audit-tools 0.28.0

package/dist/audit/quota/discoveredLimits.js

@@ -0,0 +1,91 @@
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { getQuotaStatePath } from "audit-tools/shared";
+function getCachePath() {
+    return join(dirname(getQuotaStatePath()), "discovered-limits.json");
+}
+export async function readDiscoveredLimitsCache() {
+    try {
+        const raw = await readFile(getCachePath(), "utf8");
+        const parsed = JSON.parse(raw);
+        if (parsed !== null &&
+            typeof parsed === "object" &&
+            !Array.isArray(parsed) &&
+            parsed["version"] === 1) {
+            return parsed;
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT") {
+            process.stderr.write(`[quota] ignoring unreadable discovered-limits cache (${getCachePath()}): ${error instanceof Error ? error.message : String(error)}\n`);
+        }
+    }
+    return { version: 1, entries: {} };
+}
+export async function writeDiscoveredLimitsCache(cache) {
+    const cachePath = getCachePath();
+    await mkdir(dirname(cachePath), { recursive: true });
+    await writeFile(cachePath, JSON.stringify(cache, null, 2) + "\n", "utf8");
+}
+export async function updateDiscoveredLimits(providerModelKey, limits) {
+    const cache = await readDiscoveredLimitsCache();
+    const existing = cache.entries[providerModelKey];
+    const entry = {
+        ...existing,
+        discovered_at: new Date().toISOString(),
+        source: limits.source,
+    };
+    if (limits.requests_per_minute != null) {
+        entry.requests_per_minute = limits.requests_per_minute;
+    }
+    if (limits.input_tokens_per_minute != null) {
+        entry.input_tokens_per_minute = limits.input_tokens_per_minute;
+    }
+    if (limits.output_tokens_per_minute != null) {
+        entry.output_tokens_per_minute = limits.output_tokens_per_minute;
+    }
+    // Skip the write if the effective limit values are unchanged (source/timestamp
+    // may differ, but only write when a numeric limit actually changed).
+    if (existing &&
+        existing.requests_per_minute === entry.requests_per_minute &&
+        existing.input_tokens_per_minute === entry.input_tokens_per_minute &&
+        existing.output_tokens_per_minute === entry.output_tokens_per_minute) {
+        return;
+    }
+    cache.entries[providerModelKey] = entry;
+    await writeDiscoveredLimitsCache(cache);
+}
+export async function lookupDiscoveredLimits(providerModelKey) {
+    const cache = await readDiscoveredLimitsCache();
+    const entry = cache.entries[providerModelKey];
+    if (!entry)
+        return null;
+    if (entry.requests_per_minute == null &&
+        entry.input_tokens_per_minute == null &&
+        entry.output_tokens_per_minute == null)
+        return null;
+    return {
+        requests_per_minute: entry.requests_per_minute ?? null,
+        input_tokens_per_minute: entry.input_tokens_per_minute ?? null,
+        output_tokens_per_minute: entry.output_tokens_per_minute ?? null,
+        source: entry.source,
+    };
+}
+export function mergeDiscoveredLimits(...sources) {
+    let merged = null;
+    for (const source of sources) {
+        if (!source)
+            continue;
+        if (!merged) {
+            merged = { ...source };
+            continue;
+        }
+        merged.requests_per_minute ??= source.requests_per_minute;
+        merged.input_tokens_per_minute ??= source.input_tokens_per_minute;
+        merged.output_tokens_per_minute ??= source.output_tokens_per_minute;
+        merged.context_tokens ??= source.context_tokens;
+        merged.output_tokens ??= source.output_tokens;
+    }
+    return merged;
+}
+//# sourceMappingURL=discoveredLimits.js.map

