cli-consumption 0.4.0__tar.gz → 0.4.2__tar.gz

{cli_consumption-0.4.0 → cli_consumption-0.4.2}/CHANGELOG.md

@@ -6,6 +6,27 @@ use [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.4.2] - 2026-09-05
+
+### Added
+
+- Added reviewed autonomous web exports that freeze the visible dashboard layout,
+  bounded selection, privacy profile, and theme into a CSP-locked standalone file while
+  preserving query-only API and CLI export compatibility.
+- Added the provider-neutral `DashboardLayout v1` contract, a bounded widget registry,
+  deterministic defaults and retired-widget recovery, plus SQLite/PostgreSQL
+  persistence for the single authenticated dashboard operator.
+- Added an explicit, accessible dashboard edit mode with bounded undo/redo, deterministic
+  placement, and ETag/`If-Match` conflict protection for concurrent save and reset.
+
+## [0.4.1] - 2026-09-01
+
+### Changed
+
+- Refined the persistent and offline dashboards with a compact side-by-side title
+  treatment, borderless page-colored cards, quieter spacing, and fewer decorative
+  effects across desktop and mobile layouts.
+
 ## [0.4.0] - 2026-09-01
 
 ### Added
@@ -164,7 +185,9 @@ use [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 - Refreshed the provider guide for the first minor release ([#26]).
 
-[Unreleased]: https://github.com/Guillaume-Lombardo/cli-consumption/compare/v0.4.0...HEAD
+[Unreleased]: https://github.com/Guillaume-Lombardo/cli-consumption/compare/v0.4.2...HEAD
+[0.4.2]: https://github.com/Guillaume-Lombardo/cli-consumption/compare/v0.4.1...v0.4.2
+[0.4.1]: https://github.com/Guillaume-Lombardo/cli-consumption/compare/v0.4.0...v0.4.1
 [0.4.0]: https://github.com/Guillaume-Lombardo/cli-consumption/compare/v0.3.3...v0.4.0
 [0.3.3]: https://github.com/Guillaume-Lombardo/cli-consumption/compare/v0.3.2...v0.3.3
 [0.3.2]: https://github.com/Guillaume-Lombardo/cli-consumption/compare/v0.3.1...v0.3.2

{cli_consumption-0.4.0 → cli_consumption-0.4.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: cli-consumption
-Version: 0.4.0
+Version: 0.4.2
 Summary: Analyze and consolidate AI coding CLI consumption across machines.
 Project-URL: Homepage, https://github.com/Guillaume-Lombardo/cli-consumption
 Project-URL: Documentation, https://github.com/Guillaume-Lombardo/cli-consumption#readme

{cli_consumption-0.4.0 → cli_consumption-0.4.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "cli-consumption"
-version = "0.4.0"
+version = "0.4.2"
 description = "Analyze and consolidate AI coding CLI consumption across machines."
 readme = "README.md"
 requires-python = ">=3.11"

cli_consumption-0.4.2/src/cli_consumption/INTER_FONT_LICENSE.txt

@@ -0,0 +1,93 @@
+Copyright 2016 The Inter Project Authors (https://github.com/rsms/inter) Inter-Italic[opsz,wght].ttf: Copyright 2016 The Inter Project Authors (https://github.com/rsms/inter)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.

{cli_consumption-0.4.0 → cli_consumption-0.4.2}/src/cli_consumption/api.py

@@ -19,6 +19,10 @@ from sqlalchemy.engine import Engine
 from starlette.types import ASGIApp, Message, Receive, Scope, Send
 
