dsh-tokenlens 1.0.8 → 1.1.0

package/CHANGELOG.md

@@ -2,6 +2,17 @@
 
 本项目遵循 [Semantic Versioning](https://semver.org/)：修复 = PATCH，新功能 = MINOR，不兼容变更 = MAJOR。发布时同步更新 `package.json` 的 `version`、`index.js` 的 `PLUGIN_VERSION` 与本文件（`node scripts/bump-version.mjs <version> "<note>"`）；已发布的条目保持原样。
 
+## 1.1.0 — 2026-10-30
+
+- feat(providers): 接入 Open Design（OpenDesign）只读额度查询——Design Plan 的 5 小时 / 7 天窗口已用百分比与重置时间，以及独立的钱包 USD 余额
+- feat(providers): Open Design 使用工作区 `workspaceId` + Control Key（`OPENDESIGN_CONTROL_KEY` / `VELA_CONTROL_KEY`）鉴权；推理 API Key 不能查询计费接口
+- feat(ui): `windows` 快照现在可以附带钱包余额——详情弹窗在额度窗口下方多一行「账户余额」，chip 悬浮提示追加金额
+- docs: 中英 README 与 PROTOCOL 补充 Open Design；说明其余仅元数据供应商没有可用 API Key 查询的公开用量接口（千问/百炼额度仅官方 CLI 可查，腾讯混元/百度千帆只有云账户余额 API）
+
+## 1.0.9 — 2026-10-29
+
+- ci: GitHub Actions 升级到 v7（actions/checkout、actions/setup-node），发布链路仅依赖 OIDC
+
 ## 1.0.8 — 2026-10-29
 
 - fix(release): npm registry 发布延迟时索引更新回退到 PUBLISH_TIMESTAMP；补录 1.0.7 到市场索引

package/PROTOCOL.md

@@ -95,10 +95,15 @@ Provider semantics:
 | `commandcode` | `windows` | rolling = 5-hour `used/cap`, weekly = `used/cap`, monthly = `(granted - remaining)/granted` (only when the API reports the grant) | `plan`, `credits` (USD), `account` |
 | `deepseek` (picker id `deepseek-official`) | `balance` | `null` | `balance` (API-key account balance, CNY/USD) |
 | `deepseek-account` | `balance` | `null` | `balance` from the composed Platform account service (signed-in wallets) |
+| `open-design` | `windows` | rolling = 5-hour Design Plan window, weekly = 7-day window, monthly = 30-day window when reported (used / limit credits, capped at 100%) | `balance` (independent wallet balance, USD) |
 
 `balance` is `{ amount, currency }` plus, for the account provider,
 `wallets: [{currency, amount}]` and `bonus: [{currency, amount}]`.
 
+A `windows` snapshot may also carry a non-null `balance` (Open Design reports
+allowance windows and a wallet independently); the Client renders it as one extra
+row at the end of the capacity card and appends the amount to the chip tooltip.
+
 Rules:
 
 - `percent` is clamped to `0..100`; an unknown percentage is `null` (render "—"), never a fake 0.

package/README.en.md

@@ -9,7 +9,7 @@
 
 > One glance at your usage: plan capacity for the selected provider plus local token statistics across harnesses, right below the DSH composer.
 
-**dsh-TokenLens** is a usage plugin for DSH (DeepSeek Harness), version v1.0.8. It keeps two kinds of numbers separate:
+**dsh-TokenLens** is a usage plugin for DSH (DeepSeek Harness), version v1.1.0. It keeps two kinds of numbers separate:
 
 - **Plan capacity** — the provider's authoritative server-side values (percentage windows, used / cap, balance or remaining credit);
 - **Local token stats** — tokens consumed on this machine across every connected harness, for the selected provider or for all providers combined.
@@ -23,7 +23,7 @@ Everything is computed locally: zero runtime dependencies, no external database,
 - **Data and chart modes** — tables, a daily trend chart and ring charts; breakdowns by harness, provider, top model and unmapped providers.
 - **Provider management page** — enabled / built-in / all filters, enable switches, credential status, console links, label editing, connection tests, subscription badges and plugin settings.
 - **Auto-discovery and agent tool** — providers configured in DSH Settings → Model Services are detected by route id or base-URL host and reuse their DSH credentials; `tokenlens_usage` lets the model query snapshots, local stats and diagnostics.
-- **Local-only** — 5 harnesses (DSH, ZCode, OpenCode CLI, WorkBuddy / CodeBuddy CLI, Qoder CN CLI), 25 built-in providers (15 with plan / balance adapters), read-only local data, no telemetry.
+- **Local-only** — 5 harnesses (DSH, ZCode, OpenCode CLI, WorkBuddy / CodeBuddy CLI, Qoder CN CLI), 25 built-in providers (16 with plan / balance adapters), read-only local data, no telemetry.
 
