@swttch/extend-kit 0.6.0 → 0.6.1

package/dist/battery/api/client.js

@@ -1,5 +1,5 @@
 import { OAuthApi } from './oauth.js';
-import { getJson } from './http.js';
+import { getJson, proxyInUseFor } from './http.js';
 import { getCredentials, getAccessToken, isApiKeyAuth } from '../auth/index.js';
 import { CcbError } from '../errors.js';
 const BASE_URL = 'https://api.anthropic.com';
@@ -58,14 +58,61 @@ export class ClaudeCodeClient {
                 ...headers,
             };
         }
-        // getJson rather than fetch: fetch cannot be routed through a proxy, and on a
-        // machine that only reaches the internet through one, every call here fails.
-        // See src/proxy.ts.
-        const response = await getJson(`${this.baseUrl}${path}`, requestHeaders);
+        // getJson rather than fetch: fetch takes no `http.Agent`, and `ws` proxies
+        // only when handed one, so a single proxy implementation has to be built on
+        // something both transports accept. See src/proxy.ts.
+        const url = `${this.baseUrl}${path}`;
+        const response = await getJson(url, requestHeaders);
         if (!response.ok) {
-            throw new CcbError(`API error ${response.status}: ${response.statusText}`, 'api_error');
+            throw describeApiFailure(response, url);
         }
         return response.body;
     }
 }
+/**
+ * Turn an HTTP status into an error a caller can route on and a person can act on.
+ *
+ * Every non-2xx used to become one `api_error` reading "API error 403: Forbidden",
+ * which is the same sentence for an expired login, a rate limit, and a request the
+ * gateway blocked. Nothing downstream could tell them apart, so the plugin's usage
+ * panel classified all of them as an authentication problem and told people to log
+ * in again no matter what had actually happened.
+ *
+ * The proxy is named whenever one is in play. A refusal that reaches this function
+ * came from the destination — {@link getJson} throws before this point when the
+ * proxy itself refused the tunnel — but knowing which route the request took is
+ * what makes the difference checkable rather than guessable.
+ */
+function describeApiFailure(response, url) {
+    const { status, statusText, retryAfterSec } = response;
+    const message = `API error ${status}: ${statusText}`;
+    const proxyUrl = proxyInUseFor(url);
+    const route = proxyUrl
+        ? `The request reached the API through the proxy at ${proxyUrl}.`
+        : 'The request went straight to the API, with no proxy configured for this process.';
+    // Repeated on every branch so a caller never has to know which code carries
+    // which facts. `reachedDestination` is true throughout: getJson throws before
+    // this point when a proxy refused the tunnel, so anything here was answered by
+    // the destination itself.
+    const details = { status, ...(proxyUrl && { proxyUrl }), reachedDestination: true };
+    if (status === 401) {
+        return new CcbError(message, 'token_expired', 'The saved login is no longer accepted. Run `claude` once to refresh it.', details);
+    }
+    if (status === 403) {
+        // The case this whole taxonomy came out of: a machine that can only reach
+        // Anthropic through a proxy, with the request going direct because the proxy
+        // was configured under a variable this tool was not reading. The gateway
+        // answers 403, which looks like an account problem and is not one.
+        return new CcbError(message, 'forbidden', `${route} A 403 here is usually the network refusing the request rather than the account lacking access.`, details);
+    }
+    if (status === 429) {
+        return new CcbError(message, 'rate_limited', retryAfterSec !== undefined
+            ? `Too many requests. The API asked us to wait ${retryAfterSec}s.`
+            : 'Too many requests in a short window. Try again shortly.', { ...details, ...(retryAfterSec !== undefined && { retryAfterSec }) });
+    }
+    if (status >= 500) {
+        return new CcbError(message, 'server_error', `${route} The API itself reported an error.`, details);
+    }
+    return new CcbError(message, 'api_error', route, details);
+}
 //# sourceMappingURL=client.js.map

