tokentracker-cli 0.84.5 → 0.84.7

package/src/lib/qoder-limits.js

@@ -0,0 +1,985 @@
+"use strict";
+
+const cp = require("node:child_process");
+const crypto = require("node:crypto");
+const fs = require("node:fs");
+const net = require("node:net");
+const os = require("node:os");
+const path = require("node:path");
+const { promisify } = require("node:util");
+
+const { readSqliteJsonRowsAsync } = require("./sqlite-reader");
+
+const execFileAsync = promisify(cp.execFile);
+
+const QODER_SITES = {
+  international: {
+    id: "international",
+    origin: "https://qoder.com",
+    usageUrl: "https://qoder.com/api/v2/me/usages/big_model_credits",
+    domains: new Set(["qoder.com", "www.qoder.com"]),
+  },
+  china: {
+    id: "china",
+    origin: "https://qoder.com.cn",
+    usageUrl: "https://qoder.com.cn/api/v2/me/usages/big_model_credits",
+    domains: new Set(["qoder.com.cn", "www.qoder.com.cn"]),
+  },
+};
+
+const QODER_USER_AGENT =
+  "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) " +
+  "AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36";
+
+// Qoder 1.18 serves promotional call buckets (including Ultimate Free Calls)
+// from its OpenAPI activity endpoint. The request uses the same COSY envelope
+// as Qoder CLI 1.0.22. Authentication comes from Qoder's already-running local
+// service over JSON-RPC; TokenTracker never persists or logs those credentials.
+const QODER_ACTIVITY_URL = "https://openapi.qoder.sh/algo/api/v2/activity";
+const QODER_ULTIMATE_ACTIVITY_ID = "ultimate_200_free_invoke";
+const QODER_COSY_VERSION = "1.0.22";
+const QODER_ACTIVITY_CACHE_FILE = "qoder-activity-cache.json";
+const QODER_ACTIVITY_CACHE_MAX_AGE_MS = 24 * 60 * 60 * 1000;
+const QODER_LIMITS_CACHE_FILE = "qoder-usage-limits-cache.json";
+const QODER_LIMITS_CACHE_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1000;
+const QODER_LIMITS_CACHE_UNKNOWN_RESET_TTL_MS = 12 * 60 * 60 * 1000;
+const QODER_SERVER_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
+MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDA8iMH5c02LilrsERw9t6Pv5Nc
+4k6Pz1EaDicBMpdpxKduSZu5OANqUq8er4GM95omAGIOPOh+Nx0spthYA2BqGz+l
+6HRkPJ7S236FZz73In/KVuLnwI8JJ2CbuJap8kvheCCZpmAWpb/cPx/3Vr/J6I17
+XcW+ML9FoCI6AOvOzwIDAQAB
+-----END PUBLIC KEY-----`;
+
+const MACOS_CHROMIUM_BROWSERS = [
+  {
+    name: "Google Chrome",
+    root: ["Library", "Application Support", "Google", "Chrome"],
+    service: "Chrome Safe Storage",
+    account: "Chrome",
+  },
+  {
+    name: "Brave",
+    root: ["Library", "Application Support", "BraveSoftware", "Brave-Browser"],
+    service: "Brave Safe Storage",
+    account: "Brave",
+  },
+  {
+    name: "Microsoft Edge",
+    root: ["Library", "Application Support", "Microsoft Edge"],
+    service: "Microsoft Edge Safe Storage",
+    account: "Microsoft Edge",
+  },
+  {
+    name: "Arc",
+    root: ["Library", "Application Support", "Arc", "User Data"],
+    service: "Arc Safe Storage",
+    account: "Arc",
+  },
+  {
+    name: "Chromium",
+    root: ["Library", "Application Support", "Chromium"],
+    service: "Chromium Safe Storage",
+    account: "Chromium",
+  },
+];
+
+const CHROMIUM_COOKIE_SQL = `
+SELECT
+  host_key,
+  name,
+  value,
+  hex(encrypted_value) AS encrypted_hex
+FROM cookies
+WHERE lower(host_key) IN (
+  '.qoder.com', 'qoder.com', 'www.qoder.com',
+  '.qoder.com.cn', 'qoder.com.cn', 'www.qoder.com.cn'
+)
+ORDER BY host_key, name
+`;
+
+function finiteNumber(value, field) {
+  const number = Number(value);
+  if (!Number.isFinite(number)) {
+    throw new Error(`Qoder usage response is missing ${field}.`);
+  }
+  return number;
+}
+
+function firstDefined(object, camel, snake) {
+  return object?.[camel] ?? object?.[snake];
+}
+
+function normalizeResetAt(value) {
+  if (value === null || value === undefined || value === "") return null;
+  if (typeof value === "number" || /^\d+(?:\.\d+)?$/.test(String(value).trim())) {
+    const raw = Number(value);
+    if (!Number.isFinite(raw)) return null;
+    const milliseconds = raw > 10_000_000_000 ? raw : raw * 1000;
+    const date = new Date(milliseconds);
+    return Number.isFinite(date.getTime()) ? date.toISOString() : null;
+  }
+  const timestamp = Date.parse(String(value));
+  return Number.isFinite(timestamp) ? new Date(timestamp).toISOString() : null;
+}
+
+function quotaSummary(container) {
+  return firstDefined(container, "quotaSummary", "quota_summary") || null;
+}
+
