dsh-codearts 1.2.9 → 1.2.11

package/lib/index.d.mts

@@ -787,6 +787,12 @@ interface CodeArtsModelInfo {
   id: string;
   name: string;
   contextWindow: number;
+  /**
+   * `contextWindow` 是上游真的给的，还是兜底值（32768）。
+   *
+   * 卡片只在上游给值时印「1M 上下文」这类规格；兜底值印出来就是假数据。
+   */
+  contextWindowKnown?: boolean;
   maxTokens: number;
   supportsImages: boolean;
   /**
@@ -1013,6 +1019,15 @@ interface CodeArtsCredential {
   storedAt?: number;
   /** 续期已尝试且失败（多半已过期），需用户重新登录。 */
   stale?: boolean;
+  /**
+   * 用户手动暂停：凭证还在、也未必过期，只是暂时不想用它。
+   *
+   * 和 `stale` 分开：`stale` 是「这个号坏了，必须重新登录」，这里只是「先别派活」。
+   * 恢复时不需要重新登录，也不会清掉池里的禁用/冷却状态。
+   */
+  paused?: boolean;
+  /** 用户置顶：轮转时优先用这个号（仍受冷却与并发槽位约束）。 */
+  pinned?: boolean;
 }
 declare function codeartsAuthPath(home?: string): string;
 interface ResolvedCredential {
@@ -1064,6 +1079,10 @@ interface CodeArtsAccountSummary {
   stale: boolean;
   /** 带 AK/SK，能产生签名（只有 security_token 的降级凭证不能）。 */
   signable: boolean;
+  /** 用户手动暂停（不参与轮转）。 */
+  paused: boolean;
+  /** 用户置顶（轮转优先）。 */
+  pinned: boolean;
 }
 declare function codeartsAccountsPath(home?: string): string;
 /** 多账号凭证存储：一个账号一份槽位，共用一个文档文件。 */
@@ -1113,6 +1132,21 @@ declare class CodeArtsAccountStore {
   /** 手工粘贴 security_token（降级态，无 AK/SK）——固定覆盖同一个「手工」账号。 */
   set(token: string, label?: string): Promise<void>;
   remove(id: string): Promise<void>;
+  /**
+   * 暂停 / 恢复一个账号。
+   *
+   * 只改标记，不碰凭证：恢复时不需要重新登录。重新装配槽位是因为 AccountSlot
+   * 缓存的 `_cred` 是旧对象，续期回写会把它盖回来 —— 换了对象，续期写到新文档里。
+   */
+  setPaused(id: string, paused: boolean): Promise<boolean>;
+  /** 置顶 / 取消置顶：只改变轮转先后，不绕过冷却与并发上限。 */
+  setPinned(id: string, pinned: boolean): Promise<boolean>;
+  /** shim 用：参与轮转的账号 id（排除用户暂停的）。 */
+  dispatchIds(): Promise<string[]>;
+  /** 被用户暂停的账号 id（账号池据此保留状态但不派活）。 */
+  pausedIds(): Promise<string[]>;
+  /** 置顶账号的 id 列表（给账号池排序用）。 */
+  pinnedIds(): Promise<string[]>;
   /** 清空全部账号（整体登出）。 */
   clear(): Promise<void>;
   /** 给 shim 用：解析某账号的签名材料（内部含续期）。 */
@@ -1149,6 +1183,10 @@ interface PoolOptions {
 }
 declare class CodeArtsAccountPool {
   private readonly accounts;
+  /** 用户手动暂停的账号：运行时状态留着（卡片还看得见槽位），但不参与轮转。 */
+  private readonly paused;
+  /** 用户置顶的账号：选号时排在最前面，不再按「最久未用」轮它。 */
+  private readonly preferred;
   private readonly maxConcurrent;
   private readonly now;
   constructor(ids: readonly string[], options?: PoolOptions);
@@ -1158,8 +1196,12 @@ declare class CodeArtsAccountPool {
   get(id: string): AccountRuntime | undefined;
   /** 账号本身可用（没被禁用、不在冷却中）。 */
   healthy(id: string): boolean;
-  /** 现在就能接活的账号（健康 + 本地还有空槽位），按「最久未用」排序。 */
+  /** 现在就能接活的账号（健康 + 未暂停 + 本地还有空槽位），置顶的优先，其余按「最久未用」。 */
   private available;
+  /** 设置暂停集合（账号 id）。与账号文档同步时调用。 */
+  setPaused(ids: readonly string[]): void;
+  /** 设置置顶集合（账号 id）。置顶只在「同时可用」时改变先后，不会绕过冷却/上限。 */
+  setPreferred(ids: readonly string[]): void;
   /**
    * 选一个账号。
    *
@@ -1345,6 +1387,24 @@ interface UsageSnapshot {
   }[];
   /** 今天按账号的合计。 */
   byAccountToday: Record<string, UsageTotals>;
+  /** 今天的失败次数：总数 + 按错误类别。 */
+  failuresToday: {
+    total: number;
+    byKind: Record<string, number>;
+  };
+  /** 今天按账号的失败次数。 */
+  failuresByAccountToday: Record<string, number>;
+  /**
+   * 今天的首字延迟分位（毫秒）。样本为 0 时 p50/p95 缺省。
+   *
