@hasna/economy 0.5.3 → 0.5.5

package/dist/server/index.js

@@ -4620,7 +4620,7 @@ __export(exports_legacy_plan, {
 });
 import { createHash as createHash6 } from "crypto";
 import { closeSync, constants, fstatSync, openSync, readSync } from "fs";
-import { isAbsolute } from "path";
+import { isAbsolute as isAbsolute2 } from "path";
 function object(value, fields, label) {
   if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).sort().join(",") !== fields.sort().join(","))
     throw Error(`${label} has unsupported or missing fields`);
@@ -4673,7 +4673,7 @@ function parseLegacySelection(value) {
   return { schema: mode.selection, items };
 }
 function readLegacySelectionFile(path) {
-  if (!isAbsolute(path) || path.includes("\x00"))
+  if (!isAbsolute2(path) || path.includes("\x00"))
     throw Error("--input must be an absolute path to a regular JSON file");
   let fd;
   try {
@@ -4708,7 +4708,7 @@ function readLegacySelectionFile(path) {
   }
 }
 function parseLegacyPlanOptions(args) {
-  if (args.length !== 2 || args[0] !== "--input" || !args[1] || !isAbsolute(args[1]) || args[1].includes("\x00"))
+  if (args.length !== 2 || args[0] !== "--input" || !args[1] || !isAbsolute2(args[1]) || args[1].includes("\x00"))
     throw Error("legacy-plan accepts exactly --input <absolute JSON file>");
   return args[1];
 }
@@ -4837,7 +4837,7 @@ __export(exports_legacy_preservation, {
 });
 import { createHash as createHash7, randomUUID as randomUUID3 } from "crypto";
 import { closeSync as closeSync2, constants as constants2, fstatSync as fstatSync2, fsyncSync, lstatSync, openSync as openSync2, readSync as readSync2, realpathSync, writeSync } from "fs";
-import { basename as basename4, dirname as dirname4, isAbsolute as isAbsolute2 } from "path";
+import { basename as basename4, dirname as dirname4, isAbsolute as isAbsolute3 } from "path";
 function parseLegacyPlan(value) {
   const p = record(value);
   const mode = legacyMode("plan", p.schema);
@@ -4988,7 +4988,7 @@ async function preserveLegacyOriginals(client, input) {
   });
 }
 function readLegacyBytes(path, maxBytes = MAX_BYTES) {
-  if (!isAbsolute2(path) || path.includes("\x00"))
+  if (!isAbsolute3(path) || path.includes("\x00"))
     fail("Artifact path must be absolute");
   let fd;
   try {
@@ -5027,7 +5027,7 @@ function readLegacyArtifact(path, maxBytes = MAX_BYTES) {
 }
 function writeLegacyCapsule(path, input) {
   const capsule = parseLegacyCapsule(input);
-  if (!isAbsolute2(path) || path.includes("\x00") || realpathSync(dirname4(path)) !== dirname4(path))
+  if (!isAbsolute3(path) || path.includes("\x00") || realpathSync(dirname4(path)) !== dirname4(path))
     fail("Output requires an absolute path with a real parent directory");
   const parent = lstatSync(dirname4(path));
   if (!parent.isDirectory() || parent.uid !== process.getuid?.() || (parent.mode & 63) !== 0)
@@ -5141,7 +5141,7 @@ async function rehearseLegacyRestore(client, input, scope = "transaction") {
 }
 function parseLegacyPreservationOptions(command, args) {
   const preserve = command === "legacy-preserve";
-  if (!preserve && command !== "legacy-rehearse" || args.length !== (preserve ? 4 : 2) || args[0] !== "--input" || !args[1] || !isAbsolute2(args[1]) || preserve && (args[2] !== "--output" || !args[3] || !isAbsolute2(args[3])) || args.some((x) => x.includes("\x00")))
+  if (!preserve && command !== "legacy-rehearse" || args.length !== (preserve ? 4 : 2) || args[0] !== "--input" || !args[1] || !isAbsolute3(args[1]) || preserve && (args[2] !== "--output" || !args[3] || !isAbsolute3(args[3])) || args.some((x) => x.includes("\x00")))
     fail("Expected " + command + " --input <absolute JSON file>" + (preserve ? " --output <new file in an owner-only directory>" : ""));
   return { input: args[1], ...preserve ? { output: args[3] } : {} };
 }
@@ -5190,7 +5190,7 @@ __export(exports_legacy_operations, {
