@openrig/cli 0.6.10 → 0.6.12

package/daemon/dist/domain/provider/codex-usage-reader.js

@@ -0,0 +1,117 @@
+// Slice 01 (OPR.0.7.0.1) — one bounded read of the Codex login's native usage windows. A one-shot
+// `codex app-server` started with the PATH, HOME and CODEX_HOME a seat session gets answers
+// `account/read` (refreshToken:false) and `account/rateLimits/read`, then exits on stdin EOF; the
+// reader's process group is stopped the same way as the #275 network reader. It runs only on an
+// explicit refresh: ordinary provider reads never call it.
+//
+// Identity comes only from the two RPC answers. The reader never opens auth.json or any token.
+// Side effects: Codex startup may write its own state files in the shared CODEX_HOME (its databases,
+// installation id, bundled skills), and a backend read may refresh the login's token in auth.json, as
+// any Codex start can. Plugins and apps are off for this read, so no plugin sync runs.
+import { spawn } from "node:child_process";
+import { stopGroup } from "../codex-network-default.js";
+/** The app-server, with plugins and apps switched off for this read only (as `codex-network-default.ts`). */
+export const CODEX_USAGE_READER_ARGS = ["-c", "features.plugins=false", "-c", "features.apps=false", "app-server"];
+/** Native reads take 25–35 s (Ops' readers); the refresh is bounded by the upper end. */
+export const CODEX_USAGE_READ_DEADLINE_MS = 35_000;
+/** How long the reader's process group gets at each stop step (and for the reap) once the read ends. */
+export const CODEX_USAGE_READ_GRACE_MS = 2_000;
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const firstLine = (error) => String(error instanceof Error ? error.message : error).split("\n")[0];
+export function codexUsageReader(options = {}) {
+    const deadlineMs = options.deadlineMs ?? CODEX_USAGE_READ_DEADLINE_MS;
+    const graceMs = options.graceMs ?? CODEX_USAGE_READ_GRACE_MS;
+    const maxOutputBytes = options.maxOutputBytes ?? 1024 * 1024;
+    const now = options.now ?? (() => new Date().toISOString());
+    return async () => {
+        const env = {
+            ...process.env,
+            ...(options.launchPath ? { PATH: options.launchPath } : {}),
+            ...(options.home ? { HOME: options.home } : {}),
+            ...(options.codexHome ? { CODEX_HOME: options.codexHome } : {}),
+        };
+        let child;
+        try {
+            // Its own process group, so cleanup reaches the reader's descendants and nothing else.
+            // Plugins and apps off, as the #275 network reader starts it: no plugin sync during a usage read.
+            child = spawn("codex", CODEX_USAGE_READER_ARGS, { cwd: options.home, env, stdio: ["pipe", "pipe", "ignore"], detached: true });
+        }
+        catch (error) {
+            return { ok: false, at: now(), reason: "spawn_failed", detail: `codex app-server could not start: ${firstLine(error)}` };
+        }
+        const outcome = await converse(child, deadlineMs, maxOutputBytes, now);
+        await stopGroup(child, graceMs);
+        return outcome;
+    };
+}
+function converse(child, deadlineMs, maxOutputBytes, now) {
+    return new Promise((resolve) => {
+        let account;
+        let buffered = "";
+        let received = 0;
+        let settled = false;
+        const finish = (outcome) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(deadline);
+            resolve(outcome);
+        };
+        const fail = (reason, detail) => finish({ ok: false, at: now(), reason, detail });
+        const deadline = setTimeout(() => fail("timeout", `codex app-server did not answer within ${deadlineMs} ms`), deadlineMs);
+        const send = (message) => {
+            if (child.stdin?.writable)
+                child.stdin.write(`${JSON.stringify(message)}\n`);
+        };
+        child.on("error", (error) => {
+            if (error.code === "ENOENT")
+                fail("binary_not_found", "no codex executable on the daemon's PATH");
+            else
+                fail("spawn_failed", `codex app-server could not start: ${firstLine(error)}`);
+        });
+        child.on("exit", (code, signal) => fail("child_exited", `codex app-server exited before answering (${signal ?? `code ${code}`})`));
+        child.stdin?.on("error", () => fail("child_exited", "codex app-server closed its input before answering"));
+        child.stdout?.setEncoding("utf8");
+        child.stdout?.on("data", (chunk) => {
+            received += Buffer.byteLength(chunk);
+            if (received > maxOutputBytes)
+                return fail("output_too_large", `codex app-server answered with more than ${maxOutputBytes} bytes`);
+            buffered += chunk;
+            let newline;
+            while ((newline = buffered.indexOf("\n")) >= 0) {
+                const line = buffered.slice(0, newline).trim();
+                buffered = buffered.slice(newline + 1);
+                if (!line)
+                    continue;
+                let message;
+                try {
+                    message = JSON.parse(line);
+                }
+                catch {
+                    continue;
+                }
+                // Only responses to our own requests: notifications and server requests carry a method.
+                if (!isRecord(message) || typeof message.id !== "number" || "method" in message)
+                    continue;
+                if (message.error !== undefined) {
+                    const method = message.id === 1 ? "initialize" : message.id === 2 ? "account/read" : "account/rateLimits/read";
+                    const text = isRecord(message.error) && typeof message.error.message === "string" ? `: ${message.error.message.split("\n")[0]}` : "";
+                    return fail("rpc_error", `codex app-server returned an error for ${method}${text}`);
+                }
+                if (message.id === 1) {
+                    send({ method: "initialized", params: {} });
+                    send({ id: 2, method: "account/read", params: { refreshToken: false } });
+                }
+                else if (message.id === 2) {
+                    account = message.result;
+                    send({ id: 3, method: "account/rateLimits/read" });
+                }
+                else if (message.id === 3) {
+                    return finish({ ok: true, observedAt: now(), account, rateLimits: message.result });
+                }
+            }
+        });
+        send({ id: 1, method: "initialize", params: { clientInfo: { name: "openrig_usage_windows", version: "1.0.0" }, capabilities: null } });
+    });
+}
+//# sourceMappingURL=codex-usage-reader.js.map

