deepseek-harness-wallet 0.1.2 → 0.1.3

package/README.md

@@ -1,96 +1,104 @@
-# deepseek-harness-wallet
-
-### DeepSeek Harness Balance Monitor & Recharge Plugin · 余额监控和充值插件
-
-<p align="center">
-  <a href="./README.md">English</a> ·
-  <a href="./docs/i18n/README.zh-CN.md">简体中文</a>
-</p>
-
-<p align="center">
-  <img alt="Version 0.1.2" src="https://img.shields.io/badge/version-0.1.2-5965d8">
-  <img alt="DeepSeek Harness rc.6" src="https://img.shields.io/badge/dsh-0.1.0--rc.6-4aa3ff">
-  <img alt="MIT License" src="https://img.shields.io/badge/license-MIT-3b7a57">
-</p>
-
-**The multi-provider wallet chip for the DeepSeek Harness Web GUI.**
-
-A resident one-line chip beside the composer: official DeepSeek (balance, session cost, tokens, one-click recharge, low-balance alert) plus the third-party token total. Accounting is bucketed per provider — a GLM session never shows a DeepSeek balance, and DeepSeek costs are never computed from GLM tokens.
-
-<p align="center">
-  If deepseek-harness-wallet helps you, please consider leaving a ⭐ Star. Thank you!
-</p>
-
-## What it shows
-
-```
-余额 5.89 · 本场 0.72 · 官 18.8M | 三方 800K · ↗充
-```
-
-- **Official DeepSeek** — live balance (60s global refresh with fast boot retries), current-session cost (official pricing timeline, including the 2026-08-17 peak/off-peak rollout), and token breakdown.
-- **Third-party total** — current-session tokens (input / cache read / output). No balance guessing, no cost math, zero configuration.
-- **Click the chip** to open the detail panel: per-currency balance breakdown, cost and token splits, a freely editable low-balance threshold in CNY (two decimals, persisted globally; the chip compares the CNY balance, never a mixed-currency sum), manual refresh, and a jump to the official recharge page (first click shows the domain for confirmation — anti-phishing).
-- **Floating window mode** — from the detail panel, detach the wallet into a floating window you can drag anywhere (position remembered across reloads), or minimize it to a small dot; the dot turns red below the threshold.
-- **Low-balance alert** — below the threshold the chip turns red with a breathing animation and fires one desktop notification; it resets automatically once the balance recovers.
-- **Theme-native UI** — built entirely on `--dsw-alias-*` theme variables, so light and dark themes both render correctly; the panel closes when you click outside and flips open-direction near screen edges.
-- **Clear current session** — one button clears only the open conversation's token/cost records; every other conversation is untouched.
-
-### Screenshots
-
-| Floating window (draggable) | Minimized dot | Below threshold (alert on) | Above threshold (normal) |
-| --- | --- | --- | --- |
-| <img alt="Floating wallet window" src="docs/assets/floating-window.png" width="340"> | <img alt="Minimized floating dot" src="docs/assets/floating-dot.png" width="340"> | <img alt="Below threshold" src="docs/assets/below-threshold.png" width="340"> | <img alt="Above threshold" src="docs/assets/above-threshold.png" width="340"> |
-
-## Install
-
-```sh
-dsh plugin --profile web add github:feibi-mochi/deepseek-harness-wallet
-```
-
-Restart `dsh web`, then hard-refresh the page.
-
-### Update
-
-```sh
-dsh plugin --profile web update deepseek-harness-wallet
-```
-
-### Remove
-
-```sh
-dsh plugin --profile web remove deepseek-harness-wallet
-```
-
-> The package was renamed from `dsh-wallet` to `deepseek-harness-wallet` in 0.1.1. If you installed the old name, remove it with `dsh plugin --profile web remove dsh-wallet` first.
