audit-tools 0.28.0

package/dist/shared/quota/claudeOAuthQuotaSource.d.ts

@@ -0,0 +1,56 @@
+import type { QuotaUsageSnapshot } from "./quotaSource.js";
+import { BaseHttpQuotaSource, parseProviderModelKey, type HttpQuotaSourceOptions, type UsageFetchContext } from "./httpQuotaSource.js";
+export { parseProviderModelKey };
+/** Defensive subset of one `/usage` `limits[]` entry. */
+interface UsageLimitEntry {
+    percent?: number | null;
+    resets_at?: string | null;
+    scope?: {
+        model?: {
+            id?: string | null;
+            display_name?: string | null;
+        } | null;
+    } | null;
+}
+/** Defensive subset of a top-level `/usage` window (five_hour, seven_day, …). */
+interface UsageWindow {
+    utilization?: number | null;
+    resets_at?: string | null;
+}
+interface UsageResponse {
+    five_hour?: UsageWindow | null;
+    seven_day?: UsageWindow | null;
+    limits?: UsageLimitEntry[] | null;
+}
+export interface ClaudeOAuthQuotaSourceOptions extends HttpQuotaSourceOptions {
+    /** Defaults to `~/.claude/.credentials.json`. */
+    credentialsPath?: string;
+    /** Override the provider-name gate (mainly for tests). */
+    claudeProviderNames?: Iterable<string>;
+}
+export declare class ClaudeOAuthQuotaSource extends BaseHttpQuotaSource {
+    readonly name = "claude-oauth";
+    private readonly credentialsPath;
+    private readonly providerNames;
+    constructor(options?: ClaudeOAuthQuotaSourceOptions);
+    protected handlesProvider(provider: string): boolean;
+    protected fetchSnapshot(_provider: string, model: string | null, nowMs: number): Promise<QuotaUsageSnapshot | null>;
+    /** Reads a non-expired access token from the local credential file, or null. */
+    private readAccessToken;
+}
+/**
+ * Reusable Claude `/usage` probe (no creds-file read, no guard) — used by the
+ * source above and by the OpenCode broker with OpenCode's stored anthropic token.
+ * The `User-Agent: claude-…` header materially matters: without a first-party-shaped
+ * UA the request lands in an aggressively rate-limited bucket.
+ */
+export declare function fetchClaudeUsage(creds: {
+    accessToken: string;
+    model: string | null;
+}, ctx: UsageFetchContext): Promise<QuotaUsageSnapshot | null>;
+/**
+ * Maps a `/usage` response to the most-constraining remaining-quota snapshot.
+ * `remaining_pct` is a 0–1 FRACTION (scheduler thresholds 0.1/0.3).
+ */
+export declare function mapUsageToSnapshot(body: UsageResponse, model: string | null, nowMs: number): QuotaUsageSnapshot | null;
+//# sourceMappingURL=claudeOAuthQuotaSource.d.ts.map

package/dist/shared/quota/claudeOAuthQuotaSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeOAuthQuotaSource.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/claudeOAuthQuotaSource.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,mBAAmB,EAGnB,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACvB,MAAM,sBAAsB,CAAC;AAgB9B,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAEjC,yDAAyD;AACzD,UAAU,eAAe;IACvB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACxF;AACD,iFAAiF;AACjF,UAAU,WAAW;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AACD,UAAU,aAAa;IACrB,SAAS,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;CACnC;AAKD,MAAM,WAAW,6BAA8B,SAAQ,sBAAsB;IAC3E,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACxC;AAED,qBAAa,sBAAuB,SAAQ,mBAAmB;IAC7D,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAc;gBAEhC,OAAO,GAAE,6BAAkC;IAOvD,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;cAIpC,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAMrC,gFAAgF;IAChF,OAAO,CAAC,eAAe;CAkBxB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EACpD,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAYpC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,KAAK,EAAE,MAAM,GACZ,kBAAkB,GAAG,IAAI,CAY3B"}