package/dist/audit/quota/discoveredLimits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discoveredLimits.js","sourceRoot":"","sources":["../../../src/audit/quota/discoveredLimits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AA0BvD,SAAS,YAAY;IACnB,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,MAAkC,CAAC,SAAS,CAAC,KAAK,CAAC,EACpD,CAAC;YACD,OAAO,MAA+B,CAAC;QACzC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wDAAwD,YAAY,EAAE,MACpE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAA4B;IAC3E,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,gBAAwB,EACxB,MAA4B;IAE5B,MAAM,KAAK,GAAG,MAAM,yBAAyB,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjD,MAAM,KAAK,GAA+B;QACxC,GAAG,QAAQ;QACX,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;IACF,IAAI,MAAM,CAAC,mBAAmB,IAAI,IAAI,EAAE,CAAC;QACvC,KAAK,CAAC,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,CAAC,uBAAuB,IAAI,IAAI,EAAE,CAAC;QAC3C,KAAK,CAAC,uBAAuB,GAAG,MAAM,CAAC,uBAAuB,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,CAAC,wBAAwB,IAAI,IAAI,EAAE,CAAC;QAC5C,KAAK,CAAC,wBAAwB,GAAG,MAAM,CAAC,wBAAwB,CAAC;IACnE,CAAC;IACD,+EAA+E;IAC/E,qEAAqE;IACrE,IACE,QAAQ;QACR,QAAQ,CAAC,mBAAmB,KAAK,KAAK,CAAC,mBAAmB;QAC1D,QAAQ,CAAC,uBAAuB,KAAK,KAAK,CAAC,uBAAuB;QAClE,QAAQ,CAAC,wBAAwB,KAAK,KAAK,CAAC,wBAAwB,EACpE,CAAC;QACD,OAAO;IACT,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC;IACxC,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,gBAAwB;IAExB,MAAM,KAAK,GAAG,MAAM,yBAAyB,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IACE,KAAK,CAAC,mBAAmB,IAAI,IAAI;QACjC,KAAK,CAAC,uBAAuB,IAAI,IAAI;QACrC,KAAK,CAAC,wBAAwB,IAAI,IAAI;QAEtC,OAAO,IAAI,CAAC;IACd,OAAO;QACL,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,IAAI,IAAI;QACtD,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,IAAI,IAAI;QAC9D,wBAAwB,EAAE,KAAK,CAAC,wBAAwB,IAAI,IAAI;QAChE,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,GAAG,OAAoD;IAEvD,IAAI,MAAM,GAAgC,IAAI,CAAC;IAC/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YACvB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,CAAC;QAC1D,MAAM,CAAC,uBAAuB,KAAK,MAAM,CAAC,uBAAuB,CAAC;QAClE,MAAM,CAAC,wBAAwB,KAAK,MAAM,CAAC,wBAAwB,CAAC;QACpE,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,CAAC;QAChD,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/audit/quota/headerExtraction.d.ts

@@ -0,0 +1,9 @@
+export interface ExtractedRateLimits {
+    requests_per_minute: number | null;
+    input_tokens_per_minute: number | null;
+    remaining_requests: number | null;
+    remaining_tokens: number | null;
+    reset_at: string | null;
+}
+export declare function extractRateLimitHeaders(text: string): ExtractedRateLimits | null;
+//# sourceMappingURL=headerExtraction.d.ts.map

package/dist/audit/quota/headerExtraction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headerExtraction.d.ts","sourceRoot":"","sources":["../../../src/audit/quota/headerExtraction.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AA0CD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CA+ChF"}