+function normalizeQuotaSummary(summary) {
+  if (!summary || typeof summary !== "object") {
+    throw new Error("Qoder usage response is missing totalQuota.quotaSummary.");
+  }
+  const used = finiteNumber(firstDefined(summary, "usedValue", "used_value"), "usedValue");
+  const total = finiteNumber(firstDefined(summary, "limitValue", "limit_value"), "limitValue");
+  const rawRemaining = firstDefined(summary, "remainingValue", "remaining_value");
+  const remaining = rawRemaining === null || rawRemaining === undefined
+    ? Math.max(0, total - used)
+    : finiteNumber(rawRemaining, "remainingValue");
+  const rawPercentage = firstDefined(summary, "usagePercentage", "usage_percentage");
+  const providedPercentage = rawPercentage === null || rawPercentage === undefined
+    ? null
+    : finiteNumber(rawPercentage, "usagePercentage");
+
+  if (used < 0 || total < 0 || remaining < 0) {
+    throw new Error("Qoder quota values must be nonnegative.");
+  }
+  if (total === 0 && (used !== 0 || remaining !== 0)) {
+    throw new Error("Qoder zero total quota must have zero usage and remaining.");
+  }
+  const usagePercentage = providedPercentage ?? (total > 0 ? (used / total) * 100 : 100);
+  return {
+    used,
+    total,
+    remaining,
+    usagePercentage: Math.max(0, Math.min(100, usagePercentage)),
+    unit: typeof summary.unit === "string" && summary.unit.trim() ? summary.unit.trim() : null,
+  };
+}
+
+function normalizeQoderUsageResponse(response) {
+  if (!response || typeof response !== "object") {
+    throw new Error("Qoder usage response is not an object.");
+  }
+  const totalContainer = firstDefined(response, "totalQuota", "total_quota");
+  const sharedContainer = firstDefined(response, "sharedQuota", "shared_quota");
+  const base = normalizeQuotaSummary(quotaSummary(totalContainer));
+  const sharedSummary = quotaSummary(sharedContainer);
+  const shared = sharedSummary ? normalizeQuotaSummary(sharedSummary) : null;
+
+  const used = base.used + (shared?.used || 0);
+  const total = base.total + (shared?.total || 0);
+  const remaining = base.remaining + (shared?.remaining || 0);
+  const usedPercent = shared
+    ? total > 0
+      ? (used / total) * 100
+      : 100
+    : base.usagePercentage;
+
+  return {
+    configured: true,
+    error: null,
+    primary_window: {
+      used_percent: Math.max(0, Math.min(100, usedPercent)),
+      reset_at: normalizeResetAt(firstDefined(response, "nextResetAt", "next_reset_at")),
+      used_credits: used,
+      limit_credits: total,
+      remaining_credits: remaining,
+      unit: base.unit || shared?.unit || null,
+    },
+    source: "provider-api",
+  };
+}
+
+function qoderDataRoot({
+  home = os.homedir(),
+  env = process.env,
+  platform = process.platform,
+} = {}) {
+  if (typeof env.QODER_HOME === "string" && env.QODER_HOME.trim()) {
+    return path.resolve(env.QODER_HOME.trim());
+  }
+  if (platform === "darwin") {
+    return path.join(home, "Library", "Application Support", "Qoder");
+  }
+  if (platform === "win32") {
+    return path.join(env.APPDATA || path.join(home, "AppData", "Roaming"), "Qoder");
+  }
+  return path.join(home, ".config", "Qoder");
+}
+
+function qoderRpcRequest(method, params = {}, {
+  home = os.homedir(),
+  env = process.env,
+  platform = process.platform,
+  timeoutMs = 1500,
+  netModule = net,
+} = {}) {
+  return new Promise((resolve, reject) => {
+    const infoPath = path.join(qoderDataRoot({ home, env, platform }), "SharedClientCache", ".info.json");
+    let info;
+    try {
+      info = JSON.parse(fs.readFileSync(infoPath, "utf8"));
+    } catch (_error) {
+      reject(new Error("Qoder local service is not running."));
+      return;
+    }
+    const socketPath = typeof info?.ipcServerPath === "string" ? info.ipcServerPath.trim() : "";
+    if (!socketPath) {
+      reject(new Error("Qoder local service endpoint is unavailable."));
+      return;
+    }
+
+    let settled = false;
+    let buffer = Buffer.alloc(0);
+    const socket = netModule.createConnection(socketPath);
+    const timer = setTimeout(() => finish(new Error("Qoder local service request timed out.")), timeoutMs);
+
+    function finish(error, value) {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      socket.destroy();
+      if (error) reject(error);
+      else resolve(value);
+    }
+
+    socket.on("connect", () => {
+      const body = Buffer.from(JSON.stringify({
+        jsonrpc: "2.0",
