@oculum/cli 1.0.1 → 1.0.2

package/dist/index.js

@@ -17678,7 +17678,7 @@ var require_ai_fingerprinting = __commonJS({
         return vulnerabilities;
       }
       const anyUsageByContext = categorizeAnyUsage(lines, filePath);
-      const priorityAny = anyUsageByContext.filter((usage) => usage.context === "api_boundary" || usage.context === "database_layer" || usage.context === "auth_handler");
+      const priorityAny = anyUsageByContext.filter((usage2) => usage2.context === "api_boundary" || usage2.context === "database_layer" || usage2.context === "auth_handler");
       const cappedAny = priorityAny.slice(0, 5);
       if (cappedAny.length === 0) {
         return vulnerabilities;
@@ -17708,21 +17708,21 @@ var require_ai_fingerprinting = __commonJS({
           layer: 2
         });
       } else {
-        for (const usage of cappedAny) {
+        for (const usage2 of cappedAny) {
           const contextNames = {
             "api_boundary": "API request/response handler",
             "database_layer": "Database query",
             "auth_handler": "Authentication logic"
           };
           vulnerabilities.push({
-            id: `ai-fingerprint-any-${filePath}-${usage.lineNumber}`,
+            id: `ai-fingerprint-any-${filePath}-${usage2.lineNumber}`,
             filePath,
-            lineNumber: usage.lineNumber,
-            lineContent: usage.lineContent,
+            lineNumber: usage2.lineNumber,
+            lineContent: usage2.lineContent,
             severity: "low",
             category: "ai_pattern",
-            title: `[AI Pattern] TypeScript 'any' in ${contextNames[usage.context] || usage.context}`,
-            description: `Using 'any' type at a security boundary bypasses type checking and can lead to type confusion vulnerabilities. This is especially risky in ${contextNames[usage.context] || usage.context}.`,
+            title: `[AI Pattern] TypeScript 'any' in ${contextNames[usage2.context] || usage2.context}`,
+            description: `Using 'any' type at a security boundary bypasses type checking and can lead to type confusion vulnerabilities. This is especially risky in ${contextNames[usage2.context] || usage2.context}.`,
             suggestedFix: 'Replace "any" with an explicit type. Use typed request schemas, ORM models, or interface definitions.',
             confidence: "medium",
             layer: 2
@@ -29411,11 +29411,11 @@ var require_AbstractChatCompletionRunner = __commonJS({
         prompt_tokens: 0,
         total_tokens: 0
       };
-      for (const { usage } of this._chatCompletions) {
-        if (usage) {
-          total.completion_tokens += usage.completion_tokens;
-          total.prompt_tokens += usage.prompt_tokens;
-          total.total_tokens += usage.total_tokens;
+      for (const { usage: usage2 } of this._chatCompletions) {
+        if (usage2) {
+          total.completion_tokens += usage2.completion_tokens;
+          total.prompt_tokens += usage2.prompt_tokens;
+          total.total_tokens += usage2.total_tokens;
         }
       }
       return total;
@@ -37001,11 +37001,11 @@ For each candidate finding, return:
             max_completion_tokens: 4096
           }));
           statsLock.apiCalls++;
-          const usage = response.usage;
-          if (usage) {
-            const promptTokens = usage.prompt_tokens || 0;
-            const completionTokens = usage.completion_tokens || 0;
-            const cachedTokens = usage.prompt_tokens_details?.cached_tokens || 0;
+          const usage2 = response.usage;
+          if (usage2) {
+            const promptTokens = usage2.prompt_tokens || 0;
+            const completionTokens = usage2.completion_tokens || 0;
+            const cachedTokens = usage2.prompt_tokens_details?.cached_tokens || 0;
             const freshInputTokens = promptTokens - cachedTokens;
             statsLock.estimatedInputTokens += freshInputTokens;
             statsLock.estimatedOutputTokens += completionTokens;
@@ -37226,19 +37226,19 @@ For each candidate finding, return:
           }));
           stats.apiCalls++;
           totalApiBatches++;
-          const usage = response.usage;
-          if (usage) {
+          const usage2 = response.usage;
+          if (usage2) {
             console.log(`[DEBUG] Batch ${batchNum} - Full API Response Usage:`);
-            console.log(JSON.stringify(usage, null, 2));
+            console.log(JSON.stringify(usage2, null, 2));
             console.log(`[DEBUG] Breakdown:`);
-            console.log(`  - input_tokens: ${usage.input_tokens || 0}`);
-            console.log(`  - output_tokens: ${usage.output_tokens || 0}`);
-            console.log(`  - cache_creation_input_tokens: ${usage.cache_creation_input_tokens || 0}`);
-            console.log(`  - cache_read_input_tokens: ${usage.cache_read_input_tokens || 0}`);
-            stats.estimatedInputTokens += usage.input_tokens || 0;
-            stats.estimatedOutputTokens += usage.output_tokens || 0;
-            const cacheCreation = usage.cache_creation_input_tokens || 0;
-            const cacheRead = usage.cache_read_input_tokens || 0;
+            console.log(`  - input_tokens: ${usage2.input_tokens || 0}`);
+            console.log(`  - output_tokens: ${usage2.output_tokens || 0}`);
+            console.log(`  - cache_creation_input_tokens: ${usage2.cache_creation_input_tokens || 0}`);
+            console.log(`  - cache_read_input_tokens: ${usage2.cache_read_input_tokens || 0}`);
+            stats.estimatedInputTokens += usage2.input_tokens || 0;
+            stats.estimatedOutputTokens += usage2.output_tokens || 0;
+            const cacheCreation = usage2.cache_creation_input_tokens || 0;
+            const cacheRead = usage2.cache_read_input_tokens || 0;
             stats.cacheCreationTokens += cacheCreation;
             stats.cacheReadTokens += cacheRead;
           }
@@ -42827,6 +42827,27 @@ async function pollForLogin(deviceCode) {
     tier: result.tier
   };
 }
+async function getUsage(apiKey) {
+  const baseUrl = getApiBaseUrl();
+  const url = `${baseUrl}/v1/usage`;
+  try {
+    const response = await fetch(url, {
+      method: "GET",
+      headers: {
+        "Authorization": `Bearer ${apiKey}`,
+        "X-Oculum-Client": "cli",
+        "X-Oculum-Version": "1.0.0"
+      }
+    });
+    const result = await response.json();
+    return result;
+  } catch (error) {
+    return {
+      success: false,
+      error: "Failed to fetch usage data. Please check your internet connection."
+    };
+  }
+}
 
