dsh-balance-widget 0.6.0 → 0.6.3

package/README.en.md

@@ -32,7 +32,7 @@ A balance & cost widget for the [DeepSeek Harness](https://github.com/deepseek-a
 
 ## Features
 
-- **Account balance** — On click, the host proxies DeepSeek's official `GET /user/balance` and shows the `¥` balance; the balance number is color-coded by threshold (healthy / amber below `lowThreshold` / red below `criticalThreshold`). The API key is resolved through the host credentials service and never leaves the host process; the browser only talks to same-origin routes.
+- **Account balance** — The balance comes from the host account service `deepseekAccount`, provided by `@deepseek-ai/dsh-deepseek-account-platform` — the official "Settings → Account & balance" page's own source, so both surfaces show the same number and **no API key is needed**; unsigned hosts and older runtimes (0.1.x) fall back to DeepSeek's official `GET /user/balance`. The `¥` balance is color-coded by threshold (healthy / amber below `lowThreshold` / red below `criticalThreshold`). The API key is resolved through the host credentials service and never leaves the host process; the browser only talks to same-origin routes.
 - **Last prompt cost (estimate)** — Parses the most recent session file and prices the last turn's token usage, answering "how much did that last prompt cost", with the **session name** labeled underneath.
 - **Today · this session cost (estimate)** — The current session's usage today (calendar day) × DeepSeek's official peak/off-peak price table. Follows the configured model (default `deepseek-v4-flash`, switchable to `deepseek-v4-pro`) and the Beijing-time peak/off-peak windows automatically.
 - **Today · this workspace cost (estimate)** — Sums today's token usage × price across every session in the current workspace (anchored by the current session).
@@ -144,7 +144,7 @@ If you mainly use DeepSeek-V4-Pro, point the pricing model at it for a more accu
 
 ## Pricing
 
-Built-in DeepSeek official peak/off-peak pricing (CNY per 1M tokens), effective 2026-09-10. Peak windows are Beijing time **Mon–Fri** 09:00–12:00 and 14:00–18:00 (weekends are off-peak all day); prices are double the off-peak rates:
+Built-in DeepSeek official peak/off-peak pricing (CNY per 1M tokens), effective 2026-09-10. Peak windows are Beijing time **Mon–Fri (China's statutory holidays excluded)** 09:00–12:00 and 14:00–18:00; **everything else is off-peak**, weekends (including 调休 make-up workdays) and statutory holidays all day included. Peak prices are double the off-peak rates:
 
 | Model | Window | Cache hit (input) | Cache miss (input) | Output |
 | --- | --- | --- | --- | --- |
@@ -167,19 +167,20 @@ This section is for the DSH Store / plugin audit: dependencies, runtime permissi
 
 **Dependencies & compatibility**
 - Zero runtime dependencies: imports no `@deepseek-ai/*` packages; no third-party host deps
-- `peerDependencies["@deepseek-ai/dsh"]`: `>=0.1.2-rc.1 <0.2.0` (DSH compatibility range)
+- `peerDependencies["@deepseek-ai/dsh"]`: `>=0.1.2-rc.1 <0.3.0` (DSH compatibility range; 0.1.5 / 0.1.7 / 0.2.0 verified)
 - `engines.node`: `^22.19.0 || >=24.0.0`
 - `peerDependencies["react"]`: `^18.2.0` (browser rendering only)
 
 **Runtime permissions**
 - `files`: reads only `~/.dsh/sessions/` session JSONL (cost stats); never writes or mutates any session file
-- `network`: only the DeepSeek official endpoints — `api.deepseek.com` (`GET /user/balance`) and `api-docs.deepseek.com` pricing page (fetched every 12h); no third-party proxy
+- `network`: only the DeepSeek official endpoints — `api.deepseek.com` (`GET /user/balance`, used only when unsigned or on an older host; a signed-in runtime reads the host's `deepseekAccount` service instead, so no plugin request leaves the process) and `api-docs.deepseek.com` pricing page (fetched every 12h); no third-party proxy
 - `commands`: **none**. Session logs are decompressed with Node's built-in zstd (`node:zlib`, needs Node >=22.15), so no `zstd` binary and no `PATH` dependency
-- `credentials`: reads `DEEPSEEK_API_KEY` (resolved via the host credentials service), used only in the host process behind a loopback-only route guard; the browser never sees the key
+- `credentials`: reads `DEEPSEEK_API_KEY` on the fallback path only (resolved via the host credentials service), used only in the host process behind a loopback-only route guard; the browser never sees the key. A signed-in account reads no key at all
 - All host routes are bound to the loopback address and unreachable externally
 
