cortico-world-workbuddy 0.1.5 → 0.1.7

package/CHANGELOG.md

@@ -1,5 +1,50 @@
 # 更新日志
 
+## 0.1.7
+
+按 WorkBuddy 官方对话给出的合规口径，给桥接加「安全清单」闸门（仍只在本机，未推送 / 未发布）。
+
+- **新增 `src/safety.js`**：把 WorkBuddy 的筛选原则固化成 `SAFE_MODEL_IDS`（21 个公开对话模型）、
+  分组表 `SAFE_MODEL_GROUPS`、谨慎档 `CAUTION_MODEL_IDS`（hy3 系列与 preview）与 `classifyModel()`。
+  `classifyModel` 把目录里每个模型判成 `safe / caution / alias / disabled / media / code / retired /
+  format / experimental / unknown` 十档，附中文理由；`allow` 只对前两档为真。
+- **闸门默认开启**（`worlds.workbuddy.safeOnly = true`）：`wb_chat`、`wb_select_model` 与面板的
+  「使用」按钮都会拒绝安全清单外的模型，并给出「判定档位 + 理由 + 如何解除」的说明；
+  关掉这个配置才能调用 disabled / 内部别名 / 预览等模型，风险自负。
+- **`wb_list_models` 默认只列安全清单**（按 DeepSeek / GLM / 混元 / Kimi / 其他分组，带此刻倍率），
+  传 `all=true` 才追加其余模型及其排除理由。
+- **被排除的典型项**：`wb-lite`（目录 `disabled:true`）、`auto` / `fast-model` / `balanced-model` /
+  `deep-model`（内部路由别名）、`hunyuan-image-alpha*` / `kling-video-v3` / `minimax-video-h3`（媒体）、
+  `codewise-*`（代码补全）、`hy4-preview*`（实验预览）、19 个已下架（11102）、`glm-5.0-turbo`（11150）。
+- **模型目录面板**新增「合规」列（安全清单 / 安全清单·谨慎 / 各排除档位，悬停看理由），
+  默认只显示安全清单，勾选「显示全部模型（含不建议项）」才展开；不安全项的选择按钮置灰。
+- `envPromptVars()` 增加 `workbuddy.safeOnly`；`ENV_PROMPT.md` 增加一条：闸门开着时不要绕过拒绝，
+  应该告诉用户原因并改推荐安全清单里的模型。
+- `describe.json` 的 `envPrompt` 与 `wb_list_models` 描述同步（多了 `all` 参数）。
+
+## 0.1.6
+
+新增「用量」面板与真实的时段优惠计算（只在本机验证，未发布）。
+
+- **优惠来自 `/v3/config`**：改用应用身份 UA（`WorkBuddy/5.8.3 … CLI/2.161.0`）拉取目录，
+  同时拿到 `modelPromotions` / `modelTiers`。用 CLI 身份只能读到精简后的目录，
+  促销与档位字段整个缺失——这是之前倍率「永远显示原价」的根因。
+- **新增 `src/promo.js`**：解析 `schedule`（`timezone` / `validFrom` / `validUntil` / 跨零点的 `daily`
+  时段、`dailyUnusable`）、`discount`（`discountedCredits` 就是生效倍率本身，不是相对系数）、
+  `badge`（含 `display:"activeOnly"`）与 `priority`；按优先级选出此刻生效的那条。
+  `priceViewOf(model, now)` 给出 `{base, effective, promoId, badge, windowText, hoverText, isFree}`。
+- **新增「用量」面板**（`world:workbuddy` 第 4 个页签）：区间概览（今天 / 近 7 天 / 近 30 天）、
+  按模型聚合、积分包明细、限时优惠清单、最近调用明细；带「刷新余额」与「清空本地账本」。
+- **新增 `src/usage.js`**：每次 `wb_chat` 往 `<dataDir>/workbuddy-usage.jsonl` 记一行
+  （tokens 来自 SSE 的 `usage`，积分来自 `usage.credit` 即上游真实扣费，倍率记当时生效值），
+  读的时候裁掉 90 天以前的行；余额快照另存 `workbuddy-balance.json`。
+- `fetchCredits` 现在返回 `{total, used, packages[]}`（逐包剩余 / 已用 / 周期），
+  `wb_credits` 一并打印「本周期已用」。
+- `wb_chat` 回执补充「用量：输入 N tok / 输出 N tok / 缓存命中 N tok / 共 N tok / 本次消耗积分 N（N ms）」。
+- `wb_list_models` 标注此刻生效倍率（含原价对比、时段）与优惠徽标；`wb_select_model` 提示此刻倍率。
+- 环境提示词新增 `{{workbuddy.todayCredit}}` / `{{workbuddy.todayTokens}}`，并在倍率旁说明已含生效中的限时优惠。
+- 详情页徽标增加「今日积分」。
+
 ## 0.1.5
 
