dsh-connect-workbuddy 3.6.0 → 4.2.0

package/lib/client.js

@@ -6,6 +6,7 @@ window.__ModuleLoader__.load({
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 		let react = require("react");
 		let react_jsx_runtime = require("react/jsx-runtime");
+		let react_dom = require("react-dom");
 		//#region src/status-paths.ts
 		/**
 		* Node-free constants and types shared by the Host and browser halves.
@@ -23,6 +24,18 @@ window.__ModuleLoader__.load({
 		/** Plugin-owned usage endpoint consumed by its browser half. */
 		const WORKBUDDY_USAGE_PATH = "/plugins/dsh-connect-workbuddy/usage";
 		/**
+		* Per-account credit balances for one region, read ONLY while the composer
+		* panel is open.
+		*
+		* Separate from {@link WORKBUDDY_USAGE_PATH} because its cost is different in
+		* kind: the usage document is one upstream read for the selected account, while
+		* this is one read PER account in the region. Folding it into the usage route
+		* would make every 5-minute refresh pay for a table nobody is looking at, so it
+		* is fetched on demand instead — the same principle the pool applies to its
+		* per-account figures.
+		*/
+		const WORKBUDDY_ACCOUNT_CREDITS_PATH = "/plugins/dsh-connect-workbuddy/account-credits";
+		/**
 		* The project's public repository.
 		*
 		* Lives here rather than beside one component because TWO sections link to it
@@ -57,12 +70,47 @@ window.__ModuleLoader__.load({
 		* splitting them would duplicate the guards and invite them to drift apart.
 		*/
 		const WORKBUDDY_POOL_PATH = "/plugins/dsh-connect-workbuddy/pool";
+		/**
+		* Plugin-owned OAuth sign-in endpoint: one session step per call.
+		*
+		* `?action=start` asks the upstream for a login state and returns the URL to
+		* open; `?action=poll` (+ `loginId` in the body) reports whether the user
+		* finished, and on success persists the account into the vault. POST +
+		* loopback-only like the card's other mutations: the poll carries the login
+		* binding, and the Host-side session state must not be settable by another
+		* origin.
+		*/
+		const WORKBUDDY_OAUTH_PATH = "/plugins/dsh-connect-workbuddy/oauth";
 		/** Query parameter selecting which pool batch action a request means. */
 		const WORKBUDDY_POOL_ACTION_PARAM = "action";
+		/** How long the card waits between polls while the user is scanning. */
+		const OAUTH_POLL_INTERVAL_MS = 2e3;
+		/**
+		* Plugin-owned account transfer endpoint: the batch export / import of
+		* credentials between machines and between tools of the SAME format family.
+		*
+		* `?action=export` POSTs account ids, answers a JSON ARRAY of credential
+		* records; `?action=preview` POSTs file text, answers a token-free listing;
+		* `?action=import` POSTs file text plus selected indexes, merges into the
+		* vault. POST + loopback-only like every other mutation: the file content is
+		* arbitrary user data and export carries token material.
+		*/
+		const WORKBUDDY_TRANSFER_PATH = "/plugins/dsh-connect-workbuddy/transfer";
 		/** Address one region's pool endpoint with an action. */
 		function withWorkBuddyRegionAndAction(path, region, action) {
 			return `${withWorkBuddyRegion(path, region)}&${WORKBUDDY_POOL_ACTION_PARAM}=${action}`;
 		}
+		/**
+		* Address one region's endpoint for ANY route that dispatches on `action`.
+		*
+		* The OAuth and transfer routes reject a request with no action (400), so
+		* their callers must build the URL here rather than with
+		* {@link withWorkBuddyRegion} — a request missing the parameter fails the same
+		* way whether the omission was a mistake or not.
+		*/
+		function withWorkBuddyRouteAction(path, region, action) {
+			return `${withWorkBuddyRegion(path, region)}&${WORKBUDDY_POOL_ACTION_PARAM}=${action}`;
+		}
 		/** Query parameter naming the region a card request addresses. */
 		const WORKBUDDY_REGION_PARAM = "region";
 		/** Every region, in card tab order. */
@@ -173,6 +221,32 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/**
+		* Whether one region's sidebar credit line is shown. Opt-out: only an explicit
+		* `false` hides it, so a config written before this switch existed keeps the
+		* line visible exactly as a fresh install does.
+		*
+		* Per-REGION by construction (it reads one region's slot), which is the point:
+		* WB CN and WB AI are separate accounts on separate gateways, so "show credits"
+		* is not one decision. `value` may be the whole settings section or the
+		* `regions` map itself.
+		*/
+		function regionCreditsShownOf(value, region) {
+			return regionSlotOf(value, region)["showCreditsInMainUi"] !== false;
+		}
+		/**
+		* Build the next `regions` settings value for the sidebar-credit on/off toggle.
+		*
+		* Same merge rule as {@link nextRegionEnabled}: ONLY the target region's flag
+		* changes, so every other field of that slot (directory, selection, pool
+		* preferences) and every other region's slot survive the write.
+		*/
+		function nextRegionCreditsShown(value, region, shown) {
+			return nextRegionSlots(regionsMapOf(value), region, {
+				...regionSlotOf(value, region),
+				showCreditsInMainUi: shown
+			});
+		}
+		/**
 		* Project one card row into its persisted `lastCatalog` shape: the native
 		* context window becomes the stored `contextWindow`, and the card-only
 		* presentation fields (`nativeContextWindow`, `multimodal`) are removed BY
@@ -489,6 +563,33 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/**
+		* Show or hide one region's sidebar credit line, with the same landed-check as
+		* every other settings write.
+		*
+		* Routed through {@link writeField} for exactly the reason
+		* {@link writeRegionEnabled} is: on the affected 0.1.7 deployments a direct
+		* `scope.set()` settles without storing anything, so the switch would appear to
+		* work and then silently revert — which for this control means the line
+		* reappears on the next render with no explanation.
+		*
+		* The caller passes the region's COMPLETE next slot (the same whole-slot merge
+		* rule as the other region writes), so hiding a line cannot drop the model
+		* directory, selection, image opt-ins, budgets or pool preferences that live
+		* alongside this flag in the same slot.
+		*
+		* @param scope - the bound settings scope for this plugin's namespace.
+		* @param region - the region whose line is being shown or hidden.
+		* @param shown - the desired state.
+		* @param slot - the region's COMPLETE next slot (caller owns the merge).
+		* @throws {WorkBuddySettingsWriteError} when neither writer persists the value.
+		*/
+		async function writeRegionCreditsShown(scope, region, shown, slot) {
+			await writeField(scope, "regions", region, slot, (readBack) => {
+				const stored = readBack;
+				return stored !== null && stored !== void 0 && stored["showCreditsInMainUi"] === shown;
+			});
+		}
+		/**
 		* Write one region's account-pool PREFERENCES, verifying they landed.
 		*
 		* Routed through {@link writeField} like every other settings write, so it gets
@@ -533,6 +634,21 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/client/exclusion-text.ts
+		/** The exclusion label for one account, or undefined when it is usable. */
+		function exclusionText(t, excludedBy) {
+			switch (excludedBy) {
+				case "rate-limited": return t("row.poolExcludedRateLimited");
+				case "out-of-credit": return t("row.poolExcludedOutOfCredit");
+				case "credential-rejected": return t("row.poolExcludedRejected");
+				case "not-found": return t("row.probeNotFound");
+				case "unavailable": return t("row.probeUnavailable");
+				case "failed": return t("row.probeFailed");
+				case "unusable": return t("row.poolExcludedUnusable");
+				default: return;
+			}
+		}
+		//#endregion
 		//#region src/client/ndjson.ts
 		/**
 		* Read a newline-delimited JSON body, one object at a time.
@@ -988,7 +1104,7 @@ window.__ModuleLoader__.load({
 				hourCycle: "h23"
 			}).format(new Date(value));
 		}
-		function formatClock(value) {
+		function formatClock$1(value) {
 			return new Intl.DateTimeFormat(void 0, {
 				hour: "2-digit",
 				minute: "2-digit",
@@ -1002,19 +1118,6 @@ window.__ModuleLoader__.load({
 			if (account.probe === void 0) return "var(--dsw-alias-label-dimmed, #9aa0a6)";
 			return outcomeOk(account.probe.outcome) ? "var(--dsw-alias-state-success-primary, #22a06b)" : "var(--dsw-alias-state-warn-primary, #f59e0b)";
 		}
-		/** The exclusion label for one account, or undefined when it is usable. */
-		function exclusionText(t, account) {
-			switch (account.excludedBy) {
-				case "rate-limited": return t("row.poolExcludedRateLimited");
-				case "out-of-credit": return t("row.poolExcludedOutOfCredit");
-				case "credential-rejected": return t("row.poolExcludedRejected");
-				case "not-found": return t("row.probeNotFound");
-				case "unavailable": return t("row.probeUnavailable");
-				case "failed": return t("row.probeFailed");
-				case "unusable": return t("row.poolExcludedUnusable");
-				default: return;
-			}
-		}
 		/**
 		* The pool section.
 		*
@@ -1023,7 +1126,7 @@ window.__ModuleLoader__.load({
 		* section implying the feature exists.
 		*/
 		function AccountPool(props) {
-			const { t, region, pool, settingsScope, siblingBusy, onBusyChange, onSaved, onRefresh, onRescan, rescanning, onSelectAccount, selectingAccount } = props;
+			const { t, region, pool, settingsScope, siblingBusy, onBusyChange, onSaved, onRefresh, onRescan, rescanning, onSelectAccount, selectingAccount, accountTools } = props;
 			const [draft, setDraft] = (0, react.useState)(null);
 			const [saving, setSaving] = (0, react.useState)(false);
 			const [saveError, setSaveError] = (0, react.useState)(void 0);
@@ -1299,6 +1402,98 @@ window.__ModuleLoader__.load({
 				region,
 				t
 			]);
+			/** The account whose per-row action is in flight; gates every row's buttons. */
+			const [rowBusyAccountId, setRowBusyAccountId] = (0, react.useState)(void 0);
+			/**
+			* Test ONE account from its row.
+			*
+			* Same Host rule as the batch (testOne reuses the batch's probe), the same
+			* log vocabulary, and the same refresh-after — a row result must read exactly
+			* like the batch result it replaces.
+			*/
+			const runRowTest = (0, react.useCallback)(async (accountId) => {
+				setRowBusyAccountId(accountId);
+				setActionError(void 0);
+				const url = withWorkBuddyRegionAndAction(WORKBUDDY_POOL_PATH, region, "test") + "&accountId=" + encodeURIComponent(accountId);
+				try {
+					const response = await fetch(url, {
+						method: "POST",
+						headers: { accept: "application/json" },
+						credentials: "same-origin"
+					});
+					const body = await response.json().catch(() => void 0);
+					if (!response.ok) throw new Error(poolFailureText(t, {
+						status: response.status,
+						reason: body?.reason,
+						error: body?.error
+					}));
+					if (!mounted.current) return;
+					const row = body?.rows?.[0];
+					if (row === void 0) {
+						setActionError(t("row.poolLogTestRowMalformed", { accountName: t("row.accountUnnamed") }));
+						return;
+					}
+					const outcome = row.result?.outcome;
+					if (outcome === void 0) appendLog(t("row.poolLogTestRowMalformed", { accountName: row.accountName === "" ? t("row.accountUnnamed") : row.accountName }), "warn");
+					else appendLog(t("row.poolLogTestRow", {
+						accountName: row.accountName === "" ? t("row.accountUnnamed") : row.accountName,
+						outcome: outcomeText(t, outcome)
+					}), outcomeOk(outcome) ? "ok" : "warn");
+					onRefresh?.();
+				} catch (error) {
+					const message = error instanceof Error ? error.message : t("row.requestFailed");
+					if (mounted.current) {
+						setActionError(message);
+						appendLog(t("row.poolLogBatchFailed", { message }), "error");
+					}
+				} finally {
+					if (mounted.current) setRowBusyAccountId(void 0);
+				}
+			}, [
+				appendLog,
+				onRefresh,
+				region,
+				t
+			]);
+			/**
+			* Remove ONE account's plugin-stored credential from its row. The Host only
+			* ever deletes the vault entry; a desktop sign-in reappears on the next
+			* rescan, and the message below says which of the two happened.