package/dist/audit/quota/headerExtraction.js

@@ -0,0 +1,148 @@
+const HEADER_PATTERNS = [
+    // Standard x-ratelimit-* (OpenAI, Anthropic, and others)
+    { pattern: /x-ratelimit-limit-requests:\s*(\d+)/i, field: "requests_per_minute" },
+    { pattern: /x-ratelimit-limit-tokens:\s*(\d+)/i, field: "input_tokens_per_minute" },
+    { pattern: /x-ratelimit-remaining-requests:\s*(\d+)/i, field: "remaining_requests" },
+    { pattern: /x-ratelimit-remaining-tokens:\s*(\d+)/i, field: "remaining_tokens" },
+    { pattern: /x-ratelimit-reset-requests:\s*(.+)/i, field: "reset_at", transform: parseResetValue },
+    { pattern: /x-ratelimit-reset-tokens:\s*(.+)/i, field: "reset_at", transform: parseResetValue },
+    // Anthropic-specific header naming
+    { pattern: /anthropic-ratelimit-requests-limit:\s*(\d+)/i, field: "requests_per_minute" },
+    { pattern: /anthropic-ratelimit-tokens-limit:\s*(\d+)/i, field: "input_tokens_per_minute" },
+    { pattern: /anthropic-ratelimit-requests-remaining:\s*(\d+)/i, field: "remaining_requests" },
+    { pattern: /anthropic-ratelimit-tokens-remaining:\s*(\d+)/i, field: "remaining_tokens" },
+    { pattern: /anthropic-ratelimit-requests-reset:\s*(.+)/i, field: "reset_at", transform: parseResetValue },
+    { pattern: /anthropic-ratelimit-tokens-reset:\s*(.+)/i, field: "reset_at", transform: parseResetValue },
+];
+function parseResetValue(value) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        return null;
+    // ISO timestamp
+    if (/^\d{4}-\d{2}-\d{2}/.test(trimmed))
+        return trimmed;
+    // Relative seconds (e.g. "42s", "42")
+    const seconds = parseFloat(trimmed);
+    if (Number.isFinite(seconds) && seconds > 0) {
+        return new Date(Date.now() + seconds * 1000).toISOString();
+    }
+    return trimmed;
+}
+function parseNumericValue(value) {
+    const n = parseInt(value, 10);
+    return Number.isFinite(n) && n >= 0 ? n : null;
+}
+export function extractRateLimitHeaders(text) {
+    const result = {
+        requests_per_minute: null,
+        input_tokens_per_minute: null,
+        remaining_requests: null,
+        remaining_tokens: null,
+        reset_at: null,
+    };
+    let found = false;
+    for (const { pattern, field, transform } of HEADER_PATTERNS) {
+        const match = pattern.exec(text);
+        if (!match || !match[1])
+            continue;
+        if (result[field] != null)
+            continue; // first match wins
+        if (transform) {
+            const transformed = transform(match[1]);
+            if (transformed != null) {
+                result[field] = transformed;
+                found = true;
+            }
+        }
+        else {
+            const numeric = parseNumericValue(match[1]);
+            if (numeric != null) {
+                result[field] = numeric;
+                found = true;
+            }
+        }
+    }
+    // Also try JSON objects that embed header-like fields
+    if (!found) {
+        const jsonResult = extractFromJson(text);
+        if (jsonResult)
+            return jsonResult;
+    }
+    if (!found && text.trim().length > 0) {
+        process.stderr.write(JSON.stringify({
+            event: "header_extraction_no_match",
+            reason: "no rate-limit data found in non-empty stderr text",
+            hint: "possible provider format change",
+        }) + "\n");
+    }
+    return found ? result : null;
+}
+function extractFromJson(text) {
+    const jsonPattern = /\{[^{}]*"(?:x-ratelimit|anthropic-ratelimit|ratelimit)[^{}]*\}/gi;
+    for (const match of text.matchAll(jsonPattern)) {
+        try {
+            const obj = JSON.parse(match[0]);
+            return extractFromHeaderObject(obj);
+        }
+        catch {
+            // not valid JSON
+        }
+    }
+    // Try line-by-line JSON (Claude Code stderr format)
+    for (const line of text.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed.startsWith("{"))
+            continue;
+        try {
+            const obj = JSON.parse(trimmed);
+            const headers = obj["headers"] ??
+                obj["response_headers"];
+            if (headers) {
+                const extracted = extractFromHeaderObject(headers);
+                if (extracted)
+                    return extracted;
+            }
+        }
+        catch {
+            // not valid JSON
+        }
+    }
+    return null;
+}
+function extractFromHeaderObject(headers) {
+    const get = (keys) => {
+        for (const key of keys) {
+            const val = headers[key] ?? headers[key.toLowerCase()];
+            if (val != null) {
+                const n = typeof val === "number" ? val : parseInt(String(val), 10);
+                if (Number.isFinite(n) && n >= 0)
+                    return n;
+            }
+        }
+        return null;
+    };
+    const rpm = get([
+        "x-ratelimit-limit-requests",
+        "anthropic-ratelimit-requests-limit",
+    ]);
+    const tpm = get([
+        "x-ratelimit-limit-tokens",
+        "anthropic-ratelimit-tokens-limit",
+    ]);
+    if (rpm == null && tpm == null)
+        return null;
+    return {
+        requests_per_minute: rpm,
+        input_tokens_per_minute: tpm,
+        remaining_requests: get([
+            "x-ratelimit-remaining-requests",
+            "anthropic-ratelimit-requests-remaining",
+        ]),
+        remaining_tokens: get([
+            "x-ratelimit-remaining-tokens",
+            "anthropic-ratelimit-tokens-remaining",
+        ]),
+        reset_at: null,
+    };
+}
+//# sourceMappingURL=headerExtraction.js.map

