@tickernelz/paperclip-pro-adapter-claude-local 2026.925.0

package/dist/server/probe-redaction.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe-redaction.test.d.ts","sourceRoot":"","sources":["../../src/server/probe-redaction.test.ts"],"names":[],"mappings":""}

package/dist/server/probe-redaction.test.js

@@ -0,0 +1,86 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+// The managed-config step runs inside `prepareSandboxClaudeProbeRuntime`. The
+// step resolves the Paperclip instance root first. This mock makes that resolve
+// throw, so the managed-config materialization fails with a controllable error
+// that carries a secret marker.
+const { resolveInstanceRoot } = vi.hoisted(() => {
+    const resolveInstanceRoot = { throwError: null };
+    return { resolveInstanceRoot };
+});
+vi.mock("@tickernelz/paperclip-pro-adapter-utils/execution-target", async () => {
+    const actual = await vi.importActual("@tickernelz/paperclip-pro-adapter-utils/execution-target");
+    return {
+        ...actual,
+        maybeRunSandboxInstallCommand: vi.fn(async () => null),
+    };
+});
+vi.mock("@tickernelz/paperclip-pro-adapter-utils/server-utils", async () => {
+    const actual = await vi.importActual("@tickernelz/paperclip-pro-adapter-utils/server-utils");
+    return {
+        ...actual,
+        resolvePaperclipInstanceRootForAdapter: (...args) => {
+            if (resolveInstanceRoot.throwError)
+                throw resolveInstanceRoot.throwError;
+            return actual.resolvePaperclipInstanceRootForAdapter(...args);
+        },
+    };
+});
+import { prepareSandboxClaudeProbeRuntime } from "./claude-config.js";
+const sandboxTarget = {
+    kind: "remote",
+    transport: "sandbox",
+    providerKey: "daytona",
+    remoteCwd: "/home/daytona/paperclip-workspace",
+    runner: {
+        execute: async () => ({
+            exitCode: 0,
+            signal: null,
+            timedOut: false,
+            stdout: "",
+            stderr: "",
+            pid: null,
+            startedAt: new Date().toISOString(),
+        }),
+    },
+};
+afterEach(() => {
+    vi.clearAllMocks();
+    resolveInstanceRoot.throwError = null;
+});
+describe("prepareSandboxClaudeProbeRuntime managed-config redaction", () => {
+    it("never copies a materialization error into a Test-result check", async () => {
+        // A materialization failure can carry a credential. Inject a secret marker
+        // through the thrown error and assert no check text repeats it.
+        const secret = "sk-ant-MANAGEDMARKER0123456789abcdef";
+        resolveInstanceRoot.throwError = new Error(`materialize failed with ${secret}`);
+        const warnSpy = vi.spyOn(console, "warn").mockImplementation(() => { });
+        const checks = await prepareSandboxClaudeProbeRuntime({
+            runId: "test-run",
+            target: sandboxTarget,
+            cwd: "/home/daytona/paperclip-workspace",
+            env: {},
+            installCommand: "npm i -g @anthropic-ai/claude-code",
+            detectCommand: "claude --version",
+            targetIsRemote: true,
+            targetIsSandbox: true,
+            helloProbeTimeoutSec: 5,
+        });
+        const failedCheck = checks.find((check) => check.code === "claude_managed_config_dir_failed");
+        expect(failedCheck).toBeDefined();
+        expect(failedCheck?.level).toBe("error");
+        const checkText = JSON.stringify(checks);
+        expect(checkText).not.toContain(secret);
+        expect(checkText).not.toContain("MANAGEDMARKER");
+        // The diagnostic still reaches the server log, but it carries only the
+        // fixed context and the allowlisted classification, never the raw error
+        // text. The classification is `spawn_error`, because the materialization
+        // step threw before the probe ran.
+        expect(warnSpy).toHaveBeenCalledTimes(1);
+        const loggedText = JSON.stringify(warnSpy.mock.calls);
+        expect(loggedText).not.toContain(secret);
+        expect(loggedText).not.toContain("MANAGEDMARKER");
+        expect(warnSpy.mock.calls[0]?.[1]).toMatchObject({ classification: "spawn_error" });
+        warnSpy.mockRestore();
+    });
+});
+//# sourceMappingURL=probe-redaction.test.js.map

