@sligqoer/dsh-usage-stats 0.1.2 → 0.2.1

package/lib/model-detection.js

@@ -0,0 +1,255 @@
+/** Bounded LM Fingerprint detection. No conversation text is sent or retained. */
+import { randomUUID } from 'node:crypto'
+import { createFingerprintEngine } from './lm-fingerprint-engine.js'
+
+const usageKeys = ['inputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens', 'reasoningTokens']
+const safeText = (value, max = 256) => typeof value === 'string' ? value.replace(/[\u0000-\u001f\u007f]/g, '').trim().slice(0, max) : ''
+const nonnegative = value => Number.isFinite(value) && value >= 0 ? value : 0
+export function safeUsage(value) {
+  return Object.fromEntries(usageKeys.map(key => [key, nonnegative(value?.[key])]))
+}
+export function modelSelection(value) {
+  const provider = safeText(value?.provider), model = safeText(value?.model)
+  if (!provider || !model) return null
+  const reasoningEffort = safeText(value.reasoningEffort, 64)
+  return { provider, model, ...(reasoningEffort ? { reasoningEffort } : {}) }
+}
+const stopReason = value => ['stop', 'max-tokens', 'tool-calls', 'error', 'aborted', 'unknown'].includes(value) ? value : 'unknown'
+
+export class ModelDetectionError extends Error {}
+export async function readDetectionModels(ctx, provider = '') {
+  const llm = ctx.get('llm')
+  if (typeof llm?.listProviders !== 'function' || typeof llm?.listModels !== 'function') throw new ModelDetectionError('当前宿主不支持读取模型列表，请更新 DSH。')
+  try {
+    const signal = AbortSignal.timeout(10_000)
+    const registered = await abortable(llm.listProviders(), signal)
+    if (!Array.isArray(registered)) throw new Error('invalid providers')
+    const seen = new Set()
+    const providers = registered.flatMap(item => {
+      // listProviders() returns ProviderInfo { id, name }; configurable-provider
+      // declarations use { provider, displayName } on older host integrations.
+      const id = safeText(item?.id || item?.provider)
+      if (!id || seen.has(id)) return []
+      seen.add(id)
+      return [{ provider: id, name: safeText(item.name || item.displayName || id, 512) }]
+    })
+    provider = safeText(provider)
+    if (!provider) return { providers, provider: '', models: [] }
+    if (!seen.has(provider)) throw new ModelDetectionError('请选择已配置的供应商。')
+    const listed = await abortable(llm.listModels(provider), signal)
+    if (!Array.isArray(listed)) throw new Error('invalid models')
+    const ids = new Set()
+    const models = listed.flatMap(item => {
+      const id = safeText(item?.id)
+      if (!id || item.provider !== provider || ids.has(id)) return []
+      ids.add(id)
+      return [{ id, name: safeText(item.name || id, 512) }]
+    })
+    return { providers, provider, models }
+  } catch (error) {
+    if (error instanceof ModelDetectionError) throw error
+    throw new ModelDetectionError('模型列表无法读取，请检查供应商配置后重试。')
+  }
+}
+export const PROBE_PLAN = Object.freeze({ samples: 3, maxTokens: 4096, timeoutMs: 60_000, budgetTokens: 12_000 })
+const sumTokens = usage => usage.inputTokens + usage.outputTokens + usage.cacheReadTokens + usage.cacheWriteTokens
+function modelKey(value) {
+  return safeText(value).toLowerCase().split('/').pop().replace(/[-_]20\d{6}$/, '').replace(/[-_]20\d{2}[-_]\d{2}[-_]\d{2}$/, '').replace(/(\d)-(\d)(?=$|[-.])/, '$1.$2')
+}
+function modelAliases(model) {
+  const first = modelKey(model.id), labels = String(model.name || '').split('/')
+  const prefix = first.match(/^\D+/)?.[0] || ''
+  return [...new Set([first, ...labels.map(v => modelKey(/^\d/.test(v) ? prefix + v : v))])]
+}
+export function normalizeFingerprintIdentity(raw) {
+  if (!raw || !Array.isArray(raw.candidates)) return null
+  const usedSamples = Number.isInteger(raw.usedSamples) && raw.usedSamples >= 0 && raw.usedSamples <= 3 ? raw.usedSamples : 0
+  const probability = v => usedSamples === 3 && raw.probabilityScope === 'reference-closed-set' && Number.isFinite(v) && v >= 0 && v <= 1 ? v : null
+  const candidates = raw.candidates.slice(0, 5).filter(c => safeText(c?.id) && Number.isFinite(c.score)).map(c => ({ id: safeText(c.id), name: safeText(c.name || c.id), family: safeText(c.family), score: c.score, probability: probability(c.probability) }))
+  return { method: safeText(raw.method), usedSamples, requestedSamples: raw.requestedSamples === 1 ? 1 : 3,
+    candidates, probability: probability(raw.probability), probabilityScope: 'reference-closed-set',
+    modelInBank: raw.modelInBank === true, sameCandidate: typeof raw.sameCandidate === 'boolean' ? raw.sameCandidate : null,
+    merged: raw.merged === true, unusualDistribution: raw.unusualDistribution === true }
+}
