dsh-deepseek-balance-widget 2.4.0 → 2.4.2

package/README.md

@@ -8,29 +8,46 @@
 
 ![AI 余额侧边栏展示](assets/screenshot.png)
 
-- 侧边栏实时显示余额 / 今日消费 / 今日 Token，30 秒自动刷新，并随当前平台切换
-- 弹窗顶部显示当前平台标题：点「**更换**」在已添加的平台间切换，点「**×**」可移除该平台
-- 弹窗右上角「**+ 添加**」：加入 MiMo
-- 详情字段：余额、累计消费、今日消费、今日 Token、本月消耗（本月消费 / Tokens）
-- 「**AI 帮我配置**」：复制提示语发给智能体，AI 会一步步指导你抓取凭证并完成配置
-- 弹窗底部显示版本号，有新版时一键自动更新
-- 支持中 / EN 界面切换
+**侧边栏入口**
+- 实时显示当前平台的余额 / 今日消费 / 今日 Token，每 30 秒自动刷新
+- 数值随弹窗内切换的平台联动
+
+**详情弹窗**
+- 顶部显示当前平台，点「**更换**」下拉在已添加平台间切换，点「**×**」移除（带确认）
+- 右上角「**+ 添加**」：加入 MiMo 或 DeepSeek
+- DeepSeek 详情：余额、累计消费、今日消费、今日 Token、本月消耗（本月消费 / Tokens）
+- MiMo 详情：余额、累计消费、今日消费 / 今日 Token、本月消耗、**每日消耗表**（日期 / Token / 请求 / 消费）
+- DeepSeek 显示时段徽章（繁忙 / 空闲，GMT+8：工作日 09-12 / 14-18 为繁忙时段，周末全天空闲）
+
+**用量统计**
+- DeepSeek：需可选配置 `DEEPSEEK_PLATFORM_TOKEN`（对 AI 说「帮我配置用量统计」即可）；未配置时仅显示余额
+- MiMo：余额与用量均用登录 Cookie 查询，自动推算消费金额（按官方单价）
+
+**AI 帮我配置**
+- 弹窗内一键复制提示语，发给智能体后 AI 读取本机教程文件、一步步引导你抓取凭证并写入插件
+- MiMo 支持两种方式：AI 引导向导（打开余额页 → 复制提示语），或手动粘贴 Cookie / cURL（自动提取 Cookie）
+- 数据仅存本机，不上传
+
+**版本与更新**
+- 弹窗底部显示当前版本，有新版本时显示 `vX → vY 更新`，一键自动更新
+- 更新失败时显示错误详情面板（可复制错误信息），并引导前往 GitHub 自行安装
+- 界面语言随 dsh 设置自动切换中 / EN
 
 ## 安装
 
 需要：已安装 dsh（可用 `dsh web`）。
 
 ```bash
-dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.0
+dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.2
 ```
 
 从 npm 拉取安装，dsh 自动注册到 `dsh.profile.bundles`，完成后**重启 `dsh web`** 即可。
 
-> **务必写死版本号 `@2.4.0`**（当前最新稳定版）。不要用 `@latest`——它会被本地 pnpm/npm 缓存或镜像源解析成旧版本，导致装到老版。如果未来发布了更高版本，把这里的版本号换成最新的即可。
+> **务必写死版本号 `@2.4.2`**（当前最新稳定版）。不要用 `@latest`——它会被本地 pnpm/npm 缓存或镜像源解析成旧版本，导致装到老版。如果未来发布了更高版本，把这里的版本号换成最新的即可。
 
 也可以直接对 AI 说：
 
-> 帮我用 npm 安装 dsh-deepseek-balance-widget 插件，执行 `dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.0`。
+> 帮我用 npm 安装 dsh-deepseek-balance-widget 插件，执行 `dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.2`。
 
