@feiyang666/dsh-usage-plugin 1.9.2 → 1.9.4

package/CHANGELOG.md

@@ -8,10 +8,40 @@
 
 ---
 
+## 开源贡献基础：合并 PR #6（@Martin-soaring-dev，2026-08-20）
+
+> 本期（以及后续 v1.9.2 / v1.9.3）建立在社区贡献分支 **`Martin-soaring-dev/prepare_for_contribution`** 之上。该分支由用户上传、经你合并（GitHub Pull Request #6，合并 commit `12a52be`），是插件转向对外开源贡献的形态基础。
+
+### 该分支带来的主要改动
+- **多服务商余额查询**（`lib/balance.js` 新增 +205 行，新增余额适配器 `BalanceProviderAdapter`）：将原先仅 DeepSeek 的 `/user/balance` 查询扩展为可对接多个服务商的余额查询框架，新增 DeepSeek / SiliconFlow / DigitalOcean / AMD GPU Cloud 等 Provider 适配器。
+- **按服务商展示余额与价格**（`lib/client.js` +258 行）：客户端新增「剩余余额查询」Tab 的多服务商 UI，可分别展示各服务商的「总余额 / 充值 / 赠送」并切换查看。
+- **Provider 化计费**（`lib/index.js` +399 行重构）：注入 `settings` 服务用于服务商查找，调用计费改为 provider-aware，支持按不同服务商分别统计与计价。
+- **插件装配与测试**：新增余额适配器单测（`test/balance.test.js`，+130 行）、`scripts/wire.js` 手动装配兜底、`cordis.patch.yml` 插件注册条目。
+
+### 致谢
+- **[@Martin-soaring-dev](https://github.com/Martin-soaring-dev)**：提交并筹备了上述开源贡献分支（PR #6），是后续公开发布版本的功能与结构基础。
+
+---
+
+## v1.9.4 (2026-08-20)
+
+- **持久化不再落到工作目录（修复「数据又进了工作区」的反馈）**：之前插件的落盘走的是模型侧沙箱化的 `fs` 服务，在 `workspace-write` 模式下会被限制只能写工作区；当系统/用户目录因沙箱不可写时，数据会兜底写进 `<工作区>/dsh-usage`，于是切换工作区又出现「数据没了」的现象（即 issue #4 的本质）。
+- **改动**：持久化改为由插件**宿主进程自身的 `node:fs`** 直接完成，完全绕过 `workspace-write` 沙箱约束。数据根解析优先级变为 `DSH_USAGE_DATA_DIR` > `%LOCALAPPDATA%\dsh-usage-plugin`（或 `%APPDATA%`）> `~/dsh-usage-data`，**工作区降级为绝对最后的兜底**，正常桌面环境下数据稳定落在 AppData / 用户主目录，与当前工作区无关，切换工作区不再丢失历史。导出、价格表、`.keep` 等写操作同样改为宿主进程 `node:fs`，不再依赖受沙箱子进程。
+- **数据迁移**：原有 4558 条历史记录位于 `<工作区>/dsh-usage/usage-records.json`，首次以新版本启动时会被自动去重合并进新的固定数据根（`%LOCALAPPDATA%\dsh-usage-plugin\dsh-usage\usage-records.json`），无需手动处理。
+
+## v1.9.3 (2026-08-20)
+
+- **概览支持日期筛选**：概览 Tab 顶部新增筛选栏，可按「今天 / 近 7 天 / 近 30 天 / 全部」快速切换，或自定义起止日期区间；所有聚合统计（按模型表、服务商 × 模型明细、总计）均按所选范围实时计算，并展示当前范围的记录数与总消耗。
+- **文档**：新增「如何更新插件」章节——桌面端 / 命令行 / 手动三种更新方式、版本锁定、已装版本校验，并提示**勿手改 `node_modules` 下文件**（每次更新会被 npm 覆盖）。
+
 ## v1.9.2 (2026-08-20)
 
 > 修复 issue #4：持久化路径随会话工作区漂移，导致历史用量数据"消失/统计为 0"，且 UI 显示路径与实际落盘路径不一致。
 
+### 背景（症状与根因）
+- **症状**：切换会话工作区、或用不同工作区重开桌面端后，统计页的「历史用量 / 总消耗」变成 0、仿佛数据丢失；同时统计页顶部显示的「数据持久化」路径，与磁盘上真实写入的文件路径对不上。
+- **根因**：旧版持久化根按 `agent.session.cwd` / `sandboxPolicy.workspaceRoot` 推导——无会话启动时常解析到用户主目录，插件激活后又切到当前工作区，且不同根之间不会互相合并，于是历史被「切走」到另一个目录而读不到；写盘还会受工作区沙箱策略约束。
+
 ### 修复
 - **固定专用数据目录**：持久化根不再跟随 `agent.session.cwd` / `sandboxPolicy.workspaceRoot` 漂移。解析顺序为：环境变量 `DSH_USAGE_DATA_DIR` > 系统应用数据目录 `%LOCALAPPDATA%\dsh-usage-plugin`（仅 Windows；macOS/Linux 下该分支不生效，因 `LOCALAPPDATA`/`APPDATA` 未定义）> 用户主目录下专用文件夹 `~/dsh-usage-data`（Windows 为 `%USERPROFILE%\dsh-usage-data`，macOS/Linux 为 `~/dsh-usage-data`）。该目录独立于桌面端安装目录、`~/.dsh` 主目录与任何会话工作区，删除工作区或卸载 APP 都不会丢失数据。
 - **启动时合并去重**：首次初始化与会话激活时，自动把散落在用户主目录、`.dsh`、各工作区旧路径里的 `usage-records.json` 按 `time` 去重合并进固定根（复用现有 `normalizeRecord`），不再只读当前根的那一份。