 ## Screenshots
 
@@ -66,7 +66,7 @@ dsh plugin --profile <profile> add dsh-tokenlens
 Then make sure `dsh.profile.bundles` in `$DSH_HOME/profiles/<profile>/package.json` contains `"dsh-tokenlens"`:
 
 ```jsonc
-{ "dependencies": { "dsh-tokenlens": "^1.0.8" },
+{ "dependencies": { "dsh-tokenlens": "^1.1.0" },
   "dsh": { "profile": { "bundles": ["…", "dsh-tokenlens"] } } }
 ```
 
@@ -105,11 +105,13 @@ Every option is optional. Override the `dsh-tokenlens` row in `$DSH_HOME/profile
 
 Credentials come from DSH itself: providers configured in DSH inherit their `apiKeyEnv`, or you can set environment variables such as `OPENCODE_GO_API_KEY`, `COMMANDCODE_API_KEY` and `DEEPSEEK_API_KEY`.
 
+Open Design (OpenDesign) is the exception: its read-only billing API needs a **workspace ID** plus a **Control Key** (`OPENDESIGN_CONTROL_KEY` or `VELA_CONTROL_KEY`), which is *not* the inference API key from the Cloud API Keys page. Set `providers.open-design.workspaceId` (or `OPENDESIGN_WORKSPACE_ID`) and provide the Control Key through the environment, DSH credentials, or the management page's key field.
+
 See the [Chinese README](README.md) for the full configuration reference, preview and provider tables.
 
 ## Supported providers and harnesses
 
-**Plan capacity / balance adapters:** OpenCode (`opencode-go`, `opencode`), Command Code, DeepSeek, DeepSeek Account, OpenRouter, Moonshot / Kimi, SiliconFlow, StepFun, Novita, Hyperbolic, DeepInfra, Z.ai GLM Coding Plan, MiniMax Coding Plan, Zhipu AI (GLM Coding Plan, CN), Volcengine (Coding / Agent Plan).
+**Plan capacity / balance adapters:** OpenCode (`opencode-go`, `opencode`), Command Code, DeepSeek, DeepSeek Account, OpenRouter, Moonshot / Kimi, SiliconFlow, StepFun, Novita, Hyperbolic, DeepInfra, Z.ai GLM Coding Plan, MiniMax Coding Plan, Zhipu AI (GLM Coding Plan, CN), Volcengine (Coding / Agent Plan), Open Design (Design Plan windows + wallet balance).
 
 **Harnesses:** DSH, ZCode, OpenCode CLI, WorkBuddy / CodeBuddy CLI, Qoder CN CLI.
 
@@ -132,7 +134,7 @@ Host bridge route: `/api/tokenlens`; agent tool: `tokenlens_usage`.
 
 ## Development
 
-Node.js ≥ 24, zero runtime dependencies: `node --test` runs the 231 tests.
+Node.js ≥ 24, zero runtime dependencies: `node --test` runs the 237 tests.
 
 Release: `node scripts/bump-version.mjs <version> "<note>"` updates `package.json`, `PLUGIN_VERSION` and `CHANGELOG.md`; see [CONTRIBUTING.md](CONTRIBUTING.md) and [SECURITY.md](SECURITY.md).
 

package/README.md

@@ -9,7 +9,7 @@
 
 > **一眼看清你的用量**：在 DSH 输入框下方显示当前供应商的套餐容量，并汇总本机跨 Harness 的 Token 消耗。
 
-**dsh-TokenLens（词元透镜）** 是 DSH（DeepSeek Harness）的用量插件（v1.0.8，公开版本）。它把两类数字**按不同口径**分开呈现：
+**dsh-TokenLens（词元透镜）** 是 DSH（DeepSeek Harness）的用量插件（v1.1.0，公开版本）。它把两类数字**按不同口径**分开呈现：
 
