@slkiser/opencode-quota 4.9.0 → 4.10.1

package/README.md

@@ -1,9 +1,9 @@
 <p align="center">
   <a href="https://github.com/slkiser/opencode-quota">
     <picture>
-      <source srcset="opencode-quota-logo-dark.svg" media="(prefers-color-scheme: dark)">
-      <source srcset="opencode-quota-logo-light.svg" media="(prefers-color-scheme: light)">
-      <img src="opencode-quota-logo-light.svg" alt="OpenCode Quota logo">
+      <source srcset="https://shawnkiser.com/opencode-quota/opencode-quota-logo-dark.svg" media="(prefers-color-scheme: dark)">
+      <source srcset="https://shawnkiser.com/opencode-quota/opencode-quota-logo-light.svg" media="(prefers-color-scheme: light)">
+      <img src="https://shawnkiser.com/opencode-quota/opencode-quota-logo-light.svg" alt="OpenCode Quota logo">
     </picture>
   </a>
 </p>
@@ -89,7 +89,8 @@ More ways to use it:
 
 - Check quota anywhere: use `opencode-quota show` in a terminal or the same slash commands in the TUI, Web, and Desktop.
 - Automate quota checks with JSON output for scripts, status bars, and CI. Optional OpenTelemetry metrics support monitoring tools.
-- Customize the display with [`tuiPromptBar.enabled`](docs/readme/configuration.md#tui-settings), OpenCode Go's preferred collapsed-sidebar window, reset precision, and [`accountingDetail`](docs/readme/configuration.md#show-accounting-detail).
+- Customize the display with [`tuiPromptBar.enabled`](docs/readme/configuration.md#tui-settings), OpenCode Go's preferred collapsed-sidebar window, spaced reset countdowns by default with a `resetTimeSpaced: false` dense opt-out, decimal reset precision, bare percent labels, and [`accountingDetail`](docs/readme/configuration.md#show-accounting-detail).
+- Optionally estimate **Runs out ≈ 1h 50m** for supported fixed windows with [`quotaProjection: "runway"`](docs/readme/configuration.md#estimate-when-fixed-quota-runs-out). It is off by default and leaves JSON output unchanged.
 - Choose current-session or descendant-tree token totals. Get reset popups for selected windows with [`resetNotifications`](docs/readme/configuration.md#notify-when-quota-becomes-available-again).
 - Troubleshoot authentication, quota sources, pricing, and maintainer notices.
 
@@ -183,17 +184,18 @@ Gemini CLI quota support is deprecated for new installs. Existing v4 configurati
 <details open>
 <summary><strong>Personal</strong></summary>
 
-| Provider                 | Auth/setup                                          | Data from      | Reports            |
-| ------------------------ | --------------------------------------------------- | -------------- | ------------------ |
-| Alibaba Coding Plan      | Automatic                                           | Local estimate | Quota              |
-| DeepSeek                 | Automatic                                           | Remote API     | Balance and status |
-| Kimi Code                | Automatic                                           | Remote API     | Quota              |
-| MiniMax Token Plan       | Automatic                                           | Remote API     | Quota              |
-| MiniMax Token Plan (CN)  | Automatic                                           | Remote API     | Quota              |
-| Qwen Code                | [Needs setup](docs/readme/providers.md#qwen-code)   | Local estimate | Quota              |
-| Xiaomi MiMo              | [Needs setup](docs/readme/providers.md#xiaomi-mimo) | Dashboard API  | Quota and balance  |
-| Z.ai Coding Plan         | Automatic                                           | Remote API     | Quota              |
-| Zhipu Coding Plan        | Automatic                                           | Remote API     | Quota              |
+| Provider                      | Auth/setup                                                                   | Data from      | Reports            |
+| ----------------------------- | ---------------------------------------------------------------------------- | -------------- | ------------------ |
+| Alibaba Coding Plan           | Automatic                                                                    | Local estimate | Quota              |
+| Alibaba Personal Token Plan   | [Needs setup](docs/readme/providers.md#alibaba-personal-token-plan)          | Official CLI   | Quota              |
+| DeepSeek                      | Automatic                                                                    | Remote API     | Balance and status |
+| Kimi Code                     | Automatic                                                                    | Remote API     | Quota              |
+| MiniMax Token Plan            | Automatic                                                                    | Remote API     | Quota              |
+| MiniMax Token Plan (CN)       | Automatic                                                                    | Remote API     | Quota              |
+| Qwen Code                     | [Needs setup](docs/readme/providers.md#qwen-code)                            | Local estimate | Quota              |
+| Xiaomi MiMo                   | [Needs setup](docs/readme/providers.md#xiaomi-mimo)                          | Dashboard API  | Quota and balance  |
+| Z.ai Coding Plan              | Automatic                                                                    | Remote API     | Quota              |
+| Zhipu Coding Plan             | Automatic                                                                    | Remote API     | Quota              |
 
