@narumitw/pi-usage 0.61.2 → 0.63.0

package/dist/chunks/openai-companion-auth-6VLPFVHF.ts

@@ -0,0 +1,83 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+import {
+  adapterForProvider,
+  fallbackOAuthCredentialCandidates,
+  fingerprintResolvedAuth,
+  openAIAuthAccessToken,
+  resolveUsageAuth
+} from "./chunk-ENCC7IBP.ts";
+
+// src/openai-companion-auth.ts
+async function resolveOpenAICompanionAuth(ctx, native, salt, credentialReader, candidateReader) {
+  const unavailable = () => ({
+    ...native,
+    fingerprint: fingerprintResolvedAuth(
+      { apiKey: JSON.stringify([native.fingerprint, native.openaiClientId, null]) },
+      salt
+    )
+  });
+  if (candidateReader?.waitUntilReady && !await candidateReader.waitUntilReady(ctx, "openai-codex")) {
+    throw new Error("Companion Codex OAuth credential readiness failed closed.");
+  }
+  const adapter = adapterForProvider("openai-codex");
+  if (!adapter) throw new Error("Companion Codex usage support is unavailable.");
+  const companion = await resolveUsageAuth(ctx, adapter, salt, credentialReader);
+  if (!companion) return unavailable();
+  if (companion.source !== "OAuth")
+    throw new Error("Companion usage requires /login openai-codex OAuth, not an API key.");
+  const access = openAIAuthAccessToken(companion.auth);
+  if (ctx.model?.provider === "openai-codex") {
+    const selected = await ctx.modelRegistry.getApiKeyAndHeaders(ctx.model);
+    if (!selected.ok || selected.baseUrl && new URL(selected.baseUrl).origin !== "https://chatgpt.com" || openAIAuthAccessToken(selected) !== access) {
+      throw new Error("Selected Codex model authorization does not match the companion OAuth credential.");
+    }
+  }
+  if (!access || access !== openAIAuthAccessToken(companion)) {
+    throw new Error("Companion Codex runtime authorization did not match its OAuth credential.");
+  }
+  const accountId = codexAccountId(access);
+  if (!accountId) throw new Error("Companion Codex token did not contain a valid account ID.");
+  const offered = candidateReader ? await candidateReader(ctx, "openai-codex") : fallbackOAuthCredentialCandidates("openai-codex", credentialReader);
+  if (!offered.ok) throw new Error("Companion Codex OAuth credential discovery failed closed.");
+  const matches = /* @__PURE__ */ new Set();
+  for (const candidate of offered.candidates) {
+    const credential = object(candidate);
+    if (credential?.type !== "oauth" || credential.access !== access) continue;
+    if (credential.accountId !== accountId || typeof credential.refresh !== "string" || !credential.refresh || typeof credential.expires !== "number" || !Number.isFinite(credential.expires)) {
+      throw new Error("The matching companion Codex OAuth credential was incomplete or had a different account ID.");
+    }
+    matches.add(credential.refresh);
+  }
+  if (matches.size !== 1) throw new Error("Companion Codex OAuth must uniquely match the fresh runtime credential.");
+  const headers = { Authorization: `Bearer ${access}`, "ChatGPT-Account-Id": accountId };
+  return {
+    ...native,
+    openaiCompanion: { headers },
+    fingerprint: fingerprintResolvedAuth(
+      { apiKey: JSON.stringify([native.fingerprint, native.openaiClientId, companion.fingerprint, headers]) },
+      salt
+    ),
+    secrets: [
+      .../* @__PURE__ */ new Set([...native.secrets, ...companion.secrets, ...matches, access, accountId, headers.Authorization])
+    ]
+  };
+}
