dsh-tokenlens 1.3.7 → 1.3.9

package/CHANGELOG.md

@@ -4,18 +4,20 @@
 
 **版本记录约定**：同一发布日只保留一个章节，标题取当日**最后一个**已发布版本号；当日多次发布的改动合并到该章节，并在标题下注明当日实际发布过的版本号（npm 上仍可安装这些独立版本）。若当日已有发布，后续小改动不再单独增加版本号，而是并入下一篇日志。这样日志按天规整、不出现同日多个小版本。
 
-## 1.3.7 — 2026-11-02
+## 1.3.9 — 2026-11-02
 
-（当日已发布版本：v1.3.5 / v1.3.6 / v1.3.7）
+（当日已发布版本：v1.3.5 / v1.3.6 / v1.3.7 / v1.3.8 / v1.3.9）
 
 - feat(ui): 供应商管理页可为 **Open Design** 填写「工作区 ID」并持久化到插件配置——此前 workspaceId 只能在 profile patch 或 `OPENDESIGN_WORKSPACE_ID` 里设置，用推理 Key 配好供应商后额度卡片仍报错却无处可改
+- feat(ui): **Control Key 也能在弹窗里直接填**（v1.3.9）——Open Design 卡片新增密码型输入框，粘贴保存即写入插件自己的 store；输入框是只写的（Host 只回 `hasKey` / `keySource`，secret 永不下发浏览器），保存成功后自动清空并改用「已保存；要替换请重新粘贴」占位提示。小白用户不再需要手改 `.credentials.yaml`
+- feat(ui): 「工作区 ID」输入框支持**直接粘贴整条控制台地址**——`https://open-design.ai/cloud/dashboard?workspaceId=ws_x&tab=billing` 会自动提取出 `ws_x`，避免用户复制整条 URL 后被校验拒绝
 - feat(ui): Open Design 额度失败时的引导——详情弹窗的错误条说明「额度查询需要工作区 ID 与 Control Key（不是推理 Key）」，并提供「去配置」按钮直接跳到供应商管理页
 - feat(host): Host 侧错误文案更具体（区分缺 workspaceId / 缺 Control Key，并指向管理页）；`providerUpdate` 接受 `workspaceId`，校验为 1–120 位标识符字符（字母、数字、`. _ : @ -`），路径穿越/空格/超长一律拒绝
 - feat(wire): `providers[]` 仅对声明了 workspace 的适配器（Open Design）下发 `workspaceId` 字段；其余供应商不下发，客户端据此决定是否渲染输入框（旧 Host 无此字段 ⇒ 不渲染，自然降级）
 - feat(ui): Open Design 缺配置时 chip 不再按 `missing-key` 静默隐藏，而是显示「待配置」并可点进详情看引导——否则用户既看不到提示也没有入口
 - fix(tool): Agent 工具 `tokenlens_usage` 的 `updateCheck` 动作此前虽在枚举里却会落到用量读取分支，返回当前供应商的用量或错误；现在正确执行更新检查并返回 `UpdateInfo`
-- docs: 中英 README 补充 **workspace ID 与 Control Key 到底在哪里取**——workspace ID 在控制台 URL 的 `?workspaceId=`（或成员邀请页的「工作空间 ID」），Control Key 是桌面端 / `vela login` 写入 `~/.amr/config.json` 的 `profiles.prod.controlKey`；并说明用推理 Key 冒充会得到 401
-- 测试：280 → 286（workspace ID 校验/持久化/清空、管理页字段渲染与保存、缺 workspaceId 的 Host 报错与引导按钮、待配置 chip、工具 updateCheck 分发）
+- docs: 中英 README 补充 **workspace ID 与 Control Key 到底在哪里取**——控制台的「套餐与余额」页没有独立的 ID 字段，workspace ID 取自地址栏的 `?workspaceId=`（成员邀请预览页也会显示「工作空间 ID」），而 `~/.amr/config.json` 只存 `controlKey` / `runtimeKey` / `apiUrl` / `linkUrl`、不含 workspace ID；Control Key 是桌面端 / `vela login` 写入该文件的 `profiles.prod.controlKey`，用推理 Key 冒充会得到 401
+- 测试：280 → 289（workspace ID 校验/持久化/清空与 URL 提取、管理页字段渲染、Control Key 只写保存与不回声、缺 workspaceId 的 Host 报错与引导按钮、待配置 chip、工具 updateCheck 分发）
 
