openmeld 0.3.231 → 0.3.233

package/dist/{runtime-agent-controller-reporting-submission-CbaUsNTF.js → runtime-agent-controller-reporting-submission-CQjbBiHh.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 
-import { Bn as toStructuredApiClientFailure, fn as createRuntimeReportingApi } from "./dist-CAypwFRu.js";
-import { Gn as createUnavailableProviderUsageLimits, I as listAgentTargetStates, Jn as buildCliLaunchInvocation, Kn as createUnsupportedProviderUsageLimits, Qn as createProviderOriginalError, Tn as parseAntigravityUsageLimits, Yn as materializeCliLaunchCommand, at as isHomebrewCommandPath, fn as parseOpenCodeGoUsageResponse, gn as probeGrokBuildAcpInterface, hn as GrokBuildAcpTransportError, it as isBunGlobalCommandPath, j as resolveAgentProfilePrimaryAgentControllerReport, nr as areAgentControllerInterfaceAccountsSame, nt as EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES, ot as isNpmGlobalCommandPath, rr as buildAgentControllerRef, rt as resolveBuiltinAgentControllerDefinition, st as isPnpmGlobalCommandPath, vn as projectCodexUsageLimits, x as resolveLocalRuntimeControllerSupport } from "./prepare-provider-runtime-DfsSj_N_.js";
-import { et as resolvePublicAgentAvailabilityCopy } from "./runtime-transport-D4x8_AmR.js";
-import { d as getAuthSessionState } from "./auth-session-pLaN5cnC.js";
-import { A as readLastKnownAgentControllerAuthSnapshot, D as buildAgentControllerInterfaceKeeperKey, F as recordAgentControllerInterfaceProbeSuccess, I as recordAgentControllerUsageLimitsObservation, L as resolveAgentControllerCommandFingerprint, M as readLastSuccessfulAgentControllerInterfaceCheckAt, N as readReusableAgentControllerInterfaceSnapshot, P as recordAgentControllerInterfaceProbeFailure, d as resolveOpenCodeAuthPath, j as readLastKnownAgentControllerUsageLimits, k as didAgentControllerCommandFingerprintRemainStable } from "./daemon-frame-transport-xQnNyg6E.js";
-import { v as warnDaemonEvent } from "./daemon-device-id-B6iDyQEs.js";
-import { i as readDaemonServiceContract } from "./daemon-service-contract-DhEfbzHt.js";
-import { l as canAttachAuthTokenToRequest, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-DgTXf3Gb.js";
+import { Bn as toStructuredApiClientFailure, fn as createRuntimeReportingApi } from "./dist-BgYBvEBB.js";
+import { $n as materializeCliLaunchCommand, Cn as probeCodexAppServerAccount, Dn as probeClaudeCodeUsageLimits, En as projectCodexUsageLimits, I as listAgentTargetStates, Qn as buildCliLaunchInvocation, Xn as createUnsupportedProviderUsageLimits, Yn as createUnavailableProviderUsageLimits, _n as probeGrokBuildAcpInterface, at as isHomebrewCommandPath, fn as parseOpenRouterUsageResponse, gn as GrokBuildAcpTransportError, gr as isAgentControllerUsageRefreshUnavailable, it as isBunGlobalCommandPath, j as resolveAgentProfilePrimaryAgentControllerReport, kn as parseAntigravityUsageLimits, nr as createProviderOriginalError, nt as EMPTY_AGENT_CONTROLLER_INTERFACE_CAPABILITIES, or as areAgentControllerInterfaceAccountsSame, ot as isNpmGlobalCommandPath, pn as parseOpenCodeGoUsageResponse, rt as resolveBuiltinAgentControllerDefinition, sr as buildAgentControllerRef, st as isPnpmGlobalCommandPath, x as resolveLocalRuntimeControllerSupport, yn as projectCursorUsageLimits } from "./prepare-provider-runtime-CD6XRt7X.js";
+import { nt as resolvePublicAgentAvailabilityCopy } from "./runtime-transport-D4CVffnp.js";
+import { T as readMacOsNativeKeychainToken, d as getAuthSessionState } from "./auth-session-iXCJO5oB.js";
+import { B as buildAgentControllerInterfaceKeeperKey, G as readLastSuccessfulAgentControllerInterfaceCheckAt, H as didAgentControllerCommandFingerprintRemainStable, J as recordAgentControllerInterfaceProbeSuccess, K as readReusableAgentControllerInterfaceSnapshot, U as readLastKnownAgentControllerAuthSnapshot, W as readLastKnownAgentControllerUsageLimits, X as resolveAgentControllerCommandFingerprint, Y as recordAgentControllerUsageLimitsObservation, q as recordAgentControllerInterfaceProbeFailure, w as resolveOpenCodeAuthPath } from "./dispatch-owned-runtime-BeIQetEt.js";
