ftown 0.25.2 → 0.25.3

package/dist/quota/agy.js

@@ -0,0 +1,287 @@
+import { execFile } from 'node:child_process';
+import { constants } from 'node:fs';
+import { access, mkdtemp, rm, stat } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { delimiter, isAbsolute, join } from 'node:path';
+/**
+ * Google Antigravity (`agy` CLI) subscription quota provider.
+ *
+ * `agy -p /usage --output-format json` is handled locally by the CLI: it makes
+ * no model turn and spends no quota. The JSON envelope carries the limit
+ * buckets under `command.data.groups[].buckets[]`. The command runs in an empty
+ * scratch directory, so no project files are involved.
+ */
+const LOCAL_BIN_SEGMENTS = ['.local', 'bin', 'agy'];
+const BINARY_NAME = 'agy';
+const USAGE_ARGS = ['-p', '/usage', '--output-format', 'json'];
+const MAX_OUTPUT_BYTES = 16 * 1024 * 1024;
+const FIVE_HOUR_MINUTES = 300;
+const WEEKLY_MINUTES = 10080;
+const NOT_FOUND_MESSAGE = 'agy CLI not found';
+const NO_BUCKETS_MESSAGE = 'agy reported no usage buckets';
+const UNEXPECTED_OUTPUT_MESSAGE = 'unexpected output from `agy -p /usage`';
+const TIMED_OUT_MESSAGE = '`agy -p /usage` timed out';
+const FAILED_TO_START_MESSAGE = '`agy -p /usage` failed to start';
+const AUTH_MESSAGE = 'agy login problem: run `agy` and sign in';
+const TURN_MESSAGE = 'agy ran a model turn for /usage (unexpected)';
+const AUTH_PATTERN = /\b(log ?in|sign ?in|unauthori[sz]ed|unauthenticated|authenticat\w*)\b/i;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function nonEmptyString(value) {
+    return typeof value === 'string' && value.trim().length > 0 ? value : null;
+}
+function observedNow(options) {
+    try {
+        return options.now().toISOString();
+    }
+    catch {
+        return new Date().toISOString();
+    }
+}
+function failureQuota(status, message, observedAt) {
+    return {
+        provider: 'agy',
+        status,
+        plan: null,
+        windows: [],
+        source: 'live',
+        observedAt,
+        message,
+    };
+}
+/** True only for a regular file that the current user can execute. Never throws. */
+async function isExecutableFile(path) {
+    try {
+        await access(path, constants.X_OK);
+        return (await stat(path)).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Resolves the agy binary to an absolute path: first `<homeDir>/.local/bin/agy`
+ * (skipped when homeDir is empty or not absolute), then `agy` in each PATH
+ * entry. Empty and relative PATH entries are skipped. A candidate must be an
+ * executable regular file. Returns null when none matches. Never throws.
+ */
+export async function resolveAgyBinary(homeDir, pathValue) {
+    const candidates = [];
+    if (homeDir.length > 0 && isAbsolute(homeDir)) {
+        candidates.push(join(homeDir, ...LOCAL_BIN_SEGMENTS));
+    }
+    for (const dir of (pathValue ?? '').split(delimiter)) {
+        if (dir.length === 0 || !isAbsolute(dir))
+            continue;
+        candidates.push(join(dir, BINARY_NAME));
+    }
+    for (const candidate of candidates) {
+        if (await isExecutableFile(candidate))
+            return candidate;
+    }
+    return null;
+}
+/** Percent used from remaining_fraction: (1 - remaining) * 100, one decimal, clamped to 0..100. */
+function usedPercentOf(remaining) {
+    if (typeof remaining !== 'number' || !Number.isFinite(remaining))
+        return null;
+    const used = Math.round((1 - remaining) * 1000) / 10;
+    return Math.min(100, Math.max(0, used));
+}
+function isoOf(value) {
+    const text = nonEmptyString(value);
+    if (text === null)
+        return null;
+    const ms = Date.parse(text);
+    return Number.isNaN(ms) ? null : new Date(ms).toISOString();
+}
+function rankOf(usedPercent) {
+    return usedPercent === null ? -1 : usedPercent;
+}
+/**
+ * Pure: maps the parsed JSON envelope of `agy -p /usage --output-format json`
+ * onto a ProviderQuota. Windows keep the most used bucket per kind; scopedLimits
+ * list every usable bucket. Never throws.