package/dist/shared/quota/claudeOAuthQuotaSource.js

@@ -0,0 +1,136 @@
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+import { BaseHttpQuotaSource, fetchJsonOrNull, clampFraction, parseProviderModelKey, } from "./httpQuotaSource.js";
+/**
+ * Proactive Claude-subscription quota source — reads the local Claude OAuth
+ * credential and queries the undocumented `api.anthropic.com/api/oauth/usage`
+ * endpoint (the only proactive remaining-quota signal Claude Code exposes),
+ * mapping the most-constraining window to a {@link QuotaUsageSnapshot}. The
+ * cross-cutting cache/guard/degrade behavior lives in {@link BaseHttpQuotaSource}.
+ */
+const CLAUDE_PROVIDER_NAMES = new Set(["claude-code", "claude"]);
+const USAGE_ENDPOINT = "https://api.anthropic.com/api/oauth/usage";
+const OAUTH_BETA_HEADER = "oauth-2025-04-20";
+const DEFAULT_USER_AGENT = "claude-cli (external, cli)";
+// Re-exported for back-compat (tests + index import these from here).
+export { parseProviderModelKey };
+export class ClaudeOAuthQuotaSource extends BaseHttpQuotaSource {
+    name = "claude-oauth";
+    credentialsPath;
+    providerNames;
+    constructor(options = {}) {
+        super(options, DEFAULT_USER_AGENT);
+        this.credentialsPath =
+            options.credentialsPath ?? path.join(homedir(), ".claude", ".credentials.json");
+        this.providerNames = new Set(options.claudeProviderNames ?? CLAUDE_PROVIDER_NAMES);
+    }
+    handlesProvider(provider) {
+        return this.providerNames.has(provider);
+    }
+    async fetchSnapshot(_provider, model, nowMs) {
+        const accessToken = this.readAccessToken(nowMs);
+        if (!accessToken)
+            return null;
+        return fetchClaudeUsage({ accessToken, model }, this.fetchContext());
+    }
+    /** Reads a non-expired access token from the local credential file, or null. */
+    readAccessToken(nowMs) {
+        let raw;
+        try {
+            raw = readFileSync(this.credentialsPath, "utf8");
+        }
+        catch {
+            return null; // missing file (e.g. creds in an OS keychain) → degrade
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            return null;
+        }
+        const oauth = parsed.claudeAiOauth;
+        if (!oauth?.accessToken)
+            return null;
+        if (typeof oauth.expiresAt === "number" && nowMs >= oauth.expiresAt)
+            return null;
+        return oauth.accessToken;
+    }
+}
+/**
+ * Reusable Claude `/usage` probe (no creds-file read, no guard) — used by the
+ * source above and by the OpenCode broker with OpenCode's stored anthropic token.
+ * The `User-Agent: claude-…` header materially matters: without a first-party-shaped
+ * UA the request lands in an aggressively rate-limited bucket.
+ */
+export async function fetchClaudeUsage(creds, ctx) {
+    const body = await fetchJsonOrNull(ctx.fetchImpl, USAGE_ENDPOINT, {
+        method: "GET",
+        headers: {
+            Authorization: `Bearer ${creds.accessToken}`,
+            "anthropic-beta": OAUTH_BETA_HEADER,
+            "User-Agent": ctx.userAgent,
+            Accept: "application/json",
+        },
+    });
+    if (body == null)
+        return null;
+    return mapUsageToSnapshot(body, creds.model, ctx.now());
+}
+/**
+ * Maps a `/usage` response to the most-constraining remaining-quota snapshot.
+ * `remaining_pct` is a 0–1 FRACTION (scheduler thresholds 0.1/0.3).
+ */
+export function mapUsageToSnapshot(body, model, nowMs) {
+    const binding = pickBindingWindow(body, model);
+    if (binding == null)
+        return null;
+    return {
+        // (100 - util)/100 (not 1 - util/100) so integer percents stay exact: 20/100 === 0.2.
+        remaining_pct: clampFraction((100 - binding.utilization) / 100),
+        reset_at: binding.resets_at ?? null,
+        requests_remaining: null,
+        tokens_remaining: null,
+        captured_at: new Date(nowMs).toISOString(),
+        source: "claude-oauth",
+    };
+}
+/** The window closest to its cap (highest utilization) across limits[] + top-level windows. */
+function pickBindingWindow(body, model) {
+    const candidates = [];
+    for (const lim of Array.isArray(body.limits) ? body.limits : []) {
+        if (typeof lim?.percent !== "number")
+            continue;
+        if (!limitAppliesToModel(lim, model))
+            continue;
+        candidates.push({ utilization: lim.percent, resets_at: lim.resets_at ?? null });
+    }
+    for (const w of topLevelWindows(body)) {
+        if (typeof w.utilization === "number") {
+            candidates.push({ utilization: w.utilization, resets_at: w.resets_at ?? null });
+        }
+    }
+    if (candidates.length === 0)
+        return null;
+    return candidates.reduce((a, b) => (b.utilization > a.utilization ? b : a));
+}
+function limitAppliesToModel(lim, model) {
+    const scopeModel = lim.scope?.model?.display_name ?? lim.scope?.model?.id ?? null;
+    if (!scopeModel)
+        return true; // unscoped → applies to everything
+    if (!model)
+        return false; // model-scoped but our model is unknown → skip
+    return model.toLowerCase().includes(String(scopeModel).toLowerCase());
+}
+// Aggregate windows only. Per-model constraints come from the data-driven
+// `limits[].scope.model` entries — never hardcoded model-family names (INV-QD-04).
+function topLevelWindows(body) {
+    const out = [];
+    if (body.five_hour)
+        out.push(body.five_hour);
+    if (body.seven_day)
+        out.push(body.seven_day);
+    return out;
+}
+//# sourceMappingURL=claudeOAuthQuotaSource.js.map

