@oculum/cli 1.0.0 → 1.0.2

package/dist/index.js

@@ -17678,7 +17678,7 @@ var require_ai_fingerprinting = __commonJS({
         return vulnerabilities;
       }
       const anyUsageByContext = categorizeAnyUsage(lines, filePath);
-      const priorityAny = anyUsageByContext.filter((usage) => usage.context === "api_boundary" || usage.context === "database_layer" || usage.context === "auth_handler");
+      const priorityAny = anyUsageByContext.filter((usage2) => usage2.context === "api_boundary" || usage2.context === "database_layer" || usage2.context === "auth_handler");
       const cappedAny = priorityAny.slice(0, 5);
       if (cappedAny.length === 0) {
         return vulnerabilities;
@@ -17708,21 +17708,21 @@ var require_ai_fingerprinting = __commonJS({
           layer: 2
         });
       } else {
-        for (const usage of cappedAny) {
+        for (const usage2 of cappedAny) {
           const contextNames = {
             "api_boundary": "API request/response handler",
             "database_layer": "Database query",
             "auth_handler": "Authentication logic"
           };
           vulnerabilities.push({
-            id: `ai-fingerprint-any-${filePath}-${usage.lineNumber}`,
+            id: `ai-fingerprint-any-${filePath}-${usage2.lineNumber}`,
             filePath,
-            lineNumber: usage.lineNumber,
-            lineContent: usage.lineContent,
+            lineNumber: usage2.lineNumber,
+            lineContent: usage2.lineContent,
             severity: "low",
             category: "ai_pattern",
-            title: `[AI Pattern] TypeScript 'any' in ${contextNames[usage.context] || usage.context}`,
-            description: `Using 'any' type at a security boundary bypasses type checking and can lead to type confusion vulnerabilities. This is especially risky in ${contextNames[usage.context] || usage.context}.`,
+            title: `[AI Pattern] TypeScript 'any' in ${contextNames[usage2.context] || usage2.context}`,
+            description: `Using 'any' type at a security boundary bypasses type checking and can lead to type confusion vulnerabilities. This is especially risky in ${contextNames[usage2.context] || usage2.context}.`,
             suggestedFix: 'Replace "any" with an explicit type. Use typed request schemas, ORM models, or interface definitions.',
             confidence: "medium",
             layer: 2
@@ -29411,11 +29411,11 @@ var require_AbstractChatCompletionRunner = __commonJS({
         prompt_tokens: 0,
         total_tokens: 0
       };
-      for (const { usage } of this._chatCompletions) {
-        if (usage) {
-          total.completion_tokens += usage.completion_tokens;
-          total.prompt_tokens += usage.prompt_tokens;
-          total.total_tokens += usage.total_tokens;
+      for (const { usage: usage2 } of this._chatCompletions) {
+        if (usage2) {
+          total.completion_tokens += usage2.completion_tokens;
+          total.prompt_tokens += usage2.prompt_tokens;
+          total.total_tokens += usage2.total_tokens;
         }
       }
       return total;
@@ -37001,11 +37001,11 @@ For each candidate finding, return:
             max_completion_tokens: 4096
           }));
           statsLock.apiCalls++;
-          const usage = response.usage;
-          if (usage) {
-            const promptTokens = usage.prompt_tokens || 0;
-            const completionTokens = usage.completion_tokens || 0;
-            const cachedTokens = usage.prompt_tokens_details?.cached_tokens || 0;
+          const usage2 = response.usage;
+          if (usage2) {
+            const promptTokens = usage2.prompt_tokens || 0;
+            const completionTokens = usage2.completion_tokens || 0;
+            const cachedTokens = usage2.prompt_tokens_details?.cached_tokens || 0;
             const freshInputTokens = promptTokens - cachedTokens;
             statsLock.estimatedInputTokens += freshInputTokens;
             statsLock.estimatedOutputTokens += completionTokens;
