dsh-multi-provider-usage 0.7.2 → 0.7.4

package/README.md

@@ -41,14 +41,16 @@ panel settings page — extended from one provider to three.
   Code's tooltip breaks its amount into purchased + free credits; a credits
   response without either pool renders a muted **No top-up** badge.
 - **Auto-update** — on boot and every configured interval the host checks the
-  GitHub release feed. A local `link:`/`file:` checkout is fast-forwarded when it
-  is on `main`, clean, and a strict fast-forward. An npm / market / tarball copy
-  updates itself: the release tarball is unpacked and each packaged file
-  (`lib/`, `package.json`, `cordis.patch.yml`, `docs/`) is written to a temp file
-  and renamed over the target, so pnpm's hardlinked store is never edited in
-  place. Either way the running Host keeps the old module graph, so the
-  widget/settings show "updated — restart DSH". The plugin never restarts DSH by
-  itself.
+  npm registry, the npmmirror mirror and the GitHub release feed together and
+  trusts the newest version any of them reports. A local `link:`/`file:` checkout
+  is fast-forwarded when it is on `main`, clean, and a strict fast-forward. An
+  npm / market / tarball copy updates itself: the release tarball is downloaded
+  from the first source that serves it (registry → mirror → GitHub, in turn) and
+  each packaged file (`lib/`, `package.json`, `cordis.patch.yml`, `docs/`) is
+  written to a temp file and renamed over the target, so pnpm's hardlinked store
+  is never edited in place. Either way the running Host keeps the old module
+  graph, so the widget/settings show "updated — restart DSH". The plugin never
+  restarts DSH by itself.
 - **Balance-change animation** — the widget polls on its normal interval; when
   a provider's balance differs from the previous poll, the number counts from
   the old value to the refreshed one while a red/green delta chip (for example
@@ -170,15 +172,11 @@ When the balance is not configured (or the console login is fixable), the
 OpenCode GO card in the plugin settings renders a step-by-step **setup guide**
 in place of the static hint. The lead-in names the state-specific fix (nothing
 configured, an API-key login, or an expired sign-in). Step ① shows the
-`opencode auth login` CLI command with a **Copy command** button; step ② is the
-manual path — copy the console token and store it as the `OPENCODE_CONSOLE_TOKEN`
-credential — with a **Copy credential ref** button and a link to the OpenCode
-console website (derived from `opencodeConsoleBaseUrl`, ending in `/console`);
-step ③ offers a **Re-check** button that re-reads the sign-in state and forces
-one upstream usage read, so a fresh login shows the balance without restarting
-DSH (unsaved form edits are never discarded by the re-check). The
-`/provider-usage` command gives the same state-specific guidance as text for
-all three fixable states.
+`opencode auth login` CLI command with a **Copy command** button; step ② offers
+a **Re-check** button that re-reads the sign-in state and forces one upstream
+usage read, so a fresh login shows the balance without restarting DSH (unsaved
+form edits are never discarded by the re-check). The `/provider-usage` command
+gives the same state-specific guidance as text for all three fixable states.
 
 The optional `opencodeConsoleAuthFile` overrides the auth file (and its
 directory is used to locate `opencode.db`), `opencodeConsoleOrgId` supplies the
@@ -267,7 +265,7 @@ the settings page and the auto-generated form hot-apply.
 | `glmRegion` | `"auto"` | `auto`, `zai`, `bigmodel`, `custom` |
 | `cacheMs` | `30000` | Per-provider host cache TTL |
 | `updateCheck` | `true` | npm update check (24 h) |
-| `autoUpdate` | `true` | Check GitHub releases; fast-forward a clean checkout, otherwise replace an installed package |
+| `autoUpdate` | `true` | Check npm, npmmirror and GitHub together; fast-forward a clean checkout, otherwise replace an installed package from the first source that serves the tarball |
 | `autoUpdateCheckHours` | `6` | Hours between auto-update checks (1–168) |
 | `injectSessionHeader` | `true` | OpenCode GO session-header fix |
 | `providerOrder` | all three ids | Provider display order in the widget; drag the cards in the plugin settings to reorder |
@@ -421,7 +419,7 @@ network and no real keys. They cover the schema, all three adapters, OpenCode
 GO service integration/fallback, aggregation and error isolation, caching and
 forced refresh, settings conflicts/whitelisting, the client bundle contract,
 top-up balance discovery (credential and local auth.json) and failure
-isolation, and the session-header injection. 98 tests, all offline.
+isolation, and the session-header injection. 102 tests, all offline.
 
