@sriinnu/runic 1.2.0 → 2.11.1

package/CHANGELOG.md

@@ -1,5 +1,272 @@
 # Changelog
 
+## 2.11.1 — 2026-10-12
+- The app icon is the current teal one. `Icon.icns` had not been rebuilt since January, so the app, the Dock and the website still showed the pre-July blue gradient; it is regenerated from `Icon.icon`.
+- About: a Docs button opens runic.srinivas.dev; the link row no longer wraps "GitHub" on the terminal-style themes.
+- The screenshot-mode placeholder email is `demo@runic.srinivas.dev`.
+
+## 2.11.0 — 2026-10-11
+- Skins: themes are now built on a **skin kit** instead of per-theme branches scattered through the views. A skin composes the panel's pages (provider card, overview, resets) and supplies the chrome slots the shared surfaces ask for (panel, tabs, chips, action rows, section headers, notes, footer, the popover frame); any slot a skin leaves alone renders the standard way, and a theme picks its kit with `"skin"` in its JSON. Gazette moved onto the kit unchanged. **Sumi** is the first theme built on it end to end: ink on washi — the provider's name in Shippori Mincho under a vermilion hanko cut with the brand mark, each window as a vertical-labelled stanza with a thin Mincho numeral and a brush-stroke gauge over a dry line, the account as a key-value list, the forecast as a note under a small indigo seal; the overview sets the day's average inside an ensō with a one-line read beside it and every provider under its seal; resets are Mincho countdowns with banked resets on a seal; sections open under dry-brush rules, nothing is boxed, the chosen tab is a vermilion stamp, and the page closes with the edition and the author's seal. Shippori Mincho and Zen Kaku Gothic New are bundled as Latin subsets (SIL Open Font License).
+- Blueprint is drawn as an engineering sheet on the kit (**Drafting**): sheet-index tabs, a title-block masthead with DWG NO and REV, a legend with a CHECKED stamp, each window as a dimensioned bar — extension lines, an arrowed dimension broken by the percent, 45° hatching for the used share, a dashed amber plan line carrying the pace delta, a lettered detail callout — the account as a ruled cell grid, numbered notes beside a revisions table, crop marks, a "General arrangement" front page, a "Schedule of resets" table and a title-block footer. Geist and Geist Mono throughout.
+- Claude: the monthly **API credits** a Max plan includes (since 7 Oct 2026: $100 on Max 5x, $200 on Max 20x, spent on the API, the Console and the Agent SDK, not on Claude Code) now show under Usage credits — "API credits $200.00 a month · next grant Nov 3". The amount comes from the plan tier Runic already reads; the date from the claude.ai subscription when the claude.ai switch is on. Pro and Free carry no grant and show nothing. The remaining balance is not shown: it lives in the Console, behind a login Runic does not hold.
+- Retro is drawn as a 1970s bench instrument on the kit (**Instrument**): cream enamel with a bevel and corner screws, keycap tabs that press in, PWR and LINK lamps, an engraved masthead with an olive LCD status strip, each window as a **VU meter** with a red zone and a needle plus an LCD readout, a pace plate of LED segments, LINK / CAP / BALANCE lamps, engraved label · LCD readout rows, a master meter and segmented channel bars on the front page, a 7-day LED bargraph, reset timers on one LCD, a counter for banked resets, an orange PING keycap and a serial plate footer. Archivo Narrow and Space Mono (OFL).
+- Three new themes, each a skin that changes the metaphor rather than the colours. **Departures** is a Solari split-flap board: every reset is a departure with a time, a gate (the provider), a remaining-time flap and an OPEN / OUT / HELD / DUE status, under a masthead that flips to the next reset, with gate cards, a board ticker and a yellow REFRESH BOARD key (Barlow Condensed, OFL). **Flight deck** is an avionics primary flight display in B612, the Airbus cockpit face: vertical tapes with caution bands and a cyan pointer, a green trend vector from the burn rate, an attitude indicator whose horizon pitches with the pace deficit, a MASTER CAUT annunciator, flight-mode cells and resets as waypoints. **Receipt** prints every ping on thermal paper: line items with dotted leaders, a subtotal, "YOU SAVED n RESETS", a rotated ALL CLEAR / EXHAUSTED stamp, a barcode of the timestamp and torn edges, out of a dark printer slot (Courier Prime, OFL).
+- About: the author link pointed at the wrong X account since the first release. It now opens x.com/_sriinnu_ (About window and Settings → About).
+- Fonts: picking a monospaced family (Berkeley Mono, JetBrains Mono, Commit Mono…) no longer breaks a theme's own display faces. The picker's design override was applied to every font in the panel, and SwiftUI re-resolved the theme's bundled faces through it — Gazette's Fraunces and Manrope silently fell back to the picked mono font at small sizes. The override now applies only to the SF families, and the Gazette page pins its faces.
+- Theme fonts now actually render. In 2.10.0 the per-theme typeface was wired up but never took effect on existing installs — the font picker kept the old literal "Mona Sans" default instead of the new **Theme default**, so the follow never kicked in and both new themes drew in Mona Sans. The theme-follow default now applies: Terminal renders in JetBrains Mono (mono console), Gazette in its editorial serif, and other themes keep Mona Sans; any family you pick still overrides. Existing installs are nudged onto Theme default once, and an explicit Mona Sans pick afterwards still sticks.
+- Gazette is now a proper editorial broadsheet: **Fraunces** serif for headings and body, with Manrope for the numbers. Fraunces is bundled as static weights (Fraunces 9pt Regular/SemiBold/Bold/Black) instead of a variable font, because variable fonts silently fall back to the system face under the menu's renderer — which is why its serif didn't show in 2.10.0.