+			*/
+			const runRowRemove = (0, react.useCallback)(async (accountId, accountName) => {
+				setRowBusyAccountId(accountId);
+				setActionError(void 0);
+				const url = withWorkBuddyRegionAndAction(WORKBUDDY_POOL_PATH, region, "remove") + "&accountId=" + encodeURIComponent(accountId);
+				try {
+					const response = await fetch(url, {
+						method: "POST",
+						headers: { accept: "application/json" },
+						credentials: "same-origin"
+					});
+					const body = await response.json().catch(() => void 0);
+					if (!response.ok) throw new Error(poolFailureText(t, {
+						status: response.status,
+						reason: body?.reason,
+						error: body?.error
+					}));
+					if (!mounted.current) return;
+					appendLog(body?.removed === true ? t("row.poolRowRemoved", { accountName: accountName === "" ? t("row.accountUnnamed") : accountName }) : t("row.poolRowRemoveDesktopOnly", { accountName: accountName === "" ? t("row.accountUnnamed") : accountName }), body?.removed === true ? "ok" : "info");
+					onRefresh?.();
+				} catch (error) {
+					const message = error instanceof Error ? error.message : t("row.requestFailed");
+					if (mounted.current) {
+						setActionError(message);
+						appendLog(t("row.poolLogBatchFailed", { message }), "error");
+					}
+				} finally {
+					if (mounted.current) setRowBusyAccountId(void 0);
+				}
+			}, [
+				appendLog,
+				onRefresh,
+				region,
+				t
+			]);
 			if (pool === void 0) return null;
 			/**
 			* Where the target model came from, and which model it is.
@@ -1371,13 +1566,22 @@ window.__ModuleLoader__.load({
 				className: "dsm-btn dsm-btn-outline dsm-workbuddy-pool-small-btn",
 				disabled: effectiveMembers.length === 0 || !canEditPool,
 				onClick: () => selectAll(false)
-			}, t("row.poolSelectNone")))), (0, react.createElement)("div", { className: "dsm-workbuddy-pool-table" }, (0, react.createElement)("div", { className: "dsm-workbuddy-pool-row dsm-workbuddy-pool-row-head" }, (0, react.createElement)("span", null, t("row.poolColumnAccount")), (0, react.createElement)("span", null, t("row.poolColumnCredits")), (0, react.createElement)("span", null, t("row.poolColumnProbe")), pool.checkinSupported ? (0, react.createElement)("span", null, t("row.poolColumnCheckin")) : null), ...pool.accounts.map((account) => renderAccountRow({
+			}, t("row.poolSelectNone")))), (0, react.createElement)("div", { className: `dsm-workbuddy-pool-table${pool.checkinSupported ? " dsm-workbuddy-pool-table-checkin" : ""}` }, (0, react.createElement)("div", { className: "dsm-workbuddy-pool-row dsm-workbuddy-pool-row-head" }, (0, react.createElement)("span", null, t("row.poolColumnAccount")), (0, react.createElement)("span", null, t("row.poolColumnCredits")), (0, react.createElement)("span", null, t("row.poolColumnProbe")), pool.checkinSupported ? (0, react.createElement)("span", null, t("row.poolColumnCheckin")) : null, (0, react.createElement)("span", null)), ...pool.accounts.map((account) => renderAccountRow({
 				t,
 				account,
 				checked: active.memberAccountIds.includes(account.accountId),
 				canEdit: canEditPool,
 				checkinSupported: pool.checkinSupported,
-				onToggle: (next) => toggleMember(account.accountId, next)
+				onToggle: (next) => toggleMember(account.accountId, next),
+				busy: rowBusyAccountId !== void 0,
+				testDisabled: pool.targetModelSource === "none" || pool.targetModelSource === "stale",
+				targetHint: pool.targetModelSource === "none" ? t("row.poolTargetNone") : pool.targetModelSource === "stale" ? t("row.poolTargetStale", { model: pool.staleTargetModelId ?? "" }) : void 0,
+				onTest: () => {
+					runRowTest(account.accountId);
+				},
+				onRemove: () => {
+					runRowRemove(account.accountId, account.accountName);
+				}
 			}))), effectiveMembers.length === 0 ? (0, react.createElement)("p", {
 				className: "dsm-workbuddy-pool-warn",
 				role: "status"
@@ -1415,7 +1619,8 @@ window.__ModuleLoader__.load({
 				},
 				onDiscard: discard,
 				appendLog,
-				targetProvenance
+				targetProvenance,
+				...accountTools === void 0 ? {} : { accountTools }
 			}), (0, react.createElement)("p", { className: "dsm-workbuddy-pool-note" }, t("row.poolRegionNote")), renderLog({
 				t,
 				log,
@@ -1428,9 +1633,9 @@ window.__ModuleLoader__.load({
 		}
 		/** One account's row. */
 		function renderAccountRow(input) {
-			const { t, account, checked, canEdit, checkinSupported, onToggle } = input;
+			const { t, account, checked, canEdit, checkinSupported, onToggle, busy, testDisabled, targetHint, onTest, onRemove } = input;
 			const name = account.accountName === "" ? t("row.accountUnnamed") : account.accountName;
-			const excluded = exclusionText(t, account);
+			const excluded = exclusionText(t, account.excludedBy);
 			const probe = account.probe;
 			const outcomeLine = probe === void 0 ? t("row.poolNeverTested") : probe.retryAtMs !== void 0 ? `${outcomeText(t, probe.outcome)} · ${t("row.poolRetryAt", { at: formatShort(probe.retryAtMs) })}` : probe.outcome === "rate-limited" || probe.outcome === "out-of-credit" ? `${outcomeText(t, probe.outcome)} · ${t("row.poolRetryUnknown")}` : outcomeText(t, probe.outcome);
 			const remaining = probe?.retryAtMs === void 0 ? "" : remainingText(t, probe.retryAtMs, Date.now());
@@ -1469,11 +1674,24 @@ window.__ModuleLoader__.load({
 			}, (0, react.createElement)("span", { className: "dsm-workbuddy-pool-probe-main" }, probeLine), probeLabel === void 0 && age === void 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-probe-prov" }, probeLabel === void 0 ? null : (0, react.createElement)("span", { className: probeLabel.className }, probeLabel.text), probeLabel === void 0 || age === void 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-prov-sep" }, "·"), age === void 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-prov-age" }, age))), checkinSupported ? (0, react.createElement)("span", { className: "dsm-workbuddy-pool-checkin" }, account.checkedInToday === void 0 ? (0, react.createElement)("span", {
 				className: "dsm-workbuddy-pool-unknown",
 				title: t("row.poolNeverTested")
-			}, t("row.poolCheckinUnknown")) : account.checkedInToday ? (0, react.createElement)("span", { className: "dsm-workbuddy-pool-checked" }, t("row.poolCheckedIn")) : t("row.poolNotCheckedIn")) : null);
+			}, t("row.poolCheckinUnknown")) : account.checkedInToday ? (0, react.createElement)("span", { className: "dsm-workbuddy-pool-checked" }, t("row.poolCheckedIn")) : t("row.poolNotCheckedIn")) : null, (0, react.createElement)("span", { className: "dsm-workbuddy-pool-row-actions" }, (0, react.createElement)("button", {
+				type: "button",
+				className: "dsm-btn dsm-btn-outline dsm-workbuddy-pool-small-btn",
+				disabled: busy || testDisabled,
+				title: testDisabled ? targetHint : void 0,
+				onClick: onTest
+			}, t("row.poolRowTest")), (0, react.createElement)("button", {
+				type: "button",
+				className: "dsm-btn dsm-btn-outline dsm-workbuddy-pool-small-btn",
+				disabled: busy,
+				title: t("row.poolRowRemoveHint"),
+				"aria-label": t("row.poolRowRemoveAria", { accountName: name }),
+				onClick: onRemove
+			}, t("row.poolRowRemove"))));
 		}
 		/** The preference editor plus its save/discard actions. */
 		function renderSettings(input) {
-			const { t, pool, active, dirty, saving, siblingBusy, saveError, settingsScope, onEdit, onSave, onDiscard, targetProvenance } = input;
+			const { t, pool, active, dirty, saving, siblingBusy, saveError, settingsScope, onEdit, onSave, onDiscard, targetProvenance, accountTools } = input;
 			const canEdit = settingsScope !== void 0;
 			const toggle = (label, hint, checked, onChange, disabled = false) => (0, react.createElement)("div", { className: "dsm-workbuddy-pool-set" }, (0, react.createElement)("span", { className: "dsm-workbuddy-pool-set-copy" }, (0, react.createElement)("b", null, label), (0, react.createElement)("span", null, hint)), (0, react.createElement)("span", { className: "dsm-workbuddy-pool-set-ctl" }, (0, react.createElement)("label", { className: "sw" }, (0, react.createElement)("input", {
 				type: "checkbox",
@@ -1481,7 +1699,7 @@ window.__ModuleLoader__.load({
 				disabled: disabled || !canEdit,
 				onChange: (event) => onChange(event.currentTarget.checked)
 			}), (0, react.createElement)("span", { className: "sw-track" }))));
-			return (0, react.createElement)("div", { className: "dsm-workbuddy-pool-settings-wrap" }, (0, react.createElement)("div", { className: "dsm-workbuddy-pool-head" }, (0, react.createElement)("h3", { className: "dsm-workbuddy-pool-title" }, t("row.poolSettingsTitle")), dirty ? (0, react.createElement)("span", { className: "dsm-workbuddy-pool-dirty" }, t("row.poolDirty")) : null), (0, react.createElement)("p", { className: "dsm-workbuddy-pool-note" }, t("row.poolSettingsHint")), (0, react.createElement)("div", { className: "dsm-workbuddy-pool-settings" }, toggle(t("row.poolEnabled"), t("row.poolEnabledHint"), active.enabled, (next) => onEdit((current) => ({
+			return (0, react.createElement)("div", { className: "dsm-workbuddy-pool-settings-wrap" }, (0, react.createElement)("div", { className: "dsm-workbuddy-pool-head" }, (0, react.createElement)("h3", { className: "dsm-workbuddy-pool-title" }, t("row.poolSettingsTitle")), dirty ? (0, react.createElement)("span", { className: "dsm-workbuddy-pool-dirty" }, t("row.poolDirty")) : null), accountTools === void 0 ? null : (0, react.createElement)("div", { className: "dsm-workbuddy-pool-tools" }, accountTools), (0, react.createElement)("p", { className: "dsm-workbuddy-pool-note" }, t("row.poolSettingsHint")), (0, react.createElement)("div", { className: "dsm-workbuddy-pool-settings" }, toggle(t("row.poolEnabled"), t("row.poolEnabledHint"), active.enabled, (next) => onEdit((current) => ({
 				...current,
 				enabled: next
 			}))), (0, react.createElement)("div", { className: "dsm-workbuddy-pool-set" }, (0, react.createElement)("span", { className: "dsm-workbuddy-pool-set-copy" }, (0, react.createElement)("b", null, t("row.poolTargetLabel")), (0, react.createElement)("span", null, targetProvenance === null ? null : `${targetProvenance} `, t("row.poolTargetHint"))), (0, react.createElement)("span", { className: "dsm-workbuddy-pool-set-ctl" }, (0, react.createElement)("select", {
@@ -1550,7 +1768,535 @@ window.__ModuleLoader__.load({
 			}, t("row.poolLogClear"))), log.length === 0 ? (0, react.createElement)("div", { className: "dsm-workbuddy-pool-log-empty" }, t("row.poolLogEmpty")) : (0, react.createElement)("div", { className: "dsm-workbuddy-pool-log-body" }, ...log.map((entry, index) => (0, react.createElement)("div", {
 				className: "dsm-workbuddy-pool-log-row",
 				key: `${entry.atMs}-${index}`
-			}, (0, react.createElement)("span", { className: "dsm-workbuddy-pool-log-time" }, formatClock(entry.atMs)), (0, react.createElement)("span", { className: `dsm-workbuddy-pool-log-text dsm-workbuddy-pool-log-${entry.tone}` }, entry.text)))));
+			}, (0, react.createElement)("span", { className: "dsm-workbuddy-pool-log-time" }, formatClock$1(entry.atMs)), (0, react.createElement)("span", { className: `dsm-workbuddy-pool-log-text dsm-workbuddy-pool-log-${entry.tone}` }, entry.text)))));
+		}
+		//#endregion
+		//#region src/client/OAuthSignIn.tsx
+		/**
+		* The card's OAuth QR sign-in section.
+		*
+		* 参考：扫码登录的通行形态 —— 发起登录 → 打开授权页 →
+		*   轮询到完成为止 → 展示结果。本实现把轮询循环压成一个组件内 effect：
+		*   打开授权页的是用户点击的链接（浏览器标签页，非弹窗），组件只负责
+		*   按 `OAUTH_POLL_INTERVAL_MS` 节奏问 Host「完成了吗」，完成即停。
+		*
+		* 为什么不用 window.open：卡片运行在 Harness 的设置页 iframe/沙箱里，弹窗
+		*   会被拦截；把授权 URL 渲染成普通链接（target=_blank rel=noopener）是
+		*   沙箱内最可靠的方式，用户也可以复制链接到手机上继续（URL 即登录态）。
+		*
+		* 所有状态就地管理，零跨组件往返：取消 = 停止轮询 + 清理 loginId；
+		* Host 重启导致 loginId 失效会得到 done+error，与超时同一条文案路径。
+		*
+		* @module dsh-connect-workbuddy/client/OAuthSignIn
+		*/
+		/** Seconds since the login started, for the waiting line. */
+		function elapsedSeconds(sinceMs, nowMs) {
+			return Math.max(0, Math.floor((nowMs - sinceMs) / 1e3));
+		}
+		/**
+		* The section. Rendered on BOTH sign-in states: a signed-out machine gains
+		* its first account here; a signed-in one can add another without leaving
+		* the card.
