourceMappingURL=routes.js.map

package/dist/web-server/usage/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/web-server/usage/routes.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;AAEH,qCAAiC;AACjC,oDAA4B;AAC5B,yCAaoB;AAEpB,2CAAyF;AAAhF,+GAAA,iBAAiB,OAAA;AAAE,6GAAA,eAAe,OAAA;AAAE,mHAAA,qBAAqB,OAAA;AAElE,mEAAmE;AACnE,MAAM,MAAM,GAAG,IAAA,gBAAM,EAAC;IACpB,OAAO,EAAE,gBAAM,CAAC,aAAa,EAAE;IAC/B,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE;CACvC,CAAC,CAAC;AAEU,QAAA,WAAW,GAAG,IAAA,gBAAM,GAAE,CAAC;AAEpC,mBAAmB;AACnB,mBAAW,CAAC,GAAG,CAAC,UAAU,EAAE,wBAAa,CAAC,CAAC;AAE3C,uBAAuB;AACvB,mBAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,sBAAW,CAAC,CAAC;AAEvC,wBAAwB;AACxB,mBAAW,CAAC,GAAG,CAAC,SAAS,EAAE,uBAAY,CAAC,CAAC;AAEzC,wBAAwB;AACxB,mBAAW,CAAC,GAAG,CAAC,SAAS,EAAE,uBAAY,CAAC,CAAC;AAEzC,oBAAoB;AACpB,mBAAW,CAAC,GAAG,CAAC,WAAW,EAAE,yBAAc,CAAC,CAAC;AAE7C,yBAAyB;AACzB,mBAAW,CAAC,GAAG,CAAC,UAAU,EAAE,wBAAa,CAAC,CAAC;AAE3C,yBAAyB;AACzB,mBAAW,CAAC,IAAI,CAAC,UAAU,EAAE,wBAAa,CAAC,CAAC;AAE5C,kBAAkB;AAClB,mBAAW,CAAC,GAAG,CAAC,SAAS,EAAE,uBAAY,CAAC,CAAC;AAEzC,wCAAwC;AACxC,mBAAW,CAAC,GAAG,CAAC,WAAW,EAAE,yBAAc,CAAC,CAAC;AAE7C,yBAAyB;AACzB,mBAAW,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,6BAAkB,CAAC,CAAC;AAC9E,mBAAW,CAAC,GAAG,CAAC,gBAAgB,EAAE,6BAAkB,CAAC,CAAC;AACtD,mBAAW,CAAC,MAAM,CAAC,cAAc,EAAE,gCAAqB,CAAC,CAAC"}
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/web-server/usage/routes.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;AAEH,qCAAiC;AACjC,oDAA4B;AAC5B,mEAAmF;AACnF,yCAcoB;AAEpB,2CAAyF;AAAhF,+GAAA,iBAAiB,OAAA;AAAE,6GAAA,eAAe,OAAA;AAAE,mHAAA,qBAAqB,OAAA;AAErD,QAAA,WAAW,GAAG,IAAA,gBAAM,GAAE,CAAC;AAEpC,MAAM,wBAAwB,GAC5B,0EAA0E,CAAC;AAE7E,mEAAmE;AACnE,MAAM,YAAY,GAAG,IAAA,gBAAM,EAAC;IAC1B,OAAO,EAAE,gBAAM,CAAC,aAAa,EAAE;IAC/B,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE;CACvC,CAAC,CAAC;AAEH,mBAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACjC,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;QACxC,IAAI,EAAE,CAAC;QACP,OAAO;IACT,CAAC;IAED,IAAI,IAAA,oDAAkC,EAAC,GAAG,EAAE,GAAG,EAAE,wBAAwB,CAAC,EAAE,CAAC;QAC3E,IAAI,EAAE,CAAC;IACT,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,mBAAmB;AACnB,mBAAW,CAAC,GAAG,CAAC,UAAU,EAAE,wBAAa,CAAC,CAAC;AAE3C,uBAAuB;AACvB,mBAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,sBAAW,CAAC,CAAC;AAEvC,wBAAwB;AACxB,mBAAW,CAAC,GAAG,CAAC,SAAS,EAAE,uBAAY,CAAC,CAAC;AAEzC,wBAAwB;AACxB,mBAAW,CAAC,GAAG,CAAC,SAAS,EAAE,uBAAY,CAAC,CAAC;AAEzC,oBAAoB;AACpB,mBAAW,CAAC,GAAG,CAAC,WAAW,EAAE,yBAAc,CAAC,CAAC;AAE7C,yBAAyB;AACzB,mBAAW,CAAC,GAAG,CAAC,UAAU,EAAE,wBAAa,CAAC,CAAC;AAE3C,uDAAuD;AACvD,mBAAW,CAAC,IAAI,CAAC,UAAU,EAAE,wBAAa,CAAC,CAAC;AAE5C,kCAAkC;AAClC,mBAAW,CAAC,GAAG,CAAC,iBAAiB,EAAE,8BAAmB,CAAC,CAAC;AAExD,kBAAkB;AAClB,mBAAW,CAAC,GAAG,CAAC,SAAS,EAAE,uBAAY,CAAC,CAAC;AAEzC,wCAAwC;AACxC,mBAAW,CAAC,GAAG,CAAC,WAAW,EAAE,yBAAc,CAAC,CAAC;AAE7C,kDAAkD;AAClD,mBAAW,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,6BAAkB,CAAC,CAAC;AAEpF,2BAA2B;AAC3B,mBAAW,CAAC,GAAG,CAAC,gBAAgB,EAAE,6BAAkB,CAAC,CAAC;AAEtD,qCAAqC;AACrC,mBAAW,CAAC,IAAI,CAAC,eAAe,EAAE,gCAAqB,CAAC,CAAC"}

