@toddzheng024/dscode-bundle 0.7.0 → 0.7.2

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.7.0",
+  "version": "0.7.2",
   "type": "module",
   "license": "MIT",
   "author": "Todd Zheng",
@@ -11,7 +11,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/qiz029/dscode.git"
+    "url": "https://github.com/qiz029/dscode"
   },
   "name": "@toddzheng024/dscode-bundle",
   "description": "DSCODE coding harness: minimal persistent shell, Ultra subagents, auto review, Chrome, computer use and session telemetry.",

package/plugins/auto-review/index.mjs

@@ -1,6 +1,6 @@
 import z from '@deepseek-ai/schemastery';
 import { BlockAssembler, createSystemMessage, createUserMessage } from '@deepseek-ai/dsh-llm';
-import { REVIEW_POLICY, needsMcpApproval, redact, fingerprint, contextFor, parseDecision } from './policy.mjs';
+import { REVIEW_POLICY, escalationDiagnosticGrant, needsMcpApproval, redact, fingerprint, contextFor, parseDecision } from './policy.mjs';
 import { join, resolve } from 'node:path';
 import { auditStore } from './audit.mjs';
 
@@ -11,6 +11,7 @@ export const Config = z.object({
   timeoutMs: z.number().min(100).max(120000).default(30000),
   maxOutputTokens: z.number().step(1).min(128).max(2048).default(768),
   maxReviewsPerTurn: z.number().step(1).min(1).max(100).default(20),
+  maxEscalationGrantsPerTurn: z.number().step(1).min(0).max(10).default(2),
   auditDirectory: z.string(),
 });
 
@@ -26,7 +27,7 @@ export function apply(ctx, config) {
     const turn = events.findLast(e => e.type === 'turn/start')?.seq;
     let state = budgets.get(agent);
     if (!state || state.turn !== turn) {
-      state = { turn, reviews: 0, denials: 0, blocked: false, denied: new Map(), tail: Promise.resolve() };
+      state = { turn, reviews: 0, grants: 0, denials: 0, blocked: false, denied: new Map(), tail: Promise.resolve() };
       budgets.set(agent, state);
     }
     return state;
@@ -164,7 +165,24 @@ export function apply(ctx, config) {
 
   ctx.on('approval/request', (req, next) => {
     // OS/application access and sensitive Computer Use confirmations remain human.
-    if (mode(req.agent) !== 'auto' || req.toolName.startsWith('computer_')) return next();
+    if (req.toolName.startsWith('computer_')) return next();
+    // Sandbox escalation: only a single, unquoted read-only diagnostic may leave the
+    // sandbox without a human. The grant binds to the exact pending arguments, is
+    // budgeted per turn, and is audited; anything else keeps asking the user.
+    const escalating = calls.get(req.agent)?.get(req.callId);
+    const grant = escalating === undefined ? undefined : escalationDiagnosticGrant(escalating.name, escalating.arguments);
+    if (grant !== undefined && ctx.approval?.effectivePolicy?.(req.agent.session) !== 'never') {
+      const state = stateFor(req.agent);
+      const grantBudget = config.maxEscalationGrantsPerTurn ?? 2;
+      if (state.grants < grantBudget) {
+        state.grants++;
+        record(req, { decision: 'allowed-once', policy: 'escalation-allowlist', reason: `Read-only diagnostic escalation: ${grant.argv[0]}`, actionHash: fingerprint({ tool: escalating.name, arguments: escalating.arguments }) });
+        announce(req.agent, `Escalation granted once for the read-only diagnostic \`${grant.command}\`.`);
+        return 'allowed-once';
+      }
+      announce(req.agent, `Escalation budget reached (${grantBudget} per turn); asking the user.`);
+    }
+    if (mode(req.agent) !== 'auto') return next();
     const state = stateFor(req.agent);
     // Serialize per agent so simultaneous calls cannot race the denial budget.
     const pending = state.tail.then(() => review(req, next, state));

