agent-shim 9.1.0 → 9.2.1

package/dist/cli.cjs

@@ -31107,6 +31107,18 @@ function parseDuration(value2) {
   }
   return Number(count) * multiplier;
 }
+function windowValues(prefix, windows) {
+  const values = {};
+  for (const name of ["fiveHour", "sevenDay", "extraUsage"]) {
+    const facts = windows?.[name];
+    if (facts !== void 0) {
+      values[`${prefix}.${name}.remaining`] = facts.remaining;
+      values[`${prefix}.${name}.utilization`] = facts.utilization;
+      values[`${prefix}.${name}.hoursUntilReset`] = facts.hoursUntilReset;
+    }
+  }
+  return values;
+}
 function resolversOf(context) {
   const pool = context.pool;
   const values = {
@@ -31115,8 +31127,7 @@ function resolversOf(context) {
     ...context.fact?.totalSizeBytes === void 0 ? {} : { "entry.totalSizeBytes": context.fact.totalSizeBytes },
     ...context.branch === void 0 ? {} : { "repo.branch": context.branch },
     "repo.detached": context.branchDetached ?? false,
-    ...pool?.fiveHour === void 0 ? {} : { "quota.fiveHour.remaining": pool.fiveHour.remaining, "quota.fiveHour.utilization": pool.fiveHour.utilization, "quota.fiveHour.hoursUntilReset": pool.fiveHour.hoursUntilReset },
-    ...pool?.sevenDay === void 0 ? {} : { "quota.sevenDay.remaining": pool.sevenDay.remaining, "quota.sevenDay.utilization": pool.sevenDay.utilization, "quota.sevenDay.hoursUntilReset": pool.sevenDay.hoursUntilReset },
+    ...windowValues("quota", pool),
     ...pool?.burnPerHour === void 0 ? {} : { "quota.burnPerHour": pool.burnPerHour },
     ...pool?.resuming === void 0 ? {} : { "session.resuming": pool.resuming },
     ...pool?.lastPickHoursAgo === void 0 ? {} : { "session.lastPickHoursAgo": pool.lastPickHoursAgo },
@@ -31127,12 +31138,7 @@ function resolversOf(context) {
     ...context.request?.maxTokens === void 0 ? {} : { "request.maxTokens": context.request.maxTokens },
     ...context.request?.isCountTokens === void 0 ? {} : { "request.isCountTokens": context.request.isCountTokens },
     ...context.providerQuota === void 0 ? {} : Object.fromEntries(
-      Object.entries(context.providerQuota).flatMap(
-        ([name, windows]) => [
-          ...windows.fiveHour === void 0 ? [] : [["provider." + name + ".fiveHour.remaining", windows.fiveHour.remaining], ["provider." + name + ".fiveHour.utilization", windows.fiveHour.utilization], ["provider." + name + ".fiveHour.hoursUntilReset", windows.fiveHour.hoursUntilReset]],
-          ...windows.sevenDay === void 0 ? [] : [["provider." + name + ".sevenDay.remaining", windows.sevenDay.remaining], ["provider." + name + ".sevenDay.utilization", windows.sevenDay.utilization], ["provider." + name + ".sevenDay.hoursUntilReset", windows.sevenDay.hoursUntilReset]]
-        ]
-      )
+      Object.entries(context.providerQuota).flatMap(([name, windows]) => Object.entries(windowValues("provider." + name, windows)))
     )
   };
   return {
@@ -32529,9 +32535,313 @@ var init_paths = __esm({
   }
 });
 
+// src/usage/schema.ts
+function isRateLimitHeader(name) {
+  const lower = name.toLowerCase();
+  return lower === "retry-after" || lower.startsWith("anthropic-ratelimit-") || lower.startsWith("x-ratelimit-") || lower.startsWith("ratelimit") || lower.startsWith("x-codex-");
+}
+var USAGE_SCHEMA_VERSION, VersionSchema, InstantSchema, TokenCountSchema, TokenUsageSchema, LIMIT_KINDS, LimitClassificationSchema, UsageRecordSchema, QuotaWindowSchema, UnifiedRateLimitSchema, RateLimitStateSchema, LimitEventSchema, ProviderQuotaWindowSchema, ProviderQuotaSchema, ProviderUsageStateSchema, AccountMetadataSchema, UsageSnapshotSchema;
+var init_schema2 = __esm({
+  "src/usage/schema.ts"() {
+    "use strict";
+    init_zod();
+    USAGE_SCHEMA_VERSION = 1;
+    VersionSchema = external_exports.literal(USAGE_SCHEMA_VERSION);
+    InstantSchema = external_exports.iso.datetime();
+    TokenCountSchema = external_exports.number().int().nonnegative();
+    TokenUsageSchema = external_exports.strictObject({
+      inputTokens: TokenCountSchema.optional(),
+      outputTokens: TokenCountSchema.optional(),
+      cacheCreationInputTokens: TokenCountSchema.optional(),
+      cacheReadInputTokens: TokenCountSchema.optional()
+    });
+    LIMIT_KINDS = ["rate-limited", "quota-exhausted"];
+    LimitClassificationSchema = external_exports.strictObject({
+      kind: external_exports.enum(LIMIT_KINDS),
+      /** Seconds to wait before retrying, from the response's `retry-after`. */
+      retryAfterSeconds: external_exports.number().nonnegative().optional(),
+      /** When the limiting window resets, from the upstream's own reset header. */
+      resetAt: InstantSchema.optional(),
+      /** The window the upstream named as the binding one (`anthropic-ratelimit-unified-representative-claim`), such as `five_hour` or `seven_day`. */
+      window: external_exports.string().optional(),
+      /** The signals the classification rests on, each `<name>=<value>` from a response header or the error body's `type` or `code`. Never the error message. */
+      evidence: external_exports.array(external_exports.string())
+    });
+    UsageRecordSchema = external_exports.strictObject({
+      schemaVersion: VersionSchema,
+      /** When the front door received the request. */
+      at: InstantSchema,
+      /** The launching identity, when the launch resolved one. */
+      identity: external_exports.string().optional(),
+      /** `anthropic` for an OAuth session's request to Claude Code's own API, otherwise the provider's name. */
+      provider: external_exports.string(),
+      /** The launch's session id, generated per launch. */
+      sessionId: external_exports.string().optional(),
+      /** The project the launch ran in (its git repository root), when the launch sent one: headroom launches do. */
+      project: external_exports.string().optional(),
+      /** The front-door route that served the request. */
+      route: external_exports.string(),
+      method: external_exports.string(),
+      /** The API path as the upstream sees it (`/v1/messages`), without the provider prefix or a query string. */
+      endpoint: external_exports.string(),
+      /** The model the response named. */
+      model: external_exports.string().optional(),
+      status: external_exports.number().int(),
+      /** Milliseconds from the request's arrival to its response head. */
+      latencyMs: external_exports.number().int().nonnegative(),