package/dist/battery/api/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/battery/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,MAAM,QAAQ,GAAG,2BAA2B,CAAC;AAW7C;;;;;;;;;GASG;AACH,SAAS,cAAc,CAAC,QAA4B;IAClD,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxE,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,OAAO,gBAAgB;IACnB,IAAI,CAAc;IAClB,WAAW,CAAU;IACrB,MAAM,CAAY;IACT,OAAO,CAAS;IAEjC,YAAY,IAAiB,EAAE,UAAmC,EAAE;QAClE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,YAAY;QACd,OAAO,YAAY,CAAC,IAAI,CAAC,IAAkB,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,MAAM,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAI,IAAY,EAAE,OAAgC;QAC9D,IAAI,cAAsC,CAAC;QAE3C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,cAAc,GAAG;gBACf,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;gBAC7B,mBAAmB,EAAE,YAAY;gBACjC,GAAG,OAAO;aACX,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACxC,cAAc,GAAG;gBACf,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,GAAG,OAAO;aACX,CAAC;QACJ,CAAC;QAED,8EAA8E;QAC9E,6EAA6E;QAC7E,oBAAoB;QACpB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAI,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;QAE5E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,QAAQ,CAAC,aAAa,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,EAAE,WAAW,CAAC,CAAC;QAC1F,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/battery/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAqB,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,MAAM,QAAQ,GAAG,2BAA2B,CAAC;AAW7C;;;;;;;;;GASG;AACH,SAAS,cAAc,CAAC,QAA4B;IAClD,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxE,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,OAAO,gBAAgB;IACnB,IAAI,CAAc;IAClB,WAAW,CAAU;IACrB,MAAM,CAAY;IACT,OAAO,CAAS;IAEjC,YAAY,IAAiB,EAAE,UAAmC,EAAE;QAClE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,YAAY;QACd,OAAO,YAAY,CAAC,IAAI,CAAC,IAAkB,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,MAAM,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAI,IAAY,EAAE,OAAgC;QAC9D,IAAI,cAAsC,CAAC;QAE3C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,cAAc,GAAG;gBACf,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;gBAC7B,mBAAmB,EAAE,YAAY;gBACjC,GAAG,OAAO;aACX,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACxC,cAAc,GAAG;gBACf,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,GAAG,OAAO;aACX,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,4EAA4E;QAC5E,sDAAsD;QACtD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAI,GAAG,EAAE,cAAc,CAAC,CAAC;QAEvD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,kBAAkB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,kBAAkB,CAAC,QAA+B,EAAE,GAAW;IACtE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,QAAQ,CAAC;IACvD,MAAM,OAAO,GAAG,aAAa,MAAM,KAAK,UAAU,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,QAAQ;QACpB,CAAC,CAAC,oDAAoD,QAAQ,GAAG;QACjE,CAAC,CAAC,kFAAkF,CAAC;IACvF,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,0BAA0B;IAC1B,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAEpF,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,eAAe,EAC1C,yEAAyE,EAAE,OAAO,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,0EAA0E;QAC1E,6EAA6E;QAC7E,yEAAyE;QACzE,mEAAmE;QACnE,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EACtC,GAAG,KAAK,iGAAiG,EACzG,OAAO,CAAC,CAAC;IACb,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,cAAc,EACzC,aAAa,KAAK,SAAS;YACzB,CAAC,CAAC,+CAA+C,aAAa,IAAI;YAClE,CAAC,CAAC,yDAAyD,EAC7D,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,KAAK,oCAAoC,EAAE,OAAO,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC"}

package/dist/battery/api/http.d.ts

@@ -5,6 +5,21 @@ export interface JsonResponse<T> {
     status: number;
     statusText: string;
     body: T;
+    /**
+     * Seconds the destination asked us to wait, parsed from Retry-After.
+     *
+     * Surfaced as a number because the only alternative is for a caller to find it
+     * by matching prose, and a caller that reads prose breaks when the prose changes.
+     * Absent when the header was missing or was an HTTP-date rather than a count.
+     */
+    retryAfterSec?: number;
+}
+/** Options that change how a request is made, rather than what is requested. */
+export interface GetJsonOptions {
+    /** Use this agent instead of resolving one from the proxy environment. */
+    agent?: Agent;
+    /** Total budget for the request, covering connect, tunnel, and response. */
+    deadlineMs?: number;
 }
 /**
  * GET a JSON document, through a proxy when one is configured.
@@ -14,4 +29,10 @@ export interface JsonResponse<T> {
  * proxy is what failed. Since the proxy is invisible in the URL the user asked
  * for, the error says so explicitly.
  */
-export declare function getJson<T>(url: string, headers: Record<string, string>, agentOverride?: Agent): Promise<JsonResponse<T>>;
+export declare function getJson<T>(url: string, headers: Record<string, string>, options?: GetJsonOptions): Promise<JsonResponse<T>>;
+/**
+ * The proxy in play for `url`, safe to print, so a caller can name it in its own
+ * errors. Credentials are stripped here rather than at each call site, because a
+ * call site that forgets is a call site that prints a password.
+ */
+export declare function proxyInUseFor(url: string): string | undefined;