 </details>
 
@@ -268,4 +270,4 @@ OpenCode Quota is not built by the OpenCode team and is not affiliated with Open
 
 ## Star history
 
-![Star History Chart](https://shawnkiser.com/opencode-quota/star-history-2026813.svg)
+[![Star History Chart](https://api.star-history.com/svg?repos=slkiser/opencode-quota&type=date&legend=top-left)](https://www.star-history.com/#slkiser/opencode-quota&Date)

package/dist/lib/alibaba-token-plan.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Alibaba Personal Token Plan quota from the official `bl` CLI.
+ *
+ * Production invocation is exactly:
+ *   bl usage token-plan --output json
+ *
+ * Console authentication belongs to the CLI. This module never installs `bl`,
+ * never runs login, never reads credential stores, and never uses a shell.
+ */
+export declare const ALIBABA_TOKEN_PLAN_COMMAND = "bl";
+export declare const ALIBABA_TOKEN_PLAN_ARGS: readonly ["usage", "token-plan", "--output", "json"];
+export declare const ALIBABA_TOKEN_PLAN_STDOUT_LIMIT_BYTES: number;
+export declare const ALIBABA_TOKEN_PLAN_STDERR_LIMIT_BYTES: number;
+export declare const ALIBABA_TOKEN_PLAN_KILL_GRACE_MS = 250;
+export declare const ALIBABA_TOKEN_PLAN_AUTH_EXIT_CODE = 3;
+export type AlibabaTokenPlanWindow = {
+    percentRemaining: number;
+    resetTimeIso?: string;
+};
+export type AlibabaTokenPlanErrorKind = "unsupported_platform" | "executable_not_found" | "shell_launcher_rejected" | "workspace_path_rejected" | "spawn_failed" | "timeout" | "output_truncated" | "nonzero_exit" | "not_authenticated" | "invalid_json" | "invalid_schema" | "no_data";
+export type AlibabaTokenPlanError = {
+    kind: AlibabaTokenPlanErrorKind;
+    message: string;
+    retryable?: boolean;
+};
+export type AlibabaTokenPlanClosedResult = {
+    ok: true;
+    fiveHour?: AlibabaTokenPlanWindow;
+    weekly?: AlibabaTokenPlanWindow;
+} | {
+    ok: false;
+    error: AlibabaTokenPlanError;
+};
+export type AlibabaTokenPlanSpawnRequest = {
+    file: string;
+    args: readonly string[];
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    timeoutMs: number;
+    stdoutLimitBytes: number;
+    stderrLimitBytes: number;
+    stdin: "ignore";
+    shell: false;
+    platform: NodeJS.Platform;
+    killGraceMs: number;
+};
+export type AlibabaTokenPlanSpawnResult = {
+    code: number | null;
+    stdout: Buffer;
+    stderr: Buffer;
+    timedOut: boolean;
+    truncated: boolean;
+    spawnErrorCode?: string;
+};
+export type AlibabaTokenPlanExecutableResolution = {
+    ok: true;
+    file: string;
+} | {
+    ok: false;
+    error: AlibabaTokenPlanError;
+};
+export type AlibabaTokenPlanRuntime = {
+    platform?: NodeJS.Platform;
+    pathEnv?: string;
+    cwd?: string;
+    tmpdir?: string;
+    homedir?: string;
+    env?: NodeJS.ProcessEnv;
+    spawn?: (request: AlibabaTokenPlanSpawnRequest) => Promise<AlibabaTokenPlanSpawnResult>;
+};
+export declare function isAlibabaTokenPlanSupportedPlatform(platform?: NodeJS.Platform): boolean;
+export declare function listTrustedPathDirectories(params: {
+    pathEnv: string | undefined;
+    cwd: string;
+    platform: NodeJS.Platform;
+}): string[];
+export declare function resolveAlibabaTokenPlanExecutable(params: {
+    pathEnv?: string;
+    cwd?: string;
+    platform?: NodeJS.Platform;
+}): Promise<AlibabaTokenPlanExecutableResolution>;
+export declare function parseAlibabaTokenPlanUsageJson(text: string): AlibabaTokenPlanClosedResult;
+export declare function runAlibabaTokenPlanProcess(request: AlibabaTokenPlanSpawnRequest): Promise<AlibabaTokenPlanSpawnResult>;
+export declare function queryAlibabaTokenPlanQuota(options?: {
+    requestTimeoutMs?: number;
+    runtime?: AlibabaTokenPlanRuntime;
+}): Promise<AlibabaTokenPlanClosedResult>;
+//# sourceMappingURL=alibaba-token-plan.d.ts.map

