chore: release quota-axi 0.1.7

[ruby-dlee]

Intent

Release the reviewed exact-account Quota AXI changes from fork main as immutable version 0.1.7. Validate the release-please-generated commit derived from merge SHA d61cbcf: only the manifest, package version, and changelog may change; package/build/generated outputs must be reproducible; the exact-account Keychain behavior and OAuth account-absence semantics must remain intact; no live credentials, provider homes, Desktop sessions, or Keychain may be read or mutated. Push and open the release PR only in ruby-dlee/quota-axi, never upstream. The repo-wide Actions PR-creation permission remains intentionally disabled; use this manual no-mistakes release PR instead.

What Changed

• Bump the package and release-please manifest from 0.1.6 to 0.1.7.
• Add the generated 0.1.7 changelog covering managed provider isolation, Claude config-home support, exact-account Keychain handling, and TOON account reporting, with release links targeting ruby-dlee/quota-axi.

Risk Assessment

✅ Low: The single-parent release commit changes only the three permitted release files, consistently bumps 0.1.6 to 0.1.7, and leaves behavioral code, generated artifacts, tests, and lockfile unchanged.

Testing

After resolving two test-harness setup issues—Node 20 incompatibility and an over-forced Claude config path—the frozen install and all 110 tests passed in isolated fake homes; two builds and packs were byte-reproducible, generated skill output matched, the installed 0.1.7 CLI preserved exact-account and OAuth account-absence behavior, reviewer-visible transcripts and package evidence were captured, and the worktree was cleaned.

Evidence: Release integrity

Release commit integrity: PASS; exact base/parent, three-file allowlist, aligned 0.1.7 metadata, fork-only release links and origin.

Release commit integrity: PASS
Target: 41690395e46f5f156b710fb86da11fe3b1e943be
Sole parent/base: d61cbcfcec08a79f5f48654b9bafd5e346c770da
Commit subject: chore(main): release quota-axi 0.1.7
Changed files (exact allowlist):
  .release-please-manifest.json
  CHANGELOG.md
  package.json
Package version: 0.1.7
Manifest version: 0.1.7
0.1.7 changelog compare/commit links: ruby-dlee/quota-axi only
0.1.7 changelog source commits: all expected feature/fix commits present
Origin fetch/push: https://github.com/ruby-dlee/quota-axi.git
Release workflow blob: unchanged from base

Evidence: Reproducibility summary

Two builds produced identical dist manifests and byte-identical tarballs with SHA-256 bc2e2dc7abb98b5511c5c3e9550c2a1dd87952782915ffcaccfaa21de2199344.

Release artifact reproducibility: PASS
Version: 0.1.7
Pass 1 tarball SHA-256: bc2e2dc7abb98b5511c5c3e9550c2a1dd87952782915ffcaccfaa21de2199344
Pass 2 tarball SHA-256: bc2e2dc7abb98b5511c5c3e9550c2a1dd87952782915ffcaccfaa21de2199344
Generated skill check: PASS in both builds
Compiled dist manifests: identical
Packed tarballs: byte-identical

- Evidence: Reproducible quota-axi 0.1.7 package (local file: /var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/no-mistakes-evidence/01KXTVVZXKVDQ1HATS34A2WCX1/reproducibility/pass2/quota-axi-0.1.7.tgz)

Evidence: Installed CLI transcript

Installed package reports 0.1.7; isolated expired OAuth returns auth_required without an account field.

$ installed quota-axi --version
0.1.7

$ installed quota-axi --help
usage: quota-axi [auth] [flags]
commands[2]:
  (none)=quota, auth
flags[6]:
  --provider <claude,codex,cursor,copilot,grok>, --json, --full, --allow-keychain-prompt, --help, -v/--version
examples:
  quota-axi
  quota-axi --provider claude
  quota-axi --provider cursor,copilot,grok
  quota-axi --json
  quota-axi --full
  quota-axi auth
"built-in":
  update: Upgrade `quota-axi` to the latest published version
  "update --check": Report current vs latest without installing

$ installed quota-axi --provider claude --json --full (Linux simulation; fake expired OAuth file; isolated provider home)
{
  "generatedAt": "2026-07-18T15:11:30.833Z",
  "schemaVersion": 2,
  "providers": [
    {
      "provider": "claude",
      "label": "Claude",
      "source": "unavailable",
      "windows": [],
      "state": {
        "status": "auth_required",
        "stale": false,
        "error": "Claude sign-in required",
        "sourcesTried": [
          "oauth-file"
        ]
      },
      "attempts": [
        {
          "source": "oauth-file",
          "status": "skipped",
          "error": "credentials_expired"
        }
      ]
    }
  ]
}

Evidence: Exact-account CLI rendering

Actual packaged CLI rendering exposes evidence-exact-account in auth and full quota output.

$ installed quota-axi auth --provider claude (isolated simulated exact-account source)
bin: quota-axi
description: Inspect local quota auth sources without printing secret values
auth[1]{provider,source,path,status,error,account}:
  claude,keychain,none,available,none,evidence-exact-account
help[1]:
  Run `quota-axi --allow-keychain-prompt auth` to permit macOS Keychain access

$ installed quota-axi --provider claude --full (isolated simulated exact-account source)
bin: quota-axi
description: Report local agent-provider quota windows for routing-aware agents
generatedAt: "2026-07-18T15:14:38.660Z"
providers[1]{provider,plan,source,status,refreshedAt}:
  claude,unknown,oauth,fresh,none
windows[1]{provider,id,label,percentRemaining,resetsAt,state}:
  claude,five_hour,session,82,unknown,fresh
accounts[1]{provider,email,organization,accountId,identityStatus}:
  claude,hidden,none,none,unknown
attempts[2]:
  - provider: claude
    source: keychain
    status: success
    error: none
    account: evidence-exact-account
  - provider: claude
    source: oauth
    status: success
    error: none
help[3]:
  Run `quota-axi --provider claude --json` for JSON output
  Run `quota-axi --full` to include account and source-attempt details
  Run `quota-axi auth` to inspect local auth source availability without printing secrets

Pipeline

Updates from git push no-mistakes

✅ **intent** - passed

✅ No issues found.

✅ **Rebase** - passed

✅ No issues found.

✅ **Review** - passed

✅ No issues found.

✅ **Test** - passed

✅ No issues found.

• git diff --name-status d61cbcfcec08a79f5f48654b9bafd5e346c770da 41690395e46f5f156b710fb86da11fe3b1e943be plus parent, metadata, changelog-link, origin, and unchanged-workflow assertions
• pnpm install --frozen-lockfile using preinstalled Node 22.22.0; the initial Node 20 probe was incompatible with pinned pnpm 11
• Credential-isolated node node_modules/vitest/vitest.mjs run test/providers/claude-auth.test.ts test/providers/claude.test.ts test/cli.test.ts --reporter=verbose
• Credential-isolated full node node_modules/vitest/vitest.mjs run
• Two clean node node_modules/typescript/bin/tsc builds
• Two node node_modules/tsx/dist/cli.mjs scripts/build-skill.ts --check checks
• Two npm pack --json runs followed by compiled-manifest diff -u and tarball cmp -s
• Installed packed tarball: quota-axi --version and quota-axi --help
• Installed quota-axi --provider claude --json --full with simulated Linux, isolated home, and fake expired OAuth credential
• Installed-package CLI rendering with an isolated simulated exact-account Keychain source
• Removed transient worktree node_modules/ and verified clean status at target SHA

✅ **Document** - passed

✅ No issues found.

✅ **Lint** - passed

✅ No issues found.

✅ **Push** - passed

✅ No issues found.