creditdaddy 0.9.5 → 1.2.0

package/src/panel.html

@@ -43,13 +43,23 @@
   .title { font-family: "Avenir Next", Avenir, "Segoe UI Variable Display", "Segoe UI", sans-serif; font-size: 17px; font-weight: 750; letter-spacing: -.5px; line-height: 1.15; }
   .ver { color: var(--text-3); font-size: 11px; line-height: 1.3; font-variant-numeric: tabular-nums; }
   .head-right { display: flex; align-items: center; gap: 10px; color: var(--text-3); font-size: 12px; }
-  /* 组件开关：右上角弹出菜单 */
-  .comp-wrap { position: relative; display: inline-flex; }
-  .comp-menu { position: absolute; right: 0; top: calc(100% + 8px); z-index: 80; background: var(--surface); border: 1px solid var(--border); border-radius: 12px; box-shadow: var(--toast-shadow); padding: 10px 12px; min-width: 132px; display: flex; flex-direction: column; gap: 8px; }
-  .comp-menu[hidden] { display: none; }
-  .comp-menu-title { font-size: 11px; color: var(--text-3); }
+  /* 面板设置（右上角齿轮 → 弹窗）：访问密码 + 组件显隐与排序 + 账号卡片排序 */
+  .comp-menu { display: flex; flex-direction: column; gap: 8px; }
+  .comp-menu-title { font-size: 11px; color: var(--text-3); margin: 10px 0 4px; padding-top: 8px; border-top: 1px dashed var(--border-subtle); }
+  .comp-menu-title:first-child { margin-top: 0; padding-top: 0; border-top: 0; }
   .comp-menu .check { margin-right: 0; font-size: 12.5px; color: var(--text); }
-  #comp-menu { max-height: 72vh; overflow: auto; min-width: 236px; }
+  /* 产品页 notice 的功能分区行 */
+  .z-row { display: flex; align-items: center; gap: 6px; flex-wrap: wrap; }
+  .dot { width: 7px; height: 7px; border-radius: 50%; background: var(--text-3); opacity: .45; flex: none; }
+  .dot.on { background: var(--ok); opacity: 1; box-shadow: 0 0 5px var(--ok); }
+  .dot.pulse { animation: dot-pulse 2.2s ease-out infinite; }
+  @keyframes dot-pulse { 0% { box-shadow: 0 0 0 0 rgba(46, 229, 157, .45); } 70% { box-shadow: 0 0 0 5px transparent; } 100% { box-shadow: 0 0 0 0 transparent; } }
+  .z-row + .z-row { margin-top: 7px; padding-top: 7px; border-top: 1px dashed var(--border-subtle); }
+  .z-label { font-size: 11px; color: var(--text-3); flex: none; width: 68px; }
+  .z-text { flex: 1 1 320px; min-width: 0; }
+  /* 10Router 状态条分两行 */
+  .sec-status { font-size: 11px; font-weight: 600; padding: 2px 8px; border-radius: 999px; border: 1px solid var(--border); color: var(--text-3); }
+  .sec-status.on { color: var(--ok); border-color: rgba(var(--accent-rgb), .45); }
   .comp-row { display: flex; align-items: center; justify-content: space-between; gap: 6px; }
   .comp-row.off .check { opacity: .45; }
   .comp-ops { display: inline-flex; gap: 2px; flex: none; }
@@ -95,9 +105,9 @@
   .notice { margin: 12px 16px 0; padding: 9px 12px; border-radius: 10px; background: var(--warn-soft); color: var(--warn); font-size: 12px; line-height: 1.6; }
 
   /* cards */
-  .list { display: grid; grid-template-columns: repeat(auto-fill, minmax(440px, 1fr)); gap: 4px 10px; padding: 10px; }
-  .card { position: relative; padding: 11px 12px 12px; border-radius: 12px; transition: background .12s; min-width: 0; }
-  .card:hover { background: var(--hover); }
+  .list { display: grid; grid-template-columns: repeat(auto-fill, minmax(440px, 1fr)); gap: 10px; padding: 10px; }
+  .card { position: relative; padding: 11px 12px 12px; border-radius: 12px; background: var(--surface-2); border: 1px solid var(--border-subtle); transition: background .12s, border-color .12s; min-width: 0; }
+  .card:hover { background: var(--hover); border-color: var(--border-strong); }
   .row1 { display: flex; align-items: center; justify-content: space-between; gap: 10px; min-height: 28px; margin-bottom: 7px; }
   .name-group { display: flex; align-items: center; flex-wrap: wrap; gap: 6px; min-width: 0; }
   .name { font-size: 14px; font-weight: 600; cursor: text; border-radius: 5px; padding: 0 2px; margin: 0 -2px; max-width: 220px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
@@ -112,6 +122,10 @@
   html[data-theme="dark"] .badge.prod.workbuddy { color: #5eead4; }
   .badge.prod.zcode { color: #1d4ed8; background: rgba(37,99,235,.1); }
   html[data-theme="dark"] .badge.prod.zcode { color: #93c5fd; }
+  .badge.prod.catpaw { color: #c2410c; background: rgba(249,115,22,.14); }
+  html[data-theme="dark"] .badge.prod.catpaw { color: #fdba74; }
+  .badge.prod.trae { color: #047857; background: rgba(16,185,129,.14); }
+  html[data-theme="dark"] .badge.prod.trae { color: #6ee7b7; }
   .seg-ctl { display: inline-flex; gap: 2px; padding: 2px; border-radius: 9px; background: var(--hover); }
   .seg-ctl button { border: none; background: transparent; color: var(--text-2); font-size: 12px; font-weight: 600; padding: 4px 10px; border-radius: 7px; cursor: pointer; }
   .seg-ctl button.active { background: var(--surface); color: var(--text); box-shadow: 0 1px 3px rgba(0,0,0,.08); }
@@ -124,6 +138,8 @@
   .pill.fail { color: var(--err); border-color: var(--err-soft); }
   .pill.cur { color: #0f766e; border-color: rgba(20,184,166,.5); }
   html[data-theme="dark"] .pill.cur { color: #5eead4; }
+  .pill.gw { color: #4338ca; border-color: rgba(99,102,241,.45); }
+  html[data-theme="dark"] .pill.gw { color: #a5b4fc; }
   .ops { display: flex; gap: 6px; flex-shrink: 0; }
 
   .meta { display: flex; align-items: center; justify-content: space-between; gap: 12px; margin-bottom: 8px; font-size: 12px; }
@@ -144,16 +160,24 @@
   #cap-holder { margin-top: 10px; min-height: 0; }
   #cap-btn { margin-top: 10px; }
   .bar { display: flex; gap: 2px; width: 100%; height: 5px; background: color-mix(in srgb, var(--tertiary) 80%, transparent); border-radius: 3px; overflow: hidden; }
-  .seg { display: block; height: 5px; min-width: 3px; background: rgba(var(--accent-rgb), var(--a, 1)); transition: filter .15s; }
+  .seg { display: block; height: 5px; min-width: 3px; background: var(--ok); opacity: var(--a, 1); transition: filter .15s; }
   .seg.used { background: color-mix(in srgb, var(--text-3) 35%, transparent); }
   .seg:hover { filter: brightness(1.12); }
   .msg { margin-top: 7px; font-size: 11px; color: var(--text-3); line-height: 1.5; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
   .msg.err { color: var(--err); }
   .empty { grid-column: 1 / -1; text-align: center; color: var(--text-3); padding: 42px 12px; font-size: 13px; line-height: 1.9; }
+  .gw-line { text-align: center; color: var(--text-3); padding: 14px 16px 4px; font-size: 13px; line-height: 1.9; }
+  .kpi-label[title], .stat span[title] { cursor: help; }
 
   /* section card */
   .pcard { margin-top: 14px; background: var(--surface); border: 1px solid var(--border-subtle); border-radius: 14px; padding: 12px 14px; }
   .pcard-title { display: flex; align-items: center; justify-content: space-between; gap: 8px; font-size: 13px; font-weight: 700; }
+  .fold-head { cursor: pointer; user-select: none; }
+  .fold-side { display: inline-flex; align-items: center; gap: 6px; color: var(--text-3); }
+  .fold-ico { display: inline-flex; }
+  .fold-ico svg { width: 14px; height: 14px; }
+  .pcard .fold-body { display: none; margin-top: 4px; }
+  .pcard.open .fold-body { display: block; }
   .logs { margin-top: 8px; font-family: ui-monospace, SFMono-Regular, Consolas, monospace; font-size: 11px; line-height: 1.65; max-height: 240px; overflow-y: auto; background: var(--tertiary); border-radius: 9px; padding: 8px 10px; }
   .logs .info { color: var(--text-2); } .logs .warn { color: var(--warn); } .logs .error { color: var(--err); } .logs .debug { color: var(--text-3); }
   .collapsed .logs { display: none; }
@@ -181,8 +205,9 @@
   .hint { font-size: 12px; color: var(--text-3); line-height: 1.7; }
   .hint a { color: #4f86ff; word-break: break-all; }
   .box { border: 1px solid var(--border-subtle); border-radius: 10px; padding: 10px 12px; margin-top: 10px; background: var(--surface-2); }
-  .cand { display: flex; align-items: center; justify-content: space-between; gap: 10px; padding: 9px 0; border-bottom: 1px solid var(--border-subtle); }
-  .cand:last-child { border-bottom: none; }
+  .cand { display: flex; align-items: center; justify-content: space-between; gap: 10px; padding: 10px 12px; border: 1px solid var(--border-subtle); border-radius: 10px; background: var(--surface); }
+  .cand + .cand { margin-top: 8px; }
+  .cand .row { flex: none; flex-wrap: nowrap; gap: 6px; }
   .cand-main { min-width: 0; }
   .cand-name { font-weight: 600; display: flex; align-items: center; gap: 6px; flex-wrap: wrap; }
   .cand-sub { font-size: 11px; color: var(--text-3); margin-top: 3px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
@@ -200,8 +225,15 @@
   .view { display: none; } .view.active { display: block; }
 
   /* 仪表盘 */
-  .dash-head { display: flex; align-items: center; justify-content: space-between; gap: 12px; flex-wrap: wrap; margin-bottom: 12px; }
-  .dash-title { font-size: 15px; font-weight: 700; }
+  .dash-panel { margin-bottom: 12px; }
+  .dash-title { font-size: 13px; font-weight: 700; }
+  .dash-panel .toolbar { padding: 8px 16px; }
+  .dash-panel .kpis { display: flex; gap: 0; margin: 0; padding: 0 10px 8px; }
+  .dash-panel .kpi { background: none; border: none; border-radius: 0; padding: 6px 14px; flex: 1 1 0; min-width: 0; }
+  .dash-panel .kpi-value { font-size: 22px; margin-top: 2px; }
+  .dash-panel .kpi-sub { margin-top: 2px; }
+  .dash-panel .kpi + .kpi { border-left: 1px dashed var(--border-subtle); }
+  @media (max-width: 900px) { .dash-panel .kpis { flex-wrap: wrap; } .dash-panel .kpi { flex: 1 1 40%; } .dash-panel .kpi + .kpi { border-left: none; } }
   .kpis { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); gap: 10px; margin-bottom: 10px; }
   .kpi { background: var(--surface); border: 1px solid var(--border-subtle); border-radius: 14px; padding: 14px 16px; min-width: 0; }
   .kpi-label { color: var(--text-3); font-size: 12px; font-weight: 500; }
@@ -215,7 +247,7 @@
   .prod-head { display: flex; align-items: center; justify-content: space-between; gap: 8px; }
   .prod-name { display: flex; align-items: center; gap: 8px; font-size: 14px; font-weight: 700; }
   .dot { width: 8px; height: 8px; border-radius: 50%; flex-shrink: 0; }
-  .dot.qoder { background: #7c3aed; } .dot.workbuddy { background: #14b8a6; } .dot.zcode { background: #2563eb; }
+  .dot.qoder { background: #7c3aed; } .dot.workbuddy { background: #14b8a6; } .dot.zcode { background: #2563eb; } .dot.mirasim { background: #64748b; } .dot.catpaw { background: #f97316; } .dot.trae { background: #10b981; }
   .prod-go { color: var(--text-3); font-size: 12px; white-space: nowrap; display: inline-flex; align-items: center; gap: 2px; }
   .prod-go svg { width: 12px; height: 12px; transition: transform .15s; }
   .prodcard:hover .prod-go { color: var(--text); }
@@ -223,7 +255,7 @@
   .prod-rows { display: grid; grid-template-columns: auto minmax(0, 1fr); gap: 7px 12px; font-size: 12px; align-items: center; }
   .prod-rows .val { text-align: right; }
   .meter { height: 5px; background: color-mix(in srgb, var(--tertiary) 80%, transparent); border-radius: 3px; overflow: hidden; }
-  .meter span { display: block; height: 100%; background: rgb(var(--accent-rgb)); border-radius: 3px; }
+  .meter span { display: block; height: 100%; background: var(--ok); border-radius: 3px; }
   .dash-cols { display: grid; grid-template-columns: 1fr 1fr; gap: 10px; }
   .dash-cols .pcard { margin-top: 0; min-width: 0; }
   .item { display: flex; align-items: center; justify-content: space-between; gap: 10px; padding: 8px 4px; margin: 0 -4px; border-bottom: 1px solid var(--border-subtle); font-size: 12px; cursor: pointer; border-radius: 6px; }
@@ -247,10 +279,11 @@
   .tr-vrow { }
   .tr-vhead { display: flex; align-items: center; gap: 8px; margin-bottom: 8px; font-size: 13px; }
   .tr-vhead .dim { font-size: 12px; }
-  .tr-tabs { display: flex; gap: 6px; flex-wrap: wrap; margin: 2px 12px 4px; }
+  .tr-tabs { display: flex; gap: 6px; flex-wrap: wrap; margin: 14px 12px 4px; }
   .tr-vcards { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 10px; align-items: stretch; }
   @media (max-width: 1180px) { .tr-vcards { grid-template-columns: repeat(2, minmax(0, 1fr)); } }
   @media (max-width: 820px) { .tr-vcards { grid-template-columns: 1fr; } }
+  .tr-card.flat { align-self: start; }
   .tr-card { border: 1px solid var(--border-subtle); border-radius: 12px; padding: 11px 12px 12px; background: var(--surface); min-width: 0; }
   .tr-card.off { opacity: .6; }
   .tr-head { display: flex; align-items: center; justify-content: space-between; gap: 8px; margin-bottom: 8px; }
@@ -262,7 +295,7 @@
   .tr-q-val { font-variant-numeric: tabular-nums; white-space: nowrap; }
   .tr-q-val.low { color: var(--err); font-weight: 600; }
   .tr-meter { height: 5px; border-radius: 3px; background: color-mix(in srgb, var(--tertiary) 80%, transparent); overflow: hidden; }
-  .tr-meter span { display: block; height: 100%; border-radius: 3px; background: rgb(var(--accent-rgb)); }
+  .tr-meter span { display: block; height: 100%; border-radius: 3px; background: var(--ok); }
   .tr-meter span.low { background: var(--err); }
   .tr-meter span.mid { background: #d97706; }
   .tr-reset { color: var(--text-3); font-weight: 400; }
@@ -290,7 +323,6 @@
   .tr-packs-head { font-size: 11px; color: var(--text-3); margin-bottom: 2px; }
   .tr-packs-head b { color: var(--text-2); }
   .tr-more { margin-top: 7px; border: none; background: none; color: #4f86ff; font-size: 12px; cursor: pointer; padding: 0; }
-  .tr-bar { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; padding: 10px 16px; border-bottom: 1px solid var(--border-subtle); font-size: 12px; color: var(--text-2); }
   .chip { display: inline-flex; align-items: center; gap: 4px; padding: 2px 8px; border-radius: 999px; font-size: 11px; background: var(--tertiary); color: var(--text-3); }
   .chip.on { background: rgba(var(--accent-rgb), .14); color: var(--text); }
   .setup { padding: 22px; max-width: 620px; }
@@ -317,10 +349,7 @@
     </div>
     <div class="head-right">
       <span id="sched" class="num"></span>
-      <div class="comp-wrap">
-        <button class="icon-btn" id="btn-comp" title="面板设置：组件显隐与排序、账号卡片排序"></button>
-        <div class="comp-menu" id="comp-menu" hidden></div>
-      </div>
+      <button class="icon-btn" id="btn-comp" title="面板设置：访问密码、组件显隐与排序、账号卡片排序"></button>
       <a class="icon-btn" id="btn-home" href="https://github.com/techysy/CreditDaddy" target="_blank" rel="noopener" title="项目主页（GitHub）"></a>
       <button class="icon-btn" id="btn-theme" title="切换亮色 / 暗色"></button>
     </div>
@@ -332,25 +361,29 @@
     <button data-view="workbuddy">WorkBuddy<span class="cnt" id="cnt-workbuddy">0</span></button>
     <button data-view="zcode">ZCode<span class="cnt" id="cnt-zcode">0</span></button>
     <button data-view="mirasim">mirasim<span class="cnt" id="cnt-mirasim">0</span></button>
+    <button data-view="catpaw">妙手<span class="cnt" id="cnt-catpaw">0</span></button>
+    <button data-view="trae">Trae<span class="cnt" id="cnt-trae">0</span></button>
     <button data-view="tenrouter">10Router<span class="cnt" id="cnt-tenrouter">–</span></button>
   </nav>
 
