@feiyang666/dsh-usage-plugin 1.9.4 → 1.10.0

package/CHANGELOG.md

@@ -23,6 +23,15 @@
 
 ---
 
+## v1.10.0 (2026-08-23)
+
+- **新增 DeepSeek 官方模型 `deepseek-v4-flash-vision-exp`（DeepSeek-V4-Flash-Vision-Exp）**：官方价格表、概览「按模型」表、按 API 服务商 × 模型明细、用量日历、缓存命中列表与 PNG 报告均自动按该模型计价；「价格表」页新增该模型一行，`modelKey` 识别优先匹配 `vision`（避免被误归入 `deepseek-v4-flash`）。
+- **价格**（元 / 百万 tokens，与官方最新公布一致）：空闲时段 缓存命中 0.05 / 输入未命中 1.5 / 输出 4.5；高峰时段 缓存命中 0.10 / 输入未命中 3.0 / 输出 9.0（与 `deepseek-v4-flash` 同价）。
+- **核对确认**：`deepseek-v4-flash` / `deepseek-v4-pro` 的峰谷价与官方最新公布完全一致，无价格变动；发送给该模型的图片按其尺寸换算成 token，与文本 token 一并计费。
+- **周末统一按空闲（低谷）价计费（2026-08-23 00:00 起）**：新规则生效后，周末（周六、周日）全天不再区分峰谷时段，统一按空闲价计费；工作日仍按北京时间 9:00–12:00、14:00–18:00 高峰分段。新规则生效前的调用仍按原规则结算。插件的高峰时段判定、面板「当前时段」徽标、概览 / 日历 / 缓存列表的高峰与空闲分列统计、PNG 报告均按新规则自动判断。
+
+---
+
 ## v1.9.4 (2026-08-20)
 
 - **持久化不再落到工作目录（修复「数据又进了工作区」的反馈）**：之前插件的落盘走的是模型侧沙箱化的 `fs` 服务，在 `workspace-write` 模式下会被限制只能写工作区；当系统/用户目录因沙箱不可写时，数据会兜底写进 `<工作区>/dsh-usage`，于是切换工作区又出现「数据没了」的现象（即 issue #4 的本质）。

package/README.md

@@ -32,10 +32,10 @@ dsh-usage-plugin is a **usage & cost tracker** plugin in the DeepSeek Harness ec
 
 > Supports **Windows / macOS / Linux**: paths are handled per platform (`node:path`), and the folder picker / "reveal in file manager" use each OS's native mechanism (macOS: `osascript` / `open`; Linux: `zenity` / `xdg-open`). Balance query and export do not depend on Windows-only commands.
 