+function codexAccountId(access) {
+  try {
+    const parts = access.split(".");
+    if (parts.length !== 3 || !parts[1]) return void 0;
+    const payload = object(JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8")));
+    const account = object(payload?.["https://api.openai.com/auth"])?.chatgpt_account_id;
+    return typeof account === "string" && account.length > 0 && account.length <= 512 && /^[\x21-\x7e]+$/u.test(account) ? account : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function object(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+export {
+  resolveOpenAICompanionAuth
+};
+//# sourceMappingURL=openai-companion-auth-6VLPFVHF.ts.map

package/dist/chunks/openai-companion-auth-6VLPFVHF.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/openai-companion-auth.ts"],
+  "sourcesContent": ["import type { ExtensionContext } from \"@earendil-works/pi-coding-agent\";\nimport { fingerprintResolvedAuth } from \"./core.js\";\nimport { fallbackOAuthCredentialCandidates, type OAuthCredentialCandidateReader } from \"./oauth-credential-source.js\";\nimport { openAIAuthAccessToken } from \"./providers/openai-chatgpt.js\";\nimport { adapterForProvider, resolveUsageAuth } from \"./query.js\";\nimport type { ResolvedUsageAuth } from \"./types.js\";\n\n// A native app registration is routing metadata, not cryptographic same-account proof.\n// Keep this read-only boundary separate from legacy Codex querying and reset mutation policy.\nexport async function resolveOpenAICompanionAuth(\n  ctx: ExtensionContext,\n  native: ResolvedUsageAuth,\n  salt: Uint8Array,\n  credentialReader: (providerId: string) => unknown,\n  candidateReader?: OAuthCredentialCandidateReader,\n): Promise<ResolvedUsageAuth> {\n  const unavailable = () => ({\n    ...native,\n    fingerprint: fingerprintResolvedAuth(\n      { apiKey: JSON.stringify([native.fingerprint, native.openaiClientId, null]) },\n      salt,\n    ),\n  });\n  if (candidateReader?.waitUntilReady && !(await candidateReader.waitUntilReady(ctx, \"openai-codex\"))) {\n    throw new Error(\"Companion Codex OAuth credential readiness failed closed.\");\n  }\n  const adapter = adapterForProvider(\"openai-codex\");\n  if (!adapter) throw new Error(\"Companion Codex usage support is unavailable.\");\n  const companion = await resolveUsageAuth(ctx, adapter, salt, credentialReader);\n  if (!companion) return unavailable();\n  if (companion.source !== \"OAuth\")\n    throw new Error(\"Companion usage requires /login openai-codex OAuth, not an API key.\");\n  // Legacy querying is more permissive. Enforce explicit Authorization removals and duplicates\n  // against preserved fresh provider auth before using its normalized request headers.\n  const access = openAIAuthAccessToken(companion.auth);\n  if (ctx.model?.provider === \"openai-codex\") {\n    const selected = await ctx.modelRegistry.getApiKeyAndHeaders(ctx.model);\n    if (\n      !selected.ok ||\n      (selected.baseUrl && new URL(selected.baseUrl).origin !== \"https://chatgpt.com\") ||\n      openAIAuthAccessToken(selected) !== access\n    ) {\n      throw new Error(\"Selected Codex model authorization does not match the companion OAuth credential.\");\n    }\n  }\n  if (!access || access !== openAIAuthAccessToken(companion)) {\n    throw new Error(\"Companion Codex runtime authorization did not match its OAuth credential.\");\n  }\n  const accountId = codexAccountId(access);\n  if (!accountId) throw new Error(\"Companion Codex token did not contain a valid account ID.