@yyfather/dsh-balance 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 YYfather
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,55 @@
+# dsh-balance
+
+DeepSeek Harness 余额与开销插件。在对话底部状态栏（composer dock）显示 DeepSeek / MiMo 账户余额与话费开销，支持**逐请求计价**、**高峰/空闲分时段**、**多模型价目**与**花费超线提醒**（点击状态栏即可设置）。
+
+## 功能
+
+- **余额**：实时查询 DeepSeek 账户余额（仅本机可访问，密钥只存在于 Host 侧；当前会话为 MiMo 等外部模型时不显示 DeepSeek 余额）
+- **开销（逐请求精确计价）**：按每个请求时间戳选高峰/空闲档价、按该请求的模型选价、同一步骤的 usage 样本按官方投影替换规则去重
+  - `本会话` = 当前会话从创建至今的全部花费
+  - `本次活跃` = 自本次插件启用以来新产生的花费
+  - `最近一次` = 当前会话最新一步请求的花费
+  - `上次对话` = 当前会话之前的上一会话花费（MiMo 会话按小米美元价 × 汇率折算）
+- **多模型价目**：内置 DeepSeek V4 Flash / V4 Flash Vision Exp / V4 Pro（官方价，空闲/高峰双档）与小米 MiMo V2.5 系（美元价），可在点击面板中按模型+时段编辑，美元模型按可配置汇率换算
+- **提醒**：本次活跃花费 ≥ 提醒线（默认 ¥1）时状态栏变橙色徽标；DeepSeek 余额 < 提醒线（默认 ¥10）同样提醒；点击面板可改两线
+- **刷新**：每次对话结束后自动刷新 + 每 5 分钟自动刷新（可在面板中开关）
+
+## 安装
+
+1. 克隆仓库到 DSH 的 profile 依赖目录（`%USERPROFILE%\.dsh\profiles\node_modules\@yyfather\dsh-balance` 或你的 `$DSH_HOME/profiles/<name>/node_modules/@yyfather/dsh-balance`）：
+   ```sh
+   git clone https://github.com/YYfather/dsh-balance.git "$USERPROFILE\.dsh\profiles\node_modules\@yyfather\dsh-balance"
+   ```
+2. 在 profile 的 `cordis.patch.yml` 末尾追加（该文件是用户 patch 层，重装/升级不会覆盖；`%USERPROFILE%\.dsh\profiles\desktop\cordis.patch.yml`）：
+   ```yaml
+   - insert:
+       - id: dsh-balance
+         name: '@yyfather/dsh-balance'
+   ```
+3. 重启 DSH Desktop。状态栏底部即出现余额/开销一行；点击可打开设置面板。
+
+### 依赖
+
+- Host 侧：`webServer`、`credentials`（DeepSeek 密钥在 设置→模型 保存，默认引用 `DEEPSEEK_API_KEY`）、`sessions` / `sessionQuery`（会话与历史投影）、`timer`
+- Client 侧：`slots`（`conversation.composer.dock`）、React
+- Node ≥ 20（Host 使用原生 `fetch`）
+
+## 配置（Host `cordis.patch.yml` 行内可覆盖）
+
+| 字段 | 默认 | 说明 |
+|---|---|---|
+| `apiKeyRef` | `DEEPSEEK_API_KEY` | 余额查询所用凭据引用 |
+| `baseUrl` | `https://api.deepseek.com` | DeepSeek API 根地址 |
+| `timeoutMs` | `20000` | 上游查询超时 |
+| `allowRemote` | `false` | 不允许非本机访问插件路由（安全默认，勿随意外开） |
+
+运行时价格/提醒线在点击面板中修改（进程内生效）。
+
+## 安全
+
+- 密钥仅在 Host 侧解析，浏览器端只访问 `dsh-balance/api/*` 本机同源路由（默认拒绝本机以外的来源）
+- 路由响应不含任何上游原文、密钥或未经校验的字段
+
+## License
+
+MIT

package/README_EN.md

@@ -0,0 +1,55 @@
+# dsh-balance
+
+A DeepSeek Harness plugin that shows DeepSeek / MiMo account balance and per-request conversation cost in the composer dock, with model-aware peak/off-peak pricing and spend alerts (click the dock readout to configure).
+
+## Features
+
+- **Balance**: live DeepSeek account balance (loopback-only routes; the credential never leaves the Host; hidden when the current session uses an external provider such as Xiaomi MiMo)
+- **Per-request cost**: each usage sample is priced by its own request timestamp (peak/off-peak) and its own model, with the same `(turn, step)` replacement rule as the official token-usage projection
+  - `本会话 / this conversation` = full cost of the current session since its creation
+  - `本次活跃 / active period` = cost of requests since this plugin instance started
+  - `最近一次 / last request` = cost of the most recent request
+  - `上次对话 / previous conversation` = cost of the immediately preceding session (MiMo sessions converted via a configurable USD rate)
+- **Model price table**: DeepSeek V4 Flash / V4 Flash Vision Exp / V4 Pro (official CNY, off-peak/peak tiers) and Xiaomi MiMo V2.5 family (USD, editable), editable per model + tier in the click panel; USD entries converted at a configurable rate
+- **Alerts**: orange pill badge when active-period spend ≥ spend line (default ¥1) or DeepSeek balance < balance line (default ¥10); both editable in the panel
+- **Refresh**: after each conversation turn and every 5 minutes (toggleable)
+
+## Installation
+
+1. Clone into the profile dependency folder (`$DSH_HOME/profiles/<name>/node_modules/@yyfather/dsh-balance`):
+   ```sh
+   git clone https://github.com/YYfather/dsh-balance.git "$HOME/.dsh/profiles/node_modules/@yyfather/dsh-balance"
+   ```
+2. Append to the profile's `cordis.patch.yml` (the user patch layer; survives reinstalls):
+   ```yaml
+   - insert:
+       - id: dsh-balance
+         name: '@yyfather/dsh-balance'
+   ```
+3. Restart DSH Desktop. The dock readout appears; click it to open the settings panel.