 **External services**
-- DeepSeek official balance endpoint `GET /user/balance` (on click / 60s refresh)
+- Host account service `deepseekAccount` (DSH 0.2.0+ with a signed-in account; the balance is the official page's own value, truncated to cents the way that page displays it)
+- DeepSeek official balance endpoint `GET /user/balance` (fallback: unsigned or older host; on click / 60s refresh)
 - DeepSeek official pricing page (on startup + every 12h, for peak/off-peak rates)
 
 **Failure bounds**
@@ -191,6 +192,31 @@ This section is for the DSH Store / plugin audit: dependencies, runtime permissi
 
 ## Changelog
 
+### v0.6.3 — China's statutory holidays are now priced off-peak all day
+- 🐛 **Fixed**: the peak/off-peak check excluded weekends but **not China's statutory holidays**. The official rule is "Beijing time **Mon–Fri (China's statutory holidays excluded)** 09:00–12:00 and 14:00–18:00 are peak; everything else — weekends and statutory holidays all day — is off-peak", so a statutory holiday falling on a weekday was **priced at 2×**. Measured against the built-in 2026 arrangement: Spring Festival 2/18, Dragon Boat 6/19, Mid-Autumn 9/25 and National Day 10/1–10/7 were all mispriced as peak, doubling their cost
+- 📅 **The 2026 statutory holiday table is built in** ([国办发明电〔2025〕7号](https://www.gov.cn/zhengce/zhengceku/202511/content_7047091.htm); **33 days** across New Year, Spring Festival, Qingming, Labour Day, Dragon Boat, Mid-Autumn and National Day — **19 of them on weekdays**, exactly the ones that used to be priced at 2×), matched on the Beijing calendar day. Make-up workdays that fall on a Saturday or Sunday were already off-peak (the official rule lists weekends outright); they are now pinned by tests too
+- 🧪 **Differential verification**: 14 fixture sessions (each with its own fake `$HOME`, driven through the real route, real zstd frames and real pricing) assert ¥1.00 all day on holidays, ¥2.00 inside a normal weekday peak window, and the first working day after a holiday plus the lunch/evening boundaries — **14/14 pass**. Running the same cases against the pre-fix code fails all six holiday cases (¥2.00)
+- ⚠️ **Maintenance note**: the table needs an annual refresh (the State Council publishes the next arrangement, usually in the previous November); years it does not cover fall back to the old weekend-only rule
+- 📄 **Docs**: the pricing section and the peak/off-peak tooltips (both languages) now state "statutory holidays excluded / make-up workdays included" precisely
+
+### v0.6.2 — the balance now prefers the official account service (same source as the settings page, no API key needed)
+- ✨ **The balance is read from the host account service `deepseekAccount` (provided by `@deepseek-ai/dsh-deepseek-account-platform`)** whenever DSH >= 0.2.0 ships it **and a DeepSeek account is signed in**. That service is the official "Settings → Account & balance" page's own source, so the card and the settings page show the same number. Amounts follow the official rule — **positive values are truncated to cents** (`55.6787307800000000` → `55.67`, matching the page) — with the purchased wallet from `value[]`, the granted wallet from `bonusWallets[]`, their sum as the total, and one entry per currency
+- 🚪 **Every fallback is unchanged**: when signed out, when the host has no such service (DSH 0.1.x), or when the account read fails (expired token and friends), the balance comes from the original `GET /user/balance` + `DEEPSEEK_API_KEY`, exactly as in 0.6.1; a failed account read logs one warning saying why
+- 🔑 **Signed in, no key is read at all**: the balance no longer hard-depends on `DEEPSEEK_API_KEY`, so an account-only install still shows a balance
+- 🔎 **Auditable**: the balance response carries a `balanceSource` field (`deepseekAccount` or the fallback path), so it is always clear where a number came from
+- 🧪 **Verified**: a fake cordis ctx drives the **real routes** through 13 assertions — account mapping, multi-currency and bonus summation, cent truncation, signed-out fallback, missing-service fallback, throwing-account fallback with a warning, account winning over an API key, the agent billing tool reading the same source, and a guard that the credential key's spelling is never mistaken for the service name
+- 📏 **Measured same-source** (2026-09-29, after a real restart): the official `account/getBalance` returned `¥55.0685054200000000` while the card showed `¥55.06` — identical to the cent
+
+> **Why this release, said out loud.**
+> After desktop 0.2.0 shipped, the official app put a signed-in balance page under Settings → Account & balance. **That means the platform now recognises the pain point** — people need to see their balance. It just takes several clicks to reach, which for everyday use still loses to a card that sits in the sidebar and reads at a glance.
+>
+> So this release adapts anyway: the balance is read from the official account service, identical to the settings page to the cent, and no API key is needed. But we are not pretending otherwise — now that the platform has taken the need over, **this plugin will be replaced sooner or later**. A little wistful, yet a tool's job is to make itself unnecessary: **we are entering the farewell period.** From here we only keep compatibility maintenance in step with DSH, with no new features. Thanks for letting it watch your balance all this time.
+
+### v0.6.1 — compatibility range widened to DSH 0.2.0 (upgrading would otherwise drop the plugin silently)
+- 🐛 **Fixed**: DSH 0.2.0 adds a plugin compatibility gate (`evaluatePluginCompatibility` in `dsh-app-boot`). It matches every declared `@deepseek-ai/dsh` / `@deepseek-ai/dsh-*` peer range against the running version — **prereleases included** (`semver.satisfies(..., { includePrerelease: true })`) — and a mismatching, non-exempted bundle is **skipped silently at startup** (`loadProfileDirectory` files it under `skippedBundles`: no error, no manifest change). The old declaration `>=0.1.2-rc.1 <0.2.0` happened to cover `0.2.0-rc.1` (which is why the widget works on the current 0.2.0-rc.1 desktop, verified live) but **not 0.2.0 final** — so the first stable-desktop upgrade would have made the sidebar card vanish, with the plugin manager demanding a manual `dsh plugin allow-version` exemption. The range is now `<0.3.0` (verified to cover 0.2.0 / 0.2.1 / 0.3.0-rc.1)
+- ✅ **Live 0.2.0 compatibility check** (against the 0.2.0-rc.1 desktop app, driven in a real browser): all five host routes answer; session logs are still `SESSION_FORMAT_VERSION = 4` and `totalTokens = inputTokens + outputTokens + cacheReadTokens` holds for all 394 usage events (pricing math unchanged); the `sidebar.footer.action` slot, the `dsh.client.platform === "web"` loading gate and the `IconRefreshOutlineRegular` name are all unchanged; every one of the 19 `--dsw-*` tokens the plugin uses still exists (15 of them redefined under `body[data-ds-dark-theme]`, and the popover portalled into `document.body` still inherits the theme); React is still 18.3.1; the 36×36 collapsed-rail button and the popover anchoring behave as before
+- 📦 **Scope**: the compatibility range in `package.json` plus documentation; no runtime code changed
+
 ### v0.6.0 — desktop app support, and a UI that matches the desktop shell
 - 🖥️ **Desktop app support (DSH 0.1.7 / DeepSeek Harness.app)**
   - **Session logs are no longer decompressed by the `zstd` CLI** — Node's built-in zstd (`node:zlib`) does it instead. The desktop app is launched by the GUI, so its PATH is only `/usr/bin:/bin:/usr/sbin:/sbin` and the Homebrew `zstd` is invisible: every cost tier (today's spend, last prompt) failed outright there

