quotacap 0.0.36 → 0.0.38

package/dist/config.js

@@ -37,6 +37,7 @@ const ConfigSchema = z.object({
     enabledProviders: z.array(z.string()).default(["claude", "codex", "kimi", "grok", "agy", "muse"]),
     knownProviders: z.array(z.string()).default(["claude", "codex", "kimi", "grok", "agy", "muse"]),
     providerNames: z.record(z.string(), ProviderDisplayNameSchema).default({}),
+    opencodeGoConsentAt: z.string().nullable().default(null),
     // Optional, omitted from defaults and `init` output. Manual ingest stays
     // in-tree but is not a public surface until the product design lands.
     experimentalIngest: z.boolean().optional(),
@@ -90,7 +91,7 @@ const ServiceConfigSchema = z.object({
     enabledProviders: z
         .array(z.string())
         .superRefine((ids, ctx) => {
-        const bad = ids.filter((id) => !(id in adapters));
+        const bad = ids.filter((id) => !Object.hasOwn(adapters, id));
         if (bad.length > 0) {
             ctx.addIssue({
                 code: z.ZodIssueCode.custom,
@@ -103,6 +104,7 @@ const ServiceConfigSchema = z.object({
     // start. A non-array still fails naming the field.
     knownProviders: z.array(z.string()).default(["claude", "codex", "kimi", "grok", "agy", "muse"]),
     providerNames: z.record(z.string(), ProviderDisplayNameSchema).default({}),
+    opencodeGoConsentAt: z.string().nullable().default(null),
     experimentalIngest: z.boolean().optional(),
 });
 export function defaultConfig() {
@@ -205,6 +207,49 @@ export async function setProviderNameOverride(id, displayName, p) {
     await fs.mkdir(path.dirname(file), { recursive: true });
     await fs.writeFile(file, JSON.stringify(rawObj, null, 2) + "\n");
 }
+/**
+ * Safe mutation of provider enablement in config.json: raw-JSON like
+ * setProviderNameOverride (unknown keys preserved). Enabling opencode-go
+ * records the consent timestamp; disabling it revokes the consent record.
+ */
+export async function setProviderEnabled(id, enabled, p) {
+    const file = getConfigPath(p);
+    let rawObj = {};
+    try {
+        const raw = await fs.readFile(file, "utf8");
+        const parsed = JSON.parse(raw);
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            throw new Error(`invalid config: ${file} must contain a JSON object`);
+        }
+        rawObj = parsed;
+    }
+    catch (err) {
+        if (err?.code === "ENOENT") {
+            rawObj = {};
+        }
+        else {
+            throw new Error(`cannot update provider enablement: failed to read ${file}: ${err?.message ?? err}`);
+        }
+    }
+    const list = Array.isArray(rawObj.enabledProviders)
+        ? [...rawObj.enabledProviders]
+        : [...defaultConfig().enabledProviders];
+    if (enabled) {
+        if (!list.includes(id))
+            list.push(id);
+    }
+    else {
+        const at = list.indexOf(id);
+        if (at >= 0)
+            list.splice(at, 1);
+    }
+    rawObj.enabledProviders = list;
+    if (id === "opencode-go") {
+        rawObj.opencodeGoConsentAt = enabled ? new Date().toISOString() : null;
+    }
+    await fs.mkdir(path.dirname(file), { recursive: true });
+    await fs.writeFile(file, JSON.stringify(rawObj, null, 2) + "\n");
+}
 export async function resetAllProviderNameOverrides(p) {
     const file = getConfigPath(p);
     let rawObj = {};
@@ -233,6 +278,9 @@ export async function resetAllProviderNameOverrides(p) {
 // reads as new. Never extend this list: seeding from the live registry would
 // mark every adapter known and silently disable auto-enable.
 export const LEGACY_KNOWN_PROVIDERS = ["claude", "codex", "kimi", "grok", "agy"];
+// Opt-in adapters are never auto-enabled: a binary on PATH is not consent.
+// opencode-go polls a stored credential, so only an explicit enable adds it.
+const OPT_IN_ADAPTERS = new Set(["opencode-go"]);
 // PATH lookup kept local: importing the sibling in src/service/macos.ts
 // would create a config<->service import cycle.
 function defaultWhich(bin) {
@@ -249,7 +297,8 @@ function defaultWhich(bin) {
 }
 /**
  * Auto-enable newly shipped adapters. For each registered adapter (minus
- * `manual`, which has no CLI binary) absent from knownProviders, resolve its
+ * `manual`, which has no CLI binary, and minus opt-in adapters, which an
+ * explicit enable must consent to) absent from knownProviders, resolve its
  * binary on PATH and append it to both lists when found. An adapter whose
  * binary is missing stays unknown so it is re-checked on the next start; a
  * provider already known but disabled is never re-added. Raw-JSON mutation
@@ -285,7 +334,7 @@ export async function autoEnableNewProviders(deps) {
     const enabled = [...prevEnabled];
     const known = [...prevKnown];
     for (const id of Object.keys(adapters)) {
-        if (id === "manual" || known.includes(id))
+        if (id === "manual" || OPT_IN_ADAPTERS.has(id) || known.includes(id))
             continue;
         let resolved = null;
         try {