 // src/utils/errors.ts
 function enhanceError(error) {
@@ -43654,12 +43675,14 @@ async function login(options) {
     console.log(source_default.dim("  " + "\u2500".repeat(38)));
     console.log("");
     spinner.start("Initiating login...");
-    const { authUrl, deviceCode } = await initiateLogin();
+    const { authUrl, deviceCode, userCode } = await initiateLogin();
     spinner.stop();
     console.log(source_default.white("  Open this URL in your browser to login:"));
     console.log("");
     console.log(source_default.cyan.bold(`    ${authUrl}`));
     console.log("");
+    console.log(source_default.white("  Or enter this code manually: ") + source_default.yellow.bold(userCode));
+    console.log("");
     console.log(source_default.dim("  Waiting for browser authorization..."));
     console.log(source_default.dim("  (This will timeout after 5 minutes)"));
     console.log("");
@@ -46587,6 +46610,7 @@ async function showFeatureExploration() {
   console.log(source_default.dim("  oculum watch .             ") + source_default.white("Watch for changes"));
   console.log(source_default.dim("  oculum ui                  ") + source_default.white("Interactive mode"));
   console.log(source_default.dim("  oculum login               ") + source_default.white("Authenticate for Pro features"));
+  console.log(source_default.dim("  oculum usage               ") + source_default.white("View credits and quota"));
   console.log(source_default.dim("  oculum --help              ") + source_default.white("Show all commands\n"));
   await ve({
     message: "Press Enter to continue",
@@ -47677,6 +47701,120 @@ var uiCommand = new Command("ui").description("Interactive terminal UI").action(
   await runUI();
 });
 