package/dist/shared/quota/claudeOAuthQuotaSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeOAuthQuotaSource.js","sourceRoot":"","sources":["../../../src/shared/quota/claudeOAuthQuotaSource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,qBAAqB,GAGtB,MAAM,sBAAsB,CAAC;AAE9B;;;;;;GAMG;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;AACjE,MAAM,cAAc,GAAG,2CAA2C,CAAC;AACnE,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAC7C,MAAM,kBAAkB,GAAG,4BAA4B,CAAC;AAExD,sEAAsE;AACtE,OAAO,EAAE,qBAAqB,EAAE,CAAC;AA6BjC,MAAM,OAAO,sBAAuB,SAAQ,mBAAmB;IACpD,IAAI,GAAG,cAAc,CAAC;IACd,eAAe,CAAS;IACxB,aAAa,CAAc;IAE5C,YAAY,UAAyC,EAAE;QACrD,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACnC,IAAI,CAAC,eAAe;YAClB,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAClF,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,IAAI,qBAAqB,CAAC,CAAC;IACrF,CAAC;IAES,eAAe,CAAC,QAAgB;QACxC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAES,KAAK,CAAC,aAAa,CAC3B,SAAiB,EACjB,KAAoB,EACpB,KAAa;QAEb,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,gBAAgB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,gFAAgF;IACxE,eAAe,CAAC,KAAa;QACnC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,wDAAwD;QACvE,CAAC;QACD,IAAI,MAA8B,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,WAAW;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QACjF,OAAO,KAAK,CAAC,WAAW,CAAC;IAC3B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAoD,EACpD,GAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE;QAChE,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE;YAC5C,gBAAgB,EAAE,iBAAiB;YACnC,YAAY,EAAE,GAAG,CAAC,SAAS;YAC3B,MAAM,EAAE,kBAAkB;SAC3B;KACF,CAAC,CAAC;IACH,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,kBAAkB,CAAC,IAAqB,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAmB,EACnB,KAAoB,EACpB,KAAa;IAEb,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO;QACL,sFAAsF;QACtF,aAAa,EAAE,aAAa,CAAC,CAAC,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC;QAC/D,QAAQ,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;QACnC,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,IAAI;QACtB,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;QAC1C,MAAM,EAAE,cAAc;KACvB,CAAC;AACJ,CAAC;AAOD,+FAA+F;AAC/F,SAAS,iBAAiB,CAAC,IAAmB,EAAE,KAAoB;IAClE,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAChE,IAAI,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ;YAAE,SAAS;QAC/C,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC;YAAE,SAAS;QAC/C,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAoB,EAAE,KAAoB;IACrE,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,IAAI,CAAC;IAClF,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,CAAC,mCAAmC;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,+CAA+C;IACzE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,0EAA0E;AAC1E,mFAAmF;AACnF,SAAS,eAAe,CAAC,IAAmB;IAC1C,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,IAAI,IAAI,CAAC,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/shared/quota/codexQuotaSource.d.ts