   LegacyOperationInputError: () => LegacyOperationInputError
 });
 import { createHash as createHash8 } from "crypto";
-import { isAbsolute as isAbsolute3 } from "path";
+import { isAbsolute as isAbsolute4 } from "path";
 function parseLegacyIntent(action, value) {
   try {
     if (!value || typeof value !== "object" || Array.isArray(value))
@@ -5435,7 +5435,7 @@ function parseLegacyOperationOptions(command, args) {
   const apply = command === "legacy-apply";
   if (!apply && command !== "legacy-rollback")
     fail2("Unknown legacy operation or arguments");
-  if (args.length !== (apply ? 4 : 2) || args[0] !== "--input" || !args[1] || !isAbsolute3(args[1]) || apply && (args[2] !== "--capsule" || !args[3] || !isAbsolute3(args[3])) || args.some((s) => s.includes("\x00")))
+  if (args.length !== (apply ? 4 : 2) || args[0] !== "--input" || !args[1] || !isAbsolute4(args[1]) || apply && (args[2] !== "--capsule" || !args[3] || !isAbsolute4(args[3])) || args.some((s) => s.includes("\x00")))
     fail2("Expected " + command + " --input <absolute intent JSON>" + (apply ? " --capsule <absolute preservation JSON>" : ""));
   return { input: args[1], ...apply ? { capsule: args[3] } : {} };
 }
@@ -5529,7 +5529,7 @@ function isAuthorizedRequest(req, path) {
 // package.json
 var package_default = {
   name: "@hasna/economy",
-  version: "0.5.3",
+  version: "0.5.5",
   description: "AI coding cost tracker \u2014 CLI + MCP server + REST API for Claude Code, Codex, OpenCode, Cursor, Pi, and Hermes, with legacy Gemini CLI session and Gemini API billing ingestion",
   repository: {
     type: "git",
@@ -8812,14 +8812,14 @@ function sourceTimeMillis(value) {
 init_database();
 init_pricing();
 import { readdirSync as readdirSync2, readFileSync as readFileSync2, existsSync as existsSync4, statSync as statSync2 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join5, basename } from "path";
+import { homedir as homedir4 } from "os";
+import { join as join6, basename } from "path";
 
 // src/lib/accounts-store.ts
 import { existsSync as existsSync3, readFileSync } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join4 } from "path";
-import { z } from "zod";
+import { z as z2 } from "zod";
 import { resolveClientTransport, resolveCredential } from "@hasna/contracts/client";
 
 // src/lib/cloud-storage.ts
@@ -8838,33 +8838,138 @@ import { createHasnaStorageClient } from "@hasna/contracts/client/storage";
 var LOCAL_STORAGE_OPT_IN_KEYS = ["HASNA_ECONOMY_LOCAL", "ECONOMY_LOCAL"];
 var CONTRACTS_AMBIENT_ENVIRONMENT = Symbol.for("hasna:contracts:ambientClientEnvironment");
 
-// src/lib/accounts-store.ts
-var ACCOUNTS_APP = "accounts";
-var profileNameSchema = z.string().min(1).max(64).regex(/^[a-z0-9][a-z0-9-]*$/, "must be lowercase alphanumeric/hyphen and start with a letter or digit");
+// src/lib/subscriptions-registry.ts
+import { execFile } from "child_process";
+import { promisify } from "util";
+import { isAbsolute } from "path";
+import { z } from "zod";
+var execute = promisify(execFile);
+var readSubscriptionsMetadata = async (args, env) => {
+  let stdout;
+  try {
+    const result = await execute("subscriptions", args, {
+      env,
+      encoding: "utf8",
+      timeout: 30000,
+      maxBuffer: 16 * 1024 * 1024,
+      windowsHide: true
+    });
+    stdout = result.stdout;
+  } catch (error) {
+    const code = error?.code;
+    if (code === "ENOENT")
+      throw new Error("subscriptions: CLI not found on PATH; install the Subscriptions CLI to resolve station account metadata");
+    const status = typeof code === "number" && Number.isInteger(code) ? `exit ${code}` : "execution limit or transport failure";
+    throw new Error(`subscriptions: read-only metadata command failed (${status}); verify the installed CLI and its hosted credentials`);
+  }
+  try {
+    return JSON.parse(stdout);
+  } catch {