package/dist/diagnostics/failure.js

@@ -22,6 +22,8 @@ export function formatProviderName(provider) {
             return "Antigravity (3rd-party)";
         case "muse":
             return "Muse";
+        case "opencode-go":
+            return "OpenCode Go";
         case "all":
             return "QuotaCap service";
         default:
@@ -224,6 +226,15 @@ function matchPrecedence(evidence, errorName, errorCode, text) {
     if (/\bno weekly bucket\b/i.test(text)) {
         return { code: "parse_error", phrase: "no weekly bucket" };
     }
+    if (/\brolling usage not found\b/i.test(text)) {
+        return { code: "parse_error", phrase: "rolling usage not found" };
+    }
+    if (/\bbad rolling pct\b/i.test(text)) {
+        return { code: "parse_error", phrase: "bad rolling pct" };
+    }
+    if (/\busage status not ok\b/i.test(text)) {
+        return { code: "parse_error", phrase: "usage status not ok" };
+    }
     // Order 8b: service_unavailable — subscription or service currently unavailable
     if (/\b(?:subscription|service|usage)\s+currently\s+unavailable\b/i.test(text) ||
         /\bsubscriptions aren't currently available\b/i.test(text)) {
@@ -408,7 +419,7 @@ function mapCategory(code) {
             return "unknown";
     }
 }
-function getSummaryAndAction(code, providerName) {
+function getSummaryAndAction(code, providerName, provider) {
     switch (code) {
         case "terminal_error":
             return {
@@ -443,7 +454,9 @@ function getSummaryAndAction(code, providerName) {
         case "service_unavailable":
             return {
                 summary: `${providerName} usage currently unavailable`,
-                action: `${providerName} reported that subscription usage is currently unavailable. Send a prompt in ${providerName} to refresh its session limits, or wait for the next scheduled poll.`,
+                action: provider === "muse"
+                    ? `${providerName} reported that subscription usage is currently unavailable. QuotaCap already retried automatically with a warm-up prompt. If this persists, send a prompt in ${providerName}, or wait for the next scheduled poll.`
+                    : `${providerName} reported that subscription usage is currently unavailable. Send a prompt in ${providerName} to refresh its session limits, or wait for the next scheduled poll.`,
             };
         case "timeout":
             return {
@@ -473,7 +486,7 @@ export function classifyFailure(provider, reason) {
     }
     const category = mapCategory(diag.diagnosticCode);
     const pName = formatProviderName(provider);
-    const { summary, action } = getSummaryAndAction(diag.diagnosticCode, pName);
+    const { summary, action } = getSummaryAndAction(diag.diagnosticCode, pName, provider);
     return {
         diagnosticCode: diag.diagnosticCode,
         errorDetail: diag.errorDetail,

package/dist/http/server.d.ts

@@ -10,6 +10,8 @@ export interface RuntimeContext {
     coordinator: Coordinator;
     enabledProviders: string[];
     providerNames?: Record<string, string>;
+    /** Detected-but-not-enabled opt-in providers, computed once at start. */
+    detectedProviders?: string[];
     version: string;
     exec: string;
     now?: () => Date;

package/dist/http/server.js

@@ -10,12 +10,13 @@ import { validateTask } from "../advisory/validate.js";
 import { readUpdateCache } from "../runtime/updates.js";
 import { compareVersions } from "../runtime/versions.js";
 import { parseManualUsage } from "../adapters/manual.js";
+import { adapters } from "../adapters/index.js";
 import { upsertQuota } from "../store/quotas.js";
 import { createCoordinator, ServiceClosing, } from "../runtime/poll.js";
 import { classifyFailure } from "../diagnostics/failure.js";
 import { validateDisplayName } from "../advisory/validation.js";
 import { providerIdentity } from "../advisory/provider-names.js";
-import { setProviderNameOverride } from "../config.js";
+import { setProviderNameOverride, setProviderEnabled } from "../config.js";
 import { ensureCatalogs, catalogProviders, CATALOG_FAIL_COOLDOWN_MS } from "../catalog/index.js";
 import { getAllLatest } from "../store/quotas.js";
 const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "[::1]", "::1"]);
@@ -91,6 +92,7 @@ export function testCtx(db, overrides) {
         coordinator: createCoordinator({ db, enabledProviders: [] }),
         enabledProviders: [],
         providerNames: {},
+        detectedProviders: [],
         version: "test",
         exec: "test",
         ingestEnabled: false,
@@ -119,6 +121,7 @@ function snapshotOf(ctx) {
                 upToDate: !cache || compareVersions(cache.latest, ctx.version) <= 0,
                 checkedAt: cache?.checkedAt ?? null,
             },
+            detectedProviders: ctx.detectedProviders ?? [],
         },
     });
 }
@@ -363,6 +366,39 @@ export function buildApp(ctx) {
             override: validatedName,
         };
     });
+    // Enable/disable a provider. Token-gated like refresh. Consent is recorded
+    // protocol-level for the one provider whose key QuotaCap reads. The
+    // coordinator's enabled set is a start-time snapshot, so the response
+    // tells every caller a restart applies it — no live mutation.
+    app.post("/api/providers/:id/enabled", async (req, reply) => {
+        const headerToken = req.headers["x-quotacap-token"];
+        if (!isValidToken(headerToken, ctx.token)) {
+            return reply.status(401).send({ error: "unauthorized: missing or invalid X-QuotaCap-Token header" });
+        }
+        const { id } = req.params;
+        if (typeof id !== "string" || !id || !Object.hasOwn(adapters, id) || id === "manual") {
+            return reply.status(400).send({ error: `unknown provider id: ${id}` });
+        }
+        const body = (req.body ?? {});
+        if (typeof body !== "object" || body === null || typeof body.enabled !== "boolean") {
+            return reply.status(400).send({ error: "invalid-argument: body must contain enabled: boolean" });
+        }
+        const enabling = body.enabled === true;
+        if (id === "opencode-go" && enabling && body.consent !== true) {
+            return reply.status(400).send({ error: "consent required: enabling opencode-go requires consent: true" });
+        }
+        if (ctx.configPath) {
+            try {
+                await setProviderEnabled(id, enabling, ctx.configPath);
+            }
+            catch (err) {
+                return reply.status(500).send({
+                    error: `failed to persist configuration: ${err?.message ?? String(err)}`,
+                });
+            }
+        }
+        return { ok: true, id, enabled: enabling, restartRequired: true };
+    });
     // Graceful-stop request for CLI-driven takeovers. The endpoint restarts
     // nothing by itself: it responds 202, then the service follows its normal
     // SIGTERM path while the CLI spawns the successor after the port releases.

