dsh-connect-doubao 0.3.1 → 0.4.0

package/CHANGELOG.md

@@ -4,6 +4,103 @@
 
 ---
 
+## 0.4.0 — 2026-11-05
+
+> 稳定性与额度准确性批次：让「回答」在中断时说实话，让「停止」真的停下上游，让凭据不再经过
+> 子进程环境变量，让设置卡片不再对任何本机页面敞开；额度读数改成看「还剩多少」，并把一直在
+> 扣的活动赠送额度显示出来；卡片重做了一遍视觉。全部改动都带回归测试（新增 36 例，全仓
+> 187 例）。
+
+### 修复
+
+- **断流被当成完整回答** —— 豆包服务端提前断开连接时，插件只把缓冲区里已收到的那半截
+  文本当结果返回，并照样写 `finish_reason: "stop"` 和 `[DONE]`。用户看到的是一个语法
+  通顺、语义中断的回答，没有任何迹象表明它被截断了。现在以 `SSE_REPLY_END` 作为唯一
+  的完成依据：连接先断而该帧未到，就报「回答不完整（已收到 N 字符）」而不是假装成功。
+  特意**不可重试** —— 重试会新开一条线程，把这条线程上的上下文丢掉，比重打一次更糟。
+- **停止按钮停不下上游** —— 客户端断开后没有任何东西通知豆包那边停止生成，那一轮会一直
+  跑到结束，额度照扣，答案没人看。现在响应关闭即 `abort()`，并顺着 `fetch` 传到 socket。
+  顺带补上空闲看门狗：`DOUBAO_STREAM_IDLE_TIMEOUT_MS`（300 秒）此前定义了却从没被使用，
+  流静默这么久会主动中止，而不是把请求永远挂着。
+- **所有认不出的失败都被说成网络问题** —— 分类器对未知错误一律 `network`，shim 又把它
+  标成可重试的 `TIMEOUT`，于是 400、鉴权失败、插件内部异常都会触发宿主的整套重试，
+  最后给出一句「检查网络」。现在按 HTTP 状态与失败来源分类（401/403 → 会话失效、
+  429 → 额度耗尽、4xx → 上游错误不可重试、5xx 与连接失败 → 可重试、其余 → 上游错误），
+  只有真正的传输失败才会被建议重试，错误信封里也带上 `x-should-retry`。
+- **深度思考内容永远为空** —— 帧处理层把 `onThinking` 回调漏掉了（shim 侧的
+  `reasoning_content` 分支早就写好了），开启深度思考时只能看到答案、看不到推理过程。
+- **凭据明文进了子进程环境变量** —— DPAPI 调用把整个会话以 base64 塞进
+  `DSH_DOUBAO_DPAPI_BLOB` 交给 PowerShell，存活了 `Add-Type` 编译那 0.5–1 秒；
+  `...process.env` 还把本机所有 API key 一起带了过去。现在改为 stdin 传入、环境变量走
+  白名单，`powershell.exe` 也从 `System32` 绝对路径启动而不是靠 PATH 查找。
+- **一个坏 profile 会让后面所有候选都不再尝试** —— 候选遍历里 `decryptFromProfile` 没有
+  自己的 try/catch，某个目录的 `Local State` 损坏会直接冒到外层，把 D 盘上真正可用的
+  profile 全跳过。现在逐个隔离，失败信息里带上具体目录。
+
+- **一次会话失效要等十二小时才自愈** —— 加密的凭据副本在磁盘上缓存 12 小时，服务端
+  已经判定失效的 session 会被反复读回来，每次请求都以同一种方式失败；用户按提示重新
+  登录，插件仍然拿旧副本，直到 TTL 到期。现在服务端说会话失效就删掉盘上副本，让重新
+  登录立刻生效。顺带挡住时钟回拨：缓存时间在未来（改过系统时间、双系统、主板电池没电）
+  一律视为过期，否则 TTL 永远算不出一个正数。
+- **额度接口不可用时每一轮对话都要多等一次失败** —— 额度是对话前的前置检查，而失败的
+  结果从来不进缓存，于是接口挂掉的每一轮都要再付一次注定失败的往返，正好压在首字节
+  之前。失败结果现在缓存 30 秒：够短，恢复延迟只有一轮；够长，能把这种反复打穿。
+- **设置卡片对本机任何网页敞开** —— 四条路由只校验 Origin 是不是 loopback，而浏览器
+  在**同源**请求里根本不发 Origin 头，于是「没有 Origin」被当成可信 —— 本机另一个端口
+  上的页面（或任何能解析到 127.0.0.1 的页面）都能改掉模型开关和数据目录。现在 Host
+  必须是 loopback（挡住把域名解析到 127.0.0.1 的 DNS rebinding），带
+  `sec-fetch-site: cross-site` 的请求直接拒绝，写请求还必须带一个自定义头 —— 自定义头
