quotacap 0.0.24 → 0.0.25

package/README.md

@@ -117,11 +117,11 @@ curl -X PATCH http://localhost:8787/api/providers/claude \
 
 ## Security
 
-QuotaCap is a local daemon. It binds to `127.0.0.1` only (`src/cli/index.ts:56`). It does not listen on `0.0.0.0`. There is no LAN surface.
+QuotaCap is a local daemon. It binds to `127.0.0.1` only (`src/runtime/service.ts` `app.listen`). It does not listen on `0.0.0.0`. There is no LAN surface.
 
 It owns no tokens. It never reads `~/.codex/auth.json`, `~/.kimi-code/credentials/kimi-code.json`, `~/.kimi/credentials/kimi-code.json`, `~/.grok/auth.json`, or `~/.gemini/oauth_creds.json`. It never uses `refresh_token` or `grant_type=refresh_token`. It has no hardcoded client ids. Those OAuth paths and the `.qc-bak` and `.qc-lock` helpers were removed in #14. This is asserted by `tests/adapters/credential-free.test.ts`. Each CLI owns its own session. It never reads `~/.config/muse/auth.json`, `~/.local/share/muse/sessions/`, or `~/.config/muse/tui-history.jsonl`. Each CLI owns its own session. QuotaCap only spawns the CLI and reads its stdout via `exec` (`claude`, `agy`) or PTY (`codex`, `kimi`, `grok`, `muse`).
 
-It stores no `raw` provider payload. The `raw` column was dropped and migrated in `src/store/db.ts:37-48`. `GET /api/quotas` and MCP `get_quotas` never return `raw` (`tests/http/api.test.ts`). History and the token live under `~/.quotacap/` with `0700` on the directory and `0600` on files.
+It stores no `raw` provider payload. The `raw` column was dropped and migrated in `src/store/db.ts` `migrate`. `GET /api/quotas` and MCP `get_quotas` never return `raw` (`tests/http/api.test.ts`). History and the token live under `~/.quotacap/` with `0700` on the directory and `0600` on files.
 
 Every request checks `Host` and `Origin`. `Host` must be loopback (`127.0.0.1`, `localhost`, `[::1]`), otherwise `403`. `Origin` when present must be loopback, otherwise `403`. Absent `Origin` passes for `curl` and MCP. `POST /api/refresh` requires `X-QuotaCap-Token` matching `~/.quotacap/token` with `crypto.timingSafeEqual` (`src/http/server.ts:isValidToken`), otherwise `401`. `GET /assets/*` is rooted with `path.resolve` and a prefix check (`tests/http/api.test.ts`).
 

package/dist/cli/takeover.d.ts

@@ -49,6 +49,7 @@ export interface TakeoverSharedOpts extends WaitOpts {
 export interface ManagedTakeoverOpts extends TakeoverSharedOpts {
     health: HealthView;
     execService?: ExecServiceFn;
+    refreshRegistration?: boolean;
 }
 export declare function takeoverManaged(opts: ManagedTakeoverOpts): Promise<{
     oldVersion: string;

package/dist/cli/takeover.js

@@ -118,9 +118,10 @@ export async function takeoverManaged(opts) {
         ? opts.health.version
         : "unknown";
     const execService = opts.execService ?? ((args, o) => runServiceCommand(args, o ?? {}, {}));
-    const code = await execService(["restart"]);
+    const verb = opts.refreshRegistration ? "install" : "restart";
+    const code = await execService([verb], opts.refreshRegistration ? { version: cliVersion } : undefined);
     if (code !== 0) {
-        throw new TakeoverError(`daemon upgrade failed: service restart exited ${code}`);
+        throw new TakeoverError(`daemon upgrade failed: service ${verb} exited ${code}`);
     }
     const healthy = await waitForHealthy(opts.port, cliVersion, opts);
     if (!healthy) {

package/dist/cli/update.js

@@ -36,8 +36,10 @@ function unknownRefusal() {
 }
 // Restart the running daemon onto the just-installed target version. Unlike
 // the skew paths in web/status/advise, the comparison version is the target
-// (the running CLI is still the old binary), and the unmanaged path leaves
-// the daemon stopped with guidance instead of foreground-starting.
+// (the running CLI is still the old binary), the managed path refreshes the
+// service registration instead of only restarting (regenerating the
+// supervisor PATH), and the unmanaged path leaves the daemon stopped with
+// guidance instead of foreground-starting.
 export async function postUpdateTakeover(opts) {
     const { target, port } = opts;
     const dataDir = opts.dataDir ?? path.dirname(getDbPath());
@@ -87,6 +89,7 @@ export async function postUpdateTakeover(opts) {
                 cliExec: execPath,
                 createClient,
                 execService,
+                refreshRegistration: true,
                 ...takeoverOpts,
             });
             return { notes: [r.message], warnings: [], error: null, exitCode: 0 };

