dsh-deepseek-balance-widget 2.3.3 → 2.3.5

package/README.md

@@ -20,12 +20,12 @@
 需要：已安装 dsh（可用 `dsh web`）。
 
 ```bash
-dsh plugin --profile web add dsh-deepseek-balance-widget@2.3.2
+dsh plugin --profile web add dsh-deepseek-balance-widget@latest
 ```
 
 从 npm 拉取安装，dsh 自动注册到 `dsh.profile.bundles`，完成后**重启 `dsh web`** 即可。
 
-> 务必带版本号 `@2.3.2`。不带版本号的 `add` 会按 npm 的 `latest` tag 安装，该 tag 可能被旧版本抢回去，导致装到老版本。
+> 如果 `npm view` / 弹窗显示你装到了旧版本，请参考下方「更新」章节强制升到最新版。旧版本已被标记为 deprecated，安装时会弹出升级提示。
 
 也可以直接对 AI 说：
 
@@ -51,11 +51,11 @@ AI 会接管全部：问 API Key / 引导获取平台 Cookie → 写入本机
 
 ## 更新
 
-最新稳定版为 **`2.3.2`**。无论你当前是哪个旧版本，都推荐升级到它。
+无论你当前是哪个旧版本，都推荐升级到 npm 上的最新稳定版。
 
 ### 方式一：弹窗一键更新（推荐，已装用户）
 
-1. 打开余额弹窗，底部会显示版本号；有新版本时显示 `vX → v2.3.2 更新`。
+1. 打开余额弹窗，底部会显示版本号；有新版本时显示 `vX → vY 更新`（`vY` 为 npm 上 semver 最高的版本）。
 2. 点击「**检查更新**」，插件会自动从 npm 拉取并安装最高版本。
 3. 安装完成后**必须彻底重启 `dsh web`**（关掉 `dsh web` 进程 / 退出桌面端再重开，**仅刷新浏览器页面无效**）才能加载新版本。
 
@@ -64,21 +64,23 @@ AI 会接管全部：问 API Key / 引导获取平台 Cookie → 写入本机
 ### 方式二：命令行强制更新（最稳妥，适合卡住或装不上的情况）
 
 ```bash
-dsh plugin --profile web add dsh-deepseek-balance-widget@2.3.2
+dsh plugin --profile web add dsh-deepseek-balance-widget@latest
 ```
 
-带版本号可绕过缓存 / 镜像源不同步 / `latest` 被抢低等问题，一步到位。
+该命令会安装 npm `latest` tag 指向的版本。如果弹窗仍提示可更新，说明本地缓存/镜像源没同步，直接用方式三手动安装最高版。
 
 ### 方式三：手动更新（命令行更新失败时兜底）
 
 ```bash
 cd ~/.dsh/profiles/web
-npm install dsh-deepseek-balance-widget@2.3.2   # 若目录内有 pnpm-lock.yaml 则用 pnpm add
+npm install dsh-deepseek-balance-widget@latest   # 若目录内有 pnpm-lock.yaml 则用 pnpm add
 # 验证磁盘上确实变了
 cat node_modules/dsh-deepseek-balance-widget/package.json | grep '"version"'
 ```
 
-确认输出 `2.3.2` 后，**彻底重启 `dsh web`** 即可。
+确认输出的是最新版本号后，**彻底重启 `dsh web`** 即可。
+
+> 也可以把 `latest` 换成具体版本号（如 `@2.3.3`），绕过缓存和镜像同步延迟。
 
 ## 卸载
 

package/README_EN.md

@@ -20,12 +20,12 @@ A multi-provider AI balance widget for the dsh web sidebar. **DeepSeek** is buil
 Requires: dsh installed (with `dsh web` working).
 
 ```bash
-dsh plugin --profile web add dsh-deepseek-balance-widget@2.3.2
+dsh plugin --profile web add dsh-deepseek-balance-widget@latest
 ```
 
 Installed from npm and auto-registered by dsh. **Restart `dsh web`** and the balance button appears in the sidebar.
 
-> Always include the version `@2.3.2`. A bare `add` follows npm's `latest` tag, which may be hijacked by older versions and silently install an outdated release.
+> If `npm view` / the popover shows you ended up on an old version, follow the "Update" section below to force-upgrade. Older versions are marked deprecated and will print an upgrade warning during install.
 
 Or just tell your AI:
 
@@ -51,11 +51,11 @@ Credentials are stored locally in `~/.dsh/ai-balances.json`; nothing is shipped
 
 ## Update
 
-The latest stable release is **`2.3.2`**. Upgrade to it regardless of which older version you currently have.
+Upgrade to the latest stable release on npm regardless of which older version you currently have.
 