+		*/
+		function OAuthSignIn({ t, region }) {
+			const [phase, setPhase] = (0, react.useState)({ kind: "idle" });
+			const [pollTick, setPollTick] = (0, react.useState)(0);
+			const [nowMs, setNowMs] = (0, react.useState)(() => Date.now());
+			const mounted = (0, react.useRef)(true);
+			(0, react.useEffect)(() => {
+				mounted.current = true;
+				return () => {
+					mounted.current = false;
+				};
+			}, []);
+			const waiting = phase.kind === "waiting";
+			(0, react.useEffect)(() => {
+				if (!waiting || phase.kind !== "waiting") return;
+				const expiresAtMs = phase.expiresAtMs;
+				const timer = setInterval(() => {
+					if (!mounted.current) return;
+					const now = Date.now();
+					setNowMs(now);
+					if (now > expiresAtMs) setPhase({
+						kind: "finished",
+						message: "error",
+						error: t("row.oauthTimedOut")
+					});
+				}, 1e3);
+				return () => {
+					clearInterval(timer);
+				};
+			}, [waiting, phase]);
+			(0, react.useEffect)(() => {
+				if (phase.kind !== "waiting") return;
+				const { loginId } = phase;
+				let cancelled = false;
+				const timer = setTimeout(() => {
+					(async () => {
+						try {
+							const response = await fetch(withWorkBuddyRouteAction(WORKBUDDY_OAUTH_PATH, region, "poll"), {
+								method: "POST",
+								headers: {
+									"content-type": "application/json",
+									accept: "application/json"
+								},
+								credentials: "same-origin",
+								body: JSON.stringify({ loginId })
+							});
+							const body = await response.json();
+							if (cancelled || !mounted.current) return;
+							if (!response.ok || !body || typeof body !== "object") {
+								setPhase({
+									kind: "finished",
+									message: "error",
+									error: `HTTP ${response.status}`
+								});
+								return;
+							}
+							if (!body.done) {
+								setPollTick((tick) => tick + 1);
+								return;
+							}
+							if (typeof body.error === "string" && body.error !== "") setPhase({
+								kind: "finished",
+								message: "error",
+								error: body.error
+							});
+							else setPhase({
+								kind: "finished",
+								message: "added",
+								accountName: body.accountName ?? ""
+							});
+						} catch {
+							setPollTick((tick) => tick + 1);
+						}
+					})();
+				}, OAUTH_POLL_INTERVAL_MS);
+				return () => {
+					cancelled = true;
+					clearTimeout(timer);
+				};
+			}, [
+				phase,
+				pollTick,
+				region
+			]);
+			const start = async () => {
+				setPhase({ kind: "opening" });
+				try {
+					const response = await fetch(withWorkBuddyRouteAction(WORKBUDDY_OAUTH_PATH, region, "start"), {
+						method: "POST",
+						headers: { accept: "application/json" },
+						credentials: "same-origin"
+					});
+					const body = await response.json();
+					if (!mounted.current) return;
+					if (!response.ok || typeof body.loginId !== "string" || typeof body.verificationUri !== "string") {
+						setPhase({
+							kind: "finished",
+							message: "error",
+							error: body.error ?? `HTTP ${response.status}`
+						});
+						return;
+					}
+					setPhase({
+						kind: "waiting",
+						loginId: body.loginId,
+						verificationUri: body.verificationUri,
+						startedAtMs: Date.now(),
+						expiresAtMs: Date.now() + (typeof body.expiresIn === "number" && body.expiresIn > 0 ? body.expiresIn : 600) * 1e3
+					});
+					setNowMs(Date.now());
+				} catch (error) {
+					if (mounted.current) setPhase({
+						kind: "finished",
+						message: "error",
+						error: error instanceof Error ? error.message : String(error)
+					});
+				}
+			};
+			if (phase.kind === "finished") {
+				const text = phase.message === "added" ? t("row.oauthDone", { accountName: phase.accountName === "" || phase.accountName === void 0 ? t("row.accountUnnamed") : phase.accountName }) : phase.message === "cancelled" ? t("row.oauthCancelled") : t("row.oauthError", { message: phase.error ?? "" });
+				return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+					className: "dsm-workbuddy-bar",
+					"aria-label": t("row.oauthTitle"),
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: `dsm-workbuddy-bar-status ${phase.message === "added" ? "dsm-workbuddy-bar-ok" : "dsm-workbuddy-bar-error"}`,
+						children: text
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						className: "dsm-btn dsm-btn-outline",
+						onClick: () => {
+							setPhase({ kind: "idle" });
+						},
+						children: t("row.oauthStart")
+					})]
+				});
+			}
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "dsm-workbuddy-bar",
+				"aria-label": t("row.oauthTitle"),
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+					className: "dsm-workbuddy-bar-label",
+					children: t("row.oauthTitle")
+				}), phase.kind === "waiting" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+						className: "dsm-workbuddy-bar-status",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+								href: phase.verificationUri,
+								target: "_blank",
+								rel: "noopener noreferrer",
+								children: t("row.oauthOpen")
+							}),
+							" — ",
+							t("row.oauthOpened")
+						]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+						className: "dsm-workbuddy-bar-hint",
+						children: [
+							t("row.oauthWaiting", { seconds: elapsedSeconds(phase.startedAtMs, nowMs) }),
+							" ",
+							t("row.oauthExpires", { minutes: Math.max(1, Math.round((phase.expiresAtMs - nowMs) / 6e4)) })
+						]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						type: "button",
+						className: "dsm-btn dsm-btn-outline",
+						onClick: () => {
+							setPhase({
+								kind: "finished",
+								message: "cancelled"
+							});
+						},
+						children: t("row.oauthCancel")
+					})
+				] }) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					type: "button",
+					className: "dsm-btn dsm-btn-outline",
+					disabled: phase.kind === "opening",
+					onClick: () => {
+						start();
+					},
+					children: phase.kind === "opening" ? t("row.oauthStarting") : t("row.oauthStart")
+				})]
+			});
+		}
+		//#endregion
+		//#region src/client/AccountTransfer.tsx
+		/**
+		* The card's account-transfer section: batch export / import of the region's
+		* stored credentials, in the file format shared with sibling credential
+		* managers for the same upstream.
+		*
+		* 参考：扫码登录小节（OAuthSignIn）的组件形态 —— 单个 section、就地管理
+		*   全部状态（busy / 结果行 / 错误）、零跨组件往返。导出弹框的交互（多选
+		*   账号 → 下载 JSON）与导入弹框（选文件 → 脱敏预览 → 勾选 → 导入）沿用
+		*   通行实现的步骤划分；预览只含展示字段与 hasToken 布尔量，token 明文
+		*   永不进入浏览器。
+		*
+		* 导出用 <a download> Blob：卡片运行在设置页 iframe 里，无宿主保存对话框
+		*   可用；a[download] 同源下载是沙箱内最可靠的方式。
+		*
+		* @module dsh-connect-workbuddy/client/AccountTransfer
+		*/
+		/** Build the default export file name: workbuddy-accounts-YYYY-MM-DD.json. */
+		function exportFileName() {
+			const pad = (value) => String(value).padStart(2, "0");
+			const d = /* @__PURE__ */ new Date();
+			return `workbuddy-accounts-${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())}.json`;
+		}
+		/** Download a JSON array as a local file (no host save dialog inside the iframe). */
+		function downloadJson(fileName, data) {
+			const blob = new Blob([JSON.stringify(data, null, 2)], { type: "application/json" });
+			const url = URL.createObjectURL(blob);
+			const anchor = document.createElement("a");
+			anchor.href = url;
+			anchor.download = fileName;
+			document.body.appendChild(anchor);
+			anchor.click();
+			anchor.remove();
+			URL.revokeObjectURL(url);
+		}
+		/** The section. Rendered on both sign-in states — a signed-out machine can
+		* still import a file exported elsewhere; export without accounts answers
+		* the error line. */
+		function AccountTransfer({ t, region, accounts }) {
+			const [phase, setPhase] = (0, react.useState)({ kind: "idle" });
+			const [dialog, setDialog] = (0, react.useState)(void 0);
+			const [selected, setSelected] = (0, react.useState)(/* @__PURE__ */ new Set());
+			const [preview, setPreview] = (0, react.useState)(void 0);
+			const [importSelected, setImportSelected] = (0, react.useState)(/* @__PURE__ */ new Set());
+			const fileInput = (0, react.useRef)(null);
+			const mounted = (0, react.useRef)(true);
+			(0, react.useEffect)(() => {
+				mounted.current = true;
+				return () => {
+					mounted.current = false;
+				};
+			}, []);
+			const closeDialog = () => {
+				setDialog(void 0);
+				setSelected(/* @__PURE__ */ new Set());
+				setPreview(void 0);
+				setImportSelected(/* @__PURE__ */ new Set());
+			};
+			const runExport = async () => {
+				if (selected.size === 0) return;
+				setPhase({ kind: "exporting" });
+				try {
+					const response = await fetch(withWorkBuddyRouteAction(WORKBUDDY_TRANSFER_PATH, region, "export"), {
+						method: "POST",
+						headers: {
+							"content-type": "application/json",
+							accept: "application/json"
+						},
+						credentials: "same-origin",
+						body: JSON.stringify({ accountIds: [...selected] })
+					});
+					const body = await response.json();
+					if (!mounted.current) return;
+					if (!response.ok || !Array.isArray(body.accounts)) {
+						setPhase({
+							kind: "error",
+							message: body.error ?? `HTTP ${response.status}`
+						});
+						return;
+					}
+					downloadJson(exportFileName(), body.accounts);
+					closeDialog();
+					setPhase({
+						kind: "done",
+						message: t("row.transferExported", {
+							count: body.accounts.length,
+							fileName: exportFileName()
+						})
+					});
+				} catch (error) {
+					if (mounted.current) setPhase({
+						kind: "error",
+						message: error instanceof Error ? error.message : String(error)
+					});
+				}
+			};
+			const readImportFile = async (file) => {
+				setPhase({ kind: "importing" });
+				try {
+					const text = await file.text();
+					const response = await fetch(withWorkBuddyRouteAction(WORKBUDDY_TRANSFER_PATH, region, "preview"), {
+						method: "POST",
+						headers: {
+							"content-type": "application/json",
+							accept: "application/json"
+						},
+						credentials: "same-origin",
+						body: JSON.stringify({ text })
+					});
+					const body = await response.json();
+					if (!mounted.current) return;
+					if (!response.ok || !Array.isArray(body.accounts)) {
+						setPhase({
+							kind: "error",
+							message: body.error ?? `HTTP ${response.status}`
+						});
+						return;
+					}
+					setPreview(body);
+					setImportSelected(new Set(body.accounts.filter((entry) => entry.hasToken).map((entry) => entry.index)));
+					setPhase({ kind: "idle" });
+				} catch (error) {
+					if (mounted.current) setPhase({
+						kind: "error",
+						message: error instanceof Error ? error.message : String(error)
+					});
+				}
+			};
+			const runImport = async () => {
+				if (preview === void 0 || importSelected.size === 0 || fileInput.current?.files?.[0] === void 0) return;
+				setPhase({ kind: "importing" });
+				try {
+					const text = await fileInput.current.files[0].text();
+					const response = await fetch(withWorkBuddyRouteAction(WORKBUDDY_TRANSFER_PATH, region, "import"), {
+						method: "POST",
+						headers: {
+							"content-type": "application/json",
+							accept: "application/json"
+						},
+						credentials: "same-origin",
+						body: JSON.stringify({
+							text,
+							indexes: [...importSelected]
+						})
+					});
+					const body = await response.json();
+					if (!mounted.current) return;
+					if (!response.ok || typeof body.imported !== "number") {
+						setPhase({
+							kind: "error",
+							message: body.error ?? `HTTP ${response.status}`
+						});
+						return;
+					}
+					closeDialog();
+					setPhase({
+						kind: "done",
+						message: t("row.transferImported", {
+							imported: body.imported,
+							skipped: body.skipped ?? 0
+						})
+					});
+				} catch (error) {
+					if (mounted.current) setPhase({
+						kind: "error",
+						message: error instanceof Error ? error.message : String(error)
+					});
+				}
+			};
+			const busy = phase.kind === "exporting" || phase.kind === "importing";
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "dsm-workbuddy-bar",
+				"aria-label": t("row.transferTitle"),
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsm-workbuddy-bar-label",
+						children: t("row.transferTitle")
+					}),
+					phase.kind === "done" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsm-workbuddy-bar-status dsm-workbuddy-bar-ok",
+						children: phase.message
+					}) : phase.kind === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsm-workbuddy-bar-status dsm-workbuddy-bar-error",
+						children: t("row.transferError", { message: phase.message })
+					}) : null,