+export function summarizeModelDetection(job) {
+  if (job.status === 'running') return { verdict: 'running', reason: 'running' }
+  const identity = job.identity
+  const invalid = Object.fromEntries(['incomplete', 'unparseable', 'unavailable', 'timeout'].map(code => [code, (job.results || []).filter(r => r.outcome === code).length]))
+  const reason = job.status === 'cancelled' ? 'cancelled' : job.status === 'interrupted' ? 'interrupted' : job.status === 'budget-exhausted' ? 'budget' :
+    identity?.unusualDistribution ? 'distribution' : invalid.timeout ? 'timeout' : invalid.unavailable ? 'request-failed' : invalid.incomplete ? 'truncated' : invalid.unparseable ? 'format' : 'unfinished'
+  if (['failed', 'budget-exhausted'].includes(job.status) && identity?.usedSamples > 0 && identity.candidates.length && !identity.unusualDistribution) return { verdict: 'ranking-only', reason, invalid }
+  if (job.status === 'complete' && identity?.candidates?.length && !identity.unusualDistribution) {
+    if (identity.usedSamples < 3 || identity.probability === null) return { verdict: 'ranking-only', reason: 'partial-ranking' }
+    if (!identity.modelInBank) return { verdict: 'ranking-only', reason: 'model-not-enrolled' }
+    if (identity.probability < .75) return { verdict: 'ranking-only', reason: 'low-confidence' }
+    return { verdict: identity.sameCandidate ? 'candidate-consistent' : 'candidate-different', reason: identity.merged ? 'merged-class' : 'closed-set-ranking' }
+  }
+  return { verdict: 'inconclusive', reason, invalid }
+}
+function jobView(job) {
+  return { id: job.id, sessionId: job.sessionId, selection: job.selection, testSelection: job.testSelection,
+    status: job.status, phase: job.phase, startedAt: job.startedAt, finishedAt: job.finishedAt, progress: job.results.length,
+    engine: job.engineInfo, plan: job.plan, usage: safeUsage(job.usage), usageReported: job.results.some(r => r.usageReported),
+    usageIncomplete: job.status === 'running' || job.results.some(r => !r.usageReported), usageSaved: job.usageSaved === true,
+    results: job.results.map(({ time, selection, phase, outcome, stop, usage, usageReported, valid, expected, ttftMs, decodeMs }) => ({ time, selection, phase, outcome, stop, usage, usageReported, valid, expected, ttftMs, decodeMs })),
+    identity: job.identity || null, conclusion: summarizeModelDetection(job), message: job.message || '',
+    channel: { ttftMs: job.results.some(r => r.ttftMs !== null) ? job.results.filter(r => r.ttftMs !== null).reduce((n, r) => n + r.ttftMs, 0) / job.results.filter(r => r.ttftMs !== null).length : null,
+      tps: job.results.some(r => r.decodeMs > 0 && r.usage.outputTokens > 0) ? job.results.filter(r => r.decodeMs > 0 && r.usage.outputTokens > 0).reduce((n, r) => n + r.usage.outputTokens, 0) * 1000 / job.results.filter(r => r.decodeMs > 0 && r.usage.outputTokens > 0).reduce((n, r) => n + r.decodeMs, 0) : null } }
+}
+function abortable(promise, signal) {
+  return new Promise((resolve, reject) => {
+    const abort = () => reject(new Error('aborted'))
+    if (signal.aborted) { abort(); return }
+    signal.addEventListener('abort', abort, { once: true })
+    Promise.resolve(promise).then(resolve, reject).finally(() => signal.removeEventListener('abort', abort))
+  })
+}
+export function createModelDetectionRunner(ctx, options = {}) {
+  const engine = options.engine || createFingerprintEngine({ path: options.enginePath, fetch: options.fetch })
+  const jobs = new Map(), quotes = new Map()
+  let disposed = false
+  async function checkpoint(job, patch = {}) {
+    if (!options.onUpdate) return
+    try { await options.onUpdate({ ...jobView({ ...job, ...patch }), usageSaved: true }); job.usageSaved = true }
+    catch { job.usageSaved = false; job.halt = true; job.message = '检测用量保存失败，已停止后续请求；请检查本地存储。' }
+  }
+  function discardQuote(id) { const quote = quotes.get(id); if (quote) { quote.engine.dispose(); clearTimeout(quote.timer); quotes.delete(id) } }
+  async function request(job, challenge) {
+    const timeout = new AbortController(), timer = setTimeout(() => timeout.abort(), options.timeoutMs || PROBE_PLAN.timeoutMs)
+    const signal = AbortSignal.any([job.controller.signal, timeout.signal])
+    const item = { time: 0, selection: job.testSelection, phase: 'fingerprint', outcome: 'unavailable', stop: 'unknown',
+      usage: safeUsage(null), usageReported: false, valid: 0, expected: challenge.expected_count, ttftMs: null, decodeMs: null }
+    let iterator, text = '', firstToken = 0, output = null
+    const started = Date.now()
+    try {
+      const llm = ctx.get('llm')
+      iterator = llm.stream({ ...job.testSelection, maxTokens: job.plan.maxTokens,