@@ -37226,19 +37226,19 @@ For each candidate finding, return:
           }));
           stats.apiCalls++;
           totalApiBatches++;
-          const usage = response.usage;
-          if (usage) {
+          const usage2 = response.usage;
+          if (usage2) {
             console.log(`[DEBUG] Batch ${batchNum} - Full API Response Usage:`);
-            console.log(JSON.stringify(usage, null, 2));
+            console.log(JSON.stringify(usage2, null, 2));
             console.log(`[DEBUG] Breakdown:`);
-            console.log(`  - input_tokens: ${usage.input_tokens || 0}`);
-            console.log(`  - output_tokens: ${usage.output_tokens || 0}`);
-            console.log(`  - cache_creation_input_tokens: ${usage.cache_creation_input_tokens || 0}`);
-            console.log(`  - cache_read_input_tokens: ${usage.cache_read_input_tokens || 0}`);
-            stats.estimatedInputTokens += usage.input_tokens || 0;
-            stats.estimatedOutputTokens += usage.output_tokens || 0;
-            const cacheCreation = usage.cache_creation_input_tokens || 0;
-            const cacheRead = usage.cache_read_input_tokens || 0;
+            console.log(`  - input_tokens: ${usage2.input_tokens || 0}`);
+            console.log(`  - output_tokens: ${usage2.output_tokens || 0}`);
+            console.log(`  - cache_creation_input_tokens: ${usage2.cache_creation_input_tokens || 0}`);
+            console.log(`  - cache_read_input_tokens: ${usage2.cache_read_input_tokens || 0}`);
+            stats.estimatedInputTokens += usage2.input_tokens || 0;
+            stats.estimatedOutputTokens += usage2.output_tokens || 0;
+            const cacheCreation = usage2.cache_creation_input_tokens || 0;
+            const cacheRead = usage2.cache_read_input_tokens || 0;
             stats.cacheCreationTokens += cacheCreation;
             stats.cacheReadTokens += cacheRead;
           }
@@ -42827,6 +42827,27 @@ async function pollForLogin(deviceCode) {
     tier: result.tier
   };
 }
+async function getUsage(apiKey) {
+  const baseUrl = getApiBaseUrl();
+  const url = `${baseUrl}/v1/usage`;
+  try {
+    const response = await fetch(url, {
+      method: "GET",
+      headers: {
+        "Authorization": `Bearer ${apiKey}`,
+        "X-Oculum-Client": "cli",
+        "X-Oculum-Version": "1.0.0"
+      }
+    });
+    const result = await response.json();
+    return result;
+  } catch (error) {
+    return {
+      success: false,
+      error: "Failed to fetch usage data. Please check your internet connection."
+    };
+  }
+}
 
 // src/utils/errors.ts
 function enhanceError(error) {
@@ -42892,14 +42913,18 @@ function enhanceAPIError(error) {
         ]
       };
     case 429:
+      const rateLimitInfo = error.reason === "quota_exceeded" ? "You've reached your monthly scan quota." : "Too many requests in a short period.";
+      const rateLimitSuggestion = error.reason === "quota_exceeded" ? "Your quota resets at the start of next month. Upgrade to Pro for higher limits." : "Wait a moment and try again. Consider using --depth cheap for unlimited local scans.";
       return {
-        message: "Rate limit exceeded",
-        suggestion: "Wait a moment and try again. Upgrade to Pro for higher limits.",
+        message: rateLimitInfo,
+        suggestion: rateLimitSuggestion,
         category: "server",
         recoveryActions: [
-          { label: "Retry in 30 seconds", action: "retry" },
-          { label: "View pricing", action: "upgrade" }
-        ]
+          { label: "Use free local scan", command: "oculum scan . --depth cheap", action: "fallback" },
+          { label: "View usage & upgrade", action: "upgrade" },
+          { label: "Retry in 30 seconds", action: "retry" }
+        ],
+        details: error.reason === "quota_exceeded" ? "Check your usage at https://oculum.dev/dashboard/usage" : void 0
       };
     case 500:
     case 502:
@@ -43443,11 +43468,17 @@ async function runScanOnce(targetPath, options) {