+
+### Requirements
+
+- Host: `webServer`, `credentials` (store the DeepSeek key in Settings → Models, default ref `DEEPSEEK_API_KEY`), `sessions` / `sessionQuery`, `timer`
+- Client: `slots` (`conversation.composer.dock`), React
+- Node ≥ 20 (native fetch)
+
+## Host config (overridable in the plugin row)
+
+| Field | Default | Notes |
+|---|---|---|
+| `apiKeyRef` | `DEEPSEEK_API_KEY` | credential reference for balance queries |
+| `baseUrl` | `https://api.deepseek.com` | DeepSeek API root |
+| `timeoutMs` | `20000` | upstream timeout |
+| `allowRemote` | `false` | keep false; routes are loopback-only by design |
+
+Run-time pricing and alert lines are edited in the click panel (in-memory).
+
+## Security
+
+- Credentials resolve only on the Host; the browser talks exclusively to the loopback-only `dsh-balance/api/*` same-origin routes
+- Responses never include upstream bodies, credentials, or unvalidated fields
+
+## License
+
+MIT

package/client.js

@@ -0,0 +1,245 @@
+/**
+ * dsh-balance — Client half (browser).
+ *
+ * Registers the ambient composition dock readout. All data comes from the
+ * Host's loopback-only same-origin routes; no credential ever reaches the page.
+ */
+import React from 'react'
+
+export const inject = ['slots']
+
+const STATE_ROUTE = '/dsh-balance/api/state'
+const CONFIG_ROUTE = '/dsh-balance/api/config'
+
+const CSS = [
+  '.dsh-balance-dock{position:relative;display:inline-flex}',
+  '.dsh-balance-dock-line{font-size:12px;opacity:.85;white-space:nowrap}',
+  '.dsh-balance-dock-line.warn{opacity:1;color:#f59e0b;font-weight:500;background:rgba(245,158,11,.13);border:1px solid rgba(245,158,11,.35);border-radius:999px;padding:1px 8px}',
+  '.dsh-balance-pop{position:absolute;bottom:calc(100% + 10px);left:0;z-index:60;background:var(--dsh-panel-bg,#1f1f1f);color:var(--dsh-text,#e8e8e8);border:1px solid rgba(128,128,128,.35);border-radius:10px;padding:12px;display:flex;flex-direction:column;gap:8px;font-size:12px;white-space:nowrap;min-width:280px;box-shadow:0 8px 28px rgba(0,0,0,.4)}',
+  '.dsh-balance-pop .title-row{display:flex;justify-content:space-between;align-items:center;font-weight:600;font-size:12.5px;opacity:.95}',
+  '.dsh-balance-pop .xbtn{border:none;background:none;color:inherit;opacity:.6;cursor:pointer;font-size:12px;padding:0}',
+  '.dsh-balance-pop label{display:flex;gap:8px;align-items:center;justify-content:space-between}',
+  '.dsh-balance-pop .field-name{opacity:.8}',
+  '.dsh-balance-pop input[type=number]{width:72px;font-size:12px;background:rgba(128,128,128,.08);color:inherit;border:1px solid rgba(128,128,128,.4);border-radius:6px;padding:3px 8px}',
+  '.dsh-balance-pop input[type=checkbox]{accent-color:#f59e0b}',
+  '.dsh-balance-pop select{font-size:12px;max-width:200px;background:rgba(128,128,128,.08);color:inherit;border:1px solid rgba(128,128,128,.4);border-radius:6px;padding:3px 6px}',
+  '.dsh-balance-bar{width:100%;height:5px;background:rgba(128,128,128,.22);border-radius:999px;overflow:hidden}',
+  '.dsh-balance-bar>div{height:100%;background:#f59e0b;border-radius:999px;transition:width .3s}',
+  '.dsh-balance-pop .actions{display:flex;gap:8px;align-items:center}',
+  '.dsh-balance-pop .actions button{font-size:12px;border-radius:6px;padding:3px 12px;cursor:pointer;border:1px solid rgba(128,128,128,.4);background:rgba(128,128,128,.1);color:inherit}',
+  '.dsh-balance-pop .actions button.primary{background:#f59e0b;color:#1a1a1a;font-weight:600;border:none}',
+  '.dsh-balance-pop .muted{opacity:.65}',
+  '.dsh-balance-pop .section{border-top:1px solid rgba(128,128,128,.25);padding-top:8px}',
+].join('')
+
+const symbolOf = (currency) => currency === 'CNY' ? '¥' : currency === 'USD' ? '$' : (currency || '') + ' '
+const round2 = (n) => Math.round(n * 100) / 100
+
+async function loadState(sessionId, force, signal) {
+  const params = new URLSearchParams()
+  if (sessionId) params.set('session', sessionId)
+  if (force) params.set('refresh', '1')
+  const qs = params.toString()
+  const resp = await fetch(STATE_ROUTE + (qs ? '?' + qs : ''), {
+    headers: { accept: 'application/json' },
+    cache: 'no-store',
+    ...signal ? { signal } : {},
+  })
+  const value = await resp.json()
+  if (value === null || typeof value !== 'object' || value.ok !== true) {
+    throw new Error((value && value.message) || 'Host 响应异常')
+  }
+  return value
+}
+
+async function saveConfig(patch) {
+  const resp = await fetch(CONFIG_ROUTE, {
+    method: 'POST',
+    headers: { 'content-type': 'application/json', accept: 'application/json' },