 - **套餐容量**（供应商服务端权威值）：百分比窗口、`已用 / 上限`、账户余额或剩余额度；
 - **本机 Token 统计**（本机记录）：当前供应商在本机所有已接入 Harness 上的合计用量，也可切到「全部 Harness」看总账。
@@ -45,7 +45,7 @@
 - **自动识别**：在 DSH「设置 → 模型服务」中配置过的供应商会自动出现在管理页，并按路由 id 或 baseURL 主机匹配内置用量适配器，自动继承 DSH 中的凭据，无需重复填写。
 - **Agent 工具**：注册 `tokenlens_usage`，模型可以自行查询套餐容量与本机用量。
 
-支持 5 个 Harness：**DSH、ZCode、OpenCode CLI、WorkBuddy / CodeBuddy CLI、Qoder CN CLI**；内置 25 家供应商元数据，其中 15 家带套餐 / 余额适配器。
+支持 5 个 Harness：**DSH、ZCode、OpenCode CLI、WorkBuddy / CodeBuddy CLI、Qoder CN CLI**；内置 25 家供应商元数据，其中 16 家带套餐 / 余额适配器。
 
 ## 效果截图
 
@@ -106,7 +106,7 @@ dsh plugin --profile <profile> add dsh-tokenlens
 ```jsonc
 {
   "dependencies": {
-    "dsh-tokenlens": "^1.0.8"
+    "dsh-tokenlens": "^1.1.0"
   },
   "dsh": {
     "profile": {
@@ -190,6 +190,7 @@ dsh plugin --profile <profile> remove dsh-tokenlens
 - 在 DSH「设置 → 模型服务」中配置过的供应商会被自动识别，插件按路由 id 或 baseURL 主机匹配内置适配器，并继承该路由的 `apiKeyEnv` 凭据。
 - 也可以直接用环境变量提供，例如 `OPENCODE_GO_API_KEY`、`COMMANDCODE_API_KEY`、`DEEPSEEK_API_KEY`、`MOONSHOT_API_KEY` 等（每家供应商的引用见 `lib/providers.mjs`）。
 - 或写入 `$DSH_HOME/.credentials.yaml` 的 `refs:` 映射（与 DSH 凭据服务同一份文档）。
+- **Open Design（OpenDesign）** 的额度查询需要 OpenDesign Cloud 的 **workspace ID + Control Key**（`OPENDESIGN_CONTROL_KEY` 或 `VELA_CONTROL_KEY`），**不是** Cloud API Keys 页的推理 Key（推理 Key 只能调用模型）。workspace ID 写在 provider 配置里，或用 `OPENDESIGN_WORKSPACE_ID` 环境变量；Control Key 也可以在供应商管理页的 Key 输入框填写。
 
 解析顺序（先命中先用）：DSH 凭据服务 → 环境变量 → `$DSH_HOME/.credentials.yaml` → OpenCode CLI 的 `auth.json`（仅默认的 `OPENCODE_GO_API_KEY` 引用）。
 
@@ -239,6 +240,10 @@ dsh plugin --profile <profile> remove dsh-tokenlens
       opencode-go: { enabled: true, apiKeyRef: OPENCODE_GO_API_KEY }
       commandcode: { enabled: true, apiKeyRef: COMMANDCODE_API_KEY }
       deepseek: { enabled: true, apiKeyRef: DEEPSEEK_API_KEY }
+      open-design:                      # 额度查询需要工作区 + Control Key
+        enabled: true
+        workspaceId: '<open-design-workspace-id>'   # 空 = 环境变量 OPENDESIGN_WORKSPACE_ID
+        controlKeyRef: OPENDESIGN_CONTROL_KEY        # 也可用 VELA_CONTROL_KEY
 ```
 
