@kaitranntt/ccs 8.2.0 → 8.3.0-dev.1

package/dist/web-server/usage/bar-analytics.js

@@ -0,0 +1,315 @@
+"use strict";
+/**
+ * Bar Analytics Aggregator
+ *
+ * Pure functions that roll up the flat CliproxyUsageHistoryDetail array (the
+ * same snapshot the bar already loads for per-account cost) into the small,
+ * glanceable analytics the menu bar surfaces: today / 7-day / 30-day spend,
+ * a 7-day cost sparkline, and the top models by spend.
+ *
+ * Kept dependency-free and deterministic (the reference "now" is injected) so
+ * it is trivially unit-testable and cheap enough to run on every bar open.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computeBarAnalyticsFromDaily = exports.computeBarAnalytics = exports.localDayKey = void 0;
+// 30-day trailing window: gives a non-empty sparkline shape even when the last
+// 7 days are zero, so a stale-but-real history doesn't read as a broken chart.
+const SPARKLINE_DAYS = 30;
+const TOP_MODELS_LIMIT = 5;
+/** Local-time YYYY-MM-DD key for a Date (matches the user's calendar day). */
+function localDayKey(d) {
+    const y = d.getFullYear();
+    const m = String(d.getMonth() + 1).padStart(2, '0');
+    const day = String(d.getDate()).padStart(2, '0');
+    return `${y}-${m}-${day}`;
+}
+exports.localDayKey = localDayKey;
+/**
+ * Local-time YYYY-MM key for a Date. Local (not a UTC ISO slice) so it matches
+ * the local-day semantics of `dayDelta`/`localDayKey` — a record near midnight
+ * lands in the same month the user sees on their calendar.
+ */
+function localMonthKey(d) {
+    const y = d.getFullYear();
+    const m = String(d.getMonth() + 1).padStart(2, '0');
+    return `${y}-${m}`;
+}
+/** Whole-day difference (a - b) in local days, via midnight-anchored dates. */
+function dayDelta(a, b) {
+    const da = new Date(a.getFullYear(), a.getMonth(), a.getDate());
+    const db = new Date(b.getFullYear(), b.getMonth(), b.getDate());
+    return Math.round((da.getTime() - db.getTime()) / 86400000);
+}
+/**
+ * Roll the raw details into the bar analytics payload, relative to `now`.
+ * Failed requests are excluded from spend (they carry no real cost).
+ */
+function computeBarAnalytics(details, now) {
+    const today = { cost: 0, requests: 0 };
+    const last7d = { cost: 0, requests: 0 };
+    const last30d = { cost: 0, requests: 0 };
+    const monthToDate = { cost: 0, requests: 0 };
+    const allTime = { cost: 0, requests: 0 };
+    // Current local calendar month — records keyed to it feed month-to-date.
+    const currentMonth = localMonthKey(now);
+    // Seed the sparkline with the trailing 7 local days (zero-filled, ordered).
+    const dayBuckets = new Map();
+    for (let i = SPARKLINE_DAYS - 1; i >= 0; i--) {
+        const d = new Date(now.getFullYear(), now.getMonth(), now.getDate() - i);
+        dayBuckets.set(localDayKey(d), { date: localDayKey(d), cost: 0, requests: 0 });
+    }
+    // Track per-model spend over both the trailing 30 days and all-time so we can
+    // show recent leaders when fresh, and lifetime leaders when the proxy has
+    // simply been idle lately.
+    const model30d = new Map();
+    const modelAll = new Map();
+    const bump = (map, model, cost, requests) => {
+        const existing = map.get(model);
+        if (existing) {
+            existing.cost += cost;
+            existing.requests += requests;
+        }
+        else {
+            map.set(model, { model, cost, requests });
+        }
+    };
+    // Epoch ms of the most recent non-failed record, tracked inside the single
+    // loop the function already runs (O(1) extra per iteration, no new I/O).