+        messages: [{ role: 'user', content: [{ type: 'text', text: challenge.prompt }] }], signal })[Symbol.asyncIterator]()
+      for (;;) {
+        const next = await abortable(iterator.next(), signal)
+        if (signal.aborted) throw new Error('aborted')
+        if (next.done) break
+        const chunk = next.value
+        if (chunk?.type === 'text-delta') {
+          if (chunk.text && !firstToken) firstToken = Date.now()
+          text += String(chunk.text || '')
+          if (text.length > 32_768) { item.stop = 'max-tokens'; break }
+        }
+        if (chunk?.type === 'usage') {
+          for (const key of usageKeys) if (Number.isFinite(chunk.usage?.[key]) && chunk.usage[key] >= 0) { item.usage[key] = chunk.usage[key]; item.usageReported = true }
+        }
+        if (chunk?.type === 'finish') { item.stop = stopReason(chunk.reason?.kind); break }
+      }
+      if (['stop', 'max-tokens'].includes(item.stop)) {
+        const numbers = await job.engine.call('parse', text, signal)
+        item.valid = Math.min(numbers.length, challenge.expected_count)
+        if (item.stop === 'max-tokens' && numbers.length < challenge.expected_count) item.outcome = 'incomplete'
+        else if (numbers.length < Math.max(80, Math.ceil(challenge.expected_count * .55))) item.outcome = 'unparseable'
+        else { item.outcome = 'scored'; output = { text: numbers.slice(0, challenge.expected_count).join(','), expected_count: challenge.expected_count } }
+        if (firstToken) { item.ttftMs = firstToken - started; item.decodeMs = Date.now() - firstToken }
+      }
+    } catch { item.outcome = job.controller.signal.aborted ? 'cancelled' : timeout.signal.aborted ? 'timeout' : 'unavailable'; item.stop = signal.aborted ? 'aborted' : 'error' }
+    finally {
+      clearTimeout(timer); timeout.abort()
+      try { Promise.resolve(iterator?.return?.()).catch(() => {}) } catch {}
+      text = ''
+      item.time = Date.now(); job.results.push(item)
+      for (const key of usageKeys) job.usage[key] += item.usage[key]
+      if (item.outcome !== 'scored') job.halt = true
+      if (sumTokens(job.usage) >= job.plan.budgetTokens && job.results.length < job.plan.requests) { job.halt = true; job.budgetExhausted = true }
+      await checkpoint(job)
+    }
+    return output
+  }
+  async function run(job, quote) {
+    const outputs = []
+    try {
+      await checkpoint(job)
+      for (const challenge of quote.challenges) {
+        if (disposed || job.controller.signal.aborted || job.halt) break
+        job.phase = 'sampling'
+        const output = await request(job, challenge)
+        if (output) outputs.push(output)
+      }
+      // Score the valid samples even when a later call fails. The official
+      // scorer withholds calibrated probabilities for fewer than 3 samples.
+      if (!disposed && !job.controller.signal.aborted && job.usageSaved !== false && outputs.length > 0) {
+        job.phase = 'scoring'
+        const analysis = await job.engine.call('score', outputs, job.controller.signal)
+        const requested = modelKey(job.selection.model)
+        const claimed = job.engine.models.find(m => modelAliases(m).includes(requested))
+        job.identity = normalizeFingerprintIdentity({ method: analysis.method, usedSamples: analysis.used_outputs, requestedSamples: job.plan.samples,
+          candidates: (analysis.results || []).map(c => ({ id: c.model, name: c.display_name, family: c.family, score: c.score, probability: c.probability })),
+          probability: analysis.probability, probabilityScope: analysis.probability_scope,
+          modelInBank: !!claimed, sameCandidate: claimed ? claimed.id === analysis.prediction : null,
+          merged: !!claimed && modelAliases(claimed).length > 1,
+          unusualDistribution: outputs.some(o => Math.min(...o.text.split(',').map(Number)) >= 200) })
+      }
+    } catch { job.halt = true; job.message = '指纹检测未完成，请检查通道或引擎状态。' }
+    finally {
+      outputs.length = 0; quote.challenges.length = 0; job.engine.dispose()
+      const status = disposed || job.controller.signal.aborted ? 'cancelled' : job.budgetExhausted ? 'budget-exhausted' : job.halt ? 'failed' : 'complete'
+      if (status === 'cancelled' || job.usageSaved === false) job.identity = null
+      job.finishedAt = Date.now(); job.phase = 'finished'
+      await checkpoint(job, { status })
+      job.status = job.usageSaved === false && options.onUpdate ? 'failed' : status
+      if (job.usageSaved === false) job.identity = null
+    }
+  }
+  return {
+    catalog: () => engine.catalog(), updateEngine: () => engine.update(true),
+    async plan(body) {
