@sriinnu/runic 1.0.0 → 1.2.0

package/Sources/Runic/Core/Stores/SambaNovaTokenStore.swift

@@ -53,29 +53,17 @@ struct KeychainSambaNovaTokenStore: SambaNovaTokenStoring {
         }
 
         let data = cleaned!.data(using: .utf8)!
-        let query = self.baseQuery(dataProtection: false)
-        let attributes: [String: Any] = [
-            kSecValueData as String: data,
-            kSecAttrAccessible as String: kSecAttrAccessibleAfterFirstUnlock,
-        ]
-
-        // Try update first.
-        let updateStatus = SecItemUpdate(query as CFDictionary, attributes as CFDictionary)
-        if updateStatus == errSecSuccess { return }
 
-        if updateStatus != errSecItemNotFound {
-            // Item exists but update failed — delete and re-add to reset ACL.
-            try? self.deleteToken(dataProtection: false)
-        }
+        // Always delete-then-add to ensure SecAccess ACL is set.
+        // SecItemUpdate does NOT update the ACL, so existing items with
+        // missing or stale ACLs would continue to prompt for passwords.
+        try? self.deleteToken(dataProtection: false)
+        try? self.deleteToken(dataProtection: true)
 
-        var addQuery = query
-        for (key, value) in attributes { addQuery[key] = value }
+        var addQuery = self.baseQuery(dataProtection: false)
+        addQuery[kSecValueData as String] = data
+        addQuery[kSecAttrAccessible as String] = kSecAttrAccessibleAfterFirstUnlock
 
-        // Grant the calling app permanent access so macOS never shows a
-        // Keychain password dialog for this item.
-        if let access = Self.createSelfAccess() {
-            addQuery[kSecAttrAccess as String] = access
-        }
 
         let addStatus = SecItemAdd(addQuery as CFDictionary, nil)
         guard addStatus == errSecSuccess else {
@@ -91,6 +79,7 @@ struct KeychainSambaNovaTokenStore: SambaNovaTokenStoring {
         var query = self.baseQuery(dataProtection: dataProtection)
         query[kSecMatchLimit as String] = kSecMatchLimitOne
         query[kSecReturnData as String] = true
+        query[kSecUseAuthenticationUI as String] = kSecUseAuthenticationUIFail
 
         let status = SecItemCopyMatching(query as CFDictionary, &result)
         if status == errSecItemNotFound || status == errSecInteractionNotAllowed {
@@ -127,17 +116,4 @@ struct KeychainSambaNovaTokenStore: SambaNovaTokenStoring {
         return q
     }
 
-    /// Creates a SecAccess that grants the calling application permanent
-    /// read/write access without triggering the macOS Keychain password dialog.
-    private static func createSelfAccess() -> SecAccess? {
-        var trustedSelf: SecTrustedApplication?
-        guard SecTrustedApplicationCreateFromPath(nil, &trustedSelf) == errSecSuccess,
-              let trustedSelf else { return nil }
-        var access: SecAccess?
-        guard SecAccessCreate(
-            "Runic API Token" as CFString,
-            [trustedSelf] as CFArray,
-            &access) == errSecSuccess else { return nil }
-        return access
-    }
 }

package/Sources/Runic/Core/Stores/SettingsStore.swift

@@ -325,6 +325,12 @@ final class SettingsStore {
         didSet { self.userDefaults.set(self.insightsReportDays, forKey: "insightsReportDays") }
     }
 
