@openrig/cli 0.6.11 → 0.6.13

package/daemon/dist/domain/provider/claude-auth-status-reader.js

@@ -0,0 +1,195 @@
+// Slice 01 (OPR.0.7.0.1) — the identity half of the Claude usage view: one bounded `claude auth status --json`,
+// run only on an explicit refresh (ordinary provider reads never call it). The windows come from the seats'
+// status-line samples (claude-usage-windows.ts); this answers which login the daemon's Claude config dir holds.
+//
+// `claude` is resolved on the reader's PATH and run by absolute path, in its own process group with stdin
+// closed, bounded (10 s); however it ends, its group is stopped (a moment, TERM, KILL) and the child reaped, so
+// nothing it started keeps running. Facts are taken only from an exit-0 answer, with one exception from Claude's
+// documented contract: logged out, it prints {"loggedIn": false, ...} and exits 1, which is not_logged_in (no
+// identity fact is taken from it). Any other nonzero exit is auth_status_failed, whatever it printed. Only loggedIn, authMethod, email and orgId are read, plus orgName and
+// subscriptionType as labels. It runs with the HOME, CLAUDE_CONFIG_DIR and PATH a seat session gets, without
+// TMUX, TMUX_PANE or any OpenRig seat variable. It starts a Claude CLI process, not a session; what that
+// process may write in the config dir is open for the native run. The reader never opens a credentials file.
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+export const CLAUDE_AUTH_STATUS_TIMEOUT_MS = 10_000;
+export const GRACE_MS = 1_000;
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const stringOrNull = (value) => (typeof value === "string" && value.length > 0 ? value : null);
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/** The `claude` executable on the reader's own PATH, as an absolute path, or null. */
+export function resolveClaudeExecutable(env) {
+    for (const dir of (env.PATH ?? "").split(path.delimiter)) {
+        if (!dir)
+            continue;
+        const candidate = path.join(dir, "claude");
+        try {
+            fs.accessSync(candidate, fs.constants.X_OK);
+            if (fs.statSync(candidate).isFile())
+                return path.resolve(candidate);
+        }
+        catch {
+            continue;
+        }
+    }
+    return null;
+}
+/** The child environment: the seat's HOME/CLAUDE_CONFIG_DIR/PATH, never TMUX, TMUX_PANE or seat variables. */
+export function claudeAuthReaderEnv(options, base = process.env) {
+    const env = {};
+    for (const [key, value] of Object.entries(base)) {
+        if (value === undefined)
+            continue;
+        if (key === "TMUX" || key === "TMUX_PANE" || key === "CLAUDECODE")
+            continue;
+        if (key.startsWith("OPENRIG_") || key.startsWith("RIGGED_") || key.startsWith("CLAUDE_CODE_"))
+            continue;
+        env[key] = value;
+    }
+    if (options.launchPath)
+        env.PATH = options.launchPath;
+    if (options.home)
+        env.HOME = options.home;
+    if (options.claudeConfigDir)
+        env.CLAUDE_CONFIG_DIR = options.claudeConfigDir;
+    env.DISABLE_AUTOUPDATER = "1";
+    return env;
+}
+/** True once no process of the group remains, waiting up to `withinMs`. */
+async function groupGone(pgid, withinMs) {
+    const until = performance.now() + withinMs;
+    for (;;) {
+        try {
+            process.kill(-pgid, 0);
+        }
+        catch {
+            return true;
+        }
+        if (performance.now() >= until)
+            return false;
+        await sleep(20);
+    }
+}
+/** Stop a process group: a moment to leave by itself, then TERM, then KILL, each bounded by `graceMs`. */
+async function stopProcessGroup(pgid, graceMs) {
+    for (const signal of [null, "SIGTERM", "SIGKILL"]) {
+        if (signal) {
+            try {
+                process.kill(-pgid, signal);
+            }
+            catch {
+                return;
+            }
+        }
+        if (await groupGone(pgid, signal ? graceMs : Math.min(graceMs, 200)))
+            return;
+    }
+}
+/** `claude auth status --json` in its own process group; the group is stopped however the command ends,
+ *  so nothing it started outlives it. Its output is taken once the command exits, not when its pipes close
+ *  (a leftover child could hold them open). */
+function runAuthStatus(file, env, cwd, timeoutMs, graceMs) {
+    return new Promise((resolve) => {
+        let child;
+        try {
+            child = spawn(file, ["auth", "status", "--json"], { env, cwd, stdio: ["ignore", "pipe", "ignore"], detached: true });
+        }
+        catch (error) {
+            resolve({ code: null, stdout: "", error: error, timedOut: false });
+            return;
+        }
+        let stdout = "";
+        let timedOut = false;
+        let settled = false;
+        // Node reaps the child on its exit event; until then a killed child is a zombie that still has its pid.
+        const reaped = new Promise((resolveReap) => child.once("exit", () => resolveReap()));
+        child.stdout?.setEncoding("utf8");
+        child.stdout?.on("data", (chunk) => {
+            if (stdout.length < 1024 * 1024)
+                stdout += chunk;
+        });
+        const finish = async (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            if (child.pid !== undefined) {
+                await stopProcessGroup(child.pid, graceMs);
+                // A killed group leaves the group list before Node reaps the child: wait, bounded, for the reap too
+                // (as the Codex reader's stopGroup does), so the read never returns with its own child unreaped.