+- Gazette is set like a printed edition now, not a tinted theme. The panel is one flat cream page inside a 1pt ink border — no floating cards, no vibrancy wash — and every section is composed the way a newspaper column is. The provider card opens with a **masthead**: a folio line (edition number from the build, the date, how fresh the numbers are), the provider's name as a Fraunces Black nameplate, a deck of the headline percentages, and a double rule. The primary window is the **lead story** — a category tag and reset byline, the percentage as a big serif numeral, a flat printed gauge, the pace as the deck. The remaining windows and the balance run as **two columns** divided by a hairline: Weekly as a brief, the balance as a **Money** column with a dotted leader from "Balance" to the amount. Insights become **In brief** — coloured bullet squares with a bold lead word — with the forecast pulled out as an italic quote beside them. Resets, Explore and Export open under ink tags; action rows are tracked caps that invert to an ink block on hover; the page closes with a byline ("By Sriinnu", linking to GitHub), the imprint ("Runic 2.10.1 · Vol. 2 · No. 156") and an outlined About button. The overview is the front page: "The Runic Gazette" over leader rows (provider … percent) and a tagged 7-day chart. The provider tabs are hard-cornered category chips — the selected one a solid brand block with the paper knocked out of its label. Manrope is the body face (tracked caps for every label), Fraunces 9pt the display face, now bundled with its italic. The look is gated to Gazette; Terminal, System and every other theme are untouched.
+
+## 2.10.0 — 2026-10-08
+- Usage history chart: added **2y** and **All** ranges (alongside 3d/7d/30d/90d/1y), and fixed the flat line. Daily tokens are heavy-tailed — a few cache-heavy days run into the billions and squashed every ordinary day onto the baseline on a linear axis; the chart now uses a square-root scale so quiet and heavy days are both legible without hiding the peaks, and the x-axis starts at the earliest point in range so a sparsely-filled window (or "All") shows no dead leading space.
+- Appearance: two new themes and a reworked Terminal, plus **Tāmra** and **Kirigami** retired. **Gazette** is a warm editorial broadsheet — cream newsprint, black ink, ruled separators, a deep-teal accent with gold / crimson / editorial-blue in the data series, Fraunces serif headings over a Manrope body. **Terminal** is now a clean, modern dark terminal — a cool-slate stage, a mint-green prompt and accent, amber highlights and a cobalt / red series, JetBrains Mono throughout, with no CRT scanlines or code-rain and the usage bars muted to the mint accent so the console reads monochrome (provider logos keep their brand colour). **Yantra** is a brutalist instrument panel — white paper, black ink, square-cornered cards behind a hard offset shadow, Geist Mono throughout, one deep-amber accent with magenta / orange / cobalt for the series. **Retro** gets an illuminated-ledger pass: warm sepia ink and strokes, a cinnabar rubrication accent, gold-leaf emphasis, and the old System-7 blue demoted to a thin indigo thread, over ruled separators and a manuscript paper texture. All themes clear the menu contrast audit.
+- Fonts: each theme now carries its own typeface and the font picker defaults to **Theme default**, which follows it — so Terminal brings JetBrains Mono, Gazette brings Manrope and Fraunces, and so on — while any family you pick in the picker still overrides it (the old curated themes used to lock the picker). JetBrains Mono, Manrope, and Fraunces are bundled (SIL Open Font License).
+- Claude: when Runic's copy of the CLI login ages out (about every eight hours), usage is read through the Claude CLI instead of showing an error until the next manual reload. The CLI process is shut down right after each read. The Claude card offers **Reconnect Claude…** to re-read the login (one Keychain prompt) and get the richer OAuth data back. While the CLI is serving the numbers the card shows a **Via CLI** badge and Settings → Providers lists the source as `cli fallback`. The fallback also works on the first refresh after launch, when a cold Claude Code start takes longer to show its prompt. Fallback failures are recorded in `~/Library/Application Support/Runic/diagnostics/`.
+- Claude CLI source: works again with Claude Code 2.1, which lays out `/usage` with cursor moves instead of spaces and needs a moment before accepting the first command. The Fable weekly window is recognised.
+- CLI and MCP: `runic --version` and the MCP server handshake report the app version instead of a fixed 1.0.0. A test and the release script refuse drift from `version.env`.
+
+## 2.9.1 — 2026-10-03
+- Codex: credits reported with usage now appear immediately. Runic only tries a separate credit lookup when the usage response has no balance, and an optional web dashboard failure no longer triggers duplicate refreshes.
+- Credits: providers with credit support show the reported balance, or 0 with an unavailable note while a balance cannot be retrieved. Providers without credit support hide the field. Fetch errors no longer replace the balance in the menu.
+
+## 2.9.0 — 2026-10-02
+- MCP: Runic now includes a local stdio server with read-only limits and health tools. Settings puts the server first, shows the actual provider values available to MCP clients, and distinguishes the built-in tools from optional packages. Local packages are discovered automatically from `~/Library/Application Support/Runic/mcpservers/`; `runic mcp call` lets users inspect built-in or package tool output without an MCP client.
+- Usage: optional provider credits and balances appear consistently in the menu and settings when the source supplies them. Muse Code subscription usage is supported.
+- Appearance: Glass and Terminal themes are available; Terminal uses a green phosphor palette. The Settings tab strip stays fixed, and the Burn chart's labels no longer overlap.
+- Documentation: the README and MCP guide explain where to find the server, connect a client, test its data, and add a local tool package.
+
+## 2.8.1 — 2026-09-23
+- Settings → Providers: every provider has a reload button (↻). It re-fetches that provider right away, and for Claude it first checks whether the CLI's Keychain item changed since Runic last copied the token, for example after a `claude /login` in the terminal. If it did, Runic re-reads it (one Keychain dialog, because you pressed the button) instead of failing with "No non-interactive Claude credentials found". The check reads only the item's modification date, so pressing reload with a current token never prompts.
+- Claude: banked limit resets (the one-off "reset your limits" grants, like the Opus 5.5 launch reset usable until Oct 22) show up next to Codex's. Claude Code's login returns the resets block with an empty list for these grants; only claude.ai lists them. Turn on **Banked resets from claude.ai** in Settings → Providers → Claude: Runic reads your claude.ai login from your browser once (macOS may ask for your password, only then), keeps a copy in its own Keychain item, and fetches resets with every Claude refresh without prompting. Each reset shows with its expiry on the card, the Resets panel and the menu. Runic only displays them; redeem on claude.ai. The claude.ai path also now picks your chat subscription org instead of whichever org the account lists first.