+    let lastActivityMs = -Infinity;
+    for (const detail of details) {
+        if (detail.failed)
+            continue;
+        const ts = new Date(detail.timestamp);
+        if (Number.isNaN(ts.getTime()))
+            continue;
+        const delta = dayDelta(now, ts); // 0 = today, 1 = yesterday, …
+        if (delta < 0)
+            continue; // ignore future-dated noise
+        if (ts.getTime() > lastActivityMs)
+            lastActivityMs = ts.getTime();
+        const cost = Number.isFinite(detail.cost) ? detail.cost : 0;
+        const requests = Number.isFinite(detail.requestCount) ? detail.requestCount : 0;
+        allTime.cost += cost;
+        allTime.requests += requests;
+        bump(modelAll, detail.model, cost, requests);
+        if (localMonthKey(ts) === currentMonth) {
+            monthToDate.cost += cost;
+            monthToDate.requests += requests;
+        }
+        if (delta === 0) {
+            today.cost += cost;
+            today.requests += requests;
+        }
+        // Window math stays 7-day; only the sparkline bucket fill widens to 30.
+        if (delta < 7) {
+            last7d.cost += cost;
+            last7d.requests += requests;
+        }
+        if (delta < SPARKLINE_DAYS) {
+            const bucket = dayBuckets.get(localDayKey(ts));
+            if (bucket) {
+                bucket.cost += cost;
+                bucket.requests += requests;
+            }
+        }
+        if (delta < 30) {
+            last30d.cost += cost;
+            last30d.requests += requests;
+            bump(model30d, detail.model, cost, requests);
+        }
+    }
+    const lastActivityAt = lastActivityMs === -Infinity ? null : new Date(lastActivityMs).toISOString();
+    const daysSinceLastActivity = lastActivityAt === null ? null : dayDelta(now, new Date(lastActivityAt));
+    // Prefer recent leaders; fall back to lifetime when the last 30 days are idle.
+    const recentHasData = last30d.cost > 0 || last30d.requests > 0;
+    const sourceMap = recentHasData ? model30d : modelAll;
+    const topModels = Array.from(sourceMap.values())
+        .filter((m) => m.cost > 0 || m.requests > 0)
+        .sort((a, b) => b.cost - a.cost)
+        .slice(0, TOP_MODELS_LIMIT);
+    return {
+        today,
+        last7d,
+        last30d,
+        monthToDate,
+        allTime,
+        byDay: Array.from(dayBuckets.values()),
+        topModels,
+        topModelsWindow: recentHasData ? '30d' : 'all',
+        // The snapshot-detail path has no surface attribution; the daily path does.
+        bySurface: [],
+        lastActivityAt,
+        daysSinceLastActivity,
+        hasRecentData: recentHasData,
+        generatedAt: now.toISOString(),
+    };
+}
+exports.computeBarAnalytics = computeBarAnalytics;
+// Maps a raw usage-pipeline `source` to the label shown in the bar. Unknown
+// sources fall through to their raw key so a new collector is never silently
+// dropped — it just shows un-prettified until added here.
+const SURFACE_LABELS = {
+    'custom-parser': 'Claude Code',
+    'codex-native': 'Codex',
+    'droid-native': 'Droid',
+    cliproxy: 'CLIProxy',
+};
+/** Human-friendly surface name for a raw usage `source` key. */
+function surfaceLabel(source) {
+    if (SURFACE_LABELS[source])
+        return SURFACE_LABELS[source];
+    return source || 'Other';
+}
+/** Local-midnight Date from a YYYY-MM-DD day key (calendar-day anchored). */
+function dateFromDayKey(key) {
+    const [y, m, d] = key.split('-').map((n) => parseInt(n, 10));
+    return new Date(y, (m || 1) - 1, d || 1);
+}
+/**
+ * Roll the merged, multi-source usage aggregates into the bar analytics payload.
+ *
+ * Unlike `computeBarAnalytics` (which reads only the CLIProxy snapshot — frozen
+ * whenever the proxy restarts), this consumes the same merged daily/hourly data
+ * the dashboard uses, so recent activity from Claude Code, Codex, Droid, and the
+ * CLIProxy router all show up. `daily` carries cost+models+source; `hourly`
+ * carries the request counts (daily aggregates don't), so the two are combined:
+ * cost/models/surface-cost from daily, request counts from hourly.
+ */
+function computeBarAnalyticsFromDaily(daily, hourly, now) {
+    const today = { cost: 0, requests: 0 };
+    const last7d = { cost: 0, requests: 0 };
+    const last30d = { cost: 0, requests: 0 };
+    const monthToDate = { cost: 0, requests: 0 };
+    const allTime = { cost: 0, requests: 0 };
+    // Daily keys (YYYY-MM-DD) and hourly keys (YYYY-MM-DD HH:00) are already local,
+    // so slice(0,7) yields the local YYYY-MM to compare against the current month.