package/dist/runtime/service.js

@@ -16,6 +16,7 @@ import { buildApp } from "../http/server.js";
 import { detectChannel, refreshUpdateCache } from "./updates.js";
 import { VERSION } from "../version.js";
 import { claudeAdapter } from "../adapters/claude.js";
+import { opencodeGoDetected } from "../adapters/opencode-go.js";
 import { classifyFailure } from "../diagnostics/failure.js";
 import { ensureCatalogs, catalogProviders } from "../catalog/index.js";
 export function resolveClaudeExecPath() {
@@ -198,6 +199,7 @@ export async function startService(opts) {
             token,
             coordinator,
             enabledProviders: config.enabledProviders,
+            detectedProviders: opencodeGoDetected() ? ["opencode-go"] : [],
             providerNames: config.providerNames,
             catalogTtlHours: config.catalogTtlHours,
             version: VERSION,

package/dist/version.js

@@ -1,2 +1,2 @@
 // generated by scripts/build-embed.mjs — do not edit
-export const VERSION = "0.0.36";
+export const VERSION = "0.0.38";

package/dist/web/src/App.js

@@ -2,7 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { useCallback, useEffect, useState } from "react";
 import { createRoot } from "react-dom/client";
 import "./theme.css";
-import { daemonEndpoint, loadState, triggerRefresh, StateHttpError, StateNetworkError, } from "./api.js";
+import { daemonEndpoint, loadState, triggerRefresh, setProviderEnabled, StateHttpError, StateNetworkError, } from "./api.js";
 import { ageLabel, firstRun, toViewModel } from "./state.js";
 import { Recommendation } from "./components/Recommendation.js";
 import { SubscriptionList } from "./components/SubscriptionList.js";
@@ -14,6 +14,7 @@ import { navigate, routeFor, useRoute } from "./router.js";
 import { Onboarding } from "./pages/Onboarding.js";
 import { Header } from "./components/Header.js";
 import { FaultBanner } from "./components/FaultBanner.js";
+import { ConsentModal, OpencodeGoBanner, showOpenCodeGoBanner } from "./components/OpencodeGoBanner.js";
 import { SiteFooter } from "./components/PacingLegend.js";
 function UnavailablePanel({ endpoint, lastGood, onRetry, }) {
     return (_jsxs("div", { "data-testid": "state-unavailable", role: "alert", children: [_jsx("h2", { children: "Service unavailable" }), _jsxs("p", { children: ["The QuotaCap daemon did not answer at ", _jsx("code", { children: endpoint }), ". Start it with", " ", _jsx("code", { children: "quotacap daemon" }), ", then retry."] }), _jsx("button", { type: "button", onClick: onRetry, children: "Retry" }), lastGood && _jsxs("p", { children: ["Showing last readings (", ageLabel(lastGood.asOf), ")."] })] }));
@@ -34,6 +35,9 @@ function App() {
     const [selectedProvider, setSelectedProvider] = useState(null);
     const [adviceOpen, setAdviceOpen] = useState(false);
     const [settingsOpen, setSettingsOpen] = useState(false);
+    const [consentOpen, setConsentOpen] = useState(false);
+    const [consentBusy, setConsentBusy] = useState(false);
+    const [goSuppressed, setGoSuppressed] = useState(false);
     const route = useRoute();
     const target = snapshot ? routeFor(route, firstRun(snapshot)) : null;
     useEffect(() => {
@@ -98,6 +102,23 @@ function App() {
             setRefreshing(false);
         }
     }, [load]);
+    const handleSetProviderEnabled = (id, enabled) => {
+        if (id === "opencode-go" && enabled) {
+            setConsentOpen(true);
+            return;
+        }
+        void (async () => {
+            try {
+                await setProviderEnabled(id, enabled);
+                if (!enabled)
+                    setGoSuppressed(false);
+                setNotice(`${id === "opencode-go" ? "OpenCode Go" : id} ${enabled ? "enabled" : "disabled"} — restart the daemon to apply it.`);
+            }
+            catch (e) {
+                setNotice(`Could not update ${id}: ${e instanceof Error ? e.message : String(e)}`);
+            }
+        })();
+    };
     const setupMode = target === "/setup";
     const pollErrorText = error
         ? error.kind === "http-error"
@@ -106,7 +127,21 @@ function App() {
         : null;
     const header = (_jsx(Header, { runtime: snapshot?.runtime ?? null, unreachable: error?.kind === "service-unavailable", refreshing: refreshing, onRefresh: () => void refresh(), onSettings: () => setSettingsOpen(true) }));
     if (snapshot && setupMode) {
-        return (_jsxs(_Fragment, { children: [header, _jsx("main", { children: _jsx(Onboarding, { snapshot: snapshot, onFirstPoll: () => void refresh(), polling: refreshing, pollError: pollErrorText }) }), _jsx(SettingsDrawer, { open: settingsOpen, providers: snapshot.providers, onRefresh: () => void refresh(), refreshing: refreshing, onClose: () => setSettingsOpen(false) }), _jsx(SiteFooter, { version: snapshot.runtime.version })] }));
+        return (_jsxs(_Fragment, { children: [header, _jsxs("main", { children: [notice && (_jsx("div", { "data-testid": "refresh-notice", role: "status", children: notice })), showOpenCodeGoBanner(snapshot.runtime, snapshot.providers, goSuppressed) && (_jsx(OpencodeGoBanner, { onEnable: () => setConsentOpen(true) })), _jsx(Onboarding, { snapshot: snapshot, onFirstPoll: () => void refresh(), polling: refreshing, pollError: pollErrorText })] }), _jsx(SettingsDrawer, { open: settingsOpen, providers: snapshot.providers, onRefresh: () => void refresh(), refreshing: refreshing, onSetProviderEnabled: handleSetProviderEnabled, onClose: () => setSettingsOpen(false) }), consentOpen && (_jsx(ConsentModal, { busy: consentBusy, onCancel: () => setConsentOpen(false), onConfirm: () => void (async () => {
+                        setConsentBusy(true);
+                        try {
+                            await setProviderEnabled("opencode-go", true, true);
+                            setGoSuppressed(true);
+                            setConsentOpen(false);