 ## 1.3.4 — 2026-11-01
 

package/PROTOCOL.md

@@ -116,10 +116,13 @@ row at the end of the capacity card and appends the amount to the chip tooltip.
 **workspace id** (the console URL's `?workspaceId=` value) and a **Control Key**
 (the `profiles.prod.controlKey` the desktop app / `vela login` writes to
 `~/.amr/config.json`). The inference key from the Cloud API Keys page answers
-HTTP 401 on the billing endpoints. Missing either value is a `missing-key` error;
-the workspace id may be set from the management page (persisted in
-`providers.json`, v1.3.5) and the Control Key comes from `OPENDESIGN_CONTROL_KEY`,
-`VELA_CONTROL_KEY`, the credential store, or that page's key field.
+HTTP 401 on the billing endpoints. Missing either value is a `missing-key` error.
+Since v1.3.9 both may be entered on the management page: `workspaceId` is
+persisted in `providers.json`, and the Control Key is written through the same
+`apiKey` override field the store already supported (write-only — the Host never
+returns it, only `hasKey`/`keySource`). The environment/credential sources
+(`OPENDESIGN_CONTROL_KEY`, `VELA_CONTROL_KEY`, `OPENDESIGN_WORKSPACE_ID`) still
+work and the page override wins.
 
 Rules:
 

package/README.en.md

@@ -111,9 +111,11 @@ Open Design (OpenDesign) is the exception: its read-only billing API needs a **w
 
 **Where the two values come from.** Neither is on the Cloud API Keys page.
 
-- *Workspace ID* — the console keeps it in the URL: open 套餐与余额 (or 成员) and read `open-design.ai/cloud/dashboard?workspaceId=<the id>`; the member-invite confirmation page also prints it as 「工作空间 ID」.
+- *Workspace ID* — the console has **no dedicated field for it**; it appears in the address bar: open 套餐与余额 or 成员 and read `open-design.ai/cloud/dashboard?workspaceId=<the id>`. A member-invite preview page also lists it as 「工作空间 ID」. `~/.amr/config.json` stores only the keys/URLs, not the workspace id.
 - *Control Key* — a session credential that the Open Design desktop app / `vela` CLI writes to `~/.amr/config.json` when you sign in (`profiles.prod.controlKey`). Sign in once with the desktop app, or run `vela login` and approve the browser prompt, then copy that value (or point the plugin at it). Pasting the inference key instead makes the quota call answer HTTP 401.
 
+Both values can be entered right in the plugin (simplest for non-technical users): usage dialog → 管理 → 供应商配置 → expand **Open Design**. The workspace-ID field also accepts a whole pasted console URL (`...?workspaceId=xxx` is extracted), and the Control Key field is a write-only password input — saving it stores the secret in the plugin's own store, and the Host never echoes it back (only `hasKey`). Press 测试连接 afterwards. Alternatively put `OPENDESIGN_CONTROL_KEY` in `$DSH_HOME/.credentials.yaml` `refs:` (or the environment) and the workspace id in `OPENDESIGN_WORKSPACE_ID`.
+
 See the [Chinese README](README.md) for the full configuration reference, preview and provider tables.
 
 ## Supported providers and harnesses

package/README.md

@@ -201,11 +201,11 @@ dsh plugin --profile <profile> remove dsh-tokenlens
 
 **1. workspace ID**
 
-控制台的页面路由里带着它，任选一种：
+这个控制台**没有单独一栏显示工作区 ID**（截图里的「套餐与余额」页只有额度、余额、充值），它只出现在两处：
 
-- 在 Cloud 控制台里随便点进「套餐与余额」或「成员」，看地址栏：`open-design.ai/cloud/dashboard?workspaceId=<这一串>`；把 `workspaceId=` 后面的值复制出来即可。
-- 或者打开「成员」页 → 邀请成员，邀请确认页会以「工作空间 ID」为标签直接显示这个值。
-- 或者装了桌面端时，本机 `~/.amr/config.json` 的 `profiles.prod` 里也记录了当前会话对应的 workspace（键名 `controlKey` 同级的配置块）。
+- **地址栏**：在 Cloud 控制台里点进「套餐与余额」或「成员」等任意页面，地址会变成 `open-design.ai/cloud/dashboard?workspaceId=<这一串>`——`workspaceId=` 后面、`&` 之前的整段就是。这是最可靠的取法。
+- **成员邀请预览页**：生成一条成员邀请并打开它，确认页会把「工作空间 ID」作为一条信息列出来。
+- 装了桌面端的话，本机 `~/.amr/config.json` 只保存 `controlKey` / `runtimeKey` / `apiUrl` / `linkUrl`，**不含** workspace ID，别在这里找。
 