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsm-workbuddy-bar-actions",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsm-btn dsm-btn-outline",
+							disabled: busy || accounts.length === 0,
+							onClick: () => {
+								setSelected(/* @__PURE__ */ new Set());
+								setDialog("export");
+							},
+							children: t("row.transferExport")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsm-btn dsm-btn-outline",
+							disabled: busy,
+							onClick: () => {
+								setPreview(void 0);
+								setImportSelected(/* @__PURE__ */ new Set());
+								setDialog("import");
+							},
+							children: t("row.transferImport")
+						})]
+					}),
+					dialog === "export" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsm-workbuddy-transfer-dialog",
+						role: "dialog",
+						"aria-label": t("row.transferExport"),
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("row.transferExportPick", { total: accounts.length }) }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dsm-workbuddy-hint",
+								children: t("row.transferHint")
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+								className: "dsm-workbuddy-transfer-list",
+								children: accounts.map((account) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", { children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+										type: "checkbox",
+										checked: selected.has(account.id),
+										onChange: (event) => {
+											const next = new Set(selected);
+											if (event.target.checked) next.add(account.id);
+											else next.delete(account.id);
+											setSelected(next);
+										}
+									}),
+									" ",
+									account.accountName === "" ? t("row.accountUnnamed") : account.accountName
+								] }) }, account.id))
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dsm-workbuddy-transfer-dialog-actions",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dsm-btn dsm-btn-outline",
+									onClick: closeDialog,
+									children: t("row.transferCancel")
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dsm-btn dsm-btn-outline",
+									disabled: selected.size === 0 || phase.kind === "exporting",
+									onClick: () => {
+										runExport();
+									},
+									children: phase.kind === "exporting" ? t("row.transferExporting") : t("row.transferExportConfirm", { count: selected.size })
+								})]
+							})
+						]
+					}) : null,
+					dialog === "import" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsm-workbuddy-transfer-dialog",
+						role: "dialog",
+						"aria-label": t("row.transferImport"),
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("row.transferImportPick") }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								ref: fileInput,
+								type: "file",
+								accept: "application/json,.json",
+								disabled: busy,
+								onChange: (event) => {
+									const file = event.target.files?.[0];
+									if (file !== void 0) readImportFile(file);
+								}
+							}),
+							preview === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("row.transferPreviewTotal", { total: preview.total }) }),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+									className: "dsm-workbuddy-transfer-list",
+									children: preview.accounts.map((entry) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", { children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+											type: "checkbox",
+											disabled: !entry.hasToken,
+											checked: importSelected.has(entry.index),
+											onChange: (event) => {
+												const next = new Set(importSelected);
+												if (event.target.checked) next.add(entry.index);
+												else next.delete(entry.index);
+												setImportSelected(next);
+											}
+										}),
+										" ",
+										entry.nickname !== "" ? entry.nickname : entry.email !== "" ? entry.email : entry.uid !== "" ? entry.uid : t("row.transferEntryUnknown"),
+										entry.hasToken ? "" : ` — ${t("row.transferNoToken")}`
+									] }) }, entry.index))
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: "dsm-workbuddy-transfer-dialog-actions",
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "dsm-btn dsm-btn-outline",
+										onClick: closeDialog,
+										children: t("row.transferCancel")
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "dsm-btn dsm-btn-outline",
+										disabled: importSelected.size === 0 || phase.kind === "importing",
+										onClick: () => {
+											runImport();
+										},
+										children: phase.kind === "importing" ? t("row.transferImporting") : t("row.transferImportConfirm", { count: importSelected.size })
+									})]
+								})
+							] })
+						]
+					}) : null
+				]
+			});
 		}
 		//#endregion
 		//#region src/native-modality.ts
@@ -1666,6 +2412,12 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-tab-switch{display:inline-flex;align-items:center;flex:none;padding:0 8px 0 2px;cursor:pointer}
 .dsm-workbuddy-tab-switch input{margin:0;cursor:pointer;accent-color:var(--dsw-alias-brand-primary,#5686fe)}
 .dsm-workbuddy-tab-switch input:disabled{opacity:.4;cursor:default}
+/* One sidebar-credit switch, belonging to the ACTIVE tab's region. It sits on
+   its own line so it reads as a property of this tab rather than as a shared
+   pair of settings — the tab bar already says which region is in scope. */
+.dsm-workbuddy-credits-switch{display:flex;align-items:center;gap:6px;margin:8px 0 2px;cursor:pointer;font-size:12px;line-height:18px;color:var(--dsw-alias-label-secondary,#c6c9d0)}
+.dsm-workbuddy-credits-switch input{margin:0;cursor:pointer;accent-color:var(--dsw-alias-brand-primary,#5686fe)}
+.dsm-workbuddy-credits-switch input:disabled{opacity:.4;cursor:default}
 .dsm-workbuddy-tab-off{opacity:.55}
 /* Re-detection keeps a copy in the signed-out branch (that branch is where
    "I just signed in over there" applies), so it needs its own placement: the
@@ -1771,7 +2523,9 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-pool-warn{margin:0;padding:9px 11px;border-radius:9px;font-size:12px;line-height:17px;color:var(--dsw-alias-state-warn-primary,#f59e0b);background:rgba(245,158,11,.09);border:1px solid rgba(245,158,11,.3)}
 .dsm-workbuddy-pool-error{margin:0;font-size:12px;line-height:17px;color:var(--dsw-alias-state-error-primary,#ef4444);white-space:pre-line}
 .dsm-workbuddy-pool-table{border:1px solid var(--dsw-alias-border-l2,#3a3d45);border-radius:12px;overflow:hidden;background:var(--dsw-alias-bg-layer-2,#24262c)}
-.dsm-workbuddy-pool-row{display:grid;grid-template-columns:1.6fr 1fr 1.3fr .9fr;gap:10px;align-items:center;padding:10px 14px;border-top:1px solid var(--dsw-alias-border-l1,#2c2d31);font-size:13px;color:var(--dsw-alias-label-secondary,#c6c9d0)}
+.dsm-workbuddy-pool-row{display:grid;grid-template-columns:1.6fr 1fr 1.3fr .9fr .8fr;gap:10px;align-items:center;padding:10px 14px;border-top:1px solid var(--dsw-alias-border-l1,#2c2d31);font-size:13px;color:var(--dsw-alias-label-secondary,#c6c9d0)}
+/* No check-in column (the international region): the freed track goes to the actions. */
+.dsm-workbuddy-pool-table:not(.dsm-workbuddy-pool-table-checkin) .dsm-workbuddy-pool-row{grid-template-columns:1.6fr 1fr 1.3fr 1.7fr}
 .dsm-workbuddy-pool-row:first-child{border-top:0}
 .dsm-workbuddy-pool-row-head{padding:8px 14px;background:var(--dsw-alias-bg-layer-3,#2a2c33);color:var(--dsw-alias-label-tertiary,#999);font-size:11px;font-weight:600;letter-spacing:.02em;text-transform:uppercase}
 .dsm-workbuddy-pool-row-current{background:rgba(86,134,254,.07)}
@@ -1815,6 +2569,12 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-pool-settings-wrap{display:flex;flex-direction:column;gap:10px}
 .dsm-workbuddy-pool-dirty{font-size:12px;line-height:18px;font-weight:500;color:var(--dsw-alias-state-warn-primary,#f59e0b)}
 .dsm-workbuddy-pool-settings{display:flex;flex-direction:column;gap:1px;border:1px solid var(--dsw-alias-border-l2,#3a3d45);border-radius:12px;overflow:hidden;background:var(--dsw-alias-bg-layer-2,#24262c)}
+/* QR sign-in + export/import, hosted inside the pool settings block.
+   The block's own bordered rows belong to the SAVED preferences, so these
+   get their own container: same rhythm (12px 14px) so the two read as one
+   group, but a dashed edge marking them as immediate actions rather than
+   drafts the Save button below would commit. */
+.dsm-workbuddy-pool-tools{display:flex;flex-direction:column;gap:2px;border:1px dashed var(--dsw-alias-border-l2,#3a3d45);border-radius:12px;padding:4px 10px}
 .dsm-workbuddy-pool-set{display:flex;align-items:flex-start;justify-content:space-between;gap:16px;padding:12px 14px;border-top:1px solid var(--dsw-alias-border-l1,#2c2d31)}
 .dsm-workbuddy-pool-set:first-child{border-top:0}
 .dsm-workbuddy-pool-set-copy{display:flex;flex-direction:column;gap:3px;min-width:0;flex:1}
@@ -1844,6 +2604,9 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-pool-log-error{color:var(--dsw-alias-state-error-primary,#ef4444)}
 .dsm-workbuddy-pool-log-info{color:var(--dsw-alias-label-secondary,#c6c9d0)}
 .dsm-workbuddy-pool-log-empty{padding:14px;font-size:12px;color:var(--dsw-alias-label-tertiary,#999)}
+/* Per-row actions (test / remove), right side of each pool row. */
+.dsm-workbuddy-pool-row-actions{display:flex;gap:6px;align-items:center;justify-content:flex-end;flex:none}
+.dsm-workbuddy-pool-row-actions .dsm-workbuddy-pool-small-btn{padding:2px 10px;font-size:12px}
 @media (max-width:760px){.dsm-workbuddy-pool-row{grid-template-columns:1fr 1fr;row-gap:6px}.dsm-workbuddy-pool-select{max-width:180px}}
 /* Pool switch, namespaced under .dsm-workbuddy-pool so it cannot collide with host styles. */
 .dsm-workbuddy-pool .sw{position:relative;display:inline-block;width:38px;height:22px;flex:none;cursor:pointer}
@@ -1854,6 +2617,167 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-pool .sw input:checked+.sw-track::after{transform:translateX(16px)}
 .dsm-workbuddy-pool .sw input:disabled+.sw-track{opacity:.4}
 .dsm-workbuddy-pool .sw input:disabled{cursor:default}
+/* Account action bars: QR sign-in and export/import.
+   One row each — label, live status, actions — instead of a padded block
+   per feature. The bar is the resting height; only an open dialog (below)
+   grows vertically, so the card does not scroll past a wall of chrome to
+   reach the buttons. Status text shares the row rather than claiming its own,
+   and is what truncates first when the card is narrow. */
+.dsm-workbuddy-bar{display:flex;align-items:center;gap:8px;flex-wrap:wrap;margin:8px 0;padding:0}
+.dsm-workbuddy-bar-label{flex:none;margin:0;font-size:12px;font-weight:600;color:var(--dsw-alias-label-secondary,#c6c9d0)}
+.dsm-workbuddy-bar-status{flex:1 1 auto;min-width:0;margin:0;font-size:12px;line-height:18px;color:var(--dsw-alias-label-primary,#e8e9ed);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.dsm-workbuddy-bar-hint{color:var(--dsw-alias-label-tertiary,#999)}
+.dsm-workbuddy-bar-actions{display:flex;gap:8px;flex:none;margin-left:auto}
+.dsm-workbuddy-bar a{color:var(--dsw-alias-brand-primary,#5686fe);text-decoration:none}
+.dsm-workbuddy-bar a:hover{text-decoration:underline}
+.dsm-workbuddy-bar-ok{color:var(--dsw-alias-state-success-primary,#22a06b)}
+.dsm-workbuddy-bar-error{color:var(--dsw-alias-state-error-primary,#ef4444)}
+/* Secondary text inside the transfer DIALOG (not a bar): the privacy note
+   shown when credentials leave the machine. Kept independent of the bar
+   classes so the dialog does not depend on the bar's layout to be readable. */
+.dsm-workbuddy-hint{color:var(--dsw-alias-label-tertiary,#999)}
+/* The transfer dialog is deliberately a block: it holds a scrollable account
+   list and per-entry checkboxes, which cannot live in a one-row bar. */
+.dsm-workbuddy-transfer-dialog{margin-top:8px;padding:10px 12px;border:1px solid var(--dsw-alias-border-l2,#3a3d45);border-radius:10px;background:var(--dsw-alias-bg-secondary,transparent)}
+.dsm-workbuddy-transfer-dialog p{margin:0 0 8px;font-size:12px;line-height:18px;color:var(--dsw-alias-label-primary,#e8e9ed)}
+.dsm-workbuddy-transfer-dialog-actions{display:flex;gap:8px;justify-content:flex-end;flex-wrap:wrap}
+.dsm-workbuddy-transfer-list{list-style:none;margin:0 0 8px;padding:0;max-height:180px;overflow-y:auto}
+.dsm-workbuddy-transfer-list label{display:flex;align-items:center;gap:6px;font-size:12px;color:var(--dsw-alias-label-primary,#e8e9ed);cursor:pointer;padding:2px 0}
+.dsm-workbuddy-transfer-list input[type="checkbox"]{flex:none}
+.dsm-workbuddy-transfer input[type="file"]{font-size:12px;color:var(--dsw-alias-label-primary,#e8e9ed);margin-bottom:8px}
+`;
+		/**
+		* Composer credit readout styles, injected by the readout component itself.