+    body: JSON.stringify(patch),
+  })
+  const value = await resp.json()
+  if (value === null || typeof value !== 'object' || value.ok !== true) {
+    throw new Error((value && value.message) || 'Host 响应异常')
+  }
+  return value
+}
+
+/** Click-to-set panel under the dock readout: alert lines + per-model pricing. */
+function BalancePanel(props) {
+  const data = props.data
+  const st = data.state || {}
+  const cfg = data.config || {}
+  const [spendThreshold, setSpendThreshold] = React.useState(String(cfg.spendThreshold ?? 1))
+  const [spendAlert, setSpendAlert] = React.useState(cfg.spendAlert !== false)
+  const [threshold, setThreshold] = React.useState(String(cfg.threshold ?? 10))
+  const [priceKey, setPriceKey] = React.useState('default')
+  const [tierEdit, setTierEdit] = React.useState('off')
+  const [priceIn, setPriceIn] = React.useState('1.5')
+  const [priceCache, setPriceCache] = React.useState('0.05')
+  const [priceOut, setPriceOut] = React.useState('4.5')
+  const [usdRate, setUsdRate] = React.useState(String(cfg.usdRate ?? 7.2))
+  const active = st.cost || 0
+  const thr = Math.max(0, Number(spendThreshold) || 1)
+  const pct = thr > 0 ? Math.min(100, Math.round(active / thr * 100)) : 0
+  const over = thr > 0 && active >= thr
+  const keys = cfg.prices ? Object.keys(cfg.prices) : ['default']
+  const labelOf = (k) => {
+    const p = (cfg.prices && (cfg.prices[k] || cfg.prices.default)) || {}
+    return k === 'default' ? '默认' : k + (p.currency === 'USD' ? ' ($)' : '')
+  }
+  const syncPrice = (key, tier) => {
+    const p = (cfg.prices && (cfg.prices[key] || cfg.prices.default)) || {}
+    const t = tier === 'peak' ? { in: p.peakIn, cache: p.peakCache, out: p.peakOut } : { in: p.in, cache: p.cache, out: p.out }
+    setPriceIn(String(t.in ?? 1.5)); setPriceCache(String(t.cache ?? 0.05)); setPriceOut(String(t.out ?? 4.5))
+  }
+  const num = (v, d) => { const n = Number(v); return Number.isFinite(n) && n >= 0 ? n : d }
+  const save = () => {
+    const rt = Number(usdRate)
+    saveConfig({
+      threshold: num(threshold, 10),
+      spendAlert,
+      spendThreshold: num(spendThreshold, 1),
+      usdRate: Number.isFinite(rt) && rt > 0 ? rt : 7.2,
+      priceKey: priceKey || 'default',
+      tier: tierEdit === 'peak' ? 'peak' : 'off',
+      price: { in: num(priceIn, 1.5), cache: num(priceCache, 0.05), out: num(priceOut, 4.5) },
+    }).then((v) => { if (props.onChanged) props.onChanged(v) }).catch(() => {})
+  }
+  const refresh = () => {
+    loadState(props.sessionId, true).then((v) => { if (props.onChanged) props.onChanged(v) }).catch(() => {})
+  }
+  return React.createElement('div', { className: 'dsh-balance-pop' },
+    React.createElement('div', { className: 'title-row' },
+      React.createElement('span', null, '余额开销设置'),
+      React.createElement('button', { className: 'xbtn', onClick: props.onClose }, '✕')
+    ),
+    React.createElement('label', null,
+      React.createElement('span', { className: 'field-name' }, '花费提醒线 ¥'),
+      React.createElement('input', { type: 'number', min: 0, step: 0.1, value: spendThreshold, onChange: (e) => setSpendThreshold(e.target.value) })
+    ),
+    React.createElement('label', null,
+      React.createElement('span', { className: 'field-name' }, '启用花费提醒（按本次活跃）'),
+      React.createElement('input', { type: 'checkbox', checked: spendAlert, onChange: (e) => setSpendAlert(e.target.checked) })
+    ),
+    React.createElement('div', { className: 'dsh-balance-bar' }, React.createElement('div', { style: { width: pct + '%' } })),
+    React.createElement('span', { className: 'muted' }, '本次活跃 ' + symbolOf(st.currency || 'CNY') + String(active) + ' / ' + symbolOf(st.currency || 'CNY') + String(thr) + (over ? ' ⚠ 已超线' : '')),
+    React.createElement('label', null,
+      React.createElement('span', { className: 'field-name' }, '余额提醒线 ¥'),
+      React.createElement('input', { type: 'number', min: 0, step: 1, value: threshold, onChange: (e) => setThreshold(e.target.value) })
+    ),
+    React.createElement('div', { className: 'section' },
+      React.createElement('label', null,
+        React.createElement('span', { className: 'field-name' }, '模型价目'),
+        React.createElement('select', { value: priceKey, onChange: (e) => { setPriceKey(e.target.value); syncPrice(e.target.value, tierEdit) } }, keys.map((k) => React.createElement('option', { value: k, key: k }, labelOf(k))))
+      ),
+      React.createElement('label', null,
