waterplane 0.0.1 → 0.1.11

package/packages/host/dist/updates/self.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self.js","sourceRoot":"","sources":["../../src/updates/self.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAErI,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAYrC,KAAK,UAAU,WAAW,CAAC,OAAe;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAA8C,UAAU,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,kBAAkB,CAAC,CAAC;QACjI,OAAO,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,CAAC,iEAAiE;IACrF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAa;IACpC,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO;IACjC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO;IACtE,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,iBAAiB;CAC7B,CAAC;AAEF,uFAAuF;AACvF,MAAM,UAAU,QAAQ,CAAC,OAAiB,YAAY;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC/B,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;QAC3I,KAAK,KAAK;YACR,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,KAAK,CAAC,IAAI,SAAS,EAAE,GAAG,EAAE,+JAA+J,EAAE,CAAC;QACnQ,KAAK,UAAU;YACb,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,uCAAuC,EAAE,GAAG,EAAE,2JAA2J,EAAE,CAAC;QAC5Q;YACE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,oHAAoH,EAAE,CAAC;IACpL,CAAC;AACH,CAAC;AAED,oHAAoH;AACpH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAiB,YAAY;IAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IACpD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAC9E,CAAC"}

package/packages/host/dist/updates/wire.d.ts

@@ -0,0 +1,18 @@
+import type { HostMessage } from "@waterplane/shared";
+import type { PluginRegistry } from "../plugins/pluginregistry.js";
+import type { SettingsStore } from "../settings.js";
+import { UpdateApplier } from "./apply.js";
+import { UpdatesChecker } from "./checker.js";
+export declare const AUTO_CHECK_KEY: string;
+export declare function createPluginUpdates(a: {
+    root: string;
+    plugins: PluginRegistry;
+    settings: SettingsStore;
+    broadcast: (m: HostMessage) => void;
+}): UpdatesChecker;
+/** The applier beside the checker: same registry, the plugins folder under the config dir. */
+export declare function createUpdateApplier(a: {
+    configDir: string;
+    plugins: PluginRegistry;
+    checker: UpdatesChecker;
+}): UpdateApplier;

package/packages/host/dist/updates/wire.js

@@ -0,0 +1,21 @@
+/** `main.ts`'s one-line construction of the update check: the real registry, the synced setting, the broadcast. */
+import { join } from "node:path";
+import { lsKey } from "@waterplane/shared";
+import { hostStateDir } from "../branddirs.js";
+import { UpdateApplier } from "./apply.js";
+import { UpdatesChecker, autoCheckFrom } from "./checker.js";
+import { installedFrom } from "./installrecord.js";
+export const AUTO_CHECK_KEY = lsKey("updates.autoCheck");
+export function createPluginUpdates(a) {
+    return new UpdatesChecker({
+        stateDir: hostStateDir(a.root),
+        installed: () => installedFrom(a.plugins.entries),
+        autoCheck: () => autoCheckFrom(a.settings.get(AUTO_CHECK_KEY)?.value),
+        onChange: (status) => a.broadcast({ t: "updates.status", status }),
+    });
+}
+/** The applier beside the checker: same registry, the plugins folder under the config dir. */
+export function createUpdateApplier(a) {
+    return new UpdateApplier({ pluginsDir: join(a.configDir, "plugins"), plugins: a.plugins, checker: a.checker });
+}
+//# sourceMappingURL=wire.js.map

package/packages/host/dist/updates/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../src/updates/wire.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAEzD,MAAM,UAAU,mBAAmB,CAAC,CAA0G;IAC5I,OAAO,IAAI,cAAc,CAAC;QACxB,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9B,SAAS,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACjD,SAAS,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC;QACrE,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;KACnE,CAAC,CAAC;AACL,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,mBAAmB,CAAC,CAA0E;IAC5G,OAAO,IAAI,aAAa,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AACjH,CAAC"}

package/packages/host/dist/usage.d.ts

@@ -0,0 +1,124 @@
+import type { UsageInfo, UsageSample } from "@waterplane/shared";
+import { trustKeys } from "./prompt.js";
+export { trustKeys };
+/** The poll period, published so a history chart can say what "dense" would
+ *  have looked like. Readings are NOT guaranteed at this rate — polling is only
+ *  on when the auto-fire gate needs it (`usagelog.ts`). */
+export declare const USAGE_POLL_MS: number;
+/**
+ * Parse a RENDERED `/usage` screen → percentages and reset instants, anchored on
+ * the LABELS, never on the order the numbers appear in.
+ *
+ * **Rendered, not stripped.** The TUI draws with absolute cursor moves, so the
+ * gap between `Current` and `session` is a cursor jump and not a space: ANSI-
+ * stripped bytes carry `Currentsession` and `ResetsSep10at7pm(Europe/Berlin)`.