+		*
+		* 参考：dingminhua/dsh-connect-trae（MIT，Copyright (c) 2026 LaoDing）
+		*   — 该项目的 `COMPOSER_POINTS_CSS`，类名改为 `dsm-workbuddy-*`，
+		*     其余（尺寸、节奏、主题变量与回退值、表格对齐）逐条沿用。
+		*
+		* Separate from the card bundle because the readout lives in the session's
+		* composer, not inside the plugin card; a card that is closed still shows this,
+		* and on some hosts the card is never mounted at all.
+		*/
+		const WORKBUDDY_COMPOSER_CSS = `
+/* The readout is plain composer text — no border, no fill at rest. The padding
+   is only the click target, invisible until the pointer arrives. */
+.dsm-workbuddy-composer-credits{display:inline-flex;align-items:center;min-width:0}
+.dsm-workbuddy-composer-credits-trigger{
+  appearance:none;display:inline-flex;align-items:center;align-self:stretch;
+  padding:2px 6px;border:0;border-radius:6px;background:transparent;
+  /* EXPLICIT, not inherit. The composer row's own font and body colour are
+     noticeably larger and darker than the neighbouring controls — a credit
+     readout is secondary information and must not shout. 12px matches this
+     plugin's original line; label-tertiary matches the shell's own composer-row
+     control (ContextMeter), which is the sibling this reads alongside. */
+  font-size:12px;line-height:18px;
+  color:var(--dsw-alias-label-tertiary,#999);
+  white-space:nowrap;cursor:pointer;
+  font-variant-numeric:tabular-nums;
+}
+.dsm-workbuddy-composer-credits-trigger:hover{background:var(--dsw-alias-interactive-bg-hover,rgba(127,127,127,.14))}
+.dsm-workbuddy-composer-credits-trigger:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:1px}
+/* The panel is portaled to document.body and positioned from the trigger, so it
+   MUST be fixed — otherwise the left/top it measures are ignored and it lands in
+   document flow. All material comes from shell tokens so it follows the theme. */
+.dsm-workbuddy-composer-panel{
+  position:fixed;z-index:1100;box-sizing:border-box;
+  width:min(248px,calc(100vw - 24px));padding:12px;
+  border:1px solid var(--dsw-alias-border-l1,rgba(127,127,127,.28));
+  border-radius:var(--dsw-radius-lg,14px);
+  background:var(--dsw-specific-menu,Canvas);
+  box-shadow:var(--dsw-elevation-prominent,0 8px 32px rgba(0,0,0,.22));
+  backdrop-filter:var(--dsw-menu-backdrop-filter,none);
+  font-size:12px;line-height:18px;color:var(--dsw-alias-label-secondary,#444);
+}
+.dsm-workbuddy-composer-panel-head{display:flex;align-items:center;justify-content:space-between;gap:8px;margin-bottom:8px}
+.dsm-workbuddy-composer-panel-title{font-size:13px;font-weight:600;color:var(--dsw-alias-label-primary,CanvasText)}
+/* Self-contained: the dsm-btn primitive lives in TRAE_CARD_CSS, which the
+   composer never loads, so the refresh button must style itself. */
+.dsm-workbuddy-composer-panel-refresh{
+  appearance:none;flex:none;margin-left:auto;padding:3px 10px;
+  border:1px solid var(--dsw-alias-border-l2,rgba(127,127,127,.34));
+  border-radius:7px;background:transparent;
+  color:var(--dsw-alias-label-secondary,#444);
+  font:inherit;font-size:11px;line-height:16px;cursor:pointer;
+}
+.dsm-workbuddy-composer-panel-refresh:hover:not(:disabled){border-color:var(--dsw-alias-label-dimmed,rgba(127,127,127,.6));color:var(--dsw-alias-label-primary,CanvasText)}
+.dsm-workbuddy-composer-panel-refresh:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:1px}
+.dsm-workbuddy-composer-panel-refresh:disabled{opacity:.5;cursor:default}
+/* The panel is a TABLE: one row per account in the region, one figure (the
+   general balance) per row, and a row click switches accounts.
+
+   Rhythm is deliberate: the header sits on a hairline, the switch button owns
+   ALL horizontal padding (and pulls back by the same amount so its label lines
+   up with the header), and every row is the same height. A misaligned first
+   column is what makes a two-column popover read as broken. */
+.dsm-workbuddy-composer-panel-table{
+  width:100%;border-collapse:collapse;
+  font-size:12px;line-height:18px;
+}
+.dsm-workbuddy-composer-panel-table thead th{
+  padding:0 0 7px;font-weight:500;text-align:left;font-size:11px;
+  color:var(--dsw-alias-label-tertiary,GrayText);
+  border-bottom:1px solid var(--dsw-alias-border-l1,rgba(127,127,127,.24));
+}
+.dsm-workbuddy-composer-panel-num{
+  text-align:right;font-variant-numeric:tabular-nums;white-space:nowrap;
+}
+.dsm-workbuddy-composer-panel-table thead th.dsm-workbuddy-composer-panel-num{padding-right:0}
+.dsm-workbuddy-composer-panel-table tbody th{
+  padding:0;font-weight:400;text-align:left;vertical-align:middle;
+}
+.dsm-workbuddy-composer-panel-table tbody td{
+  padding:4px 0;vertical-align:middle;
+  color:var(--dsw-alias-label-primary,CanvasText);
+}
+/* The current account reads as current without shouting: a filled dot and a
+   slightly heavier weight. Disabled — pressing it would write a selection that
+   has not changed. */
+.dsm-workbuddy-composer-panel-table tbody tr.dsm-workbuddy-composer-panel-row-current td{font-weight:600}
+.dsm-workbuddy-composer-panel-switch{
+  appearance:none;display:flex;align-items:center;gap:7px;
+  width:100%;padding:4px 6px;margin-left:-6px;
+  border:0;border-radius:6px;background:transparent;
+  color:inherit;font:inherit;font-size:12px;text-align:left;cursor:pointer;
+  white-space:nowrap;overflow:hidden;
+}
+.dsm-workbuddy-composer-panel-switch>span:last-child{overflow:hidden;text-overflow:ellipsis}
+/* The name + optional reason mark. A COLUMN so the mark drops onto its own line
+   under the name: side by side they would stretch the name column and squeeze
+   the numeric one, and the switch's own overflow rule would ellipsise the mark
+   instead of the name. */
+.dsm-workbuddy-composer-panel-who{display:flex;flex-direction:column;min-width:0;gap:1px}
+.dsm-workbuddy-composer-panel-name{overflow:hidden;text-overflow:ellipsis}
+/* Why the account cannot serve right now ("被限流"), in the warn colour the pool
+   table uses for the same fact — so one measurement reads the same on both. */
+.dsm-workbuddy-composer-panel-mark{
+  font-size:11px;line-height:15px;
+  color:var(--dsw-alias-state-warn-primary,#f59e0b);
+}
+/* Hover belongs to the switch, not the row: the number cell is not clickable,
+   so lighting it up would promise an action it cannot perform. */
+.dsm-workbuddy-composer-panel-switch:hover:not(:disabled){
+  background:var(--dsw-alias-interactive-bg-hover,rgba(127,127,127,.14));
+}
+.dsm-workbuddy-composer-panel-switch:focus-visible{
+  outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:-1px;
+}
+.dsm-workbuddy-composer-panel-switch:disabled{cursor:default}
+.dsm-workbuddy-composer-panel-dot{
+  flex:none;width:7px;height:7px;border-radius:50%;
+  background:var(--dsw-alias-label-dimmed,rgba(127,127,127,.5));
+}
+.dsm-workbuddy-composer-panel-table tr.dsm-workbuddy-composer-panel-row-current .dsm-workbuddy-composer-panel-dot{
+  background:var(--dsw-state-success,#22a06b);
+}
+.dsm-workbuddy-composer-panel-foot{
+  display:flex;justify-content:space-between;gap:8px;
+  margin-top:9px;padding-top:7px;
+  border-top:1px solid var(--dsw-alias-border-l1,rgba(127,127,127,.24));
+  font-size:11px;line-height:16px;color:var(--dsw-alias-label-tertiary,GrayText);
+}
+.dsm-workbuddy-composer-panel-empty{margin:0;color:var(--dsw-alias-label-tertiary,GrayText)}
+.dsm-workbuddy-composer-panel-error{margin:8px 0 0;color:var(--dsw-alias-state-error-primary,#d92d20);font-size:11px;line-height:16px}
 `;
 		//#endregion
 		//#region src/client/searched-paths.ts
@@ -2233,6 +3157,14 @@ window.__ModuleLoader__.load({
 			/** Region whose on/off checkbox write is in flight, so its box can't race. */
 			const [togglingRegion, setTogglingRegion] = (0, react.useState)(void 0);
 			/**
+			* Region whose SIDEBAR-credit checkbox write is in flight.
+			*
+			* Tracked separately from {@link togglingRegion} because they are different
+			* fields of the same region slot: one in-flight write must not disable the
+			* other control, and both must stay serialized against the SAVE writers.
+			*/
+			const [togglingCredits, setTogglingCredits] = (0, react.useState)(void 0);
+			/**
 			* Probe results, keyed by region then model id.
 			*
 			* Kept per region for the same reason drafts are: the two tabs are separate
@@ -2425,6 +3357,21 @@ window.__ModuleLoader__.load({
 			};
 			const activeRegionOn = regionOn(activeRegion);
 			/**
+			* Whether one region's sidebar credit line is shown — for the ACTIVE tab.
+			*
+			* Prefers the Host's answer, exactly like {@link regionOn} and for the same
+			* measured reason: on the affected 0.1.7 deployment the browser's settings
+			* mirror never picks up this plugin's writes, so a checkbox reading the mirror
+			* rendered its previous value after a successful save and looked impossible to
+			* turn off ("关闭不了"). The Host is the authority; the mirror is only a
+			* fallback for a Host line that predates the field.
+			*/
+			const creditsShownOn = (item) => {
+				const fromHost = statusByRegion[item]?.showCreditsInMainUi;
+				if (typeof fromHost === "boolean") return fromHost;
+				return regionCreditsShownOf(settingsScope?.getSnapshot().value, item);
+			};
+			/**
 			* Switch one region's provider off or on. The write carries the region's
 			* whole slot through untouched — only `enabled` changes — so the user's
 			* directory, model picks, image opt-ins and budgets survive a round trip.
@@ -2450,6 +3397,32 @@ window.__ModuleLoader__.load({
 					if (mounted.current) setTogglingRegion(void 0);
 				}
 			};
+			/**
+			* Show or hide one region's sidebar credit line.
+			*
+			* This is the SECOND control for that line: the sidebar row also carries an
+			* `×` that writes the same `regions.<region>.showCreditsInMainUi` flag, and
+			* both go through the same landed-checked writer, so they can never disagree.
+			* The checkbox stays because the sidebar is not always rendered (collapsed
+			* rail, or a host that never mounts the footer slot).
+			*
+			* Writes the region's WHOLE slot — unchanged except for this one flag — so a
+			* hide never drops the directory, model picks, budgets or pool preferences
+			* that live alongside it.
+			*/
+			const toggleCredits = async (item, shown) => {
+				if (settingsScope === void 0) return;
+				setTogglingCredits(item);
+				try {
+					const slot = nextRegionCreditsShown(settingsScope.getSnapshot().value, item, shown)[item];
+					await writeRegionCreditsShown(settingsScope, item, shown, typeof slot === "object" && slot !== null ? slot : {});
+					await refreshUsage(item);
+				} catch (error) {
+					if (mounted.current) setAccountError(error instanceof Error ? error.message : t("row.requestFailed"));
+				} finally {
+					if (mounted.current) setTogglingCredits(void 0);
+				}
+			};
 			const refreshModels = async () => {
 				setBusy(true);
 				try {
@@ -2689,6 +3662,25 @@ window.__ModuleLoader__.load({
 				searched
 			});
 			status.status === "error" || status.selectionExplicit;
+			/**
+			* Account-adding and account-migration controls, defined ONCE and rendered
+			* in both sign-in states: inside the pool settings block when an account
+			* exists, and in the signed-out branch when it does not (the pool section is
+			* not rendered there at all). Two JSX copies would be free to drift, and the
+			* two states are the same feature — a user who learns these controls in one
+			* must find them in the same order in the other.
