oc2token 0.1.0 → 0.1.1

package/README.md

@@ -44,7 +44,7 @@ OpenCode 2 records rich token telemetry locally, but the raw message stream is n
 - **Trend sparkline** per window, not one row per bucket
 - **Privacy by design** — only normalized token counters are cached; no prompts, tool inputs, or session titles are stored
 - **Resilient collection** — paginated assistant-message aggregation with retry, dedup by `tokenRevision`, fallback when the filtered stats API ignores the range
-- **Scriptable** — stable JSON `schemaVersion: 3`, deterministic table output, exit codes `0` / `1` / `3`
+- **Scriptable** — stable JSON `schemaVersion: 4`, deterministic table output, exit codes `0` / `1` / `3`
 
 ---
 
@@ -163,7 +163,7 @@ oc2token --no-color     # or NO_COLOR=1 for plain output
 | `?` | Help |
 | `q` / `Ctrl+C` | Quit |
 
-Settings persist under the cache directory (`~/.cache/oc2token` on macOS/Linux or `$XDG_CACHE_HOME`). At least one provider must stay enabled.
+Settings persist under the cache directory (`~/Library/Caches/oc2token` on macOS by default; `$XDG_CACHE_HOME/oc2token` when `XDG_CACHE_HOME` is set, otherwise `~/Library/Caches/oc2token` — see `src/application.ts:47-50`). Override with `--cache-dir`. At least one provider must stay enabled.
 
 **Theme.** Purple carries structure, orange carries activity and focus, cyan carries inputs. Respects `NO_COLOR` and `--no-color`.
 
@@ -172,7 +172,7 @@ Settings persist under the cache directory (`~/.cache/oc2token` on macOS/Linux o
 ## 🖥️ CLI reference
 
 ```
-oc2token 0.1.0
+oc2token 0.1.1
 
 Usage:
   oc2token [hour|day|week]
@@ -183,7 +183,7 @@ Options:
   --once                 Collect once and exit
   --json                 Emit stable JSON and exit
   --format <mode>        auto, dashboard, table, or json
-  --refresh <seconds>    Auto-refresh cadence; 0 is manual-only (60–14400)
+  --refresh <seconds>    Auto-refresh cadence; 0 is manual-only (0 or 60–14400)
   --timezone <IANA>      Zone for local day / ISO week boundaries
   --project <id>         Restrict collection to an OpenCode project
   --cache-dir <path>     Override the normalized metadata cache directory
@@ -201,6 +201,14 @@ Options:
 | `1` | Connection / validation / usage error |
 | `3` | Partial results — JSON emitted but coverage incomplete |
 
+### 💰 Costs (estimates only)
+
+`costs`, `costsByProvider`, `costsByProject`, and per-breakdown `cost` fields are **rough USD estimates**, not bills. Pricing is compiled from public provider pages **as of 2026-09-02** (`src/pricing/pricing.ts:11-16`); rates change without notice and subscription/Zen at-cost pricing may differ from what you actually pay.
+
+- Unknown models return `undefined` pricing (`pricingForModel` → `undefined`), surfaced as `null` cost in JSON. There is **no generic fallback price** — an unknown model contributes tokens but no dollars.
+- `estimatedCostForBreakdowns(breakdowns, strict=true)` returns `undefined` if **any** model is unknown; the non-strict/partial variant skips unknown models instead. Window-level `costs` use the partial (skip-unknown) aggregation.
+- `recorded_total` remains the source of truth for usage; costs are a convenience overlay.
+
 ### Filtering providers
 
 ```sh
@@ -224,7 +232,7 @@ oc2token --once --json --source codex | jq .totals.day.recorded_total
 |----------|--------|-----------|
 | **opencode** | OpenCode 2 local service (`@opencode-ai/client`) | session/message pagination with `tokenRevision` dedup |
 | **codex** | `~/.codex/sessions` rollouts (JSONL) | file scan + parse |
-| **antigravity** | Antigravity SQLite + session JSON | proto + scanner |
+| **antigravity** | Antigravity SQLite (`gen_metadata` protobuf via `node:sqlite` + `src/antigravity/proto.ts`) | proto + scanner |
 
