creditdaddy 1.4.1 → 1.5.0

package/src/daemon.js

@@ -48,13 +48,14 @@ import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { logger, getLogs, readArchiveJsonl } from './logger.js';
 import {
-  loadAccounts, loadState, withAccounts, publicAccount, dataDir, loadSettings, saveSettings, withSettings,
+  loadAccounts, loadState, withAccounts, publicAccount, dataDir, loadSettings, saveSettings, withSettings, normalizeAccountInput,
 } from './store.js';
 import { addAccount, importAccounts, refreshContext } from './accounts.js';
 import { productImpl } from './providers.js';
 import { readWorkbuddySessions, writeWorkbuddySession, workbuddyAuthDir, currentWorkbuddyUid } from './workbuddyLocal.js';
 import { refreshWorkbuddyToken } from './workbuddyClient.js';
 import { loadBuildInfo } from './buildInfo.js';
+import { COOKIE_SITES, getSite, verifySiteCookie, verifyProbeHtml, extractIdentity, extractQuotaSnapshot, identityHashOf, isAutoGeneratedName } from './cookieSites.js';
 import { liveToAccount as zcodeLiveAccount, switchTo as zcodeSwitchTo, currentZcodeUid, currentZcodeIdentity, detectZcode, ensureVirtualDeviceMid, terminateZcode, zcodeRunning } from './zcodeLocal.js';
 import { liveToAccount as mirasimLiveAccount, switchTo as mirasimSwitchTo, currentMirasimUid, detectMirasim, terminateMirasim, mirasimRunning } from './mirasimLocal.js';
 import { liveToAccount as catpawLiveAccount, switchTo as catpawSwitchTo, currentCatpawToken, detectCatpaw, terminateCatpaw } from './catpawLocal.js';
@@ -165,6 +166,169 @@ function json(res, code, obj) {
   res.end(body);
 }
 
+/**
+ * 自动行名守卫：只有「用户没手改过（无 meta.renamed）且现名仍在自动名家族」才允许覆盖。
+ * 两道闸缺一不可——renamed 标记护新改名，家族判定护历史改名（旧版改名没有标记）。
+ */
+function canAutoRename(site, row) {
+  return !row.meta?.renamed && isAutoGeneratedName(site, row.name);
+}
+
+/**
+ * 单账号就地重探：用已存会话 cookie live 拉「身份+余额」→ 回填 meta → 探活痕迹（lastProbe）
+ * 一并落盘。重探路由（POST /api/cookie-sites/:id/reprobe）与 /api/accounts/:id/quota 的
+ * 网页会话分流共用——后者原直闯 PRODUCTS 表拿 undefined 崩 502，lastProbe 不更新，
+ * 呼吸灯「只有点重探才会变」的根因。
+ * @returns {Promise<{id, name, ok, identity?, balance?, today?, long?, error?, quotaSnapshot?}>}
+ */
+async function reprobeCookieAccount(site, a) {
+  const now = new Date().toISOString();
+  const cookie = String(a.meta?.cookieSiteSession?.cookie || a.token || '').trim();
+  const finish = async (row) => {
+    // 每行都落探活痕迹（GET /api/cookie-sites 回显 lastProbe → 面板呼吸灯三态）；
+    // 401 类失效红 / 其他失败黄 / 成功绿。await 串行队列排空，防调用方直改文件竞态。
+    const status = row.ok ? 'ok' : (/会话失效|401|403|会话不可用|重新登录/i.test(String(row.error || '')) ? 'dead' : 'warn');
+    await withAccounts((list) => {
+      const hit = list.find((x) => x.id === a.id);
+      if (hit) hit.meta = { ...(hit.meta || {}), lastProbe: { ok: Boolean(row.ok), status, error: row.ok ? null : String(row.error || '').slice(0, 200), at: now } };
+    }).catch(() => {});
+    if (!row.ok) {
+      // 失败落运行日志（只 toast 一闪的话日志时间线无迹可查）
+      logger.warn('COOKIE-SITE', '{name} 就地重探失败（{account}）：{err}', { name: site.name, account: row.name || a.id, err: row.error || '未知原因' });
+    }
+    return row;
+  };
+  if (!cookie) return finish({ id: a.id, name: a.name, ok: false, error: '未存会话 cookie，请重新登录捕获' });
+  try {
+    if (site.id === 'modelscope') {
+      const { probeMagicubeSession } = await import('./modelscopeClient.js');
+      const probe = await probeMagicubeSession(cookie);
+      if (!probe.ok) return finish({ id: a.id, name: a.name, ok: false, error: probe.error || '探测失败，请稍后再试或重新登录捕获' });
+      const ih = identityHashOf(probe.msSession?.id || probe.identity);
+      await withAccounts((list) => {
+        const hit = list.find((x) => x.id === a.id);
+        if (!hit) return;
+        hit.meta = {
+          ...(hit.meta || {}),
+          cookieSiteSession: { cookie, capturedAt: hit.meta?.cookieSiteSession?.capturedAt || now },
+          ...(ih ? { identityHash: ih } : {}),
+          msSession: probe.msSession,
+          msBalance: probe.msBalance,
+          quotaSnapshot: { used: 0, total: probe.balance, isCreditBalance: true, at: now },
+        };
+        if (probe.msSession?.id) hit.uid = String(probe.msSession.id);
+        if (canAutoRename(site, hit) && probe.identity) hit.name = `ModelScope (${probe.identity})`;
+        hit.updatedAt = now;
+      });
+      logger.info('COOKIE-SITE', '{name} 就地重探通过（{balance} 个，身份 {identity}）', { name: site.name, balance: probe.balance, identity: probe.identity || '—' });
+      return finish({ id: a.id, name: a.name, ok: true, identity: probe.identity, balance: probe.balance, today: probe.msBalance.today, long: probe.msBalance.long, quotaSnapshot: { used: 0, total: probe.balance, isCreditBalance: true, at: now } });
+    }
+    if (site.id === 'longcat') {
+      // LongCat（issue #29）：资源包 summary API 即探测（cookie 直连），重探刷新全部 ACTIVE 包快照
+      const { fetchLongcatPacks, longcatSnapshot, fetchLongcatIdentity } = await import('./longcatClient.js');
+      const packs = await fetchLongcatPacks(cookie);
+      if (!packs.ok) {
+        return finish({ id: a.id, name: a.name, ok: false, error: packs.authExpired ? (packs.error || '会话失效') : (packs.error || '资源包探测失败') });