+  会触发 CORS 预检，而这几条路由从不应答预检，跨源页面因此发不出这个请求。同源正常
+  使用完全不受影响。
+- **声明了类型声明文件，但那文件从来不存在** —— `package.json` 的 `types` 指向
+  `lib/index.d.ts`，构建却关着 `dts`，任何按类型使用这个包的人都会碰到一个空引用。
+  现在真的生成声明文件（`lib/index.d.ts` 等 5 个），`types` 与 `exports` 两条路径
+  都对得上。同时把 `lib/` 移出版本管理：tsdown 用内容哈希给共享 chunk 命名，每构建
+  一次整批文件就改名，diff 里看不出任何真实改动；发布不受影响（`prepack` 会构建，
+  `files` 从 tarball 里取 `lib`）。
+
+- **额度卡片的「重置时间」是编出来的** —— 这台账号的套餐只返回一个周额度，且窗口的
+  `start_time`/`end_time` 都是 0（服务端不给时间戳）。旧代码于是拿「现在」当窗口起点、
+  加上一个名义周期当重置时刻，卡片显示「6 天后重置」—— 真实重置可能就在二十分钟后。
+  同一份载荷里还带着 `total_amount: "2,100"` / `used_amount: "0"` 这种带千分位的金额，
+  旧代码完全没读，一旦 `used_percent` 缺失就只能显示 0%。现在：窗口还没开始计时就照实
+  说「开始使用后计时」（豆包客户端本身就是这个措辞），有时间戳就显示倒计时，两者都没
+  有才说「重置时间未知」；金额解析后作为百分比的兜底来源。顺带修掉 `doctor` 把「这个
+  套餐没有 5 小时窗口」判成失败的误报 —— 账号形态不是插件故障，只有额度真正读不出来
+  才算失败。
+- **真正在消耗的那份额度没被显示** —— 额度接口返回三个 section，旧代码只读
+  `window_limit_section`。这台账号的「活动赠送额度」（`incentive_quota_section`，
+  已用 782 / 1,600、11 月 21 日 09:46 到期）因此完全不出现在卡片上：用户看到「近 7 天
+  已用 0%」，以为额度一点没动，实际上已经在扣赠送额度了。现在两个 section 一起读，
+  赠送额度单独一行、用「已用 782 / 1,600 · 16d 后到期」这种带金额的写法，排在常规窗口
+  前面。
+
+### 新增
+- **卡片改成看「还剩多少」，并自己走动** —— 进度条过去画的是消耗比例（越用越满），
+  与「还剩多少」的直觉相反；现在画剩余量，用完即为空，颜色阈值也按剩余量给。数字从
+  「已用 782 / 1,600」改成「剩 818 / 1,600」，倒计时由本地时钟每秒从绝对时刻重算 ——
+  既不用每秒请求，也不会因为标签页放久了而漂移。轮询从 5 分钟缩到 30 秒，且只在卡片
+  可见时进行，切回标签页立刻刷一次；轮询走 POST 绕过宿主 5 分钟缓存，否则每 30 秒
+  拿回的都是同一份读数。
+- **卡片重做了一遍视觉** —— 原来五个分区的高度、字号、边框几乎一样，眼睛找不到落点。
+  现在整张卡是一片带极淡高光的表面，分区之间用一条发丝线分隔而不是各自套框；每个额度
+  窗口是一块独立的面板，一行的重点只有一个：右边那个「还剩下多少」。倒计时和「已用
+  X / Y」退到第二行，不再和主数字抢宽度。进度条改成带方向感的渐变并带一点辉光，数字
+  改用等宽字形 —— 每秒跳动的倒计时不会再让整行左右抖。
+
+### 测试
+- `tests/upstream-terminal.test.ts`（12 例）：终止帧、跨 chunk 拆帧、截断判定、思考透传、
+  失败分类与重试矩阵。
+- `tests/shim-lifecycle.test.ts`（5 例）：客户端断开、正常结束后关闭、空闲超时、活动续命、
+  释放后不再触发。
+- `tests/auth-dpapi.test.ts`（4 例）：源码级守住「明文不进 env」「不走 PATH」两条约束。
+- `tests/save-route.test.ts`（+4 例）：缺写入头、非 loopback Host、跨站标记三种拒绝路径，
+  以及「同源 GET 不带 Origin 仍然放行」这条必须保持可用的例外。
+- `tests/quota.test.ts`（8 例）：用真实载荷做固定数据 —— 只有周额度、时间戳为 0、
+  另含「活动赠送额度」组（782 / 1,600、只有到期时间、window_type 3）；覆盖「不伪造
+  重置时刻」「未开始计时标注 startsOnUse」「赠送额度只报到期」「金额推算百分比」
+  「真实时间戳原样透传」五条契约。
+
 ## 0.3.1 — 2026-11-02
 