-
-## Data & trust
-
-| Item | Behavior |
-| --- | --- |
-| Token accounting | Listens to the `llm/stream` event and buckets per provider (`deepseek-official` vs. everything else) and per session; multiple sessions never mix accounts. |
-| Balance | The `DEEPSEEK_API_KEY` from the credentials seam never leaves this machine except as the `Authorization` header of the official `/user/balance` request. |
-| Session log | The plugin writes no events; its data lives in `$DSH_HOME/storages/wallet.json`. |
-| Model surface | No tools registered, no prompt injection, zero token cost. |
-| Recharge | The URL is hardcoded to the official `https://platform.deepseek.com/top_up` and is not user-configurable (anti-phishing). |
-
-## Pricing timeline
-
-CNY per 1M tokens, curated from official announcements (cache writes are not billed):
-
-- Since 2025-02-09 — deepseek-chat 2/8 (cache read 0.5), deepseek-reasoner 4/16 (cache read 1)
-- Since 2026-04-24 — v4-flash 1/2 (cache read 0.02), v4-pro 3/6 (cache read 0.025)
-- Since 2026-08-17 00:00 Beijing — peak/off-peak pricing for the v4 models (peak windows Beijing 09:00–12:00 / 14:00–18:00; off-peak is half the peak rate):
-  - v4-flash (off-peak / peak): cache read 0.05 / 0.10, input 1.5 / 3, output 4.5 / 9
-  - v4-pro (off-peak / peak): cache read 0.15 / 0.30, input 4.5 / 9, output 13.5 / 27
-
-deepseek-chat and deepseek-reasoner keep their flat rates. Costs are estimates; the API-returned balance is authoritative.
-
-## Roadmap
-
-- [ ] Third-party price tables (cost per token)
-- [ ] Balance history chart
-- [ ] Balance-API adapters for other providers (e.g. Zhipu)
-
-## License
-
-[MIT](LICENSE)
+# deepseek-harness-wallet
+
+### DeepSeek Harness Balance Monitor & Recharge Plugin · 余额监控和充值插件
+
+<p align="center">
+  <a href="./README.md">English</a> ·
+  <a href="./docs/i18n/README.zh-CN.md">简体中文</a>
+</p>
+
+<p align="center">
+  <img alt="Version 0.1.3" src="https://img.shields.io/badge/version-0.1.3-5965d8">
+  <img alt="DeepSeek Harness rc.6" src="https://img.shields.io/badge/dsh-0.1.0--rc.6-4aa3ff">
+  <img alt="MIT License" src="https://img.shields.io/badge/license-MIT-3b7a57">
+</p>
+
+**The multi-provider wallet chip for the DeepSeek Harness Web GUI.**
+
+A resident one-line chip beside the composer: official DeepSeek (balance, session cost, tokens, one-click recharge, low-balance alert) plus the third-party token total. Accounting is bucketed per provider — a GLM session never shows a DeepSeek balance, and DeepSeek costs are never computed from GLM tokens.
+
+<p align="center">
+  If deepseek-harness-wallet helps you, please consider leaving a ⭐ Star. Thank you!
+</p>
+
+## What it shows
+
+```
+余额 ¥5.89 · 本场 ¥0.72 · 官 18.8M | 三方 800K · ↗充
+```
+
+- **Official DeepSeek** — live balance (60s global refresh with fast boot retries), current-session cost locked to the price active for each usage event (including the 2026-08-17 peak/off-peak rollout), and token breakdown.
+- **Third-party total** — current-session tokens (input / cache read / output). No balance guessing, no cost math, zero configuration.
+- **Click the chip** to open the detail panel: correctly formatted per-currency balances, cost and token splits, a freely editable low-balance threshold in CNY (two decimals, persisted globally; alerts only compare a CNY balance and never mix currencies), manual refresh, and a jump to the official recharge page (first click shows the domain for confirmation — anti-phishing).
+- **Floating window mode** — from the detail panel, detach the wallet into a floating window you can drag anywhere (position remembered across reloads), or minimize it to a small dot; the dot turns red below the threshold.