 ## License
 

package/README.zh.md

@@ -34,11 +34,12 @@
   设置页内为分步引导：可复制的登录命令、控制台网页链接与「重新检测」按钮。
   Command Code 的悬停提示会拆成「购买 + 免费」；credits 响应没有这两个池时显示
   灰色「无充值额度」。
-- **自动更新** — 宿主启动后以及按配置的间隔检查 GitHub Release。本地
-  `link:`/`file:` 目录检出在「main 分支、工作区干净、可严格 fast-forward」时直接
-  `git pull`；npm / 市场 / tarball 安装的副本则下载该 Release 的 tarball，先写临时
-  文件再 `rename` 覆盖 `lib/`、`package.json`、`cordis.patch.yml` 等打包文件——不会
-  就地改写 pnpm store 的硬链接。两种方式完成后，运行中的宿主仍持有旧模块，所以
+- **自动更新** — 宿主启动后以及按配置的间隔，同时向 npm registry、npmmirror 镜像与
+  GitHub Release 查询，以其中报告的最新版本为准。本地 `link:`/`file:` 目录检出在
+  「main 分支、工作区干净、可严格 fast-forward」时直接 `git pull`；npm / 市场 / tarball
+  安装的副本按「npm → npmmirror → GitHub」依次尝试下载 tarball，先写临时文件再
+  `rename` 覆盖 `lib/`、`package.json`、`cordis.patch.yml` 等打包文件——不会就地
+  改写 pnpm store 的硬链接。两种方式完成后，运行中的宿主仍持有旧模块，所以
   组件/设置页显示“已更新到 vX，重启 DSH 生效”；插件不会自行重启 DSH。
 - **余额变化动画** — 组件按正常轮询周期刷新；某个服务商的余额相比上一次轮询
   发生变化时，数字会从旧值滚动到新值，同时一个红色/绿色差值（例如 `-0.1`）
@@ -139,11 +140,9 @@ Plugins 面板中的设置页，悬停提示修复方式：运行 `opencode auth
 
 余额未配置或控制台登录可修复时，插件设置页的 OpenCode GO 卡片不再给一句静态
 提示，而是渲染分步**引导**：引言按当前状态指明修复方式（未配置 / API Key 登录 /
-登录已过期）。第①步给出 `opencode auth login` 命令与「复制命令」按钮；第②步是
-手动路径——从控制台网页复制令牌、保存为 `OPENCODE_CONSOLE_TOKEN` 凭据——带
-「复制凭据名」按钮和打开 OpenCode 控制台网页的链接（由 `opencodeConsoleBaseUrl`
-推导，以 `/console` 结尾）；第③步提供「重新检测」按钮，重读登录状态并强制刷新
-一次用量，新登录无需重启 DSH 即可显示余额（重新检测不会丢弃表单里未保存的修改）。
+登录已过期）。第①步给出 `opencode auth login` 命令与「复制命令」按钮；第②步提供
+「重新检测」按钮，重读登录状态并强制刷新一次用量，新登录无需重启 DSH 即可显示
+余额（重新检测不会丢弃表单里未保存的修改）。
 `/provider-usage` 命令对三种可修复状态都会给出同样的文字引导。
 