\");\n  const offered = candidateReader\n    ? await candidateReader(ctx, \"openai-codex\")\n    : fallbackOAuthCredentialCandidates(\"openai-codex\", credentialReader);\n  if (!offered.ok) throw new Error(\"Companion Codex OAuth credential discovery failed closed.\");\n  const matches = new Set<string>();\n  for (const candidate of offered.candidates) {\n    const credential = object(candidate);\n    if (credential?.type !== \"oauth\" || credential.access !== access) continue;\n    if (\n      credential.accountId !== accountId ||\n      typeof credential.refresh !== \"string\" ||\n      !credential.refresh ||\n      typeof credential.expires !== \"number\" ||\n      !Number.isFinite(credential.expires)\n    ) {\n      throw new Error(\"The matching companion Codex OAuth credential was incomplete or had a different account ID.\");\n    }\n    matches.add(credential.refresh);\n  }\n  if (matches.size !== 1) throw new Error(\"Companion Codex OAuth must uniquely match the fresh runtime credential.\");\n  const headers = { Authorization: `Bearer ${access}`, \"ChatGPT-Account-Id\": accountId };\n  return {\n    ...native,\n    openaiCompanion: { headers },\n    fingerprint: fingerprintResolvedAuth(\n      { apiKey: JSON.stringify([native.fingerprint, native.openaiClientId, companion.fingerprint, headers]) },\n      salt,\n    ),\n    secrets: [\n      ...new Set([...native.secrets, ...companion.secrets, ...matches, access, accountId, headers.Authorization]),\n    ],\n  };\n}\n\nfunction codexAccountId(access: string): string | undefined {\n  try {\n    const parts = access.split(\".\");\n    if (parts.length !== 3 || !parts[1]) return undefined;\n    const payload = object(JSON.parse(Buffer.from(parts[1], \"base64url\").toString(\"utf8\")));\n    const account = object(payload?.[\"https://api.openai.com/auth\"])?.chatgpt_account_id;\n    return typeof account === \"string\" && account.length > 0 && account.length <= 512 && /^[\\x21-\\x7e]+$/u.test(account)\n      ? account\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction object(value: unknown): Record<string, unknown> | undefined {\n  return value && typeof value === \"object\" && !Array.isArray(value) ? (value as Record<string, unknown>) : undefined;\n}\n"],
+  "mappings": ";;;;;;;;;;;AASA,eAAsB,2BACpB,KACA,QACA,MACA,kBACA,iBAC4B;AAC5B,QAAM,cAAc,OAAO;AAAA,IACzB,GAAG;AAAA,IACH,aAAa;AAAA,MACX,EAAE,QAAQ,KAAK,UAAU,CAAC,OAAO,aAAa,OAAO,gBAAgB,IAAI,CAAC,EAAE;AAAA,MAC5E;AAAA,IACF;AAAA,EACF;AACA,MAAI,iBAAiB,kBAAkB,CAAE,MAAM,gBAAgB,eAAe,KAAK,cAAc,GAAI;AACnG,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AACA,QAAM,UAAU,mBAAmB,cAAc;AACjD,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,+CAA+C;AAC7E,QAAM,YAAY,MAAM,iBAAiB,KAAK,SAAS,MAAM,gBAAgB;AAC7E,MAAI,CAAC,UAAW,QAAO,YAAY;AACnC,MAAI,UAAU,WAAW;AACvB,UAAM,IAAI,MAAM,qEAAqE;AAGvF,QAAM,SAAS,sBAAsB,UAAU,IAAI;AACnD,MAAI,IAAI,OAAO,aAAa,gBAAgB;AAC1C,UAAM,WAAW,MAAM,IAAI,cAAc,oBAAoB,IAAI,KAAK;AACtE,QACE,CAAC,SAAS,MACT,SAAS,WAAW,IAAI,IAAI,SAAS,OAAO,EAAE,WAAW,yBAC1D,sBAAsB,QAAQ,MAAM,QACpC;AACA,YAAM,IAAI,MAAM,mFAAmF;AAAA,IACrG;AAAA,EACF;AACA,MAAI,CAAC,UAAU,WAAW,sBAAsB,SAAS,GAAG;AAC1D,UAAM,IAAI,MAAM,2EAA2E;AAAA,EAC7F;AACA,QAAM,YAAY,eAAe,MAAM;AACvC,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,2DAA2D;AAC3F,QAAM,UAAU,kBACZ,MAAM,gBAAgB,KAAK,cAAc,IACzC,kCAAkC,gBAAgB,gBAAgB;AACtE,MAAI,CAAC,QAAQ,GAAI,OAAM,IAAI,MAAM,2DAA2D;AAC5F,QAAM,UAAU,oBAAI,IAAY;AAChC,aAAW,aAAa,QAAQ,YAAY;AAC1C,UAAM,aAAa,OAAO,SAAS;AACnC,QAAI,YAAY,SAAS,WAAW,WAAW,WAAW,OAAQ;AAClE,QACE,WAAW,cAAc,aACzB,OAAO,WAAW,YAAY,YAC9B,CAAC,WAAW,WACZ,OAAO,WAAW,YAAY,YAC9B,CAAC,OAAO,SAAS,WAAW,OAAO,GACnC;AACA,YAAM,IAAI,MAAM,6FAA6F;AAAA,IAC/G;AACA,YAAQ,IAAI,WAAW,OAAO;AAAA,EAChC;AACA,MAAI,QAAQ,SAAS,EAAG,OAAM,IAAI,MAAM,yEAAyE;AACjH,QAAM,UAAU,EAAE,eAAe,UAAU,MAAM,IAAI,sBAAsB,UAAU;AACrF,SAAO;AAAA,IACL,GAAG;AAAA,IACH,iBAAiB,EAAE,QAAQ;AAAA,IAC3B,aAAa;AAAA,MACX,EAAE,QAAQ,KAAK,UAAU,CAAC,OAAO,aAAa,OAAO,gBAAgB,UAAU,aAAa,OAAO,CAAC,EAAE;AAAA,MACtG;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,GAAG,oBAAI,IAAI,CAAC,GAAG,OAAO,SAAS,GAAG,UAAU,SAAS,GAAG,SAAS,QAAQ,WAAW,QAAQ,aAAa,CAAC;AAAA,IAC5G;AAAA,EACF;AACF;AAEA,SAAS,eAAe,QAAoC;AAC1D,MAAI;AACF,UAAM,QAAQ,OAAO,MAAM,GAAG;AAC9B,QAAI,MAAM,WAAW,KAAK,CAAC,MAAM,CAAC,EAAG,QAAO;AAC5C,UAAM,UAAU,OAAO,KAAK,MAAM,OAAO,KAAK,MAAM,CAAC,GAAG,WAAW,EAAE,SAAS,MAAM,CAAC,CAAC;AACtF,UAAM,UAAU,OAAO,UAAU,6BAA6B,CAAC,GAAG;AAClE,WAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,KAAK,QAAQ,UAAU,OAAO,kBAAkB,KAAK,OAAO,IAC/G,UACA;AAAA,EACN,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,OAAO,OAAqD;AACnE,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAK,QAAoC;AAC5G;",
+  "names": []
+}

package/dist/chunks/openai-companion-usage-4NOBHGP7.ts

@@ -0,0 +1,120 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- generated JavaScript uses a .ts extension for Pi's Jiti loader.
+import {
+  CHATGPT_USAGE_SETTINGS_URL,
+  fetchProviderJson
+} from "./chunk-ENCC7IBP.ts";
+
+// src/providers/openai-companion-usage.ts
+var USAGE_URL = "https://chatgpt.com/backend-api/wham/usage";
+var MAX_APPS = 128;
+var MAX_WINDOWS = 32;
+function matchingOpenAIAppBuckets(payload, clientId) {
+  const root = object(payload);
+  if (!root || !Array.isArray(root.items) || root.items.length > MAX_APPS || Object.keys(root).some((key) => !["items", "has_more", "next_cursor"].includes(key)) || root.has_more !== void 0 && root.has_more !== false || root.next_cursor !== void 0 && root.next_cursor !== null && root.next_cursor !== "") {
+    throw new Error("ChatGPT app usage requires a complete, bounded registration list; pagination is unsupported.");
+  }
+  const apps = root.items.map(object);
+  if (apps.some((app2) => !app2 || typeof app2.id !== "string" || !app2.id.trim())) {
+    throw new Error(
+      "ChatGPT app usage returned an unreadable registration identity; uniqueness cannot be established."
+    );
+  }
+  const matches = apps.filter((app2) => app2?.id === clientId);
+  if (!clientId || matches.length !== 1) {
+    throw new Error(
+      "The native registration was not uniquely found in the companion Codex account; use the same ChatGPT account/workspace for both logins."
+    );
+  }
+  const app = matches[0];
+  if (!Array.isArray(app?.windows) || app.windows.length === 0 || app.windows.length > MAX_WINDOWS) {
+    throw new Error("ChatGPT app usage returned no bounded, displayable windows.");
+  }
+  const allowance = app.allowed_usage_percent;
+  if (allowance !== void 0 && !percent(allowance)) throw new Error("ChatGPT app allowance was invalid.");
+  return {
+    buckets: app.windows.map((window, index) => normalizeWindow(window, `app:${index}`, "chatgpt-app", "App limits")),
+    ...allowance === void 0 ? {} : { allowance }
+  };
+}
+async function queryOpenAICompanionUsage(auth, signal, timeoutMs, guard) {
+  if (!guard) throw new Error("Companion ChatGPT usage requires request-boundary revalidation.");
