dsh-deepseek-balance-widget 2.3.6 → 2.3.8

package/README.md

@@ -12,24 +12,25 @@
 - 弹窗顶部显示当前平台标题：点「**更换**」在已添加的平台间切换，点「**×**」可移除该平台
 - 弹窗右上角「**+ 添加**」：加入 MiMo
 - 详情字段：余额、累计消费、今日消费、今日 Token、本月消耗（本月消费 / Tokens）
-- 「**AI 帮我配置**」：复制提示语发给智能体，AI 会一步步指导你抓取凭证并完成配置。
+- 「**AI 帮我配置**」：复制提示语发给智能体，AI 会一步步指导你抓取凭证并完成配置
 - 弹窗底部显示版本号，有新版时一键自动更新
+- 支持中 / EN 界面切换
 
 ## 安装
 
 需要：已安装 dsh（可用 `dsh web`）。
 
 ```bash
-dsh plugin --profile web add dsh-deepseek-balance-widget@latest
+dsh plugin --profile web add dsh-deepseek-balance-widget@2.3.6
 ```
 
 从 npm 拉取安装，dsh 自动注册到 `dsh.profile.bundles`，完成后**重启 `dsh web`** 即可。
 
-> 如果 `npm view` / 弹窗显示你装到了旧版本，请参考下方「更新」章节强制升到最新版。旧版本已被标记为 deprecated，安装时会弹出升级提示。
+> **务必写死版本号 `@2.3.6`**（当前最新稳定版）。不要用 `@latest`——它会被本地 pnpm/npm 缓存或镜像源解析成旧版本，导致装到老版（实测在某些电脑上 `@latest` 会装成 2.3.3）。如果未来发布了更高版本，把这里的版本号换成最新的即可。
 
 也可以直接对 AI 说：
 
-> 帮我用 npm 安装 dsh-deepseek-balance-widget 插件。
+> 帮我用 npm 安装 dsh-deepseek-balance-widget 插件，执行 `dsh plugin --profile web add dsh-deepseek-balance-widget@2.3.6`。
 
 ## 配置
 
@@ -41,11 +42,11 @@ dsh plugin --profile web add dsh-deepseek-balance-widget@latest
 
 AI 会接管全部：问 API Key / 引导获取平台 Cookie → 写入本机 → 提醒重启 `dsh web`。
 
-| 平台          | 凭据                        | 备注                  |
-| ----------- | ------------------------- | ------------------- |
-| DeepSeek    | `DEEPSEEK_API_KEY`        | 必填，余额               |
+| 平台 | 凭据 | 备注 |
+| --- | --- | --- |
+| DeepSeek | `DEEPSEEK_API_KEY` | 必填，余额 |
 | DeepSeek 用量 | `DEEPSEEK_PLATFORM_TOKEN` | 可选，统计累计消费 / 本月 / 今日 |
-| MiMo（小米）    | 登录 Cookie                 | AI 引导获取             |
+| MiMo（小米） | 登录 Cookie | AI 引导获取 |
 
 凭据保存在你本机的 `~/.dsh/ai-balances.json`，不随插件分发、不上传。
 
@@ -64,23 +65,23 @@ AI 会接管全部：问 API Key / 引导获取平台 Cookie → 写入本机
 ### 方式二：命令行强制更新（最稳妥，适合卡住或装不上的情况）
 
 ```bash
-dsh plugin --profile web add dsh-deepseek-balance-widget@latest
+dsh plugin --profile web add dsh-deepseek-balance-widget@2.3.6
 ```
 
-该命令会安装 npm `latest` tag 指向的版本。如果弹窗仍提示可更新，说明本地缓存/镜像源没同步，直接用方式三手动安装最高版。
+**写死版本号 `@2.3.6`** 可绕过本地缓存 / 镜像源不同步 / `latest` 解析成旧版的问题，一步到位。装完**彻底重启 `dsh web`**。
 
 ### 方式三：手动更新（命令行更新失败时兜底）
 
 ```bash
 cd ~/.dsh/profiles/web
-npm install dsh-deepseek-balance-widget@latest   # 若目录内有 pnpm-lock.yaml 则用 pnpm add
+npm install dsh-deepseek-balance-widget@2.3.6   # 若目录内有 pnpm-lock.yaml 则用 pnpm add
 # 验证磁盘上确实变了
 cat node_modules/dsh-deepseek-balance-widget/package.json | grep '"version"'
 ```
 