+ */
+export function parseAgyUsage(body, observedAt) {
+    const command = isRecord(body) ? body.command : undefined;
+    const data = isRecord(command) ? command.data : undefined;
+    const groups = isRecord(data) ? data.groups : undefined;
+    if (!isRecord(body) || body.status !== 'SUCCESS' || !Array.isArray(groups)) {
+        return failureQuota('error', UNEXPECTED_OUTPUT_MESSAGE, observedAt);
+    }
+    const entries = [];
+    groups.forEach((group, groupIndex) => {
+        if (!isRecord(group) || !Array.isArray(group.buckets))
+            return;
+        const groupName = nonEmptyString(group.name);
+        for (const bucket of group.buckets) {
+            if (!isRecord(bucket))
+                continue;
+            const shape = bucket.window === '5h'
+                ? { kind: 'five_hour', windowMinutes: FIVE_HOUR_MINUTES }
+                : bucket.window === 'weekly'
+                    ? { kind: 'weekly', windowMinutes: WEEKLY_MINUTES }
+                    : null;
+            if (shape === null)
+                continue;
+            const label = groupName ?? nonEmptyString(bucket.name) ?? nonEmptyString(bucket.id) ?? 'unknown';
+            entries.push({
+                kind: shape.kind,
+                windowMinutes: shape.windowMinutes,
+                groupIndex,
+                label,
+                usedPercent: usedPercentOf(bucket.remaining_fraction),
+                resetsAt: isoOf(bucket.reset_time),
+            });
+        }
+    });
+    const windows = [];
+    for (const kind of ['five_hour', 'weekly']) {
+        const ofKind = entries.filter((entry) => entry.kind === kind);
+        if (ofKind.length === 0)
+            continue;
+        let best = ofKind[0];
+        for (const entry of ofKind.slice(1)) {
+            if (rankOf(entry.usedPercent) > rankOf(best.usedPercent))
+                best = entry;
+        }
+        const groupCount = new Set(ofKind.map((entry) => entry.groupIndex)).size;
+        windows.push({
+            kind,
+            usedPercent: best.usedPercent,
+            resetsAt: best.resetsAt,
+            windowMinutes: best.windowMinutes,
+            note: groupCount >= 2 ? `tightest: ${best.label}` : null,
+        });
+    }
+    const scopedLimits = entries.map((entry) => ({
+        scope: entry.label,
+        kind: entry.kind,
+        usedPercent: entry.usedPercent,
+        resetsAt: entry.resetsAt,
+    }));
+    const hasNumber = windows.some((window) => window.usedPercent !== null);
+    let message = hasNumber ? null : NO_BUCKETS_MESSAGE;
+    if (typeof body.num_turns === 'number' && body.num_turns > 0)
+        message = TURN_MESSAGE;
+    const quota = {
+        provider: 'agy',
+        status: hasNumber ? 'ok' : 'no_data',
+        plan: null,
+        windows,
+        source: 'live',
+        observedAt,
+        message,
+    };
+    if (scopedLimits.length > 0)
+        quota.scopedLimits = scopedLimits;
+    return quota;
+}
+/** Pure: extracts the JSON object from stdout: the whole text, else the last line starting with `{`. */
+function extractUsageJson(stdout) {
+    const trimmed = stdout.trim();
+    try {
+        const whole = JSON.parse(trimmed);
+        if (isRecord(whole))
+            return whole;
+    }
+    catch {
+        // fall through to line-by-line extraction
+    }
+    const lines = trimmed.split(/\r?\n/).map((line) => line.trim());
+    for (let i = lines.length - 1; i >= 0; i -= 1) {
+        if (!lines[i].startsWith('{'))
+            continue;
+        try {
+            const parsed = JSON.parse(lines[i]);
+            if (isRecord(parsed))
+                return parsed;
+        }
+        catch {
+            // not a JSON line; keep scanning upward
+        }
+    }
+    return undefined;
+}
+/** One `agy -p /usage` run in `cwd` (no shell). Resolves with a ProviderQuota; never rejects. */
+function execUsage(binary, cwd, timeoutMs, observedAt) {
+    return new Promise((resolve) => {
+        try {
+            execFile(binary, [...USAGE_ARGS], {
+                cwd,
+                timeout: timeoutMs,
+                killSignal: 'SIGKILL',
+                encoding: 'utf8',
+                maxBuffer: MAX_OUTPUT_BYTES,
+                windowsHide: true,
+            }, (error, stdout, stderr) => {
+                try {