+      if (disposed) throw new ModelDetectionError('检测服务已停止。')
+      const selection = modelSelection(body?.selection), sessionId = safeText(body?.sessionId)
+      if (!selection) throw new ModelDetectionError('请选择供应商与检测模型。')
+      const samples = body.sampleCount ?? 3
+      if (![1, 3].includes(samples)) throw new ModelDetectionError('请选择 1 次初筛或 3 次标准检测。')
+      const budgetTokens = body.budgetTokens ?? PROBE_PLAN.budgetTokens
+      if (!Number.isInteger(budgetTokens) || budgetTokens < 1024 || budgetTokens > 50_000) throw new ModelDetectionError('Token 预算应为 1,024–50,000 的整数。')
+      const maxTokens = body.maxTokens ?? PROBE_PLAN.maxTokens
+      if (!Number.isInteger(maxTokens) || maxTokens < 1024 || maxTokens > 16_384) throw new ModelDetectionError('单次输出上限应为 1,024–16,384 的整数。')
+      const llm = ctx.get('llm')
+      if (typeof llm?.stream !== 'function' || typeof llm?.resolveModelInfo !== 'function') throw new ModelDetectionError('当前宿主不支持模型参数校验，请更新 DSH。')
+      let info
+      try { info = await llm.resolveModelInfo(selection.provider, selection.model, AbortSignal.timeout(10_000)) }
+      catch { throw new ModelDetectionError('模型信息无法读取，请检查供应商配置后重试。') }
+      const efforts = info.reasoning?.efforts?.map(e => e.id)
+      const effort = efforts ? ['off', 'none', 'minimal', 'low'].find(e => efforts.includes(e)) || selection.reasoningEffort || info.reasoning.defaultEffort : undefined
+      if (effort && !efforts.includes(effort)) throw new ModelDetectionError('模型推理参数不受支持。')
+      const testSelection = { provider: selection.provider, model: selection.model, ...(effort ? { reasoningEffort: effort } : {}) }
+      let lease
+      try {
+        lease = await engine.acquire()
+        const challenges = await lease.call('challenges', samples)
+        const plan = { requests: samples, samples, maxTokens, numbers: challenges.map(c => c.expected_count), maxOutputTokens: samples * maxTokens,
+          estimatedInputTokens: Math.ceil(challenges.reduce((n, c) => n + c.prompt.length, 0) / 2), budgetTokens, timeoutMs: options.timeoutMs || PROBE_PLAN.timeoutMs }
+        for (const [id, quote] of quotes) if (Date.now() - quote.createdAt > 5 * 60_000) discardQuote(id)
+        // Only the newest budget can start detection; keep one idle worker.
+        for (const id of quotes.keys()) discardQuote(id)
+        const id = randomUUID(), timer = setTimeout(() => discardQuote(id), 5 * 60_000); timer.unref?.()
+        const engineInfo = { name: 'lmfpd', version: lease.manifest.version, revision: lease.manifest.revision, builtAt: lease.manifest.builtAt, modelCount: lease.models.length }
+        quotes.set(id, { id, timer, sessionId, selection, testSelection, plan, engineInfo, engine: lease, challenges, createdAt: Date.now() })
+        return { id, selection, testSelection, plan, engine: engineInfo }
+      } catch { lease?.dispose(); throw new ModelDetectionError('指纹引擎不可用，请检查更新状态。') }
+    },
+    start(body) {
+      if (disposed) throw new ModelDetectionError('检测服务已停止。')
+      if (body?.ackCost !== true) throw new ModelDetectionError('请确认检测会消耗 Token 后再开始。')
+      const quote = quotes.get(body.planId)
+      if (!quote || Date.now() - quote.createdAt > 5 * 60_000) throw new ModelDetectionError('检测预算已过期，请刷新预算后开始。')
+      if (safeText(body.sessionId) !== quote.sessionId) throw new ModelDetectionError('当前会话已变化，请重新生成预算。')
+      if ([...jobs.values()].some(j => j.status === 'running')) throw new ModelDetectionError('已有检测正在运行，请先等待或取消。')
+      quotes.delete(quote.id); clearTimeout(quote.timer)
+      while (jobs.size >= 10) jobs.delete(jobs.keys().next().value)
+      const job = { id: randomUUID(), sessionId: quote.sessionId, selection: quote.selection, testSelection: quote.testSelection,
+        plan: quote.plan, engineInfo: quote.engineInfo, engine: quote.engine, status: 'running', phase: 'queued', startedAt: Date.now(), finishedAt: 0,
+        controller: new AbortController(), results: [], usage: safeUsage(null), identity: null }
+      jobs.set(job.id, job)
+      queueMicrotask(() => { void run(job, quote) })
+      return jobView(job)
+    },
+    status(id, sessionId) { const job = id ? jobs.get(id) : [...jobs.values()].reverse().find(j => !sessionId || j.sessionId === sessionId); if (id && !job) throw new ModelDetectionError('检测记录已过期。'); return job ? jobView(job) : null },
+    cancel(id) { const job = jobs.get(id); if (!job) throw new ModelDetectionError('检测记录已过期。'); if (job.status === 'running') job.controller.abort(); return jobView(job) },
+    dispose() { disposed = true; for (const job of jobs.values()) job.controller.abort(); for (const id of quotes.keys()) discardQuote(id); engine.dispose() }
+  }
+}