 ## 配置
 
@@ -40,12 +57,12 @@ dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.0
 
 > 帮我配置 dsh-deepseek-balance-widget。
 
-AI 会接管全部：问 API Key / 引导获取平台 Cookie → 写入本机 → 提醒重启 `dsh web`。
+AI 会接管全部：问 API Key / 引导获取平台 Cookie → 读取本机教程写入配置 → 提醒重启 `dsh web`。
 
 | 平台 | 凭据 | 备注 |
 | --- | --- | --- |
 | DeepSeek | `DEEPSEEK_API_KEY` | 必填，余额 |
-| DeepSeek 用量 | `DEEPSEEK_PLATFORM_TOKEN` | 可选，统计累计消费 / 本月 / 今日 |
+| DeepSeek 用量 | `DEEPSEEK_PLATFORM_TOKEN` | 可选，统计累计 / 本月 / 今日 |
 | MiMo（小米） | 登录 Cookie | AI 引导获取 |
 
 凭据保存在你本机的 `~/.dsh/ai-balances.json`，不随插件分发、不上传。
@@ -57,29 +74,29 @@ AI 会接管全部：问 API Key / 引导获取平台 Cookie → 写入本机
 ### 方式一：弹窗一键更新（推荐，已装用户）
 
 1. 打开余额弹窗，底部会显示版本号；有新版本时显示 `vX → vY 更新`（`vY` 为 npm 上 semver 最高的版本）。
-2. 点击「**检查更新**」，插件会自动从 npm 拉取并安装最高版本。
+2. 点击「**更新**」，插件会自动从 npm 拉取并安装最高版本。
 3. 安装完成后**必须彻底重启 `dsh web`**（关掉 `dsh web` 进程 / 退出桌面端再重开，**仅刷新浏览器页面无效**）才能加载新版本。
 
-> 弹窗的「检查更新」会跳过 `latest` tag，直接安装 npm 上 semver 最高的版本，所以即使有人把 `latest` 改低了也能升到最新。
+> 弹窗的「更新」会跳过 `latest` tag，直接安装 npm 上 semver 最高的版本，所以即使有人把 `latest` 改低了也能升到最新。
 
 ### 方式二：命令行强制更新（最稳妥，适合卡住或装不上的情况）
 
 ```bash
-dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.0
+dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.2
 ```
 
-**写死版本号 `@2.4.0`** 可绕过本地缓存 / 镜像源不同步 / `latest` 解析成旧版的问题，一步到位。装完**彻底重启 `dsh web`**。
+**写死版本号 `@2.4.2`** 可绕过本地缓存 / 镜像源不同步 / `latest` 解析成旧版的问题，一步到位。装完**彻底重启 `dsh web`**。
 
 ### 方式三：手动更新（命令行更新失败时兜底）
 
 ```bash
 cd ~/.dsh/profiles/web
-npm install dsh-deepseek-balance-widget@2.4.0   # 若目录内有 pnpm-lock.yaml 则用 pnpm add
+npm install dsh-deepseek-balance-widget@2.4.2   # 若目录内有 pnpm-lock.yaml 则用 pnpm add
 # 验证磁盘上确实变了
 cat node_modules/dsh-deepseek-balance-widget/package.json | grep '"version"'
 ```
 
-确认输出 `2.4.0` 后，**彻底重启 `dsh web`** 即可。
+确认输出 `2.4.2` 后，**彻底重启 `dsh web`** 即可。
 
 > 如果你的环境里弹窗/命令行的更新一直失败（提示版本没变），通常是 Agent 主机（如 WorkBuddy）通过 `NODE_OPTIONS` 注入了文件删除拦截导致 pnpm/npm 更新中断。此时在**普通终端**（不通过 Agent 运行）里执行上面的命令即可成功；或先执行 `set NODE_OPTIONS=`（PowerShell）再重试。
 

package/README_EN.md

@@ -8,29 +8,46 @@ A multi-provider AI balance widget for the dsh web sidebar. **DeepSeek** is buil
 
 ![AI balance sidebar](assets/screenshot-en.png)
 