-确认输出的是最新版本号后，**彻底重启 `dsh web`** 即可。
+确认输出 `2.3.6` 后，**彻底重启 `dsh web`** 即可。
 
-> 也可以把 `latest` 换成具体版本号（如 `@2.3.3`），绕过缓存和镜像同步延迟。
+> 如果你的环境里弹窗/命令行的更新一直失败（提示版本没变），通常是 Agent 主机（如 WorkBuddy）通过 `NODE_OPTIONS` 注入了文件删除拦截导致 pnpm/npm 更新中断。此时在**普通终端**（不通过 Agent 运行）里执行上面的命令即可成功；或先执行 `set NODE_OPTIONS=`（PowerShell）再重试。
 
 ## 卸载
 
@@ -92,6 +93,18 @@ dsh plugin --profile web rm dsh-deepseek-balance-widget
 
 > 帮我用 npm 卸载 dsh-deepseek-balance-widget 插件。
 
+## 联系
+
+有问题或建议，欢迎联系：
+
+- 邮箱：crazy_l118@icloud.com
+
+## 赞助
+
+如果这个插件对你有帮助，可以给我的晚餐加一根火腿肠 🍗
+
+![赞赏码](assets/sponsor.jpg)
+
 ## License
 
 [MIT](LICENSE)

package/README_EN.md

@@ -12,24 +12,25 @@ A multi-provider AI balance widget for the dsh web sidebar. **DeepSeek** is buil
 - Popover header shows the current provider: a "**Switch**" menu changes to another added provider, and "**×**" removes it
 - "**+ Add**" button (top right): add **MiMo**
 - Details: balance, cumulative spend, today spend, today tokens, monthly usage (monthly spend / tokens)
-- "**AI 帮我配置**": one click copies a prompt; send it to your AI and it guides you through fetching credentials and writing them locally — no digging through cookies by hand
+- "**AI 帮我配置**": copy a prompt, send it to your AI, and it walks you through fetching the credentials — no digging through cookies by hand
 - Version shown in the popover footer; one-click auto-update when a new version is available
+- UI language toggle: 中文 / EN
 
 ## Install
 
 Requires: dsh installed (with `dsh web` working).
 
 ```bash
-dsh plugin --profile web add dsh-deepseek-balance-widget@latest
+dsh plugin --profile web add dsh-deepseek-balance-widget@2.3.6
 ```
 
 Installed from npm and auto-registered by dsh. **Restart `dsh web`** and the balance button appears in the sidebar.
 
-> If `npm view` / the popover shows you ended up on an old version, follow the "Update" section below to force-upgrade. Older versions are marked deprecated and will print an upgrade warning during install.
+> **Always pin the version `@2.3.6`** (the current latest stable). Do not use `@latest` — local pnpm/npm cache or a mirror registry can resolve it to an outdated release (observed: `@latest` installed 2.3.3 on another machine). When a newer version is released, bump the number here.
 
 Or just tell your AI:
 
-> Install the dsh-deepseek-balance-widget plugin for me via npm.
+> Install the dsh-deepseek-balance-widget plugin for me via npm: run `dsh plugin --profile web add dsh-deepseek-balance-widget@2.3.6`.
 
 ## Configuration
 
@@ -42,7 +43,7 @@ To add MiMo, open the popover, click "+ Add", then "AI 帮我配置", and send t
 The AI takes care of everything: asks for your API key / guides you through getting the platform cookie → writes the local config → reminds you to **restart `dsh web`**.
 
 | Provider | Credential | Notes |
-|---|---|---|
+| --- | --- | --- |
 | DeepSeek | `DEEPSEEK_API_KEY` | Required, balance |
 | DeepSeek usage | `DEEPSEEK_PLATFORM_TOKEN` | Optional, cumulative / monthly / today stats |
 | MiMo (Xiaomi) | Login cookie | Guided by your AI |
@@ -64,23 +65,23 @@ Upgrade to the latest stable release on npm regardless of which older version yo
 ### Method 2: Force update from the command line (most reliable if stuck)
 
 ```bash
-dsh plugin --profile web add dsh-deepseek-balance-widget@latest
+dsh plugin --profile web add dsh-deepseek-balance-widget@2.3.6
 ```
 
-This installs the version currently tagged as npm `latest`. If the popover still says an update is available, your cache/mirror is out of sync; use Method 3 to install the highest version manually.
+**Pinning `@2.3.6`** bypasses local cache / mirror desync / a stale `latest` resolution in one step. Then **fully restart `dsh web`**.
 
 ### Method 3: Manual update (fallback when the command-line update fails)
 
 ```bash
 cd ~/.dsh/profiles/web
-npm install dsh-deepseek-balance-widget@latest   # use `pnpm add` if a pnpm-lock.yaml exists in this dir
+npm install dsh-deepseek-balance-widget@2.3.6   # use `pnpm add` if a pnpm-lock.yaml exists in this dir
 # verify the on-disk version actually changed
 cat node_modules/dsh-deepseek-balance-widget/package.json | grep '"version"'
 ```
 
-Once it prints the latest version, **fully restart `dsh web`**.
+Once it prints `2.3.6`, **fully restart `dsh web`**.
 