 覆盖规则：
@@ -269,13 +274,15 @@ dsh plugin --profile <profile> remove dsh-tokenlens
 | `minimax` | `GET https://api.minimax.io/v1/api/openplatform/coding_plan/remains`（订阅 Key；国内站 `api.minimaxi.com`） | 5 小时 / 每周 已用百分比（best-effort） |
 | `zhipu-cn` | `GET https://open.bigmodel.cn/api/monitor/usage/quota/limit`（`ZHIPU_API_KEY`） | GLM Coding Plan：5 小时 / 本周 / 每月 百分比 + 方案 |
 | `volcengine` | Coding Plan / AgentPlan：`POST https://open.volcengineapi.com/?Action=GetCodingPlanUsage&Version=2024-01-01`（Signature V4，`VOLCENGINE_ACCESS_KEY_ID` + `VOLCENGINE_SECRET_ACCESS_KEY`） | 5 小时 / 本周 / 每月 百分比 + 档位 |
+| `open-design` | 只读计费接口：`GET https://amr-api.open-design.ai/api/v1/workspaces/{workspaceId}/billing/coding-plan-usage` + `…/wallet/balance`（workspace ID + Control Key：`OPENDESIGN_CONTROL_KEY` / `VELA_CONTROL_KEY`，非推理 Key） | Design Plan 的 5 小时 / 7 天 已用百分比 + 重置时间；钱包余额（USD） |
 
 - OpenCode 的额度定义见[官方文档](https://opencode.ai/docs/go/#usage-limits)（5h = 月度额度的 20%、周 = 50%、月 = 100%）；接口只返回百分比，插件也只画百分比。
 - Command Code 的 `/alpha/*` 是官方 CLI 自用的私有计费路由；免费 / 无方案账户返回空窗口（显示 `—`），插件不会用方案目录猜额度。
+- Open Design 的窗口按账户实际返回的时长渲染：Go 同时有 5 小时和 7 天窗口，Plus / Pro / Max 只有 7 天窗口；钱包余额是独立于窗口的 USD 额度，用尽后继续扣钱包。查询要求工作区权限，鉴权失败会明确显示错误而不是 0。
 - 未配置凭据的供应商 chip 静默隐藏；`zai`、`minimax`、`deepinfra` 属 best-effort 适配（未公开接口，失败时按可重试错误优雅降级）。
 - 各供应商的元数据（`kind` / `label` / `shortLabel` / `baseURL` / `apiKeyRef` / `consoleUrl`）集中在 `lib/providers.mjs` 的 `PROVIDER_DEFAULTS` 与 `ADAPTERS` 中，新增适配器只需在该文件登记并补测试。
 
-另有 10 家**仅元数据**的内置供应商（管理页「内置」中可见）：`sensenova`（商汤 SenseNova）、`qwen`（通义千问）、`qianfan`（百度千帆）、`intern-ai`、`agnes-ai`、`open-design`、`hunyuan`（腾讯混元）、`spark`（讯飞星火）、`yi`（零一万物）、`baichuan`（百川智能）。它们暂缺公开的套餐 / 余额接口适配器，chip 静默隐藏；社区补齐适配器后即可自动生效。
+另有 9 家**仅元数据**的内置供应商（管理页「内置」中可见）：`sensenova`（商汤 SenseNova）、`qwen`（通义千问）、`qianfan`（百度千帆）、`intern-ai`、`agnes-ai`、`hunyuan`（腾讯混元）、`spark`（讯飞星火）、`yi`（零一万物）、`baichuan`（百川智能）。它们没有可用 API Key 查询的公开套餐 / 余额接口：千问 / 百炼的订阅额度只能通过官方 CLI 的控制台登录查询，腾讯混元 / 百度千帆只有云账户余额 API（需云账号 AK/SK），其余供应商仅控制台可见。chip 对它们静默隐藏，后续有稳定接口时再补适配器。
 
 ### 自动识别 DSH 模型设置
 
@@ -382,7 +389,7 @@ Host 半注册 `tokenlens_usage`，参数 `action`（默认 `snapshot`）与可
 
 ## 验证
 
-- `node --test`：**231 个自动化用例**，覆盖 Host 数据层、供应商适配器、统计折叠、各 harness 读取、插件集成与浏览器端渲染 / 交互。
+- `node --test`：**237 个自动化用例**，覆盖 Host 数据层、供应商适配器、统计折叠、各 harness 读取、插件集成与浏览器端渲染 / 交互。
 - 在真实环境中验证过 **5 个 harness** 的数据源；本机统计与独立的 SQLite 查询、独立的日志解析逐项对账（差额为 0），跨 harness 合并与供应商映射算术自洽。
 - 供应商接口按各官方文档与参考客户端行为验证；未配置凭据时 chip 静默隐藏，接口异常时按可重试错误降级。
 