   const noColor = options.color === false;
   if ((options.depth === "validated" || options.depth === "deep") && !isAuthenticated()) {
     if (!options.quiet) {
-      console.log(source_default.yellow("\nNote: validated and deep scans require authentication."));
-      console.log(
-        source_default.dim("Run `oculum login` to authenticate, or use `--depth cheap` for free local scans.\n")
-      );
-      console.log(source_default.dim("Falling back to cheap scan...\n"));
+      console.log("");
+      console.log(source_default.yellow("\u26A0\uFE0F  AI-powered scans require authentication"));
+      console.log("");
+      console.log(source_default.dim("  You requested: ") + source_default.white(options.depth) + source_default.dim(" scan"));
+      console.log(source_default.dim("  This requires: ") + source_default.white("Pro subscription"));
+      console.log("");
+      console.log(source_default.dim("  Options:"));
+      console.log(source_default.cyan("    \u2022 oculum login") + source_default.dim(" - Authenticate to unlock Pro features"));
+      console.log(source_default.cyan("    \u2022 --depth cheap") + source_default.dim(" - Use free local pattern matching"));
+      console.log("");
+      console.log(source_default.dim("  Continuing with ") + source_default.green("cheap") + source_default.dim(" scan (free)...\n"));
     }
     options.depth = "cheap";
   }
@@ -43469,19 +43500,24 @@ async function runScanOnce(targetPath, options) {
   const onProgress = (progress) => {
     switch (progress.status) {
       case "layer1":
-        spinner.text = `Layer 1: Pattern matching... (${progress.vulnerabilitiesFound} findings)`;
+        spinner.text = `Scanning patterns... ${source_default.dim(`(${progress.vulnerabilitiesFound} potential issues)`)}`;
         break;
       case "layer2":
-        spinner.text = `Layer 2: Structural analysis... (${progress.vulnerabilitiesFound} findings)`;
+        spinner.text = `Analyzing code structure... ${source_default.dim(`(${progress.vulnerabilitiesFound} findings)`)}`;
         break;
       case "validating":
-        spinner.text = `AI validation... (${progress.vulnerabilitiesFound} candidates)`;
+        spinner.text = `AI validating findings... ${source_default.dim(`(${progress.vulnerabilitiesFound} candidates)`)}`;
         break;
       case "layer3":
-        spinner.text = `Layer 3: AI semantic analysis...`;
+        spinner.text = `Deep AI analysis in progress...`;
         break;
       case "complete":
-        spinner.succeed(`Scan complete: ${progress.vulnerabilitiesFound} issues found`);
+        const issueText = progress.vulnerabilitiesFound === 1 ? "issue" : "issues";
+        if (progress.vulnerabilitiesFound === 0) {
+          spinner.succeed(source_default.green("Scan complete: No security issues found! \u2713"));
+        } else {
+          spinner.succeed(`Scan complete: ${progress.vulnerabilitiesFound} ${issueText} found`);
+        }
         break;
       case "failed":
         spinner.fail(progress.message);
@@ -43614,23 +43650,43 @@ async function login(options) {
     const result = await verifyApiKey(options.apiKey);
     if (!result.valid) {
       spinner.fail("Invalid API key");
+      console.log("");
+      console.log(source_default.dim("  The API key could not be verified. Please check:"));
+      console.log(source_default.dim("    \u2022 The key is copied correctly (no extra spaces)"));
+      console.log(source_default.dim("    \u2022 The key has not expired"));
+      console.log(source_default.dim("    \u2022 Generate a new key at: ") + source_default.cyan("https://oculum.dev/dashboard/api-keys"));
+      console.log("");
       process.exit(1);
     }
     setAuthCredentials(options.apiKey, result.email, result.tier);
     spinner.succeed("Logged in successfully!");
-    console.log(source_default.dim(`  Email: ${result.email}`));
-    console.log(source_default.dim(`  Tier: ${result.tier}`));