package/plugins/auto-review/policy.mjs

@@ -57,3 +57,28 @@ export function parseDecision(text) {
       Object.keys(value).some(key => !['decision', 'reason'].includes(key))) throw new Error('Invalid reviewer response');
   return { decision: value.decision, reason: redact(value.reason) };
 }
+
+/**
+ * Read-only diagnostics that cannot change state: the only escalation class the
+ * agent may grant itself, one exact argv at a time. Everything else stays human.
+ */
+const ESCALATION_DIAGNOSTICS = new Set(['ps', 'lsof', 'pgrep', 'sw_vers', 'uname', 'id', 'date', 'hostname', 'pwd', 'sysctl']);
+// Quotes, substitution, redirects and chaining all mean the command can do more
+// than the diagnostic whose name it starts with.
+const SHELL_META = /[;&|<>`$(){}\[\]\n\\'"]/;
+
+/**
+ * Match one pending escalation against the read-only diagnostic allowlist.
+ * @param toolName - Pending tool name.
+ * @param args - Its exact arguments (the caller binds the grant to these).
+ * @returns The matched command, or undefined when a human must decide.
+ */
+export function escalationDiagnosticGrant(toolName, args) {
+  if (toolName !== 'shell_retry') return undefined;
+  if (typeof args?.sandbox_permissions !== 'string' || args.sandbox_permissions.length === 0) return undefined;
+  const command = typeof args?.command === 'string' ? args.command.trim() : '';
+  if (command.length === 0 || command.length > 200 || SHELL_META.test(command)) return undefined;
+  const argv = command.split(/\s+/);
+  if (!ESCALATION_DIAGNOSTICS.has(argv[0])) return undefined;
+  return { command, argv };
+}