package/dist/audit/quota/headerExtraction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headerExtraction.js","sourceRoot":"","sources":["../../../src/audit/quota/headerExtraction.ts"],"names":[],"mappings":"AAQA,MAAM,eAAe,GAIhB;IACH,yDAAyD;IACzD,EAAE,OAAO,EAAE,sCAAsC,EAAE,KAAK,EAAE,qBAAqB,EAAE;IACjF,EAAE,OAAO,EAAE,oCAAoC,EAAE,KAAK,EAAE,yBAAyB,EAAE;IACnF,EAAE,OAAO,EAAE,0CAA0C,EAAE,KAAK,EAAE,oBAAoB,EAAE;IACpF,EAAE,OAAO,EAAE,wCAAwC,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAChF,EAAE,OAAO,EAAE,qCAAqC,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE;IACjG,EAAE,OAAO,EAAE,mCAAmC,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE;IAE/F,mCAAmC;IACnC,EAAE,OAAO,EAAE,8CAA8C,EAAE,KAAK,EAAE,qBAAqB,EAAE;IACzF,EAAE,OAAO,EAAE,4CAA4C,EAAE,KAAK,EAAE,yBAAyB,EAAE;IAC3F,EAAE,OAAO,EAAE,kDAAkD,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC5F,EAAE,OAAO,EAAE,gDAAgD,EAAE,KAAK,EAAE,kBAAkB,EAAE;IACxF,EAAE,OAAO,EAAE,6CAA6C,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE;IACzG,EAAE,OAAO,EAAE,2CAA2C,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE;CACxG,CAAC;AAEF,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,gBAAgB;IAChB,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvD,sCAAsC;IACtC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,MAAM,GAAwB;QAClC,mBAAmB,EAAE,IAAI;QACzB,uBAAuB,EAAE,IAAI;QAC7B,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,IAAI;QACtB,QAAQ,EAAE,IAAI;KACf,CAAC;IAEF,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,eAAe,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,SAAS;QAClC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI;YAAE,SAAS,CAAC,mBAAmB;QAExD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;gBACvB,MAA6C,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;gBACpE,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;gBACnB,MAA6C,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;gBAChE,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,4BAA4B;YACnC,MAAM,EAAE,mDAAmD;YAC3D,IAAI,EAAE,iCAAiC;SACxC,CAAC,GAAG,IAAI,CACV,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,WAAW,GAAG,kEAAkE,CAAC;IACvF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAA4B,CAAC;YAC5D,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;YAC3D,MAAM,OAAO,GACV,GAAG,CAAC,SAAS,CAAyC;gBACtD,GAAG,CAAC,kBAAkB,CAAyC,CAAC;YACnE,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACnD,IAAI,SAAS;oBAAE,OAAO,SAAS,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgC;IAC/D,MAAM,GAAG,GAAG,CAAC,IAAc,EAAiB,EAAE;QAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YACvD,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;gBAChB,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpE,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,GAAG,CAAC;QACd,4BAA4B;QAC5B,oCAAoC;KACrC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,GAAG,CAAC;QACd,0BAA0B;QAC1B,kCAAkC;KACnC,CAAC,CAAC;IAEH,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAE5C,OAAO;QACL,mBAAmB,EAAE,GAAG;QACxB,uBAAuB,EAAE,GAAG;QAC5B,kBAAkB,EAAE,GAAG,CAAC;YACtB,gCAAgC;YAChC,wCAAwC;SACzC,CAAC;QACF,gBAAgB,EAAE,GAAG,CAAC;YACpB,8BAA8B;YAC9B,sCAAsC;SACvC,CAAC;QACF,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC"}

package/dist/audit/quota/headerExtractors/claudeCodeHeaderExtractor.d.ts

@@ -0,0 +1,7 @@
+import type { ExtractedRateLimits } from "../headerExtraction.js";
+import type { HeaderExtractor } from "./genericHeaderExtractor.js";
+export declare class ClaudeCodeHeaderExtractor implements HeaderExtractor {
+    readonly name = "claude-code";
+    extract(stderr: string): ExtractedRateLimits | null;
+}
+//# sourceMappingURL=claudeCodeHeaderExtractor.d.ts.map