   <!-- 仪表盘 -->
   <section class="view active" id="view-dash">
-    <div class="dash-head">
-      <div class="dash-title">总览</div>
-      <div class="actions">
-        <button class="btn primary" id="btn-checkin-all"></button>
-        <button class="btn" id="btn-add-dash"></button>
-        <button class="btn" id="btn-import-dash"></button>
-        <button class="btn" id="btn-export-dash"></button>
+    <div class="panel dash-panel">
+      <div class="toolbar">
+        <div class="summary"><span class="dash-title">总览</span></div>
+        <div class="actions">
+          <button class="btn primary" id="btn-checkin-all"></button>
+          <button class="btn" id="btn-add-dash"></button>
+          <button class="btn" id="btn-import-dash"></button>
+          <button class="btn" id="btn-export-dash"></button>
+        </div>
       </div>
+      <div class="kpis" id="kpis"></div>
     </div>
-    <div class="kpis" id="kpis"></div>
     <div class="prods" id="prods"></div>
     <div class="dash-cols">
-      <section class="pcard"><div class="pcard-title"><span>最近记录</span><span class="hint" id="last-tick"></span></div><div id="recent"></div></section>
-      <section class="pcard"><div class="pcard-title"><span>需要处理</span><span class="hint" id="att-count"></span></div><div id="attention"></div></section>
+      <section class="pcard" data-fold="recent"><div class="pcard-title fold-head"><span>最近记录</span><span class="fold-side"><span class="hint" id="last-tick"></span><span class="fold-ico"></span></span></div><div class="fold-body"><div id="recent"></div></div></section>
+      <section class="pcard" data-fold="attention"><div class="pcard-title fold-head"><span>需要处理</span><span class="fold-side"><span class="hint" id="att-count"></span><span class="fold-ico"></span></span></div><div class="fold-body"><div id="attention"></div></div></section>
     </div>
   </section>
 
@@ -373,6 +406,15 @@
         </div>
         <div class="actions">
           <button class="btn primary" id="btn-checkin"></button>
+          <span id="z-actions" style="display:none">
+            <button class="btn" id="zt-ac"></button>
+            <button class="btn" id="zt-net"></button>
+            <button class="btn" id="zt-gw"></button>
+            <button class="btn" id="zt-open" style="display:none"></button>
+          </span>
+          <span id="t-actions" style="display:none">
+            <button class="btn" id="tt-open" style="display:none"></button>
+          </span>
           <button class="btn" id="btn-add"></button>
           <button class="btn" id="btn-import"></button>
           <button class="btn" id="btn-export"></button>
@@ -448,13 +490,13 @@
     <div class="modal-title"><span>导出账号</span><button class="close" data-close>✕</button></div>
     <div class="field">
       <label>范围</label>
-      <select class="input" id="ex-provider"><option value="">全部账号</option><option value="p:qoder">Qoder（全部）</option><option value="qoder">仅 Qoder 国际版</option><option value="qoder-cn">仅 Qoder 国内版</option><option value="p:workbuddy">WorkBuddy（全部）</option><option value="workbuddy">仅 WorkBuddy 国内版</option><option value="workbuddy-intl">仅 WorkBuddy 国际版</option><option value="zcode">ZCode</option></select>
+      <select class="input" id="ex-provider"><option value="">全部账号</option><option value="p:qoder">Qoder（全部）</option><option value="qoder">仅 Qoder 国际版</option><option value="qoder-cn">仅 Qoder 国内版</option><option value="p:workbuddy">WorkBuddy（全部）</option><option value="workbuddy">仅 WorkBuddy 国内版</option><option value="workbuddy-intl">仅 WorkBuddy 国际版</option><option value="zcode">ZCode</option><option value="p:mirasim">mirasim</option><option value="p:catpaw">妙手</option><option value="p:trae">Trae</option></select>
     </div>
     <div class="field">
-      <label>加密口令（可选）</label>
-      <input class="input" id="ex-password" type="password" placeholder="至少 4 位；留空则导出明文">
+      <label>加密口令（必填）</label>
+      <input class="input" id="ex-password" type="password" placeholder="至少 4 位" autocomplete="new-password">
     </div>
-    <div class="hint">设置口令后文件采用 10router 迁移格式加密（scrypt + AES-256-GCM），可直接在 10router 对应提供商页导入（WorkBuddy 对应 10router 的 CodeBuddy）。10router 按提供商导入，建议按单个版本导出。</div>
+    <div class="hint">导出文件一律加密（10router 迁移格式，scrypt + AES-256-GCM），可直接在 10router 对应提供商页导入（WorkBuddy 对应 10router 的 CodeBuddy）。10router 按提供商导入，建议按单个版本导出。<b>口令不会被保存</b>，请牢记——遗失后文件无法解开、无法导入。</div>
     <div class="modal-actions"><button class="btn" data-close>取消</button><button class="btn primary" id="btn-do-export">导出</button></div>
   </div>
 </div>
@@ -469,17 +511,38 @@
   </div>
 </div>
 
+<!-- 面板设置（右上角齿轮） -->
+<div class="mask" id="m-settings">
+  <div class="modal">
+    <div class="modal-title"><span>面板设置</span><button class="close" data-close>✕</button></div>
+    <div class="comp-menu" id="comp-menu"></div>
+    <div class="field" id="upd-entry" style="display:none;margin-top:12px">
+      <label>版本与更新</label>
+      <div style="display:flex;gap:8px;align-items:center;flex-wrap:wrap"><span class="dim" id="upd-ver"></span><button class="btn" id="btn-update">检查更新</button></div>
+    </div>
+    <div class="modal-actions"><button class="btn" data-close>关闭</button></div>
+  </div>
+</div>
+
+<!-- 检查更新（桌面版）：状态由主进程 update:state 推送 -->
+<div class="mask" id="m-update">
+  <div class="modal sm">
+    <div class="modal-title"><span>检查更新</span><button class="close" data-close>✕</button></div>
+    <div id="upd-body"></div>
+    <div class="modal-actions" id="upd-actions"></div>
+  </div>
+</div>
+
 <!-- 10Router 设置 -->
 <div class="mask" id="m-10r">
   <div class="modal">
     <div class="modal-title"><span>10Router 连接设置</span><button class="close" data-close>✕</button></div>
     <div class="hint">填 10Router 的访问地址和仪表盘里创建的<b>虚拟 key（sk-…）</b>。key 只保存在 CreditDaddy 守护进程的数据目录（0600），面板里只显示脱敏值。</div>
-    <div class="field" style="margin-top:12px"><label>10Router 地址</label><input class="input mono" id="tr-endpoint" placeholder="http://127.0.0.1:20128 或 http://nas:20128"></div>
+    <div class="field" style="margin-top:12px"><label>10Router 地址</label><input class="input mono" id="tr-endpoint" placeholder="http://127.0.0.1:20128（站点根地址，不要带 /v1）"></div>
     <div class="field"><label>虚拟 key</label><input class="input mono" id="tr-key" placeholder="sk-…" autocomplete="off"></div>
-    <div class="field"><label>用量同步（同 10router-sync 插件）</label>
-      <div><label class="check"><input type="checkbox" id="tr-auto"> 每小时自动同步本机用量到 10Router</label></div>
-      <div id="tr-sources" style="margin-top:6px"></div>
-      <div class="hint" style="margin-top:4px">ZCode 只同步官方渠道；经 10Router 中转的 mirasim 调用会跳过，避免重复计数。10Router 按行签名去重，重复同步不会产生重复数据。</div>
+    <div class="field"><label>10Router 面板密码（可选）</label><input class="input mono" id="tr-admin-pw" type="password" placeholder="配置后「同步账号」走 OAuth 通道（带 refreshToken 自动续期）；留空保持不变" autocomplete="new-password"></div>
+    <div class="field"><label>账号同步</label>
+      <div style="display:flex;gap:8px;align-items:center;flex-wrap:wrap"><button class="btn" id="tr-sync-accounts">同步账号到 10R</button><span class="hint">把本机 Qoder / WorkBuddy 账号推为 10Router 上游连接；zcode 待反代就绪后支持</span></div>
     </div>
     <div class="field"><label>显示</label>
       <div><label class="check"><input type="checkbox" id="tr-hide-empty"> 「全部」视图隐藏没有额度 / 余额为 0 的供应商汇总卡</label></div>
@@ -493,6 +556,18 @@
   </div>
 </div>
 
+<!-- 10Router 用量同步 -->
+<div class="mask" id="m-trsync">
+  <div class="modal sm">
+    <div class="modal-title"><span>用量同步（同 10router-sync 插件）</span><button class="close" data-close>✕</button></div>
+    <div class="field"><label class="check"><input type="checkbox" id="tr-auto"> 每小时自动同步本机用量到 10Router</label></div>
+    <div class="field"><label>同步来源</label><div id="tr-sources"></div></div>
+    <div class="hint">ZCode 只同步官方渠道；经 10Router 中转的 mirasim 调用会跳过，避免重复计数。「10Router 本机」只把实例原生产生的行标记为网关同步。10Router 按行签名去重，重复同步不会产生重复数据。</div>
+    <div class="hint" id="tr-sync-status" style="margin-top:8px"></div>
+    <div class="modal-actions"><button class="btn" style="margin-right:auto" id="tr-sync-now">立即同步一次</button><button class="btn" data-close>取消</button><button class="btn primary" id="tr-sync-save">保存</button></div>
+  </div>
+</div>
+
 <!-- ZCode 活动领取 -->
 <div class="mask" id="m-claim">
   <div class="modal">
@@ -512,6 +587,59 @@
   </div>
 </div>
 
+<!-- ZCode 自动领取计划 -->
+<div class="mask" id="m-zac">
+  <div class="modal sm">
+    <div class="modal-title"><span>ZCode 自动领取计划</span><button class="close" data-close>✕</button></div>
+    <div class="field">
+      <label>轮询周期（分钟，1–720）</label>
+      <input class="input" id="zac-interval" type="number" min="1" max="720" step="1">
+    </div>
+    <div class="field">
+      <label>单次运行时长（分钟，0 = 一直运行直到手动关闭）</label>
+      <input class="input" id="zac-window" type="number" min="0" max="1440" step="5">
+    </div>
+    <div class="hint">开启后按此周期检查活动资格并自动领取（首次检查在开启 2 分钟后开始）。活动包由服务端在每日 0 点左右刷新放出——若运行时段没有覆盖 0 点，会错过当次领取，建议把运行时长设为 0，或让时段跨过 0 点。需要验证码时无法自动通过，卡片上会提示手动领取。</div>
+    <div class="modal-actions"><button class="btn" id="zac-off" style="display:none">停用</button><button class="btn" data-close>取消</button><button class="btn primary" id="zac-ok">保存并启用</button></div>
+  </div>
+</div>
+
+<!-- ZCode 网络出口 -->
+<div class="mask" id="m-znet">
+  <div class="modal sm">
+    <div class="modal-title"><span>ZCode 网络出口</span><button class="close" data-close>✕</button></div>
+    <div class="field">
+      <label>上游接口访问顺序（失败 / 被拦时自动回退另一条）</label>
+      <label class="check"><input type="radio" name="znet-order" id="znet-direct"> 直连优先（代理兜底）</label>
+      <label class="check"><input type="radio" name="znet-order" id="znet-proxy"> 代理优先（直连兜底）</label>
+    </div>
+    <div class="field">
+      <label>出口代理（http://host:port，支持口令 http://user:pass@host:port）</label>
+      <input class="input" id="znet-url" placeholder="http://192.168.31.101:7890">
+    </div>
+    <div class="hint">留空 = 清除已保存的代理，退回 HTTPS_PROXY 环境变量；取消 = 不改动。当前代理只显示脱敏后的地址。</div>
+    <div class="modal-actions"><button class="btn" data-close>取消</button><button class="btn primary" id="znet-ok">保存</button></div>
+  </div>
+</div>
+
+<!-- ZCode 体验包接口 -->
+<div class="mask" id="m-zgw">
+  <div class="modal sm">
+    <div class="modal-title"><span>ZCode 体验包接口</span><button class="close" data-close>✕</button></div>
+    <div class="hint" id="zgw-url" style="margin-bottom:10px"></div>
+    <div class="field">
+      <label class="check"><input type="checkbox" id="zgw-on"> 启用体验包接口（/gateway/v1/messages）</label>
+    </div>
+    <div class="field" id="zgw-lan-fields">
+      <label class="check"><input type="checkbox" id="zgw-lan"> 对局域网开放（重启后绑定 0.0.0.0）</label>
+      <label>IP 白名单（每行一个，支持 192.168.31.* 通配）</label>
+      <textarea class="input" id="zgw-allow" rows="4" placeholder="192.168.31.101"></textarea>
+    </div>
+    <div class="hint">开启后，领到的体验包额度变成本机的一个补全接口——10Router 建一个 anthropic-compatible 节点指向本机 /gateway 即可调用（需要桌面版，隐藏窗口过验证码）。白名单内的机器<b>免密直连</b>：10Router 的 zcode-free 本就是免授权供应商，把 10Router 服务地址的 IP 加白即可；白名单外的请求一律拒绝。本机回环（127.0.0.1）始终放行。</div>
+    <div class="modal-actions"><button class="btn" data-close>取消</button><button class="btn primary" id="zgw-ok">保存</button></div>
+  </div>
+</div>
+
 <input type="file" id="file-input" accept=".json,application/json" style="display:none">
 <div id="toast"></div>
 
