@yunazgr/pi-companion 0.3.1 → 0.3.3

package/README.md

@@ -2,7 +2,9 @@
 
 Lightweight, local-first remote control for Pi sessions.
 
-**New in 0.3.1:** claymorphic automation workspaces with searchable, status-filtered, paginated lists; Summary/History tabs and calendar-style run cards; sanitized Markdown/ADF/JSON results; a staged job editor with strict validation and optional failed-action retries (up to 5, default 10-second interval). Per-automation history keeps the latest 30 runs by default, with 10 per page. Automated sessions are clearly marked as answers-only. Type `/` in a normal session to discover available commands, skills, and prompt templates. See [automations](docs/automations.md).
+**New in 0.3.3:** Provider usage now shows measured session tokens and cost without pretending they are subscription quotas. Compatible extensions can still supply real weekly/5-hour limits. Mobile sessions, automations and usage use cards; the overview has compact activity filters; automation buttons share a consistent style; pull-to-refresh is gesture-only. No data or provider credentials are collected by the daemon outside the already shared session metadata.
+
+**New in 0.3.2:** responsive automation and run-history tables, rounded status chips, matching clay-icon headers, and a single-column automation workspace with full-width mobile controls. **Edit automation** scrolls to and focuses the inline editor. Pull to refresh Overview, Sessions, Automations, or Settings—with a gesture; unsaved settings stay intact. Camera-policy guidance now explains HTTPS proxy configuration. Existing rich results, staged job editing, optional retries, and answers-only automation sessions are retained. See [automations](docs/automations.md).
 
 Pi Companion is deliberately not another agent runtime. Pi owns execution and conversation state. A single Rust daemon owns session discovery, pairing, temporary file exchange, browser fan-out, and the embedded web UI.
 
@@ -151,6 +153,12 @@ Pi's `companion_ask_user` tool asks one to four questions at once. Each question
 
 Dialogs from other extensions (`ctx.ui.select`, `ctx.ui.confirm`, `ctx.ui.input`) are relayed to the same sheet while the terminal dialog stays open: whichever side answers first wins and the other closes. Question tools that draw their own `ctx.ui.custom` picker are relayed through a small adapter: pi-jar's `jar_ask` is supported, and a companion answer completes its terminal picker. Other `ctx.ui.custom` components and `ctx.ui.editor` stay terminal-only because they cannot be answered from outside. Pending questions are part of the session snapshot, so a browser that connects later still sees them.
 
+## Refreshing your workspace
+
+On Overview, Sessions, Automations, and Settings, pull down from the top of the page and release when prompted to refresh current data. Each page also provides a keyboard-accessible **Refresh** button with progress and error feedback. This refreshes data without reloading the app; Settings preserves unsaved edits. Gestures inside inputs and nested scrollable lists are left alone.
+
+The Sessions, Devices, and Settings pages now share the automation page’s clay-icon header style. See [device management](docs/devices.webp), [settings](docs/settings.webp), and [mobile settings](docs/settings-mobile.webp).
+
 ## Notifications, camera and catching up
 
 Settings → **Notifications and camera** (on every device, not just the console) asks the browser for both permissions from a tap, as browsers require, and shows whether each is allowed, blocked or unavailable. Overview also offers a one-time "Turn on notifications" banner.
@@ -186,7 +194,7 @@ Network loss and daemon restarts reconnect automatically with bounded backoff. H
 
 Shared session title, model, effort and working directory refresh on Pi events and once per second while sharing, including while idle. Session detail shows context-window usage and estimated session cost. Native Pi context and recorded usage costs take precedence; independent extension reports fill unavailable fields. Missing usage is shown as unavailable, not zero.
 
-**Settings → Usage** is available on the console and paired devices. It displays the latest snapshot per provider: weekly usage, 5-hour usage when reported, reset times, source and snapshot age. Quota snapshots are not added across sessions or accounts. These are extension-reported limits, not billing totals or locally inferred quotas; providers without a quota report remain unavailable.
+**Settings → Usage** is available on the console and paired devices. It displays the latest snapshot per provider: weekly usage, 5-hour usage when reported, reset times, source and snapshot age. Quota snapshots are not added across sessions or accounts. Those limits are extension-reported, not billing totals or locally inferred quotas. Companion additionally reports actual session token consumption and cost grouped by the model's provider from Pi's recorded assistant messages; this is session-only data, not an account-wide tally. Settings selects the newest consumption independently of quota freshness and displays their timestamps and session-ended indicators separately. When no quota adapter is installed, 5-hour and weekly quotas still show as unavailable rather than fabricated percentages.
 
 Extensions can publish a provider-neutral event without importing Companion:
 
@@ -254,6 +262,18 @@ which destroys one temporary file by opaque id.
 
 This means the agent can consume uploaded artifacts using its normal file capabilities while Pi Companion retains ownership of upload placement and cleanup.
 