-- Sidebar shows Balance / Today spend / Today tokens, auto-refresh every 30 s; values follow the selected provider
-- Popover header shows the current provider: a "**Switch**" menu changes to another added provider, and "**×**" removes it
-- "**+ Add**" button (top right): add **MiMo**
-- Details: balance, cumulative spend, today spend, today tokens, monthly usage (monthly spend / tokens)
-- "**AI 帮我配置**": copy a prompt, send it to your AI, and it walks you through fetching the credentials — no digging through cookies by hand
-- Version shown in the popover footer; one-click auto-update when a new version is available
-- UI language toggle: 中文 / EN
+**Sidebar entry**
+- Live Balance / Today spend / Today tokens for the current provider, auto-refresh every 30 s
+- Values follow the provider selected in the popover
+
+**Detail popover**
+- Header shows the current provider: a "**Switch**" menu changes to another added provider, "**×**" removes it (with confirmation)
+- "**+ Add**" button (top right): add MiMo or DeepSeek
+- DeepSeek details: balance, cumulative spend, today spend, today tokens, monthly usage (monthly spend / tokens)
+- MiMo details: balance, cumulative spend, today spend / today tokens, monthly usage, and a **daily usage table** (date / tokens / requests / spend)
+- DeepSeek shows a peak / off-peak badge (GMT+8: weekdays 09-12 / 14-18 are peak, weekends off-peak all day)
+
+**Usage stats**
+- DeepSeek: optional `DEEPSEEK_PLATFORM_TOKEN` (just tell your AI "help me configure usage stats"); balance-only otherwise
+- MiMo: balance and usage both come from the login cookie; spend is computed at official unit prices
+
+**AI-guided setup**
+- One click in the popover copies a prompt; the AI reads the local guide file and walks you through capturing and writing credentials
+- MiMo supports two paths: an AI wizard (open balance page → copy prompt), or pasting the Cookie / cURL manually (Cookie auto-extracted)
+- Everything stays on your machine; nothing is uploaded
+
+**Version & updates**
+- The footer shows the current version; when a newer one exists it reads `vX → vY 更新` with one-click auto-update
+- On update failure an error panel shows the details (copyable) and points you to GitHub for a manual install
+- UI follows dsh's language setting (中文 / EN)
 
 ## Install
 
 Requires: dsh installed (with `dsh web` working).
 
 ```bash
-dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.0
+dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.2
 ```
 
 Installed from npm and auto-registered by dsh. **Restart `dsh web`** and the balance button appears in the sidebar.
 
-> **Always pin the version `@2.4.0`** (the current latest stable). Do not use `@latest` — local pnpm/npm cache or a mirror registry can resolve it to an outdated release. When a newer version is released, bump the number here.
+> **Always pin the version `@2.4.2`** (the current latest stable). Do not use `@latest` — local pnpm/npm cache or a mirror registry can resolve it to an outdated release. When a newer version is released, bump the number here.
 
 Or just tell your AI:
 
-> Install the dsh-deepseek-balance-widget plugin for me via npm: run `dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.0`.
+> Install the dsh-deepseek-balance-widget plugin for me via npm: run `dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.2`.
 
 ## Configuration
 
@@ -57,29 +74,29 @@ Upgrade to the latest stable release on npm regardless of which older version yo
 ### Method 1: One-click from the popover (recommended for installed users)
 
 1. Open the balance popover; the footer shows the version. When a newer one exists it reads `vX → vY 更新` (where `vY` is the highest semver version on npm).
-2. Click "**检查更新**" (Check for update). The plugin pulls and installs the highest semver version from npm automatically.
+2. Click "**更新**" (Update). The plugin pulls and installs the highest semver version from npm automatically.
 3. After install you **must fully restart `dsh web`** (stop the `dsh web` process / quit the desktop app and reopen — **refreshing the browser tab is not enough**) for the new version to load.
 
-> The popover's "Check for update" skips the `latest` tag and installs the highest semver version on npm, so it still reaches latest even if someone lowers the `latest` tag.
+> The popover's "Update" skips the `latest` tag and installs the highest semver version on npm, so it still reaches latest even if someone lowers the `latest` tag.
 
 ### Method 2: Force update from the command line (most reliable if stuck)
 
 ```bash
-dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.0
+dsh plugin --profile web add dsh-deepseek-balance-widget@2.4.2
 ```
 
-**Pinning `@2.4.0`** bypasses local cache / mirror desync / a stale `latest` resolution in one step. Then **fully restart `dsh web`**.
+**Pinning `@2.4.2`** bypasses local cache / mirror desync / a stale `latest` resolution in one step. Then **fully restart `dsh web`**.
 