package/dist/web-server/usage/sqlite-cli.d.ts

@@ -0,0 +1,27 @@
+/// <reference types="node" />
+/// <reference types="bun-types" />
+export type SqliteJsonRow = Record<string, unknown>;
+declare function getPlatformTrustedPrefixes(): string[];
+/**
+ * Validate a CCS_SQLITE_BIN override path.
+ *
+ * Security invariant: the resolved (symlink-expanded) path must start with
+ * at least one trusted prefix. This prevents pointing at a binary in a
+ * user-writable location such as /tmp, $HOME/.local, or a relative PATH
+ * entry, which would reintroduce the PATH-hijack vector closed in #1347.
+ *
+ * Returns the validated path on success, or throws with an explanation.
+ */
+declare function validateEnvOverridePath(rawPath: string): string;
+/**
+ * Resolve the sqlite3 binary to use.
+ *
+ * Resolution order:
+ * 1. CCS_SQLITE_BIN env var override (validated against trusted prefixes)
+ * 2. First accessible path from the platform's hardcoded trusted list
+ * 3. Throw "sqlite3 command not available"
+ */
+declare function resolveTrustedSqlitePath(env?: NodeJS.ProcessEnv): string;
+export declare function querySqliteJson(dbPath: string, sql: string, env?: NodeJS.ProcessEnv): Promise<SqliteJsonRow[]>;
+export { resolveTrustedSqlitePath, validateEnvOverridePath, getPlatformTrustedPrefixes };
+//# sourceMappingURL=sqlite-cli.d.ts.map

package/dist/web-server/usage/sqlite-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-cli.d.ts","sourceRoot":"","sources":["../../../src/web-server/usage/sqlite-cli.ts"],"names":[],"mappings":";;AA6CA,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAYpD,iBAAS,0BAA0B,IAAI,MAAM,EAAE,CAE9C;AAED;;;;;;;;;GASG;AACH,iBAAS,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAqCxD;AAED;;;;;;;GAOG;AACH,iBAAS,wBAAwB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAwB9E;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,aAAa,EAAE,CAAC,CAgC1B;AAGD,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,CAAC"}

