@kenz1117/dsh-ui-usage-billing 1.1.4 → 1.1.5

package/lib/index.js

@@ -6,6 +6,7 @@ import { defineTool } from "@deepseek-ai/dsh-tools";
 import { withFileLock, writeFileAtomic } from "@deepseek-ai/dsh-atomic-write";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
 import z from "@deepseek-ai/schemastery";
+import { createHash, createHmac } from "node:crypto";
 //#region lib/types/client/plan-knowledge.js
 /**
 * Plan-knowledge reference (adapted from dsh-spend's `knowledge.js`, MIT):
@@ -266,7 +267,7 @@ function tierAt(timeMs) {
 }
 /** 时刻是否落在北京时间周末（周六/周日）。 */
 function isBeijingWeekend(timeMs) {
-	const day = new Date(timeMs + 8 * 36e5).getUTCDay();
+	const day = new Date(timeMs + 288e5).getUTCDay();
 	return day === 0 || day === 6;
 }
 /**
@@ -1633,24 +1634,31 @@ function computeCost(entry, buckets, peakShare = DEFAULT_PEAK_SHARE, nowMs = Dat
 	return peak * peakShare + off * (1 - peakShare);
 }
 /**
+* v1 峰谷档判定（峰谷开闸起、周末全谷分界止）：不豁免周末——该时段官方
+* 高峰时段为每天 9-12 / 14-18（周六日同样计峰）。仅用于历史事件计费；
+* 「当前时刻」的档位（提醒/时段条/费率展示）一律走 {@link tierAt} 现行规则。
+*/
+function tariffV1At(timeMs) {
+	return isPeakHour((new Date(timeMs).getUTCHours() + 8) % 24) ? "peak" : "offPeak";
+}
+/**
 * 按调用时刻精确判定高峰/空闲档并计价（P0-1：替代固定比例混合）。时刻未知
 * （null/NaN，理论不发生在真实事件流）时回退 {@link DEFAULT_PEAK_SHARE} 混合，
 * 保持旧语义不低估。平档模型（无 offPeak）两个时段同价。限时促销与峰谷档
 * 同口径：按事件时刻判定该笔流量当时享受的单价。
+*
+* 历史正确性（按变更节点分段适用规则，不统一套现行价重算历史）：
+* - 早于 {@link PEAK_ERA_START_MS} 的事件按当时官方基础价
+*   （{@link LEGACY_DEEPSEEK_BANDS}）计费；
+* - 峰谷开闸至 {@link WEEKEND_OFFPEAK_START_MS} 之间按 v1 规则（周末不豁免，
+*   周六日 9-12 / 14-18 计峰）；
+* - 周末全谷分界起按现行规则（{@link tierAt}，周六日全天低谷）。
 * @param entry - the catalog entry whose prices apply.
 * @param buckets - token usage counts.
 * @param timeMs - the call's wall-clock time (epoch ms); null falls back to the peak-share mix.
 * @param peakShare - fallback mix used only when `timeMs` is missing.