 ### Method 1: One-click from the popover (recommended for installed users)
 
-1. Open the balance popover; the footer shows the version. When a newer one exists it reads `vX → v2.3.2 更新`.
+1. Open the balance popover; the footer shows the version. When a newer one exists it reads `vX → vY 更新` (where `vY` is the highest semver version on npm).
 2. Click "**检查更新**" (Check for update). The plugin pulls and installs the highest semver version from npm automatically.
 3. After install you **must fully restart `dsh web`** (stop the `dsh web` process / quit the desktop app and reopen — **refreshing the browser tab is not enough**) for the new version to load.
 
@@ -64,21 +64,23 @@ The latest stable release is **`2.3.2`**. Upgrade to it regardless of which olde
 ### Method 2: Force update from the command line (most reliable if stuck)
 
 ```bash
-dsh plugin --profile web add dsh-deepseek-balance-widget@2.3.2
+dsh plugin --profile web add dsh-deepseek-balance-widget@latest
 ```
 
-Pinning the version bypasses cache / mirror desync / a hijacked `latest` tag in one step.
+This installs the version currently tagged as npm `latest`. If the popover still says an update is available, your cache/mirror is out of sync; use Method 3 to install the highest version manually.
 
 ### Method 3: Manual update (fallback when the command-line update fails)
 
 ```bash
 cd ~/.dsh/profiles/web
-npm install dsh-deepseek-balance-widget@2.3.2   # use `pnpm add` if a pnpm-lock.yaml exists in this dir
+npm install dsh-deepseek-balance-widget@latest   # use `pnpm add` if a pnpm-lock.yaml exists in this dir
 # verify the on-disk version actually changed
 cat node_modules/dsh-deepseek-balance-widget/package.json | grep '"version"'
 ```
 
-Once it prints `2.3.2`, **fully restart `dsh web`**.
+Once it prints the latest version, **fully restart `dsh web`**.
+
+> You can also replace `latest` with a concrete version (e.g. `@2.3.3`) to bypass cache or mirror sync delays.
 
 ## Uninstall
 

package/lib/index.js

@@ -1,5 +1,5 @@
 import { launchEnvironmentOf } from "@deepseek-ai/dsh-launch-environment";
-import { readFile, writeFile, stat, mkdir, copyFile } from "node:fs/promises";
+import { readFile, writeFile, stat, mkdir, copyFile, readdir, realpath } from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 import { dirname, resolve } from "node:path";
 import { homedir } from "node:os";
@@ -541,31 +541,59 @@ async function fileExists(path) {
 }
 
 /**
- * Detect the package manager used by UPDATE_CWD.
+ * Detect the package manager used in a given project root.
+ * @param {string} cwd
  * @returns {Promise<"pnpm" | "npm">}
  */
-async function detectPackageManager() {
-  const pnpmLock = resolve(UPDATE_CWD, "pnpm-lock.yaml");
-  const pnpmLockYml = resolve(UPDATE_CWD, "pnpm-lock.yml");
+async function detectPackageManager(cwd) {
+  const pnpmLock = resolve(cwd, "pnpm-lock.yaml");
+  const pnpmLockYml = resolve(cwd, "pnpm-lock.yml");
   if (await fileExists(pnpmLock) || await fileExists(pnpmLockYml)) return "pnpm";
   return "npm";
 }
 