 > 相对 `0.3.0` 的 3 个提交。修「User Data 不在 C 盘就读不到登录信息」，并补上手动指定目录的

package/lib/bin.d.ts

@@ -0,0 +1 @@
+export {}

package/lib/cli-doctor.d.ts

@@ -0,0 +1,18 @@
+import { T as classifyDoubaoFailure, f as DoubaoUpstreamError } from "./doubao-upstream-BdIak5wD.js";
+//#region src/cli-doctor.d.ts
+type CheckStatus = 'ok' | 'fail' | 'skip';
+interface DoctorCheck {
+  name: string;
+  status: CheckStatus;
+  detail: string;
+  data?: Record<string, unknown>;
+}
+interface DoctorReport {
+  ok: boolean;
+  plugin: string;
+  checks: DoctorCheck[];
+}
+/** Run every check. Never throws: a failed check is data, not a crash. */
+declare function runDoctor(): Promise<DoctorReport>;
+//#endregion
+export { CheckStatus, DoctorCheck, DoctorReport, DoubaoUpstreamError, classifyDoubaoFailure, runDoctor };

package/lib/cli-doctor.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { A as probeAccount, B as PROFILE_ENV, F as REQUIRED_COOKIE_NAMES, V as describeProfileLocation, W as listDoubaoProfiles, at as DOUBAO_PROVIDER, ht as discoverDoubaoModels, it as DOUBAO_MODELS, m as DoubaoUpstreamError, n as fetchQuota, ot as DOUBAO_PROVIDER_DISPLAY_NAME, r as findWindow, w as classifyDoubaoFailure, z as loadDoubaoCredentials } from "./doubao-quota-SO5U9prN.js";
-import { g as createDoubaoAdapter, i as doubaoQuotaView, m as createDoubaoShim, n as DOUBAO_QUOTA_PATH, p as liveModels, u as discoverAllCachedModels } from "./doubao-status-BAUM_fsV.js";
+import { H as PROFILE_ENV, I as REQUIRED_COOKIE_NAMES, K as listDoubaoProfiles, U as describeProfileLocation, V as loadDoubaoCredentials, _t as discoverDoubaoModels, ct as DOUBAO_PROVIDER_DISPLAY_NAME, i as formatDuration, j as probeAccount, m as DoubaoUpstreamError, n as fetchQuota, o as millisUntilReset, ot as DOUBAO_MODELS, r as findWindow, st as DOUBAO_PROVIDER, w as classifyDoubaoFailure } from "./doubao-quota-Do37dMMj.js";
+import { g as createDoubaoAdapter, i as doubaoQuotaView, m as createDoubaoShim, n as DOUBAO_QUOTA_PATH, p as liveModels, u as discoverAllCachedModels } from "./doubao-status-CeXUM4Cy.js";
 //#region src/cli-doctor.ts
 /**
 * `doctor` — verify the whole stack end to end without spending inference quota.
@@ -124,18 +124,33 @@ async function runDoctor() {
 	});
 	else {
 		const quota = await fetchQuota({ force: true });
+		const describeWindow = (window) => {
+			if (window === void 0) return "not offered";
+			if (window.startsOnUse === true && window.resetUnknown === true) return `${window.usedPercent}% used, starts counting on first use`;
+			if (window.resetUnknown === true) return `${window.usedPercent}% used, reset time unknown`;
+			return `${window.usedPercent}% used, ${formatDuration(millisUntilReset(window))} to reset`;
+		};
+		const describeGrant = (window) => {
+			if (window === void 0) return "none";
+			const amounts = window.usedAmount !== void 0 && window.totalAmount !== void 0 ? `${window.usedAmount}/${window.totalAmount}` : `${window.usedPercent}%`;
+			return `${window.label ?? "bonus"} ${amounts}, ${formatDuration(millisUntilReset(window))} to expiry`;
+		};
 		const fiveHour = findWindow(quota, "five_hour");
 		const weekly = findWindow(quota, "weekly");
+		const grant = findWindow(quota, "incentive");
 		const view = await doubaoQuotaView();
 		checks.push({
 			name: "quota",
-			status: quota.error === void 0 && fiveHour !== void 0 && weekly !== void 0 ? "ok" : "fail",
-			detail: quota.error ?? `${quota.plan ?? "unknown plan"}; 5-hour=${fiveHour?.usedPercent ?? "n/a"}% weekly=${weekly?.usedPercent ?? "n/a"}%`,
+			status: quota.error === void 0 ? "ok" : "fail",
+			detail: quota.error ?? `${quota.plan ?? "unknown plan"}; 5-hour=${describeWindow(fiveHour)}; weekly=${describeWindow(weekly)}; bonus=${describeGrant(grant)}`,
 			data: {
 				plan: quota.plan ?? null,
 				exhausted: quota.exhausted,
 				fiveHourPercent: fiveHour?.usedPercent ?? null,
 				weeklyPercent: weekly?.usedPercent ?? null,
+				grantPercent: grant?.usedPercent ?? null,
+				grantUsedAmount: grant?.usedAmount ?? null,
+				grantTotalAmount: grant?.totalAmount ?? null,
 				viewHasNoSecrets: !JSON.stringify(view).match(/sessionid|sid_tt|msToken|odin_tt|ttwid|passport_csrf/i)
 			}
 		});

package/lib/cli-probe.d.ts

@@ -0,0 +1,4 @@
+//#region src/cli-probe.d.ts
+declare function main(): Promise<number>;
+//#endregion
+export { main };

