@iasiv5/dsh-quota-watch 0.1.28 → 0.1.30

package/README.md

@@ -48,7 +48,7 @@ Web 与 Desktop profile 均已实测适配。按 DSH 插件管理器提示完成
 
 ## 配置
 
-本插件不再包含任何自动用卡配置。宿主首次启动时会一次性把历史版本保存的自动用卡开关**持久覆写为关闭**（即使设置文件不存在也会写入全关覆盖），因此回退到旧版本也不会让旧授权复活；覆写失败仅报告回退风险，新宿主本身没有任何自动消费路径。可配置项仅剩 profile patch 中的 `pollIntervalSec`（默认 60 秒，只读额度轮询节奏）。
+本插件不再包含任何自动用卡配置。宿主首次启动时会一次性把历史版本保存的自动用卡开关**持久覆写为关闭**（即使设置文件不存在也会写入全关覆盖），因此回退到旧版本也不会让旧授权复活；覆写失败仅报告回退风险，新宿主本身没有任何自动消费路径。可配置项仅剩 profile patch 中的 `pollIntervalSec`（默认 60 秒，只读额度轮询节奏；无任何插件路由请求持续 2 个轮询周期时宿主暂停计划轮询——空闲暂停，下一次请求立即恢复，先答缓存、后台补一轮新数据；暂停不算刷新失败、不标记数据过期）。
 
 ## 重置卡与手动用卡
 

package/lib/client.js

@@ -198,7 +198,7 @@ function parseInset(computedValue) {
 
 // src/client.mjs
 var name = "quota-watch-client";
-var inject = [];
+var inject = ["slots"];
 var CARD_SELECTOR = "[data-dsh-quota-watch-card]";
 var FLOAT_SELECTOR = "[data-dsh-quota-watch-float]";
 var FETCH_TIMEOUT_MS = 15e3;
@@ -655,7 +655,10 @@ function mountQuotaCard({
   retryBackoff = 2,
   // Q16: a confirmed SUCCESS notice lingers about five seconds before the
   // panel returns to the latest inventory. Injectable for tests.
-  outcomeNoticeMs = 5e3
+  outcomeNoticeMs = 5e3,
+  // Shell-takeover sentinel (2026-10-13 ds-bot): inject `ctx.slots` to arm it.
+  // Injectable so DOM tests and exotic hosts keep the legacy behavior.
+  slots = null
 } = {}) {
   if (!doc?.body || typeof fetchImpl !== "function") return () => {
   };
@@ -1459,12 +1462,22 @@ function mountQuotaCard({
   let currentFoot = null;
   let footTooNarrow = false;
   let noDataHidden = false;
+  let shellTakeover = false;
+  const syncShellTakeover = () => {
+    try {
+      shellTakeover = (slots?.entries?.("sidebar.workspaces") ?? []).some(
+        (entry) => (entry.options.priority ?? 0) < 0
+      );
+    } catch {
+      shellTakeover = false;
+    }
+  };
   const syncFootNarrowness = () => {
     footTooNarrow = currentFoot !== null && currentFoot.clientWidth > 0 && currentFoot.clientWidth < CARD_MIN_WIDTH;
   };
   const syncCardVisibility = () => {
     syncFootNarrowness();
-    const showCard = !surfaceFlags.cardHidden && !footTooNarrow && !noDataHidden;
+    const showCard = !surfaceFlags.cardHidden && !footTooNarrow && !noDataHidden && !shellTakeover;
     container.hidden = !showCard;
     card.style.display = showCard ? "" : "none";
   };
@@ -1566,7 +1579,21 @@ function mountQuotaCard({
       if (!disposed) place();
     });
   };
-  const observer = new win.MutationObserver(() => {
+  const SEAT_MARKERS = ["sidebarCol", "footArea"];
+  const seatValid = () => currentFoot !== null && currentFoot.isConnected && container.parentElement === currentFoot && currentFoot.firstElementChild === container;
+  const nodeTouchesSeatDiscovery = (node) => {
+    if (node?.nodeType !== 1) return false;
+    const cls = node.getAttribute("class") ?? "";
+    if (SEAT_MARKERS.some((marker) => cls.includes(marker))) return true;
+    return node.querySelector('[class*="sidebarCol"], [class*="footArea"]') != null;
+  };
+  const batchTouchesSeatDiscovery = (records) => records.some((record) => {
+    const touched = [...record.addedNodes ?? [], ...record.removedNodes ?? []];
+    return touched.some(nodeTouchesSeatDiscovery);
+  });
+  const observer = new win.MutationObserver((records) => {
+    const noLiveFoot = currentFoot === null || !currentFoot.isConnected;
+    if (!batchTouchesSeatDiscovery(records) && (seatValid() || noLiveFoot)) return;
     schedulePlace();
   });
   observer.observe(doc.body, { childList: true, subtree: true });
@@ -1574,6 +1601,18 @@ function mountQuotaCard({
     if (!disposed) renderAll();
   }) : null;
   langObserver?.observe(doc.documentElement, { attributeFilter: ["lang"] });
+  let offShellTakeover = null;
+  try {
+    if (slots && typeof slots.subscribe === "function") {
+      offShellTakeover = slots.subscribe("sidebar.workspaces", () => {
+        if (disposed) return;
+        syncShellTakeover();
+        syncCardVisibility();
+      });
+    }
+  } catch {
+  }
+  syncShellTakeover();
   syncFloatVisibility();
   place();
   const nextPollDelay = () => {
@@ -1721,6 +1760,7 @@ function mountQuotaCard({
     outcomeNoticeTimer = void 0;
     observer.disconnect();
     langObserver?.disconnect();
+    if (offShellTakeover) offShellTakeover();
     doc.removeEventListener("visibilitychange", onVisibilityChange);
     doc.removeEventListener("pointerdown", onDocPointerDown, true);
     doc.removeEventListener("scroll", onDocScroll, true);
@@ -1739,7 +1779,7 @@ function mountQuotaCard({
   };
 }
 function apply(ctx) {
-  ctx.effect(() => mountQuotaCard(), "dsh-quota-watch: sidebar");
+  ctx.effect(() => mountQuotaCard({ slots: ctx.slots ?? null }), "dsh-quota-watch: sidebar");
 }
 
