ContextQMD
Back to Codexbar

CodexBar 🎚️ — May your tokens never run out.

README.md

0.27.014.6 KB
Original Source

CodexBar 🎚️ — May your tokens never run out.

Every AI coding limit, in your menu bar.

<a href="https://codexbar.app"></a>

Tiny macOS 14+ menu bar app that keeps AI coding-provider limits visible and shows when each window resets. Codex, OpenAI, Claude, Cursor, Gemini, Copilot, Grok, GroqCloud, ElevenLabs, Deepgram, z.ai, MiniMax, Kiro, Vertex AI, Augment, OpenRouter, LLM Proxy, Codebuff, Command Code, AWS Bedrock, and many newer coding providers. One status item per provider, or Merge Icons mode with a provider switcher. No Dock icon, minimal UI, dynamic bar icons.

Why

  • Plan around resets. Per-provider session, weekly, and monthly windows with countdowns to the next reset — stop guessing whether to start that long task.
  • Credits, spend, and cost scans. Credit balances, Admin API spend dashboards, provider billing summaries, and local cost scans where the source exposes enough detail.
  • Live status. Provider status polling surfaces incident badges in the menu and an indicator overlay on the bar icon.
  • Privacy-first. Reuses existing provider sessions — OAuth, device flow, API keys, browser cookies, local files — so no passwords are stored.

Install

Requirements

  • macOS 14+ (Sonoma)

GitHub Releases

Download: https://github.com/steipete/CodexBar/releases

Homebrew

bash
brew install --cask steipete/tap/codexbar

CLI Tarballs (macOS/Linux)

Homebrew formula (Linux today):

bash
brew install steipete/tap/codexbar

Or download release tarballs from GitHub Releases:

  • macOS: CodexBarCLI-v<tag>-macos-arm64.tar.gz, CodexBarCLI-v<tag>-macos-x86_64.tar.gz
  • Linux: CodexBarCLI-v<tag>-linux-aarch64.tar.gz, CodexBarCLI-v<tag>-linux-x86_64.tar.gz

First run

  • Open Settings → Providers and enable what you use.
  • Install/sign in to the provider sources you rely on: CLIs, browser sessions, OAuth/device flow, API keys, local app files, or provider apps depending on the provider.
  • Optional: Settings → Providers → Codex → OpenAI cookies (Automatic or Manual) to add dashboard extras.

Set API keys from the CLI

Provider toggles and API keys live in ~/.codexbar/config.json. You can script the same provider list that Settings → Providers uses:

bash
codexbar config providers
codexbar config enable --provider grok
codexbar config disable --provider cursor

For API-key providers, store a key without opening Settings:

bash
printf '%s' "$ELEVENLABS_API_KEY" | codexbar config set-api-key --provider elevenlabs --stdin

set-api-key trims the piped value, stores it with restrictive config-file permissions, and enables the provider by default. Use --no-enable to only save the key, or --api-key <key> for one-off local scripts where shell history is not a concern. See CLI configuration for the full flow.