 可用 `opencodeConsoleAuthFile` 覆盖 auth.json 路径（其目录也用于定位
@@ -225,7 +224,7 @@ Loader 直接读取导出的 `Config` schema；所有字段都是 `.volatile()`
 | `glmRegion` | `"auto"` | `auto`、`zai`、`bigmodel`、`custom` |
 | `cacheMs` | `30000` | 单个服务商的宿主缓存 TTL |
 | `updateCheck` | `true` | npm 新版本检查（24 小时） |
-| `autoUpdate` | `true` | 检查 GitHub Release；干净 checkout 快进，安装包用 Release tarball 原地替换 |
+| `autoUpdate` | `true` | 同时查询 npm / npmmirror / GitHub Release；干净 checkout 快进，安装包按可达的源依次下载 tarball 原地替换 |
 | `autoUpdateCheckHours` | `6` | 自动更新检查间隔（1–168 小时） |
 | `injectSessionHeader` | `true` | OpenCode GO 会话头修复 |
 | `providerOrder` | 三个 id 全集 | 组件中的显示顺序；在插件设置里拖动卡片调整 |
@@ -370,7 +369,7 @@ npm test
 测试是封闭的：伪造 `globalThis.fetch` + stub Cordis 上下文，不访问网络、不使用真实
 密钥。覆盖 schema、三个适配器、OpenCode GO 服务集成/回退、聚合与故障隔离、缓存与
 强制刷新、设置冲突/白名单、客户端 bundle 契约、充值余额发现（凭据 / 本地
-auth.json）与失败隔离、会话头注入、余额变化动画；共 98 个测试。
+auth.json）与失败隔离、会话头注入、余额变化动画；共 102 个测试。
 
 ## 许可证
 

package/lib/auto-update.js

@@ -6,10 +6,12 @@
  *
  *   - `checkout` (`link:` / `file:` directory): fast-forward the git checkout,
  *     but only when it is on `main`, clean, and can fast-forward `origin/main`.
- *   - `package` (npm / market / tarball install): download the GitHub release
- *     tarball and replace the packaged files in place. Every file is written
- *     to a temp file inside the package directory first and then renamed over
- *     the target, which keeps pnpm's hardlinked store untouched.
+ *   - `package` (npm / market / tarball install): pick the newest release
+ *     known to npm, the npmmirror mirror and GitHub together, then download
+ *     the release tarball from the first source that serves it and replace
+ *     the packaged files in place. Every file is written to a temp file
+ *     inside the package directory first and then renamed over the target,
+ *     which keeps pnpm's hardlinked store untouched.
  *
  * Neither strategy restarts the Host: the running module graph is stale once
  * the files land, so the UI reports `restartRequired`. The updater never
@@ -28,6 +30,10 @@ import { gunzipSync } from "node:zlib";
 
 export const AUTO_UPDATE_REPO = "wjw1-Evan/dsh-provider-usage";
 export const AUTO_UPDATE_RELEASE_URL = `https://api.github.com/repos/${AUTO_UPDATE_REPO}/releases/latest`;
+/** npm registry — the canonical published package (also the `updateCheck` source). */
+export const NPM_REGISTRY_URL = "https://registry.npmjs.org";
+/** npmmirror mirror of the registry; reachable where npm/GitHub are not. */
+export const NPM_MIRROR_URL = "https://registry.npmmirror.com";
 /** Delay before the first background check, so activation is never blocked. */
 const FIRST_CHECK_DELAY_MS = 15_000;
 /** Hourly tick; the configured check interval gates actual network calls. */
@@ -390,6 +396,124 @@ async function fetchLatestRelease(fetchImpl) {
 	};
 }
 