package/daemon/dist/domain/provider/codex-usage-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-usage-reader.js","sourceRoot":"","sources":["../../../src/domain/provider/codex-usage-reader.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,4FAA4F;AAC5F,kGAAkG;AAClG,gGAAgG;AAChG,2DAA2D;AAC3D,EAAE;AACF,+FAA+F;AAC/F,qGAAqG;AACrG,sGAAsG;AACtG,uFAAuF;AAEvF,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AA8BxD,6GAA6G;AAC7G,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,qBAAqB,EAAE,YAAY,CAAC,CAAC;AAEnH,yFAAyF;AACzF,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AACnD,wGAAwG;AACxG,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAE/C,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC;AAErH,MAAM,UAAU,gBAAgB,CAAC,UAAmC,EAAE;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,4BAA4B,CAAC;IACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,yBAAyB,CAAC;IAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,GAAG,IAAI,CAAC;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,GAAG,GAAG;YACV,GAAG,OAAO,CAAC,GAAG;YACd,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC;QACF,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACH,uFAAuF;YACvF,kGAAkG;YAClG,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,uBAAuB,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACjI,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,qCAAqC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC3H,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;QACvE,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,KAA+B,EAC/B,UAAkB,EAClB,cAAsB,EACtB,GAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAgB,CAAC;QACrB,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,OAA8B,EAAE,EAAE;YAChD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,MAA+B,EAAE,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnH,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,0CAA0C,UAAU,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;QAC1H,MAAM,IAAI,GAAG,CAAC,OAAgC,EAAE,EAAE;YAChD,IAAI,KAAK,CAAC,KAAK,EAAE,QAAQ;gBAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/E,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YACjD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,IAAI,CAAC,kBAAkB,EAAE,0CAA0C,CAAC,CAAC;;gBAC7F,IAAI,CAAC,cAAc,EAAE,qCAAqC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,6CAA6C,MAAM,IAAI,QAAQ,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACnI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,oDAAoD,CAAC,CAAC,CAAC;QAC3G,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,QAAQ,GAAG,cAAc;gBAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,4CAA4C,cAAc,QAAQ,CAAC,CAAC;YACnI,QAAQ,IAAI,KAAK,CAAC;YAClB,IAAI,OAAe,CAAC;YACpB,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC/C,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;gBACvC,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,OAAgB,CAAC;gBACrB,IAAI,CAAC;oBAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACvD,wFAAwF;gBACxF,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,IAAI,OAAO;oBAAE,SAAS;gBAC1F,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAChC,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,yBAAyB,CAAC;oBAC/G,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrI,OAAO,IAAI,CAAC,WAAW,EAAE,0CAA0C,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC;gBACtF,CAAC;gBACD,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;oBACrB,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC5C,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC3E,CAAC;qBAAM,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;oBAC5B,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;oBACzB,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;gBACrD,CAAC;qBAAM,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;oBAC5B,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBACtF,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACzI,CAAC,CAAC,CAAC;AACL,CAAC"}

package/daemon/dist/domain/provider/codex-usage-windows.d.ts

@@ -0,0 +1,39 @@
+import type { CodexUsageReader } from "./codex-usage-reader.js";
+import type { UsageAllowanceIdentity } from "./provider-types.js";
+import { UsageWindows, type UsageReading } from "./usage-windows.js";
+export { UNRESOLVED_READS_KEPT, USAGE_CLOCK_TOLERANCE_MS, USAGE_FRESH_FOR_MS, usageFreshness, usageLevel, type UsageRefreshResult, } from "./usage-windows.js";
+type Reading = UsageReading<UsageAllowanceIdentity>;
+/**
+ * The workspace `account/read` reports, when it reports one: `workspaceRouting.chatgptAccountId` at the top
+ * level of the result (a sibling of `account`). Path and types from Codex 0.162.1's generated schema
+ * (GetAccountResponse.json), relayed by Build's reviewer: `workspaceRouting` is optional and nullable, and
+ * when present `chatgptAccountId` is a non-null string. Its siblings (backendOrigin, accountRoutingOverride)
+ * are not identity. Codex 0.153.4's answer has no `workspaceRouting`, so it yields null there.
+ */
+export declare function accountReadWorkspaceId(account: unknown): string | null;
+/**
+ * Normalize the two app-server answers (shapes from Codex 0.153.4's protocol: `GetAccountResponse`,
+ * `GetAccountRateLimitsResponse`). One reading per metered bucket (`rateLimitsByLimitId`, else the
+ * single-bucket `rateLimits`). Identity is the usage answer's `accountId`, else the workspace
+ * `account/read` reports, else unresolved; email and plan are labels and never part of identity.
+ */
+export declare function normalizeCodexUsage(account: unknown, rateLimits: unknown, observedAt: string): {
+    ok: true;
+    readings: Reading[];
+} | {
+    ok: false;
+    detail: string;
+};
+/** The replacement key of a resolved identity. Email is never part of it; an unresolved identity has none. */
+export declare const codexUsageIdentityKey: (i: UsageAllowanceIdentity) => string | null;
+export interface CodexUsageWindowsDeps {
+    read: CodexUsageReader;
+    now?: () => string;
+}
+export declare class CodexUsageWindows extends UsageWindows<UsageAllowanceIdentity, {
+    account: unknown;
+    rateLimits: unknown;
+}> {
+    constructor(deps: CodexUsageWindowsDeps);
+}
+//# sourceMappingURL=codex-usage-windows.d.ts.map

package/daemon/dist/domain/provider/codex-usage-windows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-usage-windows.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/codex-usage-windows.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAwB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE3F,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC;AAG5B,KAAK,OAAO,GAAG,YAAY,CAAC,sBAAsB,CAAC,CAAC;AAkBpD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAGtE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAC3F;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAwClE;AAED,8GAA8G;AAC9G,eAAO,MAAM,qBAAqB,GAAI,GAAG,sBAAsB,KAAG,MAAM,GAAG,IAG/D,CAAC;AAEb,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,gBAAgB,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,iBAAkB,SAAQ,YAAY,CAAC,sBAAsB,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC;gBACxG,IAAI,EAAE,qBAAqB;CAUxC"}