+ * The percentages survived that because they are read off a squashed copy, but
+ * every reset was read off a spaced one and so was never found — measured, a
+ * screen printing both instants published `sessionResetAt: null,
+ * weeklyResetAt: null`, and both windows said the screen had named no reset.
+ * `scrape()` therefore replays the capture through a headless VT
+ * (`render.ts`) first. The `strip()` here stays: it costs nothing on rendered
+ * text and keeps a hand-fed raw capture from parsing as garbage.
+ *
+ * The old parse took the first two `N% used` on screen as session-then-weekly.
+ * That is a positional read of a screen that repaints while we watch it: a
+ * frame that dropped the "Current session" row (or drew it before its bar
+ * filled in) shifts every later number one slot left, so the weekly figure is
+ * reported as the session one and the next number — a per-model weekly row,
+ * `Current week (Fable) 0% used`, or whatever sits below — becomes "the week".
+ * Observed as a phone chip reading `63% / 100% wk` for a real 7% / 63%: both
+ * numbers wrong, neither of them nonsense-looking, which is the worst shape a
+ * usage gauge can fail in — the weekly figure is what strands you for days.
+ *
+ * So each figure is read from the text that NAMES it, the per-model weekly rows
+ * are ignored (only `(all models)` is the account-wide week), and the LAST
+ * matching frame in the buffer wins — the newest complete render. A label that
+ * arrives mangled mid-repaint simply doesn't match, so a corrupt frame is
+ * skipped rather than parsed. No labels found ⇒ null, not a guess: `ok:false`
+ * hides the chip, which is honest, while a wrong percentage is acted on.
+ */
+export declare function parseUsage(raw: string, now?: number): {
+    sessionPct: number | null;
+    weeklyPct: number | null;
+    sessionResetAt: number | null;
+    weeklyResetAt: number | null;
+};
+/**
+ * A reading with every window whose reset instant has PASSED dropped.
+ *
+ * The percentage is a fact about a window, and a window that has rolled over
+ * is gone: 46% of a 5-hour session that reset twenty minutes ago is not 46% of
+ * anything. Nothing re-scrapes on the clock here (polling is only on when the
+ * auto-fire gate needs it), so a cache can outlive its own window by hours —
+ * and the number it keeps printing is exactly the plausible-wrong-number this
+ * file exists to refuse. A window the screen named no reset for is left alone:
+ * unknown is not expired.
+ *
+ * Returns the SAME object when nothing expired — `get()` is asked several times
+ * a second by the backlog tick.
+ */
+export declare function usageAfterResets(u: UsageInfo, now?: number): UsageInfo;
+/**
+ * The last kept reading, re-offered at boot as what it is.
+ *
+ * The daemon restarts on every `npm run restart` — which is what shipping a new
+ * web bundle IS — and the cache lives in memory, so the phone reconnected to a
+ * checker that had never probed and drew `? / ? wk` until something asked for a
+ * scrape and the scrape came back. Nothing about the account changed in those
+ * seconds; the reading was on disk the whole time.
+ *
+ * Honest rather than merely helpful:
+ * - a window is re-offered ONLY while the reset instant the screen named is
+ *   still in the future — `usageAfterResets`' rule, asked of the sample, and a
+ *   sample that named no reset for a window cannot claim that window at all;
+ * - `checkedAt` stays the original probe's instant, so it reads as old to every
+ *   staleness rule (`budget.ts` fails open past `BUDGET_STALE_MS`, `getFresh`
+ *   re-probes past the TTL) and the phone says "checked 12m ago";
+ * - `remembered: true`, so a reader that must not act on a reading nobody took
+ *   this boot (a plugin's answer policy, via `api.claudeUsage`) can refuse it by name.
+ *
+ * Null when there is nothing worth offering — never a reading of two nulls.
+ */
+export declare function rememberedUsage(s: UsageSample | null | undefined, now?: number): UsageInfo | null;
+export declare class UsageChecker {
+    private cwd;
+    private onUpdate;
+    private cache;
+    private inflight;
+    private timer;
+    /** When the last probe failed, 0 = never (or since recovered). */
+    private failedAt;
+    constructor(cwd: string, onUpdate: (u: UsageInfo) => void);
+    get(): UsageInfo;
+    /**
+     * Offer the last kept reading, ONCE, before anything has been probed.
+     *
+     * Boot only — it never overwrites a reading this process took, and it
+     * publishes nothing (there are no clients yet, and the sample is already in
+     * the log it came from).
+     */
+    seed(sample: UsageSample | null | undefined): void;
+    /** Cached value if fresh, else refresh. */
+    getFresh(): Promise<UsageInfo>;
+    /** Keep usage warm (only worth it when auto-fire needs the gate). */
+    startPolling(): void;
+    stopPolling(): void;
+    refresh(): Promise<UsageInfo>;
+    private scrape;
+    /**
+     * A probe that produced nothing.