+  if (!auth.openaiCompanion || !auth.openaiClientId)
+    throw new Error("Companion ChatGPT usage authentication was incomplete.");
+  const startedAt = Date.now();
+  const backend = {
+    headers: { ...auth.openaiCompanion.headers },
+    fingerprint: auth.fingerprint,
+    secrets: auth.secrets,
+    model: auth.model
+  };
+  const read = async (url, description) => {
+    signal.throwIfAborted();
+    await guard();
+    signal.throwIfAborted();
+    const remaining = timeoutMs - (Date.now() - startedAt);
+    if (remaining <= 0) throw new Error("Timed out while fetching companion ChatGPT usage.");
+    const payload = await fetchProviderJson(url, backend, signal, remaining, description, { redirect: "error" });
+    await guard();
+    signal.throwIfAborted();
+    return payload;
+  };
+  const appPayload = await read(`${USAGE_URL}/chatpass/apps`, "ChatGPT companion app usage endpoint");
+  const app = matchingOpenAIAppBuckets(appPayload, auth.openaiClientId);
+  const planPayload = await read(USAGE_URL, "ChatGPT companion plan usage endpoint");
+  const rateLimit = object(planPayload.rate_limit);
+  const planBuckets = [];
+  for (const position of ["primary", "secondary"]) {
+    const window = rateLimit?.[`${position}_window`];
+    if (window !== void 0 && window !== null)
+      planBuckets.push(normalizeWindow(window, `plan:${position}`, "chatgpt-plan", "Plan limits"));
+  }
+  if (planBuckets.length === 0) throw new Error("ChatGPT plan usage returned no displayable windows.");
+  return {
+    providerId: "openai",
+    providerName: "OpenAI",
+    capturedAt: Date.now(),
+    source: "openai-chatgpt-companion",
+    semantics: { kind: "consumer-subscription", label: "ChatGPT plan and app limits (experimental companion source)" },
+    buckets: [...planBuckets, ...app.buckets],
+    metrics: app.allowance === void 0 ? [] : [{ id: "app-allowance", label: "App allowance", value: app.allowance, unit: "percent" }],
+    notes: [
+      "Source: companion Codex OAuth; registration matching is not independent proof of the same user/workspace.",
+      "App allowance caps shared plan usage; it is not remaining or reserved quota.",
+      `Manage usage: ${CHATGPT_USAGE_SETTINGS_URL}`
+    ]
+  };
+}
+function normalizeWindow(raw, id, groupId, groupLabel) {
+  const window = object(raw);
+  const used = window?.used_percent;
+  const remaining = window?.remaining_percent;
+  const seconds = window?.limit_window_seconds;
+  const resetsAt = window?.reset_at;
+  if (!percent(used) || remaining !== void 0 && (!percent(remaining) || Math.abs(used + remaining - 100) > 1) || typeof seconds !== "number" || !Number.isSafeInteger(seconds) || seconds <= 0 || resetsAt !== void 0 && (typeof resetsAt !== "number" || !Number.isSafeInteger(resetsAt) || resetsAt < 0 || resetsAt > 864e10)) {
+    throw new Error("ChatGPT usage returned an invalid or contradictory window.");
+  }
+  return {
+    id,
+    label: "Subscription limit",
+    groupId,
+    groupLabel,
+    used,
+    remaining: remaining === void 0 ? 100 - used : remaining,
+    limit: 100,
+    unit: "percent",
+    windowMinutes: Math.ceil(seconds / 60),
+    ...resetsAt === void 0 ? {} : { resetsAt }
+  };
+}
+function percent(value) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 && value <= 100;
+}
+function object(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+export {
+  matchingOpenAIAppBuckets,
+  queryOpenAICompanionUsage
+};
