feat: add authenticated live quota adapter with opt-in config

What: new authenticatedQuota.ts reads OAuth credentials from ~/.claude
and ~/.codex, fetches live 5h/7d usage from provider APIs, and parses
window data into LiveQuotaWindow. Wired into RefreshScheduler behind
promptFuel.liveQuotaEnabled (default false). Errors flow through
sanitizeError() to fixed labels only; no raw responses, paths, or
credentials surface to UI.

Why: local history reflects usage on this machine only; live quota
from the provider APIs is the authoritative remaining-capacity signal.

Boundaries: adapter is purely local auth (no extension-side auth flow,
no credential storage). Live fetch is skipped entirely when the setting
is false; stub readers return freshness=unavailable instead.

Validation: npm run compile PASS, smoke:core 97/97, smoke:providers
51/51, validate:manifest PASS, package PASS, git diff --check clean.
Security review: two AgentBridge internal comments removed from
authenticatedQuota.ts before commit.

Author: TheKrush

package.json

@@ -96,6 +96,11 @@
           "minimum": 0,
           "maximum": 1440,
           "description": "Auto-refresh interval in minutes. Set to 0 to disable auto-refresh."
+        },
+        "promptFuel.liveQuotaEnabled": {
+          "type": "boolean",
+          "default": false,
+          "description": "Fetch live 5h/7d quota from provider APIs. Requires existing Claude/Codex OAuth credentials."
         }
       }
     }

scripts/smoke-core.cjs

@@ -96,7 +96,7 @@ test('CONFIG_DEFAULTS.refreshIntervalMinutes is number', () => {
 
 test('CONFIG_DEFAULTS has expected keys', () => {
   const keys = Object.keys(CONFIG_DEFAULTS).sort();
-  assert.deepStrictEqual(keys, ['displayMode', 'enabledProviders', 'refreshIntervalMinutes']);
+  assert.deepStrictEqual(keys, ['displayMode', 'enabledProviders', 'liveQuotaEnabled', 'refreshIntervalMinutes']);
 });
 
 // --- formatQuota ---

src/config.ts

@@ -25,5 +25,13 @@ export function getConfig(): PromptFuelConfig {
     ? Math.max(0, Math.min(1440, rawInterval))
     : CONFIG_DEFAULTS.refreshIntervalMinutes;
 
-  return { enabledProviders, displayMode, refreshIntervalMinutes };
+  const rawLiveQuota = cfg.get<boolean>(
+    'liveQuotaEnabled',
+    CONFIG_DEFAULTS.liveQuotaEnabled
+  );
+  const liveQuotaEnabled = typeof rawLiveQuota === 'boolean'
+    ? rawLiveQuota
+    : CONFIG_DEFAULTS.liveQuotaEnabled;
+
+  return { enabledProviders, displayMode, refreshIntervalMinutes, liveQuotaEnabled };
 }

src/core/configDefaults.ts

@@ -6,10 +6,12 @@ export interface PromptFuelConfig {
   enabledProviders: ProviderId[];
   displayMode: DisplayMode;
   refreshIntervalMinutes: number;
+  liveQuotaEnabled: boolean;
 }
 
 export const CONFIG_DEFAULTS: PromptFuelConfig = {
   enabledProviders: ['claude', 'codex'],
   displayMode: 'compact',
   refreshIntervalMinutes: 5,
+  liveQuotaEnabled: false,
 };

src/core/refreshScheduler.ts

@@ -9,6 +9,7 @@ import { CodexLocalReader } from '../providers/codexLocal';
 import { runEnabledReaders } from '../providers/readProviders';
 import { createStubReader } from '../providers/liveQuotaReader';
 import { runLiveQuotaReaders } from '../providers/readLiveQuota';
+import { createAuthenticatedReader } from '../providers/authenticatedQuota';
 
 export class RefreshScheduler {
   private timer: ReturnType<typeof setTimeout> | undefined;
@@ -82,7 +83,15 @@ export class RefreshScheduler {
 
     const cfg = getConfig();
     const localReaders = [new ClaudeLocalReader(), new CodexLocalReader()];
-    const liveReaders = [createStubReader('claude'), createStubReader('codex')];
+
+    let liveReaders;
+    if (cfg.liveQuotaEnabled) {
+      liveReaders = await Promise.all(
+        cfg.enabledProviders.map(id => createAuthenticatedReader(id)),
+      );
+    } else {
+      liveReaders = cfg.enabledProviders.map(id => createStubReader(id));
+    }
 
     let localResults: ReadResult[];
     let liveResults: LiveQuotaStatus[];