@gehennawu/dsh-service 0.27.0 → 0.28.0

package/README.en.md

@@ -10,7 +10,7 @@ A service-control and operations plugin for self-hosted DSH Web. Provides safe r
 
 The Settings panel "Service Control" page has nine top-level tabs: **Overview, Notifications, Health, Model stats, Quota lookup, Backups, Skills, Subagents, Restart**; the Restart, Quota lookup, Skills, and Subagents tabs can each enable a quick entry at the bottom of the settings left navigation (off by default).
 
-The plugin also appears under **Plugins → Plugin configuration**, with seven host-level switches enabled by default: **Model statistics, Quota lookup, Backup maintenance, Task notifications, Skill manager, Subagent model, and the `/healthz` liveness endpoint**. Disabling one hides its UI, stops the associated polling/subscriptions, and makes the Host reject that capability; Overview, Health diagnostics, and Restart remain available. All seven switches are live settings: disabling or re-enabling them requires neither a page reload nor a DSH Web restart. Statistics refreshes, quota requests, or backup operations already in flight are allowed to finish; quota re-enablement preserves existing cache, TTL, and backoff state, so its UI and calls return immediately but a new upstream request is not guaranteed at once.
+The plugin also appears under **Plugins → Plugin configuration**, with eight host-level switches enabled by default: **Health diagnostics, Model statistics, Quota lookup, Backup maintenance, Task notifications, Skill manager, Subagent model, and the `/healthz` liveness endpoint**. Disabling one hides its UI, stops the associated polling/subscriptions, and makes the Host reject that capability; Overview and Restart remain available. All eight switches are live settings: disabling or re-enabling them requires neither a page reload nor a DSH Web restart. Statistics refreshes, quota requests, or backup operations already in flight are allowed to finish; quota re-enablement preserves existing cache, TTL, and backoff state, so its UI and calls return immediately but a new upstream request is not guaranteed at once.
 
 ### Version and updates
 
@@ -33,6 +33,7 @@ The plugin also appears under **Plugins → Plugin configuration**, with seven h
 - Full diagnostics check session storage, workspace registry, backup storage, tar availability, file permissions, runtime environment, and Node runtime version; a manual launch is marked with a yellow inline caution (no restart assurance) that does not trigger the health alert banner, the service-control reminder, or the tab ⚠; an unrecognized environment and an empty backup list are informational only — all can be declared explicitly via `DSH_SERVICE_RUNTIME_ENV`
 - Having no backups is an informational note, not a warning, and does not light the Health tab ⚠
 - File-permission deep scan and repair: checks whether the Agent can read/write DSH_HOME and workspaces; repair requires two-step confirmation
+- The **Health diagnostics** switch under Plugins → Plugin configuration hides this whole tab: full diagnostics and file-permission requests stop immediately and the Host rejects the corresponding RPCs; the overview metrics (5-second polling) are unaffected
 
 ### Model statistics
 
@@ -48,13 +49,14 @@ The plugin also appears under **Plugins → Plugin configuration**, with seven h
 
 ![Quota lookup](./screenshots/quota-lookup_en.png)
 
-- A dedicated "Quota lookup" tab shows adapted providers as separate cards, each window rendered as a percentage with its own bar and a reset countdown on its own line, plus a refresh icon beside the updated time that force-refreshes that provider on click (bypassing the poll interval); adapted card titles link to the provider's official usage page (DeepSeek Platform, Zhipu GLM Coding Plan, OpenCode Go) in a new tab; a "Reorder" toggle at the top-right of the card list (shown with two or more cards) reveals ↑/↓ buttons on each card header (auto-disabled at the ends), and clicking it again hides them; the order is remembered in this browser and newly seen providers append at the end; unadapted providers take no space — a "Manual adapt" row at the bottom enables one by picking its type, and each card's footer can switch type, fall back to auto-detect, or disable lookup at any time
+- A dedicated "Quota lookup" tab shows adapted providers as separate cards, each window rendered as a percentage with its own bar and a reset countdown on its own line, plus a refresh icon beside the updated time that force-refreshes that provider on click (bypassing the poll interval); adapted card titles link to the provider's official usage page (DeepSeek Platform, Zhipu GLM Coding Plan, OpenCode Go, Xiaomi MiMo console usage page) in a new tab; a "Reorder" toggle at the top-right of the card list (shown with two or more cards) reveals ↑/↓ buttons on each card header (auto-disabled at the ends), and clicking it again hides them; the order is remembered in this browser and newly seen providers append at the end; unadapted providers take no space — a "Manual adapt" row at the bottom enables one by picking its type, and each card's footer can switch type, fall back to auto-detect, or disable lookup at any time
 - A quota ring inside the conversation composer follows the provider selected by the current session and shows the tightest budget window as a percentage (green below 80%, amber at or above); clicking opens a panel headed by the provider name, with a bar and used percentage for each window and reset times on their own lines; on narrow viewports (phones) the panel switches to a viewport-centered floating layer — fully visible, scrolling internally when too tall — and rotates or resizing wider flips it back to the anchored placement above the ring
 - A "Show a remote quota entry in the settings left navigation" switch lives in the Quota lookup tab (off by default), mirroring the Restart entry
-- Built-in adaptations: **OpenCode Go** (`{baseURL}/usage`), **Zhipu GLM Coding Plan / zai-coding-cn** (official monitor `quota/limit` endpoint with three windows — 5-hour rolling tokens, weekly tokens, monthly MCP quota; an idle 5-hour window hides its reset time, matching the official console), **OpenRouter** (credits used %), **Kimi/Moonshot** and **SiliconFlow** (CNY balance text), **DeepSeek Platform** (official balance, see next bullet); dialects that natively report remaining percentage flip the panel word to "Remaining" and invert the warn threshold; transient network errors retry automatically and the Zhipu dual-domain candidate chain switches automatically; the provider-to-kind mapping lives in `DSH_HOME/dsh-service-quota.json`, and known services are auto-detected from their baseURL (e.g. opencode.ai, bigmodel.cn, api.deepseek.com) with no manual picking; no upstream request is ever made for unadapted or disabled providers; disabling can be done via "Disable" in a card's footer or by writing `"<provider>": null` in the config file (both are equivalent). Zhipu reset cards have no API-key-queryable endpoint yet — you can add any number of them via each provider card's "Add reset card" button on the tab (name plus expiry time, down to the minute), and remove each one independently — the ring panel shows them too (stored in the same config file); expired cards are flagged automatically
+- Built-in adaptations: **OpenCode Go** (`{baseURL}/usage`), **Zhipu GLM Coding Plan / zai-coding-cn** (official monitor `quota/limit` endpoint with three windows — 5-hour rolling tokens, weekly tokens, monthly MCP quota; an idle 5-hour window hides its reset time, matching the official console), **OpenRouter** (credits used %), **Kimi/Moonshot** and **SiliconFlow** (CNY balance text), **DeepSeek Platform** (official balance, see next bullet), **Xiaomi MiMo Token Plan** (subscription plan quota, see below); dialects that natively report remaining percentage flip the panel word to "Remaining" and invert the warn threshold; transient network errors retry automatically and the Zhipu dual-domain candidate chain switches automatically; the provider-to-kind mapping lives in `DSH_HOME/dsh-service-quota.json`, and known services are auto-detected from their baseURL (e.g. opencode.ai, bigmodel.cn, api.deepseek.com, token-plan-cn.xiaomimimo.com) with no manual picking; no upstream request is ever made for unadapted or disabled providers; disabling can be done via "Disable" in a card's footer or by writing `"<provider>": null` in the config file (both are equivalent). Zhipu reset cards have no API-key-queryable endpoint yet — you can add any number of them via each provider card's "Add reset card" button on the tab (name plus expiry time, down to the minute), and remove each one independently — the ring panel shows them too (stored in the same config file); expired cards are flagged automatically
 - **DeepSeek official balance with peak/off-peak hint (deepseek)**: calls DeepSeek Platform's official `GET /user/balance` and shows the total balance per currency (CNY→¥, USD→$), plus a separate "Granted balance" line whenever unexpired granted credit is positive; each DeepSeek card embeds a **peak/off-peak block** — a status badge on top (orange = "Peak now · standard price", green = "Off-peak now · half price") with a countdown to the next switch in Beijing time (e.g. "Peak pricing from 09:00 (in 12 h 41 min)", correctly spanning weekends to Monday's morning peak), below it a two-segment ribbon: the first block is the remainder of the current period and the second is the next opposite period (spanning days when needed — e.g. Friday evening draws straight to Monday's morning peak), widths proportional to actual durations with the left edge marking "now"; blocks are tagged inline as Peak / Off-peak, advancing every 30 seconds, and a caption stating the official rule "off-peak price is half the peak price"; the ring panel shows a compact version without the caption. Credentials resolve via the `DEEPSEEK_API_KEY` hint from the DSH credential store or environment variables, or can be written directly through the card's credential form. DSH's built-in `@deepseek-ai/dsh-llm-deepseek` official channel (the DeepSeek V4 models in the model picker, route id `deepseek-official`) needs **no extra settings route** — the quota lookup merges that runtime channel automatically and adapts it to the official balance endpoint, so the ring also appears when you switch to one of its models
 - **CLIProxyAPI accounts (cliproxy)**: queries the **official remaining quota** of each OAuth upstream account inside a CLIProxyAPI (CPA) deployment (Codex 5-hour/weekly windows, per-model quotas for GeminiCLI and Antigravity) — not proxy-key usage. Prerequisites: CPA's `remote-management.secret-key` must be set (the whole management API is unavailable without it), remote access requires `allow-remote-management`, and the management secret goes into the DSH credential store as `CPA_MANAGEMENT_KEY` or an environment variable of the same name — it is independent of the proxy API key, and the plugin never sends the proxy key to the management plane. When you save the "CLIProxyAPI accounts" adaptation, the plugin pins the hostname of that provider's settings baseURL into the config file and afterwards only sends requests to that pinned domain (re-save the adaptation after changing baseURL); a single refresh queries at most 8 accounts (disabled accounts and account types without a supported quota endpoint are skipped automatically), and failures on some accounts do not affect the rest. Note that CPA's management plane has built-in key throttling — 5 wrong attempts ban your IP for 30 minutes — so make sure the secret is correct before testing
-- Credential fill-in form: when an adapted provider shows "credential missing", its card offers an inline form — regular adaptations show **"Set API credential"**, while the CLIProxyAPI adaptation shows **"Set management key (web login key)"** (the remote-management secret you use to log into CPA's web management UI — not the proxy API key, which the management plane bans wrong attempts for); the credential name comes from a host-derived whitelist per adaptation type (CLIProxyAPI only ever offers `CPA_MANAGEMENT_KEY`/`CLIPROXY_MANAGEMENT_KEY` — these are **alias slots for the same secret; storing one is enough**, discovery takes the first configured value in order; the primary name is marked and the form defaults to a configured slot. Never the proxy key); saving writes the value into the DSH credential provider (the `refs:` section of `$DSH_HOME/.credentials.yaml`, hot-effective without restarts) and then force-refreshes that provider; the form can also clear a stored file-layer credential in one click. If a process environment variable is currently shadowing that name, the host refuses the write (credential-store contract) — change the environment variable itself instead
+- **Xiaomi MiMo Token Plan quota (xiaomi-token-plan-cn)**: queries the "plan usage" of a Xiaomi MiMo Open Platform Token Plan subscription — plan total quota, compensation credits and other buckets, straight from the same source as the console; each row shows used percentage, an absolute figure abbreviation (e.g. `12% · 1.4B / 11B`) and a subscription-validity countdown. Xiaomi has no API-key-based quota endpoint (the inference gateway serves `/v1` inference paths only); the data lives behind console-origin APIs, so the credential is your **web session cookie**: log into platform.xiaomimimo.com in your browser, open DevTools, copy the full `Cookie:` request header from any `/api/v1/tokenPlan/` call, then click **"Set console cookie (web session)"** on the card and paste it (stored in the DSH credential store under `XIAOMI_MIMO_CONSOLE_COOKIE` or an environment variable of the same name; the `Cookie:` prefix is optional). The cookie is sent only to two fixed endpoints, `platform.xiaomimimo.com/api/v1/tokenPlan/detail` and `/usage`; the `tp-…` inference key is never sent to the console plane. When the cookie expires (logout or session expiry) the card shows "Console cookie expired" — copy it again. Providers auto-detect from baseURL (token-plan-cn.xiaomimimo.com); when you reach MiMo through a relay domain, pick "Xiaomi MiMo Token Plan" in "Manual adapt" instead (the queried plane is fixed and unaffected by baseURL). Note that a web cookie grants full console access — it is stored only in your local credential store and sent only to those two fixed endpoints; never hand it to environments you do not trust
+- Credential fill-in form: when an adapted provider shows "credential missing", its card offers an inline form — regular adaptations show **"Set API credential"**, the CLIProxyAPI adaptation shows **"Set management key (web login key)"** (the remote-management secret you use to log into CPA's web management UI — not the proxy API key, which the management plane bans wrong attempts for), and the Xiaomi Token Plan adaptation shows **"Set console cookie (web session)"**; the credential name comes from a host-derived whitelist per adaptation type (CLIProxyAPI only ever offers `CPA_MANAGEMENT_KEY`/`CLIPROXY_MANAGEMENT_KEY` — these are **alias slots for the same secret; storing one is enough**, discovery takes the first configured value in order; Xiaomi likewise offers `XIAOMI_MIMO_CONSOLE_COOKIE`/`MIMO_CONSOLE_COOKIE`; the primary name is marked and the form defaults to a configured slot. Never the proxy key or the tp-… inference key); saving writes the value into the DSH credential provider (the `refs:` section of `$DSH_HOME/.credentials.yaml`, hot-effective without restarts) and then force-refreshes that provider; the form can also clear a stored file-layer credential in one click. If a process environment variable is currently shadowing that name, the host refuses the write (credential-store contract) — change the environment variable itself instead
 - Anti-rate-limit pacing is enforced by the host: successful results are cached for 60 seconds (shared across tabs), failures back off exponentially (30 s doubling, capped at 15 minutes), upstream timeout is 15 s; the panel can set auto query to manual only / 1 / 2 / 5 / 10 minutes (manual only by default), paused automatically while the page is hidden
 - API keys are resolved and used only inside the host process — the browser receives normalized window data (percentages or balance text) only; data flows through the plugin's own loopback RPC with no webServer routes exposed
 
