@hashimkarim/usagestat-linux-x64-gnu 2.0.0 → 2.0.2

package/plugins/museai/plugin.js

@@ -0,0 +1,154 @@
+// Generated by tools/vendor-codexbar-providers.cjs; see LICENSE.
+globalThis.__usagestat_bundled_options = {"labels":["Weekly","Additional tokens","Additional"],"defaults":{},"autoMode":"web","maxRequests":160};
+defineProvider({
+  id: "museai",
+  name: "Muse (muse.ai)",
+  endpoints: ["https://muse.ai"],
+  settings: [],
+  capabilities: ["browser-cookies", "http-status", "persistent-storage"],
+  cookieDomains: ["muse.ai"],
+  async fetchUsage(ctx) {
+    const origin = "https://muse.ai";
+    const userAgent =
+      "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36";
+    const policy = ctx.browser.availability("muse.ai");
+    if (policy === "off") throw ctx.fail.missingCredential("muse.ai cookies are disabled.");
+    const signedOut = (r) =>
+      r.status === 401 || r.status === 403 || (r.headers["location"] ?? "").startsWith("https://auth.muse.ai/");
+    const staleAction = (r) => r.status === 404 && /server action not found/i.test(r.bodyText);
+    const discoveryFailure = () =>
+      ctx.fail.parseFailure(
+        "Could not find a working muse.ai subscription action. muse.ai may have changed. Refresh to retry.",
+      );
+    const post = (cookie, actionID) =>
+      ctx.http.post(`${origin}/`, {
+        body: [{ includeAgreement: true }],
+        headers: {
+          Cookie: cookie,
+          Accept: "text/x-component",
+          "Next-Action": actionID,
+          Origin: origin,
+          // muse.ai answers 403 to server actions that do not look like same-origin browser fetches.
+          "Sec-Fetch-Site": "same-origin",
+          "Sec-Fetch-Mode": "cors",
+          "Sec-Fetch-Dest": "empty",
+          "User-Agent": userAgent,
+        },
+      });
+    const chunkPaths = (text) => [
+      ...new Set((text.match(/static\/chunks\/[\w~.-]+\.js/g) ?? []).map((p) => `/_next/${p}`)),
+    ];
+    const fetchChunks = (paths) =>
+      Promise.all(
+        paths.map((path) =>
+          ctx.http
+            .get(`${origin}${path}`, { headers: { Accept: "*/*", "User-Agent": userAgent } })
+            .then((r) => (r.status === 200 ? r.bodyText : ""))
+            .catch(() => ""),
+        ),
+      );
+    // The action ID changes on every deploy. The app chunk preloads settings through
+    // `e.A(<module>).then(({preloadHatchSettingsData…` and the loader chunk lists that module's files, one of which
+    // holds `createServerReference("<id>", …, "fetchSubscriptionAction")`.
+    // Returns undefined when muse.ai treats the session as signed out.
+    const discover = async (cookie) => {
+      const page = await ctx.http.get(`${origin}/`, {
+        headers: { Cookie: cookie, Accept: "text/html", "User-Agent": userAgent },
+      });
+      if (signedOut(page)) return undefined;
+      // Fetch page chunks a few at a time and stop once the settings loader entry turns up.
+      if (page.status !== 200) throw ctx.fail.apiFailure(`muse.ai returned HTTP ${page.status}.`);
+      const paths = chunkPaths(page.bodyText).slice(0, 96);
+      let text = "";
+      for (let i = 0; i < paths.length; i += 8) {
+        text += "\n" + (await fetchChunks(paths.slice(i, i + 8))).join("\n");
+        if (text.length > 8 * 1024 * 1024) throw discoveryFailure();
+        const module = /\.A\((\d+)\)\.then\(\(\{[^}]*Settings/.exec(text)?.[1];
+        const loader =
+          module && new RegExp(`[,{\\[]${module},\\w+=>\\{\\w+\\.v\\(\\w+=>Promise\\.all\\(\\[([^\\]]*)`).exec(text);
+        if (!loader) continue;
+        const settingsPaths = chunkPaths(loader[1]).slice(0, 32);
+        for (let j = 0; j < settingsPaths.length; j += 8) {