 * @returns the estimated cost in CNY（USD 计价模型已按当前汇率折算）。
 */
-/**
-* v1 峰谷档判定（峰谷开闸起、周末全谷分界止）：不豁免周末——该时段官方
-* 高峰时段为每天 9-12 / 14-18（周六日同样计峰）。仅用于历史事件计费；
-* 「当前时刻」的档位（提醒/时段条/费率展示）一律走 {@link tierAt} 现行规则。
-*/
-function tariffV1At(timeMs) {
-	return isPeakHour((new Date(timeMs).getUTCHours() + 8) % 24) ? "peak" : "offPeak";
-}
 function computeCostAt(entry, buckets, timeMs, peakShare = DEFAULT_PEAK_SHARE) {
 	if (timeMs === null || timeMs === void 0 || !Number.isFinite(timeMs)) return computeCost(entry, buckets, peakShare);
 	const priced = applyPromo(entry, timeMs);
@@ -2387,7 +2395,7 @@ function createUsageAggregator(persistence, options = {}) {
 						id,
 						...meta.cwd === void 0 ? {} : { cwd: meta.cwd },
 						...stamp === null ? {} : { stamp },
-						foldVersion: 6,
+						foldVersion: 7,
 						fold: serializeFold(fold)
 					};
 					const previous = ledger.get(id);
@@ -2411,7 +2419,7 @@ function createUsageAggregator(persistence, options = {}) {
 			for (const entry of ledger.values()) {
 				if (included.has(entry.id)) continue;
 				try {
-					const stale = (entry.foldVersion ?? 1) < 6;
+					const stale = (entry.foldVersion ?? 1) < 7;
 					folds.push({
 						id: entry.id,
 						...entry.cwd === void 0 ? {} : { cwd: entry.cwd },
@@ -2457,7 +2465,7 @@ function createUsageAggregator(persistence, options = {}) {
 			outputCost: 0
 		};
 		const perfModel = /* @__PURE__ */ new Map();
-		const perfHour = /* @__PURE__ */ new Map();
+		const perfHourModel = /* @__PURE__ */ new Map();
 		for (const { id: sessionId, cwd, fold, staleLedger } of folds) {
 			mergeUsageInto(total, fold.total);
 			roles.userChars += fold.roles.userChars;
@@ -2488,13 +2496,18 @@ function createUsageAggregator(persistence, options = {}) {
 				if (sample.tps !== void 0) modelAccum.tps.push(sample.tps);
 				if (sample.latencyMs !== void 0) modelAccum.latencies.push(sample.latencyMs);
 				if (sample.estimated) modelAccum.estimated += 1;
-				let hourAccum = perfHour.get(sample.hour);
+				let hourModels = perfHourModel.get(sample.hour);
+				if (hourModels === void 0) {
+					hourModels = /* @__PURE__ */ new Map();
+					perfHourModel.set(sample.hour, hourModels);
+				}
+				let hourAccum = hourModels.get(sample.model);
 				if (hourAccum === void 0) {
 					hourAccum = {
 						ttfts: [],
 						tps: []
 					};
-					perfHour.set(sample.hour, hourAccum);
+					hourModels.set(sample.model, hourAccum);
 				}
 				hourAccum.ttfts.push(sample.ttftMs);
 				if (sample.tps !== void 0) hourAccum.tps.push(sample.tps);
@@ -2554,14 +2567,14 @@ function createUsageAggregator(persistence, options = {}) {
 				latencyAvg: acc.latencies.length === 0 ? 0 : mean(acc.latencies),
 				estimatedSamples: acc.estimated
 			}])),
-			byHour: Object.fromEntries([...perfHour].map(([hour, acc]) => [hour, {
+			byHourModel: Object.fromEntries([...perfHourModel].map(([hour, models]) => [hour, Object.fromEntries([...models].map(([model, acc]) => [model, {
 				samples: acc.ttfts.length,
 				ttftAvg: mean(acc.ttfts),
 				...acc.tps.length === 0 ? {} : { tpsAvg: mean(acc.tps) }
-			}]))
+			}]))]))
 		};
 		lastDoc = {
-			version: 3,
+			version: 4,
 			updatedAt: now,