Providers

  • Codex — OAuth API or local Codex CLI, plus optional OpenAI web dashboard extras.
  • OpenAI — Admin API key usage/cost graphs with legacy credit-balance fallback.
  • Claude — OAuth API, browser cookies, or CLI PTY fallback; session and weekly usage where available.
  • Cursor — Browser session cookies for plan + usage + billing resets.
  • OpenCode — Browser cookies for workspace subscription usage.
  • OpenCode Go — Browser cookies for Go usage windows.
  • Alibaba Coding Plan — Web cookies or API key for coding-plan quotas.
  • Gemini — OAuth-backed quota API using Gemini CLI credentials (no browser cookies).
  • Antigravity — Local language server probe (experimental); no external auth.
  • Droid — Browser cookies + WorkOS token flows for Factory usage + billing.
  • Copilot — GitHub device flow + Copilot internal usage API.
  • z.ai — API token for quota + MCP windows.
  • Manus — Browser session_id auth for credit balance, monthly credits, and daily refresh tracking.
  • MiniMax — API token, cookie header, or browser cookies for coding-plan usage.
  • Kimi — Auth token (JWT from kimi-auth cookie) for weekly quota + 5‑hour rate limit.
  • Kimi K2 (unofficial) — Legacy API key flow for credit-based usage totals.
  • Kilo — API token with CLI-auth fallback for Kilo Pass usage.
  • Kiro — CLI-based usage; monthly credits + bonus credits.
  • Vertex AI — Google Cloud gcloud OAuth with token cost tracking from local Claude logs.
  • Augment — Augment CLI or browser cookies for credits tracking and usage monitoring.
  • Amp — Browser cookie-based authentication with Amp Free usage tracking.
  • Ollama — Browser cookies for Ollama Cloud usage windows.
  • JetBrains AI — Local XML-based quota from JetBrains IDE configuration; monthly credits tracking.
  • Warp — API token for GraphQL request limits and monthly credits.
  • ElevenLabs — API key for character credits and voice slot usage.
  • OpenRouter — API token for credit-based usage tracking across multiple AI providers.
  • Windsurf — Browser localStorage session import or local SQLite cache for plan usage.
  • Perplexity — Account usage credits from Perplexity usage data.
  • Xiaomi MiMo — Browser cookies for balance and token-plan usage.
  • Doubao — API key for Volcengine Ark request-limit probes.
  • Abacus AI — Browser cookie auth for ChatLLM/RouteLLM compute credit tracking.
  • Mistral — Browser cookies for monthly spend tracking.
  • DeepSeek — API key for credit balance tracking (paid vs. granted breakdown).
  • Moonshot / Kimi API — API key for Moonshot/Kimi API account balance tracking.
  • Venice — API key for DIEM or USD balance tracking.
  • Codebuff — API token (or ~/.config/manicode/credentials.json) for credit balance + weekly rate limit.
  • Crof — API key for dollar credit balance and request quota tracking.
  • Command Code — Browser cookies for monthly USD credits from Command Code billing.
  • StepFun — Username + password login for Step Plan rate limits (5‑hour + weekly windows) and subscription plan name.
  • AWS Bedrock — AWS credentials for Cost Explorer usage and monthly budget tracking.
  • Grok — Grok CLI billing RPC plus grok.com browser-session fallback.
  • GroqCloud — API key for Enterprise Prometheus request/token/cache-hit metrics.
  • LLM Proxy — API key + base URL for aggregate proxy quota stats and provider breakdowns.
  • Deepgram — API key usage summaries across speech, agent, token, and TTS metrics.
  • Open to new providers: provider authoring guide.

Icon & Screenshot

The menu bar icon is a tiny usage meter. Bar meaning is provider-specific, and errors/stale data can dim the icon or show an incident indicator.

Features

  • Multi-provider menu bar with per-provider toggles (Settings → Providers).
  • Provider-specific usage meters with reset countdowns.
  • Optional Codex web dashboard enrichments (code review remaining, usage breakdown, credits history).
  • Inline spend and usage charts for API-backed providers such as OpenAI, Claude Admin API, OpenRouter, z.ai, MiniMax, Mistral, and AWS Bedrock.
  • Configurable cost-usage scans for Codex + Claude, plus reused chart UI for supported provider histories.
  • Provider status polling with incident badges in the menu and icon overlay.
  • Merge Icons mode to combine providers into one status item + switcher.
  • Display controls for provider icons, labels, bars, reset-time style, and highest-usage auto-selection.
  • Refresh cadence presets (manual, 1m, 2m, 5m, 15m).
  • Bundled CLI (codexbar) for scripts and CI (including codexbar cost --provider codex, claude, or both for local cost usage); macOS and Linux CLI builds available.
  • WidgetKit widgets for supported providers.
  • Optional session quota notifications and weekly-reset confetti.
  • Privacy-first: on-device parsing by default; browser cookies are opt-in and reused (no passwords stored).