+     *
+     * **It does not blank a reading that is still true.** `usagelog.ts` already
+     * states the rule for the history — "a failed probe is a fact about this
+     * daemon, not about the account's limits" — and the live gauge is the same
+     * fact: a `claude` that would not start, or a screen that did not render
+     * inside fifteen seconds, says nothing about the week. So the last reading
+     * survives, minus any window that has since rolled over, and `checkedAt`
+     * stays ITS instant — the phone keeps saying how old it is, and `getFresh`
+     * keeps treating it as stale.
+     *
+     * Only when nothing usable is left does the gauge go to nulls, which is the
+     * honest `?` and never a number.
+     */
+    private fail;
+}

package/packages/host/dist/usage.js

@@ -0,0 +1,411 @@
+/**
+ * Claude Code usage checker. There's no local file or CLI flag with live
+ * rate-limit consumption, so we scrape `/usage` from a short-lived `claude`
+ * PTY (server-fetched), parse the session + weekly percentages AND the reset
+ * instants printed under them, and cache.
+ *
+ * Fragile by nature (TUI format can change between `claude` versions) — every
+ * field is best-effort and `ok:false` when parsing fails, so callers fail safe.
+ */
+import * as pty from "node-pty";
+import { parseResetTime } from "./limit.js";
+import { renderCapture } from "./render.js";
+import { readNavBox, trustKeys } from "./prompt.js";
+// `trustKeys` moved beside `readNavBox`; deliver.ts presses the same keys.
+export { trustKeys };
+import { claudeBackend } from "./backends/index.js";
+import { ptyEnv } from "./ptyenv.js";
+import { isHalted, trackRun } from "./halt.js";
+import { env } from "./env.js";
+// Read once at boot, as before — `backends/claude.ts` owns the env knob.
+const CLAUDE_BIN = claudeBackend.bin();
+const TTL_MS = Number(env("USAGE_TTL_MS") || 8 * 60 * 1000);
+/**
+ * How long a FAILED probe is believed before another one is spawned.
+ *
+ * A failure used to be cached like a reading — `checkedAt: Date.now()`, two
+ * nulls — so one probe that came back unparsed blanked the gauge for the whole
+ * eight-minute TTL with nothing asking again. Now the last good reading
+ * survives a failure (see `fail()`), and this is the only thing keeping a
+ * screen that asks on every navigation from spawning a `claude` per tap while
+ * the CLI is genuinely unreadable.
+ */
+const FAIL_TTL_MS = Math.max(15_000, Number(env("USAGE_FAIL_TTL_MS") || 60_000));
+/** The poll period, published so a history chart can say what "dense" would
+ *  have looked like. Readings are NOT guaranteed at this rate — polling is only
+ *  on when the auto-fire gate needs it (`usagelog.ts`). */
+export const USAGE_POLL_MS = TTL_MS;
+/** Probe width. The replay must use the SAME number or lines wrap differently
+ *  than they did on the probe's own screen. */
+const COLS = 100;
+const strip = (s) => s.replace(/\x1b\[[0-9;?]*[ -/]*[@-~]|\x1b[PX^_].*?\x1b\\|\x1b\][^\x07]*\x07|\r/g, "");
+/**
+ * Parse a RENDERED `/usage` screen → percentages and reset instants, anchored on
+ * the LABELS, never on the order the numbers appear in.
+ *
+ * **Rendered, not stripped.** The TUI draws with absolute cursor moves, so the
+ * gap between `Current` and `session` is a cursor jump and not a space: ANSI-
+ * stripped bytes carry `Currentsession` and `ResetsSep10at7pm(Europe/Berlin)`.
+ * The percentages survived that because they are read off a squashed copy, but
+ * every reset was read off a spaced one and so was never found — measured, a
+ * screen printing both instants published `sessionResetAt: null,
+ * weeklyResetAt: null`, and both windows said the screen had named no reset.
+ * `scrape()` therefore replays the capture through a headless VT
+ * (`render.ts`) first. The `strip()` here stays: it costs nothing on rendered
+ * text and keeps a hand-fed raw capture from parsing as garbage.
+ *
+ * The old parse took the first two `N% used` on screen as session-then-weekly.
+ * That is a positional read of a screen that repaints while we watch it: a
+ * frame that dropped the "Current session" row (or drew it before its bar
+ * filled in) shifts every later number one slot left, so the weekly figure is
+ * reported as the session one and the next number — a per-model weekly row,
+ * `Current week (Fable) 0% used`, or whatever sits below — becomes "the week".
+ * Observed as a phone chip reading `63% / 100% wk` for a real 7% / 63%: both
+ * numbers wrong, neither of them nonsense-looking, which is the worst shape a
+ * usage gauge can fail in — the weekly figure is what strands you for days.