package/dist/server/probe-redaction.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe-redaction.test.js","sourceRoot":"","sources":["../../src/server/probe-redaction.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG7D,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,gCAAgC;AAChC,MAAM,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;IAC9C,MAAM,mBAAmB,GAAiC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC/E,OAAO,EAAE,mBAAmB,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAClC,0DAA0D,CAC3D,CAAC;IACF,OAAO;QACL,GAAG,MAAM;QACT,6BAA6B,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;KACvD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAClC,sDAAsD,CACvD,CAAC;IACF,OAAO;QACL,GAAG,MAAM;QACT,sCAAsC,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;YAC7D,IAAI,mBAAmB,CAAC,UAAU;gBAAE,MAAM,mBAAmB,CAAC,UAAU,CAAC;YACzE,OACE,MAAM,CAAC,sCACR,CAAC,GAAG,IAAI,CAAC,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,gCAAgC,EAAE,MAAM,oBAAoB,CAAC;AAEtE,MAAM,aAAa,GAA2B;IAC5C,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,SAAS;IACpB,WAAW,EAAE,SAAS;IACtB,SAAS,EAAE,mCAAmC;IAC9C,MAAM,EAAE;QACN,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACpB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,GAAG,EAAE,IAAI;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;KACH;CACF,CAAC;AAEF,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,mBAAmB,CAAC,UAAU,GAAG,IAAI,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACzE,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,2EAA2E;QAC3E,gEAAgE;QAChE,MAAM,MAAM,GAAG,sCAAsC,CAAC;QACtD,mBAAmB,CAAC,UAAU,GAAG,IAAI,KAAK,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QAChF,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC;YACpD,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,aAAa;YACrB,GAAG,EAAE,mCAAmC;YACxC,GAAG,EAAE,EAAE;YACP,cAAc,EAAE,oCAAoC;YACpD,aAAa,EAAE,kBAAkB;YACjC,cAAc,EAAE,IAAI;YACpB,eAAe,EAAE,IAAI;YACrB,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,kCAAkC,CAAC,CAAC;QAC9F,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACjD,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,mCAAmC;QACnC,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,WAAW,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/prompt-cache.d.ts

@@ -0,0 +1,17 @@
+import type { AdapterExecutionContext } from "@tickernelz/paperclip-pro-adapter-utils";
+import { type PaperclipSkillEntry } from "@tickernelz/paperclip-pro-adapter-utils/server-utils";
+type SkillEntry = PaperclipSkillEntry;
+export interface ClaudePromptBundle {
+    bundleKey: string;
+    rootDir: string;
+    addDir: string;
+    instructionsFilePath: string | null;
+}
+export declare function prepareClaudePromptBundle(input: {
+    companyId: string;
+    skills: SkillEntry[];
+    instructionsContents: string | null;
+    onLog: AdapterExecutionContext["onLog"];
+}): Promise<ClaudePromptBundle>;
+export {};
+//# sourceMappingURL=prompt-cache.d.ts.map

package/dist/server/prompt-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-cache.d.ts","sourceRoot":"","sources":["../../src/server/prompt-cache.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,sDAAsD,CAAC;AAE9D,KAAK,UAAU,GAAG,mBAAmB,CAAC;AAEtC,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAmHD,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,KAAK,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;CACzC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmC9B"}