+    throw new Error("subscriptions: metadata command returned invalid JSON");
+  }
+};
+var nonempty = z.string().min(1);
 var profileSchema = z.object({
-  name: z.string(),
-  tool: z.string(),
+  name: nonempty,
+  tool: nonempty,
   email: z.string().optional(),
   displayName: z.string().optional(),
-  dir: z.string(),
+  dir: nonempty.refine(isAbsolute).refine((value) => !/[\0\r\n]/.test(value)),
+  createdAt: nonempty,
+  lastUsedAt: z.string().optional(),
   description: z.string().optional(),
-  createdAt: z.string(),
-  lastUsedAt: z.string().optional()
+  active: z.boolean(),
+  applied: z.boolean(),
+  switchedAway: z.object({ profile: nonempty, email: z.string().optional() }).optional()
+});
+var toolsSchema = z.array(z.object({
+  id: nonempty,
+  label: nonempty,
+  envVar: nonempty,
+  defaultDir: nonempty,
+  bin: nonempty
+}));
+function unique(rows, identity) {
+  if (new Set(rows.map(identity)).size !== rows.length) {
+    throw new Error("subscriptions: duplicate identity in metadata response");
+  }
+  return rows;
+}
+
+class SubscriptionsRegistry {
+  read;
+  transport = "api";
+  registry = "subscriptions";
+  env;
+  profiles;
+  tools;
+  constructor(baseUrl, env, read = readSubscriptionsMetadata) {
+    this.read = read;
+    this.env = { ...env, HASNA_SUBSCRIPTIONS_API_URL: baseUrl.replace(/\/v1\/?$/, "") };
+  }
+  allProfiles() {
+    return this.profiles ??= this.read(["list", "--json"], this.env).then((raw) => {
+      const parsed = z.array(profileSchema).safeParse(raw);
+      if (!parsed.success)
+        throw new Error("subscriptions: invalid profile metadata response");
+      return unique(parsed.data, (row) => JSON.stringify([row.tool, row.name]));
+    });
+  }
+  async listProfiles(tool) {
+    const rows = await this.allProfiles();
+    return rows.filter((row) => !tool || row.tool === tool);
+  }
+  async findProfile(name, tool) {
+    const matches = (await this.listProfiles(tool)).filter((row) => row.name === name);
+    return matches.length === 1 ? matches[0] : undefined;
+  }
+  async appliedProfile(tool) {
+    const matches = (await this.allProfiles()).filter((row) => row.tool === tool && row.applied);
+    if (matches.length > 1)
+      throw new Error("subscriptions: ambiguous station applied-profile binding");
+    return matches[0];
+  }
+  async currentProfile(_tool) {
+    return;
+  }
+  async listTools() {
+    return this.tools ??= this.read(["tools", "list", "--json"], this.env).then((raw) => {
+      const parsed = toolsSchema.safeParse(raw);
+      if (!parsed.success)
+        throw new Error("subscriptions: invalid tool metadata response");
+      return unique(parsed.data, (row) => row.id);
+    });
+  }
+}
+
+// src/lib/accounts-store.ts
+var ACCOUNTS_APP = "accounts";
+var profileNameSchema = z2.string().min(1).max(64).regex(/^[a-z0-9][a-z0-9-]*$/, "must be lowercase alphanumeric/hyphen and start with a letter or digit");
+var profileSchema2 = z2.object({
+  name: z2.string(),
+  tool: z2.string(),
+  email: z2.string().optional(),
+  displayName: z2.string().optional(),
+  dir: z2.string(),
+  description: z2.string().optional(),
+  createdAt: z2.string(),
+  lastUsedAt: z2.string().optional(),
+  switchedAway: z2.object({ profile: z2.string().min(1), email: z2.string().optional() }).optional()
 });
-var toolDefSchema = z.object({
-  id: z.string(),
-  label: z.string(),
-  envVar: z.string(),
-  defaultDir: z.string(),
-  bin: z.string()
+var toolDefSchema = z2.object({
+  id: z2.string(),
+  label: z2.string(),
+  envVar: z2.string(),
+  defaultDir: z2.string(),
+  bin: z2.string()
 });
-var storeSchema = z.object({
-  version: z.literal(1),
-  current: z.record(z.string(), z.string()).default({}),
-  applied: z.record(z.string(), z.string()).default({}),
-  toolLocks: z.record(z.string(), z.string()).default({}),
-  profiles: z.array(profileSchema).default([]),