-> You can also replace `latest` with a concrete version (e.g. `@2.3.3`) to bypass cache or mirror sync delays.
+> If the popover / command-line update keeps failing (version never changes), an agent host (e.g. WorkBuddy) is likely injecting a file-deletion guard via `NODE_OPTIONS`, which makes pnpm/npm abort during updates. Run the command in a **plain terminal** (not through the agent), or unset `NODE_OPTIONS` first (PowerShell: `set NODE_OPTIONS=`) and retry.
 
 ## Uninstall
 
@@ -92,6 +93,18 @@ Or just tell your AI:
 
 > Uninstall the dsh-deepseek-balance-widget plugin for me via npm.
 
+## Contact
+
+Questions or suggestions? Feel free to reach out:
+
+- Email: crazy_l118@icloud.com
+
+## Sponsor
+
+If this plugin helped you, consider buying me a ham sausage for dinner 🍗
+
+![WeChat reward QR](assets/sponsor.jpg)
+
 ## License
 
 [MIT](LICENSE)

package/lib/client.js

@@ -110,6 +110,7 @@ window.__ModuleLoader__.load({
         pasteCookieHint: "请粘贴 Cookie 或 cURL，AI 会自动提取",
         copied: "已复制",
         copyFailed: "复制失败",
+        copyError: "复制错误信息",
         refresh: "刷新",
         peakPeriod: "繁忙时段",
         offPeakPeriod: "空闲时段"
@@ -195,6 +196,7 @@ window.__ModuleLoader__.load({
         pasteCookieHint: "Paste a Cookie or cURL; the AI will extract it",
         copied: "Copied",
         copyFailed: "Copy failed",
+        copyError: "Copy error",
         refresh: "Refresh",
         peakPeriod: "Peak",
         offPeakPeriod: "Off-peak"
@@ -420,7 +422,12 @@ window.__ModuleLoader__.load({
         ".dshBalanceWizardLink:hover{color:#79b8ff}",
         ".dshBalanceCookiePreview{font-size:11px;color:#7b8494;background:rgba(255,255,255,.05);border-radius:6px;padding:6px 8px;word-break:break-all}",
         ".dshBalanceCookiePreview code{color:#e6e9ef;font-size:10px}",
-        ".dshBalanceCookiePreview[data-found=false]{display:none}"
+        ".dshBalanceCookiePreview[data-found=false]{display:none}",
+        ".dshBalanceUpdateErr{margin-top:10px;border:1px solid rgba(248,81,73,.25);border-radius:8px;background:rgba(248,81,73,.08);padding:8px 10px}",
+        ".dshBalanceUpdateErrHead{display:flex;justify-content:space-between;align-items:center;font-size:12px;font-weight:600;color:#f85149;margin-bottom:6px}",
+        ".dshBalanceUpdateErrClose{appearance:none;background:transparent;border:0;color:#9aa4b2;font-size:18px;line-height:1;cursor:pointer;padding:0 2px}",
+        ".dshBalanceUpdateErrClose:hover{color:#f85149}",
+        ".dshBalanceUpdateErrBody{max-height:120px;overflow:auto;background:#0f1216;border:1px solid rgba(255,255,255,.08);border-radius:6px;padding:6px 8px;margin:0 0 8px;font-family:ui-monospace,Menlo,Consolas,monospace;font-size:10px;line-height:1.4;color:#c9d1d9;white-space:pre-wrap;word-break:break-all}"
       ].join("");
       const tag = document.createElement("style");
       tag.dataset.plugin = "dsh-deepseek-balance-widget";
@@ -565,6 +572,8 @@ window.__ModuleLoader__.load({
       } else {
         btn.textContent = t("updateFailed");
         btn.title = String(result.error || t("updateFailed")) + (result.output ? "\n" + result.output.slice(-200) : "");
+        updateErrorDetail = { error: result.error || t("updateFailed"), output: result.output || "" };
+        renderPopover();
         setTimeout(() => { btn.textContent = originalText; btn.disabled = false; btn.title = ""; }, 3000);
       }
     }
@@ -835,6 +844,24 @@ window.__ModuleLoader__.load({
       if (updateBtn !== null) {
         updateBtn.addEventListener("click", () => handleUpdateClick(updateBtn));
       }
+      const updateErrClose = popRef.querySelector("[data-update-err-close]");
+      if (updateErrClose !== null) {
+        updateErrClose.addEventListener("click", () => { updateErrorDetail = null; renderPopover(); });
+      }
+      const updateErrCopy = popRef.querySelector("[data-update-err-copy]");
+      if (updateErrCopy !== null) {
+        updateErrCopy.addEventListener("click", () => {
+          if (!updateErrorDetail) return;
+          const text = String(updateErrorDetail.error || "") + "\n" + String(updateErrorDetail.output || "");
+          navigator.clipboard?.writeText(text).then(() => {
+            updateErrCopy.textContent = t("copied");
+            setTimeout(() => updateErrCopy.textContent = t("copyError"), 1500);
+          }).catch(() => {
+            updateErrCopy.textContent = t("copyFailed");
+            setTimeout(() => updateErrCopy.textContent = t("copyError"), 1500);
+          });
+        });
+      }
       const addBtn = popRef.querySelector("[data-add]");
       if (addBtn !== null) addBtn.addEventListener("click", () => { addFormState = { kind: "mimo", label: "", key: "", cookie: "" }; showAddForm = true; renderPopover(); });
       const cancelBtn = popRef.querySelector("[data-cancel]");
@@ -1221,11 +1248,28 @@ window.__ModuleLoader__.load({
       }
       const updated = lastUpdated ? lastUpdated.toLocaleTimeString() : "—";
       const versionHtml = versionHtmlOf(lastVersion);
+      const errorPanel = updateErrorDetail ? updateErrorHtml(updateErrorDetail) : "";
       return header + syncHint + body +
         '<div class="dshBalanceFoot">' + versionHtml +
         '<span style="display:flex;align-items:center;gap:8px">' +
         '<button class="dshBalanceBtn" type="button" data-refresh>' + t("refresh") + "</button>" +
-        '<span>' + t("updatedAt") + updated + "</span></span></div>";
+        '<span>' + t("updatedAt") + updated + "</span></span></div>" + errorPanel;
+    }
+
+    /** Render the update-failure detail panel shown below the footer. */
+    function updateErrorHtml(detail) {
+      const summary = String(detail.error || t("updateFailed"));
+      const text = (detail.output || "").trim();
+      const snippet = text.slice(-500) || summary;
+      const escaped = snippet.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+      return '<div class="dshBalanceUpdateErr">' +
+        '<div class="dshBalanceUpdateErrHead">' +
+        '<span>' + t("updateFailed") + "</span>" +
+        '<button class="dshBalanceUpdateErrClose" type="button" data-update-err-close aria-label="close">×</button>' +
+        "</div>" +
+        '<pre class="dshBalanceUpdateErrBody" title="' + t("updateFailed") + '">' + escaped + "</pre>" +
+        '<button class="dshBalanceBtn" type="button" data-update-err-copy>' + t("copyError") + "</button>" +
+        "</div>";
     }
 