+    console.log("");
+    console.log(source_default.dim("  Email: ") + source_default.white(result.email));
+    console.log(source_default.dim("  Plan:  ") + source_default.white(result.tier));
+    console.log("");
+    console.log(source_default.green("  You can now use AI-powered scans:"));
+    console.log(source_default.cyan("    oculum scan . --depth validated"));
+    console.log("");
     return;
   }
   try {
+    console.log("");
+    console.log(source_default.bold("  \u{1F510} Oculum Login"));
+    console.log(source_default.dim("  " + "\u2500".repeat(38)));
+    console.log("");
     spinner.start("Initiating login...");
-    const { authUrl, deviceCode } = await initiateLogin();
+    const { authUrl, deviceCode, userCode } = await initiateLogin();
     spinner.stop();
-    console.log("\nTo complete login, open this URL in your browser:");
-    console.log(source_default.cyan(`
-  ${authUrl}`));
-    console.log(source_default.dim("\nWaiting for you to authenticate..."));
-    spinner.start("Waiting for browser authorization...");
+    console.log(source_default.white("  Open this URL in your browser to login:"));
+    console.log("");
+    console.log(source_default.cyan.bold(`    ${authUrl}`));
+    console.log("");
+    console.log(source_default.white("  Or enter this code manually: ") + source_default.yellow.bold(userCode));
+    console.log("");
+    console.log(source_default.dim("  Waiting for browser authorization..."));
+    console.log(source_default.dim("  (This will timeout after 5 minutes)"));
+    console.log("");
+    spinner.start("Waiting for authorization...");
     const maxAttempts = 60;
     for (let i = 0; i < maxAttempts; i++) {
       await new Promise((resolve7) => setTimeout(resolve7, 5e3));
@@ -43638,15 +43694,35 @@ async function login(options) {
       if (result.complete) {
         setAuthCredentials(result.apiKey, result.email, result.tier);
         spinner.succeed("Logged in successfully!");
-        console.log(source_default.dim(`  Email: ${result.email}`));
-        console.log(source_default.dim(`  Tier: ${result.tier}`));
+        console.log("");
+        console.log(source_default.dim("  Email: ") + source_default.white(result.email));
+        console.log(source_default.dim("  Plan:  ") + source_default.white(result.tier));
+        console.log("");
+        console.log(source_default.green("  You can now use AI-powered scans:"));
+        console.log(source_default.cyan("    oculum scan . --depth validated"));
+        console.log("");
         return;
       }
+      if (result.expired) {
+        spinner.fail("Login session expired");
+        console.log("");
+        console.log(source_default.dim("  Please try again: ") + source_default.cyan("oculum login"));
+        console.log("");
+        process.exit(1);
+      }
     }
-    spinner.fail("Login timed out. Please try again.");
+    spinner.fail("Login timed out");
+    console.log("");
+    console.log(source_default.dim("  The login session expired. Please try again:"));
+    console.log(source_default.cyan("    oculum login"));
+    console.log("");
     process.exit(1);
   } catch (err) {
-    spinner.fail(`Login failed: ${err}`);
+    spinner.fail("Login failed");
+    console.log("");
+    console.log(source_default.dim("  Error: ") + source_default.red(String(err)));
+    console.log(source_default.dim("  Please check your internet connection and try again."));
+    console.log("");
     process.exit(1);
   }
 }
@@ -43660,40 +43736,67 @@ function logout() {
 }
 async function status() {
   const config = getConfig();
-  console.log("\n" + source_default.bold("Oculum CLI Status"));
-  console.log(source_default.dim("\u2500".repeat(40)));
+  console.log("");
+  console.log(source_default.bold("  \u{1F510} Oculum Authentication Status"));
+  console.log(source_default.dim("  " + "\u2500".repeat(38)));
   if (!isAuthenticated()) {
-    console.log(source_default.yellow("\nNot logged in."));