 发布前收尾：停用 / 卸载彻底不留痕，并把元数据指向真实仓库。

package/README.md

@@ -139,18 +139,58 @@ Coopanion (Coo)
 
 | 面板 | 内容 |
 |---|---|
-| 模型目录 | 刷新目录；逐模型一行：名称/id、**默认积分倍率**（x0 标「免费」）、上下文、推理档、「选用」按钮 |
+| 模型目录 | 刷新目录；逐模型一行：名称/id、**合规档位**、**此刻倍率**（含限时折扣时显示 `x0.5 ← x0.79 23:00–07:50`，x0 标「免费」）、上下文、推理档、「选用」按钮；默认只列安全清单，勾选「显示全部模型（含不建议项）」才展开其余项 |
 | 账号 | 登录态来源（本机发现 / 手动）、掩码 token、积分余额查询、重新检测、手动 token 存取 |
 | 是否启用 WorkBuddy | 「中转站优先」开关 + 主进程状态，与开始页按钮同步 |
+| 用量 | 区间概览（今天 / 近 7 天 / 近 30 天）、按模型聚合、积分包明细、限时优惠清单、最近调用；带「刷新余额」「清空本地账本」 |
+
+### 安全清单（合规闸门）
+
+WorkBuddy 官方对话给出的口径是：只调用「官方公开目录里、当前可正常对话」的模型，
+`disabled`、内部路由别名、媒体/代码补全与状态不明的模型都不要经外部软件调用，否则有风控/封号风险。
+这里把它落成代码：
+
+- 白名单 21 个（`src/safety.js` 的 `SAFE_MODEL_IDS`，按 DeepSeek / GLM / 混元 / Kimi / 其他分组）：
+  `deepseek-v4.1-flash`、`deepseek-v4-flash`、`deepseek-v4-pro`、`deepseek-v3-2-volc`、
+  `glm-5.3-flash`、`glm-5.3`、`glm-5.2`、`hy3`、`hy3-b`、`hy3-c`、`hy3-x`、`hunyuan-chat`、
+  `kimi-k2.5`、`kimi-k2.8-preview`、`kimi-k3-1`、`kimi-k3.1-pro`、`minimax-m2.7`、
+  `minimax-m3.1-flash`、`mimo-v2.6-pro`、`space-bunny`、`step-5-preview`。
+  其中 `hy3*` 与 `*preview` 标为「谨慎」（免费试用/预览，别做高频自动化）。
+- 其余全部**拒绝**：`wb-lite`（目录 `disabled:true`）、`auto` / `fast-model` / `balanced-model` /
+  `deep-model`（内部路由别名）、4 个媒体模型、`codewise-*`、`hy4-preview*`、19 个已下架的、
+  `glm-5.0-turbo`（11150 请求格式不符）。
+- 闸门是 `worlds.workbuddy.safeOnly`（默认 `true`）。开着时 `wb_chat` / `wb_select_model` / 面板「选用」
+  三处一致拒绝，并说明「判定档位 + 理由 + 怎么解除」；关掉才放行，属于明示的风险自负。
+- 清单是按 2026-11 的官方目录定的，官方加新模型不会被自动信任——这正是「未列入安全清单」这一档的意义。
+
+
+### 倍率与限时优惠怎么算
+
+- 目录来自 `GET /v3/config`（应用身份 UA）：一次同时拿到 `models`、`modelPromotions`、`modelTiers`。
+  用 CLI 身份只能读到精简目录，促销字段会整段缺失——这是「倍率永远显示原价」的根因。
+- 一条促销的生效条件是 `schedule`：`timezone`（默认按条目给的时区算）、`validFrom`/`validUntil`、
+  `daily` 时段（支持 `23:00`→`07:50` 这类跨零点窗口）。命中的条目按 `priority` 取最高；平手时促销优先于档位。
+- `discount.discountedCredits`（如 `0.50x`）**就是生效倍率本身**，不是相对原价的系数。
+  `displayMode: "replace"` 直接替换显示，`"strikethrough"` 表示「划线原价 + 新价」并排。
+- `badge.display: "activeOnly"` 的徽标只在生效时段出现（如「限时免费」试用）。
+
+### 用量统计口径
+
+- 每次 `wb_chat` 记一行到 `%APPDATA%\..\Coopanion\data\home\companion\data\workbuddy-usage.jsonl`
+  （实机路径；实际就是 `ctx.dataDir`）：`ts/model/region/ok/promptTokens/completionTokens/totalTokens/cachedTokens/reasoningTokens/credit/multiplier/promoId/source/durationMs`。
+- `credit` 取 SSE 最后一段的 `usage.credit`，即**上游真实扣费**；倍率 0.11 的模型单次请求不足 1 分时上游就是 0，这里照抄不折算。
+- 积分包余额另存 `workbuddy-balance.json`（`POST /v2/billing/meter/get-user-resource` 的 `*Precise` 字段求和），
+  面板上的「刷新余额」会重取一次。
+- 账本只保留 90 天，读的时候顺带裁掉；「清空本地账本」会把它清成空文件，服务端数据不受影响。
 
 ## 工具（给 Coo / 模型调用）
 
 | 工具 | 作用 |
 |---|---|
-| `wb_list_models` | 列出目录中全部模型及各自默认积分倍率（只读） |
-| `wb_select_model` | 按 id 选择 `wb_chat` 的默认模型，持久化 |
-| `wb_chat` | 用选中模型回答一个单轮问题（**真实消耗积分**，需主进程在跑） |
-| `wb_credits` | 只读查询积分余额（需主进程在跑） |
+| `wb_list_models` | 列出**安全清单内**的模型及此刻倍率（含限时优惠与时段），并单列优惠清单；传 `all=true` 才带上被排除项与理由（只读） |
+| `wb_select_model` | 按 id 选择 `wb_chat` 的默认模型，持久化；提示此刻倍率；安全清单外会被拒 |
+| `wb_chat` | 用选中模型回答一个单轮问题（**真实消耗积分**，需主进程在跑）；回执附输入/输出/缓存 token 与本次积分；安全清单外会被拒 |
+| `wb_credits` | 只读查询积分余额与本周期已用（需主进程在跑） |
 