package/README.md

@@ -32,7 +32,7 @@ DeepSeek Harness (DSH) **Web GUI 与桌面版**通用的余额与成本小部件
 
 ## 功能
 
-- **账户余额** — 点击图标时经宿主代理查询 DeepSeek 官方 `GET /user/balance`，展示 `¥` 余额；余额数字按阈值自动变色（充足 / 低于 `lowThreshold` 变黄 / 低于 `criticalThreshold` 变红）；API key 只在宿主进程内读取（凭据服务），浏览器不接触密钥。
+- **账户余额** — 余额优先取自宿主账号服务 `deepseekAccount`（由 `@deepseek-ai/dsh-deepseek-account-platform` 提供，即官方「设置 → 账号与余额」页的同一来源，因此两处显示同一个数字，且**不需要 API Key**）；未登录或旧版宿主（0.1.x）时回退到 DeepSeek 官方 `GET /user/balance`。展示 `¥` 余额，按阈值自动变色（充足 / 低于 `lowThreshold` 变黄 / 低于 `criticalThreshold` 变红）；API key 只在宿主进程内读取（凭据服务），浏览器不接触密钥。
 - **最近一次提问成本（估算）** — 从最近活跃会话文件解析最后一个 turn 的 token 用量 × 单价，回答"刚才那条提问花了多少"；下方标注该会话的**会话名**。
 - **今日·本会话成本（估算）** — 当前会话今天（自然日）产生的 token 用量 × DeepSeek 官方峰谷定价表计算，随当前会话模型（默认 `deepseek-v4-flash`，可在配置中改为 `deepseek-v4-pro`）与北京时间高峰/空闲时段自动切换。
 - **今日·本工作区成本（估算）** — 遍历当前工作区（由当前会话锚定）下的所有会话，累加今天的 token 用量 × 单价。
@@ -141,7 +141,7 @@ DSH 的插件配置统一放在这个文件里：
 