package/dist/battery/api/http.js

@@ -1,14 +1,55 @@
+/**
+ * The HTTP transport for everything this package fetches.
+ *
+ * Global `fetch` cannot be handed an `http.Agent`, and `ws` proxies only when it
+ * is handed one, so routing both transports through a single proxy
+ * implementation means using `node:https` here. Proxying `fetch` itself is
+ * possible by other means — undici's ProxyAgent with setGlobalDispatcher — but a
+ * dispatcher does not cover `ws`, which is why that route was not taken.
+ * See {@link proxyAgentFor}.
+ */
 import { request as httpsRequest } from 'node:https';
 import { request as httpRequest } from 'node:http';
-import { proxyAgentFor } from '../../proxy.js';
+import { proxyAgentFor, resolveProxyUrl, redactProxyUrl } from '../../proxy.js';
 import { CcbError } from '../errors.js';
+/** Retry-After is either a count of seconds or an HTTP-date; only the former is useful here. */
+function parseRetryAfter(value) {
+    const raw = Array.isArray(value) ? value[0] : value;
+    if (!raw)
+        return undefined;
+    const seconds = Number(raw.trim());
+    if (Number.isFinite(seconds) && seconds >= 0)
+        return seconds;
+    const at = Date.parse(raw);
+    if (Number.isNaN(at))
+        return undefined;
+    return Math.max(0, Math.round((at - Date.now()) / 1000));
+}
 /**
- * Global `fetch` cannot be pointed at a proxy — it ignores the proxy environment
- * variables and takes no `agent` — so it is unusable here. `node:https` accepts
- * the very agent `ws` accepts, which lets one proxy implementation serve both
- * transports. See {@link proxyAgentFor}.
+ * How long a request may take in total: connecting, opening the tunnel when a
+ * proxy is in the way, and reading the response.
+ *
+ * One budget rather than a socket timeout, because a socket timeout starts when
+ * there is a socket. A proxy that is slow to answer CONNECT has not produced one
+ * yet, so the guard that was here before did not cover the very case its comment
+ * described: a proxy asked to open a tunnel and left to think about it for 70
+ * seconds ran to completion, unguarded, while the same 70-second silence after
+ * the tunnel opened was cut off at 60. Measured, not reasoned about.
  */
-const SOCKET_TIMEOUT_MS = 60_000;
+const DEFAULT_DEADLINE_MS = 60_000;
+/**
+ * How long a request may take in total, before the caller's own option.
+ *
+ * A spawner with a shorter budget than ours can say so here. The plugin backend
+ * gives `ccb` 15 seconds and kills the process at that mark, which produces a
+ * dead child and whatever its login shell had printed by then rather than an
+ * explanation — the user was shown `(eval):1: can't change option: zle`. Told the
+ * budget, `ccb` finishes first and says what actually went wrong.
+ */
+function defaultDeadlineMs() {
+    const raw = Number(process.env.CCB_REQUEST_TIMEOUT_MS);
+    return Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_DEADLINE_MS;
+}
 /**
  * GET a JSON document, through a proxy when one is configured.
  *
@@ -17,45 +58,121 @@ const SOCKET_TIMEOUT_MS = 60_000;
  * proxy is what failed. Since the proxy is invisible in the URL the user asked
  * for, the error says so explicitly.
  */
-export async function getJson(url, headers, agentOverride) {
-    const agent = agentOverride ?? proxyAgentFor(url);
+export async function getJson(url, headers, options = {}) {
+    const { agent: agentOverride, deadlineMs = defaultDeadlineMs() } = options;
+    // Built before the agent, because the agent needs it: see the note in
+    // proxyAgentFor on why a signal given only to the request cannot end a wait
+    // that has not produced a socket yet.
+    const abort = new AbortController();
+    const agent = agentOverride
+        ?? proxyAgentFor(url, process.env, { signal: abort.signal, timeoutMs: deadlineMs });
     const viaProxy = agent !== undefined;
+    // Only meaningful for the agent this function built: an override comes from a
+    // caller that knows its own routing, and naming an environment proxy it is not
+    // using would be worse than saying nothing.
+    const proxyUrl = agentOverride ? undefined : redactProxyUrl(resolveProxyUrl(url));
     // The API is always https; plain http is here so tests can run against a local
     // server without a certificate, and it costs one branch.
     const request = new URL(url).protocol === 'http:' ? httpRequest : httpsRequest;
-    const { status, statusText, text } = await new Promise((resolve, reject) => {
-        const req = request(url, { method: 'GET', headers, agent }, (res) => {
-            const chunks = [];
-            res.on('data', (chunk) => chunks.push(chunk));
-            res.on('end', () => resolve({
-                status: res.statusCode ?? 0,
-                statusText: res.statusMessage ?? '',
-                text: Buffer.concat(chunks).toString('utf-8'),
-            }));
-            res.on('error', reject);
-        });
-        // `https.request` waits forever by default; a proxy that accepts the socket
-        // and then goes quiet would hang the CLI with no output at all.
-        req.setTimeout(SOCKET_TIMEOUT_MS, () => {
-            req.destroy(new CcbError(`Request to ${url} timed out after ${SOCKET_TIMEOUT_MS / 1000}s`, 'network_error', viaProxy ? 'The configured proxy accepted the connection but never replied.' : undefined));
-        });
-        req.on('error', (err) => {
-            if (err instanceof CcbError)
-                return reject(err);
-            reject(new CcbError(`Could not reach ${new URL(url).host}: ${err.message}`, 'network_error', viaProxy
-                ? 'This connection went through the proxy from HTTP_PROXY/HTTPS_PROXY/ALL_PROXY. Check that the proxy is running and reachable.'
-                : undefined));
+    // Aborting is what actually stops the work, rather than only telling the caller
+    // to stop waiting for it. One signal covers both halves: the agent destroys the