+                    if (error) {
+                        const code = error.code;
+                        const killed = error.killed === true;
+                        if (killed) {
+                            resolve(failureQuota('error', TIMED_OUT_MESSAGE, observedAt));
+                            return;
+                        }
+                        if (code === 'ENOENT') {
+                            resolve(failureQuota('unavailable', NOT_FOUND_MESSAGE, observedAt));
+                            return;
+                        }
+                        if (AUTH_PATTERN.test(String(stderr))) {
+                            resolve(failureQuota('auth', AUTH_MESSAGE, observedAt));
+                            return;
+                        }
+                        const shown = typeof code === 'number' ? String(code) : 'unknown';
+                        resolve(failureQuota('error', `\`agy -p /usage\` failed (exit ${shown})`, observedAt));
+                        return;
+                    }
+                    const parsed = extractUsageJson(String(stdout));
+                    if (parsed === undefined) {
+                        resolve(failureQuota('error', UNEXPECTED_OUTPUT_MESSAGE, observedAt));
+                        return;
+                    }
+                    resolve(parseAgyUsage(parsed, observedAt));
+                }
+                catch {
+                    resolve(failureQuota('error', UNEXPECTED_OUTPUT_MESSAGE, observedAt));
+                }
+            });
+        }
+        catch {
+            resolve(failureQuota('error', FAILED_TO_START_MESSAGE, observedAt));
+        }
+    });
+}
+/** Runs /usage inside a fresh scratch directory and removes it afterwards. Never rejects. */
+async function runAgyUsage(binary, timeoutMs, observedAt) {
+    let scratch = null;
+    try {
+        scratch = await mkdtemp(join(tmpdir(), 'ftown-agy-usage-'));
+        return await execUsage(binary, scratch, timeoutMs, observedAt);
+    }
+    catch {
+        return failureQuota('error', FAILED_TO_START_MESSAGE, observedAt);
+    }
+    finally {
+        if (scratch !== null) {
+            await rm(scratch, { recursive: true, force: true }).catch(() => undefined);
+        }
+    }
+}
+/** Reads agy's own `/usage` report non-interactively. Never throws or rejects. */
+export const fetchAgyQuota = async (options) => {
+    const observedAt = observedNow(options);
+    let binary = null;
+    try {
+        binary = await resolveAgyBinary(options.homeDir, process.env.PATH);
+    }
+    catch {
+        binary = null;
+    }
+    if (binary === null)
+        return failureQuota('unavailable', NOT_FOUND_MESSAGE, observedAt);
+    return runAgyUsage(binary, options.timeoutMs, observedAt);
+};
+//# sourceMappingURL=agy.js.map

package/dist/quota/agy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agy.js","sourceRoot":"","sources":["../../src/quota/agy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAYxD;;;;;;;GAOG;AAEH,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAU,CAAC;AAC7D,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAU,CAAC;AACxE,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAC9C,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAC3D,MAAM,yBAAyB,GAAG,wCAAwC,CAAC;AAC3E,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AACtD,MAAM,uBAAuB,GAAG,iCAAiC,CAAC;AAClE,MAAM,YAAY,GAAG,0CAA0C,CAAC;AAChE,MAAM,YAAY,GAAG,8CAA8C,CAAC;AACpE,MAAM,YAAY,GAAG,wEAAwE,CAAC;AAI9F,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,OAA0B;IAC7C,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB,EAAE,OAAe,EAAE,UAAkB;IAC5E,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,MAAM;QACN,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,MAAM;QACd,UAAU;QACV,OAAO;KACR,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,SAA6B;IAE7B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACnD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,MAAM,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mGAAmG;AACnG,SAAS,aAAa,CAAC,SAAkB;IACvC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACrD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC;AAWD,SAAS,MAAM,CAAC,WAA0B;IACxC,OAAO,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAa,EAAE,UAAkB;IAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,YAAY,CAAC,OAAO,EAAE,