 ## 定价说明
 
-内置 DeepSeek 官方 2026-09-10 峰谷定价（元 / 百万 tokens），高峰时段为北京时间**周一至周五** 09:00–12:00、14:00–18:00（周末全天为空闲时段），价格为空闲时段两倍：
+内置 DeepSeek 官方 2026-09-10 峰谷定价（元 / 百万 tokens），高峰时段为北京时间**周一至周五（不含中国法定节假日）** 09:00–12:00、14:00–18:00；**其余时段全部为空闲时段**，包括周末（含调休上班的周六/周日）与中国法定节假日全天，价格为空闲时段两倍。
 
 | 模型 | 时段 | 缓存命中(输入) | 缓存未命中(输入) | 输出 |
 | --- | --- | --- | --- | --- |
@@ -164,19 +164,20 @@ DSH 的插件配置统一放在这个文件里：
 
 **依赖与兼容**
 - 零运行时依赖：不 import 任何 `@deepseek-ai/*` 包，宿主端无第三方依赖
-- `peerDependencies["@deepseek-ai/dsh"]`: `>=0.1.2-rc.1 <0.2.0`（DSH 兼容范围）
+- `peerDependencies["@deepseek-ai/dsh"]`: `>=0.1.2-rc.1 <0.3.0`（DSH 兼容范围；0.1.5 / 0.1.7 / 0.2.0 实测通过）
 - `engines.node`: `^22.19.0 || >=24.0.0`
 - `peerDependencies["react"]`: `^18.2.0`（仅浏览器端渲染）
 
 **运行时权限**
 - `files`：只读 `~/.dsh/sessions/` 下的会话 JSONL（成本统计）；不写入、不修改任何会话文件
-- `network`：仅请求 DeepSeek 官方端点——`api.deepseek.com`（`GET /user/balance` 余额）与 `api-docs.deepseek.com` 定价页（每 12h 抓取）；不走任何第三方代理
+- `network`：仅请求 DeepSeek 官方端点——`api.deepseek.com`（`GET /user/balance`，仅在未登录/旧版宿主时使用；已登录时余额走宿主的 `deepseekAccount` 服务，不产生本插件的网络请求）与 `api-docs.deepseek.com` 定价页（每 12h 抓取）；不走任何第三方代理
 - `commands`：**不执行任何命令**。会话解压改用 Node 内置 zstd（`node:zlib`，需 Node ≥22.15），不再依赖 `zstd` 可执行文件与 `PATH`
-- `credentials`：读取 `DEEPSEEK_API_KEY`（经宿主凭据服务解析），仅宿主进程使用、loopback-only 路由守卫；浏览器不接触密钥
+- `credentials`：仅在回退路径上读取 `DEEPSEEK_API_KEY`（经宿主凭据服务解析），仅宿主进程使用、loopback-only 路由守卫；浏览器不接触密钥。已登录账号时余额不读任何密钥
 - 所有 host 路由均绑定 load 回环地址，外部不可达
 
 **外部服务**
-- DeepSeek 官方余额接口 `GET /user/balance`（点击/60s 刷新时调用）
+- 宿主账号服务 `deepseekAccount`（DSH 0.2.0+ 且已登录账号时；余额与官方账号页同源，金额按官方规则截断到分）
+- DeepSeek 官方余额接口 `GET /user/balance`（回退路径：未登录或旧版宿主；点击/60s 刷新时调用）
 - DeepSeek 官方定价页（启动时 + 每 12h 抓取，用于峰谷单价）
 
