dsh-deepseek-account 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,9 @@
+# Changelog
+
+## 0.1.0 - 2026-08-30
+
+- Create an independent DeepSeek Harness account plugin with a loopback-only balance RPC and a credential-isolated Host boundary.
+- Display CNY/USD total, granted, and topped-up balances in the sidebar and a dedicated settings page.
+- Open the fixed official DeepSeek Platform balance page for web sign-in and top-up without receiving cookies, payment data, or payment authority.
+- Render the DeepSeek card for DeepSeek and unknown custom Providers, hide it for Grok and Codex, and avoid balance requests while another Provider is selected.
+- Bound balance response size and schema, preserve decimal strings, coalesce concurrent reads, rate-limit refreshes, and retain a marked stale snapshot after transient failure.

package/CONTRIBUTING.md

@@ -0,0 +1,5 @@
+# Contributing
+
+Please open an issue before a substantial change. Do not include API keys, cookies, OAuth codes, payment details, account screenshots, or private balance responses in issues, tests, commits, or logs.
+
+Development branches must use the `yukiryou/` prefix. Run `npm run check` before opening a pull request and keep Host credential handling separate from browser code.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 YukiRyou
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.en.md

@@ -0,0 +1,32 @@
+# dsh-deepseek-account
+
+An independent DeepSeek Harness account plugin that:
+
+- shows the balance associated with the configured DeepSeek API key when the current conversation selects DeepSeek or an unknown custom Provider;
+- presents CNY/USD total, granted, and topped-up balances in a dedicated settings page;
+- opens the official DeepSeek Platform for web sign-in and top-up.
+
+The sidebar component returns no content for Grok or Codex, allowing those Provider plugins to display their own usage limits. This plugin never receives web cookies or payment details and never submits a payment.
+
+## Security boundary
+
+`DEEPSEEK_API_KEY` is resolved only by the Host through the Harness credential service. The browser can request only a validated balance snapshot through a loopback-only RPC. The build fails if the client artifact contains credential resolution or an Authorization header.
+
+The top-up destination is fixed to `https://platform.deepseek.com/balance`; sign-in and payment happen entirely on the official DeepSeek website.
+
+## Installation
+
+After the formal release, install the exact version:
+
+```sh
+dsh plugin --profile web add dsh-deepseek-account@0.1.0
+dsh web
+```
+
+## Development
+
+```sh
+npm run check
+```
+
+The release branch is `yukiryou/v0.1.0`. `dist/` is generated during build and packaging and is not committed.

package/README.md

@@ -0,0 +1,34 @@
+# dsh-deepseek-account
+
+DeepSeek Harness 的独立账户插件，负责：
+
+- 在当前对话选择 DeepSeek 或无法识别的自定义 provider 时显示 API Key 所属账户余额；
+- 在设置页展示 CNY/USD 总余额、赠送余额和充值余额；
+- 打开 DeepSeek 官方平台完成网页登录与充值。
+
+选择 Grok 或 Codex 时，本插件的侧栏卡片返回空内容，由对应 provider 插件展示自己的使用额度。插件不接收网页 Cookie 或支付资料，也不会代替用户提交付款。
+
+## 安全边界
+
+`DEEPSEEK_API_KEY` 只在 Host 侧通过 Harness credential service 解析。浏览器侧只能调用 loopback RPC 获取经过校验的余额快照，构建脚本会拒绝包含凭据解析或 Authorization header 的客户端产物。
+
+充值入口固定为 `https://platform.deepseek.com/balance`，登录和付款完全发生在 DeepSeek 官方网页。
+
+## 开发
+
+```bash
+npm run check
+```
+
+仓库开发分支为 `yukiryou/v0.1.0`。`dist/` 由构建和打包流程生成，不提交到 Git。
+
+## 安装
+
+正式发布后安装精确版本：
+
+```sh
+dsh plugin --profile web add dsh-deepseek-account@0.1.0
+dsh web
+```
+
+英文说明见 [README.en.md](README.en.md)。

package/SECURITY.md

@@ -0,0 +1,5 @@
+# Security Policy
+
+Report vulnerabilities privately through GitHub Security Advisories for this repository. Do not open a public issue containing credentials, cookies, account data, payment details, or an exploitable proof of concept.
+
+Supported releases receive security fixes on the latest stable version. The plugin intentionally has no payment authority: sign-in and payment remain on the fixed official DeepSeek website.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,3 @@
+# Third-Party Notices
+
+The runtime package declares DeepSeek Harness modules as peer dependencies and does not copy their source code or assets. Those modules are distributed by their respective authors under their published licenses.