@@ -0,0 +1,49 @@
+import type { QuotaUsageSnapshot } from "./quotaSource.js";
+import { BaseHttpQuotaSource, type HttpQuotaSourceOptions, type UsageFetchContext } from "./httpQuotaSource.js";
+interface CodexWindow {
+    used_percent?: number | null;
+    reset_at?: number | null;
+    reset_after_seconds?: number | null;
+    limit_window_seconds?: number | null;
+}
+interface CodexUsageResponse {
+    plan_type?: string;
+    rate_limit?: {
+        allowed?: boolean;
+        limit_reached?: boolean;
+        primary_window?: CodexWindow | null;
+        secondary_window?: CodexWindow | null;
+    } | null;
+}
+export interface CodexQuotaSourceOptions extends HttpQuotaSourceOptions {
+    /** Defaults to `~/.codex/auth.json`. */
+    credentialsPath?: string;
+    /** Override the provider-name gate (mainly for tests). */
+    codexProviderNames?: Iterable<string>;
+}
+export declare class CodexQuotaSource extends BaseHttpQuotaSource {
+    readonly name = "codex";
+    private readonly credentialsPath;
+    private readonly providerNames;
+    constructor(options?: CodexQuotaSourceOptions);
+    protected handlesProvider(provider: string): boolean;
+    protected fetchSnapshot(): Promise<QuotaUsageSnapshot | null>;
+    /** Reads `{ access_token, account_id }` from `~/.codex/auth.json`, or null. */
+    private readCredentials;
+}
+/**
+ * Reusable Codex `wham/usage` probe (no creds-file read, no guard) — used by the
+ * source above and by the OpenCode broker with OpenCode's stored openai token.
+ * Expiry isn't pre-checked: an expired token yields a non-200 → degrade.
+ */
+export declare function fetchCodexUsage(creds: {
+    accessToken: string;
+    accountId: string;
+}, ctx: UsageFetchContext): Promise<QuotaUsageSnapshot | null>;
+/**
+ * Maps a `wham/usage` payload to the most-constraining window. `remaining_pct` is
+ * a 0–1 fraction; `reset_at` is the absolute reset (unix seconds → ISO).
+ */
+export declare function mapCodexUsage(body: CodexUsageResponse, nowMs: number): QuotaUsageSnapshot | null;
+export {};
+//# sourceMappingURL=codexQuotaSource.d.ts.map

package/dist/shared/quota/codexQuotaSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexQuotaSource.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/codexQuotaSource.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,mBAAmB,EAGnB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACvB,MAAM,sBAAsB,CAAC;AAe9B,UAAU,WAAW;IACnB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AACD,UAAU,kBAAkB;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,cAAc,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;QACpC,gBAAgB,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;KACvC,GAAG,IAAI,CAAC;CACV;AAKD,MAAM,WAAW,uBAAwB,SAAQ,sBAAsB;IACrE,wCAAwC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACvC;AAED,qBAAa,gBAAiB,SAAQ,mBAAmB;IACvD,QAAQ,CAAC,IAAI,WAAW;IACxB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAc;gBAEhC,OAAO,GAAE,uBAA4B;IAMjD,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;cAIpC,aAAa,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAMnE,+EAA+E;IAC/E,OAAO,CAAC,eAAe;CAWxB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EACjD,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAapC;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAehG"}