+			*/
+			const accountTools = /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(OAuthSignIn, {
+				t,
+				region: activeRegion
+			}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountTransfer, {
+				t,
+				region: activeRegion,
+				accounts: status.status === "error" ? [] : status.accounts.map((account) => ({
+					id: account.id,
+					accountName: account.accountName
+				}))
+			})] });
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 				className: `dsm-plugin-card${open ? " dsm-plugin-card-open" : ""}`,
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
@@ -2773,6 +3765,18 @@ window.__ModuleLoader__.load({
 								className: "dsm-workbuddy-tab-off-notice",
 								children: t("row.tabOffNotice")
 							}) : null,
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								className: "dsm-workbuddy-credits-switch",
+								title: activeRegion === "cn" ? t("row.showCreditsCnHint") : t("row.showCreditsGlobalHint"),
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									type: "checkbox",
+									checked: activeRegionOn ? creditsShownOn(activeRegion) : false,
+									disabled: !activeRegionOn || togglingCredits === activeRegion || !canWrite || saving || poolBusy,
+									onChange: (event) => {
+										toggleCredits(activeRegion, event.target.checked);
+									}
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: activeRegion === "cn" ? t("row.showCreditsCn") : t("row.showCreditsGlobal") })]
+							}),
 							status.status === "error" || status.status === "signed-in" && status.creditsError !== void 0 ? status.status === "signed-in" && status.credentialRejected === true ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								className: "dsm-workbuddy-usage-hint",
 								children: t("row.reloginHint")
@@ -2823,6 +3827,7 @@ window.__ModuleLoader__.load({
 										switchAccount(accountId);
 									},
 									selectingAccount: switchingAccount,
+									accountTools,
 									siblingBusy: saving || togglingRegion !== void 0,
 									onBusyChange: setPoolBusy,
 									onSaved: async () => await refreshUsage(activeRegion) !== void 0,
@@ -3061,6 +4066,10 @@ window.__ModuleLoader__.load({
 										children: busy ? t("row.accountsScanning") : t("row.accountsRescan")
 									})
 								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+									className: "dsm-workbuddy-pool-tools",
+									children: accountTools
+								}),
 								searched.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(SearchedPaths, {
 									items: searched,
 									t
@@ -3076,6 +4085,565 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/client/popover.ts
+		/**
+		* The two shell behaviours the composer credit panel needs: hanging the panel
+		* off its trigger, and dismissing it on an outside press.
+		*
+		* 参考：dingminhua/dsh-connect-trae（MIT，Copyright (c) 2026 LaoDing）
+		*   — 该项目的 `client/popover.ts`，逐条沿用其判断：同样的上下放置、同样的
+		*     视口收边、同样的 scroll(capture)/resize/自身尺寸变化重测、同样的
+		*     「pointerdown 落在触发器与面板之外即关闭」。这些不是随手写的——那边
+		*     2.12.0/2.13.0 的客户端加载失败与面板位置错乱都留下了记录，这里直接
+		*     采用其最终结论。
+		*
+		* Implemented locally rather than imported from
+		* `@deepseek-ai/dsh-client-ui-primitives`. The shell DOES register that package
+		* for plugin bundles, so importing it is legal — this is a deliberate choice,
+		* not a workaround: the two behaviours are ~40 lines of DOM geometry, and owning
+		* them keeps this component renderable in the Node test suite without mocking a
+		* package that itself reaches `*.module.css` and further DSH dependencies.
+		*
+		* NOTE ON A MISDIAGNOSIS, kept because it is the kind of thing that gets
+		* re-litigated: the client load failure on the referring project was first
+		* attributed to importing the primitives package. It was not that. The real
+		* cause was `import { createPortal } from 'react-dom'` being BUNDLED rather than
+		* externalized — the inlined development build opens with
+		* `process.env.NODE_ENV` and threw `ReferenceError: process is not defined` in
+		* the browser, at module-evaluation time, so the ENTIRE client half failed to
+		* import. See `tsdown.config.ts` (`CLIENT_EXTERNALS`) for the fix and
+		* `tests/client-runtime-imports.spec.ts` for the rule that now pins it.
+		*/
+		/**
+		* Clearance to keep from the top of the viewport.
+		*
+		* The shell reserves a strip at the top of the frame
+		* (`--dsh-frame-top-clearance`) for the window chrome, so a panel clamped to
+		* `margin` alone can still land under it. Absent variable or no `data-fullscreen`
+		* distinction is handled the same way the shell does: fall back to `min`.
+		*/
+		function overlayTopMargin(min) {
+			if (typeof document === "undefined") return min;
+			const root = document.documentElement;
+			const clearance = Number.parseFloat(getComputedStyle(root).getPropertyValue("--dsh-frame-top-clearance"));
+			if (Number.isNaN(clearance)) return min;
+			return Math.max(min, (root.hasAttribute("data-fullscreen") ? 0 : clearance) + 20);
+		}
+		/** Keep a `position: fixed` floating element anchored to a trigger. */
+		function useAnchoredPosition(options) {
+			const { open, anchorRef, panelRef, side = "bottom", align = "start", gap, margin } = options;
+			const [position, setPosition] = (0, react.useState)(null);
+			(0, react.useLayoutEffect)(() => {
+				if (!open) {
+					setPosition(null);
+					return;
+				}
+				const place = () => {
+					const rect = anchorRef.current?.getBoundingClientRect();
+					if (rect === void 0) return;
+					const panel = panelRef.current;
+					const width = panel?.offsetWidth ?? 0;
+					const height = panel?.offsetHeight ?? 0;
+					let left = align === "end" ? rect.right - width : rect.left;
+					let top = side === "top" ? rect.top - gap - height : rect.bottom + gap;
+					if (width > 0) left = Math.min(Math.max(left, margin), window.innerWidth - width - margin);
+					if (height > 0) top = Math.min(Math.max(top, overlayTopMargin(margin)), window.innerHeight - height - margin);
+					setPosition({
+						left,
+						top
+					});
+				};
+				place();
+				window.addEventListener("scroll", place, true);
+				window.addEventListener("resize", place);
+				const panel = panelRef.current;
+				let observer = null;
+				if (typeof ResizeObserver !== "undefined" && panel !== null) {
+					observer = new ResizeObserver(place);
+					observer.observe(panel);
+				}
+				return () => {
+					observer?.disconnect();
+					window.removeEventListener("scroll", place, true);
+					window.removeEventListener("resize", place);
+				};
+			}, [
+				open,
+				anchorRef,
+				panelRef,
+				side,
+				align,
+				gap,
+				margin
+			]);
+			return position;
+		}
+		/**
+		* Close an open popover when a pointerdown lands outside it.
+		*
+		* `portal` counts as inside: the panel is portaled to `document.body`, so it is
+		* not a descendant of `root` and a click on the panel itself would otherwise
+		* read as "outside" and dismiss the popover the user is trying to use.
+		*/
+		function useDismissOnOutsidePointer(root, open, setOpen, portal) {
+			(0, react.useEffect)(() => {
+				if (!open) return void 0;
+				const closeOutside = (event) => {
+					if (event.target instanceof Node && root.current?.contains(event.target) !== true && portal?.current?.contains(event.target) !== true) setOpen(false);
+				};
+				document.addEventListener("pointerdown", closeOutside);
+				return () => {
+					document.removeEventListener("pointerdown", closeOutside);
+				};
+			}, [
+				root,
+				open,
+				setOpen,
+				portal
+			]);
+		}
+		//#endregion
+		//#region src/client/ComposerCredits.tsx
+		/**
+		* Credit readout for the composer tool row (`conversation.input.left`).
+		*
+		* 参考：dingminhua/dsh-connect-trae（MIT，Copyright (c) 2026 LaoDing）
+		*   — 该项目的 `client/ComposerPoints.tsx`：读数形态（`<区域> · <余额>`）、
+		*     点击弹出锚定面板、面板内是**账号表格**（点行即切换账号）、刷新按钮
+		*     放在面板里而不是读数上、每账号读数**只在面板打开时抓**、5 分钟定时器、
+		*     失败保留上次数值。本文件把「只有国内版」扩成「两个区域都支持」：那边
+		*     的国际版是订阅制、没有可比数字，本插件的国际版有真实余额，所以按当前
+		*     选中模型所属的区域显示，并在读数上标明是 WB CN 还是 WB AI。
+		*
+		* Shows the selected region's general credit balance, but ONLY while the
+		* session's selected model belongs to this plugin (the gate decides that).
+		*
+		* The row itself is a bare clickable readout — `WB CN · 1,072` — with NO
+		* refresh control: the manual refresh lives in the panel, because the row is
+		* shared with the shell's own permission/agent/model controls and every extra
+		* control there costs space that is not ours. Clicking it opens an anchored
+		* panel: a TABLE with one row per account in that region and its balance, where
+		* a row click switches to it.
+		*
+		* Two deliberate choices in that panel:
+		*
+		*  - Per-account figures are fetched ONLY while the panel is open. The 5-minute
+		*    readout must not multiply its upstream reads by the account count — a
+		*    healthy balance should not pay for a table nobody is looking at.
+		*  - A row whose balance could not be read shows `—`, never `0`. The endpoint
+		*    omits the field in that case precisely so this component cannot render a
+		*    wrong claim about the account.
+		*/
+		/**
+		* Inject the readout's styles into the document head, once, on module load.
+		*
+		* Same idempotent pattern as the card's injection, and for the same reason: the
+		* classes are attached to DOM this component owns, and `WORKBUDDY_CARD_CSS` only
+		* loads when the settings card does — which is not guaranteed on a host where
+		* the card is never rendered. The referring project shipped exactly that bug
+		* (the trigger rendered as a default button box and the panel, without
+		* `position: fixed`, had its measured left/top ignored and appeared nowhere).
+		*/
+		if (typeof document !== "undefined") {
+			const cssId = "dsh-connect-workbuddy/composer-credits.css";
+			if (!document.querySelector(`style[data-plugin-css="${cssId}"]`)) {
+				const styleTag = document.createElement("style");
+				styleTag.dataset.plugin = "dsh-connect-workbuddy";
+				styleTag.dataset.pluginCss = cssId;
+				styleTag.textContent = WORKBUDDY_COMPOSER_CSS;
+				document.head.appendChild(styleTag);
+			}
+		}
+		/**
+		* Automatic refresh period. Five minutes, matching a credit balance's actual
+		* rate of change: it moves on the scale of model calls, not seconds, and each
+		* read is a read-only upstream call.
+		*/
+		const COMPOSER_CREDITS_REFRESH_INTERVAL_MS = 3e5;
+		/**
+		* Provider routes whose credit balance this readout can show, mapped to the
+		* region to read it from.
+		*
+		* BOTH regions, unlike the referring project: its international side is
+		* subscription-based and has no comparable balance, while WorkBuddy's
+		* international accounts do carry one, so there is a real number to show on
+		* either side. Mirrors `WORKBUDDY_PROVIDERS` on the host side; duplicated here
+		* because the client bundle must not import the host entry.
+		*/
+		const WORKBUDDY_COMPOSER_PROVIDERS = {
+			"workbuddy": "cn",
+			"workbuddy-global": "global"
+		};
+		/** The credit total out of one usage document, or undefined. */
+		function creditsOf(usage) {
+			if (usage.status !== "signed-in") return void 0;
+			return usage.credits?.total;
+		}
+		/** Group the digits so a four-figure balance stays readable in a narrow row. */
+		function formatCredits(value) {
+			return value.toLocaleString("en-US", { maximumFractionDigits: 0 });
+		}
+		function formatClock(value) {
+			return new Date(value).toLocaleTimeString("zh-CN", {
+				hour: "2-digit",
+				minute: "2-digit"
+			});
+		}
+		function ComposerCredits(props) {
+			const { t, provider, region, settingsScope } = props;
+			if (t === void 0) throw new Error("Composer credits readout requires its translation function");
+			const owned = provider === void 0 ? void 0 : WORKBUDDY_COMPOSER_PROVIDERS[provider];
+			const activeRegion = region ?? owned;
+			const [usage, setUsage] = (0, react.useState)(void 0);
+			const [accountCredits, setAccountCredits] = (0, react.useState)(void 0);
+			const [busy, setBusy] = (0, react.useState)(false);
+			const [switchingId, setSwitchingId] = (0, react.useState)(void 0);
+			const [failed, setFailed] = (0, react.useState)(false);
+			const [lastRefresh, setLastRefresh] = (0, react.useState)(void 0);
+			const [open, setOpen] = (0, react.useState)(false);
+			const inFlight = (0, react.useRef)(false);
+			const mounted = (0, react.useRef)(true);
+			const rootRef = (0, react.useRef)(null);
+			const panelRef = (0, react.useRef)(null);
+			(0, react.useEffect)(() => {
+				mounted.current = true;
+				return () => {
+					mounted.current = false;
+				};
+			}, []);
+			const position = useAnchoredPosition({
+				open: open && activeRegion !== void 0,
+				anchorRef: rootRef,
+				panelRef,
+				side: "top",
+				gap: 8,
+				margin: 12
+			});
+			useDismissOnOutsidePointer(rootRef, open, setOpen, panelRef);
+			const fetchUsage = (0, react.useCallback)(async (signal) => {
+				if (inFlight.current || activeRegion === void 0) return;
+				inFlight.current = true;
+				if (mounted.current) setBusy(true);
+				try {
+					const response = await fetch(withWorkBuddyRegion(WORKBUDDY_USAGE_PATH, activeRegion), {
+						headers: { accept: "application/json" },
+						credentials: "same-origin",
+						...signal === void 0 ? {} : { signal }
+					});
+					if (!response.ok) throw new Error(`HTTP ${response.status}`);
+					const value = await response.json();
+					if (!mounted.current || signal?.aborted === true) return;
+					setUsage(value);
+					setLastRefresh(Date.now());
+					setFailed(false);
+				} catch {
+					if (mounted.current && signal?.aborted !== true) setFailed(true);
+				} finally {
+					inFlight.current = false;
+					if (mounted.current) setBusy(false);
+				}
+			}, [activeRegion]);
+			/**
+			* Every account's balance in the region — one upstream read per account.
