trantor 0.18.14 → 0.18.15

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.14",
+  "version": "0.18.15",
   "description": "Trantor \u2014 the hub-world for AI agent crews: live message bus, presence, project Kanban/flow board + crew orchestration for independent AI coding agents (Claude, Codex, Gemini, Kimi, DeepSeek)",
   "mcpServers": {
     "relay": {

package/bin/balances.mjs

@@ -29,11 +29,16 @@ function thresholds() {
 const balances = await fetchBalances(resolveKeys(process.env), { only: configured });
 const low = thresholds();
 
-// push the snapshot to the hub (best-effort) so the dashboard + warning line can use it
+// push the snapshot to the hub (best-effort) so the dashboard + warning line can use it.
+// TWO pushes on purpose: the project hub (fleet visibility) AND the LOCAL hub explicitly —
+// the desktop app reads balances from 127.0.0.1 because the data is machine-local, and the
+// project-resolved push goes to the REMOTE hub for pinned projects. That mismatch left the
+// local snapshot 11 days stale on 2026-08-28: the header chips faithfully rendered Aug-16
+// numbers, dimmed, while fresh pushes landed on a hub the app never asks.
 if (!noPush) {
-  try {
-    await signedPost("/balances", { balances, ts: Date.now() }, { timeoutMs: 2500 });
-  } catch {}
+  const snap = { balances, ts: Date.now() };
+  try { await signedPost("/balances", snap, { timeoutMs: 2500 }); } catch {}
+  try { await signedPost("http://127.0.0.1:4477/balances", snap, { timeoutMs: 2500 }); } catch {}
 }
 
 if (asJson) { console.log(JSON.stringify({ balances, low: balances.filter((b) => isLow(b, low, _qpct)).map((b) => b.provider) }, null, 2)); process.exit(0); }

package/hooks/lib/balance-check.mjs

@@ -36,7 +36,11 @@ export async function maybeCheckBalances() {
   if (!Array.isArray(balances) || !balances.length) { try { writeFileSync(STAMP, JSON.stringify({ ts: Date.now(), low: [] })); } catch {} return { low: [] }; }
 
   // push the fresh snapshot to the hub for the dashboard + other sessions (best-effort, signed)
-  await signedPost("/balances", { balances, ts: Date.now(), by: process.env.TRANTOR_SESSION || "" }, { timeoutMs: 2000 });
+  const snap = { balances, ts: Date.now(), by: process.env.TRANTOR_SESSION || "" };
+  await signedPost("/balances", snap, { timeoutMs: 2000 });
+  // The desktop reads balances from the LOCAL hub (machine-local data); a pinned project's
+  // default push lands on the REMOTE one — the 11-day-stale-header bug. Push both.
+  await signedPost("http://127.0.0.1:4477/balances", snap, { timeoutMs: 2000 }).catch(() => {});
 
   const { t, q } = thresholds();
   const low = balances.filter(b => isLow(b, t, q)).map(b => ({ label: b.label, line: fmtBalance(b) }));