-    console.log(source_default.dim("\nRun `oculum login` to authenticate."));
-    console.log(source_default.dim("Free tier allows cheap (local) scans only."));
-    console.log(source_default.dim("Paid tiers unlock AI-powered validated and deep scans.\n"));
+    console.log("");
+    console.log(source_default.yellow("  Status: ") + source_default.white("Not logged in"));
+    console.log("");
+    console.log(source_default.dim("  You can use Oculum without logging in for free local scans."));
+    console.log(source_default.dim("  Login to unlock AI-powered validation and deep analysis."));
+    console.log("");
+    console.log(source_default.bold("  Quick Start:"));
+    console.log(source_default.cyan("    oculum scan .") + source_default.dim("        Free pattern-based scan"));
+    console.log(source_default.cyan("    oculum login") + source_default.dim("         Authenticate for Pro features"));
+    console.log("");
     return;
   }
-  const spinner = ora("Verifying credentials...").start();
+  const spinner = ora("  Verifying credentials...").start();
   const result = await verifyApiKey(config.apiKey);
   if (!result.valid) {
-    spinner.fail("Stored credentials are invalid or expired.");
-    console.log(source_default.dim("Run `oculum login` to re-authenticate."));
+    spinner.fail("  Stored credentials are invalid or expired");
+    console.log("");
+    console.log(source_default.dim("  Your session may have expired. Please login again:"));
+    console.log(source_default.cyan("    oculum login"));
+    console.log("");
     return;
   }
-  spinner.succeed("Authenticated");
-  console.log(source_default.dim(`  Email: ${result.email || config.email}`));
-  console.log(source_default.dim(`  Tier: ${result.tier || config.tier}`));
-  console.log("\n" + source_default.bold("Available Scan Depths:"));
+  spinner.succeed("  Authenticated");
+  console.log("");
+  const email = result.email || config.email || "unknown";
   const tier = result.tier || config.tier || "free";
-  console.log(source_default.green("  cheap    - Fast pattern matching (always available)"));
+  const tierBadge = tier === "pro" ? source_default.bgBlue.white(" PRO ") : tier === "enterprise" ? source_default.bgMagenta.white(" ENTERPRISE ") : source_default.bgGray.white(" FREE ");
+  console.log(source_default.dim("  Email: ") + source_default.white(email));
+  console.log(source_default.dim("  Plan:  ") + tierBadge);
+  console.log("");
+  console.log(source_default.bold("  Available Scan Depths:"));
+  console.log("");
+  console.log(source_default.green("  \u2713 ") + source_default.white("cheap") + source_default.dim("      Fast pattern matching (always free)"));
   if (tier === "pro" || tier === "enterprise") {
-    console.log(source_default.green("  validated - AI-powered validation"));
-    console.log(source_default.green("  deep      - Full AI semantic analysis"));
+    console.log(source_default.green("  \u2713 ") + source_default.white("validated") + source_default.dim("  AI validation (~70% fewer false positives)"));
+    console.log(source_default.dim("  \u{1F512} ") + source_default.white("deep") + source_default.dim("       Multi-agent analysis (coming soon)"));
   } else {
-    console.log(source_default.dim("  validated - AI-powered validation (requires Pro)"));
-    console.log(source_default.dim("  deep      - Full AI semantic analysis (requires Pro)"));
+    console.log(source_default.dim("  \u{1F512} ") + source_default.white("validated") + source_default.dim("  AI validation (requires Pro)"));
+    console.log(source_default.dim("  \u{1F512} ") + source_default.white("deep") + source_default.dim("       Multi-agent analysis (requires Pro)"));
   }
   console.log("");
+  console.log(source_default.dim("  Manage subscription: ") + source_default.cyan("https://oculum.dev/billing"));
+  console.log("");
 }
 function upgrade() {
-  console.log(source_default.cyan("\nTo upgrade your subscription, visit:"));