package/deepseek-account.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: deepseek-account
+      name: dsh-deepseek-account

package/dist/client/client.js

@@ -0,0 +1,188 @@
+/* global document, window */
+
+window.__ModuleLoader__.load({
+  id: "dsh-deepseek-account",
+  factory: (require) => {
+    const module = { exports: {} }
+    const React = require("react")
+    const namespace = "settings.deepseekAccount"
+    const channel = "/dsh-deepseek-account"
+    const topUpUrl = "https://platform.deepseek.com/balance"
+    const dictionaries = {
+      zh: {
+        nav: "DeepSeek 账户", title: "DeepSeek 账户", description: "查看当前 API Key 所属账户余额，并前往 DeepSeek 官方平台充值。",
+        balance: "账户余额", total: "总余额", granted: "赠送余额", toppedUp: "充值余额", refresh: "刷新", refreshing: "刷新中…",
+        topUp: "登录并充值", officialNote: "登录和付款仅在 DeepSeek 官方网页完成；插件不读取网页 Cookie，也不会代为提交付款。",
+        updated: "数据更新时间", loading: "正在读取余额…", unavailable: "暂时无法读取余额。", unconfigured: "请先在模型设置中配置 DeepSeek API Key。",
+        unauthorized: "当前 API Key 无效或已失效。", rateLimited: "查询过于频繁，请稍后重试。", stale: "当前展示上一次成功读取的余额。",
+      },
+      en: {
+        nav: "DeepSeek account", title: "DeepSeek account", description: "View the balance of the account associated with the current API key and open the official DeepSeek Platform to top up.",
+        balance: "Account balance", total: "Total", granted: "Granted", toppedUp: "Topped up", refresh: "Refresh", refreshing: "Refreshing…",
+        topUp: "Sign in and top up", officialNote: "Sign-in and payment happen only on the official DeepSeek website. The plugin never reads web cookies or submits payment.",
+        updated: "Updated", loading: "Reading balance…", unavailable: "The balance is temporarily unavailable.", unconfigured: "Configure a DeepSeek API key in model settings first.",
+        unauthorized: "The current API key was rejected.", rateLimited: "Too many balance requests. Try again later.", stale: "Showing the last successfully verified balance.",
+      },
+    }
+
+    function accountClient(connection) {
+      return Object.freeze({
+        async read(force, signal) {
+          const result = await connection.rpc.call(channel, "read", { force: force === true }, signal)
+          if (!plainRecord(result) || result.ok !== true) throw new Error("DeepSeek account RPC failed")
+          const snapshot = safeSnapshot(result.value)
+          if (snapshot === undefined) throw new Error("DeepSeek account RPC returned invalid data")
+          return snapshot
+        },
+      })
+    }
+
+    function safeSnapshot(value) {
+      if (!plainRecord(value)) return undefined
+      if (value.status === "ready") return safeReady(value)
+      if (value.status !== "unavailable" || !["credential-unconfigured", "credential-unauthorized", "rate-limited", "network", "invalid-response"].includes(value.reason)) return undefined
+      const lastGood = value.lastGood === undefined ? undefined : safeReady(value.lastGood)
+      if (value.lastGood !== undefined && lastGood === undefined) return undefined
+      return lastGood === undefined ? { status: "unavailable", reason: value.reason } : { status: "unavailable", reason: value.reason, lastGood }
+    }
+
+    function safeReady(value) {
+      if (!plainRecord(value) || value.status !== "ready" || typeof value.isAvailable !== "boolean" || typeof value.stale !== "boolean" || !validTime(value.fetchedAt) || !Array.isArray(value.balances) || value.balances.length > 2) return undefined
+      const balances = []
+      const currencies = new Set()
+      for (const item of value.balances) {
+        if (!plainRecord(item) || (item.currency !== "CNY" && item.currency !== "USD") || currencies.has(item.currency)) return undefined
+        if (![item.total, item.granted, item.toppedUp].every(validDecimal)) return undefined
+        currencies.add(item.currency)
+        balances.push({ currency: item.currency, total: item.total, granted: item.granted, toppedUp: item.toppedUp })
+      }
+      return { status: "ready", isAvailable: value.isAvailable, balances, fetchedAt: value.fetchedAt, stale: value.stale }
+    }
+
+    function useAccount(client, enabled = true) {
+      const [state, setState] = React.useState({ status: "loading" })
+      const [busy, setBusy] = React.useState(false)
+      const refresh = React.useCallback(async (force = false) => {
+        setBusy(true)
+        try { setState(await client.read(force)) } catch { setState((previous) => previous.status === "ready" ? { status: "unavailable", reason: "network", lastGood: { ...previous, stale: true } } : { status: "unavailable", reason: "network" }) }
