zcode-acp-server 0.69.4 → 0.71.0

package/dist/quota/cliproxy/aggregate.js

@@ -0,0 +1,118 @@
+/**
+ * Cross-account aggregation for the CLIProxy card.
+ *
+ * Each antigravity subscription has its own quota pools; CLIProxy rotates
+ * requests across them, so the actionable numbers are POOL-WIDE: total used
+ * over total capacity (the average of the per-account used fractions — the
+ * sum divided by the number of subscriptions reporting that family+window),
+ * plus the earliest reset among the contributing buckets (when capacity
+ * starts coming back). The per-account detail stays in
+ * {@link ./types.js CpAccountQuota} for ACP consumers.
+ */
+/**
+ * Aggregate every account's families into pool-wide rows. Families are keyed
+ * by name (accounts report the same family set); a window reported by only
+ * some accounts still divides by the reporting count — a subscription that
+ * reports nothing for a family contributes neither usage nor capacity.
+ */
+export function aggregateCpFamilies(accounts) {
+    // family name → window → {usedSum, count, resetAt?}
+    const families = new Map();
+    for (const account of accounts) {
+        for (const model of account.models) {
+            let windows = families.get(model.name);
+            if (!windows) {
+                windows = new Map();
+                families.set(model.name, windows);
+            }
+            for (const w of model.windows) {
+                const agg = windows.get(w.window) ?? { usedSum: 0, count: 0 };
+                agg.usedSum += w.used;
+                agg.count += 1;
+                if (w.resetAt !== undefined && (agg.resetAt === undefined || w.resetAt < agg.resetAt)) {
+                    agg.resetAt = w.resetAt;
+                }
+                windows.set(w.window, agg);
+            }
+        }
+    }
+    const out = [];
+    for (const [name, windows] of families) {
+        const rows = [];
+        for (const [window, agg] of windows) {
+            rows.push({
+                window,
+                used: Math.min(1, agg.usedSum / agg.count),
+                ...(agg.resetAt !== undefined && { resetAt: agg.resetAt }),
+            });
+        }
+        // Tightest window first; ties keep the 5h-then-week display order.
+        rows.sort((a, b) => b.used - a.used || windowOrder(a.window) - windowOrder(b.window));
+        out.push({ name, windows: rows });
+    }
+    // Most-used family leads the card.
+    return out.sort((a, b) => maxUsed(b) - maxUsed(a));
+}
+function windowOrder(window) {
+    return window === "5h" ? 0 : 1;
+}
+function maxUsed(family) {
+    return family.windows.length > 0 ? family.windows[0].used : 0;
+}
+/**
+ * The pool-wide binding row across ALL families: the single (window, used,
+ * earliest reset) the dock and the ACP `combined` field report. The window is
+ * whichever is fullest (max aggregated used over every family×window); the
+ * reset is the earliest among that window's family rows — capacity starts
+ * returning then even though the pool refills gradually.
+ */
+export function bindingCpWindow(families) {
+    let binding = null;
+    for (const family of families) {
+        for (const w of family.windows) {
+            if (!binding || w.used > binding.used)
+                binding = { ...w };
+        }
+    }
+    if (!binding)
+        return null;
+    // Earliest reset across every family reporting the SAME window.
+    let earliest;
+    for (const family of families) {
+        for (const w of family.windows) {
+            if (w.window === binding.window && w.resetAt !== undefined) {
+                earliest = earliest === undefined ? w.resetAt : Math.min(earliest, w.resetAt);
+            }
+        }
+    }
+    return { ...binding, ...(earliest !== undefined && { resetAt: earliest }) };
+}
+/**
+ * Per-window pool-wide rows for compact consumers (ACP `combined`): for each
+ * window, the fullest family's aggregated used plus that window's earliest
+ * reset. Families are separate pools, so a per-window sum would double-count
+ * capacity; the fullest family is the binding constraint for that window.
+ */
+export function combinedCpWindows(families) {
+    const rows = new Map();
+    const earliest = {};
+    for (const family of families) {
+        for (const w of family.windows) {
+            if (w.resetAt !== undefined) {
+                earliest[w.window] =
+                    earliest[w.window] === undefined ? w.resetAt : Math.min(earliest[w.window], w.resetAt);
+            }
+            const prev = rows.get(w.window);
+            if (!prev || w.used > prev.used)
+                rows.set(w.window, { ...w });
+        }
+    }
+    const out = [...rows.values()].map((w) => ({
+        window: w.window,
+        used: w.used,
+        ...(earliest[w.window] !== undefined && { resetAt: earliest[w.window] }),
+    }));
+    out.sort((a, b) => b.used - a.used || windowOrder(a.window) - windowOrder(b.window));
+    return out;
+}
+//# sourceMappingURL=aggregate.js.map

