deepseek-harness-wallet 0.3.0 → 0.3.1

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to this project are documented in this file.
 
+## 0.3.1 - 2026-08-23
+
+- 修复 Windows DPAPI 账户密钥在重启后无法解密的问题，并在加密文件损坏或密钥不可用时锁定写入，避免覆盖原数据。 / Fixed Windows DPAPI account keys failing to decrypt after restart and locked writes when encrypted data cannot be recovered, preventing accidental overwrite.
+- 修复 Electron/Tauri 同步通知句柄的点击/关闭回调断链，并让所有充值入口统一经过桌面端外链适配与首次域名确认。 / Fixed callback wiring for synchronous Electron/Tauri notification handles and routed every recharge entry through the desktop external-link adapter and first-use domain confirmation.
+- 修复官方价格页改用“周一至周五”表述后同步被误判为结构变化的问题，并把视觉模型的计费生效时间校正为 2026-08-21 上线日。 / Accepted the official pricing page's current weekday-only wording and corrected vision-model billing to its 2026-08-21 launch date.
+- 将周五 18:00 至周一 09:00 作为连续低谷周期：周五提示“周末全天低谷”，周六/周日分别显示当天全天低谷，周一 09:00 前显示剩余多久进入高峰；跨午夜不重复提醒。 / Treated Friday 18:00 through Monday 09:00 as one continuous off-peak period: Friday previews the all-weekend rule, Saturday/Sunday name the current day, Monday shows time remaining to peak, and midnight boundaries do not repeat alerts.
+- 旧客户端在周末收到空峰值窗口，避免未强刷的 Edge 标签页继续误报高峰；账户文件现在自动保留加密 `.bak`，主文件缺失时可自动恢复。当前 91/91 通过。 / Weekend snapshots give stale clients no peak windows so an old Edge tab cannot keep falsely reporting peak; encrypted account files now keep a `.bak` fallback that restores a missing primary file. 91/91 tests pass.
+
 ## 0.3.0 - 2026-08-23
 
 - 新增 `deepseek-v4-flash-vision-exp` 视觉模型计费，沿用 V4 Flash 的峰谷价格；图片 token 由 Harness 上报后与文本 token 一起计入。 / Added billing for `deepseek-v4-flash-vision-exp` using V4 Flash peak/off-peak rates; image tokens reported by Harness are counted with text tokens.

package/README.md

@@ -3,7 +3,7 @@
 [![npm version](https://img.shields.io/npm/v/deepseek-harness-wallet?label=npm&color=5965d8)](https://www.npmjs.com/package/deepseek-harness-wallet)
 [![GitHub release](https://img.shields.io/github/v/release/feibi-mochi/deepseek-harness-control-center?label=release&color=5965d8)](https://github.com/feibi-mochi/deepseek-harness-control-center/releases)
 [![CI](https://github.com/feibi-mochi/deepseek-harness-control-center/actions/workflows/validate.yml/badge.svg)](https://github.com/feibi-mochi/deepseek-harness-control-center/actions/workflows/validate.yml)
-[![DeepSeek Harness](https://img.shields.io/badge/DeepSeek%20Harness-0.1.0--rc.8-4aa3ff)](https://github.com/deepseek-ai/DeepSeek-Harness)
+[![DeepSeek Harness](https://img.shields.io/badge/DeepSeek%20Harness-0.1.1--rc.2-4aa3ff)](https://github.com/deepseek-ai/DeepSeek-Harness)
 [![License: MIT](https://img.shields.io/badge/license-MIT-3b7a57)](./LICENSE)
 
 **DeepSeek Harness monitoring, alerts, recharge, and session control center.**
@@ -14,6 +14,8 @@
 
 > A local-first companion that keeps account status, per-conversation usage, completion reminders, official recharge, flexible layout, and host-gated session controls beside the DSH composer.
 
+> **Versions:** GitHub `main` is v0.3.1 source; npm and the latest Release remain v0.3.0. Use the GitHub install only for the current source build.
+
 > If DeepSeek Harness Control Center helps you, please consider leaving a ⭐ Star. Thank you!
 
 ## What it does
@@ -24,8 +26,8 @@
 
 - **Official DeepSeek** — live balance (60s global refresh with fast boot retries), an estimated current-session cost (not an official bill) locked to the price active for each usage event, including the 2026-08-17 peak/off-peak rollout, and token breakdown.
 - **Vision model accounting** — `deepseek-v4-flash-vision-exp` is priced like V4 Flash; image tokens reported by the Harness are included with text tokens.
-- **v4 peak/off-peak ring clock** — a resident 24-hour sidebar footer widget for `v4-flash` and `v4-pro`, indicating real-time pricing windows (peak vs. 50% discount off-peak), countdown to the next switch, and optional desktop switch notifications. Weekdays use 09:00–12:00 and 14:00–18:00 Beijing time; Saturday and Sunday are all-day off-peak from 2026-08-23. Other models keep their flat rates.
-- **Official pricing sync** — periodically checks the official DeepSeek pricing page, applies only a fully validated table, and visibly keeps the built-in rules when the page is unavailable or changes format.
+- **v4 peak/off-peak ring clock** — a resident 24-hour sidebar footer widget for `v4-flash`, `v4-pro`, and `v4-flash-vision-exp`. Weekday peak windows are 09:00–12:00 and 14:00–18:00 Beijing time. After Friday 18:00 the card previews “weekend all-day off-peak”; Saturday and Sunday name the current all-day off-peak rule; Monday before 09:00 shows the time remaining to enter peak. Optional notifications treat Friday 18:00 through Monday 09:00 as one continuous off-peak period.
+- **Official pricing sync** — periodically checks the official DeepSeek pricing page and applies only a fully validated table. Network failures retain the last validated rule (or the built-in rule before the first successful sync); an unrecognized page structure is marked for review instead of silently changing billing.
 - **Third-party total** — current-session tokens (input / cache read / output). No balance guessing, no cost math, zero configuration.
 - **Provider classification** — observed wrapper routes appear in the settings page; opted-in routes join the official token/cost bucket and are priced with the official table.
 - **Click the chip** to open the detail panel: correctly formatted per-currency balances, cost and token splits, a freely editable low-balance threshold for the active account and currency (two decimals, persisted per account; alerts never mix currencies), manual refresh, and a jump to the official recharge page (first click shows the domain for confirmation — anti-phishing).
@@ -34,7 +36,7 @@
 - **Completion reminders** — optionally notify when a conversation finishes, with persistent or timed modes, queueing and deduplication for simultaneous completions, cross-tab coordination, and an in-page fallback when system notifications are unavailable.
 - **Optional permanent deletion** — when the DSH host advertises a real deletion capability, an opt-in setting enables a confirmed permanent-delete action in the session menu; unsupported hosts keep the control disabled.
 - **Low-balance alert** — below the threshold the chip turns red with a breathing animation and fires one desktop notification; it resets automatically once the balance recovers.