+- **Low-balance alert** — below the threshold the chip turns red with a breathing animation and fires one desktop notification; it resets automatically once the balance recovers.
+- **Theme-native UI** — built entirely on `--dsw-alias-*` theme variables, so light and dark themes both render correctly; the panel closes when you click outside and flips open-direction near screen edges.
+- **Clear current session** — one button clears only the open conversation's token/cost records; every other conversation is untouched.
+
+### Screenshots
+
+| Floating window (draggable) | Minimized dot | Below threshold (alert on) | Above threshold (normal) |
+| --- | --- | --- | --- |
+| <img alt="Floating wallet window" src="docs/assets/floating-window.png" width="340"> | <img alt="Minimized floating dot" src="docs/assets/floating-dot.png" width="340"> | <img alt="Below threshold" src="docs/assets/below-threshold.png" width="340"> | <img alt="Above threshold" src="docs/assets/above-threshold.png" width="340"> |
+
+## Install
+
+From npm:
+
+```sh
+dsh plugin --profile web add deepseek-harness-wallet
+```
+
+or from GitHub directly:
+
+```sh
+dsh plugin --profile web add github:feibi-mochi/deepseek-harness-wallet
+```
+
+Restart `dsh web`, then hard-refresh the page.
+
+### Update
+
+```sh
+dsh plugin --profile web update deepseek-harness-wallet
+```
+
+### Remove
+
+```sh
+dsh plugin --profile web remove deepseek-harness-wallet
+```
+
+> The package was renamed from `dsh-wallet` to `deepseek-harness-wallet` in 0.1.1. If you installed the old name, remove it with `dsh plugin --profile web remove dsh-wallet` first.
+
+## Data & trust
+
+| Item | Behavior |
+| --- | --- |
+| Token accounting | Listens to the `llm/stream` event and buckets per provider (`deepseek-official` vs. everything else) and per session; each usage event also locks its contemporaneous official price, so multiple sessions and pricing windows never mix. |
+| Balance | The `DEEPSEEK_API_KEY` from the credentials seam never leaves this machine except as the `Authorization` header of the official `/user/balance` request. |
+| Session log | The plugin writes no events; its data lives in `$DSH_HOME/storages/wallet.json`. |
+| Model surface | No tools registered, no prompt injection, zero token cost. |
+| Recharge | The URL is hardcoded to the official `https://platform.deepseek.com/top_up` and is not user-configurable (anti-phishing). |
+
+## Pricing timeline
+
+CNY per 1M tokens, curated from official announcements (cache writes are not billed):
+
+- Since 2025-02-09 — deepseek-chat 2/8 (cache read 0.5), deepseek-reasoner 4/16 (cache read 1)
+- Since 2026-04-24 — v4-flash 1/2 (cache read 0.02), v4-pro 3/6 (cache read 0.025)
+- Since 2026-08-17 00:00 Beijing — peak/off-peak pricing for the v4 models (peak windows Beijing 09:00–12:00 / 14:00–18:00; off-peak is half the peak rate):
+  - v4-flash (off-peak / peak): cache read 0.05 / 0.10, input 1.5 / 3, output 4.5 / 9
+  - v4-pro (off-peak / peak): cache read 0.15 / 0.30, input 4.5 / 9, output 13.5 / 27
+
+deepseek-chat and deepseek-reasoner keep their flat rates. Each usage event is priced when it arrives; upgrading from 0.1.2 migrates legacy counters once using the then-current rate. Costs are estimates; the API-returned balance is authoritative.
+
+## Roadmap
+
+- [ ] Third-party price tables (cost per token)
+- [ ] Balance history chart
+- [ ] Balance-API adapters for other providers (e.g. Zhipu)
+
+## License
+
+[MIT](LICENSE)