@@ -393,7 +400,7 @@ Host 半注册 `tokenlens_usage`，参数 `action`（默认 `snapshot`）与可
 ```powershell
 git clone https://github.com/daigahou/dsh-tokenlens.git
 cd dsh-tokenlens
-node --test        # 231 个用例
+node --test        # 237 个用例
 ```
 
 本地联调安装方式见[方式 C](#方式-c本地开发从源码-link)。

package/client.js

@@ -3145,7 +3145,13 @@ window.__ModuleLoader__.load({
         return `${providerLabel} · ${parts.join(' · ')}`
       }
       if (snapshot !== null && snapshot.provider.kind === 'windows') {
-        return `${providerLabel} · ${windowsSummaryText(snapshot.windows, t)}`
+        const summary = `${providerLabel} · ${windowsSummaryText(snapshot.windows, t)}`
+        // A windows provider may also carry a wallet balance (OpenDesign): keep the
+        // chip body unchanged and append the money to the hover detail only.
+        if (snapshot.balance !== null) {
+          return `${summary} · ${formatMoney(snapshot.balance.amount, snapshot.balance.currency)}`
+        }
+        return summary
       }
       return `${providerLabel} · ${t('chipNoUsage')}`
     }
@@ -3347,6 +3353,32 @@ window.__ModuleLoader__.load({
       )
     }
 
+    /**
+     * The wallet-balance row of a windows provider (OpenDesign).
+     *
+     * Some providers report allowance windows AND an independent account balance:
+     * a `windows` snapshot may therefore carry a non-null `balance`. The row reuses
+     * the window row's label/value layout so it reads as part of the same card, and
+     * the shared narrow-screen wrapping of `.dsh-tokenlens-row-head` keeps it in view.
+     */
+    function buildCapacityBalanceRow(balance, t) {
+      if (balance === null) return null
+      return h(
+        'div',
+        { key: 'balance', className: 'dsh-tokenlens-row', 'data-capacity-balance': 'true' },
+        h(
+          'div',
+          { className: 'dsh-tokenlens-row-head' },
+          h('span', { className: 'dsh-tokenlens-row-label' }, t('balanceLabel')),
+          h(
+            'span',
+            { className: 'dsh-tokenlens-percent dsh-tokenlens-capacity-money' },
+            formatMoney(balance.amount, balance.currency),
+          ),
+        ),
+      )
+    }
+
     /** The provider/plan/account header line, or null when there is nothing to say. */
     function buildProviderHeader(snapshot, t) {
       if (snapshot === null) return null
@@ -4365,16 +4397,17 @@ window.__ModuleLoader__.load({
           if (card !== null) section.push(card)
           else section.push(h('div', { key: 'no-balance', className: 'dsh-tokenlens-hint' }, t('chipNoUsage')))
         } else if (snapshot.provider.kind === 'windows') {
+          // A windows provider may ALSO report an independent wallet balance
+          // (OpenDesign): show it as one extra row of the same capacity card,
+          // after the allowance windows (or after the "no usage" hint).
+          const balanceRow = buildCapacityBalanceRow(snapshot.balance, t)
           if (snapshot.windows !== null) {
-            section.push(
-              h(
-                'div',
-                { key: 'rows', className: 'dsh-tokenlens-rows' },
-                WINDOW_ORDER.map((id) => buildWindowRow(id, snapshot.windows[id], state, now, t, statsRow)),
-              ),
-            )
+            const rows = WINDOW_ORDER.map((id) => buildWindowRow(id, snapshot.windows[id], state, now, t, statsRow))
+            if (balanceRow !== null) rows.push(balanceRow)
+            section.push(h('div', { key: 'rows', className: 'dsh-tokenlens-rows' }, rows))
           } else {
             section.push(h('div', { key: 'no-windows', className: 'dsh-tokenlens-hint' }, t('chipNoUsage')))
+            if (balanceRow !== null) section.push(balanceRow)
           }
         } else {
           section.push(h('div', { key: 'no-kind', className: 'dsh-tokenlens-hint' }, t('chipNoUsage')))

package/index.js

@@ -71,7 +71,7 @@ export const inject = []
 export const PLUGIN_NAME = 'dsh-tokenlens'
 