-- **Theme-native UI** — built entirely on `--dsw-alias-*` theme variables, so light and dark themes both render correctly; the panel closes when you click outside and flips open-direction near screen edges.
+- **Theme-native UI** — uses DSH `--dsw-alias-*` variables with safe fallback colors, so light and dark themes both render correctly; the panel closes when you click outside and flips open-direction near screen edges.
 - **Clear current-session wallet data** — one button clears only the open conversation's token/cost records; it does not delete the conversation, and every other conversation is untouched.
 
 ## Multi-account
@@ -67,13 +69,13 @@ Details: [compatibility](#browser-desktop-and-os-compatibility) · [data and tru
 
 ## Install
 
-From npm:
+From npm (stable v0.3.0):
 
 ```sh
 dsh plugin --profile web add deepseek-harness-wallet
 ```
 
-or from GitHub directly:
+or from GitHub `main` (current v0.3.1 source):
 
 ```sh
 dsh plugin --profile web add github:feibi-mochi/deepseek-harness-control-center
@@ -84,7 +86,7 @@ Restart `dsh web`, then hard-refresh the page.
 ## Quick use
 
 1. Click the wallet or peak/off-peak card to open its control panel; open the Harness settings card for health and compatibility checks.
-2. Choose horizontal or vertical layout, then use the scale control between 100% and 120%.
+2. The peak card supports horizontal/vertical layout and 100%–120% scaling. The wallet chip uses a separate scale: 100%–105% in the composer and up to 125% when docked or floating.
 3. Turn the official recharge button off when you need a smaller card; official and third-party rows can also be shown independently.
 4. Drag the card to any open area. If it is hard to find after a layout change, use **Reset/Dock（归位/停靠）** in the panel to return it to the sidebar.
 5. The card follows the host light/dark theme. A hard refresh after upgrading makes sure the new client bundle is loaded.
@@ -141,7 +143,7 @@ For buildable DSH hosts, the npm package and repository include a versioned [Age
 | --- | --- |
 | Token accounting | Listens to the `llm/stream` event and buckets per session and provider: `deepseek-official` plus explicitly opted-in wrapper routes use the official bucket; other providers stay third-party; each usage event also locks its contemporaneous official price, so multiple sessions and pricing windows never mix. |
 | Balance | The wallet plugin itself sends the active key directly only to the official `/user/balance` endpoint. When multi-account switching is enabled, the selected key is also written into the DSH credentials seam; DSH may then use it for subsequent model requests. |
-| Accounts | Keys live encrypted in `$DSH_HOME/storages/accounts.json`: Windows uses current-user DPAPI, while other platforms use an owner-only AES-GCM key file. The UI only shows masked keys, and switching writes the chosen key into the credentials seam for subsequent LLM billing. Protect the DSH data directory as you would any local credential store. |
+| Accounts | Keys live encrypted in `$DSH_HOME/storages/accounts.json`, with an encrypted `accounts.json.bak` fallback that restores a missing primary file. Windows uses current-user DPAPI, so copies normally remain tied to the same Windows user. Other platforms use an owner-only AES-GCM key file; move or back up `accounts.json`, `.bak`, and `.key` together. The UI only shows masked keys, and switching writes the chosen key into the credentials seam for subsequent LLM billing. |
 | Session log | The plugin writes no events; its data lives in `$DSH_HOME/storages/wallet.json`. |
 | Local settings | Layout, scale, visibility, reminder, and panel settings stay in browser-compatible local storage. |
 | Permanent deletion | Opt-in and host-gated. The wallet never advertises the action unless the host implements the matching session deletion path. |
@@ -153,20 +155,20 @@ For buildable DSH hosts, the npm package and repository include a versioned [Age
 CNY per 1M tokens, curated from official announcements (cache writes are not billed):
 
 - Since 2025-02-09 — deepseek-chat 2/8 (cache read 0.5), deepseek-reasoner 4/16 (cache read 1)
-- Since 2026-04-24 — v4-flash 1/2 (cache read 0.02), v4-pro 3/6 (cache read 0.025), v4-flash-vision-exp 1/2 (cache read 0.02)
+- Since 2026-04-24 — v4-flash 1/2 (cache read 0.02), v4-pro 3/6 (cache read 0.025)
 - Since 2026-08-17 00:00 Beijing — peak/off-peak pricing for the v4 models (peak windows Beijing 09:00–12:00 / 14:00–18:00; off-peak is half the peak rate):
   - v4-flash (off-peak / peak): cache read 0.05 / 0.10, input 1.5 / 3, output 4.5 / 9
   - v4-pro (off-peak / peak): cache read 0.15 / 0.30, input 4.5 / 9, output 13.5 / 27
-  - v4-flash-vision-exp (off-peak / peak): cache read 0.05 / 0.10, input 1.5 / 3, output 4.5 / 9
+- Since 2026-08-21 — v4-flash-vision-exp launched with the V4 Flash peak/off-peak table: cache read 0.05 / 0.10, input 1.5 / 3, output 4.5 / 9.
 - Since 2026-08-23 00:00 Beijing — Saturday and Sunday are no longer split into peak/off-peak windows; weekend calls use the off-peak rates all day. Weekday peak windows remain 09:00–12:00 and 14:00–18:00.
 
-deepseek-chat and deepseek-reasoner keep their flat rates. Each usage event is priced when it arrives; upgrading from 0.1.2 migrates legacy counters once using the then-current rate. Costs are estimates; the API-returned balance is authoritative.
+Historical deepseek-chat and deepseek-reasoner records retain their original flat-rate table; this is not a claim that those legacy model names remain currently available. Each usage event is priced when it arrives; upgrading from 0.1.2 migrates legacy counters once using the then-current rate. Costs are estimates; the API-returned balance is authoritative.