+import { v as warnDaemonEvent } from "./daemon-device-id-DbSIqHoZ.js";
+import { i as readDaemonServiceContract } from "./daemon-service-contract-COPKbCy_.js";
+import { l as canAttachAuthTokenToRequest, t as createCliApiClientFoundation, u as fingerprintRequestAuthorization } from "./api-client-foundation-C-RPnq_p.js";
 import { homedir, loadavg, tmpdir } from "node:os";
 import { join } from "node:path";
 import { mkdtemp, readFile, realpath, rm } from "node:fs/promises";
@@ -400,6 +400,60 @@ function parsePlainVersion(body) {
 	return version.length > 0 ? version : null;
 }
 //#endregion
+//#region src/local-service/inventory/cursor-usage-probe.ts
+const CURSOR_ENDPOINT = "https://api2.cursor.sh";
+const TRAILING_SLASH_RE$1 = /\/$/u;
+async function probeCursorUsageLimits(input) {
+	const env = input.environment ?? process.env;
+	const platform = input.platform ?? process.platform;
+	const unavailable = (reason) => createUnavailableProviderUsageLimits(input.observedAt, void 0, { reason });
+	const endpoint = env.CURSOR_API_ENDPOINT?.trim().replace(TRAILING_SLASH_RE$1, "");
+	if (endpoint && endpoint !== CURSOR_ENDPOINT) return unavailable("not_applicable");
+	let token = env.CURSOR_AUTH_TOKEN?.trim();
+	if (!token && (env.CURSOR_API_KEY?.trim() || env.AGENT_CLI_CREDENTIAL_STORE === "memory")) return unavailable("not_applicable");
+	try {
+		if (!token) token = await readStoredCursorToken({
+			...input,
+			environment: env,
+			platform
+		});
+		if (!token) return unavailable("not_reported");
+		const response = await (input.fetchFn ?? fetch)(`${CURSOR_ENDPOINT}/aiserver.v1.DashboardService/GetCurrentPeriodUsage`, {
+			method: "POST",
+			redirect: "error",
+			signal: AbortSignal.timeout(4e3),
+			headers: {
+				authorization: `Bearer ${token}`,
+				"content-type": "application/json",
+				"connect-protocol-version": "1",
+				"x-cursor-client-type": "cli"
+			},
+			body: "{}"
+		});
+		if (!response.ok) return unavailable(response.status === 401 || response.status === 403 ? "not_applicable" : "refresh_failed");
+		return projectCursorUsageLimits({
+			observedAt: input.observedAt,
+			value: await response.json()
+		});
+	} catch {
+		return unavailable("refresh_failed");
+	}
+}
+async function readStoredCursorToken(input) {
+	const env = input.environment;
+	if (input.platform === "darwin" && env.AGENT_CLI_CREDENTIAL_STORE !== "file") return (await (input.readKeychain ?? (() => readMacOsNativeKeychainToken({
+		service: "cursor-access-token",
+		account: "cursor-user"
+	})))())?.trim();
+	const home = (input.platform === "win32" ? env.USERPROFILE : env.HOME) || homedir();
+	let directory = join(env.XDG_CONFIG_HOME || join(home, ".config"), "cursor");
+	if (input.platform === "darwin") directory = join(home, ".cursor");
+	else if (input.platform === "win32") directory = join(env.APPDATA || join(home, "AppData", "Roaming"), "Cursor");
+	const content = await (input.readCredentials ?? ((path) => readFile(path, "utf8")))(join(directory, "auth.json"));
+	const credentials = JSON.parse(content);
+	return credentials && typeof credentials === "object" && "accessToken" in credentials && typeof credentials.accessToken === "string" ? credentials.accessToken.trim() : void 0;
+}
+//#endregion
 //#region src/local-service/inventory/opencode-readiness-probe.ts
 const DEFAULT_PROBE_TIMEOUT_MS = 8e3;
 const SDK_READ_TIMEOUT_MS = 4e3;
@@ -411,6 +465,7 @@ const OPENCODE_SERVER_URL_RE = /on\s+(https?:\/\/[^\s]+)/u;
 const ANSI_ESCAPE = String.fromCharCode(27);
 const OPENCODE_GO_PROVIDER_ID = "opencode-go";
 const OPENCODE_GO_USAGE_URL = "https://opencode.ai/zen/go/v1/usage";
+const TRAILING_SLASH_RE = /\/$/u;