package/plugins/i18n/messages.mjs

@@ -30,13 +30,13 @@ export const MESSAGES = {
     'agents.running': 'running', 'agents.idle': 'idle', 'agents.done': 'done', 'agents.total': 'total',
     'welcome.model': 'model', 'welcome.effort': 'effort', 'welcome.project': 'project',
     'verbose.on': 'verbose on: thinking and tool calls are shown in the chat', 'verbose.off': 'verbose off',
-    'mouse.on': 'mouse on: the wheel scrolls the chat · hold Option (iTerm2) or Fn (Terminal) while dragging to select text',
+    'mouse.on': 'mouse on: the wheel scrolls the chat · hold Shift while dragging to select text (Option in iTerm2, Fn in Terminal)',
     'mouse.off': 'mouse off: select and copy freely · PageUp/PageDown scroll the chat · /mouse turns wheel scrolling on',
     'language.current': 'Language: {name} · /language en | zh-CN | zh-TW | ja | ko | es',
     'language.set': 'language → {name}', 'language.title': '/language — interface language', 'language.currentMark': 'current', 'language.unknown': 'Unknown language "{value}". Choose en, zh-CN, zh-TW, ja, ko or es.',
     'language.saveFailed': 'language save failed: {error}',
     'doctor.logs.new': 'Only warnings/errors since this TUI version started are recorded.',
-    'footer.current': 'current', 'footer.average': 'average', 'footer.context': 'context', 'footer.cache': 'cache', 'composer.placeholder': 'type a message',
+    'footer.current': 'current', 'footer.average': 'average', 'footer.context': 'context', 'footer.cache': 'cache hit', 'composer.placeholder': 'type a message',
     'doctor.nearTimeout': 'Assessment: {count} Bash calls ended at about 300 seconds, which matches the tool timeout; traces alone cannot prove the root cause. Next, check those calls\' shell completion markers and terminal errors.',
     'doctor.logs.none': 'No log file yet; earlier console logs were not persisted and cannot be recovered.',
     'doctor.evidence': 'Diagnostic evidence: {traces} recent sessions, {logs} warnings/errors.',
@@ -51,13 +51,13 @@ export const MESSAGES = {
     'agents.running': '运行中', 'agents.idle': '空闲', 'agents.done': '已完成', 'agents.total': '总计',
     'welcome.model': '模型', 'welcome.effort': '推理', 'welcome.project': '项目',
     'verbose.on': '详细模式已开启：对话中显示思考与工具调用', 'verbose.off': '详细模式已关闭',
-    'mouse.on': '鼠标捕获已开启：滚轮滚动对话 · 按住 Option（iTerm2）或 Fn（Terminal）拖选文本',
+    'mouse.on': '鼠标捕获已开启：滚轮滚动对话 · 拖选文本时按住 Shift（iTerm2 按住 Option、Terminal 按住 Fn）',
     'mouse.off': '鼠标捕获已关闭：可自由选择复制 · PageUp/PageDown 滚动对话 · /mouse 重新开启',
     'language.current': '语言：{name} · /language en | zh-CN | zh-TW | ja | ko | es',
     'language.set': '语言 → {name}', 'language.title': '/language — 界面语言', 'language.currentMark': '当前', 'language.unknown': '未知语言 "{value}"。可选 en、zh-CN、zh-TW、ja、ko、es。',
     'language.saveFailed': '语言设置保存失败：{error}',
     'doctor.logs.new': '仅记录新版 TUI 启动后的 warning/error。',
-    'footer.current': '当前', 'footer.average': '平均', 'footer.context': '上下文', 'footer.cache': '缓存', 'composer.placeholder': '输入消息',
+    'footer.current': '当前', 'footer.average': '平均', 'footer.context': '上下文', 'footer.cache': '缓存命中', 'composer.placeholder': '输入消息',
     'doctor.nearTimeout': '判断：{count} 次 Bash 调用在约 300 秒结束，符合工具超时特征；trace 不能单独证明触发超时的根因。下一步检查这些调用的 shell 完成标记和终端错误。',
     'doctor.logs.none': '日志文件尚未建立；旧版控制台日志未持久化，无法回溯。',
     'doctor.evidence': '诊断证据：{traces} 个近期会话、{logs} 条 warning/error。',
@@ -72,13 +72,13 @@ export const MESSAGES = {
     'agents.running': '執行中', 'agents.idle': '閒置', 'agents.done': '已完成', 'agents.total': '總計',
     'welcome.model': '模型', 'welcome.effort': '推理', 'welcome.project': '專案',
     'verbose.on': '詳細模式已開啟：對話中顯示思考與工具呼叫', 'verbose.off': '詳細模式已關閉',
-    'mouse.on': '滑鼠擷取已開啟：滾輪捲動對話 · 按住 Option（iTerm2）或 Fn（Terminal）拖選文字',
+    'mouse.on': '滑鼠擷取已開啟：滾輪捲動對話 · 拖選文字時按住 Shift（iTerm2 按住 Option、Terminal 按住 Fn）',
     'mouse.off': '滑鼠擷取已關閉：可自由選取複製 · PageUp/PageDown 捲動對話 · /mouse 重新開啟',
     'language.current': '語言：{name} · /language en | zh-CN | zh-TW | ja | ko | es',
     'language.set': '語言 → {name}', 'language.title': '/language — 介面語言', 'language.currentMark': '目前', 'language.unknown': '未知語言 "{value}"。可選 en、zh-CN、zh-TW、ja、ko、es。',
     'language.saveFailed': '語言設定儲存失敗：{error}',
     'doctor.logs.new': '僅記錄新版 TUI 啟動後的 warning/error。',
-    'footer.current': '目前', 'footer.average': '平均', 'footer.context': '上下文', 'footer.cache': '快取', 'composer.placeholder': '輸入訊息',
+    'footer.current': '目前', 'footer.average': '平均', 'footer.context': '上下文', 'footer.cache': '快取命中', 'composer.placeholder': '輸入訊息',
     'doctor.nearTimeout': '判斷：{count} 次 Bash 呼叫在約 300 秒結束，符合工具逾時特徵；trace 無法單獨證明觸發逾時的根因。下一步檢查這些呼叫的 shell 完成標記和終端錯誤。',
     'doctor.logs.none': '日誌檔尚未建立；舊版主控台日誌未持久化，無法回溯。',
     'doctor.evidence': '診斷證據：{traces} 個近期工作階段、{logs} 筆 warning/error。',
@@ -93,13 +93,13 @@ export const MESSAGES = {
     'agents.running': '実行中', 'agents.idle': '待機中', 'agents.done': '完了', 'agents.total': '合計',
     'welcome.model': 'モデル', 'welcome.effort': '推論', 'welcome.project': 'プロジェクト',
     'verbose.on': '詳細モード オン：思考とツール呼び出しをチャットに表示します', 'verbose.off': '詳細モード オフ',
