Add X API provider

README.md

@@ -136,6 +136,7 @@ See the full history in [CHANGELOG.md](CHANGELOG.md).
 | LithosAI | Browser cookies / manual Cookie header | Prepaid balance, UTC spend today and this month |
 | Muse (muse.ai) | Browser cookies / manual Cookie header | Weekly usage, tokens left, top-up tokens |
 | WorkBuddy | Browser cookies / manual Cookie header | Monthly credits left, plan, cycle reset |
+| X API | Browser cookies / manual Cookie header | Prepaid balance, purchased and free credits |
 
 </details>
 

apps/desktop-tauri/src-tauri/src/commands/provider_settings.rs

@@ -256,6 +256,7 @@ fn cookie_source_provider(provider_id: &str) -> Option<codexbar::core::ProviderI
         "lithosai" => ProviderId::LithosAI,
         "langdock" => ProviderId::Langdock,
         "tinyapi" => ProviderId::TinyApi,
+        "xapi" => ProviderId::Xapi,
         _ => return None,
     })
 }
@@ -900,6 +901,13 @@ pub fn cookie_source_options_for(provider_id: &str, lang: Language) -> Vec<Cooki
             cookie_option(lang, "manual", None),
             cookie_option(lang, "off", None),
         ],
+        // X API cookie source: automatic browser import,
+        // a pasted header, or off.
+        "xapi" => vec![
+            cookie_option(lang, "auto", None),
+            cookie_option(lang, "manual", None),
+            cookie_option(lang, "off", None),
+        ],
         _ => Vec::new(),
     }
 }

apps/desktop-tauri/src-tauri/src/commands/session_cookie_scope_tests.rs

@@ -365,3 +365,44 @@ fn tinyapi_exposes_a_cookie_source_picker_and_routes_each_choice() {
     assert_eq!(ctx.source_mode, SourceMode::Cli);
     assert!(ctx.manual_cookie_header.is_none());
 }
+
+/// X API is web-only: the picker chooses the session, a stored header
+/// always wins, an empty manual source fails closed without reading a browser,
+/// and off reaches the provider as Cli (its "cookies are disabled" error).
+#[test]
+fn xapi_exposes_a_cookie_source_picker_and_routes_each_choice() {
+    let settings = Settings::default();
+    assert_eq!(
+        super::provider_cookie_source_lookup(&settings, "xapi").as_deref(),
+        Some("auto")
+    );
+    let values: Vec<_> = super::cookie_source_options_for("xapi", Language::English)
+        .into_iter()
+        .map(|option| option.value)
+        .collect();
+    assert_eq!(values, vec!["auto", "manual", "off"]);
+
+    let cookie = "auth_token=fixture; ct0=fixture";
+    for source in ["auto", "manual"] {
+        let ctx = session_context(ProviderId::Xapi, Some(source), "auto", Some(cookie));
+        assert!(
+            matches!(ctx.source_mode, SourceMode::Auto | SourceMode::Web),
+            "{source}"
+        );
+        assert_eq!(
+            ctx.manual_cookie_header.as_deref(),
+            Some(cookie),
+            "{source}"
+        );
+        assert!(!ctx.manual_cookie_missing, "{source}");
+    }
+
+    let ctx = session_context(ProviderId::Xapi, Some("manual"), "auto", None);
+    assert_eq!(ctx.source_mode, SourceMode::Web);
+    assert!(ctx.manual_cookie_header.is_none());
+    assert!(ctx.manual_cookie_missing);
+
+    let ctx = session_context(ProviderId::Xapi, Some("off"), "auto", Some(cookie));
+    assert_eq!(ctx.source_mode, SourceMode::Cli);
+    assert!(ctx.manual_cookie_header.is_none());
+}