 All three emit the same `UsageRecord` shape and are merged by `Aggregator → CachedUsageSource → Dashboard`. `doctor` reports each independently:
 
@@ -250,28 +258,33 @@ oc2token --format table
 
 <p align="center"><img src="assets/screenshots/table.svg" width="100%" alt="Table output" /></p>
 
-### JSON (`schemaVersion: 3`)
+### JSON (`schemaVersion: 4`)
 
 ```sh
 oc2token --json | jq .
 oc2token --once --json > snapshot.json
 ```
 
-Emits **all three windows**, `totalsByProvider`/`totalsByProject`, trends, and coverage in one stable contract:
+Emits **all three windows**, `costs`, `totalsByProvider`/`totalsByProject`, `trends`, and coverage in one stable contract:
 
 ```json
 {
-  "schemaVersion": 3,
+  "schemaVersion": 4,
   "source": "unified",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "windows": { "hour": { "kind": "hour", "from": "…", "to": "…", "label": "last 60 minutes" }, "day": {}, "week": {} },
   "totals": { "hour": { "recorded_total": 15582 }, "day": {}, "week": {} },
-  "providersByWindow": { "day": [ { "name": "openai", "totals": {} } ] },
-  "totalsByProvider": { "day": { "openai": { "recorded_total": 21785 } } },
+  "costs": { "hour": 0.042, "day": null, "week": null },
+  "trends": { "hour": [{ "label": "…", "totals": {}, "from": "…", "to": "…" }], "day": [], "week": [] },
+  "providersByWindow": { "day": [ { "name": "opencode", "totals": {}, "cost": 0.01 } ] },
+  "totalsByProvider": { "day": { "opencode": { "recorded_total": 21785 } } },
+  "totalsByProject": { "day": { "/Users/you/project": { "recorded_total": 9001 } } },
   "coverage": { "complete": true, "sessionsScanned": 14, "sessionsDiscovered": 14 }
 }
 ```
 
+> `costs` / `cost` fields are **estimates only** (see [Costs](#-costs-estimates-only)). Unknown models yield `null`/`undefined` cost, never a guessed price. `totalsByProject` keys are absolute project paths — treat snapshots as containing PII if you share them.
+
 Use `--format json` for pretty-printed JSON without exiting interactive mode fallback.
 
 ---
@@ -281,8 +294,8 @@ Use `--format json` for pretty-printed JSON without exiting interactive mode fal
 | Option | CLI | Env / Persisted |
 |--------|-----|-----------------|
 | Timezone | `--timezone Europe/Berlin` | Local system zone by default; validated as IANA |
-| Refresh | `--refresh 300` (60–14400, `0` manual) | Persisted via Settings panel (`s`) |
-| Cache dir | `--cache-dir /tmp/oc2` | `~/.cache/oc2token` / `$XDG_CACHE_HOME/oc2token` |
+| Refresh | `--refresh 300` (`0` manual-only, or 60–14400) | Persisted via Settings panel (`s`) |
+| Cache dir | `--cache-dir /tmp/oc2` | `~/Library/Caches/oc2token`, or `$XDG_CACHE_HOME/oc2token` when set |
 | Project filter | `--project my-project` | Scopes OpenCode collection only |
 | Providers | `--source codex` | Persisted via Settings panel |
 | Color | `--no-color` | `NO_COLOR=1` disables all ANSI |
@@ -303,6 +316,18 @@ It **does not** persist:
 
 All collection is local-first; no network calls besides the loopback OpenCode service.
 