package/lib/provider-quotas.js

@@ -27,6 +27,18 @@ const PROVIDERS = {
 
 const TTL_MS = 60_000
 
+/** Only bounded reason codes and HTTP status may cross the host boundary. */
+export function quotaErrorCode(error, status) {
+  if (status === 401) return 'authentication'
+  if (status === 403) return 'forbidden'
+  if (status === 429) return 'rate-limit'
+  if (status >= 500) return 'service'
+  if (status >= 400) return 'http'
+  if (error?.name === 'TimeoutError' || error?.name === 'AbortError') return 'timeout'
+  if (error instanceof SyntaxError) return 'parse'
+  return 'network'
+}
+
 function nonnegative(value) {
   if (typeof value !== 'number' && typeof value !== 'string') return null
   if (typeof value === 'string' && !/^(?:\d+\.?\d*|\.\d+)(?:[eE][+-]?\d+)?$/.test(value.trim())) return null
@@ -396,14 +408,14 @@ export async function providerKey(credentials, profile, provider, defaultEnv) {
 /** Resolve official catalog entries and make bounded, single-flight reads. */
 export function createProviderQuotaReader(ctx, request = fetch) {
   const cache = new Map()
-  return async function readProviderQuotas(fresh = false, excluded = []) {
+  return async function readProviderQuotas(fresh = false, excluded = [], onlyProvider = null) {
     const llm = ctx.get('llm')
     const settings = ctx.get('settings')
     const credentials = ctx.get('credentials')
     if (!llm || typeof llm.listConfigurableProviders !== 'function' || typeof settings?.describe !== 'function') return { ok: true, quotas: [] }
     const directory = llm.listConfigurableProviders()
     const descriptors = settings.describe({ redactSecrets: true })
-    const entries = Array.isArray(directory) ? directory.filter((entry) => entry && typeof entry.provider === 'string' && !excluded.includes(entry.provider)) : []
+    const entries = Array.isArray(directory) ? directory.filter((entry) => entry && typeof entry.provider === 'string' && !excluded.includes(entry.provider) && (!onlyProvider || entry.provider === onlyProvider)) : []
     const quotas = await Promise.all(entries.map(async (entry) => {
       const descriptor = Array.isArray(descriptors) ? descriptors.find((row) => row.ns === entry.settingsNs) : null
       if (!descriptor) return null
@@ -421,6 +433,7 @@ export function createProviderQuotaReader(ctx, request = fetch) {
         if (cached?.identity === identity && cached.promise) return cached.promise
         const promise = (async () => {
           let metrics = []
+          let refreshError = { code: 'parse' }
           try {
             const headers = spec.auth === 'alibaba'
               ? signAlibabaRequest({ url: spec.url, action: 'GetSubscriptionStats', version: '2026-02-10', id: key, secret: auth.secret, token: auth.token, date: new Date().toISOString().replace(/\.\d{3}Z$/, 'Z'), nonce: randomUUID() })
@@ -432,7 +445,12 @@ export function createProviderQuotaReader(ctx, request = fetch) {
               signal: AbortSignal.timeout(8000),
             })
             if (response.ok) metrics = spec.parse(await response.json())
-          } catch {
+            else {
+              refreshError = { code: quotaErrorCode(null, response.status), ...(Number.isInteger(response.status) ? { httpStatus: response.status } : {}) }
+              await response.body?.cancel().catch(() => {})
+            }
+          } catch (error) {
+            refreshError = { code: quotaErrorCode(error) }
             // An optional account-credit read can still succeed for OpenRouter.
           }
           if (entry.provider === 'openrouter') {
@@ -452,7 +470,9 @@ export function createProviderQuotaReader(ctx, request = fetch) {
             }
           }
           const name = entry.displayName && entry.displayName !== entry.provider ? entry.displayName : spec.name
-          return metrics.length ? { provider: entry.provider, name, metrics, syncedAt: Date.now() } : null
+          return metrics.length
+            ? { provider: entry.provider, name, metrics, syncedAt: Date.now() }
+            : { provider: entry.provider, name, metrics: [], status: 'unavailable', refreshError, lastAttemptAt: Date.now() }
         })()
         cache.set(entry.provider, { identity, at: 0, result: null, promise })
         try {
@@ -468,7 +488,8 @@ export function createProviderQuotaReader(ctx, request = fetch) {
         return null
       }
     }))
-    return { ok: true, quotas: quotas.filter(Boolean) }
+    const rows = quotas.filter(Boolean)
+    return { ok: true, quotas: rows, partial: rows.some((row) => !!row.refreshError) }
   }
 }
 

package/lib/quota-controls.js

@@ -1,8 +1,8 @@
 /** Persistent quota controls, bounded custom queries and host-side scheduling. */
-import { readFile, mkdir, writeFile, rename } from 'node:fs/promises'
+import { readFile, mkdir, writeFile, rename, stat as fileStat } from 'node:fs/promises'
 import { dirname } from 'node:path'
 import { randomUUID } from 'node:crypto'
-import { quotaTemplate, hasBuiltinQuotaQuery, officialQuotaSpec, customQuotaAuth } from './provider-quotas.js'
+import { quotaTemplate, hasBuiltinQuotaQuery, officialQuotaSpec, customQuotaAuth, quotaErrorCode } from './provider-quotas.js'
 
 export const QUOTA_INTERVALS = [10, 60, 300, 1440]
 const MAX_BYTES = 1_048_576
@@ -10,15 +10,17 @@ const plain = (value) => value !== null && typeof value === 'object' && !Array.i
 const clone = (value) => structuredClone(value)
 /** Only deliberate, credential-free validation messages may reach the renderer. */
 export class QuotaControlError extends Error {
-  constructor(message) {
+  constructor(message, code = 'invalid', httpStatus) {
     super(message)
     this.name = 'QuotaControlError'
+    this.code = code
+    if (Number.isInteger(httpStatus)) this.httpStatus = httpStatus
   }
 }
-const fail = (message) => { throw new QuotaControlError(message) }
+const fail = (message, code, status) => { throw new QuotaControlError(message, code, status) }
 
 function defaults() {
-  return { autoQuota: false, intervalMinutes: 60, showModelDetails: true, advancedModelSelect: false, customQueries: [] }
+  return { autoQuota: false, intervalMinutes: 10, showModelDetection: true, advancedModelSelect: true, modelReasoning: true, customQueries: [] }
 }
 