-    'mouse.on': 'マウス キャプチャ オン：ホイールでチャットをスクロール · Option（iTerm2）または Fn（Terminal）を押しながらドラッグでテキストを選択',
+    'mouse.on': 'マウス キャプチャ オン：ホイールでチャットをスクロール · Shift（iTerm2 は Option、Terminal は Fn）を押しながらドラッグでテキスト選択',
     'mouse.off': 'マウス キャプチャ オフ：自由に選択・コピーできます · PageUp/PageDown でスクロール · /mouse で再びオン',
     'language.current': '言語：{name} · /language en | zh-CN | zh-TW | ja | ko | es',
     'language.set': '言語 → {name}', 'language.title': '/language — 表示言語', 'language.currentMark': '現在', 'language.unknown': '不明な言語 "{value}"。en、zh-CN、zh-TW、ja、ko、es から選んでください。',
     'language.saveFailed': '言語設定の保存に失敗しました：{error}',
     'doctor.logs.new': 'この TUI バージョンの起動以降の warning/error のみ記録されています。',
-    'footer.current': '現在', 'footer.average': '平均', 'footer.context': 'コンテキスト', 'footer.cache': 'キャッシュ', 'composer.placeholder': 'メッセージを入力',
+    'footer.current': '現在', 'footer.average': '平均', 'footer.context': 'コンテキスト', 'footer.cache': 'キャッシュヒット', 'composer.placeholder': 'メッセージを入力',
     'doctor.nearTimeout': '判断：Bash 呼び出し {count} 件が約 300 秒で終了しており、ツールのタイムアウトの特徴に一致します。トレースだけでは根本原因を証明できません。次はこれらの呼び出しのシェル完了マーカーと端末エラーを確認してください。',
     'doctor.logs.none': 'ログファイルはまだありません。以前のコンソールログは保存されておらず、遡れません。',
     'doctor.evidence': '診断の根拠：直近のセッション {traces} 件、warning/error {logs} 件。',
@@ -114,13 +114,13 @@ export const MESSAGES = {
     'agents.running': '실행 중', 'agents.idle': '대기', 'agents.done': '완료', 'agents.total': '전체',
     'welcome.model': '모델', 'welcome.effort': '추론', 'welcome.project': '프로젝트',
     'verbose.on': '상세 모드 켜짐: 생각과 도구 호출을 채팅에 표시합니다', 'verbose.off': '상세 모드 꺼짐',
-    'mouse.on': '마우스 캡처 켜짐: 휠로 채팅 스크롤 · Option(iTerm2) 또는 Fn(Terminal)을 누른 채 드래그하여 텍스트 선택',
+    'mouse.on': '마우스 캡처 켜짐: 휠로 채팅 스크롤 · Shift(iTerm2는 Option, Terminal은 Fn)를 누른 채 드래그하여 텍스트 선택',
     'mouse.off': '마우스 캡처 꺼짐: 자유롭게 선택·복사 · PageUp/PageDown으로 채팅 스크롤 · /mouse로 다시 켜기',
     'language.current': '언어: {name} · /language en | zh-CN | zh-TW | ja | ko | es',
     'language.set': '언어 → {name}', 'language.title': '/language — 인터페이스 언어', 'language.currentMark': '현재', 'language.unknown': '알 수 없는 언어 "{value}". en, zh-CN, zh-TW, ja, ko, es 중에서 선택하세요.',
     'language.saveFailed': '언어 설정 저장 실패: {error}',
     'doctor.logs.new': '이 TUI 버전 시작 이후의 warning/error만 기록됩니다.',
-    'footer.current': '현재', 'footer.average': '평균', 'footer.context': '컨텍스트', 'footer.cache': '캐시', 'composer.placeholder': '메시지를 입력하세요',
+    'footer.current': '현재', 'footer.average': '평균', 'footer.context': '컨텍스트', 'footer.cache': '캐시 적중', 'composer.placeholder': '메시지를 입력하세요',
     'doctor.nearTimeout': '판단: Bash 호출 {count}건이 약 300초에 종료되어 도구 시간 초과 특징과 일치합니다. 트레이스만으로는 근본 원인을 증명할 수 없습니다. 다음으로 해당 호출의 셸 완료 표시와 터미널 오류를 확인하세요.',
     'doctor.logs.none': '아직 로그 파일이 없습니다. 이전 콘솔 로그는 저장되지 않아 복구할 수 없습니다.',
     'doctor.evidence': '진단 근거: 최근 세션 {traces}개, warning/error {logs}건.',
@@ -135,13 +135,13 @@ export const MESSAGES = {
     'agents.running': 'en ejecución', 'agents.idle': 'inactivo', 'agents.done': 'terminado', 'agents.total': 'en total',
     'welcome.model': 'modelo', 'welcome.effort': 'esfuerzo', 'welcome.project': 'proyecto',
     'verbose.on': 'modo detallado activado: el razonamiento y las llamadas a herramientas se muestran en el chat', 'verbose.off': 'modo detallado desactivado',
-    'mouse.on': 'ratón activado: la rueda desplaza el chat · mantén Option (iTerm2) o Fn (Terminal) al arrastrar para seleccionar texto',
+    'mouse.on': 'ratón activado: la rueda desplaza el chat · mantén Shift al arrastrar para seleccionar texto (Option en iTerm2, Fn en Terminal)',
     'mouse.off': 'ratón desactivado: selecciona y copia libremente · PageUp/PageDown desplazan el chat · /mouse vuelve a activar la captura',
     'language.current': 'Idioma: {name} · /language en | zh-CN | zh-TW | ja | ko | es',
     'language.set': 'idioma → {name}', 'language.title': '/language — idioma de la interfaz', 'language.currentMark': 'actual', 'language.unknown': 'Idioma desconocido "{value}". Elige en, zh-CN, zh-TW, ja, ko o es.',
     'language.saveFailed': 'no se pudo guardar el idioma: {error}',
     'doctor.logs.new': 'Solo se registran los warnings/errores desde que arrancó esta versión del TUI.',
-    'footer.current': 'actual', 'footer.average': 'promedio', 'footer.context': 'contexto', 'footer.cache': 'caché', 'composer.placeholder': 'escribe un mensaje',
+    'footer.current': 'actual', 'footer.average': 'promedio', 'footer.context': 'contexto', 'footer.cache': 'éxitos de caché', 'composer.placeholder': 'escribe un mensaje',
     'doctor.nearTimeout': 'Valoración: {count} llamadas a Bash terminaron a unos 300 segundos, lo que coincide con el tiempo de espera de la herramienta; las trazas por sí solas no prueban la causa raíz. A continuación, revisa los marcadores de finalización del shell y los errores de terminal de esas llamadas.',
     'doctor.logs.none': 'Aún no hay archivo de registro; los registros de consola anteriores no se conservaron y no se pueden recuperar.',
     'doctor.evidence': 'Evidencia del diagnóstico: {traces} sesiones recientes, {logs} warnings/errores.',