package/dist/config.d.ts

@@ -6,18 +6,21 @@ declare const ConfigSchema: z.ZodObject<{
     port: z.ZodDefault<z.ZodNumber>;
     pollMinutes: z.ZodDefault<z.ZodNumber>;
     enabledProviders: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    knownProviders: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     providerNames: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>>>;
     experimentalIngest: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     port: number;
     pollMinutes: number;
     enabledProviders: string[];
+    knownProviders: string[];
     providerNames: Record<string, string>;
     experimentalIngest?: boolean | undefined;
 }, {
     port?: number | undefined;
     pollMinutes?: number | undefined;
     enabledProviders?: string[] | undefined;
+    knownProviders?: string[] | undefined;
     providerNames?: Record<string, string> | undefined;
     experimentalIngest?: boolean | undefined;
 }>;
@@ -45,6 +48,28 @@ export declare function writeConfig(c: Config, p?: string): Promise<void>;
  */
 export declare function setProviderNameOverride(id: string, displayName: string | null, p?: string): Promise<void>;
 export declare function resetAllProviderNameOverrides(p?: string): Promise<void>;
+export declare const LEGACY_KNOWN_PROVIDERS: string[];
+export interface AutoEnableDeps {
+    configPath?: string;
+    which?: (bin: string) => string | null;
+}
+export interface AutoEnableResult {
+    enabledProviders: string[];
+    knownProviders: string[];
+    changed: boolean;
+}
+/**
+ * Auto-enable newly shipped adapters. For each registered adapter (minus
+ * `manual`, which has no CLI binary) absent from knownProviders, resolve its
+ * binary on PATH and append it to both lists when found. An adapter whose
+ * binary is missing stays unknown so it is re-checked on the next start; a
+ * provider already known but disabled is never re-added. Raw-JSON mutation
+ * like setProviderNameOverride: unknown keys are preserved, never a schema
+ * round-trip. Returns null when the file is missing, unparseable, or
+ * structurally off, so readServiceConfig keeps owning that error; throws
+ * only when a decided write fails. Persists only when something changed.
+ */
+export declare function autoEnableNewProviders(deps?: AutoEnableDeps): Promise<AutoEnableResult | null>;
 export interface ServiceMetadata {
     version: string;
     exec: string;