+   * `overflow` 表示 P95 落进了「>30 秒」那一档，前端据此显示「30s+」。
+   */
+  latencyToday: {
+    samples: number;
+    p50?: number;
+    p95?: number;
+    overflow: boolean;
+  };
   /** 账本覆盖的天数（便于「数据从哪天开始」的说明）。 */
   days: number;
   /**
@@ -1405,6 +1465,20 @@ declare class CodeArtsUsageTracker {
   noteUsage(accountId: string, model: string, raw: RawUsage | undefined, at?: number): void;
   /** 一天里的逐小时桶，第一次写的时候才建（老账本没有这个键）。 */
   private hoursOf;
+  /**
+   * 记一次失败请求。
+   *
+   * 只在「这次请求最终回给用户一个错误」时调用一次 —— 插件内部换号重试不算失败，
+   * 否则一个排队重试就能把失败率刷成好几倍。`kind` 用 shim 的失败出口标识。
+   */
+  noteFailure(kind: string, accountId?: string, at?: number): void;
+  /**
+   * 记一次首字延迟（毫秒），落进直方图。
+   *
+   * 从请求进入 shim 算起，到上游第一帧真的写给 DSH 为止 —— 排队和换号的时间都算进去，
+   * 因为那正是用户盯着转圈等掉的时长。
+   */
+  noteLatency(ms: number, at?: number): void;
   /**
    * 丢弃保留期之外的天（按日期键比较即可，YYYY-MM-DD 是字典序）。
    *

package/lib/index.mjs

@@ -1,4 +1,4 @@
-import { A as upstreamErrorMessage, B as modelUnavailableReason, C as isWelfareClaimedStatus, D as prepareChatBody, E as pickDailyWelfareCampaign, F as filterEnabledModels, G as codeartsAuthPath, H as CodeArtsCredentialStore, I as forgetModelUnavailable, K as startLogin, L as isBenefitBlocked, M as FALLBACK_CODEARTS_MODELS, N as clearBenefitBlocked, O as rateLimitFrame, P as creditRatioLabel, R as isBenefitModel, S as isTpmLimit, T as modelUnavailableReasonText, U as MANUAL_ACCOUNT_ID, V as CodeArtsAccountStore, W as codeartsAccountsPath, _ as isIamTokenError, a as SNAP_HOST, b as isParamInvalidFrame, c as claimDailyWelfare, d as fetchCallerIdentity, f as fetchModels, g as isConcurrencyCap, h as firstFrameError, i as refreshCatalog, j as CodeArtsCatalog, k as signedGet, l as clearQueueStatus, m as fetchWelfareCampaigns, n as codeartsUsagePath, o as canonicalModel, p as fetchQueueStatus, r as discoverModels, s as chatStream, t as CodeArtsUsageTracker, u as degradeTokenCeiling, v as isModelNotAccessible, w as maxTokensCeilingFor, x as isQueueableRate, y as isNotMultimodal, z as markModelUnavailable } from "./usage-B2LNsUuR.mjs";
+import { A as signedGet, B as markModelUnavailable, C as isTpmLimit, D as pickDailyWelfareCampaign, E as modelUnavailableReasonText, F as creditRatioLabel, G as codeartsAccountsPath, H as CodeArtsAccountStore, I as filterEnabledModels, J as startLogin, K as codeartsAuthPath, L as forgetModelUnavailable, M as CodeArtsCatalog, N as FALLBACK_CODEARTS_MODELS, O as prepareChatBody, P as clearBenefitBlocked, R as isBenefitBlocked, S as isQueueableRate, T as maxTokensCeilingFor, U as CodeArtsCredentialStore, V as modelUnavailableReason, W as MANUAL_ACCOUNT_ID, _ as isConcurrencyCap, a as refreshCatalog, b as isNotMultimodal, c as chatStream, d as degradeTokenCeiling, f as fetchCallerIdentity, g as firstFrameError, h as fetchWelfareCampaigns, i as discoverModels, j as upstreamErrorMessage, k as rateLimitFrame, l as claimDailyWelfare, m as fetchQueueStatus, n as CodeArtsUsageTracker, o as SNAP_HOST, p as fetchModels, q as credentialFromOAuth, r as codeartsUsagePath, s as canonicalModel, t as CODEARTS_VERSION, u as clearQueueStatus, v as isIamTokenError, w as isWelfareClaimedStatus, x as isParamInvalidFrame, y as isModelNotAccessible, z as isBenefitModel } from "./version-Dq3wXMop.mjs";