package/index.js

@@ -19,8 +19,9 @@ export const inject = ['webServer']
 const OFFICIAL_PROVIDER = 'deepseek-official'
 const RECHARGE_URL = 'https://platform.deepseek.com/top_up'
 const STORE_PATH = join(process.env.DSH_HOME ?? join(homedir(), '.dsh'), 'storages', 'wallet.json')
-const DEFAULT_THRESHOLD = 5
-const BALANCE_REFRESH_MS = 60_000
+const DEFAULT_THRESHOLD = 5
+const BALANCE_REFRESH_MS = 60_000
+const STORE_VERSION = 2
 
 // Beijing (UTC+8, no DST) peak windows: 09:00-12:00 and 14:00-18:00.
 const BEIJING_OFFSET_MS = 8 * 3600_000
@@ -72,22 +73,24 @@ export function ratesFor(model, atMs) {
   return rates
 }
 
-export function costOf(model, usage, atMs) {
-  const rates = ratesFor(model, atMs)
-  if (rates === null) return null
-  const input = (usage.inputTokens ?? usage.input ?? 0) * rates.input
-  const cacheRead = (usage.cacheReadTokens ?? usage.cacheRead ?? 0) * rates.cacheHit
-  const output = (usage.outputTokens ?? usage.output ?? 0) * rates.output
+export function costOf(model, usage, atMs) {
+  const rates = ratesFor(model, atMs)
+  if (rates === null) return null
+  usage = usage !== null && typeof usage === 'object' ? usage : {}
+  const input = finiteCounter(usage.inputTokens ?? usage.input) * rates.input
+  const cacheRead = finiteCounter(usage.cacheReadTokens ?? usage.cacheRead) * rates.cacheHit
+  const output = finiteCounter(usage.outputTokens ?? usage.output) * rates.output
   return (input + cacheRead + output) / 1e6
 }
 
-function emptyCounters() {
-  return { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, reasoning: 0 }
-}
-
-function emptyBucket() {
-  return { models: {} }
-}
+function emptyCounters() {
+  return { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, reasoning: 0 }
+}
+
+function emptyBucket(priced) {
+  if (priced === true) return { models: {}, cost: 0, priced: true }
+  return { models: {} }
+}
 
 export function normalizeThreshold(value) {
   const parsed = Number.parseFloat(value)
@@ -95,47 +98,109 @@ export function normalizeThreshold(value) {
   return Math.min(100000, Math.max(0, Math.round(parsed * 100) / 100))
 }
 
-function loadStore() {
-  try {
-    const parsed = JSON.parse(readFileSync(STORE_PATH, 'utf8'))
-    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
-      return { threshold: DEFAULT_THRESHOLD, sessions: {} }
-    }
-    const sessions = parsed.sessions !== null && typeof parsed.sessions === 'object' && !Array.isArray(parsed.sessions)
-      ? parsed.sessions
-      : {}
-    return { threshold: normalizeThreshold(parsed.threshold), sessions }
-  } catch {
-    return { threshold: DEFAULT_THRESHOLD, sessions: {} }
-  }
-}
-
-let saveTimer = null
-let store = loadStore()
-
-function scheduleSave(logger) {
-  if (saveTimer !== null) return
-  saveTimer = setTimeout(() => {
-    saveTimer = null
-    try {
-      mkdirSync(dirname(STORE_PATH), { recursive: true })
-      const tmp = STORE_PATH + '.tmp'
-      writeFileSync(tmp, JSON.stringify(store))
-      renameSync(tmp, STORE_PATH)
-    } catch (error) {
-      if (logger && typeof logger.warn === 'function') {
-        logger.warn('dsh-wallet: failed to persist store: ' + String(error))
-      }
-    }
-  }, 500)
-}
+function finiteCounter(value) {
+  return typeof value === 'number' && Number.isFinite(value) && value >= 0 ? value : 0
+}
+
+function normalizeCounters(value) {