package/daemon/dist/domain/provider/codex-usage-windows.js

@@ -0,0 +1,101 @@
+// Slice 01 (OPR.0.7.0.1) — Codex usage windows for the provider view: the Codex normalizer and
+// identity rule over the shared usage-windows core (usage-windows.ts), which holds the last reading in
+// memory, refreshes only on request (coalesced) and projects rows.
+import { UsageWindows } from "./usage-windows.js";
+export { UNRESOLVED_READS_KEPT, USAGE_CLOCK_TOLERANCE_MS, USAGE_FRESH_FOR_MS, usageFreshness, usageLevel, } from "./usage-windows.js";
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const stringOrNull = (value) => (typeof value === "string" && value.length > 0 ? value : null);
+function readWindow(window, raw) {
+    if (raw === null || raw === undefined)
+        return null;
+    if (!isRecord(raw) || typeof raw.usedPercent !== "number" || !Number.isFinite(raw.usedPercent))
+        return "bad";
+    const resetsAt = typeof raw.resetsAt === "number" && Number.isFinite(raw.resetsAt)
+        ? new Date(raw.resetsAt * 1000).toISOString()
+        : null;
+    const durationMins = typeof raw.windowDurationMins === "number" && Number.isFinite(raw.windowDurationMins)
+        ? raw.windowDurationMins
+        : null;
+    return { window, durationMins, usedPercent: raw.usedPercent, resetsAt };
+}
+/**
+ * The workspace `account/read` reports, when it reports one: `workspaceRouting.chatgptAccountId` at the top
+ * level of the result (a sibling of `account`). Path and types from Codex 0.162.1's generated schema
+ * (GetAccountResponse.json), relayed by Build's reviewer: `workspaceRouting` is optional and nullable, and
+ * when present `chatgptAccountId` is a non-null string. Its siblings (backendOrigin, accountRoutingOverride)
+ * are not identity. Codex 0.153.4's answer has no `workspaceRouting`, so it yields null there.
+ */
+export function accountReadWorkspaceId(account) {
+    if (!isRecord(account) || !isRecord(account.workspaceRouting))
+        return null;
+    return stringOrNull(account.workspaceRouting.chatgptAccountId);
+}
+/**
+ * Normalize the two app-server answers (shapes from Codex 0.153.4's protocol: `GetAccountResponse`,
+ * `GetAccountRateLimitsResponse`). One reading per metered bucket (`rateLimitsByLimitId`, else the
+ * single-bucket `rateLimits`). Identity is the usage answer's `accountId`, else the workspace
+ * `account/read` reports, else unresolved; email and plan are labels and never part of identity.
+ */
+export function normalizeCodexUsage(account, rateLimits, observedAt) {
+    if (!isRecord(rateLimits))
+        return { ok: false, detail: "account/rateLimits/read returned an unrecognized shape" };
+    const accountInfo = isRecord(account) && isRecord(account.account) ? account.account : null;
+    const email = accountInfo ? stringOrNull(accountInfo.email) : null;
+    const accountPlan = accountInfo ? stringOrNull(accountInfo.planType) : null;
+    const accountId = stringOrNull(rateLimits.accountId);
+    const workspaceId = accountId === null ? accountReadWorkspaceId(account) : null;
+    const source = accountId !== null
+        ? "account/rateLimits/read accountId"
+        : workspaceId !== null ? "account/read workspace routing" : "unresolved";
+    const buckets = isRecord(rateLimits.rateLimitsByLimitId)
+        ? Object.entries(rateLimits.rateLimitsByLimitId)
+        : isRecord(rateLimits.rateLimits)
+            ? [[stringOrNull(rateLimits.rateLimits.limitId) ?? "codex", rateLimits.rateLimits]]
+            : [];
+    if (buckets.length === 0)
+        return { ok: false, detail: "account/rateLimits/read returned no rate-limit buckets" };
+    const readings = [];
+    for (const [limitId, snapshot] of buckets) {
+        if (!isRecord(snapshot))
+            return { ok: false, detail: `bucket ${limitId} has an unrecognized shape` };
+        const windows = [];
+        for (const key of ["primary", "secondary"]) {
+            const w = readWindow(key, snapshot[key]);
+            if (w === "bad")
+                return { ok: false, detail: `bucket ${limitId} ${key} window has an unrecognized shape` };
+            if (w)
+                windows.push(w);
+        }
+        readings.push({
+            identity: {
+                accountId,
+                workspaceId,
+                limitId,
+                email,
+                planType: stringOrNull(snapshot.planType) ?? accountPlan,
+                source,
+            },
+            windows,
+            limitEvidence: stringOrNull(snapshot.rateLimitReachedType),
+            observedAt,
+        });
+    }
+    return { ok: true, readings };
+}
+/** The replacement key of a resolved identity. Email is never part of it; an unresolved identity has none. */
+export const codexUsageIdentityKey = (i) => i.accountId !== null ? `codex:account:${i.accountId}:${i.limitId}`
+    : i.workspaceId !== null ? `codex:workspace:${i.workspaceId}:${i.limitId}`
+        : null;
+export class CodexUsageWindows extends UsageWindows {
+    constructor(deps) {
+        super({
+            provider: "codex",
+            sourceKind: "codex_app_server",
+            read: deps.read,
+            normalize: (answer) => normalizeCodexUsage(answer.account, answer.rateLimits, answer.observedAt),
+            key: codexUsageIdentityKey,
+            ...(deps.now ? { now: deps.now } : {}),
+        });
+    }
+}
+//# sourceMappingURL=codex-usage-windows.js.map