package/README.md

@@ -32,7 +32,7 @@ dsh-usage-plugin is a **usage & cost tracker** plugin in the DeepSeek Harness ec
 
 > Supports **Windows / macOS / Linux**: paths are handled per platform (`node:path`), and the folder picker / "reveal in file manager" use each OS's native mechanism (macOS: `osascript` / `open`; Linux: `zenity` / `xdg-open`). Balance query and export do not depend on Windows-only commands.
 
-- **Usage & Cost**: records each model call's token usage and cache hits (input miss / cache hit / cache write / output / reasoning / finish reason), and computes cost using DeepSeek's peak/valley or base pricing (peak hours are automatically priced by Beijing time 09:00–12:00 and 14:00–18:00). Model names come from the actual request parameters, so non-DeepSeek models are shown truthfully instead of "unknown model"; models without an official price are counted as 0. The overview shows a by-model table plus a by-API-provider × model drill-down (each provider grouped with every model's calls and peak/off-peak cost split) and a grand total row.
+- **Usage & Cost**: records each model call's token usage and cache hits (input miss / cache hit / cache write / output / reasoning / finish reason), and computes cost using DeepSeek's peak/valley or base pricing (peak hours are automatically priced by Beijing time 09:00–12:00 and 14:00–18:00). Model names come from the actual request parameters, so non-DeepSeek models are shown truthfully instead of "unknown model"; models without an official price are counted as 0. The overview shows a by-model table plus a by-API-provider × model drill-down (each provider grouped with every model's calls and peak/off-peak cost split) and a grand total row. The overview also supports **date filtering** (Today / Last 7 days / Last 30 days / All, plus a custom start–end range), so the aggregate stats can be scoped to any single day or date range.
 - **Usage Calendar**: a monthly daily-usage heatmap (colored by cost or call count), hover for details including the peak/off-peak cost split, click a day for its call list and peak/off-peak totals, plus a per-day statistics table with peak cost / off-peak cost / total columns and monthly rollups.
 - **Cache Hit List**: newest-first, fully scrollable, with quick filters (Today / 7 days / 30 days / All) and custom date ranges; the summary line and footer total split peak vs off-peak consumption with a grand cost total. The list is paginated (100 rows per page), so it stays smooth even with large data volumes.
 - **Price Table**: the official DeepSeek API price table — base and peak/valley unit prices shown side by side (peak vs off-peak), editable in-panel and persisted to `pricing.json`, with a reset-to-default option.
@@ -193,15 +193,55 @@ For manual installs (Method B), do it in reverse: remove the `usage-plugin` row
 
 ---
 
+## How to update
+
+Releasing happens on npm, so updating just means pulling the latest published package. Your usage history is **safe** — since v1.9.2 it lives in a fixed dedicated directory (not in any profile / workspace), so an update never wipes it.
+
+### Desktop app
+Open **"Install Plugins"** → find **Usage & Cost Tracker** → click **Update** (or **Re-install**) → **"Restart Service Now"**. If there is no Update button, just remove then re-add it.
+
+### Command line (Method A)
+Re-running `add` is idempotent and pulls the newest version:
+
+```bash
+dsh plugin --profile web add @feiyang666/dsh-usage-plugin
+dsh web   # restart
+```
+
+Pin a specific version:
+
+```bash
+dsh plugin --profile web add @feiyang666/dsh-usage-plugin@1.9.3
+```
+
+### Manual install (Method B)
+In the profile dir:
+
+```bash
+cd ~/.dsh/profiles/web
+pnpm update @feiyang666/dsh-usage-plugin   # or: npm update @feiyang666/dsh-usage-plugin
+```
+
+### Verify the installed version
+```bash
+npm ls @feiyang666/dsh-usage-plugin --prefix ~/.dsh/profiles/web
+```
+
+> ⚠️ **Do not hand-edit files under `~/.dsh/profiles/web/node_modules/@feiyang666/dsh-usage-plugin/`** (e.g. `lib/index.js` / `lib/client.js`). Every update re-extracts the package from npm and overwrites those files, so local edits are silently lost. To change behavior, fork the repo and publish your own version, or contribute upstream.
+
+---
+
 ## Data & locations
 
 > **Since v1.9.2**, records are stored in a **fixed, dedicated data directory** (fixes [#4](https://github.com/feiyang-dev/dsh-usage-plugin/issues/4)). The path no longer follows the session workspace / `~/.dsh` / desktop-app install dir, so your history never "disappears" (counted as 0) when the workspace changes, and the path shown in the UI equals the on-disk path.
 