+### Paths are PII
+
+`project` is persisted as an **absolute filesystem path** (e.g. `/Users/you/work/client-app`) in the normalized cache, in `--json` output (`totalsByProject`, `projects*`), and in table/dashboard project rows. Sharing a snapshot, cache directory, or screenshot exposes your directory layout and username. There is **no `--redact-projects` flag** — if you need to share output, scrub paths manually before posting.
+
+### Snapshot sanitizer is denylist-based
+
+`src/cache/schema.ts:47,225-259` strips known-sensitive keys (`prompt`, `tool_input/output`, `api_key`, `authorization`, `password`, `secret`, `session_title/name`, `raw_content`, plus `content`/`parts`/`title`) from cached snapshots. This is a **denylist, not an allowlist**: a future field with a novel sensitive name would pass through. Treat the cache as usage-metadata-only by construction (records go through `normalizeRecord`), and review sanitizer keys when new snapshot fields are added.
+
+### `doctor` prints the endpoint
+
+`oc2token doctor` prints `Endpoint: <url>` (loopback server URL) and per-provider status lines. The URL itself is not a credential (auth headers are never printed), but redact it in public bug reports anyway.
+
 ---
 
 ## 🧭 How it works
@@ -319,7 +344,7 @@ All collection is local-first; no network calls besides the loopback OpenCode se
                  │ Aggregator  │  dedup by sessionID/messageID + tokenRevision
                  └──────┬──────┘
                         ▼
-                 ┌──────────────┐  file lock · schema 1 · atomic writes
+                 ┌──────────────┐  file lock · schema 2 · atomic writes
                  │ CachedUsage  │
                  └──────┬──────┘
                         ▼
@@ -352,7 +377,7 @@ src/
   opencode/     transport & doctor
   codex/        rollout discovery & scanner
   antigravity/  sqlite + proto + scanner
-  cache/        filesystem lock & store (schema 1)
+  cache/        filesystem lock & store (schema 2)
   dashboard/    render, state, settings
   domain/       windows, tokens, records, contracts
   output/       dashboard / table / json renderers

package/dist/src/accounting/index.d.ts

@@ -1 +1 @@
-export { UsageRecordReducer, compareFreshness, reduceUsageRecords, sumRecordComponents, } from "./reducer.js";
+export { UsageRecordReducer, compareFreshness, reduceUsageRecords, } from "./reducer.js";

package/dist/src/accounting/index.js

@@ -1,2 +1,2 @@
-export { UsageRecordReducer, compareFreshness, reduceUsageRecords, sumRecordComponents, } from "./reducer.js";
+export { UsageRecordReducer, compareFreshness, reduceUsageRecords, } from "./reducer.js";
 //# sourceMappingURL=index.js.map

package/dist/src/accounting/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/accounting/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/accounting/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,cAAc,CAAC"}

package/dist/src/accounting/reducer.d.ts

@@ -1,4 +1,4 @@
-import { type UsageTotals } from "../domain/index.js";
+import type { UsageTotals } from "../domain/index.js";
 import { type UsageRecord, type UsageWindow } from "../domain/index.js";
 /**
  * A deterministic, synchronous reducer for usage records.
@@ -18,4 +18,3 @@ export declare class UsageRecordReducer {
 }
 export declare function compareFreshness(left: UsageRecord, right: UsageRecord): number;
 export declare function reduceUsageRecords(records: ReadonlyArray<UsageRecord>): ReadonlyArray<UsageRecord>;
-export declare function sumRecordComponents(records: ReadonlyArray<UsageRecord>): UsageTotals;

package/dist/src/accounting/reducer.js

@@ -1,6 +1,4 @@
-import { parseTokenComponents, toUsageTotals, } from "../domain/index.js";
 import { sumUsageRecords, } from "../domain/index.js";
-const COMPONENTS = ["input", "output", "reasoning", "cacheRead", "cacheWrite"];
 function compareRevision(left, right) {
     if (left === right) {
         return 0;
@@ -82,24 +80,4 @@ export function reduceUsageRecords(records) {
     reducer.upsertMany(records);
     return reducer.records();
 }
-export function sumRecordComponents(records) {
-    const totals = {
-        input: 0,
-        output: 0,
-        reasoning: 0,
-        cacheRead: 0,
-        cacheWrite: 0,
-    };
-    for (const record of records) {
-        const normalized = parseTokenComponents(record);
-        for (const component of COMPONENTS) {
-            const next = totals[component] + normalized[component];
-            if (!Number.isSafeInteger(next)) {
-                throw new RangeError(`Summing ${component} exceeds the safe integer range`);
-            }
-            totals[component] = next;
-        }
-    }
-    return toUsageTotals(totals);
-}
 //# sourceMappingURL=reducer.js.map