 ## 配置（`worlds.workbuddy.*`）
 
@@ -164,6 +204,7 @@ Coopanion (Coo)
 | `envPrompt` | `true` | 是否把桥接状态写进 system 前缀（关掉后「中转站优先」也不生效） |
 | `prefer` | `false` | 「中转站优先」，由开始页按钮 / 详情页开关写入 |
 | `hostInject` | `true` | 是否注入「开始」页按钮（关掉后不碰宿主文件，只用详情页开关） |
+| `safeOnly` | `true` | 只允许调用安全清单内的公开对话模型；关掉会放行 disabled / 别名 / 预览等项，风险自负 |
 
 ## 开发与校验
 

package/describe.json

@@ -2,10 +2,10 @@
   "tools": [
     {
       "name": "wb_list_models",
-      "description": "List the WorkBuddy models available to the signed-in account, each with its default credit multiplier (e.g. x0.79), context window and reasoning efforts. Read-only; costs nothing.",
+      "description": "List the WorkBuddy chat models that are safe to call (official public catalog only), each with its credit multiplier (e.g. x0.79, already including time-limited discounts), context window and reasoning efforts. Read-only; costs nothing. Pass all=true to also list models that are disabled, internal routing aliases, media/code models or delisted ones — those are not callable through this bridge while worlds.workbuddy.safeOnly is on.",
       "summary": {
-        "zh": "列出本机 WorkBuddy 账号可用的模型及各自的默认积分倍率。",
-        "en": "Lists WorkBuddy models for the signed-in account with each default credit multiplier."
+        "zh": "列出 WorkBuddy 公开对话模型（安全清单）及各自的积分倍率、上下文与推理档；all=true 时附上被排除的项与原因。",
+        "en": "Lists the safe WorkBuddy chat models with multiplier, context and reasoning efforts; all=true also lists excluded ones with reasons."
       },
       "tags": [
         "read"
@@ -13,12 +13,17 @@
       "parameters": {
         "type": "object",
         "additionalProperties": false,
-        "properties": {}
+        "properties": {
+          "all": {
+            "type": "boolean",
+            "description": "Also list models outside the safe list (shown with their risk reason)."
+          }
+        }
       }
     },
     {
       "name": "wb_select_model",
-      "description": "Select which WorkBuddy model wb_chat should use by default. The id must come from wb_list_models. Persists across restarts.",
+      "description": "Select which WorkBuddy model wb_chat should use by default. The id must come from wb_list_models. Refused when worlds.workbuddy.safeOnly is on and the model is outside the safe list. Persists across restarts.",
       "summary": {
         "zh": "选择 wb_chat 默认调用的 WorkBuddy 模型。",
         "en": "Selects the default WorkBuddy model for wb_chat."
@@ -98,5 +103,5 @@
       }
     }
   ],
-  "envPrompt": "## WorkBuddy bridge\n\nThis machine has a WorkBuddy desktop sign-in bridged in (region: {{workbuddy.region}}; signed in: {{workbuddy.authed}}).\nThe model catalog holds {{workbuddy.catalogSize}} models. The currently selected model is `{{workbuddy.model}}` with default credit multiplier {{workbuddy.multiplier}}.\nWorkBuddy desktop main process: {{workbuddy.process}}. Relay-first switch: {{workbuddy.priority}}.\n\n- Use `wb_list_models` to see every model with its multiplier before choosing; prefer low-multiplier models for casual tasks.\n- Use `wb_select_model` when the user asks to switch the WorkBuddy model.\n- `wb_chat` only works while the WorkBuddy desktop main process is running; otherwise it returns「未检测到 WorkBuddy 主进程」. Every call spends the user's own credits at that model's multiplier.\n- `wb_credits` is read-only and costs nothing (also requires the desktop process).\n\n### Relay first: {{workbuddy.priority}}\n\n- Switch `on` **and** process `running`: every user turn that expects a conversational answer (question, chat, writing, reasoning, rewrite, translation, summary) must be answered by a WorkBuddy model first — call `wb_chat` (omit `model` to use `{{workbuddy.model}}`), then speak the returned answer back in your own voice and name the model that answered. Only fall back to your own model if the call fails.\n- Switch `off` (default): do not call `wb_chat`; answer with your own model. If the user explicitly asks for WorkBuddy, `wb_chat` is still allowed — the desktop process must be running.\n- Tool errors and empty answers are not a reason to flip the switch; just say what happened.\n"
+  "envPrompt": "## WorkBuddy bridge\n\nThis machine has a WorkBuddy desktop sign-in bridged in (region: {{workbuddy.region}}; signed in: {{workbuddy.authed}}).\nThe model catalog holds {{workbuddy.catalogSize}} models. The currently selected model is `{{workbuddy.model}}` with default credit multiplier {{workbuddy.multiplier}}.\nWorkBuddy desktop main process: {{workbuddy.process}}. Relay-first switch: {{workbuddy.priority}}.\nSpent today through the bridge: {{workbuddy.todayCredit}} credits / {{workbuddy.todayTokens}} tokens (locally recorded).\nThe multiplier above already includes any time-limited discount or free window that is active right now; `wb_list_models` also marks which offers are active and their hours.\n\n- Use `wb_list_models` to see every model with its multiplier before choosing; prefer low-multiplier models for casual tasks.\n- Safe-list gate: {{workbuddy.safeOnly}}. When it is `on`, only the models WorkBuddy publishes as public chat models are callable — `disabled` entries, internal routing aliases (`auto`, `fast-model`, `balanced-model`, `deep-model`), media/code models and delisted ones are refused. Do not try to work around a refusal; tell the user why and offer a safe model instead. `wb_list_models` with `all=true` shows the refused ones with reasons.\n- Use `wb_select_model` when the user asks to switch the WorkBuddy model.\n- `wb_chat` only works while the WorkBuddy desktop main process is running; otherwise it returns「未检测到 WorkBuddy 主进程」. Every call spends the user's own credits at that model's multiplier.\n- `wb_credits` is read-only and costs nothing (also requires the desktop process).\n\n### Relay first: {{workbuddy.priority}}\n\n- Switch `on` **and** process `running`: every user turn that expects a conversational answer (question, chat, writing, reasoning, rewrite, translation, summary) must be answered by a WorkBuddy model first — call `wb_chat` (omit `model` to use `{{workbuddy.model}}`), then speak the returned answer back in your own voice and name the model that answered. Only fall back to your own model if the call fails.\n- Switch `off` (default): do not call `wb_chat`; answer with your own model. If the user explicitly asks for WorkBuddy, `wb_chat` is still allowed — the desktop process must be running.\n- Tool errors and empty answers are not a reason to flip the switch; just say what happened.\n"
 }

