@hashimkarim/usagestat-linux-x64-gnu 2.0.2 → 2.2.0

package/plugins/claudeplatform/plugin.js

@@ -0,0 +1,244 @@
+// Generated by tools/vendor-codexbar-providers.cjs; see LICENSE.
+globalThis.__usagestat_bundled_options = {"labels":["Credits","Additional","Additional"],"defaults":{},"autoMode":"web","balanceOnly":true};
+(function(defineProvider) {
+// BEGIN UPSTREAM Sources/CodexBarCore/Resources/Plugins/claudeplatform.js
+function _nullishCoalesce(lhs, rhsFn) {
+  if (lhs != null) {
+    return lhs;
+  } else {
+    return rhsFn();
+  }
+}
+defineProvider({
+  id: "claudeplatform",
+  name: "Claude Platform",
+  settings: [],
+  endpoints: ["https://platform.claude.com"],
+  capabilities: ["browser-cookies", "http-status"],
+  cookieDomains: ["platform.claude.com"],
+  cookiePolicy: {
+    selection: "request-url",
+    cache: "nonpersistent",
+    imports: "access-gated",
+    requiredCookies: ["sessionKey"],
+  },
+  async fetchUsage(ctx) {
+    const domain = "platform.claude.com";
+    if (ctx.browser.availability(domain) === "off")
+      throw ctx.fail.missingCredential("Claude Platform cookies are disabled.");
+
+    const invalid = (field) => {
+      throw ctx.fail.parseFailure(
+        `Could not parse Claude Console ${field}. The Console response format may have changed; update CodexBar or report this.`,
+      );
+    };
+    const object = (value, field) =>
+      value !== null && typeof value === "object" && !Array.isArray(value) ? value : invalid(field);
+    const minorUnits = (value, field) =>
+      typeof value === "number" && Number.isSafeInteger(value) ? value : invalid(field);
+    const text = (value) => (typeof value === "string" && value.trim() ? value.trim() : undefined);
+    // A malformed date means an unknown expiry, never a failed refresh.
+    const timestamp = (value) => {
+      const raw = text(value);
+      if (!raw || !/^\d{4}-\d{2}-\d{2}T/.test(raw) || !Number.isFinite(Date.parse(raw))) return undefined;
+      try {
+        const date = ctx.date.iso(raw);
+        return Number.isFinite(date.getTime()) ? date : undefined;
+      } catch (error) {
+        void error;
+        return undefined;
+      }
+    };
+    const months = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
+    const now = ctx.date.now();
+    // Console grants expire at UTC midnight; show that UTC calendar date instead of shifting it into the local zone.
+    const expiry = (date) => {
+      const [year, month, day] = date.toISOString().slice(0, 10).split("-").map(Number);
+      const label = `${months[month - 1]} ${day}`;
+      return `Expires ${year === now.getUTCFullYear() ? label : `${label}, ${year}`} (UTC)`;
+    };
+    const sessionRejected = ctx.fail.authenticationExpired("Claude Console session expired.");
+    const billingDenied = ctx.fail.permissionDenied(
+      "Claude Console billing access was denied. Ask the organization owner for billing access.",
+    );
+    let rejected = false;
+    for await (const session of ctx.browser.sessions(domain)) {
+      const request = async (path, forbidden) => {
+        const response = await ctx.http.get(`https://${domain}${path}`, {
+          cookieSession: session.id,
+          headers: { Accept: "application/json" },
+        });
+        if (response.status === 401) throw sessionRejected;
+        if (response.status === 403) throw forbidden;
+        if (response.status === 429) {
+          throw ctx.fail.rateLimited("Claude Console requests are rate limited. Try again in a few minutes.");
+        }
+        if (response.status >= 500) {
+          throw ctx.fail.providerUnavailable("Claude Console is unavailable. Try again later.");
+        }
+        if (response.status !== 200) {
+          throw ctx.fail.apiFailure(`Claude Console returned HTTP ${response.status}. Try again later or report this.`);
+        }
+        try {
+          return JSON.parse(response.bodyText);
+        } catch (error) {
+          void error;
+          return invalid("JSON response");
+        }
+      };
+      try {
+        // The organizations list doubles as the session check; a rejected cookie answers 403.
+        const organizations = await request("/api/organizations", sessionRejected);
+        if (!Array.isArray(organizations)) return invalid("organizations");
+        // Claude.ai chat organizations share this list; only API organizations own Console billing.
+        const candidates = organizations
+          .map((value) => object(value, "organization"))
+          .filter((value) => Array.isArray(value.capabilities) && value.capabilities.some((item) => item === "api"))
+          .map((organization) => {
+            const id = text(organization.uuid);
+            if (!id || !/^[A-Za-z0-9-]{1,64}$/.test(id)) return invalid("organization ID");
+            return { id, name: text(organization.name) };
+          });
+        if (candidates.length === 0)
+          throw ctx.fail.permissionDenied(
+            "This Claude account has no Claude Console API organization. Create one at platform.claude.com.",
+          );
+
+        // Try API organizations in listed order; the first one whose billing this member can read wins.
+        let selected;
+        for (const candidate of candidates) {
+          try {
+            const credits = object(
+              await request(`/api/organizations/${candidate.id}/prepaid/credits`, billingDenied),
+              "credit balance",
+            );
+            selected = { ...candidate, credits };
+            break;
+          } catch (error) {
+            if (error !== billingDenied) throw error;
+          }
+        }
+        if (!selected) throw billingDenied;
+        const credits = selected.credits;
+        const currency = _nullishCoalesce(text(credits.currency), () => "USD");
+        if (!/^[A-Z]{3}$/.test(currency)) return invalid("currency");
+        let exponent = 2;
+        if (credits.balance !== undefined && credits.balance !== null) {
+          const reported = object(
+            _nullishCoalesce(object(credits.balance, "balance").credits, () => ({})),
+            "balance credits",
+          ).exponent;
+          if (reported !== undefined && reported !== null) {
+            if (typeof reported !== "number" || !Number.isInteger(reported) || reported < 0 || reported > 4)
+              return invalid("currency exponent");
+            exponent = reported;
+          }
+        }
+        const scale = 10 ** exponent;
+        const money = (minor) => ctx.format.currency(minor / scale, currency);
+        const balance = minorUnits(credits.amount, "credit balance") / scale;
+
+        const grants = [];
+        for (const [field, purchased] of [
+          ["promo_tranches", false],
+          ["tranches", true],
+        ]) {
+          const list = credits[field];
+          if (list === undefined || list === null) continue;
+          if (!Array.isArray(list)) return invalid(field);
+          for (const raw of list) {
+            const tranche = object(raw, "credit grant");
+            const granted = minorUnits(tranche.granted_amount_minor_units, "granted credit");
+            const remaining = minorUnits(tranche.remaining_amount_minor_units, "remaining credit");
+            const expiresAt = timestamp(tranche.expires_at);
+            if (granted <= 0 || (expiresAt && expiresAt.getTime() <= now.getTime())) continue;
+            grants.push({
+              label: _nullishCoalesce(text(tranche.name), () => (purchased ? "Purchased credit" : "API credit")),
+              program: text(tranche.program_id),
+              purchased,
+              remaining: Math.max(0, remaining),
+              granted,
+              expiresAt,
+            });
+          }
+        }
+        grants.sort((lhs, rhs) => {
+          if (!lhs.expiresAt && !rhs.expiresAt) return 0;
+          if (!lhs.expiresAt) return 1;
+          if (!rhs.expiresAt) return -1;
+          return lhs.expiresAt.getTime() - rhs.expiresAt.getTime();
+        });
+        // The soonest-expiring grant that still has credit is the one about to be lost. An exhausted subscription
+        // grant is not a lane: the menu bar falls back to purchased credit and the grant moves to the detail list.
+        const subscription = grants.find((grant) => grant.program === "subscription_api_credit" && grant.remaining > 0);
+        const purchasedGrants = grants.filter((grant) => grant.purchased);
+        const purchased = _nullishCoalesce(
+          purchasedGrants.find((grant) => grant.remaining > 0),
+          () => purchasedGrants[0],
+        );
+        const amounts = (grant) => `${money(grant.remaining)} of ${money(grant.granted)} left`;
+        const [primary, secondary] = [subscription, purchased].map((grant) =>
+          grant
+            ? {
+                usedPercent: ctx.pct(grant.granted - grant.remaining, grant.granted),
+                resetDescription: grant.expiresAt ? `${amounts(grant)} · ${expiry(grant.expiresAt)}` : amounts(grant),
+              }
+            : undefined,
+        );
+
+        const details = [];
+        const otherGrants = grants.filter((grant) => grant !== subscription && grant !== purchased);
+        if (otherGrants.length > 0) {
+          details.push({
+            title: "Other credit grants",
+            rows: otherGrants.map((grant) => ({
+              label: grant.label,
+              value: amounts(grant),
+              secondaryValue: grant.expiresAt ? expiry(grant.expiresAt) : null,
+              progress: (grant.granted - Math.min(grant.remaining, grant.granted)) / grant.granted,
+            })),
+          });
+        }
+
+        // Spend is optional: a broken report must not discard an authenticated balance.
+        let spendRow;
+        try {
+          const spend = object(
+            await request(`/api/organizations/${selected.id}/current_spend`, billingDenied),
+            "spend",
+          );
+          const amount = minorUnits(spend.amount, "spend");
+          if (amount < 0) return invalid("spend");
+          spendRow = { label: "This month (UTC)", value: money(amount) };
+        } catch (error) {
+          if (error.transportClass === "cancelled") throw error;
+          spendRow = { label: "Spend", value: "Unavailable" };
+        }
+        details.push({ title: "Billing", rows: [spendRow] });
+
+        return {
+          primary,
+          secondary,
+          cost: { used: balance, currency, period: "Prepaid credits", balance },
+          details,
+          identity: { organization: selected.name, loginMethod: "Console session" },
+          dataConfidence: "exact",
+        };
+      } catch (error) {
+        if (error !== sessionRejected) throw error;
+        ctx.browser.rejectCookie(domain, session);
+        rejected = true;
+      }
+    }
+    if (rejected)
+      throw ctx.fail.authenticationExpired(
+        "Claude Console session expired. Sign in at platform.claude.com or paste a fresh Cookie header.",
+      );
+    throw ctx.fail.missingCredential(
+      `Sign in at platform.claude.com. Supported browsers: ${ctx.browser.supportedBrowsers}. Or paste its Cookie header.`,
+    );
+  },
+});
+
+// END UPSTREAM
+})(globalThis.defineProvider);

package/plugins/claudeplatform/plugin.json

@@ -0,0 +1,25 @@
+{
+  "schemaVersion": 1,
+  "id": "claudeplatform",
+  "name": "Claude Platform",
+  "version": "0.1.0",
+  "entry": "plugin.js",
+  "enabledByDefault": false,
+  "supportedModes": [
+    "web"
+  ],
+  "autoMode": "web",
+  "usageDashboardUrl": "https://platform.claude.com/settings/billing",
+  "webUrl": "https://platform.claude.com",
+  "envVars": [
+    "CLAUDEPLATFORM_COOKIE"
+  ],
+  "setupFields": [],
+  "upstream": {
+    "repository": "https://github.com/steipete/CodexBar",
+    "revision": "1f6da9bec44455288ddee5ef6f3617a803d8eb2a",
+    "path": "Sources/CodexBarCore/Resources/Plugins/claudeplatform.js",
+    "sha256": "d3c61855621fd4e5b5b753bdd223524e0ee7f4b55cfd63f24f23516ac33027e8",
+    "license": "MIT"
+  }
+}

package/plugins/codex/plugin.js

@@ -375,12 +375,18 @@
   function formatCodexPlan(ctx, planType) {
     const rawPlan = typeof planType === "string" ? planType.trim() : ""
     if (!rawPlan) return null
-    if (rawPlan.toLowerCase() === "prolite") return "Pro 5x"
-    if (rawPlan.toLowerCase() === "pro") return "Pro 20x"
+    if (rawPlan.toLowerCase() === "prolite") return "Pro 100"
+    if (rawPlan.toLowerCase() === "pro") return "Pro 200"
+    if (rawPlan.toLowerCase() === "promax") return "Pro 500"
     if (rawPlan.toLowerCase() === "self_serve_business_prolite") return "Business Premium"
     return ctx.fmt.planLabel(rawPlan) || null
   }
 
+  function reportedPeriod(window, fallback) {
+    const seconds = window && window.limit_window_seconds
+    return typeof seconds === "number" && Number.isFinite(seconds) && seconds > 0 ? seconds * 1000 : fallback
+  }
+
   function getResetsAtIso(ctx, nowSec, window) {
     if (!window) return null
     if (typeof window.reset_at === "number") {
@@ -779,12 +785,12 @@
 
       if (headerPrimary !== null) {
         lines.push(ctx.line.progress({
-          label: "Session",
+          label: reportedPeriod(primaryWindow, PERIOD_SESSION_MS) === 30*86400000 ? "Monthly" : "Session",
           used: headerPrimary,
           limit: 100,
           format: { kind: "percent" },
           resetsAt: getResetsAtIso(ctx, nowSec, primaryWindow),
-          periodDurationMs: PERIOD_SESSION_MS
+          periodDurationMs: reportedPeriod(primaryWindow, PERIOD_SESSION_MS)
         }))
       }
       if (headerSecondary !== null) {
@@ -794,19 +800,19 @@
           limit: 100,
           format: { kind: "percent" },
           resetsAt: getResetsAtIso(ctx, nowSec, secondaryWindow),
-          periodDurationMs: PERIOD_WEEKLY_MS
+          periodDurationMs: reportedPeriod(secondaryWindow, PERIOD_WEEKLY_MS)
         }))
       }
 
       if (lines.length === 0 && data.rate_limit) {
         if (data.rate_limit.primary_window && typeof data.rate_limit.primary_window.used_percent === "number") {
           lines.push(ctx.line.progress({
-            label: "Session",
+            label: reportedPeriod(primaryWindow, PERIOD_SESSION_MS) === 30*86400000 ? "Monthly" : "Session",
             used: data.rate_limit.primary_window.used_percent,
             limit: 100,
             format: { kind: "percent" },
             resetsAt: getResetsAtIso(ctx, nowSec, primaryWindow),
-            periodDurationMs: PERIOD_SESSION_MS
+            periodDurationMs: reportedPeriod(primaryWindow, PERIOD_SESSION_MS)
           }))
         }
         if (data.rate_limit.secondary_window && typeof data.rate_limit.secondary_window.used_percent === "number") {
@@ -816,7 +822,7 @@
             limit: 100,
             format: { kind: "percent" },
             resetsAt: getResetsAtIso(ctx, nowSec, secondaryWindow),
-            periodDurationMs: PERIOD_WEEKLY_MS
+            periodDurationMs: reportedPeriod(secondaryWindow, PERIOD_WEEKLY_MS)
           }))
         }
       }

package/plugins/codex/plugin.json

@@ -13,10 +13,14 @@
     },
     {
       "label": "Usage dashboard",
-      "url": "https://chatgpt.com/codex/cloud/settings/analytics#usage"
+      "url": "https://chatgpt.com/settings/usage?tab=overview"
     }
   ],
-  "supportedModes": ["oauth", "local", "web"],
+  "supportedModes": [
+    "oauth",
+    "local",
+    "web"
+  ],
   "autoMode": "oauth",
   "webUrl": "https://chatgpt.com",
   "lines": [
@@ -77,6 +81,11 @@
       "type": "barChart",
       "label": "Usage Trend",
       "scope": "detail"
+    },
+    {
+      "type": "progress",
+      "label": "Monthly",
+      "scope": "overview"
     }
   ]
 }

package/plugins/cosmic/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Peter Steinberger
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/plugins/cosmic/icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path fill="currentColor" d="M16 4a9 9 0 1 0 0 16l-2-3a5.5 5.5 0 1 1 0-10Z"/><path fill="currentColor" d="m19 3 1.2 3.8L24 8l-3.8 1.2L19 13l-1.2-3.8L14 8l3.8-1.2Z"/></svg>

package/plugins/cosmic/plugin.js

@@ -0,0 +1,134 @@
+// Generated by tools/vendor-codexbar-providers.cjs; see LICENSE.
+globalThis.__usagestat_bundled_options = {"labels":["Input tokens","Output tokens","Additional"],"defaults":{},"autoMode":"api"};
+(function(defineProvider) {
+// BEGIN UPSTREAM Sources/CodexBarCore/Resources/Plugins/cosmic.js
+function _optionalChain(ops) {
+  let lastAccessLHS = undefined;
+  let value = ops[0];
+  let i = 1;
+  while (i < ops.length) {
+    const op = ops[i];
+    const fn = ops[i + 1];
+    i += 2;
+    if ((op === "optionalAccess" || op === "optionalCall") && value == null) {
+      return undefined;
+    }
+    if (op === "access" || op === "optionalAccess") {
+      lastAccessLHS = value;
+      value = fn(value);
+    } else if (op === "call" || op === "optionalCall") {
+      value = fn((...args) => value.call(lastAccessLHS, ...args));
+      lastAccessLHS = undefined;
+    }
+  }
+  return value;
+}
+defineProvider({
+  id: "cosmic",
+  name: "Cosmic AI",
+  endpoints: ["https://dapi.cosmicjs.com"],
+  auth: { type: "bearer", secret: "COSMIC_TOKEN" },
+  settings: [
+    { key: "COSMIC_TOKEN", title: "Personal Access Token", type: "secure" },
+    { key: "COSMIC_PROJECT_ID", title: "Project ID", type: "plain" },
+  ],
+  capabilities: ["http-status"],
+  async fetchUsage(ctx) {
+    const project = _optionalChain([
+      ctx,
+      "access",
+      (_) => _.settings,
+      "access",
+      (_2) => _2.get,
+      "call",
+      (_3) => _3("COSMIC_PROJECT_ID"),
+      "optionalAccess",
+      (_4) => _4.trim,
+      "call",
+      (_5) => _5(),
+    ]);
+    if (!project) throw ctx.fail.missingCredential("Set a Cosmic Project ID in Settings or COSMIC_PROJECT_ID.");
+    const response = await ctx.http.get(
+      `https://dapi.cosmicjs.com/v3/projects/usage?project_id=${encodeURIComponent(project)}`,
+      { headers: { Origin: "https://app.cosmicjs.com" } },
+    );
+    const message = `Cosmic AI returned HTTP ${response.status}.`;
+    if (response.status === 401) throw ctx.fail.authenticationExpired(message);
+    if (response.status === 403) throw ctx.fail.permissionDenied(message);
+    if (response.status === 429) throw ctx.fail.rateLimited(message);
+    if (response.status >= 500) throw ctx.fail.providerUnavailable(message);
+    if (response.status !== 200) throw ctx.fail.apiFailure(message);
+    const fail = () => {
+      throw ctx.fail.parseFailure("Cosmic AI returned an unrecognized project AI-token usage response.");
+    };
+    const record = (value) => (value && typeof value === "object" && !Array.isArray(value) ? value : undefined);
+    let decoded;
+    try {
+      decoded = JSON.parse(response.bodyText);
+    } catch (error) {
+      void error;
+      return fail();
+    }
+    const root = record(decoded);
+    const usage = record(
+      _optionalChain([
+        record,
+        "call",
+        (_6) => _6(_optionalChain([root, "optionalAccess", (_7) => _7.usage])),
+        "optionalAccess",
+        (_8) => _8.ai,
+      ]),
+    );
+    const allowance = record(
+      _optionalChain([
+        record,
+        "call",
+        (_9) => _9(_optionalChain([root, "optionalAccess", (_10) => _10.plan_info])),
+        "optionalAccess",
+        (_11) => _11.ai_tokens,
+      ]),
+    );
+    const count = (value) => {
+      if (value === undefined || value === null) return undefined;
+      return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : fail();
+    };
+    const limit = (value) => {
+      if (typeof value !== "string") return count(value);
+      const match = /^(\d+(?:\.\d+)?)\s*([km]?)$/i.exec(value.trim());
+      if (!match) return undefined;
+      return count(Number(match[1]) * (match[2].toLowerCase() === "m" ? 1000000 : match[2] ? 1000 : 1));
+    };
+    const details = [];
+    const window = (name, rawUsed, rawLimit) => {
+      const used = count(rawUsed);
+      const total = limit(rawLimit);
+      const rows = [];
+      if (used !== undefined) rows.push({ label: "Used", value: ctx.format.number(used) });
+      if (total !== undefined) rows.push({ label: "Allowance", value: ctx.format.number(total) });
+      else if (typeof rawLimit === "string" && rawLimit.trim()) {
+        rows.push({ label: "Allowance", value: /^unlimited$/i.test(rawLimit.trim()) ? "Unlimited" : "Not reported" });
+      }
+      if (used !== undefined && total !== undefined) {
+        rows.push({ label: "Remaining", value: ctx.format.number(Math.max(0, total - used)) });
+        if (used > total) rows.push({ label: "Above allowance", value: ctx.format.number(used - total) });
+      }
+      if (rows.length) details.push({ title: name, rows });
+      return used !== undefined && total !== undefined && total > 0 ? { usedPercent: ctx.pct(used, total) } : undefined;
+    };
+    const primary = window(
+      "Input tokens",
+      _optionalChain([usage, "optionalAccess", (_12) => _12.input_tokens]),
+      _optionalChain([allowance, "optionalAccess", (_13) => _13.max_input]),
+    );
+    const secondary = window(
+      "Output tokens",
+      _optionalChain([usage, "optionalAccess", (_14) => _14.output_tokens]),
+      _optionalChain([allowance, "optionalAccess", (_15) => _15.max_output]),
+    );
+    if (!details.length) return fail();
+    return { primary, secondary, details, dataConfidence: "exact" };
+  },
+});
+
+// END UPSTREAM
+})(globalThis.defineProvider);

package/plugins/cosmic/plugin.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": 1,
+  "id": "cosmic",
+  "name": "Cosmic AI",
+  "version": "0.1.0",
+  "entry": "plugin.js",
+  "enabledByDefault": false,
+  "supportedModes": [
+    "api"
+  ],
+  "autoMode": "api",
+  "usageDashboardUrl": "https://app.cosmicjs.com",
+  "envVars": [
+    "COSMIC_TOKEN",
+    "COSMIC_PROJECT_ID"
+  ],
+  "setupFields": [
+    {
+      "key": "COSMIC_PROJECT_ID",
+      "title": "Project ID",
+      "type": "string",
+      "description": "Provider-specific account or source selection."
+    }
+  ],
+  "upstream": {
+    "repository": "https://github.com/steipete/CodexBar",
+    "revision": "1f6da9bec44455288ddee5ef6f3617a803d8eb2a",
+    "path": "Sources/CodexBarCore/Resources/Plugins/cosmic.js",
+    "sha256": "eb869360f719b3b3b96311617c173e624efa05b91c0f7d31ce985f0a3a77d7a6",
+    "license": "MIT"
+  }
+}

package/plugins/cursor/plugin.js

@@ -1,4 +1,3 @@
-globalThis.__OPENUSAGE_PLUGIN_REGISTRATION_ID__ = "cursor";
 (function () {
   const KEYCHAIN_ACCESS_TOKEN_SERVICE = "cursor-access-token"
   const KEYCHAIN_REFRESH_TOKEN_SERVICE = "cursor-refresh-token"
@@ -198,15 +197,16 @@ globalThis.__OPENUSAGE_PLUGIN_REGISTRATION_ID__ = "cursor";
     const injected = readInjectedCredential(ctx)
     if (injected) return injected
 
-    const sqliteAccessToken = readStateValue(ctx, "cursorAuth/accessToken")
-    const sqliteRefreshToken = readStateValue(ctx, "cursorAuth/refreshToken")
+    const usable = value => typeof value === "string" && value.trim() && !value.trim().startsWith("cursor-safe-storage:") ? value.trim() : null
+    const sqliteAccessToken = usable(readStateValue(ctx, "cursorAuth/accessToken"))
+    const sqliteRefreshToken = usable(readStateValue(ctx, "cursorAuth/refreshToken"))
     if (sqliteAccessToken || sqliteRefreshToken) {
       return { accessToken: sqliteAccessToken, refreshToken: sqliteRefreshToken, source: "sqlite" }
     }
     // Generic CLI keychain targets are shared, not tied to an IDE variant.
     // They cannot represent Nightly or an explicitly selected database profile.
-    const keychainAccessToken = sharedCredentialsAllowed(ctx) ? readKeychainValue(ctx, KEYCHAIN_ACCESS_TOKEN_SERVICE) : null
-    const keychainRefreshToken = sharedCredentialsAllowed(ctx) ? readKeychainValue(ctx, KEYCHAIN_REFRESH_TOKEN_SERVICE) : null
+    const keychainAccessToken = sharedCredentialsAllowed(ctx) ? usable(readKeychainValue(ctx, KEYCHAIN_ACCESS_TOKEN_SERVICE)) : null
+    const keychainRefreshToken = sharedCredentialsAllowed(ctx) ? usable(readKeychainValue(ctx, KEYCHAIN_REFRESH_TOKEN_SERVICE)) : null
 
     if (keychainAccessToken || keychainRefreshToken) {
       return {
@@ -216,6 +216,13 @@ globalThis.__OPENUSAGE_PLUGIN_REGISTRATION_ID__ = "cursor";
       }
     }
 
+    if (sharedCredentialsAllowed(ctx) && (!ctx.provider?.instanceId || ctx.provider.instanceId === "cursor") && ctx.host.cursorPaths?.readCliAuth) {
+      try {
+        const cli = ctx.util.tryParseJson(ctx.host.cursorPaths.readCliAuth())
+        if (cli && (usable(cli.accessToken) || usable(cli.refreshToken)))
+          return {accessToken:usable(cli.accessToken),refreshToken:usable(cli.refreshToken),source:"cli-file"}
+      } catch (_) {}
+    }
     return {
       accessToken: null,
       refreshToken: null,
@@ -232,6 +239,8 @@ globalThis.__OPENUSAGE_PLUGIN_REGISTRATION_ID__ = "cursor";
       if (!credential) return null
       const accessToken = String(credential.accessToken || credential.sessionKey || "").trim()
       const refreshToken = String(credential.refreshToken || "").trim()
+      if (accessToken.startsWith("cursor-safe-storage:") || refreshToken.startsWith("cursor-safe-storage:"))
+        throw {code:"credential-malformed",message:"Cursor safe-storage values are encrypted, not provider access tokens."}
       if (!accessToken && !refreshToken) return null
       return {
         accessToken: accessToken || null,
@@ -239,6 +248,7 @@ globalThis.__OPENUSAGE_PLUGIN_REGISTRATION_ID__ = "cursor";
         source: "provider-account",
       }
     } catch (e) {
+      if (e && e.code) throw e
       ctx.host.log.warn("provider account credential read failed: " + String(e))
       return null
     }
@@ -313,6 +323,7 @@ globalThis.__OPENUSAGE_PLUGIN_REGISTRATION_ID__ = "cursor";
   }
 
   function persistAccessToken(ctx, source, accessToken) {
+    if (source === "cli-file") return false // The Cursor CLI owns its credential file.
     if (source === "provider-account") {
       try {
         if (ctx.host.credentials && typeof ctx.host.credentials.update === "function") {
@@ -1137,13 +1148,21 @@ globalThis.__OPENUSAGE_PLUGIN_REGISTRATION_ID__ = "cursor";
       if (!Number.isFinite(percent) || percent < 0) return result
       const resetMs = ctx.util.parseDateMs(usage.nextResetTimestampUtc)
       const startMs = ctx.util.parseDateMs(usage.currentPeriodStart)
+      const paid = usage.hasNonZeroIncludedLimit === true || usage.includedLimitZero === false
+      const requestsPrimary = result.lines.some(item => item.type === 'progress' && item.label === 'Requests')
+      if (usage.isUnified === true && paid && Number.isFinite(resetMs) && resetMs > Date.parse(ctx.nowIso) && !requestsPrimary) {
+        result.lines = result.lines.filter(item => !['Total usage','Cursor Models','Other Models','Grok Bot usage'].includes(item.label))
+        result.lines.unshift(ctx.line.progress({label:'Weekly',used:Math.min(100,percent),limit:100,format:{kind:'percent'},
+          resetsAt:ctx.util.toIso(resetMs),periodDurationMs:7*24*60*60*1000}))
+        return result
+      }
       const line = ctx.line.progress({
         label: "Grok Bot usage",
         used: Math.min(100, percent),
         limit: 100,
         format: { kind: "percent" },
         resetsAt: Number.isFinite(resetMs) ? ctx.util.toIso(resetMs) : undefined,
-        periodDurationMs: Number.isFinite(startMs) && Number.isFinite(resetMs) && resetMs > startMs
+        periodDurationMs: paid ? 7*24*60*60*1000 : Number.isFinite(startMs) && Number.isFinite(resetMs) && resetMs > startMs
           ? resetMs - startMs : 7 * 24 * 60 * 60 * 1000,
       })
       let insertAt = result.lines.length
@@ -1173,7 +1192,7 @@ globalThis.__OPENUSAGE_PLUGIN_REGISTRATION_ID__ = "cursor";
 
     if (!accessToken && !refreshTokenValue) {
       ctx.host.log.error("probe failed: no access or refresh token in sqlite/keychain")
-      throw "Not logged in. " + LOGIN_HINT
+      throw "Not logged in. Cursor encrypted sign-ins require `agent login` for the stable CLI, or explicit provider credentials. " + LOGIN_HINT
     }
 
     ctx.host.log.info("tokens loaded from " + authSource + ": accessToken=" + (accessToken ? "yes" : "no") + " refreshToken=" + (refreshTokenValue ? "yes" : "no"))
@@ -1195,7 +1214,7 @@ globalThis.__OPENUSAGE_PLUGIN_REGISTRATION_ID__ = "cursor";
         accessToken = refreshed
       } else if (!accessToken) {
         ctx.host.log.error("refresh failed and no access token available")
-        throw "Not logged in. " + LOGIN_HINT
+        throw "Not logged in. Cursor encrypted sign-ins require `agent login` for the stable CLI, or explicit provider credentials. " + LOGIN_HINT
       }
     }