+- Balances: prepaid providers (DeepSeek, Kimi, StepFun, OpenRouter, Vercel AI) show what you spent, not just what's left. Their APIs only report a balance, so spend comes from the difference between readings, and those used to be taken only on refresh. With refresh on Manual, a week could hold two readings and the Spend row never appeared. Runic now takes a balance reading every 20 minutes whatever the refresh mode (one small request per provider, no prompts), the Spend row always shows ("Measuring…" until a second reading exists), and Settings → Providers lists Balance and Spent for each of them.
+- OpenRouter: if `/credits` refuses a regular key (OpenRouter's reference now lists it as management-key only), the card keeps the key's own spend today and this month instead of failing.
+- Cline: new provider. Add a Cline API key (app.cline.bot → Settings → API Keys, or `CLINE_API_KEY`) to see your credit balance plus exact spend today and this month, summed from Cline's per-request usage records (`costUsd`).
+- Muse (Meta): new provider for Meta's Model API (Muse Spark, api.meta.ai). Meta publishes no usage or billing endpoint, so the card shows key health, per-minute request and token limits from the rate-limit headers when Meta sends them, and "out of credits" when the API answers 402. The key comes from `MUSE_API_KEY`, `META_MODEL_API_KEY` or Meta's documented `MODEL_API_KEY`.
+- Spend: a balance drop is spread over the gap between the two readings it came from, so a gap across midnight splits between yesterday and today instead of landing on today (and the burn rate only counts what fell inside its week). Every spend line now says where it comes from: "Official" when the provider reports the totals (OpenRouter, Cline), "Estimated" when Runic derives them from balance readings. A day or month with no reading yet shows "—" instead of a made-up $0.
+- Codex: **Add Account** no longer spins forever when the browser login isn't finished. The runner waited for `codex login` to exit inside a task group that couldn't return until it did, so the 2-minute timeout never fired. It now polls the process against the deadline (and stops on cancel), and reads output as it arrives so a leftover helper holding the pipe open can't hang it either.
+- DeepSeek, Kimi, StepFun: a "From logs" line shows spend right away, estimated from the tokens in your local logs (DeepSeek or Kimi routed through Claude Code, opencode, and so on) at models.dev prices, in USD. Prices come from a bundled copy, refreshed from models.dev at most once a day, and you can override any model in `~/Library/Application Support/Runic/pricing/custom-prices.json`. Models without a price are counted as "N tokens unpriced", never as $0. When the balance is in USD and was read within the last half hour, the line also checks today's estimate against today's balance drop: "Matches today's balance drop", or "Balance fell 3.0× more than the logs show — key used elsewhere?".
+- Ollama Cloud: new provider for an ollama.com Pro/Max subscription (separate from Local LLM, which only sees the Ollama server on your Mac). Add an API key from ollama.com/settings/keys (or `OLLAMA_API_KEY`) to see the monthly credit pool, or session and weekly limits on older plans, your spend over the last four weeks, and which models you sent the most requests to. It reads `ollama.com/api/usage`, which Ollama doesn't document yet, so Runic decodes it loosely and keeps the reply's shape (field names only) in `diagnostics/ollama-cloud-usage-shape.json` in case it changes.
+- Claude and Codex: when the login Runic copied stops working (for example after `claude /logout` and `/login`), the card says so instead of silently dropping its Session and Weekly bars. The "no credentials" error was hidden whenever usage history existed, a rule meant for log-only providers like Qwen and GLM; it no longer applies to providers with their own login.
+- Claude: a **Usage credits** section on the card. It reads the newer `spend` block of Claude's usage reply (on or off, spent this month against the monthly limit) and, with the claude.ai switch on, your prepaid credit balance from claude.ai in your account's own currency: "Off · Balance €0.00", or "This month: €4.50 / €10.00 · Balance €12.50" with a gauge. A balance in one currency is never shown with another currency's symbol.
+- Claude: turning on **Banked resets from claude.ai** now works with Chrome, Edge, Brave and Arc. The cookie reader always blocked the Keychain dialog that unlocks Chrome's cookie key, so connecting failed with "No claude.ai login found" even when you were signed in. Only that switch may show the dialog; background refreshes still never do. Safari needs Full Disk Access for Runic, which the message now says.
+- Settings → Providers (list): tidier layout. Checkboxes line up with the provider icon instead of riding above it; badges, insight chips and errors share the name's text column; a provider's own settings rows (usage log paths, the claude.ai resets switch) sit nested under it rather than as separate full-width cards; the hairline that sat on each next card's edge is gone in favour of consistent gaps; the header lines up with the cards; insight chips stay two across.
+
+## 2.8.0 — 2026-09-19
+- TypeSafe: a provider for the vendor of the Jev System One model. Its API has no usage or billing endpoint — a live key answers `GET /v1/models` and nothing else, and a completed call reports only that call's own tokens back to the caller — so the card shows key health and available models, and the dashboard link goes to the console's Usage page. The key resolves from the Keychain first, then `TYPESAFE_API_KEY`, then `JEV_API_KEY`, since the key is often filed under the model's name.
+- Claude: the Keychain dialog no longer comes back after every rebuild. `Claude Code-credentials` belongs to the Claude CLI, so its access rules trust that binary and not Runic, and the permission you grant is tied to the exact build — and the CLI drops it again each time it refreshes its token. Runic now keeps its own copy of the access token (never the refresh token), which it owns and is never asked about, and the CLI's item is only read with the dialog suppressed, so a background refresh fails quietly to the file fallback instead of asking or hanging. The one prompt left comes right after you sign in with `claude login` yourself.
+
+## 2.7.3 — 2026-09-16
+- Release: 2.7.2 shipped the 2.7.1 app binary. Swift 6.4 writes builds to `.build/out/Products/Release`, and the packaging scripts kept copying the per-architecture folders it no longer updates. 2.7.3 is the first build that actually contains the 2.7.2 fixes (every-region Refresh, region-aware dashboard, status and export). Packaging now takes paths from SwiftPM, builds all architectures in one pass, refuses an app binary older than its sources, and the release checks that the dSYM and the signed binary have the same UUIDs.