package/dist/quota/cliproxy/aggregate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregate.js","sourceRoot":"","sources":["../../../src/quota/cliproxy/aggregate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAmBH;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA0B;IAC5D,oDAAoD;IACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA+E,CAAC;IACxG,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;gBACpB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpC,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC;gBACtB,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;gBACf,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtF,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;gBAC1B,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,GAAqB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC;gBACR,MAAM;gBACN,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;gBAC1C,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;aAC3D,CAAC,CAAC;QACL,CAAC;QACD,mEAAmE;QACnE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,mCAAmC;IACnC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,WAAW,CAAC,MAAgB;IACnC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,OAAO,CAAC,MAAyB;IACxC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,QAA6B;IAC3D,IAAI,OAAO,GAA0B,IAAI,CAAC;IAC1C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI;gBAAE,OAAO,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,gEAAgE;IAChE,IAAI,QAA4B,CAAC;IACjC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC3D,QAAQ,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA6B;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;IACjD,MAAM,QAAQ,GAAsC,EAAE,CAAC;IACvD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC5B,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;oBAChB,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5F,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KACzE,CAAC,CAAC,CAAC;IACJ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACrF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/quota/cliproxy/client.d.ts

@@ -0,0 +1,45 @@
+/**
+ * CLIProxyAPI management HTTP client.
+ *
+ * Two calls, both Bearer-authed with the management key:
+ * - credentials listing (v8: `/v8/management/credentials`; the v0 servers
+ *   that still exist answer `/v0/management/auth-files` — probed once, the
+ *   working spelling cached for the process);
+ * - `api-call` — the credential-scoped upstream relay the management web UI
+ *   itself uses for Gemini quota.
+ *
+ * No retries beyond the URL-candidate ladder: a remote quota card must fail
+ * fast into `unavailable`, not hang the combined view.
+ */
+import type { CpResponse } from "./types.js";
+/**
+ * Upstream quota endpoints CPAMC itself tries, in order
+ * (Cli-Proxy-API-Management-Center `constants.ts`): the primary internal
+ * quota API first, sandbox and bare variants as fallbacks.
+ */
+export declare const QUOTA_SUMMARY_URLS: readonly ["https://daily-cloudcode-pa.googleapis.com/v1internal:retrieveUserQuotaSummary", "https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:retrieveUserQuotaSummary", "https://cloudcode-pa.googleapis.com/v1internal:retrieveUserQuotaSummary"];
+/** Hook: forget the cached route spellings (tests, and watch-mode ticks so a
+ *  server upgrade mid-watch re-probes instead of sticking to a stale route). */
+export declare function resetRouteCache(): void;
+/**
+ * List the proxy's credential entries. 401/403 surfaces to the caller as
+ * `auth_error`; other statuses as `unavailable`.
+ */
+export declare function fetchCredentials(base: string, key: string, fetchImpl?: typeof globalThis.fetch): Promise<CpResponse>;
+/**
+ * Relay `retrieveUserQuotaSummary` for one account. `$TOKEN$` is substituted
+ * by the proxy with that credential's OAuth token — the key never sees the
+ * token, and we never see it either (it stays server-side).
+ *
+ * The upstream URL ladder walks on the UPSTREAM status carried inside the
+ * relay envelope (CPAMC's semantics): the relay itself answers HTTP 200 with
+ * the upstream result embedded, so a 403/404 upstream means this URL variant
+ * is not the one this account's client is recognized on — the next variant
+ * may still answer. Only an upstream 2xx satisfies the ladder.
+ *
+ * @returns the relay response (its `body` is the upstream JSON as a STRING),
+ *          or null when every URL candidate failed (relay/network error, or
+ *          no variant produced an upstream 2xx).
+ */
+export declare function fetchQuotaSummary(base: string, key: string, authIndex: string, projectId: string | undefined, fetchImpl?: typeof globalThis.fetch): Promise<CpResponse | null>;
+//# sourceMappingURL=client.d.ts.map

package/dist/quota/cliproxy/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/quota/cliproxy/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAkB7C;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,gQAIrB,CAAC;AAMX;gFACgF;AAChF,wBAAgB,eAAe,IAAI,IAAI,CAGtC;AA4CD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,OAAO,UAAU,CAAC,KAAwB,GACpD,OAAO,CAAC,UAAU,CAAC,CAWrB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,SAAS,GAAE,OAAO,UAAU,CAAC,KAAwB,GACpD,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAoC5B"}