 **失败边界**
@@ -188,6 +189,31 @@ DSH 的插件配置统一放在这个文件里：
 
 ## 版本历史
 
+### v0.6.3 — 中国法定节假日全天按空闲时段计价
+- 🐛 **修复**：峰/谷判断只排除了周末，**没有排除中国法定节假日**。官方规则是「北京时间**周一至周五（不含中国法定节假日）** 09:00–12:00、14:00–18:00 为高峰时段；其余时段，包括周末及中国法定节假日全天均为空闲时段」——所以落在工作日的法定假日，此前会被**按 2× 计价**。以内置 2026 年安排实测：春节 2/18、端午 6/19、中秋 9/25、国庆 10/1–10/7 全部被误判为峰时，成本翻倍
+- 📅 **内置 2026 年法定节假日表**（[国办发明电〔2025〕7号](https://www.gov.cn/zhengce/zhengceku/202511/content_7047091.htm)，含元旦/春节/清明/劳动/端午/中秋/国庆共 **33 天**，其中 **19 天落在工作日**——正是此前会被 2× 计价的那部分），按北京时间日历日匹配；调休上班的周六/周日**本来就已按周末计**（官方明确按空闲时段），本次一并写入测试用例防回归
+- 🧪 **差分验证**：新建 14 个夹具会话（每个自带假 `$HOME`，走真实路由 + 真实 zstd 帧 + 真实定价），断言节假日全天 ¥1.00、普通工作日峰窗 ¥2.00、节后首个工作日与午休/晚间边界均正确 —— **14/14 通过**；用修复前的代码跑同一组用例，6 个节假日用例全部失败（¥2.00）
+- ⚠️ **维护提示**：节假日表需每年更新（国务院办公厅通常在上一年 11 月发布下一年安排），未覆盖的年份会退回"仅排除周末"的旧行为
+- 📄 **文档**：定价说明与峰谷 tooltip（中英）补上"不含法定节假日 / 含调休上班日"的准确表述
+
+### v0.6.2 — 余额优先读官方账号服务（与设置页同源，不再需要 API Key）
+- ✨ **余额优先取自宿主账号服务 `deepseekAccount`**：当 DSH ≥ 0.2.0 **且已登录 DeepSeek 账号**时，余额改读这个服务——它就是官方「设置 → 账号与余额」页的数据来源，所以卡片与设置页显示同一个数字。金额按官方规则处理：**正金额截断至分**（`55.6787307800000000` → `55.67`，与设置页一致），充值余额 = 官方 `value[]`、赠金余额 = `bonusWallets[]`，总额为两者之和，多币种各自成组
+- 🚪 **降级路径完全不变**：未登录、宿主无该服务（DSH 0.1.x）、或账号读取失败（token 过期等）时，一律回退到原来的 `GET /user/balance` + `DEEPSEEK_API_KEY`，行为与 0.6.1 相同；账号读取失败会记一条 warn 说明原因
+- 🔑 **登录态下余额不读任何密钥**：不再强制依赖 `DEEPSEEK_API_KEY`，纯账号模式（不配 API Key）也能显示余额
+- 🔎 **可审计**：余额响应新增 `balanceSource` 字段（`deepseekAccount` 或回退路径），便于确认这一次的数字从哪来
+- 🧪 **验证**：用假 cordis ctx 驱动**真实路由**跑 13 项断言全通过——账号映射 / 多币种与赠金求和 / 截断到分、未登录回退、服务缺失回退、账号抛错回退并告警、账号优先于 API Key、agent 计费工具同源，以及"凭据 key 的拼写不能被误当成服务名"这条防回归
+- 📏 **实测同源**（2026-09-29，真机重启后）：官方 `account/getBalance` 返回 `¥55.0685054200000000`，插件卡片显示 `¥55.06` —— 逐分一致
+
+> **关于这个版本的背景，也说给我们自己听。**
+> 桌面版 0.2.0 上线后，官方在「设置 → 账号与余额」里放出了登录后的余额页。**这说明官方已经承认"用户需要随时知道余额"这个痛点**——只是它要多点几下才能看到，日常用起来仍然不如侧边栏常驻、一眼可读。
+>
+> 所以这一版还是做了适配：余额改读官方账号服务，与设置页逐分一致，并且不再需要 API Key。但我们心里清楚，官方既然已经把这个需求接过去了，**这个插件被替代只是时间问题**。有点不舍，不过工具的价值本来就应该由平台自己长出来——**接下来进入告别期**：后续只跟随 DSH 版本做必要的兼容性维护，不再扩展新功能。谢谢一路用它看住余额的每一天。
+
+### v0.6.1 — 兼容范围放宽到 DSH 0.2.0（否则升级后插件会被静默摘掉）
+- 🐛 **修复**：DSH 0.2.0 新增了插件兼容性闸门（`dsh-app-boot` 的 `evaluatePluginCompatibility`），它把 `peerDependencies` 里每个 `@deepseek-ai/dsh` / `@deepseek-ai/dsh-*` 范围与运行时版本比对，**且预发布版本参与范围匹配**（`semver.satisfies(..., { includePrerelease: true })`）；不匹配且未被豁免的 bundle 在启动时被**静默跳过**（`loadProfileDirectory` 收进 `skippedBundles`，不报错、也不改 manifest）。旧声明 `>=0.1.2-rc.1 <0.2.0` 恰好覆盖 `0.2.0-rc.1`（所以在 0.2.0-rc.1 桌面上一切正常，实测确认），但**不覆盖 0.2.0 正式版**——桌面版一升级，侧边栏卡片就会直接消失，插件管理器还会要求 `dsh plugin allow-version` 手动豁免。现放宽为 `<0.3.0`（实测覆盖 0.2.0 / 0.2.1 / 0.3.0-rc.1）
+- ✅ **0.2.0 兼容性实测**（在 0.2.0-rc.1 桌面版 + 真实浏览器上运行）：宿主五条路由全部正常；会话日志仍为 `SESSION_FORMAT_VERSION = 4`，`totalTokens = inputTokens + outputTokens + cacheReadTokens` 在 394 条 usage 事件上全部成立（计价公式未变）；`sidebar.footer.action` 槽位、`dsh.client.platform === "web"` 加载闸门、`IconRefreshOutlineRegular` 图标名均未变；插件用到的 19 个 `--dsw-*` token 全部存在（其中 15 个在 `body[data-ds-dark-theme]` 下重定义，弹层 portal 到 `document.body` 仍能继承主题）；React 仍为 18.3.1；收起态 36×36 图标按钮与弹层定位照常
+- 📦 **范围**：仅 `package.json` 的兼容范围声明与文档，运行代码无变化
+
 ### v0.6.0 — 适配 DSH 桌面版，界面与桌面端视觉对齐
 - 🖥️ **适配桌面版（DSH 0.1.7 / DeepSeek Harness.app）**
   - **会话解压不再依赖 `zstd` 命令行**，改用 Node 内置 zstd（`node:zlib`）。桌面版由 GUI 启动，进程 PATH 只有 `/usr/bin:/bin:/usr/sbin:/sbin`，找不到 Homebrew 的 zstd——此前在桌面端「今日花费 / 最近一次提问」等所有成本档位都会直接报错