+ *
+ * So each figure is read from the text that NAMES it, the per-model weekly rows
+ * are ignored (only `(all models)` is the account-wide week), and the LAST
+ * matching frame in the buffer wins — the newest complete render. A label that
+ * arrives mangled mid-repaint simply doesn't match, so a corrupt frame is
+ * skipped rather than parsed. No labels found ⇒ null, not a guess: `ok:false`
+ * hides the chip, which is honest, while a wrong percentage is acted on.
+ */
+export function parseUsage(raw, now = Date.now()) {
+    const sq = strip(raw).replace(/\s+/g, "").toLowerCase();
+    /** Last `N%used` that follows `label`, before the next `current…` heading. */
+    const after = (label) => {
+        let val = null;
+        for (const m of sq.matchAll(label)) {
+            const from = m.index + m[0].length;
+            let rest = sq.slice(from, from + 400);
+            const next = rest.search(/current(session|week)/);
+            if (next >= 0)
+                rest = rest.slice(0, next);
+            const hit = /(\d{1,3})%used/.exec(rest);
+            if (!hit)
+                continue;
+            const n = Number(hit[1]);
+            if (n >= 0 && n <= 100)
+                val = n;
+        }
+        return val;
+    };
+    const sessionPct = after(/currentsession/g);
+    // `(all models)` is the account-wide week; `(opus)`/`(fable)` are per-model
+    // sub-limits and must never stand in for it. Bare `current week` is the
+    // fallback for a build that stops printing the qualifier.
+    const weeklyPct = after(/currentweek\(allmodels\)/g) ?? after(/currentweek(?!\()/g);
+    // Reset instants are read from a copy that KEEPS the spaces, because
+    // `parseResetTime` reads words ("resets sep 3 at 7pm (europe/berlin)") and a
+    // squashed screen has none. Whitespace is collapsed per line and the newlines
+    // are kept, so a reset stays attributable to the heading above it and the
+    // context window can't run off the end of its own line.
+    const nl = strip(raw).split("\n").map((l) => l.replace(/\s+/g, " ").trim()).join("\n").toLowerCase();
+    const sessionResetAt = resetAfter(nl, /current session/g, now, false);
+    const weeklyResetAt = resetAfter(nl, /current week \(all models\)/g, now, true) ??
+        resetAfter(nl, /current week(?! *\()/g, now, true);
+    return { sessionPct, weeklyPct, sessionResetAt, weeklyResetAt };
+}
+/** A reset instant that appears under `label`, before the next `current …` heading. */
+function resetAfter(nl, label, now, needDate) {
+    let val = null;
+    for (const m of nl.matchAll(label)) {
+        const from = m.index + m[0].length;
+        let rest = nl.slice(from, from + 400);
+        const next = rest.search(/current (session|week)/);
+        if (next >= 0)
+            rest = rest.slice(0, next);
+        // The weekly window resets DAYS out, so a bare wall-clock time would be
+        // resolved onto today or tomorrow — the exact wrong-day failure `limit.ts`
+        // refuses to make. No date named ⇒ no answer.
+        if (needDate) {
+            const ctx = /resets?\b[^\n]{0,80}/.exec(rest);
+            if (!ctx || !/\b(sun|mon|tue|wed|thu|fri|sat|jan|feb|mar|apr|may|jun|jul|aug|sep|oct|nov|dec)/.test(ctx[0]))
+                continue;
+        }
+        // Last complete frame in the buffer wins, like the percentages above.
+        const t = parseResetTime(rest, now);
+        if (t != null)
+            val = t;
+    }
+    return val;
+}
+/**
+ * A reading with every window whose reset instant has PASSED dropped.
+ *
+ * The percentage is a fact about a window, and a window that has rolled over
+ * is gone: 46% of a 5-hour session that reset twenty minutes ago is not 46% of
+ * anything. Nothing re-scrapes on the clock here (polling is only on when the
+ * auto-fire gate needs it), so a cache can outlive its own window by hours —
+ * and the number it keeps printing is exactly the plausible-wrong-number this
+ * file exists to refuse. A window the screen named no reset for is left alone:
+ * unknown is not expired.
+ *
+ * Returns the SAME object when nothing expired — `get()` is asked several times
+ * a second by the backlog tick.
+ */
+export function usageAfterResets(u, now = Date.now()) {
+    const sessionGone = u.sessionResetAt != null && u.sessionResetAt <= now;
+    const weeklyGone = u.weeklyResetAt != null && u.weeklyResetAt <= now;
+    if (!sessionGone && !weeklyGone)
+        return u;
+    const sessionPct = sessionGone ? null : u.sessionPct;
+    const weeklyPct = weeklyGone ? null : u.weeklyPct;
+    return {
+        ...u,
+        ok: sessionPct != null || weeklyPct != null,
+        sessionPct, weeklyPct,
+        sessionResetAt: sessionGone ? null : u.sessionResetAt,
+        weeklyResetAt: weeklyGone ? null : u.weeklyResetAt,
+    };
+}
+/**
+ * The last kept reading, re-offered at boot as what it is.
