@huai_xin/dsh-workbuddy 0.1.0 → 0.1.2

package/README.md

@@ -22,11 +22,16 @@ WorkBuddy 模型接入插件（DeepSeek Harness / DSH），同时支持两个部
 # 从 npm 安装到某个 profile（会同时把 bundle 挂进该 profile）
 dsh plugin --profile <profile> add @huai_xin/dsh-workbuddy
 
-# 本地目录（未发布时）
+# 直接从 GitHub 安装（npm 版本还没跟上改动时用它）
+dsh plugin --profile <profile> add github:2424830124/dsh-workbuddy
+
+# 本地目录（开发时）
 dsh plugin --profile <profile> add /path/to/dsh-workbuddy
 ```
 
-也可以在 Web UI 的插件管理里安装（效果相同，都是往 profile 的 `dsh.profile.bundles` 里加一条并应用 patch）。
+npm 页面：<https://www.npmjs.com/package/@huai_xin/dsh-workbuddy>
+
+也可以在 Web UI 的插件管理里安装（效果相同，都是往 profile 的依赖里加一条并应用 patch）。
 
 安装后需要重启 DSH（替换已加载的 JS 模块需要新的 generation），随后 `/workbuddy` 命令即可使用。
 
@@ -34,12 +39,9 @@ dsh plugin --profile <profile> add /path/to/dsh-workbuddy
 
 ### 设置页
 
-**设置 → WorkBuddy**（侧边栏齿轮 → WorkBuddy）是**一张卡片 + 账号标签页**：海外版与大陆版各自独立登录，点标签只切换查看，不影响已登录的账号。
+界面长什么样、每块显示什么，见下面的 [设置面板](#设置面板) 一节（含截图）。
 
-- 卡片头：状态圆点 + 部署名 + provider/端点 + 状态胶囊
-- 信息区：账号、到期时间、是否可自动续期、**积分**（总量 + 其中签到获得的）、**每日签到**（今日状态、连续天数、本周进度点）
-- 按钮：**登录**、**立即领取**（签到未完成时可点）、**续期**、**退出登录**
-- 卡片下方**常驻该账号的模型列表**，切标签即换列表
+面板通过宿主路由 `/workbuddy/{state,login,logout,refresh,models,checkin,availability,credits,busy,enabled,import}` 读写状态，这些路由走与宿主一致的连接信任栅栏，只对本机已被 GUI 接纳的来源开放。
 
 积分与签到：
 
@@ -48,8 +50,6 @@ dsh plugin --profile <profile> add /path/to/dsh-workbuddy
 - 登录成功后也会立刻补一次签到
 - 海外版后端没有签到接口，只显示积分、不显示领取按钮
 
-面板通过宿主路由 `/workbuddy/{state,login,logout,refresh,models,checkin}` 读写状态，这些路由走与宿主一致的连接信任栅栏，只对本机已被 GUI 接纳的来源开放。
-
 ### 命令
 
 ```
@@ -151,6 +151,8 @@ dsh-workbuddy/
 
 - 部署名旁的圆点是登录状态（绿=已登录 / 黄=等待授权 / 红=已过期 / 灰=未登录），悬停显示 `provider · endpoint`。
 - 积分右侧的 **⟳** 只刷新这一行（走 `GET /workbuddy/credits?region=…`），不动其它数据。
+- 同一行最右边还有 **「套餐」**：在浏览器打开该部署的官方套餐/用量页（大陆版 → `workbuddy.cn/profile/plans-usage`，海外版 → `workbuddy.ai/profile/plans-usage`）。地址由宿主从**页面白名单**解析，面板只传一个页面名，所以这个入口无法被用来打开任意网址。
+- 每列的**值贴左边缘**（与账号、到期对齐），**⟳ 与「套餐」贴右边缘**，中间留白，窄面板下也不会挤出横向滚动条。
 - **未登录的部署整列只显示一个居中的「登录」按钮**，不再是四行「未知」加一堆禁用按钮。
 - 签到按钮（只有大陆版有）跟在部署名右边，悬停显示上次自动领取的结果。
 