package/daemon/dist/domain/provider/codex-usage-windows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-usage-windows.js","sourceRoot":"","sources":["../../../src/domain/provider/codex-usage-windows.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,uGAAuG;AACvG,mEAAmE;AAInE,OAAO,EAAE,YAAY,EAA2C,MAAM,oBAAoB,CAAC;AAE3F,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,cAAc,EACd,UAAU,GAEX,MAAM,oBAAoB,CAAC;AAK5B,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,MAAM,YAAY,GAAG,CAAC,KAAc,EAAiB,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEvH,SAAS,UAAU,CAAC,MAA+B,EAAE,GAAY;IAC/D,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7G,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChF,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QAC7C,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,kBAAkB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACxG,CAAC,CAAC,GAAG,CAAC,kBAAkB;QACxB,CAAC,CAAC,IAAI,CAAC;IACT,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,UAAmB,EAAE,UAAkB;IAE3F,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IAClH,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,MAAM,MAAM,GAAqC,SAAS,KAAK,IAAI;QACjE,CAAC,CAAC,mCAAmC;QACrC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,YAAY,CAAC;IAC3E,MAAM,OAAO,GAA6B,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAChF,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAChD,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;YAC/B,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;YACnF,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IACjH,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,OAAO,4BAA4B,EAAE,CAAC;QACrG,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAU,EAAE,CAAC;YACpD,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,OAAO,IAAI,GAAG,mCAAmC,EAAE,CAAC;YAC3G,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE;gBACR,SAAS;gBACT,WAAW;gBACX,OAAO;gBACP,KAAK;gBACL,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,WAAW;gBACxD,MAAM;aACP;YACD,OAAO;YACP,aAAa,EAAE,YAAY,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YAC1D,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,8GAA8G;AAC9G,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAyB,EAAiB,EAAE,CAChF,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,EAAE;IAChE,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,OAAO,EAAE;QACxE,CAAC,CAAC,IAAI,CAAC;AAOb,MAAM,OAAO,iBAAkB,SAAQ,YAA+E;IACpH,YAAY,IAA2B;QACrC,KAAK,CAAC;YACJ,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,kBAAkB;YAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;YAChG,GAAG,EAAE,qBAAqB;YAC1B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;CACF"}

package/daemon/dist/domain/provider/provider-seat-accounts.d.ts

@@ -0,0 +1,18 @@
+import type { ClaudeWindowSample } from "./claude-usage-windows.js";
+import type { CodexAuthMetadata } from "./codex-auth-reader.js";
+import type { ProviderSeat } from "./provider-collect.js";
+import type { ProviderUsageAllowance, SeatConfiguredAccount } from "./provider-types.js";
+export interface SeatAccountsInput {
+    seats: ProviderSeat[];
+    auth: CodexAuthMetadata;
+    usage: ProviderUsageAllowance[];
+    /** Each Claude seat's own latest status-line samples (ClaudeUsageWindows.seatSamples()); null when not available. */
+    claudeSamples: ClaudeWindowSample[] | null;
+    /** The CODEX_HOME every Codex seat on this daemon launches with. */
+    codexHome: string;
+    /** The daemon's CLAUDE_CONFIG_DIR as set (may be relative), and its HOME. */
+    claudeConfigDir: string | undefined;
+    home: string | undefined;
+}
+export declare function configuredSeatAccounts(input: SeatAccountsInput): SeatConfiguredAccount[];
+//# sourceMappingURL=provider-seat-accounts.d.ts.map

package/daemon/dist/domain/provider/provider-seat-accounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-seat-accounts.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/provider-seat-accounts.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAEzF,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAChC,qHAAqH;IACrH,aAAa,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAC3C,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B;AASD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,qBAAqB,EAAE,CA0FxF"}