package/dist/config.js

@@ -1,5 +1,6 @@
 import fs from "node:fs/promises";
 import fsSync from "node:fs";
+import { execFileSync } from "node:child_process";
 import os from "node:os";
 import path from "node:path";
 import { z } from "zod";
@@ -33,6 +34,7 @@ const ConfigSchema = z.object({
     port: z.number().default(8787),
     pollMinutes: z.number().default(15),
     enabledProviders: z.array(z.string()).default(["claude", "codex", "kimi", "grok", "agy", "muse"]),
+    knownProviders: z.array(z.string()).default(["claude", "codex", "kimi", "grok", "agy", "muse"]),
     providerNames: z.record(z.string(), ProviderDisplayNameSchema).default({}),
     // Optional, omitted from defaults and `init` output. Manual ingest stays
     // in-tree but is not a public surface until the product design lands.
@@ -94,6 +96,10 @@ const ServiceConfigSchema = z.object({
             });
         }
     }),
+    // Machine-managed by autoEnableNewProviders: ids are deliberately NOT
+    // validated against the registry, so a stale entry can never brick daemon
+    // start. A non-array still fails naming the field.
+    knownProviders: z.array(z.string()).default(["claude", "codex", "kimi", "grok", "agy", "muse"]),
     providerNames: z.record(z.string(), ProviderDisplayNameSchema).default({}),
     experimentalIngest: z.boolean().optional(),
 });
@@ -220,6 +226,102 @@ export async function resetAllProviderNameOverrides(p) {
     await fs.mkdir(path.dirname(file), { recursive: true });
     await fs.writeFile(file, JSON.stringify(rawObj, null, 2) + "\n");
 }
+// Frozen pre-auto-enable provider set. Configs written before knownProviders
+// existed are seeded with exactly these five, so any adapter shipped later
+// reads as new. Never extend this list: seeding from the live registry would
+// mark every adapter known and silently disable auto-enable.
+export const LEGACY_KNOWN_PROVIDERS = ["claude", "codex", "kimi", "grok", "agy"];
+// PATH lookup kept local: importing the sibling in src/service/macos.ts
+// would create a config<->service import cycle.
+function defaultWhich(bin) {
+    try {
+        const out = execFileSync("which", [bin], {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "pipe"],
+        }).trim();
+        return out.length > 0 ? out : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Auto-enable newly shipped adapters. For each registered adapter (minus
+ * `manual`, which has no CLI binary) absent from knownProviders, resolve its
+ * binary on PATH and append it to both lists when found. An adapter whose
+ * binary is missing stays unknown so it is re-checked on the next start; a
+ * provider already known but disabled is never re-added. Raw-JSON mutation
+ * like setProviderNameOverride: unknown keys are preserved, never a schema
+ * round-trip. Returns null when the file is missing, unparseable, or
+ * structurally off, so readServiceConfig keeps owning that error; throws
+ * only when a decided write fails. Persists only when something changed.
+ */
+export async function autoEnableNewProviders(deps) {
+    const file = getConfigPath(deps?.configPath);
+    let rawObj;
+    try {
+        const parsed = JSON.parse(await fs.readFile(file, "utf8"));
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            return null;
+        }
+        rawObj = parsed;
+    }
+    catch {
+        return null;
+    }
+    if (("enabledProviders" in rawObj && !Array.isArray(rawObj.enabledProviders)) ||
+        ("knownProviders" in rawObj && !Array.isArray(rawObj.knownProviders))) {
+        return null;
+    }
+    const which = deps?.which ?? defaultWhich;
+    const prevEnabled = Array.isArray(rawObj.enabledProviders)
+        ? rawObj.enabledProviders
+        : defaultConfig().enabledProviders;
+    const prevKnown = Array.isArray(rawObj.knownProviders)
+        ? rawObj.knownProviders
+        : LEGACY_KNOWN_PROVIDERS;
+    const enabled = [...prevEnabled];
+    const known = [...prevKnown];
+    for (const id of Object.keys(adapters)) {
+        if (id === "manual" || known.includes(id))
+            continue;
+        let resolved = null;
+        try {
+            resolved = which(id);
+        }
+        catch {
+            resolved = null;
+        }
+        if (!resolved)
+            continue;
+        if (!enabled.includes(id))
+            enabled.push(id);
+        known.push(id);
+    }
+    const changed = JSON.stringify(enabled) !== JSON.stringify(prevEnabled) ||
+        JSON.stringify(known) !== JSON.stringify(prevKnown);
+    if (!changed) {
+        return {
+            enabledProviders: enabled,
+            knownProviders: known,
+            changed: false,
+        };
+    }
+    rawObj.enabledProviders = enabled;
+    rawObj.knownProviders = known;
+    try {
+        await fs.mkdir(path.dirname(file), { recursive: true });
+        await fs.writeFile(file, JSON.stringify(rawObj, null, 2) + "\n");
+    }
+    catch (err) {
+        throw new Error(`cannot update provider enablement: failed to write ${file}: ${err?.message ?? err}`);
+    }
+    return {
+        enabledProviders: enabled,
+        knownProviders: known,
+        changed: true,
+    };
+}
 export function serviceMetadataPath(dataDir = path.dirname(getDbPath())) {
     return path.join(dataDir, "service.json");
 }