package/dist/quota/cliproxy/client.js

@@ -0,0 +1,134 @@
+/**
+ * CLIProxyAPI management HTTP client.
+ *
+ * Two calls, both Bearer-authed with the management key:
+ * - credentials listing (v8: `/v8/management/credentials`; the v0 servers
+ *   that still exist answer `/v0/management/auth-files` — probed once, the
+ *   working spelling cached for the process);
+ * - `api-call` — the credential-scoped upstream relay the management web UI
+ *   itself uses for Gemini quota.
+ *
+ * No retries beyond the URL-candidate ladder: a remote quota card must fail
+ * fast into `unavailable`, not hang the combined view.
+ */
+import { relayUpstreamStatus } from "./parse.js";
+const TIMEOUT_MS = 10_000;
+/** Both route spellings, tried in order; the winner is cached per process. */
+const CREDENTIALS_ROUTES = ["/v8/management/credentials", "/v0/management/auth-files"];
+// The v8 relay lives under `/requests/` (official docs/management-api-v8.md);
+// a top-level `/v8/management/api-call` does not exist and answers 404.
+const API_CALL_ROUTES = ["/v8/management/requests/api-call", "/v0/management/api-call"];
+/**
+ * Antigravity accounts' client identity (CPAMC `constants.ts`
+ * ANTIGRAVITY_USER_AGENT). The quota endpoint gates on it: without the
+ * antigravity CLI UA, Google answers 403 "You do not have a valid license of
+ * this product" even for a perfectly healthy account (verified live 2026-10).
+ */
+const ANTIGRAVITY_USER_AGENT = "antigravity/cli/1.0.13 (aidev_client; os_type=darwin; arch=arm64)";
+/**
+ * Upstream quota endpoints CPAMC itself tries, in order
+ * (Cli-Proxy-API-Management-Center `constants.ts`): the primary internal
+ * quota API first, sandbox and bare variants as fallbacks.
+ */
+export const QUOTA_SUMMARY_URLS = [
+    "https://daily-cloudcode-pa.googleapis.com/v1internal:retrieveUserQuotaSummary",
+    "https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:retrieveUserQuotaSummary",
+    "https://cloudcode-pa.googleapis.com/v1internal:retrieveUserQuotaSummary",
+];
+/** Route-spelling memory (set on first success; 404 keeps probing). */
+let credentialsRoute = null;
+let apiCallRoute = null;
+/** Hook: forget the cached route spellings (tests, and watch-mode ticks so a
+ *  server upgrade mid-watch re-probes instead of sticking to a stale route). */
+export function resetRouteCache() {
+    credentialsRoute = null;
+    apiCallRoute = null;
+}
+function authHeaders(key) {
+    return {
+        Authorization: `Bearer ${key}`,
+        "X-Management-Key": key,
+        Accept: "application/json",
+    };
+}
+async function fetchOnce(url, key, init, fetchImpl) {
+    const resp = await fetchImpl(url, {
+        ...init,
+        headers: { ...authHeaders(key), ...init.headers },
+        signal: AbortSignal.timeout(TIMEOUT_MS),
+    });
+    return { status: resp.status, text: await resp.text() };
+}
+/** Probe the route spellings until one answers non-404 (cached afterwards). */
+async function fetchRouted(base, key, routes, cached, init, fetchImpl) {
+    if (cached) {
+        return { route: cached, resp: await fetchOnce(`${base}${cached}`, key, init, fetchImpl) };
+    }
+    let last = { status: 404, text: "" };
+    for (const route of routes) {
+        last = await fetchOnce(`${base}${route}`, key, init, fetchImpl);
+        if (last.status !== 404)
+            return { route, resp: last };
+    }
+    return { route: null, resp: last };
+}
+/**
+ * List the proxy's credential entries. 401/403 surfaces to the caller as
+ * `auth_error`; other statuses as `unavailable`.
+ */
+export async function fetchCredentials(base, key, fetchImpl = globalThis.fetch) {
+    const { route, resp } = await fetchRouted(base, key, CREDENTIALS_ROUTES, credentialsRoute, { method: "GET" }, fetchImpl);
+    if (route)
+        credentialsRoute = route;
+    return resp;
+}
+/**
+ * Relay `retrieveUserQuotaSummary` for one account. `$TOKEN$` is substituted
+ * by the proxy with that credential's OAuth token — the key never sees the
+ * token, and we never see it either (it stays server-side).
+ *
+ * The upstream URL ladder walks on the UPSTREAM status carried inside the
+ * relay envelope (CPAMC's semantics): the relay itself answers HTTP 200 with
+ * the upstream result embedded, so a 403/404 upstream means this URL variant
+ * is not the one this account's client is recognized on — the next variant
+ * may still answer. Only an upstream 2xx satisfies the ladder.
+ *
+ * @returns the relay response (its `body` is the upstream JSON as a STRING),
+ *          or null when every URL candidate failed (relay/network error, or
+ *          no variant produced an upstream 2xx).
+ */
+export async function fetchQuotaSummary(base, key, authIndex, projectId, fetchImpl = globalThis.fetch) {
+    for (const url of QUOTA_SUMMARY_URLS) {
+        let resp = null;
+        try {
+            const routed = await fetchRouted(base, key, API_CALL_ROUTES, apiCallRoute, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    auth_index: authIndex,
+                    method: "POST",
+                    url,
+                    header: {
+                        Authorization: "Bearer $TOKEN$",
+                        "Content-Type": "application/json",
+                        "User-Agent": ANTIGRAVITY_USER_AGENT,
+                    },
+                    data: JSON.stringify(projectId !== undefined ? { project: projectId } : {}),
+                }),
+            }, fetchImpl);
+            if (routed.route)
+                apiCallRoute = routed.route;
+            resp = routed.resp;
+        }
+        catch {
+            resp = null; // network/timeout on this variant — try the next
+        }
+        if (resp?.status !== 200)
+            continue;
+        const upstream = relayUpstreamStatus(resp.text);
+        if (upstream >= 200 && upstream < 300)
+            return resp;
+    }
+    return null;
+}
+//# sourceMappingURL=client.js.map