+        id: 1,
+        method,
+        params,
+      }));
+      socket.write(`Content-Length: ${body.length}\r\n\r\n`);
+      socket.write(body);
+    });
+    socket.on("error", (error) => finish(error));
+    socket.on("data", (chunk) => {
+      buffer = Buffer.concat([buffer, chunk]);
+      const headerEnd = buffer.indexOf("\r\n\r\n");
+      if (headerEnd < 0) return;
+      const match = /Content-Length:\s*(\d+)/i.exec(buffer.subarray(0, headerEnd).toString("ascii"));
+      if (!match) {
+        finish(new Error("Qoder local service returned an invalid response."));
+        return;
+      }
+      const bodyLength = Number(match[1]);
+      const bodyStart = headerEnd + 4;
+      if (!Number.isFinite(bodyLength) || bodyLength < 0 || bodyLength > 4 * 1024 * 1024) {
+        finish(new Error("Qoder local service response is too large."));
+        return;
+      }
+      if (buffer.length < bodyStart + bodyLength) return;
+      try {
+        const message = JSON.parse(buffer.subarray(bodyStart, bodyStart + bodyLength).toString("utf8"));
+        if (message.error) {
+          finish(new Error(message.error.message || "Qoder local service request failed."));
+        } else {
+          finish(null, message.result);
+        }
+      } catch (_error) {
+        finish(new Error("Qoder local service returned invalid JSON."));
+      }
+    });
+  });
+}
+
+function normalizeQoderRpcUsage(response) {
+  if (!response || typeof response !== "object") return null;
+  const quota = response.userQuota;
+  if (!quota || typeof quota !== "object") return null;
+  const used = finiteNumber(quota.used, "userQuota.used");
+  const total = finiteNumber(quota.total, "userQuota.total");
+  const remaining = finiteNumber(quota.remaining, "userQuota.remaining");
+  const reportedPercent = Number(response.totalUsagePercentage ?? quota.percentage);
+  const usedPercent = total === 0
+    ? 0
+    : response.isQuotaExceeded === true
+      ? 100
+      : Number.isFinite(reportedPercent)
+        ? reportedPercent
+        : (used / total) * 100;
+  const normalizedExpiry = normalizeResetAt(response.expiresAt);
+  const expiryMs = normalizedExpiry ? Date.parse(normalizedExpiry) : NaN;
+  return {
+    configured: true,
+    error: null,
+    plan_label: typeof response.userType === "string" ? response.userType : null,
+    quota_exceeded: response.isQuotaExceeded === true,
+    primary_window: {
+      used_percent: Math.max(0, Math.min(100, usedPercent)),
+      // Qoder uses 9999-12-31 as a no-expiry sentinel for Free accounts.
+      reset_at: Number.isFinite(expiryMs) && expiryMs < Date.UTC(2100, 0, 1)
+        ? normalizedExpiry
+        : null,
+      used_credits: used,
+      limit_credits: total,
+      remaining_credits: remaining,
+      unit: typeof quota.unit === "string" && quota.unit.trim() ? quota.unit.trim() : "credits",
+    },
+    source: "local-ipc",
+  };
+}
+
+function normalizeQoderActivityResponse(response, { nowMs = Date.now() } = {}) {
+  if (!response || typeof response !== "object") {
+    throw new Error("Qoder activity response is not an object.");
+  }
+  if (response.code !== undefined && Number(response.code) !== 0) {
+    throw new Error(`Qoder activity API returned ${response.msg || `code ${response.code}`}.`);
+  }
+  const activities = Array.isArray(response.data?.activities) ? response.data.activities : [];
+  const activity = activities.find((entry) => {
+    if (!entry || entry.activityId !== QODER_ULTIMATE_ACTIVITY_ID || entry.eligible === false) return false;
+    if (String(entry.tagStyle || "").toUpperCase() === "EXPIRED") return false;
+    const endAt = Number(entry.activityEndAt);
+    return !Number.isFinite(endAt) || endAt <= 0 || endAt > nowMs;
+  });
+  if (!activity) return null;
+  const used = finiteNumber(activity.used, "activity.used");
+  const total = finiteNumber(activity.limit, "activity.limit");
+  const rawRemaining = Number(activity.remaining);
+  const remaining = Number.isFinite(rawRemaining) ? rawRemaining : Math.max(0, total - used);
+  if (used < 0 || total <= 0 || remaining < 0) {
+    throw new Error("Qoder activity quota values are invalid.");
+  }
+  return {
+    used_percent: Math.max(0, Math.min(100, (used / total) * 100)),
+    reset_at: normalizeResetAt(activity.activityEndAt),
+    used_credits: used,
+    limit_credits: total,
+    remaining_credits: remaining,
+    unit: "calls",