+ *
+ * The daemon restarts on every `npm run restart` — which is what shipping a new
+ * web bundle IS — and the cache lives in memory, so the phone reconnected to a
+ * checker that had never probed and drew `? / ? wk` until something asked for a
+ * scrape and the scrape came back. Nothing about the account changed in those
+ * seconds; the reading was on disk the whole time.
+ *
+ * Honest rather than merely helpful:
+ * - a window is re-offered ONLY while the reset instant the screen named is
+ *   still in the future — `usageAfterResets`' rule, asked of the sample, and a
+ *   sample that named no reset for a window cannot claim that window at all;
+ * - `checkedAt` stays the original probe's instant, so it reads as old to every
+ *   staleness rule (`budget.ts` fails open past `BUDGET_STALE_MS`, `getFresh`
+ *   re-probes past the TTL) and the phone says "checked 12m ago";
+ * - `remembered: true`, so a reader that must not act on a reading nobody took
+ *   this boot (a plugin's answer policy, via `api.claudeUsage`) can refuse it by name.
+ *
+ * Null when there is nothing worth offering — never a reading of two nulls.
+ */
+export function rememberedUsage(s, now = Date.now()) {
+    if (!s || !(s.t > 0) || s.t > now)
+        return null;
+    const sessionPct = s.sr != null && s.sr > now ? s.s : null;
+    const weeklyPct = s.wr != null && s.wr > now ? s.w : null;
+    if (sessionPct == null && weeklyPct == null)
+        return null;
+    return {
+        ok: true,
+        sessionPct, weeklyPct,
+        sessionResetAt: sessionPct != null ? s.sr : null,
+        weeklyResetAt: weeklyPct != null ? s.wr : null,
+        checkedAt: s.t,
+        remembered: true,
+    };
+}
+export class UsageChecker {
+    cwd;
+    onUpdate;
+    cache = {
+        ok: false, sessionPct: null, weeklyPct: null,
+        sessionResetAt: null, weeklyResetAt: null, checkedAt: 0,
+    };
+    inflight = null;
+    timer = null;
+    /** When the last probe failed, 0 = never (or since recovered). */
+    failedAt = 0;
+    constructor(cwd, onUpdate) {
+        this.cwd = cwd;
+        this.onUpdate = onUpdate;
+    }
+    get() {
+        return usageAfterResets(this.cache);
+    }
+    /**
+     * Offer the last kept reading, ONCE, before anything has been probed.
+     *
+     * Boot only — it never overwrites a reading this process took, and it
+     * publishes nothing (there are no clients yet, and the sample is already in
+     * the log it came from).
+     */
+    seed(sample) {
+        if (this.cache.checkedAt)
+            return;
+        const u = rememberedUsage(sample);
+        if (u)
+            this.cache = u;
+    }
+    /** Cached value if fresh, else refresh. */
+    async getFresh() {
+        const now = Date.now();
+        if (this.cache.checkedAt && now - this.cache.checkedAt < TTL_MS)
+            return this.get();
+        // A probe that just failed is not retried on every navigation — see
+        // `FAIL_TTL_MS`. The last good reading (if any) is what `get()` answers.
+        if (this.failedAt && now - this.failedAt < FAIL_TTL_MS)
+            return this.get();
+        return this.refresh();
+    }
+    /** Keep usage warm (only worth it when auto-fire needs the gate). */
+    startPolling() {
+        if (this.timer)
+            return;
+        void this.refresh();
+        this.timer = setInterval(() => void this.refresh(), TTL_MS);
+    }
+    stopPolling() {
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+    }
+    async refresh() {
+        // The probe is a real `claude` process; halted (`halt.ts`) means none is
+        // started. The kept reading stands, exactly as after a failed probe.
+        if (isHalted())
+            return usageAfterResets(this.cache);
+        if (this.inflight)
+            return this.inflight;
+        this.inflight = this.scrape().finally(() => { this.inflight = null; });
+        return this.inflight;
+    }
+    scrape() {
+        return new Promise((resolve) => {
+            let proc;
+            try {
+                proc = pty.spawn(CLAUDE_BIN, [], {
+                    name: "xterm-256color", cols: COLS, rows: 44, cwd: this.cwd,
+                    // The SAME floor a session gets (`ptyenv.ts`): under launchd there is
+                    // no `USER`, and a `claude` without one draws `/usage` with the
+                    // account rows missing for ever — the probe then "fails" on a screen
+                    // that is working perfectly.