package/lib/cli-probe.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { A as probeAccount, V as describeProfileLocation, i as formatDuration, it as DOUBAO_MODELS, j as streamChat, m as DoubaoUpstreamError, n as fetchQuota, o as millisUntilReset, r as findWindow, vt as findDoubaoModel, yt as findReasoningLevel, z as loadDoubaoCredentials } from "./doubao-quota-SO5U9prN.js";
+import { M as streamChat, U as describeProfileLocation, V as loadDoubaoCredentials, bt as findDoubaoModel, i as formatDuration, j as probeAccount, m as DoubaoUpstreamError, n as fetchQuota, o as millisUntilReset, ot as DOUBAO_MODELS, r as findWindow, xt as findReasoningLevel } from "./doubao-quota-Do37dMMj.js";
 //#region src/cli-probe.ts
 /**
 * Doubao smoke probe.
@@ -79,8 +79,20 @@ async function main() {
 		return 3;
 	}
 	const quota = await fetchQuota({ force: true });
+	const describeWindow = (window) => {
+		if (window === void 0) return "not offered by this plan";
+		if (window.startsOnUse === true && window.resetUnknown === true) return `${window.usedPercent}% used, starts counting on first use`;
+		if (window.resetUnknown === true) return `${window.usedPercent}% used, reset time unknown`;
+		return `${window.usedPercent}% used, ${formatDuration(millisUntilReset(window))} to reset`;
+	};
+	const describeGrant = (window) => {
+		if (window === void 0) return "none";
+		const amounts = window.usedAmount !== void 0 && window.totalAmount !== void 0 ? `${window.usedAmount} / ${window.totalAmount}` : `${window.usedPercent}%`;
+		return `${window.label ?? "bonus"}: ${amounts} used, ${formatDuration(millisUntilReset(window))} to expiry`;
+	};
 	const fiveHour = findWindow(quota, "five_hour");
 	const weekly = findWindow(quota, "weekly");
+	const grant = findWindow(quota, "incentive");
 	out(options.json ? {
 		event: "quota",
 		plan: quota.plan ?? null,
@@ -91,6 +103,13 @@ async function main() {
 			remainingPercent: fiveHour.remainingPercent,
 			resetsIn: formatDuration(millisUntilReset(fiveHour))
 		} : null,
+		grant: grant ? {
+			label: grant.label ?? null,
+			usedPercent: grant.usedPercent,
+			usedAmount: grant.usedAmount ?? null,
+			totalAmount: grant.totalAmount ?? null,
+			resetsIn: formatDuration(millisUntilReset(grant))
+		} : null,
 		weekly: weekly ? {
 			usedPercent: weekly.usedPercent,
 			remainingPercent: weekly.remainingPercent,
@@ -99,8 +118,9 @@ async function main() {
 		error: quota.error ?? null
 	} : [
 		`quota: ${quota.plan ?? "unknown plan"}${quota.planActive === false ? " (inactive)" : ""}`,
-		`  5-hour limit : ${fiveHour ? `${fiveHour.usedPercent}% used, resets in ${formatDuration(millisUntilReset(fiveHour))}` : "n/a"}`,
-		`  weekly quota : ${weekly ? `${weekly.usedPercent}% used, resets in ${formatDuration(millisUntilReset(weekly))}` : "n/a"}`
+		`  5-hour limit : ${describeWindow(fiveHour)}`,
+		`  weekly quota : ${describeWindow(weekly)}`,
+		`  bonus quota  : ${describeGrant(grant)}`
 	].join("\n"));
 	if (quota.exhausted) {
 		out(options.json ? {

package/lib/client.js

@@ -120,62 +120,105 @@ window.__ModuleLoader__.load({
 		* Colours are checked for contrast against their own background (all text
 		* pairs are >= 4.5:1, the WCAG AA threshold for body text).
 		*
+		* Visual hierarchy: one soft surface for the card, one raised panel per quota
+		* window, a hairline between sections, and exactly one loud element per row
+		* (the "what is left" figure). Numbers use tabular figures so a countdown
+		* ticking every second does not make the line jitter.
+		*
 		* @module dsh-connect-doubao/client-styles
 		*/
 		const DOUBAO_CARD_CSS = `
-.dbq-card { display: flex; flex-direction: column; gap: 14px; padding: 14px;
-  border: 1px solid #2b2f36; border-radius: 10px; background: #16181d; color: #e8eaed;
-  font-size: 13px; line-height: 1.5; }
-.dbq-head { display: flex; align-items: baseline; justify-content: space-between; gap: 12px; }
-.dbq-title { font-weight: 600; font-size: 14px; }
+.dbq-card { display: flex; flex-direction: column; gap: 16px; padding: 16px 18px;
+  border: 1px solid #262b33; border-radius: 14px; color: #e8eaed;
+  background:
+    radial-gradient(120% 150% at 0% 0%, rgba(74, 158, 255, .12), transparent 58%),
+    linear-gradient(180deg, #191c22 0%, #14161b 100%);
+  box-shadow: inset 0 1px 0 rgba(255, 255, 255, .04), 0 12px 30px -14px rgba(0, 0, 0, .8);
+  font-size: 13px; line-height: 1.55; font-variant-numeric: tabular-nums; }
+
+.dbq-head { display: flex; align-items: baseline; justify-content: space-between;
+  gap: 12px; padding-bottom: 2px; }
+.dbq-title { font-weight: 600; font-size: 15px; letter-spacing: .01em; }
 .dbq-sub { color: #9aa0a6; font-size: 12px; }
 
