+
Tiny macOS 14+ menu bar app that keeps **AI coding-provider limits visible** and shows when each window resets. Codex, OpenAI, Claude, Cursor, Gemini, Copilot, Grok, GroqCloud, ElevenLabs, Deepgram, z.ai, MiniMax, Kiro, Zed, Vertex AI, Augment, OpenRouter, LiteLLM, LLM Proxy, Codebuff, Command Code, AWS Bedrock, and many newer coding providers. One status item per provider, or Merge Icons mode with a provider switcher. No Dock icon, minimal UI, dynamic bar icons.
-
+
## Why
@@ -112,7 +112,7 @@ See [CLI configuration](docs/cli-configuration.md) for the full flow.
- [Doubao](docs/doubao.md) — API key for Volcengine Ark request-limit probes.
- [Sakana AI](docs/sakana.md) — Manual Cookie header for 5-hour and weekly quota windows.
- [Abacus AI](docs/abacus.md) — Browser cookie auth for ChatLLM/RouteLLM compute credit tracking.
-- Mistral — Browser cookies for monthly spend tracking.
+- Mistral — Browser cookies for API spend, credit balance, and monthly-plan usage.
- [DeepSeek](docs/deepseek.md) — API key for credit balance tracking (paid vs. granted breakdown).
- [Moonshot / Kimi API](docs/moonshot.md) — API key for Moonshot/Kimi API account balance tracking.
- [Venice](docs/venice.md) — API key for DIEM or USD balance tracking.
@@ -124,6 +124,7 @@ See [CLI configuration](docs/cli-configuration.md) for the full flow.
- [Grok](docs/grok.md) — Grok CLI billing RPC plus grok.com browser-session fallback.
- [GroqCloud](docs/groqcloud.md) — API key for Enterprise Prometheus request/token/cache-hit metrics.
- [LLM Proxy](docs/llm-proxy.md) — API key + base URL for aggregate proxy quota stats and provider breakdowns.
+- [ClawRouter](docs/clawrouter.md) — API key for monthly budget, spend, requests, tokens, and routed-provider usage.
- [LiteLLM](docs/litellm.md) — Virtual key + proxy URL for personal and team budget/spend tracking.
- [Deepgram](docs/deepgram.md) — API key usage summaries across speech, agent, token, and TTS metrics.
- [Poe](docs/poe.md) — API key for current point balance and recent points history.
diff --git a/Scripts/check-site-locales.mjs b/Scripts/check-site-locales.mjs
index 429f7283e0..35f2140abb 100644
--- a/Scripts/check-site-locales.mjs
+++ b/Scripts/check-site-locales.mjs
@@ -13,7 +13,7 @@ for (const match of indexHtml.matchAll(/ locale.code);
const appLanguageSource = fs.readFileSync(
diff --git a/Scripts/check_repository_size.sh b/Scripts/check_repository_size.sh
new file mode 100755
index 0000000000..b94da55225
--- /dev/null
+++ b/Scripts/check_repository_size.sh
@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+MAX_BYTES=$((2 * 1024 * 1024))
+failures=0
+tracked_files=0
+declare -a blob_paths=()
+declare -a blob_ids=()
+
+cd "$ROOT_DIR"
+
+while IFS= read -r -d '' entry; do
+ metadata=${entry%%$'\t'*}
+ path=${entry#*$'\t'}
+ read -r mode object stage <<<"$metadata"
+ [[ "$stage" == "0" ]] || continue
+ tracked_files=$((tracked_files + 1))
+
+ case "$path" in
+ *.app | *.app/* | *.dSYM | *.dSYM/* | *.xcarchive/* | *.xcresult/* | *.ipa | *.zip | *.delta | *.dmg | \
+ *.pkg | *.tar.gz | *.tgz)
+ printf 'ERROR: generated artifact is tracked: %s\n' "$path" >&2
+ failures=$((failures + 1))
+ ;;
+ esac
+
+ # Submodule entries name commits rather than file blobs.