 		return module.exports;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iasiv5/dsh-quota-watch",
-  "version": "0.1.28",
+  "version": "0.1.30",
   "description": "DSH Web sidebar monitor for GLM Coding Plan quotas and GitHub Copilot credits",
   "type": "module",
   "main": "./src/host.mjs",
@@ -49,7 +49,9 @@
     },
     "client": {
       "platform": "web",
-      "inject": []
+      "inject": [
+        "slots"
+      ]
     }
   },
   "scripts": {

package/src/client.mjs

@@ -5,7 +5,12 @@ import { MARGIN, clampPoint, loadFloatPosition, loadSurfaceFlags, saveFloatPosit
 import { DRAG_SLOP_MOUSE, DRAG_SLOP_TOUCH, parseInset, clampFrame, dragSlop, grabOffset } from './client/drag.mjs'
 
 export const name = 'quota-watch-client'
-export const inject = []
+// 2026-10-13: the shell-takeover sentinel reads the OFFICIAL slots ledger, so
+// the client now touches ctx.slots — cordis denies undeclared service access
+// ("cannot get property 'slots' without inject") and the whole activation
+// dies. Declare BEFORE using; the bundle + package.json dsh.client.inject
+// must stay in lockstep (locked by tests/package-shape.test.mjs).
+export const inject = ['slots']
 