+- Balances: prepaid providers (Kimi, Kimi China, DeepSeek, OpenRouter, Vercel AI, StepFun) show a proper Balance row, "¥110.04 · ¥85.04 paid · ¥25.00 bonus", with a currency symbol only where the platform fixes one (api.moonshot.cn = CNY, api.moonshot.ai = USD, DeepSeek reports its own, OpenRouter = USD). Balance APIs return a snapshot only, so Runic records every reading (62 days) and derives a Spend row: spent today and this month (top-ups excluded), the 7-day burn rate, and runway ("~1.2 days left at ¥89/day"). Totals cover the time Runic was recording and say "tracked since" when that started mid-period.
+- Balances: a Top up badge and "API calls blocked · top up to resume" when calls will fail (DeepSeek's `is_available`, or a balance at or below zero), and a Low balance badge when the recent burn rate empties it within a day.
+- OpenRouter: exact spend for the UTC day and month from `GET /api/v1/key` replaces the estimate ("this key"); a key spending limit becomes a gauge with its reset; the free-model daily request quota becomes its own bar.
+- Kimi: a Kimi Code subscription key (rejected by the Open Platform balance endpoint) falls back to Kimi Code plan usage (`api.kimi.com/coding/v1/usages`): 5h, weekly and monthly windows with reset times.
+- Kimi China: kimi-k3 usage routed through Claude Code (attributed to Kimi by model name, which carries no region) shows on the China account when that's the one enabled, instead of being dropped with the disabled international slot.
+- Tests no longer leave a preferences file behind for every settings store they build.
+
+## 2.7.2 — 2026-09-16
+- Menu: **Refresh** on a brand with International and China accounts (Kimi, z.ai, MiniMax, Qwen, StepFun) fetches every region you have enabled. The brand tab points at the international slot, so Refresh only re-fetched that one: a China-only account never updated, and with both only the international card did. Opening the menu now also re-pings when any region under the tab is stale or failing, not just the international one.
+- Menu: **Dashboard**, **Status page** and **Export CSV/JSON** act on the region the brand tab actually shows. A China-only Kimi opens platform.moonshot.cn instead of the international console and exports its own usage instead of the empty international slot.
+
+## 2.7.1 — 2026-09-12
+- Preferences: the Providers sidebar's selected row and the provider list's enable checkboxes are theme-owned on every opinionated theme (the row used the macOS accent instead of the theme's; the checkboxes were native). No change on System and Dark.
+- Themes: **Kirigami** — paper craft. Cream card stock with pencil hatching; every card, button, tab and switch is a sticker: a wobbly marker outline, a white halo outside it, and a hard offset shadow, as if cut out and glued on. Section and card titles are handwritten (Patrick Hand, bundled under the OFL, display-only — it never touches the font picker), body text is Nunito (rounded sans, bundled under the OFL, also offered in the font picker for any theme), numbers stay in Geist Mono. Progress bars are warp pipes (outlined tube, lit top band, a taller lip at the mouth), bar charts get the same lip, Runi becomes a peel-off sticker that hops. The popover and the Preferences window are staged like a craft page: a band of sky at the top with a cloud and a star, the provider and Preferences tabs as folder tabs stuck onto the cream sheet below it (selected tab in peach, butter, mint, sky or lilac by position, the rest leaning a degree either way), the sheet's cut top edge running under their feet, and a strip of paper hills with flowers along the bottom. Cards lift on hover. Theme JSON gains `chrome.borderStyle` value `cutout`, `effects.texture` value `hatch`, `controls.progressStyle` value `pipe`, `shape.separator` value `stitch`, and `typography.displayFamily`. No Nintendo assets — the whole cast is Runi.
+- Menu: a **Burn** panel in Explore. Every refresh now keeps the quota reading (per provider and window, 21 days, JSONL under Application Support), and the panel draws the cycle: the actual curve as a step line, the even-burn budget from window start to reset as a dashed line, a "now" rule, and dashed projections from the last 1h and 6h rates to their run-out points. The headline says "Ahead of budget by 12%" or "Under budget by 8%" and "Runs out Thu 4 PM (2d 4h) at the 6h rate · resets Sat 9 PM" or "Lasts to the reset". Session, weekly and model windows each get their own tab. Appears once a window has two readings this cycle.
+
+## 2.7.0 — 2026-09-09
+- Menu: a brand with International and China accounts (Kimi, z.ai, MiniMax, Qwen, StepFun) is one brand in the menu. The provider switcher shows one tab per brand; selecting it stacks a card per configured region, with an "Add China account" / "Add International account" row when one side has no key yet that opens Settings → Providers on that slot. The Overview groups the two regions under one brand header with INTL / CN rows and the same offer.
+- Menu: a new **Resets** panel lists every quota window that knows when it flips — across all providers on the Overview, or just the selected provider's windows on its card. Each row shows what's left, a live countdown, the wall-clock expiry ("tomorrow 9:00 AM", "Thu 4:30 PM"), and an elapsed ring for windows with a known length (5h session, 7d weekly). Ticks every 30s while the menu is open. Appears in both the popover and the classic NSMenu layout.
+- Resets: **banked reset credits** — the manual "reset my limit" allowance some providers grant — now show up wherever windows do. Codex reports the count in its usage payload and lists each credit with its expiry via the reset-credits endpoint; Runic reads both, so the Resets panel gets a "Banked" row per provider ("2 resets available · Full reset · expire Oct 4, Oct 5 · until Oct 5"), the provider card's session line says "2 banked resets · usable until Oct 5", the Overview row gets a "2 resets" pill, and the classic NSMenu gets the same line. The model is provider-neutral; Claude joins the moment its payload exposes the equivalent.
+- Codex: the `additional_rate_limits` block (a promotional model's own 5h/weekly allowance, e.g. GPT-5.3-Codex-Spark) is decoded and surfaced as the card's third window, labelled with the provider's limit name, so every window that resets is visible.
+- Claude: the OAuth usage payload's `limits` list is decoded; an active model-scoped weekly limit (a promotional model's own allowance) becomes the card's third window, labelled "<Model> weekly".
+- Menu: per-window reset lines on provider cards now carry both halves — "Resets in 2h 14m · 4:30 PM" — instead of only the countdown; the Overview row pill counts down live instead of echoing the provider's raw phrase. Providers that only hand over a phrase ("resets in 3h 12m", Gemini CLI) get it parsed into a real date so they join the countdowns.