-  console.log(source_default.bold("  https://oculum.dev/billing\n"));
+  console.log("");
+  console.log(source_default.bold("  \u{1F680} Upgrade to Oculum Pro"));
+  console.log(source_default.dim("  " + "\u2500".repeat(38)));
+  console.log("");
+  console.log(source_default.white("  Pro features include:"));
+  console.log(source_default.green("    \u2713 ") + source_default.white("AI-validated scans") + source_default.dim(" - ~70% fewer false positives"));
+  console.log(source_default.green("    \u2713 ") + source_default.white("Higher scan limits") + source_default.dim(" - More scans per month"));
+  console.log(source_default.green("    \u2713 ") + source_default.white("Priority support") + source_default.dim(" - Get help when you need it"));
+  console.log(source_default.green("    \u2713 ") + source_default.white("GitHub Action") + source_default.dim(" - Automated PR scanning"));
+  console.log("");
+  console.log(source_default.dim("  Visit: ") + source_default.cyan.underline("https://oculum.dev/pricing"));
+  console.log("");
 }
 var authCommand = new Command("auth").description("Manage authentication");
 authCommand.command("login").description("Log in to Oculum").option("-k, --api-key <key>", "API key (skip browser auth)").action(login);
@@ -45454,18 +45557,23 @@ async function watch2(targetPath, options) {
   const config = getConfig();
   if ((options.depth === "validated" || options.depth === "deep") && !isAuthenticated()) {
     if (!options.quiet) {
-      console.log(source_default.yellow("\nNote: validated and deep scans require authentication."));
-      console.log(source_default.dim("Run `oculum login` to authenticate.\n"));
+      console.log("");
+      console.log(source_default.yellow("\u26A0\uFE0F  AI-powered scans require authentication"));
+      console.log(source_default.dim("  Using free local scan instead. Run `oculum login` to unlock Pro features."));
     }
     options.depth = "cheap";
   }
   if (!options.quiet) {
-    console.log(source_default.bold("\nOculum Watch Mode"));
-    console.log(source_default.dim("\u2500".repeat(40)));
-    console.log(source_default.dim(`Watching: ${absolutePath}`));
-    console.log(source_default.dim(`Depth: ${options.depth}`));
-    console.log(source_default.dim(`Debounce: ${options.debounce}ms`));
-    console.log(source_default.dim("\nPress Ctrl+C to stop\n"));
+    console.log("");
+    console.log(source_default.bold("  \u{1F441}\uFE0F  Oculum Watch Mode"));
+    console.log(source_default.dim("  " + "\u2500".repeat(38)));
+    console.log("");
+    console.log(source_default.dim("  Watching: ") + source_default.white(absolutePath));
+    console.log(source_default.dim("  Depth:    ") + source_default.white(options.depth === "cheap" ? "Quick (pattern matching)" : options.depth));
+    console.log(source_default.dim("  Debounce: ") + source_default.white(`${options.debounce}ms`));
+    console.log("");
+    console.log(source_default.dim("  Press ") + source_default.white("Ctrl+C") + source_default.dim(" to stop watching"));
+    console.log("");
   }
   const changedFiles = /* @__PURE__ */ new Set();
   let isScanning = false;
@@ -45478,8 +45586,9 @@ async function watch2(targetPath, options) {
       console.clear();
     }
     if (!options.quiet) {
-      console.log(source_default.cyan(`
-[${(/* @__PURE__ */ new Date()).toLocaleTimeString()}] Scanning ${filesToScan.length} changed file(s)...`));
+      const fileText = filesToScan.length === 1 ? "file" : "files";
+      console.log("");
+      console.log(source_default.cyan(`  \u27F3 [${(/* @__PURE__ */ new Date()).toLocaleTimeString()}] Scanning ${filesToScan.length} changed ${fileText}...`));
     }
     const scanFiles = [];
     for (const filePath of filesToScan) {
@@ -45509,9 +45618,12 @@ async function watch2(targetPath, options) {
       );
       if (result.vulnerabilities.length === 0) {
         if (!options.quiet) {