-- **Usage & Cost**: records each model call's token usage and cache hits (input miss / cache hit / cache write / output / reasoning / finish reason), and computes cost using DeepSeek's peak/valley or base pricing (peak hours are automatically priced by Beijing time 09:00–12:00 and 14:00–18:00). Model names come from the actual request parameters, so non-DeepSeek models are shown truthfully instead of "unknown model"; models without an official price are counted as 0. The overview shows a by-model table plus a by-API-provider × model drill-down (each provider grouped with every model's calls and peak/off-peak cost split) and a grand total row. The overview also supports **date filtering** (Today / Last 7 days / Last 30 days / All, plus a custom start–end range), so the aggregate stats can be scoped to any single day or date range.
+- **Usage & Cost**: records each model call's token usage and cache hits (input miss / cache hit / cache write / output / reasoning / finish reason), and computes cost using DeepSeek's peak/valley or base pricing (peak hours on weekdays are automatically priced by Beijing time 09:00–12:00 and 14:00–18:00; since 2026-08-23 weekends are billed entirely at the off-peak rate). Model names come from the actual request parameters, so non-DeepSeek models are shown truthfully instead of "unknown model"; models without an official price are counted as 0. The overview shows a by-model table plus a by-API-provider × model drill-down (each provider grouped with every model's calls and peak/off-peak cost split) and a grand total row. The overview also supports **date filtering** (Today / Last 7 days / Last 30 days / All, plus a custom start–end range), so the aggregate stats can be scoped to any single day or date range.
 - **Usage Calendar**: a monthly daily-usage heatmap (colored by cost or call count), hover for details including the peak/off-peak cost split, click a day for its call list and peak/off-peak totals, plus a per-day statistics table with peak cost / off-peak cost / total columns and monthly rollups.
 - **Cache Hit List**: newest-first, fully scrollable, with quick filters (Today / 7 days / 30 days / All) and custom date ranges; the summary line and footer total split peak vs off-peak consumption with a grand cost total. The list is paginated (100 rows per page), so it stays smooth even with large data volumes.
-- **Price Table**: the official DeepSeek API price table — base and peak/valley unit prices shown side by side (peak vs off-peak), editable in-panel and persisted to `pricing.json`, with a reset-to-default option.
+- **Price Table**: the official DeepSeek API price table (covering `deepseek-v4-flash` / `deepseek-v4-flash-vision-exp` / `deepseek-v4-pro`) — base and peak/valley unit prices shown side by side (peak vs off-peak), editable in-panel and persisted to `pricing.json`, with a reset-to-default option.
 - **Balance Query**: queries your DeepSeek account balance using the configured `DEEPSEEK_API_KEY`.
 - **Export**: CSV / JSON / **PNG long image** (newest-first, up to the latest 2000 records, warns if exceeded; the PNG report includes peak/off-peak cost columns), to any directory (native picker), auto-opens the folder after export.
 - **Import**: merge-imports JSON / CSV files, deduplicated by time.

package/README.zh.md

@@ -32,10 +32,10 @@ dsh-usage-plugin 是 DeepSeek Harness 生态的**用量与消耗统计插件**
 
 > 支持 **Windows / macOS / Linux**：路径按当前平台处理（`node:path`），目录选择与「打开所在目录」均调用系统原生方式（macOS 用 `osascript` / `open`，Linux 用 `zenity` / `xdg-open`），余额查询与导出不依赖 Windows 专用命令。
 
-- **用量与消耗**：记录每次模型调用的 token 用量与缓存命中（输入·未命中 / 缓存命中 / 缓存写入 / 输出 / 推理 / 结束原因），按 DeepSeek 峰谷/基础价格计算消耗（高峰时段自动按北京时间 9:00–12:00、14:00–18:00 计价）。模型名以请求参数为准如实显示（非 DeepSeek 模型不再显示为「未知模型」，无官方价格的模型消耗按 0 统计）。概览含「按模型」表与「按 API 服务商 × 模型」明细表（每个服务商一组，组内列出各模型的调用与高峰/空闲分列消耗），底部有总费用合计。概览还支持**日期筛选**（今天 / 近 7 天 / 近 30 天 / 全部，外加自定义起止区间），可将聚合统计限定到任意一天或日期范围。
+- **用量与消耗**：记录每次模型调用的 token 用量与缓存命中（输入·未命中 / 缓存命中 / 缓存写入 / 输出 / 推理 / 结束原因），按 DeepSeek 峰谷/基础价格计算消耗（工作日高峰时段按北京时间 9:00–12:00、14:00–18:00 计价；自 2026-08-23 起周末全天按空闲价计费）。模型名以请求参数为准如实显示（非 DeepSeek 模型不再显示为「未知模型」，无官方价格的模型消耗按 0 统计）。概览含「按模型」表与「按 API 服务商 × 模型」明细表（每个服务商一组，组内列出各模型的调用与高峰/空闲分列消耗），底部有总费用合计。概览还支持**日期筛选**（今天 / 近 7 天 / 近 30 天 / 全部，外加自定义起止区间），可将聚合统计限定到任意一天或日期范围。
 - **用量日历**：按月查看每日用量热力图（按消耗或调用数着色），悬停查看详情（含高峰 / 空闲消耗拆分）、点击某天查看当日调用明细与高峰/空闲消耗统计，附本月每日统计表（高峰消耗 / 空闲消耗 / 总消耗分列）与月度汇总。
 - **缓存命中列表**：最新记录排在最前，支持 今天 / 近7天 / 近30天 / 全部 快捷筛选与自定义起止日期区间，汇总行与表尾合计区分高峰消耗 / 空闲消耗 / 总费用合计；列表分页渲染（每页 100 条），记录量大也不卡顿。
-- **价格表**：**DeepSeek 官方 API 价格表**，展示基础价与峰谷价（高峰/空闲）单价表，高峰价与空闲价分列展示，支持在面板内直接编辑价格并持久化（数据目录 `pricing.json`），也可一键恢复默认。
+- **价格表**：**DeepSeek 官方 API 价格表**（覆盖官方模型 `deepseek-v4-flash` / `deepseek-v4-flash-vision-exp` / `deepseek-v4-pro`），展示基础价与峰谷价（高峰/空闲）单价表，高峰价与空闲价分列展示，支持在面板内直接编辑价格并持久化（数据目录 `pricing.json`），也可一键恢复默认。
 - **剩余余额查询**：用当前配置的 `DEEPSEEK_API_KEY` 查询 DeepSeek 账户余额。
 - **导出**：CSV / JSON / **PNG 长图**（按最新在前展示，最多含最近 2000 条，超出会提示；PNG 报告含高峰 / 空闲消耗分列统计），可导出到任意目录（原生目录选择器），导出后自动打开所在目录。
 - **导入**：选择文件（JSON / CSV）合并导入，按时间去重。