+                            setNotice("OpenCode Go enabled — restart the daemon to apply it.");
+                        }
+                        catch (e) {
+                            setNotice(`Could not enable OpenCode Go: ${e instanceof Error ? e.message : String(e)}`);
+                        }
+                        finally {
+                            setConsentBusy(false);
+                        }
+                    })() })), _jsx(SiteFooter, { version: snapshot.runtime.version })] }));
     }
     return (_jsxs(_Fragment, { children: [header, _jsxs("main", { children: [notice && (_jsx("div", { "data-testid": "refresh-notice", role: "status", children: notice })), loading && !snapshot && (_jsx("div", { "data-testid": "state-loading", "aria-busy": "true", "aria-label": "Loading quota state", children: [0, 1, 2].map((i) => (_jsx("div", { "aria-hidden": "true", className: "skel", style: {
                                 height: 64,
@@ -114,13 +149,27 @@ function App() {
                                 border: i === 0 ? "1px solid var(--rec)" : "1px solid var(--line)",
                                 borderRadius: 8,
                                 marginBottom: 8,
-                            } }, i))) })), error?.kind === "service-unavailable" && !snapshot && (_jsx(UnavailablePanel, { endpoint: daemonEndpoint(), lastGood: snapshot, onRetry: () => void load() })), error?.kind === "http-error" && !snapshot && (_jsx(HttpErrorPanel, { status: error.status, message: error.message, lastGood: snapshot, onRetry: () => void load() })), error && snapshot && (_jsxs("div", { "data-testid": "state-stale-error", role: "alert", children: [error.kind === "http-error" ? `Request failed (HTTP ${error.status}): ` : "Service unavailable: ", error.message, " Showing last readings (", ageLabel(snapshot.asOf), ").", " ", _jsx("button", { type: "button", onClick: () => void load(), children: "Retry" })] })), snapshot && (_jsx(FaultBanner, { providers: snapshot.providers, onRepoll: () => void refresh(), repolling: refreshing, polling: snapshot.runtime.polling })), snapshot && (_jsx(ReadyView, { snapshot: snapshot, onSelectProvider: (id) => {
+                            } }, i))) })), error?.kind === "service-unavailable" && !snapshot && (_jsx(UnavailablePanel, { endpoint: daemonEndpoint(), lastGood: snapshot, onRetry: () => void load() })), error?.kind === "http-error" && !snapshot && (_jsx(HttpErrorPanel, { status: error.status, message: error.message, lastGood: snapshot, onRetry: () => void load() })), error && snapshot && (_jsxs("div", { "data-testid": "state-stale-error", role: "alert", children: [error.kind === "http-error" ? `Request failed (HTTP ${error.status}): ` : "Service unavailable: ", error.message, " Showing last readings (", ageLabel(snapshot.asOf), ").", " ", _jsx("button", { type: "button", onClick: () => void load(), children: "Retry" })] })), snapshot && (_jsx(FaultBanner, { providers: snapshot.providers, onRepoll: () => void refresh(), repolling: refreshing, polling: snapshot.runtime.polling })), snapshot && showOpenCodeGoBanner(snapshot.runtime, snapshot.providers, goSuppressed) && (_jsx(OpencodeGoBanner, { onEnable: () => setConsentOpen(true) })), snapshot && (_jsx(ReadyView, { snapshot: snapshot, onSelectProvider: (id) => {
                             setAdviceOpen(false);
                             setSelectedProvider(id);
                         }, onViewAdvice: () => {
                             setSelectedProvider(null);
                             setAdviceOpen(true);
-                        } }))] }), _jsx(ProviderDrawer, { provider: snapshot?.providers.find((p) => p.id === selectedProvider) ?? null, asOf: snapshot?.asOf ?? "", recommendation: snapshot?.recommendation ?? null, onClose: () => setSelectedProvider(null), onRenamed: () => void load() }), snapshot && (_jsx(AdviceDrawer, { open: adviceOpen, recommendation: snapshot.recommendation, providers: snapshot.providers, asOf: snapshot.asOf, onClose: () => setAdviceOpen(false) })), _jsx(SettingsDrawer, { open: settingsOpen, providers: snapshot?.providers ?? [], onRefresh: () => void refresh(), refreshing: refreshing, onClose: () => setSettingsOpen(false) }), _jsx(SiteFooter, { version: snapshot?.runtime.version })] }));
+                        } }))] }), _jsx(ProviderDrawer, { provider: snapshot?.providers.find((p) => p.id === selectedProvider) ?? null, asOf: snapshot?.asOf ?? "", recommendation: snapshot?.recommendation ?? null, onClose: () => setSelectedProvider(null), onRenamed: () => void load() }), consentOpen && (_jsx(ConsentModal, { busy: consentBusy, onCancel: () => setConsentOpen(false), onConfirm: () => void (async () => {
+                    setConsentBusy(true);
+                    try {
+                        await setProviderEnabled("opencode-go", true, true);
+                        setGoSuppressed(true);
+                        setConsentOpen(false);
+                        setNotice("OpenCode Go enabled — restart the daemon to apply it.");
+                    }
+                    catch (e) {
+                        setNotice(`Could not enable OpenCode Go: ${e instanceof Error ? e.message : String(e)}`);
+                    }
+                    finally {
+                        setConsentBusy(false);
+                    }
+                })() })), snapshot && (_jsx(AdviceDrawer, { open: adviceOpen, recommendation: snapshot.recommendation, providers: snapshot.providers, asOf: snapshot.asOf, onClose: () => setAdviceOpen(false) })), _jsx(SettingsDrawer, { open: settingsOpen, providers: snapshot?.providers ?? [], onRefresh: () => void refresh(), refreshing: refreshing, onSetProviderEnabled: handleSetProviderEnabled, onClose: () => setSettingsOpen(false) }), _jsx(SiteFooter, { version: snapshot?.runtime.version })] }));
 }
 const el = typeof document === "undefined" ? null : document.getElementById("app");
 if (el)