+ [[ "$mode" == "160000" ]] && continue
+ blob_paths+=("$path")
+ blob_ids+=("$object")
+done < <(git ls-files --stage -z)
+
+if ((${#blob_ids[@]} > 0)); then
+ index=0
+ while read -r object type size; do
+ path=${blob_paths[$index]}
+ if [[ "$type" != "blob" ]]; then
+ printf 'ERROR: tracked index entry is not a readable blob: %q (%s)\n' "$path" "$object" >&2
+ failures=$((failures + 1))
+ index=$((index + 1))
+ continue
+ fi
+ if ((size > MAX_BYTES)); then
+ printf 'ERROR: tracked file exceeds %d bytes: %q (%d bytes)\n' "$MAX_BYTES" "$path" "$size" >&2
+ failures=$((failures + 1))
+ fi
+ index=$((index + 1))
+ done < <(printf '%s\n' "${blob_ids[@]}" | git cat-file --batch-check='%(objectname) %(objecttype) %(objectsize)')
+fi
+
+if ((failures > 0)); then
+ printf 'Repository size check failed with %d violation(s).\n' "$failures" >&2
+ printf 'Publish build/release artifacts outside Git and optimize required source assets.\n' >&2
+ exit 1
+fi
+
+printf 'repository size OK: %d tracked files, maximum %d bytes each\n' "$tracked_files" "$MAX_BYTES"
diff --git a/Scripts/install_lint_tools.sh b/Scripts/install_lint_tools.sh
index 6f1fb1288f..99f52c902b 100755
--- a/Scripts/install_lint_tools.sh
+++ b/Scripts/install_lint_tools.sh
@@ -6,13 +6,15 @@ ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
TOOLS_DIR="${ROOT_DIR}/.build/lint-tools"
BIN_DIR="${TOOLS_DIR}/bin"
-SWIFTFORMAT_VERSION="0.59.1"
-SWIFTLINT_VERSION="0.63.2"
+SWIFTFORMAT_VERSION="0.61.1"
+SWIFTLINT_VERSION="0.65.0"
-SWIFTFORMAT_SHA256_DARWIN="8b6289b608a44e73cd3851c3589dbd7c553f32cc805aa54b3a496ce2b90febe7"
-SWIFTLINT_SHA256_DARWIN="c59a405c85f95b92ced677a500804e081596a4cae4a6a485af76065557d6ed29"
-SWIFTFORMAT_SHA256_LINUX_X86_64="150d9693570cf234ec91d8a03ba7165bd36a78335c5e40ed91e4c013a492eb54"
-SWIFTLINT_SHA256_LINUX_X86_64="dd1017cfd20a1457f264590bcb5875a6ee06cd75b9a9d4f77cd43a552499143b"
+SWIFTFORMAT_SHA256_DARWIN="b990400779aceb7d7020796eb9ba814d4480543f671d38fc0ff48cb72f04c584"
+SWIFTLINT_SHA256_DARWIN="d6cb0aa7a2f5f1ef306fc9e37bcb54dc9a26facc8f7784ac0c3dd3eccf5c6ba6"
+SWIFTFORMAT_SHA256_LINUX_X86_64="7bc8706e3fd51963f1f29eb99098ebdf482f3497fa527c68e6cf75cbee29c77a"
+SWIFTLINT_SHA256_LINUX_X86_64="79306a34e5c7cc55a220cd108cbb861dcad5f10138dcdf261e2624ae8b0a486b"
+SWIFTFORMAT_SHA256_LINUX_ARM64="42a35b557a6d56975fba3a48e78d39ab5388c8faac65d4819f25d3e20c7504c0"
+SWIFTLINT_SHA256_LINUX_ARM64="12d3b84bc5b69ae13a99a5a5c79904f9ce25867f099f6368d0037854f9ee6c26"
log() { printf '%s\n' "$*"; }
fail() { printf 'ERROR: %s\n' "$*" >&2; exit 1; }
@@ -145,14 +147,16 @@ case "$OS" in
x86_64)
SWIFTFORMAT_URL="https://github.com/nicklockwood/SwiftFormat/releases/download/${SWIFTFORMAT_VERSION}/swiftformat_linux.zip"
SWIFTLINT_URL="https://github.com/realm/SwiftLint/releases/download/${SWIFTLINT_VERSION}/swiftlint_linux_amd64.zip"