+    /// How many days of usage history to scan for ledger data (charts, breakdowns).
+    /// Options: 3, 7, 30, 365. Default: 30.
+    var ledgerMaxAgeDays: Int {
+        didSet { self.userDefaults.set(self.ledgerMaxAgeDays, forKey: "ledgerMaxAgeDays") }
+    }
+
     var randomBlinkEnabled: Bool {
         didSet { self.userDefaults.set(self.randomBlinkEnabled, forKey: "randomBlinkEnabled") }
     }
@@ -699,6 +705,7 @@ final class SettingsStore {
         _ = self.costUsageEnabled
         _ = self.insightsMenuMaxItems
         _ = self.insightsReportDays
+        _ = self.ledgerMaxAgeDays
         _ = self.randomBlinkEnabled
         _ = self.claudeWebExtrasEnabled
         _ = self.showOptionalCreditsAndExtraUsage
@@ -893,6 +900,7 @@ final class SettingsStore {
         self.costUsageEnabled = userDefaults.object(forKey: "tokenCostUsageEnabled") as? Bool ?? true
         self.insightsMenuMaxItems = userDefaults.object(forKey: "insightsMenuMaxItems") as? Int ?? 4
         self.insightsReportDays = userDefaults.object(forKey: "insightsReportDays") as? Int ?? 7
+        self.ledgerMaxAgeDays = userDefaults.object(forKey: "ledgerMaxAgeDays") as? Int ?? 30
         self.randomBlinkEnabled = userDefaults.object(forKey: "randomBlinkEnabled") as? Bool ?? false
         self.claudeWebExtrasEnabled = userDefaults.object(forKey: "claudeWebExtrasEnabled") as? Bool ?? false
         let creditsExtrasDefault = userDefaults.object(forKey: "showOptionalCreditsAndExtraUsage") as? Bool
@@ -945,7 +953,8 @@ final class SettingsStore {
         self.sambaNovaAPIToken = (try? sambaNovaTokenStore.loadToken()) ?? ""
         self.qwenAPIToken = (try? qwenTokenStore.loadToken()) ?? ""
         self.azureOpenAIAPIToken = (try? azureOpenAITokenStore.loadToken()) ?? ""
-        self.selectedMenuProviderRaw = userDefaults.string(forKey: "selectedMenuProvider")
+        // Always start on Overview tab.
+        self.selectedMenuProviderRaw = nil
         self.providerDetectionCompleted = userDefaults.object(
             forKey: "providerDetectionCompleted") as? Bool ?? false
         self.toggleStore = ProviderToggleStore(userDefaults: userDefaults)

package/Sources/Runic/Core/Stores/TogetherTokenStore.swift

@@ -53,29 +53,17 @@ struct KeychainTogetherTokenStore: TogetherTokenStoring {
         }
 
         let data = cleaned!.data(using: .utf8)!
-        let query = self.baseQuery(dataProtection: false)
-        let attributes: [String: Any] = [
-            kSecValueData as String: data,
-            kSecAttrAccessible as String: kSecAttrAccessibleAfterFirstUnlock,
-        ]
-
-        // Try update first.
-        let updateStatus = SecItemUpdate(query as CFDictionary, attributes as CFDictionary)
-        if updateStatus == errSecSuccess { return }
 
-        if updateStatus != errSecItemNotFound {
-            // Item exists but update failed — delete and re-add to reset ACL.
-            try? self.deleteToken(dataProtection: false)
-        }
+        // Always delete-then-add to ensure SecAccess ACL is set.
+        // SecItemUpdate does NOT update the ACL, so existing items with
+        // missing or stale ACLs would continue to prompt for passwords.
+        try? self.deleteToken(dataProtection: false)
+        try? self.deleteToken(dataProtection: true)
 
-        var addQuery = query
-        for (key, value) in attributes { addQuery[key] = value }
+        var addQuery = self.baseQuery(dataProtection: false)
+        addQuery[kSecValueData as String] = data
+        addQuery[kSecAttrAccessible as String] = kSecAttrAccessibleAfterFirstUnlock
 