package/dist/runtime/service.js

@@ -11,7 +11,7 @@ import { createCoordinator } from "./poll.js";
 import { killAll } from "./spawn.js";
 import { ensureToken } from "./token.js";
 import { openDb, migrate } from "../store/db.js";
-import { ensureConfig, getConfigPath, getDbPath, isExperimentalIngestEnabled, readServiceConfig, readServiceMetadata } from "../config.js";
+import { autoEnableNewProviders, ensureConfig, getConfigPath, getDbPath, isExperimentalIngestEnabled, readServiceConfig, readServiceMetadata } from "../config.js";
 import { buildApp } from "../http/server.js";
 import { detectChannel, refreshUpdateCache } from "./updates.js";
 import { VERSION } from "../version.js";
@@ -115,10 +115,17 @@ export async function startService(opts) {
         exit(1);
         throw err instanceof Error ? err : new Error(String(err));
     };
-    // 1. Provision config when absent, then strict validation (a present-but-
-    // invalid file still fails naming the field). The daemon always leaves a
-    // real file behind.
+    // 1. Provision config when absent, auto-enable newly shipped adapters,
+    // then strict validation (a present-but-invalid file still fails naming
+    // the field). The daemon always leaves a real file behind. Auto-enable
+    // runs before validation on every start so all upgrade channels (npm,
+    // brew, installer, manual binary swap) pick up new adapters; a failed
+    // migration warns and continues with the unmigrated file instead of
+    // refusing to serve.
     await ensureConfig().catch((e) => fail(e));
+    await autoEnableNewProviders().catch((e) => {
+        console.warn(`[quotacap] provider auto-enable skipped: ${e instanceof Error ? e.message : String(e)}`);
+    });
     const config = await readServiceConfig().catch((e) => fail(e));
     const port = opts?.port ?? config.port;
     const dataDir = opts?.dataDir ?? path.dirname(getDbPath());

package/dist/service/index.js

@@ -73,7 +73,10 @@ export async function runServiceCommand(args, opts = {}, deps = {}) {
     try {
         switch (verb) {
             case "install":
-                await backend.install(deps);
+                // Internal: the post-update refresh passes the target version so
+                // install compares and records it instead of the old in-process
+                // VERSION. The `service install` CLI never sets opts.version.
+                await backend.install({ ...deps, version: opts.version ?? deps.version });
                 break;
             case "uninstall":
                 await backend.uninstall(deps);

package/dist/service/macos.d.ts

@@ -14,17 +14,28 @@ export interface ServiceDeps {
     which?: (bin: string) => string | null;
     lintPlist?: (plistFile: string) => void;
     waitReady?: (port: number) => Promise<boolean>;
+    waitReleased?: (port: number) => Promise<boolean>;
     print?: (msg: string) => void;
     error?: (msg: string) => void;
     now?: () => Date;
     sleep?: (ms: number) => Promise<void>;
     bootstrapTimeoutMs?: number;
+    version?: string;
 }
 export declare function foregroundGuidance(verb: string, platform: string): string;
 export declare function defaultRunLaunchctl(args: string[]): string;
 export declare function defaultWhich(bin: string): string | null;
 export declare function defaultLintPlist(plistFile: string): void;
 export declare function defaultWaitReady(port: number, timeoutMs?: number): Promise<boolean>;
+/**
+ * `launchctl bootout` and `systemctl --user stop` both return before the job
+ * has actually gone, so a restart that starts immediately races the dying
+ * process for the port: the replacement fails to bind and the restart reports
+ * "did not become ready". Wait until nothing answers on the port.
+ *
+ * Resolves true as soon as the port is free, false if it never frees.
+ */
+export declare function defaultWaitReleased(port: number, timeoutMs?: number): Promise<boolean>;
 export interface ServiceExec {
     argv: string[];
     entry: string;