package/lib/client.js

@@ -87,7 +87,7 @@ window.__ModuleLoader__.load({
     var fmtTime = function (ts) { var d = new Date(ts + 8 * 3600 * 1000); return pad2(d.getUTCMonth() + 1) + "-" + pad2(d.getUTCDate()) + " " + pad2(d.getUTCHours()) + ":" + pad2(d.getUTCMinutes()) + ":" + pad2(d.getUTCSeconds()); };
     var fmtMoney = function (n) { if (!n) return "¥0.0000"; if (n < 0.0001) return "¥" + n.toExponential(2); if (n < 1) return "¥" + n.toFixed(4); return "¥" + n.toFixed(2); };
     var fmtPrice = function (n) { if (n == null || isNaN(n)) return "—"; return String(parseFloat(Number(n).toFixed(4))); };
-    var modelLabel = function (mk) { if (mk === "deepseek-v4-flash") return "deepseek-v4-flash"; if (mk === "deepseek-v4-pro") return "deepseek-v4-pro"; return "未知模型"; };
+    var modelLabel = function (mk) { if (mk === "deepseek-v4-flash") return "deepseek-v4-flash"; if (mk === "deepseek-v4-flash-vision-exp") return "deepseek-v4-flash-vision-exp"; if (mk === "deepseek-v4-pro") return "deepseek-v4-pro"; return "未知模型"; };
     // 模型显示名：以请求参数里的真实模型名为准（非 DeepSeek 模型也如实显示），
     // 空模型名时退回已知档位名 / provider / 未知。
     var modelName = function (r) {
@@ -118,7 +118,15 @@ window.__ModuleLoader__.load({
     };
     var finishLabel = function (f) { if (f === "stop") return "完成"; if (f === "tool-calls") return "工具调用"; if (f === "max-tokens") return "超长"; if (f === "error") return "错误"; return f || "—"; };
     var pct = function (a, b) { return b > 0 ? (a / b * 100).toFixed(1) + "%" : "—"; };
-    var isPeakNow = function (ts) { var d = new Date(ts + 8 * 3600 * 1000); var t = d.getUTCHours() * 60 + d.getUTCMinutes(); return (t >= 9 * 60 && t < 12 * 60) || (t >= 14 * 60 && t < 18 * 60); };
+    // 周末统一按空闲价规则生效时间：北京时间 2026-08-23 00:00（周日）。此前（含周末）仍按原峰谷分段。
+    var WEEKEND_FLAT_AT = Date.parse("2026-08-23T00:00:00+08:00");
+    var isPeakNow = function (ts) {
+      var d = new Date(ts + 8 * 3600 * 1000);
+      var wd = d.getUTCDay(); // 0=周日 1=周一 … 6=周六
+      if (ts >= WEEKEND_FLAT_AT && (wd === 0 || wd === 6)) return false;
+      var t = d.getUTCHours() * 60 + d.getUTCMinutes();
+      return (t >= 9 * 60 && t < 12 * 60) || (t >= 14 * 60 && t < 18 * 60);
+    };
     // 计费档位选择：auto 用 autoCost（按生效日期自动切换），base 用 baseCost，其余用 peakValleyCost
     // 计费档位显示文案
     var regimeLabel = function (regime) {
@@ -175,7 +183,7 @@ window.__ModuleLoader__.load({
     var api = function (payload) {
       return fetch("/usage/api", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(payload) }).then(function (r) { return r.json(); });
     };
-    var PRICE_MODELS = ["deepseek-v4-flash", "deepseek-v4-pro"];
+    var PRICE_MODELS = ["deepseek-v4-flash", "deepseek-v4-flash-vision-exp", "deepseek-v4-pro"];
 