+        React.createElement('span', { className: 'field-name' }, '时段'),
+        React.createElement('select', { value: tierEdit, onChange: (e) => { setTierEdit(e.target.value); syncPrice(priceKey, e.target.value) } },
+          React.createElement('option', { value: 'off' }, '空闲'), React.createElement('option', { value: 'peak' }, '高峰'))
+      ),
+      React.createElement('label', null,
+        React.createElement('span', { className: 'field-name' }, '输入/缓存/输出 ¥每百万'),
+        React.createElement('span', { style: { display: 'inline-flex', gap: 4 } },
+          React.createElement('input', { type: 'number', min: 0, step: 0.01, value: priceIn, onChange: (e) => setPriceIn(e.target.value) }),
+          React.createElement('input', { type: 'number', min: 0, step: 0.01, value: priceCache, onChange: (e) => setPriceCache(e.target.value) }),
+          React.createElement('input', { type: 'number', min: 0, step: 0.01, value: priceOut, onChange: (e) => setPriceOut(e.target.value) })
+        )
+      ),
+      React.createElement('label', null,
+        React.createElement('span', { className: 'field-name' }, '美元汇率 ¥/$'),
+        React.createElement('input', { type: 'number', min: 0, step: 0.1, value: usdRate, onChange: (e) => setUsdRate(e.target.value) })
+      )
+    ),
+    React.createElement('div', { className: 'actions' },
+      React.createElement('button', { className: 'primary', onClick: save }, '保存'),
+      React.createElement('button', { onClick: refresh }, '立即刷新')
+    ),
+    React.createElement('span', { className: 'muted' }, '本次活跃 = 自本次插件启用以来的新花费；本会话 = 当前会话全部花费')
+  )
+}
+
+function BalanceDock(props) {
+  const sessionId = props && props.sessionId
+  const [data, setData] = React.useState(null)
+  const [open, setOpen] = React.useState(false)
+  React.useEffect(() => {
+    let alive = true
+    const load = (force) => {
+      loadState(sessionId, force).then((v) => { if (alive) setData(v) }).catch(() => { if (alive) setData({ state: { status: 'error', error: '连接失败' } }) })
+    }
+    load(false)
+    const timer = window.setInterval(() => load(false), 5000)
+    return () => { alive = false; window.clearInterval(timer) }
+  }, [sessionId])
+  if (data === null) return null
+  const st = data.state || {}
+  const cfg = data.config || {}
+  const below = st.status === 'ok' && !st.external && typeof st.balance === 'number' && st.balance < (cfg.threshold ?? 10)
+  const costWarn = st.status === 'ok' && st.spendAlert === true
+  const warn = below || costWarn
+  let text
+  if (st.status === 'loading') text = '余额 …'
+  else if (st.status === 'unconfigured') text = '余额未配置'
+  else if (st.status === 'error') text = '余额获取失败'
+  else if (warn) {
+    const pieces = []
+    if (costWarn) pieces.push('本次活跃 ' + symbolOf(st.currency) + String(st.cost || 0) + '/' + symbolOf(st.currency) + String(cfg.spendThreshold ?? 1))
+    if (below) pieces.push('余额 ' + symbolOf(st.currency) + String(st.balance) + '/' + symbolOf(st.currency) + String(cfg.threshold ?? 10))
+    text = '⚠ ' + pieces.join(' · ')
+  } else {
+    const total = st.costTotal || 0
+    const active = st.cost || 0
+    const last = st.lastCost !== null && st.lastCost !== undefined ? st.lastCost : null
+    const prev = st.prevCost !== null && st.prevCost !== undefined ? st.prevCost : null
+    text = ''
+    if (!st.external) text += '余额 ' + symbolOf(st.currency) + String(st.balance) + ' · '
+    text += '本会话 ' + symbolOf(st.currency) + String(total)
+    text += ' · 本次活跃 ' + symbolOf(st.currency) + String(active)
+    if (last !== null) text += ' · 最近一次 ' + symbolOf(st.currency) + String(last)
+    if (prev !== null) text += ' · 上次对话 ' + symbolOf(st.currency) + String(prev)
+  }
+  let title = ''
+  if (st.status === 'ok') {
+    const total = st.costTotal || 0
+    const active = st.cost || 0
+    const last = st.lastCost !== null && st.lastCost !== undefined ? st.lastCost : null
+    const prev = st.prevCost !== null && st.prevCost !== undefined ? st.prevCost : null
+    title = st.external ? '当前会话为小米 MiMo 计费（不适用 DeepSeek 余额）' : 'DeepSeek 账户余额 ' + (st.currency || '') + ' · 更新于 ' + new Date(st.updatedAt || Date.now()).toLocaleTimeString()
+    if (st.tokens) title += ' · 本会话token: 输入 ' + st.tokens.input + ' · 缓存读 ' + st.tokens.cacheRead + ' · 输出 ' + st.tokens.output
+    title += ' · 本会话(' + (st.model || '默认') + ') ' + symbolOf(st.currency) + total + ' · 本次活跃 ' + symbolOf(st.currency) + active + ' (' + (st.samples || 0) + '次新请求)'
+    if (last !== null) title += ' · 最近一次 ' + symbolOf(st.currency) + last