+    // socket it is reading the CONNECT response from, and the request tears down a
+    // socket it has already been handed.
+    let socketToKill;
+    let phase = 'connecting';
+    let proxyConnectStatus;
+    let timedOut = false;
+    const deadline = setTimeout(() => {
+        timedOut = true;
+        abort.abort();
+        socketToKill?.destroy();
+    }, deadlineMs);
+    const describeTimeout = () => new CcbError(`Request to ${url} timed out after ${Math.round(deadlineMs / 1000)}s`, 'timeout', phase === 'connecting' && viaProxy
+        ? `The proxy${proxyUrl ? ` at ${proxyUrl}` : ''} never finished opening the tunnel.`
+        : viaProxy
+            ? 'The tunnel was open, but the destination never replied.'
+            : undefined, { ...(proxyUrl && { proxyUrl }), reachedDestination: phase === 'tunnelled' });
+    let result;
+    try {
+        result = await new Promise((resolve, reject) => {
+            const req = request(url, { method: 'GET', headers, agent, signal: abort.signal }, (res) => {
+                const chunks = [];
+                res.on('data', (chunk) => chunks.push(chunk));
+                res.on('end', () => resolve({
+                    status: res.statusCode ?? 0,
+                    statusText: res.statusMessage ?? '',
+                    text: Buffer.concat(chunks).toString('utf-8'),
+                    retryAfterSec: parseRetryAfter(res.headers['retry-after']),
+                }));
+                res.on('error', reject);
+            });
+            // https-proxy-agent announces the CONNECT response here before it decides
+            // what to do with it. Recording the status is what lets a refusal be told
+            // apart from an answer by the destination — see the throw below.
+            req.on('proxyConnect', (connect) => {
+                proxyConnectStatus = connect.statusCode;
+                if (connect.statusCode === 200)
+                    phase = 'tunnelled';
+            });
+            req.on('socket', (socket) => {
+                socketToKill = socket;
+                // Without a proxy there is no CONNECT step to leave behind: once the
+                // socket exists, any further wait is the destination's.
+                if (!viaProxy)
+                    phase = 'tunnelled';
+            });
+            req.on('error', (err) => {
+                if (timedOut)
+                    return reject(describeTimeout());
+                if (err instanceof CcbError)
+                    return reject(err);
+                reject(new CcbError(`Could not reach ${new URL(url).host}: ${err.message}`, 'network_error', viaProxy
+                    ? 'This connection went through the proxy from HTTP_PROXY/HTTPS_PROXY/ALL_PROXY. Check that the proxy is running and reachable.'
+                    : undefined, { ...(proxyUrl && { proxyUrl }), reachedDestination: false }));
+            });
+            req.end();
         });
-        req.end();
-    });
+    }
+    finally {
+        clearTimeout(deadline);
+    }
+    // A proxy that refuses the CONNECT does not fail the request. https-proxy-agent
+    // replays the refusal onto a stand-in socket so node's HTTP parser reads it,
+    // which means the proxy's own "403 Forbidden" arrives here shaped exactly like a
+    // 403 from the API.
+    //
+    // That replay is deliberate on the library's part, not something to route around:
+    // it destroys the real socket first so the request — Authorization header and all
+    // — is never written to a proxy that just declined to carry it (HackerOne
+    // #541502). The status is therefore the only thing that survives, and it survives
+    // wearing the destination's clothes. Reporting it as an API error sends the user
+    // to look at their account when the answer is their proxy, so the two are told
+    // apart here rather than left for a person to guess at.
+    //
+    // Verified against https-proxy-agent 9.1.0 (dist/index.js:104, 134-157): the
+    // proxyConnect event fires before the stand-in socket is built.
+    if (proxyConnectStatus !== undefined && proxyConnectStatus !== 200) {
+        throw new CcbError(`The proxy refused to open a tunnel to ${new URL(url).host} (${proxyConnectStatus} ${result.statusText})`, 'proxy_rejected', proxyConnectStatus === 407
+            ? `The proxy${proxyUrl ? ` at ${proxyUrl}` : ''} requires authentication. Put the credentials in the proxy URL, as in http://user:pass@host:port.`
+            : `This is the proxy${proxyUrl ? ` at ${proxyUrl}` : ''} answering, not the Anthropic API.`, { ...(proxyUrl && { proxyUrl }), proxyConnectStatus, reachedDestination: false });
+    }
+    const { status, statusText, text, retryAfterSec } = result;
     if (status < 200 || status >= 300) {
-        return { ok: false, status, statusText, body: undefined };
+        return { ok: false, status, statusText, body: undefined, ...(retryAfterSec !== undefined && { retryAfterSec }) };
     }
     try {
         return { ok: true, status, statusText, body: JSON.parse(text) };
     }
     catch {
-        throw new CcbError(`Expected JSON from ${url} but got something else`, 'api_error', viaProxy ? 'A proxy that returns an error page instead of the response looks like this.' : undefined);
+        throw new CcbError(`Expected JSON from ${url} but got something else`, 'api_error', viaProxy ? 'A proxy that returns an error page instead of the response looks like this.' : undefined, { status, ...(proxyUrl && { proxyUrl }), reachedDestination: true });
     }
 }
+/**
+ * The proxy in play for `url`, safe to print, so a caller can name it in its own
+ * errors. Credentials are stripped here rather than at each call site, because a
+ * call site that forgets is a call site that prints a password.
+ */
+export function proxyInUseFor(url) {
+    return redactProxyUrl(resolveProxyUrl(url));
+}
 //# sourceMappingURL=http.js.map

