dsh-connect-workbuddy 4.4.6 → 4.5.0

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## 4.5.0 (2026-10-14)
+
+> 版本号是 **minor** 而不是 patch：这一版新增了一个**用户可见的设置**（积分读数的位置）和一个**新的渲染席位**，而且配置 schema 多了一个字段 —— 按语义化版本这是特性，不是修错。`4.4.6` 之后没有任何以 4.4.7 发布过的产物或 Release（tag 已撤回重打）。
+
+### Features
+
+- **积分读数只有一个固定位置：装了别的插件后它就不显示了 —— 现在位置可选（输入框工具栏 / 输入框下方）**（issue #62 报告者）
+  - **现象**：报告者装了第三方插件（`dsh-auto-continue`）之后，对话输入框里的 WorkBuddy 积分余额消失。根因是那个位置本身：`conversation.input.left`（输入框工具栏）是一个**共享的 list 插槽**，shell 自己的控件和任何其他 bundle 都注册在那里 —— 而 list 插槽无法保证每个占用者都可见，别人挤进来就可能把本插件的读数挤没。原注释里其实已经记着同类问题（更早放在侧边栏底部时，两个连接器插件互相挤压，才迁到输入框这一行）。
+  - **修法**：把「位置」做成**每区域一个选项**，两个席位都注册、由 gate 决定在哪个席位渲染：
+    - `composer`（默认）—— 输入框工具栏 `conversation.input.left`，与模型选择同一行；
+    - `stats` —— 输入框下方 `conversation.composer.dock`，shell 自己渲染「轮次 / 步数 · tok/s · token · 缓存命中」那一行；`order: 10` 排在 shell 的统计之后，所以官方那几颗统计仍在最左，读数是**追加**而不是顶替。
+    - 选默认值是为了**升级不动任何人的界面**：设置在 schema 里默认 `composer`，升级前写下的 profile 读出来仍是 `composer`。
+  - **为什么两个席位都注册**：位置这种东西用户是「一边看着结果一边改」的，注册哪个席位取决于设置就意味着每次改设置都要**重新注册插槽**；而本仓库的注释里已经写明这种绑定是脆的（晚到的 settings 命名空间必须产生新的注册而不是改闭包）。现在**决定权在 gate 里一处**：席位不符就 `return null`，另一个席位照常渲染。
+  - **判定的顺序**：先归属（是不是本插件的 provider）、再两个开关（区域是否启用、读数是否显示）、**最后**才是席位。所以一个被关掉的区域在**两个席位都不渲染**，而不是先在非当前席位画一帧再被拒。
+  - **卡片新增一个两选一控件**（就在「对话框显示积分」那个勾选旁边，只作用于当前标签页的区域）：读取走 Host 的 usage 应答（与那个勾选同源，因为浏览器 settings 镜像在本命名空间上是过期的那份），写完**重新读一次 Host** —— 否则控件会一直显示旧席位，看起来像没生效。
+  - **守卫**：`tests/issue62-credit-position.spec.tsx`（9 例）覆盖：默认 `composer`（含升级前的 profile 与手改的未知值）、按区域而非全局读取、写入只改该区域该字段（模型列表/预算/兄弟区域都不动）、席位与显示开关相互独立、gate 在**指定席位渲染 / 另一席位渲染 0 个 / 两个席位都不渲染（隐藏或区域关闭）/ 别的 provider 两个席位都不渲染**。**变异验证**：把 gate 的席位判定删掉（两个席位都渲染）→ 2 例红；把读取的默认值去掉（升级前的 profile 读成 stats）→ 2 例红。
+
+
+- **新增「上游请求体构成」诊断（`WORKBUDDY_BODY_REPORT`），用于定案 issue #59：两份请求体到底是不是同一份历史。**（issue #59）
+  - **为什么需要**：报告里同一份历史被国内网关算约 70.8 万 token、国际网关算约 137.4 万（1.94 倍），切区域即 `code 11115 prompt is too long`。两条独立测量已经把范围压到唯一一个问题：报告者在**两个区域**跑本仓库的内容类别探针，逐字节相同的散文/代码/JSON 六格比值全在 **0.98~1.06**（同一段字节两边计价一致）；代码链路核对又表明**历史 reasoning 根本没进请求体**（pi-ai 只在 `compat.requiresThinkingAsText` 为真时把 `thinking` 当文本转发，本插件从未设置；`reasoning_details` 那条路需要流式解析从不写出的签名）。**剩下唯一可能是两份请求体不同**，而这件事**不需要任何区域有积分**就能查：请求体是本地拼好的，`14018 Credits exhausted` 是发出去之后才可能发生的。
+  - **做法**：`src/body-report.ts` 在 shim 把 body 交给上游**之前**记录它的**构成** —— 每条消息的 `role`、逐块的类型（`system`/`text`/`tool-call`/`tool-result`/`reasoning`/`image`）、字符数与其中**中日韩字符**数（实测中文 0.669、英文 0.224 token/字符，差 3 倍，混在一起看不出来）、`tools` 数组、`messages.length` 与 body 总字节数。按区域写 `<dir>/<region>.jsonl`，一次请求一行（一轮对话有很多次上游调用，**最后一次**才是要比的那份）。
+  - **只记计数、不记文本**：不写任何消息内容、账号名或令牌 —— 一个要被贴进公开 issue 的诊断不能有泄漏用户会话的能力。`tests/issue59-body-report.spec.ts` 里有一条专门的断言：用带特征串的 body 生成报告后，序列化结果**不含**该特征串（变异验证：让 `block()` 把 `text` 一起带上 → 该例与 reasoning 那例同时变红）。
+  - **开关**：环境变量 `WORKBUDDY_BODY_REPORT` 未设置或为空白即**关闭**；`1`/`true` 写到 `<DSH home>/body-reports/`；其他值按**目录路径**解释。写文件失败只走日志，**绝不影响聊天请求**（有专门断言）。
+  - **守卫**：`tests/issue59-body-report.spec.ts`（16 例）。
+  - **配套**：`scripts/probe-region-token-accounting.mjs` 新增 `--language en|zh` 与 `--kind prose|code|json`（六种组合确定性填充、跨区域逐字节相同），并补上国内侧实测基线：prose 214.0 / code 287.0 / json 288.3（en），prose 671.0 / code 480.7 / json 397.3（zh），单位 tokens/1k chars。
+
 ## 4.4.6 (2026-10-14)
 