package/dist/quota/cliproxy/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/quota/cliproxy/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGjD,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,CAAC,4BAA4B,EAAE,2BAA2B,CAAC,CAAC;AACvF,8EAA8E;AAC9E,wEAAwE;AACxE,MAAM,eAAe,GAAG,CAAC,kCAAkC,EAAE,yBAAyB,CAAC,CAAC;AAExF;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,mEAAmE,CAAC;AAEnG;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,+EAA+E;IAC/E,uFAAuF;IACvF,yEAAyE;CACjE,CAAC;AAEX,uEAAuE;AACvE,IAAI,gBAAgB,GAAkB,IAAI,CAAC;AAC3C,IAAI,YAAY,GAAkB,IAAI,CAAC;AAEvC;gFACgF;AAChF,MAAM,UAAU,eAAe;IAC7B,gBAAgB,GAAG,IAAI,CAAC;IACxB,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO;QACL,aAAa,EAAE,UAAU,GAAG,EAAE;QAC9B,kBAAkB,EAAE,GAAG;QACvB,MAAM,EAAE,kBAAkB;KAC3B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,GAAW,EACX,IAAiB,EACjB,SAAkC;IAElC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QAChC,GAAG,IAAI;QACP,OAAO,EAAE,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,GAAI,IAAI,CAAC,OAA8C,EAAE;QACzF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;KACxC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,GAAW,EACX,MAAyB,EACzB,MAAqB,EACrB,IAAiB,EACjB,SAAkC;IAElC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC,GAAG,IAAI,GAAG,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;IAC5F,CAAC;IACD,IAAI,IAAI,GAAe,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,GAAG,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,GAAW,EACX,YAAqC,UAAU,CAAC,KAAK;IAErD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CACvC,IAAI,EACJ,GAAG,EACH,kBAAkB,EAClB,gBAAgB,EAChB,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,SAAS,CACV,CAAC;IACF,IAAI,KAAK;QAAE,gBAAgB,GAAG,KAAK,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,GAAW,EACX,SAAiB,EACjB,SAA6B,EAC7B,YAAqC,UAAU,CAAC,KAAK;IAErD,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,IAAI,IAAI,GAAsB,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,IAAI,EACJ,GAAG,EACH,eAAe,EACf,YAAY,EACZ;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM;oBACd,GAAG;oBACH,MAAM,EAAE;wBACN,aAAa,EAAE,gBAAgB;wBAC/B,cAAc,EAAE,kBAAkB;wBAClC,YAAY,EAAE,sBAAsB;qBACrC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5E,CAAC;aACH,EACD,SAAS,CACV,CAAC;YACF,IAAI,MAAM,CAAC,KAAK;gBAAE,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;YAC9C,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC,CAAC,iDAAiD;QAChE,CAAC;QACD,IAAI,IAAI,EAAE,MAAM,KAAK,GAAG;YAAE,SAAS;QACnC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,QAAQ,IAAI,GAAG,IAAI,QAAQ,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/quota/cliproxy/config.d.ts