@@ -163,6 +165,7 @@ dsh-workbuddy/
 - 繁忙程度**只有大陆版有**（`POST /v2/chat/busy`；海外版 404，那一列整个不显示）：空闲 / 繁忙 / 拥堵 / 未知四档，用词与官方前端一致（官方把 `normal` 与 `idle` 并成「空闲」），悬停给出官方的完整说法（轻微拥堵 / 极度拥堵）。
 - 工具栏：搜索框、「全部启用 / 全部停用」（**只作用于可用分组**，不可用分组自己手动调）、「⟳ 刷新列表」、「检测可用性」（手动，立即执行）。这两个按钮宽度固定，「检测中…」不会把 ⟳ 挤走。
 - 打开面板时会自动检测一次（国内零消耗、可频繁；海外版每次探测一 token，每天最多一次）。
+- 开关**立即生效**：翻转后插件会通知 harness「模型集变了」，模型选择器随即重读目录（它的目录是缓存的，不通知就会一直显示已关掉的模型）。可用性探测结果与真实调用中学到的判定也会即时反映到默认开关上。
 
 > 该预览由 `node test/live/ui-preview.mjs` 用真实样式表生成到 `%TEMP%/wb-ui-preview.html`，改版后可以直接截图对比。
 

package/client/index.js

@@ -51,6 +51,9 @@ window.__ModuleLoader__.load({
         colCredits: '积分',
         colActions: '操作',
         refreshCredits: '刷新积分',
+        openPlans: '套餐',
+        openPlansHint: '在浏览器打开该部署的官方套餐页（用量与订阅）',
+        openPlansFailed: (url) => `没能自动打开浏览器，请手动访问：${url}`,
         creditsRate: '消耗速度（实时）',
         models: '模型',
         login: '登录',
@@ -135,6 +138,9 @@ window.__ModuleLoader__.load({
         colCredits: 'Credits',
         colActions: 'Actions',
         refreshCredits: 'Refresh credits',
+        openPlans: 'Plans',
+        openPlansHint: 'Open this deployment’s official plans page in your browser',
+        openPlansFailed: (url) => `Could not launch a browser — open this instead: ${url}`,
         creditsRate: 'Consumption rate (live)',
         models: 'Models',
         login: 'Sign in',
@@ -236,6 +242,11 @@ window.__ModuleLoader__.load({
 .wb-card + .wb-card { margin-top: 16px; }
 .wb-card-head { display: flex; flex-wrap: wrap; align-items: center; gap: 10px; padding: 14px 16px 12px; }
 .wb-card-title { font-size: 12px; font-weight: 600; letter-spacing: .06em; text-transform: uppercase; color: var(--wb-muted); }
+.wb-account-card { border-radius: 12px; border-color: var(--wb-line-soft); }
+.wb-account-card .wb-card-head { gap: 10px; }
+.wb-account-card .wb-card-title { letter-spacing: 0; text-transform: none; color: var(--wb-text); }
+.wb-account-card .wb-btn { border-radius: 6px; }
+.wb-account-card .wb-card-head .wb-btn { min-width: 52px; }
 .wb-head { display: flex; align-items: center; gap: 12px; padding: 14px 16px 12px; }
 /* The mark is a mask painted with the accent colour: one asset, both themes. */
 .wb-logo { flex: none; width: 30px; height: 30px; display: block; background: var(--wb-accent-strong);
@@ -245,47 +256,51 @@ window.__ModuleLoader__.load({
 /* account table — transposed: deployments are columns, fields are rows ------
    One grid for the whole table so a signed-out deployment can occupy its whole
    column with a single centred sign-in button. */
-.wb-table { display: grid; padding: 0 12px 14px; overflow-x: auto; --wb-cols: 2; position: relative;
-  /* A label column on the left and an empty spacer of the same width on the
-     right: that is what makes the pair of deployment columns sit symmetrically
-     in the card instead of being pushed right by the labels. Centring keeps the
-     block in the middle once the columns hit their cap. */
-  /* The minimum keeps a row on one line; below that the table scrolls instead of
-     reflowing a row. Kept small because the balance row only ever holds the
-     number and its refresh. */
-  grid-template-columns: 64px repeat(var(--wb-cols), minmax(150px, 240px)) 64px;
-  justify-content: center;
-  /* Rows are a fixed height in every state, so the card does not change size
-     between "loading" and "signed in", and the separators line up. */
-  grid-auto-rows: 52px;
-  column-gap: 24px; row-gap: 0; align-items: stretch; }
-/* One continuous separator between the deployments, drawn down the middle of
-   the symmetric grid. It fades out at both ends, so it reads as a division of
-   the two accounts rather than a stray table border. */
-.wb-table-split::before { content: ''; position: absolute; left: 50%; top: 16px; bottom: 20px; width: 1px;
-  background: linear-gradient(to bottom, transparent, var(--wb-line) 14%, var(--wb-line) 86%, transparent); }
+.wb-table { display: grid; position: relative; padding: 0 10px 8px; overflow-x: auto; --wb-cols: 2;
+  /* No trailing spacer: both accounts need enough width for an unbroken action