package/plugins/session-metrics/balance.mjs

@@ -0,0 +1,52 @@
+// Remaining DeepSeek balance, refreshed on a long cache, plus the trusted clock
+// that comes with it: the same request's `Date` header anchors peak/off-peak
+// pricing without a second network call.
+const BALANCE_URL = 'https://api.deepseek.com/user/balance';
+const CACHE_MS = 5 * 60 * 1000;
+const RETRY_MS = 60 * 1000;
+let snapshot = { balance: null, fetchedAt: 0, clock: null, skewMs: 0, pending: false };
+
+/** Best-effort positive USD balance from a `/user/balance` body. */
+export function parseBalance(body) {
+  const infos = Array.isArray(body?.balance_infos) ? body.balance_infos : [];
+  const usd = infos.find(info => String(info?.currency ?? '').toUpperCase() === 'USD') ?? infos[0];
+  const total = Number(usd?.total_balance);
+  if (!Number.isFinite(total) || total < 0) return null;
+  return body?.is_available === false ? null : total;
+}
+
+export function balanceNow() { return snapshot.balance; }
+/** Clock anchored to the last balance response's `Date` header, else the local one. */
+export function trustedNow() {
+  const local = Date.now();
+  return snapshot.clock === null ? local : local + snapshot.skewMs;
+}
+
+/** Refresh at most once per cache window; never throws into the render path. */
+export async function refreshBalance(options = {}) {
+  const now = Date.now();
+  if (snapshot.pending || now - snapshot.fetchedAt < CACHE_MS) return snapshot.balance;
+  const key = options.key ?? process.env.DEEPSEEK_API_KEY;
+  if (!key) { snapshot = { ...snapshot, fetchedAt: now - (CACHE_MS - RETRY_MS), pending: false }; return snapshot.balance; }
+  const fetchImpl = options.fetch ?? globalThis.fetch;
+  if (typeof fetchImpl !== 'function') return snapshot.balance;
+  snapshot.pending = true;
+  try {
+    const response = await fetchImpl(BALANCE_URL, { headers: { Authorization: `Bearer ${key}`, Accept: 'application/json' } });
+    const header = response.headers?.get?.('date');
+    const anchor = header ? Date.parse(header) : NaN;
+    const body = await response.json();
+    const parsed = response.ok ? parseBalance(body) : null;
+    snapshot = {
+      balance: parsed === null && response.ok ? null : parsed ?? snapshot.balance,
+      fetchedAt: parsed === null ? Date.now() - (CACHE_MS - RETRY_MS) : Date.now(),
+      clock: Number.isFinite(anchor) ? anchor : snapshot.clock,
+      skewMs: Number.isFinite(anchor) ? anchor - Date.now() : snapshot.skewMs,
+      pending: false,
+    };
+  } catch {
+    // A transient failure keeps the last known balance and retries sooner.
+    snapshot = { ...snapshot, fetchedAt: Date.now() - (CACHE_MS - RETRY_MS), pending: false };
+  }
+  return snapshot.balance;
+}