+ SWIFTFORMAT_BINARY="swiftformat_linux"
SWIFTFORMAT_SHA256="$SWIFTFORMAT_SHA256_LINUX_X86_64"
SWIFTLINT_SHA256="$SWIFTLINT_SHA256_LINUX_X86_64"
;;
aarch64|arm64)
SWIFTFORMAT_URL="https://github.com/nicklockwood/SwiftFormat/releases/download/${SWIFTFORMAT_VERSION}/swiftformat_linux_aarch64.zip"
SWIFTLINT_URL="https://github.com/realm/SwiftLint/releases/download/${SWIFTLINT_VERSION}/swiftlint_linux_arm64.zip"
- SWIFTFORMAT_SHA256=""
- SWIFTLINT_SHA256=""
+ SWIFTFORMAT_BINARY="swiftformat_linux_aarch64"
+ SWIFTFORMAT_SHA256="$SWIFTFORMAT_SHA256_LINUX_ARM64"
+ SWIFTLINT_SHA256="$SWIFTLINT_SHA256_LINUX_ARM64"
;;
*)
fail "Unsupported Linux arch: ${ARCH}"
@@ -165,7 +169,7 @@ case "$OS" in
log "WARN: Linux SHA256 verification not configured for ${ARCH}; installing anyway."
fi
if [[ "$INSTALL_SWIFTFORMAT" == true ]] && ! swiftformat_installed; then
- install_zip_binary "SwiftFormat ${SWIFTFORMAT_VERSION}" "$SWIFTFORMAT_URL" "$SWIFTFORMAT_SHA256" "swiftformat_linux" "swiftformat"
+ install_zip_binary "SwiftFormat ${SWIFTFORMAT_VERSION}" "$SWIFTFORMAT_URL" "$SWIFTFORMAT_SHA256" "$SWIFTFORMAT_BINARY" "swiftformat"
fi
if [[ "$INSTALL_SWIFTLINT" == true ]] && ! swiftlint_installed; then
install_zip_binary "SwiftLint ${SWIFTLINT_VERSION}" "$SWIFTLINT_URL" "$SWIFTLINT_SHA256" "swiftlint"
diff --git a/Scripts/lint.sh b/Scripts/lint.sh
index 1c1e5afd07..6930c074be 100755
--- a/Scripts/lint.sh
+++ b/Scripts/lint.sh
@@ -45,6 +45,11 @@ check_ci_path_gate() {
"${ROOT_DIR}/Scripts/test_ci_path_gate.sh"
}
+check_repository_size() {
+ "${ROOT_DIR}/Scripts/check_repository_size.sh"
+ "${ROOT_DIR}/Scripts/test_repository_size.sh"
+}
+
check_shell_scripts() {
local count=0
local script
@@ -83,6 +88,7 @@ run_portable_checks() {
check_sparkle_signing_paths
check_swift_test_sharding
check_ci_path_gate
+ check_repository_size
check_shell_scripts
check_documentation_links
check_llms_index
diff --git a/Scripts/package_app.sh b/Scripts/package_app.sh
index 73f85f0f4b..4dc3fe94ea 100755
--- a/Scripts/package_app.sh
+++ b/Scripts/package_app.sh
@@ -350,12 +350,17 @@ strip_release_binary() {
ensure_widget_extension_project() {
local spec="$ROOT/WidgetExtension/project.yml"
local project_dir="$ROOT/WidgetExtension/CodexBarWidgetExtension.xcodeproj"
- if command -v xcodegen >/dev/null 2>&1; then
- xcodegen generate --spec "$spec" --project "$ROOT/WidgetExtension" --quiet
- elif [[ ! -f "$project_dir/project.pbxproj" ]]; then
+ if [[ -f "$project_dir/project.pbxproj" ]]; then
+ return
+ fi
+ if ! command -v xcodegen >/dev/null 2>&1; then
echo "ERROR: Missing ${project_dir}; install xcodegen or restore the generated project." >&2
exit 1
fi
+
+ # The tracked project is authoritative. Regenerating it during packaging records the checkout
+ # directory's spelling in a package file reference and leaves release worktrees dirty.