 import { i as lazyApi, r as createProvider } from "./models-CgKCibpk.mjs";
 import z from "@deepseek-ai/schemastery";
 import { randomBytes, timingSafeEqual } from "node:crypto";
@@ -16,6 +16,10 @@ import * as settingsModule from "@deepseek-ai/dsh-settings";
 const CAPPED_HINT_MS = 3e4;
 var CodeArtsAccountPool = class {
 	accounts = /* @__PURE__ */ new Map();
+	/** 用户手动暂停的账号：运行时状态留着（卡片还看得见槽位），但不参与轮转。 */
+	paused = /* @__PURE__ */ new Set();
+	/** 用户置顶的账号：选号时排在最前面，不再按「最久未用」轮它。 */
+	preferred = /* @__PURE__ */ new Set();
 	maxConcurrent;
 	now;
 	constructor(ids, options = {}) {
@@ -53,10 +57,23 @@ var CodeArtsAccountPool = class {
 		if (account === void 0) return false;
 		return !account.disabled && this.now() >= account.coolUntil;
 	}
-	/** 现在就能接活的账号（健康 + 本地还有空槽位），按「最久未用」排序。 */
+	/** 现在就能接活的账号（健康 + 未暂停 + 本地还有空槽位），置顶的优先，其余按「最久未用」。 */
 	available(exclude) {
 		const now = this.now();
-		return this.list().filter((a) => !a.disabled && now >= a.coolUntil && !exclude.has(a.id) && a.activeConcurrent < a.maxConcurrent).sort((a, b) => a.lastUsed - b.lastUsed);
+		return this.list().filter((a) => !a.disabled && !this.paused.has(a.id) && now >= a.coolUntil && !exclude.has(a.id) && a.activeConcurrent < a.maxConcurrent).sort((a, b) => {
+			const pinned = Number(this.preferred.has(b.id)) - Number(this.preferred.has(a.id));
+			return pinned !== 0 ? pinned : a.lastUsed - b.lastUsed;
+		});
+	}
+	/** 设置暂停集合（账号 id）。与账号文档同步时调用。 */
+	setPaused(ids) {
+		this.paused.clear();
+		for (const id of ids) this.paused.add(id);
+	}
+	/** 设置置顶集合（账号 id）。置顶只在「同时可用」时改变先后，不会绕过冷却/上限。 */
+	setPreferred(ids) {
+		this.preferred.clear();
+		for (const id of ids) this.preferred.add(id);
 	}
 	/**
 	* 选一个账号。
@@ -1198,7 +1215,10 @@ function createCodeArtsShim(options) {
 		}
 	}
 	async function chatCompletions(req, res) {
+		/** 首字延迟的起点：从读完请求头就开始算，排队与换号的时间都算「用户等了多久」。 */
+		const requestStartedAt = Date.now();
 		if (!isJsonContentType(req)) {
+			usage?.noteFailure("media_type");
 			writeOpenAIError(res, 415, "unsupported_media_type", "Content-Type must be application/json");
 			return;
 		}
@@ -1211,6 +1231,7 @@ function createCodeArtsShim(options) {
 		const checked = prepareChatBody(raw, contextWindow);
 		noteRequestShape(raw, checked.model);
 		if (checked.error !== void 0) {
+			usage?.noteFailure("context_overflow");
 			writeOpenAIError(res, 400, "context_overflow", checked.error);
 			return;
 		}
@@ -1220,12 +1241,19 @@ function createCodeArtsShim(options) {
 		});
 		let ids;
 		try {
-			ids = await store.ids();
+			const all = await store.ids();
+			const paused = new Set(await store.pausedIds());
+			pool.sync(all);
+			pool.setPaused([...paused]);
+			pool.setPreferred(await store.pinnedIds());
+			ids = all.filter((id) => !paused.has(id));
 		} catch (error) {
+			usage?.noteFailure("not_signed_in");
 			writeOpenAIError(res, 401, "not_signed_in", String(error));
 			return;
 		}
 		if (ids.length === 0) {
+			usage?.noteFailure("not_signed_in");
 			writeOpenAIError(res, 401, "not_signed_in", "no CodeArts account stored; sign in from the CodeArts settings card");
 			return;
 		}
@@ -1237,6 +1265,7 @@ function createCodeArtsShim(options) {
 		let tpmAccount;
 		let queueWaitedMs = 0;
 		let lastKind;