package/plugins/session-metrics/index.mjs

@@ -2,6 +2,7 @@ import { randomUUID } from 'node:crypto';
 import { appendMetric } from './store.mjs';
 import { estimateCost, PRICE_VERSION } from './pricing.mjs';
 import { setMetricSource } from './view.mjs';
+import { refreshBalance } from './balance.mjs';
 import { createWindowRate } from './rate.mjs';
 export const name = 'dscode-session-metrics';
 export const inject = ['llm', 'agents', 'tokenMeter', 'sessionProjections'];
@@ -21,6 +22,23 @@ export function apply(ctx) {
     return { ...value, currentTps: liveRate.get(session) };
   }));
   const home = process.env.DSH_HOME;
+  // Remaining balance is best-effort decoration: resolve the key lazily (never
+  // inject the credentials service, so a missing one cannot fail startup), keep
+  // the request on a five-minute cache, and never let it reach the render path.
+  const credentials = ctx.get?.('credentials');
+  const refresh = async () => {
+    try {
+      const resolved = await credentials?.resolve?.('DEEPSEEK_API_KEY');
+      const key = typeof resolved === 'string' ? resolved : resolved?.value;
+      await refreshBalance({ key: key ?? process.env.DEEPSEEK_API_KEY });
+    } catch {
+      /* balance stays unknown */
+    }
+  };
+  refresh();
+  const balanceTimer = setInterval(refresh, 5 * 60 * 1000);
+  if (typeof balanceTimer.unref === 'function') balanceTimer.unref();
+  ctx.effect(() => () => clearInterval(balanceTimer));
   const record = (id, entry) => { try { appendMetric(home, id, entry); } catch { ctx.logger.warn('Session cost telemetry could not be saved.'); } };
   ctx.on('llm/stream', async function* (options, next) {
     if (!options.sessionId || !home) { yield* next(); return; }

package/plugins/session-metrics/pricing.mjs

@@ -9,10 +9,24 @@ export function estimateCost(provider, model, usage, time) {
   const flash = ['deepseek-flash', 'deepseek-v4-flash', 'deepseek-v4-flash-vision-exp'].includes(model)
     || model === 'deepseek-v4-pro' && time >= Date.UTC(2026, 8, 14, 4);
   if (!flash && model !== 'deepseek-v4-pro') return null;
-  const date = new Date(time), day = date.getUTCDay(), hour = date.getUTCHours();
-  const peak = day >= 1 && day <= 5 && (hour >= 1 && hour < 4 || hour >= 6 && hour < 10);
+  const peak = isPeak(time);
   const [read, input, output] = flash ? [0.003, 0.15, 0.6] : [0.022, 0.66, 1.98];
   const values = [usage.inputTokens, usage.outputTokens, usage.cacheReadTokens ?? 0, usage.cacheWriteTokens ?? 0];
   if (!values.every(n => Number.isFinite(n) && n >= 0) || values[3] !== 0) return null;
   return (values[0] * input + values[1] * output + values[2] * read) * (peak ? 2 : 1) / 1e6;
 }
+
+/**
+ * Peak/off-peak window in UTC: weekdays 01:00-04:00 and 06:00-10:00.
+ * @param time - Unix ms timestamp.
+ * @returns Whether that instant bills at the peak rate.
+ */
+export function isPeak(time) {
+  const date = new Date(time), day = date.getUTCDay(), hour = date.getUTCHours();
+  return day >= 1 && day <= 5 && (hour >= 1 && hour < 4 || hour >= 6 && hour < 10);
+}
+
+/** Footer marker for the billing window: fire for peak, snowflake for off-peak. */
+export function peakEmoji(time) {
+  return isPeak(time) ? '🔥' : '❄️';
+}