     // ── Card ──
     function Card(props) {
@@ -567,7 +575,7 @@ window.__ModuleLoader__.load({
           el(Card, { label: "输入 · 未命中", value: fmtInt(totalMiss), hint: "token" }),
           el(Card, { label: "输入 · 缓存命中", value: fmtInt(totalHit), hint: "命中率 " + hitRate }),
           el(Card, { label: "输出", value: fmtInt(totalOut), hint: "token" }),
-          el(Card, { label: "高峰消耗", value: fmtMoney(peakTotal), hint: "高峰时段 9:00–12:00、14:00–18:00" }),
+          el(Card, { label: "高峰消耗", value: fmtMoney(peakTotal), hint: "工作日高峰 9:00–12:00、14:00–18:00 · 周末全天空闲价" }),
           el(Card, { label: "空闲消耗", value: fmtMoney(offTotal), hint: "其余空闲时段" }),
           el(Card, { label: "总消耗", value: fmtMoney(totalCost), hint: "高峰 + 空闲 · " + regimeLabel(regime) })
         ),
@@ -755,7 +763,7 @@ window.__ModuleLoader__.load({
           el(Card, { label: "输入 · 未命中", value: fmtInt(monthMiss), hint: "token" }),
           el(Card, { label: "输入 · 缓存命中", value: fmtInt(monthHit), hint: "token" }),
           el(Card, { label: "输出", value: fmtInt(monthOut), hint: "token" }),
-          el(Card, { label: "高峰消耗", value: fmtMoney(monthPeak), hint: "高峰时段 9:00–12:00、14:00–18:00" }),
+          el(Card, { label: "高峰消耗", value: fmtMoney(monthPeak), hint: "工作日高峰 9:00–12:00、14:00–18:00 · 周末全天空闲价" }),
           el(Card, { label: "空闲消耗", value: fmtMoney(monthOff), hint: "其余空闲时段" }),
           el(Card, { label: "本月消耗", value: fmtMoney(monthCost), hint: "高峰 + 空闲 · " + costHint(regime) })
         ),
@@ -1018,7 +1026,7 @@ window.__ModuleLoader__.load({
         el("div", { style: st.note, marginTop: 6 }, effectiveIn()),
         regime === "auto"
           ? el("div", { style: st.note, marginTop: 6 },
-              "自动模式：按调用时间自动选择计费档位——新价格表生效前的调用按基础价（旧价格表），生效后的调用按峰谷价（高峰时段 9:00–12:00、14:00–18:00 用高峰价，其余空闲时段用空闲价）。当前显示：",
+              "自动模式：按调用时间自动选择计费档位——新价格表生效前的调用按基础价（旧价格表），生效后的调用按峰谷价（工作日高峰时段 9:00–12:00、14:00–18:00 用高峰价，其余时间——含周末全天——用空闲价）。当前显示：",
               el("strong", null, showRegime(regime) === "base" ? "基础价表（旧价格表，新价格生效前）" : "峰谷价表（新价格表）"),
               "。价格按官方公布固定，不可编辑。"
             )
@@ -1043,7 +1051,7 @@ window.__ModuleLoader__.load({
               )
             ),
         el("div", { style: st.note, marginTop: 8 },
-          "单位：元 / 百万 tokens。高峰时段（北京时间 9:00–12:00、14:00–18:00）用高峰价，其余空闲时段用空闲价（空闲价 = 高峰价的一半）。概览、用量日历、缓存命中列表中的消耗均已按高峰 / 空闲分列统计。"
+          "单位：元 / 百万 tokens。工作日高峰时段（北京时间 9:00–12:00、14:00–18:00）用高峰价，其余时间用空闲价（空闲价 = 高峰价的一半）；自 2026-08-23 起周末（周六、周日）全天按空闲价计费，新规则生效前仍按原规则。概览、用量日历、缓存命中列表中的消耗均已按高峰 / 空闲分列统计。"
         ),
         el("div", { style: st.sec, marginTop: 18 }, "第三方平台价格与覆盖状态（2026-08-19 核验）"),
         el("div", { style: st.note, marginTop: 6 }, "只把能与记录中的 provider/model 可靠匹配的价格用于自动计费；美元价格先按 USD 计算，再乘 USD/CNY 汇率统一折算成人民币。"),