package/dist/service/macos.js

@@ -66,6 +66,28 @@ export async function defaultWaitReady(port, timeoutMs = 15000) {
     }
     return false;
 }
+/**
+ * `launchctl bootout` and `systemctl --user stop` both return before the job
+ * has actually gone, so a restart that starts immediately races the dying
+ * process for the port: the replacement fails to bind and the restart reports
+ * "did not become ready". Wait until nothing answers on the port.
+ *
+ * Resolves true as soon as the port is free, false if it never frees.
+ */
+export async function defaultWaitReleased(port, timeoutMs = 10000) {
+    const deadline = Date.now() + timeoutMs;
+    const client = createServiceClient({ port, timeoutMs: 500 });
+    while (Date.now() < deadline) {
+        try {
+            await client.get("/health");
+        }
+        catch {
+            return true;
+        }
+        await new Promise((r) => setTimeout(r, 250));
+    }
+    return false;
+}
 const TRANSIENT_PATTERNS = ["/_npx/", "/.npm/_npx/", "/.worktrees/"];
 export function resolveServiceExec(deps) {
     const execPath = deps?.execPath ?? process.execPath;
@@ -258,6 +280,7 @@ export async function install(deps = {}) {
         return;
     }
     const { home, uid, dataDir, print, run, lint, sleep, bootstrapTimeoutMs } = resolved(deps);
+    const version = deps.version ?? VERSION;
     // Provision beside the data dir the service will use (identical to the
     // QUOTACAP_HOME path in production; hermetic under injected test dirs).
     await ensureConfig(path.join(dataDir, "config.json"));
@@ -300,7 +323,7 @@ export async function install(deps = {}) {
         const samePlist = existing === plist;
         const samePaths = !!meta &&
             PROVIDER_BINS.every((bin) => (meta.providerPaths?.[bin] ?? null) === providerPaths[bin]);
-        if (samePlist && samePaths && meta?.version === VERSION) {
+        if (samePlist && samePaths && meta?.version === version) {
             await bootstrapWithRetry(run, uid, plistFile, {
                 expectReplace: false,
                 sleep,
@@ -312,7 +335,7 @@ export async function install(deps = {}) {
         }
         // Upgrade: refresh metadata, stop the old job, replace, load.
         writeServiceMetadata({
-            version: VERSION,
+            version,
             exec: argv[0],
             ...(entry ? { entry } : {}),
             providerPaths,
@@ -322,7 +345,7 @@ export async function install(deps = {}) {
     }
     else {
         writeServiceMetadata({
-            version: VERSION,
+            version,
             exec: argv[0],
             ...(entry ? { entry } : {}),
             providerPaths,
@@ -405,6 +428,14 @@ export async function restart(deps = {}) {
         return;
     }
     await stop(deps);
+    // bootout is asynchronous: without this the replacement races the dying
+    // process for the port and start() fails its readiness check.
+    // deps.port keeps tests off the real daemon's port.
+    const port = deps.port ?? (await readConfig()).port;
+    const waitReleased = deps.waitReleased ?? defaultWaitReleased;
+    if (!(await waitReleased(port))) {
+        (deps.print ?? console.log)(`port ${port} is still in use after stopping; starting anyway`);
+    }
     await start(deps);
 }
 function parsePrintOutput(out) {

package/dist/service/systemd.d.ts

@@ -13,9 +13,11 @@ export interface SystemdDeps {
     runSystemctl?: (args: string[]) => string;
     which?: (bin: string) => string | null;
     waitReady?: (port: number) => Promise<boolean>;
+    waitReleased?: (port: number) => Promise<boolean>;
     print?: (msg: string) => void;
     error?: (msg: string) => void;
     now?: () => Date;
+    version?: string;
 }
 export declare function formatSystemctlError(args: string[], detail: string): Error;
 export declare function defaultRunSystemctl(args: string[]): string;

package/dist/service/systemd.js

@@ -11,7 +11,7 @@ import { VERSION } from "../version.js";
 import { getDbPath, readServiceMetadata, writeServiceMetadata, } from "../config.js";
 import { ensureConfig, readConfig } from "../config.js";
 import { createServiceClient } from "../runtime/client.js";
-import { SERVICE_LABEL, PROVIDER_BINS, buildChildPath, defaultWaitReady, defaultWhich, formatMissingProviders, formatStatus, foregroundGuidance, resolveProviderPaths, resolveServiceExec, } from "./macos.js";
+import { SERVICE_LABEL, PROVIDER_BINS, buildChildPath, defaultWaitReady, defaultWaitReleased, defaultWhich, formatMissingProviders, formatStatus, foregroundGuidance, resolveProviderPaths, resolveServiceExec, } from "./macos.js";
 export const SERVICE_UNIT = `${SERVICE_LABEL}.service`;
 export function serviceSupported(platform = process.platform) {
     return platform === "linux";
@@ -107,6 +107,7 @@ export async function install(deps = {}) {
         return;
     }
     const { home, dataDir, print, run } = resolved(deps);
+    const version = deps.version ?? VERSION;
     // Provision beside the data dir the service will use (identical to the
     // QUOTACAP_HOME path in production; hermetic under injected test dirs).
     await ensureConfig(path.join(dataDir, "config.json"));
@@ -141,7 +142,7 @@ export async function install(deps = {}) {
         const sameUnit = existing === unit;
         const samePaths = !!meta &&
             PROVIDER_BINS.every((bin) => (meta.providerPaths?.[bin] ?? null) === providerPaths[bin]);
-        if (sameUnit && samePaths && meta?.version === VERSION) {
+        if (sameUnit && samePaths && meta?.version === version) {
             run(["enable", "--now", SERVICE_UNIT]);
             const port = await waitForReady(deps, dataDir);
             print(`service already installed and up to date; ready on port ${port}`);
@@ -149,7 +150,7 @@ export async function install(deps = {}) {
         }
         // Upgrade: refresh metadata, stop the old job, replace, load.
         writeServiceMetadata({
-            version: VERSION,
+            version,
             exec: argv[0],
             ...(entry ? { entry } : {}),
             providerPaths,
@@ -159,7 +160,7 @@ export async function install(deps = {}) {
     }
     else {
         writeServiceMetadata({
-            version: VERSION,
+            version,
             exec: argv[0],
             ...(entry ? { entry } : {}),
             providerPaths,
@@ -240,6 +241,13 @@ export async function restart(deps = {}) {
         return;
     }
     await stop(deps);
+    // systemctl stop can return before the port is released; same race as launchd.
+    // deps.port mirrors start(): tests must never probe the real daemon's port.
+    const port = deps.port ?? (await readConfig()).port;
+    const waitReleased = deps.waitReleased ?? defaultWaitReleased;
+    if (!(await waitReleased(port))) {
+        (deps.print ?? console.log)(`port ${port} is still in use after stopping; starting anyway`);
+    }
     await start(deps);
 }
 function parseShowOutput(out) {