 			source: "session-logs",
 			timezone: hostTimeZone(),
@@ -3006,6 +3019,26 @@ const QUERIERS = [
 		route: "tokendance-space",
 		displayName: "TokenDance",
 		querier: queryTokenDance
+	},
+	{
+		route: "tencent-tokenhub",
+		displayName: "腾讯云 TokenHub",
+		querier: queryTencentTokenPlan
+	},
+	{
+		route: "tokenhub",
+		displayName: "腾讯云 TokenHub",
+		querier: queryTencentTokenPlan
+	},
+	{
+		route: "tencent",
+		displayName: "腾讯云 TokenHub",
+		querier: queryTencentTokenPlan
+	},
+	{
+		route: "tencentcloud",
+		displayName: "腾讯云 TokenHub",
+		querier: queryTencentTokenPlan
 	}
 ];
 /**
@@ -3038,6 +3071,204 @@ async function queryBalances(ctx, providers) {
 		return querier(ctx, env);
 	}));
 }
+/** TokenHub 管控面 API 端点（cloud.tencent.cn/document/api/1823/132270）。 */
+const TOKENHUB_HOST = "tokenhub.tencentcloudapi.com";
+/** 云 API 3.0 产品名与版本（签名的 service 段与请求头都必须一致）。 */
+const TOKENHUB_SERVICE = "tokenhub";
+const TOKENHUB_VERSION = "2026-03-22";
+/** 请求地域：管控面对地域不敏感，取默认国内地域（文档地域列表含 ap-guangzhou）。 */
+const TOKENHUB_REGION = "ap-guangzhou";
+/** 腾讯云凭据引用值格式：`<SecretId>:<SecretKey>`（分隔符取首个冒号）。 */
+function parseTencentCredential(value) {
+	const sep = value.indexOf(":");
+	if (sep === -1) return void 0;
+	const secretId = value.slice(0, sep).trim();
+	const secretKey = value.slice(sep + 1).trim();
+	if (secretId === "" || secretKey === "") return void 0;
+	return {
+		secretId,
+		secretKey
+	};
+}
+/**
+* 构造云 API 3.0 TC3-HMAC-SHA256 签名（官方签名方法 v3）。导出供测试：纯函数，
+* 输入确定则签名确定。Action 不参与签名——它走 `X-TC-Action` 请求头。
+* @param secretId - 云 API SecretId。
+* @param secretKey - 云 API SecretKey。
+* @param payload - 已序列化的请求体（含 Action/Version/Region 公共参数）。
+* @param timestamp - 签名时间戳（秒）。
+* @returns Authorization 头的值。
+*/
+function tc3Authorization(secretId, secretKey, payload, timestamp) {
+	const date = (/* @__PURE__ */ new Date(timestamp * 1e3)).toISOString().slice(0, 10);
+	const canonicalRequest = `POST\n/\n\n${`content-type:application/json; charset=utf-8\nhost:${TOKENHUB_HOST}\n`}\ncontent-type;host\n${createHash("sha256").update(payload).digest("hex")}`;
+	const hashedCanonical = createHash("sha256").update(canonicalRequest).digest("hex");
+	const stringToSign = `TC3-HMAC-SHA256\n${String(timestamp)}\n${date}/${TOKENHUB_SERVICE}/tc3_request\n${hashedCanonical}`;
+	const kDate = createHmac("sha256", date).update(secretKey).digest();
+	const kService = createHmac("sha256", kDate).update(TOKENHUB_SERVICE).digest();
+	const kSigning = createHmac("sha256", kService).update("tc3_request").digest();
+	const signature = createHmac("sha256", kSigning).update(stringToSign).digest("hex");
+	return `TC3-HMAC-SHA256 Credential=${secretId}/${date}/${TOKENHUB_SERVICE}/tc3_request, SignedHeaders=content-type;host, Signature=${signature}`;
+}
+/** 调用一次 TokenHub 管控面接口：TC3 签名 + 超时保护，返回响应 JSON 的 `Response`。 */
+async function callTokenHub(secretId, secretKey, action, params) {
+	const payload = JSON.stringify({
+		Action: action,
+		Version: TOKENHUB_VERSION,
+		Region: TOKENHUB_REGION,
+		...params
+	});
+	const timestamp = Math.floor(Date.now() / 1e3);
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS$3);
+	try {