+     pair in the settings column. Narrower views scroll instead of wrapping. */
+  grid-template-columns: 56px repeat(var(--wb-cols), minmax(180px, 1fr));
+  /* Fixed tracks prevent account loading or login from resizing the card; the
+     action row needs less air than the four information rows above it. */
+  grid-template-rows: repeat(4, 52px) 34px;
+  column-gap: 32px; row-gap: 0; align-items: stretch; }
+/* Centre the divider on the card, not the account-column gap: the label
+   column makes that gap visually off-centre. Account contents stay in place. */
+.wb-table-split::before { content: ''; position: absolute; left: 50%; top: 18px; bottom: 8px; width: 1px;
+  transform: translateX(-50%); pointer-events: none;
+  background: linear-gradient(to bottom, transparent, var(--wb-line-soft) 12%, var(--wb-line-soft) 92%, transparent); }
 .wb-row-label { display: flex; align-items: center; font-size: 11px; letter-spacing: .05em;
   text-transform: uppercase; color: var(--wb-muted); }
-.wb-th { display: flex; align-items: center; font-size: 12.5px; font-weight: 620; }
-.wb-th .wb-btn { padding: 3px 8px; font-size: 11px; font-weight: 500; margin-left: 2px; }
+.wb-th { min-width: 0; display: flex; align-items: center; font-size: 12.5px; font-weight: 620; white-space: nowrap; }
+.wb-th .wb-btn { padding: 3px 8px; font-size: 11px; font-weight: 500; line-height: 1.2; }
 .wb-deploy { display: flex; align-items: center; gap: 8px; }
 .wb-deploy-dot { flex: none; width: 7px; height: 7px; border-radius: 50%; }
 /* The cell fills its row and holds its content left, the way the signed-in rows
    read; only the standalone sign-in cell is centred. No rule between rows: the
    spacing and the vertical separator already say where the columns are. */
 .wb-td { min-width: 0; display: flex; flex-wrap: wrap; align-items: center; gap: 8px; }
+/* Keep refresh and plans beside the balance, not at the far column edge. */
+.wb-cell-actions { flex: none; display: inline-flex; align-items: center; gap: 8px; }
+.wb-td-credits, .wb-td-last { flex-wrap: nowrap; }
+.wb-td-last { gap: 6px; }
 .wb-td-span { display: flex; align-items: center; justify-content: center; }
 .wb-account-name { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
 .wb-num { font-variant-numeric: tabular-nums; color: var(--wb-muted); }
 .wb-credits-value { font-size: 16.5px; font-weight: 650; color: var(--wb-accent-strong);
   font-variant-numeric: tabular-nums; letter-spacing: -.01em; }
 /* A bare icon action: no box, just the glyph, tinted on hover. */
-.wb-icon-btn { font: inherit; font-size: 13px; line-height: 1; padding: 5px 7px; border-radius: 6px; cursor: pointer;
-  border: 0; background: transparent; color: var(--wb-muted); transition: background .15s, color .15s; }
+.wb-icon-btn { font: inherit; font-size: 13px; line-height: 1; padding: 5px 7px; border-radius: 6px; cursor: pointer;  border: 0; background: transparent; color: var(--wb-muted); transition: background .15s, color .15s; }
 .wb-icon-btn:hover:not(:disabled) { background: var(--wb-accent-soft); color: var(--wb-accent-strong); }
 .wb-icon-btn:disabled { opacity: .4; cursor: not-allowed; }
-.wb-td .wb-btn { display: inline-flex; align-items: center; justify-content: center;
-  padding: 5px 10px; font-size: 11.5px; min-width: 78px; }
+/* The link out to the official plans page: same quiet weight as the icon
+   actions beside it, but it needs words to say where it goes — kept tight so the
+   balance row still fits one line in a narrow panel. */
+.wb-link-btn { font: inherit; font-size: 11px; line-height: 1; padding: 4px 7px; border-radius: 6px;
+  cursor: pointer; border: 1px solid var(--wb-line-soft); background: transparent; color: var(--wb-muted);
+  white-space: nowrap; transition: background .15s, color .15s, border-color .15s; }
+.wb-link-btn:hover { background: var(--wb-accent-soft); color: var(--wb-accent-strong); border-color: transparent; }
+.wb-td .wb-btn { display: inline-flex; align-items: center; justify-content: center; box-sizing: border-box;
+  padding: 4px 10px; font-size: 11.5px; min-width: 78px; min-height: 26px; white-space: nowrap; }
 .wb-td-span .wb-btn { padding: 7px 16px; }
 