+//# sourceMappingURL=openai-companion-usage-4NOBHGP7.ts.map

package/dist/chunks/openai-companion-usage-4NOBHGP7.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/providers/openai-companion-usage.ts"],
+  "sourcesContent": ["import { fetchProviderJson } from \"../query.js\";\nimport type { ResolvedUsageAuth, UsageBucket, UsageReport, UsageRequestGuard } from \"../types.js\";\nimport { CHATGPT_USAGE_SETTINGS_URL } from \"./openai-chatgpt.js\";\n\nconst USAGE_URL = \"https://chatgpt.com/backend-api/wham/usage\";\nconst MAX_APPS = 128;\nconst MAX_WINDOWS = 32;\n\n// Evidence: pinned Specode openai.ts at 1015f9f419dfef9ac27c9845ec2318394928fa38\n// and OpenAI's Help Center article 20001542. Backend shapes remain undocumented.\n// Accept only a complete list; unknown list envelope fields fail closed, including pagination.\nexport function matchingOpenAIAppBuckets(\n  payload: unknown,\n  clientId: string,\n): { buckets: UsageBucket[]; allowance?: number } {\n  const root = object(payload);\n  if (\n    !root ||\n    !Array.isArray(root.items) ||\n    root.items.length > MAX_APPS ||\n    Object.keys(root).some((key) => ![\"items\", \"has_more\", \"next_cursor\"].includes(key)) ||\n    (root.has_more !== undefined && root.has_more !== false) ||\n    (root.next_cursor !== undefined && root.next_cursor !== null && root.next_cursor !== \"\")\n  ) {\n    throw new Error(\"ChatGPT app usage requires a complete, bounded registration list; pagination is unsupported.\");\n  }\n  const apps = root.items.map(object);\n  if (apps.some((app) => !app || typeof app.id !== \"string\" || !app.id.trim())) {\n    throw new Error(\n      \"ChatGPT app usage returned an unreadable registration identity; uniqueness cannot be established.\",\n    );\n  }\n  const matches = apps.filter((app) => app?.id === clientId);\n  if (!clientId || matches.length !== 1) {\n    throw new Error(\n      \"The native registration was not uniquely found in the companion Codex account; use the same ChatGPT account/workspace for both logins.\",\n    );\n  }\n  const app = matches[0];\n  if (!Array.isArray(app?.windows) || app.windows.length === 0 || app.windows.length > MAX_WINDOWS) {\n    throw new Error(\"ChatGPT app usage returned no bounded, displayable windows.\");\n  }\n  const allowance = app.allowed_usage_percent;\n  if (allowance !== undefined && !percent(allowance)) throw new Error(\"ChatGPT app allowance was invalid.\");\n  return {\n    buckets: app.windows.map((window, index) => normalizeWindow(window, `app:${index}`, \"chatgpt-app\", \"App limits\")),\n    ...(allowance === undefined ? {} : { allowance: allowance as number }),\n  };\n}\n\nexport async function queryOpenAICompanionUsage(\n  auth: ResolvedUsageAuth,\n  signal: AbortSignal,\n  timeoutMs: number,\n  guard?: UsageRequestGuard,\n): Promise<UsageReport> {\n  if (!guard) throw new Error(\"Companion ChatGPT usage requires request-boundary revalidation.\");\n  if (!auth.openaiCompanion || !auth.openaiClientId)\n    throw new Error(\"Companion ChatGPT usage authentication was incomplete.\");\n  const startedAt = Date.now();\n  // Never pass native apiKey/auth/env to transport: the only request credential is the companion.\n  const backend: ResolvedUsageAuth = {\n    headers: { ...auth.openaiCompanion.headers },\n    fingerprint: auth.fingerprint,\n    secrets: auth.secrets,\n    model: auth.model,\n  };\n  const read = async (url: string, description: string) => {\n    signal.throwIfAborted();\n    await guard();\n    signal.throwIfAborted();\n    const remaining = timeoutMs - (Date.now() - startedAt);\n    if (remaining <= 0) throw new Error(\"Timed out while fetching companion ChatGPT usage.