 - **Records**: `<data root>/dsh-usage/usage-records.json`
-  - Resolution order for the **data root**:
+  - Resolution order for the **data root** (data always lands in the **first writable** dir of this list, **never in the workspace** unless all of the below are unwritable):
     1. env var `DSH_USAGE_DATA_DIR` (if set) — overrides everything;
     2. Windows: `%LOCALAPPDATA%\dsh-usage-plugin` (falls back to `%APPDATA%` if `LOCALAPPDATA` is unset);
-    3. user home dir: `~/dsh-usage-data` (Windows `%USERPROFILE%\dsh-usage-data`, macOS/Linux `~/dsh-usage-data`).
+    3. user home dir: `~/dsh-usage-data` (Windows `%USERPROFILE%\dsh-usage-data`, macOS/Linux `~/dsh-usage-data`);
+    4. **fallback (rare)**: current workspace `<workspace>/dsh-usage` — only used when all system/user dirs above are unwritable, and the panel will show a "persistence disabled" warning.
+  - **Writes bypass the model sandbox**: persistence is done by the host plugin process's own filesystem, not subject to the `workspace-write` sandbox, so the fixed directory is always writable and data is not lost when switching workspaces.
   - Default on Windows: `%LOCALAPPDATA%\dsh-usage-plugin\dsh-usage\usage-records.json`
 - **Legacy data auto-merge**: on first start, records previously scattered in `%USERPROFILE%\dsh-usage`, `~/.dsh/dsh-usage`, and each workspace's `dsh-usage` (or `.dsh-usage-records.json`) are merged into the fixed root, deduplicated by `time` — no manual migration needed.
 - Price config (edited & saved in the panel): `<data root>/dsh-usage/pricing.json`
@@ -259,6 +299,7 @@ pnpm dsh web
 
 ## Acknowledgements
 
+- **[@Martin-soaring-dev](https://github.com/Martin-soaring-dev)**: prepared the plugin for public contribution (packaging, plugin-contract checks, docs & CI) and submitted the contribution branch that became the basis for the open-source releases ([#6](https://github.com/feiyang-dev/dsh-usage-plugin/pull/6)).
 - **[@mumuer1024](https://github.com/mumuer1024)**: reported and diagnosed the persistence-path drift across workspaces (history "disappearing" / counted as 0) and proposed storing data in a fixed, dedicated directory ([#4](https://github.com/feiyang-dev/dsh-usage-plugin/issues/4)).
 - **[@liu3734](https://github.com/liu3734)**: reported and diagnosed the Windows-only path handling / spawn issues on macOS (POSIX) and proposed the cross-platform fix ([#1](https://github.com/feiyang-dev/dsh-usage-plugin/issues/1)).
 

package/README.zh.md

@@ -32,14 +32,14 @@ dsh-usage-plugin 是 DeepSeek Harness 生态的**用量与消耗统计插件**
 
 > 支持 **Windows / macOS / Linux**：路径按当前平台处理（`node:path`），目录选择与「打开所在目录」均调用系统原生方式（macOS 用 `osascript` / `open`，Linux 用 `zenity` / `xdg-open`），余额查询与导出不依赖 Windows 专用命令。
 
-- **用量与消耗**：记录每次模型调用的 token 用量与缓存命中（输入·未命中 / 缓存命中 / 缓存写入 / 输出 / 推理 / 结束原因），按 DeepSeek 峰谷/基础价格计算消耗（高峰时段自动按北京时间 9:00–12:00、14:00–18:00 计价）。模型名以请求参数为准如实显示（非 DeepSeek 模型不再显示为「未知模型」，无官方价格的模型消耗按 0 统计）。概览含「按模型」表与「按 API 服务商 × 模型」明细表（每个服务商一组，组内列出各模型的调用与高峰/空闲分列消耗），底部有总费用合计。
+- **用量与消耗**：记录每次模型调用的 token 用量与缓存命中（输入·未命中 / 缓存命中 / 缓存写入 / 输出 / 推理 / 结束原因），按 DeepSeek 峰谷/基础价格计算消耗（高峰时段自动按北京时间 9:00–12:00、14:00–18:00 计价）。模型名以请求参数为准如实显示（非 DeepSeek 模型不再显示为「未知模型」，无官方价格的模型消耗按 0 统计）。概览含「按模型」表与「按 API 服务商 × 模型」明细表（每个服务商一组，组内列出各模型的调用与高峰/空闲分列消耗），底部有总费用合计。概览还支持**日期筛选**（今天 / 近 7 天 / 近 30 天 / 全部，外加自定义起止区间），可将聚合统计限定到任意一天或日期范围。
 - **用量日历**：按月查看每日用量热力图（按消耗或调用数着色），悬停查看详情（含高峰 / 空闲消耗拆分）、点击某天查看当日调用明细与高峰/空闲消耗统计，附本月每日统计表（高峰消耗 / 空闲消耗 / 总消耗分列）与月度汇总。
 - **缓存命中列表**：最新记录排在最前，支持 今天 / 近7天 / 近30天 / 全部 快捷筛选与自定义起止日期区间，汇总行与表尾合计区分高峰消耗 / 空闲消耗 / 总费用合计；列表分页渲染（每页 100 条），记录量大也不卡顿。
 - **价格表**：**DeepSeek 官方 API 价格表**，展示基础价与峰谷价（高峰/空闲）单价表，高峰价与空闲价分列展示，支持在面板内直接编辑价格并持久化（数据目录 `pricing.json`），也可一键恢复默认。
 - **剩余余额查询**：用当前配置的 `DEEPSEEK_API_KEY` 查询 DeepSeek 账户余额。
 - **导出**：CSV / JSON / **PNG 长图**（按最新在前展示，最多含最近 2000 条，超出会提示；PNG 报告含高峰 / 空闲消耗分列统计），可导出到任意目录（原生目录选择器），导出后自动打开所在目录。
 - **导入**：选择文件（JSON / CSV）合并导入，按时间去重。
-- **持久化**：记录实时落盘到 `<会话工作区>/dsh-usage/usage-records.json`，重启自动恢复（上限 100000 条，尽量多存）。
+- **持久化**：记录实时落盘到**固定专用数据目录**（如 `%LOCALAPPDATA%\dsh-usage-plugin\dsh-usage\usage-records.json`，详见下文「数据目录」），与当前工作区无关，重启自动恢复（上限 100000 条，尽量多存）。
 - **界面适配**：面板字号跟随应用「显示大小」设置自动缩放（em 相对字号），面板宽度以视口封顶、宽表格在容器内横向滑动（max-content + overflow-x），任何窗口大小下所有列与合计都完整可见，不会裁掉右侧内容。
 