 **2. Control Key**
 
@@ -231,8 +231,11 @@ Control Key 是 **Open Design 桌面端/CLI 登录时写入本机的会话凭据
 
 拿到后两种放法：
 
-- 写进 `$DSH_HOME/.credentials.yaml` 的 `refs:` 下：`OPENDESIGN_CONTROL_KEY: <control key>`（或环境变量 `OPENDESIGN_CONTROL_KEY` / `VELA_CONTROL_KEY`）；
-- workspace ID 在插件的[供应商管理页](#供应商管理) Open Design 卡片里填写，或用 `OPENDESIGN_WORKSPACE_ID` 环境变量。
+- **最简单（推荐给不折腾的用户）**：全部在插件里填——用量弹窗 →「管理」→「供应商配置」→ 展开 **Open Design**：
+  - 「工作区 ID」：直接粘贴控制台地址整条也行（`...?workspaceId=xxx` 会自动提取出 ID）；
+  - 「Control Key」：粘贴后保存，输入框是密码型、保存后不再显示（Host 只回 `hasKey`，secret 永不下发浏览器）。
+  保存后点「测试连接」，出现 5 小时 / 7 天百分比与钱包余额即成功。
+- **或写配置文件**：Control Key 写进 `$DSH_HOME/.credentials.yaml` 的 `refs:` 下 `OPENDESIGN_CONTROL_KEY: <control key>`（或环境变量 `OPENDESIGN_CONTROL_KEY` / `VELA_CONTROL_KEY`）；workspace ID 用 `OPENDESIGN_WORKSPACE_ID` 环境变量或 profile 配置。
 