package/dist/battery/api/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/battery/api/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAc,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAUxC;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW,EACX,OAA+B,EAC/B,aAAqB;IAErB,MAAM,KAAK,GAAG,aAAa,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,KAAK,KAAK,SAAS,CAAC;IACrC,+EAA+E;IAC/E,yDAAyD;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;IAE/E,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,OAAO,CAInD,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAClE,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CACjB,OAAO,CAAC;gBACN,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;gBAC3B,UAAU,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;gBACnC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;aAC9C,CAAC,CACH,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,4EAA4E;QAC5E,gEAAgE;QAChE,GAAG,CAAC,UAAU,CAAC,iBAAiB,EAAE,GAAG,EAAE;YACrC,GAAG,CAAC,OAAO,CAAC,IAAI,QAAQ,CACtB,cAAc,GAAG,oBAAoB,iBAAiB,GAAG,IAAI,GAAG,EAChE,eAAe,EACf,QAAQ,CAAC,CAAC,CAAC,iEAAiE,CAAC,CAAC,CAAC,SAAS,CACzF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,IAAI,GAAG,YAAY,QAAQ;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,QAAQ,CACjB,mBAAmB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,EACtD,eAAe,EACf,QAAQ;gBACN,CAAC,CAAC,8HAA8H;gBAChI,CAAC,CAAC,SAAS,CACd,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAc,EAAE,CAAC;IACjE,CAAC;IAED,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,EAAE,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,sBAAsB,GAAG,yBAAyB,EAClD,WAAW,EACX,QAAQ,CAAC,CAAC,CAAC,6EAA6E,CAAC,CAAC,CAAC,SAAS,CACrG,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/battery/api/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAkC,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAkBxC,gGAAgG;AAChG,SAAS,eAAe,CAAC,KAAoC;IAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC;;;;;;;;GAQG;AACH,SAAS,iBAAiB;IACxB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACrE,CAAC;AAkBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW,EACX,OAA+B,EAC/B,UAA0B,EAAE;IAE5B,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,GAAG,iBAAiB,EAAE,EAAE,GAAG,OAAO,CAAC;IAC3E,sEAAsE;IACtE,4EAA4E;IAC5E,sCAAsC;IACtC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,aAAa;WACtB,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,KAAK,KAAK,SAAS,CAAC;IACrC,8EAA8E;IAC9E,+EAA+E;IAC/E,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAClF,+EAA+E;IAC/E,yDAAyD;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;IAE/E,gFAAgF;IAChF,gFAAgF;IAChF,+EAA+E;IAC/E,qCAAqC;IACrC,IAAI,YAAiD,CAAC;IACtD,IAAI,KAAK,GAAU,YAAY,CAAC;IAChC,IAAI,kBAAsC,CAAC;IAC3C,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;QAC/B,QAAQ,GAAG,IAAI,CAAC;QAChB,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,YAAY,EAAE,OAAO,EAAE,CAAC;IAC1B,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,IAAI,QAAQ,CACxC,cAAc,GAAG,oBAAoB,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EACrE,SAAS,EACT,KAAK,KAAK,YAAY,IAAI,QAAQ;QAChC,CAAC,CAAC,YAAY,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,qCAAqC;QACpF,CAAC,CAAC,QAAQ;YACR,CAAC,CAAC,yDAAyD;YAC3D,CAAC,CAAC,SAAS,EACf,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,kBAAkB,EAAE,KAAK,KAAK,WAAW,EAAE,CAC7E,CAAC;IAGF,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxD,MAAM,GAAG,GAAkB,OAAO,CAChC,GAAG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACvD,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CACjB,OAAO,CAAC;oBACN,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC3B,UAAU,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;oBACnC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAC7C,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;iBAC3D,CAAC,CACH,CAAC;gBACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1B,CAAC,CACF,CAAC;YAEF,0EAA0E;YAC1E,0EAA0E;YAC1E,iEAAiE;YACjE,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,OAAgC,EAAE,EAAE;gBAC1D,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC;gBACxC,IAAI,OAAO,CAAC,UAAU,KAAK,GAAG;oBAAE,KAAK,GAAG,WAAW,CAAC;YACtD,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;gBAC1B,YAAY,GAAG,MAAM,CAAC;gBACtB,qEAAqE;gBACrE,wDAAwD;gBACxD,IAAI,CAAC,QAAQ;oBAAE,KAAK,GAAG,WAAW,CAAC;YACrC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACtB,IAAI,QAAQ;oBAAE,OAAO,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;gBAC/C,IAAI,GAAG,YAAY,QAAQ;oBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChD,MAAM,CAAC,IAAI,QAAQ,CACjB,mBAAmB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,EACtD,eAAe,EACf,QAAQ;oBACN,CAAC,CAAC,8HAA8H;oBAChI,CAAC,CAAC,SAAS,EACb,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAC7D,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED,gFAAgF;IAChF,6EAA6E;IAC7E,iFAAiF;IACjF,oBAAoB;IACpB,EAAE;IACF,kFAAkF;IAClF,kFAAkF;IAClF,0EAA0E;IAC1E,kFAAkF;IAClF,iFAAiF;IACjF,+EAA+E;IAC/E,wDAAwD;IACxD,EAAE;IACF,6EAA6E;IAC7E,gEAAgE;IAChE,IAAI,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,KAAK,GAAG,EAAE,CAAC;QACnE,MAAM,IAAI,QAAQ,CAChB,yCAAyC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,UAAU,GAAG,EACzG,gBAAgB,EAChB,kBAAkB,KAAK,GAAG;YACxB,CAAC,CAAC,YAAY,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,mGAAmG;YAClJ,CAAC,CAAC,oBAAoB,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,oCAAoC,EAC7F,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAE3D,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAc,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IACxH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,EAAE,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,sBAAsB,GAAG,yBAAyB,EAClD,WAAW,EACX,QAAQ,CAAC,CAAC,CAAC,6EAA6E,CAAC,CAAC,CAAC,SAAS,EACpG,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,cAAc,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/battery/api/index.d.ts