+          for (const body of await fetchChunks(settingsPaths.slice(j, j + 8))) {
+            const id = /"([0-9a-f]{40,})",[^"]{0,200}"fetchSubscriptionAction"/.exec(body)?.[1];
+            if (id) return id;
+          }
+        }
+        break;
+      }
+      throw discoveryFailure();
+    };
+
+    let actionID = ctx.storage.get("actionID");
+    const subscription = async (cookie) => {
+      const response = actionID ? await post(cookie, actionID) : undefined;
+      if (response && !staleAction(response)) {
+        return signedOut(response) ? undefined : response;
+      }
+      ctx.storage.remove("actionID");
+      actionID = await discover(cookie);
+      if (!actionID) return undefined;
+      const fresh = await post(cookie, actionID);
+      if (staleAction(fresh)) throw discoveryFailure();
+      return signedOut(fresh) ? undefined : fresh;
+    };
+
+    // Try each browser session, rejecting expired ones so a signed-in browser later in the order still works.
+    let response;
+    let rejected = false;
+    for await (const session of ctx.browser.sessions("muse.ai")) {
+      response = await subscription(session.header);
+      if (response) break;
+      rejected = true;
+      ctx.browser.rejectCookie("muse.ai", session);
+      if (policy === "manual") break;
+    }
+    if (!response) {
+      throw rejected
+        ? ctx.fail.authenticationExpired("muse.ai session expired. Sign in at muse.ai and refresh.")
+        : ctx.fail.missingCredential(
+            `No muse.ai session found. Sign in at muse.ai. Supported browsers: ${ctx.browser.supportedBrowsers}. Or set a manual Cookie header.`,
+          );
+    }
+    if (response.status !== 200) throw ctx.fail.apiFailure(`muse.ai returned HTTP ${response.status}.`);
+
+    // React flight rows look like `1:{...}`; the subscription is the row carrying `success`.
+    let sub;
+    for (const line of response.bodyText.split("\n")) {
+      try {
+        const row = JSON.parse(/^[0-9a-f]+:(\{.*\})\s*$/.exec(line)?.[1] ?? "null");
+        if (row?.success === true) sub = row.subscription;
+      } catch {}
+    }
+    if (typeof sub?.usage?.percentUsed !== "number") throw ctx.fail.parseFailure("Unexpected muse.ai response.");
+
+    ctx.storage.set("actionID", actionID);
+    const seconds = (value) => (typeof value === "number" ? ctx.date.unixSeconds(value) : undefined);
+    const tokensLeft = (label) => /\(([^()]+ tokens left)\)/.exec(label ?? "")?.[1];
+    // Top-ups (purchased or from referrals) never expire and sit outside the weekly allowance. muse.ai reports
+    // the balance in micro-dollars, so the fallback without its label is a dollar amount.
+    const { topupBalance: balance, topupTotal: total } = sub;
+    const topup =
+      typeof balance === "number" && typeof total === "number" && total > 0
+        ? {
+            label: sub.topupRowLabel ?? "Additional tokens",
+            value:
+              tokensLeft(sub.topupRowValueLabel) ?? sub.topupRowValueLabel ?? `${ctx.format.usd(balance / 1e6)} left`,
+            progress: Math.min(1, Math.max(0, (total - balance) / total)),
+          }
+        : undefined;
+    return {
+      primary: {
+        usedPercent: Math.min(100, Math.max(0, sub.usage.percentUsed)),
+        windowMinutes: 7 * 24 * 60,
+        resetsAt: seconds(sub.usage.resetsAt),
+        // "3% used (2.8B tokens left)" is the only absolute amount muse.ai reports. Free plans omit it.
+        resetDescription: tokensLeft(sub.usageRowValueLabel),
+      },
+      details: topup ? [{ rows: [topup] }] : undefined,
+      subscriptionRenewsAt: seconds(sub.agreement?.currentPeriodEndTime),
+      identity: { loginMethod: sub.tier?.name ?? sub.usageRowLabel },
+      dataConfidence: "percentOnly",
+    };
+  },
+});