-  tools: z.array(toolDefSchema).default([])
+var storeSchema = z2.object({
+  version: z2.literal(1),
+  current: z2.record(z2.string(), z2.string()).default({}),
+  applied: z2.record(z2.string(), z2.string()).default({}),
+  toolLocks: z2.record(z2.string(), z2.string()).default({}),
+  profiles: z2.array(profileSchema2).default([]),
+  tools: z2.array(toolDefSchema).default([])
 });
 function localRegistryAllowed(env = process.env) {
   return LOCAL_STORAGE_OPT_IN_KEYS.some((key) => {
@@ -9146,25 +9251,34 @@ class ApiStore {
   }
 }
 function resolveStore(env = process.env, options = {}) {
+  const legacy = resolveRegistryTransport(ACCOUNTS_APP, env, options.credentials);
+  if (legacy)
+    return new ApiStore(legacy.baseUrl, legacy.apiKey);
+  const current = resolveRegistryTransport("subscriptions", env, options.subscriptionsCredentials);
+  if (current)
+    return new SubscriptionsRegistry(current.baseUrl, env, options.readSubscriptionsMetadata);
+  return unconfiguredStore(env);
+}
+function resolveRegistryTransport(app, env, credentials) {
   const clientEnv = env;
-  const credential = resolveCredential(ACCOUNTS_APP, clientEnv, options.credentials);
+  const credential = resolveCredential(app, clientEnv, credentials);
   if (credential === null) {
     try {
-      resolveClientTransport(ACCOUNTS_APP, clientEnv, options.credentials ? { credentials: options.credentials } : {});
+      resolveClientTransport(app, clientEnv, credentials ? { credentials } : {});
     } catch (err) {
       if (isNoAccountsCredentialConfigurationError(err))
-        return unconfiguredStore(env);
+        return null;
       throw err;
     }
-    return unconfiguredStore(env);
+    return null;
   }
   if (credential.tier === "pointer") {
-    throw new Error(`accounts: ${credential.source} names a secrets-vault item, and the local accounts API store resolves ` + "credentials synchronously, so it cannot complete the pointer per request. It is a deliberate " + "selection and is not resolved around. Use a literal tier instead \u2014 the Keychain item " + "hasna.credentials.accounts.api-key, ~/.hasna/accounts/config/credentials, or HASNA_ACCOUNTS_API_KEY.");
+    throw new Error(`${app}: ${credential.source} names a secrets-vault item, and the registry adapter resolves ` + "credentials synchronously, so it cannot complete the pointer per request. It is a deliberate " + "selection and is not resolved around. Use a literal tier instead \u2014 the Keychain item " + `hasna.credentials.${app}.api-key, ~/.hasna/${app}/config/credentials, or HASNA_${app.toUpperCase()}_API_KEY.`);
   }
-  const resolution = resolveClientTransport(ACCOUNTS_APP, clientEnv, {
-    credentials: { ...options.credentials, apiKey: credential.apiKey }
+  const resolution = resolveClientTransport(app, clientEnv, {
+    credentials: { ...credentials, apiKey: credential.apiKey }
   });
-  return new ApiStore(resolution.baseUrl, credential.apiKey);
+  return { baseUrl: resolution.baseUrl, apiKey: credential.apiKey };
 }
 function isNoAccountsCredentialConfigurationError(error) {
   if (typeof error !== "object" || error === null)
@@ -9181,10 +9295,10 @@ function unconfiguredStore(env) {
   return new NoRegistryStore;
 }
 function accountsLocalModeNotice() {
-  return `accounts: LOCAL mode (${LOCAL_STORAGE_OPT_IN_KEYS[0]}=1) \u2014 no Hasna Accounts credential resolved, so ` + "attribution reads the on-box JSON registry (~/.hasna/accounts/accounts.json) instead of accounts-serve. " + "To go hosted, put the fleet key in the Keychain item hasna.credentials.accounts.api-key, write " + "~/.hasna/accounts/config/credentials, or set HASNA_ACCOUNTS_API_KEY.";
+  return `accounts: LOCAL mode (${LOCAL_STORAGE_OPT_IN_KEYS[0]}=1) \u2014 neither Accounts nor Subscriptions credentials resolved, so ` + "attribution reads the on-box JSON registry (~/.hasna/accounts/accounts.json) instead of accounts-serve. " + "For hosted attribution, configure the Subscriptions CLI through its normal sign-in or credential resolver.";