+			*
+			* Paid only while the panel is open (see the note at the top of this file).
+			* A failure keeps whatever we already have rather than clearing it: the table
+			* falls back to the usage document's account list, so a failed figure must not
+			* remove the switch.
+			*/
+			const fetchAccountCredits = (0, react.useCallback)(async (signal) => {
+				if (activeRegion === void 0) return;
+				try {
+					const response = await fetch(withWorkBuddyRegion(WORKBUDDY_ACCOUNT_CREDITS_PATH, activeRegion), {
+						headers: { accept: "application/json" },
+						credentials: "same-origin",
+						...signal === void 0 ? {} : { signal }
+					});
+					if (!response.ok) throw new Error(`HTTP ${response.status}`);
+					const data = await response.json();
+					if (!mounted.current || signal?.aborted === true) return;
+					if (Array.isArray(data.accounts)) setAccountCredits(data.accounts);
+				} catch {}
+			}, [activeRegion]);
+			(0, react.useEffect)(() => {
+				if (owned === void 0) return void 0;
+				let cancelled = false;
+				let timer;
+				const controller = new AbortController();
+				fetchUsage(controller.signal).finally(() => {
+					if (cancelled) return;
+					timer = window.setInterval(() => {
+						fetchUsage(controller.signal);
+					}, COMPOSER_CREDITS_REFRESH_INTERVAL_MS);
+				});
+				return () => {
+					cancelled = true;
+					if (timer !== void 0) window.clearInterval(timer);
+					controller.abort();
+				};
+			}, [owned, fetchUsage]);
+			(0, react.useEffect)(() => {
+				if (!open || activeRegion === void 0) return void 0;
+				const controller = new AbortController();
+				fetchAccountCredits(controller.signal);
+				return () => {
+					controller.abort();
+				};
+			}, [
+				open,
+				activeRegion,
+				fetchAccountCredits
+			]);
+			(0, react.useEffect)(() => {
+				if (!open) return void 0;
+				const onKeyDown = (event) => {
+					if (event.key === "Escape") setOpen(false);
+				};
+				document.addEventListener("keydown", onKeyDown);
+				return () => {
+					document.removeEventListener("keydown", onKeyDown);
+				};
+			}, [open]);
+			/**
+			* Switch to another account, then re-read both the usage document and the
+			* table so the marker, the readout and the panel all move together.
+			*
+			* Goes through the shared `writeAccountSlot`, which is read-back checked and
+			* carries the host-endpoint-first path: `set()` resolving is not proof the
+			* write landed, and a refused write must report failure instead of showing a
+			* marker on an account that was never selected.
+			*/
+			const switchTo = async (accountId) => {
+				if (settingsScope === void 0 || settingsScope.getSnapshot().writable !== true) return;
+				if (activeRegion === void 0 || switchingId !== void 0) return;
+				if (accountId === (accountCredits?.find((account) => account.selected)?.id ?? (usage?.status === "signed-in" ? usage.accountId : void 0))) return;
+				setSwitchingId(accountId);
+				setFailed(false);
+				try {
+					await writeAccountSlot(settingsScope, activeRegion, accountId);
+					await fetchUsage();
+					await fetchAccountCredits();
+				} catch {
+					if (mounted.current) setFailed(true);
+				} finally {
+					if (mounted.current) setSwitchingId(void 0);
+				}
+			};
+			if (owned === void 0) return null;
+			const signedIn = usage?.status === "signed-in" ? usage : void 0;
+			const total = signedIn === void 0 ? void 0 : creditsOf(signedIn);
+			const signedOut = usage !== void 0 && usage.status === "signed-out";
+			const valueText = total === void 0 ? "—" : formatCredits(total);
+			const label = t(activeRegion === "cn" ? "composer.pointsCn" : "composer.pointsGlobal");
+			/**
+			* The table's rows: every account in this region, with its balance.
+			*
+			* The endpoint's answer is authoritative (it carries the figures). Before it
+			* lands — or if it fails — fall back to the usage document's account list so
+			* the switches are reachable immediately, showing `—` for the figure rather
+			* than a spinner the user has to wait on.
+			*/
+			const selectedId = accountCredits?.find((account) => account.selected)?.id ?? (signedIn === void 0 ? void 0 : signedIn.accountId);
+			const rows = (accountCredits ?? (signedIn === void 0 ? [] : signedIn.accounts.map((account) => ({
+				id: account.id,
+				accountName: account.accountName,
+				selected: account.selected
+			})))).map((row) => {
+				if (row.id !== selectedId || row.credits !== void 0 || total === void 0) return row;
+				return {
+					...row,
+					credits: total
+				};
+			});
+			const canSwitch = settingsScope !== void 0 && settingsScope.getSnapshot().writable === true;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+				ref: rootRef,
+				className: "dsm-workbuddy-composer-credits",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+					type: "button",
+					className: "dsm-workbuddy-composer-credits-trigger",
+					"aria-haspopup": "dialog",
+					"aria-expanded": open,
+					onClick: () => {
+						setOpen(!open);
+					},
+					children: [
+						label,
+						" · ",
+						valueText
+					]
+				}), open && (0, react_dom.createPortal)(/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					ref: panelRef,
+					className: "dsm-workbuddy-composer-panel",
+					style: position ?? {
+						visibility: "hidden",
+						left: 0,
+						top: 0
+					},
+					role: "dialog",
+					"aria-label": t("composer.panelTitle"),
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "dsm-workbuddy-composer-panel-head",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsm-workbuddy-composer-panel-title",
+								children: t(activeRegion === "cn" ? "composer.panelTitleCn" : "composer.panelTitleGlobal")
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsm-workbuddy-composer-panel-refresh",
+								disabled: busy || switchingId !== void 0,
+								onClick: () => {
+									fetchUsage();
+								},
+								children: busy ? t("composer.refreshing") : t("composer.refresh")
+							})]
+						}),
+						signedOut ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: "dsm-workbuddy-composer-panel-empty",
+							children: t("composer.signedOut")
+						}) : rows.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: "dsm-workbuddy-composer-panel-empty",
+							children: t("composer.noAccounts")
+						}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("table", {
+							className: "dsm-workbuddy-composer-panel-table",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("thead", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("tr", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("th", {
+								scope: "col",
+								children: t("composer.account")
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("th", {
+								scope: "col",
+								className: "dsm-workbuddy-composer-panel-num",
+								children: t("composer.credits")
+							})] }) }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("tbody", { children: rows.map((row) => {
+								const current = row.id === selectedId;
+								const excluded = exclusionText(t, row.excludedBy);
+								return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("tr", {
+									className: current ? "dsm-workbuddy-composer-panel-row-current" : void 0,
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("th", {
+										scope: "row",
+										children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+											type: "button",
+											className: "dsm-workbuddy-composer-panel-switch",
+											disabled: !canSwitch || switchingId !== void 0 || current,
+											"aria-label": t("composer.switchTo", { account: row.accountName }),
+											onClick: () => {
+												switchTo(row.id);
+											},
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												className: "dsm-workbuddy-composer-panel-dot",
+												"aria-hidden": "true"
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+												className: "dsm-workbuddy-composer-panel-who",
+												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													className: "dsm-workbuddy-composer-panel-name",
+													children: row.accountName
+												}), excluded === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+													className: "dsm-workbuddy-composer-panel-mark",
+													children: excluded
+												})]
+											})]
+										})
+									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("td", {
+										className: "dsm-workbuddy-composer-panel-num",
+										children: row.credits === void 0 ? "—" : formatCredits(row.credits)
+									})]
+								}, row.id);
+							}) })]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: "dsm-workbuddy-composer-panel-foot",
+							children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
+								t("composer.lastRefresh"),
+								" ",
+								lastRefresh === void 0 ? "—" : formatClock(lastRefresh)
+							] })
+						}),
+						failed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: "dsm-workbuddy-composer-panel-error",
+							role: "status",
+							children: t("composer.refreshFailed")
+						}) : null
+					]
+				}), document.body)]
+			});
+		}
+		//#endregion
+		//#region src/client/ComposerCreditsGate.tsx
+		/**
+		* Decides whether the composer credit readout belongs in this session, by
+		* reading the Host's own `modelSelection` projection and the plugin's
+		* per-region `showCreditsInMainUi` switch.
+		*
+		* 参考：dingminhua/dsh-connect-trae（MIT，Copyright (c) 2026 LaoDing）
+		*   — 该项目的 `client/ComposerPointsGate.tsx`：从 `modelSelection` 投影读
+		*     「本会话当前用哪个 provider」来决定要不要渲染，以及 `next` 优先于
+		*     `lastUsed` 的判定。这是本项目从侧边栏迁到输入框的核心机制。
+		*
+		* WHY the projection rather than this plugin's own state: the projection is
+		* what the model picker writes and what the next request will use, so the
+		* readout cannot disagree with the model actually in effect. `next` outranks
+		* `lastUsed` because a selection that has been made but not yet sent is still
+		* what the composer shows the user — the same precedence the shell itself uses.
+		*
+		* WHY the composer row rather than the sidebar foot: the sidebar foot is a
+		* SINGLE root-scope row shared by every bundle, so two connector plugins each
+		* parking a line there fight over the same width (measured on the referring
+		* project: its line was squeezed to a clipped "Tr" beside this plugin's two
+		* rows). The composer row is per-session and provider-scoped, so exactly one
+		* plugin's credits are relevant at a time and nothing overlaps.
+		*
+		* Kept separate from {@link ComposerCredits} (and from the browser-plugin
+		* entry) so the decision can be unit-tested without a Host: the entry imports
+		* browser-only DSH packages the test environment cannot load, while this module
+		* depends only on React and a narrow projection shape.
+		*/
+		/**
+		* The provider route the session is currently pointed at.
+		*
+		* `next` wins over `lastUsed`: a switch that has landed but not yet been sent
+		* is still the selection the composer displays.
+		*/
+		function selectedProviderOf(projection) {
+			const provider = (projection?.next ?? projection?.lastUsed)?.provider;
+			return typeof provider === "string" && provider !== "" ? provider : void 0;
+		}
+		/**
+		* Which region's readout this session should show, or undefined for none.
+		*
+		* Returns undefined when the selected provider is not this plugin's — the
+		* ownership test and the region choice are ONE lookup, so there is no second
+		* copy of the rule to drift.
+		*
+		* The region's own switches are applied HERE rather than inside the component,
+		* so a region that is switched off (or whose provider is off) starts no fetch
+		* loop at all.
+		*/
+		function composerCreditsRegionOf(projection, scope) {
+			const provider = selectedProviderOf(projection);
+			const region = provider === void 0 ? void 0 : WORKBUDDY_COMPOSER_PROVIDERS[provider];
+			if (region === void 0) return void 0;
+			const value = scope === void 0 ? void 0 : unwrapVolatileDeep(scope.getSnapshot().value);
+			if (!regionCreditsShownOf(value, region)) return void 0;
+			if (!regionEnabledOf(value, region)) return void 0;
+			return region;
+		}
+		function ComposerCreditsGate(props) {
+			const { t, settingsScope, useProjection } = props;
+			const [, setRevision] = (0, react.useState)(0);
+			(0, react.useEffect)(() => settingsScope?.subscribe(() => {
+				setRevision((value) => value + 1);
+			}), [settingsScope]);
+			const projection = useProjection === void 0 ? void 0 : useProjection("modelSelection");
+			const region = composerCreditsRegionOf(projection, settingsScope);
+			if (region === void 0) return null;
+			const provider = selectedProviderOf(projection);
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ComposerCredits, {
+				t,
+				provider,
+				region,
+				...settingsScope === void 0 ? {} : { settingsScope }
+			});
+		}
+		//#endregion
 		//#region src/client/locales.ts
 		/**
 		* Plugin-card copy registered under the settings.workbuddy locale namespace.