package/dist/web/src/api.d.ts

@@ -27,3 +27,5 @@ export declare function refreshMessage(body: unknown): string | null;
 export declare function triggerRefresh(): Promise<RefreshResult>;
 /** Rename provider or restore built-in default with null. */
 export declare function renameProvider(id: string, displayName: string | null): Promise<void>;
+/** Enable or disable a provider. Consent is required by the server for opencode-go. */
+export declare function setProviderEnabled(id: string, enabled: boolean, consent?: boolean): Promise<void>;

package/dist/web/src/api.js

@@ -122,3 +122,23 @@ export async function renameProvider(id, displayName) {
     if (!r.ok)
         throw new StateHttpError(r.status, await serverMessage(r));
 }
+/** Enable or disable a provider. Consent is required by the server for opencode-go. */
+export async function setProviderEnabled(id, enabled, consent) {
+    const token = await fetchToken();
+    let r;
+    try {
+        r = await fetch(`/api/providers/${encodeURIComponent(id)}/enabled`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "X-QuotaCap-Token": token,
+            },
+            body: JSON.stringify(consent === undefined ? { enabled } : { enabled, consent }),
+        });
+    }
+    catch (e) {
+        throw new StateNetworkError(`/api/providers/${id}/enabled`, e);
+    }
+    if (!r.ok)
+        throw new StateHttpError(r.status, await serverMessage(r));
+}

package/dist/web/src/components/FaultBanner.d.ts

@@ -5,7 +5,8 @@ export interface Repair {
 }
 /**
  * Repair routing per excluded provider. Auth failures point at signing into
- * the provider CLI (QuotaCap never handles those credentials); every other
+ * the provider CLI (by default QuotaCap never reads credentials; the only
+ * exception is OpenCode Go, which the user enables explicitly); every other
  * exclusion points at a re-poll. Service start/install is covered by the
  * service-unavailable panel when the daemon itself is down.
  */

package/dist/web/src/components/FaultBanner.js

@@ -3,15 +3,21 @@ import { ageDuration } from "../state.js";
 import { failureWords } from "./ProviderDrawer.js";
 /**
  * Repair routing per excluded provider. Auth failures point at signing into
- * the provider CLI (QuotaCap never handles those credentials); every other
+ * the provider CLI (by default QuotaCap never reads credentials; the only
+ * exception is OpenCode Go, which the user enables explicitly); every other
  * exclusion points at a re-poll. Service start/install is covered by the
  * service-unavailable panel when the daemon itself is down.
  */
 export function repairFor(provider) {
     const name = provider.displayName;
     if (provider.lastAttempt?.failureCategory === "auth") {
+        if (provider.id === "opencode-go") {
+            return {
+                text: "Run `opencode auth login -p opencode-go`, then re-poll. QuotaCap reads that key only because you enabled OpenCode Go — `quotacap providers disable opencode-go` stops it.",
+            };
+        }
         return {
-            text: `Sign in to the ${name} CLI, then re-poll. QuotaCap never handles those credentials.`,
+            text: `Sign in to the ${name} CLI, then re-poll. By default QuotaCap never reads credentials; the only exception is OpenCode Go, which you enable explicitly.`,
         };
     }
     switch (provider.exclusionReason) {