 ---
@@ -193,15 +193,55 @@ dsh plugin --profile web remove @feiyang666/dsh-usage-plugin
 
 ---
 
+## 如何更新插件
+
+发布在 npm 上，因此更新本质就是把已发布的包拉到最新——你的用量历史**不会丢**（自 v1.9.2 起数据存放在固定的专用目录，不位于任何 profile / 工作区，更新不会清掉它）。
+
+### 桌面端
+打开 **「安装插件」** → 找到 **Usage & Cost Tracker** → 点 **更新**（或 **重新安装**）→ **「立即重启服务」**。若没有更新按钮，先卸载再重新安装即可。
+
+### 命令行（方式 A）
+重新执行 `add` 是幂等的，会拉取最新版本：
+
+```bash
+dsh plugin --profile web add @feiyang666/dsh-usage-plugin
+dsh web   # 重启
+```
+
+锁定某个版本：
+
+```bash
+dsh plugin --profile web add @feiyang666/dsh-usage-plugin@1.9.3
+```
+
+### 手动安装（方式 B）
+在 profile 目录下：
+
+```bash
+cd ~/.dsh/profiles/web
+pnpm update @feiyang666/dsh-usage-plugin   # 或：npm update @feiyang666/dsh-usage-plugin
+```
+
+### 查看已装版本
+```bash
+npm ls @feiyang666/dsh-usage-plugin --prefix ~/.dsh/profiles/web
+```
+
+> ⚠️ **不要手动修改 `~/.dsh/profiles/web/node_modules/@feiyang666/dsh-usage-plugin/` 下的文件**（如 `lib/index.js` / `lib/client.js`）。每次更新都会从 npm 重新解包并覆盖这些文件，本地改动会被静默丢弃。如需改行为，请 fork 仓库自行发布版本或向上游提贡献。
+
+---
+
 ## 数据与位置
 
 > **自 v1.9.2 起**，记录存储在**固定专用数据目录**中（修复 [#4](https://github.com/feiyang-dev/dsh-usage-plugin/issues/4)）。路径不再跟随会话工作区 / `~/.dsh` / 桌面端安装目录漂移，因此切换工作区时历史数据不会再"消失"（被统计为 0），且 UI 中显示的路径与真实落盘路径始终一致。
 
 - 数据文件：`<数据根>/dsh-usage/usage-records.json`
-  - **数据根**的解析顺序：
+  - **数据根**的解析顺序（数据始终落在该顺序里**第一个可写**的目录，**不会放进工作区**，除非以下全部不可写）：
     1. 环境变量 `DSH_USAGE_DATA_DIR`（若已设置）——优先级最高，覆盖其它；
     2. Windows：`%LOCALAPPDATA%\dsh-usage-plugin`（若 `LOCALAPPDATA` 未设置则回退到 `%APPDATA%`）；
-    3. 用户主目录：`~/dsh-usage-data`（Windows 为 `%USERPROFILE%\dsh-usage-data`，macOS/Linux 为 `~/dsh-usage-data`）。
+    3. 用户主目录：`~/dsh-usage-data`（Windows 为 `%USERPROFILE%\dsh-usage-data`，macOS/Linux 为 `~/dsh-usage-data`）；
+    4. **兜底（极少见）**：当前工作区 `<工作区>/dsh-usage` —— 仅当上述系统/用户目录都不可写时才使用，并会在面板顶部提示「持久化未启用」。
+  - **写入不经过模型沙箱**：持久化由插件宿主进程自身的文件系统直接完成，不受 `workspace-write` 沙箱约束，因此固定目录一定能正常写入，数据也不因工作区切换而丢失。
   - Windows 下默认位置：`%LOCALAPPDATA%\dsh-usage-plugin\dsh-usage\usage-records.json`
 - 旧数据自动合并：首次启动时，落在 `%USERPROFILE%\dsh-usage`、`~/.dsh/dsh-usage` 以及各工作区 `dsh-usage`（或 `.dsh-usage-records.json`）下的旧记录会按 `time` 去重合并进固定数据根，无需手动迁移。
 - 价格配置（面板内编辑后保存）：`<数据根>/dsh-usage/pricing.json`
@@ -259,6 +299,7 @@ pnpm dsh web
 
