opencode-go-usage-tui 1.0.1 → 1.2.0

package/README.md

@@ -1,7 +1,15 @@
 # opencode-go-usage-tui
 
+<div align="center">
+
+🌏 **语言 / Language:** [简体中文](/README.md) | [English](/README_EN.md)
+
+</div>
+
 在 OpenCode 侧边栏实时显示 OpenCode Go 额度用量（5小时/每周/每月）。
 
+支持中英双语界面（`/go-lang` 切换，首次启动自动引导选择语言）。
+
 ## 安装
 
 ### 方式一：OpenCode 命令安装（推荐）
@@ -45,7 +53,15 @@ npm install -g opencode-go-usage-tui
 1. **workspace_id**：`wrk_` 开头，在 opencode.ai 控制台 URL 中获取
 2. **auth cookie**：浏览器 F12 → Application → Cookies → opencode.ai → 复制 `auth` 的值（`Fe26.2*` 开头）
 
-配置保存在 `~/.config/opencode/go-usage-config.json`。
+配置保存在 `~/.config/opencode/`：
+
+- `go-usage-config.json` — workspace_id（明文，非敏感）
+- `go-auth-cookie.enc` — auth cookie（**AES-256-GCM 加密**）
+- `.encryption-key` — 加密密钥（32 字节随机生成）
+
+> 🔒 **安全说明**：cookie 以 AES-256-GCM 加密存储，密钥随机生成且独立保存，文件被备份/同步/日志收集不会泄露 cookie。旧版明文文件（`go-auth-cookie.txt` / config.json 内嵌 cookie）首次读取时**自动迁移**为加密存储并清理明文。
+>
+> ⚠️ 局限：密钥与密文同目录，能防御"被动泄露"（备份/同步），无法防御能读取该目录的本地恶意程序。如需更强保护可改用系统级凭据存储。
 
 ### 方式二：环境变量
 
@@ -79,6 +95,13 @@ Cookie 有效期约 1 年，过期后重新获取。
 - 用量超过阈值（默认 80%，可用 `OPENCODE_GO_WARN_THRESHOLD` 调整）显示为红色
 - 点击面板标题可折叠/展开
 - 配置错误时面板会提示"未配置账号"，输入 `/go-config` 即可设置
+- 面板标题显示当前插件版本号（如 `v1.1.0`）
+
+## 语言
+
+- 首次安装启动时自动弹出语言选择，选择后若未配置账号会继续引导 `/go-config`
+- 随时执行 `/go-lang` 可切换 中文 / English，语言偏好会记住
+- 自动检测系统语言（中文系统默认中文，其余默认英文）
 