@@ -1,4 +1,4 @@
 export { ClaudeCodeClient } from './client.js';
 export type { ClaudeCodeClientOptions } from './client.js';
 export { OAuthApi } from './oauth.js';
-export type { UsageResponse, UsageBucket, ExtraUsage, ProfileResponse, AccountInfo, OrganizationInfo, ApplicationInfo, } from './types.js';
+export type { UsageResponse, UsageBucket, UsageLimit, ExtraUsage, ProfileResponse, AccountInfo, OrganizationInfo, ApplicationInfo, } from './types.js';

package/dist/battery/api/types.d.ts

@@ -1,13 +1,55 @@
 export interface UsageBucket {
     utilization: number;
     resets_at: string | null;
+    limit_dollars?: number | null;
+    used_dollars?: number | null;
+    remaining_dollars?: number | null;
+    locked_reason?: string | null;
 }
 export interface ExtraUsage {
     is_enabled: boolean;
     monthly_limit: number | null;
     used_credits: number | null;
     utilization: number | null;
+    currency?: string | null;
+    decimal_places?: number | null;
+    disabled_reason?: string | null;
+    user_disabled?: boolean;
+    spend_limit_reached?: boolean;
 }
+/**
+ * A limit the API describes by name rather than by giving it a top-level key.
+ *
+ * Newer per-model windows arrive only in the `limits` array, so a reader that
+ * walks the top-level keys never sees them. That is why a Fable weekly limit is
+ * absent from the usage display while the API is plainly reporting it: the array
+ * is not a duplicate of the flat fields, it is where the entries the flat fields
+ * have no name for live.
+ */
+export interface UsageLimit {
+    kind: string;
+    percent: number;
+    resets_at?: string | null;
+    scope?: {
+        model?: {
+            display_name?: string;
+            [key: string]: unknown;
+        };
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+}
+/**
+ * The usage payload, as far as it is worth naming.
+ *
+ * The index signature is deliberate. Anthropic ships new windows under
+ * codenames (`nimbus_quill`, `juniper_tide`, `tangelo`) without warning, and a
+ * closed type would mean cutting a release of this package every time one
+ * appears. More importantly, a closed type reads as a promise that these are all
+ * the fields there are, and a reader that believed that promise is exactly how
+ * the `limits` array came to be overlooked. The runtime payload was never
+ * trimmed; only the type claimed it was complete.
+ */
 export interface UsageResponse {
     five_hour: UsageBucket | null;
     seven_day: UsageBucket | null;
@@ -17,6 +59,8 @@ export interface UsageResponse {
     seven_day_cowork: UsageBucket | null;
     iguana_necktie: unknown | null;
     extra_usage: ExtraUsage | null;
+    limits?: UsageLimit[] | null;
+    [key: string]: unknown;
 }
 export interface AccountInfo {
     uuid: string;

package/dist/battery/errors.d.ts

@@ -1,9 +1,32 @@
+/**
+ * Facts a caller may need to act on, carried as fields rather than folded into
+ * the message.
+ *
+ * A caller that has to recover the retry delay by matching a regular expression
+ * against prose is a caller that breaks the next time the prose is reworded. The
+ * plugin backend does exactly that today, and every one of these fields exists
+ * because something downstream would otherwise have to read the sentence.
+ */
+export interface CcbErrorDetails {
+    /** HTTP status the destination answered with, when there was one. */
+    status?: number;
+    /** How long to wait before trying again, from a Retry-After header. */
+    retryAfterSec?: number;
+    /** The proxy the request was routed through, when one applied. */
+    proxyUrl?: string;
+    /** The status a proxy answered a CONNECT with, when it refused the tunnel. */
+    proxyConnectStatus?: number;
+    /** Whether the request reached the destination, or stalled before the tunnel opened. */
+    reachedDestination?: boolean;
+}
 export declare class CcbError extends Error {
     readonly code: string;
     readonly hint?: string | undefined;
-    constructor(message: string, code: string, hint?: string | undefined);
+    readonly details?: CcbErrorDetails | undefined;
+    constructor(message: string, code: string, hint?: string | undefined, details?: CcbErrorDetails | undefined);
     toJSON(): {
         error: {
+            details?: CcbErrorDetails | undefined;
             hint?: string | undefined;
             code: string;
             message: string;

package/dist/battery/errors.js

@@ -1,10 +1,12 @@
 export class CcbError extends Error {
     code;
     hint;
-    constructor(message, code, hint) {
+    details;
+    constructor(message, code, hint, details) {
         super(message);
         this.code = code;
         this.hint = hint;
+        this.details = details;
         this.name = 'CcbError';
     }
     toJSON() {
@@ -13,6 +15,7 @@ export class CcbError extends Error {
                 code: this.code,
                 message: this.message,
                 ...(this.hint && { hint: this.hint }),
+                ...(this.details && Object.keys(this.details).length > 0 && { details: this.details }),
             },
         };
     }

package/dist/battery/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/battery/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGf;IACA;IAHlB,YACE,OAAe,EACC,IAAY,EACZ,IAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAS;QAG7B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;IAED,MAAM;QACJ,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;aACtC;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/battery/errors.ts"],"names":[],"mappings":"AAsBA,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGf;IACA;IACA;IAJlB,YACE,OAAe,EACC,IAAY,EACZ,IAAa,EACb,OAAyB;QAEzC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAS;QACb,YAAO,GAAP,OAAO,CAAkB;QAGzC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;IAED,MAAM;QACJ,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACrC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;aACvF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/battery/index.d.ts

@@ -8,7 +8,8 @@
  * user's own machine and their own login.
  */
 export { CcbError } from './errors.js';
+export type { CcbErrorDetails } from './errors.js';
 export { getCredentials, getAccessToken, isTokenExpired, isApiKeyAuth } from './auth/index.js';
 export type { ClaudeCredentials, ClaudeOAuthCredentials, ApiKeyAuth, ClientAuth } from './auth/index.js';
 export { ClaudeCodeClient, OAuthApi } from './api/index.js';
-export type { UsageResponse, UsageBucket, ExtraUsage, ProfileResponse, AccountInfo, OrganizationInfo, ApplicationInfo, } from './api/index.js';
+export type { UsageResponse, UsageBucket, UsageLimit, ExtraUsage, ProfileResponse, AccountInfo, OrganizationInfo, ApplicationInfo, } from './api/index.js';

package/dist/battery/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/battery/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/F,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/battery/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/F,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/proxy.d.ts

