MiniMax: recharge credits, usage dashboard, and quota utilization

CHANGELOG.md

@@ -87,6 +87,8 @@
 - z.ai: support saved token-account team usage with account-scoped organization and project metadata. Thanks @zqbake!
 - CLI: show session pace in text output, expose derived pace data in JSON, and honor the configured weekly work-day baseline. Thanks @kmatsunami!
 - Claude: add a combined "Session + Weekly" menu bar metric that shows the 5-hour session and weekly lanes together (paced on the weekly lane), matching Codex, and classify lanes by cadence so a weekly-only account is not mislabeled as a session. Thanks @Shengqiang-Zhang!
+- MiniMax: fetch Token Plan recharge-credit balance from the console `token_plan_credit` endpoint when a browser session cookie is available. Thanks @Yuxin-Qiao!
+- MiniMax: add console usage-summary dashboard (inline KPI grid, cost trend, token-usage submenu, and Subscription Utilization charts for 5h/weekly quota). Thanks @Yuxin-Qiao!
 
 ### Changed
 - Settings: complete redesign as a System Settings-style window — a sidebar lists app panes plus every provider (search, drag reorder, status dots, enable via context menu), panes use native grouped forms, the window keeps one size instead of resizing per tab, and the last selected pane is remembered across launches.
@@ -102,6 +104,11 @@
 - Claude history: keep OAuth utilization separate across account switches while preserving continuity through token refreshes.
 - Linux CLI: keep Claude OAuth usage subprocess-free, skip version probes, and let Auto bypass unsupported web sources. Thanks @derekszen!
 - Usage display: make Usage widgets follow the used-versus-remaining preference already shared by menus and Overview rows (#1738). Thanks @OlegLustenko and @FrancoLan!
+- MiniMax: route Token Plan credit lookups to the matching `www.*` host when `MINIMAX_HOST` selects a China or global platform domain.
+- MiniMax: route usage-summary enrichment through `MINIMAX_HOST` custom proxies and ignore implausible 5h `remains_time` values when computing reset countdowns.
+- MiniMax: open the menu Usage Dashboard action at `platform.*.com/console/usage` instead of the Coding Plan page.
+- MiniMax: bill `cache_read_token` separately from `input_token` in usage-summary cost projections.
+- MiniMax: keep optional usage-summary enrichment from failing API-token quota refreshes when an auxiliary cookie is stale.
 - OpenCode Go: keep rolling usage available when the dashboard omits the optional weekly window. Thanks @mohkg1017!
 - Menu bar: make Show most-used provider rank only providers selected for Overview. Thanks @dstier-git!
 - Codex: show expiring reset-credit availability even when optional credits and extra usage are hidden, while preserving CLI `--no-credits`. Thanks @simon-ami!

Scripts/lint.sh

@@ -21,6 +21,10 @@ check_package_product_paths() {
   "${ROOT_DIR}/Scripts/test_package_product_paths.sh"
 }
 
+check_package_app_paths() {
+  "${ROOT_DIR}/Scripts/test_package_app_paths.sh"
+}
+
 check_package_strip() {
   "${ROOT_DIR}/Scripts/test_package_strip.sh"
 }
@@ -82,6 +86,7 @@ check_llms_index() {
 run_portable_checks() {
   check_codex_parser_hash
   check_package_product_paths
+  check_package_app_paths
   check_package_strip
   check_package_signing
   check_release_dsym_paths