+// ── package release sources ─────────────────────────────────────────────
+// An installed package updates by downloading a release tarball. GitHub is
+// the canonical source, but the registry serves the identical packaged
+// surface and is reachable where GitHub is not (and vice versa), so the
+// checker asks npm, the npmmirror mirror and GitHub together and trusts the
+// newest version any of them reports.
+
+/** Build the registry tarball URL for a version. */
+function registryTarballUrl(baseUrl, packageName, version) {
+	return `${baseUrl}/${packageName}/-/${packageName}-${version}.tgz`;
+}
+
+/** Fetch the latest published version from one npm registry endpoint. */
+async function fetchLatestFromRegistry(baseUrl, packageName, fetchImpl) {
+	const res = await fetchImpl(`${baseUrl}/${packageName}/latest`, {
+		headers: {
+			Accept: "application/vnd.npm.install-v1+json",
+			"User-Agent": "dsh-multi-provider-usage"
+		},
+		signal: AbortSignal.timeout(10_000)
+	});
+	if (!res.ok) throw new Error(`npm registry check ${res.status}`);
+	const doc = await res.json();
+	const version = typeof doc?.version === "string" ? doc.version : "";
+	if (parseVersion(version) === null) throw new Error("npm registry has no usable version");
+	const dist = doc?.dist?.tarball;
+	return {
+		version,
+		tarballUrl: typeof dist === "string" && dist.length > 0 ? dist : registryTarballUrl(baseUrl, packageName, version)
+	};
+}
+
+/**
+ * Pick the newest release known to any package source: npm registry, the
+ * npmmirror mirror and the GitHub release. One source lagging or failing is
+ * tolerated while any other answers; only when every source fails does the
+ * check itself fail. The winning source's tarball URL is the first download
+ * candidate.
+ */
+async function resolvePackageRelease({ packageName, fetchImpl }) {
+	const candidates = [
+		{ label: "npm", load: () => fetchLatestFromRegistry(NPM_REGISTRY_URL, packageName, fetchImpl) },
+		{ label: "npmmirror", load: () => fetchLatestFromRegistry(NPM_MIRROR_URL, packageName, fetchImpl) },
+		{ label: "GitHub", load: () => fetchLatestRelease(fetchImpl) }
+	];
+	const results = await Promise.allSettled(candidates.map((candidate) => candidate.load()));
+	/** @type {{ version: string, tarballUrl: string }[]} */
+	const successes = [];
+	/** @type {{ label: string, error: unknown }[]} */
+	const failures = [];
+	results.forEach((result, index) => {
+		if (result.status === "fulfilled") successes.push(result.value);
+		else failures.push({ label: candidates[index].label, error: result.reason });
+	});
+	if (successes.length === 0) {
+		throw new Error(`release check failed from all sources — ${describeFailures(failures)}`);
+	}
+	let best = successes[0];
+	for (const candidate of successes.slice(1)) {
+		if (isNewerVersion(candidate.version, best.version)) best = candidate;
+	}
+	return {
+		version: best.version,
+		// Each answering source's tarball URL, newest-version source first: a
+		// source that answered the check is also the likeliest download.
+		tarballUrls: [
+			best.tarballUrl,
+			...successes.filter((candidate) => candidate !== best).map((candidate) => candidate.tarballUrl)
+		]
+	};
+}
+
+/** Tarball URLs to try for a resolved release: answering sources first, then
+ * the canonical URLs for each source in case the check was partial. */
+function downloadCandidates(release, packageName) {
+	const urls = [];
+	const add = (url) => {
+		if (typeof url === "string" && url.length > 0 && !urls.includes(url)) urls.push(url);
+	};
+	for (const url of release.tarballUrls ?? []) add(url);
+	add(registryTarballUrl(NPM_REGISTRY_URL, packageName, release.version));
+	add(registryTarballUrl(NPM_MIRROR_URL, packageName, release.version));
+	add(`https://github.com/${AUTO_UPDATE_REPO}/archive/refs/tags/v${release.version}.tar.gz`);
+	return urls;
+}
+
+/** Short source label for a tarball URL, used in failure messages. */
+function sourceLabelOf(url) {
+	const text = String(url);
+	if (text.includes("registry.npmjs.org")) return "npm";
+	if (text.includes("registry.npmmirror.com")) return "npmmirror";
+	if (text.includes("github.com") || text.includes("githubusercontent.com") || text.includes("codeload")) return "GitHub";
+	return "release";
+}
+
+/** True when the failure is local, so another download source cannot help. */
+function isLocalWriteError(error) {
+	const code = typeof error?.code === "string" ? error.code : "";
+	if (/^(EACCES|EPERM|EROFS|EXDEV|EBUSY|ENOENT|ENOTDIR|EISDIR)$/.test(code)) return true;
