Skip to content

chore: release quota-axi 0.1.7 - #3

Merged
ruby-dlee merged 2 commits into
mainfrom
codex/quota-0.1.7-release
Jul 18, 2026
Merged

chore: release quota-axi 0.1.7#3
ruby-dlee merged 2 commits into
mainfrom
codex/quota-0.1.7-release

Conversation

@ruby-dlee

Copy link
Copy Markdown
Owner

Intent

Release the reviewed exact-account Quota AXI changes from fork main as immutable version 0.1.7. Validate the release-please-generated commit derived from merge SHA d61cbcf: only the manifest, package version, and changelog may change; package/build/generated outputs must be reproducible; the exact-account Keychain behavior and OAuth account-absence semantics must remain intact; no live credentials, provider homes, Desktop sessions, or Keychain may be read or mutated. Push and open the release PR only in ruby-dlee/quota-axi, never upstream. The repo-wide Actions PR-creation permission remains intentionally disabled; use this manual no-mistakes release PR instead.

What Changed

  • Bump the package and release-please manifest from 0.1.6 to 0.1.7.
  • Add the generated 0.1.7 changelog covering managed provider isolation, Claude config-home support, exact-account Keychain handling, and TOON account reporting, with release links targeting ruby-dlee/quota-axi.

Risk Assessment

✅ Low: The single-parent release commit changes only the three permitted release files, consistently bumps 0.1.6 to 0.1.7, and leaves behavioral code, generated artifacts, tests, and lockfile unchanged.

Testing

After resolving two test-harness setup issues—Node 20 incompatibility and an over-forced Claude config path—the frozen install and all 110 tests passed in isolated fake homes; two builds and packs were byte-reproducible, generated skill output matched, the installed 0.1.7 CLI preserved exact-account and OAuth account-absence behavior, reviewer-visible transcripts and package evidence were captured, and the worktree was cleaned.

Evidence: Release integrity

Release commit integrity: PASS; exact base/parent, three-file allowlist, aligned 0.1.7 metadata, fork-only release links and origin.

Release commit integrity: PASS
Target: 41690395e46f5f156b710fb86da11fe3b1e943be
Sole parent/base: d61cbcfcec08a79f5f48654b9bafd5e346c770da
Commit subject: chore(main): release quota-axi 0.1.7
Changed files (exact allowlist):
  .release-please-manifest.json
  CHANGELOG.md
  package.json
Package version: 0.1.7
Manifest version: 0.1.7
0.1.7 changelog compare/commit links: ruby-dlee/quota-axi only
0.1.7 changelog source commits: all expected feature/fix commits present
Origin fetch/push: https://github.com/ruby-dlee/quota-axi.git
Release workflow blob: unchanged from base
Evidence: Reproducibility summary

Two builds produced identical dist manifests and byte-identical tarballs with SHA-256 bc2e2dc7abb98b5511c5c3e9550c2a1dd87952782915ffcaccfaa21de2199344.

Release artifact reproducibility: PASS
Version: 0.1.7
Pass 1 tarball SHA-256: bc2e2dc7abb98b5511c5c3e9550c2a1dd87952782915ffcaccfaa21de2199344
Pass 2 tarball SHA-256: bc2e2dc7abb98b5511c5c3e9550c2a1dd87952782915ffcaccfaa21de2199344
Generated skill check: PASS in both builds
Compiled dist manifests: identical
Packed tarballs: byte-identical
- Evidence: Reproducible quota-axi 0.1.7 package (local file: /var/folders/y_/bfdbj_vx20l9b9tw7crgkzwm0000gn/T/no-mistakes-evidence/01KXTVVZXKVDQ1HATS34A2WCX1/reproducibility/pass2/quota-axi-0.1.7.tgz)
Evidence: Installed CLI transcript

Installed package reports 0.1.7; isolated expired OAuth returns auth_required without an account field.

