LimitDeck

Know what you have left—before the limit hits.

A compact, privacy-safe terminal dashboard for AI coding subscription limits.

English · 简体中文

---

One dashboard. Only the limits that matter.

Install

Homebrew — recommended on macOS

brew install rockythink/tap/limitdeck

Cargo

Requires Rust 1.88 or newer.

cargo install limitdeck

Prebuilt binaries

Download a macOS or Linux archive and SHA256SUMS from the latest GitHub Release.

Then start the dashboard from any terminal:

limitdeck

LimitDeck automatically discovers an installed and authenticated Codex CLI. There is no separate LimitDeck login.

Data sources

Plan	Local source	Support
Codex	Official Codex App Server, account/rateLimits/read	Built in
Claude	Official Claude Code status-line JSON	Built in
Codex fallback	OMP redacted usage output	Optional

The Codex App Server is preferred whenever both it and the OMP fallback are available.

official local protocol ─┐
quota-only snapshot ─────┼─> normalized usage windows ─> LimitDeck
optional redacted output ┘

Claude Code setup

Claude Code exposes subscription rate limits through its official status-line input. Add this to ~/.claude/settings.json:

{
  "statusLine": {
    "type": "command",
    "command": "limitdeck ingest claude",
    "refreshInterval": 60
  }
}

The command writes a quota-only snapshot to:

• $XDG_CACHE_HOME/limitdeck/claude.json, or
• ~/.cache/limitdeck/claude.json when XDG_CACHE_HOME is unset.

Claude Code provides rate_limits only for eligible subscriptions and only after the first API response in a session.

This setting replaces an existing custom Claude Code status line. If you already use one, call limitdeck ingest claude from that script and pass the original JSON through stdin.

The interface

Languages

LimitDeck reads the first non-empty value from LC_ALL, LC_MESSAGES, and LANG at startup. Chinese locales open in Chinese; every other locale opens in English. Press l to switch languages immediately for the current session.

Quota and time

Every reset window places two remaining percentages on the same 100-to-0 scale:

• Q / Quota — quota remaining.
• T / Time — time remaining until reset, divided by the window's full duration.

The list and detail views present these measurements side by side. LimitDeck does not classify usage or recommend what to do.

Themes

Press t to cycle through:

Theme	Character
Rainbow	Default. Deep background with green, violet, pink, orange, and blue accents inspired by OMP
Midnight	Restrained, cool-toned dark palette
Mono	High-contrast grayscale

Theme changes apply immediately to the list and detail views for the current session. LimitDeck respects the NO_COLOR convention; unset it to display theme colors.

Controls

Key	Action
↑ / ↓, k / j	Select a plan
Enter	Open or close plan details
Esc	Return to the list, then exit
r	Refresh sources
t	Cycle themes
l	Switch between English and Chinese
q	Exit

The layout collapses to compact quota/time comparisons in narrow terminals and keeps the selected plan visible when the list exceeds the viewport.

Local quota history

Open a plan to see locally sampled history when the terminal has enough rows.

• A changing current-cycle history with at least three samples becomes a compact Braille trend line.
• The trend includes its real time span, start and end values, and delta.
• Flat or sparse history remains textual rather than drawing a misleading chart.
• A quota increase starts a new visual cycle.

History is stored at $XDG_CACHE_HOME/limitdeck/history.json, or ~/.cache/limitdeck/history.json when XDG_CACHE_HOME is unset. LimitDeck retains at most 30 days and 2,048 samples per quota window. After the first two real samples, unchanged values are sampled no more than once every 15 minutes.

Privacy, by design

LimitDeck retains the minimum state needed to draw the dashboard.

Retained locally	Deliberately ignored
Provider, plan, and quota-window identifiers	Account email and account ID
Display labels and window durations	Organization and plan tier
Remaining percentages and reset times	Billing data
History timestamps and availability state	Raw credentials and provider responses

Parser inputs and subprocess output are size-bounded. Child processes have explicit timeouts and are reaped on exit.

Diagnostics keep only a fixed source label and a safe failure category. Raw stderr, provider payloads, credentials, account fields, email addresses, and local paths are never retained in application state.

When a source cannot refresh

A failing source stays visible. If a previous snapshot exists, LimitDeck marks it as cached; otherwise the row shows Unavailable · Enter for details.

Reason	Next action
Source command missing	Install the named CLI, confirm it is on PATH, then press r
Not authenticated	Log in to the named source, then press r
Timed out	Check the network and retry with r
Provider protocol changed	Upgrade LimitDeck; open an issue if the failure remains
Claude snapshot missing	Configure limitdeck ingest claude as the Claude Code status line
Cached snapshot expired	Refresh the source with r

Architecture

The core stays intentionally small:

official protocol / safe snapshot / optional fallback
                         │
                    PlanAdapter
                         │
           CodingPlan ─> UsageWindow
                         │
             App state + local history ─> TUI

Adapters own provider-specific parsing and timeouts. The domain and UI do not depend on Codex, Claude, or OMP response formats.

Development

cargo fmt --check
cargo test --locked --all-targets --all-features
cargo clippy --locked --all-targets --all-features -- -D warnings
cargo build --release --locked

Project notes

LimitDeck is an independent open-source project and is not affiliated with or endorsed by OpenAI, Anthropic, or OMP. Provider interfaces and subscription limits may change.

Released under the MIT License.