+        finally { setBusy(false) }
+      }, [client])
+      React.useEffect(() => { if (enabled) void refresh(false) }, [enabled, refresh])
+      return { state, busy, refresh }
+    }
+
+    function useActiveAccountProvider(ctx) {
+      const [provider, setProvider] = React.useState("deepseek")
+      React.useEffect(() => {
+        let stopDirectory = () => {}
+        let active = true
+        const publish = (directory) => {
+          const selected = directory?.store.getSnapshot().current?.provider
+          if (selected === undefined || !active) return
+          setProvider(accountProvider(selected))
+        }
+        const bind = () => {
+          stopDirectory()
+          stopDirectory = () => {}
+          const sessionId = ctx.sessions.list.getSnapshot().current
+          if (sessionId === undefined) {
+            setProvider("deepseek")
+            return
+          }
+          let directory
+          try { directory = ctx.modelDirectories.directoryFor(sessionId) } catch { return }
+          publish(directory)
+          stopDirectory = directory.store.subscribe(() => publish(directory))
+          if (directory.store.getSnapshot().current === null) void directory.load().catch(() => {})
+        }
+        const stopSessions = ctx.sessions.list.subscribe(bind)
+        bind()
+        return () => { active = false; stopSessions(); stopDirectory() }
+      }, [ctx])
+      return provider
+    }
+
+    function accountProvider(selected) {
+      return selected === "grok" ? "grok" : selected === "dsh-codex" ? "codex" : "deepseek"
+    }
+
+    function shownSnapshot(state) { return state.status === "ready" ? state : state.lastGood }
+    function mainBalance(snapshot) { return snapshot?.balances.find((item) => item.currency === "CNY") ?? snapshot?.balances[0] }
+    function money(balance) { return balance === undefined ? "—" : `${balance.currency === "CNY" ? "¥" : "$"}${balance.total}` }
+
+    function SidebarBalance({ wide, ctx, client, t }) {
+      const provider = useActiveAccountProvider(ctx)
+      const { state, busy, refresh } = useAccount(client, provider === "deepseek")
+      if (provider !== "deepseek") return null
+      const summary = money(mainBalance(shownSnapshot(state)))
+      return React.createElement("button", {
+        type: "button", className: wide ? "dsh-deepseek-account-card" : "dsh-deepseek-account-rail",
+        disabled: busy, onClick: () => void refresh(true), "aria-label": `${t("balance")} ${summary}`,
+      }, wide
+        ? React.createElement(React.Fragment, null,
+          React.createElement("span", { className: "dsh-deepseek-account-symbol", "aria-hidden": "true" }, "¥"),
+          React.createElement("span", { className: "dsh-deepseek-account-copy" }, React.createElement("span", null, t("balance")), React.createElement("small", null, summary)),
+          React.createElement("span", { "aria-hidden": "true" }, busy ? "…" : "↻"))
+        : React.createElement("span", null, summary))
+    }
+
+    function AccountSettings({ client, t }) {
+      const { state, busy, refresh } = useAccount(client)
+      const shown = shownSnapshot(state)
+      const reason = state.status === "unavailable" ? ({
+        "credential-unconfigured": "unconfigured", "credential-unauthorized": "unauthorized", "rate-limited": "rateLimited",
+      }[state.reason] ?? "unavailable") : undefined
+      return React.createElement("section", { className: "dsh-deepseek-account-page" },
+        React.createElement("h2", null, t("title")), React.createElement("p", { className: "dsh-deepseek-account-description" }, t("description")),
+        React.createElement("article", { className: "dsh-deepseek-account-panel" },
+          React.createElement("div", { className: "dsh-deepseek-account-head" }, React.createElement("h3", null, t("balance")),
+            React.createElement("button", { type: "button", disabled: busy, onClick: () => void refresh(true) }, busy ? t("refreshing") : t("refresh"))),
+          shown === undefined ? React.createElement("p", null, state.status === "loading" ? t("loading") : t(reason))
+            : React.createElement("div", { className: "dsh-deepseek-account-balances" }, shown.balances.map((balance) =>
+              React.createElement("div", { className: "dsh-deepseek-account-balance", key: balance.currency },
+                React.createElement("strong", null, `${balance.currency === "CNY" ? "¥" : "$"}${balance.total}`),
+                React.createElement("span", null, `${t("granted")} ${balance.granted}`),
+                React.createElement("span", null, `${t("toppedUp")} ${balance.toppedUp}`)))),