\");\n    const payload = await fetchProviderJson(url, backend, signal, remaining, description, { redirect: \"error\" });\n    await guard();\n    signal.throwIfAborted();\n    return payload;\n  };\n  const appPayload = await read(`${USAGE_URL}/chatpass/apps`, \"ChatGPT companion app usage endpoint\");\n  const app = matchingOpenAIAppBuckets(appPayload, auth.openaiClientId);\n  // Match and validate the app before reading plan data; never substitute Codex-only quotas.\n  const planPayload = await read(USAGE_URL, \"ChatGPT companion plan usage endpoint\");\n  const rateLimit = object(planPayload.rate_limit);\n  const planBuckets: UsageBucket[] = [];\n  for (const position of [\"primary\", \"secondary\"] as const) {\n    const window = rateLimit?.[`${position}_window`];\n    if (window !== undefined && window !== null)\n      planBuckets.push(normalizeWindow(window, `plan:${position}`, \"chatgpt-plan\", \"Plan limits\"));\n  }\n  if (planBuckets.length === 0) throw new Error(\"ChatGPT plan usage returned no displayable windows.\");\n  return {\n    providerId: \"openai\",\n    providerName: \"OpenAI\",\n    capturedAt: Date.now(),\n    source: \"openai-chatgpt-companion\",\n    semantics: { kind: \"consumer-subscription\", label: \"ChatGPT plan and app limits (experimental companion source)\" },\n    buckets: [...planBuckets, ...app.buckets],\n    metrics:\n      app.allowance === undefined\n        ? []\n        : [{ id: \"app-allowance\", label: \"App allowance\", value: app.allowance, unit: \"percent\" }],\n    notes: [\n      \"Source: companion Codex OAuth; registration matching is not independent proof of the same user/workspace.\",\n      \"App allowance caps shared plan usage; it is not remaining or reserved quota.\",\n      `Manage usage: ${CHATGPT_USAGE_SETTINGS_URL}`,\n    ],\n  };\n}\n\nfunction normalizeWindow(raw: unknown, id: string, groupId: string, groupLabel: string): UsageBucket {\n  const window = object(raw);\n  const used = window?.used_percent;\n  const remaining = window?.remaining_percent;\n  const seconds = window?.limit_window_seconds;\n  const resetsAt = window?.reset_at;\n  if (\n    !percent(used) ||\n    (remaining !== undefined && (!percent(remaining) || Math.abs(used + remaining - 100) > 1)) ||\n    typeof seconds !== \"number\" ||\n    !Number.isSafeInteger(seconds) ||\n    seconds <= 0 ||\n    (resetsAt !== undefined &&\n      (typeof resetsAt !== \"number\" || !Number.isSafeInteger(resetsAt) || resetsAt < 0 || resetsAt > 8_640_000_000_000))\n  ) {\n    throw new Error(\"ChatGPT usage returned an invalid or contradictory window.\");\n  }\n  return {\n    id,\n    label: \"Subscription limit\",\n    groupId,\n    groupLabel,\n    used,\n    remaining: remaining === undefined ? 100 - used : (remaining as number),\n    limit: 100,\n    unit: \"percent\",\n    windowMinutes: Math.ceil(seconds / 60),\n    ...(resetsAt === undefined ? {} : { resetsAt: resetsAt as number }),\n  };\n}\n\nfunction percent(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isFinite(value) && value >= 0 && value <= 100;\n}\nfunction object(value: unknown): Record<string, unknown> | undefined {\n  return value && typeof value === \"object\" && !Array.isArray(value) ? (value as Record<string, unknown>) : undefined;\n}\n"],