+      /** Milliseconds from the request's arrival to the end of its response body. */
+      durationMs: external_exports.number().int().nonnegative(),
+      /** Whether the client received the whole body. */
+      outcome: external_exports.enum(["completed", "aborted"]),
+      usage: TokenUsageSchema.optional(),
+      /** The response's quota and rate-limit headers, by name (see `isRateLimitHeader`). */
+      rateLimitHeaders: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+      limit: LimitClassificationSchema.optional(),
+      /** The upstream's request id (`request-id`), for matching a record to the provider's own logs. */
+      requestId: external_exports.string().optional()
+    });
+    QuotaWindowSchema = external_exports.strictObject({
+      /** The fraction of the window used, as the upstream reports it (0 to 1). */
+      utilization: external_exports.number().nonnegative().optional(),
+      resetsAt: InstantSchema.optional(),
+      /** The window's own status (`allowed`, `allowed_warning`, `rejected`). */
+      status: external_exports.string().optional()
+    });
+    UnifiedRateLimitSchema = external_exports.strictObject({
+      /** The overall status: `allowed`, `allowed_warning` or `rejected`. */
+      status: external_exports.string().optional(),
+      fiveHour: QuotaWindowSchema.optional(),
+      sevenDay: QuotaWindowSchema.optional(),
+      /** The window that currently binds. */
+      representativeClaim: external_exports.string().optional(),
+      /** When the binding window resets. */
+      resetAt: InstantSchema.optional(),
+      /** Whether usage beyond the plan (extra usage) is available: `allowed` or `rejected`. */
+      overageStatus: external_exports.string().optional(),
+      /** The fraction of the extra-usage allowance used, as the upstream reports it (0 to 1). An account with no plan windows, such as an Enterprise one, is metered by this alone. */
+      overageUtilization: external_exports.number().nonnegative().optional(),
+      /** When the extra-usage allowance resets. */
+      overageResetsAt: InstantSchema.optional(),
+      /** Why extra usage is unavailable, as the upstream names it (`out_of_credits`, for one). */
+      overageDisabledReason: external_exports.string().optional()
+    });
+    RateLimitStateSchema = external_exports.strictObject({
+      observedAt: InstantSchema,
+      /** Every quota and rate-limit header on that response, by name. */
+      headers: external_exports.record(external_exports.string(), external_exports.string()),
+      unified: UnifiedRateLimitSchema.optional()
+    });
+    LimitEventSchema = LimitClassificationSchema.extend({
+      observedAt: InstantSchema,
+      status: external_exports.number().int()
+    });
+    ProviderQuotaWindowSchema = external_exports.strictObject({
+      /** What the window measures, in the provider's terms (`tokens`, `tool-calls`). */
+      measures: external_exports.string(),
+      /** The window's length in milliseconds, when the provider's unit is one this project knows; absent for an unrecognised unit, with `period` carrying the raw code. */
+      periodMs: external_exports.number().int().positive().optional(),
+      /** The provider's own description of the period when `periodMs` could not be derived, such as `unit 4 x 1`. */
+      period: external_exports.string().optional(),
+      /** The fraction of the window used (0 to 1). */
+      utilization: external_exports.number().nonnegative(),
+      resetsAt: InstantSchema.optional(),
+      /** Absolute counts, when the provider reports them for this window. */
+      limit: external_exports.number().nonnegative().optional(),
+      used: external_exports.number().nonnegative().optional(),
+      remaining: external_exports.number().nonnegative().optional()
+    });
+    ProviderQuotaSchema = external_exports.strictObject({
+      observedAt: InstantSchema,
+      /** Which usage endpoint produced it (`z.ai`). */
+      source: external_exports.string(),
+      /** The subscription level the endpoint reports, when it does. */
+      level: external_exports.string().optional(),
+      windows: external_exports.array(ProviderQuotaWindowSchema)
+    });
+    ProviderUsageStateSchema = external_exports.strictObject({
+      /** When the provider last served a request for the identity through the front door. Absent while the state holds only a rate-limit state fetched from the provider's usage endpoint, for an identity that has made no request. */
+      lastRequestAt: InstantSchema.optional(),
+      lastStatus: external_exports.number().int().optional(),
+      lastModel: external_exports.string().optional(),
+      /** The latest rate-limit state, from the last response that carried any rate-limit header. */
+      rateLimit: RateLimitStateSchema.optional(),
+      /** The latest classified refusal. It stays after later successes, so a reader compares its `resetAt` (or `observedAt` plus `retryAfterSeconds`) with the current time. */
+      lastLimit: LimitEventSchema.optional(),
+      /** The latest quota the provider's usage endpoint reported, for providers whose quota is not visible in response headers. */
+      quota: ProviderQuotaSchema.optional()
+    });
+    AccountMetadataSchema = external_exports.strictObject({
+      accountUuid: external_exports.string().optional(),
+      emailAddress: external_exports.string().optional(),
+      displayName: external_exports.string().optional(),
+      organizationUuid: external_exports.string().optional(),
+      organizationName: external_exports.string().optional(),
+      organizationType: external_exports.string().optional(),
+      organizationRole: external_exports.string().optional(),
+      workspaceRole: external_exports.string().optional(),
+      billingType: external_exports.string().optional(),
+      seatTier: external_exports.string().optional(),
+      organizationRateLimitTier: external_exports.string().optional(),
+      userRateLimitTier: external_exports.string().optional(),
+      hasExtraUsageEnabled: external_exports.boolean().optional(),
+      subscriptionCreatedAt: external_exports.string().optional(),
+      accountCreatedAt: external_exports.string().optional()
+    });
+    UsageSnapshotSchema = external_exports.strictObject({
+      schemaVersion: VersionSchema,
+      identity: external_exports.string(),
+      updatedAt: InstantSchema,
+      /** The identity's account metadata as of `updatedAt`. */