+          state.status === "unavailable" && shown !== undefined && React.createElement("p", { className: "dsh-deepseek-account-warning" }, t("stale")),
+          shown?.fetchedAt && React.createElement("small", null, `${t("updated")}：${new Date(shown.fetchedAt).toLocaleString()}`)),
+        React.createElement("article", { className: "dsh-deepseek-account-panel" },
+          React.createElement("a", { className: "dsh-deepseek-account-topup", href: topUpUrl, target: "_blank", rel: "noreferrer" }, t("topUp")),
+          React.createElement("p", null, t("officialNote"))))
+    }
+
+    function installStyle() {
+      if (document.querySelector('style[data-dsh-deepseek-account]')) return () => {}
+      const style = document.createElement("style")
+      style.dataset.dshDeepseekAccount = ""
+      style.textContent = ".dsh-deepseek-account-card{display:grid;width:100%;min-height:48px;margin:3px 0;padding:4px 3px;border:0;border-radius:8px;grid-template-columns:22px minmax(0,1fr) 16px;align-items:center;gap:10px;color:inherit;background:transparent;cursor:pointer;font:inherit;text-align:left}.dsh-deepseek-account-card:hover,.dsh-deepseek-account-rail:hover{background:var(--dsw-alias-interactive-bg-hover)}.dsh-deepseek-account-symbol{font-weight:650;text-align:center}.dsh-deepseek-account-copy{display:flex;min-width:0;flex-direction:column}.dsh-deepseek-account-copy small{overflow:hidden;color:var(--dsw-alias-label-tertiary);font-size:11px;text-overflow:ellipsis;white-space:nowrap}.dsh-deepseek-account-rail{display:grid;width:36px;height:36px;margin:4px auto;border:0;border-radius:8px;place-items:center;color:inherit;background:transparent;cursor:pointer;font-size:10px;font-weight:650}.dsh-deepseek-account-page{box-sizing:border-box;width:min(860px,100%);padding:8px 4px 40px;color:var(--dsw-alias-label-primary)}.dsh-deepseek-account-page h2{margin:0}.dsh-deepseek-account-description{color:var(--dsw-alias-label-secondary)}.dsh-deepseek-account-panel{margin-top:14px;padding:18px;border:1px solid var(--dsw-alias-border-l2);border-radius:16px;background:var(--dsw-alias-bg-layer-1)}.dsh-deepseek-account-head{display:flex;align-items:center;justify-content:space-between;gap:12px}.dsh-deepseek-account-head h3{margin:0}.dsh-deepseek-account-head button,.dsh-deepseek-account-topup{min-height:34px;border:1px solid var(--dsw-alias-border-l2);border-radius:999px;padding:0 13px;color:inherit;background:transparent;font:inherit}.dsh-deepseek-account-balances{display:grid;margin-top:14px;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:10px}.dsh-deepseek-account-balance{display:flex;flex-direction:column;gap:5px;padding:14px;border-radius:12px;background:var(--dsw-alias-bg-layer-2,var(--dsw-alias-interactive-bg-hover))}.dsh-deepseek-account-balance strong{font-size:22px}.dsh-deepseek-account-balance span,.dsh-deepseek-account-panel p,.dsh-deepseek-account-panel small{color:var(--dsw-alias-label-secondary);font-size:12px}.dsh-deepseek-account-warning{color:var(--dsw-alias-state-warn-label)!important}.dsh-deepseek-account-topup{display:inline-flex;align-items:center;color:#fff;text-decoration:none;background:var(--dsw-alias-state-business-primary)}"
+      document.head.append(style)
+      return () => style.remove()
+    }
+
+    const inject = ["slots", "locale", "connection", "sessions", "modelDirectories"]
+    function apply(ctx) {
+      ctx.effect(() => ctx.locale.register(namespace, dictionaries), "deepseek-account: dictionaries")
+      ctx.effect(() => installStyle(), "deepseek-account: styles")
+      const t = ctx.locale.bind(namespace)
+      const client = accountClient(ctx.connection)
+      ctx.slots.inject("sidebar.footer.action", () => ctx.slots.register({
+        name: "sidebar.footer.action", id: "deepseek-account", order: 35, label: t("balance"),
+        inject: () => ({ ctx, client, t }),
+      }, SidebarBalance))
+      ctx.slots.inject("settings.section", () => ctx.slots.register({
+        name: "settings.section", id: "deepseek-account", order: 44, label: () => t("nav"), locale: namespace,
+        inject: () => ({ client, t }),
+      }, AccountSettings))
+    }
+
+    module.exports.inject = inject
+    module.exports.apply = apply
+    module.exports.accountProvider = accountProvider
+    module.exports.safeSnapshot = safeSnapshot
+    return module.exports
+  },
+})
+
+function plainRecord(value) { return typeof value === "object" && value !== null && !Array.isArray(value) }
+function validDecimal(value) { return typeof value === "string" && value.length <= 64 && /^\d+(?:\.\d+)?$/u.test(value) }
+function validTime(value) { return typeof value === "string" && Number.isFinite(Date.parse(value)) }