+  "mappings": ";;;;;;;;AAIA,IAAM,YAAY;AAClB,IAAM,WAAW;AACjB,IAAM,cAAc;AAKb,SAAS,yBACd,SACA,UACgD;AAChD,QAAM,OAAO,OAAO,OAAO;AAC3B,MACE,CAAC,QACD,CAAC,MAAM,QAAQ,KAAK,KAAK,KACzB,KAAK,MAAM,SAAS,YACpB,OAAO,KAAK,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,SAAS,YAAY,aAAa,EAAE,SAAS,GAAG,CAAC,KAClF,KAAK,aAAa,UAAa,KAAK,aAAa,SACjD,KAAK,gBAAgB,UAAa,KAAK,gBAAgB,QAAQ,KAAK,gBAAgB,IACrF;AACA,UAAM,IAAI,MAAM,8FAA8F;AAAA,EAChH;AACA,QAAM,OAAO,KAAK,MAAM,IAAI,MAAM;AAClC,MAAI,KAAK,KAAK,CAACA,SAAQ,CAACA,QAAO,OAAOA,KAAI,OAAO,YAAY,CAACA,KAAI,GAAG,KAAK,CAAC,GAAG;AAC5E,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,UAAU,KAAK,OAAO,CAACA,SAAQA,MAAK,OAAO,QAAQ;AACzD,MAAI,CAAC,YAAY,QAAQ,WAAW,GAAG;AACrC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,MAAM,QAAQ,CAAC;AACrB,MAAI,CAAC,MAAM,QAAQ,KAAK,OAAO,KAAK,IAAI,QAAQ,WAAW,KAAK,IAAI,QAAQ,SAAS,aAAa;AAChG,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,QAAM,YAAY,IAAI;AACtB,MAAI,cAAc,UAAa,CAAC,QAAQ,SAAS,EAAG,OAAM,IAAI,MAAM,oCAAoC;AACxG,SAAO;AAAA,IACL,SAAS,IAAI,QAAQ,IAAI,CAAC,QAAQ,UAAU,gBAAgB,QAAQ,OAAO,KAAK,IAAI,eAAe,YAAY,CAAC;AAAA,IAChH,GAAI,cAAc,SAAY,CAAC,IAAI,EAAE,UAA+B;AAAA,EACtE;AACF;AAEA,eAAsB,0BACpB,MACA,QACA,WACA,OACsB;AACtB,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,iEAAiE;AAC7F,MAAI,CAAC,KAAK,mBAAmB,CAAC,KAAK;AACjC,UAAM,IAAI,MAAM,wDAAwD;AAC1E,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,UAA6B;AAAA,IACjC,SAAS,EAAE,GAAG,KAAK,gBAAgB,QAAQ;AAAA,IAC3C,aAAa,KAAK;AAAA,IAClB,SAAS,KAAK;AAAA,IACd,OAAO,KAAK;AAAA,EACd;AACA,QAAM,OAAO,OAAO,KAAa,gBAAwB;AACvD,WAAO,eAAe;AACtB,UAAM,MAAM;AACZ,WAAO,eAAe;AACtB,UAAM,YAAY,aAAa,KAAK,IAAI,IAAI;AAC5C,QAAI,aAAa,EAAG,OAAM,IAAI,MAAM,mDAAmD;AACvF,UAAM,UAAU,MAAM,kBAAkB,KAAK,SAAS,QAAQ,WAAW,aAAa,EAAE,UAAU,QAAQ,CAAC;AAC3G,UAAM,MAAM;AACZ,WAAO,eAAe;AACtB,WAAO;AAAA,EACT;AACA,QAAM,aAAa,MAAM,KAAK,GAAG,SAAS,kBAAkB,sCAAsC;AAClG,QAAM,MAAM,yBAAyB,YAAY,KAAK,cAAc;AAEpE,QAAM,cAAc,MAAM,KAAK,WAAW,uCAAuC;AACjF,QAAM,YAAY,OAAO,YAAY,UAAU;AAC/C,QAAM,cAA6B,CAAC;AACpC,aAAW,YAAY,CAAC,WAAW,WAAW,GAAY;AACxD,UAAM,SAAS,YAAY,GAAG,QAAQ,SAAS;AAC/C,QAAI,WAAW,UAAa,WAAW;AACrC,kBAAY,KAAK,gBAAgB,QAAQ,QAAQ,QAAQ,IAAI,gBAAgB,aAAa,CAAC;AAAA,EAC/F;AACA,MAAI,YAAY,WAAW,EAAG,OAAM,IAAI,MAAM,qDAAqD;AACnG,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY,KAAK,IAAI;AAAA,IACrB,QAAQ;AAAA,IACR,WAAW,EAAE,MAAM,yBAAyB,OAAO,8DAA8D;AAAA,IACjH,SAAS,CAAC,GAAG,aAAa,GAAG,IAAI,OAAO;AAAA,IACxC,SACE,IAAI,cAAc,SACd,CAAC,IACD,CAAC,EAAE,IAAI,iBAAiB,OAAO,iBAAiB,OAAO,IAAI,WAAW,MAAM,UAAU,CAAC;AAAA,IAC7F,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,iBAAiB,0BAA0B;AAAA,IAC7C;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,KAAc,IAAY,SAAiB,YAAiC;AACnG,QAAM,SAAS,OAAO,GAAG;AACzB,QAAM,OAAO,QAAQ;AACrB,QAAM,YAAY,QAAQ;AAC1B,QAAM,UAAU,QAAQ;AACxB,QAAM,WAAW,QAAQ;AACzB,MACE,CAAC,QAAQ,IAAI,KACZ,cAAc,WAAc,CAAC,QAAQ,SAAS,KAAK,KAAK,IAAI,OAAO,YAAY,GAAG,IAAI,MACvF,OAAO,YAAY,YACnB,CAAC,OAAO,cAAc,OAAO,KAC7B,WAAW,KACV,aAAa,WACX,OAAO,aAAa,YAAY,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,KAAK,WAAW,SACjG;AACA,UAAM,IAAI,MAAM,4DAA4D;AAAA,EAC9E;AACA,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,cAAc,SAAY,MAAM,OAAQ;AAAA,IACnD,OAAO;AAAA,IACP,MAAM;AAAA,IACN,eAAe,KAAK,KAAK,UAAU,EAAE;AAAA,IACrC,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAA6B;AAAA,EACnE;AACF;AAEA,SAAS,QAAQ,OAAiC;AAChD,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,SAAS,KAAK,SAAS;AACvF;AACA,SAAS,OAAO,OAAqD;AACnE,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAK,QAAoC;AAC5G;",
+  "names": ["app"]
+}