package/dist/audit/quota/headerExtractors/claudeCodeHeaderExtractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeCodeHeaderExtractor.d.ts","sourceRoot":"","sources":["../../../../src/audit/quota/headerExtractors/claudeCodeHeaderExtractor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAInE,qBAAa,yBAA0B,YAAW,eAAe;IAC/D,QAAQ,CAAC,IAAI,iBAAiB;IAE9B,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;CAyBpD"}

package/dist/audit/quota/headerExtractors/claudeCodeHeaderExtractor.js

@@ -0,0 +1,27 @@
+import { extractRateLimitHeaders } from "../headerExtraction.js";
+import { collectClaudeCodeJsonLines } from "audit-tools/shared";
+export class ClaudeCodeHeaderExtractor {
+    name = "claude-code";
+    extract(stderr) {
+        // Claude Code emits structured JSON lines to stderr. Reuse the shared
+        // claude-code JSON-line scan, then keep only the objects that carry header
+        // data and feed them to the agnostic parser.
+        const candidates = collectClaudeCodeJsonLines(stderr)
+            .filter((obj) => obj["headers"] || obj["response_headers"])
+            .map((obj) => JSON.stringify(obj));
+        if (candidates.length > 0) {
+            return extractRateLimitHeaders(candidates.join("\n"));
+        }
+        // Fall back to scanning the full text for raw header lines
+        if (stderr.trim().length > 0) {
+            process.stderr.write(JSON.stringify({
+                event: "header_extractor_fallback",
+                provider: this.name,
+                reason: "no structured JSON lines with headers/response_headers found in non-empty stderr",
+                fallback: "raw-text scan",
+            }) + "\n");
+        }
+        return extractRateLimitHeaders(stderr);
+    }
+}
+//# sourceMappingURL=claudeCodeHeaderExtractor.js.map

package/dist/audit/quota/headerExtractors/claudeCodeHeaderExtractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeCodeHeaderExtractor.js","sourceRoot":"","sources":["../../../../src/audit/quota/headerExtractors/claudeCodeHeaderExtractor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAEhE,MAAM,OAAO,yBAAyB;IAC3B,IAAI,GAAG,aAAa,CAAC;IAE9B,OAAO,CAAC,MAAc;QACpB,sEAAsE;QACtE,2EAA2E;QAC3E,6CAA6C;QAC7C,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC;aAClD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;aAC1D,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAErC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,uBAAuB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,2DAA2D;QAC3D,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,2BAA2B;gBAClC,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,kFAAkF;gBAC1F,QAAQ,EAAE,eAAe;aAC1B,CAAC,GAAG,IAAI,CACV,CAAC;QACJ,CAAC;QACD,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/audit/quota/headerExtractors/genericHeaderExtractor.d.ts

@@ -0,0 +1,10 @@
+import type { ExtractedRateLimits } from "../headerExtraction.js";
+export interface HeaderExtractor {
+    readonly name: string;
+    extract(stderr: string): ExtractedRateLimits | null;
+}
+export declare class GenericHeaderExtractor implements HeaderExtractor {
+    readonly name = "generic";
+    extract(stderr: string): ExtractedRateLimits | null;
+}
+//# sourceMappingURL=genericHeaderExtractor.d.ts.map

package/dist/audit/quota/headerExtractors/genericHeaderExtractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"genericHeaderExtractor.d.ts","sourceRoot":"","sources":["../../../../src/audit/quota/headerExtractors/genericHeaderExtractor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAGlE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAAC;CACrD;AAED,qBAAa,sBAAuB,YAAW,eAAe;IAC5D,QAAQ,CAAC,IAAI,aAAa;IAE1B,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;CAGpD"}

package/dist/audit/quota/headerExtractors/genericHeaderExtractor.js

@@ -0,0 +1,8 @@
+import { extractRateLimitHeaders } from "../headerExtraction.js";
+export class GenericHeaderExtractor {
+    name = "generic";
+    extract(stderr) {
+        return extractRateLimitHeaders(stderr);
+    }
+}
+//# sourceMappingURL=genericHeaderExtractor.js.map

package/dist/audit/quota/headerExtractors/genericHeaderExtractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"genericHeaderExtractor.js","sourceRoot":"","sources":["../../../../src/audit/quota/headerExtractors/genericHeaderExtractor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAOjE,MAAM,OAAO,sBAAsB;IACxB,IAAI,GAAG,SAAS,CAAC;IAE1B,OAAO,CAAC,MAAc;QACpB,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/audit/quota/headerExtractors/index.d.ts

