feat(worker): add OAuth usage client + poller
Adds Usage/ with ClaudeOAuthUsageClient (reads the access token Claude Code keeps fresh at ~/.claude/.credentials.json, calls the Anthropic OAuth usage endpoint, defensively parses buckets/limits), UsageState (threadsafe last-good-snapshot holder that never regresses on failure), and UsageMonitorService (BackgroundService polling on the new usage_poll_interval_seconds config, min 15s, one poll at startup, warns at most once per distinct error).
This commit is contained in:
mika kuns
@@ -0,0 +1,182 @@
|
||||
using System.Net;
|
||||
using System.Net.Http.Headers;
|
||||
using System.Text;
|
||||
using ClaudeDo.Worker.Usage;
|
||||
|
||||
namespace ClaudeDo.Worker.Tests.Usage;
|
||||
|
||||
/// <summary>
|
||||
/// Tests for <see cref="ClaudeOAuthUsageClient"/> using a stubbed <see cref="HttpMessageHandler"/>
|
||||
/// and a temp credentials file. No real network call and no real credentials file are touched.
|
||||
/// </summary>
|
||||
public sealed class ClaudeOAuthUsageClientTests : IDisposable
|
||||
{
|
||||
// Real fixture from the Anthropic OAuth usage endpoint, trimmed to the relevant fields.
|
||||
private const string RealFixture = """
|
||||
{
|
||||
"five_hour": { "utilization": 30.0, "resets_at": "2026-08-05T12:59:59.62334+02:00", "limit_dollars": null },
|
||||
"seven_day": { "utilization": 57.0, "resets_at": "2026-08-06T10:59:59.62336+02:00" },
|
||||
"seven_day_opus": null, "seven_day_sonnet": null, "seven_day_oauth_apps": null,
|
||||
"extra_usage": { "is_enabled": false },
|
||||
"limits": [
|
||||
{ "kind": "session", "group": "session", "percent": 30, "severity": "normal", "resets_at": "2026-08-05T12:59:59.62334+02:00", "scope": null, "is_active": false },
|
||||
{ "kind": "weekly_all", "group": "weekly", "percent": 57, "severity": "normal", "resets_at": "2026-08-06T10:59:59.62336+02:00", "scope": null, "is_active": true },
|
||||
{ "kind": "weekly_scoped", "group": "weekly", "percent": 14, "severity": "normal", "resets_at": "2026-08-06T10:59:59.623573+02:00", "scope": { "model": { "id": null, "display_name": "Fable" }, "surface": null }, "is_active": false }
|
||||
],
|
||||
"spend": { "percent": 0, "enabled": false },
|
||||
"member_dashboard_available": false
|
||||
}
|
||||
""";
|
||||
|
||||
private readonly string _credentialsPath = Path.Combine(Path.GetTempPath(), $"claudedo-usage-test-{Guid.NewGuid():N}.json");
|
||||
|
||||
public void Dispose()
|
||||
{
|
||||
if (File.Exists(_credentialsPath))
|
||||
File.Delete(_credentialsPath);
|
||||
}
|
||||
|
||||
private void WriteCredentials(string accessToken = "test-access-token") =>
|
||||
File.WriteAllText(_credentialsPath, $$"""{ "claudeAiOauth": { "accessToken": "{{accessToken}}" } }""");
|
||||
|
||||
private sealed class StubHandler : HttpMessageHandler
|
||||
{
|
||||
public List<HttpRequestMessage> Requests { get; } = new();
|
||||
public HttpStatusCode ResponseStatus { get; set; } = HttpStatusCode.OK;
|
||||
public string ResponseBody { get; set; } = "{}";
|
||||
|
||||
protected override Task<HttpResponseMessage> SendAsync(HttpRequestMessage request, CancellationToken ct)
|
||||
{
|
||||
Requests.Add(request);
|
||||
var resp = new HttpResponseMessage(ResponseStatus)
|
||||
{
|
||||
Content = new StringContent(ResponseBody, Encoding.UTF8, "application/json"),
|
||||
};
|
||||
return Task.FromResult(resp);
|
||||
}
|
||||
}
|
||||
|
||||
private (ClaudeOAuthUsageClient Client, StubHandler Handler) Build()
|
||||
{
|
||||
var handler = new StubHandler();
|
||||
var http = new HttpClient(handler);
|
||||
return (new ClaudeOAuthUsageClient(http, _credentialsPath), handler);
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public async Task GetUsageAsync_ParsesRealFixture()
|
||||
{
|
||||
WriteCredentials();
|
||||
var (client, handler) = Build();
|
||||
handler.ResponseBody = RealFixture;
|
||||
|
||||
var snapshot = await client.GetUsageAsync();
