dsh-usage-state 0.4.6 → 0.4.7

package/CHANGELOG.md

@@ -6,6 +6,18 @@
 
 ## [Unreleased]
 
+## [0.4.7] - 2026-10-17
+
+### Fixed
+
+- 每次读取/描述凭据时获取当前宿主服务，修复插件早于凭据服务启动时永久缓存“服务不可用”的问题；服务激活或重载后不再继续使用直接回退凭据。DSH 0.2.1-rc.1 的已保存凭据优先级和可写状态因此得到保留。
+
+### Compatibility
+
+- 明确声明 DSH `^0.2.0-rc.2 || ^0.2.1-rc.1`，同步 dsh-settings peer；保留原开发锁定基线。新旧宿主的隔离 tarball 安装、启动、客户端设置装配及 RPC 均复验。
+- CI 增加精确 0.2.1-rc.1 的真实 Typert host/browser 校验；测试 helper 显式选取 browser 条件，兼容上游新增的 Node/browser 双入口。
+- 333 项本地测试通过，包括先失败后修复的服务延迟激活/替换回归；新旧平台各 18 项贡献/产物/宿主契约测试通过。真实账户与厂商接口不属于本次兼容性测试，余额使用本地 fixture。
+
 ## [0.4.6] - 2026-10-14
 
 ### Fixed
@@ -115,7 +127,8 @@
 
 0.4.5起建立版本tag/Release；更早发布没有保存这些引用。0.3.0至0.4.4的比较端点来自各npm版本的gitHead；0.2系列引用对应实现提交，不能替代当时没有保存的正式发布产物。早期日期沿用历史版本记录。今后版本应按发布流程建立稳定引用。
 
-[Unreleased]: https://github.com/takboo/dsh-usage-state/compare/v0.4.6...HEAD
+[Unreleased]: https://github.com/takboo/dsh-usage-state/compare/v0.4.7...HEAD
+[0.4.7]: https://github.com/takboo/dsh-usage-state/compare/v0.4.6...v0.4.7
 [0.4.6]: https://github.com/takboo/dsh-usage-state/compare/v0.4.5...v0.4.6
 [0.4.5]: https://github.com/takboo/dsh-usage-state/compare/3ad9a71e2f7e4b9a05c69bc529e396a364ae6aeb...v0.4.5
 [0.4.4]: https://github.com/takboo/dsh-usage-state/compare/885541638ffa4da05b39bd1864085ba6d9acc288...3ad9a71e2f7e4b9a05c69bc529e396a364ae6aeb

package/README.en.md

@@ -4,7 +4,7 @@
 
 [![CI](https://github.com/takboo/dsh-usage-state/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/takboo/dsh-usage-state/actions/workflows/ci.yml) [![npm](https://img.shields.io/npm/v/dsh-usage-state)](https://www.npmjs.com/package/dsh-usage-state)
 
-> **Release status:** Current version **0.4.6** adds automatic Kimi Code provider usage detection, regional endpoints, and current/legacy quota responses. See the [GitHub Release](https://github.com/takboo/dsh-usage-state/releases/tag/v0.4.6) for the tarball and checksum and the [Changelog](CHANGELOG.md#046---2026-10-14) for details.
+> **Release status:** Current version **0.4.7** verifies compatibility with DSH **0.2.1-rc.1** and fixes credential-service lookup across startup ordering. See the [GitHub Release](https://github.com/takboo/dsh-usage-state/releases/tag/v0.4.7) for the tarball and checksum and the [Changelog](CHANGELOG.md#047---2026-10-17) for details.
 
 Show the current model provider's **account balance** or **coding-plan quota** above the composer input in [DSH (DeepSeek Harness)](https://github.com/deepseek-ai/deepseek-harness). The line matches the input card's width and preserves the native statistics and context meter.
 
@@ -23,7 +23,7 @@ DeepSeek · ¥58.13
 
 ## Install
 
-Requires DSH matching `>=0.2.0-rc.2 <0.3.0-0`. The prebuilt plugin declares Node ≥20. Install into the `web` profile you actually use.
+Requires DSH matching `^0.2.0-rc.2 || ^0.2.1-rc.1` (both candidates revalidated). The prebuilt plugin declares Node ≥20. Install into the `web` profile you actually use.
 
 Install from npm:
 
@@ -83,7 +83,7 @@ Provider settings and advanced controls:
 
 The host schedules refreshes 2 seconds after a turn ends and has a 5-minute fallback timer. The browser reads the RPC mirror every 30 seconds. Ordinary polling initializes a missing or changed account identity, otherwise it does not shorten idle queries to once a minute. Successful requests have a default 60-second minimum; explicit refresh can bypass it, and active retries after failure are not throttled by that successful-request interval. Editing the idle interval reschedules the timer.
 
-The plugin queries balances/quotas and reads the selected model and provider catalog. It writes no session logs and reports no readings to third parties. The host does not return stored key values to the browser; a key the user actively pastes is sent through DSH's credential service to the credential file in the selected home. Environment values take precedence and usually cannot be edited in settings.
+The plugin queries balances/quotas and reads the selected model and provider catalog. It writes no session logs and reports no readings to third parties. The host does not return stored key values to the browser; a key the user actively pastes is sent through DSH's credential service to the credential file in the selected home. Credential precedence follows the host: DSH 0.2.1-rc.1 Web/Desktop prefers saved credentials, with environment values as fallback; 0.2.0-rc.2 prefers the environment. The settings page reflects the host’s actual write permissions.
 