+      account: AccountMetadataSchema.optional(),
+      /** Latest state per provider, keyed by provider name (`anthropic` for OAuth sessions). */
+      providers: external_exports.record(external_exports.string(), ProviderUsageStateSchema)
+    });
+  }
+});
+
+// src/usage/rateLimit.ts
+function rateLimitHeadersOf(headers) {
+  const kept = {};
+  for (const [name, value2] of Object.entries(headers)) {
+    if (isRateLimitHeader(name)) {
+      kept[name.toLowerCase()] = value2;
+    }
+  }
+  return Object.keys(kept).length === 0 ? void 0 : kept;
+}
+function epochSecondsToIso(value2) {
+  if (value2 === void 0) {
+    return void 0;
+  }
+  const seconds = Number(value2);
+  return Number.isFinite(seconds) && seconds > 0 ? new Date(seconds * MS_PER_SECOND).toISOString() : void 0;
+}
+function nonNegativeNumber(value2) {
+  if (value2 === void 0 || value2.trim() === "") {
+    return void 0;
+  }
+  const parsed = Number(value2);
+  return Number.isFinite(parsed) && parsed >= 0 ? parsed : void 0;
+}
+function unifiedWindow(headers, window) {
+  const utilization = nonNegativeNumber(headers[`${UNIFIED_PREFIX}${window}-utilization`]);
+  const resetsAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}${window}-reset`]);
+  const status = headers[`${UNIFIED_PREFIX}${window}-status`];
+  if (utilization === void 0 && resetsAt === void 0 && status === void 0) {
+    return void 0;
+  }
+  return { ...utilization === void 0 ? {} : { utilization }, ...resetsAt === void 0 ? {} : { resetsAt }, ...status === void 0 ? {} : { status } };
+}
+function parseUnifiedRateLimit(headers) {
+  if (!Object.keys(headers).some((name) => name.startsWith(UNIFIED_PREFIX))) {
+    return void 0;
+  }
+  const status = headers[`${UNIFIED_PREFIX}status`];
+  const fiveHour = unifiedWindow(headers, "5h");
+  const sevenDay = unifiedWindow(headers, "7d");
+  const representativeClaim = headers[`${UNIFIED_PREFIX}representative-claim`];
+  const resetAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}reset`]);
+  const overageStatus = headers[`${UNIFIED_PREFIX}overage-status`];
+  const overageUtilization = nonNegativeNumber(headers[`${UNIFIED_PREFIX}overage-utilization`]);
+  const overageResetsAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}overage-reset`]);
+  const overageDisabledReason = headers[`${UNIFIED_PREFIX}overage-disabled-reason`];
+  return {
+    ...status === void 0 ? {} : { status },
+    ...fiveHour === void 0 ? {} : { fiveHour },
+    ...sevenDay === void 0 ? {} : { sevenDay },
+    ...representativeClaim === void 0 ? {} : { representativeClaim },
+    ...resetAt === void 0 ? {} : { resetAt },
+    ...overageStatus === void 0 ? {} : { overageStatus },
+    ...overageUtilization === void 0 ? {} : { overageUtilization },
+    ...overageResetsAt === void 0 ? {} : { overageResetsAt },
+    ...overageDisabledReason === void 0 ? {} : { overageDisabledReason }
+  };
+}
+function overageFactsOf(unified) {
+  const { overageStatus, overageUtilization, overageResetsAt, overageDisabledReason } = unified;
+  return {
+    ...overageStatus === void 0 ? {} : { overageStatus },
+    ...overageUtilization === void 0 ? {} : { overageUtilization },
+    ...overageResetsAt === void 0 ? {} : { overageResetsAt },
+    ...overageDisabledReason === void 0 ? {} : { overageDisabledReason }
+  };
+}
+function overageWindowOf(unified) {
+  const { overageUtilization: utilization, overageResetsAt: resetsAt, overageStatus: status } = unified;
+  if (utilization === void 0 && resetsAt === void 0 && status === void 0) {
+    return void 0;
+  }
+  return { ...utilization === void 0 ? {} : { utilization }, ...resetsAt === void 0 ? {} : { resetsAt }, ...status === void 0 ? {} : { status } };
+}
+function soleOverageWindow(unified) {
+  return unified.fiveHour === void 0 && unified.sevenDay === void 0 ? overageWindowOf(unified) : void 0;
+}
+function retryAfterSeconds(value2, nowMs) {
+  if (value2 === void 0) {
+    return void 0;
+  }
+  const seconds = nonNegativeNumber(value2);
+  if (seconds !== void 0) {
+    return seconds;
+  }
+  const date5 = Date.parse(value2);
+  return Number.isNaN(date5) ? void 0 : Math.max(0, Math.ceil((date5 - nowMs) / MS_PER_SECOND));
+}
+function classifyLimit(params) {
+  const { status, headers, error: error62 } = params;
+  if (status !== TOO_MANY_REQUESTS && status !== PAYMENT_REQUIRED) {
+    return void 0;
+  }
+  const evidence = [`status=${String(status)}`];
+  const unified = parseUnifiedRateLimit(headers);
+  const unifiedRejected = unified?.status === "rejected" && (unified.overageStatus === void 0 || unified.overageStatus === "rejected");
+  if (unified?.status !== void 0) {
+    evidence.push(`${UNIFIED_PREFIX}status=${unified.status}`);
+  }
+  if (unified?.overageStatus !== void 0) {
+    evidence.push(`${UNIFIED_PREFIX}overage-status=${unified.overageStatus}`);
+  }
+  for (const [name, value2] of [
+    ["error.type", error62?.type],
+    ["error.code", error62?.code]
+  ]) {
+    if (value2 !== void 0 && EVIDENCE_TOKEN.test(value2)) {
+      evidence.push(`${name}=${value2}`);
+    }
+  }
+  const errorExhausted = [error62?.type, error62?.code].some((value2) => value2 !== void 0 && QUOTA_EXHAUSTED_ERRORS.has(value2));
+  const messageExhausted = error62?.message !== void 0 && QUOTA_EXHAUSTED_MESSAGE.test(error62.message);
+  if (messageExhausted) {
+    evidence.push("error.message=names a usage limit");
+  }
+  const exhausted = status === PAYMENT_REQUIRED || unifiedRejected || errorExhausted || messageExhausted;
+  const retryAfter = retryAfterSeconds(headers["retry-after"], params.nowMs);
+  return {
+    kind: exhausted ? "quota-exhausted" : "rate-limited",
+    ...retryAfter === void 0 ? {} : { retryAfterSeconds: retryAfter },
+    ...unified?.resetAt === void 0 ? {} : { resetAt: unified.resetAt },
+    ...unified?.representativeClaim === void 0 ? {} : { window: unified.representativeClaim },
+    evidence
+  };
+}
+var TOO_MANY_REQUESTS, PAYMENT_REQUIRED, MS_PER_SECOND, UNIFIED_PREFIX, QUOTA_EXHAUSTED_ERRORS, QUOTA_EXHAUSTED_MESSAGE, EVIDENCE_TOKEN;
+var init_rateLimit = __esm({
+  "src/usage/rateLimit.ts"() {
+    "use strict";
+    init_schema2();
+    TOO_MANY_REQUESTS = 429;
+    PAYMENT_REQUIRED = 402;
+    MS_PER_SECOND = 1e3;
+    UNIFIED_PREFIX = "anthropic-ratelimit-unified-";
+    QUOTA_EXHAUSTED_ERRORS = /* @__PURE__ */ new Set(["usage_limit_reached", "insufficient_quota", "1308", "1309", "1310", "1316", "1317", "1318", "1319", "1320", "1321"]);