package/daemon/dist/domain/provider/provider-seat-accounts.js

@@ -0,0 +1,159 @@
+// Slice 01 (OPR.0.7.0.1) — each seat's CONFIGURED account, kept apart from any observed allowance.
+//
+// A pure function over facts the provider service already has: the live seat universe, the codex-auth
+// registry METADATA (profile names and the seat TSV, via readCodexAuthMetadata: no profile contents are
+// ever opened), the usage rows already in memory, and the daemon's own Codex home and Claude config dir.
+//
+// What it never does: join a configured profile to an observed allowance. A registry profile name and an
+// observed account are different kinds of fact, and a shared home says which login a seat STARTED on, not
+// which one the home holds now. Equal resets, a shared email or a matching spelling never link anything.
+import path from "node:path";
+const REGISTRY_NOT_LINKED = "a registry profile name and an observed account are different kinds of fact; nothing supported links them without reading the profile's contents";
+const DEFAULT_LOGIN_NOT_LINKED = "the usage read reads the login this home holds now; the seat runs the login that was active when it launched";
+const DIFFERS_NOTE = "possibly a different login: this seat's status line reports windows that differ from another seat's (a reset more than 60 s apart); not a verdict";
+export function configuredSeatAccounts(input) {
+    const profiles = new Set(input.auth.profiles);
+    const registryBySeat = new Map(input.auth.seats.map((row) => [row.seat, row]));
+    const claudeHome = claudeConfigHome(input.claudeConfigDir, input.home);
+    // Each seat's newest sample time. The samples carry no time bound, so "sampled" always comes with its time.
+    let claudeSampled = null;
+    if (input.claudeSamples) {
+        claudeSampled = new Map();
+        for (const s of input.claudeSamples) {
+            const prev = claudeSampled.get(s.seatSession);
+            if (prev === undefined || Date.parse(s.sampledAt) > Date.parse(prev))
+                claudeSampled.set(s.seatSession, s.sampledAt);
+        }
+    }
+    const claudeDiffers = currentDisagreements(input.usage);
+    const registryGap = codexRegistryGap(input.auth);
+    const sharedBySession = new Map();
+    for (const seat of input.seats)
+        sharedBySession.set(seat.seatSession, (sharedBySession.get(seat.seatSession) ?? 0) + 1);
+    return input.seats.map((seat) => {
+        const base = { seatSession: seat.seatSession, rigName: seat.rigName, runtime: seat.runtime };
+        const row = registryBySeat.get(seat.seatSession);
+        const notes = [];
+        const shared = sharedBySession.get(seat.seatSession) ?? 1;
+        if (row && seat.runtime !== "codex") {
+            notes.push(`stale registry row: names profile ${row.authProfile} (recorded ${row.updatedTs}) for runtime ${row.runtime}; not applied: this seat now runs ${seat.runtime}`);
+        }
+        if (seat.runtime === "codex") {
+            if (row) {
+                if (row.runtime !== "codex")
+                    notes.push(`the registry row's runtime column says ${row.runtime}, not codex`);
+                // An unreadable profile folder can't say either way: profileSaved is null, never "not saved".
+                const folder = input.auth.profilesRead;
+                const profileSaved = folder?.status === "unreadable" ? null : profiles.has(row.authProfile);
+                if (profileSaved === null)
+                    notes.push(`can't tell whether profile ${row.authProfile} is saved on this host: the profile folder couldn't be read (${folder.code ?? "unknown"})`);
+                else if (!profileSaved)
+                    notes.push(`profile ${row.authProfile} is not saved on this host`);
+                if (row.rig && row.rig !== seat.rigName)
+                    notes.push(`registry row names rig ${row.rig}; this seat is in rig ${seat.rigName}`);
+                if (shared > 1)
+                    notes.push(`${shared} seats share session name ${seat.seatSession}; the seat-keyed registry row cannot tell them apart`);
+                return {
+                    ...base,
+                    configured: { source: "registry", profileRef: row.authProfile, recordedAt: row.updatedTs, profileSaved },
+                    ...(notes.length ? { registryNotes: notes } : {}),
+                    allowance: { linked: false, reason: REGISTRY_NOT_LINKED },
+                    observed: { note: "no per-seat observation for Codex" },
+                };
+            }
+            // No parsed row is a supported absence only when the registry was read whole (or isn't there).
+            if (registryGap) {
+                return {
+                    ...base,
+                    configured: { source: "unknown", reason: registryGap },
+                    allowance: { linked: false, reason: "no configured account" },
+                    observed: { note: "no per-seat observation for Codex" },
+                };
+            }
+            return {
+                ...base,
+                configured: { source: "default_login", home: input.codexHome, homeNote: "the login active in the daemon's CODEX_HOME when this seat launched" },
+                allowance: { linked: false, reason: DEFAULT_LOGIN_NOT_LINKED },
+                observed: { note: "no per-seat observation for Codex" },
+            };
+        }
+        if (seat.runtime === "claude-code") {
+            const differs = claudeDiffers.get(seat.seatSession);
+            return {
+                ...base,
+                configured: { source: "default_login", home: claudeHome.home, homeNote: claudeHome.note },
+                ...(notes.length ? { registryNotes: notes } : {}),
+                allowance: { linked: false, reason: DEFAULT_LOGIN_NOT_LINKED },
+                observed: shared > 1
+                    ? { withheld: true, note: `observation withheld: ${shared} seats share session name ${seat.seatSession}; status-line samples are keyed by session name and cannot be attributed to one seat` }
+                    : !claudeSampled
+                        ? { note: "status-line samples were not available to this read" }
+                        : claudeSampled.has(seat.seatSession)
+                            ? {
+                                windowsSampled: true,
+                                lastSampledAt: claudeSampled.get(seat.seatSession),
+                                ...(differs?.size ? { differsFrom: [...differs].sort(), note: DIFFERS_NOTE } : {}),
+                            }
+                            : { windowsSampled: false },
+            };
+        }
+        return {
+            ...base,
+            configured: { source: "unknown", reason: `no account configuration is known for runtime ${seat.runtime}` },
+            ...(notes.length ? { registryNotes: notes } : {}),
+            allowance: { linked: false, reason: "no configured account" },
+        };
+    });
+}
+function claudeConfigHome(configDir, home) {
+    const shared = "the login in the daemon's Claude config dir, shared by every Claude seat on this daemon";
+    // As the launch resolver does (claude-managed-launch.ts:59, `CLAUDE_CONFIG_DIR ?? HOME/.claude`, resolved against
+    // the seat's cwd): only an unset value falls back to HOME; an empty one resolves to each seat's working directory.
+    if (configDir === undefined) {
+        return home ? { home: path.join(home, ".claude"), note: shared } : { home: null, note: "the daemon's HOME is not set" };
+    }
+    if (configDir === "") {
+        return { home: null, note: "CLAUDE_CONFIG_DIR is set but empty: it resolves to each seat's working directory" };
+    }
+    if (!path.isAbsolute(configDir)) {
+        return { home: null, note: `CLAUDE_CONFIG_DIR ${configDir} is relative: it resolves against each seat's working directory` };
+    }
+    return { home: configDir, note: shared };
+}
+/** Why a Codex seat with no parsed registry row can't be called default login, or null when it can. */
+function codexRegistryGap(auth) {
+    const read = auth.registry;
+    if (!read)
+        return null;
+    if (read.status === "unreadable")
+        return `the seat registry exists but couldn't be read (${read.code ?? "unknown"})`;
+    if (read.malformedRows > 0)
+        return `the registry has ${read.malformedRows} malformed row${read.malformedRows === 1 ? "" : "s"}; this seat may be among them`;
+    return null;
+}
+/** Disagreements on the CURRENT Claude row only: fresh windows of rows that are the latest from their source. A
+ *  frozen earlier row's disagreement stays in the usage history, labelled there, and never becomes a current one. */
+function currentDisagreements(usage) {
+    const seen = new Map();
+    const touch = (seat) => {
+        let set = seen.get(seat);
+        if (!set)
+            seen.set(seat, (set = new Set()));
+        return set;
+    };
+    for (const row of usage) {
+        if (row.provider !== "claude" || row.latestFromSource === false)
+            continue;
+        for (const window of row.windows) {
+            if (!window.seatSession || window.freshness !== "fresh")
+                continue;
+            const own = touch(window.seatSession);
+            for (const other of window.disagreeingSeats ?? []) {
+                own.add(other.seatSession);
+                touch(other.seatSession).add(window.seatSession);
+            }
+        }
+    }
+    return seen;
+}
+//# sourceMappingURL=provider-seat-accounts.js.map