+    activity_id: QODER_ULTIMATE_ACTIVITY_ID,
+  };
+}
+
+function qoderActivityCachePath({ home = os.homedir() } = {}) {
+  return path.join(home, ".tokentracker", "tracker", QODER_ACTIVITY_CACHE_FILE);
+}
+
+function readQoderActivityCache({
+  home = os.homedir(),
+  nowMs = Date.now(),
+  maxAgeMs = QODER_ACTIVITY_CACHE_MAX_AGE_MS,
+} = {}) {
+  try {
+    const parsed = JSON.parse(fs.readFileSync(qoderActivityCachePath({ home }), "utf8"));
+    const window = parsed?.activity_window;
+    const cachedAtMs = Date.parse(parsed?.cached_at || "");
+    if (!window || !Number.isFinite(cachedAtMs) || cachedAtMs > nowMs + 60_000) return null;
+    const resetAtMs = Date.parse(window.reset_at || "");
+    if (Number.isFinite(resetAtMs)) {
+      if (resetAtMs <= nowMs) return null;
+    } else if (nowMs - cachedAtMs > maxAgeMs) {
+      return null;
+    }
+    const used = Number(window.used_credits);
+    const total = Number(window.limit_credits);
+    const remaining = Number(window.remaining_credits);
+    if (!Number.isFinite(used) || !Number.isFinite(total) || !Number.isFinite(remaining)
+      || used < 0 || total <= 0 || remaining < 0) return null;
+    return window;
+  } catch (_error) {
+    return null;
+  }
+}
+
+function writeQoderActivityCache(window, {
+  home = os.homedir(),
+  nowMs = Date.now(),
+} = {}) {
+  if (!window) return;
+  const cachePath = qoderActivityCachePath({ home });
+  const payload = {
+    activity_window: window,
+    cached_at: new Date(nowMs).toISOString(),
+  };
+  try {
+    fs.mkdirSync(path.dirname(cachePath), { recursive: true });
+    const tmpPath = `${cachePath}.${process.pid}.tmp`;
+    fs.writeFileSync(tmpPath, JSON.stringify(payload, null, 2), { encoding: "utf8", mode: 0o600 });
+    fs.renameSync(tmpPath, cachePath);
+  } catch (_error) {}
+}
+
+function qoderLimitsCachePath({ home = os.homedir() } = {}) {
+  return path.join(home, ".tokentracker", "tracker", QODER_LIMITS_CACHE_FILE);
+}
+
+function qoderCachedWindow(window, { cachedAtMs, nowMs } = {}) {
+  if (!window || typeof window !== "object") return null;
+  const resetAtMs = Date.parse(window.reset_at || "");
+  if (Number.isFinite(resetAtMs)) return resetAtMs > nowMs ? window : null;
+  return nowMs - cachedAtMs <= QODER_LIMITS_CACHE_UNKNOWN_RESET_TTL_MS ? window : null;
+}
+
+function readQoderLimitsCache({
+  home = os.homedir(),
+  nowMs = Date.now(),
+} = {}) {
+  try {
+    const raw = JSON.parse(fs.readFileSync(qoderLimitsCachePath({ home }), "utf8"))?.qoder;
+    const cachedAtMs = Date.parse(raw?.cached_at || "");
+    if (!Number.isFinite(cachedAtMs) || cachedAtMs > nowMs + 60_000) return null;
+    const primaryWindow = qoderCachedWindow(raw.primary_window, { cachedAtMs, nowMs });
+    const secondaryWindow = qoderCachedWindow(raw.secondary_window, { cachedAtMs, nowMs });
+    if (!primaryWindow && !secondaryWindow) return null;
+    const hasUnexpiredDatedWindow = [primaryWindow, secondaryWindow]
+      .some((window) => Number.isFinite(Date.parse(window?.reset_at || "")));
+    if (nowMs - cachedAtMs > QODER_LIMITS_CACHE_MAX_AGE_MS && !hasUnexpiredDatedWindow) {
+      return null;
+    }
+    return {
+      configured: true,
+      error: null,
+      plan_label: typeof raw.plan_label === "string" ? raw.plan_label : null,
+      quota_exceeded: raw.quota_exceeded === true,
+      primary_window: primaryWindow,
+      secondary_window: secondaryWindow,
+      cached: true,
+      stale: true,
+      cached_at: raw.cached_at,
+      source: "disk-cache",
+    };
+  } catch (_error) {
+    return null;
+  }
+}
+
+function writeQoderLimitsCache(limits, {
+  home = os.homedir(),
+  nowMs = Date.now(),
+} = {}) {
+  if (!limits?.configured || limits.error || (!limits.primary_window && !limits.secondary_window)) return;
+  const cachePath = qoderLimitsCachePath({ home });
+  const payload = {
+    qoder: {
+      plan_label: limits.plan_label || null,
+      quota_exceeded: limits.quota_exceeded === true,
+      primary_window: limits.primary_window || null,
+      secondary_window: limits.secondary_window || null,
+      cached_at: new Date(nowMs).toISOString(),
+    },
+  };
+  try {
+    fs.mkdirSync(path.dirname(cachePath), { recursive: true });
+    const tmpPath = `${cachePath}.${process.pid}.tmp`;
+    fs.writeFileSync(tmpPath, JSON.stringify(payload, null, 2), { encoding: "utf8", mode: 0o600 });
+    fs.renameSync(tmpPath, cachePath);
+  } catch (_error) {}