 /** Plugin version; mirrors package.json (kept here so diagnostics need no fs read). */
-export const PLUGIN_VERSION = '1.0.8'
+export const PLUGIN_VERSION = '1.1.0'
 
 /** Documented defaults; every field of the raw row config is optional. */
 const DEFAULTS = {
@@ -926,6 +926,49 @@ export function apply(ctx, rawConfig) {
       }
       provider = { ...provider, accessKeyId: accessValue, secretAccessKey: secretValue }
       keyInfo = { ref: accessRef, source: access.source, detail: access.detail }
+    } else if (adapterId === 'open-design') {
+      const workspaceId =
+        String(provider.workspaceId ?? '').trim() || String(process.env.OPENDESIGN_WORKSPACE_ID ?? '').trim()
+      const refs = []
+      for (const ref of [provider.controlKeyRef, 'OPENDESIGN_CONTROL_KEY', 'VELA_CONTROL_KEY']) {
+        if (typeof ref === 'string' && ref.trim() !== '' && !refs.includes(ref.trim())) refs.push(ref.trim())
+      }
+      // The management page's per-provider key field holds the Control Key here
+      // (the inference API key cannot query billing).
+      let controlKey = typeof provider.apiKey === 'string' ? provider.apiKey.trim() : ''
+      let controlRef = refs[0] ?? 'OPENDESIGN_CONTROL_KEY'
+      let controlSource = controlKey === '' ? 'none' : 'config'
+      let controlDetail = controlKey === '' ? 'no OpenDesign control key found' : 'plugin config'
+      if (controlKey === '') {
+        for (const ref of refs) {
+          const resolved = await resolveApiKey({
+            config: { apiKeyRef: ref },
+            credentials: ctx.get('credentials'),
+            env: process.env,
+          })
+          const value = typeof resolved.value === 'string' ? resolved.value.trim() : ''
+          if (value === '') continue
+          controlKey = value
+          controlRef = resolved.ref ?? ref
+          controlSource = resolved.source
+          controlDetail = resolved.detail
+          break
+        }
+      }
+      if (workspaceId === '') {
+        throw new UsageError(
+          'missing-key',
+          'OpenDesign quota needs a workspace id (providers.open-design.workspaceId or OPENDESIGN_WORKSPACE_ID)',
+          { retryable: false },
+        )
+      }
+      if (controlKey === '') {
+        throw new UsageError('missing-key', `OpenDesign quota needs a Control Key (${refs.join(' / ')})`, {
+          retryable: false,
+        })
+      }
+      provider = { ...provider, workspaceId, controlKey }
+      keyInfo = { ref: controlRef, source: controlSource, detail: controlDetail }
     } else if (typeof provider.apiKeyRef === 'string' && provider.apiKeyRef.trim() !== '') {
       const key = await resolveApiKey({
         config: { apiKeyRef: provider.apiKeyRef, apiKey: provider.apiKey ?? '' },

package/lib/providers.mjs

@@ -236,12 +236,16 @@ export const PROVIDER_DEFAULTS = {
     consoleUrl: 'https://agnes.ai',
   },
   'open-design': {
-    kind: 'balance',
+    kind: 'windows',
     label: 'Open Design',
     shortLabel: 'OD',
-    baseURL: 'https://api.open-design.ai',
-    apiKeyRef: 'OPEN_DESIGN_API_KEY',
-    consoleUrl: 'https://open-design.ai',
+    baseURL: 'https://amr-api.open-design.ai',
+    // The read-only billing API is scoped to one workspace and authenticated
+    // with a Control Key (not the inference API key used for model calls).
+    workspaceId: '',
+    controlKeyRef: 'OPENDESIGN_CONTROL_KEY',
+    apiKeyRef: 'OPENDESIGN_CONTROL_KEY',
+    consoleUrl: 'https://open-design.ai/cloud/dashboard',
   },
   hunyuan: {
     kind: 'balance',
@@ -753,6 +757,119 @@ export function parseVolcenginePlan(payload, now = Date.now()) {
   return { windows, plan: tier === null ? null : { id: tier, label: tier } }
 }
 