@@ -73,7 +75,7 @@ The plugin also appears under **Plugins → Plugin configuration**, with seven h
 - The "Skills" tab lists every local skill under three sections — **auto-loaded / manual-only / fully disabled** — scanning project `.dsh`, project `.agents`, user `~/.dsh/skills`, `$DSH_AGENTS_HOME`, and `$DSH_BUNDLED_SKILL_DIR` roots one level deep, with a name filter and source badges; same-name shadowing (lower rank wins) marks both winner and loser copies, bundled directories are shown read-only, and a physical directory hit by multiple root rules is counted once
 - Two per-entry switches edit the SKILL.md frontmatter directly: `disable-model-invocation` for "visible to model", `user-invocable` for "invocable via /"; switches use a two-click confirmation, changes go live within ~200 ms, active sessions receive a catalog-update notice on their next step, and toggling back and forth leaves no residue in the file
 - Entries carrying legacy camelCase invocation keys (e.g. `disableModelInvocation`) are dropped entirely by the official parser: the panel shows a ⚠ warning and a two-click confirmed fix that converts them to canonical keys semantically
-- "Fill with AI" (✨): pick any configured model (last choice remembered); the Host calls it with a fixed template to draft description and usage **in Simplified Chinese**; the draft is previewed old-vs-new and saved after explicit confirmation as an "AI note". Notes live only in the plugin sidecar index `DSH_HOME/dsh-service-skills-index.json` and **never modify SKILL.md** — they render under their entry on the Skills tab only (with a remove button); a body change marks the note stale for refilling
+- "Fill with AI" (✨): pick any configured model (last choice remembered); the Host calls it with a fixed template to draft description and usage **in the DSH UI language** (Simplified Chinese in Chinese environments, English in English ones); the draft is previewed old-vs-new and saved after explicit confirmation as an "AI note". Notes live only in the plugin sidecar index `DSH_HOME/dsh-service-skills-index.json` and **never modify SKILL.md** — they render under their entry on the Skills tab only (with a remove button); a body change marks the note stale for refilling
 - One-click batch fill: automatically collects unannotated skills or ones whose body changed (read-only roots included; invalid entries and shadowed copies are skipped), shows candidate count / estimated payload and an expandable per-entry skip list first, then runs sequentially with live progress; individual failures never block the batch, and cancelling immediately interrupts the in-flight model call. Zero file modifications throughout, and the plugin never issues model calls autonomously
 - Batch runs in the Host background: switching tabs, closing the settings panel, or even refreshing the page never interrupts it; returning to the Skills tab restores progress and the cancel button, the Skills tab title shows a live `⟳done/total` badge while running, and planning a second batch mid-run is explicitly rejected
 

package/README.md

@@ -10,7 +10,7 @@
 
 设置页「服务控制」面板包含九个顶部标签：**概览、通知、健康诊断、模型统计、额度查询、备份维护、技能、子代理、重启**；重启、额度查询、技能与子代理标签还可在设置页左侧标签列底部开启快捷入口（默认关闭）。
 
-插件同时出现在「插件 → 插件配置」，提供七个默认开启的宿主级开关：**模型统计、额度查询、备份维护、任务通知、技能管理、子代理模型、`/healthz` 探活端点**。关闭后不仅隐藏对应界面，也会停止相关轮询/订阅并由宿主拒绝对应能力；概览、健康诊断与重启固定保留。设置写入 DSH settings，七项均为热生效：关闭或重新开启都无需刷新页面或重启 DSH Web。已在途的统计刷新、额度请求或备份操作允许完成；额度重新开启时保留既有缓存、TTL 与退避状态，因此可立即恢复界面和调用，但不保证立刻重新请求上游。
+插件同时出现在「插件 → 插件配置」，提供八个默认开启的宿主级开关：**健康诊断、模型统计、额度查询、备份维护、任务通知、技能管理、子代理模型、`/healthz` 探活端点**。关闭后不仅隐藏对应界面，也会停止相关轮询/订阅并由宿主拒绝对应能力；概览与重启固定保留。设置写入 DSH settings，八项均为热生效：关闭或重新开启都无需刷新页面或重启 DSH Web。已在途的统计刷新、额度请求或备份操作允许完成；额度重新开启时保留既有缓存、TTL 与退避状态，因此可立即恢复界面和调用，但不保证立刻重新请求上游。
 
 ### 版本与更新
 
@@ -33,6 +33,7 @@
 - 完整诊断检查会话存储、工作区注册表、备份目录、tar 可用性、文件权限、运行环境和 Node 运行时版本；手动启动环境以黄色行内警示标注重启无保障（不触发健康提醒横幅、服务控制提醒和标签 ⚠），未识别环境与空备份为信息级提示（不算警告），均可通过 `DSH_SERVICE_RUNTIME_ENV` 显式声明
 - 没有备份属于信息级提示，不算警告，也不点亮健康诊断标签的 ⚠
 - 文件权限深检与修复：检查 Agent 是否能读写 DSH_HOME 和工作区，修复需两段式确认
+- 「插件 → 插件配置」的「健康诊断」开关可整体关闭本标签：关闭后完整诊断与文件权限请求立即停止、宿主拒绝对应 RPC；概览的运行指标（5 秒轮询）不受影响
 