 }
 function accountsRefusalNotice() {
-  return "accounts: no Hasna Accounts credential resolved (Keychain item hasna.credentials.accounts.api-key, " + "~/.hasna/accounts/config/credentials, HASNA_ACCOUNTS_API_KEY), so spend attribution is omitted. The " + `on-box registry (~/.hasna/accounts/accounts.json) is NOT read without ${LOCAL_STORAGE_OPT_IN_KEYS[0]}=1 \u2014 ` + "economy fails closed instead of attributing hosted spend from an on-box file.";
+  return "accounts: neither Accounts nor Subscriptions credentials resolved (legacy hasna.credentials.accounts.api-key, " + "~/.hasna/accounts/config/credentials, HASNA_ACCOUNTS_API_KEY; current hasna.credentials.subscriptions.api-key, " + "~/.hasna/subscriptions/config/credentials, HASNA_SUBSCRIPTIONS_API_KEY), so spend attribution is omitted. The " + `on-box registry (~/.hasna/accounts/accounts.json) is NOT read without ${LOCAL_STORAGE_OPT_IN_KEYS[0]}=1 \u2014 ` + "economy fails closed instead of attributing hosted spend from an on-box file.";
 }
 var accountsLocalNoticePrinted = false;
 function announceAccountsLocalMode() {
@@ -9272,7 +9386,10 @@ async function profileForEnvDir(store, tool, env) {
   if (!configuredDir)
     return null;
   const normalized = normalizeDir(configuredDir);
-  return (await store.listProfiles(tool.id)).find((profile) => normalizeDir(profile.dir) === normalized) ?? null;
+  const matches = (await store.listProfiles(tool.id)).filter((profile) => normalizeDir(profile.dir) === normalized);
+  if (matches.length > 1)
+    throw new Error("account attribution: multiple profiles match the configured directory");
+  return matches[0] ?? null;
 }
 async function resolveAccountForAgent(agent, env = process.env, options = {}) {
   const override = envOverride(agent, env);
@@ -9286,8 +9403,15 @@ async function resolveAccountForAgent(agent, env = process.env, options = {}) {
       continue;
     const envProfile = await profileForEnvDir(store, tool, env);
     if (envProfile)
-      return fromProfile(envProfile, "env");
-    const appliedName = appliedProfileName(toolId);
+      return envProfile.switchedAway ? null : fromProfile(envProfile, "env");
+    if (store.registry === "subscriptions" && env[tool.envVar])
+      return null;
+    if (store.appliedProfile) {
+      const applied = await store.appliedProfile(toolId);
+      if (applied)
+        return applied.switchedAway ? null : fromProfile(applied, "applied");
+    }
+    const appliedName = store.registry === "subscriptions" ? undefined : appliedProfileName(toolId);
     if (appliedName) {
       const applied = await store.findProfile(appliedName, toolId);
       if (applied)
@@ -9312,12 +9436,41 @@ function withAccount(record, account) {
   };
 }
 
+// src/lib/paths.ts
+import { homedir as homedir3 } from "os";
+import { join as join5 } from "path";
+function getHomeDir2() {
+  return process.env["USERPROFILE"] ?? process.env["HOME"] ?? homedir3();
+}
+function agentPaths() {
+  const home = getHomeDir2();
+  const claudeHome = process.env["CLAUDE_CONFIG_DIR"] || join5(home, ".claude");
+  const codexHome = process.env["CODEX_HOME"] || join5(home, ".codex");
+  return {
+    claudeProjects: join5(claudeHome, "projects"),
+    claudeCredentials: join5(claudeHome, ".credentials.json"),
+    takumiProjects: join5(home, ".takumi", "projects"),
+    codexDir: codexHome,
+    codexDb: join5(codexHome, "state_5.sqlite"),
+    codexAuth: join5(codexHome, "auth.json"),
+    codexConfig: join5(codexHome, "config.toml"),
+    geminiTmp: join5(home, ".gemini", "tmp"),
+    geminiHistory: join5(home, ".gemini", "history"),
+    opencodeMessages: join5(home, ".local", "share", "opencode", "storage", "message"),
+    piSessions: join5(home, ".pi", "agent", "sessions"),
+    hermesDir: join5(home, ".hermes"),