package/dist/webui.js

@@ -48,7 +48,43 @@ var TEXT = {
     repair: "\u91CD\u65B0\u6CE8\u5165\u5F00\u59CB\u9875\u6309\u94AE",
     repairing: "\u6B63\u5728\u91CD\u65B0\u6CE8\u5165\u2026",
     repaired: "\u5DF2\u4FEE\u590D\uFF0C\u91CD\u65B0\u6253\u5F00\u63A7\u5236\u53F0\u5373\u53EF\u770B\u5230\u6309\u94AE",
-    repairFail: "\u4FEE\u590D\u5931\u8D25"
+    repairFail: "\u4FEE\u590D\u5931\u8D25",
+    usageTitle: "\u7528\u91CF",
+    usageDesc: "\u672C\u673A\u8BB0\u8D26\u7684\u8C03\u7528\u7528\u91CF\u4E0E WorkBuddy \u79EF\u5206\u5305\u4F59\u989D\u3002\u79EF\u5206\u53D6\u4E0A\u6E38\u6BCF\u6B21\u8C03\u7528\u56DE\u4F20\u7684\u771F\u5B9E\u6263\u8D39\uFF08\u53EF\u80FD\u4E3A 0\uFF09\uFF0C\u500D\u7387\u6309\u76EE\u5F55 + \u9650\u65F6\u4F18\u60E0\u5B9E\u65F6\u8BA1\u7B97\u3002",
+    usageRefresh: "\u5237\u65B0\u4F59\u989D",
+    usageClear: "\u6E05\u7A7A\u672C\u5730\u8D26\u672C",
+    usageCleared: "\u672C\u5730\u8D26\u672C\u5DF2\u6E05\u7A7A",
+    metricCalls: "\u8C03\u7528",
+    metricCredit: "\u79EF\u5206",
+    metricInput: "\u8F93\u5165 tok",
+    metricOutput: "\u8F93\u51FA tok",
+    spanToday: "\u4ECA\u5929",
+    spanWeek: "\u8FD1 7 \u5929",
+    spanMonth: "\u8FD1 30 \u5929",
+    byModel: "\u6309\u6A21\u578B",
+    balanceTitle: "\u79EF\u5206\u5305\u4F59\u989D",
+    colPkgName: "\u79EF\u5206\u5305",
+    colPkgRemain: "\u5269\u4F59",
+    colPkgUsed: "\u5DF2\u7528",
+    colPkgCycle: "\u5468\u671F",
+    promosTitle: "\u9650\u65F6\u4F18\u60E0 / \u514D\u8D39",
+    promoActive: "\u751F\u6548\u4E2D",
+    promoSoon: "\u672A\u751F\u6548",
+    recentTitle: "\u6700\u8FD1\u8C03\u7528",
+    colTime: "\u65F6\u95F4",
+    colTokens: "token",
+    colDuration: "\u8017\u65F6",
+    noData: "\u6682\u65E0\u6570\u636E",
+    totalCredit: "\u5408\u8BA1\u79EF\u5206",
+    todayCredit: "\u4ECA\u65E5\u79EF\u5206",
+    todayTokens: "\u4ECA\u65E5 token",
+    colSafety: "\u5408\u89C4",
+    safetySafe: "\u5B89\u5168\u6E05\u5355",
+    safetyCaution: "\u5B89\u5168\u6E05\u5355\xB7\u8C28\u614E",
+    showAllModels: "\u663E\u793A\u5168\u90E8\u6A21\u578B\uFF08\u542B\u4E0D\u5EFA\u8BAE\u9879\uFF09",
+    unsafePick: "\u8BE5\u6A21\u578B\u4E0D\u5728\u5B89\u5168\u6E05\u5355\u5185\uFF0C\u5DF2\u62D2\u7EDD\u9009\u62E9",
+    safeOnlyOn: "\u4EC5\u8C03\u7528\u5B89\u5168\u6E05\u5355\u6A21\u578B",
+    safeOnlyOff: "safeOnly \u5DF2\u5173\u95ED\uFF1A\u5168\u90E8\u6A21\u578B\u53EF\u8C03\u7528\uFF08\u542B WorkBuddy \u4E0D\u5EFA\u8BAE\u5916\u90E8\u8C03\u7528\u7684\u9879\uFF09"
   },
   en: {
     refresh: "Refresh from WorkBuddy",
@@ -98,16 +134,62 @@ var TEXT = {
     repair: "Re-inject the home button",
     repairing: "Re-injecting\u2026",
     repaired: "Fixed. Reopen the console to see the button",
-    repairFail: "Repair failed"
+    repairFail: "Repair failed",
+    usageTitle: "Usage",
+    usageDesc: "Locally recorded call usage plus the WorkBuddy credit balance. Credits come from the per-call figure the upstream returns (may be 0); multipliers combine the catalog with time-limited offers in real time.",
+    usageRefresh: "Refresh balance",
+    usageClear: "Clear local ledger",
+    usageCleared: "Local ledger cleared",
+    metricCalls: "Calls",
+    metricCredit: "Credits",
+    metricInput: "Input tok",
+    metricOutput: "Output tok",
+    spanToday: "Today",
+    spanWeek: "Last 7 days",
+    spanMonth: "Last 30 days",
+    byModel: "By model",
+    balanceTitle: "Credit packages",
+    colPkgName: "Package",
+    colPkgRemain: "Remaining",
+    colPkgUsed: "Used",
+    colPkgCycle: "Cycle",
+    promosTitle: "Limited-time offers / free",
+    promoActive: "active",
+    promoSoon: "scheduled",
+    recentTitle: "Recent calls",
+    colTime: "Time",
+    colTokens: "tokens",
+    colDuration: "Latency",
+    noData: "No data",
+    totalCredit: "Total credits",
+    todayCredit: "Credits today",
+    todayTokens: "Tokens today",
+    colSafety: "Policy",
+    safetySafe: "Safe list",
+    safetyCaution: "Safe list \xB7 caution",
+    showAllModels: "Show all models (including discouraged ones)",
+    unsafePick: "This model is outside the safe list and cannot be selected",