package/dist/web/src/components/OpencodeGoBanner.d.ts

@@ -0,0 +1,12 @@
+import React from "react";
+import type { ProviderView, RuntimeView } from "../state.js";
+export declare const OPENCODE_GO_CONSENT_COPY = "QuotaCap will read the API key OpenCode already stored when you ran `opencode auth login -p opencode-go` (`~/.local/share/opencode/auth.json`, `opencode-go` \u2192 `opencode` fallback). It is read in-memory, read-only once per poll (every 15 minutes by default). It is sent only as `Authorization: Bearer` to `https://opencode.ai/zen/go/v1/usage` to fetch `rolling/weekly/monthly` `percent` + `resetsAt`. It is never used to make chat or model requests, never written or rotated, never stored in the `quotacap` DB, never returned by the API or MCP, and never logged (errors show `[redacted]`). Revoke at `https://opencode.ai/auth` or `opencode providers logout opencode-go` and run `quotacap providers disable opencode-go` to stop polling. If you prefer no file access, set `OPENCODE_API_KEY` instead.";
+export declare function showOpenCodeGoBanner(runtime: Pick<RuntimeView, "detectedProviders"> | undefined, providers: Array<Pick<ProviderView, "id" | "enabled">>, suppressed: boolean): boolean;
+export declare function OpencodeGoBanner({ onEnable }: {
+    onEnable: () => void;
+}): React.JSX.Element;
+export declare function ConsentModal({ onConfirm, onCancel, busy, }: {
+    onConfirm: () => void;
+    onCancel: () => void;
+    busy?: boolean;
+}): React.JSX.Element;

package/dist/web/src/components/OpencodeGoBanner.js

@@ -0,0 +1,36 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect } from "react";
+export const OPENCODE_GO_CONSENT_COPY = "QuotaCap will read the API key OpenCode already stored when you ran `opencode auth login -p opencode-go` (`~/.local/share/opencode/auth.json`, `opencode-go` → `opencode` fallback). It is read in-memory, read-only once per poll (every 15 minutes by default). It is sent only as `Authorization: Bearer` to `https://opencode.ai/zen/go/v1/usage` to fetch `rolling/weekly/monthly` `percent` + `resetsAt`. It is never used to make chat or model requests, never written or rotated, never stored in the `quotacap` DB, never returned by the API or MCP, and never logged (errors show `[redacted]`). Revoke at `https://opencode.ai/auth` or `opencode providers logout opencode-go` and run `quotacap providers disable opencode-go` to stop polling. If you prefer no file access, set `OPENCODE_API_KEY` instead.";
+export function showOpenCodeGoBanner(runtime, providers, suppressed) {
+    const detected = runtime?.detectedProviders?.includes("opencode-go") ?? false;
+    const row = providers.find((p) => p.id === "opencode-go");
+    return detected && !row?.enabled && !suppressed;
+}
+export function OpencodeGoBanner({ onEnable }) {
+    return (_jsxs("div", { "data-testid": "opencode-go-banner", role: "status", className: "alert", children: [_jsxs("span", { children: [_jsx("strong", { children: "OpenCode Go detected." }), " Enable to track 5h/weekly usage? The API key stays with OpenCode until you enable tracking."] }), _jsx("button", { type: "button", className: "linkbtn", onClick: onEnable, style: { flex: "none", marginLeft: "auto" }, children: "Enable OpenCode Go" })] }));
+}
+export function ConsentModal({ onConfirm, onCancel, busy, }) {
+    useEffect(() => {
+        const onKey = (e) => {
+            if (e.key === "Escape")
+                onCancel();
+        };
+        window.addEventListener("keydown", onKey);
+        return () => window.removeEventListener("keydown", onKey);
+    }, [onCancel]);
+    return (_jsx("div", { role: "presentation", style: {
+            position: "fixed",
+            inset: 0,
+            display: "grid",
+            placeItems: "center",
+            background: "var(--scrim, rgba(0,0,0,0.5))",
+            zIndex: 60,
+        }, children: _jsxs("div", { role: "dialog", "aria-modal": "true", "aria-labelledby": "opencode-go-consent-title", style: {
+                background: "var(--surface)",
+                border: "1px solid var(--line)",
+                borderRadius: "var(--r-md)",
+                padding: "var(--s4) var(--s5)",
+                maxWidth: 560,
+                margin: "var(--s4)",
+            }, children: [_jsx("h2", { id: "opencode-go-consent-title", style: { fontSize: "var(--t-4)", margin: "0 0 var(--s3)" }, children: "Enable OpenCode Go?" }), _jsx("p", { style: { fontSize: "var(--t-2)", color: "var(--ink-soft)", margin: "0 0 var(--s4)" }, children: OPENCODE_GO_CONSENT_COPY }), _jsxs("div", { style: { display: "flex", justifyContent: "flex-end", gap: "var(--s2)" }, children: [_jsx("button", { type: "button", className: "btn btn-quiet", onClick: onCancel, disabled: busy, children: "Cancel" }), _jsx("button", { type: "button", className: "btn btn-primary", onClick: onConfirm, disabled: busy, children: busy ? "Enabling…" : "Enable" })] })] }) }));
+}