Privacy note

Wondering if CodexBar scans your disk? It doesn’t crawl your filesystem; it reads a small set of known locations (browser cookies/local storage, provider config files, local JSONL logs) when the related features are enabled. Provider tokens and token-account settings live in ~/.codexbar/config.json with restrictive file permissions. See the discussion and audit notes in issue #12.

macOS permissions (why they’re needed)

  • Full Disk Access (optional): only required to read Safari cookies/local storage for web-based providers. If you don’t grant it, use another supported browser, manual cookies/API keys, OAuth, or CLI/local sources where that provider supports them.
  • Keychain access (prompted by macOS):
    • Chromium cookie import needs the browser “Safe Storage” key to decrypt cookies.
    • Claude OAuth bootstrap may read the Claude CLI Keychain item when CodexBar has no usable cached credentials.
    • CodexBar may use Keychain for browser cookie decryption, cached cookie headers, and OAuth/device-flow credentials where those sources require it.
    • How do I prevent those keychain alerts?
      • Open Keychain Access.app → login keychain → search the prompted item (for Claude OAuth, usually “Claude Code-credentials”).
      • Open the item → Access Control → add CodexBar.app under “Always allow access by these applications”.
      • Prefer adding just CodexBar (avoid “Allow all applications” unless you want it wide open).
      • Relaunch CodexBar after saving.
      • Reference screenshot:
    • How to do the same for the browser?
      • Find the browser’s “Safe Storage” key (e.g., “Chrome Safe Storage”, “Brave Safe Storage”, “Microsoft Edge Safe Storage”).
      • Open the item → Access Control → add CodexBar.app under “Always allow access by these applications”.
      • This removes the prompt when CodexBar decrypts cookies for that browser.
  • Files & Folders prompts (folder/volume access): CodexBar launches provider CLIs and local probes for some providers. If those helpers read a project directory or external drive, macOS may ask CodexBar for that folder/volume (e.g., Desktop or an external volume). This is driven by the helper’s working directory, not background disk scanning.
  • What we do not request in the background: no Screen Recording or Accessibility permissions; user-triggered helper actions may ask macOS for Automation permission to open Terminal. No passwords are stored (browser cookies are reused when you opt in).

Docs

Getting started (dev)

  • Clone the repo and open it in Xcode or run the scripts directly.
  • Launch once, then toggle providers in Settings → Providers.
  • Install/sign in to provider sources you rely on (CLIs, browser cookies, OAuth/device flow, API keys, or local app/config files).
  • Optional: set OpenAI cookies (Automatic or Manual) for Codex dashboard extras.

Build from source

Requires macOS 14+ and Swift 6.2+.

bash
./Scripts/package_app.sh        # builds CodexBar.app in-place
CODEXBAR_SIGNING=adhoc ./Scripts/package_app.sh  # ad-hoc signing (no Apple Developer account)
open CodexBar.app

Dev loop:

bash
./Scripts/compile_and_run.sh
./Scripts/compile_and_run.sh --test  # also run swift test before packaging/relaunching
make check                           # SwiftFormat + SwiftLint
make docs-list                       # list docs with frontmatter summaries

CLI install:

bash
# after installing CodexBar.app in /Applications
./bin/install-codexbar-cli.sh
  • ✂️ Trimmy — “Paste once, run once.” Flatten multi-line shell snippets so they paste and run.
  • 🧳 MCPorter — TypeScript toolkit + CLI for Model Context Protocol servers.
  • 🧿 oracle — Ask the oracle when you're stuck. Invoke GPT-5 Pro with a custom context and files.

Looking for a Windows version?

Linux desktop integration?

  • codexbar-waybar — Waybar custom module + GTK4 popover for Hyprland / Sway / other Wayland compositors, built on top of the bundled Linux CLI.

Credits

Inspired by ccusage (MIT), specifically the cost usage tracking.

License

MIT • Peter Steinberger (steipete)