 /* tab strip: two equal halves, the selected one a tinted segment ------------- */
@@ -851,6 +866,25 @@ window.__ModuleLoader__.load({
         }
       }
 
+      /**
+       * Open the deployment's official plans page in the user's browser.
+       *
+       * The host resolves the URL from its own allowlist, so the panel only ever
+       * names a page. When launching fails the reply still carries the URL and
+       * the panel shows it, rather than pretending nothing happened.
+       */
+      const openPlans = async (regionId) => {
+        setError('')
+        try {
+          const result = await request('/open', { method: 'POST', body: JSON.stringify({ region: regionId, page: 'plans' }) })
+          if (result.opened !== true && typeof result.url === 'string') {
+            setError(t('openPlansFailed')(result.url))
+          }
+        } catch (cause) {
+          setError(cause instanceof Error ? cause.message : String(cause))
+        }
+      }
+
       const credits = region?.credits
       const checkin = region?.checkin
       const models = region === undefined ? undefined : modelMap[region.id]
@@ -1161,16 +1195,29 @@ window.__ModuleLoader__.load({
             entry.credits !== null && entry.credits !== undefined && entry.credits.ok === true
               ? h('span', { key: 'value', className: 'wb-credits-value' }, formatCredits(entry.credits.total))
               : h('span', { key: 'value', className: 'wb-muted' }, t('unknown')),
-            h('button', {
-              key: 'refresh',
-              type: 'button',
-              className: 'wb-icon-btn',
-              title: t('refreshCredits'),
-              'aria-label': t('refreshCredits'),
-              disabled: creditBusy === entry.id,
-              onClick: () => void refreshCredits(entry.id)
-            }, creditBusy === entry.id ? '…' : '⟳')
-          ]))
+            // All values share a left edge; the quiet balance actions follow
+            // the figure directly so each deployment reads as one compact group.
+            h('span', { key: 'actions', className: 'wb-cell-actions' }, [
+              h('button', {
+                key: 'refresh',
+                type: 'button',
+                className: 'wb-icon-btn',
+                title: t('refreshCredits'),
+                'aria-label': t('refreshCredits'),
+                disabled: creditBusy === entry.id,
+                onClick: () => void refreshCredits(entry.id)
+              }, creditBusy === entry.id ? '…' : '⟳'),
+              // The official plans page needs the deployment's own signed-in
+              // session, so it opens in the user's browser rather than in here.
+              h('button', {
+                key: 'plans',
+                type: 'button',
+                className: 'wb-link-btn',
+                title: t('openPlansHint'),
+                onClick: () => void openPlans(entry.id)
+              }, t('openPlans'))
+            ])
+          ], 'wb-td-credits'))
           cells.push(cell(3, 'actions', accountActions(entry)))
         })
         return cells
@@ -1256,7 +1303,7 @@ window.__ModuleLoader__.load({
         error.length > 0 ? h('p', { className: 'wb-error', role: 'alert' }, error) : null,
 
         // Cards are separate concerns: who is signed in, and what they can run.
-        h('div', { className: 'wb-card' },
+        h('div', { className: 'wb-card wb-account-card' },
           h('div', { className: 'wb-card-head' },
             h(Logomark, null),
             h('span', { className: 'wb-card-title' }, t('cardAccounts')),
@@ -1274,8 +1321,8 @@ window.__ModuleLoader__.load({
             )
           ),
           h('div', {
-            // The separator between deployments is drawn once, down the middle
-            // of the symmetric grid, when there is exactly a pair of them.
+            // A single separator stays at the card's centre when there are
+            // exactly two deployments.
             className: regions.length === 2 ? 'wb-table wb-table-split' : 'wb-table',
             role: 'table',
             style: { '--wb-cols': String(Math.max(1, regions.length)) }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huai_xin/dsh-workbuddy",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "WorkBuddy model provider for DeepSeek Harness (international + China deployments)",
   "type": "module",
   "main": "./src/index.js",

