@kenz1117/dsh-ui-usage-billing 1.0.23 → 1.0.25

package/lib/index.js

@@ -267,7 +267,7 @@ function tierAt(timeMs) {
 }
 /** 时刻是否落在北京时间周末（周六/周日）。 */
 function isBeijingWeekend(timeMs) {
-	const day = new Date(timeMs + 8 * 36e5).getUTCDay();
+	const day = new Date(timeMs + 288e5).getUTCDay();
 	return day === 0 || day === 6;
 }
 /**
@@ -3104,7 +3104,11 @@ function tc3Authorization(secretId, secretKey, payload, timestamp) {
 	const canonicalRequest = `POST\n/\n\n${`content-type:application/json; charset=utf-8\nhost:${TOKENHUB_HOST}\n`}\ncontent-type;host\n${createHash("sha256").update(payload).digest("hex")}`;
 	const hashedCanonical = createHash("sha256").update(canonicalRequest).digest("hex");
 	const stringToSign = `TC3-HMAC-SHA256\n${String(timestamp)}\n${date}/${TOKENHUB_SERVICE}/tc3_request\n${hashedCanonical}`;
-	return `TC3-HMAC-SHA256 Credential=${secretId}/${date}/${TOKENHUB_SERVICE}/tc3_request, SignedHeaders=content-type;host, Signature=${createHmac("sha256", createHmac("sha256", createHmac("sha256", createHmac("sha256", date).update(secretKey).digest()).update(TOKENHUB_SERVICE).digest()).update("tc3_request").digest()).update(stringToSign).digest("hex")}`;
+	const kDate = createHmac("sha256", date).update(secretKey).digest();
+	const kService = createHmac("sha256", kDate).update(TOKENHUB_SERVICE).digest();
+	const kSigning = createHmac("sha256", kService).update("tc3_request").digest();
+	const signature = createHmac("sha256", kSigning).update(stringToSign).digest("hex");
+	return `TC3-HMAC-SHA256 Credential=${secretId}/${date}/${TOKENHUB_SERVICE}/tc3_request, SignedHeaders=content-type;host, Signature=${signature}`;
 }
 /** 调用一次 TokenHub 管控面接口：TC3 签名 + 超时保护，返回响应 JSON 的 `Response`。 */
 async function callTokenHub(secretId, secretKey, action, params) {
@@ -3449,7 +3453,7 @@ const declaredGate = createCooldownGate({
 	cooldownMs: 6e4
 });
 /** 会触及原型链的路径段：一律拒绝（读结果不是文档自带字段）。 */
-const FORBIDDEN_SEGMENTS = new Set([
+const FORBIDDEN_SEGMENTS = /* @__PURE__ */ new Set([
 	"__proto__",
 	"constructor",
 	"prototype"
@@ -3999,7 +4003,7 @@ function asPrice(value) {
 */
 function buildExtraModels(data) {
 	if (data === null || typeof data !== "object") return [];
-	const catalogKeys = new Set([...MODEL_CATALOG.map((entry) => entry.key.toLowerCase()), ...Object.keys(MODEL_KEY_ALIASES).map((key) => MODEL_KEY_ALIASES[key]?.toLowerCase() ?? key.toLowerCase())]);
+	const catalogKeys = /* @__PURE__ */ new Set([...MODEL_CATALOG.map((entry) => entry.key.toLowerCase()), ...Object.keys(MODEL_KEY_ALIASES).map((key) => MODEL_KEY_ALIASES[key]?.toLowerCase() ?? key.toLowerCase())]);
 	const extras = [];
 	for (const [providerId, providerDoc] of Object.entries(data)) {
 		if (providerDoc === null || typeof providerDoc !== "object") continue;
@@ -4673,7 +4677,7 @@ const relayGate = createCooldownGate({
 /** Abort a relay fetch when the upstream hangs beyond this budget. */
 const FETCH_TIMEOUT_MS = 8e3;
 /** 指纹识别缓存 TTL（毫秒）：识别结果低频变化，5 分钟内同 origin 不再重复探测。 */
-const FINGERPRINT_TTL_MS = 300 * 1e3;
+const FINGERPRINT_TTL_MS = 3e5;
 /** 每 origin 的识别结果缓存：`kind` 是识别出的中转站程序，`at` 是探测时刻。 */
 const fingerprintCache = /* @__PURE__ */ new Map();
 /** Number, or null when the value is not a finite number (nor numeric string). */
@@ -4809,7 +4813,7 @@ function originOf(baseURL) {
 * 子路径只会得到 404/非中转站格式，因而面板应排除它们，避免误判为
 * 「未识别」。中转站面板只列真正的第三方中转程序。
 */
-const OFFICIAL_HOSTS = new Set([
+const OFFICIAL_HOSTS = /* @__PURE__ */ new Set([
 	"api.deepseek.com",
 	"api.openai.com",
 	"open.bigmodel.cn",
@@ -5059,10 +5063,10 @@ const usageBillingSettingsNs = validateSettingsNamespace(BILLING_SETTINGS_NAMESP
 /** 该命名空间的 wire schema：`enableUsageStatsTool` 布尔，默认关闭（issue 诉求）。 */
 const UsageBillingSettingsSchema = z.object({ [ENABLE_USAGE_STATS_TOOL_FIELD]: z.boolean().default(false) });
 /** 实时定价的后台刷新间隔（毫秒）：汇率/模型价低频变化，6 小时一次足够。 */
-const PRICING_REFRESH_INTERVAL_MS = 360 * 60 * 1e3;
+const PRICING_REFRESH_INTERVAL_MS = 216e5;
 /** 订阅套餐额度缓存时长（毫秒）：上游配额 API 低频变化，5 分钟足够。 */
-const SUBSCRIPTION_CACHE_MS = 300 * 1e3;
-const BALANCE_CACHE_MS = 300 * 1e3;
+const SUBSCRIPTION_CACHE_MS = 3e5;
+const BALANCE_CACHE_MS = 3e5;
 /** DeepSeek 余额查询的默认凭据引用（与 llm-deepseek 的默认引用一致）。 */
 const DEFAULT_BALANCE_API_KEY_ENV = "DEEPSEEK_API_KEY";
 /**
@@ -5073,7 +5077,7 @@ const PACKAGE_VERSION = createRequire(import.meta.url)("../package.json").versio
 /** 统计快照的落盘节流（毫秒）：前端 30 秒轮询，快照最多每 30 秒写一次。 */
 const SNAPSHOT_INTERVAL_MS = 3e4;
 /** 鉴权失败告警冷却（毫秒）：同一 provider 在窗口内只提示一次，避免 30 秒轮询刷屏。 */
-const AUTH_WARN_COOLDOWN_MS = 1800 * 1e3;
+const AUTH_WARN_COOLDOWN_MS = 18e5;
 /**
 * 鉴权失败分类告警（P1-5）：余额 / 订阅查询返回 unauthorized 时，按
 * `source:provider` 去重并冷却告警，提示检查 llm-pi-ai 里该 provider 的 apiKeyEnv。
@@ -5317,7 +5321,8 @@ function apply(ctx, config = {}) {
 	})();
 	const persistReconcileRef = () => {
 		if (reconcileRef === null) return;
-		writeFileAtomic(reconcilePath, JSON.stringify({ ref: reconcileRef }), {
+		const payload = JSON.stringify({ ref: reconcileRef });
+		writeFileAtomic(reconcilePath, payload, {
 			mode: 384,
 			dirMode: 448
 		}).catch(() => {});