package/dist/server/prompt-cache.js

@@ -0,0 +1,126 @@
+import { constants as fsConstants } from "node:fs";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { createHash } from "node:crypto";
+import { ensurePaperclipSkillSymlink, resolvePaperclipInstanceRootForAdapter, } from "@tickernelz/paperclip-pro-adapter-utils/server-utils";
+function nonEmpty(value) {
+    return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+function resolveManagedClaudePromptCacheRoot(env, companyId) {
+    const instanceRoot = resolvePaperclipInstanceRootForAdapter({
+        homeDir: nonEmpty(env.PAPERCLIP_HOME) ?? undefined,
+        instanceId: nonEmpty(env.PAPERCLIP_INSTANCE_ID) ?? undefined,
+        env,
+    });
+    return path.resolve(instanceRoot, "companies", companyId, "claude-prompt-cache");
+}
+async function hashPathContents(candidate, hash, relativePath, seenDirectories) {
+    const stat = await fs.lstat(candidate);
+    if (stat.isSymbolicLink()) {
+        hash.update(`symlink:${relativePath}\n`);
+        const resolved = await fs.realpath(candidate).catch(() => null);
+        if (!resolved) {
+            hash.update("missing\n");
+            return;
+        }
+        await hashPathContents(resolved, hash, relativePath, seenDirectories);
+        return;
+    }
+    if (stat.isDirectory()) {
+        const realDir = await fs.realpath(candidate).catch(() => candidate);
+        hash.update(`dir:${relativePath}\n`);
+        if (seenDirectories.has(realDir)) {
+            hash.update("loop\n");
+            return;
+        }
+        seenDirectories.add(realDir);
+        const entries = await fs.readdir(candidate, { withFileTypes: true });
+        entries.sort((left, right) => left.name.localeCompare(right.name));
+        for (const entry of entries) {
+            const childRelativePath = relativePath.length > 0 ? `${relativePath}/${entry.name}` : entry.name;
+            await hashPathContents(path.join(candidate, entry.name), hash, childRelativePath, seenDirectories);
+        }
+        return;
+    }
+    if (stat.isFile()) {
+        hash.update(`file:${relativePath}\n`);
+        hash.update(await fs.readFile(candidate));
+        hash.update("\n");
+        return;
+    }
+    hash.update(`other:${relativePath}:${stat.mode}\n`);
+}
+async function buildClaudePromptBundleKey(input) {
+    const hash = createHash("sha256");
+    hash.update("paperclip-claude-prompt-bundle:v1\n");
+    if (input.instructionsContents) {
+        hash.update("instructions\n");
+        hash.update(input.instructionsContents);
+        hash.update("\n");
+    }
+    else {
+        hash.update("instructions:none\n");
+    }
+    const sortedSkills = [...input.skills].sort((left, right) => left.runtimeName.localeCompare(right.runtimeName));
+    for (const entry of sortedSkills) {
+        hash.update(`skill:${entry.key}:${entry.runtimeName}\n`);
+        await hashPathContents(entry.source, hash, entry.runtimeName, new Set());
+    }
+    return hash.digest("hex");
+}
+async function ensureReadableFile(targetPath, contents) {
+    try {
+        await fs.access(targetPath, fsConstants.R_OK);
+        return;
+    }
+    catch {
+        // Fall through and materialize the file.
+    }
+    await fs.mkdir(path.dirname(targetPath), { recursive: true });
+    const tempPath = `${targetPath}.${process.pid}.${Date.now()}.tmp`;
+    try {
+        await fs.writeFile(tempPath, contents, "utf8");
+        await fs.rename(tempPath, targetPath);
+    }
+    catch (err) {
+        const targetReadable = await fs.access(targetPath, fsConstants.R_OK).then(() => true).catch(() => false);
+        if (!targetReadable) {
+            throw err;
+        }
+    }
+    finally {
+        await fs.rm(tempPath, { force: true }).catch(() => { });
+    }
+}
+export async function prepareClaudePromptBundle(input) {
+    const { companyId, skills, instructionsContents, onLog } = input;
+    const bundleKey = await buildClaudePromptBundleKey({
+        skills,
+        instructionsContents,
+    });
+    const rootDir = path.join(resolveManagedClaudePromptCacheRoot(process.env, companyId), bundleKey);
+    const skillsHome = path.join(rootDir, ".claude", "skills");
+    await fs.mkdir(skillsHome, { recursive: true });
+    for (const entry of skills) {
+        const target = path.join(skillsHome, entry.runtimeName);
+        try {
+            await ensurePaperclipSkillSymlink(entry.source, target);
+        }
+        catch (err) {
+            await onLog("stderr", `[paperclip] Failed to materialize Claude skill "${entry.key}" into ${skillsHome}: ${err instanceof Error ? err.message : String(err)}\n`);
+        }
+    }
+    const instructionsFilePath = instructionsContents
+        ? path.join(rootDir, "agent-instructions.md")
+        : null;
+    if (instructionsFilePath && instructionsContents) {
+        await ensureReadableFile(instructionsFilePath, instructionsContents);
+    }
+    return {
+        bundleKey,
+        rootDir,
+        addDir: rootDir,
+        instructionsFilePath,
+    };
+}
+//# sourceMappingURL=prompt-cache.js.map