+    const currentMonth = localMonthKey(now);
+    const dayBuckets = new Map();
+    for (let i = SPARKLINE_DAYS - 1; i >= 0; i--) {
+        const d = new Date(now.getFullYear(), now.getMonth(), now.getDate() - i);
+        dayBuckets.set(localDayKey(d), { date: localDayKey(d), cost: 0, requests: 0 });
+    }
+    const model30d = new Map();
+    const modelAll = new Map();
+    const bumpModel = (map, model, cost) => {
+        const existing = map.get(model);
+        if (existing)
+            existing.cost += cost;
+        else
+            map.set(model, { model, cost, requests: 0 });
+    };
+    const surface30d = new Map();
+    const surfaceAll = new Map();
+    const bumpSurface = (map, source, cost, requests) => {
+        const existing = map.get(source);
+        if (existing) {
+            existing.cost += cost;
+            existing.requests += requests;
+        }
+        else {
+            map.set(source, { source, surface: surfaceLabel(source), cost, requests });
+        }
+    };
+    // Latest local-day with real activity (cost or requests), across both passes.
+    let lastActivityKey = null;
+    const touchActivity = (dayKey) => {
+        if (lastActivityKey === null || dayKey > lastActivityKey)
+            lastActivityKey = dayKey;
+    };
+    // Pass 1 — daily: cost, per-model spend, per-surface spend, sparkline cost.
+    for (const d of daily) {
+        if (!d || !d.date)
+            continue;
+        const delta = dayDelta(now, dateFromDayKey(d.date));
+        if (delta < 0)
+            continue; // ignore future-dated noise
+        const cost = Number.isFinite(d.totalCost) ? d.totalCost : Number.isFinite(d.cost) ? d.cost : 0;
+        const source = d.source || '';
+        allTime.cost += cost;
+        bumpSurface(surfaceAll, source, cost, 0);
+        for (const mb of d.modelBreakdowns || []) {
+            bumpModel(modelAll, mb.modelName, Number.isFinite(mb.cost) ? mb.cost : 0);
+        }
+        if (cost > 0)
+            touchActivity(d.date);
+        if (d.date.slice(0, 7) === currentMonth)
+            monthToDate.cost += cost;
+        if (delta === 0)
+            today.cost += cost;
+        if (delta < 7)
+            last7d.cost += cost;
+        if (delta < 30) {
+            last30d.cost += cost;
+            bumpSurface(surface30d, source, cost, 0);
+            for (const mb of d.modelBreakdowns || []) {
+                bumpModel(model30d, mb.modelName, Number.isFinite(mb.cost) ? mb.cost : 0);
+            }
+        }
+        if (delta < SPARKLINE_DAYS) {
+            const bucket = dayBuckets.get(d.date);
+            if (bucket)
+                bucket.cost += cost;
+        }
+    }
+    // Pass 2 — hourly: request counts (daily aggregates don't carry them).
+    for (const h of hourly) {
+        if (!h || !h.hour)
+            continue;
+        const dayKey = h.hour.slice(0, 10);
+        const delta = dayDelta(now, dateFromDayKey(dayKey));
+        if (delta < 0)
+            continue;
+        const requests = Number.isFinite(h.requestCount) ? h.requestCount : 0;
+        if (requests <= 0)
+            continue;
+        const source = h.source || '';
+        allTime.requests += requests;
+        bumpSurface(surfaceAll, source, 0, requests);
+        touchActivity(dayKey);
+        if (h.hour.slice(0, 7) === currentMonth)
+            monthToDate.requests += requests;
+        if (delta === 0)
+            today.requests += requests;
+        if (delta < 7)
+            last7d.requests += requests;
+        if (delta < 30) {
+            last30d.requests += requests;
+            bumpSurface(surface30d, source, 0, requests);
+        }
+        if (delta < SPARKLINE_DAYS) {
+            const bucket = dayBuckets.get(dayKey);
+            if (bucket)
+                bucket.requests += requests;
+        }
+    }
+    // Prefer recent leaders; fall back to lifetime when the last 30 days are idle.