+    safeOnlyOn: "Safe-list only",
+    safeOnlyOff: "safeOnly is off: every model is callable (including ones WorkBuddy discourages)"
   }
 };
 function strings(ctx) {
   return TEXT[ctx.language === "en" ? "en" : "zh"];
 }
 function fmtMultiplier(m, s) {
-  if (typeof m.creditMultiplier !== "number") return { text: "\u2014", free: false };
-  if (m.creditMultiplier === 0) return { text: `x0 \xB7 ${s.multiplierFree}`, free: true };
-  return { text: `x${m.creditMultiplier}`, free: false };
+  const price = m?.price;
+  const base = typeof price?.base === "number" ? price.base : typeof m?.creditMultiplier === "number" ? m.creditMultiplier : null;
+  const eff = typeof price?.effective === "number" ? price.effective : base;
+  if (base === null) return { text: "\u2014", free: false, promo: "" };
+  if (eff === 0) return { text: `x0 \xB7 ${s.multiplierFree}${price?.windowText ? ` ${price.windowText}` : ""}`, free: true, promo: price?.badge ?? "" };
+  if (typeof eff === "number" && eff < base) {
+    return {
+      text: `x${eff} \u2190 x${base}${price?.windowText ? ` ${price.windowText}` : ""}`,
+      free: false,
+      promo: price?.badge ?? ""
+    };
+  }
+  return { text: `x${base}`, free: false, promo: price?.badge ?? "" };
 }
 function fmtTs(ms, s) {
   if (!ms) return s.notRefreshed;
@@ -122,33 +204,42 @@ function mountModels(ctx) {
   const { ui } = ctx;
   const sheet = ui.sheet({
     title: s.colModel === "\u6A21\u578B" ? "WorkBuddy \u6A21\u578B\u76EE\u5F55" : "WorkBuddy model catalog",
-    desc: s.empty
+    desc: s.colModel === "\u6A21\u578B" ? "\u9ED8\u8BA4\u53EA\u5217 WorkBuddy \u516C\u5F00\u5BF9\u8BDD\u6A21\u578B\uFF08\u5B89\u5168\u6E05\u5355\uFF09\uFF1B\u52FE\u9009\u300C\u663E\u793A\u5168\u90E8\u6A21\u578B\u300D\u53EF\u67E5\u770B\u88AB\u6392\u9664\u9879\u53CA\u5176\u7406\u7531\u3002" : 'Only WorkBuddy public chat models are listed by default; tick "Show all models" to see excluded ones and why.'
   });
   ctx.root.append(sheet.el);
   const head = ui.rowbar();
   const refreshBtn = ui.button(s.refresh, { variant: "primary" });
   const stateChip = ui.chip("", "plain");
   const currentChip = ui.chip("", "accent");
-  head.append(refreshBtn, stateChip, currentChip);
+  const allBox = ui.checkbox(s.showAllModels, { checked: false });
+  head.append(refreshBtn, stateChip, currentChip, allBox.el);
   sheet.body.append(head);
   const errLine = ui.msgline();
   sheet.body.append(errLine);
   const table = ui.table({
-    head: [s.colModel, s.colMultiplier, s.colContext, s.colReasoning, s.colAction],
+    head: [s.colModel, s.colSafety, s.colMultiplier, s.colContext, s.colReasoning, s.colAction],
     maxHeight: "calc(100vh - 320px)"
   });
   sheet.body.append(table.el);
   let state = null;
   function renderChips() {
-    stateChip.textContent = `${s.lastRefresh}: ${fmtTs(state?.catalogAt, s)} \xB7 ${state?.models?.length ?? 0} ${s.models}`;
+    const models = state?.models ?? [];
+    const safeCount = models.filter((m) => m.safety?.allow).length;
+    stateChip.textContent = `${s.lastRefresh}: ${fmtTs(state?.catalogAt, s)} \xB7 ${safeCount}/${models.length} ${s.models} \xB7 ${state?.safeOnly === false ? s.safeOnlyOff : s.safeOnlyOn}`;
     currentChip.textContent = `${s.currentModel}: ${state?.model || "\u2014"}`;
   }
+  function pickable(m) {
+    if (state?.safeOnly === false) return true;
+    return m.safety?.allow !== false;
+  }
   function renderTable() {
-    const models = state?.models ?? [];
+    const all = state?.models ?? [];
+    const models = allBox.checked ? all : all.filter((m) => m.safety?.allow);
     table.clear(models.length ? void 0 : s.empty);
     for (const m of models) {
       const mul = fmtMultiplier(m, s);
       const isCurrent = state.model === m.id;
+      const safety = m.safety ?? {};
       const nameCell = ui.h("div");
       nameCell.append(ui.h("div", null, m.name || m.id));
       const sub = ui.h("div", "dim", m.id);
@@ -156,11 +247,26 @@ function mountModels(ctx) {
       sub.style.opacity = "0.65";
       nameCell.append(sub);