$ installed quota-axi --version
0.1.7

$ installed quota-axi --help
usage: quota-axi [auth] [flags]
commands[2]:
  (none)=quota, auth
flags[6]:
  --provider <claude,codex,cursor,copilot,grok>, --json, --full, --allow-keychain-prompt, --help, -v/--version
examples:
  quota-axi
  quota-axi --provider claude
  quota-axi --provider cursor,copilot,grok
  quota-axi --json
  quota-axi --full
  quota-axi auth
"built-in":
  update: Upgrade `quota-axi` to the latest published version
  "update --check": Report current vs latest without installing

$ installed quota-axi --provider claude --json --full (Linux simulation; fake expired OAuth file; isolated provider home)
{
  "generatedAt": "2026-07-18T15:11:30.833Z",
  "schemaVersion": 2,
  "providers": [
    {
      "provider": "claude",
      "label": "Claude",
      "source": "unavailable",
      "windows": [],
      "state": {
        "status": "auth_required",
        "stale": false,
        "error": "Claude sign-in required",
        "sourcesTried": [
          "oauth-file"
        ]
      },
      "attempts": [
        {
          "source": "oauth-file",
          "status": "skipped",
          "error": "credentials_expired"
        }
      ]
    }
  ]
}
Evidence: Exact-account CLI rendering

Actual packaged CLI rendering exposes evidence-exact-account in auth and full quota output.

$ installed quota-axi auth --provider claude (isolated simulated exact-account source)
bin: quota-axi
description: Inspect local quota auth sources without printing secret values
auth[1]{provider,source,path,status,error,account}:
  claude,keychain,none,available,none,evidence-exact-account
help[1]:
  Run `quota-axi --allow-keychain-prompt auth` to permit macOS Keychain access

$ installed quota-axi --provider claude --full (isolated simulated exact-account source)
bin: quota-axi
description: Report local agent-provider quota windows for routing-aware agents
generatedAt: "2026-07-18T15:14:38.660Z"
providers[1]{provider,plan,source,status,refreshedAt}:
  claude,unknown,oauth,fresh,none
windows[1]{provider,id,label,percentRemaining,resetsAt,state}:
  claude,five_hour,session,82,unknown,fresh
accounts[1]{provider,email,organization,accountId,identityStatus}:
  claude,hidden,none,none,unknown
attempts[2]:
  - provider: claude
    source: keychain
    status: success
    error: none
    account: evidence-exact-account
  - provider: claude
    source: oauth
    status: success
    error: none
help[3]:
  Run `quota-axi --provider claude --json` for JSON output
  Run `quota-axi --full` to include account and source-attempt details
  Run `quota-axi auth` to inspect local auth source availability without printing secrets

Pipeline

Updates from git push no-mistakes

✅ **intent** - passed

✅ No issues found.

✅ **Rebase** - passed

✅ No issues found.

✅ **Review** - passed

✅ No issues found.

✅ **Test** - passed

✅ No issues found.

  • git diff --name-status d61cbcfcec08a79f5f48654b9bafd5e346c770da 41690395e46f5f156b710fb86da11fe3b1e943be plus parent, metadata, changelog-link, origin, and unchanged-workflow assertions
  • pnpm install --frozen-lockfile using preinstalled Node 22.22.0; the initial Node 20 probe was incompatible with pinned pnpm 11
  • Credential-isolated node node_modules/vitest/vitest.mjs run test/providers/claude-auth.test.ts test/providers/claude.test.ts test/cli.test.ts --reporter=verbose
  • Credential-isolated full node node_modules/vitest/vitest.mjs run
  • Two clean node node_modules/typescript/bin/tsc builds
  • Two node node_modules/tsx/dist/cli.mjs scripts/build-skill.ts --check checks
  • Two npm pack --json runs followed by compiled-manifest diff -u and tarball cmp -s
  • Installed packed tarball: quota-axi --version and quota-axi --help
  • Installed quota-axi --provider claude --json --full with simulated Linux, isolated home, and fake expired OAuth credential
  • Installed-package CLI rendering with an isolated simulated exact-account Keychain source
  • Removed transient worktree node_modules/ and verified clean status at target SHA
✅ **Document** - passed

✅ No issues found.

✅ **Lint** - passed

✅ No issues found.

✅ **Push** - passed

✅ No issues found.

@ruby-dlee
ruby-dlee merged commit 9f2dde8 into main Jul 18, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant