CodexBar
Read CodexBar. Never mutate config/auth.
Run
skill="${CODEX_HOME:-$HOME/.codex}/skills/codexbar"
"$skill/scripts/codexbar" doctor
"$skill/scripts/codexbar" providers
"$skill/scripts/codexbar" usage
"$skill/scripts/codexbar" usage --provider codex
"$skill/scripts/codexbar" usage --all
All stdout: JSON. Upstream CodexBar shape kept. Less drift, fewer tokens.
Rules
- Start
doctorwhen install/config unknown. usagereads enabled providers. Prefer this.usage --provider IDreads one provider.usage --allexpensive; use only when needed.- Identities hidden by default.
--include-identitiesonly when user explicitly needs them. - Secrets always hidden.
- Helper read-only: fixed allowlist only. No config writes, auth repair, enable/disable, key storage.
- Timeout means upstream stuck. Narrow provider or raise
CODEXBAR_TIMEOUT(default 120 seconds).
Binary
Auto-find: CODEXBAR_BIN, PATH, app bundle, Homebrew cask. If missing: open CodexBar, Preferences > Advanced > Install CLI; or set CODEXBAR_BIN.
Each stdout/stderr stream capped at 1 MiB while fully drained. Timeout kills process group.