 ### 模型统计
 
@@ -48,13 +49,14 @@
 
 ![额度查询](./screenshots/quota-lookup.png)
 
-- 独立的「额度查询」标签：以卡片分区展示已适配的供应商，每个窗口显示百分比、独立进度条，重置时间单独一行；卡片头部更新时间旁有刷新图标，点击即强制重拉该供应商（不受轮询间隔限制）；已适配卡片的标题链接到对应官网用量页（DeepSeek 平台、智谱 GLM Coding Plan、OpenCode Go），点击新标签页打开；卡片列表右上角有「调整排序」开关（至少两张卡时显示），点击后各卡头部出现 ↑/↓ 按钮（首末卡对应方向自动禁用），再点一次收起；顺序记忆在本浏览器，新出现的供应商排在末尾；未适配的不占位置，统一收进底部「手动适配」行选择类型启用，卡片脚部可随时切换适配类型、回退自动识别或停用查询
+- 独立的「额度查询」标签：以卡片分区展示已适配的供应商，每个窗口显示百分比、独立进度条，重置时间单独一行；卡片头部更新时间旁有刷新图标，点击即强制重拉该供应商（不受轮询间隔限制）；已适配卡片的标题链接到对应官网用量页（DeepSeek 平台、智谱 GLM Coding Plan、OpenCode Go、小米 MiMo 控制台用量页），点击新标签页打开；卡片列表右上角有「调整排序」开关（至少两张卡时显示），点击后各卡头部出现 ↑/↓ 按钮（首末卡对应方向自动禁用），再点一次收起；顺序记忆在本浏览器，新出现的供应商排在末尾；未适配的不占位置，统一收进底部「手动适配」行选择类型启用，卡片脚部可随时切换适配类型、回退自动识别或停用查询
 - 对话输入框内一枚额度圆环，跟随当前会话所选模型的供应商，显示最紧预算窗口的已用百分比（<80% 绿色、≥80% 黄色）；点击弹出面板——头部标明供应商，各窗口带独立进度条与已用百分比、重置时间单独一行；手机等窄屏上面板自动切换为视口居中的浮层（完整可见、超高时内部滚动），旋转或拖宽窗口即时切回圆环上方锚定
 - 可在「额度查询」标签开启「设置页左列显示入口」开关（默认关闭），开启后在设置页左侧标签列底部显示「额度查询」快捷入口（与「重启」入口同模式）
-- 内置适配：**OpenCode Go**（`{baseURL}/usage`）、**智谱 GLM Coding Plan / zai-coding-cn**（官方监控端点 `quota/limit`，含 5 小时滚动 Token、每周 Token、MCP 月度配额三个窗口，5 小时窗口空闲时与官网一致地不显示重置时间）、**OpenRouter**（credits 已用%）、**Kimi/Moonshot** 与 **硅基流动**（人民币余额）、**DeepSeek 开放平台**（官方余额，见下一条）；原生报「剩余百分比」的方言会自动把面板头部切换为「剩余」并把预警阈值反向；上游瞬时网络错误自动重试，智谱双域候选链自动切换；供应商与适配类型的对应关系保存在 `DSH_HOME/dsh-service-quota.json`，已知服务商按 baseURL 自动识别适配（如 opencode.ai、bigmodel.cn、api.deepseek.com），无需手选；未适配或已停用的供应商不会被发起任何上游请求，停用可在卡片脚部选「停用查询」或在配置文件写 `"<provider>": null`（两者等价）。智谱的重置卡暂无 API Key 可查的接口，可在「额度查询」标签内点各供应商卡片的「添加重置卡」填写名称与到期时间（可精确到分钟），可连续添加多条、每条独立移除；圆环面板同步显示（数据存入同一配置文件），过期自动标注
+- 内置适配：**OpenCode Go**（`{baseURL}/usage`）、**智谱 GLM Coding Plan / zai-coding-cn**（官方监控端点 `quota/limit`，含 5 小时滚动 Token、每周 Token、MCP 月度配额三个窗口，5 小时窗口空闲时与官网一致地不显示重置时间）、**OpenRouter**（credits 已用%）、**Kimi/Moonshot** 与 **硅基流动**（人民币余额）、**DeepSeek 开放平台**（官方余额，见下一条）、**小米 MiMo Token Plan**（订阅套餐额度，见下一条）；原生报「剩余百分比」的方言会自动把面板头部切换为「剩余」并把预警阈值反向；上游瞬时网络错误自动重试，智谱双域候选链自动切换；供应商与适配类型的对应关系保存在 `DSH_HOME/dsh-service-quota.json`，已知服务商按 baseURL 自动识别适配（如 opencode.ai、bigmodel.cn、api.deepseek.com、token-plan-cn.xiaomimimo.com），无需手选；未适配或已停用的供应商不会被发起任何上游请求，停用可在卡片脚部选「停用查询」或在配置文件写 `"<provider>": null`（两者等价）。智谱的重置卡暂无 API Key 可查的接口，可在「额度查询」标签内点各供应商卡片的「添加重置卡」填写名称与到期时间（可精确到分钟），可连续添加多条、每条独立移除；圆环面板同步显示（数据存入同一配置文件），过期自动标注
 - **DeepSeek 官方余额与峰谷提示（deepseek）**：调用 DeepSeek 开放平台官方 `GET /user/balance`，按币种显示总额余额（CNY→¥、USD→$），未过期赠金大于 0 时追加一行「赠送余额」；卡片内嵌**峰谷时段提示块**——顶部为当前状态徽标（橙=「当前高峰时段 · 标准价」、绿=「当前空闲时段 · 半价计费」）和下一次换挡的北京时间倒计时（如「09:00 转高峰（12 小时 41 分钟后）」，跨周末也能算到周一早高峰），下方是一条**两段式**峰谷色带：第一段是当前时段的剩余部分，第二段是下一个相反时段（可跨天，如周五晚直接画到周一早高峰），宽度按实际时长比例、左缘细标线即当前时刻；段内只标「忙时 / 闲时」，每 30 秒自动前进，底部说明行写明官方规则「空闲时段价格为高峰时段的一半」；圆环面板内同步显示紧凑版（无说明行）。凭据按 `DEEPSEEK_API_KEY` 线索从 DSH 凭据库或环境变量解析，也可直接在卡片上用「填写 API 密钥」表单写入。DSH 内置的 `@deepseek-ai/dsh-llm-deepseek` 官方渠道（模型选择器里的 DeepSeek V4 系列，路由名 `deepseek-official`）**无需在 settings 另建路由**——额度查询会自动并入这个运行时渠道并按官方余额适配，切换到它的模型时圆环同样出现
 - **CLIProxyAPI 账号额度（cliproxy）**：查询 CLIProxyAPI（CPA）部署内各 OAuth 上游账号的**官方剩余额度**（Codex 的 5 小时/本周窗口、GeminiCLI 与 Antigravity 的各模型配额），而不是代理 key 的用量。前置条件：CPA 配置 `remote-management.secret-key` 非空（为空时管理面整体不可用）、远程访问需开启 `allow-remote-management`；管理密钥放入 DSH 凭据库 `CPA_MANAGEMENT_KEY` 或同名环境变量——它与代理用的 API key 相互独立，插件绝不会把代理 key 发往管理面。在「手动适配」中选择「CLIProxyAPI 账号额度」保存时，插件会把该供应商 settings baseURL 的域名钉进配置文件，此后外呼只发往这个域（修改 baseURL 后需重新保存适配）；单次刷新最多查询 8 个账号（已禁用或无受支持配额端点的账号自动跳过），部分账号失败不影响其余账号的结果。请注意 CPA 管理面对错误密钥有内建封禁（连续错 5 次封 IP 30 分钟），务必填对再测
-- 凭据填写窗口：已适配供应商因缺凭据显示「凭据未配置」时，卡片上会出现内联表单——普通适配显示**「填写 API 密钥」**，CLIProxyAPI 适配显示**「填写管理密钥（网页登录的 key）」**（即登录 CPA 网页管理面所用的 remote-management 密钥，不是代理 API key——管理面对错密钥有封禁，别填错）；凭据名称由宿主按适配类型派生白名单（CLIProxyAPI 只会出现 `CPA_MANAGEMENT_KEY`/`CLIPROXY_MANAGEMENT_KEY`——两者是同一密钥的**别名存放槽，二选一即可**，查找按顺序取第一个已配置的值；主名带「主名」标记且表单默认选中已配置的槽位。绝不混入代理 key），输入密钥值保存即写入 DSH 凭据提供方（`$DSH_HOME/.credentials.yaml` 的 `refs:` 分节，热生效无需重启），随后自动强制重拉该供应商；表单里还能一键清除已存的文件层凭据。进程环境变量正在遮蔽该名字时宿主会拒绝写入（凭据库契约），此时请改环境变量本身
+- **小米 MiMo Token Plan 额度（xiaomi-token-plan-cn）**：查询小米 MiMo 开放平台 Token Plan 订阅的「套餐使用情况」——套餐总额度、补偿积分等额度桶，与控制台同源，每行显示已用百分比、绝对数缩写（如 `12% · 1.4B / 11B`）和订阅有效期倒计时。小米没有可用 API Key 查询额度的接口（推理网关只有 `/v1` 推理路径），数据来自控制台同源 API，凭据是**网页登录态 Cookie**：浏览器登录 platform.xiaomimimo.com 后打开开发者工具，从任意 `/api/v1/tokenPlan/` 请求复制完整 `Cookie:` 请求头的值，点卡片上的**「填写控制台 Cookie（网页登录态）」**粘贴保存（写入 DSH 凭据库 `XIAOMI_MIMO_CONSOLE_COOKIE` 或同名环境变量；带不带 `Cookie:` 前缀都行）。Cookie 只发往 `platform.xiaomimimo.com/api/v1/tokenPlan/detail` 与 `/usage` 两个固定端点；`tp-` 开头的推理密钥绝不会发往控制台平面。Cookie 失效（退出登录或过期）时卡片显示「控制台 Cookie 已失效」，重新复制一次即可。供应商按 baseURL 自动识别（token-plan-cn.xiaomimimo.com）；经中转域接入推理时在「手动适配」中选择「小米 MiMo Token Plan」即可（查询平面固定、不受 baseURL 影响）。请注意网页 Cookie 等同整个控制台的访问权限——它只保存在本机凭据库、只用于上述两个固定端点，请不要把 Cookie 交给不信任的环境
+- 凭据填写窗口：已适配供应商因缺凭据显示「凭据未配置」时，卡片上会出现内联表单——普通适配显示**「填写 API 密钥」**，CLIProxyAPI 适配显示**「填写管理密钥（网页登录的 key）」**（即登录 CPA 网页管理面所用的 remote-management 密钥，不是代理 API key——管理面对错密钥有封禁，别填错），小米 Token Plan 适配显示**「填写控制台 Cookie（网页登录态）」**；凭据名称由宿主按适配类型派生白名单（CLIProxyAPI 只会出现 `CPA_MANAGEMENT_KEY`/`CLIPROXY_MANAGEMENT_KEY`——两者是同一密钥的**别名存放槽，二选一即可**，查找按顺序取第一个已配置的值；小米只出现 `XIAOMI_MIMO_CONSOLE_COOKIE`/`MIMO_CONSOLE_COOKIE`，同理二选一；主名带「主名」标记且表单默认选中已配置的槽位。绝不混入代理 key 或 tp- 推理密钥），输入密钥值保存即写入 DSH 凭据提供方（`$DSH_HOME/.credentials.yaml` 的 `refs:` 分节，热生效无需重启），随后自动强制重拉该供应商；表单里还能一键清除已存的文件层凭据。进程环境变量正在遮蔽该名字时宿主会拒绝写入（凭据库契约），此时请改环境变量本身
 - 防风控节律由宿主统一控制：成功结果缓存 60 秒（多标签共享）、失败指数退避（30 秒起 ×2、封顶 15 分钟）、上游超时 15 秒；面板可把自动查询调成仅手动 / 1 / 2 / 5 / 10 分钟（默认仅手动），页面不可见时自动暂停
 - API key 只在宿主进程内解析使用，浏览器只会收到归一化后的窗口数据（百分比或余额文本）；数据走插件自有 loopback RPC，不在 webServer 上暴露任何路由
 