+- Themes: **Sumi** (ink on washi — warm paper with visible fibre, sumi-black text in your chosen font, one vermilion seal accent, tapered brush-stroke rules, flat ink progress bars) and **Blueprint** (drafting table — cobalt paper ruled with a fine grid, crisp white linework, cyan drafting ink for the accent, Geist Mono numerals like dimension labels, title-block section headers; brand colors sit on cobalt like markers on a blueprint). Both are data-driven: theme JSON gains `effects.texture` / `effects.textureOpacity` (`paper` | `grain` | `grid`), `chrome.borderStyle` values `ink` and `block`, `controls.progressStyle` value `flatBar`, `controls.chartSeries` (`themed` | `monochrome`), and `shape.separator` values `brush` and `rule`.
+- Review renders: `RUNIC_SCREENSHOT_DEMO=1` seeds representative quota windows into the screenshot process so `Scripts/ship.sh` renders show gauges, countdowns and the Resets panel instead of empty cards. Nothing is persisted.
+- Themes: **Terminal** repainted from green-phosphor CRT to operator console. True black, amber phosphor for everything the system says (brackets, selection, labels, progress), bone-white Geist Mono for every number, color reserved for status (green headroom, orange warning, red exhausted), scanlines at a whisper. Structure unchanged.
+- Themes: **Relief** — real light instead of paint. A warm desk-gray canvas; cards raised on a two-light shadow (a wide ambient plus a tight key from the top-left) with a rim highlight along the top edge; segmented pickers and progress tracks pressed in as recessed wells with the selected segment and the fill popping back up; buttons raised and pushed flat on press; cards lift on hover with springy motion; letterpress section headers; generous spacing so the shadows breathe. Driven by a new `effects.elevation` token in theme JSON, so any theme can turn it on.
+- Preferences: themed for real. Section headers use the same treatment as the menu (seal, brackets, rule, tracked caps), checkboxes are theme-owned on every opinionated theme, segmented pickers and buttons are Runic controls that take the theme's fill, stroke, radius, font and accent instead of the gray native ones, and the blurred mesh no longer paints a stray band under paper, film, or parchment. Terminal uses one family everywhere (Geist Mono, full size, calmer line rhythm) instead of mixing mono titles with system-font descriptions.
+- Themes: **Light** and **Daybreak** are retired — Light was System without the adaptivity, Daybreak was a palette with nothing structural behind it. Existing Light and Daybreak users land on Sumi; the older retired names map to their nearest living theme (nocturne → Blueprint, prism → Glass, pine → Retro). A short-lived Noir (film-noir monochrome) was tried during this cycle and replaced by Blueprint before release; the `noir` id migrates to Blueprint too.
+
+## 2.6.2 — 2026-09-06
+- Licensing: the app bundle now carries THIRD-PARTY-NOTICES.md (Sparkle, KeyboardShortcuts, swift-log, swift-syntax, CryptoSwift, Silo, Helix, and the OFL fonts), as those licenses require for binary distribution. Regenerate with `Scripts/generate-third-party-notices.sh` after changing dependencies.
+- Docs: README brought current (history coverage, China/international account pairs, hot-reload config, correct CLI install path, acknowledgements); docs/providers.md gains the seven providers it was missing plus regional-pair and auto-enable sections.
+- Release tooling: the appcast generator no longer re-points older entries at the newest release path; the Homebrew cask bump lands through a PR and survives a leftover branch; the local ship script clears stale staging bundles before packaging.
+
+## 2.6.1 — 2026-09-06
+- Codex: usage from Codex CLI 0.153+ is counted again. Newer rollouts log each response as a `token_usage_record` line and no longer emit the `token_count` event Runic read, so sessions on gpt-6-astra (and recent gpt-5.6 sessions) showed no tokens, no model, and no cost. Existing installs run a one-time full rescan on the next refresh to recover the missed history.
+- Codex: pricing and context windows for gpt-5.6 Sol / Terra / Luna and gpt-6-astra (272K context per Codex's own model cache); the Codex card's fallback context label now says GPT-6 Astra.
+
+## 2.6.0 — 2026-09-04
+- Providers: added China-platform siblings as separate accounts you can track alongside the international ones — Kimi (China, api.moonshot.cn), GLM (China, open.bigmodel.cn), MiniMax (China, minimaxi.com), Qwen (China, DashScope) — plus StepFun as a new provider with both global (platform.stepfun.ai) and China (platform.stepfun.com) slots. Each has its own Keychain-stored key and env var (KIMI_CN_API_KEY, BIGMODEL_API_KEY, MINIMAXI_API_KEY, DASHSCOPE_CN_API_KEY, STEPFUN_API_KEY, STEPFUN_CN_API_KEY).
+- Preferences: a brand with both platforms (Kimi, GLM, MiniMax, Qwen, StepFun) is one entry everywhere. The list layout nests the China account under its parent behind an "Add <region>" link; the sidebar shows one row per brand with an International | China switch in the detail. A China account always sits right after its international sibling in the provider order, the menu switcher, the Overview, and the widget, so pairs are never split across the list, and it stays hidden from the menu until it has a key of its own.
+- Keychain: no more password prompts on every rebuild. Only binaries carrying Runic's own signing identity (the installed app, its helpers, the widget) touch the login keychain; `swift build` / `swift test` products and other ad-hoc binaries are environment-only, so they never trip the per-binary ACL dialog. Set `RUNIC_ALLOW_KEYCHAIN=1` to opt a local build back in.
+- Menu: Overview rows use compact names ("z.ai CN", "Kimi CN") instead of truncating to "z.ai (…"; a provider card that has a key but hasn't been fetched yet says so and nudges "Ping now" instead of asking you to add credentials you already added.
+- Codex: usage fetch works again with Codex CLI 0.153+, which dropped the `untrusted` approval policy Runic passed to `codex app-server` (every fetch failed with "invalid value 'untrusted'"). Runic now passes `never`, which every Codex version accepts and which is what a read-only probe wants anyway.
+- CLI: `runic usage --provider` accepts every provider's CLI name and aliases from the descriptor registry (`kimi-cn`, `glm-cn`, `bigmodel`, `stepfun-cn`, …) instead of a hand-kept list that had drifted.