|
||||
|
||||
Assert.NotNull(snapshot.FiveHour);
|
||||
Assert.Equal(30, snapshot.FiveHour!.Utilization);
|
||||
Assert.NotNull(snapshot.SevenDay);
|
||||
Assert.Equal(57, snapshot.SevenDay!.Utilization);
|
||||
Assert.Equal(3, snapshot.Limits.Count);
|
||||
|
||||
var scoped = snapshot.Limits[2];
|
||||
Assert.Equal("weekly_scoped", scoped.Kind);
|
||||
Assert.Equal("Fable", scoped.ScopeModelDisplayName);
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public async Task GetUsageAsync_SendsBearerTokenAndBetaHeader()
|
||||
{
|
||||
WriteCredentials("my-secret-token");
|
||||
var (client, handler) = Build();
|
||||
handler.ResponseBody = RealFixture;
|
||||
|
||||
await client.GetUsageAsync();
|
||||
|
||||
var request = handler.Requests[0];
|
||||
Assert.Equal("Bearer", request.Headers.Authorization!.Scheme);
|
||||
Assert.Equal("my-secret-token", request.Headers.Authorization!.Parameter);
|
||||
Assert.Contains("oauth-2025-04-20", request.Headers.GetValues("anthropic-beta"));
|
||||
Assert.Equal("https://api.anthropic.com/api/oauth/usage", request.RequestUri!.ToString());
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public async Task GetUsageAsync_MissingFiveHour_ReturnsNull()
|
||||
{
|
||||
WriteCredentials();
|
||||
var (client, handler) = Build();
|
||||
handler.ResponseBody = """{ "seven_day": { "utilization": 12.0 } }""";
|
||||
|
||||
var snapshot = await client.GetUsageAsync();
|
||||
|
||||
Assert.Null(snapshot.FiveHour);
|
||||
Assert.NotNull(snapshot.SevenDay);
|
||||
Assert.Empty(snapshot.Limits);
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public async Task GetUsageAsync_NullFiveHour_ReturnsNull()
|
||||
{
|
||||
WriteCredentials();
|
||||
var (client, handler) = Build();
|
||||
handler.ResponseBody = """{ "five_hour": null, "seven_day": null }""";
|
||||
|
||||
var snapshot = await client.GetUsageAsync();
|
||||
|
||||
Assert.Null(snapshot.FiveHour);
|
||||
Assert.Null(snapshot.SevenDay);
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public async Task GetUsageAsync_MissingLimits_ReturnsEmptyList()
|
||||
{
|
||||
WriteCredentials();
|
||||
var (client, handler) = Build();
|
||||
handler.ResponseBody = "{}";
|
||||
|
||||
var snapshot = await client.GetUsageAsync();
|
||||
|
||||
Assert.Empty(snapshot.Limits);
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public async Task GetUsageAsync_GarbageBody_ThrowsWithoutLeakingToken()
|
||||
{
|
||||
WriteCredentials("super-secret-token");
|
||||
var (client, handler) = Build();
|
||||
handler.ResponseBody = "not json at all {{{";
|
||||
|
||||
var ex = await Assert.ThrowsAsync<InvalidOperationException>(() => client.GetUsageAsync());
|
||||
|
||||
Assert.DoesNotContain("super-secret-token", ex.Message);
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public async Task GetUsageAsync_Http401_ThrowsWithoutLeakingToken()
|
||||
{
|
||||
WriteCredentials("super-secret-token");
|
||||
var (client, handler) = Build();
|
||||
handler.ResponseStatus = HttpStatusCode.Unauthorized;
|
||||
handler.ResponseBody = "unauthorized";
|
||||
|
||||
var ex = await Assert.ThrowsAsync<InvalidOperationException>(() => client.GetUsageAsync());
|
||||
|
||||
Assert.DoesNotContain("super-secret-token", ex.Message);
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public async Task GetUsageAsync_MissingCredentialsFile_Throws()
|
||||
{
|
||||
var (client, _) = Build(); // credentials file was never written
|
||||
|
||||
await Assert.ThrowsAsync<InvalidOperationException>(() => client.GetUsageAsync());
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public async Task GetUsageAsync_NoAccessTokenInCredentials_Throws()
|
||||
{
|
||||
File.WriteAllText(_credentialsPath, """{ "claudeAiOauth": {} }""");
|
||||
var (client, _) = Build();
|
||||
|
||||
await Assert.ThrowsAsync<InvalidOperationException>(() => client.GetUsageAsync());
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user