+// src/commands/usage.ts
+function formatNumber(num) {
+  if (num === -1) return "unlimited";
+  return num.toLocaleString();
+}
+function createProgressBar(percentage, width = 20) {
+  const filled = Math.round(percentage / 100 * width);
+  const empty = width - filled;
+  const bar = "\u2588".repeat(filled) + "\u2591".repeat(empty);
+  if (percentage >= 90) return source_default.red(bar);
+  if (percentage >= 70) return source_default.yellow(bar);
+  return source_default.green(bar);
+}
+function formatDate(dateStr) {
+  const date = new Date(dateStr);
+  return date.toLocaleDateString("en-US", {
+    month: "short",
+    day: "numeric",
+    year: "numeric"
+  });
+}
+async function usage(options) {
+  const config = getConfig();
+  if (!isAuthenticated()) {
+    console.log("");
+    console.log(source_default.yellow("  \u26A0 Not logged in"));
+    console.log("");
+    console.log(source_default.dim("  Login to view your usage and quota:"));
+    console.log(source_default.cyan("    oculum login"));
+    console.log("");
+    process.exit(1);
+  }
+  const spinner = ora("Fetching usage data...").start();
+  try {
+    const result = await getUsage(config.apiKey);
+    if (!result.success || !result.usage || !result.plan) {
+      spinner.fail("Failed to fetch usage data");
+      console.log("");
+      console.log(source_default.dim("  Error: ") + source_default.red(result.error || "Unknown error"));
+      console.log("");
+      process.exit(1);
+    }
+    spinner.stop();
+    if (options.json) {
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+    const { plan, usage: usageData } = result;
+    console.log("");
+    console.log(source_default.bold("  \u{1F4CA} Oculum Usage"));
+    console.log(source_default.dim("  " + "\u2500".repeat(38)));
+    console.log("");
+    const planBadge = plan.name === "pro" ? source_default.bgBlue.white(" PRO ") : plan.name === "enterprise" || plan.name === "max" ? source_default.bgMagenta.white(" MAX ") : plan.name === "starter" ? source_default.bgCyan.white(" STARTER ") : source_default.bgGray.white(" FREE ");
+    console.log(source_default.dim("  Plan: ") + planBadge + source_default.white(` ${plan.displayName}`));
+    console.log(source_default.dim("  Month: ") + source_default.white(usageData.month));
+    console.log("");
+    console.log(source_default.bold("  Credits Usage"));
+    console.log("");
+    const creditsDisplay = usageData.creditsLimit === -1 ? `${formatNumber(usageData.creditsUsed)} / unlimited` : `${formatNumber(usageData.creditsUsed)} / ${formatNumber(usageData.creditsLimit)}`;
+    console.log(source_default.dim("  Used:      ") + source_default.white(creditsDisplay));
+    if (usageData.creditsLimit !== -1) {
+      console.log(source_default.dim("  Remaining: ") + source_default.white(formatNumber(usageData.creditsRemaining)));
+      console.log("");
+      console.log(source_default.dim("  ") + createProgressBar(usageData.usagePercentage) + source_default.dim(` ${usageData.usagePercentage.toFixed(1)}%`));
+    }
+    console.log("");
+    console.log(source_default.bold("  This Month"));
+    console.log("");
+    console.log(source_default.dim("  Scans:     ") + source_default.white(formatNumber(usageData.totalScans)));
+    console.log(source_default.dim("  Files:     ") + source_default.white(formatNumber(usageData.totalFiles)));
+    console.log(source_default.dim("  Cost:      ") + source_default.white(`$${usageData.totalCostDollars.toFixed(4)}`));
+    console.log("");
+    console.log(source_default.dim("  Resets on: ") + source_default.white(formatDate(usageData.resetDate)));
+    console.log("");
+    if (result.recentScans && result.recentScans.length > 0) {
+      console.log(source_default.bold("  Recent Scans"));
+      console.log("");
+      const recentToShow = result.recentScans.slice(0, 5);
+      for (const scan of recentToShow) {
+        const date = new Date(scan.createdAt);
+        const timeAgo = getTimeAgo(date);
+        console.log(source_default.dim("  \u2022 ") + source_default.white(scan.repoName || "unknown") + source_default.dim(` (${timeAgo})`));
+        console.log(source_default.dim("    ") + source_default.dim(`${scan.filesScanned} files, ${scan.findingsCount} findings, ${scan.creditsUsed} credits`));
+      }
+      console.log("");
+    }
+    if (plan.name === "free" || plan.name === "starter") {
+      console.log(source_default.dim("  " + "\u2500".repeat(38)));
+      console.log("");
+      console.log(source_default.dim("  Need more credits? ") + source_default.cyan("oculum upgrade"));
+      console.log("");
+    }
+  } catch (error) {
+    spinner.fail("Failed to fetch usage data");
+    console.log("");
+    console.log(source_default.dim("  Error: ") + source_default.red(String(error)));
+    console.log("");
+    process.exit(1);
+  }
+}
+function getTimeAgo(date) {
+  const now = /* @__PURE__ */ new Date();
+  const diffMs = now.getTime() - date.getTime();
+  const diffMins = Math.floor(diffMs / 6e4);
+  const diffHours = Math.floor(diffMs / 36e5);
+  const diffDays = Math.floor(diffMs / 864e5);
+  if (diffMins < 1) return "just now";
+  if (diffMins < 60) return `${diffMins}m ago`;
+  if (diffHours < 24) return `${diffHours}h ago`;
+  if (diffDays < 7) return `${diffDays}d ago`;
+  return date.toLocaleDateString("en-US", { month: "short", day: "numeric" });
+}
+var usageCommand = new Command("usage").description("Show current usage and quota").option("--json", "Output as JSON").action(usage);
+
 // src/index.ts
 var program2 = new Command();
 program2.name("oculum").description("AI-native security scanner for detecting vulnerabilities in LLM-generated code").version("1.0.0").addHelpText("after", `
@@ -47691,6 +47829,7 @@ Common Commands:
   ui                       Interactive terminal UI
   login                    Authenticate with Oculum
   status                   Check authentication status
+  usage                    View credits and quota
 
 Learn More:
   $ oculum scan --help     Detailed scan options
@@ -47703,6 +47842,7 @@ program2.addCommand(authCommand);
 program2.addCommand(loginCommand);
 program2.addCommand(statusCommand);
 program2.addCommand(upgradeCommand);
+program2.addCommand(usageCommand);
 program2.addCommand(watchCommand);
 program2.addCommand(uiCommand);
 program2.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oculum/cli",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "AI-native security scanner CLI for detecting vulnerabilities in AI-generated code, BYOK patterns, and modern web applications",
   "main": "dist/index.js",
   "bin": {