@@ -542,7 +670,7 @@ const I = {
 
 const $ = (id) => document.getElementById(id);
 const state = { accounts: [], quotas: {}, status: null, busy: {}, view: 'dash', region: '', addProduct: '' };
-const VIEWS = ['dash', 'qoder', 'workbuddy', 'zcode', 'mirasim', 'tenrouter'];
+const VIEWS = ['dash', 'qoder', 'workbuddy', 'zcode', 'mirasim', 'catpaw', 'trae', 'tenrouter'];
 // 10Router 集成：config 来自 /api/tenrouter，quotas 来自 /api/tenrouter/quotas
 const tr = { config: null, quotas: null, error: null, loading: false, syncing: false };
 const PRODUCTS = [
@@ -550,6 +678,8 @@ const PRODUCTS = [
   { id: 'workbuddy', label: 'WorkBuddy' },
   { id: 'zcode', label: 'ZCode' },
   { id: 'mirasim', label: 'mirasim' },
+  { id: 'catpaw', label: '妙手' },
+  { id: 'trae', label: 'Trae' },
 ];
 const prodLabel = (id) => (PRODUCTS.find((x) => x.id === id) || { label: id }).label;
 
@@ -559,16 +689,25 @@ const COMPONENTS = [
   { id: 'workbuddy', label: 'WorkBuddy' },
   { id: 'zcode', label: 'ZCode' },
   { id: 'mirasim', label: 'mirasim' },
+  { id: 'catpaw', label: '妙手' },
+  { id: 'trae', label: 'Trae' },
   { id: 'tenrouter', label: '10Router' },
 ];
 const HIDDEN_COMP_KEY = 'qd_hidden_components';
+const DEFAULT_HIDDEN_COMP = ['catpaw'];   // 妙手默认收起，右上角设置里可打开
 state.hidden = (() => {
+  let list = DEFAULT_HIDDEN_COMP;
+  const raw = localStorage.getItem(HIDDEN_COMP_KEY);
+  if (raw !== null) { try { list = JSON.parse(raw) || []; } catch { list = []; } }
+  // 一次性迁移：旧偏好是在「妙手默认隐藏」之前存的，补上默认值；此后完全尊重手动选择
+  if (raw !== null && localStorage.getItem('qd_hidden_comp_migrated') !== '1') {
+    list = [...new Set([...list, ...DEFAULT_HIDDEN_COMP])];
+    try { localStorage.setItem('qd_hidden_comp_migrated', '1'); } catch {}
+  }
   const set = new Set();
-  try {
-    for (const v of JSON.parse(localStorage.getItem(HIDDEN_COMP_KEY) || '[]')) {
-      if (COMPONENTS.some((c) => c.id === v)) set.add(v);
-    }
-  } catch {}
+  for (const v of list) {
+    if (COMPONENTS.some((c) => c.id === v)) set.add(v);
+  }
   return set;
 })();
 const compVisible = (id) => !state.hidden.has(id);
@@ -671,10 +810,14 @@ const PROV = {
   'workbuddy-intl': { prod: 'workbuddy', prodLabel: 'WorkBuddy', region: '国际版', cls: 'intl' },
   zcode: { prod: 'zcode', prodLabel: 'ZCode', region: '', cls: '' },
   mirasim: { prod: 'mirasim', prodLabel: 'mirasim', region: '', cls: '' },
+  catpaw: { prod: 'catpaw', prodLabel: '妙手', region: '', cls: '' },
+  trae: { prod: 'trae', prodLabel: 'Trae', region: '', cls: '' },
 };
-// 支持每日签到的产品（ZCode / mirasim 额度靠活动或滚动窗口，不做签到）
-const CHECKIN_PRODUCTS = new Set(['qoder', 'workbuddy']);
-const CLIENT_LABEL = { workbuddy: 'WorkBuddy', zcode: 'ZCode', mirasim: 'mirasim' };
+// 支持每日签到的产品（ZCode / mirasim / 妙手 额度靠套餐或滚动窗口发放，不做签到）
+const CHECKIN_PRODUCTS = new Set(['qoder', 'workbuddy', 'trae']);
+const CLIENT_LABEL = { qoder: 'Qoder', workbuddy: 'WorkBuddy', zcode: 'ZCode', mirasim: 'mirasim', catpaw: '妙手', trae: 'Trae' };
+// 额度单位为 Credits/时长而非「积分」口径的产品（不计入剩余积分合计）
+const CREDIT_VIEWS = new Set(['zcode', 'mirasim', 'catpaw']);
 const provOf = (p) => PROV[p] || { prod: 'qoder', prodLabel: p, region: '', cls: '' };
 const provBadges = (p, regionOnly, flavor) => {
   const v = provOf(p);
@@ -720,8 +863,8 @@ function toast(msg, ok) {
 }
 
 // ── API ──
-// 面板访问密码（fnOS / 设置了 CREDITDADDY_PASSWORD 时需要）。内存里的值优先：面板嵌在飞牛桌面窗口里是跨域 iframe，
-// 浏览器拦截第三方存储时 localStorage 不可用，只靠它会每个请求都 401
+// 面板访问密码（在「设置」里开启，或 fnOS / CREDITDADDY_PASSWORD 环境变量注入时需要）。内存里的值优先：
+// 面板嵌在飞牛桌面窗口里是跨域 iframe，浏览器拦截第三方存储时 localStorage 不可用，只靠它会每个请求都 401
 let memKey = null;
 function getKey() {
   if (memKey !== null) return memKey;
@@ -738,7 +881,8 @@ function promptKey(invalid) {
     keyPrompt = uiPrompt('输入面板访问密码', '', {
       type: 'password', okText: '进入',
       message: (invalid ? '密码不正确，请重新输入。\n' : '')
-        + 'fnOS：安装时设置的面板访问密码（忘了可以在 fnOS「应用设置」里重设）。\n命令行部署：环境变量 CREDITDADDY_PASSWORD 的值。',
+        + '面板访问密码在右上角「设置」里管理。\n'
+        + 'fnOS：安装向导设置的密码（忘了可在 fnOS「应用设置」里重设）。\n命令行部署：环境变量 CREDITDADDY_PASSWORD 的值。',
     }).then((k) => { keyPrompt = null; if (k === null || !k.trim()) return false; setKey(k.trim()); return true; });
   }
   return keyPrompt;
@@ -766,6 +910,16 @@ async function api(p, opts = {}, attempt = 0) {
 // 10Router 汇总卡「隐藏无额度」偏好（面板本地）
 try { state.trHideEmpty = localStorage.getItem('qd_tr_hideempty') === '1'; } catch (e) {}
 
+// 面板访问密码状态（/api/settings）。boot 后异步拉取，供设置弹窗显示
+state.sec = { enabled: false, loaded: false };
+async function loadSettings() {
+  try {
+    const d = await api('/api/settings');
+    state.sec = { enabled: Boolean(d.panelKeyEnabled), loaded: true };
+    if (!d.panelKeyEnabled) setKey('');   // 关闭后清掉本地缓存的旧密钥
+  } catch (e) { /* 401（密码开启但未输入）等状态由 promptKey 流程处理 */ }
+}
+
 // ── 主题 ──
 function applyTheme(t) {
   document.documentElement.dataset.theme = t;
@@ -870,6 +1024,15 @@ function creditHtml(a) {
   if (q.error) return '<div class="credit-line"><span class="dim" title="' + esc(q.error) + '">积分读取失败：' + esc(q.error.slice(0, 40)) + '</span></div><div class="bar"></div>';
   if (q.empty) return '<div class="credit-line"><span class="dim">无有效套餐（仅免费额度）</span></div><div class="bar"></div>';
 
+  // 妙手：Credits 钱包余额 + 当前版本（体验版 / 专业版），无「总量」口径，不画水位条
+  if (a.product === 'catpaw') {
+    const planBadge = q.plan ? '<span class="badge">' + esc(q.plan) + '</span>' : '';
+    const expHtml = q.planExpiresAt ? '<span class="dim">' + fmtTime(q.planExpiresAt).slice(0, 10) + ' 到期</span>'
+      : q.nextRefreshAt ? '<span class="dim">' + fmtTime(q.nextRefreshAt).slice(0, 10) + ' 下次刷新</span>' : '';
+    return '<div class="credit-line"><span class="credit"><span class="lbl">可用额度</span><b>' + fmtNum(q.remaining) + '</b>Credits</span>'
+      + '<span class="credit dim">' + planBadge + (planBadge && expHtml ? ' · ' : '') + expHtml + '</span></div>';
+  }
+
   // 多窗口配额体系（mirasim 等）：每个窗口平等等权，独立一行带分散对齐的名称、数值与三档细水位条
   if (a.product === 'mirasim' && q.parts && q.parts.length) {
     const isExhausted = q.exceeded || (q.remaining <= 0);
@@ -940,13 +1103,14 @@ function cardHtml(a) {
     + '<span class="name" data-act="rename" title="点击修改备注名">' + esc(a.name || '(未命名)') + '</span>'
     + provBadges(a.provider, true, a.flavor)
     + (isCurrent ? '<span class="pill cur" title="' + esc(CLIENT_LABEL[a.product] || '') + ' 客户端当前登录的账号">客户端当前</span>' : '')
+    + (a.product === 'zcode' && isGatewayCurrent(a) ? '<span class="pill gw" title="体验包接口最近一次补全用的账号（多账号时按轮换自动选择，与客户端登录无关）">接口使用中</span>' : '')
     + (a.isPat ? '<span class="badge">PAT</span>' : '')
     + (a.verified === false ? '<span class="pill fail">token 无效</span>' : '')
     + (st.text ? '<span class="pill ' + st.cls + '" title="' + esc(a.lastResult ? fmtTime(a.lastResult.at) + ' ' + (a.lastResult.message || a.lastResult.status) : '') + '">' + esc(st.text) + '</span>' : '')
     + '</div><div class="ops">'
     + (a.product === 'zcode' ? '<button class="icon-btn" data-act="claim" title="活动领取（billing/preview → claim，可能需过一次验证码）">' + I.gift + '</button>' : '')
     + (canCheckin ? '<button class="icon-btn' + (state.busy[a.id] ? ' busy' : '') + '" data-act="checkin" title="' + (a.provider === 'workbuddy-intl' ? '发送活跃请求' : '立即领取') + '">' + (state.busy[a.id] ? I.refresh : I.play) + '</button>' : '')
-    + (CLIENT_LABEL[a.product] && a.canSwitch && !isCurrent && st.cls !== 'fail' ? '<button class="icon-btn" data-act="switch" title="切换 ' + CLIENT_LABEL[a.product] + ' 客户端到此账号">' + I.swap + '</button>' : '')
+    + (a.canSwitch && !isCurrent && st.cls !== 'fail' ? '<button class="icon-btn" data-act="switch" title="切换 ' + (CLIENT_LABEL[a.product] || prodLabel(a.product)) + ' 客户端到此账号">' + I.swap + '</button>' : '')
     + '<button class="icon-btn" data-act="quota" title="刷新积分">' + I.refresh + '</button>'
     + '<button class="icon-btn del" data-act="del" title="删除（点两次确认）">' + I.trash + '</button>'
     + '</div></div>'
@@ -963,23 +1127,36 @@ function cardHtml(a) {
 
 const isDone = (a) => Boolean(state.status && state.status.todayDone && state.status.todayDone[a.id] === state.status.today);
 const ofProduct = (prod) => state.accounts.filter((a) => a.product === prod);
-const currentUidOf = (prod) => state.status && (prod === 'workbuddy' ? state.status.workbuddyCurrentUid : prod === 'zcode' ? state.status.zcodeCurrentUid : null);
-// 客户端当前登录判定：WorkBuddy / mirasim 按 uid；ZCode 按 uid 或 email（早期导入的账号可能只存了其中一个）
+const currentUidOf = (prod) => state.status && (prod === 'workbuddy' ? state.status.workbuddyCurrentUid : prod === 'zcode' ? state.status.zcodeCurrentUid : prod === 'catpaw' ? state.status.catpawCurrentUid : prod === 'trae' ? state.status.traeCurrentUid : null);
+/** 接口使用中判定：体验包接口最近一次补全用的账号（lastAccount 记的是 name || uid || id） */
+function isGatewayCurrent(a) {
+  const last = state.zGatewayStats && state.zGatewayStats.lastAccount;
+  return Boolean(last) && (a.name === last || a.uid === last || a.id === last);
+}
+
+// 客户端当前登录判定：WorkBuddy / mirasim / 妙手 按 uid；ZCode 按 uid 或 email（早期导入的账号可能只存了其中一个）
 function isClientCurrent(a) {
   const s = state.status;
   if (!s) return false;
   if (a.product === 'workbuddy') return Boolean(a.uid && s.workbuddyCurrentUid && s.workbuddyCurrentUid === a.uid);
+  if (a.product === 'qoder') {
+    const cur = s.qoderCurrent || {};
+    return Boolean(a.uid && cur[a.provider] && String(cur[a.provider]) === String(a.uid));
+  }
   if (a.product === 'mirasim') return Boolean(a.uid && s.mirasimCurrentUid && s.mirasimCurrentUid === a.uid);
+  if (a.product === 'catpaw') return Boolean(a.uid && s.catpawCurrentUid && s.catpawCurrentUid === a.uid);
+  if (a.product === 'trae') return Boolean(a.uid && s.traeCurrentUid && s.traeCurrentUid === a.uid);
   if (a.product === 'zcode') {
     const id = s.zcodeCurrentIdentity;
     return Boolean(id && ((a.uid && id.uid != null && String(id.uid) === String(a.uid)) || (a.email && id.email && id.email === a.email)));
   }
   return false;
 }
-// 积分合计：只统计「积分」口径（ZCode 是 token 额度，单位不同，不相加）
+// 积分合计：只统计「积分」口径（ZCode / 妙手是 token 额度或 Credits 余额，单位不同，不相加）
 function creditSum(list) {
   let sum = 0, known = 0, loading = 0;
   for (const a of list) {
+    if (CREDIT_VIEWS.has(a.product)) continue;
     const q = state.quotas[a.id];
     if (!q) { loading++; continue; }
     if (q.error) continue;
@@ -990,6 +1167,8 @@ function creditSum(list) {
 }
 
 function render() {
+  $('z-actions').style.display = 'none';   // 兜底：切到仪表盘 / 10Router 时 renderProd 不跑，先藏起来
+  $('t-actions').style.display = 'none';
   for (const p of PRODUCTS) $('cnt-' + p.id).textContent = ofProduct(p.id).length;
   $('cnt-tenrouter').textContent = tr.quotas ? tr.quotas.connections.length : tr.config && tr.config.configured ? '…' : '–';
   if (state.view === 'dash') renderDash();
@@ -1002,6 +1181,8 @@ const EMPTY_TIP = {
   workbuddy: '还没有 WorkBuddy 账号。<br>点「添加账号」可读取本机 WorkBuddy 客户端（当前 + 历史会话），或用浏览器登录 WorkBuddy / CodeBuddy 账号。',
   zcode: '还没有 ZCode 账号。<br>点「添加账号」可读取本机 ZCode 客户端已登录的账号，或用浏览器登录（BigModel / Z.ai），多个账号可一键切换。',
   mirasim: '还没有 mirasim 账号。<br>点「添加账号」可读取本机 mirasim 客户端当前登录的账号（本地解密，token 不出本机）。',
+  catpaw: '还没有妙手账号。<br>点「添加账号」可读取本机妙手（美团 CatPaw）客户端当前登录的账号（本地解密凭据，token 不出本机）。',
+  trae: '还没有 Trae 账号。<br>点「添加账号 → 本机导入」可读取本机 Trae 客户端当前登录的账号（本地解密 storage.json 凭据，token 不出本机）。多个账号需先在 Trae 里分别登录并逐个导入。',
 };
 