package/plugins/session-metrics/view.mjs

@@ -1,6 +1,7 @@
 import { readMetrics } from './store.mjs';
 import { t } from '../i18n/messages.mjs';
-import { estimateCost } from './pricing.mjs';
+import { estimateCost, peakEmoji } from './pricing.mjs';
+import { balanceNow, trustedNow } from './balance.mjs';
 import { sessionAverageTps } from './rate.mjs';
 let source;
 export function setMetricSource(next) { source = next; return () => { if (source === next) source = undefined; }; }
@@ -37,31 +38,49 @@ export function summarize(rows, events = [], corrupt = false) {
   }
   return { cost, unknown, calls, pending, cache: input > 0 && !cacheUnknown ? Math.min(100, hit / input * 100) : null };
 }
-/** Terminal columns of a string: East Asian wide characters (including the ｜ separator) take two. */
+/** Terminal columns of a string: East Asian wide characters (such as the cache label's CJK glyphs) take two. */
 export function displayWidth(text) {
   let width = 0;
-  for (const char of text) width += /[\u1100-\u115f\u2e80-\ua4cf\uac00-\ud7a3\uf900-\ufaff\ufe30-\ufe4f\uff00-\uff60\uffe0-\uffe6]/.test(char) ? 2 : 1;
+  for (const char of text) width += /[\u1100-\u115f\u2e80-\ua4cf\uac00-\ud7a3\uf900-\ufaff\ufe30-\ufe4f\uff00-\uff60\uffe0-\uffe6\u2600-\u27bf\u{1f300}-\u{1faff}]/u.test(char) ? 2 : 1;
   return width;
 }
-export function formatFooter(metrics, context, columns = 80, rates, locale = 'en') {
+export function formatFooter(metrics, context, columns = 80, rates, locale = 'en', header = '') {
   const label = key => t(locale, key);
   const ctx = Number.isFinite(context) ? `${Math.round(context)}%` : '--';
   const cache = metrics.cache === null ? '--' : `${metrics.cache.toFixed(1)}%`;
-  const dollars = metrics.unknown && metrics.cost === 0 ? '--' : `~$${metrics.cost.toFixed(metrics.cost < 1 ? 4 : 2)}${metrics.unknown ? '+' : ''}${metrics.pending ? '…' : ''}`;
-  const parts = rates ? [
+  const balance = balanceNow();
+  const spend = metrics.unknown && metrics.cost === 0 ? '--' : `$${metrics.cost.toFixed(2)}${metrics.unknown ? '+' : ''}${metrics.pending ? '…' : ''}`;
+  const dollars = `${spend} / ${balance === null ? '$--' : '$' + balance.toFixed(2)} ${peakEmoji(trustedNow())}`;
+  const base = rates ? [
     `${label('footer.current')}: ${Number.isFinite(rates.current) ? '~' + rates.current.toFixed(1) : '--'} tps`,
     `${label('footer.average')}: ${Number.isFinite(rates.average) ? rates.average.toFixed(1) : '--'} tps`,
-    `${label('footer.context')}: ${ctx}`, dollars, `${label('footer.cache')} ${cache}`,
-  ] : [`${label('footer.context')}: ${ctx}`, dollars, `${label('footer.cache')} ${cache}`];
-  for (let count = parts.length; count > 0; count--) {
-    const value = parts.slice(0, count).join(' ｜ ');
-    if (displayWidth(value) <= columns) return value;
+    `${label('footer.context')}: ${ctx}`, dollars, `${label('footer.cache')}: ${cache}`,
+  ] : [`${label('footer.context')}: ${ctx}`, dollars, `${label('footer.cache')}: ${cache}`];
+  // Narrow terminals shed the quietest figures first: average, cache hit, current. The
+  // model header then falls back to its bare `model @ effort` form, then context goes,
+  // and only then the header itself — the running cost is the last thing standing.
+  const drops = rates ? [1, 4, 0, 2] : [2, 0];
+  const offset = header === '' ? 0 : 1;
+  const parts = header === '' ? base : [header, ...base];
+  const short = header.replace(/^[^:]+: /, '');
+  const heads = header === '' ? [''] : short === header ? [header] : [header, short];
+  const render = ({ omit, head }) => parts
+    .map((part, index) => (index === 0 && header !== '' ? head : part))
+    .filter((part, index) => part !== '' && !omit.has(index))
+    .join(' | ');
+  for (let dropped = 0; dropped <= drops.length; dropped++) {
+    const omit = new Set(drops.slice(0, dropped).map(index => index + offset));
+    for (const head of heads) {
+      const value = render({ omit, head });
+      if (displayWidth(value) <= columns) return value;
+    }
   }
+  const floor = render({ omit: new Set(drops.map(index => index + offset)), head: '' });
   let clipped = '';
-  for (const char of parts[0]) { if (displayWidth(clipped + char) > columns) break; clipped += char; }
+  for (const char of floor) { if (displayWidth(clipped + char) > columns) break; clipped += char; }
   return clipped;
 }
-export function footerFor(id, stats, columns, locale = 'en') {
+export function footerFor(id, stats, columns, header = '', locale = 'en') {
   try {
     const data = id ? source?.(id) : undefined;
     const ledger = id && process.env.DSH_HOME ? readMetrics(process.env.DSH_HOME, id) : { rows: [], corrupt: false };
@@ -69,6 +88,6 @@ export function footerFor(id, stats, columns, locale = 'en') {
     const used = data?.used;
     const capacity = data?.capacity ?? stats.contextWindow;
     const average = sessionAverageTps(data?.events ?? []);
-    return formatFooter(summary, Number.isFinite(used) && capacity > 0 ? used / capacity * 100 : undefined, columns, { current: data?.currentTps, average }, locale);
-  } catch { return formatFooter({ cost: 0, unknown: true, cache: null }, undefined, columns, { current: null, average: null }, locale); }
+    return formatFooter(summary, Number.isFinite(used) && capacity > 0 ? used / capacity * 100 : undefined, columns, { current: data?.currentTps, average }, locale, header);
+  } catch { return formatFooter({ cost: 0, unknown: true, cache: null }, undefined, columns, { current: null, average: null }, locale, header); }
 }