 async function probeOpenCodeReadiness(input) {
 	let server = null;
 	try {
@@ -459,42 +514,54 @@ async function readOpenCodeProviderUsageLimits(input) {
 	}
 	const providers = [...providersById.values()];
 	return (await Promise.all(providers.map(async (provider) => {
-		if (provider.id !== OPENCODE_GO_PROVIDER_ID) return createUnsupportedProviderUsageLimits(input.observedAt, provider);
-		const apiKey = await resolveOpenCodeProviderApiKey({
+		if (provider.id !== OPENCODE_GO_PROVIDER_ID && provider.id !== "openrouter") return createUnsupportedProviderUsageLimits(input.observedAt, provider);
+		const config = input.providerList.all.find((item) => item.id === provider.id);
+		const defaultBaseUrl = provider.id === "openrouter" ? "https://openrouter.ai/api/v1" : "https://opencode.ai/zen/go/v1";
+		if (typeof config?.options.baseURL === "string" && config.options.baseURL.replace(TRAILING_SLASH_RE, "") !== defaultBaseUrl) return createUnavailableProviderUsageLimits(input.observedAt, provider, { reason: "not_applicable" });
+		const apiKey = normalizeOptionalText$1(config?.key) ?? await resolveOpenCodeProviderApiKey({
 			authContent: input.authContent,
+			environment: input.environment,
 			providerId: provider.id,
 			readAuthFile: input.readAuthFile
 		});
-		if (!apiKey) return createUnavailableProviderUsageLimits(input.observedAt, provider);
+		if (!apiKey) return createUnavailableProviderUsageLimits(input.observedAt, provider, { reason: "not_authenticated" });
 		try {
-			const response = await (input.fetchFn ?? fetch)(OPENCODE_GO_USAGE_URL, {
+			const response = await (input.fetchFn ?? fetch)(provider.id === "openrouter" ? "https://openrouter.ai/api/v1/key" : OPENCODE_GO_USAGE_URL, {
+				redirect: "error",
 				headers: { authorization: `Bearer ${apiKey}` },
 				signal: AbortSignal.timeout(SDK_READ_TIMEOUT_MS)
 			});
-			if (!response.ok) return createUnavailableProviderUsageLimits(input.observedAt, provider);
-			return parseOpenCodeGoUsageResponse({
+			if (!response.ok) return createUnavailableProviderUsageLimits(input.observedAt, provider, { reason: usageRequestFailureReason(response.status) });
+			return (provider.id === "openrouter" ? parseOpenRouterUsageResponse : parseOpenCodeGoUsageResponse)({
 				observedAt: input.observedAt,
 				value: await response.json()
 			});
 		} catch {
-			return createUnavailableProviderUsageLimits(input.observedAt, provider);
+			return createUnavailableProviderUsageLimits(input.observedAt, provider, { reason: "refresh_failed" });
 		}
 	}))).flat().slice(0, 32);
 }
+function usageRequestFailureReason(status) {
+	if (status === 403) return "not_applicable";
+	return status === 401 ? "not_authenticated" : "refresh_failed";
+}
 async function resolveOpenCodeProviderApiKey(input) {
-	let authContent = input.authContent ?? process.env.OPENCODE_AUTH_CONTENT;
+	const environment = input.environment ?? process.env;
+	let authContent = input.authContent ?? environment.OPENCODE_AUTH_CONTENT;
 	if (!authContent) try {
 		const authPath = resolveOpenCodeAuthPath({
 			homeDir: homedir(),
-			xdgDataHome: process.env.XDG_DATA_HOME
+			xdgDataHome: environment.XDG_DATA_HOME
 		});
 		authContent = input.readAuthFile ? await input.readAuthFile(authPath) : await readFile(authPath, "utf8");
 	} catch {
-		return null;
+		authContent = "{}";
 	}
 	try {
 		const providerAuth = toRecord$1(JSON.parse(authContent)?.[input.providerId]);
-		return providerAuth?.type === "api" ? normalizeOptionalText$1(providerAuth.key) : null;
+		if (providerAuth?.type === "api") return normalizeOptionalText$1(providerAuth.key);
+		if (providerAuth) return null;
+		return normalizeOptionalText$1(environment[input.providerId === OPENCODE_GO_PROVIDER_ID ? "OPENCODE_API_KEY" : "OPENROUTER_API_KEY"]);
 	} catch {
 		return null;
 	}
@@ -519,7 +586,8 @@ async function startOpenCodeProbeServer(input) {