+      }
+      const lcTotal = packs.packs.reduce((s, p) => s + Math.max(0, Number(p.remaining) || 0), 0);
+      const ident = await fetchLongcatIdentity(cookie).catch(() => null);
+      const lcSession = ident?.ok ? ident.session : null;
+      await withAccounts((list) => {
+        const hit = list.find((x) => x.id === a.id);
+        if (!hit) return;
+        hit.meta = {
+          ...(hit.meta || {}),
+          cookieSiteSession: { cookie, capturedAt: hit.meta?.cookieSiteSession?.capturedAt || now },
+          longcatPacks: longcatSnapshot(packs.packs),
+          ...(lcSession ? { longcatSession: lcSession } : {}),
+          quotaSnapshot: { used: 0, total: lcTotal, isCreditBalance: true, at: now },
+        };
+        if (lcSession?.userId) hit.uid = String(lcSession.userId);
+        const nameStr = lcSession?.email || lcSession?.name || lcSession?.userId || null;
+        if (canAutoRename(site, hit) && nameStr) hit.name = `LongCat (${nameStr})`;
+        hit.updatedAt = now;
+      });
+      logger.info('COOKIE-SITE', '{name} 就地重探通过（{balance} Token，{n} 个包，身份 {identity}）', { name: site.name, balance: lcTotal, n: packs.packs.length, identity: lcSession?.email || lcSession?.userId || '—' });
+      return finish({ id: a.id, name: a.name, ok: true, identity: lcSession?.email || lcSession?.userId || null, balance: lcTotal, quotaSnapshot: { used: 0, total: lcTotal, isCreditBalance: true, at: now } });
+    }
+    if (site.id === 'xiaomi-mimo') {
+      const { fetchXiaomiMimoProfile, fetchXiaomiMimoBalance } = await import('./xiaomiMimoClient.js');
+      const prof = await fetchXiaomiMimoProfile(cookie);
+      if (!prof.ok || !prof.userId) return finish({ id: a.id, name: a.name, ok: false, error: prof.error || '资料探测失败' });
+      const bal = await fetchXiaomiMimoBalance(cookie, prof.userId);
+      const mimoBalance = bal.ok ? { balance: bal.balance, cash: bal.cash, voucher: bal.voucher, at: now } : (a.meta?.mimoBalance || null);
+      const accName = `Xiaomi MiMo (UID: ${prof.userId})`;
+      await withAccounts((list) => {
+        const hit = list.find((x) => x.id === a.id);
+        if (!hit) return;
+        hit.uid = prof.userId;
+        if (canAutoRename(site, hit)) hit.name = accName;
+        hit.meta = {
+          ...(hit.meta || {}),
+          cookieSiteSession: { cookie, capturedAt: hit.meta?.cookieSiteSession?.capturedAt || now },
+          userId: prof.userId,
+          ...(mimoBalance ? { mimoBalance } : {}),
+          ...(bal.ok ? { quotaSnapshot: { used: 0, total: bal.balance, isCreditBalance: true, at: now } } : {}),
+        };
+        hit.updatedAt = now;
+      });
+      logger.info('COOKIE-SITE', '{name} 就地重探通过（UID {uid}，余额 {balance}）', { name: site.name, uid: prof.userId, balance: bal.ok ? bal.balance : '—' });
+      return finish({ id: a.id, name: a.name, ok: true, identity: prof.userId, balance: bal.ok ? bal.balance : null, quotaSnapshot: bal.ok ? { used: 0, total: bal.balance, isCreditBalance: true, at: now } : null });
+    }
+    if (site.id === 'river') {
+      const { fetchRiverBalance } = await import('./riverClient.js');
+      const bal = await fetchRiverBalance(a, {
+        log: (m) => logger.info('COOKIE-SITE', '{name} {msg}', { name: site.name, msg: m }),
+      });
+      if (!bal.ok) return finish({ id: a.id, name: a.name, ok: false, error: bal.error || '余额探测失败' });
+      await withAccounts((list) => {
+        const hit = list.find((x) => x.id === a.id);
+        if (!hit) return;
+        const sess = hit.meta?.workosSession || {};
+        if (bal.session) Object.assign(sess, bal.session);   // 刷新兑换到的新链一并落盘（单次轮换）
+        hit.meta = {
+          ...(hit.meta || {}),
+          cookieSiteSession: { cookie, capturedAt: hit.meta?.cookieSiteSession?.capturedAt || now },
+          ...(sess.accessToken || sess.cookie ? { workosSession: sess } : {}),
+          riverBalance: { balanceUsd: bal.balance, at: now },
+          quotaSnapshot: { used: 0, total: bal.balance, isCreditBalance: true, at: now },
+        };
+        const ident = sess.user?.email || sess.user?.id || null;
+        if (sess.user?.id) hit.uid = String(sess.user.id);
+        if (canAutoRename(site, hit) && ident) hit.name = `River AI (${ident})`;
+        hit.updatedAt = now;
+      });
+      logger.info('COOKIE-SITE', '{name} 就地重探通过（{balance} USD）', { name: site.name, balance: bal.balance });
+      return finish({ id: a.id, name: a.name, ok: true, identity: null, balance: bal.balance, quotaSnapshot: { used: 0, total: bal.balance, isCreditBalance: true, at: now } });
+    }
+    if (site.verify === 'api' || site.probe) {
+      // tokenharbor 等 HTML 探针站点：探测 + 身份 + 读数一并刷新
+      const v = await verifySiteCookie(site, cookie);
+      if (!v.ok) return finish({ id: a.id, name: a.name, ok: false, error: v.reason === 'invalid' ? '会话已失效，请重新登录捕获' : '探测失败，请稍后再试或重新登录捕获' });
+      const identity = extractIdentity(site, v.html) || null;
+      const quota = extractQuotaSnapshot(site, v.html) || null;
+      const ih = identityHashOf(identity);
+      await withAccounts((list) => {