@@ -73,7 +75,7 @@
 - 「技能」标签按**自动加载 / 仅手动调用 / 完全停用**三区展示全部本地技能（项目 `.dsh`、项目 `.agents`、用户 `~/.dsh/skills`、`$DSH_AGENTS_HOME` 与 `$DSH_BUNDLED_SKILL_DIR` 根，一层深度），支持名称过滤与来源徽标；同名遮蔽（低 rank 优先）与被遮蔽副本均有标注，内置目录只读展示；同一物理目录被多条规则命中时只计一次
 - 每条目双开关直接改写 SKILL.md frontmatter：`disable-model-invocation` 控制「对模型可见」，`user-invocable` 控制「可被 / 调用」；开关采用两段式点击确认，改动约 200ms 内热生效，活跃会话下一步自动收到目录更新提示；往返切换不会在文件中累积残留
 - 带 camelCase 旧版调用键（如 `disableModelInvocation`）的条目会被官方解析器整条剔除：面板给出 ⚠ 提示，两段式确认后按语义换算修复为规范键
-- ✨「AI 补全说明」：从已配置模型中任选一个（记住上次选择），宿主用固定模板调用该模型生成**简体中文**的描述与用法草稿；草稿以新旧对照预览，显式确认后保存为「AI 注释」。注释**只存在插件的侧车索引 `DSH_HOME/dsh-service-skills-index.json` 里、绝不改写 SKILL.md**，仅在技能标签页该条目下方单独展示（带移除按钮）；正文变更后注释自动标记过期，重新补全即可刷新
+- ✨「AI 补全说明」：从已配置模型中任选一个（记住上次选择），宿主用固定模板调用该模型生成描述与用法草稿，**输出语言跟随 DSH 设置的界面语言**（中文环境出简体中文、英文环境出英文）；草稿以新旧对照预览，显式确认后保存为「AI 注释」。注释**只存在插件的侧车索引 `DSH_HOME/dsh-service-skills-index.json` 里、绝不改写 SKILL.md**，仅在技能标签页该条目下方单独展示（带移除按钮）；正文变更后注释自动标记过期，重新补全即可刷新
 - 一键批量补全：自动圈出未注释或正文有变的技能（含只读目录，跳过无效与被遮蔽副本），先展示候选数/预计发送量与可展开的逐条跳过清单，确认后顺序执行并显示进度，单条失败不影响批次，可随时取消（取消会立即中断在途模型调用）；全程零文件改动，也绝不自动发起任何模型调用
 - 批量任务在宿主后台持续运行：切换标签、关闭设置面板甚至刷新页面都不会中断；回到技能页自动恢复进度与取消按钮，批量进行中「技能」标签标题实时显示 `⟳已完成/总数` 角标，运行中重复生成计划会被明确拒绝
 