package/dist/shared/quota/codexQuotaSource.js

@@ -0,0 +1,96 @@
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+import { BaseHttpQuotaSource, fetchJsonOrNull, remainingFromUsedPercent, } from "./httpQuotaSource.js";
+/**
+ * Proactive Codex (OpenAI ChatGPT-subscription) quota source. Reads the local
+ * Codex OAuth credential and GETs the undocumented
+ * `chatgpt.com/backend-api/wham/usage` endpoint — a free standalone probe the
+ * Codex CLI itself polls (no completion consumed). Two windows: `primary_window`
+ * (5h rolling) + `secondary_window` (weekly). Verified against `openai/codex`
+ * Rust source. Cross-cutting cache/guard/degrade live in {@link BaseHttpQuotaSource}.
+ */
+const CODEX_PROVIDER_NAMES = new Set(["codex"]);
+const USAGE_ENDPOINT = "https://chatgpt.com/backend-api/wham/usage";
+const DEFAULT_USER_AGENT = "codex_cli_rs (external, cli)";
+export class CodexQuotaSource extends BaseHttpQuotaSource {
+    name = "codex";
+    credentialsPath;
+    providerNames;
+    constructor(options = {}) {
+        super(options, DEFAULT_USER_AGENT);
+        this.credentialsPath = options.credentialsPath ?? path.join(homedir(), ".codex", "auth.json");
+        this.providerNames = new Set(options.codexProviderNames ?? CODEX_PROVIDER_NAMES);
+    }
+    handlesProvider(provider) {
+        return this.providerNames.has(provider);
+    }
+    async fetchSnapshot() {
+        const creds = this.readCredentials();
+        if (!creds)
+            return null;
+        return fetchCodexUsage(creds, this.fetchContext());
+    }
+    /** Reads `{ access_token, account_id }` from `~/.codex/auth.json`, or null. */
+    readCredentials() {
+        let parsed;
+        try {
+            parsed = JSON.parse(readFileSync(this.credentialsPath, "utf8"));
+        }
+        catch {
+            return null; // missing / unparseable → degrade
+        }
+        const t = parsed.tokens;
+        if (!t?.access_token || !t.account_id)
+            return null;
+        return { accessToken: t.access_token, accountId: t.account_id };
+    }
+}
+/**
+ * Reusable Codex `wham/usage` probe (no creds-file read, no guard) — used by the
+ * source above and by the OpenCode broker with OpenCode's stored openai token.
+ * Expiry isn't pre-checked: an expired token yields a non-200 → degrade.
+ */
+export async function fetchCodexUsage(creds, ctx) {
+    const body = await fetchJsonOrNull(ctx.fetchImpl, USAGE_ENDPOINT, {
+        method: "GET",
+        headers: {
+            Authorization: `Bearer ${creds.accessToken}`,
+            "ChatGPT-Account-Id": creds.accountId,
+            originator: "codex_cli_rs",
+            "User-Agent": ctx.userAgent,
+            Accept: "application/json",
+        },
+    });
+    if (body == null)
+        return null;
+    return mapCodexUsage(body, ctx.now());
+}
+/**
+ * Maps a `wham/usage` payload to the most-constraining window. `remaining_pct` is
+ * a 0–1 fraction; `reset_at` is the absolute reset (unix seconds → ISO).
+ */
+export function mapCodexUsage(body, nowMs) {
+    const rl = body.rate_limit;
+    const windows = [rl?.primary_window, rl?.secondary_window].filter((w) => !!w && typeof w.used_percent === "number");
+    if (windows.length === 0)
+        return null;
+    const binding = windows.reduce((a, b) => (b.used_percent > a.used_percent ? b : a));
+    return {
+        remaining_pct: remainingFromUsedPercent(binding.used_percent),
+        reset_at: codexResetAt(binding, nowMs),
+        requests_remaining: null,
+        tokens_remaining: null,
+        captured_at: new Date(nowMs).toISOString(),
+        source: "codex",
+    };
+}
+function codexResetAt(w, nowMs) {
+    if (typeof w.reset_at === "number")
+        return new Date(w.reset_at * 1000).toISOString();
+    if (typeof w.reset_after_seconds === "number") {
+        return new Date(nowMs + w.reset_after_seconds * 1000).toISOString();
+    }
+    return null;
+}
+//# sourceMappingURL=codexQuotaSource.js.map

