deepseek-harness-wallet 0.3.9 → 0.3.11

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to this project are documented in this file.
 
+## 0.3.11 - 2026-09-05
+
+- 切换账户时清除旧余额并启动独立刷新，取消旧请求并忽略其迟到成功或失败；删除当前账户后重新读取宿主凭据对应的余额。 / Clear cached balance on account switches, start a fresh request, and discard stale successes or failures; refresh the host-credential balance after removing the active account.
+- 设置备份按顺序发送，失败重试保留最新编辑，避免旧请求覆盖已保存的新设置，同时保留有限次数重试。 / Serialize preference backups and retain the newest queued edits across bounded retries so older requests cannot overwrite newer settings.
+- 浏览器拒绝访问 localStorage 属性时，客户端仍可初始化并使用内存回退和宿主设置备份；桌面存储桥保持优先。 / Keep client initialization, memory storage, and host preference hydration working when access to the localStorage property is denied, preserving desktop storage bridge precedence.
+
+## 0.3.10 - 2026-09-05
+
+- 拆分可读客户端源码并提交可复现的精简加载产物，使每个文件低于 DSH STORE 的 256 KiB 自动审核上限；安装仍不需要构建或运行依赖。 / Split readable client sources and commit a reproducible compact loader artifact below DSH STORE's 256 KiB per-file review bound, retaining build-free installation and zero runtime dependencies.
+- 声明 alpha.3、alpha.4、alpha.5、rc.1 的精确 DSH 兼容状态；alpha.4/alpha.5/rc.1 均完成隔离 Profile 安装、冷启动、钱包接口与客户端资源验证、卸载和回退。 / Declare exact DSH compatibility for alpha.3, alpha.4, alpha.5, and rc.1; the latter three passed disposable-profile installation, cold start, wallet endpoints/client resource delivery, removal, and rollback.
+- 增加产物复现与文件体积检查，保留全部钱包、账户、套餐及分时计价回归。 / Add artifact reproducibility and byte-bound checks while retaining wallet, account, plan and time-of-use pricing regressions.
+
 ## 0.3.9 - 2026-09-04
 
 - 第三方 API 自定义价格新增分时计价（Issue #37）：每个精确 Provider/模型可在基础价之上配置多个 IANA 时区、适用星期和起止时间规则，并为输入、缓存读、缓存写、输出分别定价；支持跨午夜时段，当前命中的价格段会在设置和钱包详情中显示。 / Added time-of-use custom third-party API pricing (Issue #37): each exact Provider/model route can define multiple IANA-timezone, weekday, and start/end windows over a base rate, with separate input, cache-read, cache-write, and output prices; cross-midnight windows are supported and the active price segment is shown in Settings and wallet details.

package/README.md

@@ -14,7 +14,7 @@
 
 > A local-first companion that keeps account status, per-conversation usage, completion reminders, official recharge, flexible layout, and host-gated session controls beside the DSH composer.
 
-> **Version:** v0.3.9 is the current release on GitHub and npm.
+> **Version:** v0.3.11.
 
 > If DeepSeek Harness Control Center helps you, please consider leaving a ⭐ Star. Thank you!
 
@@ -74,7 +74,7 @@ Details: [compatibility](#browser-desktop-and-os-compatibility) · [data and tru
 