package/src/adapter.js

@@ -24,6 +24,7 @@ import { readCatalogCache, writeCatalogCache } from './catalog-cache.js'
 import { readPrefs, isEnabled } from './model-prefs.js'
 import { applyOfficialList, readOfficialList } from './official-list.js'
 import { chatRoutes } from './regions.js'
+import { notifyModelTopology } from './topology.js'
 
 const CATALOG_TTL_MS = 10 * 60_000
 const TOOL_RESULT_IMAGE_TEXT = 'Attached image(s) from tool result:'
@@ -450,12 +451,15 @@ export class WorkBuddyAdapter {
     if (/11102|service info not found/i.test(text)) {
       writeAvailability(this.region.id, [{ id: model, state: 'dead', detail: '模型不存在（11102 service info not found）', at: Date.now() }])
       this.invalidateCatalog()
+      // The verdict feeds the default on/off state, so the picker has to re-read.
+      notifyModelTopology(this.ctx)
       return
     }
     if (/11158|is not allowed for user type/i.test(text)) {
       const type = /user type \[([^\]]{0,40})\]/i.exec(text)?.[1] ?? ''
       writeAvailability(this.region.id, [{ id: model, state: 'denied', detail: `账号无权限（11158${type.length > 0 ? `，用户类型 ${type}` : ''}）`, at: Date.now() }])
       this.invalidateCatalog()
+      notifyModelTopology(this.ctx)
     }
   }
 
@@ -538,14 +542,16 @@ export class WorkBuddyAdapter {
     // when the user asks for it, which is how one gets tried anyway.
     const prefs = readPrefs(this.region.id)
     const dead = unusableModelIds(this.region.id)
-    return catalog
-      .filter((entry) => isEnabled(prefs, entry.id, dead.has(entry.id)))
-      .map((entry) => ({
-        provider,
-        id: entry.id,
-        name: entry.name,
-        inputModalities: [...entry.input]
-      }))
+    const offered = catalog.filter((entry) => isEnabled(prefs, entry.id, dead.has(entry.id)))
+    // Always logged: one line per picker open, and the fastest way to answer
+    // "did the picker re-read the list after that switch was flipped?".
+    this.ctx.logger.info(`[workbuddy] ${this.region.id}: 选择器读取目录 → ${offered.length}/${catalog.length} 个可选`)
+    return offered.map((entry) => ({
+      provider,
+      id: entry.id,
+      name: entry.name,
+      inputModalities: [...entry.input]
+    }))
   }
 
   /**

package/src/api.js

@@ -21,7 +21,8 @@ import { claimDailyCheckin, fetchCheckinStatus, fetchCredits } from './credits.j
 import { localDayKey } from './http.js'
 import { isEnabled, readPrefs, setEnabled } from './model-prefs.js'
 import { readOfficialList, writeOfficialList } from './official-list.js'
-import { REGIONS, REGION_IDS } from './regions.js'
+import { REGIONS, REGION_IDS, sitePageUrl } from './regions.js'
+import { notifyModelTopology } from './topology.js'
 
 const API_PREFIX = '/workbuddy'
 const MAX_BODY_BYTES = 16 * 1024
@@ -32,6 +33,12 @@ const MASK_PATH = fileURLToPath(new URL('../icon-mask.png', import.meta.url))
 let iconBytes
 let maskBytes
 