package/dist/lib/alibaba-token-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alibaba-token-plan.d.ts","sourceRoot":"","sources":["../../src/lib/alibaba-token-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAC/C,eAAO,MAAM,uBAAuB,YAAI,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AAC5F,eAAO,MAAM,qCAAqC,QAAa,CAAC;AAChE,eAAO,MAAM,qCAAqC,QAAY,CAAC;AAC/D,eAAO,MAAM,gCAAgC,MAAM,CAAC;AACpD,eAAO,MAAM,iCAAiC,IAAI,CAAC;AAoCnD,MAAM,MAAM,sBAAsB,GAAG;IACnC,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GACjC,sBAAsB,GACtB,sBAAsB,GACtB,yBAAyB,GACzB,yBAAyB,GACzB,cAAc,GACd,SAAS,GACT,kBAAkB,GAClB,cAAc,GACd,mBAAmB,GACnB,cAAc,GACd,gBAAgB,GAChB,SAAS,CAAC;AAEd,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,yBAAyB,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GACpC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,MAAM,CAAC,EAAE,sBAAsB,CAAC;CACjC,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,qBAAqB,CAAC;CAC9B,CAAC;AAEN,MAAM,MAAM,4BAA4B,GAAG;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAC5C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAEhD,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,2BAA2B,CAAC,CAAC;CACzF,CAAC;AA6CF,wBAAgB,mCAAmC,CACjD,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAET;AA0BD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC3B,GAAG,MAAM,EAAE,CAoBX;AA0BD,wBAAsB,iCAAiC,CAAC,MAAM,EAAE;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAgDhD;AAyDD,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,4BAA4B,CAqBzF;AAqED,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,2BAA2B,CAAC,CA6HtC;AAYD,wBAAsB,0BAA0B,CAC9C,OAAO,GAAE;IAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,uBAAuB,CAAA;CAAO,GAC7E,OAAO,CAAC,4BAA4B,CAAC,CAgDvC"}