 
 ## Roadmap
 
-- [ ] Third-party price tables (cost per token)
-- [ ] Balance history chart
-- [ ] Balance-API adapters for other providers (e.g. Zhipu)
+- [ ] 365-day Token heatmap and rebuildable local usage ledger
+- [ ] Z.ai Coding Plan monitoring, built on a generic provider-adapter contract
+- [ ] Additional provider price/balance adapters only after real-account validation
 
 ## License
 

package/index.js

@@ -18,7 +18,7 @@
  */
 import { createCipheriv, createDecipheriv, createHash, randomBytes, randomUUID } from 'node:crypto'
 import { spawnSync } from 'node:child_process'
-import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs'
+import { chmodSync, copyFileSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs'
 import { homedir } from 'node:os'
 import { dirname, join } from 'node:path'
 
@@ -27,7 +27,7 @@ export const inject = ['webServer']
 
 const OFFICIAL_PROVIDER = 'deepseek-official'
 const RECHARGE_URL = 'https://platform.deepseek.com/top_up'
-const PLUGIN_VERSION = '0.3.0'
+const PLUGIN_VERSION = '0.3.1'
 const PRICING_SOURCE_URL = 'https://api-docs.deepseek.com/zh-cn/quick_start/pricing/'
 const PRICING_SYNC_INTERVAL_MS = 6 * 60 * 60_000
 const PRICING_SYNC_TIMEOUT_MS = 8_000
@@ -36,6 +36,7 @@ const DSH_HOME = process.env.DSH_HOME ?? join(homedir(), '.dsh')
 const STORE_PATH = join(DSH_HOME, 'storages', 'wallet.json')
 const ACCOUNTS_PATH = join(DSH_HOME, 'storages', 'accounts.json')
 const ACCOUNTS_KEY_PATH = ACCOUNTS_PATH + '.key'
+const ACCOUNTS_BACKUP_PATH = ACCOUNTS_PATH + '.bak'
 const ACCOUNTS_VERSION = 2
 const ACCOUNTS_CRYPTO_VERSION = 1
 const CREDENTIAL_REF = 'DEEPSEEK_API_KEY'
@@ -67,6 +68,22 @@ export function isBeijingPeak(atMs) {
   return peakWindows.some((window) => hours >= window.startHour && hours < window.endHour)
 }
 
+export function pricingWindowSnapshot(atMs = Date.now()) {
+  const weekendOffPeak = atMs >= weekendOffPeakSince && isBeijingWeekend(atMs)
+  return {
+    timezone: 'Asia/Shanghai',
+    offsetMinutes: 480,
+    // Current clients use weekendOffPeak for a full green ring. Empty windows
+    // also make stale pre-weekend clients fail neutral instead of falsely
+    // claiming Sunday is a peak period until the browser is hard-refreshed.
+    windows: weekendOffPeak ? [] : peakWindows.map((window) => ({ ...window })),
+    offPeakRate: OFF_PEAK_RATE,
+    isPeak: isBeijingPeak(atMs),
+    weekendOffPeak,
+    weekendOffPeakSince,
+  }
+}
+
 // Pricing timeline (CNY per 1M tokens; cacheWrite is not billed by DeepSeek).
 // Curated from the official announcements; later policies win per model.
 export const PRICE_POLICIES = [
@@ -82,7 +99,6 @@ export const PRICE_POLICIES = [
     models: {
       'deepseek-v4-flash': { cacheHit: 0.02, input: 1, output: 2 },
       'deepseek-v4-pro': { cacheHit: 0.025, input: 3, output: 6 },
-      'deepseek-v4-flash-vision-exp': { cacheHit: 0.02, input: 1, output: 2 },
     },
   },
   {
@@ -92,6 +108,13 @@ export const PRICE_POLICIES = [
     models: {
       'deepseek-v4-flash': { cacheHit: [0.05, 0.1], input: [1.5, 3], output: [4.5, 9] },
       'deepseek-v4-pro': { cacheHit: [0.15, 0.3], input: [4.5, 9], output: [13.5, 27] },
+    },
+  },
+  {
+    // Vision Exp was released on 2026-08-21 and uses the V4 Flash table.
+    since: Date.UTC(2026, 7, 20, 16),
+    peakOffPeak: true,
+    models: {
       'deepseek-v4-flash-vision-exp': { cacheHit: [0.05, 0.1], input: [1.5, 3], output: [4.5, 9] },
     },
   },
@@ -105,6 +128,7 @@ let pricingSync = {
   etag: null,
   lastModified: null,
   ruleVersion: 'built-in-2026-08-23',
+  modelCount: 3,
   message: '尚未检查官方价格页',
 }
 
@@ -167,17 +191,20 @@ export function parseOfficialPricingHtml(html) {
     }
   }
   const text = decodeHtmlText(html)
-  const windowMatch = text.match(/高峰时段为北京时间\s*(\d{1,2}):00\s*-\s*(\d{1,2}):00、\s*(\d{1,2}):00\s*-\s*(\d{1,2}):00/)
+  const windowMatch = text.match(/高峰时段为北京时间(?:周一至周五)?\s*(\d{1,2}):00\s*-\s*(\d{1,2}):00、\s*(\d{1,2}):00\s*-\s*(\d{1,2}):00/)
   if (windowMatch === null) throw new Error('official peak window changed')
   const parsedWindows = [
     { startHour: Number(windowMatch[1]), endHour: Number(windowMatch[2]) },
     { startHour: Number(windowMatch[3]), endHour: Number(windowMatch[4]) },
   ]
+  const weekdayOnly = /高峰时段为北京时间周一至周五/.test(text)
   const weekendMatch = text.match(/北京时间\s*(\d{4})年\s*(\d{1,2})月\s*(\d{1,2})日[^。]*?00:00起[^。]*?周末[^。]*?低谷/)
-  if (weekendMatch === null) throw new Error('official weekend rule changed')
-  const weekendSince = Date.UTC(
-    Number(weekendMatch[1]), Number(weekendMatch[2]) - 1, Number(weekendMatch[3]), 0, 0, 0, 0,
-  ) - BEIJING_OFFSET_MS
+  if (!weekdayOnly && weekendMatch === null) throw new Error('official weekend rule changed')
+  const weekendSince = weekdayOnly
+    ? WEEKEND_OFF_PEAK_SINCE
+    : Date.UTC(
+      Number(weekendMatch[1]), Number(weekendMatch[2]) - 1, Number(weekendMatch[3]), 0, 0, 0, 0,
+    ) - BEIJING_OFFSET_MS
   return {
     models: modelsWithRates,
     peakWindows: parsedWindows,
@@ -187,11 +214,13 @@ export function parseOfficialPricingHtml(html) {
 }
 
 function applyOfficialPricing(parsed, response) {
-  const base = PRICE_POLICIES[PRICE_POLICIES.length - 1]
-  activePricePolicies = [
-    ...PRICE_POLICIES.slice(0, -1),
-    { ...base, models: parsed.models },
-  ]
+  activePricePolicies = PRICE_POLICIES.map((policy) => {
+    const models = {}
+    for (const model of Object.keys(policy.models)) {
+      models[model] = parsed.models[model] || policy.models[model]
+    }
+    return { ...policy, models }
+  })
   peakWindows = parsed.peakWindows.map((window) => ({ ...window }))
   weekendOffPeakSince = parsed.weekendOffPeakSince
   pricingSync = {
@@ -201,6 +230,7 @@ function applyOfficialPricing(parsed, response) {
     etag: response?.headers?.get?.('etag') ?? pricingSync.etag,