package/daemon/dist/domain/provider/provider-seat-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-seat-accounts.js","sourceRoot":"","sources":["../../../src/domain/provider/provider-seat-accounts.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,EAAE;AACF,sGAAsG;AACtG,wGAAwG;AACxG,yGAAyG;AACzG,EAAE;AACF,yGAAyG;AACzG,0GAA0G;AAC1G,yGAAyG;AAEzG,OAAO,IAAI,MAAM,WAAW,CAAC;AAmB7B,MAAM,mBAAmB,GACvB,kJAAkJ,CAAC;AACrJ,MAAM,wBAAwB,GAC5B,8GAA8G,CAAC;AACjH,MAAM,YAAY,GAChB,mJAAmJ,CAAC;AAEtJ,MAAM,UAAU,sBAAsB,CAAC,KAAwB;IAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACvE,4GAA4G;IAC5G,IAAI,aAAa,GAA+B,IAAI,CAAC;IACrD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,aAAa,GAAG,IAAI,GAAG,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC9C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QACtH,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK;QAAE,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAExH,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAyB,EAAE;QACrD,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7F,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,qCAAqC,GAAG,CAAC,WAAW,cAAc,GAAG,CAAC,SAAS,iBAAiB,GAAG,CAAC,OAAO,qCAAqC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7K,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC7B,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO;oBAAE,KAAK,CAAC,IAAI,CAAC,0CAA0C,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC;gBAC5G,8FAA8F;gBAC9F,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;gBACvC,MAAM,YAAY,GAAG,MAAM,EAAE,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC5F,IAAI,YAAY,KAAK,IAAI;oBAAE,KAAK,CAAC,IAAI,CAAC,8BAA8B,GAAG,CAAC,WAAW,gEAAgE,MAAO,CAAC,IAAI,IAAI,SAAS,GAAG,CAAC,CAAC;qBAC5K,IAAI,CAAC,YAAY;oBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,WAAW,4BAA4B,CAAC,CAAC;gBAC3F,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO;oBAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,GAAG,yBAAyB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9H,IAAI,MAAM,GAAG,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,6BAA6B,IAAI,CAAC,WAAW,sDAAsD,CAAC,CAAC;gBACzI,OAAO;oBACL,GAAG,IAAI;oBACP,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE;oBACxG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjD,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE;oBACzD,QAAQ,EAAE,EAAE,IAAI,EAAE,mCAAmC,EAAE;iBACxD,CAAC;YACJ,CAAC;YACD,+FAA+F;YAC/F,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO;oBACL,GAAG,IAAI;oBACP,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE;oBACtD,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE;oBAC7D,QAAQ,EAAE,EAAE,IAAI,EAAE,mCAAmC,EAAE;iBACxD,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,GAAG,IAAI;gBACP,UAAU,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,qEAAqE,EAAE;gBAC/I,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE;gBAC9D,QAAQ,EAAE,EAAE,IAAI,EAAE,mCAAmC,EAAE;aACxD,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACpD,OAAO;gBACL,GAAG,IAAI;gBACP,UAAU,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE;gBACzF,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE;gBAC9D,QAAQ,EAAE,MAAM,GAAG,CAAC;oBAClB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,yBAAyB,MAAM,6BAA6B,IAAI,CAAC,WAAW,sFAAsF,EAAE;oBAC9L,CAAC,CAAC,CAAC,aAAa;wBAChB,CAAC,CAAC,EAAE,IAAI,EAAE,qDAAqD,EAAE;wBACjE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;4BACrC,CAAC,CAAC;gCACE,cAAc,EAAE,IAAI;gCACpB,aAAa,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAE;gCACnD,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BACnF;4BACH,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE;aAC9B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,GAAG,IAAI;YACP,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,iDAAiD,IAAI,CAAC,OAAO,EAAE,EAAE;YAC1G,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE;SAC9D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,SAA6B,EAAE,IAAwB;IAC/E,MAAM,MAAM,GAAG,yFAAyF,CAAC;IACzG,kHAAkH;IAClH,mHAAmH;IACnH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;IAC1H,CAAC;IACD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,kFAAkF,EAAE,CAAC;IAClH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,SAAS,iEAAiE,EAAE,CAAC;IAC/H,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,uGAAuG;AACvG,SAAS,gBAAgB,CAAC,IAAuB;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY;QAAE,OAAO,kDAAkD,IAAI,CAAC,IAAI,IAAI,SAAS,GAAG,CAAC;IACrH,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC;QAAE,OAAO,oBAAoB,IAAI,CAAC,aAAa,iBAAiB,IAAI,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,+BAA+B,CAAC;IAC7J,OAAO,IAAI,CAAC;AACd,CAAC;AAED;qHACqH;AACrH,SAAS,oBAAoB,CAAC,KAA+B;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,gBAAgB,KAAK,KAAK;YAAE,SAAS;QAC1E,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO;gBAAE,SAAS;YAClE,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;gBAClD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC3B,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/daemon/dist/domain/provider/provider-service-impl.d.ts