apps/desktop-tauri/src/components/providers/providerIcons.ts

@@ -58,6 +58,7 @@ import notion from "./icons/ProviderIcon-notion.svg?raw";
 import nous from "./icons/ProviderIcon-nous.svg?raw";
 import workbuddy from "./icons/ProviderIcon-workbuddy.svg?raw";
 import xai from "./icons/ProviderIcon-xai.svg?raw";
+import xapi from "./icons/ProviderIcon-xapi.svg?raw";
 import xkiro from "./icons/ProviderIcon-xkiro.svg?raw";
 import ollama from "./icons/ProviderIcon-ollama.svg?raw";
 import opencode from "./icons/ProviderIcon-opencode.svg?raw";
@@ -159,6 +160,7 @@ const RAW: Record<string, string> = {
   notion: tint(notion),
   nous: tint(nous),
   xai: tint(xai),
+  xapi: tint(xapi),
   xkiro: tint(xkiro),
   mistral: tint(mistral),
   muse: tint(muse),
@@ -294,6 +296,7 @@ export const PROVIDER_ICON_REGISTRY: Record<string, ProviderIcon> = {
   notion:      { id: "notion",      brandColor: "#337EA9", fallbackLetter: "N", svgPath: RAW.notion },
   nous:        { id: "nous",        brandColor: "#D6A55C", fallbackLetter: "N", svgPath: RAW.nous },
   xai:         { id: "xai",         brandColor: "#8e8e93", fallbackLetter: "X", svgPath: RAW.xai },
+  xapi:        { id: "xapi",        brandColor: "#71767B", fallbackLetter: "X", svgPath: RAW.xapi },
   xkiro:       { id: "xkiro",       brandColor: "#52c99b", fallbackLetter: "X", svgPath: RAW.xkiro },
   meta:        { id: "meta",        brandColor: "#0467DF", fallbackLetter: "M", svgPath: RAW.meta },
 };

apps/desktop-tauri/src/test/providerCatalog.ts

@@ -97,4 +97,5 @@ export const TEST_PROVIDER_CATALOG: Array<[string, string]> = [
   ["lithosai", "LithosAI"],
   ["museai", "Muse (muse.ai)"],
   ["workbuddy", "WorkBuddy"],
+  ["xapi", "X API"],
 ];

docs/PROVIDERS.md

@@ -417,6 +417,32 @@ portal in Settings → Providers → IBM Bob, as token accounts, or with
 - 401 and 403 report that the key was rejected; response bodies are never
   echoed in errors.
 