package/plugins/museai/plugin.json

@@ -0,0 +1,25 @@
+{
+  "schemaVersion": 1,
+  "id": "museai",
+  "name": "Muse (muse.ai)",
+  "version": "0.1.0",
+  "entry": "plugin.js",
+  "enabledByDefault": false,
+  "supportedModes": [
+    "web"
+  ],
+  "autoMode": "web",
+  "usageDashboardUrl": "https://muse.ai",
+  "webUrl": "https://muse.ai",
+  "envVars": [
+    "MUSEAI_COOKIE"
+  ],
+  "setupHelp": "Use a session Cookie header from muse.ai. This provider is separate from Muse Code and does not use its CLI login.",
+  "upstream": {
+    "repository": "https://github.com/steipete/CodexBar",
+    "revision": "6ba06fe9ec1522dd5c59e16810115bce28aa148f",
+    "path": "Sources/CodexBarCore/Resources/Plugins/museai.js",
+    "sha256": "ab325a1b6cff46bbe347d98340d9212cab732f6b48c0d2ae5c6d955824ac5019",
+    "license": "MIT"
+  }
+}

package/plugins/nous/plugin.json

@@ -16,7 +16,7 @@
   ],
   "upstream": {
     "repository": "https://github.com/steipete/CodexBar",
-    "revision": "25bba9b7fd9ce83c33053958f7366e23b2dc8a82",
+    "revision": "6ba06fe9ec1522dd5c59e16810115bce28aa148f",
     "path": "Sources/CodexBarCore/Resources/Plugins/nous.js",
     "sha256": "160f5329bf4895a061d3bed74d0476283d3abad47e071fb868d667c0c5cb485e",
     "license": "MIT"

package/plugins/opencode-go/plugin.js

@@ -12,17 +12,20 @@
     monthly: 60,
   };
 
-  const HISTORY_EXISTS_SQL = `
-    SELECT 1 AS present
-    FROM message
-    WHERE json_valid(data)
-      AND json_extract(data, '$.providerID') = 'opencode-go'
-      AND json_extract(data, '$.role') = 'assistant'
-    LIMIT 1
-  `;
-
-  const HISTORY_ROWS_SQL = `
+  const TABLES_SQL = "SELECT name FROM sqlite_master WHERE type = 'table' AND name IN ('message','session_message','credential')";
+  const CREDENTIAL_SQL = `SELECT value FROM credential
+    WHERE integration_id = 'opencode-go' AND (active IS NULL OR active = 1)
+    ORDER BY active DESC, time_updated DESC, id DESC LIMIT 1`;
+  function historySQL(tables) {
+    const sources = [];
+    if (tables.includes('session_message')) sources.push(`SELECT id, time_created, data FROM session_message
+      WHERE json_valid(data) AND (type = 'assistant' OR (type = 'compaction' AND json_extract(data,'$.status') = 'completed'))`);
+    if (tables.includes('message')) sources.push(`SELECT id, time_created, data FROM message
+      WHERE json_valid(data) AND json_extract(data,'$.role') = 'assistant'`);
+    if (!sources.length) return null;
+    return `
     SELECT
+      id,
       CAST(COALESCE(json_extract(data, '$.time.created'), time_created) AS INTEGER) AS createdMs,
       json_extract(data, '$.cost') AS cost,
       json_extract(data, '$.tokens.input') AS inputTokens,
@@ -30,11 +33,10 @@
       json_extract(data, '$.tokens.cache.read') AS cacheReadTokens,
       json_extract(data, '$.tokens.cache.write') AS cacheCreationTokens,
       json_extract(data, '$.tokens.reasoning') AS reasoningOutputTokens
-    FROM message
-    WHERE json_valid(data)
-      AND json_extract(data, '$.providerID') = 'opencode-go'
-      AND json_extract(data, '$.role') = 'assistant'
+    FROM (${sources.join(' UNION ALL ')})
+    WHERE COALESCE(json_extract(data, '$.model.providerID'), json_extract(data, '$.providerID')) = 'opencode-go'
   `;
+  }
 