 const CARD_SELECTOR = '[data-dsh-quota-watch-card]'
 const FLOAT_SELECTOR = '[data-dsh-quota-watch-float]'
@@ -556,6 +561,9 @@ export function mountQuotaCard({
   // Q16: a confirmed SUCCESS notice lingers about five seconds before the
   // panel returns to the latest inventory. Injectable for tests.
   outcomeNoticeMs = 5_000,
+  // Shell-takeover sentinel (2026-10-13 ds-bot): inject `ctx.slots` to arm it.
+  // Injectable so DOM tests and exotic hosts keep the legacy behavior.
+  slots = null,
 } = {}) {
   if (!doc?.body || typeof fetchImpl !== 'function') return () => {}
   if (doc.querySelector(CARD_SELECTOR) || doc.querySelector(FLOAT_SELECTOR)) return () => {}
@@ -1552,6 +1560,23 @@ export function mountQuotaCard({
   let currentFoot = null
   let footTooNarrow = false
   let noDataHidden = false
+  // The sidebar foot belongs to whoever registers sidebar.workspaces
+  // (ui-sidebar doc: "the foot is the sidebar.workspaces registrant's"). The
+  // official workspace tree registers at default priority 0 (ui-workspace); a
+  // NEGATIVE-priority occupant is a takeover shell (ds-bot takes the seat at
+  // -10 for its native bot sidebar) — while one is live the injected card
+  // yields the whole foot, same contract as the dsh-skins/dsh-m footer rows.
+  // The signal is the OFFICIAL slot ledger, not any ds-bot internal.
+  let shellTakeover = false
+  const syncShellTakeover = () => {
+    try {
+      shellTakeover = (slots?.entries?.('sidebar.workspaces') ?? []).some(
+        (entry) => (entry.options.priority ?? 0) < 0,
+      )
+    } catch {
+      shellTakeover = false
+    }
+  }
   const syncFootNarrowness = () => {
     footTooNarrow = currentFoot !== null && currentFoot.clientWidth > 0 && currentFoot.clientWidth < CARD_MIN_WIDTH
   }
@@ -1564,7 +1589,7 @@ export function mountQuotaCard({
     // The sidebar card shows ONLY in an expanded sidebar: the width guard hides
     // it in narrow rails / squeezed containers (works on every profile), and no
     // host collapse signal is consulted at all (they proved host-specific).
-    const showCard = !surfaceFlags.cardHidden && !footTooNarrow && !noDataHidden
+    const showCard = !surfaceFlags.cardHidden && !footTooNarrow && !noDataHidden && !shellTakeover
     container.hidden = !showCard
     card.style.display = showCard ? '' : 'none'
   }
@@ -1685,7 +1710,42 @@ export function mountQuotaCard({
     })
   }
 
-  const observer = new win.MutationObserver(() => {
+  // Seat-gate (2026-10-15 perf): the body observer sees EVERY childList batch
+  // in the whole app — during chat streaming that is a near-continuous stream —
+  // and each scheduled place() used to open with an O(document) discovery scan
+  // (`[class*="sidebarCol"]` cannot use a class index). The gate skips the
+  // schedule entirely when this batch cannot change the seating:
+  //   • Seat valid (card still first child of a connected foot): only a batch
+  //     carrying a sidebarCol/footArea node — added OR removed, the element
+  //     itself or anywhere inside it — can change WHICH foot is the doc-order
+  //     first one or create a competing one. No such node ⇒ place() would be a
+  //     measured no-op.
+  //   • No live foot (null, or stale after the sidebar was torn down): a seat
+  //     can only appear through a sidebar-introducing node, and class-only
+  //     flips were already invisible to this childList-only observer.
+  // A displacement inside a live foot fails seatValid() and re-arms place().
+  // Invariant for the ResizeObserver rebind in place(): any batch that could
+  // change which element IS the foot necessarily carries a marker node, so the
+  // gate never masks a real foot swap (jsdom has no ResizeObserver; this
+  // invariant is argued here, not exercised by tests). Marker-carrying batches
+  // that change nothing still pay one discovery scan — the false-positive cost.
+  const SEAT_MARKERS = ['sidebarCol', 'footArea']
+  const seatValid = () => currentFoot !== null && currentFoot.isConnected
+    && container.parentElement === currentFoot
+    && currentFoot.firstElementChild === container
+  const nodeTouchesSeatDiscovery = (node) => {
+    if (node?.nodeType !== 1) return false
+    const cls = node.getAttribute('class') ?? ''
+    if (SEAT_MARKERS.some((marker) => cls.includes(marker))) return true
+    return node.querySelector('[class*="sidebarCol"], [class*="footArea"]') != null
+  }
+  const batchTouchesSeatDiscovery = (records) => records.some((record) => {
+    const touched = [...(record.addedNodes ?? []), ...(record.removedNodes ?? [])]
+    return touched.some(nodeTouchesSeatDiscovery)
+  })
+  const observer = new win.MutationObserver((records) => {
+    const noLiveFoot = currentFoot === null || !currentFoot.isConnected
+    if (!batchTouchesSeatDiscovery(records) && (seatValid() || noLiveFoot)) return
     schedulePlace()
   })
   observer.observe(doc.body, { childList: true, subtree: true })
@@ -1696,6 +1756,21 @@ export function mountQuotaCard({
     ? new win.MutationObserver(() => { if (!disposed) renderAll() })
     : null
   langObserver?.observe(doc.documentElement, { attributeFilter: ['lang'] })
+  // Arm the shell-takeover sentinel: re-probe on every workspaces-ledger
+  // mutation (microtask-batched by the slot core) and once up front. Without
+  // an injected slots service (DOM tests, exotic hosts) this is a no-op and
+  // the card behaves exactly as before.
+  let offShellTakeover = null
+  try {
+    if (slots && typeof slots.subscribe === 'function') {
+      offShellTakeover = slots.subscribe('sidebar.workspaces', () => {
+        if (disposed) return
+        syncShellTakeover()
+        syncCardVisibility()
+      })
+    }
+  } catch {}
+  syncShellTakeover()
   // Cold until data lands: keep the shell hidden so a slow or failed first
   // probe never flashes an empty capsule (startPolling arms the retry chain).
   syncFloatVisibility()
@@ -1870,6 +1945,7 @@ export function mountQuotaCard({
     outcomeNoticeTimer = undefined
     observer.disconnect()
     langObserver?.disconnect()
+    if (offShellTakeover) offShellTakeover()
     doc.removeEventListener('visibilitychange', onVisibilityChange)
     doc.removeEventListener('pointerdown', onDocPointerDown, true)
     doc.removeEventListener('scroll', onDocScroll, true)
@@ -1890,5 +1966,5 @@ export function mountQuotaCard({
 }
 