package/dist/web-server/usage/sqlite-cli.js

@@ -0,0 +1,186 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPlatformTrustedPrefixes = exports.validateEnvOverridePath = exports.resolveTrustedSqlitePath = exports.querySqliteJson = void 0;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const util_1 = require("util");
+const execFileAsync = (0, util_1.promisify)(child_process_1.execFile);
+const SQLITE_JSON_MAX_BUFFER = 10 * 1024 * 1024;
+// Trusted system paths per platform. These are fixed, non-user-writable
+// locations managed by the OS or a system package manager.
+// PATH-hijack threat model: we never resolve from $PATH; we only accept
+// binaries whose realpath resolves under one of these prefixes.
+const TRUSTED_SQLITE_PATHS_UNIX = [
+    '/usr/bin/sqlite3',
+    '/usr/local/bin/sqlite3',
+    '/opt/homebrew/bin/sqlite3',
+];
+// Windows has no single canonical system install path for sqlite3
+// (winget, Chocolatey, and Scoop all use different locations). An empty
+// list means Windows falls through to the CCS_SQLITE_BIN env-var path.
+const TRUSTED_SQLITE_PATHS_WINDOWS = [];
+// Trusted path prefixes used to validate env-var overrides. A realpath that
+// does not start with one of these prefixes is rejected to prevent users or
+// CI from pointing CCS_SQLITE_BIN at a writable/untrusted location.
+const TRUSTED_PREFIX_UNIX = [
+    '/usr/bin/',
+    '/usr/local/bin/',
+    '/usr/sbin/',
+    '/usr/local/sbin/',
+    '/opt/homebrew/',
+    '/opt/local/', // MacPorts
+    '/nix/store/', // Nix / NixOS immutable store
+    '/run/current-system/', // NixOS system activation symlink target
+    '/snap/', // Snap packages
+];
+const TRUSTED_PREFIX_WINDOWS = [
+    'C:\\Program Files\\',
+    'C:\\Program Files (x86)\\',
+    'C:\\Windows\\System32\\',
+    'C:\\Windows\\SysWOW64\\',
+    'C:\\ProgramData\\chocolatey\\bin\\', // Chocolatey managed bin dir
+];
+function isCommandMissing(error) {
+    if (!(error instanceof Error))
+        return false;
+    const nodeError = error;
+    return nodeError.code === 'ENOENT' || /not found/i.test(nodeError.message);
+}
+function getPlatformTrustedPaths() {
+    return process.platform === 'win32' ? TRUSTED_SQLITE_PATHS_WINDOWS : TRUSTED_SQLITE_PATHS_UNIX;
+}
+function getPlatformTrustedPrefixes() {
+    return process.platform === 'win32' ? TRUSTED_PREFIX_WINDOWS : TRUSTED_PREFIX_UNIX;
+}
+exports.getPlatformTrustedPrefixes = getPlatformTrustedPrefixes;
+/**
+ * Validate a CCS_SQLITE_BIN override path.
+ *
+ * Security invariant: the resolved (symlink-expanded) path must start with
+ * at least one trusted prefix. This prevents pointing at a binary in a
+ * user-writable location such as /tmp, $HOME/.local, or a relative PATH
+ * entry, which would reintroduce the PATH-hijack vector closed in #1347.
+ *
+ * Returns the validated path on success, or throws with an explanation.
+ */
+function validateEnvOverridePath(rawPath) {
+    let resolved;
+    try {
+        resolved = fs.realpathSync(rawPath);
+    }
+    catch {
+        throw new Error(`CCS_SQLITE_BIN path "${rawPath}" could not be resolved: file not found or inaccessible`);
+    }
+    // Verify executable bit (or file existence on Windows where X_OK is unreliable).
+    try {
+        if (process.platform === 'win32') {
+            fs.accessSync(resolved, fs.constants.F_OK);
+        }
+        else {
+            fs.accessSync(resolved, fs.constants.X_OK);
+        }
+    }
+    catch {
+        throw new Error(`CCS_SQLITE_BIN path "${resolved}" is not executable`);
+    }
+    const normalizedResolved = process.platform === 'win32' ? resolved.toLowerCase() : resolved;
+    const trusted = getPlatformTrustedPrefixes().some((prefix) => {
+        const normalizedPrefix = process.platform === 'win32' ? prefix.toLowerCase() : prefix;
+        return normalizedResolved.startsWith(normalizedPrefix);
+    });
+    if (!trusted) {
+        throw new Error(`CCS_SQLITE_BIN path "${resolved}" does not resolve under a trusted system prefix. ` +
+            `Paths under user-writable locations (e.g. /tmp, $HOME/.local) are rejected ` +
+            `to prevent PATH-hijack attacks.`);
+    }
+    return resolved;
+}
+exports.validateEnvOverridePath = validateEnvOverridePath;
+/**
+ * Resolve the sqlite3 binary to use.
+ *
+ * Resolution order:
+ * 1. CCS_SQLITE_BIN env var override (validated against trusted prefixes)
+ * 2. First accessible path from the platform's hardcoded trusted list
+ * 3. Throw "sqlite3 command not available"
+ */
+function resolveTrustedSqlitePath(env = process.env) {
+    const envOverride = env['CCS_SQLITE_BIN'];
+    if (envOverride && envOverride.trim().length > 0) {
+        // May throw — caller surfaces the error.
+        return validateEnvOverridePath(envOverride.trim());
+    }
+    const trustedPath = getPlatformTrustedPaths().find((candidate) => {
+        try {
+            // Resolve symlinks so the check is on the real binary.
+            const real = fs.realpathSync(candidate);
+            fs.accessSync(real, fs.constants.X_OK);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    });
+    if (!trustedPath) {
+        throw new Error('sqlite3 command not available');
+    }
+    // Return the realpath to avoid double-hop symlink confusion at exec time.
+    return fs.realpathSync(trustedPath);
+}
+exports.resolveTrustedSqlitePath = resolveTrustedSqlitePath;
+async function querySqliteJson(dbPath, sql, env = process.env) {
+    if (!fs.existsSync(dbPath)) {
+        return [];
+    }
+    let sqlitePath;
+    try {
+        sqlitePath = resolveTrustedSqlitePath(env);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(message);
+    }
+    try {
+        const { stdout } = await execFileAsync(sqlitePath, ['-json', dbPath, sql], {
+            maxBuffer: SQLITE_JSON_MAX_BUFFER,
+        });
+        const trimmed = stdout.trim();
+        if (!trimmed) {
+            return [];
+        }
+        const parsed = JSON.parse(trimmed);
+        return Array.isArray(parsed) ? parsed : [];
+    }
+    catch (error) {
+        if (isCommandMissing(error)) {
+            throw new Error('sqlite3 command not available');
+        }
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`sqlite3 query failed for ${dbPath}: ${message}`);
+    }
+}
+exports.querySqliteJson = querySqliteJson;
+//# sourceMappingURL=sqlite-cli.js.map