+        const hit = list.find((x) => x.id === a.id);
+        if (!hit) return;
+        hit.meta = {
+          ...(hit.meta || {}),
+          cookieSiteSession: { cookie, capturedAt: hit.meta?.cookieSiteSession?.capturedAt || now },
+          ...(ih ? { identityHash: ih } : {}),
+          ...(quota ? { quotaSnapshot: { ...quota, at: now } } : {}),
+        };
+        if (canAutoRename(site, hit)) hit.name = site.accountName + (identity ? `(${identity})` : '');
+        hit.updatedAt = now;
+      });
+      logger.info('COOKIE-SITE', '{name} 就地重探通过（身份 {identity}）', { name: site.name, identity: identity || '—' });
+      return finish({ id: a.id, name: a.name, ok: true, identity, quotaSnapshot: quota || null });
+    }
+    return finish({ id: a.id, name: a.name, ok: false, error: '该站点不支持重探，请重新登录捕获' });
+  } catch (e) {
+    return finish({ id: a.id, name: a.name, ok: false, error: e.message });
+  }
+}
+
 async function readBody(req) {
   const chunks = [];
   let size = 0;
@@ -224,8 +388,10 @@ function localHosts() {
  *       设了密钥时密钥本身就是门槛（重绑定攻击者拿不到密钥），不再校验 Host
  *   - 带 Origin 的请求必须与 Host 同源（挡住任意网页跨站 POST 添加/导入账号、触发签到）
  * 非浏览器客户端（curl、CLI、托盘菜单）不带 Origin，不受影响。
+ * 例外：`/api/quota-refresh` 是 HMAC 自鉴权回调（10R 配额卡按钮浏览器直连，Origin 必然
+ * 是 10R 站点）——该路径豁免跨站检查，防伪交给签名 + 限流；Host 闸照常（防 DNS 重绑定）。
  */
-export function rejectForeignRequest(headers, bindHost) {
+export function rejectForeignRequest(headers, bindHost, pathname) {
   const host = headers.host || '';
   const hostName = hostnameOf(host).toLowerCase();
   const loopbackBind = LOOPBACK_HOSTS.has(bindHost);
@@ -236,7 +402,7 @@ export function rejectForeignRequest(headers, bindHost) {
     return 'Host 不被允许';
   }
   const origin = headers.origin;
-  if (origin) {
+  if (origin && pathname !== '/api/quota-refresh') {
     let originHost = '';
     try { originHost = new URL(origin).host; } catch {}
     if (originHost !== host) return '跨站请求被拒绝';
@@ -355,7 +521,8 @@ async function handleApi(req, res, url) {
     const name = String(body?.name || '').trim().slice(0, 64) || null;
     const found = await withAccounts((accounts) => {
       const a = accounts.find((x) => x.id === idMatch[1]);
-      if (a) a.name = name;
+      // meta.renamed = 用户手改的备注名（10R 同名认领键）——捕获/重探不得再自动覆盖
+      if (a) { a.name = name; a.meta = { ...(a.meta || {}), renamed: Boolean(name) }; }
       return a || null;
     });
     if (!found) return json(res, 404, { error: '账号不存在' });
@@ -405,6 +572,34 @@ async function handleApi(req, res, url) {
     const accounts = await loadAccounts();
     const account = accounts.find((a) => a.id === quotaMatch[1]);
     if (!account) return json(res, 404, { error: '账号不存在' });
+    // 网页会话账号（cookie-site 五家）不在 PRODUCTS 表里——productImpl 会 undefined 崩
+    // （502 且 lastProbe 不更新，呼吸灯纹丝不动、「重探后才行」的由来）。改走重探同款
+    // 语义：live 拉余额 → 回填快照 → 写探活痕迹 → 推对应卡，响应归一成统一 quota 结构。
+    if (account.meta?.cookieSiteId) {
+      const site = getSite(account.meta.cookieSiteId);
+      if (!site) return json(res, 404, { error: `站点 ${account.meta.cookieSiteId} 未配置` });
+      const rep = await reprobeCookieAccount(site, account).catch((e) => ({ ok: false, error: e.message }));
+      if (!rep.ok) return json(res, 502, { error: rep.error || '探测失败' });
+      const snap = rep.quotaSnapshot || {};
+      // 快照形状两样：API 站 total=余额；HTML 探针站（tokenharbor）total 缺失、
+      // used=已用百分比——统一结构按各自语义归一（HTML 站 remaining=100-used）。
+      const total = Number(snap.total);
+      const used = Number(snap.used) || 0;
+      const hasTotal = Number.isFinite(total) && total > 0;
+      // 单位标注：各家余额单位互异（Token / USD / CNY / 魔粒 / 积分）且都不是「积分」
+      // 口径——带 unit 返回，面板 creditSum 按 unit 有无决定是否计入「剩余积分」合计
+      //（有单位 = 不同量纲，不相加）。HTML 探针站（tokenharbor）是百分比，同样排除。
+      const UNIT_BY_SITE = { 'xiaomi-mimo': 'CNY', 'river': 'USD', 'longcat': 'Token', 'modelscope': '魔粒' };
+      const unit = UNIT_BY_SITE[site.id] || (hasTotal ? '' : '%');
+      return json(res, 200, { quota: {
+        total: hasTotal ? total : 100,
+        used,
+        remaining: hasTotal ? total : Math.max(0, 100 - used),
+        ...(unit ? { unit } : {}),
+        exceeded: false,
+        parts: [],
+      } });
+    }
     try {
       const log = (m) => logger.info('QUOTA', '{name}:{msg}', { name: account.name || account.id, msg: m });
       const ctx = { log, ...refreshContext(account, log) };
@@ -459,7 +654,8 @@ async function handleApi(req, res, url) {
       return json(res, 502, { error: e.message });
     }
   }
-  // ZCode 出口偏好：默认「直连优先、代理兜底」，可切「代理优先、直连兜底」；代理地址可面板配置（存 zcode-net.json，0600）
+  // 网络出口偏好（全局——Qoder/ZCode/cookie 探测等全部出口都走它）：默认「直连优先、代理兜底」，
+  // 可切「代理优先、直连兜底」；代理地址可面板配置（存 zcode-net.json，0600；键名 zcode 前缀是历史遗留）
   // 自动领取开启时附带 1 小时时限（autoClaimUntil），到期调度器自动关闭并停止轮询
   if (p === '/api/zcode-gateway' && method === 'GET') {
     return json(res, 200, await zcodeGateway.gatewayStatus());
@@ -559,7 +755,7 @@ async function handleApi(req, res, url) {
       }
     } catch (e) { return json(res, 400, { error: e.message }); }
     const ac = autoClaimEnabled();