+ xcodegen generate --spec "$spec" --project "$ROOT/WidgetExtension" --quiet
}
build_widget_extension() {
diff --git a/Scripts/sign-and-notarize.sh b/Scripts/sign-and-notarize.sh
index 0443992306..081d1a6fc3 100755
--- a/Scripts/sign-and-notarize.sh
+++ b/Scripts/sign-and-notarize.sh
@@ -10,6 +10,15 @@ source "$ROOT/Scripts/release_artifacts.sh"
source "$ROOT/Scripts/package_product_paths.sh"
source "$ROOT/Scripts/release_dsym_paths.sh"
+verify_distribution_policy() {
+ local app=$1
+ if command -v syspolicy_check >/dev/null 2>&1; then
+ syspolicy_check distribution "$app"
+ else
+ spctl -a -t exec -vv "$app"
+ fi
+}
+
# Allow building a universal binary if ARCHES is provided; default to universal (arm64 + x86_64).
ARCHES_VALUE=${ARCHES:-"arm64 x86_64"}
ZIP_NAME=$(codexbar_app_zip_name "$MARKETING_VERSION" "$ARCHES_VALUE")
@@ -79,7 +88,7 @@ find "$APP_BUNDLE" -name '._*' -delete
"$DITTO_BIN" --norsrc -c -k --keepParent "$APP_BUNDLE" "$ZIP_NAME"
-spctl -a -t exec -vv "$APP_BUNDLE"
+verify_distribution_policy "$APP_BUNDLE"
stapler validate "$APP_BUNDLE"
echo "Packaging dSYM"
diff --git a/Scripts/test.sh b/Scripts/test.sh
index 9b0f2c5cd8..d561103b21 100755
--- a/Scripts/test.sh
+++ b/Scripts/test.sh
@@ -7,6 +7,13 @@ GROUP_SIZE="${CODEXBAR_TEST_GROUP_SIZE:-12}"
SUITE_TIMEOUT="${CODEXBAR_TEST_SUITE_TIMEOUT:-180}"
cd "${ROOT_DIR}"
+
+# Defense in depth: test processes also self-detect, but keep this explicit so runner changes cannot
+# expose the user's login Keychain. Deliberate isolated Keychain tests must opt in by setting the allow flag.
+if [[ "${CODEXBAR_ALLOW_TEST_KEYCHAIN_ACCESS:-}" != "1" ]]; then
+ export CODEXBAR_SUPPRESS_TEST_KEYCHAIN_ACCESS=1
+fi
+
ARGS=(
--group-size "${GROUP_SIZE}"
--timeout "${SUITE_TIMEOUT}"
diff --git a/Scripts/test_live_update.sh b/Scripts/test_live_update.sh
index db7f9e5a96..76ab2ec326 100755
--- a/Scripts/test_live_update.sh
+++ b/Scripts/test_live_update.sh
@@ -4,18 +4,27 @@ set -euo pipefail
PREV_TAG=${1:?"pass previous release tag (e.g. v0.1.0)"}
CUR_TAG=${2:?"pass current release tag (e.g. v0.1.1)"}
-ROOT=$(cd "$(dirname "$0")/.." && pwd)
PREV_VER=${PREV_TAG#v}
+CUR_VER=${CUR_TAG#v}
APP_NAME="CodexBar"
-ZIP_URL="https://github.com/steipete/CodexBar/releases/download/${PREV_TAG}/${APP_NAME}-${PREV_VER}.zip"
+ZIP_URL="https://github.com/steipete/CodexBar/releases/download/${PREV_TAG}/${APP_NAME}-macos-universal-${PREV_VER}.zip"
TMP_DIR=$(mktemp -d /tmp/codexbar-live.XXXX)
trap 'rm -rf "$TMP_DIR"' EXIT
echo "Downloading previous release $PREV_TAG from $ZIP_URL"
-curl -L -o "$TMP_DIR/prev.zip" "$ZIP_URL"
+curl --fail --location --output "$TMP_DIR/prev.zip" "$ZIP_URL"
echo "Installing previous release to /Applications/${APP_NAME}.app"