package/dist/lib/alibaba-token-plan.js

@@ -0,0 +1,505 @@
+/**
+ * Alibaba Personal Token Plan quota from the official `bl` CLI.
+ *
+ * Production invocation is exactly:
+ *   bl usage token-plan --output json
+ *
+ * Console authentication belongs to the CLI. This module never installs `bl`,
+ * never runs login, never reads credential stores, and never uses a shell.
+ */
+import { spawn } from "node:child_process";
+import { lstat, realpath } from "node:fs/promises";
+import { homedir, tmpdir } from "node:os";
+import path from "node:path";
+import { REQUEST_TIMEOUT_MS } from "./types.js";
+export const ALIBABA_TOKEN_PLAN_COMMAND = "bl";
+export const ALIBABA_TOKEN_PLAN_ARGS = ["usage", "token-plan", "--output", "json"];
+export const ALIBABA_TOKEN_PLAN_STDOUT_LIMIT_BYTES = 256 * 1024;
+export const ALIBABA_TOKEN_PLAN_STDERR_LIMIT_BYTES = 16 * 1024;
+export const ALIBABA_TOKEN_PLAN_KILL_GRACE_MS = 250;
+export const ALIBABA_TOKEN_PLAN_AUTH_EXIT_CODE = 3;
+const SUPPORTED_PLATFORMS = new Set(["darwin", "linux"]);
+const MAX_RESET_TIME_MS = 4_102_444_800_000;
+const SHELL_LAUNCHER_NAMES = new Set([
+    "bash",
+    "bash.exe",
+    "cmd",
+    "cmd.exe",
+    "command.com",
+    "cscript.exe",
+    "csh",
+    "dash",
+    "fish",
+    "ksh",
+    "powershell",
+    "powershell.exe",
+    "pwsh",
+    "pwsh.exe",
+    "sh",
+    "sh.exe",
+    "tcsh",
+    "wscript.exe",
+    "zsh",
+]);
+const SHELL_LAUNCHER_EXTENSIONS = new Set([
+    ".bash",
+    ".bat",
+    ".cmd",
+    ".com",
+    ".fish",
+    ".ps1",
+    ".sh",
+    ".zsh",
+]);
+const ERROR_MESSAGES = {
+    unsupported_platform: "Alibaba Personal Token Plan is not supported on this platform.",
+    executable_not_found: "Alibaba Cloud CLI (bl) was not found on the trusted PATH.",
+    shell_launcher_rejected: "Alibaba Personal Token Plan refused a shell launcher for bl.",
+    workspace_path_rejected: "Alibaba Personal Token Plan ignored workspace and relative PATH entries.",
+    spawn_failed: "Could not start Alibaba Cloud CLI.",
+    timeout: "Timed out while running the Alibaba Cloud CLI.",
+    output_truncated: "Alibaba Cloud CLI output exceeded the bounded size limit.",
+    nonzero_exit: "Could not read Alibaba Personal Token Plan quota.",
+    not_authenticated: "Alibaba Cloud console session is missing or expired. Run `bl auth login --console`.",
+    invalid_json: "Alibaba Cloud CLI did not return valid JSON.",
+    invalid_schema: "Alibaba Cloud CLI returned an invalid Personal Token Plan payload.",
+    no_data: "Alibaba Personal Token Plan usage returned no quota windows.",
+};
+function fail(kind, retryable) {
+    return {
+        ok: false,
+        error: {
+            kind,
+            message: ERROR_MESSAGES[kind],
+            ...(retryable ? { retryable: true } : {}),
+        },
+    };
+}
+function executableResolutionError(kind) {
+    return {
+        ok: false,
+        error: {
+            kind,
+            message: ERROR_MESSAGES[kind],
+        },
+    };
+}
+export function isAlibabaTokenPlanSupportedPlatform(platform = process.platform) {
+    return SUPPORTED_PLATFORMS.has(platform);
+}
+function runtimePath(platform) {
+    return platform === "win32" ? path.win32 : path.posix;
+}
+function isPathInside(parent, candidate, paths) {
+    const relative = paths.relative(parent, candidate);
+    return (relative === "" ||
+        (relative !== ".." && !relative.startsWith(`..${paths.sep}`) && !paths.isAbsolute(relative)));
+}
+function stripPathQuotes(value) {
+    const trimmed = value.trim();
+    if (trimmed.length >= 2 &&
+        ((trimmed.startsWith('"') && trimmed.endsWith('"')) ||
+            (trimmed.startsWith("'") && trimmed.endsWith("'")))) {
+        return trimmed.slice(1, -1);
+    }
+    return trimmed;
+}
+export function listTrustedPathDirectories(params) {
+    const paths = runtimePath(params.platform);
+    const delimiter = paths.delimiter;
+    const cwd = paths.resolve(params.cwd);
+    const trusted = [];
+    const seen = new Set();
+    for (const rawEntry of (params.pathEnv ?? "").split(delimiter)) {
+        const entry = stripPathQuotes(rawEntry);
+        if (!entry || entry === "." || entry === "..")
+            continue;
+        if (!paths.isAbsolute(entry))
+            continue;
+        const resolved = paths.resolve(entry);