@@ -1,4 +1,16 @@
 import type { Agent } from 'node:http';
+/**
+ * A proxy URL with any username and password taken out, safe to show a person.
+ *
+ * Proxy credentials live in the URL itself, and the URL is the most useful thing
+ * an error about a proxy can name. Those two facts together are how a password
+ * ends up in an error message, and from there in the screenshot someone attaches
+ * to a bug report. Every message this package writes goes through here first.
+ *
+ * The reporter on Swttch/swttch#181 configured exactly such a URL, so this is not
+ * a hypothetical shape.
+ */
+export declare function redactProxyUrl(proxyUrl: string | undefined): string | undefined;
 /**
  * Whether NO_PROXY exempts this host, following the de-facto rules curl uses:
  * a comma-separated list, `*` meaning everything, a leading dot ignored, and a
@@ -12,6 +24,20 @@ export declare function isProxyBypassed(host: string, port: string, noProxy: str
  * `wss:`/`ws:` are resolved as their HTTP equivalents because that is how the
  * connection is actually made — a WebSocket starts life as an HTTP upgrade, so
  * a user who set HTTPS_PROXY expects `wss://` to go through it.
+ *
+ * **An https target falls back to HTTP_PROXY, and that is a deliberate departure
+ * from curl.** curl reads only the variable matching the target's scheme, so
+ * HTTP_PROXY never applies to an https URL there. The `claude` CLI does not
+ * follow that rule: given HTTP_PROXY alone, whether exported in the environment
+ * or written into settings.json's `env` block, it tunnels api.anthropic.com
+ * through it. Both behaviours were measured against a local CONNECT proxy.
+ *
+ * Matching curl instead of `claude` is what broke Swttch/swttch#432 for the
+ * person who reported it: one settings.json, chat working because the CLI
+ * honored HTTP_PROXY, and the usage panel going out direct because this function
+ * did not. The user writes that file for `claude`, so `claude` is the behaviour
+ * to match — the plugin's whole premise is that anything possible from the CLI
+ * is possible from the GUI.
  */
 export declare function resolveProxyUrl(targetUrl: string, env?: NodeJS.ProcessEnv): string | undefined;
 /**
@@ -29,4 +55,7 @@ export declare function resolveProxyUrl(targetUrl: string, env?: NodeJS.ProcessE
  * attempt fails anyway, and it fails with a connection error that says nothing
  * about the real cause; naming the bad setting is far more useful.
  */
-export declare function proxyAgentFor(targetUrl: string, env?: NodeJS.ProcessEnv): Agent | undefined;
+export declare function proxyAgentFor(targetUrl: string, env?: NodeJS.ProcessEnv, options?: {
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}): Agent | undefined;

package/dist/proxy.js

@@ -18,6 +18,36 @@ import { CcbError } from './battery/errors.js';
  */
 /** Proxy URL schemes that mean SOCKS rather than an HTTP CONNECT proxy. */
 const SOCKS_PROTOCOLS = new Set(['socks:', 'socks4:', 'socks4a:', 'socks5:', 'socks5h:']);
+/**
+ * A proxy URL with any username and password taken out, safe to show a person.
+ *
+ * Proxy credentials live in the URL itself, and the URL is the most useful thing
+ * an error about a proxy can name. Those two facts together are how a password
+ * ends up in an error message, and from there in the screenshot someone attaches
+ * to a bug report. Every message this package writes goes through here first.
+ *
+ * The reporter on Swttch/swttch#181 configured exactly such a URL, so this is not
+ * a hypothetical shape.
+ */
+export function redactProxyUrl(proxyUrl) {
+    if (!proxyUrl)
+        return undefined;
+    try {
+        const url = new URL(proxyUrl);
+        if (!url.username && !url.password)
+            return proxyUrl;
+        url.username = '';
+        url.password = '';
+        // A URL that carried credentials should still look like it did, so the user
+        // recognises which setting is being talked about.
+        return url.toString().replace('//', '//***@');
+    }
+    catch {
+        // Not parseable, so it cannot be picked apart safely. Say nothing rather than
+        // risk printing a password that happens to sit in an unparseable string.
+        return undefined;
+    }
+}
 /**
  * Read a proxy variable in either spelling.
  *
@@ -73,6 +103,20 @@ export function isProxyBypassed(host, port, noProxy) {
  * `wss:`/`ws:` are resolved as their HTTP equivalents because that is how the
  * connection is actually made — a WebSocket starts life as an HTTP upgrade, so
  * a user who set HTTPS_PROXY expects `wss://` to go through it.
+ *
+ * **An https target falls back to HTTP_PROXY, and that is a deliberate departure
+ * from curl.** curl reads only the variable matching the target's scheme, so
+ * HTTP_PROXY never applies to an https URL there. The `claude` CLI does not
+ * follow that rule: given HTTP_PROXY alone, whether exported in the environment
+ * or written into settings.json's `env` block, it tunnels api.anthropic.com
+ * through it. Both behaviours were measured against a local CONNECT proxy.
+ *
+ * Matching curl instead of `claude` is what broke Swttch/swttch#432 for the
+ * person who reported it: one settings.json, chat working because the CLI
+ * honored HTTP_PROXY, and the usage panel going out direct because this function
+ * did not. The user writes that file for `claude`, so `claude` is the behaviour
+ * to match — the plugin's whole premise is that anything possible from the CLI
+ * is possible from the GUI.
  */
 export function resolveProxyUrl(targetUrl, env = process.env) {
     const target = new URL(targetUrl);
@@ -80,7 +124,9 @@ export function resolveProxyUrl(targetUrl, env = process.env) {
     const port = target.port || (isSecure ? '443' : '80');
     if (isProxyBypassed(target.hostname, port, readProxyEnv(env, 'NO_PROXY')))
         return undefined;
-    const specific = isSecure ? readProxyEnv(env, 'HTTPS_PROXY') : readProxyEnv(env, 'HTTP_PROXY');
+    const specific = isSecure
+        ? readProxyEnv(env, 'HTTPS_PROXY') ?? readProxyEnv(env, 'HTTP_PROXY')
+        : readProxyEnv(env, 'HTTP_PROXY');
     return specific ?? readProxyEnv(env, 'ALL_PROXY');
 }
 /**
@@ -98,7 +144,7 @@ export function resolveProxyUrl(targetUrl, env = process.env) {
  * attempt fails anyway, and it fails with a connection error that says nothing
  * about the real cause; naming the bad setting is far more useful.
  */
-export function proxyAgentFor(targetUrl, env = process.env) {
+export function proxyAgentFor(targetUrl, env = process.env, options = {}) {
     const proxyUrl = resolveProxyUrl(targetUrl, env);
     if (!proxyUrl)
         return undefined;
@@ -109,12 +155,29 @@ export function proxyAgentFor(targetUrl, env = process.env) {
     catch {
         throw new CcbError(`Proxy setting is not a valid URL: ${proxyUrl}`, 'invalid_proxy', 'Expected something like http://host:port or socks5://host:port');
     }
-    if (SOCKS_PROTOCOLS.has(protocol))
-        return new SocksProxyAgent(proxyUrl);
+    // A deadline has to reach the AGENT, not just the request.
+    //
+    // While an agent is negotiating with the proxy there is no socket on the
+    // request yet, so aborting the request reaches nothing: measured against a
+    // proxy that accepted a CONNECT and stayed silent, an aborted request produced
+    // no 'socket', no 'error' and no 'close', and simply hung. The caller would get
+    // its timeout while the connection attempt carried on behind it.
+    //
+    // The two agents take different instruments for the same job, so each is given
+    // the one it honors rather than one being forced on both.
+    if (SOCKS_PROTOCOLS.has(protocol)) {
+        // socks-proxy-agent hands `timeout` to SocksClient, which applies it to the
+        // handshake. It does not read `signal`, and passing one is not merely
+        // ignored — its options type has no room for it.
+        return new SocksProxyAgent(proxyUrl, options.timeoutMs ? { timeout: options.timeoutMs } : undefined);
+    }
     if (protocol === 'http:' || protocol === 'https:') {
-        // HttpsProxyAgent covers both, because every endpoint this package talks to
-        // is https/wss and therefore always reached by a CONNECT tunnel.
-        return new HttpsProxyAgent(proxyUrl);
+        // HttpsProxyAgent covers http: and https: alike, because every endpoint this
+        // package talks to is https/wss and therefore always reached by a CONNECT
+        // tunnel. Its options are spread into what it passes to net.connect, so a
+        // signal here destroys the socket the CONNECT wait is parked on and lets the
+        // failure surface. Measured: the error arrived 8ms after the abort.
+        return new HttpsProxyAgent(proxyUrl, options.signal ? { signal: options.signal } : undefined);
     }
     throw new CcbError(`Unsupported proxy scheme "${protocol.replace(':', '')}" in ${proxyUrl}`, 'invalid_proxy', 'Supported schemes: http, https, socks, socks4, socks4a, socks5, socks5h');
 }