+		let lastAccountId;
 		let lastStatus = 0;
 		let lastMessage = "";
 		for (let attempt = 0; attempt < MAX_ROTATE; attempt += 1) {
@@ -1254,10 +1283,12 @@ function createCodeArtsShim(options) {
 					const gate = await queue.wait(credential, checked.chatId, checked.model, controller.signal);
 					if (controller.signal.aborted) return;
 					if (gate.kind === "queued") {
+						usage?.noteFailure("queued", id);
 						writeOpenAIError(res, 400, "queued", queuedMessage(checked.model, gate));
 						return;
 					}
 					if (gate.kind === "queue_full" || gate.kind === "error") {
+						usage?.noteFailure(gate.kind, id);
 						writeOpenAIError(res, gate.kind === "queue_full" ? 429 : 502, gate.kind, gate.message);
 						return;
 					}
@@ -1272,11 +1303,13 @@ function createCodeArtsShim(options) {
 					pool.noteSuccess(id);
 					await pipeToResponse(res, result.stream, controller.signal, {
 						accountId: id,
-						model: prepared.model
+						model: prepared.model,
+						startedAt: requestStartedAt
 					}, opened.head);
 					return;
 				}
 				lastKind = result.kind;
+				lastAccountId = id;
 				lastStatus = result.status;
 				lastMessage = result.message;
 				if (isConcurrencyCap(result)) {
@@ -1331,11 +1364,13 @@ function createCodeArtsShim(options) {
 						pool.noteSuccess(queueAccount);
 						await pipeToResponse(res, result.stream, controller.signal, {
 							accountId: queueAccount,
-							model: opened.prepared.model
+							model: opened.prepared.model,
+							startedAt: requestStartedAt
 						}, opened.head);
 						return;
 					}
 					lastKind = result.kind;
+					lastAccountId = queueAccount;
 					lastStatus = result.status;
 					lastMessage = result.message;
 				}
@@ -1345,11 +1380,13 @@ function createCodeArtsShim(options) {
 		}
 		if (lastKind === void 0) {
 			const none = noAccountError(pool.list());
+			usage?.noteFailure(none.kind);
 			writeOpenAIError(res, none.status, none.kind, none.message);
 			return;
 		}
 		const explanation = upstreamErrorMessage(lastMessage, lastStatus);
 		const waited = queueWaitedMs >= 1e3 ? `（本地已排队重试 ${Math.round(queueWaitedMs / 1e3)} 秒）` : "";
+		usage?.noteFailure(lastKind, lastAccountId);
 		writeOpenAIError(res, KIND_STATUS[lastKind], lastKind, `${explanation}${waited}`);
 	}
 	/**
@@ -1379,6 +1416,8 @@ function createCodeArtsShim(options) {
 		let buf = "";
 		if (usage !== void 0 && attribution !== void 0) usage.noteRequest(attribution.accountId, attribution.model);
 		let sawDone = false;
+		/** 首个真正写出的帧记一次 TTFT；之后不再记。 */
+		let firstFrame = true;
 		const finish = () => {
 			if (!res.writable || res.writableEnded) return;
 			res.end(sawDone ? void 0 : "data: [DONE]\n\n");
@@ -1394,7 +1433,13 @@ function createCodeArtsShim(options) {
 					if (frame.trim() === "data: [DONE]") sawDone = true;
 					if (frame.includes("\"error\"")) logInStreamError(frame, attribution?.model ?? "");
 					if (usage !== void 0 && attribution !== void 0 && frame.includes("\"usage\"")) recordFrameUsage(frame, attribution);
-					if (res.writable) res.write(frame + "\n\n");
+					if (res.writable) {
+						if (firstFrame) {
+							firstFrame = false;
+							if (usage !== void 0 && attribution?.startedAt !== void 0) usage.noteLatency(Date.now() - attribution.startedAt);