   function readNumber(value) {
     if (typeof value !== "number" && typeof value !== "string") return null;
@@ -317,7 +319,7 @@
       }
       return { ok: true, rows };
     } catch (e) {
-      ctx.host.log.warn("sqlite query failed: " + String(e));
+      ctx.host.log.warn("OpenCode history could not be read");
       return { ok: false, rows: [] };
     }
   }
@@ -326,6 +328,30 @@
     const configured = trim(ctx.provider && ctx.provider.apiKey) || env(ctx, "OPENCODE_GO_API_KEY");
     if (configured) return configured;
     const inline = ctx.host.env.get("OPENCODE_AUTH_CONTENT");
+    // A v2 credential table is authoritative even after logout. The one-time
+    // imported auth.json must never revive a deleted or inactive account.
+    if (!inline) {
+      const database = databasePath(ctx);
+      if (ctx.host.fs.exists(database)) {
+        try {
+          const tables = ctx.util.tryParseJson(ctx.host.sqlite.query(database, TABLES_SQL));
+          if (!Array.isArray(tables)) throw new Error('Invalid schema');
+          if (tables.some(table => table.name === 'credential')) {
+            const rows = ctx.util.tryParseJson(ctx.host.sqlite.query(database, CREDENTIAL_SQL));
+            if (!Array.isArray(rows)) throw new Error('Invalid credential result');
+            if (!rows.length) return null;
+            const entry = ctx.util.tryParseJson(rows[0].value);
+            if (!entry || typeof entry !== 'object' || Array.isArray(entry) ||
+                (entry.key !== undefined && typeof entry.key !== 'string'))
+              throw {code:'credential-malformed', message:'OpenCode credential row is malformed.'};
+            return trim(entry.key);
+          }
+        } catch (error) {
+          if (error && error.code) throw error;
+          throw {code:'credential-unavailable',message:'OpenCode credential database cannot be read. Its imported auth file was not used.'};
+        }
+      }
+    }
     const path = inline ? null : dataPath(ctx, "auth.json");
     if (!inline && !ctx.host.fs.exists(path)) return null;
 
@@ -334,8 +360,7 @@
       const parsed = ctx.util.tryParseJson(text);
       if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
         if (inline) throw {code: "credential-malformed", message: "OPENCODE_AUTH_CONTENT must contain an auth JSON object."};
-        ctx.host.log.warn("opencode auth file is not valid json");
-        return null;
+        throw {code:'credential-malformed',message:'OpenCode auth file is not valid JSON.'};
       }
       const entry = parsed[PROVIDER_ID];
       if (!entry || typeof entry !== "object") return null;
@@ -343,25 +368,37 @@
       return key || null;
     } catch (e) {
       if (e && e.code) throw e;
-      ctx.host.log.warn("opencode auth read failed: " + String(e));
-      return null;
+      throw {code:'credential-unavailable',message:'OpenCode auth file cannot be read.'};
     }
   }
 
   function hasHistory(ctx) {
-    const result = queryRows(ctx, HISTORY_EXISTS_SQL);
+    const result = queryHistory(ctx, true);
     if (!result.ok) return { ok: false, present: false };
     return { ok: true, present: result.rows.length > 0 };
   }
 
