codeburn/mac/Sources/CodeBurnMenubar/Data/SubscriptionSnapshotStore.swift
Resham Joshi 495a254338 feat(mac): native Swift menubar app + one-command install
Introduces mac/ with a native SwiftUI menubar app that replaces the
previous SwiftBar plugin entirely. Install via `npx codeburn menubar`,
which downloads the .app from GitHub Releases, strips Gatekeeper
quarantine, and drops it into ~/Applications.

Highlights

- mac/ SwiftUI app: agent tabs, Today/7/30/Month/All period switcher,
  Trend/Forecast/Pulse/Stats/Plan insights, activity + model
  breakdowns, optimize findings, CSV/JSON export, Star-on-GitHub
  banner, live 60s refresh, instant currency switching with offline FX
  cache.
- Security: CodeburnCLI argv-based spawn (no shell interpretation),
  SafeFile symlink guards + O_NOFOLLOW writes, FX rate clamping to
  [0.0001, 1_000_000], keychain filtered to account == "default",
  removed byte-window credential log, in-flight refresh guard, POSIX
  flock on config.json writes, TerminalLauncher validates argv before
  AppleScript interpolation.
- Performance: shared static NumberFormatter (thousands of allocations
  per popover redraw eliminated), concurrent pipe drain with 20 MB cap
  + 60s timeout in DataClient, Observation-tracked reactive UI, 5-min
  payload cache keyed on (period, provider).
- CLI: new `codeburn menubar` subcommand that downloads + installs +
  launches the .app (no clone, no build). New `status --format
  menubar-json` payload builder. `export` rewritten to produce a
  folder of one-table-per-file CSVs with a `.codeburn-export` marker
  so arbitrary -o paths cannot be silently deleted.
- Removed: src/menubar.ts (SwiftBar plugin generator),
  install-menubar / uninstall-menubar subcommands, `status --format
  menubar` directive output, tests/menubar.test.ts,
  tests/security/menubar-injection.test.ts.
- Release: .github/workflows/release-menubar.yml builds universal
  binary, assembles .app, ad-hoc signs, zips, uploads on mac-v* tag
  push. Runs on the free macos-latest runner.

Tests

- 230 TypeScript tests pass
- 10 Swift CapacityEstimator tests pass
- TypeScript typecheck clean
- Swift release build clean
2026-04-17 16:55:56 -07:00

102 lines
4.6 KiB
Swift

import Foundation
/// Persisted snapshot of a single utilization reading. We capture one per window every time
/// SubscriptionClient.fetch() succeeds so we can answer "what did the prior 7-day cycle finish at?"
/// when the current window has no usable data yet (just reset).
struct SubscriptionSnapshot: Codable, Sendable {
let windowKey: String // "five_hour", "seven_day", "seven_day_opus", "seven_day_sonnet"
let percent: Double // 0..100
let resetsAt: Date // resets_at active at capture (identifies which window cycle this belongs to)
let capturedAt: Date // when the snapshot was recorded
let effectiveTokens: Double? // tokens consumed in window at capture (nil if not computed)
}
private let snapshotFilename = "subscription-snapshots.json"
private let pruneOlderThanSeconds: TimeInterval = 30 * 24 * 3600
private func snapshotsCacheDir() -> String {
return ProcessInfo.processInfo.environment["CODEBURN_CACHE_DIR"]
?? (NSHomeDirectory() as NSString).appendingPathComponent(".cache/codeburn")
}
private func snapshotsPath() -> String {
return (snapshotsCacheDir() as NSString).appendingPathComponent(snapshotFilename)
}
private actor SnapshotLock {
static let shared = SnapshotLock()
func run<T>(_ fn: () throws -> T) rethrows -> T { try fn() }
}
enum SubscriptionSnapshotStore {
/// Append a snapshot. Auto-prunes entries older than 30 days. Idempotent: if a snapshot
/// with the same windowKey + resetsAt already exists, only update percent if new is higher
/// (so "final" reading near reset is preserved).
static func record(_ snapshot: SubscriptionSnapshot) async {
await SnapshotLock.shared.run {
do {
var all = loadAll()
let key = "\(snapshot.windowKey)|\(snapshot.resetsAt.timeIntervalSince1970)"
if let idx = all.firstIndex(where: { "\($0.windowKey)|\($0.resetsAt.timeIntervalSince1970)" == key }) {
if snapshot.percent > all[idx].percent {
all[idx] = snapshot
}
} else {
all.append(snapshot)
}
let cutoff = Date().addingTimeInterval(-pruneOlderThanSeconds)
all = all.filter { $0.capturedAt >= cutoff }
try save(all)
} catch {
NSLog("CodeBurn: snapshot record failed: \(error)")
}
}
}
/// Returns the final percent of the immediately-prior cycle for this window, or nil if no
/// prior data is available. Logic: among snapshots whose resetsAt < currentResetsAt, pick
/// the group with the largest resetsAt (most recent prior cycle), then return the max
/// percent in that group (the closest-to-final reading we have).
static func previousWindowFinal(windowKey: String, currentResetsAt: Date) async -> Double? {
await SnapshotLock.shared.run {
let all = loadAll()
let priors = all.filter { $0.windowKey == windowKey && $0.resetsAt < currentResetsAt }
guard let mostRecentPriorReset = priors.map({ $0.resetsAt }).max() else { return nil }
let priorWindow = priors.filter { $0.resetsAt == mostRecentPriorReset }
return priorWindow.map(\.percent).max()
}
}
/// Return all snapshots for a given window key, useful for capacity estimation.
static func snapshots(for windowKey: String) async -> [SubscriptionSnapshot] {
await SnapshotLock.shared.run {
loadAll().filter { $0.windowKey == windowKey }
}
}
/// Test seam: clear all snapshots.
static func resetForTesting() async {
await SnapshotLock.shared.run {
try? FileManager.default.removeItem(atPath: snapshotsPath())
}
}
// MARK: - Internals
private static func loadAll() -> [SubscriptionSnapshot] {
let path = snapshotsPath()
guard FileManager.default.fileExists(atPath: path) else { return [] }
guard let data = try? SafeFile.read(from: path) else { return [] }
let decoder = JSONDecoder()
decoder.dateDecodingStrategy = .iso8601
return (try? decoder.decode([SubscriptionSnapshot].self, from: data)) ?? []
}
private static func save(_ snapshots: [SubscriptionSnapshot]) throws {
let encoder = JSONEncoder()
encoder.dateEncodingStrategy = .iso8601
let data = try encoder.encode(snapshots)
// SafeFile.write refuses symlinked targets and does the tmp+rename atomic dance.
try SafeFile.write(data, to: snapshotsPath(), mode: 0o600)
}
}