+                    env: { ...ptyEnv(), ...claudeBackend.spawnEnv },
+                });
+            }
+            catch {
+                return resolve(this.fail());
+            }
+            let buf = "";
+            let done = false;
+            let onDone = null;
+            // The probe is a real `claude`: a halt (`halt.ts`) reaches it like any
+            // headless run — its group gets the signal, and the read ends as a failed one.
+            const untrack = trackRun((sig) => {
+                try {
+                    process.kill(-proc.pid, sig);
+                }
+                catch {
+                    try {
+                        proc.kill(sig);
+                    }
+                    catch { /* gone */ }
+                }
+                finish(this.fail());
+            });
+            const finish = (u) => {
+                if (done)
+                    return;
+                done = true;
+                untrack();
+                onDone?.();
+                try {
+                    proc.kill();
+                }
+                catch { /* gone */ }
+                if (u.ok && !u.remembered)
+                    this.failedAt = 0;
+                this.cache = u;
+                this.onUpdate(u);
+                resolve(u);
+            };
+            proc.onData((d) => (buf += d));
+            const sq = () => strip(buf).replace(/\s+/g, "").toLowerCase();
+            // 1) clear trust prompt if present, 2) send /usage, 3) wait for it to render.
+            // Looked for until /usage is typed, not once: a cold `claude` (WSL reading a Windows drive)
+            // may not have drawn the box 1.5 s in.
+            let trustAnswered = false;
+            const trust = setInterval(() => {
+                if (done || trustAnswered || !/trustthisfolder|createdoroneyoutrust/.test(sq()))
+                    return;
+                trustAnswered = true;
+                void renderCapture(buf, COLS).then((text) => { if (!done)
+                    proc.write(trustKeys(readNavBox(text))); }, () => { });
+            }, 500);
+            setTimeout(() => { clearInterval(trust); buf = ""; proc.write("/usage\r"); }, 4000);
+            /**
+             * Look at the screen REPEATEDLY, and stop at the first one that names a
+             * window.
+             *
+             * It used to be one look, nine seconds in, and whatever was on the screen
+             * at that instant was the answer. The probe this daemon spawns first is
+             * the one racing a cold `claude` — boot, right after `npm run restart` —
+             * and nine seconds is not reliably enough for it to paint `/usage`, so the
+             * reading that reached the phone was a blank screen's. Waiting longer for
+             * everyone would make every warm probe slower; looking again is free
+             * (`renderCapture` on a buffer already in memory) and ends sooner.
+             *
+             * A look that finds nothing says nothing — the hard stop below is what
+             * turns "never painted" into a failed probe, once.
+             */
+            let looking = false;
+            const look = () => {
+                if (done || looking)
+                    return;
+                looking = true;
+                // Render before parsing: the reset instants are only legible as words on
+                // a screen, and a stripped capture has none of the spaces between them.
+                void renderCapture(buf, COLS).then((text) => {
+                    looking = false;
+                    const u = parseUsage(text);
+                    // Neither window named ⇒ not painted yet (or not parseable at all).
+                    // This used to publish `ok:false` with a fresh `checkedAt`, which
+                    // overwrote a perfectly good reading and stood for the whole
+                    // eight-minute TTL with nothing asking again — the `? / ? wk` the
+                    // phone drew after every restart. A blank screen never outranks a
+                    // reading again: see `fail()`.
+                    if (u.sessionPct == null && u.weeklyPct == null)
+                        return;
+                    finish({
+                        ok: true,
+                        sessionPct: u.sessionPct, weeklyPct: u.weeklyPct,
+                        sessionResetAt: u.sessionResetAt, weeklyResetAt: u.weeklyResetAt,
+                        checkedAt: Date.now(),
+                    });
+                }, () => { looking = false; });
+            };
+            // The looking starts AFTER `/usage` was typed — a render of the screen
+            // before it is a render of a screen that cannot carry the answer.
+            let looks = null;
+            setTimeout(() => {
+                if (done)
+                    return;
+                look();
+                looks = setInterval(look, 1500);
+            }, 7000);
+            // Hard safety timeout — and the only place a probe is declared failed.
+            setTimeout(() => finish(this.fail()), 20000);
+            onDone = () => { if (looks)
+                clearInterval(looks); };
+        });
+    }
+    /**
+     * A probe that produced nothing.
+     *
+     * **It does not blank a reading that is still true.** `usagelog.ts` already
+     * states the rule for the history — "a failed probe is a fact about this
+     * daemon, not about the account's limits" — and the live gauge is the same
+     * fact: a `claude` that would not start, or a screen that did not render
+     * inside fifteen seconds, says nothing about the week. So the last reading
+     * survives, minus any window that has since rolled over, and `checkedAt`
+     * stays ITS instant — the phone keeps saying how old it is, and `getFresh`
+     * keeps treating it as stale.