+	return /is a symlink|permission denied|not writable/i.test(String(error?.message ?? error));
+}
+
+/** Attach an actionable hint to a filesystem-permission failure. */
+function withWriteHint(error) {
+	const message = String(error?.message ?? error);
+	if (!/^(EACCES|EPERM|EROFS)$/.test(typeof error?.code === "string" ? error.code : "")) return message;
+	return `${message} — the package directory is not writable; fix permissions or reinstall the package`;
+}
+
+/** Compact, bounded "source: error" summary for combined failure messages.
+ * Per-error bounds stay loose enough that an appended hint survives. */
+function describeFailures(failures) {
+	return failures
+		.map(({ label, error }) => `${label}: ${String(error?.message ?? error).slice(0, 240)}`)
+		.join("; ")
+		.slice(0, 800);
+}
+
 /**
  * Start the background checker.
  *
@@ -462,14 +586,20 @@ export function startAutoUpdate(options) {
 		lastCheckAt = now();
 		patch({ status: "checking", message: null });
 		inFlight = (async () => {
+			// A failed release check is an "error" (nothing new is known); a failed
+			// apply is "available" (the release is known, the download/write is
+			// not). The UI toasts only the latter.
+			let phase = "check";
 			try {
-				const release = await fetchLatestRelease(fetchImpl);
 				const install = detect({ packageDir, profileDir, packageName });
+				const release = install.kind === "checkout"
+					? await fetchLatestRelease(fetchImpl)
+					: await resolvePackageRelease({ packageName, fetchImpl });
 				patch({
 					latestVersion: release.version,
 					checkedAt: now(),
 					installKind: install.kind,
-					releaseUrl: release.url
+					releaseUrl: release.url ?? null
 				});
 				// `currentVersion` never changes in a running host, so a release
 				// this session already applied would be re-downloaded every cycle
@@ -510,29 +640,50 @@ export function startAutoUpdate(options) {
 						message: "checkout updated; restart DSH to apply"
 					});
 				}
+				phase = "apply";
 				// Installed package (npm / market / tarball): replace the packaged
-				// files in place. The running Host keeps the old module graph until
-				// it is restarted, which the UI reports.
-				const result = await applyPackageUpdate({
-					packageDir,
-					tarballUrl: release.tarballUrl,
-					fetchImpl,
-					packageName,
-					expectVersion: release.version,
-					logger
-				});
-				logger.info?.(`dsh-multi-provider-usage: self-updated package to ${result.version}; restart DSH to apply`);
-				return patch({
-					status: "updated",
-					version: result.version,
-					updatedAt: now(),
-					restartRequired: true,
-					message: "package files replaced; restart DSH to apply"
-				});
+				// files in place, trying each download source in turn. The running
+				// Host keeps the old module graph until it is restarted, which the
+				// UI reports.
+				/** @type {{ label: string, error: unknown }[]} */
+				const failures = [];
+				const candidates = downloadCandidates(release, packageName);
+				for (const url of candidates) {
+					const label = sourceLabelOf(url);
+					try {
+						const result = await applyPackageUpdate({
+							packageDir,
+							tarballUrl: url,
+							fetchImpl,
+							packageName,
+							expectVersion: release.version,
+							logger
+						});
+						logger.info?.(`dsh-multi-provider-usage: self-updated package to ${result.version} from ${label}; restart DSH to apply`);
+						return patch({
+							status: "updated",
+							version: result.version,
+							updatedAt: now(),
+							restartRequired: true,
+							message: `package files replaced from ${label}; restart DSH to apply`
+						});
+					} catch (error) {
+						if (isLocalWriteError(error)) {
+							// No other download source can fix a local filesystem problem.
+							failures.push({ label, error: withWriteHint(error) });
+							break;
+						}
+						failures.push({ label, error });
+					}
+				}
+				const prefix = failures.length === candidates.length
+					? "update download failed from all sources"
+					: "update failed";
+				throw new Error(`${prefix} — ${describeFailures(failures)}`);
 			} catch (error) {
 				const message = error instanceof Error ? error.message : String(error);
 				logger.warn?.(`dsh-multi-provider-usage: auto-update failed: ${message}`);
-				return patch({ status: "available", message, restartRequired: false });
+				return patch({ status: phase === "check" ? "error" : "available", message, restartRequired: false });
 			} finally {
 				inFlight = null;
 			}