yBAAyB,EAAE,UAAU,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;QACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO;QAC9D,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,SAAS;YAChC,MAAM,KAAK,GACT,MAAM,CAAC,MAAM,KAAK,IAAI;gBACpB,CAAC,CAAC,EAAE,IAAI,EAAE,WAAoB,EAAE,aAAa,EAAE,iBAAiB,EAAE;gBAClE,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;oBAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,aAAa,EAAE,cAAc,EAAE;oBAC5D,CAAC,CAAC,IAAI,CAAC;YACb,IAAI,KAAK,KAAK,IAAI;gBAAE,SAAS;YAC7B,MAAM,KAAK,GACT,SAAS,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,UAAU;gBACV,KAAK;gBACL,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,kBAAkB,CAAC;gBACrD,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;aACnC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAU,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,IAAI,GAAG,KAAK,CAAC;QACzE,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI;SACzD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAkB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1D,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC,CAAC;IAEJ,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;IACxE,IAAI,OAAO,GAAkB,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACnE,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC;QAAE,OAAO,GAAG,YAAY,CAAC;IAErF,MAAM,KAAK,GAAkB;QAC3B,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACpC,IAAI,EAAE,IAAI;QACV,OAAO;QACP,MAAM,EAAE,MAAM;QACd,UAAU;QACV,OAAO;KACR,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wGAAwG;AACxG,SAAS,gBAAgB,CAAC,MAAc;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iGAAiG;AACjG,SAAS,SAAS,CAAC,MAAc,EAAE,GAAW,EAAE,SAAiB,EAAE,UAAkB;IACnF,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,QAAQ,CACN,MAAM,EACN,CAAC,GAAG,UAAU,CAAC,EACf;gBACE,GAAG;gBACH,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,gBAAgB;gBAC3B,WAAW,EAAE,IAAI;aAClB,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACxB,IAAI,CAAC;oBACH,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;wBAChD,MAAM,MAAM,GAAI,KAA8B,CAAC,MAAM,KAAK,IAAI,CAAC;wBAC/D,IAAI,MAAM,EAAE,CAAC;4BACX,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC;4BAC9D,OAAO;wBACT,CAAC;wBACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACtB,OAAO,CAAC,YAAY,CAAC,aAAa,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC;4BACpE,OAAO;wBACT,CAAC;wBACD,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;4BACtC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;4BACxD,OAAO;wBACT,CAAC;wBACD,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBAClE,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,kCAAkC,KAAK,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;wBACvF,OAAO;oBACT,CAAC;oBACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;oBAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBACzB,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,yBAAyB,EAAE,UAAU,CAAC,CAAC,CAAC;wBACtE,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;gBAC7C,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,yBAAyB,EAAE,UAAU,CAAC,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,uBAAuB,EAAE,UAAU,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,SAAiB,EAAE,UAAkB;IAC9E,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC5D,OAAO,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC,OAAO,EAAE,uBAAuB,EAAE,UAAU,CAAC,CAAC;IACpE,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAiB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC3D,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC,aAAa,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC;IACvF,OAAO,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAC5D,CAAC,CAAC"}

package/dist/quota/annotate.d.ts

@@ -0,0 +1,5 @@
+import type { AnnotatedPick, AnnotatedTier, ModelRoutingConfig, ProviderModels, ProviderQuota, ProviderRouting, RoutingPick } from './types.js';
+/** Annotate one pick with the provider's live availability, scoped limits and model check. */
+export declare function annotatePick(pick: RoutingPick, quota: readonly ProviderQuota[], routing: readonly ProviderRouting[], models: readonly ProviderModels[]): AnnotatedPick;
+/** Annotate every tier of the user's routing config, keeping tier and pick order. */
+export declare function annotateTiers(config: ModelRoutingConfig, quota: readonly ProviderQuota[], routing: readonly ProviderRouting[], models: readonly ProviderModels[]): AnnotatedTier[];