 function renderProd() {
@@ -1018,19 +1199,19 @@ function renderProd() {
     // 国内版 = 每日签到送积分；国际版 = 保持活跃（活跃不等于必有奖励）
     const cnAcc = acc.filter((a) => a.provider === 'workbuddy');
     const intlAcc = acc.filter((a) => a.provider === 'workbuddy-intl');
-    $('s-done-wrap').innerHTML = (cnAcc.length ? '<div class="stat"><span>领取（国内）</span><strong>' + cnAcc.filter(isDone).length + ' / ' + cnAcc.length + '</strong></div><div class="divider"></div>' : '')
-      + (intlAcc.length ? '<div class="stat"><span>活跃（国际）</span><strong>' + intlAcc.filter(isDone).length + ' / ' + intlAcc.length + '</strong></div><div class="divider"></div>' : '');
+    $('s-done-wrap').innerHTML = (cnAcc.length ? '<div class="stat"><span title="国内版每日签到送积分">领取（国内）</span><strong>' + cnAcc.filter(isDone).length + ' / ' + cnAcc.length + '</strong></div><div class="divider"></div>' : '')
+      + (intlAcc.length ? '<div class="stat"><span title="国际版定期发送活跃请求保持资格；活跃不等于必有奖励">活跃（国际）</span><strong>' + intlAcc.filter(isDone).length + ' / ' + intlAcc.length + '</strong></div><div class="divider"></div>' : '');
   } else {
     // 从 WorkBuddy 页切回来时 s-done 可能被 innerHTML 换没了，先重建结构再写值
     if (!$('s-done')) $('s-done-wrap').innerHTML = '<div class="stat"><span>今日已领</span><strong id="s-done"></strong></div><div class="divider"></div>';
     $('s-done').textContent = acc.filter(isDone).length + ' / ' + acc.length;
   }
   const c = creditSum(acc);
-  $('s-credits-label').textContent = prod === 'zcode' || prod === 'mirasim' ? '有效套餐' : '剩余积分';
-  $('s-credits').textContent = (prod === 'zcode' || prod === 'mirasim')
+  $('s-credits-label').textContent = CREDIT_VIEWS.has(prod) ? '有效套餐' : '剩余积分';
+  $('s-credits').textContent = CREDIT_VIEWS.has(prod)
     ? acc.filter((a) => { const q = state.quotas[a.id]; return q && !q.error && !q.empty; }).length + ' / ' + acc.length
-    : c.known ? fmtNum(c.sum) : '-';
-  const hasRegions = prod !== 'zcode' && prod !== 'mirasim';
+    : c.loading ? '…' : (c.known ? fmtNum(c.sum) : '-');
+  const hasRegions = !CREDIT_VIEWS.has(prod) && prod !== 'trae';   // Trae 不分国际 / 国内版
   $('region').style.display = hasRegions ? '' : 'none';
   $('region-div').style.display = hasRegions ? '' : 'none';
   document.querySelectorAll('#region button').forEach((x) => x.classList.toggle('active', x.dataset.r === state.region));
@@ -1039,10 +1220,40 @@ function renderProd() {
     const hasIntl = acc.some((a) => a.provider === 'workbuddy-intl');
     $('btn-checkin').innerHTML = I.play + (prod === 'workbuddy' && hasIntl ? '领取 / 活跃全部' : '领取全部 ' + prodLabel(prod));
   }
+  // 顶栏产品专属入口：ZCode 设置组、Trae 打开客户端，带状态灯（运行中绿点呼吸）
+  const dot = (on, pulse) => '<span class="dot' + (on ? ' on' : '') + (on && pulse ? ' pulse' : '') + '"></span>';
+  $('z-actions').style.display = prod === 'zcode' ? 'contents' : 'none';
+  if (prod === 'zcode') {
+    const acOn = state.zAutoClaim === true;
+    const gwOn = state.zGateway === true;
+    $('zt-ac').innerHTML = dot(acOn) + '自动领取';
+    $('zt-ac').title = acOn ? '自动领取运行中——点我调整轮询周期 / 运行时长' : '自动领取已关闭——点我设置轮询周期与运行时长并开启';
+    $('zt-net').innerHTML = '出口：<b style="font-weight:700;color:var(--text)">' + (state.zProxyFirst === true ? '代理优先' : '直连优先') + '</b>';
+    $('zt-net').title = '网络出口：直连 / 代理顺序与代理地址';
+    $('zt-gw').innerHTML = dot(gwOn) + '接口' + (gwOn && state.zGatewayLan === true ? '·局域网' : '');
+    $('zt-gw').title = '体验包接口：开关、局域网开放与 IP 白名单';
+    const zc = (state.status && state.status.zcodeClient) || {};
+    const canOpen = zc.installed && window.creditdaddy && typeof window.creditdaddy.openZcodeClient === 'function';
+    $('zt-open').style.display = canOpen ? '' : 'none';
+    if (canOpen) {
+      $('zt-open').innerHTML = dot(zc.running === true, true) + '打开客户端';
+      $('zt-open').title = zc.running ? 'ZCode 客户端运行中，点我唤到前台' : 'ZCode 客户端未运行，点我启动';
+    }
+  }
+  $('t-actions').style.display = prod === 'trae' ? 'contents' : 'none';
+  if (prod === 'trae') {
+    const tc = (state.status && state.status.traeClient) || {};
+    const canOpen = tc.installed && window.creditdaddy && typeof window.creditdaddy.openTraeClient === 'function';
+    $('tt-open').style.display = canOpen ? '' : 'none';
+    if (canOpen) {
+      $('tt-open').innerHTML = dot(tc.running === true, true) + '打开客户端';
+      $('tt-open').title = tc.running ? 'Trae 客户端运行中，点我唤到前台' : 'Trae 客户端未运行，点我启动';
+    }
+  }
 }
 
-function kpi(label, value, sub) {
-  return '<div class="kpi"><div class="kpi-label">' + label + '</div><div class="kpi-value">' + value + '</div><div class="kpi-sub" title="' + esc(sub.replace(/<[^>]+>/g, '')) + '">' + sub + '</div></div>';
+function kpi(label, value, sub, labelTitle) {
+  return '<div class="kpi"><div class="kpi-label"' + (labelTitle ? ' title="' + esc(labelTitle) + '"' : '') + '>' + label + '</div><div class="kpi-value">' + value + '</div><div class="kpi-sub" title="' + esc(sub.replace(/<[^>]+>/g, '')) + '">' + sub + '</div></div>';
 }
 const meter = (done, total) => '<div class="meter"><span style="width:' + (total ? Math.round(done / total * 100) : 0) + '%"></span></div>';
 
@@ -1068,8 +1279,9 @@ function renderDash() {
         : done + ' <small>/ ' + signable.length + '</small>',
       !signable.length ? '暂无可领取的账号'
         : (doneDom === domAcc.length && doneIntl === intlAcc.length ? (intlAcc.length ? '今天全部完成（国际为活跃请求，不保证奖励）' : '今天全部签完')
-        : '待办 ' + (signable.length - done) + (failed ? ' · 失败 ' + failed : '')))
-    + kpi('剩余积分', credit.known ? fmtNum(credit.sum) : '-', credit.loading ? '读取中（' + credit.loading + ' 个账号）…' : creditByProd)
+        : '待办 ' + (signable.length - done) + (failed ? ' · 失败 ' + failed : '')),
+      '领取 = 国内版每日签到；活跃 = 国际版定期活跃请求（保持资格，不保证奖励）')
+    + kpi('剩余积分', credit.loading ? '…' : (credit.known ? fmtNum(credit.sum) : '-'), credit.loading ? '正在读取各账号额度…' : creditByProd)
     + kpi('下次自动领取', sch.ticking ? '领取中…' : sch.nextTickAt ? fmtTime(sch.nextTickAt).slice(11) : '-',
       sch.lastTick ? '上一轮 ' + fmtTime(sch.lastTick.at).slice(5) + ' · ' + esc(sch.lastTick.summary || '') : '每 ~2 小时一轮');
 
@@ -1103,6 +1315,11 @@ function renderDash() {
       const planned = list.filter((a) => { const q = state.quotas[a.id]; return q && !q.error && !q.empty; }).length;
       rows = '<span class="lbl">额度体系</span><span class="val dim">5h / 7d 滚动窗口</span>'
         + '<span class="lbl">有效套餐</span><span class="val">' + planned + ' / ' + list.length + '</span>';
+    } else if (p.id === 'catpaw') {
+      const withPlan = list.filter((a) => { const q = state.quotas[a.id]; return q && !q.error && q.plan; });
+      const credits = withPlan.reduce((s, a) => s + (Number(state.quotas[a.id].remaining) || 0), 0);
+      rows = '<span class="lbl">额度体系</span><span class="val dim">Credits 余额 + 套餐版本</span>'
+        + (withPlan.length ? '<span class="lbl">可用额度</span><span class="val">' + fmtNum(credits) + ' Credits（' + esc(withPlan.map((a) => state.quotas[a.id].plan).join(' / ')) + '）</span>' : '');
     } else {
       const planned = list.filter((a) => { const q = state.quotas[a.id]; return q && !q.error && !q.empty; }).length;
       // ZCode 没有每日签到：不展示签到语义的行
@@ -1118,6 +1335,8 @@ function renderDash() {
       const live = cur ? esc(cur.name || cur.email || cur.uid)
         : zid && (zid.email || zid.uid || zid.username) ? '未导入的账号（' + esc(zid.email || zid.username || zid.uid) + '）'
         : p.id === 'mirasim' && s.mirasimCurrentUid ? '未导入的账号'
+        : p.id === 'catpaw' && s.catpawClient && s.catpawClient.signedIn && !list.some((a) => isClientCurrent(a)) ? '未导入的账号'
+        : p.id === 'trae' && s.traeClient && s.traeClient.signedIn && !list.some((a) => isClientCurrent(a)) ? '未导入的账号'
         : (p.id === 'workbuddy' && s.workbuddyCurrentUid ? '未导入的账号' : '—');
       rows += '<span class="lbl">客户端当前</span><span class="val">' + live + '</span>';
     }
@@ -1190,22 +1409,28 @@ function renderStatus() {
   // 产品相关提示只在对应标签页出现
   const hasIntl = state.view === 'qoder' && state.region !== 'cn' && state.accounts.some((a) => a.provider === 'qoder');
   const n = $('notice');
-  n.classList.toggle('info', state.view === 'zcode' || state.view === 'mirasim' || (hasIntl && Boolean(s.riskIdentity)));
-  if (state.view === 'mirasim') {
+  n.classList.toggle('info', state.view === 'zcode' || state.view === 'mirasim' || state.view === 'catpaw' || state.view === 'trae' || (hasIntl && Boolean(s.riskIdentity)));
+  if (state.view === 'trae') {
+    n.style.display = '';
+    n.innerHTML = '<div class="z-row"><span class="z-label">每日签到</span><span class="z-text">每日签到领约 150 通用积分（7 天有效，多资源包自动归并）。凭据由本机 Trae 客户端解密导入，支持多账号快照一键切换。</span></div>';
+  } else if (state.view === 'catpaw') {
+    n.style.display = '';
+    n.innerHTML = '妙手（美团 CatPaw）按套餐发放 Credits（体验版 / 专业版…），没有每日签到。凭据由妙手客户端登录管理：读取额度用本机解密出的登录 token 直连桌面网关，token 失效时到妙手客户端重新登录后再「本机导入」即可。'
+      + '多账号切换：写入本机凭据后重启妙手客户端即生效（切换会自动保存当前登录，不丢号）。'
+      + catpawClientChip(s);
+  } else if (state.view === 'mirasim') {
     n.style.display = '';
     n.innerHTML = 'mirasim（原生 AI 编程开发环境）额度按「平台额度」（5h 滚动窗口、7d 全局上限与分模型上限）分配。Token 约 1 小时过期，读取额度时会自动用 refreshToken 静默续期并同步回客户端，无需手动处理。'
       + '切换账号需要至少两个已导入的账号（当前登录 + 目标账号）：先在「添加账号 → 本机导入」把各账号分别导入，切换时当前登录会自动保存、目标账号写入客户端，桌面版切完自动重启 mirasim。'
       + mirasimClientChip(s);
   } else if (state.view === 'zcode') {
     n.style.display = '';
-    const pf = state.zProxyFirst === true;
-    const pu = state.zProxyUrl;
     const ac = state.zAutoClaim === true;
-    n.innerHTML = 'ZCode 没有每日签到，积分靠「活动领取」。打开「自动领取」后，每轮签到结束会轮询可领活动并尝试领取（桌面版静默过验证码，需要人工时弹验证码窗口）；平时保持关闭即可，活动期前再开。也可点卡片上的礼物图标手动领取。'
-      + ' <button class="btn" id="btn-zac" style="margin-left:6px" title="ZCode 活动自动轮询领取（每轮签到后执行一次）">' + (ac ? '自动领取：开' : '自动领取：关') + '</button>'
-      + ' <button class="btn" id="btn-znet" style="margin-left:4px" title="ZCode 上游接口的访问顺序：失败 / 被拦时自动回退另一条">出口：' + (pf ? '代理优先' : '直连优先') + '</button>'
-      + ' <button class="btn" id="btn-zproxy" style="margin-left:4px" title="设置 ZCode 出口用的 http 代理（留空则清除；不设置时使用 HTTPS_PROXY 环境变量）">代理：' + esc(pu || (state.zHasEnvProxy ? '环境变量' : '未设置')) + '</button>'
-      + zcodeClientChip(s);
+    const ziv = state.zClaimIntervalMin || 2;
+    const zwin = state.zClaimWindowMin === 0 ? 0 : (state.zClaimWindowMin || 60);
+    n.innerHTML = '<div class="z-row"><span class="z-label">活动领取</span><span class="z-text">活动包积分，每日 0 点左右刷新（无每日签到）。自动领取'
+      + (ac ? '每 ' + ziv + ' 分钟检查资格' + (zwin > 0 ? '，本次运行 ' + zwin + ' 分钟' : '，持续运行') : '未开启（右上角设置轮询计划）')
+      + '；礼物图标 = 手动临时领。</span></div>';
   } else if (hasIntl && !s.riskIdentity && umidOffer(s)) {
     n.style.display = '';
     const busy = s.umid.installing || umidBusy;
@@ -1224,15 +1449,6 @@ function renderStatus() {
   }
 }
 
