← All plugins

Agent Bar

by othavi0

LLM quota monitor for Claude, Codex, Amp, and Grok.

GitHub Homepage

Security review

Potentially dangerous behavior detected · 84 findings

High

Risk level: High
Analyzed commit: 1f8ef48
Scanned: 1 month ago

high persistence tests/cli.rs:604

Registers scheduled or boot-time system tasks.
```
systemd-run resolved via fake PATH shims in a tempdir that
```
high persistence tests/cli.rs:607

Registers scheduled or boot-time system tasks.
```
systemd-run --user --collect --unit=... -- <omarchy> plugin update
```
high persistence tests/cli.rs:616

Registers scheduled or boot-time system tasks.
```
systemd-run-argv.bin");
```
high persistence tests/cli.rs:618

Registers scheduled or boot-time system tasks.
```
systemd-run"),
```
high persistence tests/cli.rs:716

Registers scheduled or boot-time system tasks.
```
systemd-run-argv.bin");
```
high persistence tests/cli.rs:718

Registers scheduled or boot-time system tasks.
```
systemd-run"),
```
high persistence …/cli/mod.rs:350

Registers scheduled or boot-time system tasks.
```
systemd-run` must fail closed
```
high persistence …/cli/mod.rs:356

Registers scheduled or boot-time system tasks.
```
systemd-run")
```
high persistence …/cli/mod.rs:506

Registers scheduled or boot-time system tasks.
```
systemd-run")
```
Docs curl_pipe_sh …/specs/2026-05-23-install-script-design.md:14

curl output is executed by a shell (curl | sh pattern).
```
curl ... | bash`. Zero polução porque o script controla
```
Docs curl_pipe_sh …/specs/2026-05-23-install-script-design.md:53

curl output is executed by a shell (curl | sh pattern).
```
curl ... | bash` — script detecta install existente em `~/.agent-bar`,
```
Docs curl_pipe_sh …/specs/2026-05-23-install-script-design.md:62

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://bun.sh/install | bash`).
```
Docs curl_pipe_sh …/specs/2026-05-23-install-script-design.md:127

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://raw.githubusercontent.com/othavioquiliao/agent-bar/master/install.sh | bash
```

Docs curl_pipe_sh …/specs/2026-05-23-install-script-design.md:157

curl output is executed by a shell (curl | sh pattern).

curl \| bash` é controverso por segurança | Padrão da indústria, OSS, código visível no repo, GitHub URL canônica e versionada. |

Docs curl_pipe_sh …/specs/2026-06-19-rust-rewrite-design.md:325

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://ampcode.com/install.sh | bash`, contrato de display) + confirm + spawn.
```
Docs curl_pipe_sh …/specs/2026-06-20-rust-cutover-design.md:33

curl output is executed by a shell (curl | sh pattern).
```
curl|sh).
```
Docs curl_pipe_sh …/specs/2026-06-20-rust-cutover-design.md:133

curl output is executed by a shell (curl | sh pattern).
```
curl|bash atual (git clone + `bun install`) para:
```
Docs curl_pipe_sh …/plans/2026-07-21-v9-01-limpeza-legado.md:319

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://ampcode.com/install.sh | bash`
```
Docs curl_pipe_sh …/plans/2026-07-21-v9-01-limpeza-legado.md:364

curl output is executed by a shell (curl | sh pattern).
```
curl | bash` automaticamente. O instalador
```
Docs curl_pipe_sh …/plans/2026-07-21-v9-01-limpeza-legado.md:442

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://ampcode.com/install.sh | bash"
```
Docs curl_pipe_sh …/plans/2026-07-21-v9-01-limpeza-legado.md:456

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://ampcode.com/install.sh | bash"
```
Docs curl_pipe_sh …/plans/2026-07-21-v9-01-limpeza-legado.md:467

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://ampcode.com/install.sh | bash";
```
Docs curl_pipe_sh …/plans/2026-08-01-v11-06-cli-and-installer-copy.md:377

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://raw.githubusercontent.com/othavi0/agent-bar/master/install.sh | bash
```
Docs curl_pipe_sh …/plans/2026-06-19-rust-rewrite-04b-amp.md:107

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://ampcode.com/install.sh | bash";
```
Docs curl_pipe_sh …/plans/2026-06-19-rust-rewrite-04b-amp.md:201

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://ampcode.com/install.sh | bash");
```
Docs curl_pipe_sh …/plans/2026-07-21-v9-05-docs-release.md:373

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://ampcode.com/install.sh | bash
```
Docs curl_pipe_sh …/plans/2026-07-21-v9-05-docs-release.md:391

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://ampcode.com/install.sh | bash
```
Docs curl_pipe_sh …/plans/2026-06-19-rust-rewrite-01-foundation.md:104