 ## 致谢
 
+- **[@Martin-soaring-dev](https://github.com/Martin-soaring-dev)**：筹备了插件开源贡献（打包、插件契约校验、文档与 CI），并提交贡献分支，成为后续开源版本的基础（[#6](https://github.com/feiyang-dev/dsh-usage-plugin/pull/6)）。
 - **[@mumuer1024](https://github.com/mumuer1024)**：报告并定位了持久化路径随会话工作区漂移导致历史数据"消失/统计为 0"的问题，提出把数据写到固定专用目录的方案（[#4](https://github.com/feiyang-dev/dsh-usage-plugin/issues/4)）。
 - **[@liu3734](https://github.com/liu3734)**：报告并定位 macOS（POSIX）下路径处理与 spawn 的 Windows 专用问题，提出跨平台修复方案（[#1](https://github.com/feiyang-dev/dsh-usage-plugin/issues/1)）。
 

package/lib/client.js

@@ -409,7 +409,30 @@ window.__ModuleLoader__.load({
 
     // ── Overview view ──
     function OverviewView(props) {
-      var records = props.records, regime = props.regime;
+      var allRecords = props.records, regime = props.regime;
+      var presetState = React.useState("all");
+      var preset = presetState[0], setPreset = presetState[1];
+      var fromState = React.useState("");
+      var fromDate = fromState[0], setFromDate = fromState[1];
+      var toState = React.useState("");
+      var toDate = toState[0], setToDate = toState[1];
+
+      var nowKey = bjKey(Date.now());
+      var fromMs = null, toMs = null;
+      if (preset === "today") { fromMs = bjStartMs(nowKey); toMs = Date.now(); }
+      else if (preset === "7d") { fromMs = bjStartMs(nowKey) - 6 * 86400000; toMs = Date.now(); }
+      else if (preset === "30d") { fromMs = bjStartMs(nowKey) - 29 * 86400000; toMs = Date.now(); }
+      else if (preset === "custom") {
+        if (fromDate) fromMs = bjStartMs(fromDate);
+        if (toDate) toMs = bjStartMs(toDate) + 86400000 - 1;
+      }
+      var records = [];
+      for (var fi = 0; fi < allRecords.length; fi++) {
+        var fr = allRecords[fi];
+        if (fromMs != null && fr.time < fromMs) continue;
+        if (toMs != null && fr.time > toMs) continue;
+        records.push(fr);
+      }
       var totalCalls = records.length;
       var totalHit = 0, totalMiss = 0, totalWrite = 0, totalOut = 0, totalReason = 0, totalCost = 0, peakTotal = 0, offTotal = 0, peakCalls = 0, offCalls = 0;
       var byModel = {}, byProvider = {}, byProviderModel = {};
@@ -519,7 +542,26 @@ window.__ModuleLoader__.load({
         el("td", { style: st.tdTotal }, fmtMoney(totalCost))
       ));
 
+      function presetBtn(k, label) {
+        return el("button", { style: preset === k ? st.segBtnOn : st.segBtn, onClick: function () { setPreset(k); } }, label);
+      }
+      function setCustomFrom(v) { setFromDate(v); setPreset("custom"); }
+      function setCustomTo(v) { setToDate(v); setPreset("custom"); }
+
       return el("div", null,
+        el("div", { style: st.calBar },
+          el("div", { style: st.seg },
+            presetBtn("today", "今天"), presetBtn("7d", "近7天"), presetBtn("30d", "近30天"), presetBtn("all", "全部")
+          ),
+          el("span", { style: st.note }, "自定义区间："),
+          el("input", { type: "date", style: st.dateInput, value: fromDate, onChange: function (e) { setCustomFrom(e.target.value); } }),
+          el("span", { style: st.note }, "至"),
+          el("input", { type: "date", style: st.dateInput, value: toDate, onChange: function (e) { setCustomTo(e.target.value); } }),
+          (fromDate || toDate || preset !== "all") ? el("button", { style: st.btn, onClick: function () { setFromDate(""); setToDate(""); setPreset("all"); } }, "清除筛选") : null
+        ),
+        el("div", { style: st.note, marginTop: 8 },
+          "当前范围：共 " + fmtInt(records.length) + " 条" + (preset === "all" && !fromDate && !toDate ? "（全部记录）" : "") + " · 总消耗 " + fmtMoney(totalCost) + "（" + costHint(regime) + "）"
+        ),
         el("div", { style: st.cards },
           el(Card, { label: "调用次数", value: fmtInt(totalCalls), hint: "高峰 " + fmtInt(peakCalls) + " · 空闲 " + fmtInt(offCalls) }),
           el(Card, { label: "输入 · 未命中", value: fmtInt(totalMiss), hint: "token" }),