-        // Grant the calling app permanent access so macOS never shows a
-        // Keychain password dialog for this item.
-        if let access = Self.createSelfAccess() {
-            addQuery[kSecAttrAccess as String] = access
-        }
 
         let addStatus = SecItemAdd(addQuery as CFDictionary, nil)
         guard addStatus == errSecSuccess else {
@@ -91,6 +79,7 @@ struct KeychainTogetherTokenStore: TogetherTokenStoring {
         var query = self.baseQuery(dataProtection: dataProtection)
         query[kSecMatchLimit as String] = kSecMatchLimitOne
         query[kSecReturnData as String] = true
+        query[kSecUseAuthenticationUI as String] = kSecUseAuthenticationUIFail
 
         let status = SecItemCopyMatching(query as CFDictionary, &result)
         if status == errSecItemNotFound || status == errSecInteractionNotAllowed {
@@ -127,17 +116,4 @@ struct KeychainTogetherTokenStore: TogetherTokenStoring {
         return q
     }
 
-    /// Creates a SecAccess that grants the calling application permanent
-    /// read/write access without triggering the macOS Keychain password dialog.
-    private static func createSelfAccess() -> SecAccess? {
-        var trustedSelf: SecTrustedApplication?
-        guard SecTrustedApplicationCreateFromPath(nil, &trustedSelf) == errSecSuccess,
-              let trustedSelf else { return nil }
-        var access: SecAccess?
-        guard SecAccessCreate(
-            "Runic API Token" as CFString,
-            [trustedSelf] as CFArray,
-            &access) == errSecSuccess else { return nil }
-        return access
-    }
 }

package/Sources/Runic/Core/Stores/UsageStore.swift

@@ -635,7 +635,7 @@ final class UsageStore {
     @ObservationIgnored private let tokenFetchTTL: TimeInterval = 60 * 60
     @ObservationIgnored private let tokenFetchTimeout: TimeInterval = 10 * 60
     @ObservationIgnored private let ledgerRefreshTTL: TimeInterval = 90
-    @ObservationIgnored private let ledgerMaxAgeDays: Int = 3
+    @ObservationIgnored private var ledgerMaxAgeDays: Int { self.settings.ledgerMaxAgeDays }
     @ObservationIgnored private let providerHistoryCacheTTL: TimeInterval = 90
     @ObservationIgnored private let providerHistoryMaxScanDays: Int = 180
     @ObservationIgnored nonisolated(unsafe) private let performanceStorage: PerformanceStorageImpl?
@@ -1289,6 +1289,15 @@ final class UsageStore {
         }
     }
 
+    /// Refresh a single provider (used when user clicks Ping on a specific provider tab).
+    func refreshSingleProvider(_ provider: UsageProvider) async {
+        self.isRefreshing = true
+        defer { self.isRefreshing = false }
+        await self.refreshProvider(provider, trigger: .manual)
+        await self.refreshStatus(provider, trigger: .manual)
+        self.scheduleLedgerRefresh(force: true, inactiveProviders: [])
+    }
+
     func refresh(trigger: RefreshTrigger = .manual, forceTokenUsage: Bool = false) async {
         guard !self.isRefreshing else { return }
         let now = Date()
@@ -1332,7 +1341,7 @@ final class UsageStore {
             await self.refreshCreditsIfNeeded()
         }
 
-        self.scheduleLedgerRefresh(force: forceTokenUsage, inactiveProviders: inactiveProviders)
+        self.scheduleLedgerRefresh(force: true, inactiveProviders: inactiveProviders)
 
         // Refresh custom providers
         await self.refreshCustomProviders()
@@ -1660,6 +1669,34 @@ final class UsageStore {
         }
         if self.ledgerRefreshTask != nil { return }
 