+/** Late-bound so importing this module never pulls in the child-process helper. */
+async function defaultOpenInBrowser(url) {
+  const { openInBrowser } = await import('./regions.js')
+  return openInBrowser(url)
+}
+
 /**
  * Which build of this file the running host actually loaded.
  *
@@ -134,8 +141,14 @@ async function statePayload(ctx, adapters) {
 /**
  * Register the panel's routes. Call inside `ctx.inject(['webServer'], …)` so a
  * composition without an HTTP carrier keeps the adapter and the command.
+ *
+ * @param {object} ctx - host plugin context.
+ * @param {Record<string, object>} adapters - per-deployment adapters.
+ * @param {{ openInBrowser?: (url: string) => boolean }} [options] - the browser
+ *   opener is injectable so tests never launch a real one.
  */
-export function registerWorkbuddyApi(ctx, adapters) {
+export function registerWorkbuddyApi(ctx, adapters, options = {}) {
+  const openInBrowser = options.openInBrowser ?? defaultOpenInBrowser
   const rejected = (req, res) => {
     const connection = ctx.get('connection')
     if (connection === undefined || typeof connection.requestRejection !== 'function') return false
@@ -219,7 +232,12 @@ export function registerWorkbuddyApi(ctx, adapters) {
           // The adapter's catalog is the merged one the model picker sees:
           // both live endpoints merged when they answer, otherwise the last
           // successful read from disk. `source` lets the panel say which.
-          if (url.searchParams.get('refresh') === '1') adapter.invalidateCatalog()
+          if (url.searchParams.get('refresh') === '1') {
+            adapter.invalidateCatalog()
+            // A manual refresh can change what the picker may offer, so the
+            // client's cached directory has to be told to re-read.
+            notifyModelTopology(ctx)
+          }
           const models = await adapter.models()
           const ledger = readAvailability(region.id)
           const imported = readOfficialList(region.id)
@@ -292,6 +310,9 @@ export function registerWorkbuddyApi(ctx, adapters) {
         const models = adapter === undefined ? [] : await adapter.models()
         const dead = unusableModelIds(region.id)
         const prefs = readPrefs(region.id)
+        // The picker caches its catalog until it hears this, so without the
+        // notification a model switched off here stays selectable there.
+        notifyModelTopology(ctx)
         ctx.logger.info(`[workbuddy] ${region.id}: ${reset ? '恢复默认' : (enabled ? '启用' : '停用')} ${ids.length} 个模型（${ids.length <= 3 ? ids.join(', ') : `${ids.slice(0, 3).join(', ')}…`}），手工设定 开${result.on}/关${result.off}`)
         sendJson(res, 200, {
           region: region.id,
@@ -304,6 +325,32 @@ export function registerWorkbuddyApi(ctx, adapters) {
         return
       }
 
+      /**
+       * Open one of the deployment's own site pages in the user's browser.
+       *
+       * The panel sends a page *name*; the URL comes from `SITE_PAGES`, so this
+       * route can never be talked into opening an arbitrary address. The reply
+       * carries the URL even when launching failed, so the panel can show it.
+       */
+      if (path === `${API_PREFIX}/open` && method === 'POST') {
+        const body = await readJsonBody(req)
+        const region = REGIONS[String(body?.region ?? '').toLowerCase()]
+        const url = sitePageUrl(region, body?.page)
+        if (url === undefined) {
+          sendJson(res, 400, { error: 'unknown region or page' })
+          return
+        }
+        let opened = false
+        try {
+          opened = (await openInBrowser(url)) !== false
+        } catch (error) {
+          ctx.logger.warn(`[workbuddy] ${region.id}: 打开 ${url} 失败 — ${error instanceof Error ? error.message : String(error)}`)
+        }
+        ctx.logger.info(`[workbuddy] ${region.id}: 打开官方页面 ${url}（${opened ? '已交给浏览器' : '启动失败'}）`)
+        sendJson(res, 200, { region: region.id, url, opened })
+        return
+      }
+
       if (path === `${API_PREFIX}/availability`) {
         const id = String(url.searchParams.get('region') ?? '').toLowerCase()
         const region = REGIONS[id]
@@ -440,6 +487,7 @@ export function registerWorkbuddyApi(ctx, adapters) {
           const result = writeOfficialList(region.id, body.models, { from: source })
           adapter?.invalidateCatalog()
           const models = adapter === undefined ? [] : await adapter.models()
+          notifyModelTopology(ctx)
           ctx.logger.info(`[workbuddy] ${region.id}: 账号名单${result.cleared === true ? '已清除' : `已导入 ${result.count} 个（其中 ${result.withMeta ?? 0} 个带元数据）`}（${source}），当前列表 ${models.length} 个`)
           sendJson(res, 200, {
             region: region.id,

package/src/index.js

@@ -23,6 +23,7 @@ import { claimDailyCheckin, runAutoClaim } from './credits.js'
 import { msUntilNextMidnight } from './http.js'
 import { readPrefs } from './model-prefs.js'
 import { REGIONS, REGION_IDS, regionList } from './regions.js'
+import { notifyModelTopology } from './topology.js'
 