+osascript -e 'tell application "CodexBar" to quit' >/dev/null 2>&1 || true
+for _ in {1..20}; do
+ pgrep -x "$APP_NAME" >/dev/null || break
+ sleep 0.25
+done
+if pgrep -x "$APP_NAME" >/dev/null; then
+ echo "ERROR: ${APP_NAME} did not quit before replacement." >&2
+ exit 1
+fi
rm -rf /Applications/${APP_NAME}.app
ditto -x -k "$TMP_DIR/prev.zip" "$TMP_DIR"
ditto "$TMP_DIR/${APP_NAME}.app" /Applications/${APP_NAME}.app
@@ -35,4 +44,11 @@ if [[ ! "$answer" =~ ^[Yy]$ ]]; then
exit 1
fi
+installed_ver=$(/usr/libexec/PlistBuddy -c 'Print :CFBundleShortVersionString' \
+ "/Applications/${APP_NAME}.app/Contents/Info.plist")
+if [[ "$installed_ver" != "$CUR_VER" ]]; then
+ echo "Live update reported success but installed ${installed_ver}; expected ${CUR_VER}." >&2
+ exit 1
+fi
+
echo "Live update test confirmed."
diff --git a/Scripts/test_repository_size.sh b/Scripts/test_repository_size.sh
new file mode 100755
index 0000000000..fb760d636d
--- /dev/null
+++ b/Scripts/test_repository_size.sh
@@ -0,0 +1,82 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+TEMP_DIR=$(mktemp -d "${TMPDIR:-/tmp}/codexbar-repository-size.XXXXXX")
+trap 'rm -rf "$TEMP_DIR"' EXIT
+
+mkdir -p "$TEMP_DIR/Scripts"
+cp "$ROOT_DIR/Scripts/check_repository_size.sh" "$TEMP_DIR/Scripts/"
+git -C "$TEMP_DIR" init --quiet
+empty_output=$("$TEMP_DIR/Scripts/check_repository_size.sh")
+grep -Fq 'repository size OK: 0 tracked files' <<<"$empty_output"
+
+printf 'small source file\n' > "$TEMP_DIR/source.txt"
+git -C "$TEMP_DIR" add source.txt Scripts/check_repository_size.sh
+
+"$TEMP_DIR/Scripts/check_repository_size.sh" >/dev/null
+
+dd if=/dev/zero of="$TEMP_DIR/untracked.bin" bs=1024 count=2049 2>/dev/null
+"$TEMP_DIR/Scripts/check_repository_size.sh" >/dev/null
+
+dd if=/dev/zero of="$TEMP_DIR/boundary.bin" bs=1024 count=2048 2>/dev/null
+git -C "$TEMP_DIR" add boundary.bin
+"$TEMP_DIR/Scripts/check_repository_size.sh" >/dev/null
+printf 'x' >> "$TEMP_DIR/boundary.bin"
+git -C "$TEMP_DIR" add boundary.bin
+if "$TEMP_DIR/Scripts/check_repository_size.sh" >"$TEMP_DIR/large.log" 2>&1; then
+ printf 'ERROR: staged blob one byte above the limit was accepted.\n' >&2
+ exit 1
+fi
+grep -Fq 'tracked file exceeds 2097152 bytes: boundary.bin (2097153 bytes)' "$TEMP_DIR/large.log"
+
+git -C "$TEMP_DIR" rm --cached --force --quiet boundary.bin
+git -C "$TEMP_DIR" add untracked.bin
+printf 'working tree is now small\n' > "$TEMP_DIR/untracked.bin"
+if "$TEMP_DIR/Scripts/check_repository_size.sh" >"$TEMP_DIR/staged-large.log" 2>&1; then
+ printf 'ERROR: oversized staged blob was accepted after its working-tree file changed.\n' >&2
+ exit 1
+fi
+grep -Fq 'tracked file exceeds 2097152 bytes: untracked.bin (2098176 bytes)' "$TEMP_DIR/staged-large.log"