 				"ignore",
 				"pipe",
 				"pipe"
-			]
+			],
+			windowsHide: true
 		});
 		const spawnedAtMs = Date.now();
 		let stdout = "";
@@ -861,11 +929,27 @@ async function resolveAntigravityInterfaceSnapshot(input) {
 	};
 }
 async function probeAgentControllerUsageObservationAuth(input) {
+	if (input.agentId === "codex") try {
+		const account = await probeCodexAppServerAccount({
+			launchContract: input.launchContract,
+			timeoutMs: PROBE_TIMEOUT_MS
+		});
+		return {
+			status: account.authStatus,
+			...account.email ? { email: account.email } : {}
+		};
+	} catch {
+		return { status: "unknown" };
+	}
 	if (input.agentId !== "claude-code") return { status: "unknown" };
 	return resolveClaudeAuthSnapshot(await withProbeWorkingDirectory((workingDirectory) => runLaunchContractCommand({
 		workingDirectory,
 		allowNonZeroExit: true,
-		args: ["auth", "status"],
+		args: [
+			"auth",
+			"status",
+			"--json"
+		],
 		launchContract: input.launchContract
 	})));
 }
@@ -950,8 +1034,7 @@ async function resolveAgentControllerInterfaceSnapshot(input) {
 			currentAuth: outcome.snapshot.auth,
 			current: outcome.snapshot.usageLimits,
 			previous: lastKnownUsageLimits,
-			previousAuth: lastKnownAuth,
-			support: controllerDefinition?.usageLimitSupport ?? "not_evaluated"
+			previousAuth: lastKnownAuth
 		});
 		const completedSnapshot = withUsageLimits({
 			...outcome.snapshot,
@@ -1010,11 +1093,11 @@ function withUsageLimits(snapshot, usageLimits) {
 }
 function resolveUsageLimitsAfterCompletedProbe(input) {
 	if (!areAgentControllerInterfaceAccountsSame(input.previousAuth, input.currentAuth)) return input.current;
-	if (input.support === "passive") return input.previous ?? input.current;
+	if (!input.current) return input.previous ?? void 0;
 	return preserveLastKnownUsageLimitsAfterFailure(input);
 }
 function preserveLastKnownUsageLimitsAfterFailure(input) {
-	const currentIsUnavailable = input.current?.length === 1 && input.current[0]?.status === "unavailable";
+	const currentIsUnavailable = isAgentControllerUsageRefreshUnavailable(input.current);
 	const previousHasKnownCapacity = input.previous?.some((limit) => limit.status === "available" || limit.status === "exhausted" || limit.status === "stale");
 	if (!(currentIsUnavailable && previousHasKnownCapacity && input.previous)) return input.current;
 	return input.previous.map((limit) => limit.usedPercent === null ? limit : {
@@ -1027,7 +1110,7 @@ function resolveUsageLimitsAfterFailedProbe(input) {
 	return preserveLastKnownUsageLimitsAfterFailure(input);
 }
 function resolveInitialProviderUsageLimits(input) {
-	if (input.support === "native") return createUnavailableProviderUsageLimits(input.checkedAt);
+	if (input.support === "native" || input.support === "observational") return createUnavailableProviderUsageLimits(input.checkedAt);
 	if (input.support === "unsupported") return createUnsupportedProviderUsageLimits(input.checkedAt);
 }
 function resolveLaunchSnapshot(state) {
@@ -1207,6 +1290,14 @@ async function resolveClaudeCodeInterfaceSnapshot(input) {
 	})]);
 	const auth = resolveClaudeAuthSnapshot(authProbe);
 	const version = versionProbe.ok ? parseCliVersion(versionProbe.stdout) : null;
+	let usageLimits = createUnavailableProviderUsageLimits(input.baseSnapshot.checkedAt, void 0, { reason: "not_reported" });
+	if (auth.status !== "authenticated") usageLimits = createUnavailableProviderUsageLimits(input.baseSnapshot.checkedAt, void 0, { reason: auth.status === "unauthenticated" ? "not_authenticated" : "refresh_failed" });
+	else if (auth.email && version && (compareSemverCore(version, "2.1.285") ?? -1) >= 0) usageLimits = await probeClaudeCodeUsageLimits({
+		expectedEmail: auth.email,
+		launchContract: input.launchContract,
+		workingDirectory: input.workingDirectory,
+		observedAt: input.baseSnapshot.checkedAt
+	});