package/dist/quota/annotate.js

@@ -0,0 +1,56 @@
+/** First entry for a provider, so duplicate provider rows resolve to the first one. */
+function firstFor(list, provider) {
+    return list.find((entry) => entry.provider === provider);
+}
+/** Annotate one pick with the provider's live availability, scoped limits and model check. */
+export function annotatePick(pick, quota, routing, models) {
+    const route = firstFor(routing, pick.provider);
+    const quotaRow = firstFor(quota, pick.provider);
+    const modelList = firstFor(models, pick.provider);
+    const availability = route ? route.availability : 'unknown';
+    const leftPercent = route ? route.leftPercent : null;
+    const resetsAt = route ? route.resetsAt : null;
+    const scopedLimits = (quotaRow?.scopedLimits ?? []).map((limit) => ({ ...limit }));
+    let modelName = null;
+    let problem = null;
+    const checked = modelList !== undefined && modelList.status === 'ok';
+    if (modelList && modelList.status === 'ok') {
+        const model = modelList.models.find((candidate) => candidate.id === pick.model);
+        if (!model) {
+            problem = `${pick.provider} no longer offers model "${pick.model}"`;
+        }
+        else {
+            modelName = model.name ?? null;
+            if (pick.effort !== null) {
+                if (model.efforts.length === 0) {
+                    problem = `model "${pick.model}" takes no effort setting`;
+                }
+                else if (!model.efforts.includes(pick.effort)) {
+                    problem = `model "${pick.model}" does not support effort "${pick.effort}"`;
+                }
+            }
+        }
+    }
+    return {
+        provider: pick.provider,
+        model: pick.model,
+        effort: pick.effort,
+        modelName,
+        availability,
+        leftPercent,
+        resetsAt,
+        scopedLimits,
+        problem,
+        checked,
+    };
+}
+/** Annotate every tier of the user's routing config, keeping tier and pick order. */
+export function annotateTiers(config, quota, routing, models) {
+    return config.tiers.map((tier) => ({
+        name: tier.name,
+        description: tier.description,
+        picks: tier.picks.map((pick) => annotatePick(pick, quota, routing, models)),
+        guidance: typeof tier.guidance === 'string' ? tier.guidance : '',
+    }));
+}
+//# sourceMappingURL=annotate.js.map

package/dist/quota/annotate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"annotate.js","sourceRoot":"","sources":["../../src/quota/annotate.ts"],"names":[],"mappings":"AAYA,uFAAuF;AACvF,SAAS,QAAQ,CACf,IAAkB,EAClB,QAAyB;IAEzB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,YAAY,CAC1B,IAAiB,EACjB,KAA+B,EAC/B,OAAmC,EACnC,MAAiC;IAEjC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAElD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IAEnF,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,MAAM,OAAO,GAAG,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC;IAErE,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,KAAK,GAA6B,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1G,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,GAAG,GAAG,IAAI,CAAC,QAAQ,4BAA4B,IAAI,CAAC,KAAK,GAAG,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC;YAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACzB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC/B,OAAO,GAAG,UAAU,IAAI,CAAC,KAAK,2BAA2B,CAAC;gBAC5D,CAAC;qBAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChD,OAAO,GAAG,UAAU,IAAI,CAAC,KAAK,8BAA8B,IAAI,CAAC,MAAM,GAAG,CAAC;gBAC7E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS;QACT,YAAY;QACZ,WAAW;QACX,QAAQ;QACR,YAAY;QACZ,OAAO;QACP,OAAO;KACR,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAC3B,MAA0B,EAC1B,KAA+B,EAC/B,OAAmC,EACnC,MAAiC;IAEjC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3E,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;KACjE,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/quota/claude.d.ts

@@ -0,0 +1,27 @@
+import type { ProviderQuota, QuotaFetcher } from './types.js';
+export interface ClaudeCredentials {
+    accessToken: string;
+    expiresAt: number | null;
+    plan: string | null;
+}
+/**
+ * Pure mapping from the body of GET /api/oauth/usage to a ProviderQuota.