+}
+
+function buildQoderActivityHeaders(authStatus, {
+  nowMs = Date.now(),
+  randomUUID = crypto.randomUUID,
+} = {}) {
+  const userId = String(authStatus?.id || authStatus?.accountId || "").trim();
+  const accessToken = String(authStatus?.token || "").trim();
+  if (!userId || !accessToken) {
+    throw new Error("Qoder local session is missing activity credentials.");
+  }
+  const temporaryKey = Buffer.from(randomUUID().replace(/-/g, "").slice(0, 16), "ascii");
+  const cosyKey = crypto.publicEncrypt(
+    { key: QODER_SERVER_PUBLIC_KEY, padding: crypto.constants.RSA_PKCS1_PADDING },
+    temporaryKey,
+  ).toString("base64");
+  const identity = {
+    name: authStatus.name || "",
+    aid: userId,
+    uid: userId,
+    yx_uid: authStatus.yxUid || "",
+    organization_id: authStatus.orgId || "",
+    organization_name: authStatus.orgName || "",
+    user_type: authStatus.userType || "personal_standard",
+    security_oauth_token: accessToken,
+    refresh_token: authStatus.refreshToken || "",
+  };
+  const cipher = crypto.createCipheriv("aes-128-cbc", temporaryKey, temporaryKey);
+  const info = Buffer.concat([
+    cipher.update(Buffer.from(JSON.stringify(identity), "utf8")),
+    cipher.final(),
+  ]).toString("base64");
+  const payload = Buffer.from(JSON.stringify({
+    version: "v1",
+    requestId: randomUUID(),
+    info,
+    cosyVersion: QODER_COSY_VERSION,
+    ideVersion: "",
+  }), "utf8").toString("base64");
+  const cosyDate = String(Math.floor(nowMs / 1000));
+  const signature = crypto
+    .createHash("md5")
+    .update(`${payload}\n${cosyKey}\n${cosyDate}\n\n/api/v2/activity`, "utf8")
+    .digest("hex");
+  const machineId = randomUUID();
+  return {
+    "cosy-data-policy": "agree",
+    "cosy-machinetype": "5",
+    "cosy-clienttype": "5",
+    "cosy-date": cosyDate,
+    "cosy-user": userId,
+    "cosy-key": cosyKey,
+    "cache-control": "no-cache",
+    "cosy-business-product": "cli",
+    "cosy-business-type": "agent",
+    "cosy-scene": "assistant",
+    accept: "application/json",
+    authorization: `Bearer COSY.${payload}.${signature}`,
+    "accept-encoding": "identity",
+    "cosy-version": QODER_COSY_VERSION,
+    "cosy-machineid": machineId,
+    "cosy-machinetoken": machineId,
+    "login-version": "v2",
+    "user-agent": "Go-http-client/2.0",
+  };
+}
+
+async function fetchQoderActivity(authStatus, fetchImpl = fetch, options = {}) {
+  const response = await fetchImpl(QODER_ACTIVITY_URL, {
+    method: "GET",
+    headers: buildQoderActivityHeaders(authStatus, options),
+  });
+  if (response.status === 401 || response.status === 403) {
+    throw new Error("Qoder activity session expired.");
+  }
+  if (!response.ok) {
+    throw new Error(`Qoder activity API returned HTTP ${response.status}.`);
+  }
+  return normalizeQoderActivityResponse(await response.json(), options);
+}
+
+function normalizeCookieDomain(hostKey) {
+  return String(hostKey || "").trim().toLowerCase().replace(/^\./, "");
+}
+
+function decryptChromiumCookie({ encryptedHex, plaintextValue, hostKey, password }) {
+  if (typeof plaintextValue === "string" && plaintextValue) return plaintextValue;
+  if (!encryptedHex || !password) return null;
+  let encrypted;
+  try {
+    encrypted = Buffer.from(encryptedHex, "hex");
+  } catch (_error) {
+    return null;
+  }
+  if (encrypted.length <= 3) return null;
+  const version = encrypted.subarray(0, 3).toString("ascii");
+  if (version !== "v10" && version !== "v11") return null;
+
+  try {
+    const key = crypto.pbkdf2Sync(password, "saltysalt", 1003, 16, "sha1");
+    const decipher = crypto.createDecipheriv(
+      "aes-128-cbc",
+      key,
+      Buffer.alloc(16, 0x20),
+    );
+    let decrypted = Buffer.concat([
+      decipher.update(encrypted.subarray(3)),
+      decipher.final(),
+    ]);
+    const hostDigest = crypto.createHash("sha256").update(String(hostKey || "")).digest();
+    if (decrypted.length >= hostDigest.length && decrypted.subarray(0, 32).equals(hostDigest)) {
+      decrypted = decrypted.subarray(32);
+    }
+    const value = decrypted.toString("utf8");
+    return value || null;
+  } catch (_error) {
+    return null;
+  }
+}
+
+async function readMacosSafeStoragePassword({
+  service,
+  account,
+  securityRunner,
+} = {}) {
+  const runner = securityRunner || (async (args) => {
+    const result = await execFileAsync("/usr/bin/security", args, {
+      timeout: 5000,