+     *
+     * Only when nothing usable is left does the gauge go to nulls, which is the
+     * honest `?` and never a number.
+     */
+    fail() {
+        const now = Date.now();
+        this.failedAt = now;
+        const kept = usageAfterResets(this.cache, now);
+        if (kept.ok)
+            return kept;
+        return {
+            ok: false, sessionPct: null, weeklyPct: null,
+            sessionResetAt: null, weeklyResetAt: null, checkedAt: now,
+        };
+    }
+}
+//# sourceMappingURL=usage.js.map

package/packages/host/dist/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAEhC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEpD,2EAA2E;AAC3E,OAAO,EAAE,SAAS,EAAE,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,yEAAyE;AACzE,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC;AACvC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAC5D;;;;;;;;;GASG;AACH,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC;AACjF;;2DAE2D;AAC3D,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AACpC;+CAC+C;AAC/C,MAAM,IAAI,GAAG,GAAG,CAAC;AAEjB,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAC1B,CAAC,CAAC,OAAO,CAAC,sEAAsE,EAAE,EAAE,CAAC,CAAC;AAExF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAItD,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAExD,8EAA8E;IAC9E,MAAM,KAAK,GAAG,CAAC,KAAa,EAAiB,EAAE;QAC7C,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACpC,IAAI,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAClD,IAAI,IAAI,IAAI,CAAC;gBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG;gBAAE,GAAG,GAAG,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC5C,4EAA4E;IAC5E,wEAAwE;IACxE,0DAA0D;IAC1D,MAAM,SAAS,GACb,KAAK,CAAC,2BAA2B,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAEpE,qEAAqE;IACrE,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,wDAAwD;IACxD,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACrG,MAAM,cAAc,GAAG,UAAU,CAAC,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,aAAa,GACjB,UAAU,CAAC,EAAE,EAAE,8BAA8B,EAAE,GAAG,EAAE,IAAI,CAAC;QACzD,UAAU,CAAC,EAAE,EAAE,uBAAuB,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAErD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;AAClE,CAAC;AAED,uFAAuF;AACvF,SAAS,UAAU,CAAC,EAAU,EAAE,KAAa,EAAE,GAAW,EAAE,QAAiB;IAC3E,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACpC,IAAI,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACnD,IAAI,IAAI,IAAI,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1C,wEAAwE;QACxE,2EAA2E;QAC3E,8CAA8C;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG,IAAI,CAAC,iFAAiF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS;QACxH,CAAC;QACD,sEAAsE;QACtE,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI;YAAE,GAAG,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAY,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC7D,MAAM,WAAW,GAAG,CAAC,CAAC,cAAc,IAAI,IAAI,IAAI,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC;IACxE,MAAM,UAAU,GAAG,CAAC,CAAC,aAAa,IAAI,IAAI,IAAI,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC;IACrE,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACrD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,OAAO;QACL,GAAG,CAAC;QACJ,EAAE,EAAE,UAAU,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI;QAC3C,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;QACrD,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa;KACnD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAAC,CAAiC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACjF,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,UAAU,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,MAAM,SAAS,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,UAAU,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;QAChD,aAAa,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;QAC9C,SAAS,EAAE,CAAC,CAAC,CAAC;QACd,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,YAAY;IAUH;IAAqB;IATjC,KAAK,GAAc;QACzB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI;QAC5C,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;KACxD,CAAC;IACM,QAAQ,GAA8B,IAAI,CAAC;IAC3C,KAAK,GAA0B,IAAI,CAAC;IAC5C,kEAAkE;IAC1D,QAAQ,GAAG,CAAC,CAAC;IAErB,YAAoB,GAAW,EAAU,QAAgC;QAArD,QAAG,GAAH,GAAG,CAAQ;QAAU,aAAQ,GAAR,QAAQ,CAAwB;IAAG,CAAC;IAE7E,GAAG;QACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CAAC,MAAsC;QACzC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO;QACjC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC;YAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,QAAQ;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,MAAM;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QACnF,oEAAoE;QACpE,yEAAyE;QACzE,IAAI,IAAI,CAAC,QAAQ,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,GAAG,WAAW;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,qEAAqE;IACrE,YAAY;QACV,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IACD,WAAW;QACT,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,QAAQ,EAAE;YAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,MAAM;QACZ,OAAO,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;YACxC,IAAI,IAAc,CAAC;YACnB,IAAI,CAAC;gBACH,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE;oBAC/B,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG;oBAC3D,sEAAsE;oBACtE,gEAAgE;oBAChE,qEAAqE;oBACrE,6BAA6B;oBAC7B