package/lib/client.js

@@ -179,11 +179,8 @@ window.__ModuleLoader__.load({
 			"cfg.console.expired": "控制台登录已过期，请重新运行 opencode auth login 后再刷新。",
 			"cfg.console.guide.title": "如何显示充值余额",
 			"cfg.console.guide.step1": "在终端运行以下命令，选择 OpenCode Console 账号登录：",
-			"cfg.console.guide.step2": "或从控制台网页复制令牌，保存为 DSH 凭据：",
-			"cfg.console.guide.step3": "完成后点击重新检测，插件会重读登录状态并立即刷新余额，无需重启 DSH。",
-			"cfg.console.guide.link": "打开 OpenCode 控制台 ↗",
+			"cfg.console.guide.step2": "完成后点击重新检测，插件会重读登录状态并立即刷新余额，无需重启 DSH。",
 			"cfg.console.copy.command": "复制命令",
-			"cfg.console.copy.ref": "复制凭据名",
 			"cfg.console.recheck": "重新检测",
 			"cfg.console.rechecking": "检测中…",
 			"cfg.console.copied": "已复制",
@@ -307,11 +304,8 @@ window.__ModuleLoader__.load({
 			"cfg.console.expired": "The console sign-in expired; run opencode auth login again and refresh.",
 			"cfg.console.guide.title": "How to show the top-up balance",
 			"cfg.console.guide.step1": "Run this command in a terminal and choose the OpenCode Console account:",
-			"cfg.console.guide.step2": "Or copy the token from the console website and store it as a DSH credential:",
-			"cfg.console.guide.step3": "When done, click Re-check — the plugin re-reads the sign-in state and refreshes the balance immediately; no DSH restart needed.",
-			"cfg.console.guide.link": "Open the OpenCode console ↗",
+			"cfg.console.guide.step2": "When done, click Re-check — the plugin re-reads the sign-in state and refreshes the balance immediately; no DSH restart needed.",
 			"cfg.console.copy.command": "Copy command",
-			"cfg.console.copy.ref": "Copy credential ref",
 			"cfg.console.recheck": "Re-check",
 			"cfg.console.rechecking": "Checking…",
 			"cfg.console.copied": "Copied",
@@ -633,8 +627,10 @@ window.__ModuleLoader__.load({
 			if (state.status === "updated" && state.restartRequired === true) {
 				return t("autoUpdate.updated", { v: state.version || state.latestVersion || "?" });
 			}
-			if (state.status === "available") {
-				return t("autoUpdate.available", { v: state.latestVersion || "?" });
+			// The host only reports "available" after a successful check, so the
+			// version is real; the guard keeps a stale "v?" off the widget anyway.
+			if (state.status === "available" && typeof state.latestVersion === "string" && state.latestVersion.length > 0) {
+				return t("autoUpdate.available", { v: state.latestVersion });
 			}
 			return "";
 		}
@@ -1478,11 +1474,10 @@ window.__ModuleLoader__.load({
 		/**
 		 * The balance setup guide on the OpenCode GO card, shown whenever the
 		 * console read is not configured or names a fixable reason (API-key
-		 * login, expired sign-in). Three steps, each with an actionable row:
-		 * the CLI sign-in command (copyable), the manual credential path with
-		 * a console link, and a re-check that re-reads the sign-in state and
-		 * refreshes the balance without restarting DSH. The lead-in names the
-		 * state-specific fix.
+		 * login, expired sign-in). Two steps, each with an actionable row:
+		 * the CLI sign-in command (copyable), and a re-check that re-reads
+		 * the sign-in state and refreshes the balance without restarting DSH.
+		 * The lead-in names the state-specific fix.
 		 */
 		function ConsoleGuide(props) {
 			const t = props.t;
@@ -1499,9 +1494,6 @@ window.__ModuleLoader__.load({
 			const leadIn = props.reason === "api-key"
 				? t("cfg.console.apiKey")
 				: props.reason === "expired" ? t("cfg.console.expired") : t("cfg.console.hint");
-			const credentialRef = typeof props.credentialRef === "string" && props.credentialRef !== ""
-				? props.credentialRef
-				: "OPENCODE_CONSOLE_TOKEN";
 			const command = "opencode auth login";
 			const copyKeys = { copiedKey: "cfg.console.copied", failedKey: "cfg.console.copyFailed" };
 			const stepRow = (key, text) => react_jsx_runtime.jsx("p", { style: PS.hint, children: text }, key);
@@ -1527,30 +1519,6 @@ window.__ModuleLoader__.load({
 					] }, "guide-step1"),
 					react_jsx_runtime.jsx("div", { style: PS.guideStep, children: [
 						stepRow("guide-step2-text", t("cfg.console.guide.step2")),
-						react_jsx_runtime.jsx("div", {
-							style: PS.inviteRow,
-							children: [
-								react_jsx_runtime.jsx("code", { style: PS.guideCode, children: credentialRef }, "guide-ref"),
-								react_jsx_runtime.jsx(CopyButton, {
-									t: t,
-									value: credentialRef,
-									label: t("cfg.console.copy.ref"),
-									...copyKeys
-								}, "guide-step2-copy")
-							]
-						}, "guide-step2-row"),
-						typeof props.consoleUrl === "string" && props.consoleUrl !== ""
-							? react_jsx_runtime.jsx("a", {
-								style: PS.inviteLink,
-								href: props.consoleUrl,
-								target: "_blank",
-								rel: "noreferrer",
-								children: t("cfg.console.guide.link")
-							}, "guide-link")
-							: null
-					] }, "guide-step2"),
-					react_jsx_runtime.jsx("div", { style: PS.guideStep, children: [
-						stepRow("guide-step3-text", t("cfg.console.guide.step3")),
 						react_jsx_runtime.jsx("button", {
 							type: "button",
 							style: checking || props.disabled === true
@@ -1560,7 +1528,7 @@ window.__ModuleLoader__.load({
 							onClick: recheck,
 							children: checking ? t("cfg.console.rechecking") : t("cfg.console.recheck")
 						}, "guide-recheck")
-					] }, "guide-step3")
+					] }, "guide-step2")
 				]
 			});
 		}
@@ -1855,15 +1823,6 @@ window.__ModuleLoader__.load({
 			const server = formFromValue(state.value || {});
 			const dirty = Object.keys(form).some((key) => !fieldEquals(form[key], server[key]));
 