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@kenz1117/dsh-ui-usage-billing",
   "description": "Usage billing dashboard for DeepSeek Harness: sidebar cost metrics plus a full dashboard modal, priced from a current multi-provider catalog with real usage aggregated from session logs.",
-  "version": "1.0.23",
+  "version": "1.0.25",
   "publishConfig": {
     "access": "public"
   },
@@ -43,7 +43,9 @@
       "dshReleases": {
         "0.1.2-alpha.1": "compatible",
         "0.1.2-alpha.2": "compatible",
-        "0.1.2-alpha.3": "compatible"
+        "0.1.2-alpha.3": "compatible",
+        "0.1.2-alpha.4": "compatible",
+        "0.1.2-alpha.5": "compatible"
       }
     }
   },
@@ -57,18 +59,18 @@
     "node": "^22.19.0 || >=24.0.0"
   },
   "peerDependencies": {
+    "@deepseek-ai/cordis": "*",
     "@deepseek-ai/dsh-api-remotes": "*",
     "@deepseek-ai/dsh-api-session-controller": "*",
     "@deepseek-ai/dsh-atomic-write": "*",
-    "@deepseek-ai/dsh-host-webserver": "*",
     "@deepseek-ai/dsh-client-locale": "*",
     "@deepseek-ai/dsh-client-store": "*",
     "@deepseek-ai/dsh-client-ui-conversation": "*",
     "@deepseek-ai/dsh-client-ui-primitives": "*",
-    "@deepseek-ai/dsh-client-ui-renderer": "*",
     "@deepseek-ai/dsh-client-ui-sidebar": "*",
     "@deepseek-ai/dsh-client-ui-slots": "*",
     "@deepseek-ai/dsh-credentials": "*",
+    "@deepseek-ai/dsh-host-webserver": "*",
     "@deepseek-ai/dsh-invariants": "*",
     "@deepseek-ai/dsh-llm": "*",
     "@deepseek-ai/dsh-session": "*",
@@ -76,31 +78,44 @@
     "@deepseek-ai/dsh-settings": "*",
     "@deepseek-ai/dsh-tools": "*",
     "@deepseek-ai/schemastery": "*",
-    "@deepseek-ai/cordis": "*",
     "react": "^18.2.0"
   },
   "dependencies": {
     "clsx": "^2.1.1"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-api-remotes": "*",
-    "@deepseek-ai/dsh-api-session-controller": "*",
-    "@deepseek-ai/dsh-client-locale": "*",
-    "@deepseek-ai/dsh-client-store": "*",
-    "@deepseek-ai/dsh-client-test-runtime": "*",
-    "@deepseek-ai/dsh-client-ui-conversation": "*",
-    "@deepseek-ai/dsh-client-ui-primitives": "*",
-    "@deepseek-ai/dsh-client-ui-renderer": "*",
-    "@deepseek-ai/dsh-client-ui-slots": "*",
-    "@deepseek-ai/dsh-invariants": "*",
+    "@deepseek-ai/cordis": "*",
+    "@deepseek-ai/cordis-plugin-include": "^1.0.7",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
+    "@deepseek-ai/dsh-api-remotes": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-api-session-controller": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-atomic-write": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-client-locale": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-client-store": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-credentials": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-host-webserver": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-invariants": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-llm": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-scope": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-session": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-session-persistence": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-settings": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-tools": "0.1.2-alpha.5",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@testing-library/dom": "^10.4.1",
     "@testing-library/react": "^16.1.0",
-    "@types/react": "~18.3.1",
     "@types/node": "^22.20.0",
-    "@deepseek-ai/cordis": "*",
+    "@types/react": "~18.3.1",
+    "jsdom": "^26.1.0",
+    "lightningcss": "^1.32.0",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
-    "lightningcss": "^1.32.0",
-    "tsdown": "^0.22.2"
+    "tsdown": "^0.22.2",
+    "use-sync-external-store": "1.2.0",
+    "vitest": "^4.1.8"
   },
   "files": [
     "lib/index.js",