@@ -0,0 +1,24 @@
+/**
+ * CLIProxyAPI credential discovery — the same convention as the Ollama card:
+ * config file first (`~/.config/zcode-acp/config.json` `quota.cliproxyUrl` +
+ * `quota.cliproxyManagementKey`), env vars as a full fallback
+ * (`CLIPROXY_URL` / `CLIPROXY_MANAGEMENT_KEY`).
+ *
+ * A missing URL or key yields `not_configured` (the section is silently
+ * skipped in `all` mode). An `http://` URL to a non-loopback host is refused
+ * at query time — see {@link loadCpConfig}.
+ */
+export declare const ENV_URL = "CLIPROXY_URL";
+export declare const ENV_KEY = "CLIPROXY_MANAGEMENT_KEY";
+export interface CpConfig {
+    /** Base URL, no trailing slash/path (e.g. `https://cp.example.com:8317`). */
+    url: string;
+    /** Management key (`remote-management.secret-key`). */
+    key: string;
+}
+/**
+ * Resolve the endpoint + key. Blank strings count as absent. The URL gets a
+ * trailing-slash trim so `https://host/` still works.
+ */
+export declare function loadCpConfig(): CpConfig | null;
+//# sourceMappingURL=config.d.ts.map

package/dist/quota/cliproxy/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/quota/cliproxy/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,eAAO,MAAM,OAAO,iBAAiB,CAAC;AACtC,eAAO,MAAM,OAAO,4BAA4B,CAAC;AAEjD,MAAM,WAAW,QAAQ;IACvB,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,QAAQ,GAAG,IAAI,CAM9C"}

package/dist/quota/cliproxy/config.js

@@ -0,0 +1,27 @@
+/**
+ * CLIProxyAPI credential discovery — the same convention as the Ollama card:
+ * config file first (`~/.config/zcode-acp/config.json` `quota.cliproxyUrl` +
+ * `quota.cliproxyManagementKey`), env vars as a full fallback
+ * (`CLIPROXY_URL` / `CLIPROXY_MANAGEMENT_KEY`).
+ *
+ * A missing URL or key yields `not_configured` (the section is silently
+ * skipped in `all` mode). An `http://` URL to a non-loopback host is refused
+ * at query time — see {@link loadCpConfig}.
+ */
+import process from "node:process";
+import { loadUserConfig } from "../../config/user-config.js";
+export const ENV_URL = "CLIPROXY_URL";
+export const ENV_KEY = "CLIPROXY_MANAGEMENT_KEY";
+/**
+ * Resolve the endpoint + key. Blank strings count as absent. The URL gets a
+ * trailing-slash trim so `https://host/` still works.
+ */
+export function loadCpConfig() {
+    const quota = loadUserConfig().quota;
+    const url = (quota?.cliproxyUrl ?? process.env[ENV_URL] ?? "").trim().replace(/\/+$/, "");
+    const key = (quota?.cliproxyManagementKey ?? process.env[ENV_KEY] ?? "").trim();
+    if (!url || !key)
+        return null;
+    return { url, key };
+}
+//# sourceMappingURL=config.js.map

package/dist/quota/cliproxy/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/quota/cliproxy/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,MAAM,CAAC,MAAM,OAAO,GAAG,cAAc,CAAC;AACtC,MAAM,CAAC,MAAM,OAAO,GAAG,yBAAyB,CAAC;AASjD;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC,KAAK,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,qBAAqB,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChF,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACtB,CAAC"}

package/dist/quota/cliproxy/format.d.ts

@@ -0,0 +1,18 @@
+/**
+ * CLIProxyAPI quota rendering — pool-wide rows: every Gemini subscription's
+ * usage aggregated per model family and window (`5h` / `Week`), each row
+ * stamped with that window's EARLIEST reset across accounts (when capacity
+ * starts coming back). Same bar style as the other sections so the combined
+ * card reads as one piece. Non-Gemini providers the proxy routes are
+ * summarised in a single trailing count line.
+ */
+import type { CpQueryResult } from "./types.js";
+export declare function formatCpSection(result: CpQueryResult, color?: boolean, 
+/** Count of non-Gemini accounts routed by the proxy, for the tail line. */
+otherAccounts?: number, 
+/** Clock for the cached-age stamp (tests inject; default real time). */
+now?: () => number): {
+    header: string;
+    body: string[];
+};
+//# sourceMappingURL=format.d.ts.map