+      maxBuffer: 1024 * 1024,
+    });
+    return result.stdout;
+  });
+  try {
+    const output = await runner([
+      "find-generic-password",
+      "-w",
+      "-s",
+      service,
+      "-a",
+      account,
+    ]);
+    const password = String(output || "").trim();
+    return password || null;
+  } catch (_error) {
+    return null;
+  }
+}
+
+function chromiumProfileDirs(browserRoot) {
+  if (!fs.existsSync(browserRoot)) return [];
+  let entries = [];
+  try {
+    entries = fs.readdirSync(browserRoot, { withFileTypes: true });
+  } catch (_error) {
+    return [];
+  }
+  return entries
+    .filter((entry) => entry.isDirectory() && (entry.name === "Default" || /^Profile \d+$/.test(entry.name)))
+    .map((entry) => path.join(browserRoot, entry.name))
+    .filter((profileDir) => fs.existsSync(path.join(profileDir, "Cookies")));
+}
+
+function cookieHeaderFromRows(rows, password, site) {
+  const pairs = [];
+  for (const row of Array.isArray(rows) ? rows : []) {
+    const domain = normalizeCookieDomain(row?.host_key);
+    if (!site.domains.has(domain)) continue;
+    const name = typeof row?.name === "string" ? row.name.trim() : "";
+    if (!name) continue;
+    const value = decryptChromiumCookie({
+      encryptedHex: row.encrypted_hex,
+      plaintextValue: row.value,
+      hostKey: row.host_key,
+      password,
+    });
+    if (value) pairs.push(`${name}=${value}`);
+  }
+  return pairs.length > 0 ? pairs.join("; ") : null;
+}
+
+async function importMacosQoderSessions({
+  home = os.homedir(),
+  platform = process.platform,
+  securityRunner,
+  sqliteReader = readSqliteJsonRowsAsync,
+} = {}) {
+  if (platform !== "darwin") return [];
+  const sessions = [];
+  for (const browser of MACOS_CHROMIUM_BROWSERS) {
+    const browserRoot = path.join(home, ...browser.root);
+    const profiles = chromiumProfileDirs(browserRoot);
+    if (profiles.length === 0) continue;
+    const password = await readMacosSafeStoragePassword({
+      service: browser.service,
+      account: browser.account,
+      securityRunner,
+    });
+    if (!password) continue;
+    for (const profileDir of profiles) {
+      let rows;
+      try {
+        rows = await sqliteReader(path.join(profileDir, "Cookies"), CHROMIUM_COOKIE_SQL, {
+          label: `${browser.name} cookies`,
+        });
+      } catch (_error) {
+        continue;
+      }
+      for (const site of Object.values(QODER_SITES)) {
+        const cookieHeader = cookieHeaderFromRows(rows, password, site);
+        if (cookieHeader) {
+          sessions.push({
+            cookieHeader,
+            site,
+            sourceLabel: `${browser.name} ${path.basename(profileDir)}`,
+          });
+        }
+      }
+    }
+  }
+  return sessions;
+}
+
+function qoderRequestHeaders(cookieHeader, site) {
+  return {
+    Cookie: cookieHeader,
+    Accept: "application/json, text/plain, */*",
+    "Accept-Language": "en-US,en;q=0.9",
+    "User-Agent": QODER_USER_AGENT,
+    Origin: site.origin,
+    Referer: `${site.origin}/account/usage`,
+    "X-Requested-With": "XMLHttpRequest",
+    "Bx-V": "2.5.35",
+  };
+}
+
+async function fetchQoderUsage(cookieHeader, site, fetchImpl) {
+  const response = await fetchImpl(site.usageUrl, {
+    method: "GET",
+    headers: qoderRequestHeaders(cookieHeader, site),
+  });
+  if (response.status === 401 || response.status === 403) {
+    const error = new Error("Qoder login expired. Sign in at qoder.com again.");
+    error.code = "AUTH_EXPIRED";
+    throw error;
+  }
+  if (!response.ok) {
+    throw new Error(`Qoder usage API returned HTTP ${response.status}.`);
+  }
+  return normalizeQoderUsageResponse(await response.json());
+}
+
+function listRecentQoderRendererLogs(logRoot, maxFiles = 12) {
+  if (!fs.existsSync(logRoot)) return [];
+  const files = [];
+  const stack = [{ dir: logRoot, depth: 0 }];
+  while (stack.length > 0 && files.length < 2000) {
+    const current = stack.pop();
+    let entries;
+    try {
+      entries = fs.readdirSync(current.dir, { withFileTypes: true });
+    } catch (_error) {
+      continue;
+    }
+    for (const entry of entries) {
+      const full = path.join(current.dir, entry.name);
+      if (entry.isDirectory() && current.depth < 4) {
+        stack.push({ dir: full, depth: current.depth + 1 });
+      } else if (entry.isFile() && entry.name === "renderer.log") {
+        let mtimeMs = 0;
+        try {