,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,GAAG,aAAa,CAAC,QAAQ,EAAE;iBAChD,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,IAAI,MAAM,GAAwB,IAAI,CAAC;YACvC,uEAAuE;YACvE,+EAA+E;YAC/E,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC/B,IAAI,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,IAAI,CAAC;wBAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;gBAAC,CAAC;gBAC5F,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAY,EAAE,EAAE;gBAC9B,IAAI,IAAI;oBAAE,OAAO;gBACjB,IAAI,GAAG,IAAI,CAAC;gBACZ,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,EAAE,CAAC;gBACX,IAAI,CAAC;oBAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;gBACzC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU;oBAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAC7C,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;gBACf,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACjB,OAAO,CAAC,CAAC,CAAC,CAAC;YACb,CAAC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAE/B,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9D,8EAA8E;YAC9E,4FAA4F;YAC5F,uCAAuC;YACvC,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBAC7B,IAAI,IAAI,IAAI,aAAa,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBAAE,OAAO;gBACxF,aAAa,GAAG,IAAI,CAAC;gBACrB,KAAK,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI;oBAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAClH,CAAC,EAAE,GAAG,CAAC,CAAC;YACR,UAAU,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACpF;;;;;;;;;;;;;;eAcG;YACH,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,IAAI,GAAG,GAAG,EAAE;gBAChB,IAAI,IAAI,IAAI,OAAO;oBAAE,OAAO;gBAC5B,OAAO,GAAG,IAAI,CAAC;gBACf,yEAAyE;gBACzE,wEAAwE;gBACxE,KAAK,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;oBAC1C,OAAO,GAAG,KAAK,CAAC;oBAChB,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;oBAC3B,oEAAoE;oBACpE,kEAAkE;oBAClE,6DAA6D;oBAC7D,kEAAkE;oBAClE,kEAAkE;oBAClE,+BAA+B;oBAC/B,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI;wBAAE,OAAO;oBACxD,MAAM,CAAC;wBACL,EAAE,EAAE,IAAI;wBACR,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;wBAChD,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa;wBAChE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;qBACtB,CAAC,CAAC;gBACL,CAAC,EAAE,GAAG,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,CAAC,CAAC;YACF,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,KAAK,GAA0B,IAAI,CAAC;YACxC,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,IAAI;oBAAE,OAAO;gBACjB,IAAI,EAAE,CAAC;gBACP,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,uEAAuE;YACvE,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,KAAK;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,IAAI;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO;YACL,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI;YAC5C,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG;SAC1D,CAAC;IACJ,CAAC;CACF"}

package/packages/host/dist/usagelog.d.ts

@@ -0,0 +1,53 @@
+import type { UsageHistoryDoc, UsageInfo, UsageSample } from "@waterplane/shared";
+/** The knobs as this process read them — ONE read, shared with every source's log
+ *  (`usagesourcelog.ts`), so claude's file and the others' cannot drift apart. */
+export declare const USAGELOG_KNOBS: {
+    readonly CAP: number;
+    readonly RETAIN_MS: number;
+    readonly REPEAT_MS: number;
+    readonly SLACK: 1.25;
+};
+export declare class UsageLog {
+    private path;
+    private rows;
+    private appended;
+    constructor(root: string);
+    private load;
+    /** Drop what is past either retention bound. */
+    private trim;
+    /**
+     * Offer a reading. Kept only when it says something the last one did not —
+     * see `REPEAT_MS`.
+     *
+     * A reading that did not parse (`ok:false`) is DROPPED rather than recorded
+     * as two nulls: the history is of what the CLI printed, and a failed probe is
+     * a fact about this daemon, not about the account's limits.
+     */
+    note(u: UsageInfo): void;
+    private append;
+    /** Rewrite the file as exactly what is retained. tmp+rename, so a crash
+     *  mid-write loses the history rather than corrupting it into something that
+     *  parses as a different one. */
+    private compact;
+    /**
+     * The newest kept reading, or null.
+     *
+     * The one caller is boot: `usage.ts` re-offers it as a REMEMBERED reading so
+     * a restart — which is what shipping a new web bundle is — does not blank the
+     * phone's gauge while nothing about the account has changed. Nothing is
+     * scraped for it, which is this file's whole rule, and what may be claimed
+     * from it (only a window whose reset is still ahead) is decided there.
+     */
+    last(): UsageSample | null;
+    /**
+     * The kept readings, newest last.
+     *
+     * `sinceMs` narrows the window; it never widens it past what is retained, and
+     * `keptFrom` reports what is actually there rather than what was asked for.
+     */
+    read(sinceMs?: number, everyMs?: number): UsageHistoryDoc;
+    /** Write now. Called on SIGTERM beside the other stores — losing the tail of
+     *  an append-only log costs at most the readings since the last compaction,
+     *  which are already on disk, so this is only the retention rewrite. */
+    flush(): void;
+}