agent-runway 0.2.0 → 0.2.1

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "displayName": "Agent Runway",
       "source": "./",
       "description": "Quota and model discovery for the coding agents installed on this machine: how much runway each has left, and which model slugs each binary will actually accept.",
-      "version": "0.2.0",
+      "version": "0.2.1",
       "author": {
         "name": "jberdah",
         "url": "https://github.com/jberdah"

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-runway",
   "displayName": "Agent Runway",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Quota and model discovery for the coding agents installed on this machine: how much runway each has left, and which model slugs each binary will actually accept.",
   "author": {
     "name": "jberdah",

package/README.md

@@ -70,10 +70,17 @@ unless you pass `--force`.
 ### As a Claude Code plugin (skill + MCP tool)
 
 ```
-/plugin marketplace add jberdah/agent-runway
+/plugin marketplace add https://github.com/jberdah/agent-runway.git
 /plugin install agent-runway@agent-runway
 ```
 
+The full HTTPS URL rather than the `owner/repo` shorthand: the shorthand
+resolves to SSH, which fails on any machine that has not accepted GitHub's host
+key. If the clone then fails with *"self signed certificate in certificate
+chain"*, a proxy is inspecting TLS; on Windows, `git config --global
+http.sslBackend schannel` makes git trust the certificate store the rest of the
+system already uses.
+
 Claude then reads your usage whenever it is relevant — ask "how much quota do I
 have left?" or let it check before a long task.
 
@@ -356,10 +363,17 @@ npm run smoke   # drives the MCP server over stdio; needs network and a token
 ```
 
 The runtime has **zero dependencies**. `src/mcp.mjs` speaks JSON-RPC directly
-rather than importing the MCP SDK, because a Claude Code plugin installed from
-git is never `npm install`ed — an imported dependency would have to be vendored.
-`scripts/smoke-mcp.mjs` connects the official SDK client to it, so the
-hand-rolled framing is checked against the real implementation.
+rather than importing the MCP SDK, and `scripts/smoke-mcp.mjs` connects the
+official SDK client to it so the hand-rolled framing is checked against the real
+implementation.
+
+That choice was originally justified by a belief that a Claude Code plugin
+installed from git is never `npm install`ed. **That is wrong**: installing this
+plugin produced 91 packages in the plugin cache, devDependencies included. The
+constraint is kept anyway, for reasons that survive the correction — nobody
+installing a CLI that makes one HTTP request should wait on 91 packages, the
+supply-chain surface stays at zero, and it keeps working where `npm install`
+does not, which on a corporate network is not hypothetical.
 
 ```
 src/core.mjs     token resolution, HTTP, response normalization

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-runway",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Quota and model discovery for the coding agents installed on this machine: how much runway each has left, and which model slugs each binary will actually accept.",
   "type": "module",
   "license": "MIT",

package/src/core.mjs

@@ -7,7 +7,7 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
-export const VERSION = "0.2.0";
+export const VERSION = "0.2.1";
 
 const USER_AGENT = `agent-runway/${VERSION} (+https://github.com/jberdah/agent-runway)`;
 

package/src/providers/index.mjs

@@ -106,7 +106,7 @@ export function capacity(results, { threshold = 90 } = {}) {
     if (r.allowed === false) {
       return {
         provider: r.provider, label: r.label, decision: "defer", reason: "provider_says_limit_reached",
-        binding, retryAt: binding.resetsAt, retryAtBasis: "reported_reset",
+        binding, windows: r.windows, retryAt: binding.resetsAt, retryAtBasis: "reported_reset",
       };
     }
 
@@ -117,6 +117,10 @@ export function capacity(results, { threshold = 90 } = {}) {
       decision: over ? "defer" : "proceed",
       reason: over ? "threshold_exceeded" : "within_threshold",
       binding,
+      // The binding window decides, but hiding the rest loses information the
+      // read already paid for: a session at 0% next to a weekly at 89% is a
+      // different situation from a session at 0% alone.
+      windows: r.windows,
       retryAt: over ? binding.resetsAt : null,
       // The reset is when the window rolls over, not a promise that service
       // resumes exactly then. Naming the basis keeps the two apart.

package/src/providers/shared.mjs

@@ -56,9 +56,20 @@ export function makeWindow({
   model = null,
   unit = "requests",
 }) {
-  const startsAt =
+  // A start can only be derived from a window that is actually running. When a
+  // provider has nothing to report it answers with the whole window ahead —
+  // Codex returns reset_at = now + 18000s at 0% consumption — and subtracting
+  // the duration then yields "now", which reads as a window that just began
+  // when none has. A start that lands on or after the present moment is not a
+  // measurement, so it is withheld rather than invented.
+  const derivedStart =
     resetsAt && Number.isFinite(windowSeconds)
-      ? new Date(Date.parse(resetsAt) - windowSeconds * 1000).toISOString()
+      ? Date.parse(resetsAt) - windowSeconds * 1000
+      : null;
+  const UNKNOWABLE_MS = 60_000;
+  const startsAt =
+    derivedStart != null && derivedStart < Date.now() - UNKNOWABLE_MS
+      ? new Date(derivedStart).toISOString()
       : null;
 
   return {