+    hermesDb: join5(home, ".hermes", "state.db")
+  };
+}
+
 // src/ingest/claude.ts
 function autoDetectProject(cwd, projects) {
   return projects.find((p) => cwd === p.path || cwd.startsWith(p.path + "/"));
 }
-var CLAUDE_PROJECTS_DIR = process.env["HASNA_ECONOMY_CLAUDE_PROJECTS_DIR"] ?? join5(homedir3(), ".claude", "projects");
-var TAKUMI_PROJECTS_DIR = process.env["HASNA_ECONOMY_TAKUMI_PROJECTS_DIR"] ?? join5(homedir3(), ".takumi", "projects");
+var TAKUMI_PROJECTS_DIR = process.env["HASNA_ECONOMY_TAKUMI_PROJECTS_DIR"] ?? join6(homedir4(), ".takumi", "projects");
+function claudeProjectsDir() {
+  return process.env["HASNA_ECONOMY_CLAUDE_PROJECTS_DIR"] ?? agentPaths().claudeProjects;
+}
 function dirNameToPath(dirName) {
   return dirName.replace(/^-/, "/").replace(/-/g, "/").replace(/\/\//g, "/-");
 }
@@ -9327,9 +9480,9 @@ function collectJsonlFiles(projectDir) {
     try {
       for (const entry of readdirSync2(dir, { withFileTypes: true })) {
         if (entry.isDirectory())
-          walk(join5(dir, entry.name));
+          walk(join6(dir, entry.name));
         else if (entry.name.endsWith(".jsonl"))
-          files.push(join5(dir, entry.name));
+          files.push(join6(dir, entry.name));
       }
     } catch {
       collectionProblem("failed", "source_unreadable");
@@ -9338,7 +9491,7 @@ function collectJsonlFiles(projectDir) {
   walk(projectDir);
   return files;
 }
-async function ingestClaude(db, verbose = false, projectsDir = CLAUDE_PROJECTS_DIR) {
+async function ingestClaude(db, verbose = false, projectsDir = claudeProjectsDir()) {
   return ingestJsonlProjects(db, projectsDir, "claude", verbose);
 }
 async function ingestTakumi(db, verbose = false, projectsDir = TAKUMI_PROJECTS_DIR) {
@@ -9360,7 +9513,7 @@ async function ingestJsonlProjects(db, projectsDir, agentName, verbose = false)
   const ingestState = loadIngestState(db, agentName);
   const projectDirs = readdirSync2(projectsDir, { withFileTypes: true }).filter((d) => d.isDirectory());
   for (const projectDirEntry of projectDirs) {
-    const projectDirPath = join5(projectsDir, projectDirEntry.name);
+    const projectDirPath = join6(projectsDir, projectDirEntry.name);
     const projectPath = dirNameToPath(projectDirEntry.name);
     const jsonlFiles = collectJsonlFiles(projectDirPath);
     for (const filePath of jsonlFiles) {
@@ -9511,24 +9664,19 @@ init_database();
 init_pricing();
 import { existsSync as existsSync5, readFileSync as readFileSync3, statSync as statSync3 } from "fs";
 import { createHash as createHash4 } from "crypto";
-import { homedir as homedir4 } from "os";
-import { join as join6, basename as basename2 } from "path";
-var DEFAULT_CODEX_DB_PATH = join6(homedir4(), ".codex", "state_5.sqlite");
-var DEFAULT_CODEX_CONFIG_PATH = join6(homedir4(), ".codex", "config.toml");
-var DEFAULT_CODEWITH_DB_PATH = join6(homedir4(), ".codewith", "state_5.sqlite");
-var DEFAULT_CODEWITH_CONFIG_PATH = join6(homedir4(), ".codewith", "config.toml");
+import { join as join7, basename as basename2 } from "path";
 var CODEX_INGEST_VERSION = "rollout-events-v4";
 function codexDbPath() {
-  return process.env["HASNA_ECONOMY_CODEX_DB_PATH"] ?? DEFAULT_CODEX_DB_PATH;
+  return process.env["HASNA_ECONOMY_CODEX_DB_PATH"] ?? agentPaths().codexDb;
 }
 function codexConfigPath() {
-  return process.env["HASNA_ECONOMY_CODEX_CONFIG_PATH"] ?? DEFAULT_CODEX_CONFIG_PATH;
+  return process.env["HASNA_ECONOMY_CODEX_CONFIG_PATH"] ?? agentPaths().codexConfig;
 }
 function codewithDbPath() {
-  return process.env["HASNA_ECONOMY_CODEWITH_DB_PATH"] ?? DEFAULT_CODEWITH_DB_PATH;
+  return process.env["HASNA_ECONOMY_CODEWITH_DB_PATH"] ?? join7(getHomeDir2(), ".codewith", "state_5.sqlite");
 }
 function codewithConfigPath() {
-  return process.env["HASNA_ECONOMY_CODEWITH_CONFIG_PATH"] ?? DEFAULT_CODEWITH_CONFIG_PATH;