+    if (prev !== null) title += ' · 上次对话(' + (st.prevModel || '默认') + ') ' + symbolOf(st.currency) + prev
+    if (costWarn) title += ' · ⚠ 本次活跃 ≥ ' + symbolOf(st.currency) + String(cfg.spendThreshold ?? 1)
+    if (below) title += ' · ⚠ 余额 < ' + symbolOf(st.currency) + String(cfg.threshold ?? 10)
+  } else if (st.status === 'unconfigured') {
+    title = '未找到 DEEPSEEK_API_KEY，请在 设置 → 模型 中配置'
+  } else if (st.status === 'error') {
+    title = st.error || '查询失败'
+  }
+  return React.createElement('div', { className: 'dsh-balance-dock', title },
+    React.createElement('span', {
+      className: 'dsh-balance-dock-line' + (warn ? ' warn' : ''),
+      onClick: () => setOpen(!open),
+      style: { cursor: 'pointer' },
+    }, text),
+    open ? React.createElement(BalancePanel, { data, sessionId, onChanged: setData, onClose: () => setOpen(false) }) : null
+  )
+}
+
+export function apply(ctx) {
+  ctx.effect(() => {
+    const style = document.createElement('style')
+    style.dataset.plugin = 'dsh-balance'
+    style.textContent = CSS
+    document.head.append(style)
+    return () => { style.remove() }
+  }, 'dsh-balance: styles')
+
+  ctx.slots.inject('conversation.composer.dock', () => ctx.slots.register({
+    name: 'conversation.composer.dock',
+    id: 'dsh-balance',
+    order: 10,
+    inject: () => ({ loadState, saveConfig }),
+  }, BalanceDock))
+}

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: dsh-balance
+      name: '@yyfather/dsh-balance'

package/index.js

@@ -0,0 +1,341 @@
+/**
+ * dsh-balance — Host half.
+ *
+ * Standard DSH plugin (namespace export: name / inject / Config / apply).
+ * The Host owns every credential and upstream call; the browser client only
+ * talks to two loopback-only same-origin routes exposed via `ctx.webServer`.
+ */
+import z from '@deepseek-ai/schemastery'
+
+export const name = 'dsh-balance'
+export const inject = ['webServer', 'credentials', 'timer']
+
+export const Config = z.object({
+  apiKeyRef: z.string().role('credential-ref').default('DEEPSEEK_API_KEY'),
+  baseUrl: z.string().default('https://api.deepseek.com'),
+  timeoutMs: z.number().step(1).min(1000).max(60000).default(20000),
+  allowRemote: z.boolean().default(false),
+})
+
+const STATE_ROUTE = '/dsh-balance/api/state'
+const CONFIG_ROUTE = '/dsh-balance/api/config'
+
+const BASE_PRICES = {
+  default: { currency: 'CNY', in: 1.5, cache: 0.05, out: 4.5, peakIn: 3.0, peakCache: 0.10, peakOut: 9.0 },
+  'deepseek-v4-flash': { currency: 'CNY', in: 1.5, cache: 0.05, out: 4.5, peakIn: 3.0, peakCache: 0.10, peakOut: 9.0 },
+  'deepseek-v4-flash-vision-exp': { currency: 'CNY', in: 1.5, cache: 0.05, out: 4.5, peakIn: 3.0, peakCache: 0.10, peakOut: 9.0 },
+  'deepseek-v4-pro': { currency: 'CNY', in: 4.5, cache: 0.15, out: 13.5, peakIn: 9.0, peakCache: 0.30, peakOut: 27.0 },
+  'mimo-v2.5': { currency: 'USD', in: 0.10, cache: 0.02, out: 0.40, peakIn: 0.10, peakCache: 0.02, peakOut: 0.40 },
+  'mimo-v2.5-pro': { currency: 'USD', in: 1.00, cache: 0.20, out: 3.00, peakIn: 1.00, peakCache: 0.20, peakOut: 3.00 },
+  'mimo-v2.5-pro-ultraspeed': { currency: 'USD', in: 1.00, cache: 0.20, out: 3.00, peakIn: 1.00, peakCache: 0.20, peakOut: 3.00 },
+}
+
+function isLoopbackRequest(req) {
+  const host = req.headers.host
+  if (host === undefined) return false
+  try {
+    const hostname = new URL(`http://${host}`).hostname
+    return hostname === '127.0.0.1' || hostname === 'localhost' || hostname === '[::1]'
+  } catch {
+    return false
+  }
+}
+
+function sendJson(res, status, body) {
+  res.writeHead(status, {
+    'cache-control': 'no-store',
+    'content-type': 'application/json; charset=utf-8',
+    'x-content-type-options': 'nosniff',
+  })
+  res.end(JSON.stringify(body))
+}
+
+function readJsonBody(req, maxBytes = 65536) {
+  return new Promise((resolve, reject) => {
+    let size = 0
+    const chunks = []
+    req.on('data', (chunk) => {
+      size += chunk.length
+      if (size > maxBytes) {
+        reject(new Error('body too large'))
+        req.destroy()
+        return
+      }
+      chunks.push(chunk)
+    })
+    req.on('end', () => {
+      if (chunks.length === 0) { resolve({}); return }
+      try { resolve(JSON.parse(Buffer.concat(chunks).toString('utf8'))) } catch (error) { reject(error) }
+    })
+    req.on('error', reject)
+  })
+}
+
+const round2 = (n) => Math.round(n * 100) / 100
+
+function tierOfTime(timeMs) {
+  const b = new Date(timeMs + 8 * 3600e3)
+  const day = b.getUTCDay()
