claude-code-usage 1.0.1__tar.gz → 1.0.3__tar.gz

{claude_code_usage-1.0.1 → claude_code_usage-1.0.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: claude-code-usage
-Version: 1.0.1
+Version: 1.0.3
 Summary: System tray monitor for Claude Code token usage
 Author: Max
 License: MIT

{claude_code_usage-1.0.1 → claude_code_usage-1.0.3}/claude_code_usage.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: claude-code-usage
-Version: 1.0.1
+Version: 1.0.3
 Summary: System tray monitor for Claude Code token usage
 Author: Max
 License: MIT

{claude_code_usage-1.0.1 → claude_code_usage-1.0.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "claude-code-usage"
-version = "1.0.1"
+version = "1.0.3"
 description = "System tray monitor for Claude Code token usage"
 readme = "README.md"
 license = {text = "MIT"}

{claude_code_usage-1.0.1 → claude_code_usage-1.0.3}/src/api.py

@@ -63,7 +63,9 @@ def fetch_usage(access_token: str) -> UsageData:
     }
 
     try:
-        response = requests.get(USAGE_ENDPOINT, headers=headers, timeout=10)
+        response = requests.get(
+            USAGE_ENDPOINT, headers=headers, timeout=10, verify=True
+        )
     except requests.RequestException as e:
         raise APIError(f"Network error: {e}")
 
@@ -113,9 +115,8 @@ def fetch_usage(access_token: str) -> UsageData:
         raise APIError(f"Server error: {response.status_code}")
 
     else:
-        raise APIError(
-            f"Unexpected response: {response.status_code} - {response.text}"
-        )
+        # Don't expose response body - may contain sensitive server info
+        raise APIError(f"Unexpected response: {response.status_code}")
 
 
 def fetch_with_retry(access_token: str, max_retries: int = 3) -> UsageData:

{claude_code_usage-1.0.1 → claude_code_usage-1.0.3}/src/autostart.py

@@ -1,6 +1,8 @@
 """Autostart management for Claude Usage Overlay."""
 
 import os
+import shutil
+from configparser import ConfigParser
 from pathlib import Path
 
 
@@ -31,6 +33,28 @@ def get_desktop_file_path() -> Path:
     return get_autostart_path() / 'claude-usage-overlay.desktop'
 
 
+def _get_exec_command() -> str:
+    """Determine the best Exec command for the .desktop file.
+
+    Returns:
+        Command string for Exec= line, preferring installed entry point
+    """
+    # Prefer the installed 'claude-usage' command if available
+    claude_usage_path = shutil.which("claude-usage")
+    if claude_usage_path:
+        return claude_usage_path
+
+    # Fallback to running module directly with python
+    project_root = Path(__file__).parent.parent.absolute()
+    main_py = project_root / "src" / "main.py"
+    if main_py.exists():
+        # Use sys.executable equivalent for current python
+        return f"python3 -m src.main"
+
+    # Last resort: assume it's installed as module
+    return "python3 -m src.main"
+
+
 def create_autostart_entry(enable: bool = True):
     """Create or update autostart .desktop file.
 
@@ -39,9 +63,8 @@ def create_autostart_entry(enable: bool = True):
     """
     desktop_file = get_desktop_file_path()
 
-    # Get absolute path to main.py
-    project_root = Path(__file__).parent.parent.absolute()
-    exec_path = f"/usr/bin/python3 {project_root}/src/main.py"
+    # Get best exec command (prefer installed entry point)
+    exec_cmd = _get_exec_command()
 
     # Desktop entry content
     hidden_value = "false" if enable else "true"
@@ -50,7 +73,7 @@ Type=Application
 Version=1.0
 Name=Claude Code Usage Monitor
 Comment=System tray monitor for Claude Code token usage
-Exec={exec_path}
+Exec={exec_cmd}
 Icon=dialog-information
 Terminal=false
 Categories=Utility;Monitor;
@@ -59,9 +82,10 @@ X-GNOME-Autostart-enabled=true
 Hidden={hidden_value}
 """
 
-    # Write .desktop file
+    # Write .desktop file with secure permissions (rw-r--r--)
+    # .desktop files don't need execute bit - they're parsed by desktop environment
     desktop_file.write_text(content)
-    desktop_file.chmod(0o755)
+    desktop_file.chmod(0o644)
 
 
 def remove_autostart_entry():
@@ -82,13 +106,14 @@ def is_autostart_enabled() -> bool:
     if not desktop_file.exists():
         return False
 
-    content = desktop_file.read_text()
-
-    # Parse for Hidden= line (case insensitive value)
-    for line in content.splitlines():
-        if line.strip().startswith('Hidden='):
-            value = line.split('=', 1)[1].strip().lower()
-            return value != 'true'
-
-    # If Hidden not present, autostart is enabled
-    return True
+    # Use configparser for proper INI parsing
+    parser = ConfigParser(interpolation=None)
+    try:
+        parser.read(desktop_file)
+        # Desktop files use 'Desktop Entry' section
+        # Hidden=true means disabled; absent or false means enabled
+        hidden = parser.get('Desktop Entry', 'Hidden', fallback='false')
+        return hidden.lower() != 'true'
+    except Exception:
+        # If parsing fails, assume enabled if file exists
+        return True

{claude_code_usage-1.0.1 → claude_code_usage-1.0.3}/src/config.py

@@ -171,3 +171,6 @@ class UserConfig:
 
         with open(config_path, 'w') as f:
             json.dump(asdict(self), f, indent=2)
+
+        # Set secure permissions (owner read/write only)
+        os.chmod(config_path, 0o600)

{claude_code_usage-1.0.1 → claude_code_usage-1.0.3}/src/icon_generator.py

@@ -6,8 +6,27 @@ Generates circular gauge icons using Cairo for system tray display.
 import cairo
 import math
 import os
+import tempfile
+from pathlib import Path
 from typing import Tuple
 
+# Secure temp directory for icons (created once, reused)
+_icon_temp_dir: str | None = None
+
+
+def _get_secure_icon_dir() -> str:
+    """Get or create a secure temporary directory for icon files.
+
+    Returns:
+        Path to secure temp directory with restricted permissions (0o700)
+    """
+    global _icon_temp_dir
+    if _icon_temp_dir is None or not Path(_icon_temp_dir).exists():
+        # Create secure temp directory owned by current user only
+        _icon_temp_dir = tempfile.mkdtemp(prefix="claude-usage-icons-")
+        os.chmod(_icon_temp_dir, 0o700)
+    return _icon_temp_dir
+
 
 def get_color_for_percentage(percentage: float) -> Tuple[float, float, float]:
     """
@@ -85,8 +104,9 @@ def generate_gauge_icon(percentage: float, color_percentage: float, size: int =
         ctx.arc(center, center, radius, -math.pi / 2, end_angle)
         ctx.stroke()
 
-    # Save to unique filename per percentage and color state (bust GTK icon cache)
-    icon_path = f"/tmp/claude-usage-{int(percentage)}-{color_name}.png"
+    # Save to secure temp directory with unique filename (bust GTK icon cache)
+    icon_dir = _get_secure_icon_dir()
+    icon_path = os.path.join(icon_dir, f"gauge-{int(percentage)}-{color_name}.png")
     surface.write_to_png(icon_path)
 
     return os.path.abspath(icon_path)