     lastModified: response?.headers?.get?.('last-modified') ?? pricingSync.lastModified,
     ruleVersion: parsed.ruleVersion,
+    modelCount: Object.keys(parsed.models).length,
     message: '已同步官方价格页',
   }
 }
@@ -209,6 +239,7 @@ async function syncOfficialPricing(logger) {
   if (typeof fetch !== 'function') return
   const controller = new AbortController()
   const timeout = setTimeout(() => controller.abort(), PRICING_SYNC_TIMEOUT_MS)
+  let stage = 'network'
   try {
     const headers = {}
     if (pricingSync.etag) headers['if-none-match'] = pricingSync.etag
@@ -219,14 +250,18 @@ async function syncOfficialPricing(logger) {
       return
     }
     if (!response.ok) throw new Error('official pricing page returned ' + response.status)
+    stage = 'parse'
     const parsed = parseOfficialPricingHtml(await response.text())
     applyOfficialPricing(parsed, response)
   } catch (error) {
+    const hasValidatedOfficialRule = typeof pricingSync.ruleVersion === 'string' && pricingSync.ruleVersion.startsWith('official-')
     pricingSync = {
       ...pricingSync,
-      status: pricingSync.checkedAt > 0 ? 'review-required' : 'offline',
+      status: stage === 'parse' ? 'review-required' : 'offline',
       checkedAt: Date.now(),
-      message: pricingSync.checkedAt > 0 ? '官方价格页结构有变化，需要复核' : '官方价格页暂时不可用，使用内置规则',
+      message: stage === 'parse'
+        ? '官方价格页结构有变化，需要复核'
+        : hasValidatedOfficialRule ? '官方价格页暂时不可用，沿用上次已验证规则' : '官方价格页暂时不可用，使用内置规则',
     }
     if (logger && typeof logger.warn === 'function') logger.warn('dsh-wallet: official pricing sync unavailable')
   } finally {
@@ -241,7 +276,7 @@ export function pricingSnapshot() {
     checkedAt: pricingSync.checkedAt,
     ruleVersion: pricingSync.ruleVersion,
     message: pricingSync.message,
-    modelCount: Object.keys(activePricePolicies[activePricePolicies.length - 1].models).length,
+    modelCount: pricingSync.modelCount,
     peakWindows: peakWindows.map((window) => ({ ...window })),
     weekendOffPeakSince,
   }
@@ -552,14 +587,22 @@ const WINDOWS_DPAPI_UNPROTECT = [
 let fallbackEncryptionKey = null
 let accountStorageScheme = process.platform === 'win32' ? 'windows-dpapi' : 'aes-gcm-file-key'
 let accountStorageError = null
+let accountStorageLocked = false
+let accountStorageRecovered = false
 
 function runWindowsDpapi(operation, value) {
   if (process.platform !== 'win32') return null
+  // Protect expects base64-encoded UTF-8 plaintext. Unprotect expects the
+  // DPAPI ciphertext's own base64 representation, so encoding it a second
+  // time makes every persisted account undecryptable after restart.
+  const input = operation === 'protect'
+    ? Buffer.from(value, 'utf8').toString('base64')
+    : value
   const result = spawnSync(
     'powershell.exe',
     ['-NoLogo', '-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', operation === 'protect' ? WINDOWS_DPAPI_PROTECT : WINDOWS_DPAPI_UNPROTECT],
     {
-      input: Buffer.from(value, 'utf8').toString('base64'),
+      input,
       encoding: 'utf8',
       windowsHide: true,
       maxBuffer: 1024 * 1024,
@@ -570,7 +613,7 @@ function runWindowsDpapi(operation, value) {
   return output === '' ? null : output
 }
 
-function getFallbackEncryptionKey() {
+function getFallbackEncryptionKey(createIfMissing = true) {
   if (fallbackEncryptionKey !== null) return fallbackEncryptionKey
   try {
     mkdirSync(dirname(ACCOUNTS_KEY_PATH), { recursive: true, mode: 0o700 })
@@ -579,6 +622,11 @@ function getFallbackEncryptionKey() {
       if (existing.length !== 32) throw new Error('account encryption key has an invalid length')
       fallbackEncryptionKey = existing
     } else {
+      if (!createIfMissing) {
+        accountStorageError = 'account-encryption-key-missing'
+        accountStorageLocked = true
+        return null
+      }
       fallbackEncryptionKey = randomBytes(32)
       writeFileSync(ACCOUNTS_KEY_PATH, fallbackEncryptionKey, { mode: 0o600 })
       chmodSync(ACCOUNTS_KEY_PATH, 0o600)
@@ -590,6 +638,29 @@ function getFallbackEncryptionKey() {
   }
 }
 
+function encryptApiKeyAes(apiKey, key, iv = randomBytes(12)) {
+  if (!Buffer.isBuffer(key) || key.length !== 32) throw new Error('AES account key must contain 32 bytes')
+  if (!Buffer.isBuffer(iv) || iv.length !== 12) throw new Error('AES-GCM IV must contain 12 bytes')
+  const cipher = createCipheriv('aes-256-gcm', key, iv)
+  const ciphertext = Buffer.concat([cipher.update(apiKey, 'utf8'), cipher.final()])
+  return {
+    version: ACCOUNTS_CRYPTO_VERSION,
+    scheme: 'aes-gcm-file-key',
+    iv: iv.toString('base64'),
+    tag: cipher.getAuthTag().toString('base64'),
+    payload: ciphertext.toString('base64'),
+  }
+}
+
+function decryptApiKeyAes(value, key) {
+  if (!Buffer.isBuffer(key) || key.length !== 32) throw new Error('AES account key must contain 32 bytes')
+  const decipher = createDecipheriv('aes-256-gcm', key, Buffer.from(value.iv, 'base64'))
+  decipher.setAuthTag(Buffer.from(value.tag, 'base64'))
+  return Buffer.concat([decipher.update(Buffer.from(value.payload, 'base64')), decipher.final()]).toString('utf8')
+}
+
+export const __testing = { encryptApiKeyAes, decryptApiKeyAes, compareVersions }
+
 function protectApiKey(apiKey) {
   const dpapi = runWindowsDpapi('protect', apiKey)
   if (dpapi !== null) {
@@ -600,17 +671,9 @@ function protectApiKey(apiKey) {
   const key = getFallbackEncryptionKey()
   if (key === null) return null
   try {
-    const iv = randomBytes(12)
-    const cipher = createCipheriv('aes-256-gcm', key, iv)
-    const ciphertext = Buffer.concat([cipher.update(apiKey, 'utf8'), cipher.final()])
+    const encrypted = encryptApiKeyAes(apiKey, key)
     accountStorageScheme = 'aes-gcm-file-key'
-    return {
-      version: ACCOUNTS_CRYPTO_VERSION,
-      scheme: 'aes-gcm-file-key',
-      iv: iv.toString('base64'),