+  const h = b.getUTCHours()
+  return day >= 1 && day <= 5 && ((h >= 9 && h < 12) || (h >= 14 && h < 18)) ? 'peak' : 'off'
+}
+
+const isExternal = (provider) => provider !== null && provider !== 'deepseek-official'
+
+/** Fold a session event stream into per-request cost buckets (model + tier per request time). */
+function foldCost(events, since) {
+  const totals = { input: 0, cacheRead: 0, cacheWrite: 0, output: 0 }
+  let cost = 0
+  let costActive = 0
+  let external = false
+  let lastModel = null
+  let lastProvider = null
+  let lastSample = null
+  let samples = 0
+  let samplesActive = 0
+  let lastCost = 0
+  let lastTime = 0
+  let lastTokens = null
+  if (Array.isArray(events)) {
+    for (const e of events) {
+      if (e === null || typeof e !== 'object' || e.data === null || typeof e.data !== 'object') continue
+      if (e.type === 'request/context') {
+        if (e.data.model) lastModel = String(e.data.model)
+        if (e.data.provider) lastProvider = String(e.data.provider)
+        continue
+      }
+      let turn; let step; let usage
+      if (e.type === 'assistant/chunk' && e.data.chunk !== null && typeof e.data.chunk === 'object' && e.data.chunk.type === 'usage') {
+        turn = e.data.turn; step = e.data.step; usage = e.data.chunk.usage
+      } else if (e.type === 'assistant/message' && e.data.usage !== undefined) {
+        turn = e.data.turn; step = e.data.step; usage = e.data.usage
+      } else continue
+      if (usage === null || typeof usage !== 'object') continue
+      const b = { input: usage.inputTokens || 0, cacheRead: usage.cacheReadTokens || 0, cacheWrite: usage.cacheWriteTokens || 0, output: usage.outputTokens || 0 }
+      const ext = isExternal(lastProvider)
+      const tms = typeof e.time === 'number' ? e.time : Date.now()
+      const inActive = since === undefined || tms >= since
+      const sc = costOfAt(b, lastModel, tms, configRuntime)
+      const scA = inActive ? sc : 0
+      if (lastSample !== null && lastSample.turn === turn && lastSample.step === step) {
+        totals.input = Math.max(0, totals.input - lastSample.buckets.input + b.input)
+        totals.cacheRead = Math.max(0, totals.cacheRead - lastSample.buckets.cacheRead + b.cacheRead)
+        totals.cacheWrite = Math.max(0, totals.cacheWrite - lastSample.buckets.cacheWrite + b.cacheWrite)
+        totals.output = Math.max(0, totals.output - lastSample.buckets.output + b.output)
+        cost = Math.max(0, round2(cost - lastSample.cost + sc))
+        costActive = Math.max(0, round2(costActive - lastSample.costActive + scA))
+        lastSample = { turn, step, buckets: b, cost: sc, costActive: scA }
+      } else {
+        totals.input += b.input; totals.cacheRead += b.cacheRead; totals.cacheWrite += b.cacheWrite; totals.output += b.output
+        cost = round2(cost + sc)
+        costActive = round2(costActive + scA)
+        lastSample = { turn, step, buckets: b, cost: sc, costActive: scA }
+        samples += 1
+        if (inActive) samplesActive += 1
+      }
+      lastCost = sc
+      lastTime = tms
+      lastTokens = b
+      if (ext) external = true
+    }
+  }
+  return { totals, cost, costActive, external, model: lastModel, samples, samplesActive, lastCost, lastTime, lastTokens }
+}
+
+/** Runtime-adjustable pricing (edited from the click panel); priceOf/costOfAt read it. */
+let configRuntime = {
+  threshold: 10,
+  spendAlert: true,
+  spendThreshold: 1,
+  usdRate: 7.2,
+  afterTurn: true,
+  every5min: true,
+  prices: structuredClone(BASE_PRICES),
+}
+
+function priceOf(model, rt) { return rt.prices[model] || rt.prices.default }
+function costOfAt(t, model, timeMs, rt) {
+  const p = priceOf(model, rt)
+  const peak = tierOfTime(timeMs) === 'peak'
+  const rate = p.currency === 'USD' ? rt.usdRate : 1
+  const inP = (peak ? p.peakIn : p.in) * rate
+  const cacheP = (peak ? p.peakCache : p.cache) * rate
+  const outP = (peak ? p.peakOut : p.out) * rate
+  return round2((t.input * inP + t.cacheRead * cacheP + t.cacheWrite * inP + t.output * outP) / 1e6)
+}
+
+export function apply(ctx, config) {
+  const activeSince = Date.now()
+  let refreshing = false
+  let sessionId = undefined
+  let measuredFor = undefined
+  let lastBalance = null
+  const state = {
+    status: 'loading', balance: null, currency: 'CNY', updatedAt: 0, delta: null,
+    cost: 0, costTotal: 0, tokens: null, model: null, samples: 0, samplesTotal: 0,
+    external: false, spendAlert: false, lastCost: null, lastTime: 0, lastTokens: null,