 	let message = input.baseSnapshot.message;
 	let status = input.baseSnapshot.status;
 	if (auth.status === "unauthenticated") {
@@ -1221,6 +1312,7 @@ async function resolveClaudeCodeInterfaceSnapshot(input) {
 		snapshot: {
 			...input.baseSnapshot,
 			auth,
+			usageLimits,
 			message,
 			status,
 			version,
@@ -1250,6 +1342,7 @@ async function resolveCursorInterfaceSnapshot(input) {
 	})]);
 	const auth = resolveCursorAuthSnapshot(authProbe);
 	const version = versionProbe.ok ? parseCliVersion(versionProbe.stdout) : null;
+	const usageLimits = auth.status === "authenticated" ? await probeCursorUsageLimits({ observedAt: input.baseSnapshot.checkedAt }) : createUnavailableProviderUsageLimits(input.baseSnapshot.checkedAt, void 0, { reason: auth.status === "unauthenticated" ? "not_authenticated" : "refresh_failed" });
 	let message = input.baseSnapshot.message;
 	let status = input.baseSnapshot.status;
 	if (auth.status === "unauthenticated") {
@@ -1264,6 +1357,7 @@ async function resolveCursorInterfaceSnapshot(input) {
 		snapshot: {
 			...input.baseSnapshot,
 			auth,
+			usageLimits,
 			message,
 			status,
 			version,
@@ -1422,7 +1516,8 @@ function runCommand(input) {
 				"ignore",
 				"pipe",
 				"pipe"
-			]
+			],
+			windowsHide: true
 		});
 		let stdout = "";
 		let stderr = "";
@@ -1499,7 +1594,8 @@ function probeCodexAppServer(launchContract, workingDirectory) {
 				"pipe",
 				"pipe",
 				"pipe"
-			]
+			],
+			windowsHide: true
 		});
 		const pending = /* @__PURE__ */ new Map();
 		let nextId = 1;
@@ -1765,11 +1861,15 @@ function resolveCursorAuthSnapshot(probe) {
 	if (!probe.ok) return { status: "unknown" };
 	const payload = parseJsonRecord(probe.stdout);
 	if (payload?.status === "unauthenticated") return { status: "unauthenticated" };
-	if (payload?.status === "authenticated") return {
-		label: "Signed in",
-		status: "authenticated",
-		type: "cursor_login"
-	};
+	if (payload?.status === "authenticated") {
+		const email = normalizeOptionalText(payload.email);
+		return {
+			...email ? { email } : {},
+			label: email ?? "Signed in",
+			status: "authenticated",
+			type: "cursor_login"
+		};
+	}
 	return { status: "unknown" };
 }
 function resolveOpenClawAuthProbe(probe) {
@@ -2018,10 +2118,19 @@ function projectAgentControllerInterfaceForCloud(snapshot) {
 		skills: [],
 		status: snapshot.status,
 		...snapshot.usageLimits ? { usageLimits: snapshot.usageLimits.map((limit) => ({
-			...limit,
-			...limit.provider ? { provider: { ...limit.provider } } : {}
+			key: limit.key,
+			label: limit.label,
+			observedAt: limit.observedAt,
+			...limit.reason ? { reason: limit.reason } : {},
+			...limit.provider ? { provider: {
+				displayName: limit.provider.displayName,
+				id: limit.provider.id
+			} } : {},
+			resetsAt: limit.resetsAt,
+			status: limit.status,
+			usedPercent: limit.usedPercent
 		})) } : {},
-		usageLimitsSupportMatrixVersion: 3,
+		usageLimitsSupportMatrixVersion: 4,
 		version: snapshot.version,
 		...snapshot.versionAdvisory ? { versionAdvisory: {
 			checkedAt: snapshot.versionAdvisory.checkedAt,
@@ -2666,4 +2775,4 @@ function toErrorMessage(error) {
 //#endregion
 export { submitRuntimeProviderConversationProofs as a, resolveLocalAgentControllerLaunchability as c, resolveAgentControllerInterfaceSnapshot as d, recordRuntimeProviderUsageLimits as f, submitRuntimeAgentControllerReports as i, resolveLocalAgentControllerReportDecision as l, submitProfileRuntimeAgentControllerReport as n, collectLocalAgentControllerInventory as o, submitRuntimeAgentControllerReport as r, resolveLocalAgentControllerBlockerReasonCodes as s, notifyRuntimeReportingAttemptObserver as t, probeAgentControllerUsageObservationAuth as u };
 
-//# sourceMappingURL=runtime-agent-controller-reporting-submission-CbaUsNTF.js.map
+//# sourceMappingURL=runtime-agent-controller-reporting-submission-CQjbBiHh.js.map