+        if (isPathInside(cwd, resolved, paths))
+            continue;
+        if (seen.has(resolved))
+            continue;
+        seen.add(resolved);
+        trusted.push(resolved);
+    }
+    return trusted;
+}
+function isShellLauncherPath(file) {
+    const extension = path.posix.extname(file).toLowerCase();
+    if (SHELL_LAUNCHER_EXTENSIONS.has(extension))
+        return true;
+    return SHELL_LAUNCHER_NAMES.has(path.posix.basename(file).toLowerCase());
+}
+function candidateExecutableNames() {
+    return [ALIBABA_TOKEN_PLAN_COMMAND, "bl.cmd", "bl.bat"];
+}
+async function fileLooksLikeExecutable(file) {
+    try {
+        const stats = await lstat(file);
+        if (stats.isSymbolicLink()) {
+            const target = await realpath(file);
+            const targetStats = await lstat(target);
+            return targetStats.isFile() || targetStats.isSymbolicLink();
+        }
+        return stats.isFile();
+    }
+    catch {
+        return false;
+    }
+}
+export async function resolveAlibabaTokenPlanExecutable(params) {
+    const platform = params.platform ?? process.platform;
+    if (!isAlibabaTokenPlanSupportedPlatform(platform)) {
+        return executableResolutionError("unsupported_platform");
+    }
+    const paths = runtimePath(platform);
+    const cwd = paths.resolve(params.cwd ?? process.cwd());
+    const trusted = listTrustedPathDirectories({
+        pathEnv: params.pathEnv ?? process.env.PATH,
+        cwd,
+        platform,
+    });
+    if (trusted.length === 0) {
+        return executableResolutionError("executable_not_found");
+    }
+    let sawShellLauncher = false;
+    for (const directory of trusted) {
+        for (const name of candidateExecutableNames()) {
+            const candidate = paths.join(directory, name);
+            if (!(await fileLooksLikeExecutable(candidate)))
+                continue;
+            if (isShellLauncherPath(candidate)) {
+                sawShellLauncher = true;
+                continue;
+            }
+            let resolved = candidate;
+            try {
+                resolved = await realpath(candidate);
+            }
+            catch {
+                resolved = candidate;
+            }
+            if (isShellLauncherPath(resolved)) {
+                sawShellLauncher = true;
+                continue;
+            }
+            if (isPathInside(cwd, resolved, paths)) {
+                return executableResolutionError("workspace_path_rejected");
+            }
+            return { ok: true, file: resolved };
+        }
+    }
+    if (sawShellLauncher) {
+        return executableResolutionError("shell_launcher_rejected");
+    }
+    return executableResolutionError("executable_not_found");
+}
+function asRecord(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : null;
+}
+function hasOwn(record, key) {
+    return Object.hasOwn(record, key);
+}
+function usedFractionToPercentRemaining(used) {
+    return 100 - used * 100;
+}
+function parseResetTimeIso(value) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "number" ||
+        !Number.isFinite(value) ||
+        value <= 0 ||
+        value > MAX_RESET_TIME_MS) {
+        return "invalid";
+    }
+    const iso = new Date(value).toISOString();
+    if (iso === "Invalid Date")
+        return "invalid";
+    return iso;
+}
+function parseWindow(payload, prefix) {
+    const percentageKey = `${prefix}Percentage`;
+    const resetKey = `${prefix}ResetTime`;
+    const percentagePresent = hasOwn(payload, percentageKey);
+    const resetPresent = hasOwn(payload, resetKey);
+    if (!percentagePresent && !resetPresent)
+        return undefined;
+    if (!percentagePresent)
+        return "invalid";
+    const used = payload[percentageKey];
+    if (typeof used !== "number" || !Number.isFinite(used) || used < 0 || used > 1) {
+        return "invalid";
+    }
+    if (!resetPresent) {
+        return { percentRemaining: usedFractionToPercentRemaining(used) };
+    }
+    const resetTimeIso = parseResetTimeIso(payload[resetKey]);
+    if (resetTimeIso === "invalid")
+        return "invalid";
+    return {
+        percentRemaining: usedFractionToPercentRemaining(used),
+        ...(resetTimeIso ? { resetTimeIso } : {}),
+    };
+}
+export function parseAlibabaTokenPlanUsageJson(text) {
+    let payload;
+    try {