 export function apply(ctx) {
-  ctx.effect(() => mountQuotaCard(), 'dsh-quota-watch: sidebar')
+  ctx.effect(() => mountQuotaCard({ slots: ctx.slots ?? null }), 'dsh-quota-watch: sidebar')
 }

package/src/host.mjs

@@ -17,6 +17,7 @@ import { retireLegacyAutoResetSettings } from './core/legacy-auto-settings.mjs'
 import { createManualOutcomeJournal } from './core/manual-outcome.mjs'
 import {
   DEFAULT_POLL_INTERVAL_SEC,
+  IDLE_AFTER_POLL_INTERVALS,
   MAX_POLL_INTERVAL_SEC,
   MIN_POLL_INTERVAL_SEC,
   PROBE_TIMEOUT_MS,
@@ -128,6 +129,15 @@ function requestAllowed(ctx, req, res) {
   return false
 }
 
+/** The access fence plus the idle-pause watcher stamp: any allowed request
+ * proves a browser is watching, so it feeds lastClientSeenAt. The call is
+ * defensive because route tests may pass minimal service doubles. */
+function requestAllowedAndSeen(ctx, req, res, service) {
+  if (!requestAllowed(ctx, req, res)) return false
+  service?.noteClientSeen?.()
+  return true
+}
+
 /**
  * Where the legacy automatic-use switches persisted. The start()-time one-shot
  * retirement keeps this file overwritten all-off, so a rollback to an old
@@ -171,6 +181,20 @@ export function createQuotaService(ctx, options = {}) {
   let coldAttempts = 0
   let legacyRetirement
 
