Show how much of the subscription is gone, without risking the session

The last of Section F, and the only thing in Panama that reads an authentication token, so most of the design is about that rather than about the number. It never refreshes the token and never writes to the credentials file. That token expires roughly hourly and Claude Code refreshes it on demand; if this refreshed it too, two processes would be rotating one credential, and a rotation invalidates the other holder's copy. The failure mode is being silently signed out of Claude Code by a status widget, which no bar indicator is worth. So it reads the token, uses it while valid, and reports "waiting for Claude Code to refresh" when not -- which covers the case that matters, because while you are using Claude Code the token is fresh, and while you are not there is nothing to watch. The token never reaches argv either: curl takes the Authorization header on stdin through --config, because a header passed as an argument sits in /proc/<pid>/cmdline for the length of the request. Same rule the password and MOK paths already follow. And it never reaches the output: the record carries percentages and timestamps and nothing else. Both are pinned, and both were checked by sabotaging the collector to pass -H and watching the contract name it. Off by default. It is a coding-tool readout, not something a general-purpose desktop shows without being asked, and it hides unless the collector has real numbers rather than displaying "unknown".
2026-08-22 08:33:39 -04:00
parent 7a5e990439
commit 8b96d907a1
10 changed files with 419 additions and 3 deletions
@@ -0,0 +1,48 @@
+// How much of the Claude subscription is gone, beside the other vitals.
+//
+// One number: whichever window is closer to its limit, because that is the one
+// about to interrupt you.
+//
+// Hidden unless asked for AND the collector has real numbers. A bar indicator
+// reading "unknown" is worse than an empty space, and this is off by default:
+// it is a coding-tool readout, not something a general-purpose desktop shows
+// without being asked.
+//
+// Children go straight into Pill's own Row -- it adopts them through its
+// default alias, so wrapping them in another Row and centring that is both
+// redundant and a warning at load.
+
+import QtQuick
+import qs.config
+import qs.services
+import qs.widgets
+
+Pill {
+    id: root
+
+    visible: Settings.showAgentUsage && AgentUsage.available
+    interactive: false
+
+    onSecondaryActivated: ShellState.openSettings("appearance")
+
+    Text {
+        anchors.verticalCenter: parent.verticalCenter
+        text: "\u{F1719}"                        // md-robot-outline
+        color: {
+            if (AgentUsage.headline >= 90) return Theme.danger;
+            if (AgentUsage.headline >= 75) return Theme.warn;
+            return Theme.fgDim;
+        }
+        font.family: Theme.fontMono
+        font.pixelSize: Theme.fontSizeSmall
+    }
+
+    Text {
+        anchors.verticalCenter: parent.verticalCenter
+        text: AgentUsage.headline + "%"
+        color: Theme.fg
+        font.family: Theme.fontFamily
+        font.pixelSize: Theme.fontSizeSmall
+        font.features: Theme.tabularFigures
+    }
+}