+        payload = JSON.parse(text);
+    }
+    catch {
+        return fail("invalid_json");
+    }
+    const record = asRecord(payload);
+    if (!record)
+        return fail("invalid_schema");
+    const fiveHour = parseWindow(record, "per5Hour");
+    if (fiveHour === "invalid")
+        return fail("invalid_schema");
+    const weekly = parseWindow(record, "per1Week");
+    if (weekly === "invalid")
+        return fail("invalid_schema");
+    if (!fiveHour && !weekly)
+        return fail("no_data");
+    return {
+        ok: true,
+        ...(fiveHour ? { fiveHour } : {}),
+        ...(weekly ? { weekly } : {}),
+    };
+}
+function resolveNonWorkspaceCwd(params) {
+    const paths = runtimePath(params.platform);
+    const workspace = paths.resolve(params.cwd);
+    for (const candidate of [
+        params.tmpdir,
+        params.homedir,
+        params.platform === "win32" ? "C:\\" : "/",
+    ]) {
+        const resolved = paths.resolve(candidate);
+        if (!isPathInside(workspace, resolved, paths))
+            return resolved;
+    }
+    return params.platform === "win32" ? "C:\\" : "/";
+}
+function trustedPathEnv(params) {
+    return params.trustedDirectories.join(runtimePath(params.platform).delimiter);
+}
+function takeBoundedChunk(chunks, currentSize, chunk, limit) {
+    const remaining = limit - currentSize;
+    if (remaining <= 0)
+        return { size: currentSize, overflowed: true };
+    if (chunk.length <= remaining) {
+        chunks.push(chunk);
+        return { size: currentSize + chunk.length, overflowed: false };
+    }
+    chunks.push(chunk.subarray(0, remaining));
+    return { size: limit, overflowed: true };
+}
+function signalProcessGroup(child, platform, signal) {
+    if (!child.pid)
+        return;
+    if (platform === "win32") {
+        try {
+            child.kill(signal);
+        }
+        catch {
+            // already exited
+        }
+        return;
+    }
+    try {
+        process.kill(-child.pid, signal);
+    }
+    catch {
+        try {
+            child.kill(signal);
+        }
+        catch {
+            // already exited
+        }
+    }
+}
+export async function runAlibabaTokenPlanProcess(request) {
+    return await new Promise((resolve) => {
+        let child;
+        try {
+            child = spawn(request.file, [...request.args], {
+                cwd: request.cwd,
+                env: request.env,
+                argv0: request.file,
+                shell: false,
+                windowsHide: true,
+                detached: request.platform !== "win32",
+                stdio: ["ignore", "pipe", "pipe"],
+            });
+        }
+        catch (error) {
+            const spawnErrorCode = error && typeof error === "object" && "code" in error
+                ? String(error.code)
+                : undefined;
+            resolve({
+                code: null,
+                stdout: Buffer.alloc(0),
+                stderr: Buffer.alloc(0),
+                timedOut: false,
+                truncated: false,
+                spawnErrorCode,
+            });
+            return;
+        }
+        const stdoutChunks = [];
+        const stderrChunks = [];
+        let stdoutSize = 0;
+        let stderrSize = 0;
+        let timedOut = false;
+        let truncated = false;
+        let killTimer;
+        let timeout;
+        let settled = false;
+        let escalated = false;
+        function clearKillTimer() {
+            if (killTimer === undefined)
+                return;
+            clearTimeout(killTimer);
+            killTimer = undefined;
+        }
+        function escalate() {
+            if (!escalated) {
+                escalated = true;
+                signalProcessGroup(child, request.platform, "SIGTERM");
+            }
+            clearKillTimer();
+            killTimer = setTimeout(() => {
+                killTimer = undefined;
+                signalProcessGroup(child, request.platform, "SIGKILL");
+            }, request.killGraceMs);
+        }
+        function onStdoutData(chunk) {
+            const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            const next = takeBoundedChunk(stdoutChunks, stdoutSize, buf, request.stdoutLimitBytes);
+            stdoutSize = next.size;
+            if (next.overflowed && !truncated) {