-          console.log(source_default.green("No issues found."));
+          console.log(source_default.green("  \u2713 No issues found"));
         }
       } else {
+        const issueCount = result.vulnerabilities.length;
+        const issueText = issueCount === 1 ? "issue" : "issues";
+        console.log(source_default.yellow(`  \u26A0 Found ${issueCount} ${issueText}:`));
         console.log((0, import_formatters2.formatTerminalOutput)(result, {
           maxFindingsPerGroup: 5
         }));
@@ -46498,6 +46610,7 @@ async function showFeatureExploration() {
   console.log(source_default.dim("  oculum watch .             ") + source_default.white("Watch for changes"));
   console.log(source_default.dim("  oculum ui                  ") + source_default.white("Interactive mode"));
   console.log(source_default.dim("  oculum login               ") + source_default.white("Authenticate for Pro features"));
+  console.log(source_default.dim("  oculum usage               ") + source_default.white("View credits and quota"));
   console.log(source_default.dim("  oculum --help              ") + source_default.white("Show all commands\n"));
   await ve({
     message: "Press Enter to continue",
@@ -47588,6 +47701,120 @@ var uiCommand = new Command("ui").description("Interactive terminal UI").action(
   await runUI();
 });
 
+// src/commands/usage.ts
+function formatNumber(num) {
+  if (num === -1) return "unlimited";
+  return num.toLocaleString();
+}
+function createProgressBar(percentage, width = 20) {
+  const filled = Math.round(percentage / 100 * width);
+  const empty = width - filled;
+  const bar = "\u2588".repeat(filled) + "\u2591".repeat(empty);
+  if (percentage >= 90) return source_default.red(bar);
+  if (percentage >= 70) return source_default.yellow(bar);
+  return source_default.green(bar);
+}
+function formatDate(dateStr) {
+  const date = new Date(dateStr);
+  return date.toLocaleDateString("en-US", {
+    month: "short",
+    day: "numeric",
+    year: "numeric"
+  });
+}
+async function usage(options) {
+  const config = getConfig();
+  if (!isAuthenticated()) {
+    console.log("");
+    console.log(source_default.yellow("  \u26A0 Not logged in"));
+    console.log("");
+    console.log(source_default.dim("  Login to view your usage and quota:"));
+    console.log(source_default.cyan("    oculum login"));
+    console.log("");
+    process.exit(1);
+  }
+  const spinner = ora("Fetching usage data...").start();
+  try {
+    const result = await getUsage(config.apiKey);
+    if (!result.success || !result.usage || !result.plan) {
+      spinner.fail("Failed to fetch usage data");
+      console.log("");
+      console.log(source_default.dim("  Error: ") + source_default.red(result.error || "Unknown error"));
+      console.log("");
+      process.exit(1);
+    }
+    spinner.stop();
+    if (options.json) {
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+    const { plan, usage: usageData } = result;
+    console.log("");
+    console.log(source_default.bold("  \u{1F4CA} Oculum Usage"));
+    console.log(source_default.dim("  " + "\u2500".repeat(38)));
+    console.log("");
+    const planBadge = plan.name === "pro" ? source_default.bgBlue.white(" PRO ") : plan.name === "enterprise" || plan.name === "max" ? source_default.bgMagenta.white(" MAX ") : plan.name === "starter" ? source_default.bgCyan.white(" STARTER ") : source_default.bgGray.white(" FREE ");
+    console.log(source_default.dim("  Plan: ") + planBadge + source_default.white(` ${plan.displayName}`));
+    console.log(source_default.dim("  Month: ") + source_default.white(usageData.month));
+    console.log("");
+    console.log(source_default.bold("  Credits Usage"));
+    console.log("");
+    const creditsDisplay = usageData.creditsLimit === -1 ? `${formatNumber(usageData.creditsUsed)} / unlimited` : `${formatNumber(usageData.creditsUsed)} / ${formatNumber(usageData.creditsLimit)}`;
+    console.log(source_default.dim("  Used:      ") + source_default.white(creditsDisplay));
+    if (usageData.creditsLimit !== -1) {
+      console.log(source_default.dim("  Remaining: ") + source_default.white(formatNumber(usageData.creditsRemaining)));
+      console.log("");
+      console.log(source_default.dim("  ") + createProgressBar(usageData.usagePercentage) + source_default.dim(` ${usageData.usagePercentage.toFixed(1)}%`));
+    }
+    console.log("");
+    console.log(source_default.bold("  This Month"));
+    console.log("");
+    console.log(source_default.dim("  Scans:     ") + source_default.white(formatNumber(usageData.totalScans)));
+    console.log(source_default.dim("  Files:     ") + source_default.white(formatNumber(usageData.totalFiles)));
+    console.log(source_default.dim("  Cost:      ") + source_default.white(`$${usageData.totalCostDollars.toFixed(4)}`));
+    console.log("");
+    console.log(source_default.dim("  Resets on: ") + source_default.white(formatDate(usageData.resetDate)));
+    console.log("");
+    if (result.recentScans && result.recentScans.length > 0) {
+      console.log(source_default.bold("  Recent Scans"));
+      console.log("");
+      const recentToShow = result.recentScans.slice(0, 5);
+      for (const scan of recentToShow) {
+        const date = new Date(scan.createdAt);
+        const timeAgo = getTimeAgo(date);
+        console.log(source_default.dim("  \u2022 ") + source_default.white(scan.repoName || "unknown") + source_default.dim(` (${timeAgo})`));
+        console.log(source_default.dim("    ") + source_default.dim(`${scan.filesScanned} files, ${scan.findingsCount} findings, ${scan.creditsUsed} credits`));
+      }
+      console.log("");
+    }
+    if (plan.name === "free" || plan.name === "starter") {
+      console.log(source_default.dim("  " + "\u2500".repeat(38)));
+      console.log("");
+      console.log(source_default.dim("  Need more credits? ") + source_default.cyan("oculum upgrade"));
+      console.log("");
+    }
+  } catch (error) {
+    spinner.fail("Failed to fetch usage data");
+    console.log("");
+    console.log(source_default.dim("  Error: ") + source_default.red(String(error)));
+    console.log("");
+    process.exit(1);
+  }
+}
+function getTimeAgo(date) {
+  const now = /* @__PURE__ */ new Date();
+  const diffMs = now.getTime() - date.getTime();
+  const diffMins = Math.floor(diffMs / 6e4);
+  const diffHours = Math.floor(diffMs / 36e5);
+  const diffDays = Math.floor(diffMs / 864e5);
+  if (diffMins < 1) return "just now";
+  if (diffMins < 60) return `${diffMins}m ago`;
+  if (diffHours < 24) return `${diffHours}h ago`;
+  if (diffDays < 7) return `${diffDays}d ago`;
+  return date.toLocaleDateString("en-US", { month: "short", day: "numeric" });
+}
+var usageCommand = new Command("usage").description("Show current usage and quota").option("--json", "Output as JSON").action(usage);
+
 // src/index.ts
 var program2 = new Command();
 program2.name("oculum").description("AI-native security scanner for detecting vulnerabilities in LLM-generated code").version("1.0.0").addHelpText("after", `
@@ -47602,6 +47829,7 @@ Common Commands:
   ui                       Interactive terminal UI
   login                    Authenticate with Oculum
   status                   Check authentication status
+  usage                    View credits and quota
 
 Learn More:
   $ oculum scan --help     Detailed scan options
@@ -47614,6 +47842,7 @@ program2.addCommand(authCommand);
 program2.addCommand(loginCommand);
 program2.addCommand(statusCommand);
 program2.addCommand(upgradeCommand);
+program2.addCommand(usageCommand);
 program2.addCommand(watchCommand);
 program2.addCommand(uiCommand);
 program2.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oculum/cli",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "AI-native security scanner CLI for detecting vulnerabilities in AI-generated code, BYOK patterns, and modern web applications",
   "main": "dist/index.js",
   "bin": {