 ## Known limitations
 

package/README.md

@@ -4,7 +4,7 @@
 
 [![CI](https://github.com/takboo/dsh-usage-state/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/takboo/dsh-usage-state/actions/workflows/ci.yml) [![npm](https://img.shields.io/npm/v/dsh-usage-state)](https://www.npmjs.com/package/dsh-usage-state)
 
-> **发布状态**：当前版本 **0.4.6**，增加 Kimi Code provider 自动用量检测，兼容国内/国际端点和新旧套餐响应。安装包及校验文件见 [GitHub Release](https://github.com/takboo/dsh-usage-state/releases/tag/v0.4.6)，详情见 [更新日志](CHANGELOG.md#046---2026-10-14)。
+> **发布状态**：当前版本 **0.4.7**，已验证 DSH **0.2.1-rc.1** 兼容性，并修复启动顺序导致的凭据服务读取问题。安装包及校验文件见 [GitHub Release](https://github.com/takboo/dsh-usage-state/releases/tag/v0.4.7)，详情见 [更新日志](CHANGELOG.md#047---2026-10-17)。
 
 在 [DSH（DeepSeek Harness）](https://github.com/deepseek-ai/deepseek-harness) 输入框上方显示当前模型供应商的**账户余额**或**套餐额度**。状态行与输入卡片同宽，保留原生统计行和上下文计量器。
 
@@ -23,7 +23,7 @@ DeepSeek · ¥58.13
 
 ## 安装
 
-要求：DSH版本满足 `>=0.2.0-rc.2 <0.3.0-0`，运行预构建插件声明Node≥20，安装到正在使用的 `web` profile。
+要求：DSH版本满足 `^0.2.0-rc.2 || ^0.2.1-rc.1`（已复验这两个候选版本），运行预构建插件声明Node≥20，安装到正在使用的 `web` profile。
 
 从npm安装：
 
@@ -83,7 +83,7 @@ OpenCode Zen Go三个窗口，独立状态行位于输入框上方：
 
 宿主默认在回合结束2秒后调度刷新，并有5分钟兜底定时器；浏览器每30秒拉取RPC镜像。普通轮询仅在读数缺失或有效身份变化时初始化查询，不把idle查询改成每分钟一次。成功请求的默认最小间隔为60秒，显式刷新可绕过，失败的主动重试不受该成功间隔限制；修改空闲间隔会重调定时器。
 
-插件查询余额/额度并读取当前模型及供应商目录，不写会话日志，也不向第三方上报这些读数。宿主不把已保存的密钥值返回浏览器；用户主动粘贴的草稿经DSH凭据服务写入所用home的凭据文件。环境变量值优先，通常不能在设置页修改。
+插件查询余额/额度并读取当前模型及供应商目录，不写会话日志，也不向第三方上报这些读数。宿主不把已保存的密钥值返回浏览器；用户主动粘贴的草稿经DSH凭据服务写入所用home的凭据文件。凭据优先级跟随宿主：DSH 0.2.1-rc.1 的 Web/桌面端优先使用已保存凭据，环境变量作为回退；0.2.0-rc.2 则优先使用环境变量。凭据权限以设置页实际返回为准。
 
 ## 已知限制
 

package/lib/index.js

@@ -1803,22 +1803,23 @@ function readNamespace(ctx, namespace) {
 * refresh loop.
 */
 function createCredentialLookup(ctx, fallback = {}) {
-	const provider = ctx.get("credentials");
 	const platform = {
 		resolve: async (ref) => {
-			if (provider === void 0) return void 0;
 			try {
+				const provider = ctx.get("credentials");
+				if (provider === void 0) return void 0;
 				return await provider.resolve(ref);
 			} catch {
 				return;
 			}
 		},
 		describe: async (ref) => {
-			if (provider === void 0) return {
-				configured: false,
-				writable: false
-			};
 			try {
+				const provider = ctx.get("credentials");
+				if (provider === void 0) return {
+					configured: false,
+					writable: false
+				};
 				return await provider.describe(ref);
 			} catch {
 				return {

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "dsh-usage-state",
-  "version": "0.4.6",
+  "version": "0.4.7",
   "packageManager": "npm@11.19.1",
   "type": "module",
   "description": "DSH plugin: show account balance (API mode) or coding-plan quota (5h/7d/30d) for the model in use",
   "license": "MIT",
   "engines": {
     "node": ">=20",
-    "dsh": ">=0.2.0-rc.2 <0.3.0-0"
+    "dsh": "^0.2.0-rc.2 || ^0.2.1-rc.1"
   },
   "scripts": {
     "test": "node --import ./tests/support/client-render-hook.mjs --test",
@@ -56,7 +56,7 @@
     "unrun": "^0.3.1"
   },
   "peerDependencies": {
-    "@deepseek-ai/dsh-settings": "^0.2.0-rc.2",
+    "@deepseek-ai/dsh-settings": "^0.2.0-rc.2 || ^0.2.1-rc.1",
     "@deepseek-ai/schemastery": "^3.18.3"
   },
   "dependencies": {