+  function queryHistory(ctx, probeOnly) {
+    const schema = queryRows(ctx, TABLES_SQL);
+    if (!schema.ok) return schema;
+    const sql = historySQL(schema.rows.map(table => table.name));
+    if (!sql) return {ok:true,rows:[]};
+    return queryRows(ctx, probeOnly ? 'SELECT 1 AS present FROM (' + sql + ') LIMIT 1' : sql);
+  }
+
   function loadHistory(ctx) {
-    const result = queryRows(ctx, HISTORY_ROWS_SQL);
+    const result = queryHistory(ctx, false);
     if (!result.ok) return result;
 
     const rows = [];
+    const seen = new Set();
     for (let i = 0; i < result.rows.length; i += 1) {
       const row = result.rows[i];
       if (!row || typeof row !== "object") continue;
+      if (trim(row.id)) {
+        if (seen.has(row.id)) continue;
+        seen.add(row.id);
+      }
       const createdMs = readNumber(row.createdMs);
       const cost = readNumber(row.cost);
       if (createdMs === null || createdMs <= 0 || createdMs > Date.parse(ctx.nowIso)) continue;
@@ -608,7 +645,7 @@
       if (!cookie) throw "OpenCode Go session cookie is missing.";
       return fetchWebResult(ctx, cookie);
     }
-    const authKey = loadAuthKey(ctx);
+    const authKey = source === 'local' && !ctx.host.env.get('OPENCODE_AUTH_CONTENT') ? null : loadAuthKey(ctx);
     if (source === "api" && !authKey) throw "OpenCode Go API key missing. Set OPENCODE_GO_API_KEY.";
     if (authKey && source !== "local") {
       const result = fetchApiResult(ctx, authKey);

package/plugins/raycast/plugin.json

@@ -16,7 +16,7 @@
   ],
   "upstream": {
     "repository": "https://github.com/steipete/CodexBar",
-    "revision": "25bba9b7fd9ce83c33053958f7366e23b2dc8a82",
+    "revision": "6ba06fe9ec1522dd5c59e16810115bce28aa148f",
     "path": "Sources/CodexBarCore/Resources/Plugins/raycast.js",
     "sha256": "df8f6d185cb67fd9ec9b622d2321a6d4e5395576b9ab54b1725aac272c95ecb7",
     "license": "MIT"

package/plugins/replicate/plugin.json

@@ -16,7 +16,7 @@
   ],
   "upstream": {
     "repository": "https://github.com/steipete/CodexBar",
-    "revision": "25bba9b7fd9ce83c33053958f7366e23b2dc8a82",
+    "revision": "6ba06fe9ec1522dd5c59e16810115bce28aa148f",
     "path": "Sources/CodexBarCore/Resources/Plugins/replicate.js",
     "sha256": "d240c36fa142ee91ce90ae52a2c6814613d2d5533a00c8a4c7ecec2f9386006c",
     "license": "MIT"

package/plugins/typesafe/plugin.json

@@ -16,7 +16,7 @@
   ],
   "upstream": {
     "repository": "https://github.com/steipete/CodexBar",
-    "revision": "25bba9b7fd9ce83c33053958f7366e23b2dc8a82",
+    "revision": "6ba06fe9ec1522dd5c59e16810115bce28aa148f",
     "path": "Sources/CodexBarCore/Resources/Plugins/typesafe.js",
     "sha256": "eb3941346a966b3f5f9e0010f17edaeed7dfb6c8b0331319a86f26da10d51980",
     "license": "MIT"

package/plugins/v0/plugin.json

@@ -16,7 +16,7 @@
   ],
   "upstream": {
     "repository": "https://github.com/steipete/CodexBar",
-    "revision": "25bba9b7fd9ce83c33053958f7366e23b2dc8a82",
+    "revision": "6ba06fe9ec1522dd5c59e16810115bce28aa148f",
     "path": "Sources/CodexBarCore/Resources/Plugins/v0.js",
     "sha256": "5f54a9329dca35d59d76e427c34d4d9db8d3400d0b38c5fcee8899928a900019",
     "license": "MIT"