+### Camera access through Cloudflare or another HTTPS proxy
+
+Camera scanning works through an HTTPS tunnel; Companion serves `Permissions-Policy: camera=(self)`. A proxy response-header rule that replaces it with `camera=()` blocks the camera before the browser can ask permission. JavaScript cannot override that restriction.
+
+For a Cloudflare **Modify Response Header** rule scoped to your Companion hostname (for example, `http.host eq "companion.readynaz.com"`), set `Permissions-Policy` to:
+
+```text
+geolocation=(), camera=(self), microphone=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=()
+```
+
+Exclude the Companion hostname from any broader rule that still sets `camera=()`, and check Workers or other proxies for duplicate overrides. Keep Cloudflare Access authentication enabled and tunnel only the paired-device listener. Open Companion directly, not inside an iframe. After signing in, verify the final page response in browser DevTools → Network: its camera directive must be `camera=(self)`. The Access login redirect is not the app response. Reload the app (and restart an older daemon after upgrading), then allow Camera in browser site permissions. Manual pairing-code entry remains available.
+
 ## Workspace and tunnel connection errors
 
 If a tunnel closes, the workspace stops, or your device loses its network, Companion shows an actionable **Workspace connection interrupted** notice with **Retry now** and reconnect instructions. On initial connection failure, it shows **Workspace unavailable**, not a misleading empty session list or “session not found.” Gateway errors (including HTTP 502/503/504 and tunnel-provider errors) are translated into readable messages rather than raw HTML or JSON parse errors. A browser cannot always distinguish a closed tunnel from a daemon, DNS or network failure, so these messages describe possible causes rather than claiming certainty.
@@ -354,7 +374,7 @@ Clone the repository, then:
 
 `npm run serve` builds the embedded Svelte UI and starts the Rust daemon in the foreground. It prints:
 
-      Pi Companion v0.3.1
+      Pi Companion v0.3.2
 
       Console          http://127.0.0.1:43721
       Paired devices   http://127.0.0.1:43722

package/docs/automations.md

@@ -1,10 +1,16 @@
-# Automations (0.3.1)
+# Automations (0.3.2)
 
 Automations are persisted, named JSON scripts run by the Companion daemon. Open **Automations** in the navigation to view definitions, start/stop runs, and inspect timestamped run history. Click a run to view its captured output and Pi summary. Desktop console users can create, edit, delete, and enable/disable definitions; mobile and paired-device users can only inspect and start/stop them.
 
 ## Workspace & editor
 
-The claymorphic automation collection supports name search, Enabled/Disabled filters, ten-item pagination, and its own scrollable card region. The detail workspace has **Summary** and **Run history** tabs; history is newest-first with calendar tiles, duration, status filters, and ten-item pagination over each automation’s retained history (latest 30 finished runs by default, configurable 1–1000).
+The claymorphic automation collection uses the same responsive tabular style as overview sessions, with rounded status chips, name search, segmented Enabled/Disabled filters, ten-item pagination, and a scrollable row region. Redundant statistic tiles are removed. On phones, rows stack their labelled fields without horizontal scrolling.
+
+The detail workspace is a single-column bento layout with a clay back button and full-width run control below its title. **Summary** and **Run history** tabs fill the container. History is a newest-first responsive table with start time, duration, status filters, and ten-item pagination over each automation’s retained history (latest 30 finished runs by default, configurable 1–1000).
+
+Choose **Edit automation** to reveal the editor at the top of Summary, automatically scroll it into view, and focus its name field. This keeps the routine context nearby without navigating to another page. Nothing changes until you save. Desktop console editing remains required.
+
+Overview, Sessions, Automations, and Settings support pull-to-refresh from the top of the page and an accessible **Refresh** button. Pull down on non-interactive page content, then release when prompted. Nested scroll regions and form controls keep their own gestures. Settings refresh never discards unsaved edits.
 
 The job editor separates name, enablement, UTC cron, optional retry policy, preconditions, actions, and post-actions. Each step is a reorderable JSON DSL object with Command/Pi templates. Saving validates the definition, cron ranges, action types, arguments, absolute directories, timeouts, step count, and retry bounds; the daemon validates again before persistence. Only computer desktop administrators can author definitions.
 
@@ -15,10 +21,11 @@ Run results have a formatted and raw view. Formatted results split daemon execut
 Screenshots use only demo data. The same generator refreshes the existing overview, session, and mobile screenshots too.
 
