Function attachRateLimit

web/src/server/free-session/public-api.ts:508–542

Thread the current quota snapshot onto queued/active/ended views so the * CLI can render "N of M sessions used" — both during the session and on * the post-session banner. Other statuses pass through unchanged. Called on * both POST and GET so the line stays live across polls.

(
  userId: string,
  view: SessionStateResponse,
  deps: SessionDeps,
)

 *  the post-session banner. Other statuses pass through unchanged. Called on
 *  both POST and GET so the line stays live across polls. */
async function attachRateLimit(
  userId: string,
  view: SessionStateResponse,
  deps: SessionDeps,
): Promise<SessionStateResponse> {
  if (
    view.status !== 'queued' &&
    view.status !== 'active' &&
    view.status !== 'ended'
  ) {
    return view
  }
  const accessTier = view.accessTier ?? 'full'
  const allRateLimitsByModel = await fetchRateLimitsByModel(
    userId,
    accessTier,
    deps,
  )
  // The ended view doesn't carry a model id, so it gets the full snapshot
  // unfiltered — the banner reads any entry's recentCount (they all share the
  // same daily premium pool). Queued/active filter out unused models so the
  // landing screen and waiting-room title don't list every premium model with
  // a "0 used today" hint.
  if (view.status === 'ended') {
    return { ...view, rateLimitsByModel: allRateLimitsByModel }
  }
  const rateLimit = allRateLimitsByModel[view.model]
  return {
    ...view,
    ...(rateLimit ? { rateLimit } : {}),
    ...nonEmptyRateLimitsByModel(
      onlyUsedRateLimitsByModel(allRateLimitsByModel),
    ),
  }
}

/**
 * Check of the caller's current state. Does not rotate `instance_id`. The CLI