package/dist/web/src/components/ProviderDrawer.js

@@ -109,6 +109,9 @@ export function paceBasis(provider, asOfMs) {
 }
 export function credentialLabel(provider) {
     const source = provider.quota?.source;
+    if (provider.id === "opencode-go" && source === "api") {
+        return "read in-memory from OpenCode auth (opt-in), never stored";
+    }
     if (source === "cli" || source === "tui")
         return `handled by ${provider.displayName}`;
     return "not stored by QuotaCap";

package/dist/web/src/components/settings/ProvidersPanel.d.ts

@@ -7,8 +7,9 @@ export declare function connectionBadge(provider: ProviderView): string;
 export type SettingsStatus = "Ready" | "Stale" | "Failed" | "Invalid" | "Reset passed" | "Not reporting";
 /** Short status from server exclusion and attempt fields. */
 export declare function providerStatus(provider: ProviderView): SettingsStatus;
-export declare function ProvidersPanel({ providers, onRefresh, refreshing, }: {
+export declare function ProvidersPanel({ providers, onRefresh, refreshing, onSetProviderEnabled, }: {
     providers: ProviderView[];
     onRefresh: () => void;
     refreshing: boolean;
+    onSetProviderEnabled?: (id: string, enabled: boolean) => void;
 }): React.JSX.Element;

package/dist/web/src/components/settings/ProvidersPanel.js

@@ -12,6 +12,8 @@ const CONNECTION_NAMES = new Map([
     ["grok", "Grok"],
     ["agy", "Antigravity"],
     ["agy:3p", "Antigravity 3P"],
+    ["muse", "Muse Code"],
+    ["opencode-go", "OpenCode Go"],
 ]);
 export function connectionName(id) {
     return CONNECTION_NAMES.get(id) ?? id;
@@ -38,7 +40,7 @@ export function providerStatus(provider) {
             return provider.lastAttempt && !provider.lastAttempt.success ? "Failed" : "Ready";
     }
 }
-export function ProvidersPanel({ providers, onRefresh, refreshing, }) {
+export function ProvidersPanel({ providers, onRefresh, refreshing, onSetProviderEnabled, }) {
     const listed = adapterProviders(providers);
     return (_jsxs("div", { children: [_jsxs("div", { style: { display: "flex", justifyContent: "space-between", alignItems: "center", marginBottom: "var(--s3)" }, children: [_jsx("h3", { style: { fontSize: "var(--t-3)", fontWeight: 700, margin: 0 }, children: "Active Tool Connections" }), _jsx("button", { type: "button", className: "btn btn-quiet", onClick: onRefresh, disabled: refreshing, style: { fontSize: "var(--t-1)", padding: "4px 8px" }, children: refreshing ? "Polling…" : "Re-poll adapters" })] }), _jsx("div", { style: {
                     border: "1px solid var(--line)",
@@ -55,14 +57,14 @@ export function ProvidersPanel({ providers, onRefresh, refreshing, }) {
                             display: "flex",
                             justifyContent: "space-between",
                             alignItems: "center",
-                        }, children: [_jsxs("div", { children: [_jsx("b", { style: { fontSize: "var(--t-3)" }, children: connectionName(p.id) }), _jsx("span", { style: { display: "block", fontSize: "var(--t-1)", color: "var(--ink-soft)" }, children: sourceLabel(p.quota?.source) })] }), _jsx("span", { className: isReady ? "st-ready" : "st-todo", style: {
-                                    fontSize: "var(--t-1)",
-                                    padding: "2px 8px",
-                                    borderRadius: 999,
-                                    background: isReady ? "var(--good-soft)" : "var(--warn-soft)",
-                                    border: `1px solid ${isReady ? "var(--good)" : "var(--warn)"}`,
-                                    color: isReady ? "var(--good)" : "var(--warn)",
-                                    fontWeight: 600,
-                                }, children: connectionBadge(p) })] }, p.id));
+                        }, children: [_jsxs("div", { children: [_jsx("b", { style: { fontSize: "var(--t-3)" }, children: connectionName(p.id) }), _jsx("span", { style: { display: "block", fontSize: "var(--t-1)", color: "var(--ink-soft)" }, children: sourceLabel(p.quota?.source) })] }), _jsxs("div", { style: { display: "flex", alignItems: "center", flex: "none" }, children: [_jsx("span", { className: isReady ? "st-ready" : "st-todo", style: {
+                                            fontSize: "var(--t-1)",
+                                            padding: "2px 8px",
+                                            borderRadius: 999,
+                                            background: isReady ? "var(--good-soft)" : "var(--warn-soft)",
+                                            border: `1px solid ${isReady ? "var(--good)" : "var(--warn)"}`,
+                                            color: isReady ? "var(--good)" : "var(--warn)",
+                                            fontWeight: 600,
+                                        }, children: connectionBadge(p) }), onSetProviderEnabled && p.id !== "agy:3p" && (_jsx("button", { type: "button", className: "btn btn-quiet", "aria-label": `${p.enabled ? "Disable" : "Enable"} ${connectionName(p.id)}`, onClick: () => onSetProviderEnabled(p.id, !p.enabled), disabled: refreshing, style: { fontSize: "var(--t-1)", padding: "4px 8px", flex: "none", marginLeft: "8px" }, children: p.enabled ? "Disable" : "Enable" }))] })] }, p.id));
                 }) })] }));
 }