+		const response = await fetch(`https://${TOKENHUB_HOST}/`, {
+			method: "POST",
+			headers: {
+				"content-type": "application/json; charset=utf-8",
+				host: TOKENHUB_HOST,
+				"x-tc-action": action.toLowerCase(),
+				"x-tc-version": TOKENHUB_VERSION,
+				"x-tc-region": TOKENHUB_REGION,
+				"x-tc-timestamp": String(timestamp),
+				authorization: tc3Authorization(secretId, secretKey, payload, timestamp)
+			},
+			body: payload,
+			signal: controller.signal
+		});
+		if (response.status === 401 || response.status === 403) throw Object.assign(/* @__PURE__ */ new Error("unauthorized"), { code: "unauthorized" });
+		if (!response.ok) throw Object.assign(/* @__PURE__ */ new Error(`HTTP ${String(response.status)}`), {
+			httpStatus: response.status,
+			code: "unreachable"
+		});
+		const inner = (await response.json()).Response;
+		if (inner === void 0) throw Object.assign(/* @__PURE__ */ new Error("no Response envelope"), { code: "invalid" });
+		if (inner.Error !== void 0 && inner.Error !== null) {
+			const err = inner.Error;
+			const code = err.Code === "AuthFailure.SignatureFailure" || err.Code === "AuthFailure.SecretIdNotFound" ? "unauthorized" : "unreachable";
+			throw Object.assign(new Error(String(err.Code ?? "api-error")), { code });
+		}
+		return inner;
+	} finally {
+		clearTimeout(timer);
+	}
+}
+/**
+* 在套餐余量对象里防御性提取「剩余额度」：官方 SubPackageBalance/PackageInfo
+* 的字段名未稳定公开（issue #18 调研期），按语义键名扫描——命中 remaining /
+* balance / left 语义键直接用；命中 total 与 used 则相减推导。数字一律经
+* {@link toNumber} 归一化（上游可能给字符串）。
+* 导出供测试：纯函数。
+* @param source - 套餐详情里的余量对象（PackageInfo / SubPackageBalance 等）。
+* @returns 剩余额度（上游单位，通常为 token 数或元）；提取不到返回 undefined。
+*/
+function pickRemainingQuota(source) {
+	if (source === null || typeof source !== "object") return void 0;
+	const numeric = Object.entries(source).filter(([, v]) => v !== null && toNumber$1(v) !== void 0);
+	const byKey = (needles) => {
+		for (const [key, value] of numeric) {
+			const lower = key.toLowerCase();
+			if (needles.some((n) => lower.includes(n))) {
+				const num = toNumber$1(value);
+				if (num !== void 0 && num >= 0) return num;
+			}
+		}
+	};
+	const remaining = byKey([
+		"remain",
+		"balance",
+		"left",
+		"available"
+	]);
+	if (remaining !== void 0) return remaining;
+	const total = byKey(["total"]);
+	const used = byKey(["used", "consume"]);
+	if (total !== void 0 && used !== void 0) return Math.max(0, total - used);
+}
+/** 套餐列表里提取第一个启用套餐的 TeamId：集合字段名做候选兼容。 */
+function firstEnabledTeamId(inner) {
+	const candidates = inner.TeamSet ?? inner.TokenPlanSet ?? inner.PlanSet;
+	if (!Array.isArray(candidates)) return void 0;
+	for (const item of candidates) {
+		if (item === null || typeof item !== "object") continue;
+		const row = item;
+		if (row.TeamId === void 0 && row.PlanId === void 0) continue;
+		if (row.Status !== void 0 && row.Status !== "enable") continue;
+		const id = row.TeamId ?? row.PlanId;
+		if (typeof id === "string" && id !== "") return id;
+	}
+}
+/**
+* 查询腾讯云 TokenHub Token Plan 套餐余量。凭据值格式 `<SecretId>:<SecretKey>`
+* （云 API 密钥，非 TokenHub 推理 key）。链路：套餐列表取 TeamId → 套餐详情读
+* 主额度包余量。管控面字段名未完全稳定，解析按语义键防御提取。
+* @param ctx - host context carrying the credentials seam.