package/lib/client.js

@@ -564,8 +564,8 @@ window.__ModuleLoader__.load({
 			"todayCostShort": "今日·全部",
 			"peak.active": "峰时",
 			"peak.offpeak": "谷时",
-			"peak.tooltip.active": "当前为峰时（周一至周五 09:00-12:00、14:00-18:00，价格翻倍）：输入 ¥{input}/M · 输出 ¥{output}/M",
-			"peak.tooltip.offpeak": "当前为谷时（其余时段含周末全天，半价）：输入 ¥{input}/M · 输出 ¥{output}/M",
+			"peak.tooltip.active": "当前为峰时（周一至周五 09:00-12:00、14:00-18:00，不含法定节假日，价格翻倍）：输入 ¥{input}/M · 输出 ¥{output}/M",
+			"peak.tooltip.offpeak": "当前为谷时（其余时段：周末含调休上班日、法定节假日全天，半价）：输入 ¥{input}/M · 输出 ¥{output}/M",
 			"sessionNote": "基于最近活跃会话：",
 			"hint": "价格为估算值，实际以官方账单为准。",
 			"topUp": "去充值",
@@ -595,8 +595,8 @@ window.__ModuleLoader__.load({
 			"todayCostShort": "Today · all",
 			"peak.active": "Peak",
 			"peak.offpeak": "Off-peak",
-			"peak.tooltip.active": "Peak hours now (Mon-Fri 09:00-12:00, 14:00-18:00, 2× price): input ¥{input}/M · output ¥{output}/M",
-			"peak.tooltip.offpeak": "Off-peak hours now (all other times incl. weekends, half price): input ¥{input}/M · output ¥{output}/M",
+			"peak.tooltip.active": "Peak hours now (Mon-Fri 09:00-12:00, 14:00-18:00, statutory holidays excluded, 2× price): input ¥{input}/M · output ¥{output}/M",
+			"peak.tooltip.offpeak": "Off-peak hours now (everything else: weekends incl. make-up workdays, statutory holidays all day, half price): input ¥{input}/M · output ¥{output}/M",
 			"sessionNote": "Based on most recent session:",
 			"hint": "Prices are estimates; actual billing from the provider is authoritative.",
 			"topUp": "Top up",