-      tag: cipher.getAuthTag().toString('base64'),
-      payload: ciphertext.toString('base64'),
-    }
+    return encrypted
   } catch {
     accountStorageError = 'account-encryption-failed'
     return null
@@ -618,25 +681,41 @@ function protectApiKey(apiKey) {
 }
 
 function unprotectApiKey(value) {
-  if (value === null || typeof value !== 'object' || Array.isArray(value)) return ''
-  if (value.version !== ACCOUNTS_CRYPTO_VERSION || typeof value.scheme !== 'string' || typeof value.payload !== 'string') return ''
+  if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+    accountStorageError = 'account-encrypted-record-invalid'
+    accountStorageLocked = true
+    return ''
+  }
+  if (value.version !== ACCOUNTS_CRYPTO_VERSION || typeof value.scheme !== 'string' || typeof value.payload !== 'string') {
+    accountStorageError = 'account-encrypted-record-invalid'
+    accountStorageLocked = true
+    return ''
+  }
   if (value.scheme === 'windows-dpapi') {
     const decoded = runWindowsDpapi('unprotect', value.payload)
-    if (decoded === null) accountStorageError = 'account-decryption-failed'
+    if (decoded === null) {
+      accountStorageError = 'account-decryption-failed'
+      accountStorageLocked = true
+    }
     else {
       try { return Buffer.from(decoded, 'base64').toString('utf8') } catch { /* fall through */ }
+      accountStorageError = 'account-decryption-failed'
+      accountStorageLocked = true
     }
     return ''
   }
-  if (value.scheme !== 'aes-gcm-file-key' || typeof value.iv !== 'string' || typeof value.tag !== 'string') return ''
-  const key = getFallbackEncryptionKey()
+  if (value.scheme !== 'aes-gcm-file-key' || typeof value.iv !== 'string' || typeof value.tag !== 'string') {
+    accountStorageError = 'account-encrypted-record-invalid'
+    accountStorageLocked = true
+    return ''
+  }
+  const key = getFallbackEncryptionKey(false)
   if (key === null) return ''
   try {
-    const decipher = createDecipheriv('aes-256-gcm', key, Buffer.from(value.iv, 'base64'))
-    decipher.setAuthTag(Buffer.from(value.tag, 'base64'))
-    return Buffer.concat([decipher.update(Buffer.from(value.payload, 'base64')), decipher.final()]).toString('utf8')
+    return decryptApiKeyAes(value, key)
   } catch {
     accountStorageError = 'account-decryption-failed'
+    accountStorageLocked = true
     return ''
   }
 }
@@ -645,8 +724,9 @@ export function accountStorageSnapshot() {
   return {
     encryptedAtRest: true,
     scheme: accountStorageScheme,
-    status: accountStorageError === null ? 'ready' : 'error',
+    status: accountStorageLocked ? 'locked' : accountStorageRecovered ? 'recovered' : accountStorageError === null ? 'ready' : 'error',
     error: accountStorageError,
+    locked: accountStorageLocked,
   }
 }
 
@@ -680,14 +760,33 @@ export function normalizeAccountsData(value) {
   return { version: ACCOUNTS_VERSION, accounts, activeId }
 }
 
+function readAccountsFile(path) {
+  const raw = JSON.parse(readFileSync(path, 'utf8'))
+  const normalized = normalizeAccountsData(raw)
+  const legacyPlaintext = Array.isArray(raw?.accounts)
+    && raw.accounts.some((account) => account && typeof account.apiKey === 'string')
+  return { accounts: normalized, migrated: legacyPlaintext || raw?.version !== ACCOUNTS_VERSION }
+}
+
 function loadAccounts() {
+  if (!existsSync(ACCOUNTS_PATH)) {
+    if (!existsSync(ACCOUNTS_BACKUP_PATH)) return { accounts: emptyAccounts(), migrated: false }
+    try {
+      const recovered = readAccountsFile(ACCOUNTS_BACKUP_PATH)
+      accountStorageRecovered = true
+      accountStorageError = 'account-store-restored-from-backup'
+      return { accounts: recovered.accounts, migrated: true }
+    } catch {
+      accountStorageError = 'account-backup-invalid'
+      accountStorageLocked = true
+      return { accounts: emptyAccounts(), migrated: false }
+    }
+  }
   try {
-    const raw = JSON.parse(readFileSync(ACCOUNTS_PATH, 'utf8'))
-    const normalized = normalizeAccountsData(raw)
-    const legacyPlaintext = Array.isArray(raw?.accounts)
-      && raw.accounts.some((account) => account && typeof account.apiKey === 'string')
-    return { accounts: normalized, migrated: legacyPlaintext || raw?.version !== ACCOUNTS_VERSION }
+    return readAccountsFile(ACCOUNTS_PATH)
   } catch {
+    accountStorageError = 'account-store-invalid'
+    accountStorageLocked = true
     return { accounts: emptyAccounts(), migrated: false }
   }
 }
@@ -703,6 +802,7 @@ function persistAccounts(logger) {
     accountsSaveTimer = null
   }
   try {
+    if (accountStorageLocked) throw new Error('encrypted account store is locked')
     mkdirSync(dirname(ACCOUNTS_PATH), { recursive: true, mode: 0o700 })
     const tmp = ACCOUNTS_PATH + '.tmp'
     const encryptedAccounts = accounts.accounts.map((account) => {
@@ -717,8 +817,14 @@ function persistAccounts(logger) {
     })
     writeFileSync(tmp, JSON.stringify({ version: ACCOUNTS_VERSION, accounts: encryptedAccounts, activeId: accounts.activeId }), { mode: 0o600 })
     chmodSync(tmp, 0o600)
+    if (existsSync(ACCOUNTS_PATH)) {
+      copyFileSync(ACCOUNTS_PATH, ACCOUNTS_BACKUP_PATH)
+      chmodSync(ACCOUNTS_BACKUP_PATH, 0o600)
+    }
     renameSync(tmp, ACCOUNTS_PATH)
     accountsNeedsSave = false
+    accountStorageRecovered = false
+    accountStorageError = null
   } catch (error) {
     accountStorageError = accountStorageError || 'account-encryption-failed'
     if (logger && typeof logger.warn === 'function') {
@@ -801,6 +907,7 @@ export function accountListView() {
       active: account.id === accounts.activeId,
     })),
     activeId: accounts.activeId,
+    storage: accountStorageSnapshot(),
   }
 }
 
@@ -1075,15 +1182,7 @@ function snapshotView(sessionId) {
       })(),
     rechargeUrl: RECHARGE_URL,
     // Peak/off-peak policy for the ring clock; billed in Asia/Shanghai.