 ![Automations on the overview below live sessions](overview-automations.webp)
-![Searchable automation cards](automations.webp)
-![Automation cards on a phone](automations-mobile.webp)
+![Searchable automation rows](automations.webp)
+![Automation rows on a phone](automations-mobile.webp)
 ![Run history on a phone](automation-history-mobile.webp)
 ![Automation summary and execution steps](automation-detail.webp)
+![Single-column automation detail on a phone](automation-detail-mobile.webp)
 ![Filtered, paginated run history](automation-history.webp)
 ![Friendly staged job editor](automation-editor.webp)
 ![Rich review summary with linked PR table](automation-result.webp)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yunazgr/pi-companion",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "Local-first remote control for Pi sessions: live activity feed, steering, git diff, file drop and phone pairing from a single Rust daemon.",
   "keywords": [
     "pi-package",

package/src/automation-mcp.ts

@@ -31,7 +31,7 @@ async function receive(line: string) {
     case "initialize": {
       const versions = ["2025-06-18", "2025-03-26", "2024-11-05"];
       const requested = message.params?.protocolVersion;
-      reply({ protocolVersion: versions.includes(String(requested)) ? requested : versions[0], capabilities: { tools: {} }, serverInfo: { name: "pi-companion-automations", version: "0.3.1" } });
+      reply({ protocolVersion: versions.includes(String(requested)) ? requested : versions[0], capabilities: { tools: {} }, serverInfo: { name: "pi-companion-automations", version: "0.3.2" } });
       return;
     }
     case "ping": reply({}); return;

package/src/protocol.ts

@@ -43,6 +43,11 @@ export type ProviderUsage = {
   updatedAt: string;
   weekly?: UsageWindow;
   fiveHour?: UsageWindow;
+  /** Observed consumption in this shared Pi session, not account quota utilization. */
+  sessionTokens?: number;
+  sessionCost?: number;
+  /** Native consumption freshness, independent of the account quota report. */
+  sessionUpdatedAt?: string;
 };
 export type SessionTelemetry = {
   context?: { tokens?: number; window?: number; percent?: number; source?: string };

package/src/telemetry.ts

@@ -51,6 +51,7 @@ export function normalizeTelemetry(value: unknown, source = "extension", now = D
 /** Independent sources may supply different fields; one broken/missing adapter cannot erase another. */
 export class TelemetryRelay {
   private sources = new Map<string, { telemetry: SessionTelemetry; contextAt?: number; costAt?: number }>();
+  private nativeUsage = new Map<string, { fingerprint: string; updatedAt: string }>();
 
   ingest(value: unknown, fallbackSource = "extension", now = Date.now()) {
     const raw = record(value);
@@ -140,6 +141,43 @@ export class TelemetryRelay {
       }
       if (known && Number.isFinite(total)) result.cost = { amount: total, currency: "USD", source: "native" };
     } catch { /* Preserve extension estimate when native usage is unavailable. */ }
+    // Native session entries are available without another plugin. They report actual
+    // consumption, not provider subscription limits, and must never fabricate quotas.
+    try {
+      const totals = new Map<string, { tokens: number; cost: number; hasTokens: boolean; hasCost: boolean }>();
+      for (const entry of ctx?.sessionManager?.getEntries?.() ?? []) {
+        const raw = record(entry);
+        if (raw?.type !== "message") continue;
+        const message = record(raw.message);
+        if (message?.role !== "assistant") continue;
+        const provider = text(message.provider);
+        const usage = record(message.usage);
+        if (!provider || !usage) continue;
+        const pieces = [usage.input, usage.output, usage.cacheRead, usage.cacheWrite].map(number);
+        const tokens = number(usage.totalTokens) ?? (pieces.some(value => value !== undefined)
+          ? pieces.reduce<number>((sum, value) => sum + (value ?? 0), 0) : undefined);
+        const cost = number(record(usage.cost)?.total);
+        if (tokens === undefined && cost === undefined) continue;
+        const total = totals.get(provider) ?? { tokens: 0, cost: 0, hasTokens: false, hasCost: false };
+        if (tokens !== undefined) { total.tokens += tokens; total.hasTokens = true; }
+        if (cost !== undefined) { total.cost += cost; total.hasCost = true; }
+        totals.set(provider, total);
+      }
+      for (const [provider, total] of totals) {
+        const fingerprint = JSON.stringify(total);
+        const cached = this.nativeUsage.get(provider);
+        const updatedAt = cached?.fingerprint === fingerprint ? cached.updatedAt : new Date(now).toISOString();
+        this.nativeUsage.set(provider, { fingerprint, updatedAt });
+        const old = providers.get(provider);
+        providers.set(provider, {
+          ...old, provider, source: old?.source ?? "Pi session", updatedAt: old?.updatedAt ?? updatedAt,
+          sessionUpdatedAt: updatedAt,
+          ...(total.hasTokens ? { sessionTokens: total.tokens } : {}),
+          ...(total.hasCost ? { sessionCost: total.cost } : {})
+        });
+      }
+      if (providers.size) result.providers = [...providers.values()];
+    } catch { /* Keep independently reported quota snapshots if native entries are unavailable. */ }
     return result;
   }
 }