+    const recentHasData = last30d.cost > 0 || last30d.requests > 0;
+    const topModels = Array.from((recentHasData ? model30d : modelAll).values())
+        .filter((m) => m.cost > 0 || m.requests > 0)
+        .sort((a, b) => b.cost - a.cost)
+        .slice(0, TOP_MODELS_LIMIT);
+    const bySurface = Array.from((recentHasData ? surface30d : surfaceAll).values())
+        .filter((s) => s.cost > 0 || s.requests > 0)
+        .sort((a, b) => b.cost - a.cost);
+    const lastActivityAt = lastActivityKey ? dateFromDayKey(lastActivityKey).toISOString() : null;
+    const daysSinceLastActivity = lastActivityKey
+        ? dayDelta(now, dateFromDayKey(lastActivityKey))
+        : null;
+    return {
+        today,
+        last7d,
+        last30d,
+        monthToDate,
+        allTime,
+        byDay: Array.from(dayBuckets.values()),
+        topModels,
+        topModelsWindow: recentHasData ? '30d' : 'all',
+        bySurface,
+        lastActivityAt,
+        daysSinceLastActivity,
+        hasRecentData: recentHasData,
+        generatedAt: now.toISOString(),
+    };
+}
+exports.computeBarAnalyticsFromDaily = computeBarAnalyticsFromDaily;
+//# sourceMappingURL=bar-analytics.js.map

package/dist/web-server/usage/bar-analytics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bar-analytics.js","sourceRoot":"","sources":["../../../src/web-server/usage/bar-analytics.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AA+EH,+EAA+E;AAC/E,+EAA+E;AAC/E,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,8EAA8E;AAC9E,SAAgB,WAAW,CAAC,CAAO;IACjC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;AAC5B,CAAC;AALD,kCAKC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,CAAO;IAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,CAAO,EAAE,CAAO;IAChC,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAChE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,QAAU,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CACjC,OAAqC,EACrC,GAAS;IAET,MAAM,KAAK,GAAuB,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAuB,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAuB,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC7D,MAAM,WAAW,GAAuB,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACjE,MAAM,OAAO,GAAuB,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAE7D,yEAAyE;IACzE,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAExC,4EAA4E;IAC5E,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IACtD,KAAK,IAAI,CAAC,GAAG,cAAc,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzE,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACtD,MAAM,IAAI,GAAG,CACX,GAAmC,EACnC,KAAa,EACb,IAAY,EACZ,QAAgB,EACV,EAAE;QACR,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC;YACtB,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC;IAEF,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,cAAc,GAAG,CAAC,QAAQ,CAAC;IAE/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM;YAAE,SAAS;QAC5B,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YAAE,SAAS;QAEzC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,8BAA8B;QAC/D,IAAI,KAAK,GAAG,CAAC;YAAE,SAAS,CAAC,4BAA4B;QAErD,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,cAAc;YAAE,cAAc,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAEjE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAEhF,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;QACrB,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC7B,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAE7C,IAAI,aAAa,CAAC,EAAE,CAAC,KAAK,YAAY,EAAE,CAAC;YACvC,WAAW,CAAC,IAAI,IAAI,IAAI,CAAC;YACzB,WAAW,CAAC,QAAQ,IAAI,QAAQ,CAAC;QACnC,CAAC;QAED,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC;YACnB,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC7B,CAAC;QACD,wEAAwE;QACxE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;YACpB,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;gBACpB,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;YACrB,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAC7B,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAClB,cAAc,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/E,MAAM,qBAAqB,GACzB,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAE3E,+EAA+E;IAC/E,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;SAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;SAC/B,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAE9B,OAAO;QACL,KAAK;QACL,MAAM;QACN,OAAO;QACP,WAAW;QACX,OAAO;QACP,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,SAAS;QACT,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;QAC9C,4EAA4E;QAC5E,SAAS,EAAE,EAAE;QACb,cAAc;QACd,qBAAqB;QACrB,aAAa,EAAE,aAAa;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;KAC/B,CAAC;AACJ,CAAC;AAtHD,kDAsHC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,0DAA0D;AAC1D,MAAM,cAAc,GAA2B;IAC7C,eAAe,EAAE,aAAa;IAC9B,cAAc,EAAE,OAAO;IACvB,cAAc,EAAE,OAAO;IACvB,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF,gEAAgE;AAChE,SAAS,YAAY,CAAC,MAAc;IAClC,IAAI,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,MAAM,IAAI,OAAO,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,4BAA4B,CAC1C,KAAmB,EACnB,MAAqB,EACrB,GAAS;IAET,MAAM,KAAK,GAAuB,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAuB,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAuB,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC7D,MAAM,WAAW,GAAuB,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACjE,MAAM,OAAO,GAAuB,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAE7D,gFAAgF;IAChF,+EAA+E;IAC/E,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAExC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IACtD,KAAK,IAAI,CAAC,GAAG,cAAc,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACzE,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACtD,MAAM,SAAS,GAAG,CAAC,GAAmC,EAAE,KAAa,EAAE,IAAY,EAAQ,EAAE;QAC3F,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,QAAQ;YAAE,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC;;YAC/B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC1D,MAAM,WAAW,GAAG,CAClB,GAAqC,EACrC,MAAc,EACd,IAAY,EACZ,QAAgB,EACV,EAAE;QACR,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC;YACtB,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC;IAEF,8EAA8E;IAC9E,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,MAAM,aAAa,GAAG,CAAC,MAAc,EAAQ,EAAE;QAC7C,IAAI,eAAe,KAAK,IAAI,IAAI,MAAM,GAAG,eAAe;YAAE,eAAe,GAAG,MAAM,CAAC;IACrF,CAAC,CAAC;IAEF,4EAA4E;IAC5E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,IAAI,KAAK,GAAG,CAAC;YAAE,SAAS,CAAC,4BAA4B;QACrD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;QAE9B,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;QACrB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzC,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;YACzC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,IAAI,GAAG,CAAC;YAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,YAAY;YAAE,WAAW,CAAC,IAAI,IAAI,IAAI,CAAC;QAElE,IAAI,KAAK,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC;QACpC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;QACnC,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;YACrB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACzC,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;gBACzC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QACD,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,MAAM;gBAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;QAClC,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,SAAS;QAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QACpD,IAAI,KAAK,GAAG,CAAC;YAAE,SAAS;QACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,YAAuB,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,IAAI,QAAQ,IAAI,CAAC;YAAE,SAAS;QAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;QAE9B,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC7B,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7C,aAAa,CAAC,MAAM,CAAC,CAAC;QAEtB,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,YAAY;YAAE,WAAW,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAE1E,IAAI,KAAK,KAAK,CAAC;YAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC5C,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC3C,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAC7B,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,MAAM;gBAAE,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;SACzE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;SAC/B,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;SAC7E,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAEnC,MAAM,cAAc,GAAG,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9F,MAAM,qBAAqB,GAAG,eAAe;QAC3C,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC;IAET,OAAO;QACL,KAAK;QACL,MAAM;QACN,OAAO;QACP,WAAW;QACX,OAAO;QACP,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,SAAS;QACT,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;QAC9C,SAAS;QACT,cAAc;QACd,qBAAqB;QACrB,aAAa,EAAE,aAAa;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;KAC/B,CAAC;AACJ,CAAC;AA9ID,oEA8IC"}

package/dist/web-server/usage/claude-native-credentials.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Native Claude Code credential reader.
+ *
+ * Reads the LOGGED-IN Claude Code OAuth token so the bar can show the user's
+ * own subscription quota (Max/Pro/Team) without going through CLIProxy-managed
+ * auth files.
+ *
+ * File-first, Keychain-fallback: we read ~/.claude/.credentials.json directly
+ * because hitting the macOS Keychain pops a permission dialog. The Keychain
+ * fallback is load-bearing on machines where Claude Code stores the token there
+ * instead of on disk, so it must be kept even though the file path is preferred.
+ *
+ * Only the user's own token is read here; the single read-only Anthropic usage
+ * endpoint is the only thing that ever sees it (see native-quota-collector).
+ */
+/// <reference types="node" />
+/// <reference types="node" />
+/// <reference types="node" />
+/** Shape of the relevant slice of ~/.claude/.credentials.json */
+export interface ClaudeNativeCredentials {
+    claudeAiOauth?: {
+        accessToken?: string;
+        subscriptionType?: string;
+        rateLimitTier?: string;
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+}
+/** Injectable seams so unit tests never touch the real fs/Keychain. */
+export interface CredentialReaderDeps {
+    platform?: NodeJS.Platform;
+    homedir?: string;
+    existsSyncImpl?: (p: string) => boolean;
+    readFileSyncImpl?: (p: string) => string;
+    execSyncImpl?: (cmd: string, opts: Record<string, unknown>) => string | Buffer;
+}
+/**
+ * Read the native Claude Code credentials.
+ *
+ * Order: the on-disk credentials file first (no prompt), then the macOS
+ * Keychain as a fallback. Returns null when neither source yields a parseable
+ * object.