 ## Install
 
-From npm (published stable v0.3.9):
+From npm:
 
 ```sh
 dsh plugin --profile web add deepseek-harness-wallet
@@ -145,6 +145,8 @@ For buildable DSH hosts, the npm package and repository include a versioned [Age
 
 ## Data & trust
 
+Client development now uses five readable files under `src/client/` and a committed `lib/client.js` artifact; run `npm ci`, `npm run build:client`, and `npm run check:client` after source edits. Installation runs no build scripts. Exact-version smoke checks are documented in [0.3.10 compatibility evidence](https://github.com/feibi-mochi/deepseek-harness-control-center/blob/main/docs/compatibility-0.3.10.md).
+
 | Item | Behavior |
 | --- | --- |
 | Token accounting | Listens to the `llm/stream` event and buckets per session and provider: `deepseek-official` plus explicitly opted-in wrapper routes use the official bucket; other providers stay third-party; each usage event also locks its contemporaneous official price, so multiple sessions and pricing windows never mix. |

package/index.js

@@ -34,7 +34,7 @@ const TRANSPARENT_PROVIDER_PREFIX = 'vision-toolkit-'
 // DeepSeek's official paid-API bucket by the wrapper-provider alias control.
 const PLAN_PROVIDER_IDS = new Set(PLAN_ADAPTERS.map((adapter) => adapter.provider))
 const RECHARGE_URL = 'https://platform.deepseek.com/top_up'
-const PLUGIN_VERSION = '0.3.9'
+const PLUGIN_VERSION = '0.3.11'
 const PRICING_SOURCE_URL = 'https://api-docs.deepseek.com/zh-cn/quick_start/pricing/'
 const PRICING_SYNC_INTERVAL_MS = 6 * 60 * 60_000
 const PRICING_SYNC_TIMEOUT_MS = 8_000
@@ -1913,7 +1913,10 @@ export function removeAccount(id) {
   // Deliberately NOT unsetting the credentials seam: the key currently in
   // .credentials.yaml keeps working for LLM billing; the UI just reports
   // "no active account" and balance falls back to the seam key.
-  if (accounts.activeId === id) accounts.activeId = null
+  if (accounts.activeId === id) {
+    accounts.activeId = null
+    invalidateBalance()
+  }
   return { ok: true, thresholdRemoved }
 }
 
@@ -1971,6 +1974,7 @@ export async function activateAccount(ctx, id) {
   }
   accounts.activeId = account.id
   scheduleAccountsSave(ctx.logger)
+  invalidateBalance()
   void refreshBalance(ctx)
   return { ok: true, account: { id: account.id, name: account.name, maskedKey: maskKey(account.apiKey) } }
 }
@@ -2043,8 +2047,18 @@ function recordUsage(options, usage, atMs = Date.now()) {
 
 let balance = { fetchedAt: 0, available: false, balances: [], error: null }
 let balanceRefresh = null
+let balanceGeneration = 0
+let balanceController = null
+
+function invalidateBalance() {
+  balanceGeneration += 1
+  balance = { fetchedAt: 0, available: false, balances: [], error: null }
+  balanceRefresh = null
+  if (balanceController !== null) balanceController.abort()
+  balanceController = null
+}
 
-async function performBalanceRefresh(ctx) {
+async function performBalanceRefresh(ctx, generation) {
   try {
     const credentials = ctx.get('credentials')
     if (credentials === undefined) {
@@ -2052,11 +2066,13 @@ async function performBalanceRefresh(ctx) {
       return
     }
     const key = await resolveBalanceKey(ctx)
+    if (generation !== balanceGeneration) return
     if (key === undefined || key === '') {
       balance = { fetchedAt: Date.now(), available: false, balances: [], error: 'no-api-key' }
       return
     }
     const controller = new AbortController()
+    balanceController = controller
     const timer = setTimeout(() => controller.abort(), 15000)
     try {
       const response = await fetch('https://api.deepseek.com/user/balance', {
@@ -2073,6 +2089,7 @@ async function performBalanceRefresh(ctx) {
         throw error
       }
       const data = await response.json()
+      if (generation !== balanceGeneration) return
       const available = data !== null && typeof data === 'object' && data.is_available === true
       balance = {
         fetchedAt: Date.now(),
@@ -2082,8 +2099,10 @@ async function performBalanceRefresh(ctx) {
       }
     } finally {
       clearTimeout(timer)
+      if (balanceController === controller) balanceController = null
     }
   } catch (error) {
+    if (generation !== balanceGeneration) return
     const code = error && typeof error === 'object' && typeof error.code === 'string'
       ? error.code
       : error && typeof error === 'object' && error.name === 'AbortError'
@@ -2100,11 +2119,13 @@ async function performBalanceRefresh(ctx) {
 
 function refreshBalance(ctx) {
   if (balanceRefresh !== null) return balanceRefresh
+  const generation = balanceGeneration
   // Never let a refresh escape as an unhandled rejection: every caller uses
   // `void refreshBalance(ctx)`, so a throw here would take the host process
   // down (Node exits on unhandled rejections). Absorb it into the error state.
-  balanceRefresh = performBalanceRefresh(ctx)
+  balanceRefresh = performBalanceRefresh(ctx, generation)
     .catch((error) => {
+      if (generation !== balanceGeneration) return
       balance = {
         fetchedAt: Date.now(),
         available: false,
@@ -2116,7 +2137,7 @@ function refreshBalance(ctx) {
       }
     })
     .finally(() => {
-      balanceRefresh = null
+      if (generation === balanceGeneration) balanceRefresh = null
     })
   return balanceRefresh
 }
@@ -2668,10 +2689,12 @@ historyEventCount = store.history && store.history.events ? Object.keys(store.hi
         if (accountStorageLocked) return json(res, 423, { ok: false, error: 'account-storage-locked' })
         const body = await readBody(req)
         if (body === null || typeof body.id !== 'string') return json(res, 400, { ok: false, error: 'id is required' })
+        const wasActive = accounts.activeId === body.id
         const result = removeAccount(body.id)
         if (!result.ok) return json(res, 400, { ok: false, error: result.error })
         scheduleAccountsSave(ctx.logger)
         if (result.thresholdRemoved) scheduleSave(ctx.logger)
+        if (wasActive) void refreshBalance(ctx)
         return json(res, 200, { ok: true, ...accountListView() })
       },
     })