package/lib/index.js

@@ -180,10 +180,107 @@ async function resolveApiKey(ctx, config) {
 }
 
 /**
- * Query the official DeepSeek /user/balance endpoint.
+ * The host account service behind the official "Settings → Account & balance"
+ * page. `@deepseek-ai/dsh-deepseek-account-platform` registers it as
+ * `deepseekAccount` (its `super(ctx, "deepseekAccount")`, and the account
+ * controller's `inject = ["deepseekAccount", ...]`), shipped from DSH 0.2.0 on;
+ * on older hosts and profiles without an account backend ctx.get() returns
+ * undefined. The package's credential key happens to be spelled differently
+ * (`deepseek-account-platform`) and is deliberately not used here.
+ */
+const ACCOUNT_SERVICE = "deepseekAccount";
+
+/**
+ * A platform wallet amount as integer cents, truncated below a cent — the same
+ * rule the official page uses for positive amounts ("正金额截断至分").
+ * @returns BigInt cents, or null when the value is not a decimal string.
+ */
+function centsOf(value) {
+	const match = /^(-?)(\d+)(?:\.(\d+))?$/.exec(String(value ?? "").trim());
+	if (match === null) return null;
+	const cents = BigInt(match[2]) * 100n + BigInt((match[3] ?? "").slice(0, 2).padEnd(2, "0"));
+	return match[1] === "-" ? -cents : cents;
+}
+
+/** Render integer cents as a two-decimal string. */
+function formatCents(cents) {
+	const negative = cents < 0n;
+	const absolute = negative ? -cents : cents;
+	const text = `${absolute / 100n}.${String(absolute % 100n).padStart(2, "0")}`;
+	return negative ? `-${text}` : text;
+}
+
+/**
+ * Reshape an account balance view into the /user/balance payload the client
+ * already reads (purchased + granted wallets per currency).
+ */
+function accountBalancePayload(view) {
+	const wallets = Array.isArray(view.value) ? view.value : [];
+	const bonuses = Array.isArray(view.bonusWallets) ? view.bonusWallets : [];
+	const currencies = [];
+	for (const wallet of [...wallets, ...bonuses]) {
+		if (typeof wallet?.currency === "string" && !currencies.includes(wallet.currency)) currencies.push(wallet.currency);
+	}
+	const sumCents = (list, currency) => list.reduce((total, wallet) => {
+		if (wallet?.currency !== currency) return total;
+		const cents = centsOf(wallet.balance);
+		return cents === null ? total : total + cents;
+	}, 0n);
+	const balance_infos = currencies.map((currency) => {
+		const toppedUp = sumCents(wallets, currency);
+		const granted = sumCents(bonuses, currency);
+		return {
+			currency,
+			total_balance: formatCents(toppedUp + granted),
+			granted_balance: formatCents(granted),
+			topped_up_balance: formatCents(toppedUp)
+		};
+	});
+	return {
+		is_available: balance_infos.some((info) => Number(info.total_balance) > 0),
+		balance_infos,
+		balanceSource: ACCOUNT_SERVICE
+	};
+}
+
+/**
+ * Read the balance from the host account service — the official page's own
+ * source, so both surfaces show the same number, and no API key is involved.
+ * @returns the /user/balance-shaped payload, or undefined when the service is
+ * absent, the user is not signed in, or the read fails (caller falls back).
+ */
+async function fetchAccountBalance(ctx) {
+	let account;
+	try {
+		account = ctx.get(ACCOUNT_SERVICE);
+	} catch {
+		return void 0;
+	}
+	if (account === void 0 || typeof account.getBalance !== "function") return void 0;
+	try {
+		const view = await account.getBalance({
+			version: "dsh-balance-widget",
+			locale: Intl.DateTimeFormat().resolvedOptions().locale,
+			timezoneOffsetSeconds: -new Date().getTimezoneOffset() * 60
+		});
+		if (view?.status !== "ready") return void 0;
+		const payload = accountBalancePayload(view);
+		return payload.balance_infos.length === 0 ? void 0 : payload;
+	} catch (error) {
+		ctx.logger?.warn?.("[dsh-balance-widget] account balance read failed: %s", error instanceof Error ? error.message : String(error));
+		return void 0;
+	}
+}
+
+/**
+ * Query the account balance: the host's account service when the user signed in
+ * with a DeepSeek account, else the official /user/balance endpoint with the API
+ * key.
  * @returns { ok: true, ...payload } | { ok: false, error }
  */
 async function fetchBalance(ctx, config) {
+	const account = await fetchAccountBalance(ctx);
+	if (account !== void 0) return { ok: true, ...account };
 	let apiKey;
 	try {
 		apiKey = await resolveApiKey(ctx, config);
@@ -261,17 +358,56 @@ const PRICING_ALIASES = {
 	"deepseek-official": "deepseek-v4-flash"
 };
 