+- z.ai: the China account is labelled "z.ai (China)" so the pair reads as one brand (CLI name stays `glm-cn`, aliases `bigmodel`, `zai-cn`).
+- Providers: a provider you never toggled switches itself on the moment there's evidence for it — an exported API key (KIMI_API_KEY, DASHSCOPE_API_KEY, DEEPSEEK_API_KEY, …), a key already in the Keychain, or usage for it found in your coding-tool logs. A provider you explicitly turned off stays off.
+- Kimi: the old "point the base URL at api.moonshot.cn" workaround is folded into the Kimi (China) account. On first launch a key configured that way moves to the China slot automatically (logged), and the base URL field is now for custom gateways or proxies only.
+- Usage: models routed through Claude Code (qwen, glm, kimi, minimax, deepseek…) are now attributed to their own provider in the timeline and breakdowns instead of being counted as Claude.
+- Qwen: optional API base URL for regional or custom DashScope gateways (also honors DASHSCOPE_BASE_URL). A missing usage endpoint (token/coding plans 404) no longer paints the card red; a rejected key still does.
+- Config: new hot-reload `~/Library/Application Support/Runic/config.json` for provider endpoint overrides, extra log paths, and rolling-window quota gauges (e.g. a DashScope Token Plan request budget) reconstructed from log-derived usage — edits apply live, no restart. Open/reveal/reload buttons live in Preferences → General.
+- Menu: a provider whose usage comes only from logs (no key configured) no longer shows an "Issue" badge for the missing credential; a configured credential that fails still does.
+- Settings: editing a provider key re-fetches automatically once the Keychain write lands, so a new key takes effect without a relaunch. The Settings window now reliably comes to the front when opened from the menu.
+
+## 2.5.2 — 2026-07-10
+- Antigravity: show all reported models sorted by most-constrained first, pick Claude variant with most remaining quota instead of arbitrary first match.
+- z.ai: fixed provider not appearing in the main panel after entering API key — availability check now reads Keychain directly and reacts to settings changes immediately.
+- UI: menu item hover highlight now fills edge-to-edge (removed 6px horizontal inset), card header and content sections align uniformly at 12px padding.
+
+## 2.5.1 — 2026-07-10
+- MiniMax: switched to `token_plan/remains` endpoint (Bearer auth), added weekly quota display, fixed web parsing field names to match real API response. Multi-model quotas now surface correctly.
+- Antigravity: fixed process detection for v2.2.1+ (renamed binary), added URLSessionDelegate for macOS 27 SSL challenges, multi-process probing with cumulative deadline, TLS host validation, port-probe timeout caps.
+- Gemini: extended OAuth credential search to Homebrew paths and Gemini CLI 0.43+ bundled format.
+- UI: menu card padding uniformity — header/content/empty-state sections all align at 12px, section spacing unified.
+- Docs: 29 provider documentation files covering every supported provider.
+- Internal: 13 code-review findings fixed across 3 independent adversarial reviews. Model name tolerance, network error retry, symlink chain resolution.
+
+## 2.5.0 — 2026-07-03
+- Illustrations: added Runi, a vector mascot drawn entirely in SwiftUI (no bitmap art) that now appears across every empty state instead of bare "no data" text, with four moods and full Reduce Motion support.
+- Usage: fixed a critical bug where reopening the app after it had been closed overnight could seal today's still-in-progress data into the permanent history archive during gap catch-up — history now stays correct across app restarts. Also fixed a Codex token-accounting bug that double-counted cached input tokens.
+- Usage: session/weekly gauges no longer fake a 0% or 100% progress bar for providers or windows that don't actually have a known quota — they now show nothing (or a dash) instead of a misleading number, and Overview/CLI averages no longer get dragged down by those placeholder windows.
+- Usage: fixed the credits bar rendering on providers where it mixed currency and 1K-token scales — it's now Codex-only, where the scale is correct.
+- Menu: "Ping now" from the Overview tab now does a real full refresh instead of silently re-pinging whichever provider you last viewed. The Overview chart's legend can no longer drift out of sync with the chart's own color mapping.
+- Menu: the Full/Abbreviated number format and Relative/Absolute date format preferences now apply consistently to insights panels, which previously ignored them and showed the other style.
+- Preferences: fixed theme-card taglines truncating mid-word in the Terminal theme, the 7-card theme grid stranding the selected card alone on its own row, and provider status chips having inconsistent pill styling. Fixed currency amounts rendering without thousands separators and with a stray space after the $ sign, and a near-zero cost-per-1K rate rendering as a misleading "$0.0000".
+- Preferences: normalized theme typography sizing — every theme was quietly running larger than its own declared base sizes for no stated reason, and Terminal now compensates for its locked Commit Mono face reading visually bigger than San Francisco at the same point size.
+- Icons: menubar icon rebuilt as a single-path lemniscate SVG; app icon gradient now runs to the brand teal.
+- Performance: menu submenus now build only when opened instead of eagerly on every refresh, ledger scans resume from a byte offset instead of rescanning provider logs from the start, and history archiving only touches days that actually changed.
+- Build: local ad-hoc dev builds now sign with a stable local identity when available, instead of true ad-hoc signing — which was forcing a repeat Keychain password prompt on every rebuild since ad-hoc's designated requirement is pinned to the literal binary hash.
+
+## 2.4.1 — 2026-06-26
+- Kimi: you can now point the provider at the right region. Subscriptions bought on the China platform (api.moonshot.cn), or routed through a reseller/proxy, no longer fail to load — set an optional "API base URL" in Preferences → Providers → Kimi (defaults to api.moonshot.ai, also honors MOONSHOT_BASE_URL / KIMI_BASE_URL). Kimi also now shows your real account balance from the Moonshot balance API instead of only listing available models.
+- Custom providers: adding or editing a provider now reports failures inline in the editor instead of silently doing nothing, keeps your input when a save fails, and no longer loses the second of two stacked dialogs — fixing a case where the add/edit sheet could appear to do nothing.
+- Provider icons: corrected four logos. Kimi's mark was invisible on light backgrounds and now renders in its brand color; Gemini uses its current "spark" mark; Auggie shows the real Augment logo; and Factory shows Factory.ai's emblem instead of an unrelated placeholder.
