dsh-deepseek-balance-widget 2.3.7 → 2.3.9

package/lib/client.js

@@ -40,6 +40,8 @@ window.__ModuleLoader__.load({
         updating: "更新中…",
         updateSuccess: "成功，请重启 dsh",
         updateFailed: "更新失败",
+        updateFailedHint: "自动更新未成功，请手动更新：重启 dsh 后点「检查更新」重试，或前往 GitHub 自行安装最新版。",
+        githubUrl: "https://github.com/crazy-L118/dsh-deepseek-balance-widget",
         failed: "失败",
         usageUnavailable: "用量接口不可用（{0}）",
         usageNotConfigured: "未配置 DEEPSEEK_PLATFORM_TOKEN，仅显示余额。对 AI 说「帮我配置用量统计」，AI 会帮你设置（可选）。",
@@ -110,6 +112,7 @@ window.__ModuleLoader__.load({
         pasteCookieHint: "请粘贴 Cookie 或 cURL，AI 会自动提取",
         copied: "已复制",
         copyFailed: "复制失败",
+        copyError: "复制错误信息",
         refresh: "刷新",
         peakPeriod: "繁忙时段",
         offPeakPeriod: "空闲时段"
@@ -125,6 +128,8 @@ window.__ModuleLoader__.load({
         updating: "Updating…",
         updateSuccess: "Success, please restart dsh",
         updateFailed: "Update failed",
+        updateFailedHint: "Auto-update did not succeed. Please update manually: restart dsh and click \"Check for updates\" to retry, or visit GitHub to install the latest version yourself.",
+        githubUrl: "https://github.com/crazy-L118/dsh-deepseek-balance-widget",
         failed: "Failed",
         usageUnavailable: "Usage API unavailable ({0})",
         usageNotConfigured: "DEEPSEEK_PLATFORM_TOKEN not configured, showing balance only. Tell the AI 'help me configure usage stats' to set it up (optional).",
@@ -195,6 +200,7 @@ window.__ModuleLoader__.load({
         pasteCookieHint: "Paste a Cookie or cURL; the AI will extract it",
         copied: "Copied",
         copyFailed: "Copy failed",
+        copyError: "Copy error",
         refresh: "Refresh",
         peakPeriod: "Peak",
         offPeakPeriod: "Off-peak"
@@ -420,7 +426,15 @@ window.__ModuleLoader__.load({
         ".dshBalanceWizardLink:hover{color:#79b8ff}",
         ".dshBalanceCookiePreview{font-size:11px;color:#7b8494;background:rgba(255,255,255,.05);border-radius:6px;padding:6px 8px;word-break:break-all}",
         ".dshBalanceCookiePreview code{color:#e6e9ef;font-size:10px}",
-        ".dshBalanceCookiePreview[data-found=false]{display:none}"
+        ".dshBalanceCookiePreview[data-found=false]{display:none}",
+        ".dshBalanceUpdateErr{margin-top:10px;border:1px solid rgba(248,81,73,.25);border-radius:8px;background:rgba(248,81,73,.08);padding:8px 10px}",
+        ".dshBalanceUpdateErrHead{display:flex;justify-content:space-between;align-items:center;font-size:12px;font-weight:600;color:#f85149;margin-bottom:6px}",
+        ".dshBalanceUpdateErrClose{appearance:none;background:transparent;border:0;color:#9aa4b2;font-size:18px;line-height:1;cursor:pointer;padding:0 2px}",
+        ".dshBalanceUpdateErrClose:hover{color:#f85149}",
+        ".dshBalanceUpdateErrBody{max-height:120px;overflow:auto;background:#0f1216;border:1px solid rgba(255,255,255,.08);border-radius:6px;padding:6px 8px;margin:0 0 8px;font-family:ui-monospace,Menlo,Consolas,monospace;font-size:10px;line-height:1.4;color:#c9d1d9;white-space:pre-wrap;word-break:break-all}",
+        ".dshBalanceUpdateErrHint{font-size:11px;line-height:1.5;color:#e6edf3;margin:0 0 8px}",
+        ".dshBalanceUpdateErrHint a{color:#58a6ff;text-decoration:underline;word-break:break-all}",
+        ".dshBalanceUpdateErrHint a:hover{color:#79c0ff}"
       ].join("");
       const tag = document.createElement("style");
       tag.dataset.plugin = "dsh-deepseek-balance-widget";
@@ -565,6 +579,8 @@ window.__ModuleLoader__.load({
       } else {
         btn.textContent = t("updateFailed");
         btn.title = String(result.error || t("updateFailed")) + (result.output ? "\n" + result.output.slice(-200) : "");
+        updateErrorDetail = { error: result.error || t("updateFailed"), output: result.output || "" };
+        renderPopover();
         setTimeout(() => { btn.textContent = originalText; btn.disabled = false; btn.title = ""; }, 3000);
       }
     }
@@ -835,6 +851,24 @@ window.__ModuleLoader__.load({
       if (updateBtn !== null) {
         updateBtn.addEventListener("click", () => handleUpdateClick(updateBtn));
       }
+      const updateErrClose = popRef.querySelector("[data-update-err-close]");
+      if (updateErrClose !== null) {
+        updateErrClose.addEventListener("click", () => { updateErrorDetail = null; renderPopover(); });
+      }
+      const updateErrCopy = popRef.querySelector("[data-update-err-copy]");
+      if (updateErrCopy !== null) {
+        updateErrCopy.addEventListener("click", () => {
+          if (!updateErrorDetail) return;
+          const text = String(updateErrorDetail.error || "") + "\n" + String(updateErrorDetail.output || "");
+          navigator.clipboard?.writeText(text).then(() => {
+            updateErrCopy.textContent = t("copied");
+            setTimeout(() => updateErrCopy.textContent = t("copyError"), 1500);
+          }).catch(() => {
+            updateErrCopy.textContent = t("copyFailed");
+            setTimeout(() => updateErrCopy.textContent = t("copyError"), 1500);
+          });
+        });
+      }
       const addBtn = popRef.querySelector("[data-add]");
       if (addBtn !== null) addBtn.addEventListener("click", () => { addFormState = { kind: "mimo", label: "", key: "", cookie: "" }; showAddForm = true; renderPopover(); });
       const cancelBtn = popRef.querySelector("[data-cancel]");
@@ -1221,11 +1255,30 @@ window.__ModuleLoader__.load({
       }
       const updated = lastUpdated ? lastUpdated.toLocaleTimeString() : "—";
       const versionHtml = versionHtmlOf(lastVersion);
+      const errorPanel = updateErrorDetail ? updateErrorHtml(updateErrorDetail) : "";
       return header + syncHint + body +
         '<div class="dshBalanceFoot">' + versionHtml +
         '<span style="display:flex;align-items:center;gap:8px">' +
         '<button class="dshBalanceBtn" type="button" data-refresh>' + t("refresh") + "</button>" +
-        '<span>' + t("updatedAt") + updated + "</span></span></div>";
+        '<span>' + t("updatedAt") + updated + "</span></span></div>" + errorPanel;
+    }
+
+    /** Render the update-failure detail panel shown below the footer. */
+    function updateErrorHtml(detail) {
+      const summary = String(detail.error || t("updateFailed"));
+      const text = (detail.output || "").trim();
+      const snippet = text.slice(-500) || summary;
+      const escaped = snippet.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+      return '<div class="dshBalanceUpdateErr">' +
+        '<div class="dshBalanceUpdateErrHead">' +
+        '<span>' + t("updateFailed") + "</span>" +
+        '<button class="dshBalanceUpdateErrClose" type="button" data-update-err-close aria-label="close">×</button>' +
+        "</div>" +
+        '<pre class="dshBalanceUpdateErrBody" title="' + t("updateFailed") + '">' + escaped + "</pre>" +
+        '<p class="dshBalanceUpdateErrHint">' + t("updateFailedHint") +
+        ' <a href="' + t("githubUrl") + '" target="_blank" rel="noopener">' + t("githubUrl") + "</a></p>" +
+        '<button class="dshBalanceBtn" type="button" data-update-err-copy>' + t("copyError") + "</button>" +
+        "</div>";
     }
 