+/**
+ * OpenDesign Design Plan window seconds → the canonical window id.
+ *
+ * Design Plan allowances are independent simultaneous limits; Go has both a
+ * 5-hour and a 7-day window, while Plus/Pro/Max only have the 7-day one. Any
+ * other duration is not one of the plugin's canonical windows.
+ */
+const OPEN_DESIGN_WINDOW_SECONDS = {
+  18000: 'rolling',
+  604800: 'weekly',
+  2592000: 'monthly',
+}
+
+/** A non-negative integer credit amount serialized as a decimal string. */
+function openDesignCredits(value) {
+  return typeof value === 'string' && /^\d{1,40}$/.test(value) ? BigInt(value) : null
+}
+
+/**
+ * Parse the OpenDesign `billing/coding-plan-usage` document.
+ *
+ * Shape (v1, verified against the official Vela billing adapter):
+ * `{ workspaceId, workspaceMemberId?, eligible, windows: [{ policyId,
+ *    durationSeconds, usedCredits, remainingCredits, limitCredits, resetsAt }] }`
+ * where the credits are decimal strings and `resetsAt` is ISO (or null).
+ * A window's percentage is `used / limit`, capped at 100%; unknown durations
+ * and repeated durations keep only the first canonical window.
+ */
+export function parseOpenDesignUsage(payload, workspaceId, now = Date.now()) {
+  const document = payload !== null && typeof payload === 'object' && !Array.isArray(payload) ? payload : null
+  if (document === null) throw new UsageError('parse', 'the OpenDesign quota response is not an object')
+  const expected = String(workspaceId ?? '').trim()
+  if (typeof document.workspaceId !== 'string' || document.workspaceId !== expected) {
+    throw new UsageError('parse', 'the OpenDesign quota response belongs to a different workspace')
+  }
+  if (typeof document.eligible !== 'boolean') {
+    throw new UsageError('parse', 'the OpenDesign quota response has no eligibility flag')
+  }
+  if (!Array.isArray(document.windows) || document.windows.length > 32) {
+    throw new UsageError('parse', 'the OpenDesign quota response has an invalid windows array')
+  }
+  const inputs = {}
+  const seenPolicies = new Set()
+  for (const row of document.windows) {
+    if (row === null || typeof row !== 'object') {
+      throw new UsageError('parse', 'the OpenDesign quota response has a malformed window')
+    }
+    if (typeof row.policyId !== 'string' || row.policyId === '' || seenPolicies.has(row.policyId)) {
+      throw new UsageError('parse', 'the OpenDesign quota response has an empty or duplicate policy id')
+    }
+    seenPolicies.add(row.policyId)
+    if (!Number.isSafeInteger(row.durationSeconds) || row.durationSeconds <= 0) {
+      throw new UsageError('parse', 'the OpenDesign quota window has no duration')
+    }
+    const used = openDesignCredits(row.usedCredits)
+    const limit = openDesignCredits(row.limitCredits)
+    const remaining = openDesignCredits(row.remainingCredits)
+    if (used === null || limit === null || remaining === null) {
+      throw new UsageError('parse', 'the OpenDesign quota window has invalid credit amounts')
+    }
+    const id = OPEN_DESIGN_WINDOW_SECONDS[row.durationSeconds]
+    if (id === undefined || inputs[id] !== undefined) continue
+    if (limit <= 0n) continue
+    const cappedUsed = used > limit ? limit : used
+    const percent = (Number(cappedUsed) / Number(limit)) * 100
+    inputs[id] = {
+      percent,
+      status: 'ok',
+      resetsAt:
+        typeof row.resetsAt === 'string' || typeof row.resetsAt === 'number' ? row.resetsAt : undefined,
+    }
+  }
+  const windows = windowSet(inputs, now)
+  const usable = WINDOW_IDS.some((id) => windows[id] !== null)
+  if (document.eligible === false) {
+    if (usable) throw new UsageError('parse', 'the OpenDesign quota response reports an ineligible plan with windows')
+    return { windows: windowSet({}, now), plan: null }
+  }
+  if (!usable) throw new UsageError('parse', 'the OpenDesign quota response has no usable allowance windows')
+  return { windows, plan: null }
+}
+
+/**
+ * Parse the OpenDesign `wallet/balance` document.
+ *
+ * Shape (v2): `{ billingScopeVersion: 2, workspaceId, workspaceMemberId,