+
+## 2.4.0 — 2026-06-21
+- Codex: fix the timeline silently dropping to zero during long, continuous sessions. Codex now resumes a single rollout file and appends to it for days while keeping it filed under its start date; the scanner only looked in the last few date-named folders, so once a live session aged past that window all current usage went unread. Usage is now found by when a file was last written, wherever it lives — so an active goal-loop session is always captured.
+- Codex: add cost rates for the gpt-5.3, gpt-5.4 (incl. mini), and gpt-5.5 model families so cost and per-model breakdowns stop reading as $0 for recent usage.
+
+## 2.3.0 — 2026-06-17
+- Usage: the timeline no longer goes blank after the app has been closed for a few days — missed days are now backfilled from the last scan instead of only scanning today, and a one-time repair recovers gaps that older builds left behind.
+- Usage: a day's history is preserved even if its provider logs have since rotated away, and the local history relay is hardened against version upgrades, a second copy of the app running during an upgrade, busy log files, and system-clock changes — so days can't silently zero out.
+- Providers: added opencode — its local message history shows up as a usage timeline with per-model, per-project, and cost breakdowns (cost is read straight from opencode's own records). Opt-in: enable "Show opencode usage" in Preferences → Providers.
+
+## 2.2.6 — 2026-06-04
+- Usage: keep the local history cache compact — a month of history dropped from ~17 MB to under 100 KB, and it self-compacts so it can't balloon again.
+- Usage: history rebuild now survives a provider rewriting its logs mid-scan, and never drops a day's cached totals when a file is briefly unavailable.
+- Usage: a fresh install (or after clearing local data) backfills recent history automatically instead of showing only today.
+
+## 2.2.5 — 2026-06-03
+- Usage: stop hiding high-usage days — days with very large token totals (cache reads can run to hundreds of millions per day) were wrongly quarantined and shown as zero in usage, cost, and timeline panels; real history now renders in full.
+- Usage: fix a relay-cache growth bug where heavy provider history could bloat the local cache and stall refresh, leaving usage, cost, and timeline panels blank; history is stored as compact daily summaries and the cache self-compacts.
+
+## 2.2.3 — 2026-05-30
+- Preferences: make status-menu Settings and About actions open the Settings window and select the requested panel reliably.
+
+## 2.2.2 — 2026-05-30
+- Usage: make cost refresh scan only the mutable current day by default, with `--rebuild` reserved for 30-day provider JSONL repair.
+- Usage: harden the provider relay cache so empty rebuild days clear stale snapshots and cached history stays frozen during normal refreshes.
+- Docs: rewrite the README as a direct local-first project statement and document refresh versus rebuild behavior.
+- Governance: switch current development licensing from AGPL-3.0-or-later to MPL-2.0.
+
+## 2.2.1 — 2026-05-25
+- Themes: add JSON-backed typography/chrome/effects/control style tokens, with Terminal rebuilt as a calmer Tactical HUD and Retro borders softened.
+- Typography: switch the default product face to Mona Sans, add Commit Mono for Terminal/data-heavy surfaces, and migrate removed or missing saved fonts to Mona Sans.
+- Fonts: remove bundled Fira Code, IBM Plex Mono, JetBrains Mono, and Space Mono while keeping Geist, Geist Mono, SF/New York system fonts, VT323 for Retro decoration, and licensed Berkeley/Operator faces as curated picker choices when bundled or installed.
+- Charts: make timeline panels respect the Settings chart style, including line, filled area, and bar rendering.
+- Preferences: restore Integrations as an active local control center for CLI commands, MCP profiles, alert webhook defaults/tests, GitHub commit correlation, Kosha detection, and provider docs.
+- Privacy: remove anonymous-usage sharing UI and clarify local-only integration storage.
+- Performance: keep provider JSONL logs read-only and preserve cached daily ledger history after incremental scans.
+
+## 2.2.0 — 2026-05-19
+- Themes: add Retro as the new default theme — a System-7 inspired parchment + navy palette with asymmetric bevels on every surface, plain-text email + tag-style plan badge in the provider hero, beveled checkboxes, and a VT323 pixel tagline footer.
+- Themes: move every palette to JSON under `Resources/Themes/` with `$systemColorName[@opacity]` tokens so adaptive colors stay reactive; Swift fallback remains as a safety net but `ThemeLoader` is the runtime source of truth.
+- Themes: remove the weakest themes (nocturne, pine, prism) and migrate existing users to daybreak; first-launch defaults to retro.
+- Typography: make font selection dynamic via an `@Observable` font store so swaps propagate through the live SwiftUI tree without restart; bundle Geist + GeistMono + VT323, remove unused Caveat/Inconsolata/SpaceMono-Bold.
+- Polish: migrate hardcoded padding / corner radius / opacity values to `RunicSpacing`, `RunicCornerRadius`, and `RunicColors.Opacity` tokens across menu and preferences views.
+- Menu: export actions now follow the selected Explore panel and timeline range, including scoped 3d/7d/30d/90d/1y timeline exports.
+- Charts: add hover details/tooltips for timeline, hourly, weekly, utilization, windows, model, and project breakdown panels.
+- Projects: replace opaque "Unknown project" UX with "Unattributed usage" detail text that explains when provider logs lack readable project identity.
+- Context: surface connection and context-health lines in provider insights, separating max context metadata from observed usage and compaction transparency.
+- Providers: add Local LLM as a first-class provider with localhost discovery for Ollama, LM Studio, vLLM, llama.cpp, and Open WebUI.
+- Usage: add metric provenance to ledger totals and scoped CSV/JSON exports so token/cost values identify exact, provider-reported, estimated, inferred, or unknown sources.
+- Usage: detect explicitly marked compaction work from OpenTelemetry/provider logs and surface it as compaction tax in menus, exports, and CLI insights.
+- Usage: add a local OTLP/HTTP JSON collector that sanitizes GenAI telemetry into metric-only JSONL and is read automatically by app and CLI insights.
+- Usage: expand telemetry parsing for Vercel AI SDK-style fields, Ollama token counters, total-token-only payloads, cache hit/miss counters, and explicit cost fields.
+- Custom providers: record performance metrics under a `custom:<provider>` label instead of misattributing them to Codex.