+* @param apiKeyEnv - credential reference resolving the `<SecretId>:<SecretKey>` pair.
+*/
+async function queryTencentTokenPlan(ctx, apiKeyEnv) {
+	const provider = "腾讯云 TokenHub";
+	const hit = await ctx.credentials.resolve(credentialRef(apiKeyEnv));
+	if (hit === void 0) return {
+		provider,
+		displayName: provider,
+		error: "unconfigured"
+	};
+	if (!balanceGate.check(provider)) return {
+		provider,
+		displayName: provider,
+		error: "unreachable"
+	};
+	const credential = parseTencentCredential(hit.value);
+	if (credential === void 0) return {
+		provider,
+		displayName: provider,
+		error: "unauthorized"
+	};
+	const doRequest = async () => {
+		const teamId = firstEnabledTeamId(await callTokenHub(credential.secretId, credential.secretKey, "DescribeTokenPlanList", {}));
+		if (teamId === void 0) return {
+			provider,
+			displayName: provider,
+			error: "invalid"
+		};
+		const detail = await callTokenHub(credential.secretId, credential.secretKey, "DescribeTokenPlan", { TeamId: teamId });
+		const remaining = pickRemainingQuota(detail.PackageInfo) ?? pickRemainingQuota(detail);
+		if (remaining === void 0) {
+			console.warn(`[usage-billing] balance response drifted for ${provider}: no remaining-quota field parsed`);
+			return {
+				provider,
+				displayName: provider,
+				error: "invalid"
+			};
+		}
+		const plan = typeof detail.Name === "string" ? detail.Name : void 0;
+		const exhausted = detail.StopReason === "EXHAUSTED";
+		return {
+			provider,
+			displayName: provider,
+			currency: "CNY",
+			totalBalance: remaining,
+			...plan !== void 0 ? { plan } : {},
+			...exhausted ? { isAvailable: false } : {}
+		};
+	};
+	try {
+		const row = await withRetry(doRequest, {
+			retries: 1,
+			baseDelayMs: 250,
+			maxDelayMs: 2e3
+		});
+		balanceGate.success(provider);
+		return row;
+	} catch (error) {
+		balanceGate.fail(provider);
+		return {
+			provider,
+			displayName: provider,
+			error: error.code === "unauthorized" ? "unauthorized" : "unreachable"
+		};
+	}
+}
 /** 点路径取值：`data.total_available` → 逐层下钻；任一缺失返回 undefined。 */
 function getPath(data, path) {
 	let cursor = data;
@@ -3222,7 +3453,7 @@ const declaredGate = createCooldownGate({
 	cooldownMs: 6e4
 });
 /** 会触及原型链的路径段：一律拒绝（读结果不是文档自带字段）。 */
-const FORBIDDEN_SEGMENTS = new Set([
+const FORBIDDEN_SEGMENTS = /* @__PURE__ */ new Set([
 	"__proto__",
 	"constructor",
 	"prototype"
@@ -3772,7 +4003,7 @@ function asPrice(value) {
 */
 function buildExtraModels(data) {
 	if (data === null || typeof data !== "object") return [];
-	const catalogKeys = new Set([...MODEL_CATALOG.map((entry) => entry.key.toLowerCase()), ...Object.keys(MODEL_KEY_ALIASES).map((key) => MODEL_KEY_ALIASES[key]?.toLowerCase() ?? key.toLowerCase())]);
+	const catalogKeys = /* @__PURE__ */ new Set([...MODEL_CATALOG.map((entry) => entry.key.toLowerCase()), ...Object.keys(MODEL_KEY_ALIASES).map((key) => MODEL_KEY_ALIASES[key]?.toLowerCase() ?? key.toLowerCase())]);
 	const extras = [];
 	for (const [providerId, providerDoc] of Object.entries(data)) {
 		if (providerDoc === null || typeof providerDoc !== "object") continue;