 /**
@@ -189,7 +191,7 @@ export async function executeQuotaQuery(ctx, provider, rawTemplate, request = fe
   if (template.auth === 'provider') {
     if (!allowedOrigins(entry.profile, spec).has(target.origin)) fail('认证查询地址需与所选供应商的地址或官方配额地址同源。')
     const auth = await customQuotaAuth(ctx, entry.profile, provider, url, template.method, template.body == null ? '' : JSON.stringify(template.body)).catch(() => null)
-    if (!auth) fail('未找到可用的供应商凭据，请先在模型设置中配置或登录。')
+    if (!auth) fail('未找到可用的供应商凭据，请先在模型设置中配置或登录。', 'authentication')
     if (url.includes('{{teamId}}')) url = auth.url || fail('未配置 xAI 管理凭据和团队 ID。')
     headers = { ...headers, ...auth.headers }
   }
@@ -197,21 +199,21 @@ export async function executeQuotaQuery(ctx, provider, rawTemplate, request = fe
   let response
   try {
     response = await request(url, { method: template.method, headers, ...(template.body == null ? {} : { body: JSON.stringify(template.body) }), redirect: 'error', signal: AbortSignal.timeout(8000) })
-  } catch {
-    fail('查询失败，请检查地址和网络（8 秒超时，不跟随重定向）。')
+  } catch (error) {
+    fail('查询失败，请检查地址和网络（8 秒超时，不跟随重定向）。', quotaErrorCode(error))
   }
   if (!response.ok) {
     await response.body?.cancel().catch(() => {})
-    fail('查询返回 HTTP ' + response.status + '，请检查地址和供应商凭据。')
+    fail('查询返回 HTTP ' + response.status + '，请检查地址和供应商凭据。', quotaErrorCode(null, response.status), response.status)
   }
   const body = await readBoundedJson(response)
   const metrics = template.response.format === 'official' ? spec.parse(body) : mappedMetrics(body, template.response)
-  if (!metrics.length) fail('响应中未找到有效配额，请检查 response 的字段路径。')
+  if (!metrics.length) fail('响应中未找到有效配额，请检查 response 的字段路径。', 'parse')
   return { provider, name: entry.name, metrics, syncedAt: Date.now(), custom: true }
 }
 
 /** Source reads are explicit; cached page reads never spend account credit. */
-export function createQuotaControls(ctx, { path, sources, request = fetch, now = Date.now }) {
+export function createQuotaControls(ctx, { path, legacyPath, sources, request = fetch, now = Date.now }) {
   let settings = defaults()
   let snapshots = {}
   let lastRefreshAt = 0
@@ -221,6 +223,8 @@ export function createQuotaControls(ctx, { path, sources, request = fetch, now =
   let allFlight = null
   const flights = new Map()
   const tests = new Map()
+  const providerTickets = new Map()
+  let readTicket = 0
   let queryRevision = 0
   let disposed = false
 
@@ -242,12 +246,24 @@ export function createQuotaControls(ctx, { path, sources, request = fetch, now =
 
   const load = () => loaded ||= (async () => {
     try {
-      const stat = JSON.parse(await readFile(path, 'utf8'))
+      let text
+      try { text = await readFile(path, 'utf8') }
+      catch (error) {
+        if (error.code !== 'ENOENT' || !legacyPath) throw error
+        const candidates = await Promise.all((Array.isArray(legacyPath) ? legacyPath : [legacyPath]).map(async file => {
+          try { return { file, modified: (await fileStat(file)).mtimeMs } } catch { return null }
+        }))
+        const latest = candidates.filter(Boolean).sort((a, b) => b.modified - a.modified)[0]
+        if (!latest) throw error
+        text = await readFile(latest.file, 'utf8')
+      }
+      const stat = JSON.parse(text)
       const saved = stat.settings
       if (plain(saved)) {
         settings.autoQuota = saved.autoQuota === true
-        settings.showModelDetails = saved.showModelDetails !== false
-        settings.advancedModelSelect = saved.advancedModelSelect === true
+        settings.showModelDetection = saved.showModelDetection !== false
+        settings.advancedModelSelect = saved.advancedModelSelect !== false
+        settings.modelReasoning = saved.modelReasoning !== false
         if (QUOTA_INTERVALS.includes(saved.intervalMinutes)) settings.intervalMinutes = saved.intervalMinutes
         if (Array.isArray(saved.customQueries)) {
           settings.customQueries = saved.customQueries.slice(0, 50).flatMap((query) => {
@@ -258,7 +274,7 @@ export function createQuotaControls(ctx, { path, sources, request = fetch, now =
       }
       if (plain(stat.snapshots)) snapshots = Object.fromEntries(Object.keys(sources).filter((key) => plain(stat.snapshots[key])).map((key) => [key, stat.snapshots[key]]))
       if (Number.isFinite(stat.lastRefreshAt) && stat.lastRefreshAt > 0) lastRefreshAt = Math.min(stat.lastRefreshAt, now())
-    } catch {} // Missing/corrupt settings use conservative defaults.
+    } catch {} // Missing/corrupt settings use defaults.
   })()
 