package/vendor/persistent/index.js

@@ -1,3 +1,6 @@
+// dscode-stdin-stall-v2
+const STDIN_STALL_MS = 5000;
+const STDIN_STALL_NOTE = "\n[Interrupted after 5s with no output: the command held the terminal without producing anything, and this tool cannot supply terminal input. Give it stdin (a heredoc, `< file` or `< /dev/null`) or use a non-interactive form.]";
 // dscode-shell-reset-v1
 import { randomUUID } from "node:crypto";
 import z from "@deepseek-ai/schemastery";
@@ -255,6 +258,9 @@ async function executeCommand(ctx, shells, owner, command, config, upstream) {
 		const id = await shells.get(owner, commandDeadline.signal);
 		const marker = markers();
 		const wrapped = wrapCommand(command, marker);
+		const startedAt = Date.now();
+		let stdinWaited = false;
+		let stdinStalled = false;
 		let first = true;
 		let fallback = "";
 		let fallbackTruncated = false;
@@ -298,10 +304,21 @@ async function executeCommand(ctx, shells, owner, command, config, upstream) {
 			}
 			if (latest.text.includes(marker.end)) {
 				const complete = commandOutput(retainedScrollback(ctx, owner, id, latest), marker);
-				if (complete !== void 0) return renderCaptured(complete, config.maxOutputChars);
+				if (complete !== void 0) return renderCaptured(complete, config.maxOutputChars) + (stdinStalled ? STDIN_STALL_NOTE : "");
 			}
 			if (result.sessionStatus.kind === "exited") return await respondToSessionExit(ctx, shells, owner, id, result.sessionStatus, marker, fallback, fallbackTruncated, config);
-			if (result.waitReason === "stdin_read") return renderCaptured(partialOutput(retainedScrollback(ctx, owner, id, latest), marker, fallback, fallbackTruncated), config.maxOutputChars);
+			const partial = renderCaptured(partialOutput(retainedScrollback(ctx, owner, id, latest), marker, fallback, fallbackTruncated), config.maxOutputChars);
+			if (result.waitReason === "stdin_read") stdinWaited = true;
+			if (result.waitReason === "stdin_read" && partial.length > 0) return partial;
+			if (stdinWaited && partial.length === 0 && !stdinStalled && Date.now() - startedAt >= STDIN_STALL_MS) {
+				stdinStalled = true;
+				try {
+					await ctx.terminals.signal(owner, id, "SIGINT");
+				} catch (_unsignallableForeground) {
+					stdinStalled = false;
+					return partial;
+				}
+			}
 			await pause();
 		}
 	} catch (e_1) {