+          mtimeMs = fs.statSync(full).mtimeMs;
+        } catch (_error) {}
+        files.push({ full, mtimeMs });
+      }
+    }
+  }
+  return files
+    .sort((a, b) => b.mtimeMs - a.mtimeMs)
+    .slice(0, maxFiles)
+    .map((entry) => entry.full);
+}
+
+function parseQoderQuotaLog(text) {
+  if (typeof text !== "string" || !text) return null;
+  const matches = Array.from(text.matchAll(
+    /userType=([^,\s]+)[\s\S]*?isQuotaExceeded=(true|false)[\s\S]*?userQuota(?:=|\s+)used=([0-9.]+),\s*total=([0-9.]+),\s*remaining=([0-9.]+),\s*percentage=([0-9.]+),\s*unit=([^,\s]+)/g,
+  ));
+  const match = matches.at(-1);
+  if (!match) return null;
+  const quotaExceeded = match[2] === "true";
+  const used = Number(match[3]);
+  const total = Number(match[4]);
+  const remaining = Number(match[5]);
+  const percentage = Number(match[6]);
+  if (![used, total, remaining, percentage].every(Number.isFinite)) return null;
+  return {
+    configured: true,
+    error: null,
+    plan_label: match[1],
+    quota_exceeded: quotaExceeded,
+    primary_window: {
+      used_percent: total === 0
+        ? 0
+        : quotaExceeded
+          ? 100
+          : Math.max(0, Math.min(100, percentage)),
+      reset_at: null,
+      used_credits: used,
+      limit_credits: total,
+      remaining_credits: remaining,
+      unit: match[7],
+    },
+    source: "local-log",
+  };
+}
+
+function readQoderLocalQuota({
+  home = os.homedir(),
+  platform = process.platform,
+  env = process.env,
+} = {}) {
+  const explicitLogRoot =
+    typeof env.QODER_LOG_ROOT === "string" && env.QODER_LOG_ROOT.trim()
+      ? path.resolve(env.QODER_LOG_ROOT.trim())
+      : null;
+  const configuredRoot =
+    typeof env.QODER_HOME === "string" && env.QODER_HOME.trim()
+      ? path.resolve(env.QODER_HOME.trim())
+      : null;
+  const logRoot = explicitLogRoot || (configuredRoot
+    ? path.join(configuredRoot, "logs")
+    : platform === "darwin"
+      ? path.join(home, "Library", "Application Support", "Qoder", "logs")
+      : platform === "win32"
+        ? path.join(env.APPDATA || path.join(home, "AppData", "Roaming"), "Qoder", "logs")
+        : path.join(home, ".config", "Qoder", "logs"));
+  for (const logPath of listRecentQoderRendererLogs(logRoot)) {
+    try {
+      const fd = fs.openSync(logPath, "r");
+      try {
+        const stat = fs.fstatSync(fd);
+        const length = Math.min(stat.size, 512 * 1024);
+        const buffer = Buffer.alloc(length);
+        fs.readSync(fd, buffer, 0, length, Math.max(0, stat.size - length));
+        const parsed = parseQoderQuotaLog(buffer.toString("utf8"));
+        if (parsed) return parsed;
+      } finally {
+        fs.closeSync(fd);
+      }
+    } catch (_error) {}
+  }
+  return null;
+}
+
+function siteFromEnv(value) {
+  const normalized = String(value || "").trim().toLowerCase();
+  return normalized === "cn" || normalized === "china" || normalized.includes(".cn")
+    ? QODER_SITES.china
+    : QODER_SITES.international;
+}
+
+async function fetchQoderLimits({
+  home = os.homedir(),
+  env = process.env,
+  platform = process.platform,
+  securityRunner,
+  sqliteReader,
+  fetchImpl = fetch,
+  rpcRequest = qoderRpcRequest,
+  nowMs = Date.now(),
+} = {}) {
+  let rpcUsage = null;
+  let rpcAuth = null;
+  let activityWindow = null;
+  let activitySource = null;
+  const rpcOptions = { home, env, platform };
+  // Qoder's shared client accepts only one reliable request at a time. Parallel
+  // connections intermittently time out even while the desktop app is running.
+  try {
+    rpcUsage = normalizeQoderRpcUsage(await rpcRequest("credit/usage", {}, rpcOptions));
+  } catch (_error) {}
+  try {
+    const authResult = await rpcRequest("auth/status", {}, rpcOptions);
+    if (authResult && typeof authResult === "object") rpcAuth = authResult;
+  } catch (_error) {}
+  if (rpcAuth) {
+    try {
+      activityWindow = await fetchQoderActivity(rpcAuth, fetchImpl, { nowMs });
+      if (activityWindow) {
+        activitySource = "provider-api";
+        writeQoderActivityCache(activityWindow, { home, nowMs });
+      }
+    } catch (_error) {}
+  }
+  // Qoder's activity endpoint occasionally succeeds with an empty activities
+  // array while the promotion is still active. Treat that as a transient
+  // omission, not an authoritative deletion: an activity carries its own
+  // expiry, so the last observed window remains valid until reset_at.