+    prevCost: null, prevModel: null, prevSamples: 0, prevExternal: false,
+    error: '',
+  }
+
+  const patch = (p) => Object.assign(state, p)
+
+  const snapshot = () => ({ state: { ...state }, config: structuredClone(configRuntime) })
+
+  const applyTokens = (sid) => {
+    if (!sid) return
+    const sessions = ctx.get('sessions')
+    if (sessions === undefined) return
+    const session = sessions.get(sid)
+    if (session === undefined) return
+    measuredFor = sid
+    const f = foldCost(session.events, activeSince)
+    patch({
+      tokens: f.totals, model: f.model, external: f.external,
+      cost: f.costActive, costTotal: f.cost,
+      samples: f.samplesActive, samplesTotal: f.samples,
+      lastCost: f.samples > 0 ? f.lastCost : null, lastTime: f.lastTime, lastTokens: f.lastTokens,
+      spendAlert: configRuntime.spendAlert && f.costActive >= configRuntime.spendThreshold,
+    })
+  }
+
+  const computePrev = async (sid) => {
+    if (!sid) return
+    const sessionQuery = ctx.get('sessionQuery')
+    const sessions = ctx.get('sessions')
+    if (sessionQuery === undefined || sessions === undefined) return
+    const cur = sessions.get(sid)
+    if (cur === undefined) return
+    const cwd = cur.header.cwd
+    const curCreated = cur.header.createdAt
+    let records
+    try { records = await sessionQuery.listSessions() } catch { return }
+    let prev = null
+    for (const r of records) {
+      if (r.header.id === sid) continue
+      if (r.header.origin === 'subagent' || r.header.parentSession !== undefined) continue
+      if (cwd !== undefined && cwd !== r.header.cwd) continue
+      if (curCreated !== undefined && curCreated !== null && typeof r.header.createdAt === 'number' && r.header.createdAt >= curCreated) continue
+      prev = r.header
+      break
+    }
+    if (prev === null) { patch({ prevSessionId: undefined, prevCost: null, prevModel: null, prevExternal: false, prevSamples: 0 }); return }
+    try {
+      const load = await sessionQuery.load(prev.id)
+      if (load === null || typeof load !== 'object') { patch({ prevSessionId: prev.id, prevModel: null, prevExternal: false, prevCost: null, prevSamples: 0 }); return }
+      const f = foldCost(load.events, undefined)
+      patch({ prevSessionId: prev.id, prevModel: f.model, prevExternal: f.external, prevCost: f.cost, prevSamples: f.samples })
+    } catch {
+      patch({ prevSessionId: prev.id, prevModel: null, prevExternal: false, prevCost: null, prevSamples: 0 })
+    }
+  }
+
+  const fetchBalance = async () => {
+    const hit = await ctx.credentials.resolve(config.apiKeyRef)
+    if (hit === undefined || !hit.value) {
+      patch({ status: 'unconfigured', balance: null, delta: null, error: '' })
+      return
+    }
+    const controller = new AbortController()
+    const timer = setTimeout(() => controller.abort(), config.timeoutMs)
+    let payload
+    try {
+      const resp = await fetch(`${config.baseUrl.replace(/\/+$/u, '')}/user/balance`, {
+        headers: { authorization: `Bearer ${hit.value}` },
+        signal: controller.signal,
+      })
+      payload = await resp.json()
+    } finally {
+      clearTimeout(timer)
+    }
+    if (payload === null || typeof payload !== 'object' || payload.is_available !== true || !Array.isArray(payload.balance_infos) || payload.balance_infos.length < 1) {
+      throw new Error('余额接口响应格式异常')
+    }
+    const info = payload.balance_infos[0]
+    const balance = Number(info.total_balance)
+    if (!Number.isFinite(balance)) throw new Error('余额字段异常')
+    const prev = lastBalance
+    lastBalance = balance
+    patch({
+      status: 'ok', balance, currency: info.currency || 'CNY', updatedAt: Date.now(),
+      delta: prev === null ? null : round2(balance - prev), error: '',
+    })
+  }
+
+  const refresh = async () => {
+    if (refreshing) return
+    refreshing = true
+    try {
+      await fetchBalance()
+      applyTokens(sessionId)
+      await computePrev(sessionId)
+    } catch (error) {
+      patch({ status: 'error', error: error instanceof Error ? error.message : String(error), delta: null })
+    } finally {
+      refreshing = false
+    }
+  }
+
+  const stateHandler = async (req, res) => {
+    if (req.method !== 'GET') { sendJson(res, 405, { ok: false, code: 'METHOD_NOT_ALLOWED', message: '仅支持 GET' }); return }
+    if (!config.allowRemote && !isLoopbackRequest(req)) { sendJson(res, 403, { ok: false, code: 'FORBIDDEN', message: '仅允许本机访问' }); return }
+    try {