 export const name = 'dsh-workbuddy'
 export const inject = ['commands', 'credentials', 'llm']
@@ -257,6 +258,8 @@ export function apply(ctx) {
         for (const verdict of result.results) counts.set(verdict.state, (counts.get(verdict.state) ?? 0) + 1)
         ctx.logger.info(`[workbuddy] ${id}: 启动可用性检测完成 ${result.results.length} 个${region.freeProbe === true ? '（零消耗）' : '（每个模型一个 token）'} — ${[...counts.entries()].map(([state, count]) => `${state} ${count}`).join(' / ')}`)
         adapter.invalidateCatalog()
+        // Verdicts decide the default on/off state, so tell the picker to re-read.
+        notifyModelTopology(ctx)
       })().catch((error) => {
         ctx.logger.warn(`[workbuddy] ${id}: 启动可用性检测失败 — ${error instanceof Error ? error.message : String(error)}`)
       })

package/src/regions.js

@@ -76,6 +76,30 @@ export function regionList(raw) {
   return region === undefined ? [] : [region]
 }
 
+/**
+ * Site pages the panel may ask the user's browser to open.
+ *
+ * A fixed list on purpose: the panel sends a page *name*, never a URL, so a
+ * compromised or careless client cannot make the host open an arbitrary address
+ * (or a different host) through this route.
+ */
+export const SITE_PAGES = {
+  plans: '/profile/plans-usage'
+}
+
+/**
+ * Resolve one allowed site page for a deployment.
+ *
+ * @param {object} region - entry from `REGIONS`.
+ * @param {string} page - key from `SITE_PAGES`.
+ * @returns {string|undefined} absolute URL, or `undefined` when the pair is unknown.
+ */
+export function sitePageUrl(region, page) {
+  const path = SITE_PAGES[String(page ?? '').toLowerCase()]
+  if (region === undefined || path === undefined) return undefined
+  return `${region.endpoint}${path}`
+}
+
 /** Chat routes in preference order: the gateway first, the web host as fallback. */
 export function chatRoutes(region) {
   const primary = {

package/src/topology.js

@@ -0,0 +1,56 @@
+/**
+ * The one place that tells the harness its model list changed.
+ *
+ * The Web client's model directory caches the catalog and only re-reads it when
+ * it hears a forwarded host event — `llm/adapters-updated` among them. Its
+ * declared contract says exactly what this needs: a payload-free notification
+ * after which "consumers re-read `listProviders()`, `listModels()`, or
+ * `listConfigurableProviders()` for the new state". Nothing else re-lists on a
+ * timer, so a switch the user just flipped, an imported account list, or a probe
+ * that retired a model stays invisible: the picker keeps offering models the panel
+ * has already switched off.
+ *
+ * `llm/adapters-updated` is on the app's forwarded-event allowlist and the
+ * forwarding layer subscribes with a plain `ctx.on(event, …)`, so emitting it
+ * reaches host listeners and every connected client. `ctx.emit` is preferred
+ * because the event name is a declared contract; the `llm` service's own
+ * `emitAdaptersUpdated()` (same dispatch, absent from the published contract) is
+ * the fallback.
+ *
+ * Everything is duck-typed, and the outcome is logged: when neither channel
+ * exists the panel still works, and the log says so instead of leaving a silent
+ * "the picker didn't refresh" mystery.
+ */
+
+/**
+ * @param {object} ctx - host plugin context.
+ * @returns {boolean} whether a notification was delivered.
+ */
+export function notifyModelTopology(ctx) {
+  let route = 'none'
+  let delivered = false
+  try {
+    if (typeof ctx?.emit === 'function') {
+      ctx.emit('llm/adapters-updated')
+      route = 'ctx.emit'
+      delivered = true
+    } else {
+      const llm = ctx?.llm ?? ctx?.get?.('llm')
+      if (llm !== undefined && llm !== null && typeof llm.emitAdaptersUpdated === 'function') {
+        llm.emitAdaptersUpdated()
+        route = 'llm.emitAdaptersUpdated'
+        delivered = true
+      }
+    }
+  } catch (error) {
+    ctx?.logger?.warn?.(`[workbuddy] 通知模型拓扑变化失败（不影响本次操作）：${error instanceof Error ? error.message : String(error)}`)
+    return false
+  }
+
+  ctx?.logger?.info?.(
+    delivered
+      ? `[workbuddy] 已通知模型拓扑变化（${route}）`
+      : '[workbuddy] 无法通知模型拓扑变化：当前上下文既没有 ctx.emit 也没有 llm.emitAdaptersUpdated，模型选择器要等它自己重读才会更新'
+  )
+  return delivered
+}