+ */
+export declare function readClaudeCredentials(deps?: CredentialReaderDeps): ClaudeNativeCredentials | null;
+/** Pull the OAuth access token, or null when absent. */
+export declare function getAccessToken(creds: ClaudeNativeCredentials | null): string | null;
+/** Pull the subscription tier (e.g. "max" / "pro"), or null. */
+export declare function getSubscriptionTier(creds: ClaudeNativeCredentials | null): string | null;
+/**
+ * True when the credentials describe a real, entitled subscription.
+ *
+ * Gating on this BEFORE fetching means a free/logged-out user never spends a
+ * token call against the hostile usage endpoint and never gets a phantom row.
+ */
+export declare function hasSupportedSubscription(creds: ClaudeNativeCredentials | null): boolean;
+//# sourceMappingURL=claude-native-credentials.d.ts.map

package/dist/web-server/usage/claude-native-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-native-credentials.d.ts","sourceRoot":"","sources":["../../../src/web-server/usage/claude-native-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;;;;AAOH,iEAAiE;AACjE,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,EAAE;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IACxC,gBAAgB,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IACzC,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,GAAG,MAAM,CAAC;CAChF;AAuBD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,GAAE,oBAAyB,GAC9B,uBAAuB,GAAG,IAAI,CAmChC;AAED,wDAAwD;AACxD,wBAAgB,cAAc,CAAC,KAAK,EAAE,uBAAuB,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAGnF;AAED,gEAAgE;AAChE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,uBAAuB,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAGxF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,uBAAuB,GAAG,IAAI,GAAG,OAAO,CAYvF"}

package/dist/web-server/usage/claude-native-credentials.js

@@ -0,0 +1,140 @@
+"use strict";
+/**
+ * Native Claude Code credential reader.
+ *
+ * Reads the LOGGED-IN Claude Code OAuth token so the bar can show the user's
+ * own subscription quota (Max/Pro/Team) without going through CLIProxy-managed
+ * auth files.
+ *
+ * File-first, Keychain-fallback: we read ~/.claude/.credentials.json directly
+ * because hitting the macOS Keychain pops a permission dialog. The Keychain
+ * fallback is load-bearing on machines where Claude Code stores the token there
+ * instead of on disk, so it must be kept even though the file path is preferred.
+ *
+ * Only the user's own token is read here; the single read-only Anthropic usage
+ * endpoint is the only thing that ever sees it (see native-quota-collector).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasSupportedSubscription = exports.getSubscriptionTier = exports.getAccessToken = exports.readClaudeCredentials = void 0;
+const node_fs_1 = require("node:fs");
+const node_child_process_1 = require("node:child_process");
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+const KEYCHAIN_SERVICE = 'Claude Code-credentials';
+const KEYCHAIN_TIMEOUT_MS = 5000;
+/** Subscription types that mean "no real subscription" -> skip the fetch. */
+const UNSUPPORTED_SUBSCRIPTION_TYPES = new Set(['', 'free', 'none']);
+/** rateLimitTier values that imply an entitled subscription. */
+const SUPPORTED_RATE_LIMIT_TIER = /claude|max|pro|team|enterprise/;
+function parseCredentials(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+            return parsed;
+        }
+    }
+    catch {
+        // fall through
+    }
+    return null;
+}
+/**
+ * Read the native Claude Code credentials.
+ *
+ * Order: the on-disk credentials file first (no prompt), then the macOS
+ * Keychain as a fallback. Returns null when neither source yields a parseable
+ * object.