-.dbq-section { display: flex; flex-direction: column; gap: 8px; }
-.dbq-section-title { font-weight: 600; font-size: 13px; display: flex;
-  align-items: baseline; justify-content: space-between; gap: 8px; }
-.dbq-count { color: #9aa0a6; font-size: 12px; font-weight: 400; }
+.dbq-section { display: flex; flex-direction: column; gap: 10px; }
+/* Hairline instead of a box per section: five bordered boxes read as a form,
+   one card with dividers reads as a panel. */
+.dbq-section + .dbq-section { padding-top: 16px; border-top: 1px solid #21252c; }
+.dbq-section-title { font-weight: 600; font-size: 12px; letter-spacing: .05em;
+  color: #b6bdc7; display: flex; align-items: center; justify-content: space-between; gap: 8px; }
+/* Counts and the plan name double as a pill, so they stop competing with the
+   section label for the same visual weight. */
+.dbq-count { color: #a8bdd4; font-size: 11px; font-weight: 500; letter-spacing: 0;
+  background: #1e242c; border: 1px solid #2b323c; border-radius: 999px; padding: 1px 8px; }
 .dbq-note { color: #9aa0a6; font-size: 12px; }
 
-.dbq-row { display: flex; flex-direction: column; gap: 4px; }
-.dbq-row-head { display: flex; align-items: baseline; justify-content: space-between; gap: 8px; }
-.dbq-label { font-weight: 500; }
-.dbq-meta { color: #9aa0a6; font-size: 12px; white-space: nowrap; }
+/* One raised panel per window: the row is the unit of the quota area, so it
+   carries the surface instead of sitting bare on the card. */
+.dbq-row { display: flex; flex-direction: column; gap: 8px; padding: 10px 12px;
+  background: #13161b; border: 1px solid #20242b; border-radius: 10px;
+  transition: border-color .15s ease, background .15s ease; }
+.dbq-row:hover { border-color: #2c333d; background: #151920; }
+.dbq-row-head { display: flex; align-items: baseline; justify-content: space-between; gap: 10px; }
+.dbq-label { font-weight: 500; font-size: 12.5px; color: #dfe3e8; }
+/* The loud element of the row: what is left, at a size the eye lands on first. */
+.dbq-figure { font-size: 14px; font-weight: 600; color: #eef2f7; white-space: nowrap; }
+.dbq-figure-sub { color: #9aa0a6; font-size: 12px; font-weight: 400; }
+.dbq-row-foot { display: flex; align-items: baseline; justify-content: space-between; gap: 8px; }
+.dbq-meta { color: #9aa0a6; font-size: 11.5px; white-space: nowrap; }
 /* Candidate list: one path per line, and a long path must wrap instead of
    pushing the card wider than the settings panel. */
-.dbq-candidates { color: #9aa0a6; font-size: 12px; white-space: pre-wrap; word-break: break-all; }
+.dbq-candidates { color: #8b929b; font-size: 11.5px; white-space: pre-wrap; word-break: break-all;
+  background: #12151a; border: 1px solid #1e222a; border-radius: 8px; padding: 8px 10px; }
 
-.dbq-bar { height: 8px; border-radius: 999px; background: #2b2f36; overflow: hidden; }
-.dbq-fill { height: 100%; border-radius: 999px; background: #4a9eff; transition: width .25s ease; }
-.dbq-fill.dbq-warn { background: #f5a623; }
-.dbq-fill.dbq-full { background: #e5534b; }
+.dbq-bar { height: 8px; border-radius: 999px; background: #1c2027; overflow: hidden;
+  box-shadow: inset 0 0 0 1px rgba(255, 255, 255, .03); }
+.dbq-fill { height: 100%; border-radius: 999px; background: linear-gradient(90deg, #3b82f6, #60a5fa);
+  box-shadow: 0 0 10px rgba(74, 158, 255, .4);
+  transition: width .5s cubic-bezier(.22, .61, .36, 1), background .2s ease; }
+.dbq-fill.dbq-warn { background: linear-gradient(90deg, #d97706, #fbbf24);
+  box-shadow: 0 0 10px rgba(245, 166, 35, .38); }
+.dbq-fill.dbq-full { background: linear-gradient(90deg, #dc2626, #ef4444);
+  box-shadow: 0 0 10px rgba(229, 83, 75, .42); }
 
-.dbq-state { display: flex; align-items: flex-start; gap: 6px; }
-.dbq-dot { width: 8px; height: 8px; border-radius: 999px; margin-top: 5px; flex: none; background: #4a9eff; }
-.dbq-dot.dbq-warn { background: #f5a623; }
-.dbq-dot.dbq-bad { background: #e5534b; }
+.dbq-state { display: flex; align-items: center; gap: 8px; }
+.dbq-dot { width: 8px; height: 8px; border-radius: 999px; flex: none; background: #4a9eff;
+  box-shadow: 0 0 0 3px rgba(74, 158, 255, .18); }
+.dbq-dot.dbq-warn { background: #f5a623; box-shadow: 0 0 0 3px rgba(245, 166, 35, .18); }
+.dbq-dot.dbq-bad { background: #e5534b; box-shadow: 0 0 0 3px rgba(229, 83, 75, .2); }
 .dbq-state-text { color: #e8eaed; }
-.dbq-profile { color: #9aa0a6; font-size: 11px; word-break: break-all; }
+.dbq-profile { color: #8b929b; font-size: 11.5px; word-break: break-all; }
 