Scripts/package_app.sh

@@ -19,6 +19,58 @@ SIGNING_MODE=
 resolve_package_signing_mode
 ROOT=$(cd "$(dirname "$0")/.." && pwd)
 cd "$ROOT"
+
+validate_package_app_path() {
+  local label="$1"
+  local path="$2"
+  if [[ -z "$path" ]]; then
+    echo "ERROR: $label is empty." >&2
+    return 1
+  fi
+  case "$path" in
+    /*) ;;
+    *)
+      echo "ERROR: $label must be an absolute path: $path" >&2
+      return 1
+      ;;
+  esac
+  local base_name
+  base_name=$(basename "$path")
+  if [[ "$base_name" != *.app ]]; then
+    echo "ERROR: $label must point to a .app bundle: $path" >&2
+    return 1
+  fi
+  if [[ "$base_name" != CodexBar* ]]; then
+    echo "ERROR: $label basename must start with CodexBar: $path" >&2
+    return 1
+  fi
+  local parent_dir resolved root_resolved
+  parent_dir=$(dirname "$path")
+  if ! root_resolved=$(cd "$ROOT" && pwd -P); then
+    echo "ERROR: failed to resolve repo root for $label validation." >&2
+    return 1
+  fi
+  if ! resolved=$(cd "$parent_dir" 2>/dev/null && pwd -P); then
+    mkdir -p "$parent_dir"
+    if ! resolved=$(cd "$parent_dir" && pwd -P); then
+      echo "ERROR: $label parent directory is invalid: $parent_dir" >&2
+      return 1
+    fi
+  fi
+  resolved="$resolved/$base_name"
+  if [[ "$resolved" == "$root_resolved" ]]; then
+    echo "ERROR: $label must not target the repo root: $path" >&2
+    return 1
+  fi
+  case "$resolved" in
+    "$root_resolved"/*) ;;
+    *)
+      echo "ERROR: $label must stay inside the repo root ($root_resolved): $path" >&2
+      return 1
+      ;;
+  esac
+}
+
 LOWER_CONF=$(printf "%s" "$CONF" | tr '[:upper:]' '[:lower:]')
 case "$LOWER_CONF" in
   debug|release) ;;
@@ -183,8 +235,29 @@ for ARCH in "${ARCH_LIST[@]}"; do
   stage_build_products "$ARCH"
 done
 
-APP_FINAL="$ROOT/CodexBar.app"
-APP_STAGE="$ROOT/.build/package/CodexBar.app"
+APP_FINAL="${CODEXBAR_PACKAGE_OUTPUT:-$ROOT/CodexBar.app}"
+APP_STAGE="${CODEXBAR_PACKAGE_STAGE:-$ROOT/.build/package/CodexBar.app}"
+validate_package_app_path "CODEXBAR_PACKAGE_OUTPUT" "$APP_FINAL"
+validate_package_app_path "CODEXBAR_PACKAGE_STAGE" "$APP_STAGE"
+resolve_package_app_path() {
+  local path="$1"
+  local base_name parent_dir resolved
+  base_name=$(basename "$path")
+  parent_dir=$(dirname "$path")
+  if ! resolved=$(cd "$parent_dir" 2>/dev/null && pwd -P); then
+    mkdir -p "$parent_dir"
+    resolved=$(cd "$parent_dir" && pwd -P)
+  fi
+  printf '%s\n' "$resolved/$base_name"
+}
+APP_FINAL_RESOLVED=$(resolve_package_app_path "$APP_FINAL")
+APP_STAGE_RESOLVED=$(resolve_package_app_path "$APP_STAGE")
+if [[ "$APP_FINAL_RESOLVED" == "$APP_STAGE_RESOLVED" ]]; then
+  echo "ERROR: CODEXBAR_PACKAGE_OUTPUT and CODEXBAR_PACKAGE_STAGE must resolve to different bundles." >&2
+  echo "       output=$APP_FINAL_RESOLVED stage=$APP_STAGE_RESOLVED" >&2
+  exit 1
+fi
+mkdir -p "$(dirname "$APP_FINAL")" "$(dirname "$APP_STAGE")"
 rm -rf "$APP_STAGE"
 APP="$APP_STAGE"
 mkdir -p "$APP/Contents/MacOS" "$APP/Contents/Resources" "$APP/Contents/Frameworks"
@@ -453,6 +526,9 @@ chmod -R a+rX "$APP/Contents/Frameworks/Sparkle.framework"
 install_name_tool -add_rpath "@executable_path/../Frameworks" "$APP/Contents/MacOS/CodexBar"
 # Re-sign Sparkle and all nested components with the selected package identity.
 SPARKLE="$APP/Contents/Frameworks/Sparkle.framework"
+# Finder metadata and quarantine attributes copied from downloaded artifacts make
+# codesign reject nested Sparkle apps even though their file contents are valid.
+xattr -cr "$SPARKLE"
 if [[ "$SIGNING_MODE" == "adhoc" ]]; then
   CODESIGN_ID="-"
   CODESIGN_ARGS=(--force --sign "$CODESIGN_ID")
@@ -526,6 +602,10 @@ if [[ -d "${APP}/Contents/PlugIns/CodexBarWidget.appex" ]]; then
 fi
 
 # Finally sign the app bundle itself
+# Signing nested bundles can reattach provenance metadata on some local volumes.
+# Extended attributes are not part of the nested code signatures, so strip them
+# once more before sealing the outer app.
+xattr -cr "$APP"
 codesign "${CODESIGN_ARGS[@]}" \
   --entitlements "$APP_ENTITLEMENTS" \
   "$APP"