@@ -3179,6 +4747,37 @@ window.__ModuleLoader__.load({
 			"row.probeFailedStatus": "✗ Test failed (HTTP {status})",
 			"row.probeError": "Could not run the test: {message}",
 			"row.cheer": "Star on GitHub",
+			"row.oauthTitle": "Add an account by QR sign-in",
+			"row.oauthStart": "Sign in with QR code",
+			"row.oauthStarting": "Opening…",
+			"row.oauthOpenHint": "Open the sign-in page and confirm — the account is added here automatically when you finish:",
+			"row.oauthOpen": "Open sign-in page",
+			"row.oauthOpened": "Opened. Waiting for you to finish…",
+			"row.oauthWaiting": "Waiting for the sign-in to finish… ({seconds}s)",
+			"row.oauthExpires": "The sign-in window expires in about {minutes} min.",
+			"row.oauthCancel": "Cancel",
+			"row.oauthCancelled": "Sign-in cancelled.",
+			"row.oauthTimedOut": "The sign-in timed out — start again when ready.",
+			"row.oauthDone": "Added “{accountName}”. Pick it above to use it.",
+			"row.oauthError": "Sign-in failed: {message}",
+			"row.oauthUnavailable": "QR sign-in is not offered by this build of the plugin.",
+			"row.transferTitle": "Export / import accounts",
+			"row.transferHint": "Move accounts between computers as a JSON file. The file carries the credentials — keep it private. The format is shared with other WorkBuddy credential managers.",
+			"row.transferExport": "Export accounts",
+			"row.transferExporting": "Exporting…",
+			"row.transferExportPick": "Choose the accounts to export ({total} available):",
+			"row.transferExportConfirm": "Export {count} account(s)",
+			"row.transferExported": "Exported {count} account(s) to {fileName}.",
+			"row.transferImport": "Import accounts",
+			"row.transferImporting": "Importing…",
+			"row.transferImportPick": "Choose a JSON file exported from this or a compatible tool:",
+			"row.transferPreviewTotal": "{total} account(s) in the file — untick what should stay out. Accounts already stored here are overwritten by the import.",
+			"row.transferImportConfirm": "Import {count} account(s)",
+			"row.transferImported": "Imported {imported} account(s); {skipped} skipped (no token, or belongs to the other region).",
+			"row.transferEntryUnknown": "unknown account",
+			"row.transferNoToken": "no token in this record",
+			"row.transferCancel": "Cancel",
+			"row.transferError": "Transfer failed: {message}",
 			"row.poolTitle": "Account pool",
 			"row.poolNoCandidate": "No account in this pool can be used right now.",
 			"row.poolNoCandidateHint": "Members are rate-limited, out of credits, rejected, or unreachable. Rate limits, drained quotas and transient failures return to the pool on their own — at the time the upstream states, or after a 30-minute fallback. Only a rejected credential needs a new sign-in.",
@@ -3276,7 +4875,38 @@ window.__ModuleLoader__.load({
 			"row.poolCurrentBadge": "In use",
 			"row.poolCurrentHeader": "In use: {account}",
 			"row.poolNotMember": "Not in pool",
-			"row.poolUnsavedMembers": "Selection changed — save to apply"
+			"row.poolUnsavedMembers": "Selection changed — save to apply",
+			"row.poolRowTest": "Test",
+			"row.poolRowRemove": "Remove",
+			"row.poolRowRemoveHint": "Forget this account's plugin-stored credential. A desktop-app sign-in reappears on the next scan — only the plugin's own copy is deleted.",
+			"row.poolRowRemoveAria": "Remove the stored credential of {accountName}",
+			"row.poolRowRemoved": "{accountName}: removed from the plugin's storage.",
+			"row.poolRowRemoveDesktopOnly": "{accountName}: nothing plugin-stored to remove — this account comes from the desktop app's own sign-in.",
+			"row.showCreditsCn": "Show WB CN credits in the composer",
+			"row.showCreditsGlobal": "Show WB AI credits in the composer",
+			"row.showCreditsCnHint": "Show the domestic (WB CN) credit balance in the composer toolbar, but only while this session uses a WB CN model. Click it for per-account balances and a manual refresh (refreshes by itself every 5 minutes).",
+			"row.showCreditsGlobalHint": "Show the international (WB AI) credit balance in the composer toolbar, but only while this session uses a WB AI model. Click it for per-account balances and a manual refresh (refreshes by itself every 5 minutes).",
+			"composer.pointsCn": "WB CN",
+			"composer.pointsGlobal": "WB AI",
+			"composer.panelTitleCn": "WB CN credits",
+			"composer.panelTitleGlobal": "WB AI credits",
+			"composer.account": "Account",
+			"composer.credits": "Credits",
+			"composer.switchTo": "Switch to {account}",
+			"composer.noAccounts": "No account in this region",
+			"composer.signedOut": "Not signed in",
+			"composer.refresh": "Refresh credits",
+			"composer.refreshing": "Refreshing credits…",
+			"composer.refreshFailed": "Could not refresh credits",
+			"composer.lastRefresh": "Last refreshed",
+			"composer.panelTitle": "WorkBuddy credits",
+			"sidebar.creditsCn": "WB CN credits",
+			"sidebar.creditsGlobal": "WB AI credits",
+			"sidebar.refresh": "Refresh",
+			"sidebar.refreshing": "Refreshing…",
+			"sidebar.lastRefresh": "Last refreshed {time}",
+			"sidebar.refreshFailed": "Refresh failed",
+			"sidebar.signedOut": "Not signed in"
 		};
 		const zh = {
 			"row.title": "接入使用 WorkBuddy 积分与模型（dsh-connect-workbuddy）",
@@ -3369,6 +4999,37 @@ window.__ModuleLoader__.load({
 			"row.probeFailedStatus": "✗ 测试失败（HTTP {status}）",
 			"row.probeError": "无法执行测试：{message}",
 			"row.cheer": "鼓励一下",
+			"row.oauthTitle": "扫码添加账号",
+			"row.oauthStart": "扫码登录",
+			"row.oauthStarting": "正在打开…",
+			"row.oauthOpenHint": "打开登录页并完成确认——完成后账号会自动出现在这里：",
+			"row.oauthOpen": "打开登录页",
+			"row.oauthOpened": "已打开，等待你完成登录…",
+			"row.oauthWaiting": "正在等待登录完成…（{seconds} 秒）",
+			"row.oauthExpires": "登录窗口约 {minutes} 分钟后过期。",
+			"row.oauthCancel": "取消",
+			"row.oauthCancelled": "已取消登录。",
+			"row.oauthTimedOut": "登录超时——请重新开始。",
+			"row.oauthDone": "已添加「{accountName}」。在上方选中它即可使用。",
+			"row.oauthError": "登录失败：{message}",
+			"row.oauthUnavailable": "当前版本的插件不支持扫码登录。",
+			"row.transferTitle": "导出 / 导入账号",
+			"row.transferHint": "用 JSON 文件在电脑之间迁移账号。文件里是账号凭据——请妥善保管。该格式与同类 WorkBuddy 凭据管理工具通用。",
+			"row.transferExport": "导出账号",
+			"row.transferExporting": "正在导出…",
+			"row.transferExportPick": "选择要导出的账号（共 {total} 个）：",
+			"row.transferExportConfirm": "导出 {count} 个账号",
+			"row.transferExported": "已导出 {count} 个账号到 {fileName}。",
+			"row.transferImport": "导入账号",
+			"row.transferImporting": "正在导入…",
+			"row.transferImportPick": "选择本插件或同类工具导出的 JSON 文件：",
+			"row.transferPreviewTotal": "文件中共 {total} 个账号——不需要的请取消勾选。导入会覆盖这里已存储的同名账号。",
+			"row.transferImportConfirm": "导入 {count} 个账号",
+			"row.transferImported": "已导入 {imported} 个账号；跳过 {skipped} 个（缺 token，或属于另一个区域）。",
+			"row.transferEntryUnknown": "未知账号",
+			"row.transferNoToken": "此记录没有 token",
+			"row.transferCancel": "取消",
+			"row.transferError": "传输失败：{message}",
 			"row.poolTitle": "账号池",
 			"row.poolNoCandidate": "账号池里目前没有可用的账号。",
 			"row.poolNoCandidateHint": "成员要么在限流冷却中、要么积分耗尽、要么凭据被拒、要么上游无响应。限流、积分耗尽与瞬时故障都会自动回池——按上游给出的恢复时间，没给时间就按 30 分钟兜底，不需要你操作；只有「凭据被拒」需要重新登录。",
@@ -3466,7 +5127,38 @@ window.__ModuleLoader__.load({
 			"row.poolCurrentBadge": "当前使用",
 			"row.poolCurrentHeader": "当前使用：{account}",
 			"row.poolNotMember": "未入池",
-			"row.poolUnsavedMembers": "勾选已改动 —— 保存后生效"
+			"row.poolUnsavedMembers": "勾选已改动 —— 保存后生效",
+			"row.poolRowTest": "测试",
+			"row.poolRowRemove": "删除",
+			"row.poolRowRemoveHint": "删除插件保存的这个账号凭据。桌面 App 的登录不会被删除——下次扫描它还会出现；只有插件自己的副本会被移除。",
+			"row.poolRowRemoveAria": "删除 {accountName} 的已存凭据",
+			"row.poolRowRemoved": "{accountName}：已从插件存储中移除。",
+			"row.poolRowRemoveDesktopOnly": "{accountName}：没有插件存储的凭据可删——这个账号来自桌面 App 自己的登录。",
+			"row.showCreditsCn": "在对话框显示 WB CN 积分",
+			"row.showCreditsGlobal": "在对话框显示 WB AI 积分",
+			"row.showCreditsCnHint": "在对话输入框工具栏显示国内版（WB CN）剩余积分，仅当本会话使用 WB CN 模型时出现。点击可看各账号余额并手动刷新（每 5 分钟也会自动刷新）。",
+			"row.showCreditsGlobalHint": "在对话输入框工具栏显示国际版（WB AI）剩余积分，仅当本会话使用 WB AI 模型时出现。点击可看各账号余额并手动刷新（每 5 分钟也会自动刷新）。",
+			"composer.pointsCn": "WB CN",
+			"composer.pointsGlobal": "WB AI",
+			"composer.panelTitleCn": "WB CN 积分",
+			"composer.panelTitleGlobal": "WB AI 积分",
+			"composer.account": "账号",
+			"composer.credits": "积分",
+			"composer.switchTo": "切换到 {account}",
+			"composer.noAccounts": "该区域暂无账号",
+			"composer.signedOut": "未登录",
+			"composer.refresh": "刷新积分",
+			"composer.refreshing": "正在刷新积分…",
+			"composer.refreshFailed": "积分刷新失败",
+			"composer.lastRefresh": "最近刷新",
+			"composer.panelTitle": "WorkBuddy 积分",
+			"sidebar.creditsCn": "WB CN 积分",
+			"sidebar.creditsGlobal": "WB AI 积分",
+			"sidebar.refresh": "刷新",
+			"sidebar.refreshing": "刷新中…",
+			"sidebar.lastRefresh": "最近刷新 {time}",
+			"sidebar.refreshFailed": "刷新失败",
+			"sidebar.signedOut": "未登录"
 		};
 		//#endregion
 		//#region src/client/index.tsx
@@ -3543,6 +5235,41 @@ window.__ModuleLoader__.load({
 				};
 				registerCard("plugins.bundle.config", "dsh-connect-workbuddy");
 				registerCard("plugins.row.config", "dsh-connect-workbuddy#dsh-connect-workbuddy");
+				/**
+				* Credit readout in the composer tool row (`conversation.input.left`, a
+				* session-scope list slot).
+				*
+				* 参考：dingminhua/dsh-connect-trae（MIT，Copyright (c) 2026 LaoDing）
+				*   — 该项目的 `registerComposerPoints`：无条件注册插槽、由 gate 读
+				*     `modelSelection` 投影自行决定是否渲染。本项目原先放在侧边栏底部
+				*     （`sidebar.footer.action`），那里是**单个 root 级共享行**，两个连接器
+				*     插件各占一行会互相挤压；输入框这行是 per-session 且按 provider 归属，
+				*     天然只有一个插件的积分相关。
+				*
+				* Provider-scoped on purpose: it renders only while the session's selected
+				* model belongs to this plugin, which is what keeps two connector plugins
+				* from competing for one shared row. Registration is unconditional; the
+				* gate reads the Host's `modelSelection` projection and returns null for
+				* every other provider, so nothing is drawn and no fetch loop starts while
+				* another provider is selected.
+				*/
+				const registerComposerCredits = () => {
+					try {
+						ctx.slots.inject("conversation.input.left", () => ctx.slots.register({
+							name: "conversation.input.left",
+							id: "dsh-connect-workbuddy-composer-credits",
+							order: 4,
+							locale: namespace,
+							inject: () => settingsScope === void 0 ? { t } : {
+								t,
+								settingsScope
+							}
+						}, ComposerCreditsGate));
+					} catch (error) {
+						console.error("[dsh-connect-workbuddy] composer credits slot failed to register (host provider unaffected):", error);
+					}
+				};
+				registerComposerCredits();
 			} catch (error) {
 				console.error("[dsh-connect-workbuddy] client card failed to load (host provider unaffected):", error);
 			}