package/dist/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AAEH,2EAA2E;AAC3E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1F;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAC,GAAsB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY,EAAE,OAA2B;IACrF,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAA6B,CAAC;QAClC,4EAA4E;QAC5E,sDAAsD;QACtD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/G,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;YACzC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAChE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,MAAyB,OAAO,CAAC,GAAG;IACrF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC;IAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEtD,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAE5F,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC/F,OAAO,QAAQ,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,MAAyB,OAAO,CAAC,GAAG;IACnF,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,qCAAqC,QAAQ,EAAE,EAC/C,eAAe,EACf,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;IACxE,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClD,4EAA4E;QAC5E,iEAAiE;QACjE,OAAO,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,IAAI,QAAQ,CAChB,6BAA6B,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,QAAQ,EAAE,EACxE,eAAe,EACf,yEAAyE,CAC1E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AAEH,2EAA2E;AAC3E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1F;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,QAA4B;IACzD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACpD,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,4EAA4E;QAC5E,kDAAkD;QAClD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,yEAAyE;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAC,GAAsB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY,EAAE,OAA2B;IACrF,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAA6B,CAAC;QAClC,4EAA4E;QAC5E,sDAAsD;QACtD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/G,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;YACzC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAChE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,MAAyB,OAAO,CAAC,GAAG;IACrF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC;IAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEtD,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAE5F,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC;QACrE,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACpC,OAAO,QAAQ,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,aAAa,CAC3B,SAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG,EACpC,UAAwD,EAAE;IAE1D,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,qCAAqC,QAAQ,EAAE,EAC/C,eAAe,EACf,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,EAAE;IACF,yEAAyE;IACzE,2EAA2E;IAC3E,+EAA+E;IAC/E,gFAAgF;IAChF,iEAAiE;IACjE,EAAE;IACF,+EAA+E;IAC/E,0DAA0D;IAC1D,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,4EAA4E;QAC5E,sEAAsE;QACtE,iDAAiD;QACjD,OAAO,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClD,6EAA6E;QAC7E,0EAA0E;QAC1E,0EAA0E;QAC1E,6EAA6E;QAC7E,oEAAoE;QACpE,OAAO,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,IAAI,QAAQ,CAChB,6BAA6B,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,QAAQ,EAAE,EACxE,eAAe,EACf,yEAAyE,CAC1E,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swttch/extend-kit",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Companion tools for Swttch that live outside the plugin bundle: Claude Code account/usage SDK, the ccb CLI, and speech-to-text.",
   "type": "module",
   "main": "./dist/index.js",