+						}
+						res.write(frame + "\n\n");
+					}
 				}
 			}
 			finish();
@@ -1471,6 +1516,13 @@ const CODEARTS_DOCK_PATH = "/api/codearts/dock";
 /** 最近出站请求的**形状**摘要（只有 role 名与计数，不含内容），排障用。 */
 const CODEARTS_DEBUG_PATH = "/api/codearts/debug";
 /**
+* GET /api/codearts/doctor — 把 CLI `doctor` 的静态体检搬进卡片。
+*
+* 只做本机可判定的检查（版本、账号、凭证有效期、目录、账本、pi-ai 兼容），
+* 不额外打上游 —— 卡片本来就每 60 秒刷一次状态，不该因为点了体检再等超时。
+*/
+const CODEARTS_DOCTOR_PATH = "/api/codearts/doctor";
+/**
 * 由完整目录 + 已存 enabled 计算 selection。
 * - enabled 为空/未存 => 全部勾选（restricted=false）
 * - enabled 为非空列表 => 仅勾选其中的（restricted=true），缺的按未勾选
@@ -1487,6 +1539,8 @@ function selectionOf(models, enabled, writable) {
 			blocked: m.blocked,
 			ratio: m.ratio,
 			supportsImages: m.supportsImages,
+			contextWindow: m.contextWindow,
+			maxTokens: m.maxTokens,
 			...m.error === void 0 ? {} : { error: m.error },
 			enabled: restricted ? allowed.has(m.id) : true
 		})),
@@ -1507,6 +1561,8 @@ function choicesOf(deps) {
 			blocked: isBenefitBlocked(m.id),
 			...ratio === void 0 ? {} : { ratio },
 			...m.supportsImages === true ? { supportsImages: true } : {},
+			...m.contextWindowKnown === true ? { contextWindow: m.contextWindow } : {},
+			...m.maxTokens > 0 ? { maxTokens: m.maxTokens } : {},
 			...error === void 0 ? {} : { error }
 		};
 	});
@@ -1609,6 +1665,58 @@ async function probeIdentity(token) {
 		clearTimeout(timer);
 	}
 }
+/**
+* 落一次 OAuth 登录的凭证。
+*
+* 不带 `targetId` 是「添加账号」：同一账号更新，别的账号新增。
+*
+* 带 `targetId` 是「重新登录这个账号」：凭证写回原条目（保留 id、展示顺序和
+* 备注），而不是又长出一条 —— 以前卡片上只有「删除」，用户遇到凭证过期只能
+* 先把账号删掉再加回来，顺序和备注都丢。
+*
+* 上游只在 `fetchCallerIdentity` 成功时才给稳定 `userId`，拿不到身份就判断不了
+* 「是不是同一个人」。此时按用户意图替换（他点的就是这个账号的重登），并沿用
+* 旧条目的身份字段；只有两边 `userId` 都非空且不同，才判为登了另一个账号，
+* 退回「新增」，原账号原样不动。
+*/
+async function settleLogin(deps, token, targetId) {
+	const identity = await probeIdentity(token);
+	const target = targetId === void 0 ? void 0 : await deps.store.credential(targetId);
+	if (targetId !== void 0 && target !== void 0) {
+		const known = typeof target.userId === "string" && target.userId !== "";
+		if (!(identity !== null && known && target.userId !== identity.userId)) {
+			const cred = credentialFromOAuth(token, target.label);
+			cred.userId = cred.userId || target.userId;
+			cred.userName = cred.userName || target.userName;
+			cred.domainId = cred.domainId || target.domainId;
+			const id = await deps.store.upsert(cred, targetId);
+			deps.reviveAccount?.(id);
+			if (identity !== null && identity.userId !== "") {
+				if (identity.userId !== id) await deps.store.adoptIdentity(id, identity);
+				deps.reviveAccount?.(identity.userId);
+				return {
+					id: identity.userId,
+					replaced: true,
+					conflict: false
+				};
+			}
+			return {
+				id,
+				replaced: true,
+				conflict: false
+			};
+		}
+	}
+	const id = await deps.store.upsertFromOAuth(token, void 0, identity ?? void 0);
+	if (identity !== null && id !== identity.userId) await deps.store.adoptIdentity(id, identity);
+	deps.reviveAccount?.(id);
+	if (identity !== null && identity.userId !== id) deps.reviveAccount?.(identity.userId);
+	return {
+		id: identity?.userId ?? id,
+		replaced: false,