-    logger.info('DAEMON', 'ZCode 出口:{route},自动领取:{claim},代理 {proxy}', { route: proxyFirst() ? '代理优先' : '直连优先', claim: ac ? '开(每 {min} 分钟,{window})' : '关', min: claimIntervalMin(), window: claimWindowMin() > 0 ? '运行 {windowMin} 分钟' : '一直运行', windowMin: claimWindowMin(), proxy: proxyUrl() || '(环境变量/未设置)' });
+    logger.info('DAEMON', '网络出口（全局）:{route},ZCode 自动领取:{claim},代理 {proxy}', { route: proxyFirst() ? '代理优先' : '直连优先', claim: ac ? '开(每 {min} 分钟,{window})' : '关', min: claimIntervalMin(), window: claimWindowMin() > 0 ? '运行 {windowMin} 分钟' : '一直运行', windowMin: claimWindowMin(), proxy: proxyUrl() || '(环境变量/未设置)' });
     return json(res, 200, {
       proxyFirst: proxyFirst(), autoClaim: ac, autoClaimUntil: ac ? autoClaimUntil() : null,
       claimIntervalMin: claimIntervalMin(), claimWindowMin: claimWindowMin(),
@@ -750,6 +946,7 @@ async function handleApi(req, res, url) {
       const hits = list.filter((a) => a.provider === kind && a.uid === probe.user_id);
       for (const a of hits) {
         a.meta = { ...(a.meta || {}), qoderWebSession: { cookie, capturedAt: now } };
+        delete a.meta.qoderWebDead;   // 新 cookie 落地即清失效标记（保活监视下一轮重新评估）
         a.updatedAt = now;
       }
       return hits.length;
@@ -769,6 +966,350 @@ async function handleApi(req, res, url) {
     return json(res, 200, { ok: true, bound });
   }
 
+  // ── 通用 cookie 站点捕获(issue #23):登录窗口收割 → 探测 → 入账号库(provider=site.provider)
+  if (p === '/api/cookie-sites' && method === 'GET') {
+    const accounts = await loadAccounts();
+    return json(res, 200, {
+      sites: COOKIE_SITES.map((site) => {
+        const rows = accounts
+          .filter((a) => a.provider === site.provider && a.meta?.cookieSiteId === site.id)
+          .map((a) => ({
+            id: a.id,
+            name: a.name || site.accountName,
+            capturedAt: a.meta?.cookieSiteSession?.capturedAt || null,
+            quota: a.meta?.quotaSnapshot || null,
+            mimoBalance: a.meta?.mimoBalance || null,
+            riverBalance: a.meta?.riverBalance || null,
+            msBalance: a.meta?.msBalance || null,
+            longcatPacks: a.meta?.longcatPacks || null,
+            lastProbe: a.meta?.lastProbe || null,   // 呼吸灯数据源：ok / warn / dead + 失败原因
+          }));
+        const latest = rows.reduce((t, r) => (r.capturedAt && (!t || r.capturedAt > t) ? r.capturedAt : t), null);
+        return {
+          id: site.id, name: site.name, label: site.label, loginUrl: site.loginUrl, hint: site.hint,
+          accountId: rows[0]?.id || null, capturedAt: latest, accounts: rows,
+        };
+      }),
+    });
+  }
+
+  if (p.startsWith('/api/cookie-sites/') && p.endsWith('/capture') && method === 'POST') {
+    const siteId = p.slice('/api/cookie-sites/'.length, -'/capture'.length);
+    const site = getSite(siteId);
+    if (!site) return json(res, 404, { error: `站点 ${siteId} 未配置` });
+    const body = await readBody(req).catch(() => ({}));
+    const cookie = String(body?.cookie || '').trim();
+    // localStorage 凭据线（river = WorkOS SPA 会话）：cookie 无关，探测走站点自有 API
+    const storage = (body?.storage && typeof body.storage === 'object' && !Array.isArray(body.storage)) ? body.storage : {};
+    const storageSite = Array.isArray(site.storageKeys) && site.storageKeys.length > 0 ? site : null;
+    const count = body?.diag?.cookieCount;
+    logger.info('COOKIE-SITE', '{name} cookie 收割上报({count} 条)', { name: site.name, count: typeof count === 'number' ? count : '-' });
+    if (storageSite) {
+      if (cookie.length > 32768) return json(res, 400, { error: 'cookie 体积异常，请重新登录后再捕获' });
+    } else if (!cookie || cookie.length > 32768) {
+      return json(res, 400, { error: 'cookie 不能为空，请重新登录后再捕获' });
+    }
+
+    // 探测策略:桌面壳隐藏 Chromium 窗口探针产的 probeHtml 优先(真浏览器视角,过风控);
+    // 无 probeHtml(CLI / 非桌面)回退 Node fetch 探测(fetchJsonRace,跟全局代理)。
+    // storage 站点（river）与 verify:'api' 站点（modelscope）跳过 HTML 探针——余额 API 调用本身就是探测。
+    const skipGenericProbe = Boolean(storageSite) || site.verify === 'api';
+    const probeHtml = skipGenericProbe ? null : (typeof body?.probeHtml === 'string' && body.probeHtml.length > 0 && body.probeHtml.length < 4 * 1024 * 1024 ? body.probeHtml : null);
+    const probe = skipGenericProbe ? { ok: true } : (probeHtml ? verifyProbeHtml(site, probeHtml) : await verifySiteCookie(site, cookie));
+    if (probeHtml && !probe.ok) {
+      // 临时调试:浏览器探针页首 120 字进日志,便于区分「风控挑战页 / 登录页壳 / 结构变化」三元
+      const dbg = JSON.stringify(String(body.probeHtml).replace(/\s+/g, ' ').slice(0, 120));
+      logger.warn('COOKIE-SITE', '{name} 浏览器探针未中(reason={reason}) head={head}', { name: site.name, reason: probe.reason, head: dbg });
+    }
+    if (!probe.ok) {
+      const reason = probe.reason === 'invalid' ? '探测 401/403（会话无效）'
+        : probe.reason === 'no-match' ? '探测页面缺少配额标记（登录未完成或已登出）'
+        : `探测失败（${probe.reason}${probe.status ? ' HTTP ' + probe.status : ''}）`;
+      logger.warn('COOKIE-SITE', '{name} cookie 捕获被拒:{reason}', { name: site.name, reason });
+      return json(res, probe.reason === 'invalid' ? 401 : probe.reason === 'no-match' ? 422 : 502, { error: probe.reason === 'invalid' ? '会话不可用，请重新登录该站点后再捕获（探测 401/403）' : probe.reason === 'no-match' ? 'dashboard 页未找到配额标记——页面结构可能有更新，请稍后再试或反馈给我们' : '探测站点失败：' + (probe.error || reason) });