package/plugins/vercel/plugin.json

@@ -15,7 +15,7 @@
   ],
   "upstream": {
     "repository": "https://github.com/steipete/CodexBar",
-    "revision": "25bba9b7fd9ce83c33053958f7366e23b2dc8a82",
+    "revision": "6ba06fe9ec1522dd5c59e16810115bce28aa148f",
     "path": "Sources/CodexBarCore/Resources/Plugins/vercel.js",
     "sha256": "27b39f42709e93a2cfbf850171f198069553c99967f9b7ba6d16614862cb084a",
     "license": "MIT"

package/plugins/workbuddy/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Peter Steinberger
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/plugins/workbuddy/icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path fill="currentColor" d="M2 5h3.2l2.3 9.2L10.2 5h3.6l2.7 9.2L18.8 5H22l-4 14h-3.2L12 9.6 9.2 19H6z"/></svg>

package/plugins/workbuddy/plugin.js

@@ -0,0 +1,227 @@
+// Generated by tools/vendor-codexbar-providers.cjs; see LICENSE.
+globalThis.__usagestat_bundled_options = {"labels":["Credits","Credits","Additional"],"defaults":{},"autoMode":"web"};
+function _nullishCoalesce(lhs, rhsFn) {
+  if (lhs != null) {
+    return lhs;
+  } else {
+    return rhsFn();
+  }
+}
+defineProvider({
+  id: "workbuddy",
+  name: "WorkBuddy",
+  endpoints: ["https://www.workbuddy.cn"],
+  settings: [
+    { key: "webTimeoutSeconds", title: "Web timeout", type: "plain" },
+    { key: "resetDeadlineMillis", title: "Reset lookup deadline", type: "plain" },
+    { key: "chromeMajorVersion", title: "Chrome major version", type: "plain" },
+  ],
+  capabilities: ["browser-cookies", "http-status"],
+  cookieDomains: ["workbuddy.cn", "www.workbuddy.cn"],
+  cookiePolicy: {
+    selection: "request-url",
+    cache: "validated-single-entry",
+    imports: "access-gated",
+  },
+  async fetchUsage(ctx) {
+    const origin = "https://www.workbuddy.cn";
+    const domain = "www.workbuddy.cn";
+    const policy = ctx.browser.availability(domain);
+    if (policy === "off") throw ctx.fail.missingCredential("WorkBuddy cookies are disabled.");
+    const timeoutRaw = Number(_nullishCoalesce(ctx.settings.get("webTimeoutSeconds"), () => "15"));
+    const timeoutSeconds = Number.isFinite(timeoutRaw) ? Math.min(30, Math.max(1, Math.round(timeoutRaw))) : 15;
+    // WorkBuddy binds the session to the browser User-Agent, and Chrome's reduced UA varies only by major version.
+    // The previous major covers an installed update that Chrome has not relaunched into yet.
+    const major = Number(_nullishCoalesce(ctx.settings.get("chromeMajorVersion"), () => ""));
+    const userAgent = (version) =>
+      `Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/${version}.0.0.0 Safari/537.36`;
+    const userAgents =
+      Number.isSafeInteger(major) && major > 1 ? [userAgent(major), userAgent(major - 1)] : [undefined];
+
+    const fail = (field) => {
+      throw ctx.fail.parseFailure(`Invalid WorkBuddy billing response: ${field}`);
+    };
+    const object = (value, field) =>
+      value !== null && typeof value === "object" && !Array.isArray(value) ? value : fail(field);
+    // Billing amounts arrive as decimal strings ("500"); numbers are accepted for robustness.
+    const amount = (value, field) => {
+      if (typeof value === "number") return Number.isFinite(value) && value >= 0 ? value : fail(field);
+      if (typeof value !== "string" || !/^\d+(?:\.\d+)?$/.test(value.trim())) return fail(field);
+      const parsed = Number(value.trim());
+      return Number.isFinite(parsed) ? parsed : fail(field);
+    };
+    const text = (value) => (typeof value === "string" ? value.trim() || undefined : undefined);
+    const format = (value) => ctx.format.number(value, { maximumFractionDigits: 2 });
+    const decode = (bodyText, field) => {