+		conflict: target !== void 0
+	};
+}
 /** 账号还能用吗（没被标 stale、也没过期）。 */
 function accountUsable(summary) {
 	if (summary.stale) return false;
@@ -1652,6 +1760,15 @@ function usageOf(deps) {
 		days: snapshot?.days ?? 0,
 		recentDays: snapshot?.recentDays ?? [],
 		todayByHour: snapshot?.todayByHour ?? [],
+		failuresToday: snapshot?.failuresToday ?? {
+			total: 0,
+			byKind: {}
+		},
+		failuresByAccountToday: snapshot?.failuresByAccountToday ?? {},
+		latencyToday: snapshot?.latencyToday ?? {
+			samples: 0,
+			overflow: false
+		},
 		...snapshot?.lastAt === void 0 ? {} : { lastAt: snapshot.lastAt },
 		slots: slotsOf(deps)
 	};
@@ -1736,6 +1853,89 @@ function statusHandler(deps) {
 	};
 }
 /**
+* 本机体检：与 CLI 的 `doctor` 同一份判据，但只做不联网的检查。
+*
+* 这里的每一项都能在 1ms 内判定；需要网络的（凭证能不能续期、上游目录是否正常）
+* 已经在 /status 与 /refresh-models 里体现，重复做只会让「体检」按钮转圈。
+*/
+async function doctorReport(deps) {
+	const accounts = await deps.store.list();
+	const models = deps.models();
+	const checks = [];
+	const hints = /* @__PURE__ */ new Set();
+	checks.push({
+		id: "runtime",
+		ok: true,
+		detail: `dsh-codearts ${CODEARTS_VERSION} · node ${process.version} · ${process.platform}`
+	});
+	checks.push({
+		id: "accounts",
+		ok: accounts.length > 0,
+		detail: `${accounts.length}`
+	});
+	if (accounts.length === 0) hints.add("no-account");
+	for (const account of accounts) {
+		const problems = [];
+		if (account.stale) problems.push("stale");
+		if (!account.signable) problems.push("no-key");
+		if (account.expiration !== void 0) {
+			const expiresAt = Date.parse(account.expiration);
+			if (!Number.isNaN(expiresAt) && expiresAt <= Date.now()) problems.push("expired");
+		}
+		checks.push({
+			id: `account:${account.id}`,
+			ok: problems.length === 0,
+			detail: problems.length > 0 ? problems.join(",") : account.label ?? account.userName ?? account.expiration ?? "ok"
+		});
+		for (const problem of problems) hints.add(`account-${problem}`);
+	}
+	checks.push({
+		id: "models",
+		ok: models.length > 0,
+		detail: `${models.length}`
+	});
+	if (models.length === 0) hints.add("empty-catalog");
+	checks.push({
+		id: "usage",
+		ok: deps.usage !== void 0,
+		detail: deps.usage === void 0 ? "tracker not wired" : "local ledger"
+	});
+	if (deps.usage === void 0) hints.add("usage-missing");
+	if (process.env.DSH_HOME === void 0) hints.add("dsh-home-missing");
+	const piAi = await probePiAiCompat();
+	checks.push({
+		id: "pi-ai",
+		ok: piAi === void 0,
+		...piAi === void 0 ? {} : { detail: piAi }
+	});
+	if (piAi !== void 0) hints.add("pi-ai");
+	return {
+		ok: checks.every((check) => check.ok),
+		version: CODEARTS_VERSION,
+		node: process.version,
+		checks,
+		hints: [...hints]
+	};
+}
+/** GET /api/codearts/doctor */
+function doctorHandler(deps) {
+	return async (req, res) => {
+		if (req.method !== "GET") {
+			json(res, 405, { error: "method not allowed" });
+			return;
+		}
+		if (!loopbackRequest(req)) {
+			json(res, 403, { error: "request-not-trusted" });
+			return;
+		}
+		try {
+			json(res, 200, await doctorReport(deps));
+		} catch (error) {
+			json(res, 500, { error: safeMessage(error) });
+		}
+	};
+}
+/**
 * GET/POST /api/codearts/dock — 对话底部那一行的显隐开关读写。
 *
 * 和 enabled-models 同一套规矩：GET 给当前值 + writable，POST 只收布尔、