 from cli_consumption import __version__
+from cli_consumption.dashboard_layouts import (
+    DASHBOARD_LAYOUT_VERSION,
+    MAX_DASHBOARD_LAYOUT_BYTES,
+)
 from cli_consumption.models import (
     CURRENT_SNAPSHOT_SCHEMA,
     MAX_SNAPSHOT_RECORDS,
@@ -29,6 +33,7 @@ from cli_consumption.models import (
 )
 from cli_consumption.reporting_api import (
     CACHE_HEADERS,
+    EXPORT_REQUEST_BYTES,
     EXPORT_TIMEOUT_SECONDS,
     MAX_CONCURRENT_EXPORTS,
     MAX_CONCURRENT_REPORTS,
@@ -69,6 +74,7 @@ READINESS_TABLES = (
     "subagent_scopes",
     "ingestion_runs",
     "sync_receipts",
+    "dashboard_layouts",
 )
 READINESS_RESPONSE_TIMEOUT_SECONDS = 2.0
 READINESS_CONNECT_TIMEOUT_SECONDS = 2
@@ -94,6 +100,7 @@ SAFE_ROUTES = frozenset(
         "/api/v1/reporting/conversations",
         "/api/v1/reporting/conversation",
         "/api/v1/reporting/export",
+        "/api/v1/reporting/layout",
     }
 )
 SAFE_EXCEPTION_TYPES = frozenset(
@@ -354,9 +361,12 @@ class RequestSizeLimitMiddleware:
         if scope["type"] != "http":
             await self.app(scope, receive, send)
             return
+        path = str(scope.get("path", ""))
         maximum = (
-            REPORTING_REQUEST_BYTES
-            if str(scope.get("path", "")).startswith("/api/v1/reporting/")
+            EXPORT_REQUEST_BYTES
+            if path == "/api/v1/reporting/export"
+            else REPORTING_REQUEST_BYTES
+            if path.startswith("/api/v1/reporting/")
             else self.maximum
         )
         headers = dict(scope.get("headers", []))
@@ -405,6 +415,7 @@ def _configured_credentials(
     api_token: str | None,
     read_token: str | None,
     export_token: str | None,
+    layout_token: str | None,
 ) -> list[tuple[str, frozenset[str]]]:
     credentials: list[tuple[str, frozenset[str]]] = []
     configured_values: set[str] = set()
@@ -412,6 +423,7 @@ def _configured_credentials(
         (api_token, frozenset({"ingest"})),
         (read_token, frozenset({"read"})),
         (export_token, frozenset({"read", "export"})),
+        (layout_token, frozenset({"layout"})),
     ):
         if credential is None:
             continue
@@ -436,8 +448,11 @@ def create_app(
     *,
     read_token: str | None = None,
     export_token: str | None = None,
+    layout_token: str | None = None,
 ) -> SafeExceptionBoundary:
-    credentials = _configured_credentials(api_token, read_token, export_token)
+    credentials = _configured_credentials(
+        api_token, read_token, export_token, layout_token
+    )
     initialize_database(engine)
     if engine.dialect.name == "postgresql":
         probe_engine = create_postgresql_readiness_engine(
@@ -553,8 +568,12 @@ def create_app(
             "idempotent_snapshot_uploads": True,
             "dashboard_query_versions": [1],
             "dashboard_dataset_versions": [1],
+            "dashboard_layout_versions": [DASHBOARD_LAYOUT_VERSION],
+            "dashboard_layout_mutation_scope": "layout",
+            "max_dashboard_layout_bytes": MAX_DASHBOARD_LAYOUT_BYTES,
             "cursor_versions": [1],
             "max_reporting_request_bytes": REPORTING_REQUEST_BYTES,
+            "max_export_request_bytes": EXPORT_REQUEST_BYTES,
             "max_reporting_filter_values": MAX_FILTER_VALUES,
             "max_reporting_records": MAX_REPORTING_RECORDS,
             "max_reporting_scalar_bytes": MAX_REPORTING_SCALAR_BYTES,
@@ -599,6 +618,7 @@ def create_app(
         engine,
         authorize_read=require_scopes("read"),
         authorize_export=require_scopes("read", "export"),
+        authorize_layout=require_scopes("layout"),
     )
 
     return SafeExceptionBoundary(app)

{cli_consumption-0.4.0 → cli_consumption-0.4.2}/src/cli_consumption/cli.py

@@ -957,6 +957,12 @@ def serve(
             help="Environment variable containing the reporting export bearer token."
         ),
     ] = "CLI_CONSUMPTION_EXPORT_TOKEN",
+    layout_token_env: Annotated[
+        str,
+        typer.Option(
+            help="Environment variable containing the dashboard layout mutation token."
+        ),
+    ] = "CLI_CONSUMPTION_LAYOUT_TOKEN",
 ) -> None:
     """Run the optional central HTTP collector."""
     try:
@@ -971,6 +977,7 @@ def serve(
     token = os.environ.get(token_env)
     read_token = os.environ.get(read_token_env)
     export_token = os.environ.get(export_token_env)
+    layout_token = os.environ.get(layout_token_env) or None
     if any(value == "" for value in (token, read_token, export_token)):
         raise typer.BadParameter(
             "Configured token environment variables must be non-empty."
@@ -979,13 +986,19 @@ def serve(
         token is None
         and read_token is None
         and export_token is None
+        and layout_token is None
         and host not in {"127.0.0.1", "localhost", "::1"}
     ):
         raise typer.BadParameter(
             "Set at least one configured token environment variable before exposing "
             "the service beyond localhost."
         )
-    if token is None and read_token is None and export_token is None:
+    if (
+        token is None
+        and read_token is None
+        and export_token is None
+        and layout_token is None
+    ):
         typer.echo(
             "Warning: service authentication is disabled on localhost.", err=True
         )
@@ -993,12 +1006,13 @@ def serve(
     try:
         application = (
             create_app(engine, token)
-            if read_token is None and export_token is None
+            if read_token is None and export_token is None and layout_token is None
             else create_app(
                 engine,
                 token,
                 read_token=read_token,
                 export_token=export_token,
+                layout_token=layout_token,
             )
         )
         uvicorn.run(application, host=host, port=port, access_log=False)