 /**
- * Run the package-manager update command for this package in the discovered project root.
- * Uses shell mode on Windows so that .cmd scripts (npm.cmd / pnpm.cmd) can actually spawn.
+ * Collect every dsh profile root that currently contains this plugin in its
+ * node_modules. We never rely on a single reverse-derived path because dsh may
+ * load the plugin from a different profile than the one our module URL points
+ * at (desktop vs web profile, pnpm symlinks, custom-plugins, etc). The previous
+ * single-point UPDATE_CWD caused "update succeeded but version unchanged"
+ * failures on machines where dsh loaded the plugin from a different location
+ * than the one npm wrote to.
+ * @returns {Promise<string[]>}
+ */
+async function getUpdateTargets() {
+  const roots = new Set();
+  const normalize = (p) => String(p).replace(/\\/g, "/");
+  // 1. Reverse-derive from PLUGIN_ROOT (handles symlink edge cases via realpath).
+  try {
+    const realRoot = normalize(await realpath(PLUGIN_ROOT));
+    const parts = realRoot.split("/");
+    const nmIndex = parts.lastIndexOf("node_modules");
+    if (nmIndex > 0) roots.add(parts.slice(0, nmIndex).join("/"));
+  } catch {}
+  // 2. Scan every dsh profile for a node_modules entry of this plugin.
+  try {
+    const profilesDir = resolve(homedir(), ".dsh", "profiles");
+    const entries = await readdir(profilesDir, { withFileTypes: true });
+    for (const entry of entries) {
+      if (!entry.isDirectory()) continue;
+      const profileRoot = normalize(resolve(profilesDir, entry.name));
+      const pluginDir = resolve(profileRoot, "node_modules", "dsh-deepseek-balance-widget");
+      if (await fileExists(pluginDir)) {
+        roots.add(profileRoot);
+      }
+    }
+  } catch {}
+  return [...roots];
+}
+
+/**
+ * Run the package-manager update command for this package in a single project root.
  * @returns {Promise<{ok:boolean, output:string, error?:string}>}
  */
-async function runPackageUpdate() {
-  const versionInfo = await queryNpmVersion();
-  if (!versionInfo.ok) {
-    return { ok: false, error: versionInfo.error || "failed to query npm version" };
-  }
-  if (!versionInfo.updateAvailable) {
-    return { ok: true, output: "already up to date", noOp: true };
-  }
-  const target = versionInfo.latest;
-  const pm = await detectPackageManager();
+async function runInstallOnce(cwd, target) {
+  const pm = await detectPackageManager(cwd);
   const isWin = process.platform === "win32";
   const cmd = isWin ? (pm === "pnpm" ? "pnpm" : "npm") : pm;
   const args = pm === "pnpm"
@@ -578,13 +606,13 @@ async function runPackageUpdate() {
       // Build a single command string and let cmd.exe parse it; hide the console window.
       const quotedArgs = args.map((a) => `"${a.replace(/"/g, '\\"')}"`).join(" ");
       child = spawn("cmd.exe", ["/d", "/s", "/c", `${cmd} ${quotedArgs}`], {
-        cwd: UPDATE_CWD,
+        cwd,
         windowsHide: true,
         env: { ...process.env, NPM_CONFIG_FUND: "false", NPM_CONFIG_AUDIT: "false" }
       });
     } else {
       child = spawn(cmd, args, {
-        cwd: UPDATE_CWD,
+        cwd,
         env: { ...process.env, NPM_CONFIG_FUND: "false", NPM_CONFIG_AUDIT: "false" }
       });
     }
@@ -604,7 +632,7 @@ async function runPackageUpdate() {
       // Verify the on-disk version actually changed so the user can't be misled into
       // restarting dsh when the install silently wrote to a different location.
       try {
-        const installedPkgPath = resolve(UPDATE_CWD, "node_modules", "dsh-deepseek-balance-widget", "package.json");
+        const installedPkgPath = resolve(cwd, "node_modules", "dsh-deepseek-balance-widget", "package.json");
         const installedPkg = JSON.parse(await readFile(installedPkgPath, "utf8"));
         if (installedPkg.version !== target) {
           resolve({ ok: false, output, error: `installed version mismatch: expected ${target}, found ${installedPkg.version}` });
@@ -619,6 +647,44 @@ async function runPackageUpdate() {
   });
 }
 
+/**
+ * Update the plugin in every dsh profile that currently has it installed.
+ * The first success wins; if at least one location lands on the target version
+ * the update is reported as successful.
+ * @returns {Promise<{ok:boolean, output:string, error?:string}>}
+ */
+async function runPackageUpdate() {
+  const versionInfo = await queryNpmVersion();
+  if (!versionInfo.ok) {
+    return { ok: false, error: versionInfo.error || "failed to query npm version" };
+  }
+  if (!versionInfo.updateAvailable) {
+    return { ok: true, output: "already up to date", noOp: true };
+  }
+  const target = versionInfo.latest;
+  let targets = await getUpdateTargets();
+  if (targets.length === 0) {
+    // Fallback to the legacy single reverse-derived path if scanning found nothing.
+    targets = [UPDATE_CWD];
+  }
+  const lines = [];
+  let anySuccess = false;
+  for (const cwd of targets) {
+    const result = await runInstallOnce(cwd, target);
+    const label = cwd.replace(/\//g, "\\");
+    if (result.ok) {
+      anySuccess = true;
+      lines.push(`✓ ${label} -> ${target}`);
+    } else {
+      lines.push(`✗ ${label}: ${result.error || "failed"}`);
+    }
+  }
+  if (anySuccess) {
+    return { ok: true, output: lines.join("\n") };
+  }
+  return { ok: false, output: lines.join("\n"), error: "update failed in all candidate locations" };
+}
+
 /**
  * Query the DeepSeek balance API for one key.
  * @param {string} apiKey - the resolved DeepSeek API key.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-deepseek-balance-widget",
-  "version": "2.3.3",
+  "version": "2.3.5",
   "type": "module",
   "description": "Multi-provider AI balance widget for the dsh web sidebar: a live, auto-refreshing balance pill plus a detail popover listing DeepSeek and any added providers (MiMo etc.). Keys are stored per-machine in ~/.dsh/ai-balances.json and resolved from the local credential seam, never hardcoded.",
   "keywords": [