dsh-plugin-model-quota
在 DeepSeek Harness 中显示 CLIProxyAPI 订阅配额。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:lyq3/dsh-plugin-model-quota#4fcc8b096b2b00e1bd23ab7a893d6df1a01b9845Plugin Model Quota 以 dsh-plugin-model-quota 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
点击下方 Badge 复制 Markdown，粘贴到 README 即可。
验证 package.json 声明的 GitHub 仓库，即可管理这个公开页面。认领后，Hub 会优先安排当前版本的安全扫描，并在通过后公开展示结果。
认领这个 Plugin →A read-only DeepSeek Harness Web plugin that discovers accounts through the CLIProxyAPI Management API and displays Codex and Kimi subscription quotas below the conversation composer.
GET /v0/management/auth-files; accounts are never hard-coded.POST /v0/management/api-call endpoint.conversation.composer.dock.0.1.0-rc.8v7.2.137Install the package in the DSH Web profile and add it to the Cordis composition. The included cordis.patch.yml provides the default loader row.
Install from the GitHub source checkout:
git clone https://github.com/lyq3/dsh-plugin-model-quota.git
cd dsh-plugin-model-quota
pnpm install --frozen-lockfile
pnpm build
pnpm --dir ~/.dsh/profiles/web add "$PWD"
systemctl --user restart dsh-web.service
A local development checkout can be installed the same way after pnpm install && pnpm build, using pnpm --dir ~/.dsh/profiles/web add /path/to/dsh-plugin-model-quota.
Restart the existing DSH service that serves the page; do not start a replacement server.
Open the loopback DSH page on the host and navigate to:
Settings → Plugins → Plugin configuration → Model Quota
Defaults:
| Setting | Default |
|---|---|
| CLIProxyAPI Base URL | http://127.0.0.1:8317 |
| Refresh interval | 60 seconds |
| Post-turn refresh delay | 3 seconds |
| Request timeout | 10 seconds |
The Management Key is write-only. Its input remains blank after saving; the Configured badge indicates that a key is stored.
DSH 0.1.0-rc.8 restricts settings.describe, settings.mutate, and credential APIs to loopback same-origin browsers. A DSH page opened through a public domain or LAN address may show:
settings are unavailable in this browser
This is a DSH security boundary, not a plugin failure. Configure the plugin from the host's 127.0.0.1 page. After configuration, the read-only quota dock can still render on remote conversation pages.
localhost, 127.0.0.0/8, or [::1].http://127.0.0.1:8317.0.1.x so the Host cannot disclose the Management Key through SSRF, DNS rebinding, or target misconfiguration. Use a local authenticated reverse proxy or tunnel endpoint bound to loopback when the gateway runs elsewhere.The browser can call only these fixed same-origin routes:
GET /api/model-quota
POST /api/model-quota/test-connection
It cannot choose an upstream URL, method, headers, provider, or auth index. Browser responses never contain:
Stable opaque account IDs are generated on the host. Account labels and sanitized quota DTOs are returned for display.
pnpm install
pnpm verify
pnpm verify runs type checking, unit tests, Host and Client builds, lazy-CJS package verification, and a tarball dry run.
conversation.composer.dock; open or create a session to see the quota line.See SECURITY.md.
MIT