+  return process.env["HASNA_ECONOMY_CODEWITH_CONFIG_PATH"] ?? join7(getHomeDir2(), ".codewith", "config.toml");
 }
 function codexSources() {
   const explicitCodexPath = process.env["HASNA_ECONOMY_CODEX_DB_PATH"];
@@ -9540,7 +9688,7 @@ function codexSources() {
     sessionPrefix: "codex",
     stateSource: "codex"
   }];
-  if (!explicitCodexPath || explicitCodewithPath) {
+  if (!explicitCodexPath && !process.env["CODEX_HOME"] || explicitCodewithPath) {
     sources.push({
       label: "Codewith",
       dbPath: codewithDbPath(),
@@ -9780,9 +9928,9 @@ init_database();
 init_pricing();
 import { readdirSync as readdirSync3, readFileSync as readFileSync4, existsSync as existsSync6, statSync as statSync4 } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join7, basename as basename3 } from "path";
-var DEFAULT_GEMINI_TMP_DIR = join7(homedir5(), ".gemini", "tmp");
-var DEFAULT_GEMINI_HISTORY_DIR = join7(homedir5(), ".gemini", "history");
+import { join as join8, basename as basename3 } from "path";
+var DEFAULT_GEMINI_TMP_DIR = join8(homedir5(), ".gemini", "tmp");
+var DEFAULT_GEMINI_HISTORY_DIR = join8(homedir5(), ".gemini", "history");
 function geminiTmpDir() {
   return process.env["HASNA_ECONOMY_GEMINI_TMP_DIR"] ?? DEFAULT_GEMINI_TMP_DIR;
 }
@@ -9804,7 +9952,7 @@ function listProjectDirs(...roots) {
     try {
       for (const entry of readdirSync3(root, { withFileTypes: true })) {
         if (entry.isDirectory())
-          dirs.add(join7(root, entry.name));
+          dirs.add(join8(root, entry.name));
       }
     } catch {
       collectionProblem("failed", "source_unreadable");
@@ -9817,7 +9965,7 @@ function projectRoot(projectDir, chatData) {
     return chatData.projectPath;
   if (chatData.project_path)
     return chatData.project_path;
-  const rootFile = join7(projectDir, ".project_root");
+  const rootFile = join8(projectDir, ".project_root");
   try {
     if (existsSync6(rootFile))
       return readFileSync4(rootFile, "utf-8").trim();
@@ -9842,12 +9990,12 @@ async function ingestGemini(db, verbose) {
   const account = await resolveAccountForAgent("gemini");
   const projectDirs = listProjectDirs(tmpDir, historyDir);
   for (const projectDir of projectDirs) {
-    const chatsDir = join7(projectDir, "chats");
+    const chatsDir = join8(projectDir, "chats");
     if (!existsSync6(chatsDir))
       continue;
     let chatFiles = [];
     try {
-      chatFiles = readdirSync3(chatsDir).filter((f) => f.endsWith(".json")).map((f) => join7(chatsDir, f));
+      chatFiles = readdirSync3(chatsDir).filter((f) => f.endsWith(".json")).map((f) => join8(chatsDir, f));
     } catch {
       collectionProblem("failed", "source_unreadable");
       continue;
@@ -9959,13 +10107,13 @@ init_database();
 init_pricing();
 import { existsSync as existsSync7, readFileSync as readFileSync5, readdirSync as readdirSync4, statSync as statSync5 } from "fs";
 import { homedir as homedir6 } from "os";
-import { join as join8 } from "path";
-var OPENCODE_STORAGE = join8(homedir6(), ".local", "share", "opencode", "storage");
+import { join as join9 } from "path";
+var OPENCODE_STORAGE = join9(homedir6(), ".local", "share", "opencode", "storage");
 function walkJsonFiles(dir, acc = []) {
   if (!existsSync7(dir))
     return acc;
   for (const entry of readdirSync4(dir, { withFileTypes: true })) {
-    const p = join8(dir, entry.name);
+    const p = join9(dir, entry.name);
     if (entry.isDirectory())
       walkJsonFiles(p, acc);
     else if (entry.name.endsWith(".json"))
@@ -9985,7 +10133,7 @@ function parseSessionIdFromPath(filePath) {
   return null;
 }
 async function ingestOpenCode(db, verbose = false, sourceDir = OPENCODE_STORAGE) {
-  const messageDir = join8(sourceDir, "message");
+  const messageDir = join9(sourceDir, "message");
   if (!existsSync7(messageDir))
     collectionProblem("missing", "source_missing");
   const files = walkJsonFiles(messageDir);