+      let value;
+      try {
+        value = JSON.parse(bodyText);
+      } catch (error) {
+        void error;
+        return fail(field);
+      }
+      return object(value, field);
+    };
+
+    const sessionExpired = ctx.fail.authenticationExpired(
+      "WorkBuddy session expired. Sign in at www.workbuddy.cn or paste a fresh Cookie header.",
+    );
+    const post = async (session, agent, path, body, requestTimeout = timeoutSeconds) => {
+      const headers = {
+        Accept: "application/json",
+        Origin: origin,
+        Referer: `${origin}/profile/plans-usage`,
+      };
+      if (agent) headers["User-Agent"] = agent;
+      const response = await ctx.http.post(`${origin}${path}`, {
+        body,
+        timeoutSeconds: requestTimeout,
+        cookieSession: session.id,
+        headers,
+      });
+      if (response.status === 401) throw sessionExpired;
+      if (response.status === 403) throw ctx.fail.permissionDenied("WorkBuddy denied access to billing data.");
+      if (response.status === 429) throw ctx.fail.rateLimited("WorkBuddy billing requests are rate limited.");
+      if (response.status >= 500) {
+        throw ctx.fail.providerUnavailable(`WorkBuddy billing API returned HTTP ${response.status}.`);
+      }
+      if (response.status !== 200) throw ctx.fail.apiFailure(`WorkBuddy billing API returned HTTP ${response.status}.`);
+      const root = decode(response.bodyText, "expected a JSON object");
+      if (root.code !== 0) {
+        throw ctx.fail.apiFailure(`WorkBuddy billing API returned code ${String(root.code)}.`);
+      }
+      return object(root.data, "data");
+    };
+
+    // Cycle timestamps carry no zone. The billing cycle follows China Standard Time calendar months.
+    const cycleEnd = (value) => {
+      const raw = text(value);
+      if (!raw) return undefined;
+      const match = /^(\d{4}-\d{2}-\d{2}) (\d{2}:\d{2}:\d{2})$/.exec(raw);
+      if (!match) return undefined;
+      const end = ctx.date.iso(`${match[1]}T${match[2]}+08:00`);
+      // The dashboard refreshes one second after the inclusive end time.
+      return new Date(end.getTime() + 1000);
+    };
+    // Package codes the WorkBuddy client sends for its paid and free listings (WorkBuddy 5.6.2).
+    const paidPackageCodes = [
+      "TCACA_code_002_AkiJS3ZHF5",
+      "TCACA_code_005_maRGyrHhw1",
+      "TCACA_code_003_FAnt7lcmRT",
+      "TCACA_code_023_4xbGhMrE6q",
+      "TCACA_code_026_BaESVICNoi",
+      "TCACA_code_027_0FCGVA6vSa",
+      "TCACA_code_009_0XmEQc2xOf",
+      "TCACA_code_038_OhvqZtiPKr",
+      "TCACA_code_036_lupO5WgNdG",
+    ];
+    const freePackageCodes = [
+      "TCACA_code_001_PqouKr6QWV",
+      "TCACA_code_008_cfWoLwvjU4",
+      "TCACA_code_035_ArVxJcGDsm",
+      "TCACA_code_006_DbXS0lrypC",
+      "TCACA_code_039_KRcQj7wUat",
+      "TCACA_code_040_mi9rCYg46x",
+      "TCACA_code_007_nzdH5h4Nl0",
+      "TCACA_code_028_NtpWi0jzXs",
+      "TCACA_code_037_WxOD3MpI2o",
+      "TCACA_code_029_6wCGEWquYy",
+      "TCACA_code_030_BjSt89qTvr",
+    ];
+    // Reset time is optional: a failed or unexpected package listing must not discard the balance.
+    const nextReset = async (session, agent) => {
+      const now = ctx.date.now().getTime();
+      // Share five seconds across listings, retaining the host's margin for publishing the balance.
+      const hostDeadline = Number(ctx.settings.get("resetDeadlineMillis"));
+      const deadline = Math.min(Date.now() + 5000, hostDeadline > 0 ? hostDeadline : Infinity);
+      let earliest;
+      for (const [path, codes] of [
+        ["/billing/meter/get-user-resource-paid-packages", paidPackageCodes],