+ */
+function readClaudeCredentials(deps = {}) {
+    const platform = deps.platform ?? os.platform();
+    const homedir = deps.homedir ?? os.homedir();
+    const existsImpl = deps.existsSyncImpl ?? node_fs_1.existsSync;
+    const readImpl = deps.readFileSyncImpl ?? ((p) => (0, node_fs_1.readFileSync)(p, 'utf8'));
+    const execImpl = deps.execSyncImpl ?? node_child_process_1.execSync;
+    const credentialsPath = path.join(homedir, '.claude', '.credentials.json');
+    if (existsImpl(credentialsPath)) {
+        try {
+            const parsed = parseCredentials(readImpl(credentialsPath));
+            if (parsed)
+                return parsed;
+        }
+        catch {
+            // fall through to Keychain
+        }
+    }
+    if (platform === 'darwin') {
+        try {
+            const out = execImpl(`security find-generic-password -s "${KEYCHAIN_SERVICE}" -w`, {
+                timeout: KEYCHAIN_TIMEOUT_MS,
+                encoding: 'utf8',
+                stdio: ['pipe', 'pipe', 'ignore'],
+            });
+            const raw = (typeof out === 'string' ? out : out.toString('utf8')).trim();
+            if (raw) {
+                const parsed = parseCredentials(raw);
+                if (parsed)
+                    return parsed;
+            }
+        }
+        catch {
+            // no Keychain entry / access denied -> null
+        }
+    }
+    return null;
+}
+exports.readClaudeCredentials = readClaudeCredentials;
+/** Pull the OAuth access token, or null when absent. */
+function getAccessToken(creds) {
+    const token = creds?.claudeAiOauth?.accessToken;
+    return typeof token === 'string' && token.trim().length > 0 ? token : null;
+}
+exports.getAccessToken = getAccessToken;
+/** Pull the subscription tier (e.g. "max" / "pro"), or null. */
+function getSubscriptionTier(creds) {
+    const tier = creds?.claudeAiOauth?.subscriptionType;
+    return typeof tier === 'string' && tier.trim().length > 0 ? tier.trim() : null;
+}
+exports.getSubscriptionTier = getSubscriptionTier;
+/**
+ * True when the credentials describe a real, entitled subscription.
+ *
+ * Gating on this BEFORE fetching means a free/logged-out user never spends a
+ * token call against the hostile usage endpoint and never gets a phantom row.
+ */
+function hasSupportedSubscription(creds) {
+    const subscriptionType = String(creds?.claudeAiOauth?.subscriptionType ?? '')
+        .trim()
+        .toLowerCase();
+    if (subscriptionType && !UNSUPPORTED_SUBSCRIPTION_TYPES.has(subscriptionType)) {
+        return true;
+    }
+    const rateLimitTier = String(creds?.claudeAiOauth?.rateLimitTier ?? '')
+        .trim()
+        .toLowerCase();
+    return SUPPORTED_RATE_LIMIT_TIER.test(rateLimitTier);
+}
+exports.hasSupportedSubscription = hasSupportedSubscription;
+//# sourceMappingURL=claude-native-credentials.js.map

package/dist/web-server/usage/claude-native-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-native-credentials.js","sourceRoot":"","sources":["../../../src/web-server/usage/claude-native-credentials.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,qCAAmD;AACnD,2DAA8C;AAC9C,4CAA8B;AAC9B,gDAAkC;AAsBlC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AACnD,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,6EAA6E;AAC7E,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAErE,gEAAgE;AAChE,MAAM,yBAAyB,GAAG,gCAAgC,CAAC;AAEnE,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,MAAiC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,qBAAqB,CACnC,OAA6B,EAAE;IAE/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,IAAI,oBAAU,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAA,sBAAY,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,IAAI,6BAAQ,CAAC;IAE/C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC3E,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;YAC3D,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,sCAAsC,gBAAgB,MAAM,EAAE;gBACjF,OAAO,EAAE,mBAAmB;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;aAClC,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1E,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AArCD,sDAqCC;AAED,wDAAwD;AACxD,SAAgB,cAAc,CAAC,KAAqC;IAClE,MAAM,KAAK,GAAG,KAAK,EAAE,aAAa,EAAE,WAAW,CAAC;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAHD,wCAGC;AAED,gEAAgE;AAChE,SAAgB,mBAAmB,CAAC,KAAqC;IACvE,MAAM,IAAI,GAAG,KAAK,EAAE,aAAa,EAAE,gBAAgB,CAAC;IACpD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAHD,kDAGC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,KAAqC;IAC5E,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,gBAAgB,IAAI,EAAE,CAAC;SAC1E,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IACjB,IAAI,gBAAgB,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,aAAa,IAAI,EAAE,CAAC;SACpE,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IACjB,OAAO,yBAAyB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AACvD,CAAC;AAZD,4DAYC"}

package/dist/web-server/usage/cliproxy-snapshot-reader.d.ts

@@ -0,0 +1,24 @@
+/**
+ * CLIProxy Snapshot Reader
+ *
+ * Lightweight reader that extracts the flat CliproxyUsageHistoryDetail array
+ * from the persisted snapshot at ~/.ccs/cache/cliproxy-usage/latest.json.
+ *
+ * This is a read-only helper — it never writes or syncs. The syncer owns
+ * the write path; this module owns the "give me the raw details" path
+ * needed by the bar-routes aggregator for per-account cost mapping.