package/dist/quota/cliproxy/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../src/quota/cliproxy/format.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAahD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,aAAa,EACrB,KAAK,UAAQ;AACb,2EAA2E;AAC3E,aAAa,SAAI;AACjB,wEAAwE;AACxE,GAAG,GAAE,MAAM,MAAyB,GACnC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CA2CpC"}

package/dist/quota/cliproxy/format.js

@@ -0,0 +1,71 @@
+/**
+ * CLIProxyAPI quota rendering — pool-wide rows: every Gemini subscription's
+ * usage aggregated per model family and window (`5h` / `Week`), each row
+ * stamped with that window's EARLIEST reset across accounts (when capacity
+ * starts coming back). Same bar style as the other sections so the combined
+ * card reads as one piece. Non-Gemini providers the proxy routes are
+ * summarised in a single trailing count line.
+ */
+import { aggregateCpFamilies } from "./aggregate.js";
+import { pickOverlay, renderColorBar } from "../color.js";
+import { formatResetTime, renderBar } from "../format.js";
+import { roundTenth } from "../rounding.js";
+/** `3m`-style age for the cached-stale header stamp. */
+function formatAge(ms) {
+    const minutes = Math.floor(ms / 60_000);
+    if (minutes >= 60)
+        return `${Math.floor(minutes / 60)}h${minutes % 60 || ""}`;
+    return `${minutes}m`;
+}
+function windowLabel(window) {
+    return window === "5h" ? "5h" : "Week";
+}
+export function formatCpSection(result, color = false, 
+/** Count of non-Gemini accounts routed by the proxy, for the tail line. */
+otherAccounts = 0, 
+/** Clock for the cached-age stamp (tests inject; default real time). */
+now = () => Date.now()) {
+    // The section's 5-minute server-side-of-the-card TTL means values can lag
+    // the rest of the card by minutes (see ../index.js TTL_MS) — stamp the age
+    // so a motionless number reads as cached, not broken.
+    const ageMs = result.kind === "success" ? now() - result.fetchedAt : 0;
+    const header = ageMs > 90_000 ? `CLIProxy · ${formatAge(ageMs)} old` : "CLIProxy";
+    if (result.kind !== "success") {
+        const msg = result.kind === "not_configured"
+            ? "not configured (set quota.cliproxyUrl + quota.cliproxyManagementKey)"
+            : result.kind === "auth_error"
+                ? "auth failed — check the management key"
+                : "unavailable";
+        return { header, body: [msg] };
+    }
+    if (result.accounts.length === 0) {
+        return { header, body: ["no Gemini accounts on this proxy"] };
+    }
+    const body = [];
+    for (const family of aggregateCpFamilies(result.accounts)) {
+        const label = family.name.slice(0, 22);
+        for (const [index, w] of family.windows.entries()) {
+            const pct = roundTenth(w.used * 100);
+            // Continuation rows (2nd window, 2nd family…) indent under the label.
+            const name = index === 0 ? label.padEnd(22) : " ".repeat(22);
+            const window = windowLabel(w.window).padEnd(5);
+            const reset = formatResetTime(w.resetAt);
+            const trailing = reset ? ` · ${reset}` : "";
+            if (color) {
+                const bar = renderColorBar(pct, { overlay: pickOverlay({ usedPercent: pct }) });
+                body.push(`${name}${window}${bar}${trailing}`);
+            }
+            else {
+                body.push(`${name}${window}${renderBar(pct)}  ${String(pct).padStart(2)}%${trailing}`);
+            }
+        }
+    }
+    if (body.length === 0) {
+        return { header, body: ["no quota buckets reported"] };
+    }
+    if (otherAccounts > 0) {
+        body.push(`      + ${otherAccounts} non-Gemini account${otherAccounts > 1 ? "s" : ""}`);
+    }
+    return { header, body };
+}
+//# sourceMappingURL=format.js.map

package/dist/quota/cliproxy/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../../src/quota/cliproxy/format.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5C,wDAAwD;AACxD,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IACxC,IAAI,OAAO,IAAI,EAAE;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,IAAI,OAAO,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;IAC9E,OAAO,GAAG,OAAO,GAAG,CAAC;AACvB,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB;IACxC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAqB,EACrB,KAAK,GAAG,KAAK;AACb,2EAA2E;AAC3E,aAAa,GAAG,CAAC;AACjB,wEAAwE;AACxE,MAAoB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IAEpC,0EAA0E;IAC1E,2EAA2E;IAC3E,sDAAsD;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;IAClF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,GAAG,GACP,MAAM,CAAC,IAAI,KAAK,gBAAgB;YAC9B,CAAC,CAAC,sEAAsE;YACxE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;gBAC5B,CAAC,CAAC,wCAAwC;gBAC1C,CAAC,CAAC,aAAa,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,kCAAkC,CAAC,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;YACrC,sEAAsE;YACtE,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAChF,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,MAAM,GAAG,GAAG,GAAG,QAAQ,EAAE,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,2BAA2B,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,WAAW,aAAa,sBAAsB,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC"}

