deepseek-harness-wallet 0.2.3 → 0.2.5

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 All notable changes to this project are documented in this file.
 
+## 0.2.5 - 2026-08-23
+
+- 修复浮动峰谷卡片在窗口缩放、卡片放大或历史坐标过期后可能跑出视口的问题；加载、缩放、排版切换和 resize 都会重新钳制位置。 / Fixed floating peak cards escaping the viewport after resize, scale changes, or stale saved coordinates; load, scale, layout changes, and resize now re-clamp the position.
+- 恢复 Portal 挂载，确保自由浮动卡片和控制面板脱离侧边栏溢出裁剪。 / Restored Portal mounting so floating cards and the control panel escape sidebar overflow clipping.
+- 完成主题回退清理，移除峰谷控制面板、浮动卡片和开关中的硬编码浅色背景/文字回退。 / Completed theme fallback cleanup for the peak panel, floating card, and switches.
+- 保留账户安全、存储权限、刷新异常和偏好同步加固，并避免原始凭证错误文本进入日志或浏览器。 / Kept account-safety, storage-permission, refresh-failure, and preference-sync hardening without exposing raw credential errors to logs or the browser.
+- 新增浮动坐标边界、Portal 和完整主题回退回归测试；当前测试基线为 78/78。 / Added regression coverage for floating-coordinate bounds, Portal mounting, and complete theme fallbacks; the test baseline is now 78/78.
+
+## 0.2.4 - 2026-08-22
+
+- 彻底修复暗色模式（Dark Mode）主题适配（Issue #26）：移除所有未主题化的浅色硬编码回退（`--dsw-alias-bg-elevated,#fff`、`--dsw-alias-bg-overlay,#fff` 等），全站统一使用 DSH 原生主题变量（`--dsw-alias-bg-layer-*` 与 `--dsw-alias-label-dimmed`），在深色模式下完美融入背景。 / Fully fixed Dark Mode theme compliance (Issue #26): replaced unthemed hardcoded light fallbacks with DSH native theme variables (`--dsw-alias-bg-layer-*`), rendering dark themes seamlessly without blinding white boxes.
+- 新增峰谷时钟专属控制面板（Dedicated Control Panel）：点击时钟卡片即可就地弹出专属浮动控制面板，支持实时查看峰谷优惠说明、账户余额明细与快速充值，并提供排版切换、缩放调节与归位管理。 / Added a dedicated peak clock control popover: clicking the clock card opens an interactive panel for live rate info, quick recharge, orientation toggles, and layout controls.
+- 峰谷时钟支持自由拖拽与持久化记忆：卡片支持在屏幕上任意拖拽移动，脱离侧边栏限制（Portal 渲染），拖拽释放自动持久化坐标，并在浮动卡片右上角和控制面板提供一键「↩ 归位」回到侧边栏底部。 / Added free-floating drag & drop for the peak clock: smoothly movable across the viewport with boundary clamping, position persistence in localStorage, and one-click dock reset.
+- 峰谷时钟横向与纵向排版自由切换：支持标准的横向卡片与 ~140px 纤细纵向胶囊卡片（侧边栏内居中、浮动时轻巧紧凑）。 / Added customizable layout: seamlessly toggle between horizontal card layout and slim ~140px vertical capsule layout.
+- 充值按钮内嵌排版优化：将充值按钮移至第三行倒计时右侧，彻底消除竖排按钮对第二行金额造成的水平挤压与 `¥...` 截断问题，金额与本场消耗 100% 完整显示。 / Relocated recharge button inline next to the countdown row, completely eliminating text truncation on the balance and session cost line.
+- 新增时钟缩放滑条（100% ~ 120%）与充值按钮独立开关：支持按需放大时钟或收缩整体卡片尺寸。 / Added a dedicated scale slider (100% ~ 120%) and recharge button visibility toggle in both the popup panel and settings page.
+
 ## 0.2.3 - 2026-08-21
 
 - 修复 Provider 分桶实际未参与计费的问题；已勾选的包装路由现在真正进入官方 token/花费桶，并记录新观察到的 Provider。 / Fixed provider aliases not reaching the billing path: opted-in wrapper routes now enter the official token/cost bucket, and newly observed providers are recorded.