+    QUOTA_EXHAUSTED_MESSAGE = /usage limit|quota (?:exceeded|exhausted)|limit exhausted|insufficient (?:balance|credits|quota)/i;
+    EVIDENCE_TOKEN = /^[\w.-]{1,64}$/;
+  }
+});
+
 // src/usage/preflight.ts
 function formatAge(ms2) {
-  const minutes = Math.floor(ms2 / (MS_PER_SECOND * SECONDS_PER_MINUTE));
+  const minutes = Math.floor(ms2 / (MS_PER_SECOND2 * SECONDS_PER_MINUTE));
   if (minutes < MINUTES_PER_HOUR) {
     return `${String(Math.max(minutes, 0))}m`;
   }
@@ -32559,7 +32869,8 @@ function quotaWarnings(snapshot, provider, nowMs) {
   const age2 = formatAge(nowMs - Date.parse(rateLimit.observedAt));
   const windows = [
     { name: "five-hour", window: unified.fiveHour },
-    { name: "seven-day", window: unified.sevenDay }
+    { name: "seven-day", window: unified.sevenDay },
+    { name: "extra-usage", window: soleOverageWindow(unified) }
   ];
   return windows.flatMap(({ name, window }) => {
     const effective = window === void 0 ? void 0 : effectiveWindow(window, nowMs);
@@ -32571,11 +32882,12 @@ function quotaWarnings(snapshot, provider, nowMs) {
     return [`agent-shim: identity ${snapshot.identity}: the ${name} quota is ${verdict}${reset} (last seen ${age2} ago)`];
   });
 }
-var MS_PER_SECOND, SECONDS_PER_MINUTE, MINUTES_PER_HOUR, HOURS_PER_DAY, WARNING_STATUSES;
+var MS_PER_SECOND2, SECONDS_PER_MINUTE, MINUTES_PER_HOUR, HOURS_PER_DAY, WARNING_STATUSES;
 var init_preflight = __esm({
   "src/usage/preflight.ts"() {
     "use strict";
-    MS_PER_SECOND = 1e3;
+    init_rateLimit();
+    MS_PER_SECOND2 = 1e3;
     SECONDS_PER_MINUTE = 60;
     MINUTES_PER_HOUR = 60;
     HOURS_PER_DAY = 24;
@@ -32879,7 +33191,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "agent-shim",
-      version: "9.1.0",
+      version: "9.2.1",
       description: "A profile manager and launcher for Claude Code that lets one person run multiple logins from one machine while controlling what gets shared between them.",
       license: "MIT",
       author: "Joseph Mearman <joseph@mearman.co.uk>",
@@ -32981,164 +33293,6 @@ var init_package = __esm({
   }
 });
 
-// src/usage/schema.ts
-function isRateLimitHeader(name) {
-  const lower = name.toLowerCase();
-  return lower === "retry-after" || lower.startsWith("anthropic-ratelimit-") || lower.startsWith("x-ratelimit-") || lower.startsWith("ratelimit") || lower.startsWith("x-codex-");
-}
-var USAGE_SCHEMA_VERSION, VersionSchema, InstantSchema, TokenCountSchema, TokenUsageSchema, LIMIT_KINDS, LimitClassificationSchema, UsageRecordSchema, QuotaWindowSchema, UnifiedRateLimitSchema, RateLimitStateSchema, LimitEventSchema, ProviderQuotaWindowSchema, ProviderQuotaSchema, ProviderUsageStateSchema, AccountMetadataSchema, UsageSnapshotSchema;
-var init_schema2 = __esm({
-  "src/usage/schema.ts"() {
-    "use strict";
-    init_zod();
-    USAGE_SCHEMA_VERSION = 1;
-    VersionSchema = external_exports.literal(USAGE_SCHEMA_VERSION);
-    InstantSchema = external_exports.iso.datetime();
-    TokenCountSchema = external_exports.number().int().nonnegative();
-    TokenUsageSchema = external_exports.strictObject({
-      inputTokens: TokenCountSchema.optional(),
-      outputTokens: TokenCountSchema.optional(),
-      cacheCreationInputTokens: TokenCountSchema.optional(),
-      cacheReadInputTokens: TokenCountSchema.optional()
-    });
-    LIMIT_KINDS = ["rate-limited", "quota-exhausted"];
-    LimitClassificationSchema = external_exports.strictObject({
-      kind: external_exports.enum(LIMIT_KINDS),
-      /** Seconds to wait before retrying, from the response's `retry-after`. */
-      retryAfterSeconds: external_exports.number().nonnegative().optional(),
-      /** When the limiting window resets, from the upstream's own reset header. */
-      resetAt: InstantSchema.optional(),
-      /** The window the upstream named as the binding one (`anthropic-ratelimit-unified-representative-claim`), such as `five_hour` or `seven_day`. */
-      window: external_exports.string().optional(),
-      /** The signals the classification rests on, each `<name>=<value>` from a response header or the error body's `type` or `code`. Never the error message. */
-      evidence: external_exports.array(external_exports.string())
-    });
-    UsageRecordSchema = external_exports.strictObject({
-      schemaVersion: VersionSchema,
-      /** When the front door received the request. */
-      at: InstantSchema,
-      /** The launching identity, when the launch resolved one. */
-      identity: external_exports.string().optional(),
-      /** `anthropic` for an OAuth session's request to Claude Code's own API, otherwise the provider's name. */
-      provider: external_exports.string(),
-      /** The launch's session id, generated per launch. */
-      sessionId: external_exports.string().optional(),
-      /** The project the launch ran in (its git repository root), when the launch sent one: headroom launches do. */
-      project: external_exports.string().optional(),
-      /** The front-door route that served the request. */
-      route: external_exports.string(),
-      method: external_exports.string(),
-      /** The API path as the upstream sees it (`/v1/messages`), without the provider prefix or a query string. */
-      endpoint: external_exports.string(),
-      /** The model the response named. */
-      model: external_exports.string().optional(),
-      status: external_exports.number().int(),
-      /** Milliseconds from the request's arrival to its response head. */
-      latencyMs: external_exports.number().int().nonnegative(),
-      /** Milliseconds from the request's arrival to the end of its response body. */
-      durationMs: external_exports.number().int().nonnegative(),
-      /** Whether the client received the whole body. */
-      outcome: external_exports.enum(["completed", "aborted"]),
-      usage: TokenUsageSchema.optional(),
-      /** The response's quota and rate-limit headers, by name (see `isRateLimitHeader`). */
-      rateLimitHeaders: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-      limit: LimitClassificationSchema.optional(),
-      /** The upstream's request id (`request-id`), for matching a record to the provider's own logs. */
-      requestId: external_exports.string().optional()
-    });
-    QuotaWindowSchema = external_exports.strictObject({
-      /** The fraction of the window used, as the upstream reports it (0 to 1). */