package/dist/quota/cliproxy/index.d.ts

@@ -0,0 +1,34 @@
+/**
+ * CLIProxyAPI quota orchestration — the entry used by `zcode-acp quota cp`
+ * and the combined card.
+ *
+ * Flow: config (file → env) → plain-HTTP guard → cache → credentials listing
+ * → per-Gemini-account quota relay (parallel across accounts, three upstream
+ * URL variants in order) → parse → cache. Account-level failures degrade to
+ * that account's omission; a failed listing degrades the whole section.
+ *
+ * Never throws — the CLI always produces output.
+ */
+import type { CpQueryResult } from "./types.js";
+/** Result carrying the non-Gemini account count for the renderer's tail. */
+export interface CpQueryOutcome {
+    result: CpQueryResult;
+    /** Credential entries whose provider is not Gemini (codex/claude/…). */
+    otherCount: number;
+}
+/**
+ * Drop the cached outcome. NOT wired into the CLI watch tick on purpose —
+ * clearing it per tick would restore the 30s poll this TTL exists to prevent.
+ * Tests use it to force a fresh query.
+ */
+export declare function clearCpCache(): void;
+/**
+ * Query the remote CLIProxyAPI. Returns `{result, otherCount}` so the caller
+ * can render the codex/claude tail without a second listing.
+ */
+export declare function queryCpUsage(): Promise<CpQueryOutcome>;
+export { formatCpSection } from "./format.js";
+export { loadCpConfig, ENV_KEY, ENV_URL } from "./config.js";
+export { ANTIGRAVITY_PROVIDER, parseCredentialEntries, parseQuotaSummary } from "./parse.js";
+export type { CpAccountQuota, CpModelQuota, CpQueryResult, CpWindow, CpWindowQuota } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/quota/cliproxy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/quota/cliproxy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAYH,OAAO,KAAK,EAAkB,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhE,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,aAAa,CAAC;IACtB,wEAAwE;IACxE,UAAU,EAAE,MAAM,CAAC;CACpB;AAeD;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,IAAI,CAEnC;AAsBD;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,cAAc,CAAC,CAkD5D;AAED,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC7F,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/dist/quota/cliproxy/index.js