+  const source = value !== null && typeof value === 'object' && !Array.isArray(value) ? value : {}
+  return {
+    input: finiteCounter(source.input),
+    output: finiteCounter(source.output),
+    cacheRead: finiteCounter(source.cacheRead),
+    cacheWrite: finiteCounter(source.cacheWrite),
+    reasoning: finiteCounter(source.reasoning),
+  }
+}
+
+function normalizeModels(value) {
+  const source = value !== null && typeof value === 'object' && !Array.isArray(value) ? value : {}
+  const models = {}
+  for (const [model, counters] of Object.entries(source)) {
+    if (model === '__proto__' || model === 'prototype' || model === 'constructor') continue
+    models[model] = normalizeCounters(counters)
+  }
+  return models
+}
+
+function migratedOfficialBucket(value, atMs) {
+  const source = value !== null && typeof value === 'object' && !Array.isArray(value) ? value : {}
+  const models = normalizeModels(source.models)
+  if (typeof source.cost === 'number' && Number.isFinite(source.cost) && source.cost >= 0 && typeof source.priced === 'boolean') {
+    return { models, cost: source.cost, priced: source.priced }
+  }
+  let cost = 0
+  let priced = true
+  for (const [model, counters] of Object.entries(models)) {
+    const valueAtMigration = costOf(model, counters, atMs)
+    if (valueAtMigration === null) priced = false
+    else cost += valueAtMigration
+  }
+  return { models, cost, priced }
+}
+
+export function normalizeStoreData(value, atMs = Date.now()) {
+  const source = value !== null && typeof value === 'object' && !Array.isArray(value) ? value : {}
+  const rawSessions = source.sessions !== null && typeof source.sessions === 'object' && !Array.isArray(source.sessions)
+    ? source.sessions
+    : {}
+  const sessions = {}
+  for (const [sessionId, value] of Object.entries(rawSessions)) {
+    if (sessionId === '__proto__' || sessionId === 'prototype' || sessionId === 'constructor') continue
+    const rawSession = value !== null && typeof value === 'object' && !Array.isArray(value) ? value : {}
+    sessions[sessionId] = {
+      official: migratedOfficialBucket(rawSession.official, atMs),
+      third: { models: normalizeModels(rawSession.third && rawSession.third.models) },
+    }
+  }
+  const normalized = { version: STORE_VERSION, threshold: normalizeThreshold(source.threshold), sessions }
+  return { store: normalized, migrated: JSON.stringify(source) !== JSON.stringify(normalized) }
+}
+
+function loadStore() {
+  try {
+    return normalizeStoreData(JSON.parse(readFileSync(STORE_PATH, 'utf8')))
+  } catch {
+    return {
+      store: { version: STORE_VERSION, threshold: DEFAULT_THRESHOLD, sessions: {} },
+      migrated: false,
+    }
+  }
+}
+
+let saveTimer = null
+const loadedStore = loadStore()
+let store = loadedStore.store
+let storeNeedsSave = loadedStore.migrated
+
+function persistStore(logger) {
+  if (saveTimer !== null) {
+    clearTimeout(saveTimer)
+    saveTimer = null
+  }
+  try {
+    mkdirSync(dirname(STORE_PATH), { recursive: true })
+    const tmp = STORE_PATH + '.tmp'
+    writeFileSync(tmp, JSON.stringify(store))
+    renameSync(tmp, STORE_PATH)
+  } catch (error) {
+    if (logger && typeof logger.warn === 'function') {
+      logger.warn('dsh-wallet: failed to persist store: ' + String(error))
+    }
+  }
+}
+
+function scheduleSave(logger) {
+  if (saveTimer !== null) return
+  saveTimer = setTimeout(() => persistStore(logger), 500)
+}
 