+  // --- Idle polling pause -----------------------------------------------------
+  // The scheduled poll serves browsers only. Once idleAfterMs passes with no
+  // request to any plugin route (every allowed route hit stamps
+  // lastClientSeenAt), timer fires skip the round entirely; the next client
+  // request resumes with a stale-while-revalidate kick. start() stamps once so
+  // the boot round always runs (the first client GET then meets data, not
+  // 'loading'). An undefined stamp (service built but never started, as in
+  // tests) never counts as idle, so direct refresh() calls behave as before.
+  const idleAfterMs = options.idleAfterMs ?? pollIntervalSec * 1000 * IDLE_AFTER_POLL_INTERVALS
+  let lastClientSeenAt
+  let idleActive = false
+  const idleNow = () => lastClientSeenAt !== undefined && now() - lastClientSeenAt >= idleAfterMs
+  const snapshotStale = () => updatedAt === undefined || now() - updatedAt >= pollIntervalSec * 1000
+
   /** The usage slice a browser may see: old values survive only while the failure episode is short. */
   function usageView(usage) {
     if (usage === undefined) return undefined
@@ -444,6 +468,17 @@ export function createQuotaService(ctx, options = {}) {
   // --- Reset cards -----------------------------------------------------------
 
   function refresh(forceCards = false) {
+    // Idle pause: a timer-driven round with no recent client serves the cache
+    // and skips every upstream probe. A forced refresh is exempt, and any
+    // client-driven path has just stamped lastClientSeenAt, so it never lands
+    // here (one check covers both callers).
+    if (forceCards !== true && idleNow()) {
+      if (!idleActive) {
+        idleActive = true
+        logAuto('info', `quota-watch: idle — no client request for ${Math.round(idleAfterMs / 1000)}s, scheduled poll paused`)
+      }
+      return Promise.resolve(view())
+    }
     if (pollPromise !== undefined) {
       // A manual refresh must still re-list cards when it overlaps a scheduled
       // round whose ten-minute gate skipped the list.
@@ -796,6 +831,19 @@ export function createQuotaService(ctx, options = {}) {
     }
   }
 