+        // Immediately populate from cache so the UI has data before the background scan.
+        let providersToCache = providers.filter { self.ledgerAllDailySummaries[$0] == nil || self.ledgerAllDailySummaries[$0]?.isEmpty == true }
+        if !providersToCache.isEmpty {
+            Task {
+                let cache = LedgerCache.shared
+                for provider in providersToCache {
+                    let providerKey = provider.rawValue
+                    guard let cached = await cache.loadCachedDailies(provider: providerKey) else { continue }
+                    let summaries = cached.dailies.compactMap { $0.toLedgerDailySummary(provider: provider) }
+                    if !summaries.isEmpty {
+                        await MainActor.run { [weak self] in
+                            guard let self else { return }
+                            if self.ledgerAllDailySummaries[provider] == nil || self.ledgerAllDailySummaries[provider]?.isEmpty == true {
+                                self.ledgerAllDailySummaries[provider] = summaries
+                                // Also populate today's summary from cache.
+                                let todayStart = Calendar.current.startOfDay(for: now)
+                                if self.ledgerDailySummaries[provider] == nil,
+                                   let todaySummary = summaries.first(where: { $0.dayStart == todayStart })
+                                {
+                                    self.ledgerDailySummaries[provider] = todaySummary
+                                }
+                            }
+                        }
+                    }
+                }
+            }
+        }
+
         self.ledgerRefreshTask = Task.detached(priority: .utility) { [weak self] in
             guard let self else { return }
             let result = await self.loadLedgerInsights(sources: sources, now: now)
@@ -1783,13 +1820,17 @@ final class UsageStore {
                     self?.tokenRefreshSequenceTask = nil
                 }
             }
-            for provider in UsageProvider.allCases {
-                if Task.isCancelled { break }
-                await self.refreshTokenUsage(
-                    provider,
-                    force: force,
-                    trigger: trigger,
-                    inactiveProviders: inactiveProviders)
+            await withTaskGroup(of: Void.self) { group in
+                for provider in UsageProvider.allCases {
+                    group.addTask {
+                        guard !Task.isCancelled else { return }
+                        await self.refreshTokenUsage(
+                            provider,
+                            force: force,
+                            trigger: trigger,
+                            inactiveProviders: inactiveProviders)
+                    }
+                }
             }
         }
     }

package/Sources/Runic/Core/Stores/XAITokenStore.swift

@@ -53,29 +53,17 @@ struct KeychainXAITokenStore: XAITokenStoring {
         }
 
         let data = cleaned!.data(using: .utf8)!
-        let query = self.baseQuery(dataProtection: false)
-        let attributes: [String: Any] = [
-            kSecValueData as String: data,
-            kSecAttrAccessible as String: kSecAttrAccessibleAfterFirstUnlock,
-        ]
-
-        // Try update first.
-        let updateStatus = SecItemUpdate(query as CFDictionary, attributes as CFDictionary)
-        if updateStatus == errSecSuccess { return }
 
-        if updateStatus != errSecItemNotFound {
-            // Item exists but update failed — delete and re-add to reset ACL.
-            try? self.deleteToken(dataProtection: false)
-        }
+        // Always delete-then-add to ensure SecAccess ACL is set.
+        // SecItemUpdate does NOT update the ACL, so existing items with
+        // missing or stale ACLs would continue to prompt for passwords.
+        try? self.deleteToken(dataProtection: false)
+        try? self.deleteToken(dataProtection: true)
 
-        var addQuery = query
-        for (key, value) in attributes { addQuery[key] = value }
+        var addQuery = self.baseQuery(dataProtection: false)
+        addQuery[kSecValueData as String] = data
+        addQuery[kSecAttrAccessible as String] = kSecAttrAccessibleAfterFirstUnlock
 
-        // Grant the calling app permanent access so macOS never shows a
-        // Keychain password dialog for this item.
-        if let access = Self.createSelfAccess() {
-            addQuery[kSecAttrAccess as String] = access
-        }
 
         let addStatus = SecItemAdd(addQuery as CFDictionary, nil)
         guard addStatus == errSecSuccess else {
@@ -91,6 +79,7 @@ struct KeychainXAITokenStore: XAITokenStoring {
         var query = self.baseQuery(dataProtection: dataProtection)
         query[kSecMatchLimit as String] = kSecMatchLimitOne
         query[kSecReturnData as String] = true
+        query[kSecUseAuthenticationUI as String] = kSecUseAuthenticationUIFail
 
         let status = SecItemCopyMatching(query as CFDictionary, &result)
         if status == errSecItemNotFound || status == errSecInteractionNotAllowed {
@@ -127,17 +116,4 @@ struct KeychainXAITokenStore: XAITokenStoring {
         return q
     }
 