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://ampcode.com/install.sh | bash";
```
Docs curl_pipe_sh …/plans/2026-06-21-rust-rewrite-08-cutover.md:405

curl output is executed by a shell (curl | sh pattern).
```
curl|bash (git clone + bun) pra baixar o tarball musl prebuilt.
```

Docs curl_pipe_sh …/plans/2026-06-21-rust-rewrite-08-cutover.md:532

curl output is executed by a shell (curl | sh pattern).

curl|bash), AUR (`yay -S agent-bar-bin`), `cargo binstall agent-bar`. Atualizar quick-start (rodar `agent-bar`, não `bun run start`). Manter o banner/feature list.

Docs curl_pipe_sh …/plans/2026-05-23-install-script.md:5

curl output is executed by a shell (curl | sh pattern).
```
curl|bash pattern).
```
Docs curl_pipe_sh …/plans/2026-05-23-install-script.md:7

curl output is executed by a shell (curl | sh pattern).
```
curl|bash como caminho primário; `bun add -g` vira alternativa documentada.
```
Docs curl_pipe_sh …/plans/2026-05-23-install-script.md:20

curl output is executed by a shell (curl | sh pattern).
```
curl|bash como primário.
```
Docs curl_pipe_sh …/plans/2026-05-23-install-script.md:43

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://raw.githubusercontent.com/othavioquiliao/agent-bar/master/install.sh | bash
```
Docs curl_pipe_sh …/plans/2026-05-23-install-script.md:112

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://bun.sh/install | bash"
```
Docs curl_pipe_sh …/plans/2026-05-23-install-script.md:351

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://raw.githubusercontent.com/othavioquiliao/agent-bar/master/install.sh | bash
```
Docs curl_pipe_sh …/plans/2026-05-23-install-script.md:391

curl output is executed by a shell (curl | sh pattern).
```
curl|bash; alternativa Bun
```
Docs curl_pipe_sh …/plans/2026-05-23-install-script.md:428

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL .../install.sh | bash`. Clones to `~/.agent-bar`, installs deps,
```
Docs curl_pipe_sh …/plans/2026-05-23-install-script.md:429

curl output is executed by a shell (curl | sh pattern).
```
curl|bash pattern used by
```
Docs curl_pipe_sh …/plans/2026-07-17-grok-provider.md:460

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL https://x.ai/cli/install.sh | bash")
```
Docs curl_pipe_sh CHANGELOG.md:903

curl output is executed by a shell (curl | sh pattern).
```
curl -fsSL .../install.sh | bash`. Clones to `~/.agent-bar`, installs deps,
```
Docs curl_pipe_sh CHANGELOG.md:904

curl output is executed by a shell (curl | sh pattern).
```
curl|bash pattern used by
```
Docs destructive_filesystem …/plans/2026-06-18-aur-distribution.md:301

Destructive operation on the root filesystem or a block device.
```
rm -rf /tmp/pkg /tmp/agent-bar-ci /tmp/agent-bar-*.tar.gz
```
Docs destructive_filesystem …/plans/2026-07-21-v9-03-widget-qml.md:1184

Destructive operation on the root filesystem or a block device.
```
rm -rf /tmp/agent-bar-widget-check /tmp/agent-bar-waybar-check
```
Docs persistence …/specs/2026-08-05-git-plugin-distribution-design.md:137

Registers scheduled or boot-time system tasks.
```
systemd-run --user -- omarchy plugin
```
Docs persistence …/specs/2026-08-05-git-plugin-distribution-design.md:143

Registers scheduled or boot-time system tasks.
```
systemd-run --user -- omarchy
```
Docs persistence …/plans/2026-08-05-git-plugin-distribution.md:7

Registers scheduled or boot-time system tasks.
```
systemd-run`. The whole tarball/transaction/worker machinery is deleted.
```

Docs persistence …/plans/2026-08-05-git-plugin-distribution.md:96

Registers scheduled or boot-time system tasks.

systemd-run --user --collect --unit=agent-bar-update-<txid>.service -- <abs-omarchy> plugin update agent-bar.usage --yes`, exits 0 on successful spawn. Stdout: one JSON `{"schemaVersion":1,"operation"

Docs persistence …/plans/2026-08-05-git-plugin-distribution.md:105

Registers scheduled or boot-time system tasks.
```
systemd-run replaced by a recording shim the same way.
```

Docs persistence …/plans/2026-08-05-git-plugin-distribution.md:114

Registers scheduled or boot-time system tasks.

systemd-run` absolute paths, build argv exactly `[systemd_run, "--user", "--collect", format!("--unit=agent-bar-update-{txid}.service"), "--", omarchy, "plugin", "update", "agent-bar.usage", "--yes"]`