+    }
+
+    const now = new Date().toISOString();
+    // 身份探测(免费账号要多账号轮换):从浏览器探针 HTML 里抽一次身份;
+    // 抽不到 → 无身份单例(与初版一致),不静默覆盖有身份的行。
+    let identity = probeHtml ? extractIdentity(site, probeHtml) : null;
+    // issue #24：浏览器探针 HTML 顺手解析额度读数（推送时不再打网络；解析不出保持旧快照）
+    let quotaSnapshot = probeHtml ? extractQuotaSnapshot(site, probeHtml) : null;
+    let mimoUserId = null;
+    let mimoBalance = null;
+
+    // issue #26：小米 MiMo 控制台资料与余额抓取
+    if (site.id === 'xiaomi-mimo') {
+      try {
+        const { fetchXiaomiMimoProfile, fetchXiaomiMimoBalance } = await import('./xiaomiMimoClient.js');
+        const prof = await fetchXiaomiMimoProfile(cookie);
+        if (prof.ok && prof.userId) {
+          mimoUserId = prof.userId;
+          identity = prof.userName ? `${prof.userName} (${prof.userId})` : prof.userId;
+          const bal = await fetchXiaomiMimoBalance(cookie, mimoUserId);
+          if (bal.ok) {
+            mimoBalance = { balance: bal.balance, cash: bal.cash, voucher: bal.voucher, at: now };
+            quotaSnapshot = { used: 0, total: bal.balance, isCreditBalance: true, at: now };
+          }
+        }
+      } catch (mimoErr) {
+        logger.warn('COOKIE-SITE', '小米 MiMo 控制台资料/余额抓取异常:{err}', { err: mimoErr.message });
+      }
+    }
+
+    // river（WorkOS 会话线）：cookie 直连 → Bearer → 刷新兑换，探测/身份/额度一步完成。
+    // 实测（2026-10-14）：SPA token 只在内存，localStorage 通常空——cookie 是主通道。
+    let riverSession = null;
+    let riverBalance = null;
+    if (site.id === 'river') {
+      try {
+        const { parseRiverSession, fetchRiverBalance } = await import('./riverClient.js');
+        const sess = parseRiverSession(storage);
+        sess.cookie = cookie;   // 多源合并 cookie 串（auth.console.river.ai 的会话凭据在内）
+        const storageCount = Object.values(storage || {}).filter((v) => typeof v === 'string' && v.trim()).length;
+        const cookieNames = Array.isArray(body?.diag?.cookieNames) ? body.diag.cookieNames.slice(0, 40).join(',') : '';
+        logger.info('COOKIE-SITE', '{name} 凭据盘点：storage {sc} 项 / cookie {cc} 条（{names}）', { name: site.name, sc: storageCount, cc: String(cookie || '').split(';').filter((x) => x.trim()).length, names: cookieNames || '—' });
+        if (!sess.accessToken && !cookie) {
+          logger.warn('COOKIE-SITE', '{name} 未读到任何会话凭据（storage token 与 cookie 均空）', { name: site.name });
+          return json(res, 400, { error: '未读到 River 登录会话（WorkOS token / 会话 cookie 均无），请在登录窗完成登录后再关闭' });
+        }
+        const bal = await fetchRiverBalance({ meta: { workosSession: sess } }, {
+          log: (m) => logger.info('COOKIE-SITE', '{name} {msg}', { name: site.name, msg: m }),
+        });
+        if (!bal.ok) {
+          logger.warn('COOKIE-SITE', '{name} 余额探测被拒:{reason}', { name: site.name, reason: bal.error });
+          return json(res, (bal.status === 401 || bal.status === 403) ? 401 : 502, {
+            error: (bal.status === 401 || bal.status === 403)
+              ? '会话不可用，请重新登录该站点后再捕获（探测 401/403）'
+              : '探测站点失败：' + (bal.error || ''),
+          });
+        }
+        if (bal.session) Object.assign(sess, bal.session);   // 刷新兑换到的新链一并落库（单次轮换）
+        riverSession = sess;
+        riverBalance = { balanceUsd: bal.balance, at: now };
+        identity = sess.user?.email || sess.user?.id || null;
+        quotaSnapshot = { used: 0, total: bal.balance, isCreditBalance: true };
+        logger.info('COOKIE-SITE', '{name} 余额探测通过（通道 {channel}，{balance} USD）', { name: site.name, channel: bal.channel, balance: bal.balance });
+      } catch (riverErr) {
+        logger.warn('COOKIE-SITE', '{name} 余额抓取异常:{err}', { name: site.name, err: riverErr.message });
+        return json(res, 502, { error: '探测站点失败：' + (riverErr.message || '') });
+      }
+    }
+
+    // modelsscope（CD#25）：魔粒余额 API 即探测；每日额度自动发放（无签到动作端点），只读余额
+    let msSession = null;
+    let msBalance = null;
+    if (site.id === 'modelscope') {
+      try {
+        const { probeMagicubeSession } = await import('./modelscopeClient.js');
+        if (!cookie) {
+          logger.warn('COOKIE-SITE', '{name} 未读到会话 cookie', { name: site.name });
+          return json(res, 400, { error: '未读到 ModelScope 登录会话，请在登录窗完成登录后再关闭' });
+        }
+        const probe = await probeMagicubeSession(cookie);
+        if (!probe.ok) {
+          logger.warn('COOKIE-SITE', '{name} 魔粒余额探测被拒:{reason}', { name: site.name, reason: probe.error });
+          return json(res, (probe.status === 401 || probe.status === 403) ? 401 : 502, {
+            error: (probe.status === 401 || probe.status === 403)
+              ? '会话不可用，请重新登录该站点后再捕获（探测 401/403）'
+              : '探测站点失败：' + (probe.error || ''),
+          });
+        }
+        msSession = probe.msSession;
+        msBalance = probe.msBalance;
+        identity = probe.identity;
+        quotaSnapshot = { used: 0, total: probe.balance, isCreditBalance: true };
+        logger.info('COOKIE-SITE', '{name} 魔粒余额探测通过（{balance} 个，今日 {today} / 长期 {long}）', { name: site.name, balance: probe.balance, today: probe.msBalance.today ?? '—', long: probe.msBalance.long ?? '—' });