-    /// Creates a SecAccess that grants the calling application permanent
-    /// read/write access without triggering the macOS Keychain password dialog.
-    private static func createSelfAccess() -> SecAccess? {
-        var trustedSelf: SecTrustedApplication?
-        guard SecTrustedApplicationCreateFromPath(nil, &trustedSelf) == errSecSuccess,
-              let trustedSelf else { return nil }
-        var access: SecAccess?
-        guard SecAccessCreate(
-            "Runic API Token" as CFString,
-            [trustedSelf] as CFArray,
-            &access) == errSecSuccess else { return nil }
-        return access
-    }
 }

package/Sources/Runic/Core/Stores/ZaiTokenStore.swift

@@ -53,29 +53,16 @@ struct KeychainZaiTokenStore: ZaiTokenStoring {
         }
 
         let data = cleaned!.data(using: .utf8)!
-        let query = self.baseQuery(dataProtection: false)
-        let attributes: [String: Any] = [
-            kSecValueData as String: data,
-            kSecAttrAccessible as String: kSecAttrAccessibleAfterFirstUnlock,
-        ]
-
-        // Try update first.
-        let updateStatus = SecItemUpdate(query as CFDictionary, attributes as CFDictionary)
-        if updateStatus == errSecSuccess { return }
 
-        if updateStatus != errSecItemNotFound {
-            // Item exists but update failed — delete and re-add to reset ACL.
-            try? self.deleteToken(dataProtection: false)
-        }
+        // Always delete-then-add to ensure SecAccess ACL is set.
+        // SecItemUpdate does NOT update the ACL, so existing items with
+        // missing or stale ACLs would continue to prompt for passwords.
+        try? self.deleteToken(dataProtection: false)
+        try? self.deleteToken(dataProtection: true)
 
-        var addQuery = query
-        for (key, value) in attributes { addQuery[key] = value }
-
-        // Grant the calling app permanent access so macOS never shows a
-        // Keychain password dialog for this item.
-        if let access = Self.createSelfAccess() {
-            addQuery[kSecAttrAccess as String] = access
-        }
+        var addQuery = self.baseQuery(dataProtection: false)
+        addQuery[kSecValueData as String] = data
+        addQuery[kSecAttrAccessible as String] = kSecAttrAccessibleAfterFirstUnlock
 
         let addStatus = SecItemAdd(addQuery as CFDictionary, nil)
         guard addStatus == errSecSuccess else {
@@ -91,6 +78,7 @@ struct KeychainZaiTokenStore: ZaiTokenStoring {
         var query = self.baseQuery(dataProtection: dataProtection)
         query[kSecMatchLimit as String] = kSecMatchLimitOne
         query[kSecReturnData as String] = true
+        query[kSecUseAuthenticationUI as String] = kSecUseAuthenticationUIFail
 
         let status = SecItemCopyMatching(query as CFDictionary, &result)
         if status == errSecItemNotFound || status == errSecInteractionNotAllowed {
@@ -127,17 +115,4 @@ struct KeychainZaiTokenStore: ZaiTokenStoring {
         return q
     }
 
