Configuration

apply(ctx, config) merges the config over these defaults:

Key	Default	Meaning
`cacheMs`	`60000`	host-side cache lifetime per source
`timeoutMs`	`12000`	upstream request timeout
`thresholds`	`[50, 75, 90]`	green → blue → orange → red boundaries
`defaultProvider`	`"opencode-go"`	what to show before you pick one
`hideUnconfigured`	`false`	hide sources with no credential
`insecureTls`	`false`	skip certificate verification
`providers`	`{}`	per-source overrides, keyed by `id`

Per-source overrides:

Key	Meaning
`enabled`	`false` removes the source from the card
`endpoint`	replace the built-in URL (this is how you enable `ark`)
`apiKey`	a literal key, which beats every other credential source
`apiKeyEnv`	read the key from this environment variable instead
`region`	`"cn"` switches to the vendor's mainland endpoint
`insecureTls`	per-source override of the global flag

- insert:
    - id: coding-plan-quota
      name: dsh-coding-plan-quota
      config:
        thresholds: [50, 75, 90]
        defaultProvider: opencode-go
        providers:
          ark:
            endpoint: "https://"

Credentials

For each source, the first hit wins: providers..apiKey → the environment variable named by providers..apiKeyEnv (or the built-in name) → DSH's credentials service → $DSH_HOME/.credentials.yaml → the vendor's own CLI file, where one exists (OpenCode, Claude, Codex, Gemini, Copilot).

Credentials are read on the node half and never sent to the browser.

dsh-coding-plan-quota

Install

README

Configuration

Credentials