package/dist/src/accounting/reducer.js.map

@@ -1 +1 @@
-{"version":3,"file":"reducer.js","sourceRoot":"","sources":["../../../src/accounting/reducer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,aAAa,GAId,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,eAAe,GAEhB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAU,CAAC;AAExF,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,4EAA4E;IAC5E,4DAA4D;IAC5D,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;IAC1C,CAAC;IAED,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACZ,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAExD,MAAM,CAAC,MAAmB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,OAAmC;QAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,CAAC,MAAmB,EAAE,kBAAkB,GAAG,KAAK;QACpD,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACzE,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAiB,EAAE,KAAkB;IACpE,MAAM,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IAClF,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,MAAM,kBAAkB,GAAG,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACpF,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,uEAAuE;IACvE,0EAA0E;IAC1E,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,2EAA2E;IAC3E,+EAA+E;IAC/E,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAmC;IAEnC,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAmC;IACrE,MAAM,MAAM,GAAuC;QACjD,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,CAAC;QACZ,UAAU,EAAE,CAAC;KACd,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAChD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,UAAU,CAAC,WAAW,SAAS,iCAAiC,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"reducer.js","sourceRoot":"","sources":["../../../src/accounting/reducer.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAEhB,MAAM,oBAAoB,CAAC;AAE5B,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,4EAA4E;IAC5E,4DAA4D;IAC5D,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;IAC1C,CAAC;IAED,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACZ,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAExD,MAAM,CAAC,MAAmB;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,OAAmC;QAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,CAAC,MAAmB,EAAE,kBAAkB,GAAG,KAAK;QACpD,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACzE,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAiB,EAAE,KAAkB;IACpE,MAAM,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IAClF,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,MAAM,kBAAkB,GAAG,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACpF,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,uEAAuE;IACvE,0EAA0E;IAC1E,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,2EAA2E;IAC3E,+EAA+E;IAC/E,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAmC;IAEnC,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;AAC3B,CAAC"}

package/dist/src/antigravity/discovery.d.ts

@@ -14,5 +14,9 @@ export declare function defaultAntigravityHome(): string;
  * `resolveAntigravityHome` or explicit `root` parameter.
  * For test fixtures `ANTIGRAVITY_HOME` may point directly to a directory
  * containing `*.db` files — that directory is scanned as well.
+ *
+ * Scans are flat (no recursion, fixed known subpaths), symlinks are skipped
+ * via withFileTypes (never followed), and results are capped at
+ * MAX_DATABASE_FILES so huge homes fail bounded instead of hanging.
  */
 export declare function discoverAntigravityDatabases(root?: string): string[];

package/dist/src/antigravity/discovery.js

@@ -14,6 +14,9 @@ function resolveAntigravityHome(root) {
     }
     return defaultAntigravityHome();
 }
+/** Bounds so a huge $HOME can never hang discovery. */
+const MAX_DATABASE_FILES = 5_000;
+const MAX_ENTRIES_PER_DIR = 10_000;
 /**
  * Scan Antigravity SQLite conversation databases.
  *
@@ -29,20 +32,36 @@ function resolveAntigravityHome(root) {
  * `resolveAntigravityHome` or explicit `root` parameter.
  * For test fixtures `ANTIGRAVITY_HOME` may point directly to a directory
  * containing `*.db` files — that directory is scanned as well.
+ *
+ * Scans are flat (no recursion, fixed known subpaths), symlinks are skipped
+ * via withFileTypes (never followed), and results are capped at
+ * MAX_DATABASE_FILES so huge homes fail bounded instead of hanging.
  */
 export function discoverAntigravityDatabases(root) {
     const base = resolveAntigravityHome(root);
     const seen = new Set();
     const result = [];
     const tryDir = (dir) => {
+        if (result.length >= MAX_DATABASE_FILES)
+            return;
         let entries;
         try {
-            entries = readdirSync(dir);
+            entries = readdirSync(dir, { withFileTypes: true });
         }
         catch {
             return;
         }
-        for (const file of entries) {
+        let scanned = 0;
+        for (const entry of entries) {
+            if (result.length >= MAX_DATABASE_FILES)
+                return;
+            if (scanned >= MAX_ENTRIES_PER_DIR)
+                break;
+            scanned += 1;
+            // Never follow symlinks; only regular files can be databases.
+            if (entry.isSymbolicLink() || !entry.isFile())
+                continue;
+            const file = entry.name;
             // Only *.db — ignore -shm/-wal sidecars and .pb files
             if (!file.toLowerCase().endsWith(".db")) {
                 continue;
@@ -82,9 +101,13 @@ export function discoverAntigravityDatabases(root) {
         join("antigravity-ide", "implicit"),
     ];
     for (const rel of relativeFromHomedir) {
+        if (result.length >= MAX_DATABASE_FILES)
+            break;
         tryDir(join(base, rel));
     }
     for (const rel of relativeFromGemini) {
+        if (result.length >= MAX_DATABASE_FILES)
+            break;
         tryDir(join(base, rel));
     }
     // Also handle case where base is already a .gemini/antigravity-cli/conversations path's parent