@@ -1,5 +1,8 @@
 import type Database from "better-sqlite3";
 import { type AgentActivityStore } from "../agent-activity-store.js";
+import type { CodexUsageWindows } from "./codex-usage-windows.js";
+import type { ClaudeUsageWindows } from "./claude-usage-windows.js";
+import type { UsageRefreshResult } from "./usage-windows.js";
 import type { ProviderService, ProviderPrecheckInput, ProviderSwitchInput, ProviderSwitchResult } from "./provider-service.js";
 import type { FourBlockReadModel, PrecheckResult, ProviderSignal } from "./provider-types.js";
 export interface ProviderServiceImplDeps {
@@ -16,11 +19,23 @@ export interface ProviderServiceImplDeps {
     warn?: (message: string) => void;
     env?: NodeJS.ProcessEnv;
     now?: () => string;
+    /** Slice 01: Codex usage windows, served only while `enabled()` (provider.usage_windows) is true. */
+    usageWindows?: {
+        enabled: () => boolean;
+        windows: CodexUsageWindows;
+        claude?: ClaudeUsageWindows;
+    };
 }
 export declare class ProviderServiceImpl implements ProviderService {
     private readonly deps;
     constructor(deps: ProviderServiceImplDeps);
     getReadModel(): Promise<FourBlockReadModel>;
+    refreshUsage(provider: "codex" | "claude"): Promise<UsageRefreshResult | {
+        disabled: true;
+    } | {
+        unavailable: true;
+    }>;
+    private usageWindowsEnabled;
     private listSeats;
     precheck(input: ProviderPrecheckInput): Promise<PrecheckResult>;
     switchAccount(input: ProviderSwitchInput): Promise<ProviderSwitchResult>;

package/daemon/dist/domain/provider/provider-service-impl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-service-impl.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/provider-service-impl.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,4BAA4B,CAAC;AAMpC,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE9F,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,2FAA2F;IAC3F,QAAQ,EAAE,MAAM,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtC,gGAAgG;IAChG,oBAAoB,CAAC,EAAE,MAAM,cAAc,EAAE,CAAC;IAC9C,sGAAsG;IACtG,kBAAkB,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IAClE,qGAAqG;IACrG,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,mBAAoB,YAAW,eAAe;IAC7C,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,uBAAuB;IAEpD,YAAY,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAiCjD,OAAO,CAAC,SAAS;IAgBX,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;IAc/D,aAAa,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAW/E"}
+{"version":3,"file":"provider-service-impl.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/provider-service-impl.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,4BAA4B,CAAC;AAOpC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE9F,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,2FAA2F;IAC3F,QAAQ,EAAE,MAAM,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtC,gGAAgG;IAChG,oBAAoB,CAAC,EAAE,MAAM,cAAc,EAAE,CAAC;IAC9C,sGAAsG;IACtG,kBAAkB,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IAClE,qGAAqG;IACrG,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,qGAAqG;IACrG,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,OAAO,CAAC;QAAC,OAAO,EAAE,iBAAiB,CAAC;QAAC,MAAM,CAAC,EAAE,kBAAkB,CAAA;KAAE,CAAC;CACpG;AAED,qBAAa,mBAAoB,YAAW,eAAe;IAC7C,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,uBAAuB;IAEpD,YAAY,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAwD3C,YAAY,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC,kBAAkB,GAAG;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,WAAW,EAAE,IAAI,CAAA;KAAE,CAAC;IAM1H,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,SAAS;IAgBX,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;IAc/D,aAAa,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAW/E"}

package/daemon/dist/domain/provider/provider-service-impl.js

@@ -3,10 +3,13 @@
 // precheck composes the pure precheckSwitch gate (fails closed on unknown auth per BR-3). switch
 // is precheck-gated and NEVER fabricates success — the switch-execution + BR-1 action-record path
 // is the D seam; until it lands, switch returns an honest failed_safely with an operational reason.
+import nodePath from "node:path";
+import os from "node:os";
 import { AGENT_ACTIVITY_FRESHNESS_MS, } from "../agent-activity-store.js";
 import { getNodeInventory } from "../node-inventory.js";
 import { readCodexAuthMetadata } from "./codex-auth-reader.js";
 import { collectFourBlockReadModel } from "./provider-collect.js";
+import { configuredSeatAccounts } from "./provider-seat-accounts.js";
 import { precheckSwitch } from "./provider-policy.js";
 import { collectReactiveEventSignals } from "./reactive-tap.js";
 export class ProviderServiceImpl {
@@ -37,7 +40,7 @@ export class ProviderServiceImpl {
             }
             return result.signals;
         };
-        return collectFourBlockReadModel({
+        const model = collectFourBlockReadModel({
             readCodexAuth: readAuth,
             listSeats,
             collectSignals: () => [
@@ -46,6 +49,47 @@ export class ProviderServiceImpl {
             ],
             now: () => asOf,
         });
+        // Slice 01: memory only. A read never starts a native probe (the wake ladder reads this every tick).
+        const usage = this.usageWindowsEnabled() ? this.deps.usageWindows.windows.project(asOf) : null;
+        if (!usage)
+            return model;
+        // The read covers only the login active in the daemon's CODEX_HOME: say so whenever saved rig auth
+        // profiles exist, so a profile without a row never reads as fine.
+        const profiles = model.accounts.filter((a) => a.provider === "codex").map((a) => a.accountId);
+        const savedProfiles = profiles.length > 0
+            ? { names: profiles, note: "saved rig auth profiles: not read (usage unknown); this reading is only the login active in the daemon's CODEX_HOME" }
+            : null;
+        const codexRows = savedProfiles ? usage.map((row) => ({ ...row, savedProfiles })) : usage;
+        const allUsage = [...codexRows, ...(this.deps.usageWindows.claude?.project(asOf) ?? [])];
+        // Each seat's configured account, from the same seat universe and registry metadata (names only), never
+        // linked to a usage row.
+        const seatAccounts = configuredSeatAccounts({
+            seats: listSeats(),
+            auth: readAuth(),
+            usage: allUsage,
+            claudeSamples: this.deps.usageWindows.claude?.seatSamples() ?? null,
+            codexHome: env.CODEX_HOME || nodePath.join(env.HOME ?? os.homedir(), ".codex"),
+            claudeConfigDir: env.CLAUDE_CONFIG_DIR,
+            home: env.HOME ?? os.homedir(),
+        });
+        return { ...model, usage: allUsage, seatAccounts };
+    }
+    async refreshUsage(provider) {
+        if (!this.usageWindowsEnabled())
+            return { disabled: true };
+        if (provider === "claude")
+            return this.deps.usageWindows.claude?.refresh() ?? { unavailable: true };
+        return this.deps.usageWindows.windows.refresh();
+    }
+    usageWindowsEnabled() {
+        if (!this.deps.usageWindows)
+            return false;
+        try {
+            return this.deps.usageWindows.enabled();
+        }
+        catch {
+            return false;
+        }
     }
     listSeats() {
         const seats = [];