 ### Method 3: Manual update (fallback when the command-line update fails)
 
 ```bash
 cd ~/.dsh/profiles/web
-npm install dsh-deepseek-balance-widget@2.4.0   # use `pnpm add` if a pnpm-lock.yaml exists in this dir
+npm install dsh-deepseek-balance-widget@2.4.2   # use `pnpm add` if a pnpm-lock.yaml exists in this dir
 # verify the on-disk version actually changed
 cat node_modules/dsh-deepseek-balance-widget/package.json | grep '"version"'
 ```
 
-Once it prints `2.4.0`, **fully restart `dsh web`**.
+Once it prints `2.4.2`, **fully restart `dsh web`**.
 
 > If the popover / command-line update keeps failing (version never changes), an agent host (e.g. WorkBuddy) is likely injecting a file-deletion guard via `NODE_OPTIONS`, which makes pnpm/npm abort during updates. Run the command in a **plain terminal** (not through the agent), or unset `NODE_OPTIONS` first (PowerShell: `set NODE_OPTIONS=`) and retry.
 

package/lib/client.js

@@ -1104,9 +1104,15 @@ window.__ModuleLoader__.load({
       return html;
     }
 
-    /** DeepSeek peak/off-peak period based on Beijing time (UTC+8). Peak: 09-12, 14-18. */
+    /** DeepSeek peak/off-peak period based on Beijing time (UTC+8).
+     *  Weekdays peak: 09:00-12:00, 14:00-18:00.
+     *  Since 2026-08-23 00:00 CST, weekends (Sat/Sun) are off-peak all day.
+     */
     function currentDeepseekPeriod() {
-      const hour = (new Date().getUTCHours() + 8) % 24;
+      const bj = new Date(Date.now() + 8 * 60 * 60 * 1000);
+      const hour = bj.getUTCHours();
+      const day = bj.getUTCDay(); // 0 = Sunday, 6 = Saturday
+      if (day === 0 || day === 6) return "offPeak";
       return ((hour >= 9 && hour < 12) || (hour >= 14 && hour < 18)) ? "peak" : "offPeak";
     }
 

package/lib/index.js

@@ -601,22 +601,20 @@ function cleanEnv() {
   const env = { ...process.env };
   const no = env.NODE_OPTIONS || "";
   if (/genie-safe-delete/i.test(no)) {
-    // Strip the WorkBuddy safe-delete shim entirely. The shim monkey-patches
-    // fs.unlink/rm to route through a trash channel which is disabled inside
-    // the desktop sandbox, causing pnpm/npm to fail-closed whenever they delete
-    // temporary files during an install. Removing the --require prevents the
-    // child Node process from loading it at all.
-    env.NODE_OPTIONS = no
-      .replace(/\s*--require="[^"]*genie-safe-delete[^"]*"/gi, "")
-      .replace(/\s*--require=[^\s"]*genie-safe-delete[^\s"]*/gi, "")
-      .trim();
-    if (!env.NODE_OPTIONS) delete env.NODE_OPTIONS;
+    // The WorkBuddy safe-delete shim monkey-patches fs.unlink/rm to route
+    // through a trash channel which is disabled inside the desktop sandbox.
+    // Any package-manager child that deletes temp files fail-closed. Rather
+    // than trying to surgically remove one --require flag (which breaks if
+    // WorkBuddy changes spacing/quotes), drop NODE_OPTIONS entirely for the
+    // spawned install process. Install commands do not need it.
+    delete env.NODE_OPTIONS;
   }
   // Also delete any remaining WorkBuddy/shim variables that can re-enable
-  // safe-delete behavior in spawned package managers.
+  // safe-delete behavior in spawned package managers or shells.
   delete env.WORKBUDDY_SAFE_DELETE;
   delete env.GENIE_SAFE_DELETE;
   delete env.SAFE_DELETE_ENABLED;
+  delete env.BASH_ENV;
   env.NPM_CONFIG_FUND = "false";
   env.NPM_CONFIG_AUDIT = "false";
   return env;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-deepseek-balance-widget",
-  "version": "2.4.0",
+  "version": "2.4.2",
   "type": "module",
   "description": "Multi-provider AI balance widget for the dsh web sidebar: a live, auto-refreshing balance pill plus a detail popover listing DeepSeek and any added providers (MiMo etc.). Keys are stored per-machine in ~/.dsh/ai-balances.json and resolved from the local credential seam, never hardcoded.",
   "keywords": [