+
+git -C "$TEMP_DIR" rm --cached --force --quiet untracked.bin
+printf 'small staged blob\n' > "$TEMP_DIR/index-is-authoritative.bin"
+git -C "$TEMP_DIR" add index-is-authoritative.bin
+dd if=/dev/zero of="$TEMP_DIR/index-is-authoritative.bin" bs=1024 count=2049 2>/dev/null
+"$TEMP_DIR/Scripts/check_repository_size.sh" >/dev/null
+
+odd_path=$'odd\nname.txt'
+printf 'small source file\n' > "$TEMP_DIR/$odd_path"
+git -C "$TEMP_DIR" add "$odd_path"
+"$TEMP_DIR/Scripts/check_repository_size.sh" >/dev/null
+
+artifacts=(
+ "CodexBar 2.app/Contents/MacOS/CodexBar"
+ "CodexBar.dSYM/Contents/Info.plist"
+ "CodexBar.xcarchive/Products/Applications/CodexBar.app/Contents/Info.plist"
+ "CodexBar.xcresult/Data/data"
+ "CodexBar.ipa"
+ "CodexBar.zip"
+ "CodexBar.delta"
+ "CodexBar.dmg"
+ "CodexBar.pkg"
+ "CodexBar.tar.gz"
+ "CodexBar.tgz"
+)
+for artifact in "${artifacts[@]}"; do
+ mkdir -p "$TEMP_DIR/$(dirname "$artifact")"
+ printf 'release artifact\n' > "$TEMP_DIR/$artifact"
+ git -C "$TEMP_DIR" add -f "$artifact"
+done
+ln -s source.txt "$TEMP_DIR/CodexBar-latest.dmg"
+git -C "$TEMP_DIR" add -f CodexBar-latest.dmg
+rm "$TEMP_DIR/CodexBar.zip"
+if "$TEMP_DIR/Scripts/check_repository_size.sh" >"$TEMP_DIR/artifact.log" 2>&1; then
+ printf 'ERROR: tracked release artifacts were accepted.\n' >&2
+ exit 1
+fi
+for artifact in "${artifacts[@]}" CodexBar-latest.dmg; do
+ grep -Fq "generated artifact is tracked: $artifact" "$TEMP_DIR/artifact.log"
+done
+
+printf 'Repository size tests passed.\n'
diff --git a/Sources/CodexBar/AgentSessionsStore.swift b/Sources/CodexBar/AgentSessionsStore.swift
new file mode 100644
index 0000000000..a06ed519fd
--- /dev/null
+++ b/Sources/CodexBar/AgentSessionsStore.swift
@@ -0,0 +1,155 @@
+import CodexBarCore
+import Foundation
+import Observation
+
+struct AgentSessionRemoteRefreshGate {
+ private(set) var generation = 0
+ private(set) var isInFlight = false
+ private(set) var isPending = false
+
+ mutating func settingsDidChange() {
+ self.generation += 1
+ self.isPending = self.isInFlight
+ }
+
+ mutating func begin() -> Int? {
+ guard !self.isInFlight else {
+ self.isPending = true
+ return nil
+ }
+ self.isInFlight = true
+ self.isPending = false
+ return self.generation
+ }
+
+ mutating func finish(generation: Int) -> (shouldPublish: Bool, shouldRetry: Bool) {
+ self.isInFlight = false
+ let outcome = (generation == self.generation, self.isPending)
+ self.isPending = false
+ return outcome
+ }
+}
+
+@MainActor
+@Observable
+final class AgentSessionsStore {
+ private let settings: SettingsStore
+ private let localScanner: LocalAgentSessionScanner
+ private let remoteFetcher: RemoteSessionFetcher
+ @ObservationIgnored private var localRefreshTask: Task