   const persist = () => {
@@ -295,8 +311,9 @@ export function createQuotaControls(ctx, { path, sources, request = fetch, now =
     if (key !== 'providers') return clone(body)
     const entries = directory(ctx)
     const quotas = (Array.isArray(body.quotas) ? body.quotas : []).filter((quota) => {
-      if (!officialQuotaSpec(quota.provider)?.configuredOnly) return true
       const entry = entries.find((item) => item.provider === quota.provider)
+      if (!entry) return false
+      if (!officialQuotaSpec(quota.provider)?.configuredOnly) return true
       return !!entry?.profile && (settings.customQueries.some((query) => query.provider === quota.provider) || hasBuiltinQuotaQuery(entry.provider, entry.profile))
     })
     const shown = new Set(quotas.map((quota) => quota.provider))
@@ -308,38 +325,70 @@ export function createQuotaControls(ctx, { path, sources, request = fetch, now =
       const balance = mapping && mapping.format !== 'official' ? mapping.metrics.every((metric) => metric.kind === 'amount') : spec?.kind === 'balance'
       quotas.push({ provider: entry.provider, name: entry.name, kind: balance ? 'balance' : 'subscription', status: queried.has(entry.provider) ? 'unavailable' : 'unqueried', metrics: [] })
     }
-    return clone({ ...body, quotas })
+    return clone({ ...body, quotas, partial: quotas.some((row) => !!row.refreshError) })
   }
 
-  const read = async (key, fresh = false) => {
+  const read = async (key, fresh = false, provider = null) => {
     await load()
     if (!Object.hasOwn(sources, key)) fail('未知配额来源。')
     const source = sources[key]
     const adapter = plain(source)
+    if (provider && key !== 'providers') fail('所选供应商已不存在，请重新选择。')
+    // A card can outlive the provider's settings. Return the current display
+    // snapshot so the client removes it instead of retaining its old balance.
+    if (provider && !directory(ctx).some((entry) => entry.provider === provider)) {
+      return displaySnapshot(key, snapshots[key] || { ok: true, quotas: [], cached: true })
+    }
     if (!sourceEnabled(key)) return { ok: true, available: false, status: 'not-configured', cached: true }
     if (!fresh) {
       const body = snapshots[key] || (key === 'providers' ? { ok: true, quotas: [], cached: true } : { ok: true, available: adapter, status: adapter ? 'unqueried' : 'unavailable', cached: true })
       return displaySnapshot(key, adapter ? { ...body, available: true } : body)
     }
-    if (flights.has(key)) return flights.get(key)
+    const flightKey = key + ':' + (provider || '*')
+    if (flights.has(flightKey)) return flights.get(flightKey)
     const revision = queryRevision
     const queries = clone(settings.customQueries)
-    const queriedProviders = key === 'providers' ? configuredQuotaEntries().map((entry) => entry.provider) : []
+    const targeted = key === 'providers' ? directory(ctx).filter((entry) => !adapterFor(entry.provider) && (!provider || entry.provider === provider)).map((entry) => entry.provider) : []
+    const ticket = ++readTicket
+    for (const id of targeted) providerTickets.set(id, ticket)
     const flight = (async () => {
-      let body = await (adapter ? source.read() : source(queries.map((query) => query.provider)))
+      let body = await (adapter ? source.read() : source(queries.map((query) => query.provider), provider))
       if (key === 'providers') {
-        const custom = await Promise.all(queries.filter((query) => !adapterFor(query.provider)).map(async (query) => {
-          try { return await executeQuotaQuery(ctx, query.provider, query.template, request) } catch { return null }
+        const custom = await Promise.all(queries.filter((query) => !adapterFor(query.provider) && (!provider || query.provider === provider)).map(async (query) => {
+          try { return await executeQuotaQuery(ctx, query.provider, query.template, request) } catch (error) {
+            return { provider: query.provider, name: directory(ctx).find((entry) => entry.provider === query.provider)?.name || query.provider, metrics: [], status: 'unavailable', refreshError: { code: error instanceof QuotaControlError ? error.code : 'network', ...(error instanceof QuotaControlError && error.httpStatus ? { httpStatus: error.httpStatus } : {}) }, lastAttemptAt: now(), custom: true }
+          }
         }))
-        body = { ok: true, quotas: (body?.quotas || []).concat(custom.filter(Boolean)), queriedProviders }
+        const incoming = (body?.quotas || []).concat(custom)
+        const previous = snapshots.providers || {}
+        const rows = new Map((previous.quotas || []).map((row) => [row.provider, row]))
+        const attempted = new Set(targeted)
+        for (const row of incoming) {
+          if (provider && row.provider !== provider) continue
+          // A newer single-provider read wins over an older full refresh.
+          if (targeted.includes(row.provider) && providerTickets.get(row.provider) !== ticket) continue
+          attempted.delete(row.provider)
+          const prior = rows.get(row.provider)
+          rows.set(row.provider, row.refreshError && prior?.metrics?.length
+            ? { ...prior, stale: true, refreshError: row.refreshError, lastAttemptAt: row.lastAttemptAt || now() }
+            : row)
+        }
+        for (const id of attempted) {
+          if (providerTickets.get(id) !== ticket) continue
+          const prior = rows.get(id)
+          if (prior?.metrics?.length) rows.set(id, { ...prior, stale: true, refreshError: { code: 'authentication' }, lastAttemptAt: now() })
+        }
+        body = { ok: true, quotas: [...rows.values()], queriedProviders: [...new Set([...(previous.queriedProviders || []), ...targeted])] }
+      } else if (['unavailable', 'error'].includes(body?.status) && snapshots[key]?.status === 'signed-in') {
+        body = { ...snapshots[key], stale: true, refreshError: { code: 'service' }, lastAttemptAt: now() }
       }
       if (key !== 'providers' || revision === queryRevision) {
         snapshots[key] = body
         await persist()
       }
       return displaySnapshot(key, snapshots[key] || body)
-    })().finally(() => { if (flights.get(key) === flight) flights.delete(key) })
-    flights.set(key, flight)
+    })().finally(() => { if (flights.get(flightKey) === flight) flights.delete(flightKey) })
+    flights.set(flightKey, flight)
     return flight
   }
 