package/lib/balances.mjs

@@ -32,6 +32,29 @@ const num = (v) => (v == null || v === "" || isNaN(Number(v))) ? null : Number(v
 // ambient environment (a dev's shell/.env may hold keys for many unrelated projects). prepaid →
 // { remaining, currency, unlimited? }   quota → { remainingPct, plan?, resetTime?, detail? }
 export const ADAPTERS = [
+  {
+    // The Claude subscription's REAL windows — the same numbers the claude.ai usage page shows.
+    // Auth is the operator's own Claude Code OAuth token (credentials file, then the macOS
+    // keychain entry Claude Code itself writes). Read-only, machine-local; only the resulting
+    // percentages ever leave this process (the hub snapshot) — the token never does.
+    provider: "claude", label: "Claude", kind: "windows", match: ["claude", "anthropic"], envKeys: [],
+    keyless: true,
+    async fetch() {
+      const tok = await claudeOAuthToken();
+      if (!tok) throw new Error("no Claude Code OAuth token found");
+      const r = await fetch("https://api.anthropic.com/api/oauth/usage", {
+        headers: { authorization: `Bearer ${tok}`, "anthropic-beta": "oauth-2025-04-20" },
+        signal: AbortSignal.timeout(8000),
+      });
+      if (!r.ok) throw new Error(`usage endpoint ${r.status}`);
+      const d = await r.json();
+      const win = (w, name) => (w && w.utilization != null)
+        ? { name, usedPct: Math.round(w.utilization), resetsAt: w.resets_at || null, locked: w.locked_reason || null }
+        : null;
+      return { windows: [win(d.five_hour, "5h"), win(d.seven_day, "7d")].filter(Boolean) };
+    },
+  },
+
   {
     provider: "openrouter", label: "OpenRouter", kind: "prepaid", match: ["openrouter"], envKeys: ["OPENROUTER_API_KEY"],
     async fetch(key) {
@@ -100,6 +123,9 @@ export const DEFAULT_LOW_QUOTA_PCT = 15;
 export function isLow(entry, thresholds = DEFAULT_LOW, quotaPct = DEFAULT_LOW_QUOTA_PCT) {
   if (!entry || !entry.ok) return false;
   if (entry.kind === "quota") return entry.remainingPct != null && entry.remainingPct < quotaPct;
+  // A usage window is LOW when what remains of it dips under the same quota threshold — 90% used
+  // on the 5h window is exactly the moment to know before firing a crew.
+  if (entry.kind === "windows") return (entry.windows || []).some((w) => w.usedPct != null && (100 - w.usedPct) < quotaPct || w.locked);
   if (entry.remaining == null) return false;   // prepaid unlimited/unknown
   const t = thresholds[entry.currency] ?? thresholds.USD ?? 5;
   return entry.remaining < t;
@@ -109,15 +135,36 @@ export function isLow(entry, thresholds = DEFAULT_LOW, quotaPct = DEFAULT_LOW_QU
 // profile provider names). An adapter runs only if it serves a configured provider AND its key is in the
 // env — so a stray OPENROUTER_API_KEY in a dev's .env is NOT reported unless they actually run OpenRouter
 // through Trantor. If `only` is omitted (no profile yet), nothing is fetched — better empty than wrong.
+
+// The operator's own Claude Code OAuth token: the credentials file first, then the keychain item
+// Claude Code writes on macOS. Used ONLY to read the subscription's usage windows.
+async function claudeOAuthToken() {
+  try {
+    const { readFileSync: rf, existsSync: ex } = await import("node:fs");
+    const { join: j } = await import("node:path");
+    const { homedir: h } = await import("node:os");
+    const p = j(h(), ".claude", ".credentials.json");
+    if (ex(p)) {
+      const t = JSON.parse(rf(p, "utf8"))?.claudeAiOauth?.accessToken;
+      if (t) return t;
+    }
+  } catch {}
+  try {
+    const { execFileSync } = await import("node:child_process");
+    const out = execFileSync("security", ["find-generic-password", "-s", "Claude Code-credentials", "-w"], { encoding: "utf8", timeout: 4000 }).trim();
+    return JSON.parse(out)?.claudeAiOauth?.accessToken || null;
+  } catch { return null; }
+}
+
 export async function fetchBalances(env = process.env, opts = {}) {
   const only = Array.isArray(opts.only) ? new Set(opts.only.map((s) => String(s).toLowerCase())) : null;
   const jobs = ADAPTERS.map(async (a) => {
     const names = (a.match || [a.provider]).map((s) => s.toLowerCase());
     if (!only || !names.some((n) => only.has(n))) return null;   // not a Trantor-configured provider → skip
     const envKey = a.envKeys.find((k) => env[k]);
-    if (!envKey) return null;                                    // configured but no key in env → can't query
-    const base = { provider: a.provider, label: a.label, kind: a.kind, via: envKey };
-    try { return { ...base, ok: true, ...(await a.fetch(env[envKey])) }; }
+    if (!envKey && !a.keyless) return null;                      // configured but no key in env → can't query
+    const base = { provider: a.provider, label: a.label, kind: a.kind, via: envKey || "oauth" };
+    try { return { ...base, ok: true, ...(await a.fetch(envKey ? env[envKey] : undefined)) }; }
     catch (e) { return { ...base, ok: false, error: String(e?.message || e) }; }
   });
   const rows = (await Promise.all(jobs)).filter(Boolean);
@@ -146,6 +193,10 @@ export function fmtBalance(e) {
     const reset = e.resetTime ? ` · resets ${fmtReset(e.resetTime)}` : "";
     return `${e.label}${e.plan ? " (" + e.plan + ")" : ""}: ${e.remainingPct}% left${reset}`;
   }
+  if (e.kind === "windows") {
+    const parts = (e.windows || []).map((w) => `${w.name} ${w.usedPct}% used${w.resetsAt ? " · resets " + fmtReset(w.resetsAt) : ""}${w.locked ? " · LOCKED" : ""}`);
+    return `${e.label}: ${parts.join("  ·  ") || "windows unknown"}`;
+  }
   if (e.kind === "subscription") return `${e.label}: ${e.plan || "subscription"} (${e.note || "no balance API"})`;
   const sym = e.currency === "CNY" ? "¥" : e.currency === "EUR" ? "€" : "$";
   if (e.unlimited || e.remaining == null) return `${e.label}: ${e.kind === "prepaid" ? "no limit / unknown" : e.kind}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trantor",
-  "version": "0.18.14",
+  "version": "0.18.15",
   "type": "module",
   "bin": {
     "trantor": "bin/cli.mjs"