-      utilization: external_exports.number().nonnegative().optional(),
-      resetsAt: InstantSchema.optional(),
-      /** The window's own status (`allowed`, `allowed_warning`, `rejected`). */
-      status: external_exports.string().optional()
-    });
-    UnifiedRateLimitSchema = external_exports.strictObject({
-      /** The overall status: `allowed`, `allowed_warning` or `rejected`. */
-      status: external_exports.string().optional(),
-      fiveHour: QuotaWindowSchema.optional(),
-      sevenDay: QuotaWindowSchema.optional(),
-      /** The window that currently binds. */
-      representativeClaim: external_exports.string().optional(),
-      /** When the binding window resets. */
-      resetAt: InstantSchema.optional(),
-      /** Whether usage beyond the plan (extra usage) is available: `allowed` or `rejected`. */
-      overageStatus: external_exports.string().optional()
-    });
-    RateLimitStateSchema = external_exports.strictObject({
-      observedAt: InstantSchema,
-      /** Every quota and rate-limit header on that response, by name. */
-      headers: external_exports.record(external_exports.string(), external_exports.string()),
-      unified: UnifiedRateLimitSchema.optional()
-    });
-    LimitEventSchema = LimitClassificationSchema.extend({
-      observedAt: InstantSchema,
-      status: external_exports.number().int()
-    });
-    ProviderQuotaWindowSchema = external_exports.strictObject({
-      /** What the window measures, in the provider's terms (`tokens`, `tool-calls`). */
-      measures: external_exports.string(),
-      /** The window's length in milliseconds, when the provider's unit is one this project knows; absent for an unrecognised unit, with `period` carrying the raw code. */
-      periodMs: external_exports.number().int().positive().optional(),
-      /** The provider's own description of the period when `periodMs` could not be derived, such as `unit 4 x 1`. */
-      period: external_exports.string().optional(),
-      /** The fraction of the window used (0 to 1). */
-      utilization: external_exports.number().nonnegative(),
-      resetsAt: InstantSchema.optional(),
-      /** Absolute counts, when the provider reports them for this window. */
-      limit: external_exports.number().nonnegative().optional(),
-      used: external_exports.number().nonnegative().optional(),
-      remaining: external_exports.number().nonnegative().optional()
-    });
-    ProviderQuotaSchema = external_exports.strictObject({
-      observedAt: InstantSchema,
-      /** Which usage endpoint produced it (`z.ai`). */
-      source: external_exports.string(),
-      /** The subscription level the endpoint reports, when it does. */
-      level: external_exports.string().optional(),
-      windows: external_exports.array(ProviderQuotaWindowSchema)
-    });
-    ProviderUsageStateSchema = external_exports.strictObject({
-      /** When the provider last served a request for the identity through the front door. Absent while the state holds only a rate-limit state fetched from the provider's usage endpoint, for an identity that has made no request. */
-      lastRequestAt: InstantSchema.optional(),
-      lastStatus: external_exports.number().int().optional(),
-      lastModel: external_exports.string().optional(),
-      /** The latest rate-limit state, from the last response that carried any rate-limit header. */
-      rateLimit: RateLimitStateSchema.optional(),
-      /** The latest classified refusal. It stays after later successes, so a reader compares its `resetAt` (or `observedAt` plus `retryAfterSeconds`) with the current time. */
-      lastLimit: LimitEventSchema.optional(),
-      /** The latest quota the provider's usage endpoint reported, for providers whose quota is not visible in response headers. */
-      quota: ProviderQuotaSchema.optional()
-    });
-    AccountMetadataSchema = external_exports.strictObject({
-      accountUuid: external_exports.string().optional(),
-      emailAddress: external_exports.string().optional(),
-      displayName: external_exports.string().optional(),
-      organizationUuid: external_exports.string().optional(),
-      organizationName: external_exports.string().optional(),
-      organizationType: external_exports.string().optional(),
-      organizationRole: external_exports.string().optional(),
-      workspaceRole: external_exports.string().optional(),
-      billingType: external_exports.string().optional(),
-      seatTier: external_exports.string().optional(),
-      organizationRateLimitTier: external_exports.string().optional(),
-      userRateLimitTier: external_exports.string().optional(),
-      hasExtraUsageEnabled: external_exports.boolean().optional(),
-      subscriptionCreatedAt: external_exports.string().optional(),
-      accountCreatedAt: external_exports.string().optional()
-    });
-    UsageSnapshotSchema = external_exports.strictObject({
-      schemaVersion: VersionSchema,
-      identity: external_exports.string(),
-      updatedAt: InstantSchema,
-      /** The identity's account metadata as of `updatedAt`. */
-      account: AccountMetadataSchema.optional(),
-      /** Latest state per provider, keyed by provider name (`anthropic` for OAuth sessions). */
-      providers: external_exports.record(external_exports.string(), ProviderUsageStateSchema)
-    });
-  }
-});
-
 // src/usage/account.ts
 function isObject2(value2) {
   return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
@@ -33223,7 +33377,11 @@ var init_account = __esm({
 
 // src/usage/plan.ts
 function planOf(account) {
-  const tier = account?.organizationRateLimitTier ?? account?.userRateLimitTier;
+  const userTier = account?.userRateLimitTier;
+  if (userTier !== void 0 && ZERO_TIER.test(userTier)) {
+    return { kind: "pay-per-use", tier: userTier };
+  }
+  const tier = account?.organizationRateLimitTier ?? userTier;
   const tierField = tier === void 0 ? {} : { tier };
   if (tier === void 0) {
     return { kind: "subscription", capacity: 1, recognised: false };
@@ -33344,121 +33502,6 @@ var init_route = __esm({
   }
 });
 
-// src/usage/rateLimit.ts
-function rateLimitHeadersOf(headers) {
-  const kept = {};
-  for (const [name, value2] of Object.entries(headers)) {
-    if (isRateLimitHeader(name)) {
-      kept[name.toLowerCase()] = value2;
-    }
-  }
-  return Object.keys(kept).length === 0 ? void 0 : kept;
-}
