dsh-plugin-model-quota
A read-only DeepSeek Harness Web plugin that discovers accounts through the CLIProxyAPI Management API and displays Codex and Kimi subscription quotas below the conversation composer.
简体中文
Features
- Dynamically reads
GET /v0/management/auth-files; accounts are never hard-coded.
- Queries Codex and Kimi through the fixed
POST /v0/management/api-call endpoint.
- Renders a compact one-line status and expandable details in
conversation.composer.dock.
- Polls every 60 seconds while visible and refreshes 3 seconds after a model turn becomes idle.
- Provides a DSH plugin settings card for the CLIProxyAPI base URL, write-only Management Key, and refresh timings.
- Keeps the Management Key in DSH's secret settings wire and out of browser responses.
- Includes English and Chinese UI with desktop and mobile layouts.
Compatibility
- DeepSeek Harness
0.1.0-rc.8
- CLIProxyAPI
v7.2.137
- Node.js 22 or newer
- V1 providers: Codex and Kimi
Installation
Install the package in the DSH Web profile and add it to the Cordis composition. The included cordis.patch.yml provides the default loader row.
Install from the GitHub source checkout:
git clone https://github.com/lyq3/dsh-plugin-model-quota.git
cd dsh-plugin-model-quota
pnpm install --frozen-lockfile
pnpm build
pnpm --dir ~/.dsh/profiles/web add "$PWD"
systemctl --user restart dsh-web.service
A local development checkout can be installed the same way after pnpm install && pnpm build, using pnpm --dir ~/.dsh/profiles/web add /path/to/dsh-plugin-model-quota.
Restart the existing DSH service that serves the page; do not start a replacement server.
Configuration
Open the loopback DSH page on the host and navigate to:
Settings → Plugins → Plugin configuration → Model Quota
Defaults:
| Setting | Default |
|---|
| CLIProxyAPI Base URL | http://127.0.0.1:8317 |
| Refresh interval | 60 seconds |
| Post-turn refresh delay | 3 seconds |
| Request timeout | 10 seconds |
The Management Key is write-only. Its input remains blank after saving; the Configured badge indicates that a key is stored.
Remote-browser limitation
DSH 0.1.0-rc.8 restricts settings.describe, settings.mutate, and credential APIs to loopback same-origin browsers. A DSH page opened through a public domain or LAN address may show:
settings are unavailable in this browser
This is a DSH security boundary, not a plugin failure. Configure the plugin from the host's 127.0.0.1 page. After configuration, the read-only quota dock can still render on remote conversation pages.
Network rules
- The CLIProxyAPI Base URL must use a loopback hostname:
localhost, 127.0.0.0/8, or [::1].
- Loopback HTTP and HTTPS are supported; the default is
http://127.0.0.1:8317.
- Userinfo, query strings, fragments, path traversal, unsafe encodings, and redirects are rejected.
- Remote CLIProxyAPI authorities are intentionally rejected in
0.1.x so the Host cannot disclose the Management Key through SSRF, DNS rebinding, or target misconfiguration. Use a local authenticated reverse proxy or tunnel endpoint bound to loopback when the gateway runs elsewhere.
Browser security boundary
The browser can call only these fixed same-origin routes:
GET /api/model-quota
POST /api/model-quota/test-connection
It cannot choose an upstream URL, method, headers, provider, or auth index. Browser responses never contain:
- CLIProxyAPI Management Keys
- OAuth tokens
- Raw auth indexes
- Upstream Authorization headers
- Raw upstream response bodies
Stable opaque account IDs are generated on the host. Account labels and sanitized quota DTOs are returned for display.
Development
pnpm install
pnpm verify
pnpm verify runs type checking, unit tests, Host and Client builds, lazy-CJS package verification, and a tarball dry run.
Known limitations
- V1 parses Codex and Kimi only.
- The DSH New Session hero does not render
conversation.composer.dock; open or create a session to see the quota line.
- Remote browsers cannot mutate DSH settings, as described above.
- The plugin does not manage accounts, retain history, run a database, or install a background daemon.
Security reports
See SECURITY.md.
License
MIT