-    pricingWindows: {
-      timezone: 'Asia/Shanghai',
-      offsetMinutes: 480,
-      windows: peakWindows.map(w => ({ startHour: w.startHour, endHour: w.endHour })),
-      offPeakRate: OFF_PEAK_RATE,
-      isPeak: isBeijingPeak(now),
-      weekendOffPeak: now >= weekendOffPeakSince && isBeijingWeekend(now),
-      weekendOffPeakSince,
-    },
+    pricingWindows: pricingWindowSnapshot(now),
     accounts: {
       activeId: accounts.activeId,
       activeName: active !== null ? active.name : null,
@@ -1195,16 +1294,18 @@ export function apply(ctx, config) {
   const balanceTimer = setInterval(() => void refreshBalance(ctx), BALANCE_REFRESH_MS)
   if (typeof balanceTimer.unref === 'function') balanceTimer.unref()
 
-  ctx.effect(() => {
-    const first = setTimeout(() => void syncOfficialPricing(ctx.logger), 1000)
-    const timer = setInterval(() => void syncOfficialPricing(ctx.logger), PRICING_SYNC_INTERVAL_MS)
-    if (typeof first.unref === 'function') first.unref()
-    if (typeof timer.unref === 'function') timer.unref()
-    return () => {
-      clearTimeout(first)
-      clearInterval(timer)
-    }
-  }, 'dsh-wallet: official pricing sync')
+  if (config.pricingSync !== false) {
+    ctx.effect(() => {
+      const first = setTimeout(() => void syncOfficialPricing(ctx.logger), 1000)
+      const timer = setInterval(() => void syncOfficialPricing(ctx.logger), PRICING_SYNC_INTERVAL_MS)
+      if (typeof first.unref === 'function') first.unref()
+      if (typeof timer.unref === 'function') timer.unref()
+      return () => {
+        clearTimeout(first)
+        clearInterval(timer)
+      }
+    }, 'dsh-wallet: official pricing sync')
+  }
 
   ctx.effect(() => {
     const disposeSnapshot = ctx.webServer.register({
@@ -1306,6 +1407,7 @@ export function apply(ctx, config) {
       handler: async (req, res) => {
         if (req.method === 'GET') return json(res, 200, { ok: true, ...accountListView() })
         if (req.method !== 'POST') return json(res, 405, { ok: false, error: 'method-not-allowed' })
+        if (accountStorageLocked) return json(res, 423, { ok: false, error: 'account-storage-locked' })
         const body = await readBody(req)
         if (body === null || typeof body.name !== 'string' || typeof body.apiKey !== 'string') {
           return json(res, 400, { ok: false, error: 'name and apiKey are required' })
@@ -1345,6 +1447,7 @@ export function apply(ctx, config) {
       path: '/api/wallet/accounts/activate',
       handler: async (req, res) => {
         if (req.method !== 'POST') return json(res, 405, { ok: false, error: 'method-not-allowed' })
+        if (accountStorageLocked) return json(res, 423, { ok: false, error: 'account-storage-locked' })
         const body = await readBody(req)
         if (body === null || typeof body.id !== 'string') return json(res, 400, { ok: false, error: 'id is required' })
         const result = await activateAccount(ctx, body.id)
@@ -1361,6 +1464,7 @@ export function apply(ctx, config) {
       path: '/api/wallet/accounts/remove',
       handler: async (req, res) => {
         if (req.method !== 'POST') return json(res, 405, { ok: false, error: 'method-not-allowed' })
+        if (accountStorageLocked) return json(res, 423, { ok: false, error: 'account-storage-locked' })
         const body = await readBody(req)
         if (body === null || typeof body.id !== 'string') return json(res, 400, { ok: false, error: 'id is required' })
         const result = removeAccount(body.id)

package/lib/client.js

@@ -23,7 +23,7 @@ window.__ModuleLoader__.load({
 
     var POLL_MS = 15000
     // Keep in lockstep with package.json; a test enforces the sync.
-    var WALLET_VERSION = '0.3.0'
+    var WALLET_VERSION = '0.3.1'
     var CONFIRM_KEY = 'dsh-wallet-recharge-confirmed'
     var CHIP_LAYOUT_KEY = 'dshw-chip-layout-v4'
     var PANEL_POS_KEY = 'dshw-panel-pos-v1'
@@ -206,7 +206,6 @@ window.__ModuleLoader__.load({
               }
             }
             var bridged = extension.notify(payload)
-            if (bridged && typeof bridged.close === 'function') return bridged
             if (bridged !== false) {
               if (bridged && typeof bridged.then === 'function') {
                 function attachDelegate(delegate) {
@@ -219,6 +218,14 @@ window.__ModuleLoader__.load({
                   if (bridgeHandle.closed && delegate && typeof delegate.close === 'function') delegate.close()
                 }
                 Promise.resolve(bridged).then(attachDelegate).catch(function () { attachDelegate(false) })
+              } else if (bridged && typeof bridged === 'object') {
+                // Always return the wrapper whose onclick/onclose fields the
+                // wallet sets. Desktop bridges are asked to call payload
+                // callbacks; returning the raw native handle here disconnected
+                // those callbacks for synchronous Electron/Tauri adapters.
+                bridgeHandle.delegate = bridged
+                try { bridged.onclick = payload.onClick } catch (e) { /* optional callback */ }
+                try { bridged.onclose = payload.onClose } catch (e) { /* optional callback */ }
               }
               return bridgeHandle
             }
@@ -285,6 +292,18 @@ window.__ModuleLoader__.load({
 
     var compatibility = createCompatibilityAdapter(window)
 
+    function openOfficialRecharge() {
+      var url = 'https://platform.deepseek.com/top_up'
+      var confirmed = false
+      try { confirmed = compatibility.storage.getItem(CONFIRM_KEY) === '1' } catch (e) { /* ignore */ }
+      if (!confirmed) {
+        if (typeof window.confirm !== 'function') return false
+        if (!window.confirm('将打开 DeepSeek 官方充值页：\nplatform.deepseek.com\n\n确认继续？')) return false
+        try { compatibility.storage.setItem(CONFIRM_KEY, '1') } catch (e) { /* ignore */ }
+      }
+      return compatibility.openExternal(url)
+    }
+
     var css = [
       '.dshw_anchor{display:inline-flex;align-items:center;min-height:22px;min-width:0;vertical-align:middle}',
       '.dshw_anchorHome{overflow:hidden;min-width:44px}',
@@ -1215,7 +1234,10 @@ window.__ModuleLoader__.load({
         }
         refresh()
         fetch('/api/wallet/accounts').then(function (resp) { return resp.json() }).then(function (json) {
-          if (!stopped && json && json.ok) setAccounts(json)