-function epochSecondsToIso(value2) {
-  if (value2 === void 0) {
-    return void 0;
-  }
-  const seconds = Number(value2);
-  return Number.isFinite(seconds) && seconds > 0 ? new Date(seconds * MS_PER_SECOND2).toISOString() : void 0;
-}
-function nonNegativeNumber(value2) {
-  if (value2 === void 0 || value2.trim() === "") {
-    return void 0;
-  }
-  const parsed = Number(value2);
-  return Number.isFinite(parsed) && parsed >= 0 ? parsed : void 0;
-}
-function unifiedWindow(headers, window) {
-  const utilization = nonNegativeNumber(headers[`${UNIFIED_PREFIX}${window}-utilization`]);
-  const resetsAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}${window}-reset`]);
-  const status = headers[`${UNIFIED_PREFIX}${window}-status`];
-  if (utilization === void 0 && resetsAt === void 0 && status === void 0) {
-    return void 0;
-  }
-  return { ...utilization === void 0 ? {} : { utilization }, ...resetsAt === void 0 ? {} : { resetsAt }, ...status === void 0 ? {} : { status } };
-}
-function parseUnifiedRateLimit(headers) {
-  if (!Object.keys(headers).some((name) => name.startsWith(UNIFIED_PREFIX))) {
-    return void 0;
-  }
-  const status = headers[`${UNIFIED_PREFIX}status`];
-  const fiveHour = unifiedWindow(headers, "5h");
-  const sevenDay = unifiedWindow(headers, "7d");
-  const representativeClaim = headers[`${UNIFIED_PREFIX}representative-claim`];
-  const resetAt = epochSecondsToIso(headers[`${UNIFIED_PREFIX}reset`]);
-  const overageStatus = headers[`${UNIFIED_PREFIX}overage-status`];
-  return {
-    ...status === void 0 ? {} : { status },
-    ...fiveHour === void 0 ? {} : { fiveHour },
-    ...sevenDay === void 0 ? {} : { sevenDay },
-    ...representativeClaim === void 0 ? {} : { representativeClaim },
-    ...resetAt === void 0 ? {} : { resetAt },
-    ...overageStatus === void 0 ? {} : { overageStatus }
-  };
-}
-function retryAfterSeconds(value2, nowMs) {
-  if (value2 === void 0) {
-    return void 0;
-  }
-  const seconds = nonNegativeNumber(value2);
-  if (seconds !== void 0) {
-    return seconds;
-  }
-  const date5 = Date.parse(value2);
-  return Number.isNaN(date5) ? void 0 : Math.max(0, Math.ceil((date5 - nowMs) / MS_PER_SECOND2));
-}
-function classifyLimit(params) {
-  const { status, headers, error: error62 } = params;
-  if (status !== TOO_MANY_REQUESTS && status !== PAYMENT_REQUIRED) {
-    return void 0;
-  }
-  const evidence = [`status=${String(status)}`];
-  const unified = parseUnifiedRateLimit(headers);
-  const unifiedRejected = unified?.status === "rejected" && (unified.overageStatus === void 0 || unified.overageStatus === "rejected");
-  if (unified?.status !== void 0) {
-    evidence.push(`${UNIFIED_PREFIX}status=${unified.status}`);
-  }
-  if (unified?.overageStatus !== void 0) {
-    evidence.push(`${UNIFIED_PREFIX}overage-status=${unified.overageStatus}`);
-  }
-  for (const [name, value2] of [
-    ["error.type", error62?.type],
-    ["error.code", error62?.code]
-  ]) {
-    if (value2 !== void 0 && EVIDENCE_TOKEN.test(value2)) {
-      evidence.push(`${name}=${value2}`);
-    }
-  }
-  const errorExhausted = [error62?.type, error62?.code].some((value2) => value2 !== void 0 && QUOTA_EXHAUSTED_ERRORS.has(value2));
-  const messageExhausted = error62?.message !== void 0 && QUOTA_EXHAUSTED_MESSAGE.test(error62.message);
-  if (messageExhausted) {
-    evidence.push("error.message=names a usage limit");
-  }
-  const exhausted = status === PAYMENT_REQUIRED || unifiedRejected || errorExhausted || messageExhausted;
-  const retryAfter = retryAfterSeconds(headers["retry-after"], params.nowMs);
-  return {
-    kind: exhausted ? "quota-exhausted" : "rate-limited",
-    ...retryAfter === void 0 ? {} : { retryAfterSeconds: retryAfter },
-    ...unified?.resetAt === void 0 ? {} : { resetAt: unified.resetAt },
-    ...unified?.representativeClaim === void 0 ? {} : { window: unified.representativeClaim },
-    evidence
-  };
-}
-var TOO_MANY_REQUESTS, PAYMENT_REQUIRED, MS_PER_SECOND2, UNIFIED_PREFIX, QUOTA_EXHAUSTED_ERRORS, QUOTA_EXHAUSTED_MESSAGE, EVIDENCE_TOKEN;
-var init_rateLimit = __esm({
-  "src/usage/rateLimit.ts"() {
-    "use strict";
-    init_schema2();
-    TOO_MANY_REQUESTS = 429;
-    PAYMENT_REQUIRED = 402;
-    MS_PER_SECOND2 = 1e3;
-    UNIFIED_PREFIX = "anthropic-ratelimit-unified-";
-    QUOTA_EXHAUSTED_ERRORS = /* @__PURE__ */ new Set(["usage_limit_reached", "insufficient_quota", "1308", "1309", "1310", "1316", "1317", "1318", "1319", "1320", "1321"]);
-    QUOTA_EXHAUSTED_MESSAGE = /usage limit|quota (?:exceeded|exhausted)|limit exhausted|insufficient (?:balance|credits|quota)/i;
-    EVIDENCE_TOKEN = /^[\w.-]{1,64}$/;
-  }
-});
-
 // src/usage/scan.ts
 function mergeUsage(current, raw) {
   const parsed = AnthropicUsageSchema.safeParse(raw);
@@ -33873,6 +33916,28 @@ var init_middleware = __esm({
   }
 });
 
+// src/usage/quotaFacts.ts
+function windowFacts(window, nowMs) {
+  if (window?.utilization === void 0 || window.resetsAt === void 0) {
+    return void 0;
+  }
+  return { remaining: Math.max(0, 1 - window.utilization), utilization: window.utilization, hoursUntilReset: Math.max(0, (Date.parse(window.resetsAt) - nowMs) / MS_PER_HOUR) };
+}
+function quotaFactsOf(unified, nowMs) {
+  const fiveHour = windowFacts(unified?.fiveHour, nowMs);
+  const sevenDay = windowFacts(unified?.sevenDay, nowMs);
+  const extraUsage = windowFacts(unified === void 0 ? void 0 : soleOverageWindow(unified), nowMs);
+  return { ...fiveHour === void 0 ? {} : { fiveHour }, ...sevenDay === void 0 ? {} : { sevenDay }, ...extraUsage === void 0 ? {} : { extraUsage } };
+}
+var MS_PER_HOUR;
+var init_quotaFacts = __esm({
+  "src/usage/quotaFacts.ts"() {
+    "use strict";
+    init_rateLimit();
+    MS_PER_HOUR = 36e5;
+  }
+});
+
 // src/usage/pick.ts
 function unifiedOf(state) {
   return state?.rateLimit?.unified;
@@ -33967,18 +34032,22 @@ function assessIdentity(member, nowMs) {
     ...fiveHourWindow === void 0 || five === void 0 ? [] : [describeWindow("5h", fiveHourWindow, five, nowMs)],
     ...sevenDayWindow === void 0 || seven === void 0 ? [] : [describeWindow("7d", sevenDayWindow, seven, nowMs)]
   ];
+  const overageWindow = soleOverageWindow(unified);
+  const overage = overageWindow === void 0 ? void 0 : effectiveWindow(overageWindow, nowMs);
+  const overageReasons = overageWindow === void 0 || overage === void 0 ? [] : [describeWindow("extra usage", overageWindow, overage, nowMs)];