+        if (!identity) logger.warn('COOKIE-SITE', '{name} 身份未解析（login/info 响应字段：{keys}）', { name: site.name, keys: probe.keys || '—' });
+      } catch (msErr) {
+        logger.warn('COOKIE-SITE', '{name} 魔粒余额抓取异常:{err}', { name: site.name, err: msErr.message });
+        return json(res, 502, { error: '探测站点失败：' + (msErr.message || '') });
+      }
+    }
+
+    // LongCat（issue #29）：Token 资源包 summary API 即探测（美团 SSO cookie 直连，
+    // 未登录 401「用户未登录」）。纯只读——包为购买/赠送发放，无签到动作端点。
+    let lcPacks = null;
+    let lcSession = null;
+    let longcatSnapshot = null;
+    if (site.id === 'longcat') {
+      try {
+        const lcMod = await import('./longcatClient.js');
+        const { fetchLongcatPacks, fetchLongcatIdentity } = lcMod;
+        longcatSnapshot = lcMod.longcatSnapshot;
+        if (!cookie) {
+          logger.warn('COOKIE-SITE', '{name} 未读到会话 cookie', { name: site.name });
+          return json(res, 400, { error: '未读到 LongCat 登录会话，请在登录窗完成登录后再关闭' });
+        }
+        const packs = await fetchLongcatPacks(cookie);
+        if (!packs.ok) {
+          logger.warn('COOKIE-SITE', '{name} 资源包探测被拒:{reason}', { name: site.name, reason: packs.error });
+          return json(res, packs.authExpired ? 401 : 502, {
+            error: packs.authExpired
+              ? '会话不可用，请重新登录该站点后再捕获（探测 401/403）'
+              : '探测站点失败：' + (packs.error || ''),
+          });
+        }
+        lcPacks = packs.packs;
+        const lcTotal = lcPacks.reduce((s, p) => s + Math.max(0, Number(p.remaining) || 0), 0);
+        quotaSnapshot = { used: 0, total: lcTotal, isCreditBalance: true };
+        // 身份 fail-soft：GET /api/v1/user-current 解析不出走无身份单例，不阻断捕获
+        const ident = await fetchLongcatIdentity(cookie).catch(() => null);
+        if (ident?.ok) {
+          lcSession = ident.session;
+          identity = ident.session?.email || ident.session?.name || ident.session?.userId || null;
+        }
+        logger.info('COOKIE-SITE', '{name} 资源包探测通过（{balance} Token，{n} 个包，身份 {identity}）', { name: site.name, balance: lcTotal, n: lcPacks.length, identity: identity || '—' });
+      } catch (lcErr) {
+        logger.warn('COOKIE-SITE', '{name} 资源包抓取异常:{err}', { name: site.name, err: lcErr.message });
+        return json(res, 502, { error: '探测站点失败：' + (lcErr.message || '') });
+      }
+    }
+
+    const ih = identityHashOf(mimoUserId || riverSession?.user?.id || msSession?.id || lcSession?.userId || identity);
+    const quotaMeta = quotaSnapshot ? { quotaSnapshot: { ...quotaSnapshot, at: now } } : {};
+    const cred = riverSession ? riverSession.accessToken : cookie;   // 落盘的凭据主体
+    const riverUid = riverSession?.user?.id || null;
+    let accountId = null;
+    await withAccounts((list) => {
+      const hit = list.find((a) => a.provider === site.provider && a.meta?.cookieSiteId === site.id
+        && (ih ? a.meta?.identityHash === ih : !a.meta?.identityHash));
+      const accName = mimoUserId
+        ? `Xiaomi MiMo (UID: ${mimoUserId})`
+        : (site.id === 'river'
+          ? `River AI (${identity || '会话'})`
+          : (site.id === 'modelscope'
+            ? `ModelScope (${identity || '会话'})`
+            : (site.id === 'longcat'
+                ? `LongCat (${identity || '会话'})`
+                : (site.accountName + (identity ? `(${identity})` : '')))));
+      // 自动行名只在「没手改过且现名属自动名家族」时写入（meta.renamed + isAutoGeneratedName 双闸）
+      const autoName = (row) => { if (canAutoRename(site, row)) row.name = accName; };
+      if (hit) {
+        hit.token = cred;
+        if (mimoUserId) { hit.uid = mimoUserId; autoName(hit); }
+        if (riverUid) { hit.uid = riverUid; autoName(hit); }
+        if (msSession && (msSession.id || msSession.email || msSession.name)) {
+          if (msSession.id) hit.uid = String(msSession.id);
+          autoName(hit);
+        }
+        hit.meta = {
+          ...(hit.meta || {}),
+          cookieSiteSession: { cookie, capturedAt: now },
+          ...(ih ? { identityHash: ih } : {}),
+          ...quotaMeta,
+          ...(mimoUserId ? { userId: mimoUserId } : {}),
+          ...(mimoBalance ? { mimoBalance } : {}),
+          ...(riverSession ? { workosSession: riverSession, workosUser: riverSession.user || {} } : {}),
+          ...(riverBalance ? { riverBalance } : {}),
+          ...(msSession ? { msSession, msBalance } : {}),
+          ...(lcPacks ? { longcatPacks: longcatSnapshot(lcPacks) } : {}),
+          ...(lcSession ? { longcatSession: lcSession } : {}),
+        };
+        if (lcSession?.userId) { hit.uid = String(lcSession.userId); autoName(hit); }
+        hit.updatedAt = now;
+        accountId = hit.id;
+      } else {
+        const acc = normalizeAccountInput({
+          name: accName,
+          provider: site.provider,
+          token: cred,
+          uid: mimoUserId || riverUid || (msSession?.id ? String(msSession.id) : undefined) || (lcSession?.userId ? String(lcSession.userId) : undefined) || undefined,
+          source: 'web-session',
+          meta: {
+            cookieSiteId: site.id,
+            cookieSiteSession: { cookie, capturedAt: now },