+ * Does no I/O; `plan` and `observedAt` are passed through as given.
+ */
+export declare function parseClaudeUsageResponse(body: unknown, plan: string | null, observedAt: string): ProviderQuota;
+/**
+ * Pure parser for the Claude Code credentials JSON (keychain or file).
+ * A token that is not printable ASCII without spaces is treated as absent,
+ * so it can never reach an HTTP header or an error message.
+ */
+export declare function parseClaudeCredentials(raw: string): ClaudeCredentials | null;
+/**
+ * One-line, bounded, secret-free reason for a caught error. Every occurrence
+ * of `secret` is replaced before truncation, so no part of it can survive.
+ */
+export declare function safeReason(error: unknown, secret: string | null): string;
+/**
+ * Live fetch of the Claude subscription usage windows. Never throws, never
+ * prints, never refreshes the OAuth token and never writes to the keychain.
+ */
+export declare const fetchClaudeQuota: QuotaFetcher;

package/dist/quota/claude.js

@@ -0,0 +1,265 @@
+import { execFile } from 'node:child_process';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+const USAGE_URL = 'https://api.anthropic.com/api/oauth/usage';
+const OAUTH_BETA = 'oauth-2025-04-20';
+const KEYCHAIN_SERVICE = 'Claude Code-credentials';
+const FALLBACK_CLAUDE_VERSION = '2.1.323';
+const VERSION_TIMEOUT_MS = 2000;
+const WEEKLY_MINUTES = 10080;
+const FIVE_HOUR_MINUTES = 300;
+const EXPIRED_MESSAGE = 'Claude login expired: run `claude` once to refresh it';
+const NOT_SIGNED_IN_MESSAGE = 'not signed in: run `claude` and log in';
+const UNEXPECTED_BODY_MESSAGE = 'unexpected response from Anthropic usage endpoint';
+const MAX_REASON_LENGTH = 120;
+const TOKEN_PATTERN = /^[\x21-\x7e]+$/;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function normaliseResetsAt(raw) {
+    if (typeof raw !== 'string')
+        return null;
+    // Anthropic sends microseconds ("...00.043805+00:00"); keep milliseconds only.
+    const trimmed = raw.replace(/(\.\d{3})\d+(?=[Z+-]|$)/, '$1');
+    const date = new Date(trimmed);
+    return Number.isNaN(date.getTime()) ? null : date.toISOString();
+}
+function toWindow(kind, raw, windowMinutes) {
+    const utilization = raw.utilization;
+    return {
+        kind,
+        usedPercent: typeof utilization === 'number' && Number.isFinite(utilization) ? utilization : null,
+        resetsAt: normaliseResetsAt(raw.resets_at),
+        windowMinutes,
+        note: null,
+    };
+}
+/**
+ * Per-model limits from the body's `limits` array. Only entries with a model
+ * scope are kept (unscoped entries duplicate the main windows). Malformed
+ * input yields an empty list and never throws.