+  if (!activityWindow) {
+    activityWindow = readQoderActivityCache({ home, nowMs });
+    if (activityWindow) activitySource = "disk-cache";
+  }
+  if (rpcUsage) {
+    if (!rpcUsage.plan_label && typeof rpcAuth?.userType === "string") {
+      rpcUsage.plan_label = rpcAuth.userType;
+    }
+    if (activityWindow) rpcUsage.secondary_window = activityWindow;
+    rpcUsage.source = activityWindow
+      ? `local-ipc+${activitySource === "disk-cache" ? "cached-activity" : "provider-api"}`
+      : "local-ipc";
+    writeQoderLimitsCache(rpcUsage, { home, nowMs });
+    return rpcUsage;
+  }
+
+  // Match the Antigravity last-good behavior: once the local service is
+  // unavailable, prefer a bounded disk snapshot before attempting the much
+  // slower browser-cookie fallback. On macOS, probing Chromium profiles may
+  // involve multiple Keychain reads; letting those run first can consume the
+  // provider timeout and make a perfectly valid cache look intermittent.
+  const cachedLimits = readQoderLimitsCache({ home, nowMs });
+  if (cachedLimits) {
+    if (activityWindow) cachedLimits.secondary_window = activityWindow;
+    return cachedLimits;
+  }
+
+  const manualCookie = typeof env.QODER_COOKIE === "string" ? env.QODER_COOKIE.trim() : "";
+  const sessions = manualCookie
+    ? [{ cookieHeader: manualCookie, site: siteFromEnv(env.QODER_SITE), sourceLabel: "QODER_COOKIE" }]
+    : await importMacosQoderSessions({ home, platform, securityRunner, sqliteReader });
+
+  let lastError = null;
+  for (const session of sessions) {
+    try {
+      const result = await fetchQoderUsage(session.cookieHeader, session.site, fetchImpl);
+      // Qoder 1.18 can return an all-zero active plan with usage_percentage=0
+      // while the desktop client separately marks the account quota-exceeded.
+      // Preserve that status as metadata, but match Qoder's Credits UI by
+      // rendering an empty 0/0 bucket as 0%, not a full red 100% bar.
+      const local = result.primary_window?.limit_credits === 0
+        ? readQoderLocalQuota({ home, platform, env })
+        : null;
+      if (local) {
+        result.quota_exceeded = local.quota_exceeded === true;
+        result.primary_window.reset_at = null;
+        result.source = "provider-api+local-log";
+        result.plan_label = local.plan_label || null;
+      }
+      if (activityWindow) {
+        result.secondary_window = activityWindow;
+        result.source += activitySource === "disk-cache" ? "+cached-activity" : "+activity";
+      }
+      const liveResult = {
+        ...result,
+        cookie_source: session.sourceLabel,
+        site: session.site.id,
+      };
+      writeQoderLimitsCache(liveResult, { home, nowMs });
+      return liveResult;
+    } catch (error) {
+      lastError = error;
+    }
+  }
+
+  const local = readQoderLocalQuota({ home, platform, env });
+  if (local) {
+    if (activityWindow) {
+      local.secondary_window = activityWindow;
+      local.source += activitySource === "disk-cache" ? "+cached-activity" : "+activity";
+    }
+    writeQoderLimitsCache(local, { home, nowMs });
+    return local;
+  }
+  if (activityWindow) {
+    return {
+      configured: true,
+      error: null,
+      plan_label: typeof rpcAuth?.userType === "string" ? rpcAuth.userType : null,
+      primary_window: null,
+      secondary_window: activityWindow,
+      source: activitySource === "disk-cache" ? "cached-activity" : "local-ipc+provider-api",
+    };
+  }
+  if (lastError) {
+    return {
+      configured: true,
+      error: lastError.message || "Qoder usage fetch failed.",
+      auth_action_required: lastError.code === "AUTH_EXPIRED" ? "reauth" : undefined,
+    };
+  }
+  return { configured: false };
+}
+
+module.exports = {
+  QODER_SITES,
+  CHROMIUM_COOKIE_SQL,
+  normalizeQoderUsageResponse,
+  normalizeQoderRpcUsage,
+  normalizeQoderActivityResponse,
+  decryptChromiumCookie,
+  cookieHeaderFromRows,
+  importMacosQoderSessions,
+  qoderRequestHeaders,
+  fetchQoderUsage,
+  qoderRpcRequest,
+  buildQoderActivityHeaders,
+  fetchQoderActivity,
+  readQoderActivityCache,
+  writeQoderActivityCache,
+  readQoderLimitsCache,
+  writeQoderLimitsCache,
+  parseQoderQuotaLog,
+  readQoderLocalQuota,
+  fetchQoderLimits,
+};