+                let reapTimer;
+                await Promise.race([reaped, new Promise((r) => { reapTimer = setTimeout(r, graceMs); })]);
+                clearTimeout(reapTimer);
+            }
+            child.stdout?.destroy();
+            resolve({ ...result, stdout, timedOut });
+        };
+        const timer = setTimeout(() => {
+            timedOut = true;
+            void finish({ code: null, signal: null });
+        }, Math.max(1, Math.floor(timeoutMs)));
+        child.once("error", (error) => void finish({ code: null, error }));
+        child.once("exit", (code, signal) => {
+            // What it wrote before exiting may still be in the pipe: wait for the end, briefly.
+            const done = () => void finish({ code, signal });
+            if (child.stdout === null || child.stdout.readableEnded)
+                done();
+            else {
+                child.stdout.once("end", done);
+                setTimeout(done, 200);
+            }
+        });
+    });
+}
+export function claudeAuthStatusReader(options = {}) {
+    const timeoutMs = options.timeoutMs ?? CLAUDE_AUTH_STATUS_TIMEOUT_MS;
+    const graceMs = options.graceMs ?? GRACE_MS;
+    const now = options.now ?? (() => new Date().toISOString());
+    return async () => {
+        const env = claudeAuthReaderEnv(options);
+        const fail = (reason, detail) => ({ ok: false, at: now(), reason, detail });
+        const claude = resolveClaudeExecutable(env);
+        if (claude === null)
+            return fail("binary_not_found", "no claude executable on the daemon's PATH");
+        const r = await runAuthStatus(claude, env, options.home, timeoutMs, graceMs);
+        if (r.error?.code === "ENOENT")
+            return fail("binary_not_found", "no claude executable on the daemon's PATH");
+        if (r.timedOut)
+            return fail("auth_status_failed", `claude auth status did not answer within ${Math.round(timeoutMs / 1000)} s`);
+        if (r.error)
+            return fail("auth_status_failed", `claude auth status could not run (${r.error.code ?? r.error.message})`);
+        let parsed;
+        try {
+            parsed = JSON.parse(r.stdout);
+        }
+        catch {
+            parsed = null;
+        }
+        if (r.code !== 0) {
+            // Facts come only from a command that succeeded. The one exception is Claude's documented logged-out answer:
+            // exit 1 exactly. Any other exit (9, a signal...) is an unexpected failure, whatever the JSON says.
+            if (!r.signal && r.code === 1 && isRecord(parsed) && parsed.loggedIn === false) {
+                return fail("not_logged_in", `claude auth status reports no login (exit ${r.code ?? "?"})`);
+            }
+            return fail("auth_status_failed", `claude auth status failed (${r.signal ? `signal ${r.signal}` : `exit ${r.code ?? "?"}`})`);
+        }
+        if (!isRecord(parsed))
+            return fail("auth_status_failed", "claude auth status returned no JSON (exit 0)");
+        const auth = {
+            loggedIn: parsed.loggedIn === true,
+            authMethod: stringOrNull(parsed.authMethod),
+            email: stringOrNull(parsed.email),
+            orgId: stringOrNull(parsed.orgId),
+            orgName: stringOrNull(parsed.orgName),
+            subscriptionType: stringOrNull(parsed.subscriptionType),
+        };
+        if (!auth.loggedIn)
+            return fail("not_logged_in", "claude auth status reports no login");
+        if (auth.authMethod !== "claude.ai") {
+            return fail("not_subscription_login", `the login is not a claude.ai subscription (${auth.authMethod ?? "unknown method"})`);
+        }
+        return { ok: true, observedAt: now(), auth };
+    };
+}
+//# sourceMappingURL=claude-auth-status-reader.js.map

package/daemon/dist/domain/provider/claude-auth-status-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-auth-status-reader.js","sourceRoot":"","sources":["../../../src/domain/provider/claude-auth-status-reader.ts"],"names":[],"mappings":"AAAA,gHAAgH;AAChH,4GAA4G;AAC5G,gHAAgH;AAChH,EAAE;AACF,0GAA0G;AAC1G,gHAAgH;AAChH,iHAAiH;AACjH,8GAA8G;AAC9G,4KAA4K;AAC5K,6GAA6G;AAC7G,yGAAyG;AACzG,6GAA6G;AAE7G,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA6B7B,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AACpD,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC;AAE9B,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,MAAM,YAAY,GAAG,CAAC,KAAc,EAAiB,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACvH,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEhF,sFAAsF;AACtF,MAAM,UAAU,uBAAuB,CAAC,GAAsB;IAC5D,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,mBAAmB,CAAC,OAAgC,EAAE,OAA0B,OAAO,CAAC,GAAG;IACzG,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,YAAY;YAAE,SAAS;QAC5E,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,SAAS;QACxG,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,UAAU;QAAE,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC;IACtD,IAAI,OAAO,CAAC,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1C,IAAI,OAAO,CAAC,eAAe;QAAE,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAC7E,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;IAC9B,OAAO,GAAG,CAAC;AACb,CAAC;AAID,2EAA2E;AAC3E,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,QAAgB;IACrD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;IAC3C,SAAS,CAAC;QACR,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtD,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAC7C,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,0GAA0G;AAC1G,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC3D,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAU,EAAE,CAAC;QAC3D,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO;YAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAAE,OAAO;IAC/E,CAAC;AACH,CAAC;AAED;;+CAE+C;AAC/C,SAAS,aAAa,CAAC,IAAY,EAAE,GAAsB,EAAE,GAAuB,EAAE,SAAiB,EAAE,OAAe;IACtH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACvH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAA8B,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QACD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,wGAAwG;QACxG,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC3F,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,EAAE,MAAwC