package/dist/host/index.mjs

@@ -0,0 +1,10 @@
+import { createDeepSeekAccountBalance } from "../internal/account-balance.mjs"
+import { registerDeepSeekAccountRpc } from "../internal/account-rpc.mjs"
+
+export const name = "deepseek-account"
+export const inject = ["credentials"]
+
+export function apply(ctx) {
+  const accountBalance = createDeepSeekAccountBalance({ credentials: ctx.credentials })
+  ctx.inject(["connection"], (connectionCtx) => registerDeepSeekAccountRpc(connectionCtx, accountBalance))
+}

package/dist/internal/account-balance.mjs

@@ -0,0 +1,107 @@
+const AUTOMATIC_TTL_MS = 5 * 60 * 1000
+const MANUAL_TTL_MS = 30 * 1000
+const MAX_RESPONSE_BYTES = 32 * 1024
+const API_URL = "https://api.deepseek.com/user/balance"
+
+export function createDeepSeekAccountBalance({ credentials, fetchImpl = fetch, now = Date.now }) {
+  if (typeof credentials?.resolve !== "function" || typeof fetchImpl !== "function" || typeof now !== "function") {
+    throw new TypeError("Invalid DeepSeek account balance dependencies")
+  }
+  let lastGood
+  let attemptedAt = 0
+  let inFlight
+
+  return Object.freeze({
+    read({ force = false } = {}) {
+      const ttl = force ? MANUAL_TTL_MS : AUTOMATIC_TTL_MS
+      if (lastGood !== undefined && now() - attemptedAt < ttl) return Promise.resolve(lastGood)
+      if (inFlight !== undefined) return inFlight
+      attemptedAt = now()
+      inFlight = load().finally(() => { inFlight = undefined })
+      return inFlight
+    },
+  })
+
+  async function load() {
+    const credential = await credentials.resolve("DEEPSEEK_API_KEY")
+    if (credential === undefined) return unavailable("credential-unconfigured")
+    try {
+      const response = await fetchImpl(API_URL, {
+        method: "GET",
+        redirect: "error",
+        headers: { accept: "application/json", authorization: `Bearer ${credential.value}` },
+        signal: AbortSignal.timeout(5_000),
+      })
+      if (response.status === 401 || response.status === 403) return unavailable("credential-unauthorized")
+      if (response.status === 429) return unavailable("rate-limited")
+      if (!response.ok) return unavailable(response.status >= 500 ? "network" : "invalid-response")
+      const parsed = parseDeepSeekBalance(JSON.parse(await readBoundedBody(response)), new Date(now()).toISOString())
+      if (parsed === undefined) return unavailable("invalid-response")
+      lastGood = parsed
+      return parsed
+    } catch {
+      return unavailable("network")
+    }
+  }
+
+  function unavailable(reason) {
+    return lastGood === undefined
+      ? Object.freeze({ status: "unavailable", reason })
+      : Object.freeze({ status: "unavailable", reason, lastGood: Object.freeze({ ...lastGood, stale: true }) })
+  }
+}
+
+export function parseDeepSeekBalance(value, fetchedAt) {