package/lib/index.js

@@ -16,6 +16,7 @@
  */
 import path from 'node:path'
 import os from 'node:os'
+import { promises as fsp, existsSync } from 'node:fs'
 import {
   getBalanceProvider,
   matchesModelProvider,
@@ -167,6 +168,14 @@ export default {
         return IS_WIN ? s.replace(/\//g, '\\') : s
       }
       const joinPath = (...parts) => path.join(...parts.map((p) => String(p == null ? '' : p)))
+      // 插件自身持久化统一走宿主进程的 node:fs（不经 ctx.fs 沙箱），
+      // 因此可稳定写入工作区之外的系统目录，切换工作区也不会丢失历史。
+      const nfsWriteText = async (filePath, content) => {
+        await fsp.mkdir(path.dirname(filePath), { recursive: true })
+        await fsp.writeFile(filePath, content, 'utf8')
+      }
+      const nfsReadText = async (filePath) => fsp.readFile(filePath, 'utf8')
+      const nfsExists = (filePath) => { try { return existsSync(filePath) } catch (e) { return false } }
       const stamp = () => {
         const d = new Date()
         return `${d.getFullYear()}${pad2(d.getMonth() + 1)}${pad2(d.getDate())}-${pad2(d.getHours())}${pad2(d.getMinutes())}${pad2(d.getSeconds())}`
@@ -265,31 +274,21 @@ export default {
       }
 
       function persistNow() {
-        if (!fs || !dataPath || !persistOk) return Promise.resolve()
+        if (!dataPath || !persistOk) return Promise.resolve()
         const text = JSON.stringify(records)
-        const policy = undefined
-        writeChain = writeChain.then(() =>
-          fs.resolve(dataPath).then((target) =>
-            fs.writeText(target, text, undefined, undefined, policy || undefined)
-          )
-        ).catch(() => {})
+        writeChain = writeChain.then(() => nfsWriteText(dataPath, text)).catch(() => {})
         return writeChain
       }
 
       function persistPricing() {
-        if (!fs || !pricingPath || !persistOk) return Promise.resolve()
-        const text = JSON.stringify(PRICING)
-        const policy = undefined
-        return fs.resolve(pricingPath)
-          .then((target) => fs.writeText(target, text, undefined, undefined, policy || undefined))
-          .catch(() => {})
+        if (!pricingPath || !persistOk) return Promise.resolve()
+        return nfsWriteText(pricingPath, JSON.stringify(PRICING)).catch(() => {})
       }
 
-      async function loadPricing(policy) {
-        if (!fs || !pricingPath) return
+      async function loadPricing() {
+        if (!pricingPath) return
         try {
-          const target = await fs.resolve(pricingPath)
-          const data = JSON.parse(await fs.readText(target))
+          const data = JSON.parse(await nfsReadText(pricingPath))
           if (!data || typeof data !== 'object') return
           for (const regime of ['base', 'peakValley']) {
             const src = data[regime]
@@ -328,31 +327,33 @@ export default {
         }
       }
 
-      async function tryInitWithRoot(candidate, policy) {
+      async function tryInitWithRoot(candidate) {
         const tryPath = joinPath(normPath(candidate), 'dsh-usage', 'usage-records.json')
         try {
-          const target = await fs.resolve(tryPath)
-          const arr = JSON.parse(await fs.readText(target))
-          if (Array.isArray(arr) && arr.length > 0) {
-            const existing = {}
-            for (let i = 0; i < records.length; i++) existing[records[i].time] = true
-            for (let i = 0; i < arr.length; i++) {
-              const rec = normalizeRecord(arr[i])
-              if (!rec || existing[rec.time]) continue
-              existing[rec.time] = true
-              records.push(rec)
+          if (nfsExists(tryPath)) {
+            const arr = JSON.parse(await nfsReadText(tryPath))
+            if (Array.isArray(arr) && arr.length > 0) {
+              const existing = {}
+              for (let i = 0; i < records.length; i++) existing[records[i].time] = true
+              for (let i = 0; i < arr.length; i++) {
+                const rec = normalizeRecord(arr[i])
+                if (!rec || existing[rec.time]) continue
+                existing[rec.time] = true
+                records.push(rec)
+              }
+              if (records.length > MAX_RECORDS) records.splice(0, records.length - MAX_RECORDS)
+              records.sort((a, b) => a.time - b.time)
             }
-            if (records.length > MAX_RECORDS) records.splice(0, records.length - MAX_RECORDS)
-            records.sort((a, b) => a.time - b.time)
           }
         } catch (e) {}
         try {
-          const target = await fs.resolve(tryPath)
-          await fs.writeText(target, JSON.stringify(records), undefined, undefined, policy || undefined)
+          // 真实试写以确认该目录可写；用宿主进程的 node:fs，不受 workspace-write
+          // 沙箱约束，因此活动数据根会落在工作区之外的系统/用户目录。
+          await nfsWriteText(tryPath, JSON.stringify(records))
           root = normPath(candidate)
           dataPath = tryPath
           pricingPath = joinPath(path.dirname(dataPath), 'pricing.json')
-          await loadPricing(policy)
+          await loadPricing()
           persistOk = true
           persistError = ''
           return { ok: true }
@@ -362,7 +363,6 @@ export default {
       }
 