+ */
+import { type CliproxyUsageHistoryDetail } from './cliproxy-usage-transformer';
+/**
+ * Read the persisted CLIProxy usage snapshot and return its raw detail records.
+ *
+ * Returns an empty array when:
+ * - The snapshot file does not exist
+ * - The file cannot be parsed as JSON
+ * - The snapshot version is unrecognised
+ * - The details array is absent or malformed
+ *
+ * Individual malformed detail records are silently dropped (normalizer returns null).
+ */
+export declare function loadCliproxySnapshotDetails(): Promise<CliproxyUsageHistoryDetail[]>;
+//# sourceMappingURL=cliproxy-snapshot-reader.d.ts.map

package/dist/web-server/usage/cliproxy-snapshot-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliproxy-snapshot-reader.d.ts","sourceRoot":"","sources":["../../../src/web-server/usage/cliproxy-snapshot-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,8BAA8B,CAAC;AAQtC;;;;;;;;;;GAUG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,0BAA0B,EAAE,CAAC,CA4BzF"}

package/dist/web-server/usage/cliproxy-snapshot-reader.js

@@ -0,0 +1,82 @@
+"use strict";
+/**
+ * CLIProxy Snapshot Reader
+ *
+ * Lightweight reader that extracts the flat CliproxyUsageHistoryDetail array
+ * from the persisted snapshot at ~/.ccs/cache/cliproxy-usage/latest.json.
+ *
+ * This is a read-only helper — it never writes or syncs. The syncer owns
+ * the write path; this module owns the "give me the raw details" path
+ * needed by the bar-routes aggregator for per-account cost mapping.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadCliproxySnapshotDetails = void 0;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const config_loader_facade_1 = require("../../config/config-loader-facade");
+const cliproxy_usage_transformer_1 = require("./cliproxy-usage-transformer");
+const SUPPORTED_SNAPSHOT_VERSION = 3;
+function getLatestSnapshotPath() {
+    return path.join((0, config_loader_facade_1.getCcsDir)(), 'cache', 'cliproxy-usage', 'latest.json');
+}
+/**
+ * Read the persisted CLIProxy usage snapshot and return its raw detail records.
+ *
+ * Returns an empty array when:
+ * - The snapshot file does not exist
+ * - The file cannot be parsed as JSON
+ * - The snapshot version is unrecognised
+ * - The details array is absent or malformed
+ *
+ * Individual malformed detail records are silently dropped (normalizer returns null).
+ */
+async function loadCliproxySnapshotDetails() {
+    const snapshotPath = getLatestSnapshotPath();
+    try {
+        if (!fs.existsSync(snapshotPath)) {
+            return [];
+        }
+        const raw = fs.readFileSync(snapshotPath, 'utf-8');
+        const snapshot = JSON.parse(raw);
+        if (snapshot.version !== SUPPORTED_SNAPSHOT_VERSION) {
+            // Legacy / future snapshot — skip rather than mis-interpret
+            return [];
+        }
+        const details = snapshot.details;
+        if (!Array.isArray(details)) {
+            return [];
+        }
+        return details
+            .map((item) => (0, cliproxy_usage_transformer_1.normalizeCliproxyUsageHistoryDetail)(item))
+            .filter((item) => item !== null);
+    }
+    catch {
+        // IO / parse errors are non-fatal — bar glance degrades gracefully
+        return [];
+    }
+}
+exports.loadCliproxySnapshotDetails = loadCliproxySnapshotDetails;
+//# sourceMappingURL=cliproxy-snapshot-reader.js.map

package/dist/web-server/usage/cliproxy-snapshot-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliproxy-snapshot-reader.js","sourceRoot":"","sources":["../../../src/web-server/usage/cliproxy-snapshot-reader.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,4CAA8B;AAC9B,gDAAkC;AAClC,4EAA8D;AAC9D,6EAGsC;AAEtC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAErC,SAAS,qBAAqB;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAA,gCAAS,GAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,2BAA2B;IAC/C,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC;IAE7C,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAE5D,IAAI,QAAQ,CAAC,OAAO,KAAK,0BAA0B,EAAE,CAAC;YACpD,4DAA4D;YAC5D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,OAAO;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,gEAAmC,EAAC,IAAI,CAAC,CAAC;aACxD,MAAM,CAAC,CAAC,IAAI,EAAsC,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AA5BD,kEA4BC"}