-// ZCode 客户端状态芯片 + 「打开客户端」按钮（仅桌面版：面板里有 Electron 桥才显示按钮）
-function zcodeClientChip(s) {
-  const c = s.zcodeClient || {};
-  if (!c.installed) return ' <span class="dim">客户端：未安装</span>';
-  const canOpen = window.creditdaddy && typeof window.creditdaddy.openZcodeClient === 'function';
-  return ' <span class="dim">客户端：' + (c.running ? '运行中' : '未运行') + '</span>'
-    + (canOpen ? ' <button class="btn" id="btn-zopen" style="margin-left:4px" title="打开本机 ZCode 客户端">打开客户端</button>' : '');
-}
-
 // mirasim 客户端状态芯片 + 「打开客户端」按钮
 function mirasimClientChip(s) {
   const c = s.mirasimClient || {};
@@ -1242,6 +1458,16 @@ function mirasimClientChip(s) {
     + (canOpen ? ' <button class="btn" id="btn-miraopen" style="margin-left:4px" title="打开本机 Mirasim 客户端">打开客户端</button>' : '');
 }
 
+
+// 妙手客户端状态芯片 + 「打开客户端」按钮
+function catpawClientChip(s) {
+  const c = s.catpawClient || {};
+  if (!c.installed) return ' <span class="dim">客户端：未安装（本机导入 / 切换需要 Windows 妙手客户端）</span>';
+  const canOpen = window.creditdaddy && typeof window.creditdaddy.openCatpawClient === 'function';
+  return ' <span class="dim">客户端：' + (c.running ? '运行中' : '未运行') + (c.signedIn ? '' : ' · 未登录') + '</span>'
+    + (canOpen ? ' <button class="btn" id="btn-cpopen" style="margin-left:4px" title="打开本机妙手客户端">打开客户端</button>' : '');
+}
+
 // Qoder 设备身份组件（Linux / fnOS）
 const umidOffer = (s) => Boolean(s && s.umid && s.umid.supported && !s.umid.installed);
 let umidBusy = false;
@@ -1255,8 +1481,9 @@ async function installUmid() {
   await loadStatus(); render(); loadLogs();
 }
 $('notice').addEventListener('click', (e) => { if (e.target.closest('#btn-umid')) installUmid(); });
-$('notice').addEventListener('click', async (e) => {
-  if (e.target.closest('#btn-zopen')) {
+// 覆盖 #notice（各产品横幅）与 #z-actions（ZCode 工具栏按钮组）的点击
+document.addEventListener('click', async (e) => {
+  if (e.target.closest('#zt-open')) {
     try {
       const r = await window.creditdaddy.openZcodeClient();
       if (r && r.ok) toast('已启动 ZCode 客户端');
@@ -1272,33 +1499,53 @@ $('notice').addEventListener('click', async (e) => {
     } catch (err) { toast(String(err && err.message || err), false); }
     return;
   }
-  if (e.target.closest('#btn-zac')) {
+  if (e.target.closest('#btn-cpopen')) {
     try {
-      const r = await api('/api/zcode/net', { method: 'PUT', json: { autoClaim: state.zAutoClaim !== true } });
-      state.zAutoClaim = r.autoClaim;
-      renderStatus();
-      toast('ZCode 自动轮询领取：' + (r.autoClaim ? '已开启（每轮签到后执行）' : '已关闭'));
-    } catch (err) { toast(err.message, false); }
+      const r = await window.creditdaddy.openCatpawClient();
+      if (r && r.ok) toast('已启动妙手客户端');
+      else toast((r && r.error) || '无法打开妙手客户端', false);
+    } catch (err) { toast(String(err && err.message || err), false); }
     return;
   }
-  if (e.target.closest('#btn-znet')) {
+  if (e.target.closest('#tt-open')) {
     try {
-      const r = await api('/api/zcode/net', { method: 'PUT', json: { proxyFirst: state.zProxyFirst !== true } });
-      state.zProxyFirst = r.proxyFirst;
-      renderStatus();
-      toast('ZCode 出口：' + (r.proxyFirst ? '代理优先（直连兜底）' : '直连优先（代理兜底）'));
-    } catch (err) { toast(err.message, false); }
+      const r = await window.creditdaddy.openTraeClient();
+      if (r && r.ok) toast('已启动 Trae 客户端');
+      else toast((r && r.error) || '无法打开 Trae 客户端', false);
+    } catch (err) { toast(String(err && err.message || err), false); }
     return;
   }
-  if (e.target.closest('#btn-zproxy')) {
-    const cur = state.zProxyUrl || '';
-    const v = await uiPrompt('ZCode 出口代理（http://host:port，支持口令 http://user:pass@host:port）\n留空 = 清除，退回 HTTPS_PROXY 环境变量', cur, { okText: '保存' });
-    if (v === null) return;
-    try {
-      await api('/api/zcode/net', { method: 'PUT', json: { proxyUrl: v.trim() } });
-      await loadZNet(); renderStatus();
-      toast(v.trim() ? '代理已保存' : '代理已清除');
-    } catch (err) { toast(err.message, false); }
+  if (e.target.closest('#zt-ac')) {
+    // 自动领取计划弹窗：周期 / 运行时长由用户决定
+    $('zac-interval').value = state.zClaimIntervalMin || 2;
+    $('zac-window').value = state.zClaimWindowMin === 0 ? 0 : (state.zClaimWindowMin || 60);
+    $('zac-off').style.display = state.zAutoClaim === true ? '' : 'none';
+    $('zac-ok').textContent = state.zAutoClaim === true ? '保存' : '保存并启用';
+    openModal('m-zac');
+    return;
+  }
+  if (e.target.closest('#zt-gw')) {
+    // 体验包接口弹窗：开关 + 局域网 + 白名单一次设置；白名单默认预填 10Router 服务地址的主机
+    $('zgw-on').checked = state.zGateway === true;
+    $('zgw-lan').checked = state.zGatewayLan === true;
+    const allow = Array.isArray(state.zGatewayAllow) ? state.zGatewayAllow : [];
+    $('zgw-allow').value = (allow.length ? allow : (state.zGatewaySuggest ? [state.zGatewaySuggest] : [])).join('\n');
+    const st = state.zGatewayStats;
+    $('zgw-url').innerHTML = '接口地址 <code>POST http://127.0.0.1:' + location.port + '/gateway/v1/messages</code>（局域网开放时把 127.0.0.1 换成本机 IP）'
+      + (st && st.lastCallAt
+        ? '<br>最近调用 ' + esc(String(st.lastCallAt).slice(11, 19)) + ' · 共 ' + st.calls + ' 次' + (st.lastAccount ? ' · 最后用号 ' + esc(st.lastAccount) : '')
+        : '<br>尚未有调用');
+    syncZgwLanFields();
+    openModal('m-zgw');
+    return;
+  }
+  if (e.target.closest('#zt-net')) {
+    // 出口弹窗：顺序 + 代理地址一起保存；代理只回填到 placeholder（脱敏），留空即清除
+    (state.zProxyFirst === true ? $('znet-proxy') : $('znet-direct')).checked = true;
+    $('znet-url').value = '';
+    $('znet-url').placeholder = state.zProxyUrl || (state.zHasEnvProxy ? '跟随环境变量 HTTPS_PROXY' : 'http://192.168.31.101:7890');
+    openModal('m-znet');
+    return;
   }
 });
 async function loadZNet() {
@@ -1307,8 +1554,22 @@ async function loadZNet() {
     state.zProxyFirst = d.proxyFirst === true;
     state.zProxyUrl = d.proxyUrlMasked || null;
     state.zAutoClaim = d.autoClaim === true;
+    state.zClaimIntervalMin = d.claimIntervalMin;
+    state.zClaimWindowMin = d.claimWindowMin;
     state.zHasEnvProxy = d.hasEnvProxy === true;
-    if (state.view === 'zcode') renderStatus();
+    if (state.view === 'zcode') { renderStatus(); render(); }
+  } catch (e) {}
+}
+async function loadZGateway() {
+  try {
+    const d = await api('/api/zcode-gateway');
+    state.zGateway = d.enabled === true;
+    state.zGatewayLan = d.lan === true;
+    state.zGatewayAllow = d.allow || [];
+    state.zGatewaySuggest = d.suggestAllow || '';
+    state.zGatewayHasCaptcha = d.hasCaptcha === true;
+    state.zGatewayStats = d.stats || null;
+    if (state.view === 'zcode') { renderStatus(); render(); }
   } catch (e) {}
 }
 
@@ -1441,7 +1702,7 @@ function trCardHtml(c) {
         + trPacksHtml(c, packs);
     }
   }
-  return '<div class="tr-card' + (c.isActive ? '' : ' off') + '" draggable="true" data-id="' + esc(c.id) + '" data-vendor="' + esc(c.providerName || c.provider || '') + '"><div class="row1"><div class="name-group">'
+  return '<div class="tr-card' + (c.isActive ? '' : ' off') + (body && body.startsWith('<div class="msg') ? ' flat' : '') + '" draggable="true" data-id="' + esc(c.id) + '" data-vendor="' + esc(c.providerName || c.provider || '') + '"><div class="row1"><div class="name-group">'
     + '<span class="badge prod tenrouter">' + esc(c.providerName) + '</span>'
     + (TR_REGION[c.provider] ? '<span class="badge ' + TR_REGION[c.provider][1] + '">' + TR_REGION[c.provider][0] + '</span>' : '')
     + '<span class="tr-name" title="' + esc([c.name, c.email].filter(Boolean).join(' · ')) + '">' + esc(who) + '</span>'
@@ -1486,74 +1747,51 @@ function trVendorCardHtml(g) {
   const splitOf = items.map((x) => ({ x, s: splitQuotas(x) }));
   // Total Points / 含 Cycle|Capacity 的包是全包汇总：连接级聚合跳过它们，避免与子包重复计数
   const isAgg = (q) => isAggregatePack(q && q.name);
-  const primaries = splitOf.filter(({ s }) => s.primary && !isAgg(s.primary)).map(({ s }) => s.primary);
-  let primary = null;
-  if (primaries.length) {
-    const name = primaries[0].name;
-    const same = primaries.filter((p) => p.name === name);
-    const total = same.reduce((n, p) => n + (p.total > 0 ? p.total : 0), 0);
-    // 源数据本身是百分比口径（percentScale / remainingPercentage）→ 聚合也用 %（反重力这类窗口间平等）
-    const isPct = same[0].percentScale || Number.isFinite(same[0].remainingPercentage) || !(total > 0);
-    if (isPct) {
-      // 限时百分比窗口（如 Claude 5h）：跨连接取平均百分比，而不是加总
-      const pcts = same.map((p) => quotaPct(p)).filter((x) => x !== null);
-      primary = {
-        name,
-        total: 0,
-        remaining: 0,
-        used: 0,
-        unit: '',
-        percentScale: true,
-        remainingPercentage: pcts.length ? pcts.reduce((a, b) => a + b, 0) / pcts.length : null,
-        recurring: same[0].recurring,
-        resetAt: same.map((p) => p.resetAt).filter(Boolean).sort()[0] || null,
-      };
-    } else {
-      primary = {
-        name,
-        total,
-        remaining: same.reduce((n, p) => n + quotaRemaining(p), 0),
-        used: same.reduce((n, p) => n + (p.used || 0), 0),
-        unit: same[0].unit || '',
-        percentScale: same[0].percentScale === true,
-        recurring: same[0].recurring,
-        resetAt: same.map((p) => p.resetAt).filter(Boolean).sort()[0] || null,
-      };
-    }
+  // 非包行按「名称」归并求和，不论它在该连接卡里扮演主额度还是窗口：各连接主行
+  // 名称不一致时（Qoder CN 有的账号有 Plan Credits 行、有的没有），只按第一行的
+  // 名字取主行会把其余连接的主行静默丢掉。
+  // detailOnly / summarizesDetail：10Router 新版把汇总行拆出的逐包明细行（每资源包
+  // 一条）——父行已含其数值，供应商级聚合跳过，避免重复计数。
+  const isDetail = (q) => q && q.detailOnly === true;
+  let headlineName = null;
+  for (const { s } of splitOf) {
+    if (s.primary && !isAgg(s.primary) && !isDetail(s.primary)) { headlineName = s.primary.name; break; }
   }
-
-  // 周期窗口：同名加总；本身是百分比口径的行（percentScale / remainingPercentage）按 % 均值聚合
-  const winMap = new Map();
+  const rowMap = new Map();
   const packs = [];
   for (const { s } of splitOf) {
-    for (const q of s.windows.filter((x) => !isAgg(x))) {
-      if (!winMap.has(q.name)) winMap.set(q.name, { name: q.name, total: 0, rem: 0, anyTotal: false, pctScale: false, resetAt: null, pcts: [] });
-      const w = winMap.get(q.name);
+    for (const q of [s.primary, ...s.windows]) {
+      if (!q || isAgg(q) || isDetail(q)) continue;
+      if (!rowMap.has(q.name)) rowMap.set(q.name, { name: q.name, total: 0, rem: 0, anyTotal: false, pctScale: false, resetAt: null, pcts: [], unit: '' });
+      const w = rowMap.get(q.name);
       const isPctRow = q.percentScale || Number.isFinite(q.remainingPercentage);
       if (isPctRow) w.pctScale = true;
       const pct = quotaPct(q);
       if (pct !== null) w.pcts.push(pct);
-      if (!isPctRow && q.total > 0) { w.anyTotal = true; w.total += q.total; w.rem += quotaRemaining(q); }
+      if (!isPctRow && q.total > 0) { w.anyTotal = true; w.total += q.total; w.rem += quotaRemaining(q); if (!w.unit) w.unit = q.unit || ''; }
       if (q.resetAt && (!w.resetAt || String(q.resetAt) < String(w.resetAt))) w.resetAt = q.resetAt;
     }
-    packs.push(...s.packs.filter((x) => !isAgg(x)));
+    packs.push(...s.packs.filter((x) => !isAgg(x)));   // 明细行照常进「积分包×N」简讯：只作计数与剩余提示，不参与行求和
   }
-  const wins = [...winMap.values()];
-  const alivePacks = packs.filter((q) => quotaRemaining(q) > 0);
-  const packRem = alivePacks.reduce((n, q) => n + quotaRemaining(q), 0);
-
-  // 周 / 月度等窗口额度也给进度条：百分比口径显示 % 均值；固定额度加总数字
+  // 百分比口径（限时窗口）→ % 均值；固定额度 → 数字加总；无总量 → % 兜底
   const avgPct = (arr) => (arr.length ? arr.reduce((a, b) => a + b, 0) / arr.length : null);
-  const winRows = wins.map((w) => trRow(w.pctScale
+  const toRowObj = (w) => (w.pctScale
     ? { name: w.name, total: 0, remainingPercentage: avgPct(w.pcts), percentScale: true, resetAt: w.resetAt, recurring: true }
     : (w.anyTotal
-      ? { name: w.name, total: w.total, remaining: w.rem, used: w.total - w.rem, unit: '', percentScale: false, resetAt: w.resetAt, recurring: true }
-      : { name: w.name, total: 0, remainingPercentage: avgPct(w.pcts), percentScale: true, resetAt: w.resetAt, recurring: true }))).join('');
+      ? { name: w.name, total: w.total, remaining: w.rem, used: w.total - w.rem, unit: w.unit, percentScale: false, resetAt: w.resetAt, recurring: true }
+      : { name: w.name, total: 0, remainingPercentage: avgPct(w.pcts), percentScale: true, resetAt: w.resetAt, recurring: true }));
+  const headline = headlineName ? rowMap.get(headlineName) : null;
+  if (headline) rowMap.delete(headlineName);
+  const primary = headline ? toRowObj(headline) : null;
+  const others = [...rowMap.values()];
+  const winRows = others.map((w) => trRow(toRowObj(w))).join('');
 