,EAAE,EAAE;YAChE,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC3C,oGAAoG;gBACpG,iGAAiG;gBACjG,IAAI,SAAoD,CAAC;gBACzD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,GAAG,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1F,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;YACD,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,oFAAoF;YACpF,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa;gBAAE,IAAI,EAAE,CAAC;iBAC3D,CAAC;gBACJ,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC/B,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAmC,EAAE;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,6BAA6B,CAAC;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,CAAC,MAA+B,EAAE,MAAc,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtH,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAC;QAClG,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7E,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAC;QAC7G,IAAI,CAAC,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,oBAAoB,EAAE,4CAA4C,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAChI,IAAI,CAAC,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,oBAAoB,EAAE,qCAAqC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;QACxH,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;QAAC,CAAC;QAC/D,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACjB,6GAA6G;YAC7G,oGAAoG;YACpG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;gBAC/E,OAAO,IAAI,CAAC,eAAe,EAAE,6CAA6C,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC;YAC9F,CAAC;YACD,OAAO,IAAI,CAAC,oBAAoB,EAAE,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;QAChI,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC,oBAAoB,EAAE,8CAA8C,CAAC,CAAC;QACzG,MAAM,IAAI,GAAoB;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,IAAI;YAClC,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC;YAC3C,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC;YACjC,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC;YACjC,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC;YACrC,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC;SACxD,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;QACxF,IAAI,IAAI,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,wBAAwB,EAAE,8CAA8C,IAAI,CAAC,UAAU,IAAI,gBAAgB,GAAG,CAAC,CAAC;QAC9H,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/provider/claude-usage-windows.d.ts

@@ -0,0 +1,70 @@
+import type Database from "better-sqlite3";
+import type { ClaudeAuthAnswer, ClaudeAuthReader } from "./claude-auth-status-reader.js";
+import type { ClaudeUsageIdentity, ProviderUsageAllowance } from "./provider-types.js";
+import { type UsageRefreshResult } from "./usage-windows.js";
+/** The status line's only bucket: its session and weekly windows cover all models. */
+export declare const CLAUDE_STATUSLINE_BUCKET = "all models";
+export interface ClaudeWindowSample {
+    seatSession: string;
+    window: "five_hour" | "weekly";
+    usedPercent: number;
+    resetsAt: string | null;
+    /** The status line's own time for this reading. */
+    sampledAt: string;
+}
+/** Each seat's latest provider-window sample per window (lane provider_window). This runs on every read-model
+ *  call while the switch is on, so it never walks the series: it steps from one seat to the next on 094's partial
+ *  index (seat_session, window, id), then takes each window's latest id with one index seek (about 0.1 ms with
+ *  200k samples across 20 seats, where a per-row MAX subquery took about 150 ms). */
+export declare function latestClaudeWindowSamples(db: Database.Database): ClaudeWindowSample[];
+/** Another seat's fresh reading of the same window that disagrees with the one shown (its own numbers). */
+export interface DisagreeingSeat {
+    seatSession: string;
+    usedPercent: number;
+    resetsAt: string | null;
+    observedAt: string;
+}
+/** One window as shown: the freshest sample, plus the other seats whose fresh samples disagree with it. */
+interface Pick {
+    window: string;
+    durationMins: number;
+    usedPercent: number;
+    resetsAt: string | null;
+    observedAt: string;
+    seatSession: string;
+    disagreeing: DisagreeingSeat[];
+}
+export declare function pickClaudeWindows(samples: ClaudeWindowSample[], now: string): Pick[];
+/** Why a joined Claude row's account availability is unknown, whatever its windows show. */
+export declare const CLAUDE_NO_SAMPLE_BINDING = "no sample-time link between these seats' readings and this login: a seat on another login, or still on an earlier one, reads the same, so this account's availability isn't known from them; each seat's own readings: rig usage series --seat <seat> --lane provider_window";
+/** The same reason before any refresh: no login has been read yet, so there's no "this login" to name. */
+export declare const CLAUDE_NO_SAMPLE_BINDING_UNREAD = "no sample-time link between these seats' readings and the daemon's Claude login (not read yet; refresh with rig provider status --refresh), so its availability isn't known from them; each seat's own readings: rig usage series --seat <seat> --lane provider_window";
+export declare const claudeUsageIdentityKey: (i: ClaudeUsageIdentity) => string | null;
+export declare function claudeIdentityFromAuth(auth: ClaudeAuthAnswer["auth"]): ClaudeUsageIdentity;
+export declare class ClaudeUsageWindows {
+    private readonly deps;
+    private readonly now;
+    private current;
+    private readonly frozen;
+    private frozenUnresolved;
+    private unresolvedDropped;
+    private lastRefresh;
+    private inflight;
+    private lastSamples;
+    constructor(deps: {
+        readIdentity: ClaudeAuthReader;
+        listSamples: () => ClaudeWindowSample[];
+        now?: () => string;
+    });
+    /** One bounded identity read. A refresh asked for while one runs joins it. Windows always come from samples. */
+    refresh(): Promise<UsageRefreshResult>;
+    private runRead;
+    /** Each seat's own latest samples as the last project() read them, from memory (no query of its own); null
+     *  before any project() or when the samples couldn't be read. Unlike the served windows, which keep one sample
+     *  per window, every seat that reported is here. */
+    seatSamples(): ClaudeWindowSample[] | null;