+                truncated = true;
+                escalate();
+            }
+        }
+        function onStderrData(chunk) {
+            const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            const next = takeBoundedChunk(stderrChunks, stderrSize, buf, request.stderrLimitBytes);
+            stderrSize = next.size;
+            if (next.overflowed && !truncated) {
+                truncated = true;
+                escalate();
+            }
+        }
+        function spawnErrorCodeFrom(error) {
+            return error && typeof error === "object" && "code" in error
+                ? String(error.code)
+                : undefined;
+        }
+        function removeListeners() {
+            child.stdout?.removeListener("data", onStdoutData);
+            child.stderr?.removeListener("data", onStderrData);
+            child.removeListener("error", onError);
+            child.removeListener("close", onClose);
+        }
+        function finish(code, spawnErrorCode) {
+            if (settled)
+                return;
+            settled = true;
+            if (timeout !== undefined)
+                clearTimeout(timeout);
+            clearKillTimer();
+            removeListeners();
+            resolve({
+                code,
+                stdout: Buffer.concat(stdoutChunks),
+                stderr: Buffer.concat(stderrChunks),
+                timedOut,
+                truncated,
+                ...(spawnErrorCode ? { spawnErrorCode } : {}),
+            });
+        }
+        function onError(error) {
+            finish(null, spawnErrorCodeFrom(error));
+        }
+        function onClose(code) {
+            finish(code);
+        }
+        timeout = setTimeout(() => {
+            timedOut = true;
+            escalate();
+        }, request.timeoutMs);
+        child.stdout?.on("data", onStdoutData);
+        child.stderr?.on("data", onStderrData);
+        child.on("error", onError);
+        child.on("close", onClose);
+    });
+}
+function mapSpawnFailure(result) {
+    if (result.truncated)
+        return fail("output_truncated");
+    if (result.timedOut)
+        return fail("timeout", true);
+    if (result.spawnErrorCode === "ENOENT")
+        return fail("executable_not_found");
+    if (result.spawnErrorCode)
+        return fail("spawn_failed", true);
+    if (result.code === ALIBABA_TOKEN_PLAN_AUTH_EXIT_CODE)
+        return fail("not_authenticated");
+    if (result.code !== 0)
+        return fail("nonzero_exit");
+    return parseAlibabaTokenPlanUsageJson(result.stdout.toString("utf8"));
+}
+export async function queryAlibabaTokenPlanQuota(options = {}) {
+    const runtime = options.runtime ?? {};
+    const platform = runtime.platform ?? process.platform;
+    if (!isAlibabaTokenPlanSupportedPlatform(platform)) {
+        return fail("unsupported_platform");
+    }
+    const cwd = runtimePath(platform).resolve(runtime.cwd ?? process.cwd());
+    const pathEnv = runtime.pathEnv ?? runtime.env?.PATH ?? process.env.PATH;
+    const resolved = await resolveAlibabaTokenPlanExecutable({
+        pathEnv,
+        cwd,
+        platform,
+    });
+    if (!resolved.ok) {
+        return { ok: false, error: resolved.error };
+    }
+    const trustedDirectories = listTrustedPathDirectories({ pathEnv, cwd, platform });
+    const processCwd = resolveNonWorkspaceCwd({
+        cwd,
+        tmpdir: runtime.tmpdir ?? tmpdir(),
+        homedir: runtime.homedir ?? homedir(),
+        platform,
+    });
+    const env = {
+        ...(runtime.env ?? process.env),
+        PATH: trustedPathEnv({ trustedDirectories, platform }),
+    };
+    const request = {
+        file: resolved.file,
+        args: ALIBABA_TOKEN_PLAN_ARGS,
+        cwd: processCwd,
+        env,
+        timeoutMs: options.requestTimeoutMs ?? REQUEST_TIMEOUT_MS,
+        stdoutLimitBytes: ALIBABA_TOKEN_PLAN_STDOUT_LIMIT_BYTES,
+        stderrLimitBytes: ALIBABA_TOKEN_PLAN_STDERR_LIMIT_BYTES,
+        stdin: "ignore",
+        shell: false,
+        platform,
+        killGraceMs: ALIBABA_TOKEN_PLAN_KILL_GRACE_MS,
+    };
+    const run = runtime.spawn ?? runAlibabaTokenPlanProcess;
+    try {
+        return mapSpawnFailure(await run(request));
+    }
+    catch {
+        return fail("spawn_failed", true);
+    }
+}
+//# sourceMappingURL=alibaba-token-plan.js.map