 > 这也解释了最容易踩的坑：**用推理 Key 填 Control Key** 会让额度查询返回 401。插件已经区分这两种凭据，缺哪一项都会指名道姓地提示。
 

package/client.js

@@ -331,8 +331,12 @@ window.__ModuleLoader__.load({
       providerConsoleURLPlaceholder: '留空则使用内置默认地址',
       providerWorkspaceId: '工作区 ID（Workspace ID）',
       providerWorkspaceIdHint: 'Open Design Cloud 工作区标识；额度查询需要',
-      providerWorkspaceIdPlaceholder: '留空则使用环境变量 OPENDESIGN_WORKSPACE_ID',
+      providerWorkspaceIdPlaceholder: '粘贴工作区 ID，或直接粘贴控制台地址（自动提取）',
       providerWorkspaceIdTooLong: '工作区 ID 最多 120 个字符',
+      providerControlKey: 'Control Key',
+      providerControlKeyHint: '本机 Open Design 登录后写在 ~/.amr/config.json 的 profiles.prod.controlKey；不是 Cloud API Keys 页的推理 Key',
+      providerControlKeyPlaceholder: '粘贴 Control Key（保存后不再显示）',
+      providerControlKeySaved: '已保存；要替换请重新粘贴',
       configureProvider: '去配置',
       errorOpenDesignConfig: 'Open Design 额度查询需要工作区 ID 与 Control Key（不是推理 Key）',
       providerSave: '保存',
@@ -582,8 +586,12 @@ window.__ModuleLoader__.load({
       providerConsoleURL: 'Console URL',
       providerWorkspaceId: 'Workspace ID',
       providerWorkspaceIdHint: 'The Open Design Cloud workspace identifier the quota query is scoped to',
-      providerWorkspaceIdPlaceholder: 'Empty uses the OPENDESIGN_WORKSPACE_ID environment variable',
+      providerWorkspaceIdPlaceholder: 'Paste the workspace ID, or the console URL (it is extracted)',
       providerWorkspaceIdTooLong: 'The workspace ID may be at most 120 characters',
+      providerControlKey: 'Control Key',
+      providerControlKeyHint: 'Written to ~/.amr/config.json as profiles.prod.controlKey after signing in to Open Design; not the inference key from the Cloud API Keys page',
+      providerControlKeyPlaceholder: 'Paste the Control Key (never shown again after saving)',
+      providerControlKeySaved: 'Saved; paste again to replace it',
       configureProvider: 'Configure',
       errorOpenDesignConfig: 'Open Design quota needs a workspace ID and a Control Key (not an inference key)',
       providerConsoleURLPlaceholder: 'Leave empty for the built-in default',
@@ -2329,6 +2337,10 @@ window.__ModuleLoader__.load({
             const clearedDraft = hasField('consoleUrl')
             const resetNames = !clearedDraft && (hasField('shortLabel') || hasField('label'))
             const resetWorkspace = hasField('workspaceId')
+            // v1.3.9: a saved secret is never echoed back, so the typed value is
+            // dropped after the Host confirms it (the placeholder then reports
+            // "already saved" through the answered hasKey flag).
+            const resetSecret = hasField('apiKey')
             const rowTest = { ...current.rowTest }
             delete rowTest[providerId]
             // Adopt the answered list; a Host that omits it must not blank the page.
@@ -2336,7 +2348,7 @@ window.__ModuleLoader__.load({
             let nextDrafts = current.drafts
             if (clearedDraft) {
               nextDrafts = mapWithout(current.drafts, providerId)
-            } else if (resetNames || resetWorkspace) {
+            } else if (resetNames || resetWorkspace || resetSecret) {
               const draft = current.drafts[providerId]
               const answered = adoptsList
                 ? parsed.providers.find((entry) => entry.providerId === providerId)
@@ -2355,6 +2367,7 @@ window.__ModuleLoader__.load({
                       ? answered.workspaceId
                       : draft.workspaceId
                 }
+                if (resetSecret) next.apiKey = ''
                 nextDrafts = mapWith(current.drafts, providerId, next)
               }
             }
@@ -2843,6 +2856,9 @@ window.__ModuleLoader__.load({
         shortLabel: provider.shortLabel,
         label: provider.label,
         workspaceId: typeof provider.workspaceId === 'string' ? provider.workspaceId : '',
+        // A secret is never seeded from the wire: it starts empty and only
+        // carries what the user just typed (v1.3.9).
+        apiKey: '',
       }
     }
 
@@ -2869,6 +2885,10 @@ window.__ModuleLoader__.load({
         const wireWorkspaceId = typeof provider.workspaceId === 'string' ? provider.workspaceId : ''
         const workspaceId = typeof source.workspaceId === 'string' ? source.workspaceId.trim() : wireWorkspaceId
         if (workspaceId !== wireWorkspaceId) update.workspaceId = workspaceId
+        // v1.3.9: the Control Key is write-only. A typed value is sent once; an
+        // empty draft means "leave the stored secret alone", never "clear it".
+        const apiKey = typeof source.apiKey === 'string' ? source.apiKey.trim() : ''
+        if (apiKey !== '') update.apiKey = apiKey
       }
       return update
     }
@@ -2893,21 +2913,43 @@ window.__ModuleLoader__.load({
               shortLabel: provider.shortLabel,
               label: provider.label,
               workspaceId: typeof provider.workspaceId === 'string' ? provider.workspaceId : '',
+              apiKey: '',
             }),
       })
     }
 
-    /** Record one typed editor value (names, the display-only console URL, the workspace id). */
+    /**
+     * Accept a pasted console URL and pull the workspace id out of it (v1.3.9):
+     * beginners copy the whole address bar, so `…?workspaceId=abc&x=1` must
+     * reduce to `abc` instead of being rejected for containing slashes.
+     */
+    function extractWorkspaceId(raw) {
+      const text = typeof raw === 'string' ? raw.trim() : ''
+      if (text === '') return ''
+      const match = /[?&]workspaceId=([^&#\s]+)/i.exec(text)
+      if (match === null) return text
+      try {
+        return decodeURIComponent(match[1])
+      } catch {
+        return match[1]
+      }
+    }
+
+    /** Record one typed editor value (names, the display-only console URL, the workspace id, a typed secret). */
     function updateProviderDraft(provider, field, value) {
-      if (field !== 'consoleUrl' && field !== 'shortLabel' && field !== 'label' && field !== 'workspaceId') return
-      if (field === 'workspaceId' && provider.supportsWorkspaceId !== true) return
+      if (field !== 'consoleUrl' && field !== 'shortLabel' && field !== 'label' && field !== 'workspaceId' && field !== 'apiKey') {
+        return
+      }
+      if ((field === 'workspaceId' || field === 'apiKey') && provider.supportsWorkspaceId !== true) return
       if (provider === null || provider === undefined) return
       const current = store.get().management
       const draft = providerDraftOf(provider, current)
       patchManagement({
         drafts: mapWith(current.drafts, provider.providerId, {
           ...draft,
-          [field]: typeof value === 'string' ? value : '',
+          // v1.3.9: a pasted console URL is reduced to its workspace id as the
+          // user types, so the save never posts a URL or gets rejected.
+          [field]: field === 'workspaceId' ? extractWorkspaceId(value) : typeof value === 'string' ? value : '',
         }),
       })
     }
@@ -5943,6 +5985,43 @@ window.__ModuleLoader__.load({
       return (typeof value === 'string' ? value.trim() : '').length
     }
 