+          if (!stopped && json && json.ok) {
+            setAccounts(json)
+            setAccountsError(json.storage && json.storage.locked ? '账户加密文件无法解密，已锁定写入以保护原数据' : null)
+          }
         }).catch(function () { if (!stopped) setAccountsError('\u8d26\u6237\u63a5\u53e3\u4e0d\u53ef\u7528') })
         fetch('/api/wallet/health').then(function (resp) { return resp.json() }).then(function (json) {
           if (!stopped && json && json.ok) setHealth(json)
@@ -1364,7 +1386,10 @@ window.__ModuleLoader__.load({
 
       function reloadAccounts() {
         fetch('/api/wallet/accounts').then(function (resp) { return resp.json() }).then(function (json) {
-          if (json && json.ok) { setAccounts(json); setAccountsError(null) }
+          if (json && json.ok) {
+            setAccounts(json)
+            setAccountsError(json.storage && json.storage.locked ? '账户加密文件无法解密，已锁定写入以保护原数据' : null)
+          }
         }).catch(function () { /* ignore */ })
         fetch('/api/wallet/snapshot').then(function (resp) { return resp.json() }).then(function (json) {
           if (json && json.ok) {
@@ -1466,10 +1491,22 @@ window.__ModuleLoader__.load({
         ? (hostCompatibility.status === 'compatible' ? '兼容' : hostCompatibility.status === 'upgrade-recommended' ? '建议升级' : '待检测')
         : '检测中'
       var pricingText = pricing
-        ? (pricing.status === 'synced' ? '已同步' : pricing.status === 'review-required' ? '待复核' : pricing.status === 'offline' ? '离线，使用内置规则' : '内置规则')
+        ? (pricing.status === 'synced'
+          ? '已同步'
+          : pricing.status === 'review-required'
+            ? '待复核'
+            : pricing.status === 'offline'
+              ? (String(pricing.ruleVersion || '').indexOf('official-') === 0 ? '离线，沿用已验证规则' : '离线，使用内置规则')
+              : '内置规则')
         : '检测中'
       var storageText = accountStorage
-        ? (accountStorage.scheme === 'windows-dpapi' ? 'Windows DPAPI 加密' : 'AES-GCM 加密')
+        ? (accountStorage.status === 'locked'
+          ? '无法解密（已锁定写入）'
+          : accountStorage.status === 'recovered'
+            ? '已从加密备份恢复'
+            : accountStorage.status === 'error'
+              ? '加密存储异常'
+              : accountStorage.scheme === 'windows-dpapi' ? 'Windows DPAPI 加密' : 'AES-GCM 加密')
         : '检测中'
       rows.push(React.createElement('div', { key: 'health', className: 'dshw_setCard', style: { display: 'block' } },
         React.createElement('div', { className: 'dshw_settingsGroupHeader' },
@@ -1789,7 +1826,7 @@ window.__ModuleLoader__.load({
         }, '刷新余额'),
         React.createElement('button', {
           type: 'button', className: 'dshw_btn dshw_btnPrimary',
-          onClick: function () { if (close) close(); window.open('https://platform.deepseek.com/top_up', '_blank', 'noopener') }
+          onClick: function () { if (close) close(); openOfficialRecharge() }
         }, '↗ 去官方充值'))))
       return React.createElement('div', { className: 'dshw_settingsSection', style: { display: 'flex', flexDirection: 'column', gap: '6px', fontSize: '12px', color: 'var(--dsw-alias-label-primary,inherit)' } }, rows)
     }
@@ -1823,38 +1860,27 @@ window.__ModuleLoader__.load({
         var offsetMinutes = policy && Number.isFinite(policy.offsetMinutes) ? policy.offsetMinutes : 480
         var beijingNow = Number.isFinite(nowMs) ? new Date(nowMs + offsetMinutes * 60000) : null
         var day = beijingNow && Number.isFinite(beijingNow.getTime()) ? beijingNow.getUTCDay() : 6
-        var daysUntilMonday = day === 6 ? 2 : 1
-        var nextSwitchMs = beijingNow && Number.isFinite(beijingNow.getTime())
-          ? Date.UTC(
-            beijingNow.getUTCFullYear(), beijingNow.getUTCMonth(), beijingNow.getUTCDate() + daysUntilMonday,
-            9 - (offsetMinutes / 60), 0, 0, 0
-          ) - offsetMinutes * 60000
-          : NaN
-        var weekendMsLeft = Number.isFinite(nextSwitchMs) && Number.isFinite(nowMs)
-          ? Math.max(0, nextSwitchMs - nowMs)
-          : 0
-        var weekendHours = Math.floor(weekendMsLeft / 3600000)
-        var weekendMinutes = Math.floor((weekendMsLeft % 3600000) / 60000)
-        var weekendLeftText = weekendHours > 0
-          ? weekendHours + ' 小时 ' + weekendMinutes + ' 分'
-          : weekendMinutes + ' 分钟'
-        var weekendLeftShort = weekendHours > 0
-          ? weekendHours + 'h' + (weekendMinutes > 0 ? weekendMinutes + 'm' : '')
-          : weekendMinutes + 'm'
-        var weekendDateKey = beijingNow && Number.isFinite(beijingNow.getTime())
-          ? [beijingNow.getUTCFullYear(), String(beijingNow.getUTCMonth() + 1).padStart(2, '0'), String(beijingNow.getUTCDate()).padStart(2, '0')].join('-')
+        // Friday after 18:00, Saturday, Sunday and Monday before 09:00 are
+        // one continuous off-peak period. Anchor it to Friday so unchanged
+        // pricing does not emit duplicate notifications at each midnight.
+        var weekendAnchor = beijingNow && Number.isFinite(beijingNow.getTime())
+          ? new Date(Date.UTC(beijingNow.getUTCFullYear(), beijingNow.getUTCMonth(), beijingNow.getUTCDate() - (day === 6 ? 1 : 2)))
+          : null
+        var weekendDateKey = weekendAnchor
+          ? [weekendAnchor.getUTCFullYear(), String(weekendAnchor.getUTCMonth() + 1).padStart(2, '0'), String(weekendAnchor.getUTCDate()).padStart(2, '0')].join('-')
           : 'weekend'
         var weekendTzName = policy.timezone || 'Asia/Shanghai'
+        var weekendDayLabel = day === 6 ? '周六' : '周日'
         return {
           configured: true, windows: [], weekendOffPeak: true, inPeak: false,
           nextHour: 9,
-          ariaText: '当前为周末低谷时段，全天按半价计费，周一 09:00 恢复标准价',
-          tip: '峰谷时钟 · 当前周末低谷 · 周一 09:00 恢复标准价 · 还有 ' + weekendLeftText + ' · ' + weekendTzName,
+          ariaText: '当前为' + weekendDayLabel + '低谷时段，全天按半价计费，周一 09:00 恢复标准价',
+          tip: '峰谷时钟 · 当前' + weekendDayLabel + '低谷 · ' + weekendDayLabel + '全天半价 · 周一 09:00 恢复工作日规则 · ' + weekendTzName,
           periodName: '周末低谷', rateBadge: '半价',
-          countdownSummary: '周一 09:00 切换 · 剩 ' + weekendLeftShort,
-          windowSummary: '周末全天低谷 · 工作日高峰 09:00–12:00 / 14:00–18:00',
-          periodId: 'weekend-off-' + weekendDateKey,
-          switchBody: '周末低谷结束，已进入工作日高峰时段，按标准价计费',
+          countdownSummary: weekendDayLabel + '全天低谷',