+    /** The served rows: samples and the identity in memory. It never starts a native read. */
+    project(now: string): ProviderUsageAllowance[];
+}
+export {};
+//# sourceMappingURL=claude-usage-windows.d.ts.map

package/daemon/dist/domain/provider/claude-usage-windows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-usage-windows.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/claude-usage-windows.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACzF,OAAO,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAmD,MAAM,qBAAqB,CAAC;AACxI,OAAO,EAQL,KAAK,kBAAkB,EACxB,MAAM,oBAAoB,CAAC;AAE5B,sFAAsF;AACtF,eAAO,MAAM,wBAAwB,eAAe,CAAC;AAMrD,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;qFAGqF;AACrF,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,kBAAkB,EAAE,CAuBrF;AAED,2GAA2G;AAC3G,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,2GAA2G;AAC3G,UAAU,IAAI;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,EAAE,CAapF;AAoBD,4FAA4F;AAC5F,eAAO,MAAM,wBAAwB,iRAC2O,CAAC;AAEjR,0GAA0G;AAC1G,eAAO,MAAM,+BAA+B,2QAC8N,CAAC;AAoB3Q,eAAO,MAAM,sBAAsB,GAAI,GAAG,mBAAmB,KAAG,MAAM,GAAG,IAC8B,CAAC;AAExG,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,GAAG,mBAAmB,CAS1F;AAeD,qBAAa,kBAAkB;IAUjB,OAAO,CAAC,QAAQ,CAAC,IAAI;IATjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0D;IACjF,OAAO,CAAC,gBAAgB,CAAkD;IAC1E,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,WAAW,CAAoC;IACvD,OAAO,CAAC,QAAQ,CAA6C;IAC7D,OAAO,CAAC,WAAW,CAAqC;gBAE3B,IAAI,EAAE;QAAE,YAAY,EAAE,gBAAgB,CAAC;QAAC,WAAW,EAAE,MAAM,kBAAkB,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;KAAE;IAIlI,gHAAgH;IAC1G,OAAO,IAAI,OAAO,CAAC,kBAAkB,CAAC;YAW9B,OAAO;IAqCrB;;wDAEoD;IACpD,WAAW,IAAI,kBAAkB,EAAE,GAAG,IAAI;IAI1C,0FAA0F;IAC1F,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,sBAAsB,EAAE;CA2G/C"}

package/daemon/dist/domain/provider/claude-usage-windows.js

@@ -0,0 +1,305 @@
+// Slice 01 (OPR.0.7.0.1) — Claude usage windows for the provider view, built on what exists: the seats'
+// status-line rate_limits samples (usage_samples, lane provider_window, migration 062: the context monitor
+// appends each seat's reading when it advances) joined with the identity `claude auth status` reports on an
+// explicit refresh (claude-auth-status-reader.ts).
+//
+// - Windows: for the 5-hour and weekly windows, the freshest sample across seats, observed at the sample's own
+//   time (the status line's asOf), naming its seat. An idle seat stops advancing, so its windows age to stale.
+//   Another seat's still-fresh sample with a different reset makes the window's level unknown: the seats may be on
+//   different logins, and nothing is merged.
+// - Identity: the daemon's Claude login as of the last refresh, held in memory only. The status line carries no
+//   account identity, so nothing is written to the samples or any table (062's Option-A bar); every row says the
+//   join is not proven to be the same login. Key: (orgId, email) plus the bucket; either missing is unresolved.
+// - A refresh that reports another login freezes the earlier row as it was at its own last refresh; that row reads
+//   stale (a later read exists). Nothing is merged or relabelled. A daemon restart starts with no identity.
+// - Account availability stays unknown. A sample records a seat and a time, and the identity is the daemon's login as of
+//   a refresh: nothing links a seat's sample to the login that seat used when it sampled, so a seat on another login, or
+//   a seat still on the previous login, can't be told apart (two hermetic source cases: the same reset on another login, and a seat still on an earlier login). The windows stay visible
+//   as each seat's own readings; until a sample-time seat-to-account binding exists, the row never reads "known".
+import { UNRESOLVED_EARLIER_NOTE, UNRESOLVED_NOTE, UNRESOLVED_READS_KEPT, sameReset, usageFreshness, usageLevel, } from "./usage-windows.js";
+/** The status line's only bucket: its session and weekly windows cover all models. */
+export const CLAUDE_STATUSLINE_BUCKET = "all models";
+const WINDOWS = [
+    { window: "five_hour", durationMins: 300 },
+    { window: "weekly", durationMins: 10080 },
+];
+/** Each seat's latest provider-window sample per window (lane provider_window). This runs on every read-model
+ *  call while the switch is on, so it never walks the series: it steps from one seat to the next on 094's partial
+ *  index (seat_session, window, id), then takes each window's latest id with one index seek (about 0.1 ms with
+ *  200k samples across 20 seats, where a per-row MAX subquery took about 150 ms). */
+export function latestClaudeWindowSamples(db) {
+    const rows = db.prepare(`WITH RECURSIVE seats(s) AS (
+       SELECT MIN(seat_session) FROM usage_samples WHERE lane = 'provider_window'
+       UNION ALL
+       SELECT (SELECT MIN(seat_session) FROM usage_samples WHERE lane = 'provider_window' AND seat_session > s)
+       FROM seats WHERE s IS NOT NULL
+     ),
+     latest(id) AS (
+       SELECT (SELECT MAX(id) FROM usage_samples WHERE lane = 'provider_window' AND seat_session = seats.s AND window = w.window)
+       FROM seats, (SELECT 'five_hour' AS window UNION ALL SELECT 'weekly') w
+       WHERE seats.s IS NOT NULL
+     )
+     SELECT seat_session, window, window_used_percent, resets_at, sampled_at
+     FROM usage_samples
+     WHERE id IN (SELECT id FROM latest WHERE id IS NOT NULL)`).all();
+    const out = [];
+    for (const r of rows) {
+        if ((r.window !== "five_hour" && r.window !== "weekly") || r.window_used_percent === null || r.sampled_at === null)
+            continue;
+        out.push({ seatSession: r.seat_session, window: r.window, usedPercent: r.window_used_percent, resetsAt: r.resets_at, sampledAt: r.sampled_at });
+    }
+    return out;
+}
+export function pickClaudeWindows(samples, now) {
+    const picks = [];
+    for (const { window, durationMins } of WINDOWS) {
+        const forWindow = samples.filter((s) => s.window === window)
+            .sort((a, b) => Date.parse(b.sampledAt) - Date.parse(a.sampledAt) || a.seatSession.localeCompare(b.seatSession));
+        const freshest = forWindow[0];
+        if (!freshest)
+            continue;
+        const disagreeing = forWindow.slice(1)