+    /**
+     * One write-only credential field (v1.3.9).
+     *
+     * The Host never sends a stored secret back, so the input always starts empty
+     * and its placeholder reports whether a value is already saved. Typing a new
+     * value stages `{apiKey}` on the draft; the save button then sends it once,
+     * and a successful save clears it again (the Host keeps the secret).
+     */
+    function buildProviderSecretField(provider, management, t, options) {
+      const providerId = provider.providerId
+      const draft = providerDraftOf(provider, management)
+      const disabled = management.busy[providerId] !== undefined
+      const value = typeof draft[options.field] === 'string' ? draft[options.field] : ''
+      return h(
+        'div',
+        { key: options.key, className: 'dsh-tokenlens-field' },
+        h(
+          'div',
+          { className: 'dsh-tokenlens-field-head' },
+          h('span', { className: 'dsh-tokenlens-field-label' }, options.label),
+          h('span', { className: 'dsh-tokenlens-field-hint' }, options.hint),
+        ),
+        h('input', {
+          type: 'password',
+          className: `dsh-tokenlens-input ${options.className}`,
+          [options.dataAttr]: providerId,
+          value,
+          placeholder: options.placeholder,
+          disabled,
+          autoComplete: 'off',
+          spellCheck: false,
+          'aria-label': options.label,
+          onChange: (event) => updateProviderDraft(provider, options.field, event?.target?.value),
+        }),
+      )
+    }
+
     /**
      * One editable name field (v0.12.0): a text input capped at the Host limit,
      * with a permanent limit hint and an inline error while the draft is longer
@@ -6072,6 +6151,20 @@ window.__ModuleLoader__.load({
             : buildDshUnmanagedRow(provider, t)
       const fields = [
         sourceRow,
+        // v1.3.9: Open Design's Control Key cannot come from the DSH model
+        // settings (that route holds the inference key, which the billing API
+        // rejects), so this one provider gets a write-only credential input.
+        provider.supportsWorkspaceId === true
+          ? buildProviderSecretField(provider, management, t, {
+              key: 'apiKey',
+              className: 'dsh-tokenlens-controlkey-input',
+              dataAttr: 'data-provider-controlkey',
+              field: 'apiKey',
+              placeholder: provider.hasKey === true ? t('providerControlKeySaved') : t('providerControlKeyPlaceholder'),
+              label: t('providerControlKey'),
+              hint: t('providerControlKeyHint'),
+            })
+          : null,
         buildProviderNameField(provider, management, t, {
           key: 'shortLabel',
           className: 'dsh-tokenlens-shortlabel-input',

package/index.js

@@ -76,7 +76,7 @@ export const inject = []
 export const PLUGIN_NAME = 'dsh-tokenlens'
 
 /** Plugin version; mirrors package.json (kept here so diagnostics need no fs read). */
-export const PLUGIN_VERSION = '1.3.7'
+export const PLUGIN_VERSION = '1.3.9'
 
 /** Documented defaults; every field of the raw row config is optional. */
 const DEFAULTS = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-tokenlens",
-  "version": "1.3.7",
+  "version": "1.3.9",
   "type": "module",
   "description": "dsh-TokenLens (词元透镜) — provider-aware plan capacity plus local token statistics (today/7d/30d/all-time, by harness/provider/model/workspace) for DSH.",
   "license": "MIT",