+- CLI: let `runic insights` analyze any provider with a local ledger or OpenTelemetry GenAI logs, including `local-llm`.
+- CLI: add `runic otel-collect` for local OTLP JSON collection and one-shot sanitized ingestion.
+- Typography: add more curated macOS font choices with explicit spacing/contrast rules in the live font preview.
+- Governance: switch current development licensing to AGPL-3.0-or-later and add sponsorship metadata for GitHub Sponsors and Buy Me a Coffee.
+
+## 2.1.7 — 2026-05-13
+- Menu: render lower action, text, custom-provider, export, chart-link, and divider rows through the same themed hosted surface as the top provider cards.
+- Menu: keep row clicks routed through the original menu actions so Settings, Ping, Quit, and provider account actions remain functional after the themed row conversion.
+- Themes: remove the Pine/System split where the upper menu honored the selected palette but the lower main-panel rows fell back to native AppKit styling.
+
+## 2.1.6 — 2026-05-13
+- Themes: deepen Terminal into a Tokmeter-style HUD across menu panels, Settings panes, provider cards, chart panels, alerts, budgets, integrations, team views, and rating cards.
+- Themes: add shared scanline and corner-bracket overlays for Terminal surfaces while keeping glass/material effects limited to non-Terminal skins.
+- Themes: replace remaining macOS gray panel fills in shared app surfaces with Runic theme tokens so selected skins propagate consistently.
+
+## 2.1.5 — 2026-05-13
+- Themes: make Settings theme previews use the same menu surface, card, separator, track, and provider chip tokens as the main menubar panels.
+- Themes: remove uncontrolled AppKit vibrancy/material bleed from hosted menu panels so selected skins do not inherit the color of whatever window is behind them.
+- Themes: tune Terminal into a Tokmeter-style retro HUD with black surfaces, neon green accents, amber highlights, cyan support color, and readable off-white text.
+
+## 2.1.4 — 2026-05-13
+- Packaging: fix launch crash in packaged builds by avoiding SwiftPM `Bundle.module` resource lookup at app startup.
+- Resources: route fonts, provider SVGs, and provider context fallbacks through a packaged-app-safe resource locator.
+
+## 2.1.3 — 2026-05-13
+- Context: add provider-level context transparency that separates advertised/configured max context from observed usage and context-health messaging.
+- Context: read provider context windows from the Kosha TTL-backed registry when available, with static fallbacks for every built-in provider.
+- Providers: include Vercel AI Gateway in the provider surface and usage plumbing.
+- Icons: polish the Codex mark into a larger colorful transparent SVG without the old badge border.
+- Themes: apply the selected palette to the main menubar panels, overview panel, provider tabs, sidebar switcher, chart submenus, progress bars, and Preferences panes.
+- Themes: make themed surfaces use palette backgrounds, strokes, text, track colors, and accent tints instead of falling back to macOS system grays.
+- Preferences: make the full settings window reflect the active theme behind every tab, not only the appearance preview.
+- Privacy: sanitize public contact/package metadata to use the GitHub noreply identity.
+- Release: add `Scripts/clean-local-builds.sh` for wiping generated local build artifacts safely.
+
+## 2.1.2 — 2026-05-12
+- Icons: replace the handcrafted provider SVG set with brand marks from the LobeHub AI icon set where available.
+- Icons: add polished custom Auggie and Droid marks for providers without reliable public SVG coverage.
+- Icons: make provider marks larger in menu tabs, hero rows, settings previews, and provider health rows.
+- Menu: remove the glossy rounded backing behind the provider hero mark so official logos render as logos, not tiny app badges.
+- Tests: update provider icon checks to require the new 24px brand-mark grid and reject old 64px plate-style assets.
+
+## 2.1.1 — 2026-05-12
+- Icons: render provider marks as larger, colorful brand SVGs without the badge plate/border.
+- Themes: add a Glass theme with stronger frosted depth, aurora color, and livelier glass motion.
+- Preferences: add an appearance preview and make theme/font changes repaint immediately.
+- Typography: resolve bundled font face names so custom font changes actually apply in SwiftUI and menu text.
+- Claude: stop automatic app refreshes from falling back to CLI probing, preventing repeated macOS password prompts unless CLI is explicitly selected.
+- Menu: collapse duplicate display-equivalent model rows in the Models submenu.
+- Operations: add provider credential/data health, default guardrail installation, and redacted diagnostics export.
+- Tests: guard provider SVGs and brand icon rendering so bordered assets do not sneak back in.
+
+## 2.1.0 — 2026-05-12
+- Providers: add Vercel AI Gateway support, plus Qwen and Vertex AI provider wiring.
+- Usage: show token/cost/model/project summaries for any provider with local ledger or OpenTelemetry GenAI logs.
+- Preferences: add shared Usage log paths and refresh controls across provider settings.
+- Icons: regenerate all provider SVGs as compact 64px template marks and render them as high-contrast badges.
+- Themes: add Pine, Nocturne, Prism, and Terminal skins alongside System, Light, and Dark.
+- Packaging: use a stable Developer ID signing identity for release builds to avoid Keychain trust churn.
+- Keychain: skip rewriting unchanged provider secrets so saved API keys stay quiet across upgrades.
+
+## 2.0.0 — 2026-03-27
+- Typography: custom font system with 7 bundled families (Fira Code, JetBrains Mono, IBM Plex Mono, Space Mono, Inconsolata, Caveat, SF Pro/Mono)
+- Typography: live font switching from Settings > General — no restart needed
+- Typography: RunicTypography design tokens with dynamic RunicFont scale across 600+ font call sites
+- Typography: drop-in font extensibility — add TTF/OTF to Resources/Fonts, rebuild, auto-discovered
+- Typography: font preview in picker — each choice rendered in its own typeface
+- Typography: NSMenuItem post-processor applies selected font to all plain menu items
+- Typography: xLarge dynamic type for slightly larger text across the app
+- Menu: wider card base width (310→340pt) for monospaced font comfort
+- iOS: RunicFont enum for consistent monospaced typography across widgets and views
+
 ## 0.16.1 — 2025-12-29
 - Menu: reduce layout thrash when opening menus and sizing charts. Thanks @ibehnam!
 - Packaging: default release notarization builds universal (arm64 + x86_64) zip.