       async function migrateLegacy(candidates) {
-        if (!fs) return
         const paths = []
         for (const c of candidates) {
           paths.push(joinPath(normPath(c), '.dsh-usage-records.json'))
@@ -370,7 +370,8 @@ export default {
         }
         for (const p of paths) {
           try {
-            const arr = JSON.parse(await fs.readText(await fs.resolve(p)))
+            if (!nfsExists(p)) continue
+            const arr = JSON.parse(await nfsReadText(p))
             if (Array.isArray(arr)) {
               const existing = {}
               for (let j = 0; j < records.length; j++) existing[records[j].time] = true
@@ -387,17 +388,27 @@ export default {
         }
       }
 
-      // 固定、专用的数据目录：不随工作区漂移，也不放在 DSH 主目录(~/.dsh)或
-      // 桌面端安装目录。优先级：环境变量 DSH_USAGE_DATA_DIR >
-      // 系统应用数据目录(AppData/Local 或 ~/Library/Application Support) >
+      // 固定、专用的数据目录：不随工作区漂移，也绝不放进工作目录。
+      // 优先级：环境变量 DSH_USAGE_DATA_DIR >
+      // 系统应用数据目录(LOCALAPPDATA 或 APPDATA 下的 dsh-usage-plugin) >
       // 用户主目录下的专用文件夹 dsh-usage-data。
+      // 这些目录由宿主进程 node:fs 直接写入，不受 workspace-write 沙箱约束，
+      // 因此数据稳定地落在工作区之外——切换工作区也不会丢失历史。
+      // 仅在以上目录全部不可写时，才兜底写到工作区（极少见，且会提示用户）。
       function resolveDataRoot() {
         const out = []
         const env = ((typeof process !== 'undefined' && process.env && process.env.DSH_USAGE_DATA_DIR) || '').trim()
         if (env) out.push(normPath(env))
-        const appData = (typeof process !== 'undefined' && process.env) ? (process.env.LOCALAPPDATA || process.env.APPDATA) : ''
-        if (appData) out.push(joinPath(normPath(appData), 'dsh-usage-plugin'))
+        const localApp = (typeof process !== 'undefined' && process.env) ? (process.env.LOCALAPPDATA || '') : ''
+        if (localApp) out.push(joinPath(normPath(localApp), 'dsh-usage-plugin'))
+        const roamingApp = (typeof process !== 'undefined' && process.env) ? (process.env.APPDATA || '') : ''
+        if (roamingApp) out.push(joinPath(normPath(roamingApp), 'dsh-usage-plugin'))
         out.push(joinPath(normPath(os.homedir()), 'dsh-usage-data'))
+        // 兜底（极少见）：以上均不可写时落到工作区，保证不丢数据并提示用户。
+        try {
+          const sp = ctx.get('sandboxPolicy')
+          if (sp && sp.workspaceRoot) out.push(joinPath(normPath(String(sp.workspaceRoot)), 'dsh-usage'))
+        } catch (e) {}
         return out
       }
 
@@ -419,17 +430,16 @@ export default {
       // 会话激活后不再切换根目录（避免路径漂移/历史被拆散）；仅把工作区里
       // 可能遗留的旧记录并入固定的数据根。
       async function ensureSessionRoot() {
-        if (!fs || !persistOk) return
+        if (!persistOk) return
         await migrateLegacy(knownLegacyRoots())
         persistNow()
       }
 
       async function initPersistence() {
-        if (!fs) { persistError = '文件服务不可用'; return }
         const candidates = resolveDataRoot()
         let lastError = ''
         for (const c of candidates) {
-          const r = await tryInitWithRoot(c, undefined)
+          const r = await tryInitWithRoot(c)
           if (r.ok) {
             // 首次初始化时把散落在 主目录/.dsh/各工作区 的历史记录合并进来
             await migrateLegacy(knownLegacyRoots())
@@ -511,11 +521,10 @@ export default {
 
       // ── balance / network helpers ──────────────────────────────────────────
       async function safeCwd() {
-        if (root && fs) {
+        if (root) {
           try {
-            const t = await fs.resolve(root)
-            const info = await fs.stat(t)
-            if (info) return root
+            await fsp.stat(root)
+            return root
           } catch (e) {}
         }
         return (typeof process !== 'undefined' && typeof process.cwd === 'function' && process.cwd()) || '.'
@@ -861,41 +870,23 @@ export default {
       }
 