package/dist/src/antigravity/discovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/antigravity/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,MAAM,UAAU,sBAAsB;IACpC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAa;IAC3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,sBAAsB,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAa;IACxD,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,MAAM,GAAG,CAAC,GAAW,EAAQ,EAAE;QACnC,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,sDAAsD;YACtD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,SAAS;YACX,CAAC;YACD,mEAAmE;YACnE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/G,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;IAEF,8EAA8E;IAC9E,+CAA+C;IAC/C,MAAM,CAAC,IAAI,CAAC,CAAC;IAEb,8EAA8E;IAC9E,2CAA2C;IAC3C,oEAAoE;IACpE,oFAAoF;IACpF,MAAM,mBAAmB,GAAG;QAC1B,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,eAAe,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,eAAe,CAAC;QACnD,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,UAAU,CAAC;QAC9C,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,eAAe,CAAC;QACnD,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,UAAU,CAAC;KAC/C,CAAC;IACF,MAAM,kBAAkB,GAAG;QACzB,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC;QACpC,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC;QACxC,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC;QACnC,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC;QACxC,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC;KACpC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,+FAA+F;IAC/F,4CAA4C;IAE5C,MAAM,CAAC,IAAI,EAAE,CAAC;IACd,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/antigravity/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,MAAM,UAAU,sBAAsB;IACpC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAa;IAC3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,sBAAsB,EAAE,CAAC;AAClC,CAAC;AAED,uDAAuD;AACvD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAa;IACxD,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,MAAM,GAAG,CAAC,GAAW,EAAQ,EAAE;QACnC,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB;YAAE,OAAO;QAChD,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB;gBAAE,OAAO;YAChD,IAAI,OAAO,IAAI,mBAAmB;gBAAE,MAAM;YAC1C,OAAO,IAAI,CAAC,CAAC;YACb,8DAA8D;YAC9D,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS;YACxD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACxB,sDAAsD;YACtD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,SAAS;YACX,CAAC;YACD,mEAAmE;YACnE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/G,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;IAEF,8EAA8E;IAC9E,+CAA+C;IAC/C,MAAM,CAAC,IAAI,CAAC,CAAC;IAEb,8EAA8E;IAC9E,2CAA2C;IAC3C,oEAAoE;IACpE,oFAAoF;IACpF,MAAM,mBAAmB,GAAG;QAC1B,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,eAAe,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,eAAe,CAAC;QACnD,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,UAAU,CAAC;QAC9C,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,eAAe,CAAC;QACnD,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,UAAU,CAAC;KAC/C,CAAC;IACF,MAAM,kBAAkB,GAAG;QACzB,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC;QACpC,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC;QACxC,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC;QACnC,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC;QACxC,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC;KACpC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB;YAAE,MAAM;QAC/C,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB;YAAE,MAAM;QAC/C,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,+FAA+F;IAC/F,4CAA4C;IAE5C,MAAM,CAAC,IAAI,EAAE,CAAC;IACd,OAAO,MAAM,CAAC;AAChB,CAAC"}