 .dbq-actions { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; }
-.dbq-btn { appearance: none; border: 1px solid #3a3f47; background: #22252b; color: #e8eaed;
-  border-radius: 6px; padding: 5px 10px; font-size: 12px; cursor: pointer; }
-.dbq-btn:hover:not(:disabled) { background: #2b2f36; }
-.dbq-btn:disabled { opacity: .5; cursor: not-allowed; }
-.dbq-btn.dbq-primary { border-color: #4a9eff; color: #cfe4ff; }
-.dbq-btn.dbq-dirty { border-color: #f5a623; color: #ffd79a; }
+.dbq-btn { appearance: none; border: 1px solid #333a44; background: #20242b; color: #e8eaed;
+  border-radius: 8px; padding: 6px 11px; font-size: 12px; font-weight: 500; cursor: pointer;
+  transition: background .15s ease, border-color .15s ease, transform .06s ease; }
+.dbq-btn:hover:not(:disabled) { background: #272d36; border-color: #3f4956; }
+.dbq-btn:active:not(:disabled) { transform: translateY(1px); }
+.dbq-btn:focus-visible { outline: 2px solid #60a5fa; outline-offset: 2px; }
+.dbq-btn:disabled { opacity: .45; cursor: not-allowed; }
+.dbq-btn.dbq-primary { border-color: #3b82f6; background: #2563eb; color: #fff; }
+.dbq-btn.dbq-primary:hover:not(:disabled) { background: #2f6ff0; border-color: #60a5fa; }
+.dbq-btn.dbq-dirty { border-color: #f5a623; background: #3a2c15; color: #ffd79a; }
 .dbq-dirty-flag { color: #f5a623; font-size: 12px; }
 