 ## 开发
 

package/README_EN.md

@@ -0,0 +1,117 @@
+# opencode-go-usage-tui
+
+<div align="center">
+
+🌏 **Language / 语言:** [English](/README_EN.md) | [简体中文](/README.md)
+
+</div>
+
+Display your OpenCode Go quota usage (5h / weekly / monthly) in the OpenCode sidebar in real time.
+
+Bilingual UI (Chinese / English) — switch with `/go-lang`, or pick a language during the first-run onboarding.
+
+## Install
+
+### Option 1: Install via OpenCode command (recommended)
+
+In OpenCode, press **`Ctrl+P`** to open the command palette, search for **`install plugin`**, and enter:
+
+```
+opencode-go-usage-tui@latest
+```
+
+Press Enter, restart OpenCode, and the "Go Usage" panel will appear in the sidebar.
+
+### Option 2: npm global install
+
+```bash
+npm install -g opencode-go-usage-tui
+```
+
+Then add it to the `plugin` array in `~/.config/opencode/tui.json`:
+
+```json
+{
+  "plugin": ["opencode-go-usage-tui@latest"]
+}
+```
+
+Restart OpenCode.
+
+## Configuration
+
+### Option 1: Slash command (recommended)
+
+Run in the TUI:
+
+```
+/go-config
+```
+
+Enter two values (unique per user — get them by logging into opencode.ai):
+
+1. **workspace_id**: starts with `wrk_`, found in the opencode.ai console URL
+2. **auth cookie**: in your browser, F12 → Application → Cookies → opencode.ai → copy the `auth` value (starts with `Fe26.2*`)
+
+Config is saved to `~/.config/opencode/`:
+
+- `go-usage-config.json` — workspace_id (plain text, not sensitive)
+- `go-auth-cookie.enc` — auth cookie (**AES-256-GCM encrypted**)
+- `.encryption-key` — encryption key (random 32 bytes)
+
+> 🔒 **Security**: The cookie is stored encrypted with AES-256-GCM, with a randomly generated key stored separately — backups, syncs, and logs cannot leak the cookie. Legacy plaintext files (`go-auth-cookie.txt` / cookie embedded in config.json) are **auto-migrated** to encrypted storage on first read, and the plaintext is cleaned up.
+>
+> ⚠️ Limitation: The key lives in the same directory as the ciphertext. This defends against passive leaks (backups/sync) but not against local malware that can read your user directory. Use system credential storage (Windows DPAPI / macOS Keychain) for stronger protection.
+
+### Option 2: Environment variables
+
+| Variable | Description |
+| -------- | ----------- |
+| `OPENCODE_GO_WORKSPACE_ID` | Workspace ID |
+| `OPENCODE_GO_AUTH_COOKIE` | Auth cookie value |
+
+### Option 3: Config file
+
+Create `~/.config/opencode/go-usage-config.json` manually:
+
+```json
+{
+  "workspace_id": "wrk_xxxxxxxxxxxx",
+  "cookie": "Fe26.2*..."
+}
+```
+
+## Getting the auth cookie
+
+1. Log into opencode.ai in Chrome
+2. Press F12 to open DevTools → Application → Cookies → select opencode.ai
+3. Find `auth`, copy its Value
+
+The cookie is valid for about 1 year; get a new one after it expires.
+
+## Usage
+
+- The sidebar panel auto-refreshes every 60 seconds (adjustable via `OPENCODE_GO_CHECK_INTERVAL`, in milliseconds)
+- Usage above the threshold (default 80%, adjustable via `OPENCODE_GO_WARN_THRESHOLD`) is shown in red
+- Click the panel title to collapse/expand
+- If misconfigured, the panel shows "Not configured" — run `/go-config` to set up
+- The panel title shows the current plugin version (e.g. `v1.1.0`)
+
+## Language
+
+- On first install, a language picker pops up automatically; if the account isn't configured yet, it continues into the `/go-config` onboarding
+- Run `/go-lang` anytime to switch between 中文 / English; your preference is remembered
+- Auto-detects system language (Chinese systems default to 中文, everything else defaults to English)
+
+## Development
+
+```bash
+# Build
+bun run build.tui.mjs
+# or
+npm run build
+```
+
+## License
+
+MIT

package/build.tui.mjs

@@ -1,5 +1,8 @@
 import * as esbuild from "esbuild"
 import { solidPlugin } from "esbuild-plugin-solid"
+import { readFileSync } from "node:fs"
+
+const pkg = JSON.parse(readFileSync("package.json", "utf8"))
 
 await esbuild.build({
   entryPoints: ["src/index.tsx"],
@@ -7,7 +10,8 @@ await esbuild.build({
   format: "esm",
   platform: "node",
   bundle: true,
-  external: ["@opencode-ai/*", "@opentui/*", "solid-js", "node:fs", "node:path"],
+  external: ["@opencode-ai/*", "@opentui/*", "solid-js", "node:fs", "node:path", "node:crypto"],
   plugins: [solidPlugin({ solid: { moduleName: "@opentui/solid", generate: "universal" } })],
+  define: { __PLUGIN_VERSION__: JSON.stringify(pkg.version) },
   logLevel: "info",
 })