Scripts/test_package_app_paths.sh

@@ -0,0 +1,112 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT=$(cd "$(dirname "$0")/.." && pwd)
+
+TEMP_DIR=$(mktemp -d "${TMPDIR:-/tmp}/codexbar-package-app-paths.XXXXXX")
+trap 'rm -rf "$TEMP_DIR"' EXIT
+
+ROOT_RESOLVED=$(cd "$ROOT" && pwd -P)
+
+validate_package_app_path() {
+  local label="$1"
+  local path="$2"
+  if [[ -z "$path" ]]; then
+    echo "ERROR: $label is empty." >&2
+    return 1
+  fi
+  case "$path" in
+    /*) ;;
+    *)
+      echo "ERROR: $label must be an absolute path: $path" >&2
+      return 1
+      ;;
+  esac
+  local base_name
+  base_name=$(basename "$path")
+  if [[ "$base_name" != *.app ]]; then
+    echo "ERROR: $label must point to a .app bundle: $path" >&2
+    return 1
+  fi
+  if [[ "$base_name" != CodexBar* ]]; then
+    echo "ERROR: $label basename must start with CodexBar: $path" >&2
+    return 1
+  fi
+  local parent_dir resolved
+  parent_dir=$(dirname "$path")
+  if ! resolved=$(cd "$parent_dir" 2>/dev/null && pwd -P); then
+    mkdir -p "$parent_dir"
+    resolved=$(cd "$parent_dir" && pwd -P)
+  fi
+  resolved="$resolved/$base_name"
+  if [[ "$resolved" == "$ROOT_RESOLVED" ]]; then
+    echo "ERROR: $label must not target the repo root: $path" >&2
+    return 1
+  fi
+  case "$resolved" in
+    "$ROOT_RESOLVED"/*) ;;
+    *)
+      echo "ERROR: $label must stay inside the repo root ($ROOT_RESOLVED): $path" >&2
+      return 1
+      ;;
+  esac
+}
+
+passes=0
+assert_rejects() {
+  local label="$1"
+  local path="$2"
+  if validate_package_app_path "$label" "$path" 2>"$TEMP_DIR/reject.log"; then
+    echo "ERROR: expected rejection for $label=$path" >&2
+    exit 1
+  fi
+  passes=$((passes + 1))
+}
+
+assert_accepts() {
+  local label="$1"
+  local path="$2"
+  validate_package_app_path "$label" "$path"
+  passes=$((passes + 1))
+}
+
+assert_accepts "default output" "$ROOT/CodexBar.app"
+assert_accepts "default stage" "$ROOT/.build/package/CodexBar.app"
+assert_accepts "custom stage" "$ROOT/.build/package/CodexBar.debug.app"
+
+assert_rejects "empty path" ""
+assert_rejects "relative path" "CodexBar.app"
+assert_rejects "repo root" "$ROOT"
+assert_rejects "home directory" "$HOME"
+assert_rejects "outside repo" "/tmp/CodexBar.app"
+assert_rejects "non app bundle" "$ROOT/CodexBar.zip"
+assert_rejects "wrong basename" "$ROOT/OtherApp.app"
+
+same_stage="$ROOT/.build/package/CodexBar.app"
+assert_accepts "shared stage path" "$same_stage"
+if validate_package_app_path "CODEXBAR_PACKAGE_OUTPUT" "$same_stage" 2>"$TEMP_DIR/same-path.log" \
+  && validate_package_app_path "CODEXBAR_PACKAGE_STAGE" "$same_stage" 2>>"$TEMP_DIR/same-path.log"
+then
+  ROOT_RESOLVED=$(cd "$ROOT" && pwd -P)
+  resolve_path() {
+    local path="$1"
+    local base_name parent_dir resolved
+    base_name=$(basename "$path")
+    parent_dir=$(dirname "$path")
+    resolved=$(cd "$parent_dir" && pwd -P)
+    printf '%s\n' "$resolved/$base_name"
+  }
+  final_resolved=$(resolve_path "$same_stage")
+  stage_resolved=$(resolve_path "$same_stage")
+  if [[ "$final_resolved" == "$stage_resolved" ]]; then
+  passes=$((passes + 1))
+  else
+    echo "ERROR: expected identical resolved package paths for rejection test" >&2
+    exit 1
+  fi
+else
+  echo "ERROR: expected package path validation to accept identical stage path inputs" >&2
+  exit 1
+fi
+
+echo "Package app path tests passed ($passes checks)."