@@ -4446,7 +4677,7 @@ const relayGate = createCooldownGate({
 /** Abort a relay fetch when the upstream hangs beyond this budget. */
 const FETCH_TIMEOUT_MS = 8e3;
 /** 指纹识别缓存 TTL（毫秒）：识别结果低频变化，5 分钟内同 origin 不再重复探测。 */
-const FINGERPRINT_TTL_MS = 300 * 1e3;
+const FINGERPRINT_TTL_MS = 3e5;
 /** 每 origin 的识别结果缓存：`kind` 是识别出的中转站程序，`at` 是探测时刻。 */
 const fingerprintCache = /* @__PURE__ */ new Map();
 /** Number, or null when the value is not a finite number (nor numeric string). */
@@ -4582,7 +4813,7 @@ function originOf(baseURL) {
 * 子路径只会得到 404/非中转站格式，因而面板应排除它们，避免误判为
 * 「未识别」。中转站面板只列真正的第三方中转程序。
 */
-const OFFICIAL_HOSTS = new Set([
+const OFFICIAL_HOSTS = /* @__PURE__ */ new Set([
 	"api.deepseek.com",
 	"api.openai.com",
 	"open.bigmodel.cn",
@@ -4832,10 +5063,10 @@ const usageBillingSettingsNs = validateSettingsNamespace(BILLING_SETTINGS_NAMESP
 /** 该命名空间的 wire schema：`enableUsageStatsTool` 布尔，默认关闭（issue 诉求）。 */
 const UsageBillingSettingsSchema = z.object({ [ENABLE_USAGE_STATS_TOOL_FIELD]: z.boolean().default(false) });
 /** 实时定价的后台刷新间隔（毫秒）：汇率/模型价低频变化，6 小时一次足够。 */
-const PRICING_REFRESH_INTERVAL_MS = 360 * 60 * 1e3;
+const PRICING_REFRESH_INTERVAL_MS = 216e5;
 /** 订阅套餐额度缓存时长（毫秒）：上游配额 API 低频变化，5 分钟足够。 */
-const SUBSCRIPTION_CACHE_MS = 300 * 1e3;
-const BALANCE_CACHE_MS = 300 * 1e3;
+const SUBSCRIPTION_CACHE_MS = 3e5;
+const BALANCE_CACHE_MS = 3e5;
 /** DeepSeek 余额查询的默认凭据引用（与 llm-deepseek 的默认引用一致）。 */
 const DEFAULT_BALANCE_API_KEY_ENV = "DEEPSEEK_API_KEY";
 /**
@@ -4846,7 +5077,7 @@ const PACKAGE_VERSION = createRequire(import.meta.url)("../package.json").versio
 /** 统计快照的落盘节流（毫秒）：前端 30 秒轮询，快照最多每 30 秒写一次。 */
 const SNAPSHOT_INTERVAL_MS = 3e4;
 /** 鉴权失败告警冷却（毫秒）：同一 provider 在窗口内只提示一次，避免 30 秒轮询刷屏。 */
-const AUTH_WARN_COOLDOWN_MS = 1800 * 1e3;
+const AUTH_WARN_COOLDOWN_MS = 18e5;
 /**
 * 鉴权失败分类告警（P1-5）：余额 / 订阅查询返回 unauthorized 时，按
 * `source:provider` 去重并冷却告警，提示检查 llm-pi-ai 里该 provider 的 apiKeyEnv。
@@ -5090,7 +5321,8 @@ function apply(ctx, config = {}) {
 	})();
 	const persistReconcileRef = () => {
 		if (reconcileRef === null) return;
-		writeFileAtomic(reconcilePath, JSON.stringify({ ref: reconcileRef }), {
+		const payload = JSON.stringify({ ref: reconcileRef });
+		writeFileAtomic(reconcilePath, payload, {
 			mode: 384,
 			dirMode: 448
 		}).catch(() => {});

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@kenz1117/dsh-ui-usage-billing",
   "description": "Usage billing dashboard for DeepSeek Harness: sidebar cost metrics plus a full dashboard modal, priced from a current multi-provider catalog with real usage aggregated from session logs.",
-  "version": "1.1.4",
+  "version": "1.1.5",
   "publishConfig": {
     "access": "public"
   },
@@ -34,7 +34,6 @@
     },
     "client": {
       "inject": [
-        "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-client-locale",
         "@deepseek-ai/dsh-client-ui-conversation"
       ],
@@ -51,25 +50,25 @@
   "scripts": {
     "bundle": "tsdown",
     "watch": "tsdown --watch",
-    "test": "vitest run",
-    "build": "bash build.sh"
+    "test": "vitest run"
   },