+ */
+function parseScopedLimits(raw) {
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const entry of raw) {
+        if (!isRecord(entry) || !isRecord(entry.scope) || !isRecord(entry.scope.model))
+            continue;
+        const model = entry.scope.model;
+        const name = [model.display_name, model.id].find((candidate) => typeof candidate === 'string' && candidate.trim().length > 0);
+        if (name === undefined)
+            continue;
+        const kind = typeof entry.kind === 'string' && (entry.kind.startsWith('five_hour') || entry.kind.startsWith('session'))
+            ? 'five_hour'
+            : 'weekly';
+        const percent = entry.percent;
+        out.push({
+            scope: name,
+            kind,
+            usedPercent: typeof percent === 'number' && Number.isFinite(percent) ? percent : null,
+            resetsAt: normaliseResetsAt(entry.resets_at),
+        });
+    }
+    return out;
+}
+/**
+ * Pure mapping from the body of GET /api/oauth/usage to a ProviderQuota.
+ * Does no I/O; `plan` and `observedAt` are passed through as given.
+ */
+export function parseClaudeUsageResponse(body, plan, observedAt) {
+    if (!isRecord(body)) {
+        return {
+            provider: 'claude',
+            status: 'error',
+            plan,
+            windows: [],
+            source: 'live',
+            observedAt,
+            message: UNEXPECTED_BODY_MESSAGE,
+        };
+    }
+    const windows = [];
+    const fiveHourRaw = body.five_hour;
+    const fiveHourActive = isRecord(fiveHourRaw);
+    if (fiveHourActive) {
+        windows.push(toWindow('five_hour', fiveHourRaw, FIVE_HOUR_MINUTES));
+    }
+    else {
+        windows.push({
+            kind: 'five_hour',
+            usedPercent: null,
+            resetsAt: null,
+            windowMinutes: FIVE_HOUR_MINUTES,
+            note: 'not reported',
+        });
+    }
+    const weeklyRaw = body.seven_day;
+    const weeklyPresent = isRecord(weeklyRaw);
+    if (weeklyPresent) {
+        windows.push(toWindow('weekly', weeklyRaw, WEEKLY_MINUTES));
+    }
+    const hasNumeric = windows.some((w) => w.usedPercent !== null);
+    const idleFiveHour = !fiveHourActive;
+    const hasData = hasNumeric || (idleFiveHour && weeklyPresent);
+    const status = hasData ? 'ok' : 'no_data';
+    const scopedLimits = parseScopedLimits(body.limits);
+    return {
+        provider: 'claude',
+        status,
+        plan,
+        windows,
+        source: 'live',
+        observedAt,
+        message: status === 'no_data' ? 'no usage window reported by Anthropic' : null,
+        ...(scopedLimits.length > 0 ? { scopedLimits } : {}),
+    };
+}
+/**
+ * Pure parser for the Claude Code credentials JSON (keychain or file).
+ * A token that is not printable ASCII without spaces is treated as absent,
+ * so it can never reach an HTTP header or an error message.
+ */
+export function parseClaudeCredentials(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (!isRecord(parsed) || !isRecord(parsed.claudeAiOauth))
+        return null;
+    const oauth = parsed.claudeAiOauth;
+    if (typeof oauth.accessToken !== 'string' || !TOKEN_PATTERN.test(oauth.accessToken))
+        return null;
+    const expiresAt = typeof oauth.expiresAt === 'number' && Number.isFinite(oauth.expiresAt) ? oauth.expiresAt : null;
+    const plan = typeof oauth.subscriptionType === 'string' ? oauth.subscriptionType : null;
+    return { accessToken: oauth.accessToken, expiresAt, plan };
+}
+function readKeychain(timeoutMs) {
+    return new Promise((resolve) => {
+        try {
+            execFile('security', ['find-generic-password', '-s', KEYCHAIN_SERVICE, '-w'], { timeout: timeoutMs, encoding: 'utf8', maxBuffer: 1024 * 1024 }, (error, stdout) => {
+                resolve(error ? null : String(stdout));
+            });
+        }
+        catch {
+            resolve(null);
+        }
+    });
+}
+async function readCredentialsFile(homeDir) {
+    try {
+        return await readFile(join(homeDir, '.claude', '.credentials.json'), 'utf8');
+    }
+    catch {
+        return null;