@@ -393,14 +442,18 @@ export function createQuotaControls(ctx, { path, sources, request = fetch, now =
           if (!QUOTA_INTERVALS.includes(patch.intervalMinutes)) fail('仅支持 10 分钟、1 小时、5 小时或每天。')
           next.intervalMinutes = patch.intervalMinutes
         }
-        if (patch.showModelDetails != null) {
-          if (typeof patch.showModelDetails !== 'boolean') fail('模型明细开关值无效。')
-          next.showModelDetails = patch.showModelDetails
+        if (patch.showModelDetection != null) {
+          if (typeof patch.showModelDetection !== 'boolean') fail('模型检测开关值无效。')
+          next.showModelDetection = patch.showModelDetection
         }
         if (patch.advancedModelSelect != null) {
           if (typeof patch.advancedModelSelect !== 'boolean') fail('高级模型选择器开关值无效。')
           next.advancedModelSelect = patch.advancedModelSelect
         }
+        if (Object.prototype.hasOwnProperty.call(patch, 'modelReasoning')) {
+          if (typeof patch.modelReasoning !== 'boolean') fail('模型推理强度开关值无效。')
+          next.modelReasoning = patch.modelReasoning
+        }
       } else fail('未知设置操作。')
       const oldSnapshots = clone(snapshots)
       if (patch.action) {
@@ -424,7 +477,7 @@ export function createQuotaControls(ctx, { path, sources, request = fetch, now =
   return {
     get, update, test, read, tick,
     providers: async () => ({ ok: true, providers: providerDirectory() }),
-    dispose: () => { disposed = true },
+    dispose: async () => { disposed = true; await updateQueue.catch(() => {}); await Promise.allSettled([allFlight, ...flights.values()]); await saveQueue.catch(() => {}) },
   }
 }
 
@@ -433,6 +486,35 @@ const WORKBUDDY_SOURCES = {
   'workbuddy-ai': { name: 'WorkBuddy AI', path: '/plugins/dsh-workbuddy-connect/ai/status' },
 }
 
+/** Display the selected built-in account; never import credentials on a page read. */
+export function nativeWorkBuddyQuotaSource(getService, provider = 'workbuddy') {
+  if (!Object.hasOwn(WORKBUDDY_SOURCES, provider)) fail('未知 WorkBuddy 积分来源。')
+  const channelId = provider === 'workbuddy-ai' ? 'workbuddy' : 'buddy'
+  const name = provider === 'workbuddy-ai' ? 'WorkBuddy 国际版' : 'WorkBuddy 国内版'
+  const selected = service => service?.accountsView(channelId).accounts.find(account => account.selected && account.enabled && account.status === 'ready')
+  return {
+    provider, name,
+    description: '读取“模型接入 → 账号渠道”中已选定的 ' + name + ' 账号积分，无需其他插件。',
+    available: () => Boolean(selected(getService())),
+    async read() {
+      const service = getService()
+      const account = selected(service)
+      if (!account) return { ok: true, available: false, status: 'not-configured' }
+      const reading = (await service.refreshQuota({ channelId, accountId: account.id })).results?.[0]
+      const current = selected(service)
+      if (!reading || reading.error || !current || current.id !== account.id || current.version !== account.version) {
+        return { ok: true, available: true, status: reading?.error?.code === 'AUTH' ? 'signed-out' : 'unavailable' }
+      }
+      return {
+        ok: true, available: true, status: 'signed-in', syncedAt: reading.observedAt,
+        credits: { total: reading.total, ...reading.unlimited === true ? { unlimited: true } : {},
+          accounts: (reading.kinds ?? []).map(pool => ({ packageName: pool.name, remain: pool.balance, size: pool.total })) },
+        models: service.models(channelId).filter(model => model.accountId === account.id && model.billing === 'account-included' && model.callable === true).map(model => ({ id: model.modelId, name: model.displayName, free: true, badges: [] })),
+      }
+    },
+  }
+}
+
 /** Optional plugin registration is detected without probing its HTTP route. */
 export function workBuddyAvailable(ctx, provider = 'workbuddy') {
   if (!Object.hasOwn(WORKBUDDY_SOURCES, provider)) return false