     /** Build the npm version snippet shown in the footer (always a clickable button). */
@@ -1452,6 +1505,8 @@ window.__ModuleLoader__.load({
     let timer = null;
     let versionTimer = null;
     let updateSuccessUntil = 0;
+    /** When the last update attempt failed, hold {error, output} so the user can inspect it. */
+    let updateErrorDetail = null;
 
     /** One refresh cycle: fetch balance + usage + providers, update entry and popover. */
     async function refresh(manual) {

package/lib/index.js

@@ -601,12 +601,22 @@ function cleanEnv() {
   const env = { ...process.env };
   const no = env.NODE_OPTIONS || "";
   if (/genie-safe-delete/i.test(no)) {
+    // Strip the WorkBuddy safe-delete shim entirely. The shim monkey-patches
+    // fs.unlink/rm to route through a trash channel which is disabled inside
+    // the desktop sandbox, causing pnpm/npm to fail-closed whenever they delete
+    // temporary files during an install. Removing the --require prevents the
+    // child Node process from loading it at all.
     env.NODE_OPTIONS = no
       .replace(/\s*--require="[^"]*genie-safe-delete[^"]*"/gi, "")
       .replace(/\s*--require=[^\s"]*genie-safe-delete[^\s"]*/gi, "")
       .trim();
     if (!env.NODE_OPTIONS) delete env.NODE_OPTIONS;
   }
+  // Also delete any remaining WorkBuddy/shim variables that can re-enable
+  // safe-delete behavior in spawned package managers.
+  delete env.WORKBUDDY_SAFE_DELETE;
+  delete env.GENIE_SAFE_DELETE;
+  delete env.SAFE_DELETE_ENABLED;
   env.NPM_CONFIG_FUND = "false";
   env.NPM_CONFIG_AUDIT = "false";
   return env;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-deepseek-balance-widget",
-  "version": "2.3.7",
+  "version": "2.3.9",
   "type": "module",
   "description": "Multi-provider AI balance widget for the dsh web sidebar: a live, auto-refreshing balance pill plus a detail popover listing DeepSeek and any added providers (MiMo etc.). Keys are stored per-machine in ~/.dsh/ai-balances.json and resolved from the local credential seam, never hardcoded.",
   "keywords": [