+          windowSummary: weekendDayLabel + '全天低谷 · 工作日高峰 09:00–12:00 / 14:00–18:00',
+          periodId: 'weekend-chain-' + weekendDateKey,
+          switchBody: '已进入周末低谷，全天按半价计费',
         }
       }
       if (windows.length === 0) {
@@ -1899,8 +1925,24 @@ window.__ModuleLoader__.load({
       var period = inPeak ? '高峰' : '低谷' + rateWord
       var periodName = inPeak ? '高峰时段' : '低谷时段'
       var rateBadge = inPeak ? '标准价' : (rate === 0.5 ? '半价' : '×' + rate)
-      var countdownSummary = hh(nextHour) + ' 切换 · 剩 ' + leftShort
-      var windowSummary = '高峰 ' + winText
+      var offsetMinutesForDay = policy && Number.isFinite(policy.offsetMinutes) ? policy.offsetMinutes : 480
+      var localWallDate = Number.isFinite(nowMs) ? new Date(nowMs + offsetMinutesForDay * 60000) : null
+      var localDay = localWallDate ? localWallDate.getUTCDay() : -1
+      var weekendRuleSince = policy && Number.isFinite(policy.weekendOffPeakSince) ? policy.weekendOffPeakSince : -Infinity
+      var nextLocalMidnightMs = localWallDate
+        ? Date.UTC(localWallDate.getUTCFullYear(), localWallDate.getUTCMonth(), localWallDate.getUTCDate() + 1) - offsetMinutesForDay * 60000
+        : Infinity
+      var currentLocalMidnightMs = localWallDate
+        ? Date.UTC(localWallDate.getUTCFullYear(), localWallDate.getUTCMonth(), localWallDate.getUTCDate()) - offsetMinutesForDay * 60000
+        : Infinity
+      var fridayAfterLastPeak = !inPeak && localDay === 5 && nowHour >= windows[windows.length - 1].endHour && nextLocalMidnightMs >= weekendRuleSince
+      var mondayBeforeFirstPeak = !inPeak && localDay === 1 && nowHour < windows[0].startHour && currentLocalMidnightMs >= weekendRuleSince
+      var countdownSummary = fridayAfterLastPeak
+        ? '周末全天低谷'
+        : mondayBeforeFirstPeak ? ('剩 ' + leftShort + ' 进入高峰') : (hh(nextHour) + ' 切换 · 剩 ' + leftShort)
+      var windowSummary = fridayAfterLastPeak
+        ? '周五 18:00 起低谷 · 周六/周日全天低谷'
+        : '高峰 ' + winText
       // Dual timezone: billing is judged in the policy's base zone; a device
       // elsewhere also sees the local-clock span of the CURRENT segment.
       var localNote = ''
@@ -1918,15 +1960,24 @@ window.__ModuleLoader__.load({
       var ariaText = inPeak
         ? '当前为高峰时段，' + tzName + ' ' + winText + '，按标准价计费'
         : '当前为低谷时段，按平价的 ' + rate + ' 倍计费，' + tzName + ' 高峰 ' + winText
-      var tip = '峰谷时钟 · 当前' + period + ' · ' + switchText + ' · 还有 ' + leftText
-        + ' · 高峰 ' + winText + '（' + tzName + '）' + localNote
+      var tip = fridayAfterLastPeak
+        ? '峰谷时钟 · 当前低谷半价 · 下次高峰：周一 09:00 · ' + tzName + localNote
+        : '峰谷时钟 · 当前' + period + ' · ' + switchText + ' · 还有 ' + leftText
+          + ' · 高峰 ' + winText + '（' + tzName + '）' + localNote
+      var periodId = (inPeak ? 'p' : 'o') + Math.round(segStart * 100)
+      if ((fridayAfterLastPeak || mondayBeforeFirstPeak) && localWallDate) {
+        var chainAnchorDays = mondayBeforeFirstPeak ? 3 : 0
+        var chainAnchor = new Date(Date.UTC(localWallDate.getUTCFullYear(), localWallDate.getUTCMonth(), localWallDate.getUTCDate() - chainAnchorDays))
+        var chainKey = [chainAnchor.getUTCFullYear(), String(chainAnchor.getUTCMonth() + 1).padStart(2, '0'), String(chainAnchor.getUTCDate()).padStart(2, '0')].join('-')
+        periodId = 'weekend-chain-' + chainKey
+      }
       return {
         configured: true, windows: windows, weekendOffPeak: false, inPeak: inPeak,
         nextHour: nextHour, ariaText: ariaText, tip: tip,
         periodName: periodName, rateBadge: rateBadge,
         countdownSummary: countdownSummary, windowSummary: windowSummary,
         // Reminder dedup id: entering this period at this boundary fires once.
-        periodId: (inPeak ? 'p' : 'o') + Math.round(segStart * 100),
+        periodId: periodId,
         switchBody: inPeak ? '已进入高峰时段，按标准价计费' : '已进入低谷时段，按平价的 ' + rate + ' 倍计费',
       }
     }
@@ -2353,7 +2404,7 @@ window.__ModuleLoader__.load({
         onPointerDown: isRail ? undefined : handlePointerDown,
         onClick: function (e) {
           if (isRail) {
-            window.open('https://platform.deepseek.com/top_up', '_blank', 'noopener')
+            openOfficialRecharge()
             return
           }
           if (didDragRef.current !== true) {
@@ -2409,7 +2460,7 @@ window.__ModuleLoader__.load({
               'aria-label': '前往官方充值',
               onClick: function (e) {
                 if (e && typeof e.stopPropagation === 'function') e.stopPropagation()
-                window.open('https://platform.deepseek.com/top_up', '_blank', 'noopener')
+                openOfficialRecharge()
               }
             }, '充值') : null
           )
@@ -2451,7 +2502,7 @@ window.__ModuleLoader__.load({
               type: 'button',
               className: 'dshw_btn dshw_btnPrimary',
               style: { height: '22px', fontSize: '11px', padding: '0 8px' },
-              onClick: function () { window.open('https://platform.deepseek.com/top_up', '_blank', 'noopener') }
+              onClick: function () { openOfficialRecharge() }
             }, '↗ 充值'))),
         React.createElement('div', { className: 'dshw_divider' }),
         React.createElement('div', { className: 'dshw_peakRow' },
@@ -3283,7 +3334,9 @@ window.__ModuleLoader__.load({
         }).then(function (json) {
           if (json && json.ok) {
             setAccounts(json)
-            setAccountsError(null)
+            setAccountsError(json.storage && json.storage.locked
+              ? '账户加密文件无法解密，已锁定写入以保护原数据'
+              : null)
           }
         }).catch(function () {
           setAccountsError('\u8d26\u6237\u5217\u8868\u52a0\u8f7d\u5931\u8d25')

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "deepseek-harness-wallet",
-  "description": "Local-first account monitoring, usage accounting, official pricing sync, health checks, encrypted multi-account management, recharge, completion reminders, flexible layout, and host-gated session controls for DeepSeek Harness.",
-  "version": "0.3.0",
+  "description": "Local-first DeepSeek Harness control center for balance monitoring, usage accounting, official pricing sync, peak/off-peak status, encrypted multi-account switching, health checks, completion reminders, recharge, and host-gated session controls.",
+  "version": "0.3.1",
   "type": "module",
   "main": "index.js",
   "exports": {