package/dist/shared/quota/codexQuotaSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexQuotaSource.js","sourceRoot":"","sources":["../../../src/shared/quota/codexQuotaSource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,wBAAwB,GAGzB,MAAM,sBAAsB,CAAC;AAE9B;;;;;;;GAOG;AAEH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAChD,MAAM,cAAc,GAAG,4CAA4C,CAAC;AACpE,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AA4B1D,MAAM,OAAO,gBAAiB,SAAQ,mBAAmB;IAC9C,IAAI,GAAG,OAAO,CAAC;IACP,eAAe,CAAS;IACxB,aAAa,CAAc;IAE5C,YAAY,UAAmC,EAAE;QAC/C,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC9F,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,oBAAoB,CAAC,CAAC;IACnF,CAAC;IAES,eAAe,CAAC,QAAgB;QACxC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAES,KAAK,CAAC,aAAa;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,+EAA+E;IACvE,eAAe;QACrB,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAqB,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,kCAAkC;QACjD,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACxB,IAAI,CAAC,CAAC,EAAE,YAAY,IAAI,CAAC,CAAC,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QACnD,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IAClE,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAiD,EACjD,GAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE;QAChE,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE;YAC5C,oBAAoB,EAAE,KAAK,CAAC,SAAS;YACrC,UAAU,EAAE,cAAc;YAC1B,YAAY,EAAE,GAAG,CAAC,SAAS;YAC3B,MAAM,EAAE,kBAAkB;SAC3B;KACF,CAAC,CAAC;IACH,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,aAAa,CAAC,IAA0B,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAwB,EAAE,KAAa;IACnE,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,MAAM,OAAO,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,gBAAgB,CAAC,CAAC,MAAM,CAC/D,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CACnE,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAa,GAAG,CAAC,CAAC,YAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,OAAO;QACL,aAAa,EAAE,wBAAwB,CAAC,OAAO,CAAC,YAAsB,CAAC;QACvE,QAAQ,EAAE,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;QACtC,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,IAAI;QACtB,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;QAC1C,MAAM,EAAE,OAAO;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAc,EAAE,KAAa;IACjD,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACrF,IAAI,OAAO,CAAC,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/shared/quota/compositeQuotaSource.d.ts

@@ -0,0 +1,29 @@
+import type { QuotaSource, QuotaUsageSnapshot } from "./quotaSource.js";
+import { RunLogger } from "../observability/runLog.js";
+export interface BuildQuotaSourceOptions {
+    halfLifeHours?: number;
+    additionalSources?: QuotaSource[];
+    runLogger?: RunLogger;
+    /**
+     * The proactive Claude-subscription source, consulted ahead of all others.
+     * Defaults to a fresh {@link ClaudeOAuthQuotaSource}; pass `false` to disable
+     * it (e.g. tests) or a stub to inject one.
+     */
+    claudeOAuth?: QuotaSource | false;
+}
+export declare class CompositeQuotaSource implements QuotaSource {
+    readonly name = "composite";
+    private sources;
+    private runLogger;
+    constructor(sources: QuotaSource[], runLogger?: RunLogger);
+    queryCurrentUsage(providerModelKey: string): Promise<QuotaUsageSnapshot | null>;
+}
+/**
+ * Builds the standard runtime quota snapshot cascade.
+ *
+ * Order: proactive sources first (the Claude OAuth source, then any additional
+ * provider sources), then the learned reactive source as the fallback.
+ * CompositeQuotaSource skips throwing sources and returns the first snapshot.
+ */
+export declare function buildQuotaSource(options?: BuildQuotaSourceOptions): QuotaSource;
+//# sourceMappingURL=compositeQuotaSource.d.ts.map

package/dist/shared/quota/compositeQuotaSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compositeQuotaSource.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/compositeQuotaSource.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAOxE,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAEvD,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,WAAW,EAAE,CAAC;IAClC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;CACnC;AAED,qBAAa,oBAAqB,YAAW,WAAW;IACtD,QAAQ,CAAC,IAAI,eAAe;IAC5B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,SAAS,CAAY;gBAEjB,OAAO,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,EAAE,SAAS;IAKnD,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;CAiBtF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,WAAW,CAmBnF"}

