QuotaDeck models provider → accounts → windows[], so new provider-defined windows flow through storage, API, and UI without a session/weekly hard-code. The daemon binds to loopback, embeds its Preact frontend in one Go binary, stores history in SQLite WAL, streams updates with Server-Sent Events, and sends no telemetry.
A Codex account whose session has expired offers Reconnect on its own card, through the browser or a device code, without dropping to a terminal.
Choose System, Light, or Dark in the dashboard header. The theme preference is saved locally; System follows changes to your device's appearance automatically.
The dashboard also controls which plan new Claude Code sessions use. Compare consumption and reset times, then choose Use in Claude Code directly on a Claude account card. Z.ai GLM Coding Plan, Kimi K3 and OpenCode Go (DeepSeek V4.1 Flash) can be activated alongside their quotas. Kimi can reuse the local Kimi Code login and renew it automatically, without a separate API key. Manage plans opens setup for these providers without leaving the dashboard or editing configuration files. When cswap is absent, QuotaDeck can install the supported claude-swap package with uv or pipx and add the current Claude Code login.
Install
Download the latest assets from GitHub Releases.
Debian and Linux Mint
sudo apt install ./quotadeck_0.1.0_amd64.deb
The package contains the CLI/server, native Wails desktop application, systemd user unit, launcher, and Cinnamon panel applet. Open QuotaDeck from the application menu after installation.
Portable AppImage
chmod +x QuotaDeck-0.1.0-x86_64.AppImage
./QuotaDeck-0.1.0-x86_64.AppImage
See the installation guide for the standalone CLI, source builds, and first diagnostics.
Providers
- Claude:
cswap list --json is the canonical multi-account source. Explicit plan selection calls cswap switch <slot> --json; QuotaDeck never calls cswap export, opens its credential store, or refreshes Claude OAuth itself.
- Codex: one
codex app-server --stdio process per configured CODEX_HOME reads account and rate-limit metadata. QuotaDeck does not read or modify auth.json.
- Z.ai: explicit environment references,
ZAI_API_KEY, GLM_API_KEY, and recognized Z.ai entries in Claude settings. Tokens never enter the domain model, database, diagnostics, logs, or API responses; in-memory sources are deduplicated with a truncated SHA-256 fingerprint.
- OpenCode Go / Go Plus: rolling, weekly and monthly allowance from the local OpenCode v2 Console connection, with automatic OAuth renewal and DeepSeek V4.1 Flash selection for Claude Code.
- Kimi: the Kimi for Coding plan, read from the Kimi Code usage API with
KIMI_API_KEY/KIMI_CODING_API_KEY, a recognized Kimi base URL in Claude settings, or the signed-in Kimi Code CLI credentials under ~/.kimi-code. Same privacy rules as Z.ai.
Full setup instructions live in the provider guide.
Build and run
The recommended development environment is Devbox, which pins Go, Node.js, ImageMagick, uv, and Debian packaging tools:
devbox run bootstrap
devbox run test
devbox run -- make package-deb VERSION=0.2.9
Linux desktop builds deliberately use the host C compiler and GTK/WebKitGTK development libraries, even when invoked through Devbox. This keeps .deb executables linked to distribution libraries instead of the machine-specific Nix store. On Debian/Ubuntu, install build-essential, pkg-config, libgtk-3-dev, and libwebkit2gtk-4.1-dev. Without Devbox, Go 1.25+, Node.js 22+, npm, ImageMagick, and dpkg-deb are also required.
npm ci --prefix web
make test
make lint
make build
./dist/quotadeck serve
Open http://127.0.0.1:9211. For frontend/backend development, use make dev. For UI work with synthetic accounts and no provider discovery, use make demo and open http://127.0.0.1:9212.
Configuration and CLI
The default configuration is ${XDG_CONFIG_HOME:-~/.config}/quotadeck/config.yaml; a missing file uses safe defaults. Data is stored at ${XDG_DATA_HOME:-~/.local/share}/quotadeck/quotadeck.db with 30-day retention and a 60-second polling interval.
quotadeck doctor
quotadeck setup cswap
quotadeck refresh
quotadeck status --json
quotadeck service install --user
quotadeck service status
doctor reports paths, versions, source decisions, and secret-presence booleans only. It never returns token values. See configuration and troubleshooting.
HTTP API
GET /api/v1/state
GET /api/v1/providers
GET /api/v1/accounts
GET /api/v1/accounts/{id}/history?from=&to=
GET /api/v1/health
GET /api/v1/doctor
GET /api/v1/events
GET /api/v1/control
POST /api/v1/refresh
POST /api/v1/control/claude/switch
POST /api/v1/control/claude/account
PUT /api/v1/control/zai
PUT /api/v1/control/kimi
PUT /api/v1/control/opencode
Manual refresh and plan changes are loopback-only and require QuotaDeck's explicit request header. Errors are redacted before persistence; temporary failures keep the last valid windows visible as stale. Control responses expose only secret-presence booleans, never key values.
Packaging
make desktop-build
make package-cinnamon
make package-deb
make package-appimage
The AppImage toolchain is pinned by version and SHA-256. Release checksums are published alongside every GitHub release.
Security and contributing
QuotaDeck enforces loopback binding and keeps provider secrets outside domain objects, logs, SQLite, API responses, fixtures, and diagnostics. Read SECURITY.md before reporting a vulnerability.
Contributions are welcome; start with CONTRIBUTING.md. Architecture decisions are recorded in ADR 0001 and ADR 0002.
MIT licensed.