   const blockedUntil = Math.max(
-    windowBlockedUntil([five, seven].flatMap((window) => window === void 0 ? [] : [window])) ?? 0,
+    windowBlockedUntil([five, seven, overage].flatMap((window) => window === void 0 ? [] : [window])) ?? 0,
     limitBlockedUntil(state, nowMs) ?? 0
   );
   if (blockedUntil > nowMs) {
     if (unified.overageStatus === "allowed") {
       return { candidate: { ...base, class: "pay-per-use", reasons: [`plan exhausted until ${new Date(blockedUntil).toISOString()}, continues as extra usage`, ...windowReasons, ...planReasons] } };
     }
-    return { candidate: { ...base, class: "ineligible", blockedUntilMs: blockedUntil, reasons: [`refused until ${new Date(blockedUntil).toISOString()} (in ${formatAge(blockedUntil - nowMs)})`, ...windowReasons, ...planReasons] } };
+    return { candidate: { ...base, class: "ineligible", blockedUntilMs: blockedUntil, reasons: [`refused until ${new Date(blockedUntil).toISOString()} (in ${formatAge(blockedUntil - nowMs)})`, ...windowReasons, ...overageReasons, ...planReasons] } };
   }
   if (plan.kind === "pay-per-use" || fiveHourWindow === void 0 && sevenDayWindow === void 0) {
-    return { candidate: { ...base, class: "pay-per-use", reasons: [...plan.kind === "pay-per-use" ? planReasons : ["no plan windows reported, so usage bills as extra usage"]] } };
+    const headroom = overage?.utilization === void 0 ? void 0 : Math.max(0, 1 - overage.utilization);
+    return { candidate: { ...base, class: "pay-per-use", ...headroom === void 0 ? {} : { headroom }, reasons: [...plan.kind === "pay-per-use" ? planReasons : ["no plan windows reported, so usage bills as extra usage"], ...overageReasons] } };
   }
   const basis = seven?.utilization !== void 0 ? { window: seven, windowMs: SEVEN_DAY_WINDOW_MS } : five?.utilization !== void 0 ? { window: five, windowMs: FIVE_HOUR_WINDOW_MS } : void 0;
   if (basis?.window.utilization === void 0) {
@@ -33986,7 +34055,7 @@ function assessIdentity(member, nowMs) {
   }
   const remaining = Math.max(0, 1 - basis.window.utilization);
   const untilResetMs = basis.window.resetsAtMs === void 0 ? basis.windowMs : Math.max(basis.window.resetsAtMs - nowMs, MS_PER_SECOND3);
-  const score = remaining * plan.capacity / (untilResetMs / MS_PER_HOUR);
+  const score = remaining * plan.capacity / (untilResetMs / MS_PER_HOUR2);
   const fiveRemaining = five?.utilization === void 0 ? void 0 : Math.max(0, 1 - five.utilization);
   const fiveUntil = five?.resetsAtMs === void 0 ? FIVE_HOUR_WINDOW_MS : Math.max(five.resetsAtMs - nowMs, MS_PER_SECOND3);
   const burn = windowBurn(member.records, "fiveHour");
@@ -34002,24 +34071,15 @@ function assessIdentity(member, nowMs) {
   };
 }
 function poolFactsOf(member, nowMs, resuming, sticky) {
-  const unified = member.snapshot?.providers[ANTHROPIC_PROVIDER]?.rateLimit?.unified;
-  const window = (which) => {
-    const raw = unified?.[which];
-    if (raw?.utilization === void 0) {
-      return void 0;
-    }
-    if (raw.resetsAt === void 0) {
-      return void 0;
-    }
-    return { remaining: Math.max(0, 1 - raw.utilization), utilization: raw.utilization, hoursUntilReset: Math.max(0, (Date.parse(raw.resetsAt) - nowMs) / MS_PER_HOUR) };
-  };
+  const { fiveHour, sevenDay, extraUsage } = quotaFactsOf(member.snapshot?.providers[ANTHROPIC_PROVIDER]?.rateLimit?.unified, nowMs);
   const burn = windowBurn(member.records, "fiveHour");
   return {
-    ...window("fiveHour") === void 0 ? {} : { fiveHour: window("fiveHour") },
-    ...window("sevenDay") === void 0 ? {} : { sevenDay: window("sevenDay") },
-    ...burn === void 0 ? {} : { burnPerHour: burn * MS_PER_HOUR },
+    ...fiveHour === void 0 ? {} : { fiveHour },
+    ...sevenDay === void 0 ? {} : { sevenDay },
+    ...extraUsage === void 0 ? {} : { extraUsage },
+    ...burn === void 0 ? {} : { burnPerHour: burn * MS_PER_HOUR2 },
     resuming,
-    ...sticky?.identity === member.identity ? { lastPickHoursAgo: Math.max(0, (nowMs - Date.parse(sticky.at)) / MS_PER_HOUR) } : {}
+    ...sticky?.identity === member.identity ? { lastPickHoursAgo: Math.max(0, (nowMs - Date.parse(sticky.at)) / MS_PER_HOUR2) } : {}
   };
 }
 function rankPool(input2) {
@@ -34068,7 +34128,7 @@ function rankPool(input2) {
     return { ...candidate, feasible: false, reasons: [...drySpots, ...candidate.reasons] };
   });
   const ordered = input2.preference === "listed" ? [...candidates] : [...candidates].sort(
-    (left, right) => CLASS_ORDER[left.class] - CLASS_ORDER[right.class] || Number(left.policyDemoted ?? false) - Number(right.policyDemoted ?? false) || Number(right.feasible) - Number(left.feasible) || (right.score ?? 0) - (left.score ?? 0) || left.identity.localeCompare(right.identity)
+    (left, right) => CLASS_ORDER[left.class] - CLASS_ORDER[right.class] || Number(left.policyDemoted ?? false) - Number(right.policyDemoted ?? false) || Number(right.feasible) - Number(left.feasible) || (right.headroom ?? 1) - (left.headroom ?? 1) || (right.score ?? 0) - (left.score ?? 0) || left.identity.localeCompare(right.identity)
   );
   const sticky = input2.sticky;
   const stickyIndex = sticky === void 0 ? -1 : ordered.findIndex((candidate) => candidate.identity === sticky.identity);
@@ -34093,7 +34153,7 @@ function rankPool(input2) {
     ...movedOff === void 0 || pick2 === void 0 ? {} : { movedOff }
   };
 }
-var MS_PER_SECOND3, MS_PER_HOUR, HOURS_PER_DAY2, FIVE_HOURS, PROMPT_CACHE_TTL_HOURS, PERCENT, SEVEN_DAYS, FIVE_HOUR_WINDOW_MS, SEVEN_DAY_WINDOW_MS, PROMPT_CACHE_TTL_MS, CLASS_ORDER;
+var MS_PER_SECOND3, MS_PER_HOUR2, HOURS_PER_DAY2, FIVE_HOURS, PROMPT_CACHE_TTL_HOURS, PERCENT, SEVEN_DAYS, FIVE_HOUR_WINDOW_MS, SEVEN_DAY_WINDOW_MS, PROMPT_CACHE_TTL_MS, CLASS_ORDER;
 var init_pick = __esm({
   "src/usage/pick.ts"() {
     "use strict";
@@ -34101,17 +34161,18 @@ var init_pick = __esm({
     init_plan2();
     init_middleware();
     init_preflight();
+    init_quotaFacts();
     init_rateLimit();
     MS_PER_SECOND3 = 1e3;
-    MS_PER_HOUR = 36e5;
+    MS_PER_HOUR2 = 36e5;
     HOURS_PER_DAY2 = 24;
     FIVE_HOURS = 5;
     PROMPT_CACHE_TTL_HOURS = 1;
     PERCENT = 100;
     SEVEN_DAYS = 7;
-    FIVE_HOUR_WINDOW_MS = FIVE_HOURS * MS_PER_HOUR;
-    SEVEN_DAY_WINDOW_MS = SEVEN_DAYS * HOURS_PER_DAY2 * MS_PER_HOUR;
-    PROMPT_CACHE_TTL_MS = PROMPT_CACHE_TTL_HOURS * MS_PER_HOUR;
+    FIVE_HOUR_WINDOW_MS = FIVE_HOURS * MS_PER_HOUR2;
+    SEVEN_DAY_WINDOW_MS = SEVEN_DAYS * HOURS_PER_DAY2 * MS_PER_HOUR2;