package/dist/version.js

@@ -1,2 +1,2 @@
 // generated by scripts/build-embed.mjs — do not edit
-export const VERSION = "0.0.24";
+export const VERSION = "0.0.25";

package/dist/web/src/components/ResetRail.js

@@ -175,7 +175,7 @@ export function ResetRail({ providers, asOf, onSelectProvider, }) {
                             return (_jsxs("button", { "data-testid": "pin", type: "button", className: `pin ${pin.band} ${tierClass} ${alignClass}`, style: {
                                     left: `${pin.positionPct}%`,
                                     "--dot-color": paceColor,
-                                }, "aria-label": `${name}: ${pace}, resets ${when}`, onClick: () => onSelectProvider(pin.id), children: [pin.band === "above" ? (_jsxs(_Fragment, { children: [_jsx("span", { className: "pin-when", children: when }), _jsxs("span", { className: `pin-label ${paceCls}`, style: pinBorder, children: [name.split(" ")[0], pin.estimated ? " (est.)" : ""] }), _jsx("span", { className: "pin-stem" }), _jsx("span", { className: "pin-dot" })] })) : (_jsxs(_Fragment, { children: [_jsx("span", { className: "pin-dot" }), _jsx("span", { className: "pin-stem" }), _jsxs("span", { className: `pin-label ${paceCls}`, style: pinBorder, children: [name.split(" ")[0], pin.estimated ? " (est.)" : ""] }), _jsx("span", { className: "pin-when", children: when })] })), _jsxs("span", { className: "pin-tooltip", role: "tooltip", children: [_jsx("b", { children: name }), _jsx("span", { className: "pt-sep", children: "\u00B7" }), provider?.quota ? `${provider.quota.usedPct}% used` : "no readings", _jsx("span", { className: "pt-sep", children: "\u00B7" }), left ? `${left} left` : when, pin.estimated ? " (est.)" : ""] })] }, pin.id));
+                                }, "aria-label": `${name}: ${pace}, resets ${when}`, onClick: () => onSelectProvider(pin.id), children: [pin.band === "above" ? (_jsxs(_Fragment, { children: [_jsx("span", { className: "pin-when", children: pin.estimated ? `${when} (est.)` : when }), _jsx("span", { className: `pin-label ${paceCls}`, style: pinBorder, children: name }), _jsx("span", { className: "pin-stem" }), _jsx("span", { className: "pin-dot" })] })) : (_jsxs(_Fragment, { children: [_jsx("span", { className: "pin-dot" }), _jsx("span", { className: "pin-stem" }), _jsx("span", { className: `pin-label ${paceCls}`, style: pinBorder, children: name }), _jsx("span", { className: "pin-when", children: pin.estimated ? `${when} (est.)` : when })] })), _jsxs("span", { className: "pin-tooltip", role: "tooltip", children: [_jsx("b", { children: name }), _jsx("span", { className: "pt-sep", children: "\u00B7" }), provider?.quota ? `${provider.quota.usedPct}% used` : "no readings", _jsx("span", { className: "pt-sep", children: "\u00B7" }), left ? `${left} left` : when, pin.estimated ? " (est.)" : ""] })] }, pin.id));
                         }), placement.clusters.map((cluster, index) => {
                             const alignClass = cluster.positionPct < 12 ? "pin-start" : cluster.positionPct > 88 ? "pin-end" : "";
                             const tierClass = cluster.tier > 0 ? `tier${cluster.tier + 1}` : "tier1";