+            .filter((s) => usageFreshness(s.sampledAt, now, null).freshness === "fresh" && !sameReset(s.resetsAt, freshest.resetsAt))
+            .map((s) => ({ seatSession: s.seatSession, usedPercent: s.usedPercent, resetsAt: s.resetsAt, observedAt: s.sampledAt }));
+        picks.push({ window, durationMins, usedPercent: freshest.usedPercent, resetsAt: freshest.resetsAt, observedAt: freshest.sampledAt, seatSession: freshest.seatSession, disagreeing });
+    }
+    return picks;
+}
+function windowRow(p, now, superseded) {
+    const level = p.disagreeing.length > 0
+        ? { level: "unknown", levelReason: `Claude seats report different windows (possibly different logins): ${[p.seatSession, ...p.disagreeing.map((d) => d.seatSession)].join(", ")}` }
+        : usageLevel({ window: p.window, durationMins: p.durationMins, usedPercent: p.usedPercent, resetsAt: p.resetsAt }, null, now);
+    return {
+        window: p.window,
+        durationMins: p.durationMins,
+        usedPercent: p.usedPercent,
+        remainingPercent: Math.max(0, 100 - p.usedPercent),
+        resetsAt: p.resetsAt,
+        observedAt: p.observedAt,
+        seatSession: p.seatSession,
+        ...(p.disagreeing.length > 0 ? { disagreeingSeats: p.disagreeing } : {}),
+        ...level,
+        ...usageFreshness(p.observedAt, now, null, superseded),
+    };
+}
+/** Why a joined Claude row's account availability is unknown, whatever its windows show. */
+export const CLAUDE_NO_SAMPLE_BINDING = "no sample-time link between these seats' readings and this login: a seat on another login, or still on an earlier one, reads the same, so this account's availability isn't known from them; each seat's own readings: rig usage series --seat <seat> --lane provider_window";
+/** The same reason before any refresh: no login has been read yet, so there's no "this login" to name. */
+export const CLAUDE_NO_SAMPLE_BINDING_UNREAD = "no sample-time link between these seats' readings and the daemon's Claude login (not read yet; refresh with rig provider status --refresh), so its availability isn't known from them; each seat's own readings: rig usage series --seat <seat> --lane provider_window";
+/** The Claude sign-in fact, from the last identity refresh only. `claude auth status` is local: a stored login proves
+ *  nothing about whether it works, so a signed-in Claude login reads at most unknown. */
+function claudeSignIn(last, readAt = null) {
+    if (!last)
+        return { state: "unknown", evidence: "claude auth status not read since the daemon started", at: null };
+    // A failure after this row's login was read identified no login, so it says nothing about this row's login. The
+    // config it did read is reported on its own row.
+    if (last.outcome === "failed" && readAt !== null) {
+        return { state: "unknown", at: last.at,
+            evidence: `the last identity refresh at ${last.at} failed (${last.reason ?? "unknown reason"}) and didn't identify a login; this row's login was read at ${readAt}` };
+    }
+    if (last.outcome === "ok") {
+        return { state: "unknown", at: last.at,
+            evidence: "claude auth status reports a stored claude.ai login; whether it works isn't checked (no read here contacts the service)" };
+    }
+    if (last.reason === "not_logged_in")
+        return { state: "needs_sign_in", evidence: "claude auth status reports no login", at: last.at };
+    return { state: "unknown", evidence: `the last identity refresh failed (${last.reason ?? "unknown reason"})`, at: last.at };
+}
+export const claudeUsageIdentityKey = (i) => (i.orgId !== null && i.email !== null ? `claude:org:${i.orgId}:email:${i.email}:${i.limitId}` : null);
+export function claudeIdentityFromAuth(auth) {
+    return {
+        orgId: auth.orgId,
+        limitId: CLAUDE_STATUSLINE_BUCKET,
+        email: auth.email,
+        orgName: auth.orgName,
+        subscriptionType: auth.subscriptionType,
+        source: auth.orgId !== null && auth.email !== null ? "claude auth status orgId and email" : "unresolved",
+    };
+}
+const NOT_READ_IDENTITY = {
+    orgId: null, limitId: CLAUDE_STATUSLINE_BUCKET, email: null, orgName: null, subscriptionType: null, source: "unresolved",
+};
+const NO_SEAT = "no Claude seat has reported status-line rate limits yet";
+export class ClaudeUsageWindows {
+    deps;
+    now;
+    current = null;
+    frozen = new Map();
+    frozenUnresolved = [];
+    unresolvedDropped = 0;
+    lastRefresh = null;
+    inflight = null;
+    lastSamples = null;
+    constructor(deps) {
+        this.deps = deps;
+        this.now = deps.now ?? (() => new Date().toISOString());
+    }
+    /** One bounded identity read. A refresh asked for while one runs joins it. Windows always come from samples. */
+    async refresh() {
+        if (this.inflight)
+            return { refresh: { ...(await this.inflight), coalesced: true } };
+        const run = this.runRead();
+        this.inflight = run;
+        try {
+            return { refresh: { ...(await run), coalesced: false } };
+        }
+        finally {
+            if (this.inflight === run)
+                this.inflight = null;
+        }
+    }
+    async runRead() {
+        let outcome;
+        try {
+            outcome = await this.deps.readIdentity();
+        }
+        catch (error) {
+            outcome = { ok: false, at: this.now(), reason: "auth_status_failed", detail: `the reader failed: ${error instanceof Error ? error.message : String(error)}` };
+        }
+        if (!outcome.ok) {
+            this.lastRefresh = { at: outcome.at, outcome: "failed", reason: outcome.reason, detail: outcome.detail };
+            return this.lastRefresh;
+        }
+        const identity = claudeIdentityFromAuth(outcome.auth);
+        const key = claudeUsageIdentityKey(identity);
+        let picks = [];
+        try {
+            picks = pickClaudeWindows(this.deps.listSamples(), outcome.observedAt);
+        }
+        catch { /* unreadable samples: the identity still lands; the view says the samples couldn't be read */ }
+        const prev = this.current;
+        // The same resolved login: the row continues. Anything else (another login, or an unresolved one, which can
+        // never be matched) freezes the earlier row as it was at its own last refresh.