@@ -10180,13 +10328,13 @@ async function ingestCursor(db, verbose = false) {
 init_database();
 import { existsSync as existsSync8, readFileSync as readFileSync6, readdirSync as readdirSync5, statSync as statSync6 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join9 } from "path";
-var PI_SESSION_DIR = process.env["PI_CODING_AGENT_SESSION_DIR"] ?? join9(homedir7(), ".pi", "agent", "sessions");
+import { join as join10 } from "path";
+var PI_SESSION_DIR = process.env["PI_CODING_AGENT_SESSION_DIR"] ?? join10(homedir7(), ".pi", "agent", "sessions");
 function walkSessions(dir, acc = []) {
   if (!existsSync8(dir))
     return acc;
   for (const entry of readdirSync5(dir, { withFileTypes: true })) {
-    const p = join9(dir, entry.name);
+    const p = join10(dir, entry.name);
     if (entry.isDirectory())
       walkSessions(p, acc);
     else if (entry.name.endsWith(".json"))
@@ -10287,8 +10435,8 @@ async function ingestPi(db, verbose = false, sourceDir = PI_SESSION_DIR) {
 init_database();
 import { existsSync as existsSync9, statSync as statSync7 } from "fs";
 import { homedir as homedir8 } from "os";
-import { join as join10 } from "path";
-var HERMES_DB = join10(homedir8(), ".hermes", "state.db");
+import { join as join11 } from "path";
+var HERMES_DB = join11(homedir8(), ".hermes", "state.db");
 async function ingestHermes(db, verbose = false, sourcePath = HERMES_DB) {
   if (!existsSync9(sourcePath)) {
     collectionProblem("missing", "source_missing");
@@ -10358,7 +10506,7 @@ init_database();
 init_pricing();
 import { existsSync as existsSync10 } from "fs";
 import { homedir as homedir9 } from "os";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { homedir as pathsResolverHomedir2 } from "os";
 import { join as pathsResolverJoin2 } from "path";
 var PATHS_RESOLVER_KIND_ENV2 = {
@@ -10425,8 +10573,8 @@ function defaultLoopsDbPath() {
     app: "loops",
     home: process.env["HOME"] || process.env["USERPROFILE"] || undefined
   });
-  const legacy = join11(process.env["HOME"] || process.env["USERPROFILE"] || homedir9(), ".hasna", "loops", "loops.db");
-  return existsSync10(join11(resolved, "loops.db")) ? join11(resolved, "loops.db") : legacy;
+  const legacy = join12(process.env["HOME"] || process.env["USERPROFILE"] || homedir9(), ".hasna", "loops", "loops.db");
+  return existsSync10(join12(resolved, "loops.db")) ? join12(resolved, "loops.db") : legacy;
 }
 function loopsDbPath() {
   return process.env["HASNA_ECONOMY_LOOPS_DB_PATH"] ?? defaultLoopsDbPath();
@@ -10610,33 +10758,6 @@ async function ingestLoops(db, verbose = false) {
 
 // src/ingest/claude-quota.ts
 import { existsSync as existsSync11, readFileSync as readFileSync7 } from "fs";
-
-// src/lib/paths.ts
-import { homedir as homedir10 } from "os";
-import { join as join12 } from "path";
-function getHomeDir2() {
-  return process.env["USERPROFILE"] ?? process.env["HOME"] ?? homedir10();
-}
-function agentPaths() {
-  const home = getHomeDir2();
-  return {
-    claudeProjects: join12(home, ".claude", "projects"),
-    claudeCredentials: join12(home, ".claude", ".credentials.json"),
-    takumiProjects: join12(home, ".takumi", "projects"),
-    codexDir: join12(home, ".codex"),
-    codexDb: join12(home, ".codex", "state_5.sqlite"),
-    codexAuth: join12(home, ".codex", "auth.json"),
-    codexConfig: join12(home, ".codex", "config.toml"),
-    geminiTmp: join12(home, ".gemini", "tmp"),
-    geminiHistory: join12(home, ".gemini", "history"),
-    opencodeMessages: join12(home, ".local", "share", "opencode", "storage", "message"),
-    piSessions: join12(home, ".pi", "agent", "sessions"),
-    hermesDir: join12(home, ".hermes"),
-    hermesDb: join12(home, ".hermes", "state.db")
-  };
-}
-
-// src/ingest/claude-quota.ts
 var USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
 var OAUTH_BETA = "oauth-2025-04-20";
 function readClaudeToken() {