package/client.js

@@ -15,6 +15,7 @@ window.__ModuleLoader__.load({
       'features.cardHint': '控制可选功能和外部能力。开关立即生效，无需重启；详细状态与操作位于左侧「服务控制」。',
       'features.optional': '可选功能',
       'features.external': '外部能力',
+      'features.healthDiagnostics': '健康诊断',
       'features.modelUsage': '模型统计',
       'features.quotaLookup': '额度查询',
       'features.backupMaintenance': '备份维护',
@@ -443,6 +444,13 @@ window.__ModuleLoader__.load({
       'quota.kind.siliconflow': '硅基流动',
       'quota.kind.deepseek': 'DeepSeek 开放平台',
       'quota.kind.cliproxy': 'CLIProxyAPI 账号额度',
+      'quota.kind.xiaomi-token-plan-cn': '小米 MiMo Token Plan',
+      'quota.window.total_token': '套餐总额度',
+      'quota.window.compensation_total_token': '补偿积分',
+      'quota.window.plan-name': '订阅套餐',
+      'quota.error.no-subscription': '当前账号没有生效中的 Token Plan 订阅',
+      'quota.error.credential-rejected': '控制台 Cookie 已失效，请重新从浏览器复制',
+      'quota.credential.editCookie': '填写控制台 Cookie（网页登录态）',
       'quota.kindAuto': '自动识别',
       'quota.noAdapted': '暂无已适配的供应商，可在下方手动适配',
       'quota.disable': '停用查询',
@@ -498,6 +506,7 @@ window.__ModuleLoader__.load({
       'features.cardHint': 'Control optional features and external capabilities. Changes take effect immediately without a restart; detailed status and actions remain in Service Control.',
       'features.optional': 'Optional features',
       'features.external': 'External capabilities',
+      'features.healthDiagnostics': 'Health diagnostics',
       'features.modelUsage': 'Model statistics',
       'features.quotaLookup': 'Quota lookup',
       'features.backupMaintenance': 'Backup maintenance',
@@ -926,6 +935,13 @@ window.__ModuleLoader__.load({
       'quota.kind.siliconflow': 'SiliconFlow',
       'quota.kind.cliproxy': 'CLIProxyAPI accounts',
       'quota.kind.deepseek': 'DeepSeek Platform',
+      'quota.kind.xiaomi-token-plan-cn': 'Xiaomi MiMo Token Plan',
+      'quota.window.total_token': 'Plan total quota',
+      'quota.window.compensation_total_token': 'Compensation credits',
+      'quota.window.plan-name': 'Subscription plan',
+      'quota.error.no-subscription': 'No active Token Plan subscription on this account',
+      'quota.error.credential-rejected': 'Console cookie expired; copy it from the browser again',
+      'quota.credential.editCookie': 'Set console cookie (web session)',
       'quota.kindAuto': 'Auto-detected',
       'quota.noAdapted': 'No adapted providers yet — adapt manually below',
       'quota.disable': 'Disable',
@@ -1063,7 +1079,19 @@ window.__ModuleLoader__.load({
       ctx.effect(() => () => { if (svcStyle) svcStyle.remove() }, 'dsh-service theme styles')
       ctx.effect(() => ctx.locale.register(NS, { zh, en }), 'dsh-service dictionaries')
       const t = ctx.locale.bind(NS)
-      const DEFAULT_FEATURES = { modelUsage: true, quotaLookup: true, backupMaintenance: true, taskNotifications: true, healthz: true, skillManager: true, subagentRoute: true }
+      // 当前生效界面语言（显式设置 > 浏览器语言 > en 兜底，locale 快照已折算）：'zh' | 'en'。
+      // 供 AI 补全等宿主侧语言相关动作取用；宿主只收枚举，不收自由文本。
+      const currentUiLocale = () => ((ctx.locale?.getSnapshot?.()?.active) === 'zh' ? 'zh' : 'en')
+      /** 十进制数量缩写共用实现：模型统计沿用 K/M，额度绝对数可额外启用 B；非法值由调用方指定兜底。 */
+      const formatCompactCount = (value, options = {}) => {
+        const number = Number(value)
+        if (!Number.isFinite(number)) return options.invalid ?? ''
+        if (options.billions === true && number >= 1e9) return `${Math.round(number / 1e8) / 10}B`
+        if (number >= 1e6) return `${Math.round(number / 1e5) / 10}M`
+        if (number >= 1e3) return `${Math.round(number / 1e2) / 10}K`
+        return number.toLocaleString()
+      }
+      const DEFAULT_FEATURES = { healthDiagnostics: true, modelUsage: true, quotaLookup: true, backupMaintenance: true, taskNotifications: true, healthz: true, skillManager: true, subagentRoute: true }
       const featureScope = ctx.settingsScope.bind({ namespace: NS })
       const featureSnapshot = () => featureScope.getSnapshot()
       const featureValue = () => Object.assign({}, DEFAULT_FEATURES, featureSnapshot().value || {})
@@ -1234,7 +1262,7 @@ window.__ModuleLoader__.load({
       }
       const startSkillsBatchShared = async () => {
         if (skillsBatchPlan === null || skillsBatchState === null) return false
-        const res = await ctx.connection.rpc.call('/dsh-service', 'skills-batch-run', { planId: skillsBatchPlan.planId })
+        const res = await ctx.connection.rpc.call('/dsh-service', 'skills-batch-run', { planId: skillsBatchPlan.planId, lang: currentUiLocale() })
         if (!res.ok) { skillsBatchError = res.error || 'unknown'; publishSkillsBatch(); return false }
         skillsBatchState = { ...skillsBatchState, phase: 'running' }
         syncSkillsBatchPolling()
@@ -1758,7 +1786,7 @@ window.__ModuleLoader__.load({
       const QUOTA_POLL_KEY = 'dsh-service-quota-poll'
       const QUOTA_POLL_CHOICES = [0, 1, 2, 5, 10]
       // 适配类型下拉选项：与宿主 QUOTA_KINDS 白名单保持一致（词典键 quota.kind.<kind>）。
-      const QUOTA_KIND_OPTIONS = ['opencode-go', 'zai-coding-cn', 'openrouter', 'kimi', 'siliconflow', 'deepseek', 'cliproxy']
+      const QUOTA_KIND_OPTIONS = ['opencode-go', 'zai-coding-cn', 'openrouter', 'kimi', 'siliconflow', 'deepseek', 'xiaomi-token-plan-cn', 'cliproxy']
       function readQuotaPollMinutes() {
         try {
           const raw = Number.parseInt(localStorage.getItem(QUOTA_POLL_KEY), 10)
@@ -1961,6 +1989,15 @@ window.__ModuleLoader__.load({
         const account = typeof window.label === 'string' ? window.label.trim() : ''
         return account !== '' ? `${account} · ${kindText}` : kindText
       }
+      /** 百分比窗口的数值文本：percent 必显；窗口带 used/limit（原始数值）时追加「已用 / 总量」figure，
+       * 与控制台「{{used}} / {{limit}}」口径一致——只有比例没有绝对数会丢掉最关键的剩余信息。 */
+      function quotaWindowValueText(window) {
+        const percent = `${window.percent}%`
+        const used = Number(window.used)
+        const limit = Number(window.limit)
+        if (!Number.isFinite(used) || !Number.isFinite(limit) || limit <= 0) return percent
+        return `${percent} · ${formatCompactCount(used, { billions: true })} / ${formatCompactCount(limit, { billions: true })}`
+      }
       function humanizeDuration(ms, translate) {
         // 官网口径：取最显着的两个非零单位（28 天 22 小时 / 4 小时 1 分钟），不足 1 分钟显示 0 分钟。
         const totalMinutes = Math.max(0, Math.floor(ms / 60000))
@@ -2191,7 +2228,7 @@ window.__ModuleLoader__.load({
         },
         React.createElement('div', { 'data-value': window.percent, style: { display: 'flex', justifyContent: 'space-between', gap: '10px', fontSize: '12px', lineHeight: '18px' } },
           React.createElement('span', { style: labelStyle }, quotaWindowDisplayLabel(window, translate)),
-          React.createElement('span', { style: valueStyle }, `${window.percent}%`)),
+          React.createElement('span', { style: valueStyle }, quotaWindowValueText(window))),
         quotaBar(inCard ? `quota-card-bar-${provider}-${window.id}` : `quota-window-bar-${window.id}`, window.percent, '4px', window.remaining === true),
         resetNode)
       }
@@ -2433,7 +2470,7 @@ window.__ModuleLoader__.load({
         }, React.createElement('path', { d: 'M3 5.25 7 9l4-3.75', fill: 'none', stroke: 'currentColor', strokeWidth: 1.4, strokeLinecap: 'round', strokeLinejoin: 'round' }))),
         open ? React.createElement('div', { style: { margin: '0 16px', padding: '12px 0 8px', borderTop: '1px solid var(--dsw-alias-border-l2)' } },
           React.createElement('div', { style: { fontSize: '12px', fontWeight: 700 } }, translate('features.optional')),
-          ['modelUsage', 'quotaLookup', 'backupMaintenance', 'taskNotifications', 'skillManager', 'subagentRoute'].map(row),
+          ['healthDiagnostics', 'modelUsage', 'quotaLookup', 'backupMaintenance', 'taskNotifications', 'skillManager', 'subagentRoute'].map(row),
           React.createElement('div', { style: { fontSize: '12px', fontWeight: 700, marginTop: '8px', paddingTop: '10px', borderTop: '1px solid var(--dsw-alias-border-l1)' } }, translate('features.external')),
           row('healthz'),
           !writable ? React.createElement('p', { style: { margin: '6px 0 0', fontSize: '11px', color: 'var(--dsw-alias-label-tertiary)' } }, translate('features.readOnly')) : null) : null)
@@ -2774,7 +2811,7 @@ window.__ModuleLoader__.load({
           if (describe === null || describe.modelItem === null) return
           const { entry, modelItem } = describe
           setDescribe((prev) => ({ ...prev, busy: true, error: '' }))
-          const res = await SKILL_RPC('skills-describe', { id: entry.id, provider: modelItem.provider, model: modelItem.id })
+          const res = await SKILL_RPC('skills-describe', { id: entry.id, provider: modelItem.provider, model: modelItem.id, lang: currentUiLocale() })
           if (res.ok) {
             try { localStorage.setItem(SKILLS_MODEL_STORAGE_KEY, JSON.stringify({ provider: modelItem.provider, model: modelItem.id })) } catch (_) {}
             setDescribe((prev) => ({ ...prev, draft: res.value.draft, busy: false }))
@@ -3353,7 +3390,8 @@ window.__ModuleLoader__.load({
                                   'data-testid': `quota-cred-edit-${row.provider}`,
                                   onClick: () => openCredEditor(row),
                                   style: { fontSize: '12px', lineHeight: '20px', padding: '4px 14px', borderRadius: 999, border: '1px solid var(--dsw-alias-brand-primary)', background: 'transparent', color: 'var(--dsw-alias-brand-primary)', cursor: 'pointer', width: 'auto', minWidth: 0, overflow: 'visible', flex: '0 0 auto', whiteSpace: 'nowrap' },
-                                }, translate(row.kind === 'cliproxy' ? 'quota.credential.editManagement' : 'quota.credential.edit')))]
+                                // 宿主按 kind registry 下发凭据入口语义键；客户端只本地化，避免新增 kind 时复制分支。
+                                }, translate(`quota.credential.${typeof row.credentialEntryKey === 'string' && row.credentialEntryKey !== '' ? row.credentialEntryKey : 'edit'}`)))]
                         })()
                       : []),
                     ...resetCardNodes,
@@ -3480,6 +3518,8 @@ window.__ModuleLoader__.load({
           return () => { active = false }
         }, [])
         useEffect(() => {
+          // 健康诊断开关关闭时权限浅检查属于被门禁功能：不发起请求，也不落错误态。
+          if (!featureEnabled('healthDiagnostics')) return () => {}
           let active = true
           ctx.connection.rpc.call('/dsh-service', 'permissions-plan', {}).then((res) => {
             if (!active) return
@@ -3489,7 +3529,7 @@ window.__ModuleLoader__.load({
             if (active) setPermissionError(translate('permissions.error'))
           })
           return () => { active = false }
-        }, [])
+        }, [features.healthDiagnostics])
         useEffect(() => {
           if (!featureEnabled('modelUsage')) return () => {}
           let active = true
@@ -3543,6 +3583,7 @@ window.__ModuleLoader__.load({
         }, [])
 
         const runDiagnostics = async (force = false) => {
+          if (!featureEnabled('healthDiagnostics')) return
           if (!force && diagnosticsLoadedAt > 0 && Date.now() - diagnosticsLoadedAt <= 30000) return
           setDiagnosticsBusy(true)
           try {
@@ -3845,12 +3886,7 @@ window.__ModuleLoader__.load({
          const usageValue = (totals, metricName) => metricName === 'cacheTokens'
           ? totals.cacheReadTokens + totals.cacheWriteTokens
           : totals[metricName] || 0
-        const formatTokenValue = (value) => {
-          const number = Number(value) || 0
-          if (number >= 1000000) return `${Math.round(number / 100000) / 10}M`
-          if (number >= 1000) return `${Math.round(number / 100) / 10}K`
-          return number.toLocaleString()
-        }
+        const formatTokenValue = (value) => formatCompactCount(value, { invalid: '0' })
         const formatUsageValue = (value, metricName) => metricName === 'cacheHitRate'
           ? (Number(value) * 100).toFixed(1) + '%'
           : metricName === 'steps'
@@ -4294,7 +4330,7 @@ window.__ModuleLoader__.load({
         const tabs = [
           ['overview', 'tabs.overview'],
           ...(features.taskNotifications !== false ? [['notify', 'tabs.notify']] : []),
-          ['health', 'tabs.health'],
+          ...(features.healthDiagnostics !== false ? [['health', 'tabs.health']] : []),
           ...(features.modelUsage !== false ? [['usage', 'tabs.usage']] : []),
           ...(features.quotaLookup !== false ? [['quota', 'tabs.quota']] : []),
           ...(features.backupMaintenance !== false ? [['backup', 'tabs.backup']] : []),

