Quota Guard

This skill installs and runs the local quota guard for Codex and Claude.

What it does

1. Tracks the current local auth state per source in ~/.agents/auth/known_auth.json
2. Self-updates the installed skill from GitHub before each guard cycle
3. Reuploads the current auth for each source to keep the shared encrypted auth pool entry present even when the local digest has not changed
4. Probes the current local Codex quota and the current local Claude quota to decide whether the current machine should rotate
5. Publishes stable local quota snapshots back to the hub when available, with stricter completeness checks for Codex
6. When local quota is low, asks the cloud auth pool for a strictly better auth from the same source and installs it locally
7. Restarts the local Codex app-server after writing a new Codex auth.json, so new Codex sessions read the replaced account instead of a stale cached account
8. Installs a reboot-safe scheduler that runs every 15 minutes
9. Notifies the local user when any auth uploaded by that same token user is hard-invalidated, even if that auth is not the currently installed local auth
10. Stores the user's personal company-email auth-pool token locally so future runs can upload and fetch without prompting again

Files