+ * balanceUsd }` where `balanceUsd` is a decimal string (negative = debt).
+ */
+export function parseOpenDesignWallet(payload, workspaceId) {
+  const document = payload !== null && typeof payload === 'object' && !Array.isArray(payload) ? payload : null
+  if (document === null) throw new UsageError('parse', 'the OpenDesign wallet response is not an object')
+  if (document.billingScopeVersion !== 2) {
+    throw new UsageError('parse', 'the OpenDesign wallet response has an unsupported scope version')
+  }
+  const expected = String(workspaceId ?? '').trim()
+  if (typeof document.workspaceId !== 'string' || document.workspaceId !== expected) {
+    throw new UsageError('parse', 'the OpenDesign wallet response belongs to a different workspace')
+  }
+  if (typeof document.workspaceMemberId !== 'string' || document.workspaceMemberId === '') {
+    throw new UsageError('parse', 'the OpenDesign wallet response has no member identity')
+  }
+  const raw = typeof document.balanceUsd === 'string' && /^-?\d+(?:\.\d+)?$/.test(document.balanceUsd)
+    ? Number(document.balanceUsd)
+    : null
+  if (raw === null || !Number.isFinite(raw)) {
+    throw new UsageError('parse', 'the OpenDesign wallet response has no usable balance')
+  }
+  return {
+    balance: { amount: raw, currency: 'USD' },
+    workspaceMemberId: document.workspaceMemberId,
+  }
+}
+
 /**
  * The provider adapter table. `read()` performs the required network reads and
  * returns the normalized result; optional reads (subscription/whoami) are
@@ -791,6 +908,49 @@ export const ADAPTERS = {
       return { kind: 'windows', ...parseVolcenginePlan(payload, now) }
     },
   },
+  'open-design': {
+    kind: 'windows',
+    async read({ providerId = 'open-design', provider, httpJson, now }) {
+      const config = providerConfig(providerId, provider)
+      const workspaceId = String(config.workspaceId ?? '').trim()
+      if (workspaceId === '') {
+        throw new UsageError(
+          'missing-key',
+          'OpenDesign quota needs a workspace id (providers.open-design.workspaceId or OPENDESIGN_WORKSPACE_ID)',
+          { retryable: false },
+        )
+      }
+      const controlKey = typeof provider.controlKey === 'string' ? provider.controlKey : ''
+      if (controlKey === '') {
+        throw new UsageError('missing-key', 'OpenDesign quota needs a Control Key (OPENDESIGN_CONTROL_KEY or VELA_CONTROL_KEY)', {
+          retryable: false,
+        })
+      }
+      const workspaceBase = joinUrl(config.baseURL, `/api/v1/workspaces/${encodeURIComponent(workspaceId)}`)
+      const headers = {
+        accept: 'application/json',
+        authorization: `Bearer ${controlKey}`,
+        'x-vela-workspace-id': workspaceId,
+      }
+      const usage = await httpJson(`${workspaceBase}/billing/coding-plan-usage`, { method: 'GET', headers })
+      const parsed = parseOpenDesignUsage(usage, workspaceId, now)
+      const wallet = await httpJson(`${workspaceBase}/wallet/balance`, { method: 'GET', headers })
+      const usageMember =
+        usage !== null && typeof usage === 'object' && typeof usage.workspaceMemberId === 'string'
+          ? usage.workspaceMemberId
+          : undefined
+      const walletParsed = parseOpenDesignWallet(wallet, workspaceId)
+      if (usageMember !== undefined && usageMember !== walletParsed.workspaceMemberId) {
+        throw new UsageError('parse', 'the OpenDesign wallet and quota responses name different workspace members')
+      }
+      return {
+        kind: 'windows',
+        windows: parsed.windows,
+        plan: parsed.plan,
+        balance: walletParsed.balance,
+      }
+    },
+  },
   'zhipu-cn': {
     kind: 'windows',
     async read({ providerId = 'zhipu-cn', provider, fetchJson, now }) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-tokenlens",
-  "version": "1.0.8",
+  "version": "1.1.0",
   "type": "module",
   "description": "dsh-TokenLens (词元透镜) — provider-aware plan capacity plus local token statistics (today/7d/30d/all-time, by harness/provider/model/workspace) for DSH.",
   "license": "MIT",