+  /** Any allowed route hit: stamp the watcher clock, and — if the snapshot
+   * went stale during a pause — kick a background round. Stale-while-
+   * revalidate: the caller serves the cached view immediately and never waits
+   * for the kick. Returns the kicked round's promise for tests. */
+  function noteClientSeen() {
+    const resuming = idleActive
+    lastClientSeenAt = now()
+    idleActive = false
+    if (resuming) logAuto('info', 'quota-watch: client request — scheduled poll resumed')
+    if (disposed || pollPromise !== undefined || !snapshotStale()) return undefined
+    return refresh()
+  }
+
   function schedule(delayMs) {
     if (disposed) return
     timer = setTimeout(async () => {
@@ -825,6 +873,7 @@ export function createQuotaService(ctx, options = {}) {
   return {
     overview: view,
     refresh,
+    noteClientSeen,
     listResetCards,
     useResetCard,
     acknowledgeManualOutcome,
@@ -842,6 +891,9 @@ export function createQuotaService(ctx, options = {}) {
       } else {
         logAuto('warn', `quota-watch: could not overwrite the legacy auto-reset settings (${legacyRetirement.error}); a rollback to an old version could revive its switches, but this host has no automatic spending path`)
       }
+      // Boot counts as watched for the first idle window: the initial round
+      // always runs, so the first client GET meets data instead of 'loading'.
+      lastClientSeenAt = now()
       // Routes register synchronously in apply() before start(), so probing
       // immediately is safe; the legacy 2s delay only padded the cold start.
       schedule(0)
@@ -861,7 +913,7 @@ export function makeOverviewRoute(ctx, service) {
     kind: 'exact',
     path: ROUTES.overview,
     handler: (req, res) => {
-      if (!requestAllowed(ctx, req, res) || !methodAllowed(req, res, 'GET')) return
+      if (!requestAllowedAndSeen(ctx, req, res, service) || !methodAllowed(req, res, 'GET')) return
       responseJson(res, 200, service.overview())
     },
   }
@@ -872,7 +924,7 @@ export function makeRefreshRoute(ctx, service) {
     kind: 'exact',
     path: ROUTES.refresh,
     handler: async (req, res) => {
-      if (!requestAllowed(ctx, req, res) || !methodAllowed(req, res, 'POST')) return
+      if (!requestAllowedAndSeen(ctx, req, res, service) || !methodAllowed(req, res, 'POST')) return
       try {
         await service.refresh(true)
         responseJson(res, 200, service.overview())
@@ -889,7 +941,7 @@ export function makeResetCardsRoute(ctx, service) {
     kind: 'exact',
     path: ROUTES.resetCards,
     handler: async (req, res) => {
-      if (!requestAllowed(ctx, req, res) || !methodAllowed(req, res, 'GET')) return
+      if (!requestAllowedAndSeen(ctx, req, res, service) || !methodAllowed(req, res, 'GET')) return
       try {
         const result = await service.listResetCards()
         responseJson(res, result.ok ? 200 : 502, result)
@@ -912,7 +964,7 @@ export function makeResetUseRoute(ctx, service) {
     kind: 'exact',
     path: ROUTES.resetUse,
     handler: async (req, res) => {
-      if (!requestAllowed(ctx, req, res) || !methodAllowed(req, res, 'POST')) return
+      if (!requestAllowedAndSeen(ctx, req, res, service) || !methodAllowed(req, res, 'POST')) return
       const payload = await readJsonBody(req)
       if (payload === undefined) {
         responseJson(res, 400, { ok: false, error: 'invalid-body', message: '请求体不是合法 JSON' })
@@ -948,7 +1000,7 @@ export function makeResetAcknowledgeRoute(ctx, service) {
     kind: 'exact',
     path: ROUTES.resetAcknowledge,
     handler: async (req, res) => {
-      if (!requestAllowed(ctx, req, res) || !methodAllowed(req, res, 'POST')) return
+      if (!requestAllowedAndSeen(ctx, req, res, service) || !methodAllowed(req, res, 'POST')) return
       const payload = await readJsonBody(req)
       if (payload === undefined) {
         responseJson(res, 400, { ok: false, error: 'invalid-body', message: '请求体不是合法 JSON' })
@@ -975,7 +1027,7 @@ export function makeResetReceiptRoute(ctx, service) {
     kind: 'exact',
     path: ROUTES.resetReceipt,
     handler: async (req, res) => {
-      if (!requestAllowed(ctx, req, res) || !methodAllowed(req, res, 'POST')) return
+      if (!requestAllowedAndSeen(ctx, req, res, service) || !methodAllowed(req, res, 'POST')) return
       const payload = await readJsonBody(req)
       if (payload === undefined) {
         responseJson(res, 400, { ok: false, error: 'invalid-body', message: '请求体不是合法 JSON' })
@@ -1000,12 +1052,12 @@ const RETIRED_AUTO_RESET_PATH = '/api/dsh-quota-watch/auto-reset'
  * The path is a private host constant precisely so it never re-enters the
  * shared client contract in src/shared.mjs.
  */
-export function makeRetiredAutoResetRoute(ctx) {
+export function makeRetiredAutoResetRoute(ctx, service) {
   return {
     kind: 'exact',
     path: RETIRED_AUTO_RESET_PATH,
     handler: async (req, res) => {
-      if (!requestAllowed(ctx, req, res) || !methodAllowed(req, res, 'POST')) return
+      if (!requestAllowedAndSeen(ctx, req, res, service) || !methodAllowed(req, res, 'POST')) return
       responseJson(res, 410, { ok: false, error: 'retired', message: '自动用卡功能已退役；重置卡请在面板手动确认使用' })
     },
   }
@@ -1039,7 +1091,7 @@ export function apply(ctx, config = {}) {
     ctx.webServer.register(makeResetUseRoute(ctx, service)),
     ctx.webServer.register(makeResetAcknowledgeRoute(ctx, service)),
     ctx.webServer.register(makeResetReceiptRoute(ctx, service)),
-    ctx.webServer.register(makeRetiredAutoResetRoute(ctx)),
+    ctx.webServer.register(makeRetiredAutoResetRoute(ctx, service)),
   ]
   service.start()
   ctx.effect(() => () => {

package/src/shared.mjs

@@ -31,3 +31,7 @@ export const MIN_POLL_INTERVAL_SEC = 30
 export const MAX_POLL_INTERVAL_SEC = 3600
 export const PROBE_TIMEOUT_MS = 10_000
 export const CLIENT_POLL_INTERVAL_MS = 30_000
+// Idle polling pause: a scheduled round is skipped once this many poll
+// intervals have passed without any request to a plugin route (every allowed
+// route hit stamps the watcher clock).
+export const IDLE_AFTER_POLL_INTERVALS = 2