Docs persistence …/plans/2026-08-05-git-plugin-distribution.md:125

Registers scheduled or boot-time system tasks.

systemd-run --user --collect --unit=agent-bar-remove-<txid>.service -- <abs-omarchy> plugin remove agent-bar.usage --yes`; stdout one JSON `{"schemaVersion":1,"operation":"uninstall","purged":<bool>,"

Docs persistence …/guide/integration.md:81

Registers scheduled or boot-time system tasks.
```
systemd-run` to
```
Docs persistence …/guide/integration.md:86

Registers scheduled or boot-time system tasks.
```
systemd-run --user --collect --unit=agent-bar-update-<txid>.service \
```
Docs persistence …/guide/integration.md:89

Registers scheduled or boot-time system tasks.
```
systemd-run --user --collect --unit=agent-bar-remove-<txid>.service \
```
Docs persistence …/v10/08-plugin-bundle-and-release.md:324

Registers scheduled or boot-time system tasks.
```
systemd-run` before consuming any confirmation or
```
Docs persistence …/v10/08-plugin-bundle-and-release.md:362

Registers scheduled or boot-time system tasks.
```
systemd-run --user --collect
```
Docs persistence …/v10/03-cli-and-json-contract.md:305

Registers scheduled or boot-time system tasks.
```
systemd-run` to
```
Docs persistence …/v10/03-cli-and-json-contract.md:307

Registers scheduled or boot-time system tasks.
```
systemd-run --user` unit and returns once the handoff is
```
Docs persistence …/v10/06-migration-and-legacy-removal.md:212

Registers scheduled or boot-time system tasks.
```
systemd-run --user` unit, so the helper process can
```
Docs persistence …/v10/06-migration-and-legacy-removal.md:238

Registers scheduled or boot-time system tasks.
```
systemd-run` to absolute executable paths before consuming the
```
Docs persistence …/dev/architecture.md:130

Registers scheduled or boot-time system tasks.
```
systemd-run` to absolute executable paths
```
Docs persistence …/dev/architecture.md:136

Registers scheduled or boot-time system tasks.
```
systemd-run --user` unit;
```
Docs persistence …/qa/v10.0.0-live-qa-2026-07-27.md:110

Registers scheduled or boot-time system tasks.
```
systemd-run --user`.
```
Docs external_hosts …/specs/2026-05-23-install-script-design.md:62

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://bun.sh/install | bash`).
```
Docs external_hosts …/specs/2026-05-23-install-script-design.md:127

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://raw.githubusercontent.com/othavioquiliao/agent-bar/master/install.sh | bash
```
Docs external_hosts …/specs/2026-06-19-rust-rewrite-design.md:325

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://ampcode.com/install.sh | bash`, contrato de display) + confirm + spawn.
```
Docs external_hosts …/plans/2026-07-21-v9-01-limpeza-legado.md:319

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://ampcode.com/install.sh | bash`
```
Docs external_hosts …/plans/2026-07-21-v9-01-limpeza-legado.md:442

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://ampcode.com/install.sh | bash"
```
Docs external_hosts …/plans/2026-07-21-v9-01-limpeza-legado.md:456

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://ampcode.com/install.sh | bash"
```
Docs external_hosts …/plans/2026-07-21-v9-01-limpeza-legado.md:467

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://ampcode.com/install.sh | bash";
```
Docs external_hosts …/plans/2026-08-01-v11-06-cli-and-installer-copy.md:377

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://raw.githubusercontent.com/othavi0/agent-bar/master/install.sh | bash
```
Docs external_hosts …/plans/2026-06-19-rust-rewrite-04b-amp.md:107

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://ampcode.com/install.sh | bash";
```
Docs external_hosts …/plans/2026-06-19-rust-rewrite-04b-amp.md:201

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://ampcode.com/install.sh | bash");
```
Docs external_hosts …/plans/2026-07-21-v9-05-docs-release.md:373

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://ampcode.com/install.sh | bash
```
Docs external_hosts …/plans/2026-07-21-v9-05-docs-release.md:391

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://ampcode.com/install.sh | bash
```
Docs external_hosts …/plans/2026-06-19-rust-rewrite-01-foundation.md:104

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://ampcode.com/install.sh | bash";
```
Docs external_hosts …/plans/2026-08-04-docs-restructure.md:1006

Downloads or connects to an external HTTP(S) host.
```
curl -fsSLO https://raw.githubusercontent.com/othavi0/agent-bar/master/install.sh
```
Docs external_hosts …/plans/2026-05-23-install-script.md:43

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://raw.githubusercontent.com/othavioquiliao/agent-bar/master/install.sh | bash
```
Docs external_hosts …/plans/2026-05-23-install-script.md:112

