CodeBurn is a local-first, cross-platform observability and cost management tool for AI coding assistants. It reads session logs from 40+ AI tools (Claude Code, Cursor, Copilot, Codex, Gemini, etc.) directly from the user's local disk, parses them, and attributes costs using a bundled pricing engine with fallbacks. The architecture is a modular monolith with a core TypeScript CLI engine and multiple platform-specific frontends (Electron desktop, Swift macOS menubar, Tauri Windows/Linux tray, VS Code extension, MCP server, and GNOME extension). The codebase demonstrates exceptional engineering discipline. It features a sophisticated versioned cache with cross-process locks and progressive hydration, a clean provider adapter pattern for ingesting heterogeneous data sources, and a robust quota monitoring system with strict error handling and credential safety. The test suite is extensive, covering parser edge cases, cache correctness, and cross-platform parity. The project is actively maintained with frequent releases and a large community (11k+ stars). The primary risk is the volatility of the external AI tool APIs it depends on for quota tracking and log formats, but the code is structured to handle this through its adapter pattern and comprehensive testing. It requires Node.js 22.13+.
cursor-vip is a client-side Go/TUI application that lets users share Cursor IDE Pro accounts. At runtime it presents a terminal wizard: it fingerprints the machine (MAC-based device ID + machine-id), contacts a private licensing backend (hardcoded hosts: cursor.jeter.eu.org), prints the user's promotion stats, expiry, and payment links, then starts one of several "modes" that make the locally installed Cursor app authenticate as a shared Pro user. Mode 1 is the minimalist mode; modes 2-4 run a local MITM proxy (go-mitmproxy fork) that requires the user to install a trusted root certificate and intercepts Cursor's API traffic, with mode 3 doing free-trial account rotation and mode 4 providing a dedicated "exclusive" account. The core Cursor-manipulation code lives in an `auth/` package absent from this snapshot - go.mod shows it vendors local forks of `machineid` and `go-mitmproxy` - so the visible code is only the client shell, payment flow, and OS plumbing. Architecturally it is a monolith split into packages: `tui` (terminal UI with embedded i18n locale files for 7 languages), `tui/client` (HTTP client using beego v1's httplib against the private API), `tui/shortcut` (a global keyboard hook recognizing typed 3-letter codes like `sm1`/`u3d`/`buy` to switch modes, refresh accounts, or buy access), and `tui/tool` (OS utilities: locale detection, system-proxy configuration for Windows/macOS/Linux, flock-based single-instance enforcement, and MAC fingerprinting). The build script targets 3 OSes x 3 architectures and obfuscates most binaries with `garble`, consistent with a grey-market licensing tool that expects to be reverse-engineered. The project is actively maintained (last commit March 2026) and clearly works for its user base, but the code is average quality: global mutable state in a `params` package, string-concatenated endpoint paths, no tests or CI, an unconditional `mode = 3` override bug in `GetConfig`, and deprecated dependencies (beego v1, dgrijalva/jwt-go v3.x). It also has a questionable security posture - it instructs Mac users to disable SIP, asks for a trusted root CA for the MITM proxy, and requires Windows admin privileges. Engineers should not reuse this codebase as-is for legitimate licensing work; the genuinely extractable parts are the cross-platform OS utilities (locale detection, proxy toggling, single-instance lock, device fingerprinting).