package/lib/index.js

@@ -49,6 +49,7 @@ export default {
       const PRICING = {
         base: {
           'deepseek-v4-flash': { cacheHit: 0.02, cacheMiss: 1.0, output: 2.0 },
+          'deepseek-v4-flash-vision-exp': { cacheHit: 0.02, cacheMiss: 1.0, output: 2.0 },
           'deepseek-v4-pro': { cacheHit: 0.025, cacheMiss: 3.0, output: 6.0 }
         },
         peakValley: {
@@ -56,6 +57,10 @@ export default {
             offPeak: { cacheHit: 0.05, cacheMiss: 1.5, output: 4.5 },
             peak: { cacheHit: 0.1, cacheMiss: 3.0, output: 9.0 }
           },
+          'deepseek-v4-flash-vision-exp': {
+            offPeak: { cacheHit: 0.05, cacheMiss: 1.5, output: 4.5 },
+            peak: { cacheHit: 0.1, cacheMiss: 3.0, output: 9.0 }
+          },
           'deepseek-v4-pro': {
             offPeak: { cacheHit: 0.15, cacheMiss: 4.5, output: 13.5 },
             peak: { cacheHit: 0.3, cacheMiss: 9.0, output: 27.0 }
@@ -63,7 +68,7 @@ export default {
         }
       }
       const DEFAULT_PRICING = JSON.parse(JSON.stringify(PRICING))
-      const PRICE_MODELS = ['deepseek-v4-flash', 'deepseek-v4-pro']
+      const PRICE_MODELS = ['deepseek-v4-flash', 'deepseek-v4-flash-vision-exp', 'deepseek-v4-pro']
       const SILICONFLOW_PRICING = {
         'deepseek-ai/deepseek-v4-flash': { cacheHit: 0.02, cacheMiss: 1.0, output: 2.0 },
         'deepseek-ai/deepseek-v4-pro': { cacheHit: 1.0, cacheMiss: 12.0, output: 24.0 },
@@ -80,16 +85,24 @@ export default {
       // 新价格表（峰谷价）生效时间：北京时间 2026-08-17 00:00。
       // 在此之前的调用按旧价格表（基础价 base）计费；之后按新价格表（峰谷价）计费。
       const EFFECTIVE_AT = Date.parse('2026-08-17T00:00:00+08:00')
+      // 周末统一按低谷（空闲）价计费规则生效时间：北京时间 2026-08-23 00:00（周日）。
+      // 生效前（含周末）仍按原峰谷分段计费；生效后周末（周六、周日）全天统一按空闲价，工作日仍按峰谷分段。
+      const WEEKEND_FLAT_AT = Date.parse('2026-08-23T00:00:00+08:00')
 
       function modelKey(model) {
         const m = String(model || '').toLowerCase()
+        if (m.indexOf('vision') >= 0) return 'deepseek-v4-flash-vision-exp'
         if (m.indexOf('flash') >= 0) return 'deepseek-v4-flash'
         if (m.indexOf('pro') >= 0) return 'deepseek-v4-pro'
         return 'unknown'
       }
 