@@ -1905,13 +2105,14 @@ function tokenDeleteHandler(deps) {
 }
 /**
 * DELETE /api/codearts/accounts?id=<accountId> — 删掉一个账号。
+* POST /api/codearts/accounts — 改账号标记：`{ id, paused?, pinned? }`。
 *
 * id 必须显式给：多账号下「删掉当前那个」是歧义的。改状态的路由，所以和
 * /token 一样走 Host + Origin 双校验。
 */
 function accountsHandler(deps) {
 	return async (req, res) => {
-		if (req.method !== "DELETE") {
+		if (req.method !== "DELETE" && req.method !== "POST") {
 			json(res, 405, { error: "method not allowed" });
 			return;
 		}
@@ -1919,12 +2120,47 @@ function accountsHandler(deps) {
 			json(res, 403, { error: "request-not-trusted" });
 			return;
 		}
-		const id = (new URL(req.url ?? "", "http://localhost").searchParams.get("id") ?? "").trim();
-		if (id === "") {
-			json(res, 400, { error: "expected ?id=<accountId>" });
-			return;
-		}
+		const url = new URL(req.url ?? "", "http://localhost");
 		try {
+			if (req.method === "POST") {
+				const type = req.headers["content-type"];
+				if (typeof type !== "string" || !type.trim().toLowerCase().startsWith("application/json")) {
+					json(res, 415, { error: "content-type must be application/json" });
+					return;
+				}
+				const body = JSON.parse(await readBody(req));
+				const id = typeof body.id === "string" ? body.id.trim() : "";
+				if (id === "") {
+					json(res, 400, { error: "expected {\"id\": string}" });
+					return;
+				}
+				let changed = false;
+				if (typeof body.paused === "boolean") {
+					if (!await deps.store.setPaused(id, body.paused)) {
+						json(res, 404, { error: "unknown account" });
+						return;
+					}
+					changed = true;
+				}
+				if (typeof body.pinned === "boolean") {
+					if (!await deps.store.setPinned(id, body.pinned)) {
+						json(res, 404, { error: "unknown account" });
+						return;
+					}
+					changed = true;
+				}
+				if (!changed) {
+					json(res, 400, { error: "expected paused and/or pinned boolean" });
+					return;
+				}
+				json(res, 200, await buildStatus(deps));
+				return;
+			}
+			const id = (url.searchParams.get("id") ?? "").trim();
+			if (id === "") {
+				json(res, 400, { error: "expected ?id=<accountId>" });
+				return;
+			}
 			await deps.store.remove(id);
 			json(res, 200, await buildStatus(deps));
 		} catch (error) {
@@ -2169,6 +2405,8 @@ function registerCodeArtsStatusRoute(ctx, deps) {
 		const activeLogins = /* @__PURE__ */ new Map();
 		/** 已结束登录的终态，供迟到的轮询读取。被读一次即删。 */
 		const recentLogins = /* @__PURE__ */ new Map();
+		/** 本次登录是「重新登录」时，授权 URL → 目标账号 id。终态落库后即删。 */
+		const reloginTargets = /* @__PURE__ */ new Map();
 		const disposeStatus = ctx.webServer.register({
 			kind: "exact",
 			path: CODEARTS_STATUS_PATH,
@@ -2192,7 +2430,7 @@ function registerCodeArtsStatusRoute(ctx, deps) {
 		const disposeLoginStart = ctx.webServer.register({
 			kind: "exact",
 			path: CODEARTS_LOGIN_PATH,
-			handler: loginStartHandler(deps, activeLogins, recentLogins)
+			handler: loginStartHandler(deps, activeLogins, recentLogins, reloginTargets)
 		});
 		const disposeLoginStatus = ctx.webServer.register({
 			kind: "exact",
@@ -2234,6 +2472,11 @@ function registerCodeArtsStatusRoute(ctx, deps) {
 			path: CODEARTS_DEBUG_PATH,
 			handler: debugHandler(deps)