{cli_consumption-0.4.0 → cli_consumption-0.4.2}/src/cli_consumption/dashboard.py

@@ -11,14 +11,20 @@ from contextlib import contextmanager
 from dataclasses import dataclass
 from datetime import UTC, datetime
 from functools import cache
+from html import escape
 from importlib.resources import files
 from pathlib import Path
-from typing import Any, TextIO
+from typing import Any, Literal, TextIO
 
 from sqlalchemy import select
 from sqlalchemy.engine import Connection, Engine
 
 from cli_consumption.adapters.registry import ADAPTER_SPECS
+from cli_consumption.dashboard_layouts import (
+    DEFAULT_DASHBOARD_LAYOUT_V1,
+    DashboardLayoutV1,
+    revalidate_dashboard_layout,
+)
 from cli_consumption.reporting import (
     ExportWindow,
     ReportEstimate,
@@ -87,6 +93,19 @@ def _react_dashboard_styles() -> str:
     )
 
 
+@cache
+def _inter_font_license_notice() -> str:
+    """Load and HTML-escape the bundled Inter OFL notice without network URLs."""
+    license_text = (
+        files("cli_consumption")
+        .joinpath("INTER_FONT_LICENSE.txt")
+        .read_text(encoding="utf-8")
+    )
+    return escape(
+        license_text.replace("https://", "").replace("http://", ""), quote=False
+    )
+
+
 class DashboardLimitError(RuntimeError):
     """A privacy-safe dashboard generation limit failure."""
 
@@ -99,7 +118,14 @@ def generate_dashboard(
     window: ExportWindow | None = None,
     filters: ReportFilters | None = None,
     timeout_seconds: float | None = None,
+    layout: DashboardLayoutV1 | None = None,
+    theme: Literal["dark", "light"] | None = None,
 ) -> None:
+    if theme not in (None, "dark", "light"):
+        raise ValueError("invalid_dashboard_theme")
+    validated_layout = revalidate_dashboard_layout(
+        DEFAULT_DASHBOARD_LAYOUT_V1 if layout is None else layout
+    )
     initialize_database(engine)
     with _dashboard_snapshot(engine, timeout_seconds=timeout_seconds) as connection:
         _enforce_estimate(_estimate_selection(connection, window, filters))
@@ -115,6 +141,8 @@ def generate_dashboard(
                 handle,
                 connection,
                 context,
+                validated_layout,
+                theme,
             ),
         )
 
@@ -552,6 +580,8 @@ def _stream_dashboard(
     handle: TextIO,
     connection: Connection,
     context: _DashboardContext,
+    layout: DashboardLayoutV1,
+    theme: Literal["dark", "light"] | None,
 ) -> None:
     prefix, suffix = _react_document_parts()
     writer = _BudgetedWriter(handle)
@@ -574,6 +604,10 @@ def _stream_dashboard(
             first = False
         writer.write("]")
     writer.write("}")
+    writer.write(";globalThis.__CLI_CONSUMPTION_LAYOUT__=")
+    writer.write(_encode_json(layout.model_dump(mode="json")))
+    writer.write(";globalThis.__CLI_CONSUMPTION_THEME__=")
+    writer.write(_encode_json(theme))
     writer.write(suffix)
 
 
@@ -584,7 +618,9 @@ def _react_document_parts() -> tuple[str, str]:
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width,initial-scale=1">
+  <meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; font-src data:; img-src data:; connect-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none'">
   <title>CLI Consumption</title>
+  <script id="inter-font-license" type="text/plain">{_inter_font_license_notice()}</script>
   <style>{_react_dashboard_styles()}</style>
 </head>
 <body>