     /** Build the npm version snippet shown in the footer (always a clickable button). */
@@ -1452,6 +1496,8 @@ window.__ModuleLoader__.load({
     let timer = null;
     let versionTimer = null;
     let updateSuccessUntil = 0;
+    /** When the last update attempt failed, hold {error, output} so the user can inspect it. */
+    let updateErrorDetail = null;
 
     /** One refresh cycle: fetch balance + usage + providers, update entry and popover. */
     async function refresh(manual) {

package/lib/index.js

@@ -601,12 +601,22 @@ function cleanEnv() {
   const env = { ...process.env };
   const no = env.NODE_OPTIONS || "";
   if (/genie-safe-delete/i.test(no)) {
+    // Strip the WorkBuddy safe-delete shim entirely. The shim monkey-patches
+    // fs.unlink/rm to route through a trash channel which is disabled inside
+    // the desktop sandbox, causing pnpm/npm to fail-closed whenever they delete
+    // temporary files during an install. Removing the --require prevents the
+    // child Node process from loading it at all.
     env.NODE_OPTIONS = no
       .replace(/\s*--require="[^"]*genie-safe-delete[^"]*"/gi, "")
       .replace(/\s*--require=[^\s"]*genie-safe-delete[^\s"]*/gi, "")
       .trim();
     if (!env.NODE_OPTIONS) delete env.NODE_OPTIONS;
   }
+  // Also delete any remaining WorkBuddy/shim variables that can re-enable
+  // safe-delete behavior in spawned package managers.
+  delete env.WORKBUDDY_SAFE_DELETE;
+  delete env.GENIE_SAFE_DELETE;
+  delete env.SAFE_DELETE_ENABLED;
   env.NPM_CONFIG_FUND = "false";
   env.NPM_CONFIG_AUDIT = "false";
   return env;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-deepseek-balance-widget",
-  "version": "2.3.6",
+  "version": "2.3.8",
   "type": "module",
   "description": "Multi-provider AI balance widget for the dsh web sidebar: a live, auto-refreshing balance pill plus a detail popover listing DeepSeek and any added providers (MiMo etc.). Keys are stored per-machine in ~/.dsh/ai-balances.json and resolved from the local credential seam, never hardcoded.",
   "keywords": [