+  if (!isRecord(value) || typeof value.is_available !== "boolean" || !Array.isArray(value.balance_infos) || value.balance_infos.length > 2) return undefined
+  const balances = []
+  const currencies = new Set()
+  for (const item of value.balance_infos) {
+    if (!isRecord(item) || (item.currency !== "CNY" && item.currency !== "USD") || currencies.has(item.currency)) return undefined
+    const parts = [item.total_balance, item.granted_balance, item.topped_up_balance]
+    if (!parts.every(validDecimal)) return undefined
+    currencies.add(item.currency)
+    balances.push(Object.freeze({
+      currency: item.currency,
+      total: item.total_balance,
+      granted: item.granted_balance,
+      toppedUp: item.topped_up_balance,
+    }))
+  }
+  if (typeof fetchedAt !== "string" || !Number.isFinite(Date.parse(fetchedAt))) return undefined
+  return Object.freeze({
+    status: "ready",
+    isAvailable: value.is_available,
+    balances: Object.freeze(balances),
+    fetchedAt,
+    stale: false,
+  })
+}
+
+async function readBoundedBody(response) {
+  const declared = Number(response.headers.get("content-length"))
+  if (Number.isFinite(declared) && declared > MAX_RESPONSE_BYTES) throw new Error("response too large")
+  const reader = response.body?.getReader()
+  if (reader === undefined) return ""
+  const decoder = new TextDecoder()
+  let length = 0
+  let body = ""
+  while (true) {
+    const { done, value } = await reader.read()
+    if (done) break
+    length += value.byteLength
+    if (length > MAX_RESPONSE_BYTES) {
+      await reader.cancel()
+      throw new Error("response too large")
+    }
+    body += decoder.decode(value, { stream: true })
+  }
+  return body + decoder.decode()
+}
+
+function validDecimal(value) {
+  return typeof value === "string" && value.length <= 64 && /^\d+(?:\.\d+)?$/u.test(value)
+}
+
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value)
+}

package/dist/internal/account-rpc.mjs

@@ -0,0 +1,24 @@
+export const DEEPSEEK_ACCOUNT_RPC_CHANNEL = "/dsh-deepseek-account"
+
+export function registerDeepSeekAccountRpc(ctx, accountBalance) {
+  if (typeof ctx?.connection?.rpc?.handle !== "function" || typeof accountBalance?.read !== "function") {
+    throw new TypeError("Invalid DeepSeek account RPC dependencies")
+  }
+  return ctx.connection.rpc.handle(
+    DEEPSEEK_ACCOUNT_RPC_CHANNEL,
+    async (endpoint, payload) => {
+      if (endpoint !== "read" || !isRecord(payload) || Reflect.ownKeys(payload).some((key) => key !== "force")) {
+        return { ok: false, error: "invalid-request" }
+      }
+      if (payload.force !== undefined && typeof payload.force !== "boolean") {
+        return { ok: false, error: "invalid-request" }
+      }
+      return { ok: true, value: await accountBalance.read({ force: payload.force === true }) }
+    },
+    { authority: "loopback" },
+  )
+}
+
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value)
+}