-function addUsage(counters, usage) {
-  counters.input += usage.inputTokens ?? 0
-  counters.output += usage.outputTokens ?? 0
-  counters.cacheRead += usage.cacheReadTokens ?? 0
-  counters.cacheWrite += usage.cacheWriteTokens ?? 0
-  counters.reasoning += usage.reasoningTokens ?? 0
+function addUsage(counters, usage) {
+  counters.input += finiteCounter(usage.inputTokens)
+  counters.output += finiteCounter(usage.outputTokens)
+  counters.cacheRead += finiteCounter(usage.cacheReadTokens)
+  counters.cacheWrite += finiteCounter(usage.cacheWriteTokens)
+  counters.reasoning += finiteCounter(usage.reasoningTokens)
 }
 
 function bucketTotals(bucket) {
@@ -150,25 +215,37 @@ function bucketTotals(bucket) {
   return totals
 }
 
-function recordUsage(options, usage) {
+export function addOfficialUsage(bucket, model, usage, atMs) {
+  if (!Object.hasOwn(bucket.models, model)) bucket.models[model] = emptyCounters()
+  addUsage(bucket.models[model], usage)
+  const cost = costOf(model, usage, atMs)
+  if (cost === null) bucket.priced = false
+  else bucket.cost += cost
+}
+
+function recordUsage(options, usage, atMs = Date.now()) {
   const sessionId = options.sessionId
-  const provider = options.provider
-  const model = options.model ?? options.modelName ?? ''
-  if (sessionId === undefined || provider === undefined || provider === '') return
-  if (store.sessions[sessionId] === undefined) {
-    store.sessions[sessionId] = { official: emptyBucket(), third: emptyBucket() }
-  }
-  const session = store.sessions[sessionId]
-  const bucket = provider === OFFICIAL_PROVIDER ? session.official : session.third
-  if (bucket.models[model] === undefined) {
-    bucket.models[model] = emptyCounters()
-  }
-  addUsage(bucket.models[model], usage)
-}
-
-let balance = { fetchedAt: 0, available: false, balances: [], error: null }
+  const provider = options.provider
+  const model = options.model ?? options.modelName ?? ''
+  if (typeof sessionId !== 'string' || sessionId === '' || typeof provider !== 'string' || provider === '') return
+  if (typeof model !== 'string' || model === '__proto__' || model === 'prototype' || model === 'constructor') return
+  if (sessionId === '__proto__' || sessionId === 'prototype' || sessionId === 'constructor') return
+  if (!Object.hasOwn(store.sessions, sessionId)) {
+    store.sessions[sessionId] = { official: emptyBucket(true), third: emptyBucket(false) }
+  }
+  const session = store.sessions[sessionId]
+  const bucket = provider === OFFICIAL_PROVIDER ? session.official : session.third
+  if (provider === OFFICIAL_PROVIDER) addOfficialUsage(bucket, model, usage, atMs)
+  else {
+    if (!Object.hasOwn(bucket.models, model)) bucket.models[model] = emptyCounters()
+    addUsage(bucket.models[model], usage)
+  }
+}
 
-async function refreshBalance(ctx) {
+let balance = { fetchedAt: 0, available: false, balances: [], error: null }
+let balanceRefresh = null
+
+async function performBalanceRefresh(ctx) {
   const credentials = ctx.get('credentials')
   if (credentials === undefined) {
     balance = { fetchedAt: Date.now(), available: false, balances: [], error: 'no credentials service' }
@@ -207,10 +284,18 @@ async function refreshBalance(ctx) {
       balances: [],
       error: error instanceof Error ? error.message : String(error),
     }
-  }
-}
+  }
+}
+
+function refreshBalance(ctx) {
+  if (balanceRefresh !== null) return balanceRefresh
+  balanceRefresh = performBalanceRefresh(ctx).finally(() => {
+    balanceRefresh = null
+  })
+  return balanceRefresh
+}
 
-export function sumBalances(infos) {
+export function sumBalances(infos) {
   if (!Array.isArray(infos) || infos.length === 0) return 0
   // The chip and the threshold are denominated in CNY: prefer the CNY record
   // instead of mixing it with e.g. a USD record for international accounts.
@@ -232,8 +317,16 @@ export function sumBalances(infos) {
     const value = Number.parseFloat(info.total_balance)
     if (Number.isFinite(value)) total += value
   }
-  return total
-}
+  return total
+}
+
+export function balanceCurrency(infos) {
+  if (!Array.isArray(infos)) return null
+  const cny = infos.find((info) => info.currency === 'CNY' && Number.isFinite(Number.parseFloat(info.total_balance)))
+  if (cny !== undefined) return 'CNY'
+  const firstFinite = infos.find((info) => Number.isFinite(Number.parseFloat(info.total_balance)))
+  return firstFinite && typeof firstFinite.currency === 'string' ? firstFinite.currency.toUpperCase() : null
+}
 
 function balanceTotal() {
   return sumBalances(balance.balances)
@@ -243,55 +336,61 @@ function sessionView(sessionId) {
   if (sessionId === undefined || sessionId === '') return { official: null, third: null }
   const session = store.sessions[sessionId]
   if (session === undefined) return { official: null, third: null }
-  const official = bucketTotals(session.official)
-  const third = bucketTotals(session.third)
-  const now = Date.now()
-  let cost = 0
-  let priced = true
-  for (const model of Object.keys(session.official.models)) {
-    const value = costOf(model, session.official.models[model], now)
-    if (value === null) priced = false
-    else cost += value
-  }
-  return {
-    official: { tokens: official, cost: priced ? cost : null, models: session.official.models },
+  const official = bucketTotals(session.official)
+  const third = bucketTotals(session.third)
+  return {
+    official: {
+      tokens: official,
+      cost: session.official.priced === true ? session.official.cost : null,
+      models: session.official.models,
+    },
     third: { tokens: third, models: session.third.models },
   }
 }
 