package/dist/web-server/usage/sqlite-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-cli.js","sourceRoot":"","sources":["../../../src/web-server/usage/sqlite-cli.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAyC;AACzC,uCAAyB;AACzB,+BAAiC;AAEjC,MAAM,aAAa,GAAG,IAAA,gBAAS,EAAC,wBAAQ,CAAC,CAAC;AAC1C,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEhD,wEAAwE;AACxE,2DAA2D;AAC3D,wEAAwE;AACxE,gEAAgE;AAChE,MAAM,yBAAyB,GAAG;IAChC,kBAAkB;IAClB,wBAAwB;IACxB,2BAA2B;CAC5B,CAAC;AAEF,kEAAkE;AAClE,wEAAwE;AACxE,uEAAuE;AACvE,MAAM,4BAA4B,GAAa,EAAE,CAAC;AAElD,4EAA4E;AAC5E,4EAA4E;AAC5E,oEAAoE;AACpE,MAAM,mBAAmB,GAAG;IAC1B,WAAW;IACX,iBAAiB;IACjB,YAAY;IACZ,kBAAkB;IAClB,gBAAgB;IAChB,aAAa,EAAE,WAAW;IAC1B,aAAa,EAAE,8BAA8B;IAC7C,sBAAsB,EAAE,yCAAyC;IACjE,QAAQ,EAAE,gBAAgB;CAC3B,CAAC;AAEF,MAAM,sBAAsB,GAAG;IAC7B,qBAAqB;IACrB,2BAA2B;IAC3B,yBAAyB;IACzB,yBAAyB;IACzB,oCAAoC,EAAE,6BAA6B;CACpE,CAAC;AAIF,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAkC,CAAC;IACrD,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,uBAAuB;IAC9B,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,yBAAyB,CAAC;AACjG,CAAC;AAED,SAAS,0BAA0B;IACjC,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACrF,CAAC;AA4H2D,gEAA0B;AA1HtF;;;;;;;;;GASG;AACH,SAAS,uBAAuB,CAAC,OAAe;IAC9C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,wBAAwB,OAAO,yDAAyD,CACzF,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,qBAAqB,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE5F,MAAM,OAAO,GAAG,0BAA0B,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QAC3D,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACtF,OAAO,kBAAkB,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,oDAAoD;YAClF,6EAA6E;YAC7E,iCAAiC,CACpC,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AA2EkC,0DAAuB;AAzE1D;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,WAAW,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1C,IAAI,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,yCAAyC;QACzC,OAAO,uBAAuB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,WAAW,GAAG,uBAAuB,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,uDAAuD;YACvD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACxC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,0EAA0E;IAC1E,OAAO,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC;AAyCQ,4DAAwB;AAvC1B,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,GAAW,EACX,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE;YACzE,SAAS,EAAE,sBAAsB;SAClC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AApCD,0CAoCC"}