       if (m.description) nameCell.title = m.description;
+      const safePill = ui.pill(
+        safety.label ?? "\u2014",
+        safety.allow ? safety.caution ? "plain" : "on" : "plain"
+      );
+      if (safety.reason) safePill.title = safety.reason;
+      if (!safety.allow) {
+        safePill.style.opacity = "0.6";
+        nameCell.style.opacity = "0.6";
+      }
       const mulPill = ui.pill(mul.text, mul.free ? "on" : "plain");
+      if (mul.promo) mulPill.title = mul.promo;
+      const allowed = pickable(m);
       const btn = ui.button(isCurrent ? s.selected : s.select, {
         size: "sm",
         variant: isCurrent ? "plain" : "primary",
         onClick: async () => {
+          if (!allowed) {
+            ui.toast(`${s.unsafePick}${safety.reason ? `\uFF1A${safety.reason}` : ""}`, "bad");
+            return;
+          }
           const off = ui.disable(btn);
           try {
             const r = await ctx.invoke("select", [m.id]);
@@ -180,8 +286,13 @@ function mountModels(ctx) {
         }
       });
       if (isCurrent) btn.disabled = true;
+      if (!allowed) {
+        btn.disabled = true;
+        btn.title = safety.reason ?? "";
+      }
       table.addRow([
         nameCell,
+        safePill,
         mulPill,
         m.contextWindow ? String(m.contextWindow) : "\u2014",
         m.reasoning?.supportedEfforts?.join(" / ") ?? "\u2014",
@@ -189,6 +300,10 @@ function mountModels(ctx) {
       ]);
     }
   }
+  allBox.input.addEventListener("change", () => {
+    renderChips();
+    renderTable();
+  });
   async function load() {
     state = await ctx.invoke("state");
     renderChips();
@@ -387,11 +502,168 @@ function mountPriority(ctx) {
     statusLine.textContent = String(err?.message ?? err);
   });
 }
+function fmtNum(n) {
+  if (typeof n !== "number" || !Number.isFinite(n)) return "\u2014";
+  return String(Math.round(n * 100) / 100);
+}
+function mountUsage(ctx) {
+  const s = strings(ctx);
+  const { ui } = ctx;
+  const sheet = ui.sheet({ title: `${s.usageTitle} \xB7 WorkBuddy`, desc: s.usageDesc });
+  ctx.root.append(sheet.el);
+  const bar = ui.rowbar();
+  const refreshBtn = ui.button(s.usageRefresh, { variant: "primary", size: "sm" });
+  const clearBtn = ui.button(s.usageClear, { variant: "plain", size: "sm" });
+  const todayChip = ui.chip("", "accent");
+  const balanceChip = ui.chip("", "plain");
+  bar.append(refreshBtn, clearBtn, todayChip, balanceChip);
+  sheet.body.append(bar);
+  const errLine = ui.msgline();
+  sheet.body.append(errLine);
+  const overview = ui.table({
+    head: ["", s.metricCalls, s.metricCredit, s.metricInput, s.metricOutput],
+    maxHeight: "220px"
+  });
+  sheet.body.append(overview.el);
+  const modelSection = ui.section(s.byModel);
+  const modelTable = ui.table({
+    head: [s.colModel, s.metricCalls, s.metricCredit, s.metricInput, s.metricOutput],
+    maxHeight: "260px"
+  });
+  modelSection.append(modelTable.el);
+  sheet.body.append(modelSection);
+  const pkgSection = ui.section(s.balanceTitle);
+  const pkgTable = ui.table({
+    head: [s.colPkgName, s.colPkgRemain, s.colPkgUsed, s.colPkgCycle],
+    maxHeight: "220px"
+  });
+  pkgSection.append(pkgTable.el);
+  sheet.body.append(pkgSection);
+  const promoSection = ui.section(s.promosTitle);
+  const promoWrap = ui.h("div");
+  promoSection.append(promoWrap);
+  sheet.body.append(promoSection);
+  const recentSection = ui.section(s.recentTitle);
+  const recentTable = ui.table({
+    head: [s.colTime, s.colModel, s.colTokens, s.metricCredit, s.colDuration],
+    maxHeight: "300px"
+  });
+  recentSection.append(recentTable.el);
+  sheet.body.append(recentSection);
+  let state = null;
+  function spanRow(label, bucket) {
+    const b = bucket ?? {};
+    return [label, String(b.calls ?? 0), fmtNum(b.credit), fmtNum(b.prompt), fmtNum(b.completion)];
+  }
+  function render() {
+    const totals = state?.summary?.totals ?? {};
+    todayChip.textContent = `${s.todayCredit}: ${fmtNum(totals.today?.credit)} \xB7 ${s.todayTokens}: ${fmtNum(
+      (totals.today?.prompt ?? 0) + (totals.today?.completion ?? 0)