 .dbq-models { display: flex; flex-direction: column; gap: 6px; }
-.dbq-model { display: flex; align-items: flex-start; gap: 8px; padding: 6px 8px;
-  border: 1px solid #262a30; border-radius: 6px; }
-.dbq-model input[type=checkbox] { margin-top: 3px; flex: none; }
+.dbq-model { display: flex; align-items: flex-start; gap: 9px; padding: 7px 10px; cursor: pointer;
+  border: 1px solid #20242b; border-radius: 8px; background: #13161b;
+  transition: background .15s ease, border-color .15s ease; }
+.dbq-model:hover { background: #161a20; border-color: #2b323c; }
+.dbq-model input[type=checkbox] { margin: 2px 0 0; flex: none; accent-color: #4a9eff; }
 .dbq-model-main { display: flex; flex-direction: column; gap: 2px; min-width: 0; }
-.dbq-model-name { display: flex; align-items: baseline; gap: 6px; flex-wrap: wrap; }
-.dbq-badge { font-size: 11px; color: #9aa0a6; border: 1px solid #33383f;
-  border-radius: 4px; padding: 0 4px; }
+.dbq-model-name { display: flex; align-items: center; gap: 6px; flex-wrap: wrap; }
+.dbq-badge { font-size: 11px; color: #9fb2c8; background: #1e242c; border: 1px solid #2f3641;
+  border-radius: 999px; padding: 0 7px; }
 .dbq-model-desc { color: #9aa0a6; font-size: 11px; }
 .dbq-saved { color: #7fd18a; font-size: 12px; }
 .dbq-error { color: #ff9d99; font-size: 12px; }
+
+@media (prefers-reduced-motion: reduce) {
+  .dbq-fill, .dbq-btn, .dbq-row, .dbq-model { transition: none; }
+}
 `;
 		//#endregion
 		//#region src/client/DoubaoQuotaCard.tsx
@@ -202,8 +245,17 @@ window.__ModuleLoader__.load({
 		*
 		* @module dsh-connect-doubao/client-card
 		*/
-		/** How often the quota is re-read without the user asking. */
-		const POLL_INTERVAL_MS = 3e5;
+		/**
+		* How often the quota is re-read while the card is on screen.
+		*
+		* The point of the card is "how much is left", and that number changes as the
+		* user works — a five-minute-old "782" is indistinguishable from a frozen
+		* panel. Thirty seconds costs one small summary call and only runs while the
+		* tab is visible.
+		*/
+		const POLL_INTERVAL_MS = 3e4;
+		/** How often the local clock ticks, so countdowns move without any request. */
+		const TICK_MS = 1e3;
 		/**
 		* Fallback translator: renders the key itself.
 		*
@@ -225,6 +277,15 @@ window.__ModuleLoader__.load({
 			}, []);
 		}
 		/**
+		* Header every write carries.
+		*
+		* Not a secret: it makes the request non-simple, so a hostile page cannot send
+		* it without a CORS preflight — which these routes never approve. Without it the
+		* host rejects the write, which is exactly what should happen to a cross-site
+		* request that has no business flipping settings.
+		*/
+		const WRITE_HEADERS = { "x-dsh-doubao-write": "1" };
+		/**
 		* GET the quota view. Never throws: every failure becomes `undefined`, which
 		* classifies as `unreadable` rather than unmounting the card.
 		*/
@@ -239,11 +300,15 @@ window.__ModuleLoader__.load({
 			return await response.json();
 		}
 		/** POST forces a host-side cache bypass. Same error contract as {@link fetchQuota}. */
-		async function refreshQuota() {
+		async function refreshQuota(signal) {
 			const response = await fetch(DOUBAO_QUOTA_PATH, {
 				method: "POST",
 				credentials: "same-origin",
-				headers: { accept: "application/json" }
+				...signal === void 0 ? {} : { signal },
+				headers: {
+					accept: "application/json",
+					...WRITE_HEADERS
+				}
 			});
 			if (!response.ok) return void 0;
 			return await response.json();
@@ -259,9 +324,21 @@ window.__ModuleLoader__.load({
 			if (!response.ok) return void 0;
 			return await response.json();
 		}
+		/**
+		* The trailing half of a bar's meta line: when the instant is known, when it
+		* is not, or why it is not.
+		*
+		* "Not started yet" is not the same statement as "unknown": Doubao opens a
+		* weekly window on first use, and saying 「开始使用后计时」 is the truth the app
+		* itself shows, while 「重置时间未知」 would read as a server problem.
+		*/
+		function instantLabel(t, resetsInMs, kind) {
+			if (resetsInMs !== null && resetsInMs !== void 0) return kind === "expire" ? t("quota.expiresIn", { time: formatCountdown(resetsInMs) }) : t("quota.resetsIn", { time: formatCountdown(resetsInMs) });
+			return t("quota.resetUnknown");
+		}
 		/** One quota bar: label, used percent, bar, reset countdown. */
 		function QuotaBar(props) {
-			const { label, usedPercent, resetsInMs, t, now } = props;
+			const { label, usedPercent, resetsAt, resetsInMs, startsOnUse, usedAmount, totalAmount, instantKind, t, now } = props;
 			if (usedPercent === void 0) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 				className: "dbq-row",
 				children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -275,8 +352,11 @@ window.__ModuleLoader__.load({
 					})]
 				})
 			});
-			const percent = clampPercent(usedPercent);
-			const tone = percent >= 100 ? " dbq-full" : percent >= 80 ? " dbq-warn" : "";
+			const used = clampPercent(usedPercent);
+			const percent = clampPercent(100 - used);
+			const liveMs = (resetsAt !== null && resetsAt !== void 0 && resetsAt > 0 ? Math.max(0, resetsAt - now) : null) ?? resetsInMs;
+			const remainingAmount = totalAmount !== null && totalAmount !== void 0 && totalAmount > 0 ? Math.max(0, totalAmount - (usedAmount ?? 0)) : null;
+			const tone = percent <= 0 ? " dbq-full" : percent <= 20 ? " dbq-warn" : "";
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "dbq-row",
 				children: [
@@ -285,19 +365,19 @@ window.__ModuleLoader__.load({
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 							className: "dbq-label",
 							children: label
-						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
-							className: "dbq-meta",
-							children: [
-								t("quota.used", { percent }),
-								" · ",
-								t("quota.resetsIn", { time: formatCountdown(resetsInMs ?? 0) })
-							]
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dbq-figure",
+							children: remainingAmount !== null ? t("quota.remainingAmount", {
+								remaining: remainingAmount,
+								total: totalAmount ?? 0