package/index.js

@@ -78,7 +78,9 @@ export const PRICE_POLICIES = [
 export function ratesFor(model, atMs) {
   let entry
   for (const policy of PRICE_POLICIES) {
-    if (atMs >= policy.since && policy.models[model] !== undefined) entry = policy
+    // Own-property check: a model named `__proto__`/`toString` would otherwise
+    // resolve to an Object.prototype member and produce NaN costs.
+    if (atMs >= policy.since && Object.hasOwn(policy.models, model)) entry = policy
   }
   if (entry === undefined) return null
   const rates = entry.models[model]
@@ -258,9 +260,10 @@ function persistStore(logger) {
     saveTimer = null
   }
   try {
-    mkdirSync(dirname(STORE_PATH), { recursive: true })
+    mkdirSync(dirname(STORE_PATH), { recursive: true, mode: 0o700 })
     const tmp = STORE_PATH + '.tmp'
-    writeFileSync(tmp, JSON.stringify(store))
+    // Owner-only: the store carries usage accounting next to credential files.
+    writeFileSync(tmp, JSON.stringify(store), { mode: 0o600 })
     renameSync(tmp, STORE_PATH)
   } catch (error) {
     if (logger && typeof logger.warn === 'function') {
@@ -325,9 +328,10 @@ function persistAccounts(logger) {
     accountsSaveTimer = null
   }
   try {
-    mkdirSync(dirname(ACCOUNTS_PATH), { recursive: true })
+    mkdirSync(dirname(ACCOUNTS_PATH), { recursive: true, mode: 0o700 })
     const tmp = ACCOUNTS_PATH + '.tmp'
-    writeFileSync(tmp, JSON.stringify(accounts))
+    // This file holds plaintext API keys: owner-only, never group/world readable.
+    writeFileSync(tmp, JSON.stringify(accounts), { mode: 0o600 })
     renameSync(tmp, ACCOUNTS_PATH)
   } catch (error) {
     if (logger && typeof logger.warn === 'function') {
@@ -436,15 +440,20 @@ async function resolveBalanceKey(ctx) {
  */
 export async function activateAccount(ctx, id) {
   const account = findAccount(id)
-  if (account === null) return { ok: false, error: 'account not found' }
+  if (account === null) return { ok: false, error: 'account-not-found' }
   const credentials = ctx.get('credentials')
-  if (credentials === undefined) return { ok: false, error: 'credentials service unavailable' }
+  if (credentials === undefined) return { ok: false, error: 'credentials-unavailable' }
   try {
     await credentials.set(CREDENTIAL_REF, account.apiKey)
   } catch (error) {
     // e.g. the launching environment supplies DEEPSEEK_API_KEY read-only, so
-    // the write is shadowed and refused by the credentials provider.
-    return { ok: false, error: error instanceof Error ? error.message : String(error) }
+    // the write is shadowed and refused by the credentials provider. Keep the
+    // browser error bounded and do not log provider text that might contain
+    // paths, environment details, or key fragments.
+    if (ctx.logger && typeof ctx.logger.warn === 'function') {
+      ctx.logger.warn('dsh-wallet: credential write refused')
+    }
+    return { ok: false, error: 'credential-write-refused' }
   }
   accounts.activeId = account.id
   scheduleAccountsSave(ctx.logger)
@@ -509,12 +518,12 @@ let balance = { fetchedAt: 0, available: false, balances: [], error: null }
 let balanceRefresh = null
 
 async function performBalanceRefresh(ctx) {
-  const credentials = ctx.get('credentials')
-  if (credentials === undefined) {
-    balance = { fetchedAt: Date.now(), available: false, balances: [], error: 'no-credentials' }
-    return
-  }
   try {
+    const credentials = ctx.get('credentials')
+    if (credentials === undefined) {
+      balance = { fetchedAt: Date.now(), available: false, balances: [], error: 'no-credentials' }
+      return
+    }
     const key = await resolveBalanceKey(ctx)
     if (key === undefined || key === '') {
       balance = { fetchedAt: Date.now(), available: false, balances: [], error: 'no-api-key' }
@@ -564,9 +573,24 @@ async function performBalanceRefresh(ctx) {
 
 function refreshBalance(ctx) {
   if (balanceRefresh !== null) return balanceRefresh
-  balanceRefresh = performBalanceRefresh(ctx).finally(() => {
-    balanceRefresh = null
-  })
+  // Never let a refresh escape as an unhandled rejection: every caller uses
+  // `void refreshBalance(ctx)`, so a throw here would take the host process
+  // down (Node exits on unhandled rejections). Absorb it into the error state.
+  balanceRefresh = performBalanceRefresh(ctx)
+    .catch((error) => {
+      balance = {
+        fetchedAt: Date.now(),
+        available: false,
+        balances: [],
+        error: 'balance-unavailable',
+      }
+      if (ctx && ctx.logger && typeof ctx.logger.warn === 'function') {
+        ctx.logger.warn('dsh-wallet: balance refresh failed')
+      }
+    })
+    .finally(() => {
+      balanceRefresh = null
+    })
   return balanceRefresh
 }
 
@@ -609,8 +633,18 @@ function balanceTotal() {
 
 function sessionView(sessionId) {
   if (sessionId === undefined || sessionId === '') return { official: null, third: null }
+  // Own-property lookup only: session ids like `__proto__`, `constructor` or
+  // `toString` otherwise resolve to an Object.prototype member, slip past the
+  // undefined guard, and throw inside bucketTotals.
+  if (!Object.prototype.hasOwnProperty.call(store.sessions, sessionId)) {
+    return { official: null, third: null }
+  }
   const session = store.sessions[sessionId]
-  if (session === undefined) return { official: null, third: null }
+  if (session === null || typeof session !== 'object'
+    || session.official === null || typeof session.official !== 'object'
+    || session.third === null || typeof session.third !== 'object') {
+    return { official: null, third: null }
+  }
   const official = bucketTotals(session.official)
   const third = bucketTotals(session.third)
   return {