package/index.js

@@ -18,6 +18,7 @@ const DSH_PACKAGE = '@deepseek-ai/dsh'
 const PLUGIN_PACKAGE = '@gehennawu/dsh-service'
 const SETTINGS_NAMESPACE = 'dsh-service'
 const DEFAULT_FEATURE_SETTINGS = Object.freeze({
+  healthDiagnostics: true,
   modelUsage: true,
   quotaLookup: true,
   backupMaintenance: true,
@@ -27,6 +28,7 @@ const DEFAULT_FEATURE_SETTINGS = Object.freeze({
   subagentRoute: true,
 })
 const FeatureSettingsSchema = z.object({
+  healthDiagnostics: z.boolean().default(true),
   modelUsage: z.boolean().default(true),
   quotaLookup: z.boolean().default(true),
   backupMaintenance: z.boolean().default(true),
@@ -124,15 +126,29 @@ const KIND_REGISTRY = {
   // CLIProxyAPI（router-for-me/CLIProxyAPI）管理面：查它托管的 OAuth 上游账号官方额度。
   // 无固定 endpoints / 全局 hosts——每个部署一个域名，保存适配时把 settings baseURL 的
   // hostname 钉进配置 allowedHosts[provider]（见 quota-config 写入口），外呼前复验精确命中。
-  // managementPlane:true 表示凭据是 remote-management.secret-key（线索 CPA_MANAGEMENT_KEY），
-  // 绝不使用也不回退 settings 的 apiKeyEnv——那是代理 key，发去管理面等于拿错钥匙撞 fail2ban
-  // （CPA 内建：管理面错 key 满 5 次封 IP 30 分钟，源码核实）。
+  // credentialPolicy 把「凭据从哪里取、是否包 Bearer、客户端入口文案」收进 kind 注册；
+  // configEndpointPolicy:'pinned' 表示保存适配时把 settings baseURL 主机钉入 allowedHosts。
+  // CLIProxyAPI 的 remote-management.secret-key 绝不使用 settings apiKeyEnv（代理 key），避免撞 fail2ban。
   cliproxy: {
     fetcher: fetchCliproxyUsage,
     fetcherGuard: cliproxyFetchGuard,
     keyHints: ['CPA_MANAGEMENT_KEY', 'CLIPROXY_MANAGEMENT_KEY'],
     hosts: [],
-    managementPlane: true,
+    credentialPolicy: { includeProfileHint: false, format: 'bearer', entryKey: 'editManagement' },
+    configEndpointPolicy: 'pinned',
+  },
+  // 小米 MiMo Token Plan（v0.29）：推理网关（token-plan-cn.xiaomimimo.com）只有 /v1 推理路径，
+  // 无任何 API-key 形态的额度查询端点（逐路径探测 404；OpenClaw 官方插件的 fetchUsageSnapshot
+  // 是空窗口占位）。额度数据只在控制台同源 API（platform.xiaomimimo.com/api/v1/tokenPlan/*），
+  // 认证是网页登录态 Cookie：凭据按裸值交给 fetcher，settings apiKeyEnv（tp- 推理密钥）绝不进入
+  // 控制台凭据链；configEndpointPolicy:'fixed' 表示查询平面由宿主常量固定、与 baseURL 无关。
+  'xiaomi-token-plan-cn': {
+    fetcher: fetchXiaomiTokenPlanUsage,
+    keyHints: ['XIAOMI_MIMO_CONSOLE_COOKIE', 'MIMO_CONSOLE_COOKIE'],
+    hosts: ['token-plan-cn.xiaomimimo.com'],
+    usageUrl: 'https://platform.xiaomimimo.com/console/usage',
+    credentialPolicy: { includeProfileHint: false, format: 'raw', entryKey: 'editCookie' },
+    configEndpointPolicy: 'fixed',
   },
 }
 const QUOTA_KINDS = Object.keys(KIND_REGISTRY)
@@ -932,12 +948,25 @@ function normalizeResetTimestamp(value) {
  * 凭据填写窗口（quota-credential-set/unset）只接受这份清单里的名字——零输入拼接：浏览器传来的
  * 名字必须命中宿主派生的白名单，顺带保证 CredentialRef 文法（POSIX shell 标识符）合法。
  */
+function quotaCredentialPolicy(kind) {
+  const registered = KIND_REGISTRY[kind]
+  return {
+    includeProfileHint: registered?.credentialPolicy?.includeProfileHint !== false,
+    format: registered?.credentialPolicy?.format === 'raw' ? 'raw' : 'bearer',
+    entryKey: typeof registered?.credentialPolicy?.entryKey === 'string' && registered.credentialPolicy.entryKey !== ''
+      ? registered.credentialPolicy.entryKey
+      : 'edit',
+  }
+}
+
 function quotaCredentialHintNames(kind, profile) {
   const names = []
-  // 管理面 kind（cliproxy）的凭据独立于模型代理 key：settings 的 apiKeyEnv 指向代理 key，
-  // 发去管理面等于拿错钥匙撞 fail2ban（CPA 错 5 次封 IP 30 分钟）——不尝试、不回退。
-  if (KIND_REGISTRY[kind]?.managementPlane !== true && profile.apiKeyEnv !== '') names.push(profile.apiKeyEnv)
-  for (const name of KIND_REGISTRY[kind]?.keyHints ?? []) {
+  const registered = KIND_REGISTRY[kind]
+  const policy = quotaCredentialPolicy(kind)
+  // 独立管理面/控制台面的 kind 通过 policy 排除 settings apiKeyEnv；那通常是代理/推理 key，
+  // 不属于额度查询凭据，错误回退既无效也扩大泄露面。
+  if (policy.includeProfileHint && profile.apiKeyEnv !== '') names.push(profile.apiKeyEnv)
+  for (const name of registered?.keyHints ?? []) {
     if (!names.includes(name)) names.push(name)
   }
   return names
@@ -951,13 +980,17 @@ function quotaCredentialHintNames(kind, profile) {
  */
 async function discoverQuotaCredential(ctx, kind, profile) {
   const attempted = quotaCredentialHintNames(kind, profile)
+  const policy = quotaCredentialPolicy(kind)
+  const formatCredential = (value) => policy.format === 'raw' ? value : `Bearer ${value}`
   const envHas = (name) => typeof process.env[name] === 'string' && process.env[name].trim() !== ''
   const credentials = ctx.get('credentials')
   if (credentials !== undefined && typeof credentials.resolve === 'function') {
     for (const name of attempted) {
       try {
         const hit = await Promise.resolve(credentials.resolve(name))
-        if (hit !== undefined && typeof hit.value === 'string' && hit.value !== '') return `Bearer ${hit.value}`
+        if (hit !== undefined && typeof hit.value === 'string' && hit.value !== '') {
+          return formatCredential(hit.value)
+        }
       } catch (_) {}
     }
   } else if (profile.apiKeyEnv !== '' && !attempted.some(envHas)) {
@@ -965,7 +998,7 @@ async function discoverQuotaCredential(ctx, kind, profile) {
   }
   for (const name of attempted) {
     const value = process.env[name]
-    if (typeof value === 'string' && value.trim() !== '') return `Bearer ${value.trim()}`
+    if (typeof value === 'string' && value.trim() !== '') return formatCredential(value.trim())
   }
   return undefined
 }
@@ -1082,6 +1115,90 @@ function deepseekMoneyText(amount, currency) {
   return symbol === '' ? `${amount} ${currency}` : `${symbol}${amount}`
 }
 