+/**
+ * Statutory holiday days (Beijing calendar dates) of the 2026 arrangement,
+ * per 国办发明电〔2025〕7号. DeepSeek bills Beijing time 周一至周五（**不含中国
+ * 法定节假日**）09:00-12:00 / 14:00-18:00 as peak; everything else — weekends
+ * (including 调休 workdays) and statutory holidays all day — is off-peak, so a
+ * weekday holiday must never be priced as peak. Weekend days are listed too:
+ * harmless here, and it keeps the table a verbatim copy of the notice.
+ * Refresh once a year, when the State Council publishes the next arrangement
+ * (usually the previous November).
+ */
+const CN_HOLIDAYS = new Set([
+	// 元旦：1月1日（周四）至3日（周六）
+	"2026-01-01", "2026-01-02", "2026-01-03",
+	// 春节：2月15日（周日）至23日（周一）
+	"2026-02-15", "2026-02-16", "2026-02-17", "2026-02-18", "2026-02-19",
+	"2026-02-20", "2026-02-21", "2026-02-22", "2026-02-23",
+	// 清明节：4月4日（周六）至6日（周一）
+	"2026-04-04", "2026-04-05", "2026-04-06",
+	// 劳动节：5月1日（周五）至5日（周二）
+	"2026-05-01", "2026-05-02", "2026-05-03", "2026-05-04", "2026-05-05",
+	// 端午节：6月19日（周五）至21日（周日）
+	"2026-06-19", "2026-06-20", "2026-06-21",
+	// 中秋节：9月25日（周五）至27日（周日）
+	"2026-09-25", "2026-09-26", "2026-09-27",
+	// 国庆节：10月1日（周四）至7日（周三）
+	"2026-10-01", "2026-10-02", "2026-10-03", "2026-10-04", "2026-10-05",
+	"2026-10-06", "2026-10-07"
+]);
+
+/** The Beijing (UTC+8) calendar day of an instant, as "YYYY-MM-DD". */
+function beijingDay(date) {
+	const beijing = new Date(date.getTime() + 8 * 60 * 60 * 1000);
+	const month = String(beijing.getUTCMonth() + 1).padStart(2, "0");
+	const day = String(beijing.getUTCDate()).padStart(2, "0");
+	return `${beijing.getUTCFullYear()}-${month}-${day}`;
+}
+
 /**
  * Whether `date` falls inside a Beijing-time (UTC+8) peak window.
  * DeepSeek's peak pricing applies to Beijing time 09:00-12:00 and 14:00-18:00
- * on weekdays only (Mon-Fri); the whole weekend is off-peak. The window is
- * computed in UTC+8 explicitly instead of the machine's local time, which also
- * supplies the Beijing weekday.
+ * on weekdays only, and explicitly excludes China's statutory holidays; the
+ * whole weekend counts as off-peak even when a 调休 turns it into a workday.
+ * The window is computed in UTC+8 explicitly instead of the machine's local
+ * time, which also supplies the Beijing weekday and calendar day.
  */
 function isPeak(date) {
 	const beijing = new Date(date.getTime() + 8 * 60 * 60 * 1000);
 	const day = beijing.getUTCDay(); // 0 = Sunday, 6 = Saturday
 	if (day === 0 || day === 6) return false;
+	if (CN_HOLIDAYS.has(beijingDay(date))) return false;
 	const hour = beijing.getUTCHours();
 	return (hour >= 9 && hour < 12) || (hour >= 14 && hour < 18);
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-balance-widget",
   "description": "Balance & cost widget for the DeepSeek Harness GUI (web and desktop app): a sidebar footer card shows the DeepSeek account balance and today's costs; clicking opens a popover with a five-tier cost breakdown (last prompt with session name / today-this-session / today-this-workspace / today-all-workspaces), peak/off-peak status tag, term explanations, and a one-click top-up link. Zero external dependencies — works on Node 24.",
-  "version": "0.6.0",
+  "version": "0.6.3",
   "type": "module",
   "main": "lib/index.js",
   "files": [
@@ -31,7 +31,7 @@
   },
   "peerDependencies": {
     "react": "^18.2.0",
-    "@deepseek-ai/dsh": ">=0.1.2-rc.1 <0.2.0"
+    "@deepseek-ai/dsh": ">=0.1.2-rc.1 <0.3.0"
   },
   "keywords": [
     "deepseek",