@usagefleet/cli 1.2.94 → 1.2.97

package/README.md

@@ -104,6 +104,11 @@ on re-install, and skipped entirely with `USAGEFLEET_HOOK=0`):
 }
 ```
 
+If the pi coding agent is on the machine (`~/.pi/agent` exists), `login` also
+writes a pi extension — `~/.pi/agent/extensions/usagefleet-guard.ts` — that runs
+the same guard before every pi prompt. Same lifecycle: refreshed on re-install,
+removed by `uninstall`, skipped with `USAGEFLEET_HOOK=0`.
+
 If `USAGEFLEET_CONFIG` was set when you logged in, the installed command carries
 it (`USAGEFLEET_CONFIG=<path> usagefleet guard`, or `set "..." && ...` on
 Windows). That is what binds the hook to the right store, and so to the right
@@ -137,7 +142,7 @@ Env vars override the file:
 | `USAGEFLEET_CONFIG` | override the config file path |
 | `USAGEFLEET_UPDATE` | `0` turns the self-update check off |
 | `USAGEFLEET_UPDATE_INTERVAL` | seconds between update checks (default `21600` = 6h) |
-| `USAGEFLEET_HOOK` | `0` keeps the prompt-blocking hook out of `~/.claude/settings.json` |
+| `USAGEFLEET_HOOK` | `0` keeps the prompt-blocking guard out of Claude Code and pi |
 | `CLAUDE_CONFIG_DIR` | Claude Code's own knob: which login to watch (default `~/.claude`) |
 
 When run as a service, `login` bakes every `USAGEFLEET_*` value currently set

package/dist/paths.js

@@ -44,6 +44,13 @@ export function defaultPiSessionsDirs() {
     }
     return [...new Set(dirs)];
 }
+/** pi's agent dir, the root for its sessions and extensions.
+ *  PI_CODING_AGENT_DIR is pi's own relocation knob; unlike the service-side
+ *  scan above, the guard installer runs from the user's shell where that env
+ *  is actually present, so honouring just the primary root is enough. */
+export function piAgentDir() {
+    return process.env.PI_CODING_AGENT_DIR ?? join(homedir(), '.pi', 'agent');
+}
 /** Claude Code's config dir. CLAUDE_CONFIG_DIR is Claude Code's own relocation
  *  knob, and a relocated dir is a second, independent login: its own settings,
  *  its own credentials, its own Anthropic account. */

package/dist/pi-hook.js

@@ -0,0 +1,99 @@
+import { existsSync, mkdirSync, readFileSync, rmSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { writeFileAtomic } from './atomic-write.js';
+import { piAgentDir } from './paths.js';
+import { step, tilde } from './ui.js';
+/** pi has no settings-file hooks; its extension point is a TypeScript file
+ *  auto-discovered from `<agent-dir>/extensions/*.ts`. So the pi guard is a
+ *  generated file rather than a settings entry, with the same lifecycle as the
+ *  Claude hook: written by `login` (which self-update re-runs, refreshing the
+ *  baked binary path), removed by `uninstall`, skipped by USAGEFLEET_HOOK=0. */
+const FILE = 'usagefleet-guard.ts';
+export function piGuardPath(agentDir = piAgentDir()) {
+    return join(agentDir, 'extensions', FILE);
+}
+/** The generated extension is self-contained on purpose — it shells out to the
+ *  baked `usagefleet guard` command instead of importing this package, so a CLI
+ *  update can never strand it against moved internals. Program and config are
+ *  baked exactly like guardCommand does for the Claude hook. */
+export function piGuardExtension(program, configPath) {
+    const env = configPath ? `{ ...process.env, USAGEFLEET_CONFIG: ${JSON.stringify(configPath)} }` : 'process.env';
+    return `// Generated by \`usagefleet login\` — do not edit; \`usagefleet uninstall\` removes it,
+// USAGEFLEET_HOOK=0 at login keeps it out. Refuses pi prompts while this
+// device's group has blocking enabled and is over its budget, mirroring the
+// Claude Code UserPromptSubmit hook.