+// ─── 小米 MiMo Token Plan（xiaomi-token-plan-cn）控制台查询 ─────────────────
+// 数据源是控制台同源 API（platform.xiaomimimo.com SPA bundle 核实）：前端统一走
+// `/api/v1` 前缀 + same-origin Cookie，无任何 API-key 查询端点。两个 GET 都是宿主常量，
+// Cookie 凭据只发往这两个固定地址。「套餐使用情况」页 = detail（套餐名/有效期）+ usage（额度桶）。
+const XIAOMI_TOKEN_PLAN_DETAIL_URL = 'https://platform.xiaomimimo.com/api/v1/tokenPlan/detail'
+const XIAOMI_TOKEN_PLAN_USAGE_URL = 'https://platform.xiaomimimo.com/api/v1/tokenPlan/usage'
+
+/** 控制台信封解包：{code,message,data}，code∈{0,200} 视为成功（与控制台前端同一口径）。
+ * code=401（登录态失效）→ 稳定错误码 credential-rejected；其余非零码 → bad-payload 并透出 message。 */
+function unwrapXiaomiConsoleEnvelope(payload) {
+  if (payload === null || typeof payload !== 'object') throw new Error('bad-payload')
+  const code = Number(payload.code)
+  if (!Number.isFinite(code)) throw new Error('bad-payload')
+  if (code === 0 || code === 200) return payload.data !== null && typeof payload.data === 'object' ? payload.data : {}
+  const detail = sanitizeQuotaErrorDetail(typeof payload.message === 'string' ? payload.message : undefined)
+  const error = new Error(code === 401 ? 'credential-rejected' : 'bad-payload')
+  if (detail !== undefined) error.detail = detail
+  throw error
+}
+
+/**
+ * usage.items[] → 统一窗口：每项 {name, percent(0..1 小数), used, limit}，与控制台
+ * 「套餐使用情况」进度条同源。percent×100 截断（控制台同款 min(100,max(0,100p))），
+ * 缺 percent 的桶跳过（控制台对非法 percent 显示「—」，我们宁可少一行也不显示假进度）；
+ * compensation_total_token 在 limit===0 时控制台不渲染（账号无补偿积分），同样丢弃。
+ * used/limit 原始数值随窗口下发、由客户端做 K/M/B 缩写——数字不是文案，宿主不拼句子。
+ * detail.planName 有值时输出一个文本窗口置顶；currentPeriodEnd 解析成功且未过期时作为
+ * resetsAt 附到百分比窗口（订阅有效期即额度清零点；已失效套餐不再挂未来时刻误导倒计时）。
+ */
+function normalizeXiaomiTokenPlanUsage(detailData, usageData) {
+  const windows = []
+  const planName = typeof detailData?.planName === 'string' ? detailData.planName.trim().slice(0, MAX_QUOTA_PROVIDER_NAME) : ''
+  if (planName !== '') windows.push({ id: 'plan', kindKey: 'plan-name', text: planName })
+  const periodEnd = detailData?.expired === true ? undefined : normalizeResetTimestamp(detailData?.currentPeriodEnd)
+  const items = Array.isArray(usageData?.usage?.items) ? usageData.usage.items : []
+  const seenNames = new Set()
+  for (const item of items) {
+    if (item === null || typeof item !== 'object') continue
+    const name = typeof item.name === 'string' ? item.name.trim() : ''
+    if (name === '' || seenNames.has(name)) continue
+    if (name === 'compensation_total_token' && Number(item.limit) === 0) continue
+    const fraction = Number(item.percent)
+    if (!Number.isFinite(fraction)) continue
+    seenNames.add(name)
+    const used = Number(item.used)
+    const limit = Number(item.limit)
+    windows.push({
+      id: name,
+      kindKey: name,
+      percent: Math.max(0, Math.min(100, Math.round(fraction * 100))),
+      ...(Number.isFinite(used) && used >= 0 ? { used } : {}),
+      ...(Number.isFinite(limit) && limit > 0 ? { limit } : {}),
+      ...(periodEnd !== undefined ? { resetsAt: periodEnd } : {}),
+    })
+  }
+  return windows
+}
+
+/**
+ * 小米 Token Plan 编排：detail + usage 两次固定 GET，Cookie 认证（无候选链、无钉住域——
+ * 查询平面与 settings baseURL 完全无关）。credential 是 discoverQuotaCredential 按 kind policy
+ * 下发的裸 Cookie；容错处理粘贴带入的 `Cookie:` 前缀；HTTP 401/403 与信封 code:401 都归一为
+ * credential-rejected（Cookie 失效是唯一常见故障，别让用户猜状态码）。
+ */
+async function fetchXiaomiTokenPlanUsage({ credential, signal }) {
+  const cookie = String(credential ?? '').trim().replace(/^cookie:\s*/i, '')
+  if (cookie === '') throw new Error('credential-missing')
+  const fetchEnvelope = async (url) => {
+    try {
+      return unwrapXiaomiConsoleEnvelope(await requestQuotaJson(url, { cookie, signal }))
+    } catch (error) {
+      if (error?.message === 'http-status:401' || error?.message === 'http-status:403') throw new Error('credential-rejected')
+      throw error
+    }
+  }
+  const detailData = await fetchEnvelope(XIAOMI_TOKEN_PLAN_DETAIL_URL)
+  const usageData = await fetchEnvelope(XIAOMI_TOKEN_PLAN_USAGE_URL)
+  const hasPlan = typeof detailData?.planCode === 'string' && detailData.planCode.trim() !== ''
+  const windows = normalizeXiaomiTokenPlanUsage(detailData, usageData)
+  if (!hasPlan && windows.length === 0) throw new Error('no-subscription')
+  return windows
+}
+
+
 // ─── CLIProxyAPI（cliproxy）管理面编排 ──────────────────────────────────────
 // 上游官方额度端点注册表（经 CPA api-call 代调，header 的 $TOKEN$ 由 CPA 替换为对应账号凭据）。
 // 形状来源：muyouzhi6/astrbot_plugin_cliproxy_stats + CPA main 分支源码（2026-08 核实）；
@@ -1241,7 +1358,8 @@ function parseCliproxyUpstream(provider, payload) {
  * 预算：账号 ≤8、api-call 总次数 ≤12、并发 3、窗口总数 ≤32；部分账号失败不拖垮整行
  * （有成功窗口即返回），全部失败抛首个稳定错误码。守卫与凭据由 kickQuotaRefresh 先行完成。
  */
-async function fetchCliproxyUsage({ profile, config, authorization, signal }) {
+async function fetchCliproxyUsage({ profile, config, credential, signal }) {
+  const authorization = credential
   const pinned = Array.isArray(config?.allowedHosts?.[profile.name]) ? config.allowedHosts[profile.name] : []
   const origin = safeCliproxyOrigin(profile.baseURL, pinned)
   if (origin === undefined) throw new Error('host-not-pinned')
@@ -1450,6 +1568,7 @@ async function fetchProviderUsage(endpoint, authorization, options = {}) {
 /**
  * 单次 JSON 请求（GET/POST，POST 带 JSON body）：CLIProxyAPI 管理面专用（GET auth-files +
  * POST api-call）。与 GET 版同样的 15s 超时、64KB 上限、瞬时错误白名单；body 只接受已序列化字符串。
+ * options.cookie（v0.29 小米控制台）：按 Cookie 头直发登录态，与 Authorization 互斥使用。
  */
 function requestQuotaJsonOnce(endpoint, options = {}) {
   return new Promise((resolve, reject) => {
@@ -1472,6 +1591,7 @@ function requestQuotaJsonOnce(endpoint, options = {}) {
         'user-agent': `dsh-service/${pluginVersion} (DeepSeek Harness plugin)`,
         ...(body === '' ? {} : { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) }),
         ...(options.authorization === undefined || options.authorization === '' ? {} : { Authorization: options.authorization }),
+        ...(typeof options.cookie === 'string' && options.cookie !== '' ? { Cookie: options.cookie } : {}),
       },
     }, (response) => {
       const status = response.statusCode || 0
@@ -2734,12 +2854,23 @@ async function mutateSkillEntryById(ctx, dshHome, index, id, allowInvalid, mutat
   return { ok: true, entry: publicSkillEntry(fresh, index), entryPath: entry.path }
 }
 
-function skillDescribeSystemPrompt() {
+// 补全输出语言白名单：只认 'zh'，其余一切输入（含缺省/伪造）一律按 'en' 处理——
+// 与 DSH locale 服务的 en 兜底语义一致；语言是枚举开关，浏览器永远送不进自由文本。
+function normalizeSkillDescribeLang(value) {
+  return value === 'zh' ? 'zh' : 'en'
+}
+
+function skillDescribeSystemPrompt(lang) {
+  // 输出语言跟随 DSH 界面语言（客户端下发 effective locale 枚举）：中文环境出简体中文，
+  // 英文环境出英文；无论哪种，都不跟随技能正文自身的语言。
+  const languageRule = lang === 'zh'
+    ? '"description" and "whenToUse" MUST be written in Simplified Chinese regardless of the skill body language'
+    : '"description" and "whenToUse" MUST be written in English regardless of the skill body language'
   return [
     'You write catalog metadata for agent-harness skills.',
     'Reply with STRICT JSON only, no markdown fences, no extra keys, no commentary:',
     '{"description":"...","whenToUse":"..."}',
-    'Rules: "description" and "whenToUse" MUST be written in Simplified Chinese regardless of the skill body language; "description" is ONE routing sentence (max ' + SKILL_DESCRIPTION_MAX_CHARS + ' characters) saying what the skill does and when to pick it; "whenToUse" is short usage guidance (max ' + SKILL_USAGE_MAX_CHARS + ' characters); never use line breaks inside either value.',
+    'Rules: ' + languageRule + '; "description" is ONE routing sentence (max ' + SKILL_DESCRIPTION_MAX_CHARS + ' characters) saying what the skill does and when to pick it; "whenToUse" is short usage guidance (max ' + SKILL_USAGE_MAX_CHARS + ' characters); never use line breaks inside either value.',
   ].join(' ')
 }
 
@@ -2784,7 +2915,7 @@ async function collectLlmText(llm, options) {
     const stream = llm.stream({
       provider: options.provider,
       model: options.model,
-      system: skillDescribeSystemPrompt(),
+      system: skillDescribeSystemPrompt(normalizeSkillDescribeLang(options.lang)),
       messages: [createSkillDescribeMessage(options.prompt)],
       maxTokens: options.maxTokens ?? SKILL_DESCRIBE_MAX_TOKENS,
       signal: controller.signal,
@@ -2848,7 +2979,7 @@ async function describeSkillDraft(llm, entryName, rawContent, provider, model, o
     try {
       onEvent?.('attempt', { n: attempt + 1, total: SKILL_DESCRIBE_ATTEMPTS, route: provider + '/' + model })
       // 重试时逐级放大输出预算：推理型模型可能耗尽配额却产不出正文。
-      const text = await collectLlmText(llm, { provider, model, prompt, onEvent, maxTokens: SKILL_DESCRIBE_MAX_TOKENS * Math.pow(4, attempt), signal: options.signal })
+      const text = await collectLlmText(llm, { provider, model, prompt, onEvent, maxTokens: SKILL_DESCRIBE_MAX_TOKENS * Math.pow(4, attempt), signal: options.signal, lang: options.lang })
       onEvent?.('received', { chars: text.length })
       const draft = extractSkillDraftJson(text)
       onEvent?.('parsed')
@@ -3187,14 +3318,14 @@ function apply(ctx) {
           // 编排类 kind（cliproxy）：端点守卫 → 凭据 → fetcher 合并多账号窗口，无候选链。
           const guard = registered.fetcherGuard?.(profile, config) ?? null
           if (guard !== null) throw new Error(guard)
-          const authorization = await discoverQuotaCredential(ctx, kind, profile)
-          if (authorization === undefined) throw new Error('credential-missing')
+          const credential = await discoverQuotaCredential(ctx, kind, profile)
+          if (credential === undefined) throw new Error('credential-missing')
           const controller = new AbortController()
           quotaAbortControllers.add(controller)
           const deadline = setTimeout(() => controller.abort(), QUOTA_PROVIDER_DEADLINE_MS)
           let produced
           try {
-            produced = await registered.fetcher({ profile, config, authorization, signal: controller.signal })
+            produced = await registered.fetcher({ profile, config, credential, signal: controller.signal })
           } finally {
             clearTimeout(deadline)
             quotaAbortControllers.delete(controller)
@@ -3395,6 +3526,7 @@ function apply(ctx) {
     }
 