+							}) : t("quota.remainingPercent", { percent })
 						})]
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 						className: "dbq-bar",
 						role: "progressbar",
 						"aria-valuenow": percent,
+						"aria-valuetext": t("quota.remainingPercent", { percent }),
 						"aria-valuemin": 0,
 						"aria-valuemax": 100,
 						"aria-label": label,
@@ -306,6 +386,19 @@ window.__ModuleLoader__.load({
 							style: { width: `${percent}%` }
 						})
 					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dbq-row-foot",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dbq-meta",
+							children: startsOnUse === true && (liveMs === null || liveMs === void 0) ? t("quota.startsOnUse") : instantLabel(t, liveMs, instantKind === "expire" ? "expire" : "reset")
+						}), remainingAmount !== null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dbq-figure-sub",
+							children: t("quota.usedAmounts", {
+								used: usedAmount ?? used,
+								total: totalAmount ?? 0
+							})
+						})]
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						className: "dbq-meta",
 						hidden: true,
@@ -372,23 +465,36 @@ window.__ModuleLoader__.load({
 				if (scope === void 0) return;
 				return scope.subscribe(() => setSettingsRevision((value) => value + 1));
 			}, [scope]);
+			const [now, setNow] = (0, react.useState)(() => Date.now());
+			(0, react.useEffect)(() => {
+				const timer = setInterval(() => setNow(Date.now()), TICK_MS);
+				return () => clearInterval(timer);
+			}, []);
 			(0, react.useEffect)(() => {
 				let alive = true;
 				const controller = new AbortController();
-				const load = async () => {
+				const hidden = () => typeof document !== "undefined" && document.visibilityState === "hidden";
+				const load = async (force) => {
 					try {
-						const view = await fetchQuota(controller.signal);
+						const view = force ? await refreshQuota(controller.signal) : await fetchQuota(controller.signal);
 						if (alive) setQuota(view);
 					} catch {
 						if (alive) setQuota(void 0);
 					}
 				};
-				load();
-				const timer = setInterval(() => void load(), POLL_INTERVAL_MS);
+				load(false);
+				const timer = setInterval(() => {
+					if (!hidden()) load(true);
+				}, POLL_INTERVAL_MS);
+				const onVisible = () => {
+					if (!hidden()) load(true);
+				};
+				document.addEventListener("visibilitychange", onVisible);
 				return () => {
 					alive = false;
 					controller.abort();
 					clearInterval(timer);
+					document.removeEventListener("visibilitychange", onVisible);
 				};
 			}, []);
 			const onRefresh = (0, react.useCallback)(async () => {
@@ -488,7 +594,10 @@ window.__ModuleLoader__.load({
 				try {
 					response = await fetch(DOUBAO_SAVE_PATH, {
 						method: "POST",
-						headers: { "Content-Type": "application/json" },
+						headers: {
+							"Content-Type": "application/json",
+							...WRITE_HEADERS
+						},
 						body: JSON.stringify({
 							field,
 							value
@@ -649,19 +758,38 @@ window.__ModuleLoader__.load({
 									children: quota?.plan ?? "—"
 								})]
 							}),
+							(quota?.windows.incentive ?? []).map((window, index) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(QuotaBar, {
+								label: window.label ?? t("quota.incentive"),
+								usedPercent: window.usedPercent,
+								resetsInMs: window.resetsInMs,
+								resetsAt: window.resetsAt,
+								usedAmount: window.usedAmount,
+								totalAmount: window.totalAmount,
+								instantKind: "expire",
+								t,
+								now
+							}, `incentive-${index}`)),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(QuotaBar, {
 								label: t("quota.fiveHour"),
 								usedPercent: quota?.windows.fiveHour?.usedPercent,
 								resetsInMs: quota?.windows.fiveHour?.resetsInMs,
+								resetsAt: quota?.windows.fiveHour?.resetsAt,
+								startsOnUse: quota?.windows.fiveHour?.startsOnUse,
+								usedAmount: quota?.windows.fiveHour?.usedAmount,
+								totalAmount: quota?.windows.fiveHour?.totalAmount,
 								t,
-								now: 0
+								now
 							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(QuotaBar, {
 								label: t("quota.weekly"),
 								usedPercent: quota?.windows.weekly?.usedPercent,
 								resetsInMs: quota?.windows.weekly?.resetsInMs,
+								resetsAt: quota?.windows.weekly?.resetsAt,
+								startsOnUse: quota?.windows.weekly?.startsOnUse,
+								usedAmount: quota?.windows.weekly?.usedAmount,
+								totalAmount: quota?.windows.weekly?.totalAmount,
 								t,
-								now: 0
+								now
 							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								className: "dbq-actions",
@@ -912,7 +1040,14 @@ window.__ModuleLoader__.load({
 			"quota.refreshing": "刷新中…",
 			"quota.autoNote": "每 5 分钟自动刷新",
 			"quota.updatedAt": "更新于 {time}",
-			"quota.windowMissing": "未返回该额度窗口",
+			"quota.windowMissing": "本套餐不含此额度",
+			"quota.resetUnknown": "重置时间未知",
+			"quota.startsOnUse": "开始使用后计时",
+			"quota.expiresIn": "{time} 后到期",
+			"quota.incentive": "赠送额度",
+			"quota.usedAmounts": "已用 {used} / {total}",
+			"quota.remainingAmount": "剩 {remaining} / {total}",
+			"quota.remainingPercent": "剩 {percent}%",
 			"account.title": "账号状态",
 			"account.ok": "已登录",
 			"account.signed_out": "未登录：请在豆包客户端登录后重试",
@@ -977,7 +1112,14 @@ window.__ModuleLoader__.load({
 			"quota.refreshing": "Refreshing…",
 			"quota.autoNote": "Refreshes automatically every 5 minutes",
 			"quota.updatedAt": "updated {time}",
-			"quota.windowMissing": "window not reported",
+			"quota.windowMissing": "not part of this plan",
+			"quota.resetUnknown": "reset time unknown",
+			"quota.startsOnUse": "starts counting on first use",
+			"quota.expiresIn": "expires in {time}",
+			"quota.incentive": "Bonus quota",
+			"quota.usedAmounts": "{used} / {total} used",
+			"quota.remainingAmount": "{remaining} of {total} left",
+			"quota.remainingPercent": "{percent}% left",
 			"account.title": "Account status",
 			"account.ok": "Signed in",
 			"account.signed_out": "Not signed in: sign in to the Doubao app and retry",