-			// The balance guide's manual path: the configured console credential
-			// ref (default OPENCODE_CONSOLE_TOKEN) and the console website
-			// derived from the configured console origin.
-			const consoleValue = state.value && typeof state.value === "object" ? state.value : {};
-			const consoleRef = typeof consoleValue.opencodeConsoleApiKeyEnv === "string" && consoleValue.opencodeConsoleApiKeyEnv !== ""
-				? consoleValue.opencodeConsoleApiKeyEnv
-				: "OPENCODE_CONSOLE_TOKEN";
-			const consoleLink = String(consoleValue.opencodeConsoleBaseUrl || "https://opencode.ai").replace(/\/+$/, "") + "/console";
-
 			/**
 			 * Re-check the console balance: re-read the detection report
 			 * (configured / reason) and force one upstream usage read, so a
@@ -2029,8 +1988,6 @@ window.__ModuleLoader__.load({
 								// session) names the fix in the guide's lead-in
 								// instead of the generic hint.
 								reason: consoleFixable ? consoleInfo.reason : "",
-								credentialRef: consoleRef,
-								consoleUrl: consoleLink,
 								disabled: disabled,
 								onRecheck: recheckBalance
 							}, "console-guide"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-multi-provider-usage",
-  "version": "0.7.2",
+  "version": "0.7.4",
   "description": "DSH (DeepSeek Harness) plugin: one collapsible sidebar widget for OpenCode GO, Command Code and GLM Code Plan quotas plus top-up balances, a periodic balance-change animation, automatic checkout and installed-package updates, same-origin usage proxies, a Plugins-panel settings page and a /provider-usage chat command (DSH 0.1.7+ and 0.2.0 compatible)",
   "type": "module",
   "main": "lib/index.js",