-    /// Creates a SecAccess that grants the calling application permanent
-    /// read/write access without triggering the macOS Keychain password dialog.
-    private static func createSelfAccess() -> SecAccess? {
-        var trustedSelf: SecTrustedApplication?
-        guard SecTrustedApplicationCreateFromPath(nil, &trustedSelf) == errSecSuccess,
-              let trustedSelf else { return nil }
-        var access: SecAccess?
-        guard SecAccessCreate(
-            "Runic API Token" as CFString,
-            [trustedSelf] as CFArray,
-            &access) == errSecSuccess else { return nil }
-        return access
-    }
 }

package/Sources/Runic/Resources/provider-context-windows.json

@@ -0,0 +1,20 @@
+{
+  "claude": { "model": "Claude Opus 4.6", "contextK": 1000 },
+  "codex": { "model": "GPT-5 Codex", "contextK": 400 },
+  "cursor": { "model": "GPT-4o", "contextK": 128 },
+  "gemini": { "model": "Gemini 2.5 Pro", "contextK": 1000 },
+  "copilot": { "model": "GPT-4o", "contextK": 128 },
+  "zai": { "model": "GLM-4.6", "contextK": 205 },
+  "groq": { "model": "Llama 3.3 70B", "contextK": 128 },
+  "deepseek": { "model": "DeepSeek Chat", "contextK": 64 },
+  "fireworks": { "model": "Llama 3.1 70B", "contextK": 128 },
+  "mistral": { "model": "Mistral Large", "contextK": 128 },
+  "perplexity": { "model": "Sonar", "contextK": 128 },
+  "kimi": { "model": "Moonshot v1", "contextK": 128 },
+  "together": { "model": "Llama 3.1", "contextK": 128 },
+  "cohere": { "model": "Command R+", "contextK": 128 },
+  "xai": { "model": "Grok 2", "contextK": 128 },
+  "cerebras": { "model": "Llama 3.3 70B", "contextK": 128 },
+  "sambanova": { "model": "Llama 3.1 70B", "contextK": 128 },
+  "qwen": { "model": "Qwen 2.5 72B", "contextK": 128 }
+}

package/Sources/Runic/Views/Menu/InlineUsageChartView.swift

@@ -7,28 +7,23 @@ import SwiftUI
 @MainActor
 struct InlineUsageChartView: View {
     enum TimeRange: String, CaseIterable {
-        case oneHour = "1h"
-        case sixHours = "6h"
-        case oneDay = "1d"
+        case threeDays = "3d"
         case sevenDays = "7d"
         case thirtyDays = "30d"
+        case quarter = "90d"
+        case year = "1y"
 
         var cutoffInterval: TimeInterval {
             switch self {
-            case .oneHour: return -3600
-            case .sixHours: return -21600
-            case .oneDay: return -86400
+            case .threeDays: return -259200
             case .sevenDays: return -604800
             case .thirtyDays: return -2592000
+            case .quarter: return -7776000
+            case .year: return -31536000
             }
         }
 
-        var usesHourlyData: Bool {
-            switch self {
-            case .oneHour, .sixHours, .oneDay: return true
-            default: return false
-            }
-        }
+        var usesHourlyData: Bool { false }
     }
 
     private struct ChartPoint: Identifiable {
@@ -40,15 +35,13 @@ struct InlineUsageChartView: View {
     let dailySummaries: [UsageLedgerDailySummary]
     let hourlySummaries: [UsageLedgerHourlySummary]
     let width: CGFloat
-    @State private var selectedRange: TimeRange = .oneDay
+    @State private var selectedRange: TimeRange = .sevenDays
     @Environment(\.menuItemHighlighted) private var isHighlighted
 
     private static let lineColor = RunicColors.chartColor(at: 0)
 
     var body: some View {
-        let points = self.selectedRange.usesHourlyData
-            ? Self.hourlyPoints(from: self.hourlySummaries, range: self.selectedRange)
-            : Self.dailyPoints(from: self.dailySummaries, range: self.selectedRange)
+        let points = Self.dailyPoints(from: self.dailySummaries, range: self.selectedRange)
 
         VStack(alignment: .leading, spacing: RunicSpacing.xs) {
             // Time range picker