+  const alivePacks = packs.filter((q) => quotaRemaining(q) > 0);
+  const packRem = alivePacks.reduce((n, q) => n + quotaRemaining(q), 0);
   const briefs = [];
   if (alivePacks.length) briefs.push('积分包×' + alivePacks.length + ' 剩 ' + fmtNum(packRem));
   else if (packs.length) briefs.push('积分包已用完');
-  const hasQuotas = Boolean(primary || wins.length || packs.length);
+  const hasQuotas = Boolean(primary || others.length || packs.length);
   let quotaHtml;
   if (errs === items.length) {
     quotaHtml = '<div class="msg err">全部连接查询失败</div>';
@@ -1567,7 +1805,7 @@ function trVendorCardHtml(g) {
         ? '<div class="tr-summary dim"><span class="tr-sum-txt">' + briefs.join(' · ') + '</span></div>'
         : '');
   }
-  return '<div class="tr-card" draggable="true" data-vendor="' + esc(g.name) + '"><div class="row1"><div class="name-group">'
+  return '<div class="tr-card' + (quotaHtml && quotaHtml.startsWith('<div class="msg') ? ' flat' : '') + '" draggable="true" data-vendor="' + esc(g.name) + '"><div class="row1"><div class="name-group">'
     + '<span class="badge prod tenrouter">' + esc(g.name) + '</span>'
     + (TR_REGION[prov] ? '<span class="badge ' + TR_REGION[prov][1] + '">' + TR_REGION[prov][0] + '</span>' : '')
     + '<span class="badge">' + items.length + ' 个账号</span>'
@@ -1580,7 +1818,8 @@ function trSetupHtml() {
   return '<div class="setup"><h3>接入 10Router</h3>'
     + '<div class="hint">填 10Router 的地址和一个<b>虚拟 key</b>（10Router 仪表盘 → API Keys 创建的 sk-…），就能在这里：</div>'
     + '<div class="hint" style="margin:6px 0 12px">· 查看 10Router 里其他供应商（Claude / Codex / Kiro / GLM …）的额度卡片（需要 10Router 1.2.1+）<br>'
-    + '· 把本机 ZCode / OpenCode / mirasim / 小米 MiMo 的用量同步进 10Router 的用量统计（同 10router-sync 插件，自动每小时一次）</div>'
+    + '· 把本机 ZCode / OpenCode / mirasim / 小米 MiMo / 10Router 的用量同步进 10Router 的用量统计（同 10router-sync 插件，自动每小时一次）<br>'
+    + '· 「10Router 本机」= 本机 10Router 实例自己记的账（如 zcode-free 经它中转的行）同步到聚合端；地址指向本机时自动跳过，避免自己导自己</div>'
     + '<button class="btn primary" data-tr="settings">' + I.plus + '配置 10Router</button></div>';
 }
 
@@ -1588,15 +1827,15 @@ function renderTenrouter() {
   const box = $('tr-panel');
   const c = tr.config;
   if (!c) { box.innerHTML = '<div class="empty">加载中…</div>'; return; }
-  if (!c.configured) { box.innerHTML = trSetupHtml(); return; }
+  const gwLine = state.zGateway === true
+    ? '<div class="gw-line"><span class="dot on pulse"></span> ZCode 体验包接口运行中'
+      + (state.zGatewayStats && state.zGatewayStats.lastCallAt ? ' · 最近调用 ' + esc(String(state.zGatewayStats.lastCallAt).slice(11, 19)) + ' · ' + state.zGatewayStats.calls + ' 次 · 最后用号 ' + esc(state.zGatewayStats.lastAccount || '-') : ' · 尚未有调用')
+      + ' · 模型 <code>zcode-free/glm-5.3-flash</code></div>'
+    : '';
+  if (!c.configured) { box.innerHTML = gwLine + trSetupHtml(); return; }
   const list = (tr.quotas && tr.quotas.connections) || [];
   const low = list.filter((x) => x.isActive && !x.error && quotaLow(x)).length;
   const failed = list.filter((x) => x.error).length;
-  const ls = c.lastSync;
-  const srcChips = (c.sources || []).map((x) => {
-    const on = x.found && c.sync.sources.includes(x.id);
-    return '<span class="chip' + (on ? ' on' : '') + '" title="' + (x.found ? (x.supported ? '已检测到' : '需要 Node 22.5+') : '本机未检测到') + '">' + esc(x.label) + (x.found ? '' : ' ·无') + '</span>';
-  }).join('');
   let grid;
   let tabStrip = '';
   const groups = list.length ? trGroups(list) : [];
@@ -1644,15 +1883,11 @@ function renderTenrouter() {
     + '<div class="stat"><span>额度告急</span><strong>' + (tr.quotas ? low : '-') + '</strong></div><div class="divider"></div>'
     + '<div class="stat"><span>查询失败</span><strong>' + (tr.quotas ? failed : '-') + '</strong></div>'
     + '</div><div class="actions">'
-    + '<button class="btn" data-tr="refresh"' + (tr.loading ? ' disabled' : '') + '>' + I.refresh + (tr.loading ? '刷新中…' : '刷新额度') + '</button>'
-    + '<button class="btn" data-tr="sync"' + (tr.syncing || c.syncing ? ' disabled' : '') + '>' + I.upload + (tr.syncing || c.syncing ? '同步中…' : '同步用量') + '</button>'
+    + '<button class="btn" data-tr="refresh"' + (tr.loading ? ' disabled' : '') + '>' + (tr.loading ? '刷新中…' : '刷新额度') + '</button>'
+    + '<button class="btn" data-tr="sync" title="用量同步：自动开关、同步来源与手动同步（点我打开）"' + (tr.syncing || c.syncing ? ' disabled' : '') + '>'
+    + '<span class="dot' + (c.sync.enabled ? ' on' : '') + '"></span>' + (tr.syncing || c.syncing ? '同步中…' : '用量同步') + '</button>'
     + '<button class="btn" data-tr="settings">设置</button>'
     + '</div></div>'
-    + '<div class="tr-bar"><span title="' + esc(c.endpoint) + '">' + esc(c.endpoint) + ' · ' + esc(c.keyMasked) + '</span>'
-    + '<span>用量同步：' + (c.sync.enabled ? '每小时自动' : '手动') + '</span>' + srcChips
-    + '<span style="margin-left:auto" title="' + esc(ls ? ls.summary : '') + '">' + (ls ? '上次同步 ' + esc(fmtTime(ls.at).slice(5)) + ' · ' + esc(ls.summary.slice(0, 40)) : '还没有同步过') + '</span>'
-    + (tr.quotas ? '<span>额度更新于 ' + esc(fmtTime(tr.quotas.generatedAt).slice(11)) + '</span>' : '')
-    + '</div>'
     + tabStrip
     + '<div class="tr-grid">' + grid + '</div>';
 }
@@ -1700,22 +1935,38 @@ function openTrSettings() {
   $('tr-endpoint').value = c.endpoint || '';
   $('tr-key').value = '';
   $('tr-key').placeholder = c.keyMasked ? '已保存 ' + c.keyMasked + '（留空保持不变）' : 'sk-…';
-  $('tr-auto').checked = c.configured ? c.sync.enabled : true;
+  $('tr-admin-pw').value = '';
+  $('tr-admin-pw').placeholder = c.hasAdminPassword ? '已保存（留空保持不变）' : '可选：10Router 面板密码';
   $('tr-hide-empty').checked = state.trHideEmpty === true;
-  $('tr-sources').innerHTML = (c.sources || []).map((x) => '<label class="check"><input type="checkbox" data-src="' + x.id + '"'
-    + ((c.configured ? c.sync.sources.includes(x.id) : true) ? ' checked' : '') + (x.supported ? '' : ' disabled') + '> ' + esc(x.label)
-    + '<span class="dim">' + (x.found ? '' : '（本机未检测到）') + (x.supported ? '' : '（需要 Node 22.5+）') + '</span></label>').join('');
   $('tr-disconnect').style.display = c.configured ? '' : 'none';
   $('tr-test-msg').textContent = '';
   openModal('m-10r');
   setTimeout(() => $(c.configured ? 'tr-key' : 'tr-endpoint').focus(), 30);
 }
+// 用量同步弹窗：自动开关 + 来源勾选 + 手动同步
+function openTrSync() {
+  const c = tr.config || { sync: { enabled: true, sources: [] }, sources: [] };
+  $('tr-auto').checked = c.configured ? c.sync.enabled : true;
+  $('tr-sources').innerHTML = (c.sources || []).map((x) => '<label class="check"><input type="checkbox" data-src="' + x.id + '"'
+    + ((c.configured ? c.sync.sources.includes(x.id) : true) ? ' checked' : '') + (x.supported ? '' : ' disabled') + '> ' + esc(x.label)
+    + '<span class="dim">' + (x.found ? '' : '（本机未检测到）') + (x.supported ? '' : '（需要 Node 22.5+）') + '</span></label>').join('');
+  const ls = c.lastSync;
+  $('tr-sync-status').textContent = ls ? '上次同步 ' + fmtTime(ls.at).slice(5) + '：' + ls.summary : '还没有同步过';
+  $('tr-sync-now').disabled = tr.syncing || c.syncing === true;
+  openModal('m-trsync');
+}
+async function trSyncSave(close) {
+  try {
+    tr.config = await api('/api/tenrouter', { method: 'PUT', json: { syncEnabled: $('tr-auto').checked, sources: [...document.querySelectorAll('#tr-sources input[data-src]:checked')].map((x) => x.dataset.src) } });
+    if (close) { closeModal('m-trsync'); toast('用量同步设置已保存'); render(); }
+  } catch (e) { toast(e.message, false); throw e; }
+}
 function trForm() {
   return {
-    endpoint: $('tr-endpoint').value.trim(),
+    // 从 LLM 客户端复制的 base URL 常带 /v1 后缀——10Router 只认站点根地址，带 /v1 会让所有 /api/* 调用 404、误报「需要 1.2.1+」
+    endpoint: $('tr-endpoint').value.trim().replace(/\/+$/, '').replace(/\/v1$/, ''),
     key: $('tr-key').value.trim(),
-    syncEnabled: $('tr-auto').checked,
-    sources: [...document.querySelectorAll('#tr-sources input[data-src]:checked')].map((x) => x.dataset.src),
+    adminPassword: $('tr-admin-pw').value, // 留空 = 服务端保持原值
   };
 }
 async function trTest() {
@@ -1749,13 +2000,26 @@ async function trDisconnect() {
   try { tr.config = await api('/api/tenrouter', { method: 'DELETE' }); tr.quotas = null; tr.error = null; closeModal('m-10r'); render(); }
   catch (e) { toast(e.message, false); }
 }
+async function trSyncAccounts() {
+  if (!(tr.config && tr.config.configured)) return toast('请先保存 10Router 设置', false);
+  const btn = $('tr-sync-accounts');
+  const pw = $('tr-admin-pw').value;
+  btn.disabled = true;
+  try {
+    const r = await api('/api/tenrouter/sync-accounts', { method: 'POST', json: pw ? { adminPassword: pw } : {} });
+    toast(r.summary, !/失败/.test(r.summary));
+    if (pw) await loadTrConfig();
+    loadLogs();
+  } catch (e) { toast(e.message, false); }
+  btn.disabled = false;
+}
 $('tr-panel').addEventListener('click', (e) => {
   const b = e.target.closest('[data-tr]');
   if (!b) return;
   if (b.dataset.tr === 'toggle') { state.trOpen = Object.assign({}, state.trOpen, { [b.dataset.id]: !(state.trOpen && state.trOpen[b.dataset.id]) }); render(); return; }
   if (b.dataset.tr === 'settings') openTrSettings();
   else if (b.dataset.tr === 'refresh') loadTrQuotas(true);
-  else if (b.dataset.tr === 'sync') trSync();
+  else if (b.dataset.tr === 'sync') openTrSync();
   else if (b.dataset.tr === 'vendor') {
     const v = b.dataset.v || '';
     state.trVendor = v;
@@ -1764,12 +2028,33 @@ $('tr-panel').addEventListener('click', (e) => {
   }
 });
 $('tr-test').onclick = trTest;
+$('tr-sync-save').onclick = () => trSyncSave(true);
+$('tr-sync-now').onclick = async () => {
+  try { await trSyncSave(false); } catch (e) { return; }
+  closeModal('m-trsync');
+  trSync();
+};
+$('tr-sync-accounts').onclick = trSyncAccounts;
 $('tr-save').onclick = trSave;
 $('tr-disconnect').onclick = trDisconnect;
 