+      const url = new URL(req.url ?? STATE_ROUTE, 'http://localhost')
+      const sid = url.searchParams.get('session') || sessionId
+      if (sid && (measuredFor !== sid || url.searchParams.get('refresh') === '1')) {
+        sessionId = sid
+        applyTokens(sid)
+        await computePrev(sid)
+      } else if (url.searchParams.get('refresh') === '1') {
+        await refresh()
+      }
+      sendJson(res, 200, { ok: true, ...snapshot() })
+    } catch (error) {
+      sendJson(res, 500, { ok: false, code: 'HOST_ERROR', message: error instanceof Error ? error.message : String(error) })
+    }
+  }
+
+  const configHandler = async (req, res) => {
+    if (req.method !== 'POST') { sendJson(res, 405, { ok: false, code: 'METHOD_NOT_ALLOWED', message: '仅支持 POST' }); return }
+    if (!config.allowRemote && !isLoopbackRequest(req)) { sendJson(res, 403, { ok: false, code: 'FORBIDDEN', message: '仅允许本机访问' }); return }
+    try {
+      const a = await readJsonBody(req)
+      if (typeof a.threshold === 'number' && Number.isFinite(a.threshold) && a.threshold >= 0) configRuntime.threshold = a.threshold
+      if (typeof a.spendAlert === 'boolean') configRuntime.spendAlert = a.spendAlert
+      if (typeof a.spendThreshold === 'number' && Number.isFinite(a.spendThreshold) && a.spendThreshold >= 0) configRuntime.spendThreshold = a.spendThreshold
+      if (typeof a.usdRate === 'number' && Number.isFinite(a.usdRate) && a.usdRate > 0) configRuntime.usdRate = a.usdRate
+      if (typeof a.afterTurn === 'boolean') configRuntime.afterTurn = a.afterTurn
+      if (typeof a.every5min === 'boolean') configRuntime.every5min = a.every5min
+      if (typeof a.priceKey === 'string' && a.priceKey !== '' && a.price !== null && typeof a.price === 'object') {
+        const p = a.price
+        const inV = Number(p.in); const cacheV = Number(p.cache); const outV = Number(p.out)
+        if (Number.isFinite(inV) && inV >= 0 && Number.isFinite(cacheV) && cacheV >= 0 && Number.isFinite(outV) && outV >= 0) {
+          const cur = configRuntime.prices[a.priceKey] || structuredClone({ currency: 'CNY', in: 1.5, cache: 0.05, out: 4.5, peakIn: 3.0, peakCache: 0.10, peakOut: 9.0 })
+          if (a.tier === 'peak') { cur.peakIn = inV; cur.peakCache = cacheV; cur.peakOut = outV }
+          else { cur.in = inV; cur.cache = cacheV; cur.out = outV }
+          configRuntime.prices[a.priceKey] = cur
+        }
+      }
+      applyTokens(sessionId)
+      await computePrev(sessionId)
+      sendJson(res, 200, { ok: true, ...snapshot() })
+    } catch (error) {
+      sendJson(res, 500, { ok: false, code: 'HOST_ERROR', message: error instanceof Error ? error.message : String(error) })
+    }
+  }
+
+  ctx.effect(() => ctx.webServer.register({ kind: 'exact', path: STATE_ROUTE, handler: stateHandler }), 'dsh-balance: state route')
+  ctx.effect(() => ctx.webServer.register({ kind: 'exact', path: CONFIG_ROUTE, handler: configHandler }), 'dsh-balance: config route')
+
+  // Refresh after each conversation turn ends, and every 5 minutes.
+  ctx.on('agent/turn-stopping', (payload) => {
+    if (payload && payload.agent && payload.agent.id) sessionId = payload.agent.id
+    if (!configRuntime.afterTurn) return
+    void refresh()
+  })
+  ctx.interval(() => {
+    if (configRuntime.every5min) void refresh()
+  }, 5 * 60 * 1000)
+
+  void refresh()
+}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@yyfather/dsh-balance",
+  "version": "0.1.0",
+  "description": "DeepSeek Harness 余额与开销插件：状态栏显示 DeepSeek/MiMo 余额与花费（本会话/本次活跃/最近一次/上次对话），逐请求按模型+峰谷时段计价，支持花费超线提醒（点击设置）",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/YYfather/dsh-balance.git"
+  },
+  "homepage": "https://github.com/YYfather/dsh-balance#readme",
+  "bugs": {
+    "url": "https://github.com/YYfather/dsh-balance/issues"
+  },
+  "keywords": [
+    "deepseek",
+    "deepseek-harness",
+    "dsh-plugin",
+    "dsh-plugins",
+    "balance",
+    "cost",
+    "usage"
+  ],
+  "type": "module",
+  "main": "./index.js",
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "cordis.patch.yml",
+    "LICENSE",
+    "README.md",
+    "README_EN.md"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-slots",
+        "@deepseek-ai/dsh-client-ui-conversation"
+      ]
+    }
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "license": "MIT",
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-credentials": "^0.1.0-rc.6",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.0-rc.6",
+    "@deepseek-ai/schemastery": "^3.18.1",
+    "react": "^18.2.0"
+  }
+}