package/docs/releases/v0.1.0.md

@@ -0,0 +1,50 @@
+## 中文
+
+`0.1.0` 是 `dsh-deepseek-account` 的首个正式版本，将 DeepSeek 账户余额从桌面应用内置能力迁移为可独立安装和升级的 Harness 插件。
+
+### 功能
+
+- 通过 Host credential service 读取当前 `DEEPSEEK_API_KEY`，调用官方 `/user/balance` 并严格投影 CNY/USD 总余额、赠送余额和充值余额。
+- 当前会话选择 DeepSeek 或无法识别的自定义 Provider 时显示 DeepSeek 卡片；选择 Grok 或 Codex 时不渲染。
+- 设置页提供固定的 DeepSeek 官方网页登录与充值入口。
+- 并发查询单飞、自动/手动刷新限频、32 KiB 响应上限和失败后已标记的旧快照回退。
+
+### 安全与限制
+
+- API Key 只存在于 Host；浏览器产物不包含凭据解析或 Authorization header。
+- 插件不读取网页 Cookie、账户密码或支付资料，也不会代替用户提交付款。
+- 本次候选只验证接口、构建、打包和隔离边界，未执行真实账户余额查询或实际充值。
+
+安装：
+
+```sh
+dsh plugin --profile web add dsh-deepseek-account@0.1.0
+dsh web
+```
+
+<details>
+<summary>English release notes</summary>
+
+`0.1.0` is the first formal `dsh-deepseek-account` release. It moves DeepSeek account balance handling out of the desktop application and into an independently installable Harness plugin.
+
+### Features
+
+- Resolves the current `DEEPSEEK_API_KEY` through the Host credential service, calls the official `/user/balance` endpoint, and strictly projects CNY/USD total, granted, and topped-up balances.
+- Shows the DeepSeek card for DeepSeek and unknown custom Providers and returns no sidebar content for Grok or Codex.
+- Provides a fixed official DeepSeek web sign-in and top-up entry in settings.
+- Coalesces concurrent reads, rate-limits automatic/manual refreshes, bounds responses to 32 KiB, and retains an explicitly stale last-good snapshot after transient failure.
+
+### Security and limits
+
+- The API key remains Host-only; the browser artifact contains neither credential resolution nor an Authorization header.
+- The plugin never reads web cookies, account passwords, or payment details and never submits a payment.
+- Candidate validation covers contracts, build, packaging, and isolation boundaries only. No real-account balance query or real top-up was performed.
+
+Install:
+
+```sh
+dsh plugin --profile web add dsh-deepseek-account@0.1.0
+dsh web
+```
+
+</details>

package/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "dsh-deepseek-account",
+  "version": "0.1.0",
+  "description": "DeepSeek account balance and official top-up entry for DeepSeek Harness",
+  "type": "module",
+  "license": "MIT",
+  "author": "YukiRyou",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/yoshino-xiao7/dsh-deepseek-account.git"
+  },
+  "homepage": "https://github.com/yoshino-xiao7/dsh-deepseek-account#readme",
+  "bugs": {
+    "url": "https://github.com/yoshino-xiao7/dsh-deepseek-account/issues"
+  },
+  "engines": {
+    "node": ">=22.19.0 <25"
+  },
+  "exports": {
+    ".": "./dist/host/index.mjs",
+    "./client": "./dist/client/client.js",
+    "./package.json": "./package.json"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "deepseek-account.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-model-selection",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-sidebar"
+      ],
+      "platform": "web"
+    }
+  },
+  "files": [
+    "dist",
+    "docs",
+    "deepseek-account.patch.yml",
+    "README.md",
+    "README.en.md",
+    "CHANGELOG.md",
+    "CONTRIBUTING.md",
+    "SECURITY.md",
+    "THIRD_PARTY_NOTICES.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "node scripts/build.mjs",
+    "test": "node --test test/*.test.mjs",
+    "check": "npm run test && npm run build",
+    "pack:check": "npm pack --dry-run --json",
+    "prepack": "npm run check"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "4.0.1",
+    "@deepseek-ai/dsh-client-connection": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-model-selection": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-sidebar": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-client-connection": { "optional": true },
+    "@deepseek-ai/dsh-client-locale": { "optional": true },
+    "@deepseek-ai/dsh-client-runtime": { "optional": true },
+    "@deepseek-ai/dsh-client-ui-model-selection": { "optional": true },
+    "@deepseek-ai/dsh-client-ui-settings": { "optional": true },
+    "@deepseek-ai/dsh-client-ui-sidebar": { "optional": true },
+    "@deepseek-ai/dsh-credentials": { "optional": true }
+  }
+}