package/daemon/dist/domain/provider/provider-service-impl.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-service-impl.js","sourceRoot":"","sources":["../../../src/domain/provider/provider-service-impl.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,oGAAoG;AAGpG,OAAO,EACL,2BAA2B,GAE5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAA0B,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAqB,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAuBhE,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,IAA6B;QAA7B,SAAI,GAAJ,IAAI,CAAyB;IAAG,CAAC;IAE9D,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACzC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,IAAmC,CAAC;QACxC,IAAI,KAAiC,CAAC;QACtC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACnD,MAAM,sBAAsB,GAAG,GAAqB,EAAE;YACpD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB;gBAAE,OAAO,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,2BAA2B,CAAC;gBACzC,KAAK,EAAE,SAAS,EAAE;gBAClB,IAAI,EAAE,QAAQ,EAAE;gBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB;gBACtC,GAAG,EAAE,IAAI;gBACT,WAAW,EAAE,2BAA2B;aACzC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,KAAK,MAAM,WAAW,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC;QACF,OAAO,yBAAyB,CAAC;YAC/B,aAAa,EAAE,QAAQ;YACvB,SAAS;YACT,cAAc,EAAE,GAAG,EAAE,CAAC;gBACpB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC;gBAC7C,GAAG,sBAAsB,EAAE;aAC5B;YACD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAEO,SAAS;QACf,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YACvC,KAAK,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,KAAK,CAAC,oBAAoB;oBAAE,SAAS;gBAC1C,KAAK,CAAC,IAAI,CAAC;oBACT,WAAW,EAAE,KAAK,CAAC,oBAAoB;oBACvC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;oBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS;oBACnC,cAAc,EAAE,KAAK,CAAC,cAAc;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA4B;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3E,8FAA8F;QAC9F,8FAA8F;QAC9F,8FAA8F;QAC9F,uFAAuF;QACvF,OAAO,cAAc,CAAC;YACpB,cAAc,EAAE,MAAM,EAAE,QAAQ,IAAI,OAAO;YAC3C,eAAe,EAAE,MAAM,EAAE,SAAS,IAAI,SAAS;YAC/C,uBAAuB,EAAE,IAAI;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAA0B;QAC5C,+EAA+E;QAC/E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACtF,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAgC,EAAE,CAAC;QACjF,CAAC;QACD,4FAA4F;QAC5F,uFAAuF;QACvF,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,gCAAgC,CAAC,EAAE,CAAC;IACnF,CAAC;CACF"}
+{"version":3,"file":"provider-service-impl.js","sourceRoot":"","sources":["../../../src/domain/provider/provider-service-impl.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,oGAAoG;AAEpG,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EACL,2BAA2B,GAE5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAA0B,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAqB,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AA4BhE,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,IAA6B;QAA7B,SAAI,GAAJ,IAAI,CAAyB;IAAG,CAAC;IAE9D,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACzC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,IAAmC,CAAC;QACxC,IAAI,KAAiC,CAAC;QACtC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACnD,MAAM,sBAAsB,GAAG,GAAqB,EAAE;YACpD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB;gBAAE,OAAO,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,2BAA2B,CAAC;gBACzC,KAAK,EAAE,SAAS,EAAE;gBAClB,IAAI,EAAE,QAAQ,EAAE;gBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB;gBACtC,GAAG,EAAE,IAAI;gBACT,WAAW,EAAE,2BAA2B;aACzC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,KAAK,MAAM,WAAW,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,yBAAyB,CAAC;YACtC,aAAa,EAAE,QAAQ;YACvB,SAAS;YACT,cAAc,EAAE,GAAG,EAAE,CAAC;gBACpB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC;gBAC7C,GAAG,sBAAsB,EAAE;aAC5B;YACD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,qGAAqG;QACrG,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAa,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChG,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,mGAAmG;QACnG,kEAAkE;QAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9F,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,qHAAqH,EAAE;YAClJ,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC1F,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAa,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1F,wGAAwG;QACxG,yBAAyB;QACzB,MAAM,YAAY,GAAG,sBAAsB,CAAC;YAC1C,KAAK,EAAE,SAAS,EAAE;YAClB,IAAI,EAAE,QAAQ,EAAE;YAChB,KAAK,EAAE,QAAQ;YACf,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,YAAa,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,IAAI;YACpE,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC;YAC9E,eAAe,EAAE,GAAG,CAAC,iBAAiB;YACtC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAA4B;QAC7C,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC3D,IAAI,QAAQ,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,YAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACrG,OAAO,IAAI,CAAC,IAAI,CAAC,YAAa,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACnD,CAAC;IAEO,mBAAmB;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,SAAS;QACf,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YACvC,KAAK,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,KAAK,CAAC,oBAAoB;oBAAE,SAAS;gBAC1C,KAAK,CAAC,IAAI,CAAC;oBACT,WAAW,EAAE,KAAK,CAAC,oBAAoB;oBACvC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;oBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS;oBACnC,cAAc,EAAE,KAAK,CAAC,cAAc;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA4B;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3E,8FAA8F;QAC9F,8FAA8F;QAC9F,8FAA8F;QAC9F,uFAAuF;QACvF,OAAO,cAAc,CAAC;YACpB,cAAc,EAAE,MAAM,EAAE,QAAQ,IAAI,OAAO;YAC3C,eAAe,EAAE,MAAM,EAAE,SAAS,IAAI,SAAS;YAC/C,uBAAuB,EAAE,IAAI;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAA0B;QAC5C,+EAA+E;QAC/E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACtF,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAgC,EAAE,CAAC;QACjF,CAAC;QACD,4FAA4F;QAC5F,uFAAuF;QACvF,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,gCAAgC,CAAC,EAAE,CAAC;IACnF,CAAC;CACF"}