 // ── 数据加载 ──
 async function loadStatus() {
   try { state.status = await api('/api/status'); renderStatus(); } catch (e) {}
+  syncAfterZcodeClaims();
+}
+// 后台自动领取成功后，立即刷新这些账号的额度与卡片（不必等 2 分钟一轮的余额刷新）
+let seenZcodeTickAt = null;
+async function syncAfterZcodeClaims() {
+  const z = state.status && state.status.scheduler && state.status.scheduler.zcode;
+  const t = z && z.lastTick;
+  if (!t || t.at === seenZcodeTickAt) return;
+  const first = seenZcodeTickAt === null;
+  seenZcodeTickAt = t.at;
+  if (first || !(t.claimedIds && t.claimedIds.length)) return;   // 首次加载已全量拉取
+  try { state.accounts = (await api('/api/accounts')).accounts; } catch (e) {}
+  loadQuotas(t.claimedIds);
+  loadZGateway();
 }
 async function loadAccounts() {
   const data = await api('/api/accounts');
@@ -1779,8 +2064,10 @@ async function loadAccounts() {
   loadQuotas();
 }
 let quotaRun = 0;
+let quotaLoadedAt = 0;
 async function loadQuotas(ids) {
   const run = ++quotaRun;
+  quotaLoadedAt = Date.now();
   const queue = (ids || state.accounts.map((a) => a.id)).slice();
   if (ids) for (const id of ids) delete state.quotas[id];
   const worker = async () => {
@@ -1809,7 +2096,9 @@ async function checkinOne(id) {
   try {
     const d = await api('/api/accounts/' + encodeURIComponent(id) + '/checkin', { method: 'POST' });
     const r = d.results && d.results[0];
-    toast(r ? (r.account + '：' + (r.status === 'checked-in' ? '领取成功 +' + r.claimedAmount + ' Credits' : (r.error || r.message || r.status))) : d.summary, !(r && r.status === 'failed'));
+    const accObj = state.accounts.find((x) => x.id === id);
+    const accLabel = (r && r.account) || (accObj && (accObj.name || accObj.id)) || '该账号';
+    toast(r ? (accLabel + '：' + (r.status === 'checked-in' ? '领取成功 +' + r.claimedAmount + ' Credits' : (r.error || r.message || r.status))) : d.summary, !(r && r.status === 'failed'));
   } catch (e) { toast(e.message, false); }
   delete state.busy[id];
   await loadStatus(); await loadAccounts(); loadLogs();
@@ -1834,19 +2123,25 @@ async function onCardClick(e) {
   if (act === 'claim') return openClaim(id);
   if (act === 'switch') {
     const a = state.accounts.find((x) => x.id === id);
-    const client = CLIENT_LABEL[a && a.product] || '客户端';
+    const client = CLIENT_LABEL[a && a.product] || (a && prodLabel(a.product)) || '客户端';
     const tip = a && a.product === 'zcode'
       ? '\n需先退出 ZCode；切换后重新打开 ZCode 即为新账号。当前登录会先保存到 CreditDaddy，不会丢号。'
       : a && a.product === 'mirasim'
         ? '\n需先退出 Mirasim；切换后重新打开即为新账号。当前登录会先保存到 CreditDaddy，不会丢号。'
-        : '\n客户端会自动应用新会话；当前登录账号的最新 token 会先保存到 CreditDaddy。';
+        : a && a.product === 'catpaw'
+          ? '\n需先退出妙手；切换后重新打开妙手即为新账号。当前登录会先保存到 CreditDaddy，不会丢号。'
+          : a && a.product === 'trae'
+            ? '\n需先退出 Trae；切换后重新打开 Trae 即为新账号。当前登录会先自动快照保存到 CreditDaddy，不会丢号。'
+            : a && a.product === 'qoder'
+              ? '\n需先退出 Qoder；切换后重新打开 Qoder 即为新账号。运行中的 Qoder 退出时会把旧登录写回去，可选「关闭并强制切换」代为关进程。'
+              : '\n客户端会自动应用新会话；当前登录账号的最新 token 会先保存到 CreditDaddy。';
     if (!(await uiConfirm('把 ' + client + ' 切换到「' + (a && a.name || id) + '」？' + tip, '切换账号', '切换'))) return;
     const doSwitch = (force) => api('/api/accounts/' + encodeURIComponent(id) + '/switch', { json: { force } });
     try {
       let r;
       try { r = await doSwitch(false); }
       catch (err) {
-        if (err.code !== 'ZCODE_RUNNING' && err.code !== 'MIRASIM_RUNNING') throw err;
+        if (err.code !== 'ZCODE_RUNNING' && err.code !== 'MIRASIM_RUNNING' && err.code !== 'CATPAW_RUNNING' && err.code !== 'TRAE_RUNNING' && err.code !== 'QODER_RUNNING') throw err;
         if (!(await uiConfirm(err.message + '\n\n仍要强制切换吗？强制切换会先关闭客户端再写入登录，重新打开客户端即为新账号。', client + ' 正在运行', '关闭并强制切换'))) return;
         r = await doSwitch(true);
       }
@@ -1871,6 +2166,23 @@ async function onCardClick(e) {
           } catch (e) {}
         }, 800);
       }
+      if (a && a.product === 'catpaw' && r && !r.alreadyActive && window.creditdaddy && typeof window.creditdaddy.openCatpawClient === 'function') {
+        setTimeout(async () => {
+          try {
+            const re = await window.creditdaddy.openCatpawClient();
+            if (re && re.ok) toast('已重新启动妙手客户端');
+          } catch (e) {}
+        }, 800);
+      }
+      if (a && a.product === 'trae' && r && !r.alreadyActive && window.creditdaddy && typeof window.creditdaddy.openTraeClient === 'function') {
+        setTimeout(async () => {
+          try {
+            const re = await window.creditdaddy.openTraeClient();
+            if (re && re.ok) toast('已重新启动 Trae 客户端');
+            else toast((re && re.error) || '无法打开 Trae 客户端（桌面版才能自动拉起）', false);
+          } catch (e) {}
+        }, 800);
+      }
     } catch (err) { toast(err.message, false); }
     return;
   }
@@ -2068,6 +2380,135 @@ const uiPrompt = (title, value, opts = {}) => uiDialog({ title, message: opts.me
 function okDialog() { const v = $('dlg-field').style.display === 'none' ? true : $('dlg-input').value; $('m-dialog').classList.remove('show'); settleDialog(v); }
 $('dlg-ok').addEventListener('click', okDialog);
 $('dlg-input').addEventListener('keydown', (e) => { if (e.key === 'Enter') okDialog(); });
+
+// ── 检查更新（桌面版）：主进程推状态（update:state），面板只管渲染 ──
+const updBridge = window.creditdaddy && window.creditdaddy.update ? window.creditdaddy.update : null;
+let updState = null;
+function updActBtn(id, text, cls, fn) {
+  return '<button class="btn' + (cls ? ' ' + cls : '') + '" id="' + id + '">' + text + '</button>';
+}
+function renderUpdateModal(s) {
+  updState = s;
+  const body = $('upd-body');
+  const acts = $('upd-actions');
+  const cur = '当前 v' + (s.current || '?');
+  const rel = '<button class="btn" id="upd-rel">打开 Releases</button>';
+  const close = '<button class="btn" data-close-uu>稍后</button>';
+  switch (s.phase) {
+    case 'unsupported':
+      body.innerHTML = '<div class="hint">当前环境不支持应用内更新（开发模式 / Portable / 未签名的 macOS 版），请从 GitHub Releases 手动下载。</div>';
+      acts.innerHTML = rel + '<button class="btn" data-close-uu>取消</button>';
+      break;
+    case 'checking':
+      body.innerHTML = '<div class="hint">正在检查更新…</div>';
+      acts.innerHTML = close;
+      break;
+    case 'latest':
+      body.innerHTML = '<div class="hint"><span class="dot on"></span> 已是最新版本（' + cur + '）</div>';
+      acts.innerHTML = '<button class="btn primary" data-close-uu>好的</button>';
+      break;
+    case 'available':
+      body.innerHTML = s.via === 'updater'
+        ? '<div class="hint">发现新版本 <b>v' + esc(s.version) + '</b>（' + cur + '）——正在后台下载，完成后退出 CreditDaddy 时自动安装。</div>'
+        : '<div class="hint">发现新版本 <b>v' + esc(s.version) + '</b>（' + cur + (s.sizeMB ? '，约 ' + s.sizeMB + ' MB' : '') + '），可由本机直接下载安装。</div>';
+      acts.innerHTML = (s.via === 'github' ? updActBtn('upd-go', '立即下载安装', 'primary') : '') + rel + close;
+      break;
+    case 'downloading':
+      body.innerHTML = '<div class="hint">正在下载 v' + esc(s.version) + '</div>'
+        + '<div class="meter" style="margin:8px 0 4px"><span style="width:' + (s.percent || 0) + '%"></span></div>'
+        + '<div class="hint">' + (s.percent != null ? s.percent + '%' : '') + '（' + (s.mb || '…') + ' MB）' + (s.percent == null ? ' 获取大小中…' : '') + '</div>';
+      acts.innerHTML = '<button class="btn" data-close-uu>后台继续</button>';
+      break;
+    case 'downloaded':
+      body.innerHTML = '<div class="hint"><span class="dot on pulse"></span> <b>v' + esc(s.version) + '</b> '
+        + (s.via === 'updater' ? '已下载完成，重启即完成更新（退出时也会自动安装）。' : '安装包已下载完成，安装时 CreditDaddy 会先退出。') + '</div>';
+      acts.innerHTML = updActBtn('upd-go', s.via === 'updater' ? '立即重启更新' : '立即安装', 'primary') + close;
+      break;
+    case 'error':
+    default:
+      body.innerHTML = '<div class="hint" style="color:var(--err)">检查更新失败：' + esc(s.error || '未知错误') + '</div>';
+      acts.innerHTML = updActBtn('upd-retry', '重试', 'primary') + rel + '<button class="btn" data-close-uu>取消</button>';
+      break;
+  }
+  const relBtn = $('upd-rel');
+  if (relBtn) relBtn.onclick = () => updBridge.openReleases();
+  const goBtn = $('upd-go');
+  if (goBtn) { goBtn.disabled = true; goBtn.textContent = '处理中…'; updBridge.install().then(renderUpdateModal).catch((e) => { goBtn.disabled = false; goBtn.textContent = '重试'; }); }
+  const retryBtn = $('upd-retry');
+  if (retryBtn) retryBtn.onclick = () => updBridge.check().then(renderUpdateModal).catch(() => {});
+  acts.querySelectorAll('[data-close-uu]').forEach((b) => { b.onclick = () => closeModal('m-update'); });
+}
+async function openUpdateModal(autoCheck) {
+  if (!updBridge) return;
+  openModal('m-update');
+  try {
+    updState = await updBridge.state();
+    renderUpdateModal(updState);
+    if (autoCheck) renderUpdateModal(await updBridge.check());
+  } catch (e) {
+    renderUpdateModal({ phase: 'error', error: String((e && e.message) || e), current: (updState && updState.current) || '' });
+  }
+}
+if (updBridge) {
+  updBridge.onState((s) => { updState = s; $('upd-ver') && ($('upd-ver').textContent = '当前 v' + (s.current || '?')); if (document.getElementById('m-update').classList.contains('show')) renderUpdateModal(s); });
+  updBridge.onOpen(() => openUpdateModal(true));
+}
+$('btn-update').onclick = () => openUpdateModal(true);
+
+// ZCode 自动领取计划：保存（按新配置启用）/ 停用
+$('zac-ok').addEventListener('click', async () => {
+  try {
+    const r = await api('/api/zcode/net', { method: 'PUT', json: { autoClaim: true, claimIntervalMin: Number($('zac-interval').value), claimWindowMin: Number($('zac-window').value) } });
+    state.zAutoClaim = r.autoClaim === true;
+    state.zClaimIntervalMin = r.claimIntervalMin;
+    state.zClaimWindowMin = r.claimWindowMin;
+    renderStatus(); render();
+    closeModal('m-zac');
+    toast('自动领取已开启：每 ' + r.claimIntervalMin + ' 分钟检查' + (r.claimWindowMin > 0 ? '，运行 ' + r.claimWindowMin + ' 分钟后自动关闭' : '，一直运行直到手动关闭'));
+  } catch (err) { toast(err.message, false); }
+});
+$('zac-off').addEventListener('click', async () => {
+  try {
+    const r = await api('/api/zcode/net', { method: 'PUT', json: { autoClaim: false } });
+    state.zAutoClaim = r.autoClaim === true;
+    renderStatus(); render();
+    closeModal('m-zac');
+    toast('ZCode 自动领取：已关闭');
+  } catch (err) { toast(err.message, false); }
+});
+
+// ZCode 体验包接口：开关 + 局域网开放 + 免密 IP 白名单一次保存
+function syncZgwLanFields() {
+  const off = !$('zgw-on').checked;
+  $('zgw-lan-fields').querySelectorAll('input, textarea').forEach((el) => { el.disabled = off; });
+  $('zgw-lan-fields').style.opacity = off ? '.45' : '';
+}
+$('zgw-on').addEventListener('change', syncZgwLanFields);
+$('zgw-ok').addEventListener('click', async () => {
+  const allow = $('zgw-allow').value.split('\n').map((x) => x.trim()).filter(Boolean);
+  try {
+    const r = await api('/api/zcode-gateway', { method: 'PUT', json: { enabled: $('zgw-on').checked, lan: $('zgw-lan').checked, allow } });
+    state.zGateway = r.enabled === true;
+    state.zGatewayLan = r.lan === true;
+    state.zGatewayAllow = r.allow || [];
+    renderStatus(); render();
+    closeModal('m-zgw');
+    toast('体验包接口：' + (r.enabled ? '已开启' : '已关闭')
+      + (r.enabled && r.lan ? '，局域网开放' + (r.allow && r.allow.length ? '，白名单 ' + r.allow.join('、') : '，白名单为空——白名单外需虚拟 key') + '；绑定改动重启后生效' : ''));
+  } catch (err) { toast(err.message, false); }
+});
+
+// ZCode 网络出口：顺序 + 代理地址保存
+$('znet-ok').addEventListener('click', async () => {
+  try {
+    const body = { proxyFirst: $('znet-proxy').checked, proxyUrl: $('znet-url').value.trim() };
+    const r = await api('/api/zcode/net', { method: 'PUT', json: body });
+    await loadZNet();
+    renderStatus(); render();
+    closeModal('m-znet');
+    toast('ZCode 出口：' + (r.proxyFirst ? '代理优先（直连兜底）' : '直连优先（代理兜底）') + (body.proxyUrl === '' ? '，代理已清除' : ''));
+  } catch (err) { toast(err.message, false); }
+});
 document.querySelectorAll('.mask').forEach((m) => {
   m.addEventListener('mousedown', (e) => { if (e.target === m) closeModal(m.id); });
   m.querySelectorAll('[data-close]').forEach((b) => b.addEventListener('click', () => closeModal(m.id)));
@@ -2086,10 +2527,13 @@ const LOCAL_HINT = {
   workbuddy: '读取本机 WorkBuddy 客户端的当前会话与历史会话（CodeBuddyExtension 凭据目录），token 不出本机。',
   zcode: '读取本机 ZCode 客户端当前登录的账号（本地解密 ~/.zcode/v2/credentials.json），token 不出本机。',
   mirasim: '读取本机 mirasim 客户端当前登录的账号（本地解密 ~/.mirasim/setting.json），token 不出本机。',
+  catpaw: '读取本机妙手（美团 CatPaw）客户端当前登录的账号（本地解密 %APPDATA%\\catpaw-moon\\catx-credential.json），token 不出本机。',
+  trae: '读取本机 Trae 客户端当前登录的账号（本地解密 <客户端数据目录>\\User\\globalStorage\\storage.json 的 tc 信封），token 不出本机。',
 };
 function openAdd(product) {
   state.addProduct = product || '';
-  const tabShown = { local: true, device: product !== 'mirasim', token: product !== 'zcode' && product !== 'mirasim' };
+  // Trae 凭据只能从本机客户端 storage.json 解密：不支持浏览器登录 / 粘贴 Token
+  const tabShown = { local: true, device: product !== 'mirasim' && product !== 'catpaw' && product !== 'trae', token: product !== 'zcode' && product !== 'mirasim' && product !== 'catpaw' && product !== 'trae' };
   document.querySelectorAll('#m-add .tab').forEach((t) => { t.style.display = tabShown[t.dataset.tab] ? '' : 'none'; });
   $('local-hint').textContent = LOCAL_HINT[state.addProduct];
   let first = null;
@@ -2118,7 +2562,7 @@ function openAdd(product) {
 async function localScan() {
   const box = $('scan-result');
   $('scan-status').textContent = '扫描中（最多约 10 秒）…';
-  box.innerHTML = '<div class="hint">正在读取本机 Qoder 客户端凭据…</div>';
+  box.innerHTML = '<div class="hint">正在读取本机客户端凭据（Qoder / WorkBuddy / ZCode / mirasim / 妙手 / Trae）…</div>';
   try {
     const r = await api('/api/local/scan', { method: 'POST' });
     $('scan-status').textContent = '';
@@ -2135,11 +2579,13 @@ async function localScan() {
         : '<button class="btn" data-cid="' + esc(c.id) + '" data-prov="qoder">导入·国际</button><button class="btn" data-cid="' + esc(c.id) + '" data-prov="qoder-cn">导入·国内</button>';
       html += '<div class="cand"><div class="cand-main"><div class="cand-name">' + title + prov + '</div><div class="cand-sub">' + sub + '</div></div><div class="row">' + btns + '</div></div>';
     }
-    for (const e of r.errors || []) html += '<div class="hint" style="color:var(--err)">读取失败：' + esc(e.file) + '：' + esc(e.error) + '</div>';
+    for (const e of r.errors || []) {
+      html += '<div class="hint" style="color:var(--err)">读取失败：' + esc(e.file) + '：' + esc(e.error) + '</div>';
+    }
     if (!cands.length) {
-      const where = state.addProduct ? prodLabel(state.addProduct) : 'Qoder / WorkBuddy / ZCode / mirasim';
-      const alt = state.addProduct === 'zcode' || state.addProduct === 'mirasim' ? '' : '，或改用「浏览器登录」「粘贴 Token」';
-      html += '<div class="hint">未发现已登录的 ' + where + ' 账号。请先在客户端登录' + alt + '。<br>已检查：Qoder / Qoder CN 客户端数据目录、WorkBuddy 凭据目录、ZCode 数据目录、mirasim 数据目录'
+      const where = state.addProduct ? prodLabel(state.addProduct) : 'Qoder / WorkBuddy / ZCode / mirasim / 妙手 / Trae';
+      const alt = state.addProduct === 'zcode' || state.addProduct === 'mirasim' || state.addProduct === 'catpaw' ? '' : '，或改用「浏览器登录」「粘贴 Token」';
+      html += '<div class="hint">未发现已登录的 ' + where + ' 账号。请先在客户端登录' + alt + '。<br>已检查：Qoder / Qoder CN 客户端数据目录、WorkBuddy 凭据目录、ZCode 数据目录、mirasim 数据目录、妙手凭据目录、Trae 数据目录'
         + (r.scannedDirs && r.scannedDirs.length ? '、' + r.scannedDirs.map(esc).join('、') : '') + '</div>';
     }
     box.innerHTML = html;
@@ -2232,20 +2678,21 @@ async function addToken() {
 // 导出
 async function doExport() {
   const password = $('ex-password').value;
-  if (password && password.length < 4) return toast('口令至少 4 位', false);
+  if (!password.trim()) return toast('导出必须设置加密口令', false);
+  if (password.length < 4) return toast('口令至少 4 位', false);
   try {
     const sel = $('ex-provider').value;
     const scope = sel.startsWith('p:') ? { product: sel.slice(2) } : { provider: sel || undefined };
-    const payload = await api('/api/export', { json: Object.assign({ password: password || undefined }, scope) });
+    const payload = await api('/api/export', { json: Object.assign({ password }, scope) });
     const blob = new Blob([JSON.stringify(payload, null, 2)], { type: 'application/json' });
     const a = document.createElement('a');
     a.href = URL.createObjectURL(blob);
-    a.download = 'creditdaddy-' + (sel.replace('p:', '') || 'all') + '-' + new Date().toISOString().slice(0, 10) + (password ? '.secure' : '') + '.json';
+    a.download = 'creditdaddy-' + (sel.replace('p:', '') || 'all') + '-' + new Date().toISOString().slice(0, 10) + '.secure.json';
     a.click();
     URL.revokeObjectURL(a.href);
     $('ex-password').value = '';
     closeModal('m-export');
-    toast(password ? '已导出加密文件（可导入 10router）' : '已导出明文文件，内含 token，请妥善保管');
+    toast('已导出加密文件（可在 10router 或本面板导入）');
   } catch (e) { toast(e.message, false); }
 }
 