package/dist/shared/quota/compositeQuotaSource.js

@@ -0,0 +1,58 @@
+import { LearnedQuotaSource } from "./learnedQuotaSource.js";
+import { ClaudeOAuthQuotaSource } from "./claudeOAuthQuotaSource.js";
+import { CodexQuotaSource } from "./codexQuotaSource.js";
+import { CopilotQuotaSource } from "./copilotQuotaSource.js";
+import { AntigravityQuotaSource } from "./antigravityQuotaSource.js";
+import { OpenCodeQuotaSource } from "./openCodeQuotaSource.js";
+import { RunLogger } from "../observability/runLog.js";
+export class CompositeQuotaSource {
+    name = "composite";
+    sources;
+    runLogger;
+    constructor(sources, runLogger) {
+        this.sources = sources;
+        this.runLogger = runLogger ?? RunLogger.disabled();
+    }
+    async queryCurrentUsage(providerModelKey) {
+        for (const source of this.sources) {
+            try {
+                const snapshot = await source.queryCurrentUsage(providerModelKey);
+                if (snapshot)
+                    return snapshot;
+            }
+            catch (err) {
+                // Skip failing sources, try next — but surface the failure so operators
+                // can detect a persistently failing quota source.
+                this.runLogger.event({
+                    kind: "error",
+                    phase: "quota",
+                    note: `quota source '${source.name}' threw querying ${providerModelKey}: ${err instanceof Error ? err.message : String(err)}`,
+                });
+            }
+        }
+        return null;
+    }
+}
+/**
+ * Builds the standard runtime quota snapshot cascade.
+ *
+ * Order: proactive sources first (the Claude OAuth source, then any additional
+ * provider sources), then the learned reactive source as the fallback.
+ * CompositeQuotaSource skips throwing sources and returns the first snapshot.
+ */
+export function buildQuotaSource(options = {}) {
+    const proactive = [];
+    if (options.claudeOAuth !== false) {
+        proactive.push(options.claudeOAuth ?? new ClaudeOAuthQuotaSource());
+    }
+    // Each proactive source gates by provider name (returns null with no I/O for a
+    // non-matching key), so registering all of them is safe: whichever provider's
+    // pool is dispatched, the matching source answers, the rest pass through.
+    proactive.push(new CodexQuotaSource(), new CopilotQuotaSource(), new AntigravityQuotaSource(), new OpenCodeQuotaSource());
+    return new CompositeQuotaSource([
+        ...proactive,
+        ...(options.additionalSources ?? []),
+        new LearnedQuotaSource(options.halfLifeHours ?? 24),
+    ], options.runLogger);
+}
+//# sourceMappingURL=compositeQuotaSource.js.map

package/dist/shared/quota/compositeQuotaSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compositeQuotaSource.js","sourceRoot":"","sources":["../../../src/shared/quota/compositeQuotaSource.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAcvD,MAAM,OAAO,oBAAoB;IACtB,IAAI,GAAG,WAAW,CAAC;IACpB,OAAO,CAAgB;IACvB,SAAS,CAAY;IAE7B,YAAY,OAAsB,EAAE,SAAqB;QACvD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,gBAAwB;QAC9C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;gBAClE,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAC;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,wEAAwE;gBACxE,kDAAkD;gBAClD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;oBACnB,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,iBAAiB,MAAM,CAAC,IAAI,oBAAoB,gBAAgB,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBAC9H,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAmC,EAAE;IACpE,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QAClC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,sBAAsB,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,+EAA+E;IAC/E,8EAA8E;IAC9E,0EAA0E;IAC1E,SAAS,CAAC,IAAI,CACZ,IAAI,gBAAgB,EAAE,EACtB,IAAI,kBAAkB,EAAE,EACxB,IAAI,sBAAsB,EAAE,EAC5B,IAAI,mBAAmB,EAAE,CAC1B,CAAC;IACF,OAAO,IAAI,oBAAoB,CAAC;QAC9B,GAAG,SAAS;QACZ,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC;QACpC,IAAI,kBAAkB,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;KACpD,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;AACxB,CAAC"}