     if (endpoint === 'diagnostics') {
+      if (!featureEnabled('healthDiagnostics')) return { ok: false, error: 'feature-disabled' }
       try {
         return { ok: true, value: await collectDiagnostics(ctx, dshHome, runtimeEnv) }
       } catch (error) {
@@ -3424,6 +3556,7 @@ function apply(ctx) {
     }
 
     if (endpoint === 'permissions-plan') {
+      if (!featureEnabled('healthDiagnostics')) return { ok: false, error: 'feature-disabled' }
       try {
         return { ok: true, value: await permissionSnapshot(ctx, dshHome, permissionPlans) }
       } catch (error) {
@@ -3432,6 +3565,7 @@ function apply(ctx) {
     }
 
     if (endpoint === 'permissions-deep') {
+      if (!featureEnabled('healthDiagnostics')) return { ok: false, error: 'feature-disabled' }
       try {
         const value = await deepCheckPermissions(dshHome, permissionPlans, payload?.planId)
         if (value === undefined) return { ok: false, error: 'unknown-permission-plan' }
@@ -3442,6 +3576,7 @@ function apply(ctx) {
     }
 
     if (endpoint === 'permissions-repair') {
+      if (!featureEnabled('healthDiagnostics')) return { ok: false, error: 'feature-disabled' }
       try {
         const value = await repairPermissions(ctx, dshHome, permissionPlans, payload?.planId)
         if (value === undefined) return { ok: false, error: 'unknown-permission-plan' }
@@ -3595,7 +3730,7 @@ function apply(ctx) {
         // 注册进活动调用表：Fiber 销毁时立即中断，不再僵尸到 90s 超时。
         const call = registerSkillCall()
         try {
-          const draft = await describeSkillDraft(llm, entry.name ?? '', raw, provider, model, (code, params) => job.push(code, params), { signal: call.signal })
+          const draft = await describeSkillDraft(llm, entry.name ?? '', raw, provider, model, (code, params) => job.push(code, params), { signal: call.signal, lang: normalizeSkillDescribeLang(payload?.lang) })
           return { ok: true, value: { draft } }
         } finally {
           call.done()
@@ -3682,6 +3817,8 @@ function apply(ctx) {
       if (skillsBatch.running || skillsBatch.phase === 'done' || skillsBatch.phase === 'cancelled') return { ok: false, error: 'batch-already-' + (skillsBatch.running ? 'running' : skillsBatch.phase) }
       skillsBatch.phase = 'running'
       skillsBatch.running = true
+      // 补全语言在 run 时刻定格（而非 plan 时刻）：计划确认前切换界面语言，按新语言补全。
+      skillsBatch.lang = normalizeSkillDescribeLang(payload?.lang)
       // 批量级 AbortController：取消/销毁时立即中断在途 LLM 调用（不只等当前条目自然结束）。
       const batchCall = registerSkillCall()
       // 有意不 await：批量在后台顺序执行，客户端轮询 skills-batch-status 取进度。
@@ -3715,7 +3852,7 @@ function apply(ctx) {
             const evaluated = evaluateSkillFile(raw)
             if (evaluated.invalid !== undefined) throw new Error('entry-changed')
             const located = locateSkillFrontmatter(raw)
-            const draft = await describeSkillDraft(llm, entry.name ?? '', raw, skillsBatch.provider, skillsBatch.model, batchLog, { signal: batchCall.signal })
+            const draft = await describeSkillDraft(llm, entry.name ?? '', raw, skillsBatch.provider, skillsBatch.model, batchLog, { signal: batchCall.signal, lang: skillsBatch.lang })
             // 注释只进侧车索引：文件零改动，正文哈希取当前内容（正文再变更即自动回到待补全）。
             await serializeSkillsIndexWrite((current) => {
               current[entry.path] = { bodyHash: bodyHashOf(raw, located?.bodyStart ?? 0), note: { description: draft.description, usage: draft.usage }, model: skillsBatch.provider + '/' + skillsBatch.model, at: Date.now() }
@@ -3832,6 +3969,8 @@ function apply(ctx) {
             nextAllowedAt: view.nextAllowedAt,
             ...(providerResetCards.length > 0 ? { resetCards: providerResetCards } : {}),
             ...(credentialHints !== undefined ? { credentialHints } : {}),
+            // 凭据入口语义由 kind registry 下发稳定键，客户端只负责本地化，不再对 kind 重复分支。
+            credentialEntryKey: quotaCredentialPolicy(kind).entryKey,
             // 官网用户页余额网址（宿主常量白名单随 kind 下发；无则缺省）。
             ...(typeof KIND_REGISTRY[kind].usageUrl === 'string' && KIND_REGISTRY[kind].usageUrl !== '' ? { usageUrl: KIND_REGISTRY[kind].usageUrl } : {}),
           })
@@ -3880,8 +4019,9 @@ function apply(ctx) {
           } else {
             const kind = payload?.kind
             if (kind !== null && !QUOTA_KINDS.includes(kind)) return { save: false, value: { ok: false, error: 'unknown-kind' } }
-            if (kind !== null && KIND_REGISTRY[kind]?.managementPlane === true) {
-              // 管理面 kind：把 settings baseURL 的 host 钉进本条目（服务端派生，浏览器零输入）。
+            const endpointPolicy = kind === null ? 'dynamic' : (KIND_REGISTRY[kind]?.configEndpointPolicy ?? 'dynamic')
+            if (endpointPolicy === 'pinned') {
+              // 钉住查询面 kind：把 settings baseURL 的 host 钉进本条目（服务端派生，浏览器零输入）。
               // 外呼时复验同一张表——之后改 baseURL 必须重新保存适配才恢复外呼。
               const host = cliproxyPinHostFromBaseURL(profileForProvider.baseURL)
               if (host === undefined) {
@@ -3889,10 +4029,13 @@ function apply(ctx) {
               }
               config.allowedHosts[providerName] = [host]
             } else {
-              if (kind !== null && Array.isArray(KIND_REGISTRY[kind]?.endpoints) === false && quotaEndpointFor(kind, profileForProvider.baseURL).length === 0) {
+              // fixed 查询面由宿主常量决定、与 baseURL 无关；dynamic 则必须能从注册表/baseURL 解出安全端点。
+              if (kind !== null && endpointPolicy !== 'fixed'
+                && Array.isArray(KIND_REGISTRY[kind]?.endpoints) === false
+                && quotaEndpointFor(kind, profileForProvider.baseURL).length === 0) {
                 return { save: false, value: { ok: false, error: 'unsafe-provider-endpoint' } }
               }
-              // 非管理面 kind（含显式停用/清除）不保留钉住记录，避免陈旧域残留。
+              // 非 pinned kind（含显式停用/清除）不保留钉住记录，避免陈旧域残留。
               delete config.allowedHosts[providerName]
             }
             config.kinds[providerName] = kind
@@ -4073,6 +4216,7 @@ export {
   extractSkillDraftJson,
   fetchCliproxyUsage,
   fetchProviderUsage,
+  fetchXiaomiTokenPlanUsage,
   fixLegacySkillInvocationKeys,
   inferQuotaKind,
   inject,
@@ -4086,6 +4230,7 @@ export {
   normalizeOpencodeUsage,
   normalizeOpenRouterCredits,
   normalizeSiliconFlowInfo,
+  normalizeXiaomiTokenPlanUsage,
   normalizeZaiCodingUsage,
   parseQuotaConfigText,
   parseSkillFrontmatterData,
@@ -4103,6 +4248,7 @@ export {
   setSkillInvocationKey,
   skillIdFor,
   unwrapCliproxyApiCallEnvelope,
+  unwrapXiaomiConsoleEnvelope,
 }
 export default {
   SKILL_SOURCE_RANK,
@@ -4117,6 +4263,7 @@ export default {
   extractSkillDraftJson,
   fetchCliproxyUsage,
   fetchProviderUsage,
+  fetchXiaomiTokenPlanUsage,
   fixLegacySkillInvocationKeys,
   inferQuotaKind,
   inject,
@@ -4130,6 +4277,7 @@ export default {
   normalizeOpencodeUsage,
   normalizeOpenRouterCredits,
   normalizeSiliconFlowInfo,
+  normalizeXiaomiTokenPlanUsage,
   normalizeZaiCodingUsage,
   parseQuotaConfigText,
   parseSkillFrontmatterData,
@@ -4147,4 +4295,5 @@ export default {
   setSkillInvocationKey,
   skillIdFor,
   unwrapCliproxyApiCallEnvelope,
+  unwrapXiaomiConsoleEnvelope,
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gehennawu/dsh-service",
-  "version": "0.27.0",
+  "version": "0.28.0",
   "description": "DSH Web 自托管运维面板：安全重启、健康监控、备份和 Linux 权限维护。",
   "type": "module",
   "scripts": {