package/dist/server/prompt-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-cache.js","sourceRoot":"","sources":["../../src/server/prompt-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAa,MAAM,aAAa,CAAC;AAEpD,OAAO,EACL,2BAA2B,EAC3B,sCAAsC,GAEvC,MAAM,sDAAsD,CAAC;AAW9D,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC;AAED,SAAS,mCAAmC,CAC1C,GAAsB,EACtB,SAAiB;IAEjB,MAAM,YAAY,GAAG,sCAAsC,CAAC;QAC1D,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS;QAClD,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,SAAS;QAC5D,GAAG;KACJ,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,OAAO,CACjB,YAAY,EACZ,WAAW,EACX,SAAS,EACT,qBAAqB,CACtB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,SAAiB,EACjB,IAAU,EACV,YAAoB,EACpB,eAA4B;IAE5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAEvC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,WAAW,YAAY,IAAI,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,OAAO,YAAY,IAAI,CAAC,CAAC;QACrC,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YACjG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC;QACrG,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,QAAQ,YAAY,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,YAAY,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAGzC;IACC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAChH,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;QACzD,MAAM,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,GAAG,EAAU,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,UAAkB,EAAE,QAAgB;IACpE,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;IAED,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACzG,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAK/C;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC;QACjD,MAAM;QACN,oBAAoB;KACrB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,mCAAmC,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,2BAA2B,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,CACT,QAAQ,EACR,mDAAmD,KAAK,CAAC,GAAG,UAAU,UAAU,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC1I,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,oBAAoB,GAAG,oBAAoB;QAC/C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC;QAC7C,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,oBAAoB,IAAI,oBAAoB,EAAE,CAAC;QACjD,MAAM,kBAAkB,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;IACvE,CAAC;IAED,OAAO;QACL,SAAS;QACT,OAAO;QACP,MAAM,EAAE,OAAO;QACf,oBAAoB;KACrB,CAAC;AACJ,CAAC"}

package/dist/server/quota-keychain.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=quota-keychain.test.d.ts.map

package/dist/server/quota-keychain.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-keychain.test.d.ts","sourceRoot":"","sources":["../../src/server/quota-keychain.test.ts"],"names":[],"mappings":""}