+        if (prev && !(prev.key !== null && prev.key === key)) {
+            const done = { ...prev, supersededAt: outcome.observedAt };
+            if (prev.key !== null)
+                this.frozen.set(prev.key, done);
+            else {
+                this.frozenUnresolved.push(done);
+                while (this.frozenUnresolved.length > UNRESOLVED_READS_KEPT - 1) {
+                    this.frozenUnresolved.shift();
+                    this.unresolvedDropped += 1;
+                }
+            }
+        }
+        if (key !== null)
+            this.frozen.delete(key);
+        this.current = { identity, key, at: outcome.observedAt, picks };
+        this.lastRefresh = { at: outcome.observedAt, outcome: "ok" };
+        return this.lastRefresh;
+    }
+    /** Each seat's own latest samples as the last project() read them, from memory (no query of its own); null
+     *  before any project() or when the samples couldn't be read. Unlike the served windows, which keep one sample
+     *  per window, every seat that reported is here. */
+    seatSamples() {
+        return this.lastSamples;
+    }
+    /** The served rows: samples and the identity in memory. It never starts a native read. */
+    project(now) {
+        const source = { kind: "claude_statusline_samples", host: "local" };
+        let samples;
+        let unreadable = null;
+        try {
+            samples = this.deps.listSamples();
+        }
+        catch (error) {
+            samples = [];
+            unreadable = `the status-line samples could not be read: ${error instanceof Error ? error.message : String(error)}`;
+        }
+        this.lastSamples = unreadable ? null : samples;
+        const live = pickClaudeWindows(samples, now);
+        const rows = [];
+        const seatsOf = (picks) => [...new Set(picks.map((p) => p.seatSession))].join(", ");
+        const current = this.current;
+        const identity = current?.identity ?? NOT_READ_IDENTITY;
+        if (live.length === 0) {
+            rows.push({
+                provider: "claude",
+                identity: current ? identity : null,
+                source,
+                observedAt: null,
+                seats: "unknown",
+                windows: [],
+                limitEvidence: null,
+                latestFromSource: true,
+                lastRefresh: this.lastRefresh,
+                currentAvailability: "unknown",
+                // No sample-time link from a seat's reading to an account: each window is its seat's own.
+                accountHistory: "unknown",
+                signIn: claudeSignIn(this.lastRefresh, current?.at ?? null),
+                unavailableReason: unreadable ?? NO_SEAT,
+            });
+        }
+        else {
+            const windows = live.map((p) => windowRow(p, now, false));
+            const resolved = identity.source !== "unresolved";
+            rows.push({
+                provider: "claude",
+                identity,
+                source,
+                observedAt: live.map((p) => p.observedAt).sort().at(-1),
+                seats: "unknown",
+                windows,
+                limitEvidence: null,
+                latestFromSource: true,
+                lastRefresh: this.lastRefresh,
+                // Never "known" from this join: see CLAUDE_NO_SAMPLE_BINDING. The windows below are each seat's own readings.
+                currentAvailability: "unknown",
+                // No sample-time link from a seat's reading to an account: each window is its seat's own.
+                accountHistory: "unknown",
+                signIn: claudeSignIn(this.lastRefresh, current?.at ?? null),
+                unavailableReason: current ? CLAUDE_NO_SAMPLE_BINDING : CLAUDE_NO_SAMPLE_BINDING_UNREAD,
+                identityNote: current
+                    ? `identity: the daemon's Claude login (claude auth status) as of the refresh at ${current.at}; windows: status-line readings from ${seatsOf(live)} at their own times; not proven to be the same login`
+                    : `identity not read yet (rig provider status --refresh); windows: status-line readings from ${seatsOf(live)} at their own times`,
+                ...(!resolved ? {
+                    unresolved: {
+                        note: current ? UNRESOLVED_NOTE : "identity not read yet: not matched to, merged with or replacing any other row",
+                        keptReads: UNRESOLVED_READS_KEPT,
+                        droppedReads: this.unresolvedDropped,
+                    },
+                } : {}),
+            });
+        }
+        const earlier = [...[...this.frozen.entries()].sort(([a], [b]) => a.localeCompare(b)).map(([, s]) => s), ...this.frozenUnresolved];
+        for (const s of earlier) {
+            const windows = s.picks.map((p) => windowRow(p, now, true));
+            rows.push({
+                provider: "claude",
+                identity: s.identity,
+                source,
+                observedAt: s.picks.map((p) => p.observedAt).sort().at(-1) ?? null,
+                seats: "unknown",
+                windows,
+                limitEvidence: null,
+                latestFromSource: false,
+                lastRefresh: this.lastRefresh,
+                currentAvailability: "unknown",
+                // No sample-time link from a seat's reading to an account: each window is its seat's own.