package/dist/shared/quota/copilotQuotaSource.d.ts

@@ -0,0 +1,57 @@
+import type { QuotaUsageSnapshot } from "./quotaSource.js";
+import { BaseHttpQuotaSource, type HttpQuotaSourceOptions, type UsageFetchContext } from "./httpQuotaSource.js";
+interface CopilotQuotaDetail {
+    entitlement?: number | null;
+    remaining?: number | null;
+    percent_remaining?: number | null;
+    unlimited?: boolean | null;
+}
+interface CopilotUsageResponse {
+    quota_reset_date?: string | null;
+    quota_snapshots?: {
+        premium_interactions?: CopilotQuotaDetail | null;
+        chat?: CopilotQuotaDetail | null;
+    } | null;
+}
+export interface CopilotQuotaSourceOptions extends HttpQuotaSourceOptions {
+    /** Copilot CLI config (defaults to `$COPILOT_HOME`/`~/.copilot/config.json`). */
+    copilotConfigPath?: string;
+    /** `gh` CLI hosts file (defaults to `~/.config/gh/hosts.yml`). */
+    ghHostsPath?: string;
+    /** Injectable env (mainly for tests). */
+    env?: NodeJS.ProcessEnv;
+    /** Override the provider-name gate (mainly for tests). */
+    copilotProviderNames?: Iterable<string>;
+}
+/**
+ * Resolve the `gh` CLI `hosts.yml` path OS-agnostically. `gh` honors
+ * `GH_CONFIG_DIR` on every platform; absent that, its config dir is
+ * `%AppData%\GitHub CLI` on Windows and `~/.config/gh` on macOS/Linux. The prior
+ * hardcoded `~/.config/gh` missed the token on Windows (OS-agnostic invariant).
+ * Parameterized by `platform` + `home` (not read from the process) so it is a
+ * pure, cross-platform-testable function.
+ */
+export declare function resolveGhHostsPath(env: NodeJS.ProcessEnv, platform: NodeJS.Platform, home: string): string;
+export declare class CopilotQuotaSource extends BaseHttpQuotaSource {
+    readonly name = "copilot";
+    private readonly copilotConfigPath;
+    private readonly ghHostsPath;
+    private readonly env;
+    private readonly providerNames;
+    constructor(options?: CopilotQuotaSourceOptions);
+    protected handlesProvider(provider: string): boolean;
+    protected fetchSnapshot(): Promise<QuotaUsageSnapshot | null>;
+    /** Extracts a `gho_/ghu_` token from env / Copilot CLI / gh CLI, or null. */
+    private readGitHubToken;
+}
+/**
+ * Reusable Copilot usage probe (no token-file read, no guard) — used by the source
+ * above and by the OpenCode broker with OpenCode's stored github-copilot token.
+ */
+export declare function fetchCopilotUsage(creds: {
+    token: string;
+}, ctx: UsageFetchContext): Promise<QuotaUsageSnapshot | null>;
+/** Maps a `copilot_internal/user` snapshot (premium-requests preferred) → 0–1 remaining + reset. */
+export declare function mapCopilotUsage(body: CopilotUsageResponse, nowMs: number): QuotaUsageSnapshot | null;
+export {};
+//# sourceMappingURL=copilotQuotaSource.d.ts.map

package/dist/shared/quota/copilotQuotaSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"copilotQuotaSource.d.ts","sourceRoot":"","sources":["../../../src/shared/quota/copilotQuotaSource.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EACL,mBAAmB,EAGnB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACvB,MAAM,sBAAsB,CAAC;AA6B9B,UAAU,kBAAkB;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC5B;AACD,UAAU,oBAAoB;IAC5B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,eAAe,CAAC,EAAE;QAChB,oBAAoB,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;QACjD,IAAI,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;KAClC,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,yBAA0B,SAAQ,sBAAsB;IACvE,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yCAAyC;IACzC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,0DAA0D;IAC1D,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,IAAI,EAAE,MAAM,GACX,MAAM,CAQR;AAED,qBAAa,kBAAmB,SAAQ,mBAAmB;IACzD,QAAQ,CAAC,IAAI,aAAa;IAC1B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAc;gBAEhC,OAAO,GAAE,yBAA8B;IAUnD,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;cAIpC,aAAa,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAMnE,6EAA6E;IAC7E,OAAO,CAAC,eAAe;CAcxB;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EACxB,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAYpC;AAED,oGAAoG;AACpG,wBAAgB,eAAe,CAC7B,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,MAAM,GACZ,kBAAkB,GAAG,IAAI,CAqB3B"}