package/dist/server/quota-keychain.test.js

@@ -0,0 +1,83 @@
+import { createHash } from "node:crypto";
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { readClaudeToken, readIsolatedClaudeKeychainToken } from "./quota.js";
+const suffixedService = (dir) => `Claude Code-credentials-${createHash("sha256").update(dir).digest("hex").slice(0, 8)}`;
+const mocks = vi.hoisted(() => ({ read: vi.fn(), exec: vi.fn() }));
+vi.mock("node:fs/promises", () => ({ default: { readFile: mocks.read } }));
+vi.mock("node:child_process", () => ({ execFile: Object.assign(vi.fn(), { [Symbol.for("nodejs.util.promisify.custom")]: mocks.exec }) }));
+afterEach(() => { vi.resetAllMocks(); vi.unstubAllEnvs(); vi.restoreAllMocks(); });
+describe("explicit Claude Keychain import", () => {
+    it("does not consult Keychain during passive reads", async () => {
+        mocks.read.mockRejectedValue(new Error("missing"));
+        await expect(readClaudeToken()).resolves.toBeNull();
+        expect(mocks.exec).not.toHaveBeenCalled();
+    });
+    it("reads the macOS login only after explicit opt-in", async () => {
+        vi.spyOn(process, "platform", "get").mockReturnValue("darwin");
+        vi.stubEnv("CLAUDE_CONFIG_DIR", "");
+        mocks.read.mockRejectedValue(new Error("missing"));
+        mocks.exec.mockResolvedValue({ stdout: JSON.stringify({ claudeAiOauth: { accessToken: "fixture" } }) });
+        await expect(readClaudeToken({ allowKeychain: true })).resolves.toBe("fixture");
+        expect(mocks.exec).toHaveBeenCalledWith("/usr/bin/security", ["find-generic-password", "-s", "Claude Code-credentials", "-w"], expect.any(Object));
+    });
+    it("reads only the custom auth home's own suffixed Keychain item", async () => {
+        // Claude Code stores a custom CLAUDE_CONFIG_DIR login in a per-directory
+        // suffixed item; the unsuffixed item belongs to a different account and
+        // must never be substituted.
+        vi.spyOn(process, "platform", "get").mockReturnValue("darwin");
+        vi.stubEnv("CLAUDE_CONFIG_DIR", "/isolated/auth");
+        mocks.read.mockRejectedValue(new Error("missing"));
+        mocks.exec.mockResolvedValue({ stdout: JSON.stringify({ claudeAiOauth: { accessToken: "isolated" } }) });
+        await expect(readClaudeToken({ allowKeychain: true })).resolves.toBe("isolated");
+        expect(mocks.exec).toHaveBeenCalledTimes(1);
+        expect(mocks.exec).toHaveBeenCalledWith("/usr/bin/security", ["find-generic-password", "-s", suffixedService("/isolated/auth"), "-w"], expect.any(Object));
+    });
+    it("returns null for a custom auth home whose suffixed item is absent, without touching the unsuffixed item", async () => {
+        vi.spyOn(process, "platform", "get").mockReturnValue("darwin");
+        vi.stubEnv("CLAUDE_CONFIG_DIR", "/isolated/auth");
+        mocks.read.mockRejectedValue(new Error("missing"));
+        mocks.exec.mockRejectedValue(new Error("The specified item could not be found in the keychain."));
+        await expect(readClaudeToken({ allowKeychain: true })).resolves.toBeNull();
+        expect(mocks.exec).toHaveBeenCalledTimes(1);
+        expect(mocks.exec).toHaveBeenCalledWith("/usr/bin/security", ["find-generic-password", "-s", suffixedService("/isolated/auth"), "-w"], expect.any(Object));
+    });
+    it("readIsolatedClaudeKeychainToken reads the login home's suffixed item on macOS", async () => {
+        vi.spyOn(process, "platform", "get").mockReturnValue("darwin");
+        mocks.exec.mockResolvedValue({ stdout: JSON.stringify({ claudeAiOauth: { accessToken: "isolated-keychain" } }) });
+        await expect(readIsolatedClaudeKeychainToken("/data/ai-local-logins/abc")).resolves.toBe("isolated-keychain");
+        expect(mocks.exec).toHaveBeenCalledWith("/usr/bin/security", ["find-generic-password", "-s", suffixedService("/data/ai-local-logins/abc"), "-w"], expect.any(Object));
+    });
+    it("readIsolatedClaudeKeychainToken returns null off macOS", async () => {
+        vi.spyOn(process, "platform", "get").mockReturnValue("linux");
+        await expect(readIsolatedClaudeKeychainToken("/data/ai-local-logins/abc")).resolves.toBeNull();
+        expect(mocks.exec).not.toHaveBeenCalled();
+    });
+    it("skips an expired credentials file and falls through to Keychain", async () => {
+        vi.spyOn(process, "platform", "get").mockReturnValue("darwin");
+        vi.stubEnv("CLAUDE_CONFIG_DIR", "");
+        mocks.read.mockResolvedValue(JSON.stringify({ claudeAiOauth: { accessToken: "stale", expiresAt: Date.now() - 60_000 } }));
+        mocks.exec.mockResolvedValue({ stdout: JSON.stringify({ claudeAiOauth: { accessToken: "fresh", expiresAt: Date.now() + 60_000 } }) });
+        await expect(readClaudeToken({ allowKeychain: true })).resolves.toBe("fresh");
+        expect(mocks.exec).toHaveBeenCalledTimes(1);
+    });
+    it("returns null for an expired credentials file without Keychain access", async () => {
+        mocks.read.mockResolvedValue(JSON.stringify({ claudeAiOauth: { accessToken: "stale", expiresAt: Date.now() - 60_000 } }));
+        await expect(readClaudeToken()).resolves.toBeNull();
+        expect(mocks.exec).not.toHaveBeenCalled();
+    });
+    it("still accepts a credentials file that records no expiry", async () => {
+        vi.spyOn(process, "platform", "get").mockReturnValue("darwin");
+        vi.stubEnv("CLAUDE_CONFIG_DIR", "");
+        mocks.read.mockResolvedValue(JSON.stringify({ claudeAiOauth: { accessToken: "file" } }));
+        await expect(readClaudeToken({ allowKeychain: true })).resolves.toBe("file");
+        expect(mocks.exec).not.toHaveBeenCalled();
+    });
+    it("does not surface a credential-bearing subprocess error", async () => {
+        vi.spyOn(process, "platform", "get").mockReturnValue("darwin");
+        vi.stubEnv("CLAUDE_CONFIG_DIR", "");
+        mocks.read.mockRejectedValue(new Error("missing"));
+        mocks.exec.mockRejectedValue(new Error("fixture-secret"));
+        await expect(readClaudeToken({ allowKeychain: true })).resolves.toBeNull();
+    });
+});
+//# sourceMappingURL=quota-keychain.test.js.map