+            ...(ih ? { identityHash: ih } : {}),
+            ...quotaMeta,
+            ...(mimoUserId ? { userId: mimoUserId } : {}),
+            ...(mimoBalance ? { mimoBalance } : {}),
+            ...(riverSession ? { workosSession: riverSession, workosUser: riverSession.user || {} } : {}),
+            ...(riverBalance ? { riverBalance } : {}),
+          ...(msSession ? { msSession, msBalance } : {}),
+          ...(lcPacks ? { longcatPacks: longcatSnapshot(lcPacks) } : {}),
+          ...(lcSession ? { longcatSession: lcSession } : {}),
+          },
+        });
+        acc.verified = true;
+        list.push(acc);
+        accountId = acc.id;
+      }
+    });
+    if (ih) logger.info('COOKIE-SITE', '{name} 身份归户({identity},账号轮换键生效)', { name: site.name, identity });
+    logger.info('COOKIE-SITE', '{name} cookie 捕获成功(探测通过,同步到 10Router 后卡片点亮)', { name: site.name });
+    // 捕获成功后只推当前站点的额度卡（单号精准推送，绝不全量刷屏）
+    (async () => {
+      try {
+        if (site.id === 'tokenharbor') {
+          await tenrouter.pushQuotaCards({ onlySources: ['tokenharbor'] });
+        } else if (accountId) {
+          const accs = await loadAccounts();
+          const target = accs.find((x) => x.id === accountId);
+          if (target) {
+            let src = null;
+            if (site.id === 'xiaomi-mimo') {
+              const { buildXiaomiMimoQuotaPayload } = await import('./xiaomiMimoClient.js');
+              src = buildXiaomiMimoQuotaPayload(target).source;
+            } else if (site.id === 'river') {
+              const { buildRiverQuotaPayload } = await import('./riverClient.js');
+              src = buildRiverQuotaPayload(target).source;
+            } else if (site.id === 'modelscope') {
+              const { buildModelScopeQuotaPayload } = await import('./modelscopeClient.js');
+              src = buildModelScopeQuotaPayload(target).source;
+            } else if (site.id === 'longcat') {
+              const { buildLongcatQuotaPayload } = await import('./longcatClient.js');
+              src = buildLongcatQuotaPayload(target).source;
+            }
+            if (src) await tenrouter.pushQuotaCards({ onlySources: [src] });
+          }
+        }
+      } catch (pushErr) {
+        logger.warn('COOKIE-SITE', '{name} 捕获后单路推卡失败:{err}', { name: site.name, err: pushErr.message });
+      }
+    })().catch(() => {});
+    return json(res, 200, { ok: true, accountId });
+  }
+
+  // ── 就地重探：用已存会话 cookie 重跑「身份+余额+流水」并回填行（免登录窗重捕）──
+  if (p.startsWith('/api/cookie-sites/') && p.endsWith('/reprobe') && method === 'POST') {
+    const siteId = p.slice('/api/cookie-sites/'.length, -'/reprobe'.length);
+    const site = getSite(siteId);
+    if (!site) return json(res, 404, { error: `站点 ${siteId} 未配置` });
+    const body = await readBody(req).catch(() => ({}));
+    const onlyId = body?.accountId ? String(body.accountId) : null;
+    const accounts = await loadAccounts();
+    const targets = accounts.filter((a) => a.provider === site.provider && a.meta?.cookieSiteId === site.id
+      && (!onlyId || a.id === onlyId));
+    if (!targets.length) return json(res, 404, { error: '没有可重探的会话（先登录捕获一次）' });
+    // 重探只推涉及的那几路 source（其余卡不打上游、不重推）：
+    // tokenharbor 是单例卡（source 固定）；mimo/river/ms 按账号算 source；失败行也进名单
+    // ——失败说明会话可能已死，恰好要把 message 状态卡推上去让 10R 卡面可见。
+    const touchedSources = new Set();
+    const sourceOf = async (a) => {
+      if (site.id === 'tokenharbor') return 'tokenharbor';
+      try {
+        const m = await import(
+          site.id === 'xiaomi-mimo' ? './xiaomiMimoClient.js'
+          : site.id === 'river' ? './riverClient.js'
+          : site.id === 'longcat' ? './longcatClient.js' : './modelscopeClient.js');
+        const build = site.id === 'xiaomi-mimo' ? m.buildXiaomiMimoQuotaPayload
+          : site.id === 'river' ? m.buildRiverQuotaPayload
+          : site.id === 'longcat' ? m.buildLongcatQuotaPayload : m.buildModelScopeQuotaPayload;
+        return build(a).source;
+      } catch { return null; }
+    };
+    const results = [];
+    for (const a of targets) {
+      const touched = await sourceOf(a);
+      if (touched) touchedSources.add(touched);
+      const row = await reprobeCookieAccount(site, a);
+      results.push(row);
+    }
+    // 重探后只同步涉及的额度卡（label/数字都可能变；失败行也已被纳入 touchedSources）
+    if (touchedSources.size) tenrouter.pushQuotaCards({ onlySources: [...touchedSources] }).catch(() => {});
+    return json(res, 200, { results });
+  }
+
   // ── 本机检测 / 凭据扫描 ──
   if (p === '/api/local/detect' && method === 'GET') {
     return json(res, 200, { apps: detectQoderApps(), workbuddyDir: workbuddyAuthDir(), zcode: detectZcode(), mirasim: detectMirasim(), catpaw: detectCatpaw(), trae: detectTrae(), minimax: detectMiniMax(), legacy: detectInstalls() });
@@ -881,7 +1422,15 @@ async function handleApi(req, res, url) {
   if (p === '/api/tenrouter' && method === 'PUT') {
     const body = await readBody(req).catch(() => ({}));
     try {
-      await tenrouter.updateConfig({ endpoint: body?.endpoint, key: body?.key, adminPassword: body?.adminPassword, syncEnabled: body?.syncEnabled, sources: body?.sources });