@@ -2396,7 +2843,54 @@ function applyComponents() {
   renderStatus();
 }
 
-// 右上角面板设置：组件显隐 + 组件顺序（↑↓，仪表盘与标签栏同步）+ 每产品账号排序（默认积分多者靠前，可手动固定）
+// 右上角面板设置：访问密码 + 组件显隐与排序 + 每产品账号排序（默认积分多者靠前，可手动固定）
+function secStatusHtml() {
+  if (!state.sec.loaded) return '<span class="sec-status">…</span>';
+  return state.sec.enabled ? '<span class="sec-status on">已开启</span>' : '<span class="sec-status">未开启</span>';
+}
+function renderSecActions() {
+  if (!state.sec.loaded) return '';
+  return state.sec.enabled
+    ? '<button class="btn" data-sec-action="change">修改密码</button><button class="btn" data-sec-action="disable">关闭</button>'
+    : '<button class="btn primary" data-sec-action="enable">开启面板密码</button>';
+}
+async function applyPanelKey(next) {
+  setKey(next);
+  state.sec = { enabled: Boolean(next), loaded: true };
+}
+async function doSecAction(action) {
+  if (action === 'enable' || action === 'change') {
+    const pw = await uiPrompt(action === 'enable' ? '设置面板访问密码' : '输入新密码', '', {
+      type: 'password', okText: action === 'enable' ? '开启' : '保存',
+      placeholder: '至少 4 位，不能包含空格',
+      message: '设置后每次打开面板都需要输入此密码。导出账号的加密口令是独立设置，始终必填。',
+    });
+    if (!pw) return;
+    const val = String(pw).trim();
+    if (val.length < 4) return toast('面板访问密码至少 4 位', false);
+    if (/\s/.test(val)) return toast('面板访问密码不能包含空格', false);
+    try {
+      const r = await api('/api/settings', { method: 'PUT', json: { panelKey: val } });
+      await applyPanelKey(val);
+      renderCompMenu();
+      toast(r.panelKeyEnabled ? '已设置面板访问密码，下次打开面板需要输入' : '已保存', true);
+    } catch (e) { toast(e.message, false); }
+    return;
+  }
+  if (action === 'disable') {
+    const ok = await uiConfirm(
+      '关闭后打开面板不再需要密码（局域网 / 公网访问将无保护，仅建议本机使用）。账号导出仍必须设置加密口令。\n\n确定关闭面板访问密码吗？',
+      '关闭面板访问密码', '关闭');
+    if (!ok) return;
+    try {
+      const r = await api('/api/settings', { method: 'PUT', json: { disable: true } });
+      await loadSettings();
+      await applyPanelKey(r.panelKeyEnabled ? getKey() : '');
+      renderCompMenu();
+      toast(r.panelKeyEnabled ? '该部署环境（fnOS / 环境变量）强制启用访问密码，无法在面板内关闭' : '已关闭面板访问密码', true);
+    } catch (e) { toast(e.message, false); }
+  }
+}
 function renderCompMenu() {
   const compRows = state.compOrder.map((id) => {
     const c = COMPONENTS.find((x) => x.id === id);
@@ -2425,11 +2919,29 @@ function renderCompMenu() {
       + (manual && manual.length ? '<button class="btn" data-acc-reset="' + p.id + '" style="margin-top:6px;width:100%">恢复默认排序</button>' : '')
       + '</details>';
   }).join('');
-  $('comp-menu').innerHTML = '<div class="comp-menu-title">组件顺序（仪表盘与标签栏同步）</div>' + compRows
-    + '<div class="comp-menu-title" style="margin-top:2px">账号卡片排序</div>'
+  $('comp-menu').innerHTML =
+    '<div class="comp-menu-title">面板访问密码 ' + secStatusHtml() + '</div>'
+    + '<div class="hint">开启后每次打开面板都需要输入密码；密码可随时在此修改或关闭。'
+    + (state.sec.enabled ? '' : '账号导出不受影响（导出口令始终必填）。') + '</div>'
+    + '<div class="row">' + renderSecActions() + '</div>'
+    + '<div class="comp-menu-title">自动签到</div>'
+    + '<div class="hint">' + autoCheckinHint() + '</div>'
+    + '<div class="comp-menu-title">组件顺序（仪表盘与标签栏同步）</div>' + compRows
+    + '<div class="comp-menu-title">账号卡片排序</div>'
     + (sortSections || '<div class="sort-hint">暂无账号</div>');
 }
 
+/** 自动签到口径说明：调度周期 + 各产品业务日刷新时点 */
+function autoCheckinHint() {
+  const sch = state.status && state.status.scheduler;
+  const next = sch && sch.nextTickAt ? '，下次执行 ' + esc(String(sch.nextTickAt).slice(11, 16)) : '';
+  const zc = sch && sch.zcode;
+  const zcText = zc && zc.enabled
+    ? 'ZCode 自动领取运行中（每 ' + (zc.intervalMin || 2) + ' 分钟' + (zc.autoOffAt ? '，约 ' + Math.max(1, Math.ceil((new Date(zc.autoOffAt).getTime() - Date.now()) / 60000)) + ' 分钟后自动关闭' : '，一直运行') + '），周期可在 ZCode 页「自动领取计划」里改'
+    : 'ZCode 活动领取默认关闭，可在 ZCode 页「自动领取计划」里开启并配置轮询周期';
+  return '守护进程每 ~2 小时自动扫描执行一轮全部账号' + next + '。各产品「业务日」刷新时点（UTC+8）：<b>Qoder 每日 10:00</b>（每台设备每日限领一个国际版账号）、<b>WorkBuddy 每日 00:00</b>，其余产品按 00:00；已领成功的账号按对应业务日记忆跳过，跨过刷新点后当天照常重试。' + esc(zcText) + '。';
+}
+
 /** 在手动排序列表里移动一个 id；列表不存在时先按当前生效顺序物化一份 */
 function moveAccountId(prod, aid, dir) {
   const baseIds = sortedAccounts(prod, ofProduct(prod)).map((a) => a.id);
@@ -2442,15 +2954,17 @@ function moveAccountId(prod, aid, dir) {
   state.cardOrder[prod] = arr;
   saveCardOrder();
 }
-$('btn-comp').addEventListener('click', (e) => {
-  e.stopPropagation();
-  const m = $('comp-menu');
-  if (m.hidden) renderCompMenu();
-  m.hidden = !m.hidden;
-});
-document.addEventListener('click', (e) => {
-  const m = $('comp-menu');
-  if (!m.hidden && !e.target.closest('.comp-wrap')) m.hidden = true;
+// 右上角齿轮 → 面板设置弹窗（访问密码 + 组件显隐/排序 + 账号卡片排序）
+$('btn-comp').addEventListener('click', async () => {
+  renderCompMenu();
+  openModal('m-settings');
+  await loadSettings();
+  renderCompMenu();
+  // 桌面版才有检查更新入口（走 preload 桥到主进程的更新状态机）
+  if (updBridge) {
+    $('upd-entry').style.display = '';
+    try { const s = await updBridge.state(); updState = s; $('upd-ver').textContent = '当前 v' + (s.current || '?'); } catch {}
+  }
 });
 $('comp-menu').addEventListener('change', (e) => {
   const c = e.target.dataset && e.target.dataset.comp;
@@ -2461,6 +2975,8 @@ $('comp-menu').addEventListener('change', (e) => {
   renderCompMenu();
 });
 $('comp-menu').addEventListener('click', (e) => {
+  const secBtn = e.target.closest && e.target.closest('[data-sec-action]');
+  if (secBtn) { doSecAction(secBtn.dataset.secAction); return; }
   const move = e.target.closest && e.target.closest('[data-move]');
   if (move) {
     e.stopPropagation();
@@ -2503,7 +3019,12 @@ $('btn-checkin').onclick = () => checkinAll($('btn-checkin'), state.view);
 $('btn-add-dash').onclick = () => openAdd('');
 $('btn-add').onclick = () => openAdd(state.view);
 $('btn-export-dash').onclick = () => { $('ex-provider').value = ''; openModal('m-export'); };
-$('btn-export').onclick = () => { $('ex-provider').value = state.view === 'zcode' ? 'zcode' : 'p:' + state.view; openModal('m-export'); };
+$('btn-export').onclick = () => {
+  const v = state.view;
+  // ZCode 是单一 provider，直接按 provider 选；其余产品页按产品线（p:）；仪表盘 / 10Router 导出全部
+  $('ex-provider').value = v === 'zcode' ? 'zcode' : (v === 'qoder' || v === 'workbuddy' || v === 'mirasim' || v === 'catpaw' || v === 'trae') ? 'p:' + v : '';
+  openModal('m-export');
+};
 $('btn-do-export').onclick = doExport;
 $('btn-pass-ok').onclick = () => submitImport($('pass-input').value);
 $('pass-input').addEventListener('keydown', (e) => { if (e.key === 'Enter') submitImport($('pass-input').value); });
@@ -2528,6 +3049,7 @@ function applyView() {
   $('view-dash').classList.toggle('active', state.view === 'dash');
   $('view-prod').classList.toggle('active', state.view !== 'dash' && state.view !== 'tenrouter');
   $('view-10r').classList.toggle('active', state.view === 'tenrouter');
+  if (state.view === 'tenrouter') loadZGateway();
   if (state.view === 'tenrouter' && tr.config && tr.config.configured && !tr.quotas && !tr.loading) loadTrQuotas();
   render();
   renderStatus();
@@ -2550,7 +3072,8 @@ $('region').addEventListener('click', (e) => {
   state.region = b.dataset.r;
   render();
   renderStatus();
-});('change', () => {
+});
+$('f-provider').addEventListener('change', () => {
   $('f-token').placeholder = $('f-provider').value.startsWith('workbuddy')
     ? 'WorkBuddy / CodeBuddy 登录 token（eyJ…，可在 CodeBuddyExtension 的 auth/*.info 中找到）'
     : 'dt-… / jt-… 或 PAT（pt-…，自动兑换）';
@@ -2561,6 +3084,27 @@ $('btn-logs').onclick = () => {
   if (!c) { loadLogs(); $('logs').scrollTop = $('logs').scrollHeight; }
 };
 
+// ── 仪表盘底部两卡：默认收起，点标题展开，展开状态存本地 ──
+const DASH_FOLD_KEY = 'qd_dash_fold';
+state.dashFold = (() => { try { return JSON.parse(localStorage.getItem(DASH_FOLD_KEY) || '{}'); } catch { return {}; } })();
+function applyDashFold() {
+  document.querySelectorAll('.dash-cols .pcard[data-fold]').forEach((el) => {
+    const open = state.dashFold[el.dataset.fold] === true;
+    el.classList.toggle('open', open);
+    el.querySelector('.fold-ico').innerHTML = open ? I.chevUp : I.chevDown;
+  });
+}
+document.querySelectorAll('.dash-cols .fold-head').forEach((h) => {
+  h.title = '展开 / 收起';
+  h.addEventListener('click', () => {
+    const k = h.closest('.pcard').dataset.fold;
+    state.dashFold[k] = state.dashFold[k] !== true;
+    try { localStorage.setItem(DASH_FOLD_KEY, JSON.stringify(state.dashFold)); } catch {}
+    applyDashFold();
+  });
+});
+applyDashFold();
+
 // ── 启动：先直接请求（本机模式无需密钥）；只有服务端返回 401 时才询问密钥 ──
 initTheme();
 $('btn-home').innerHTML = I.github;
@@ -2568,12 +3112,19 @@ applyView();
 (function boot() {
   function start() {
     loadStatus().then(loadAccounts).catch((e) => toast(e.message, false));
+    loadSettings().then(renderCompMenu);
     loadZNet();
+    loadZGateway();
     loadTrConfig().then(() => loadTrQuotas());
     setInterval(() => loadTrQuotas(), 5 * 60 * 1000);
+    // 账号余额（ZCode 剩余 token 等）自动刷新：可见时每 2 分钟一轮；从托盘/后台切回时若超过 1 分钟没刷过立即补一轮
+    setInterval(() => { if (!document.hidden) loadQuotas(); }, 2 * 60 * 1000);
+    document.addEventListener('visibilitychange', () => {
+      if (!document.hidden && Date.now() - quotaLoadedAt > 60 * 1000) loadQuotas();
+    });
     loadLogs();
     setInterval(loadLogs, 10000);
-    setInterval(async () => { await loadStatus(); render(); }, 30000);
+    setInterval(async () => { await loadStatus(); await loadZNet(); await loadZGateway(); render(); }, 30000);
   }
   // 先直接请求（本机模式无需密码）；需要密码时 api() 会弹框并重试
   api('/api/status').then(start).catch((e) => toast(e.code === 'PANEL_KEY'