+import { execFile } from 'node:child_process'
+
+const GUARD = ${JSON.stringify(program)}
+const ENV = ${env}
+
+/** Exit 2 is guard's one "refuse this prompt" signal, stderr the reason meant
+ *  for the user. Anything else — exit 0, a missing binary, a wedged process
+ *  killed by the timeout — fails open, the same guarantee \`usagefleet guard\`
+ *  itself makes. The 7s outer bound only covers a wedged process; guard's own
+ *  fetch gives up at 5s. */
+function runGuard(): Promise<string | null> {
+	return new Promise(resolve => {
+		execFile(GUARD[0], GUARD.slice(1), { env: ENV, timeout: 7000 }, (error, _out, stderr) => {
+			const code = error === null ? 0 : error.code
+			resolve(code === 2 ? stderr.trim() || 'usagefleet: prompts are blocked for this group.' : null)
+		})
+	})
+}
+
+type InputEvent = { source?: string }
+type InputContext = { hasUI: boolean; ui: { notify(message: string, level: 'error'): void } }
+type InputHandler = (event: InputEvent, ctx: InputContext) => Promise<{ action: 'handled' } | undefined>
+
+export default function (pi: { on(event: 'input', handler: InputHandler): void }) {
+	pi.on('input', async (event, ctx) => {
+		// Extension-injected messages pass unguarded: silently swallowing one
+		// wedges the extension that sent it, and the human this block is aimed
+		// at is the one typing.
+		if (event.source === 'extension') {
+			return undefined
+		}
+		const blocked = await runGuard()
+		if (!blocked) {
+			return undefined
+		}
+		if (ctx.hasUI) {
+			ctx.ui.notify(blocked, 'error')
+		} else {
+			console.error(blocked)
+		}
+		return { action: 'handled' }
+	})
+}
+`;
+}
+/** Skips machines without pi (agent dir absent) rather than conjuring a `.pi`
+ *  tree that pi itself never made. */
+export function installPiGuard(program, agentDir = piAgentDir()) {
+    if (process.env.USAGEFLEET_HOOK === '0' || !existsSync(agentDir)) {
+        return;
+    }
+    const path = piGuardPath(agentDir);
+    const next = piGuardExtension(program, process.env.USAGEFLEET_CONFIG);
+    let current = '';
+    try {
+        current = readFileSync(path, 'utf-8');
+    }
+    catch {
+        /* not installed yet */
+    }
+    if (current === next) {
+        return;
+    }
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileAtomic(path, next);
+    console.log(step('hook', `pi prompt guard · ${tilde(path)}`));
+}
+export function uninstallPiGuard(agentDir = piAgentDir()) {
+    const path = piGuardPath(agentDir);
+    if (!existsSync(path)) {
+        return;
+    }
+    rmSync(path, { force: true });
+    console.log(step('removed', `pi prompt guard · ${tilde(path)}`));
+}

package/dist/release.js

@@ -1,2 +1,2 @@
 // Generated by .github/workflows/release.yml.
-export const RELEASE_VERSION = "1.2.94";
+export const RELEASE_VERSION = "1.2.97";

package/dist/service.js

@@ -4,6 +4,7 @@ import { homedir, tmpdir } from 'node:os';
 import { delimiter, join } from 'node:path';
 import { ENDPOINT, loadConfig } from './config.js';
 import { installPromptHook, uninstallPromptHook } from './hook.js';
+import { installPiGuard, uninstallPiGuard } from './pi-hook.js';
 import { readStore, storePath, updateStore } from './store.js';
 import { fail, header, hint, host, row, step, tilde, warn } from './ui.js';
 const LABEL = 'dev.usagefleet.collector';
@@ -261,9 +262,11 @@ export function install() {
         console.log(warn('path', `another usagefleet runs first · rm ${tilde(shadow)}`));
     }
     const env = presentEnv();
-    // Same binary, different entry point: the service watches, the hook enforces.
+    // Same binary, different entry point: the service watches, the hooks enforce.
     // `prog` ends in "watch"; everything before it is how to launch this build.
-    installPromptHook([...prog.slice(0, -1), 'guard']);
+    const guardProg = [...prog.slice(0, -1), 'guard'];
+    installPromptHook(guardProg);
+    installPiGuard(guardProg);
     if (process.platform === 'darwin') {
         const envXml = env.map(([k, v]) => `    <key>${xml(k)}</key><string>${xml(v)}</string>`).join('\n');
         const progXml = prog.map(p => `    <string>${xml(p)}</string>`).join('\n');
@@ -511,6 +514,7 @@ function removeStableBin() {
 }
 export function uninstall() {
     uninstallPromptHook();
+    uninstallPiGuard();
     if (process.platform === 'darwin') {
         const path = macPlistPath();
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@usagefleet/cli",
-	"version": "1.2.94",
+	"version": "1.2.97",
 	"description": "Tails Claude Code, Claude Desktop, and pi agent JSONL logs and reports token usage to a UsageFleet server.",
 	"keywords": [
 		"claude",