 		});
+		const disposeDoctor = ctx.webServer.register({
+			kind: "exact",
+			path: CODEARTS_DOCTOR_PATH,
+			handler: doctorHandler(deps)
+		});
 		return () => {
 			disposeStatus();
 			disposeModels();
@@ -2248,8 +2491,10 @@ function registerCodeArtsStatusRoute(ctx, deps) {
 			disposeQueue();
 			disposeDock();
 			disposeDebug();
+			disposeDoctor();
 			for (const s of activeLogins.values()) s.close();
 			activeLogins.clear();
+			reloginTargets.clear();
 		};
 	}, "dsh-codearts: Web status route");
 }
@@ -2267,8 +2512,12 @@ function recordLoginOutcome(recent, url, outcome) {
 	}
 	recent.set(url, outcome);
 }
-/** POST /api/codearts/login — 启动本地 OAuth 回调，返回授权 URL。 */
-function loginStartHandler(deps, active, recent) {
+/**
+* POST /api/codearts/login — 启动本地 OAuth 回调，返回授权 URL。
+*
+* `?account=<id>` 表示「重新登录这个账号」（见 settleLogin）；省略就是添加账号。
+*/
+function loginStartHandler(deps, active, recent, targets) {
 	return async (req, res) => {
 		if (req.method !== "POST") {
 			json(res, 405, { error: "method not allowed" });
@@ -2278,28 +2527,33 @@ function loginStartHandler(deps, active, recent) {
 			json(res, 403, { error: "request-not-trusted" });
 			return;
 		}
+		const targetId = (new URL(req.url ?? "", "http://localhost").searchParams.get("account") ?? "").trim();
 		try {
 			const session = await startLogin();
 			active.set(session.url, session);
+			if (targetId !== "") targets.set(session.url, targetId);
 			session.promise.then(async (token) => {
 				active.delete(session.url);
+				const reloginId = targets.get(session.url);
+				targets.delete(session.url);
 				try {
-					const identity = await probeIdentity(token);
-					const id = await deps.store.upsertFromOAuth(token, void 0, identity ?? void 0);
-					if (identity !== null && id !== identity.userId) await deps.store.adoptIdentity(id, identity);
-					deps.reviveAccount?.(id);
-					if (identity !== null && identity.userId !== id) deps.reviveAccount?.(identity.userId);
-					recordLoginOutcome(recent, session.url, "done");
+					const result = await settleLogin(deps, token, reloginId);
+					recordLoginOutcome(recent, session.url, {
+						status: "done",
+						...result
+					});
 				} catch {
-					recordLoginOutcome(recent, session.url, "error");
+					recordLoginOutcome(recent, session.url, { status: "error" });
 				}
 			}, () => {
 				active.delete(session.url);
-				recordLoginOutcome(recent, session.url, "error");
+				targets.delete(session.url);
+				recordLoginOutcome(recent, session.url, { status: "error" });
 			});
 			const timer = setTimeout(() => {
 				session.close();
-				if (active.delete(session.url)) recordLoginOutcome(recent, session.url, "error");
+				targets.delete(session.url);
+				if (active.delete(session.url)) recordLoginOutcome(recent, session.url, { status: "error" });
 			}, 3e5);
 			session.promise.finally(() => clearTimeout(timer)).catch(() => {});
 			json(res, 200, {
@@ -2330,7 +2584,7 @@ function loginPollHandler(_deps, active, recent) {
 		const outcome = recent.get(key);
 		if (outcome !== void 0) {
 			recent.delete(key);
-			json(res, 200, { status: outcome });
+			json(res, 200, { ...outcome });
 			return;
 		}
 		json(res, 200, { status: "idle" });