-function snapshotView(sessionId, threshold) {
-  return {
+function snapshotView(sessionId, threshold) {
+  const currency = balanceCurrency(balance.balances)
+  return {
     ok: true,
     balance: {
       available: balance.available,
       fetchedAt: balance.fetchedAt,
-      balances: balance.balances,
-      total: balance.available ? balanceTotal() : null,
-      error: balance.available ? null : balance.error,
+      balances: balance.balances,
+      total: balance.available ? balanceTotal() : null,
+      currency,
+      error: balance.available ? null : balance.error,
     },
     session: sessionView(sessionId),
     threshold,
-    lowBalance: balance.available && threshold > 0 && balanceTotal() < threshold,
+    // The configured threshold is CNY-denominated; do not compare unlike
+    // currencies for international accounts that do not expose a CNY row.
+    lowBalance: balance.available && currency === 'CNY' && threshold > 0 && balanceTotal() < threshold,
     rechargeUrl: RECHARGE_URL,
   }
 }
 
-function json(res, status, body) {
-  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8' })
+function json(res, status, body) {
+  res.writeHead(status, {
+    'content-type': 'application/json; charset=utf-8',
+    'cache-control': 'no-store',
+  })
   res.end(JSON.stringify(body))
 }
 
 function readBody(req, cap) {
   cap = cap || 4096
-  return new Promise((resolve) => {
-    let size = 0
-    const parts = []
-    req.on('data', (chunk) => {
-      size += chunk.length
-      if (size <= cap) parts.push(chunk)
-    })
-    req.on('end', () => {
-      try {
+  return new Promise((resolve) => {
+    let size = 0
+    let tooLarge = false
+    const parts = []
+    req.on('data', (chunk) => {
+      size += chunk.length
+      if (size <= cap) parts.push(chunk)
+      else tooLarge = true
+    })
+    req.on('end', () => {
+      if (tooLarge) return resolve(null)
+      try {
         resolve(JSON.parse(Buffer.concat(parts).toString('utf8') || '{}'))
       } catch {
         resolve(null)
@@ -309,8 +408,12 @@ function sessionParam(req) {
   return value === null || value === '' ? undefined : value
 }
 
-export function apply(ctx, config) {
-  config = config || {}
+export function apply(ctx, config) {
+  config = config || {}
+  if (storeNeedsSave) {
+    storeNeedsSave = false
+    scheduleSave(ctx.logger)
+  }
   // Threshold lives ONLY in the persisted store; an explicit row config may
   // still override it for power users, but the bundle patch sets none.
   let threshold = store.threshold
@@ -321,19 +424,21 @@ export function apply(ctx, config) {
   }
 
   const usageTap = (options, next) => {
-    const downstream = next()
-    return (async function* () {
-      let usage = null
-      try {
+    const downstream = next()
+    return (async function* () {
+      let usage = null
+      let usageAt = 0
+      try {
         for await (const chunk of downstream) {
-          if (chunk !== null && chunk !== undefined && chunk.type === 'usage' && chunk.usage !== undefined) {
-            usage = chunk.usage
+          if (chunk !== null && chunk !== undefined && chunk.type === 'usage' && chunk.usage !== undefined) {
+            usage = chunk.usage
+            usageAt = Date.now()
           }
           yield chunk
         }
       } finally {
-        if (usage !== null) {
-          recordUsage(options, usage)
+        if (usage !== null) {
+          recordUsage(options, usage, usageAt)
           scheduleSave(ctx.logger)
         }
       }
@@ -409,11 +514,10 @@ export function apply(ctx, config) {
     return () => {
       disposeSnapshot()
       disposeThreshold()
-      disposeRefresh()
-      disposeClear()
-      clearInterval(balanceTimer)
-      clearTimeout(saveTimer)
-      saveTimer = null
-    }
+      disposeRefresh()
+      disposeClear()
+      clearInterval(balanceTimer)
+      if (saveTimer !== null) persistStore(ctx.logger)
+    }
   }, 'dsh-wallet: routes')
 }