       async function writePngFile(base64, outPath) {
-        const script = [
-          'const fs=require("fs");',
-          'let d="";',
-          'process.stdin.on("data",function(c){d+=c});',
-          'process.stdin.on("end",function(){',
-          '  const buf=Buffer.from(d,"base64");',
-          '  fs.mkdirSync(require("path").dirname(process.env.PNG_PATH),{recursive:true});',
-          '  fs.writeFileSync(process.env.PNG_PATH,buf);',
-          '  process.stdout.write(JSON.stringify({ok:true,bytes:buf.length}));',
-          '});'
-        ].join('\n')
-        return spawnNode(script, base64, { PNG_PATH: outPath })
+        try {
+          await fsp.mkdir(path.dirname(outPath), { recursive: true })
+          await fsp.writeFile(outPath, Buffer.from(base64, 'base64'))
+          return { ok: true }
+        } catch (e) { return { ok: false, error: msg(e) } }
       }
 
       async function writeTextFileViaNode(content, outPath) {
-        const script = [
-          'const fs=require("fs");',
-          'let d="";',
-          'process.stdin.on("data",function(c){d+=c});',
-          'process.stdin.on("end",function(){',
-          '  fs.mkdirSync(require("path").dirname(process.env.OUT_PATH),{recursive:true});',
-          '  fs.writeFileSync(process.env.OUT_PATH, Buffer.from(d,"utf8"));',
-          '  process.stdout.write(JSON.stringify({ok:true}));',
-          '});'
-        ].join('\n')
-        return spawnNode(script, content, { OUT_PATH: outPath })
+        try {
+          await fsp.mkdir(path.dirname(outPath), { recursive: true })
+          await fsp.writeFile(outPath, Buffer.from(content, 'utf8'))
+          return { ok: true }
+        } catch (e) { return { ok: false, error: msg(e) } }
       }
 
       async function mkdirViaNode(dir) {
-        const script = [
-          'const fs=require("fs");',
-          'fs.mkdirSync(process.env.MKDIR_PATH,{recursive:true});',
-          'process.stdout.write(JSON.stringify({ok:true}));'
-        ].join('\n')
-        return spawnNode(script, null, { MKDIR_PATH: dir })
+        try { await fsp.mkdir(dir, { recursive: true }); return { ok: true } } catch (e) { return { ok: false, error: msg(e) } }
       }
 
       async function pickDirectory() {
@@ -949,10 +940,8 @@ export default {
           const d = dirs()
           target = dirArg === 'csv' ? d.csv : dirArg === 'json' ? d.json : dirArg === 'images' ? d.images : d.data
           target = normPath(target)
-          const policy = sessionPolicy()
           try {
-            const t = await fs.resolve(joinPath(target, '.keep'))
-            await fs.writeText(t, '', undefined, undefined, policy || undefined)
+            await nfsWriteText(joinPath(target, '.keep'), '')
           } catch (e) {}
         } else {
           target = normPath(dirArg)
@@ -1044,7 +1033,7 @@ export default {
           case 'pickDir':
             return pickDirectory()
           case 'export': {
-            if (!root) return fail('未找到工作区路径')
+            if (!root) return fail('未找到数据根目录')
             const kind = (body && body.kind) === 'json' ? 'json' : 'csv'
             const name = 'dsh-usage-' + stamp() + (kind === 'json' ? '.json' : '.csv')
             const content = kind === 'json'
@@ -1059,9 +1048,8 @@ export default {
             }
             const outPath = joinPath(kind === 'json' ? dirs().json : dirs().csv, name)
             try {
-              const target = await fs.resolve(outPath)
-              await fs.writeText(target, content, undefined, undefined, sessionPolicy() || undefined)
-              return { ok: true, path: normPath(fs.processPath ? fs.processPath(target) : outPath), name, dir: kind === 'json' ? 'json' : 'csv' }
+              await nfsWriteText(outPath, content)
+              return { ok: true, path: normPath(outPath), name, dir: kind === 'json' ? 'json' : 'csv' }
             } catch (e) { return fail(msg(e)) }
           }
           case 'exportPng': {
@@ -1069,7 +1057,7 @@ export default {
             if (!dataUrl) return fail('缺少图片数据')
             const idx = dataUrl.indexOf('base64,')
             const b64 = idx >= 0 ? dataUrl.slice(idx + 7) : dataUrl
-            if (!root) return fail('未找到工作区路径')
+            if (!root) return fail('未找到数据根目录')
             const name = 'dsh-usage-report-' + stamp() + '.png'
             const dirArg = body && body.dir ? normPath(String(body.dir)) : ''
             const outPath = normPath(joinPath(dirArg || dirs().images, name))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feiyang666/dsh-usage-plugin",
-  "version": "1.9.2",
+  "version": "1.9.4",
   "description": "DeepSeek Harness usage & cost tracker plugin: per-call token/cache-hit stats, peak/off-peak billing, DeepSeek balance query, CSV/JSON/PNG export with custom destination, and persistent local storage. Ships a host half plus a web client half in one npm package; installs into a DSH profile as a dsh.bundle with one command (dsh plugin --profile web add @feiyang666/dsh-usage-plugin).",
   "keywords": [
     "deepseek",
@@ -21,6 +21,10 @@
     "url": "git+https://github.com/feiyang-dev/dsh-usage-plugin.git"
   },
   "contributors": [
+    {
+      "name": "Martin-soaring-dev",
+      "url": "https://github.com/Martin-soaring-dev"
+    },
     {
       "name": "liu3734",
       "url": "https://github.com/liu3734"