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://bun.sh/install | bash"
```
Docs external_hosts …/plans/2026-05-23-install-script.md:351

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://raw.githubusercontent.com/othavioquiliao/agent-bar/master/install.sh | bash
```
Docs external_hosts …/plans/2026-07-17-grok-provider.md:460

Downloads or connects to an external HTTP(S) host.
```
curl -fsSL https://x.ai/cli/install.sh | bash")
```
Docs external_hosts …/plans/2026-08-11-monorepo-migration.md:709

Downloads or connects to an external HTTP(S) host.
```
git clone https://github.com/othavi0/omarchy-agent-bar.git "$TMP/existing"
```

Docs package_manager …/plans/2026-06-21-rust-rewrite-08-cutover.md:532

Global npm package installation.

npm i -g @noctuacore/agent-bar` (ou similar) por: `install.sh` (curl|bash), AUR (`yay -S agent-bar-bin`), `cargo binstall agent-bar`. Atualizar quick-start (rodar `agent-bar`, não `bun run start`). Ma

Docs sudo …/plans/2026-06-21-rust-rewrite-08-cutover.md:204

Command runs with sudo, elevating the process beyond the plugin environment.

sudo pacman -S musl` ou equivalente) e re-tentar; se ainda falhar, usar `cargo zigbuild --release --target x86_64-unknown-linux-musl` (fallback documentado no spec). Registrar no ledger qual caminho f

Automated analysis only — not a security guarantee.

Install


        $ omarchy plugin add https://github.com/othavi0/omarchy-agent-bar --enable

Widgets #bar #quickshell #ai

Agent Bar

Agent Bar is an Omarchy plugin that puts your AI provider quota in the Quickshell bar. It tracks Claude, Codex, Amp, and Grok: one chip per provider, a popup with every usage window, and a countdown to the next reset.

Agent Bar preview

What you see

Each enabled provider gets a compact chip with its icon and percentage, shown as used or remaining, your pick. Click it and the popup opens: plan tag (like MAX 20X), a lead window with both the countdown and the wall-clock reset, and every other window as a row with its own usage track.

Windows are normalized across providers, so Claude's Session (5h), Weekly (7d), and per-model windows render the same way Codex's do. A chip shows ! when a provider crosses the critical threshold. When a refresh fails, the last good reading stays on the bar unchanged — the popup notes when it was taken and nothing is marked as broken. A connected provider with no percentage window is valid and shows —.

When a provider needs attention, the popup offers a safe action: opening the login in a terminal, installation guidance, or a retry. Everything follows your active Omarchy theme, and the popup is fully keyboard-navigable.

Action	Result
Left click	Open the popup; click again to close
Middle click	Force a refresh of all providers
Right click	Open Settings

Agent Bar reads the local data your provider CLIs already maintain. It never installs a CLI and never handles credentials. It also shows no token costs, spend, or session history; percentages and resets only.

Install

You need Omarchy with Quickshell (Quattro), Linux x86_64, git, and the provider CLIs or local provider data you want to monitor. git is already an Omarchy base tool, so there is nothing extra to install.

omarchy plugin add https://github.com/othavi0/omarchy-agent-bar.git

Omarchy asks where to place the bar widget when you enable it. If you skip that choice, the widget defaults to the right section of the bar. This clones one verified directory and nothing else:

~/.config/omarchy/plugins/othavi0.agent-bar/

Update

omarchy plugin update othavi0.agent-bar

If you installed Agent Bar before this release (a plain directory, not a git checkout), the update button shows a one-time migration notice. Run:

omarchy plugin remove othavi0.agent-bar
omarchy plugin add https://github.com/othavi0/omarchy-agent-bar.git

Your settings, cache, and backups live outside the plugin directory and survive the swap.

Remove

omarchy plugin remove othavi0.agent-bar

Update and remove are also available as buttons in Settings.

Settings

Right click any chip. From there you can enable, disable, and reorder providers, switch between used and remaining, set the refresh interval (default 60 seconds), and toggle notifications. Settings live at ~/.config/agent-bar/settings.json.

Update and uninstall live in Settings too. A release is cut from every product merge, so the update check always offers the latest version.

Development

This repository is both the plugin (root tree) and its source. See Architecture, Releasing, and Contributing for the build, test, and release pipeline.

bin/agent-bar and bundle.json are release artifacts committed by CI — never edit them by hand.

License

MIT. See LICENSE.

Stars: 8
Forks: 0
Open issues: 0
Version: vv10.3.10
License: MIT
Default branch: master

Last pushed 2 months ago. Last indexed 2 months ago.

@ 1f8ef48

Agent Bar

What you see

Install

Update

Remove

Settings

Development

More

License