@@ -0,0 +1,110 @@
+/**
+ * CLIProxyAPI quota orchestration — the entry used by `zcode-acp quota cp`
+ * and the combined card.
+ *
+ * Flow: config (file → env) → plain-HTTP guard → cache → credentials listing
+ * → per-Gemini-account quota relay (parallel across accounts, three upstream
+ * URL variants in order) → parse → cache. Account-level failures degrade to
+ * that account's omission; a failed listing degrades the whole section.
+ *
+ * Never throws — the CLI always produces output.
+ */
+import { log } from "../../utils.js";
+import { fetchCredentials, fetchQuotaSummary } from "./client.js";
+import { loadCpConfig } from "./config.js";
+import { ANTIGRAVITY_PROVIDER, parseCredentialEntries, parseQuotaSummary, relayUpstreamBody, relayUpstreamStatus, } from "./parse.js";
+/**
+ * Cache TTL — deliberately MUCH longer than the other providers (10s): the
+ * Gemini quota summary rides `v1internal:retrieveUserQuotaSummary`, a Google
+ * INTERNAL endpoint reached with the account's own OAuth token, so every
+ * refresh is charged to that Google account. High-frequency polling risks
+ * rate-limiting or account-level risk flags, and quota buckets move at
+ * minute-scale anyway. This TTL is the rate guard NO MATTER how often the
+ * caller polls (watch mode's 30s ticks included — they must not clear this
+ * cache; see `clearCpCache`).
+ */
+const TTL_MS = 5 * 60_000;
+let cached = null;
+/**
+ * Drop the cached outcome. NOT wired into the CLI watch tick on purpose —
+ * clearing it per tick would restore the 30s poll this TTL exists to prevent.
+ * Tests use it to force a fresh query.
+ */
+export function clearCpCache() {
+    cached = null;
+}
+async function queryOneAccount(base, key, entry) {
+    try {
+        const relay = await fetchQuotaSummary(base, key, entry.authIndex, entry.projectId);
+        if (!relay)
+            return null;
+        if (relayUpstreamStatus(relay.text) !== 200)
+            return null;
+        const body = relayUpstreamBody(relay.text);
+        if (body === undefined)
+            return null;
+        const models = parseQuotaSummary(body);
+        if (models.length === 0)
+            return null;
+        return { label: entry.label, provider: ANTIGRAVITY_PROVIDER, models };
+    }
+    catch (e) {
+        log(`cliproxy: account ${entry.authIndex} quota relay failed (${String(e)})`);
+        return null;
+    }
+}
+/**
+ * Query the remote CLIProxyAPI. Returns `{result, otherCount}` so the caller
+ * can render the codex/claude tail without a second listing.
+ */
+export async function queryCpUsage() {
+    if (cached && Date.now() - cached.at < TTL_MS) {
+        log("cliproxy: serving cached result");
+        return cached.outcome;
+    }
+    const cfg = loadCpConfig();
+    if (!cfg)
+        return { result: { kind: "not_configured" }, otherCount: 0 };
+    // The management key relays credential-bearing upstream calls — refuse a
+    // plaintext connection to anything but loopback (an SSH tunnel is the
+    // recommended way to reach a plain-HTTP instance).
+    if (cfg.url.startsWith("http://") && !/^http:\/\/(127\.|localhost|\[::1\])/.test(cfg.url)) {
+        log("cliproxy: refusing plain-HTTP management URL to a non-loopback host (use https or an SSH tunnel)");
+        return { result: { kind: "unavailable" }, otherCount: 0 };
+    }
+    let outcome;
+    try {
+        const resp = await fetchCredentials(cfg.url, cfg.key);
+        if (resp.status === 401 || resp.status === 403) {
+            outcome = { result: { kind: "auth_error" }, otherCount: 0 };
+        }
+        else if (resp.status !== 200) {
+            log(`cliproxy: unexpected status ${resp.status}`);
+            outcome = { result: { kind: "unavailable" }, otherCount: 0 };
+        }
+        else {
+            const entries = parseCredentialEntries(resp.text);
+            const gemini = entries.filter((e) => e.provider === ANTIGRAVITY_PROVIDER);
+            const accounts = (await Promise.all(gemini.map((e) => queryOneAccount(cfg.url, cfg.key, e)))).filter((a) => a !== null);
+            // Every Gemini account failing its relay reads as "unreachable quota",
+            // not as an empty success — with accounts present but none answering,
+            // the honest row is an error line.
+            outcome = {
+                result: gemini.length > 0 && accounts.length === 0
+                    ? { kind: "unavailable" }
+                    : { kind: "success", accounts, fetchedAt: Date.now() },
+                otherCount: entries.length - gemini.length,
+            };
+        }
+    }
+    catch (e) {
+        log(`cliproxy: fetch failed (${e instanceof Error ? e.message : String(e)})`);
+        outcome = { result: { kind: "unavailable" }, otherCount: 0 };
+    }
+    cached = { outcome, at: Date.now() };
+    return outcome;
+}
+export { formatCpSection } from "./format.js";
+export { loadCpConfig, ENV_KEY, ENV_URL } from "./config.js";
+export { ANTIGRAVITY_PROVIDER, parseCredentialEntries, parseQuotaSummary } from "./parse.js";
+//# sourceMappingURL=index.js.map

package/dist/quota/cliproxy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/quota/cliproxy/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAUpB;;;;;;;;;GASG;AACH,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;AAC1B,IAAI,MAAM,GAAmD,IAAI,CAAC;AAElE;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAY,EACZ,GAAW,EACX,KAA+D;IAE/D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACnF,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC;IACxE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,qBAAqB,KAAK,CAAC,SAAS,wBAAwB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;QAC9C,GAAG,CAAC,iCAAiC,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACvE,yEAAyE;IACzE,sEAAsE;IACtE,mDAAmD;IACnD,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1F,GAAG,CACD,kGAAkG,CACnG,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC/C,OAAO,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAC9D,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC/B,GAAG,CAAC,+BAA+B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAClD,OAAO,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,oBAAoB,CAAC,CAAC;YAC1E,MAAM,QAAQ,GAAG,CACf,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAC3E,CAAC,MAAM,CAAC,CAAC,CAAC,EAAuB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YACjD,uEAAuE;YACvE,sEAAsE;YACtE,mCAAmC;YACnC,OAAO,GAAG;gBACR,MAAM,EACJ,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACxC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE;oBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;gBAC1D,UAAU,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;aAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,2BAA2B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9E,OAAO,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC"}