+    }
+}
+async function loadCredentials(homeDir, timeoutMs) {
+    if (process.platform === 'darwin') {
+        const fromKeychain = await readKeychain(timeoutMs);
+        const parsed = fromKeychain === null ? null : parseClaudeCredentials(fromKeychain);
+        if (parsed)
+            return parsed;
+    }
+    const fromFile = await readCredentialsFile(homeDir);
+    return fromFile === null ? null : parseClaudeCredentials(fromFile);
+}
+function claudeVersion(timeoutMs) {
+    return new Promise((resolve) => {
+        try {
+            execFile('claude', ['--version'], { timeout: timeoutMs, encoding: 'utf8' }, (error, stdout) => {
+                const match = error ? null : /(\d+\.\d+\.\d+)/.exec(String(stdout));
+                resolve(match ? match[1] : FALLBACK_CLAUDE_VERSION);
+            });
+        }
+        catch {
+            resolve(FALLBACK_CLAUDE_VERSION);
+        }
+    });
+}
+function failure(options, status, plan, message) {
+    return {
+        provider: 'claude',
+        status,
+        plan,
+        windows: [],
+        source: 'live',
+        observedAt: options.now().toISOString(),
+        message,
+    };
+}
+/**
+ * One-line, bounded, secret-free reason for a caught error. Every occurrence
+ * of `secret` is replaced before truncation, so no part of it can survive.
+ */
+export function safeReason(error, secret) {
+    if (error instanceof Error && error.name === 'AbortError')
+        return 'timed out';
+    let text = error instanceof Error ? error.message : String(error);
+    if (secret !== null && secret.length > 0) {
+        text = text.split(secret).join('<redacted>');
+    }
+    const oneLine = text.replace(/\s+/g, ' ').trim();
+    if (oneLine.length === 0)
+        return 'unknown error';
+    return oneLine.length > MAX_REASON_LENGTH ? `${oneLine.slice(0, MAX_REASON_LENGTH)}...` : oneLine;
+}
+/**
+ * Live fetch of the Claude subscription usage windows. Never throws, never
+ * prints, never refreshes the OAuth token and never writes to the keychain.
+ */
+export const fetchClaudeQuota = async (options) => {
+    const started = Date.now();
+    const remaining = () => Math.max(1, options.timeoutMs - (Date.now() - started));
+    let plan = null;
+    let secret = null;
+    try {
+        const credentials = await loadCredentials(options.homeDir, remaining());
+        if (!credentials) {
+            return failure(options, 'auth', null, NOT_SIGNED_IN_MESSAGE);
+        }
+        secret = credentials.accessToken;
+        plan = credentials.plan;
+        if (credentials.expiresAt !== null && credentials.expiresAt <= options.now().getTime()) {
+            return failure(options, 'auth', plan, EXPIRED_MESSAGE);
+        }
+        const version = await claudeVersion(Math.min(VERSION_TIMEOUT_MS, remaining()));
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), remaining());
+        try {
+            const response = await fetch(USAGE_URL, {
+                headers: {
+                    Authorization: `Bearer ${credentials.accessToken}`,
+                    'anthropic-beta': OAUTH_BETA,
+                    'User-Agent': `claude-code/${version}`,
+                },
+                signal: controller.signal,
+            });
+            if (response.status === 401 || response.status === 403) {
+                return failure(options, 'auth', plan, EXPIRED_MESSAGE);
+            }
+            if (!response.ok) {
+                return failure(options, 'error', plan, `Anthropic usage endpoint returned HTTP ${response.status}`);
+            }
+            const text = await response.text();
+            let body;
+            try {
+                body = JSON.parse(text);
+            }
+            catch {
+                body = undefined;
+            }
+            return parseClaudeUsageResponse(body, plan, options.now().toISOString());
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    catch (error) {
+        return failure(options, 'error', plan, `could not reach Anthropic: ${safeReason(error, secret)}`);
+    }
+};
+//# sourceMappingURL=claude.js.map