@@ -0,0 +1,6 @@
+export type { HeaderExtractor } from "./genericHeaderExtractor.js";
+export { GenericHeaderExtractor } from "./genericHeaderExtractor.js";
+export { ClaudeCodeHeaderExtractor } from "./claudeCodeHeaderExtractor.js";
+import type { HeaderExtractor } from "./genericHeaderExtractor.js";
+export declare const getHeaderExtractorForProvider: (providerName: string) => HeaderExtractor;
+//# sourceMappingURL=index.d.ts.map

package/dist/audit/quota/headerExtractors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/audit/quota/headerExtractors/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAWnE,eAAO,MAAM,6BAA6B,2CAIvC,CAAC"}

package/dist/audit/quota/headerExtractors/index.js

@@ -0,0 +1,11 @@
+export { GenericHeaderExtractor } from "./genericHeaderExtractor.js";
+export { ClaudeCodeHeaderExtractor } from "./claudeCodeHeaderExtractor.js";
+import { GenericHeaderExtractor } from "./genericHeaderExtractor.js";
+import { ClaudeCodeHeaderExtractor } from "./claudeCodeHeaderExtractor.js";
+import { makeProviderKeyedFactory } from "audit-tools/shared";
+const PROVIDER_EXTRACTORS = {
+    "claude-code": new ClaudeCodeHeaderExtractor(),
+};
+const genericExtractor = new GenericHeaderExtractor();
+export const getHeaderExtractorForProvider = makeProviderKeyedFactory(PROVIDER_EXTRACTORS, genericExtractor);
+//# sourceMappingURL=index.js.map

package/dist/audit/quota/headerExtractors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/audit/quota/headerExtractors/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAG3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,MAAM,mBAAmB,GAAoC;IAC3D,aAAa,EAAE,IAAI,yBAAyB,EAAE;CAC/C,CAAC;AAEF,MAAM,gBAAgB,GAAG,IAAI,sBAAsB,EAAE,CAAC;AAEtD,MAAM,CAAC,MAAM,6BAA6B,GACxC,wBAAwB,CACtB,mBAAmB,EACnB,gBAAgB,CACjB,CAAC"}

package/dist/audit/quota/hostLimits.d.ts

@@ -0,0 +1,8 @@
+import type { SessionConfig, HostConcurrencyLimit } from "audit-tools/shared";
+export declare function detectHostActiveSubagentLimit(env?: NodeJS.ProcessEnv): HostConcurrencyLimit | null;
+export declare function resolveHostActiveSubagentLimit(options: {
+    explicitLimit?: number | null;
+    sessionConfig: SessionConfig;
+    env?: NodeJS.ProcessEnv;
+}): HostConcurrencyLimit | null;
+//# sourceMappingURL=hostLimits.d.ts.map

package/dist/audit/quota/hostLimits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostLimits.d.ts","sourceRoot":"","sources":["../../../src/audit/quota/hostLimits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAQ9E,wBAAgB,6BAA6B,CAC3C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,oBAAoB,GAAG,IAAI,CAE7B;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE;IACtD,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,oBAAoB,GAAG,IAAI,CAE9B"}

package/dist/audit/quota/hostLimits.js

@@ -0,0 +1,9 @@
+import { detectHostActiveSubagentLimit as detectShared, resolveHostActiveSubagentLimit as resolveShared, } from "audit-tools/shared";
+const ENV_PREFIX = "AUDIT_CODE";
+export function detectHostActiveSubagentLimit(env = process.env) {
+    return detectShared(ENV_PREFIX, env);
+}
+export function resolveHostActiveSubagentLimit(options) {
+    return resolveShared({ envPrefix: ENV_PREFIX, ...options });
+}
+//# sourceMappingURL=hostLimits.js.map

package/dist/audit/quota/hostLimits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostLimits.js","sourceRoot":"","sources":["../../../src/audit/quota/hostLimits.ts"],"names":[],"mappings":"AACA,OAAO,EACL,6BAA6B,IAAI,YAAY,EAC7C,8BAA8B,IAAI,aAAa,GAChD,MAAM,oBAAoB,CAAC;AAE5B,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC,MAAM,UAAU,6BAA6B,CAC3C,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAI9C;IACC,OAAO,aAAa,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC"}