+    )}`;
+    balanceChip.textContent = `${s.balanceTitle}: ${fmtNum(state?.balance?.total)}`;
+    const spans = [spanRow(s.spanToday, totals.today), spanRow(s.spanWeek, totals.week), spanRow(s.spanMonth, totals.month)];
+    overview.clear();
+    for (const row of spans) overview.addRow(row);
+    const byModel = state?.summary?.byModel ?? [];
+    modelTable.clear(byModel.length > 0 ? void 0 : s.noData);
+    for (const m of byModel) {
+      modelTable.addRow([m.model, String(m.calls ?? 0), fmtNum(m.credit), fmtNum(m.prompt), fmtNum(m.completion)]);
+    }
+    const packages = state?.balance?.packages ?? [];
+    pkgTable.clear(packages.length > 0 ? void 0 : s.noData);
+    for (const p of packages) {
+      const cycle = [p.cycleStart, p.cycleEnd].filter(Boolean).join(" \u2192 ") || "\u2014";
+      pkgTable.addRow([p.name ?? "\u2014", fmtNum(p.remain), fmtNum(p.used), cycle]);
+    }
+    promoWrap.replaceChildren();
+    const promos = state?.promos ?? [];
+    if (promos.length === 0) {
+      promoWrap.append(ui.h("div", "dim", s.noData));
+    }
+    for (const p of promos) {
+      const row = ui.h("div");
+      row.style.display = "flex";
+      row.style.gap = "8px";
+      row.style.alignItems = "center";
+      row.style.padding = "4px 0";
+      row.append(ui.pill(p.badge || p.id, p.active ? "on" : "plain"));
+      const text = [
+        p.discountText || p.hoverText,
+        p.windowText || p.absoluteText,
+        (p.models ?? []).join(" / "),
+        p.active ? s.promoActive : s.promoSoon
+      ].filter(Boolean).join(" \xB7 ");
+      const label = ui.h("div", "dim", text);
+      label.style.fontSize = "12px";
+      if (p.hoverText) label.title = p.hoverText;
+      row.append(label);
+      promoWrap.append(row);
+    }
+    const recent = state?.summary?.recent ?? [];
+    recentTable.clear(recent.length > 0 ? void 0 : s.noData);
+    for (const r of recent) {
+      const when = (() => {
+        try {
+          return new Date(r.ts).toLocaleString();
+        } catch {
+          return String(r.ts);
+        }
+      })();
+      recentTable.addRow([
+        when,
+        r.model ?? "\u2014",
+        fmtNum(r.totalTokens ?? (r.promptTokens ?? 0) + (r.completionTokens ?? 0)),
+        r.ok === false ? "\u2014" : fmtNum(r.credit),
+        typeof r.durationMs === "number" ? `${r.durationMs} ms` : "\u2014"
+      ]);
+    }
+  }
+  async function load() {
+    state = await ctx.invoke("state");
+    errLine.textContent = state?.ok === false ? state.error ?? "" : "";
+    render();
+  }
+  refreshBtn.addEventListener("click", async () => {
+    const off = ui.disable(refreshBtn);
+    refreshBtn.textContent = s.refreshing;
+    try {
+      state = await ctx.invoke("refresh");
+      render();
+      ui.toast(`${s.balanceTitle}: ${fmtNum(state?.balance?.total)}`);
+    } catch (err) {
+      errLine.textContent = String(err?.message ?? err);
+      ui.toast(String(err?.message ?? err), "bad");
+    } finally {
+      refreshBtn.textContent = s.usageRefresh;
+      off.dispose();
+    }
+  });
+  clearBtn.addEventListener("click", async () => {
+    const off = ui.disable(clearBtn);
+    try {
+      state = await ctx.invoke("clear");
+      render();
+      ui.toast(s.usageCleared);
+    } catch (err) {
+      ui.toast(String(err?.message ?? err), "bad");
+    } finally {
+      off.dispose();
+    }
+  });
+  ctx.stream({
+    message: () => load().catch(() => {
+    })
+  });
+  load().catch((err) => {
+    errLine.textContent = String(err?.message ?? err);
+  });
+}
 var client_default = {
   panels: {
     models: { mount: mountModels },
     account: { mount: mountAccount },
-    priority: { mount: mountPriority }
+    priority: { mount: mountPriority },
+    usage: { mount: mountUsage }
   }
 };
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cortico-world-workbuddy",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "type": "module",
   "description": "把 Windows 端已登录的 WorkBuddy 客户端模型桥接进 Coopanion：读取本机登录态，列出模型目录与默认积分倍率，供 Coo 调用。",
   "license": "MIT",