package/dist/server/quota-keychain.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-keychain.test.js","sourceRoot":"","sources":["../../src/server/quota-keychain.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,+BAA+B,EAAE,MAAM,YAAY,CAAC;AAE9E,MAAM,eAAe,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,2BAA2B,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACjI,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACnE,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3E,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1I,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACnF,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/D,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACxG,MAAM,MAAM,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACrJ,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,yEAAyE;QACzE,wEAAwE;QACxE,6BAA6B;QAC7B,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/D,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACzG,MAAM,MAAM,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,eAAe,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7J,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,yGAAyG,EAAE,KAAK,IAAI,EAAE;QACvH,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/D,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC,CAAC;QAClG,MAAM,MAAM,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,eAAe,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7J,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAClH,MAAM,MAAM,CAAC,+BAA+B,CAAC,2BAA2B,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC9G,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,eAAe,CAAC,2BAA2B,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACxK,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,MAAM,CAAC,+BAA+B,CAAC,2BAA2B,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC/F,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/D,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1H,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACtI,MAAM,MAAM,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1H,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/D,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QACzF,MAAM,MAAM,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/D,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC1D,MAAM,MAAM,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/quota.d.ts

@@ -0,0 +1,30 @@
+import type { ProviderQuotaResult, QuotaWindow } from "@tickernelz/paperclip-pro-adapter-utils";
+export declare function claudeConfigDir(): string;
+interface ClaudeAuthStatus {
+    loggedIn: boolean;
+    authMethod: string | null;
+    subscriptionType: string | null;
+}
+export declare function readClaudeAuthStatus(): Promise<ClaudeAuthStatus | null>;
+/**
+ * Read the credential that a `claude` login performed inside an isolated auth
+ * home left in the macOS Keychain. Only that home's own suffixed item is
+ * consulted — never the unsuffixed item that holds the server operator's
+ * machine-level login. Returns null off macOS.
+ */
+export declare function readIsolatedClaudeKeychainToken(loginHome: string): Promise<string | null>;
+export declare function readClaudeToken(options?: {
+    allowKeychain?: boolean;
+}): Promise<string | null>;
+/** Convert a utilization value to a 0-100 integer percent. Returns null for null/undefined input.
+ *  Handles both 0-1 fractions (legacy) and 0-100 percentages (current API). */
+export declare function toPercent(utilization: number | null | undefined): number | null;
+/** fetch with an abort-based timeout so a hanging provider api doesn't block the response indefinitely */
+export declare function fetchWithTimeout(url: string, init: RequestInit, ms?: number): Promise<Response>;
+export declare function fetchClaudeQuota(token: string): Promise<QuotaWindow[]>;
+export declare function parseClaudeCliUsageText(text: string): QuotaWindow[];
+export declare function captureClaudeCliUsageText(timeoutMs?: number): Promise<string>;
+export declare function fetchClaudeCliQuota(): Promise<QuotaWindow[]>;
+export declare function getQuotaWindows(): Promise<ProviderQuotaResult>;
+export {};
+//# sourceMappingURL=quota.d.ts.map

package/dist/server/quota.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota.d.ts","sourceRoot":"","sources":["../../src/server/quota.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAOhG,wBAAgB,eAAe,IAAI,MAAM,CAIxC;AAkHD,UAAU,gBAAgB;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAgB7E;AA0BD;;;;;GAKG;AACH,wBAAsB,+BAA+B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAG/F;AAED,wBAAsB,eAAe,CAAC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkBvG;AA+CD;+EAC+E;AAC/E,wBAAgB,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAG/E;AAED,0GAA0G;AAC1G,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,SAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAQnG;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CA+D5E;AAgHD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CAsCnE;AAeD,wBAAsB,yBAAyB,CAAC,SAAS,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BnF;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAGlE;AAOD,wBAAsB,eAAe,IAAI,OAAO,CAAC,mBAAmB,CAAC,CA4DpE"}