+      // 高峰时段判定：新规则（2026-08-23 起）周末（周六、周日）全天不再区分峰谷，统一按空闲价；
+      // 工作日仍按北京时间 9:00–12:00、14:00–18:00 为高峰；新规则生效前的调用仍按原规则判定。
       function isPeak(ts) {
         const d = new Date(ts + 8 * 3600 * 1000)
+        const wd = d.getUTCDay() // 0=周日 1=周一 … 6=周六
+        if (ts >= WEEKEND_FLAT_AT && (wd === 0 || wd === 6)) return false
         const t = d.getUTCHours() * 60 + d.getUTCMinutes()
         return (t >= 9 * 60 && t < 12 * 60) || (t >= 14 * 60 && t < 18 * 60)
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feiyang666/dsh-usage-plugin",
-  "version": "1.9.4",
+  "version": "1.10.0",
   "description": "DeepSeek Harness usage & cost tracker plugin: per-call token/cache-hit stats, peak/off-peak billing, DeepSeek balance query, CSV/JSON/PNG export with custom destination, and persistent local storage. Ships a host half plus a web client half in one npm package; installs into a DSH profile as a dsh.bundle with one command (dsh plugin --profile web add @feiyang666/dsh-usage-plugin).",
   "keywords": [
     "deepseek",

package/scripts/release.mjs

@@ -0,0 +1,94 @@
+import { spawnSync } from 'node:child_process'
+import https from 'node:https'
+import fs from 'node:fs'
+import path from 'node:path'
+
+const REPO = 'feiyang-dev/dsh-usage-plugin'
+const TAG = 'v1.10.0'
+
+function getCredential() {
+  const input = 'protocol=https\nhost=github.com\n\n'
+  const res = spawnSync('git', ['credential', 'fill'], { input, encoding: 'utf8' })
+  const cred = {}
+  for (const l of (res.stdout || '').split('\n')) {
+    const idx = l.indexOf('=')
+    if (idx > 0) cred[l.slice(0, idx).trim()] = l.slice(idx + 1).trim()
+  }
+  return cred
+}
+
+function api(method, apiPath, body, contentType = 'application/json', host = 'api.github.com') {
+  return new Promise((resolve) => {
+    const cred = getCredential()
+    const isBuffer = Buffer.isBuffer(body)
+    const req = https.request({
+      host,
+      path: apiPath,
+      method,
+      headers: {
+        'Authorization': `Bearer ${cred.password || ''}`,
+        'User-Agent': 'dsh-usage-plugin-publish',
+        'Accept': 'application/vnd.github+json',
+        'Content-Type': contentType,
+        ...(body != null ? { 'Content-Length': isBuffer ? body.length : Buffer.byteLength(body) } : {}),
+      },
+      rejectUnauthorized: false,
+    }, (res) => {
+      let data = ''
+      res.on('data', (d) => data += d)
+      res.on('end', () => resolve({ status: res.statusCode, body: data }))
+    })
+    req.on('error', (e) => resolve({ status: 0, body: e.message }))
+    if (body != null) req.write(body)
+    req.end()
+  })
+}
+
+function extractChangelog(tag) {
+  const text = fs.readFileSync(path.join(process.cwd(), 'CHANGELOG.md'), 'utf8')
+  const lines = text.split('\n')
+  const re = new RegExp('^## ' + tag.replace(/\./g, '\\.') + '\\b')
+  const start = lines.findIndex((l) => re.test(l))
+  if (start < 0) return ''
+  let end = lines.length
+  for (let i = start + 1; i < lines.length; i++) {
+    if (/^## v\d/.test(lines[i])) { end = i; break }
+  }
+  return lines.slice(start, end).join('\n').trim()
+}
+
+const body = extractChangelog(TAG)
+if (!body) { console.error('changelog section not found for', TAG); process.exit(1) }
+
+console.log('Creating release', TAG, 'for', REPO)
+const created = await api('POST', `/repos/${REPO}/releases`, JSON.stringify({
+  tag_name: TAG,
+  name: TAG,
+  body,
+  draft: false,
+  prerelease: false,
+}))
+console.log('create status:', created.status)
+if (created.status !== 201) {
+  console.error('create failed:', created.body.slice(0, 600))
+  process.exit(1)
+}
+const release = JSON.parse(created.body)
+console.log('release id:', release.id, 'url:', release.html_url)
+
+// 打包并上传 tarball 作为附件
+const pack = spawnSync('npm', ['pack'], { encoding: 'utf8' })
+const tgzName = (pack.stdout || '').trim().split('\n').pop()
+if (tgzName && fs.existsSync(tgzName)) {
+  const buf = fs.readFileSync(tgzName)
+  const assetPath = `/repos/${REPO}/releases/${release.id}/assets?name=${encodeURIComponent(tgzName)}`
+  console.log('uploading asset', tgzName, buf.length)
+  const asset = await api('POST', assetPath, buf, 'application/octet-stream', 'uploads.github.com')
+  console.log('asset status:', asset.status)
+  if (asset.status === 201) console.log('asset url:', JSON.parse(asset.body).browser_download_url)
+  else console.error('asset body:', asset.body.slice(0, 400))
+  try { fs.unlinkSync(tgzName) } catch (e) {}
+} else {
+  console.log('no tarball produced; skip asset upload')
+}
+console.log('DONE')