package/scripts/verify-ui.mjs

@@ -341,6 +341,38 @@ for (let run = 1; run <= RUNS; run += 1) {
       return dom === false && api.prefer === false ? true : false;
     });
     row.checks.panelToggleOff = true;
+    // --- 用量面板：页签 → 渲染 → 概览表有行 ---
+    await evaluate(clickByText('用量'));
+    const usage = await waitFor('用量面板渲染', async () => {
+      const v = await evaluate(`(() => {
+        const btn = [...document.querySelectorAll('button')].find((b) => b.textContent.trim() === '刷新余额' && b.offsetParent !== null);
+        const chip = [...document.querySelectorAll('*')].find((n) => n.children.length === 0 && (n.textContent || '').startsWith('今日积分'));
+        const rows = document.querySelectorAll('table tr').length;
+        return { hasRefresh: !!btn, chip: (chip?.textContent || '').trim(), rows };
+      })()`);
+      return v.hasRefresh && v.rows >= 4 ? v : false;
+    });
+    row.checks.usageRendered = usage.hasRefresh === true;
+    row.checks.usageRows = usage.rows;
+    row.checks.usageChip = usage.chip;
+    if (SHOTS && run === 1) { await sleep(300); await shot('world-usage'); }
+    // --- 模型目录：合规列 + 默认只列安全清单 ---
+    await evaluate(clickByText('模型目录'));
+    const modelsView = await waitFor('模型目录渲染', async () => {
+      const v = await evaluate(`(() => {
+        const th = [...document.querySelectorAll('th')].map((n) => n.textContent.trim());
+        const rows = document.querySelectorAll('table tr').length;
+        const safePills = [...document.querySelectorAll('td span')].filter((n) => /安全清单/.test(n.textContent || '')).length;
+        const allBox = [...document.querySelectorAll('input[type="checkbox"]')].length;
+        return { hasPolicy: th.includes('合规'), headers: th.join('|'), rows, safePills, checkboxes: allBox };
+      })()`);
+      return v.hasPolicy && v.rows > 10 ? v : false;
+    });
+    row.checks.modelsPolicyColumn = modelsView.hasPolicy;
+    row.checks.modelsRows = modelsView.rows;
+    row.checks.modelsSafePills = modelsView.safePills;
+    row.checks.modelsHasShowAll = modelsView.checkboxes >= 1;
+    if (SHOTS && run === 1) { await sleep(300); await shot('world-models'); }
     if (KEEP) await shot(`run${run}-world`);
     void pane;
   } catch (err) {

package/src/ENV_PROMPT.md

@@ -3,8 +3,11 @@
 This machine has a WorkBuddy desktop sign-in bridged in (region: {{workbuddy.region}}; signed in: {{workbuddy.authed}}).
 The model catalog holds {{workbuddy.catalogSize}} models. The currently selected model is `{{workbuddy.model}}` with default credit multiplier {{workbuddy.multiplier}}.
 WorkBuddy desktop main process: {{workbuddy.process}}. Relay-first switch: {{workbuddy.priority}}.
+Spent today through the bridge: {{workbuddy.todayCredit}} credits / {{workbuddy.todayTokens}} tokens (locally recorded).
+The multiplier above already includes any time-limited discount or free window that is active right now; `wb_list_models` also marks which offers are active and their hours.
 
 - Use `wb_list_models` to see every model with its multiplier before choosing; prefer low-multiplier models for casual tasks.
+- Safe-list gate: {{workbuddy.safeOnly}}. When it is `on`, only the models WorkBuddy publishes as public chat models are callable — `disabled` entries, internal routing aliases (`auto`, `fast-model`, `balanced-model`, `deep-model`), media/code models and delisted ones are refused. Do not try to work around a refusal; tell the user why and offer a safe model instead. `wb_list_models` with `all=true` shows the refused ones with reasons.
 - Use `wb_select_model` when the user asks to switch the WorkBuddy model.
 - `wb_chat` only works while the WorkBuddy desktop main process is running; otherwise it returns「未检测到 WorkBuddy 主进程」. Every call spends the user's own credits at that model's multiplier.
 - `wb_credits` is read-only and costs nothing (also requires the desktop process).

package/src/config.js

@@ -29,6 +29,12 @@ export const WB_DEFAULTS = {
   prefer: false,
   /** 是否允许改写宿主控制台 index.html 注入「中转站优先」按钮；关闭后不注入也不还原。 */
   hostInject: true,
+  /**
+   * 只允许调用 WorkBuddy 公开对话模型（安全清单）。
+   * 关掉后能用 disabled / 内部别名 / 预览等模型，但那属于「已知会违反对方使用建议」的操作，
+   * 默认必须是 true。
+   */
+  safeOnly: true,
 };
 
 /** World 配置组（WebUI 通用渲染的旋钮）。模型选择走自定义面板，不在这里。 */
@@ -84,6 +90,13 @@ export const WB_CONFIG_GROUP = {
         description: '在「开始」页加一个「中转站优先」按钮（会改写 Coopanion 的 build/console/index.html，停用或卸载时自动还原）。关掉后只能用 World 详情页的开关。',
         'x-hot': true,
       },
+      'worlds.workbuddy.safeOnly': {
+        type: 'boolean',
+        title: '只调用安全清单模型',
+        description:
+          '默认开：wb_chat / wb_select_model 只接受 WorkBuddy 公开目录里的对话模型（21 个），disabled、内部路由别名、媒体与代码补全模型一律拒绝。关掉可绕过限制，但那属于违反对方使用建议的操作，风险自负。',
+        'x-hot': true,
+      },
     },
   },
 };