+### X API prepaid credits
+
+X API is disabled by default and reads prepaid credit balances from the X
+(Twitter) API console. Sign in to console.x.com in your browser, and CodexBar
+will read the `auth_token` and `ct0` cookies from that session.
+
+- **Automatic:** A previously imported Cookie header is used on its own.
+  Otherwise CodexBar tries each detected browser (Chrome, Edge, Brave,
+  Firefox) holding both cookies. If a browser session expires (401), it moves
+  to the next browser. No session means sign in to console.x.com.
+- **Manual:** Paste the Cookie header from a console.x.com request (with
+  `auth_token` and `ct0`). Manual mode does not fall back to browser sessions.
+- **Off:** Cookies are disabled.
+
+The primary lane shows the balance (paid + free credits). Details rows show:
+- Balance (total: paid + free)
+- Purchased credits
+- Free credits
+
+Balance is a prepaid meter (no quota percentage); costs are always zero (no
+usage tracking available). The provider reports identity as "Browser session".
+Cost resets are never inferred. Session rotation on 401 is implemented: sessions
+are tried in browser order, stale sessions are skipped, and a missing session
+after all attempts triggers "sign in to console.x.com". Errors never echo
+response bodies.
+
 ## Listing what is enabled
 
 ```powershell

rust/src/core/provider.rs

@@ -89,6 +89,7 @@ pub enum ProviderId {
     QwenCloud,
     Notion,
     Xai,
+    Xapi,
     Fireworks,
     AtlasCloud,
     #[serde(alias = "metaspark")]
@@ -196,6 +197,7 @@ impl ProviderId {
             ProviderId::QwenCloud,
             ProviderId::Notion,
             ProviderId::Xai,
+            ProviderId::Xapi,
             ProviderId::Fireworks,
             ProviderId::AtlasCloud,
             ProviderId::Meta,
@@ -324,6 +326,7 @@ impl ProviderId {
             ProviderId::QwenCloud => "qwen-cloud",
             ProviderId::Notion => "notion",
             ProviderId::Xai => "xai",
+            ProviderId::Xapi => "xapi",
             ProviderId::Replicate => "replicate",
             ProviderId::AtlasCloud => "atlascloud",
         }
@@ -432,6 +435,7 @@ impl ProviderId {
             ProviderId::QwenCloud => "Qwen Cloud",
             ProviderId::Notion => "Notion AI",
             ProviderId::Xai => "xAI",
+            ProviderId::Xapi => "X API",
             ProviderId::Replicate => "Replicate",
             ProviderId::AtlasCloud => "Atlas Cloud",
         }
@@ -546,6 +550,7 @@ impl ProviderId {
             ProviderId::ZoomMate => Some("zoommate.zoom.us"),
             ProviderId::QwenCloud => Some("qwencloud.com"),
             ProviderId::Notion => Some("app.notion.com"),
+            ProviderId::Xapi => Some("x.com"),
             ProviderId::Xai => None,
         }
     }
@@ -641,6 +646,7 @@ impl ProviderId {
             }
             "grok" | "supergrok" | "super-grok" => Some(ProviderId::Grok),
             "xai" | "x.ai" | "x-ai" => Some(ProviderId::Xai),
+            "xapi" | "x-api" | "x api" => Some(ProviderId::Xapi),
             "elevenlabs" | "eleven-labs" | "11labs" => Some(ProviderId::ElevenLabs),
             "deepgram" | "dg" => Some(ProviderId::Deepgram),
             "groq" | "groqcloud" | "groq-cloud" | "groq cloud" => Some(ProviderId::Groq),
@@ -1382,6 +1388,7 @@ pub fn brand_color(id: ProviderId) -> &'static str {
         ProviderId::QwenCloud => "#615CED",
         ProviderId::Notion => "#337EA9",
         ProviderId::Xai => "#8E8E93",
+        ProviderId::Xapi => "#71767B",
         ProviderId::Fireworks => "#F25B1C",
         ProviderId::Meta => "#0467DF",
         ProviderId::Muse => "#0668E1",
@@ -1423,7 +1430,7 @@ mod tests {
     #[test]
     fn test_provider_id_all() {
         let all = ProviderId::all();
-        assert_eq!(all.len(), 100);
+        assert_eq!(all.len(), 101);
         assert!(all.contains(&ProviderId::Claude));
         assert!(all.contains(&ProviderId::Codex));
         assert!(all.contains(&ProviderId::Pi));
@@ -1480,6 +1487,7 @@ mod tests {
         assert!(all.contains(&ProviderId::QwenCloud));
         assert!(all.contains(&ProviderId::Notion));
         assert!(all.contains(&ProviderId::Xai));
+        assert!(all.contains(&ProviderId::Xapi));
         assert!(all.contains(&ProviderId::Meta));
         assert!(all.contains(&ProviderId::Replicate));
         assert!(all.contains(&ProviderId::Muse));

rust/src/core/provider_factory.rs

@@ -32,8 +32,8 @@ use crate::providers::{
     QwenCloudProvider, RaycastProvider, ReplicateProvider, SailResearchProvider, SakanaProvider,
     SofyaProvider, StepFunProvider, Sub2ApiProvider, T3ChatProvider, TinyApiProvider,
     TypeSafeProvider, V0Provider, VeniceProvider, VercelProvider, VertexAIProvider, WarpProvider,
-    WayfinderProvider, WindsurfProvider, XKiroProvider, XaiProvider, ZaiProvider, ZedProvider,
-    ZenMuxProvider, ZoomMateProvider,
+    WayfinderProvider, WindsurfProvider, XKiroProvider, XaiProvider, XapiProvider, ZaiProvider,
+    ZedProvider, ZenMuxProvider, ZoomMateProvider,
 };
 
 /// Instantiate the concrete [`Provider`] implementation for a given [`ProviderId`].
@@ -129,6 +129,7 @@ pub fn instantiate(id: ProviderId) -> Box<dyn Provider> {
         ProviderId::SailResearch => Box::new(SailResearchProvider::new()),
         ProviderId::Notion => Box::new(NotionProvider::new()),
         ProviderId::Xai => Box::new(XaiProvider::new()),
+        ProviderId::Xapi => Box::new(XapiProvider::new()),
         ProviderId::Fireworks => Box::new(FireworksProvider::new()),
         ProviderId::Meta => Box::new(MetaProvider::new()),
         ProviderId::Muse => Box::new(MuseProvider::new()),
@@ -239,6 +240,7 @@ pub fn pace_capability(id: ProviderId) -> ProviderPaceCapability {
         | ProviderId::Replicate
         | ProviderId::SailResearch
         | ProviderId::Xai
+        | ProviderId::Xapi
         | ProviderId::Fireworks
         | ProviderId::Meta
         | ProviderId::Muse

rust/src/core/token_accounts.rs

@@ -452,7 +452,8 @@ impl TokenAccountSupport {
             | ProviderId::WorkBuddy
             | ProviderId::SailResearch
             | ProviderId::Sofya
-            | ProviderId::TinyApi => None,
+            | ProviderId::TinyApi
+            | ProviderId::Xapi => None,
         }
     }
 

rust/src/providers/mod.rs

@@ -105,6 +105,7 @@ pub mod wayfinder;
 pub mod windsurf;
 pub mod workbuddy;
 pub mod xai;
+pub mod xapi;
 pub mod xkiro;
 pub mod zai;
 pub mod zed;
@@ -207,6 +208,7 @@ pub use wayfinder::WayfinderProvider;
 pub use windsurf::WindsurfProvider;
 pub use workbuddy::WorkBuddyProvider;
 pub use xai::XaiProvider;
+pub use xapi::XapiProvider;
 pub use xkiro::XKiroProvider;
 pub use zai::ZaiProvider;
 pub use zed::ZedProvider;