+                accountHistory: "unknown",
+                signIn: { state: "unknown", at: null, evidence: s.identity.source === "unresolved"
+                        // An unresolved earlier identity can't be matched, so it may be this same login.
+                        ? "an earlier read not matched to the latest one (possibly this same login)"
+                        // The current login is unknown after an unidentified read and may be this one, so never "not the current login".
+                        : "not the latest read: a later refresh reported another login, or one it couldn't identify" },
+                identityNote: `identity: the daemon's Claude login as of the refresh at ${s.at}; a refresh at ${s.supersededAt} reported another login, or one it couldn't identify; windows as they were at ${s.at}${s.picks.length > 0 ? ` (from ${seatsOf(s.picks)})` : " (none reported then)"}`,
+                ...(s.identity.source === "unresolved" ? {
+                    unresolved: { note: UNRESOLVED_EARLIER_NOTE, keptReads: UNRESOLVED_READS_KEPT, droppedReads: this.unresolvedDropped },
+                } : {}),
+            });
+        }
+        // Last, so the existing rows keep their order. The daemon's Claude config when its last refresh reported no login but a login read earlier is kept: its own
+        // row, in the shape served with no identity, so the fact isn't pinned on the earlier login.
+        const last = this.lastRefresh;
+        if (current && last?.outcome === "failed" && last.reason === "not_logged_in") {
+            rows.push({
+                provider: "claude", identity: null, source, observedAt: null, seats: "unknown", windows: [], limitEvidence: null,
+                latestFromSource: true, lastRefresh: last, currentAvailability: "unknown",
+                signIn: claudeSignIn(last),
+                unavailableReason: `claude auth status at ${last.at} reported no login in the daemon's Claude config; the rows above keep the login read at ${current.at}`,
+            });
+        }
+        return rows;
+    }
+}
+//# sourceMappingURL=claude-usage-windows.js.map

package/daemon/dist/domain/provider/claude-usage-windows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-usage-windows.js","sourceRoot":"","sources":["../../../src/domain/provider/claude-usage-windows.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,2GAA2G;AAC3G,4GAA4G;AAC5G,mDAAmD;AACnD,EAAE;AACF,+GAA+G;AAC/G,+GAA+G;AAC/G,mHAAmH;AACnH,6CAA6C;AAC7C,gHAAgH;AAChH,iHAAiH;AACjH,gHAAgH;AAChH,mHAAmH;AACnH,4GAA4G;AAC5G,yHAAyH;AACzH,yHAAyH;AACzH,yLAAyL;AACzL,kHAAkH;AAKlH,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,qBAAqB,EACrB,SAAS,EACT,cAAc,EACd,UAAU,GAGX,MAAM,oBAAoB,CAAC;AAE5B,sFAAsF;AACtF,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAAC;AACrD,MAAM,OAAO,GAAG;IACd,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,EAAE;IAC1C,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE;CACjC,CAAC;AAWX;;;qFAGqF;AACrF,MAAM,UAAU,yBAAyB,CAAC,EAAqB;IAC7D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB;;;;;;;;;;;;;8DAa0D,CAC3D,CAAC,GAAG,EAA8I,CAAC;IACpJ,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,mBAAmB,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;YAAE,SAAS;QAC7H,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAClJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAqBD,MAAM,UAAU,iBAAiB,CAAC,OAA6B,EAAE,GAAW;IAC1E,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,OAAO,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;aACzD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACnH,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;aACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;aACxH,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC3H,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;IACvL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,CAAO,EAAE,GAAW,EAAE,UAAmB;IAC1D,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QACpC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAkB,EAAE,WAAW,EAAE,sEAAsE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;QAC5L,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAChI,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,WAAW,CAAC;QAClD,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,KAAK;QACR,GAAG,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,wBAAwB,GACnC,8QAA8Q,CAAC;AAEjR,0GAA0G;AAC1G,MAAM,CAAC,MAAM,+BAA+B,GAC1C,wQAAwQ,CAAC;AAE3Q;yFACyF;AACzF,SAAS,YAAY,CAAC,IAAgC,EAAE,SAAwB,IAAI;IAClF,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,sDAAsD,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACnH,gHAAgH;IAChH,iDAAiD;IACjD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACjD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE;YACpC,QAAQ,EAAE,gCAAgC,IAAI,CAAC,EAAE,YAAY,IAAI,CAAC,MAAM,IAAI,gBAAgB,+DAA+D,MAAM,EAAE,EAAE,CAAC;IAC1K,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE;YACpC,QAAQ,EAAE,yHAAyH,EAAE,CAAC;IAC1I,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,eAAe;QAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,qCAAqC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACrI,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,qCAAqC,IAAI,CAAC,MAAM,IAAI,gBAAgB,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;AAC9H,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAsB,EAAiB,EAAE,CAC9E,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAExG,MAAM,UAAU,sBAAsB,CAAC,IAA8B;IACnE,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,wBAAwB;QACjC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,MAAM,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,YAAY;KACzG,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAwB;IAC7C,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY;CACzH,CAAC;AACF,MAAM,OAAO,GAAG,yDAAyD,CAAC;AAU1E,MAAM,OAAO,kBAAkB;IAUA;IATZ,GAAG,CAAe;IAC3B,OAAO,GAAoB,IAAI,CAAC;IACvB,MAAM,GAAG,IAAI,GAAG,EAA+C,CAAC;IACzE,gBAAgB,GAA+C,EAAE,CAAC;IAClE,iBAAiB,GAAG,CAAC,CAAC;IACtB,WAAW,GAA+B,IAAI,CAAC;IAC/C,QAAQ,GAAwC,IAAI,CAAC;IACrD,WAAW,GAAgC,IAAI,CAAC;IAExD,YAA6B,IAAqG;QAArG,SAAI,GAAJ,IAAI,CAAiG;QAChI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,gHAAgH;IAChH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;QACrF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG;gBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAClD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,OAA2C,CAAC;QAChD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,sBAAsB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAChK,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YACzG,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;QACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,KAAK,GAAW,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC,CAAC,8FAA8F,CAAC,CAAC;QAC1G,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,4GAA4G;QAC5G,+EAA+E;QAC/E,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAC3D,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;iBAClD,CAAC;gBACJ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,qBAAqB,GAAG,CAAC,EAAE,CAAC;oBAChE,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;oBAC9B,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,GAAG,KAAK,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QAChE,IAAI,CAAC,WAAW,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;wDAEoD;IACpD,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,0FAA0F;IAC1F,OAAO,CAAC,GAAW;QACjB,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,OAAO,EAAW,CAAC;QAC7E,IAAI,OAA6B,CAAC;QAClC,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,GAAG,8CAA8C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACtH,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/C,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,IAAI,GAA6B,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,iBAAiB,CAAC;QAExD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC;gBACR,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;gBACnC,MAAM;gBACN,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,EAAE;gBACX,aAAa,EAAE,IAAI;gBACnB,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,mBAAmB,EAAE,SAAS;gBAC9B,0FAA0F;gBAC1F,cAAc,EAAE,SAAS;gBACzB,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,IAAI,CAAC;gBAC3D,iBAAiB,EAAE,UAAU,IAAI,OAAO;aACzC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,KAAK,YAAY,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC;gBACR,QAAQ,EAAE,QAAQ;gBAClB,QAAQ;gBACR,MAAM;gBACN,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE;gBACxD,KAAK,EAAE,SAAS;gBAChB,OAAO;gBACP,aAAa,EAAE,IAAI;gBACnB,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,8GAA8G;gBAC9G,mBAAmB,EAAE,SAAS;gBAC9B,0FAA0F;gBAC1F,cAAc,EAAE,SAAS;gBACzB,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,IAAI,CAAC;gBAC3D,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,+BAA+B;gBACvF,YAAY,EAAE,OAAO;oBACnB,CAAC,CAAC,iFAAiF,OAAO,CAAC,EAAE,wCAAwC,OAAO,CAAC,IAAI,CAAC,sDAAsD;oBACxM,CAAC,CAAC,6FAA6F,OAAO,CAAC,IAAI,CAAC,qBAAqB;gBACnI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,+EAA+E;wBACjH,SAAS,EAAE,qBAAqB;wBAChC,YAAY,EAAE,IAAI,CAAC,iBAAiB;qBACrC;iBACF,CAAC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnI,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC;gBACR,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM;gBACN,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI;gBAClE,KAAK,EAAE,SAAS;gBAChB,OAAO;gBACP,aAAa,EAAE,IAAI;gBACnB,gBAAgB,EAAE,KAAK;gBACvB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,mBAAmB,EAAE,SAAS;gBAC9B,0FAA0F;gBAC1F,cAAc,EAAE,SAAS;gBACzB,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,YAAY;wBAChF,iFAAiF;wBACjF,CAAC,CAAC,0EAA0E;wBAC5E,iHAAiH;wBACjH,CAAC,CAAC,0FAA0F,EAAE;gBAChG,YAAY,EAAE,4DAA4D,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,YAAY,iFAAiF,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB,EAAE;gBACpR,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC;oBACvC,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,qBAAqB,EAAE,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE;iBACtH,CAAC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;QACD,4JAA4J;QAC5J,4FAA4F;QAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9B,IAAI,OAAO,IAAI,IAAI,EAAE,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YAC7E,IAAI,CAAC,IAAI,CAAC;gBACR,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI;gBAChH,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS;gBACzE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC;gBAC1B,iBAAiB,EAAE,yBAAyB,IAAI,CAAC,EAAE,2FAA2F,OAAO,CAAC,EAAE,EAAE;aAC3J,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/daemon/dist/domain/provider/codex-auth-reader.d.ts

@@ -7,10 +7,24 @@ export interface CodexSeatRow {
     authProfile: string;
     updatedTs: string;
 }
+/** How the seat registry read went: absent (ENOENT), read, or unreadable (the error code only, never contents). */
+export interface CodexSeatRegistryRead {
+    status: "absent" | "read" | "unreadable";
+    code?: string;
+    /** Rows skipped because they don't have the six columns. */
+    malformedRows: number;
+}
 export interface CodexAuthMetadata {
     /** Profile NAMES (opaque, non-secret refs) — never file contents. */
     profiles: string[];
     seats: CodexSeatRow[];
+    /** Additive: lets a caller tell a supported absence from an unreadable or malformed registry. */
+    registry?: CodexSeatRegistryRead;
+    /** Additive: how the profile folder read went (absent, read, or unreadable with the error code only). */
+    profilesRead?: {
+        status: "absent" | "read" | "unreadable";
+        code?: string;
+    };
 }
 /** Read the codex-auth on-disk METADATA (profile names + seat registry). Never throws; never
  *  surfaces token-class content. Absent home/files yield empty arrays. */