+    PROMPT_CACHE_TTL_MS = PROMPT_CACHE_TTL_HOURS * MS_PER_HOUR2;
     CLASS_ORDER = { scored: 0, unknown: 1, "pay-per-use": 2, ineligible: 3 };
   }
 });
@@ -34381,8 +34442,9 @@ function createUsageStore(deps) {
     recordRateLimit: (identity, provider, rateLimit) => rewriteSnapshot(identity, (current) => {
       const state = current?.providers[provider] ?? {};
       const keep = state.rateLimit !== void 0 && state.rateLimit.observedAt.localeCompare(rateLimit.observedAt) > 0;
-      const overageStatus = rateLimit.unified?.overageStatus ?? state.rateLimit?.unified?.overageStatus;
-      const merged = overageStatus === void 0 || rateLimit.unified === void 0 ? rateLimit : { ...rateLimit, unified: { ...rateLimit.unified, overageStatus } };
+      const earlier = state.rateLimit?.unified;
+      const carried = rateLimit.unified === void 0 || rateLimit.unified.overageStatus !== void 0 || earlier === void 0 ? void 0 : overageFactsOf(earlier);
+      const merged = carried === void 0 || rateLimit.unified === void 0 ? rateLimit : { ...rateLimit, unified: { ...rateLimit.unified, ...carried } };
       return { ...current?.providers, [provider]: { ...state, rateLimit: keep ? state.rateLimit : merged } };
     })
   };
@@ -60908,7 +60970,8 @@ function unifiedFromReportedLimits(reported) {
   return { ...fiveHour === void 0 ? {} : { fiveHour }, ...sevenDay === void 0 ? {} : { sevenDay } };
 }
 function isAnthropicUsageProbeable(member) {
-  return planOf(member.account ?? member.snapshot?.account).kind === "subscription";
+  const unified = member.snapshot?.providers[ANTHROPIC_PROVIDER]?.rateLimit?.unified;
+  return planOf(member.account ?? member.snapshot?.account).kind === "subscription" && (unified === void 0 || soleOverageWindow(unified) === void 0);
 }
 function isAnthropicUsageStale(member, nowMs) {
   const rateLimit = member.snapshot?.providers[ANTHROPIC_PROVIDER]?.rateLimit;
@@ -60994,6 +61057,7 @@ var init_anthropicUsageRefresh = __esm({
     init_middleware();
     init_pick();
     init_plan2();
+    init_rateLimit();
     PERCENT2 = 100;
     ANTHROPIC_USAGE_FRESHNESS_MS = FIVE_HOUR_WINDOW_MS / PERCENT2;
     NO_PLAN_WINDOWS_FRESHNESS_MS = SEVEN_DAY_WINDOW_MS / PERCENT2;
@@ -113105,11 +113169,11 @@ function rcFanoutOnDoorHub(fanout, hub) {
 
 // src/frontdoor/quotaExpiringEvents.ts
 init_schema2();
-var MS_PER_HOUR2 = 36e5;
+var MS_PER_HOUR3 = 36e5;
 var MS_PER_DAY3 = 864e5;
 var FIVE_HOUR_WINDOW_HOURS = 5;
 var SEVEN_DAY_WINDOW_DAYS = 7;
-var FIVE_HOUR_WINDOW_MS2 = FIVE_HOUR_WINDOW_HOURS * MS_PER_HOUR2;
+var FIVE_HOUR_WINDOW_MS2 = FIVE_HOUR_WINDOW_HOURS * MS_PER_HOUR3;
 var SEVEN_DAY_WINDOW_MS2 = SEVEN_DAY_WINDOW_DAYS * MS_PER_DAY3;
 var FINAL_SPAN_DENOMINATOR = 30;
 var QUOTA_EXPIRING_WINDOW_FRACTION = 1 / FINAL_SPAN_DENOMINATOR;
@@ -114393,6 +114457,7 @@ function createPassthroughRoute(name, target) {
 
 // src/frontdoor/providerRoute.ts
 init_conditions();
+init_quotaFacts();
 init_route();
 var import_node_stream3 = require("node:stream");
 
@@ -114475,7 +114540,6 @@ async function scanRequestHead(request7, wholeBody = false) {
 }
 
 // src/frontdoor/providerRoute.ts
-var MS_PER_HOUR3 = 36e5;
 function createProviderRouteResolver(deps) {
   const isRcSelfHostPath = (path47) => path47 === "/v1/code/sessions" || path47.startsWith("/v1/code/sessions/") || path47 === "/v1/sessions" || path47.startsWith("/v1/sessions/");
   const oauthRoute = createPassthroughRoute("anthropic", { baseUrl: `https://${CONNECT_INTERCEPT_HOST}:${String(HTTPS_PORT)}`, stripPrefix: void 0, headroomUpstream: void 0 });
@@ -114575,16 +114639,9 @@ function createProviderRouteResolver(deps) {
       }
       const whole = routes.some((entry) => entry.model !== void 0 || referencesFact(entry.when, "request.hasImage"));
       const snapshot = deps.usageSnapshotOf?.(current.session.identity);
-      const windowFacts = (raw) => {
-        if (raw?.utilization === void 0 || raw.resetsAt === void 0) {
-          return void 0;
-        }
-        return { remaining: Math.max(0, 1 - raw.utilization), utilization: raw.utilization, hoursUntilReset: Math.max(0, (Date.parse(raw.resetsAt) - Date.now()) / MS_PER_HOUR3) };
-      };
       const providerQuota = Object.fromEntries(
         routes.flatMap((entry) => {
-          const unified = snapshot?.providers[entry.provider]?.rateLimit?.unified;
-          return [[entry.provider, { fiveHour: windowFacts(unified?.fiveHour), sevenDay: windowFacts(unified?.sevenDay) }]];
+          return [[entry.provider, quotaFactsOf(snapshot?.providers[entry.provider]?.rateLimit?.unified, Date.now())]];
         })
       );
       const scan = await scanRequestHead(current, whole);
@@ -119020,6 +119077,7 @@ init_account();
 init_read();
 init_anthropicUsageRefresh();
 init_middleware();
+init_rateLimit();
 init_realAnthropicUsageProbe();
 init_store2();
 var DAY_MS3 = 864e5;
@@ -119052,13 +119110,19 @@ function formatWindow(label, window) {
   const used = window.utilization === void 0 ? "usage unknown" : `${String(Math.round(window.utilization * PERCENT4))}% used`;
   return `${label} ${used}${window.resetsAt === void 0 ? "" : `, resets ${window.resetsAt}`}${window.status === void 0 ? "" : ` (${window.status})`}`;
 }
+function extraUsageParts(unified) {
+  const window = overageWindowOf(unified);
+  const measured = window?.utilization !== void 0 || window?.resetsAt !== void 0;
+  const fact = window === void 0 ? void 0 : measured ? formatWindow("extra usage", window) : `extra usage ${window.status ?? "unknown"}`;
+  return [...fact === void 0 ? [] : [fact], ...unified.overageDisabledReason === void 0 ? [] : [`extra usage disabled: ${unified.overageDisabledReason}`]];
+}
 function formatRateLimit(state) {
   const { unified } = state;
   if (unified === void 0) {
     return `rate-limit headers (as of ${state.observedAt}): ${Object.entries(state.headers).map(([name, value2]) => `${name}=${value2}`).join(", ")}`;
   }
   const parts = [formatWindow("5h", unified.fiveHour), formatWindow("7d", unified.sevenDay)].filter((part) => part !== void 0);
-  return `quota (as of ${state.observedAt}): ${[...parts, `status ${unified.status ?? "unknown"}`, ...unified.overageStatus === void 0 ? [] : [`extra usage ${unified.overageStatus}`]].join("; ")}`;
+  return `quota (as of ${state.observedAt}): ${[...parts, `status ${unified.status ?? "unknown"}`, ...extraUsageParts(unified)].join("; ")}`;
 }
 function formatLimit(limit) {
   const wait2 = [