   "license": "MIT",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"
   },
   "peerDependencies": {
+    "@deepseek-ai/cordis": "*",
     "@deepseek-ai/dsh-api-remotes": "*",
+    "@deepseek-ai/dsh-api-session-controller": "*",
     "@deepseek-ai/dsh-atomic-write": "*",
-    "@deepseek-ai/dsh-client-connection": "*",
-    "@deepseek-ai/dsh-host-webserver": "*",
     "@deepseek-ai/dsh-client-locale": "*",
-    "@deepseek-ai/dsh-client-runtime": "*",
+    "@deepseek-ai/dsh-client-store": "*",
     "@deepseek-ai/dsh-client-ui-conversation": "*",
-    "@deepseek-ai/dsh-client-ui-sidebar": "*",
     "@deepseek-ai/dsh-client-ui-primitives": "*",
+    "@deepseek-ai/dsh-client-ui-sidebar": "*",
     "@deepseek-ai/dsh-client-ui-slots": "*",
     "@deepseek-ai/dsh-credentials": "*",
+    "@deepseek-ai/dsh-host-webserver": "*",
     "@deepseek-ai/dsh-invariants": "*",
     "@deepseek-ai/dsh-llm": "*",
     "@deepseek-ai/dsh-session": "*",
@@ -77,28 +76,44 @@
     "@deepseek-ai/dsh-settings": "*",
     "@deepseek-ai/dsh-tools": "*",
     "@deepseek-ai/schemastery": "*",
-    "@deepseek-ai/cordis": "*",
     "react": "^18.2.0"
   },
   "dependencies": {
     "clsx": "^2.1.1"
   },
   "devDependencies": {
-    "@deepseek-ai/dsh-client-locale": "*",
-    "@deepseek-ai/dsh-client-runtime": "*",
-    "@deepseek-ai/dsh-client-test-runtime": "*",
-    "@deepseek-ai/dsh-client-ui-conversation": "*",
-    "@deepseek-ai/dsh-client-ui-primitives": "*",
-    "@deepseek-ai/dsh-client-ui-slots": "*",
-    "@deepseek-ai/dsh-invariants": "*",
+    "@deepseek-ai/cordis": "*",
+    "@deepseek-ai/cordis-plugin-include": "^1.0.7",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
+    "@deepseek-ai/dsh-api-remotes": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-api-session-controller": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-atomic-write": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-client-locale": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-client-store": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-credentials": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-host-webserver": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-invariants": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-llm": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-scope": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-session": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-session-persistence": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-settings": "0.1.2-alpha.5",
+    "@deepseek-ai/dsh-tools": "0.1.2-alpha.5",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@testing-library/dom": "^10.4.1",
     "@testing-library/react": "^16.1.0",
-    "@types/react": "~18.3.1",
     "@types/node": "^22.20.0",
-    "@deepseek-ai/cordis": "*",
+    "@types/react": "~18.3.1",
+    "jsdom": "^26.1.0",
+    "lightningcss": "^1.32.0",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
-    "lightningcss": "^1.32.0",
-    "tsdown": "^0.22.2"
+    "tsdown": "^0.22.2",
+    "use-sync-external-store": "1.2.0",
+    "vitest": "^4.1.8"
   },
   "files": [
     "lib/index.js",