package/scripts/upload-asset.mjs

@@ -0,0 +1,50 @@
+import { spawnSync } from 'node:child_process'
+import https from 'node:https'
+import fs from 'node:fs'
+
+const REPO = 'feiyang-dev/dsh-usage-plugin'
+const RELEASE_ID = 373691852
+
+function getCredential() {
+  const input = 'protocol=https\nhost=github.com\n\n'
+  const res = spawnSync('git', ['credential', 'fill'], { input, encoding: 'utf8' })
+  const cred = {}
+  for (const l of (res.stdout || '').split('\n')) {
+    const idx = l.indexOf('=')
+    if (idx > 0) cred[l.slice(0, idx).trim()] = l.slice(idx + 1).trim()
+  }
+  return cred
+}
+
+function api(method, apiPath, body, contentType, host = 'api.github.com') {
+  return new Promise((resolve) => {
+    const cred = getCredential()
+    const isBuffer = Buffer.isBuffer(body)
+    const req = https.request({
+      host, path: apiPath, method,
+      headers: {
+        'Authorization': `Bearer ${cred.password || ''}`,
+        'User-Agent': 'dsh-usage-plugin-publish',
+        'Accept': 'application/vnd.github+json',
+        'Content-Type': contentType,
+        ...(body != null ? { 'Content-Length': isBuffer ? body.length : Buffer.byteLength(body) } : {}),
+      },
+      rejectUnauthorized: false,
+    }, (res) => { let d = ''; res.on('data', (c) => d += c); res.on('end', () => resolve({ status: res.statusCode, body: d })) })
+    req.on('error', (e) => resolve({ status: 0, body: e.message }))
+    if (body != null) req.write(body)
+    req.end()
+  })
+}
+
+const tgz = fs.readdirSync('.').find((f) => f.endsWith('.tgz'))
+if (!tgz) { console.error('no tarball found'); process.exit(1) }
+const buf = fs.readFileSync(tgz)
+const assetPath = `/repos/${REPO}/releases/${RELEASE_ID}/assets?name=${encodeURIComponent(tgz)}`
+console.log('uploading', tgz, buf.length)
+const asset = await api('POST', assetPath, buf, 'application/octet-stream', 'uploads.github.com')
+console.log('asset status:', asset.status)
+if (asset.status === 201) console.log('asset url:', JSON.parse(asset.body).browser_download_url)
+else console.error('asset body:', asset.body.slice(0, 400))
+try { fs.unlinkSync(tgz) } catch (e) {}
+console.log('DONE')