+      await tenrouter.updateConfig({
+        endpoint: body?.endpoint,
+        key: body?.key,
+        adminPassword: body?.adminPassword,
+        syncEnabled: body?.syncEnabled,
+        sources: body?.sources,
+        quotaPushEnabled: body?.quotaPushEnabled,
+        quotaPushIntervalMin: body?.quotaPushIntervalMin,
+      });
       return json(res, 200, await tenrouter.publicConfig());
     } catch (e) { return json(res, 400, { error: e.message }); }
   }
@@ -901,7 +1450,12 @@ async function handleApi(req, res, url) {
   }
   if (p === '/api/tenrouter/quotas' && method === 'GET') {
     try {
-      return json(res, 200, await tenrouter.fetchQuotas({ force: url.searchParams.get('force') === '1' }));
+      const force = url.searchParams.get('force') === '1';
+      // 用户主动刷新额度时（force=1）：先主动向 10Router 推一轮最新免费额度卡，再拉取全量额度
+      if (force) {
+        await tenrouter.pushQuotaCards().catch(() => {});
+      }
+      return json(res, 200, await tenrouter.fetchQuotas({ force }));
     } catch (e) { return json(res, e.code === 'NOT_CONFIGURED' ? 409 : 502, { error: e.message, code: e.code }); }
   }
   if (p === '/api/tenrouter/health' && method === 'GET') {
@@ -924,6 +1478,12 @@ async function handleApi(req, res, url) {
       return json(res, 200, await syncAccountsTo10r({ endpoint: c.endpoint, key: c.key, adminPassword: c.adminPassword, accounts: await loadAccounts() }));
     } catch (e) { return json(res, e.code === 'NOT_CONFIGURED' ? 409 : 500, { error: e.message, code: e.code }); }
   }
+  // 额度卡推送（issue #24）：手动触发一轮 external-quota 推送（面板「免费额度」页同步按钮附带）
+  if (p === '/api/tenrouter/push-quota' && method === 'POST') {
+    try {
+      return json(res, 200, await tenrouter.pushQuotaCards());
+    } catch (e) { return json(res, 500, { error: e.message, code: e.code }); }
+  }
 
   // Qoder 设备身份组件（Linux / fnOS：从官方 qodercli 提取 UMID，国际版签到用）
   if (p === '/api/qoder/umid' && method === 'GET') {
@@ -1148,7 +1708,7 @@ export function verifyPanelPassword(input) {
   return false;
 }
 
-/** 出口代理地址（面板「ZCode 网络出口」里存的，环境变量不算——登录窗显式设置用） */
+/** 出口代理地址（面板「网络出口（全局）」里存的，环境变量不算——登录窗显式设置用） */
 export function getLoginProxyUrl() { return proxyUrl() || null; }
 
 export async function startDaemon(port = DEFAULT_PORT, host = '127.0.0.1') {
@@ -1183,7 +1743,7 @@ export async function startDaemon(port = DEFAULT_PORT, host = '127.0.0.1') {
   const server = http.createServer(async (req, res) => {
     const url = new URL(req.url, 'http://localhost');
     try {
-      const denied = rejectForeignRequest(req.headers, host);
+      const denied = rejectForeignRequest(req.headers, host, url.pathname);
       if (denied) {
         logger.warn('DAEMON', '拒绝请求 {method} {path}:{denied}(Host={host} Origin={origin})', { method: req.method, path: url.pathname, denied, host: req.headers.host || '', origin: req.headers.origin || '' });
         return json(res, 403, { error: denied });
@@ -1208,6 +1768,38 @@ export async function startDaemon(port = DEFAULT_PORT, host = '127.0.0.1') {
       if (url.pathname === '/gateway/trae/v1/messages') {
         return await traeGateway.handleGateway(req, res);
       }
+      // 10Router 外配额卡「刷新配额」回调（自鉴权：HMAC 签名，不走面板密码门；浏览器直连需 CORS）
+      if (url.pathname === '/api/quota-refresh') {
+        res.setHeader('Access-Control-Allow-Origin', '*');
+        res.setHeader('Access-Control-Allow-Methods', 'POST, OPTIONS');
+        res.setHeader('Access-Control-Allow-Headers', 'content-type');
+        if (req.method === 'OPTIONS') { res.writeHead(204); return res.end(); }
+        if (req.method !== 'POST') return json(res, 405, { error: '仅支持 POST' });
+        const remote = remoteKeyAddr(req);
+        const { verifyQuotaRefresh, logRefresh, refreshRateLimited } = await import('./quotaRefresh.js');
+        if (refreshRateLimited(remote)) {
+          logger.warn('10R', '外配额刷新回调限流 {remote}', { remote });
+          return json(res, 429, { error: '刷新过于频繁，请稍后再试' });
+        }
+        const v = await verifyQuotaRefresh({
+          source: url.searchParams.get('source'),
+          exp: url.searchParams.get('exp'),
+          sig: url.searchParams.get('sig'),
+        });
+        if (!v.ok) {
+          logger.warn('10R', '外配额刷新回调签名无效（{reason}，source={source}）', { reason: v.reason || '?', source: url.searchParams.get('source') || '—' });
+          return json(res, 401, { error: '签名校验失败' });
+        }
+        const source = String(url.searchParams.get('source'));
+        logRefresh(source);
+        // 只推这一路 source：现拉余额 → 推卡（载荷重新签发新 refreshUrl，签名滚动）→ 返回结果
+        const { runQuotaPush } = await import('./externalQuota.js');
+        const cfg = tenrouter.loadConfig();
+        if (!cfg.endpoint || !cfg.key) return json(res, 503, { error: '未配置 10Router 地址与虚拟 key' });
+        const accounts = await loadAccounts();
+        const r = await runQuotaPush({ endpoint: cfg.endpoint, key: cfg.key, accounts, fetchImpl: undefined, onlySource: source, noProbeMark: true });
+        return json(res, 200, { ok: true, results: r.results });
+      }
       if (url.pathname.startsWith('/api/')) {
         return await handleApi(req, res, url);
       }