+        ["/billing/meter/get-user-resource-free-packages", freePackageCodes],
+      ]) {
+        const budget = (deadline - Date.now()) / 1000;
+        if (budget < 1) break;
+        try {
+          // The listings reject requests without package codes (HTTP 400, code 10001). Status 0 is valid, 3 used up.
+          const page = await post(
+            session,
+            agent,
+            path,
+            { PageNumber: 1, PageSize: 100, PackageCodes: codes, Status: [0, 3] },
+            Math.min(timeoutSeconds, budget),
+          );
+          if (!Array.isArray(page.Accounts)) continue;
+          for (const raw of page.Accounts) {
+            if (raw === null || typeof raw !== "object" || Array.isArray(raw)) continue;
+            const account = raw;
+            if (account.CapacityUnit !== "credits") continue;
+            const end = cycleEnd(account.CycleEndTime);
+            if (end && end.getTime() > now && (!earliest || end.getTime() < earliest.getTime())) earliest = end;
+          }
+        } catch (error) {
+          const failure = error;
+          if (failure.transportClass === "cancelled") throw error;
+        }
+      }
+      return earliest;
+    };
+
+    let rejected = false;
+    for await (const session of ctx.browser.sessions(domain)) {
+      let summary;
+      let agent;
+      for (const candidate of userAgents) {
+        try {
+          summary = await post(session, candidate, "/billing/meter/get-user-resource-summary", {});
+          agent = candidate;
+          break;
+        } catch (error) {
+          if (error !== sessionExpired) throw error;
+        }
+      }
+      if (!summary) {
+        rejected = true;
+        ctx.browser.rejectCookie(domain, session);
+        if (policy === "manual") break;
+        continue;
+      }
+
+      if (!Array.isArray(summary.Packages)) return fail("Packages");
+      // The host caches an imported session only after the billing API accepts it.
+      if (policy !== "manual") ctx.browser.acceptCookie(domain, session);
+      let total = 0;
+      let remaining = 0;
+      let frozen = 0;
+      for (const raw of summary.Packages) {
+        const item = object(raw, "package");
+        if (item.CapacityUnit !== "credits") continue;
+        total += amount(item.CycleTotalCapacity, "CycleTotalCapacity");
+        remaining += amount(item.CycleRemainCapacity, "CycleRemainCapacity");
+        if (item.CycleFrozenCapacity !== undefined) frozen += amount(item.CycleFrozenCapacity, "CycleFrozenCapacity");
+      }
+      const plan = text(summary.SubscriptionPackageName);
+      // Frozen credits are listed as reported; the meter uses the remaining amount the dashboard shows.
+      const rows = frozen > 0 ? [{ label: "Reserved", value: format(frozen) }] : [];
+      if (total <= 0) {
+        rows.unshift({ label: "Left", value: format(remaining) }, { label: "Total", value: format(total) });
+      }
+      return {
+        primary:
+          total > 0
+            ? {
+                usedPercent: ctx.pct(Math.max(0, total - remaining), total),
+                resetsAt: await nextReset(session, agent),
+                resetDescription: `${format(remaining)} / ${format(total)} credits left`,
+              }
+            : undefined,
+        details: rows.length ? [{ title: "Credits", rows }] : undefined,
+        identity: plan ? { loginMethod: plan } : undefined,
+        dataConfidence: "exact",
+      };
+    }
+    if (rejected) throw sessionExpired;
+    throw ctx.fail.missingCredential(
+      `No WorkBuddy session cookies found. Sign in at www.workbuddy.cn (${ctx.browser.supportedBrowsers}) or paste a Cookie header.`,
+    );
+  },
+});