package/dist/web/src/components/settings/SettingsDrawer.d.ts

@@ -1,9 +1,10 @@
 import React from "react";
 import type { ProviderView } from "../../state.js";
-export declare function SettingsDrawer({ open, providers, onRefresh, refreshing, onClose, }: {
+export declare function SettingsDrawer({ open, providers, onRefresh, refreshing, onSetProviderEnabled, onClose, }: {
     open: boolean;
     providers: ProviderView[];
     onRefresh: () => void;
     refreshing: boolean;
+    onSetProviderEnabled?: (id: string, enabled: boolean) => void;
     onClose: () => void;
 }): React.JSX.Element | null;

package/dist/web/src/components/settings/SettingsDrawer.js

@@ -8,7 +8,7 @@ const TABS = [
     { id: "cli", label: "CLI & Shell" },
     { id: "daemon", label: "Daemon" },
 ];
-export function SettingsDrawer({ open, providers, onRefresh, refreshing, onClose, }) {
+export function SettingsDrawer({ open, providers, onRefresh, refreshing, onSetProviderEnabled, onClose, }) {
     const [tab, setTab] = useState("providers");
     const dialogRef = useRef(null);
     const previouslyFocused = useRef(null);
@@ -51,5 +51,5 @@ export function SettingsDrawer({ open, providers, onRefresh, refreshing, onClose
     if (!open)
         return null;
     const titleId = "settings-drawer-title";
-    return (_jsxs(_Fragment, { children: [_jsx("div", { "data-testid": "settings-scrim", className: "scrim is-open", "aria-hidden": "true", onClick: onClose }), _jsxs("aside", { ref: dialogRef, tabIndex: -1, "data-testid": "settings-drawer", role: "dialog", "aria-modal": "true", "aria-labelledby": titleId, className: "drawer is-open", style: { width: "min(580px, 100vw)" }, onClick: (e) => e.stopPropagation(), children: [_jsxs("div", { className: "drawer-head", children: [_jsxs("div", { style: { flex: 1 }, children: [_jsx("h2", { id: titleId, style: { margin: "0 0 2px" }, children: "Settings & Configuration" }), _jsx("span", { className: "sub", children: "Connected provider adapters and CLI prompt integration." })] }), _jsx("button", { className: "drawer-close", type: "button", "aria-label": "Close settings", onClick: onClose, children: _jsx("svg", { width: "16", height: "16", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2.4", strokeLinecap: "round", "aria-hidden": "true", children: _jsx("path", { d: "M6 6l12 12M18 6L6 18" }) }) })] }), _jsx("div", { className: "seg", role: "tablist", "aria-label": "Settings sections", style: { margin: "var(--s4) var(--s5) 0", display: "flex", height: 32 }, children: TABS.map((t) => (_jsx("button", { type: "button", role: "tab", className: `settings-tab${tab === t.id ? " is-active" : ""}`, "aria-selected": tab === t.id, onClick: () => setTab(t.id), style: { flex: 1, justifyContent: "center" }, children: t.label }, t.id))) }), _jsxs("div", { role: "tabpanel", style: { padding: "var(--s4) var(--s5) var(--s6)", overflowY: "auto" }, children: [tab === "providers" && (_jsx(ProvidersPanel, { providers: providers, onRefresh: onRefresh, refreshing: refreshing })), tab === "cli" && _jsx(CliIntegrationPanel, {}), tab === "daemon" && _jsx(DaemonPanel, {})] })] })] }));
+    return (_jsxs(_Fragment, { children: [_jsx("div", { "data-testid": "settings-scrim", className: "scrim is-open", "aria-hidden": "true", onClick: onClose }), _jsxs("aside", { ref: dialogRef, tabIndex: -1, "data-testid": "settings-drawer", role: "dialog", "aria-modal": "true", "aria-labelledby": titleId, className: "drawer is-open", style: { width: "min(580px, 100vw)" }, onClick: (e) => e.stopPropagation(), children: [_jsxs("div", { className: "drawer-head", children: [_jsxs("div", { style: { flex: 1 }, children: [_jsx("h2", { id: titleId, style: { margin: "0 0 2px" }, children: "Settings & Configuration" }), _jsx("span", { className: "sub", children: "Connected provider adapters and CLI prompt integration." })] }), _jsx("button", { className: "drawer-close", type: "button", "aria-label": "Close settings", onClick: onClose, children: _jsx("svg", { width: "16", height: "16", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2.4", strokeLinecap: "round", "aria-hidden": "true", children: _jsx("path", { d: "M6 6l12 12M18 6L6 18" }) }) })] }), _jsx("div", { className: "seg", role: "tablist", "aria-label": "Settings sections", style: { margin: "var(--s4) var(--s5) 0", display: "flex", height: 32 }, children: TABS.map((t) => (_jsx("button", { type: "button", role: "tab", className: `settings-tab${tab === t.id ? " is-active" : ""}`, "aria-selected": tab === t.id, onClick: () => setTab(t.id), style: { flex: 1, justifyContent: "center" }, children: t.label }, t.id))) }), _jsxs("div", { role: "tabpanel", style: { padding: "var(--s4) var(--s5) var(--s6)", overflowY: "auto" }, children: [tab === "providers" && (_jsx(ProvidersPanel, { providers: providers, onRefresh: onRefresh, refreshing: refreshing, onSetProviderEnabled: onSetProviderEnabled })), tab === "cli" && _jsx(CliIntegrationPanel, {}), tab === "daemon" && _jsx(DaemonPanel, {})] })] })] }));
 }