package/dist/web-server/usage/types.d.ts

@@ -7,6 +7,7 @@
 /** Per-model token and cost breakdown */
 export interface ModelBreakdown {
     modelName: string;
+    provider?: string;
     inputTokens: number;
     outputTokens: number;
     cacheCreationTokens: number;
@@ -16,6 +17,8 @@ export interface ModelBreakdown {
 /** Daily usage aggregation (YYYY-MM-DD) */
 export interface DailyUsage {
     date: string;
+    /** Stable CCS profile name when the source can be attributed to one. */
+    profile?: string;
     source: string;
     inputTokens: number;
     outputTokens: number;
@@ -29,6 +32,8 @@ export interface DailyUsage {
 /** Hourly usage aggregation (YYYY-MM-DD HH:00) */
 export interface HourlyUsage {
     hour: string;
+    /** Stable CCS profile name when the source can be attributed to one. */
+    profile?: string;
     source: string;
     inputTokens: number;
     outputTokens: number;
@@ -38,10 +43,17 @@ export interface HourlyUsage {
     totalCost: number;
     modelsUsed: string[];
     modelBreakdowns: ModelBreakdown[];
+    /**
+     * Raw request count for this hour bucket.
+     * Optional for backward compatibility with previously persisted snapshots.
+     */
+    requestCount?: number;
 }
 /** Monthly usage aggregation (YYYY-MM) */
 export interface MonthlyUsage {
     month: string;
+    /** Stable CCS profile name when the source can be attributed to one. */
+    profile?: string;
     source: string;
     inputTokens: number;
     outputTokens: number;
@@ -54,6 +66,8 @@ export interface MonthlyUsage {
 /** Session-level usage aggregation */
 export interface SessionUsage {
     sessionId: string;
+    /** Stable CCS profile name when the source can be attributed to one. */
+    profile?: string;
     projectPath: string;
     inputTokens: number;
     outputTokens: number;

package/dist/web-server/usage/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/web-server/usage/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,yCAAyC;AACzC,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd;AAMD,2CAA2C;AAC3C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,eAAe,EAAE,cAAc,EAAE,CAAC;CACnC;AAED,kDAAkD;AAClD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,eAAe,EAAE,cAAc,EAAE,CAAC;CACnC;AAED,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,eAAe,EAAE,cAAc,EAAE,CAAC;CACnC;AAED,sCAAsC;AACtC,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD,yCAAyC;AACzC,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,iBAAiB,CAAC;IACzB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,aAAa,EAAE,iBAAiB,CAAC;IACjC,SAAS,EAAE,iBAAiB,CAAC;CAC9B;AAED,gDAAgD;AAChD,MAAM,MAAM,WAAW,GACnB,YAAY,GACZ,eAAe,GACf,YAAY,GACZ,iBAAiB,CAAC;AAEtB,sCAAsC;AACtC,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wCAAwC;AACxC,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,4BAA4B;AAC5B,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,OAAO,EAAE,cAAc,CAAC;CACzB;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,cAAc,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/web-server/usage/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,yCAAyC;AACzC,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd;AAMD,2CAA2C;AAC3C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,eAAe,EAAE,cAAc,EAAE,CAAC;CACnC;AAED,kDAAkD;AAClD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,eAAe,EAAE,cAAc,EAAE,CAAC;CACnC;AAED,sCAAsC;AACtC,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD,yCAAyC;AACzC,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,iBAAiB,CAAC;IACzB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,aAAa,EAAE,iBAAiB,CAAC;IACjC,SAAS,EAAE,iBAAiB,CAAC;CAC9B;AAED,gDAAgD;AAChD,MAAM,MAAM,WAAW,GACnB,YAAY,GACZ,eAAe,GACf,YAAY,GACZ,iBAAiB,CAAC;AAEtB,sCAAsC;AACtC,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wCAAwC;AACxC,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,4BAA4B;AAC5B,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,OAAO,EAAE,cAAc,CAAC;CACzB;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,cAAc,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/web-server/websocket.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"websocket.d.ts","sourceRoot":"","sources":["../../src/web-server/websocket.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAa,MAAM,IAAI,CAAC;AAShD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,eAAe,GAAG;IAAE,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CAyK5E"}
+{"version":3,"file":"websocket.d.ts","sourceRoot":"","sources":["../../src/web-server/websocket.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAa,MAAM,IAAI,CAAC;AAWhD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,eAAe,GAAG;IAAE,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CAiL5E"}