 ### Fixes
@@ -17,14 +43,6 @@
 
 ### Features
 
-- **新增「上游请求体构成」诊断（`WORKBUDDY_BODY_REPORT`），用于定案 issue #59：两份请求体到底是不是同一份历史。**（issue #59）
-  - **为什么需要**：报告里同一份历史被国内网关算约 70.8 万 token、国际网关算约 137.4 万（1.94 倍），切区域即 `code 11115 prompt is too long`。两条独立测量已经把范围压到唯一一个问题：报告者在**两个区域**跑本仓库的内容类别探针，逐字节相同的散文/代码/JSON 六格比值全在 **0.98~1.06**（同一段字节两边计价一致）；代码链路核对又表明**历史 reasoning 根本没进请求体**（pi-ai 只在 `compat.requiresThinkingAsText` 为真时把 `thinking` 当文本转发，本插件从未设置；`reasoning_details` 那条路需要流式解析从不写出的签名）。**剩下唯一可能是两份请求体不同**，而这件事**不需要任何区域有积分**就能查：请求体是本地拼好的，`14018 Credits exhausted` 是发出去之后才可能发生的。
-  - **做法**：`src/body-report.ts` 在 shim 把 body 交给上游**之前**记录它的**构成** —— 每条消息的 `role`、逐块的类型（`system`/`text`/`tool-call`/`tool-result`/`reasoning`/`image`）、字符数与其中**中日韩字符**数（实测中文 0.669、英文 0.224 token/字符，差 3 倍，混在一起看不出来）、`tools` 数组、`messages.length` 与 body 总字节数。按区域写 `<dir>/<region>.jsonl`，一次请求一行（一轮对话有很多次上游调用，**最后一次**才是要比的那份）。
-  - **只记计数、不记文本**：不写任何消息内容、账号名或令牌 —— 一个要被贴进公开 issue 的诊断不能有泄漏用户会话的能力。`tests/issue59-body-report.spec.ts` 里有一条专门的断言：用带特征串的 body 生成报告后，序列化结果**不含**该特征串（变异验证：让 `block()` 把 `text` 一起带上 → 该例与 reasoning 那例同时变红）。
-  - **开关**：环境变量 `WORKBUDDY_BODY_REPORT` 未设置或为空白即**关闭**；`1`/`true` 写到 `<DSH home>/body-reports/`；其他值按**目录路径**解释。写文件失败只走日志，**绝不影响聊天请求**（有专门断言）。
-  - **守卫**：`tests/issue59-body-report.spec.ts`（16 例）。
-  - **配套**：`scripts/probe-region-token-accounting.mjs` 新增 `--language en|zh` 与 `--kind prose|code|json`（六种组合确定性填充、跨区域逐字节相同），并补上国内侧实测基线：prose 214.0 / code 287.0 / json 288.3（en），prose 671.0 / code 480.7 / json 397.3（zh），单位 tokens/1k chars。
-
 ## 4.4.5 (2026-10-14)
 
 ### Fixes

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as defaultDesktopAuthDirs, F as WorkBuddyUpstreamClient, K as WORKBUDDY_APP_EXECUTABLE_ENV, O as legacyWorkbuddyOwnAuthPath, Q as findWorkbuddyAppExecutableWithSource, S as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, j as workbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, ot as hostPeersInfo, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, y as WorkBuddyCredentialStore } from "./host-heartbeat-B2jrUDhg.js";
+import { C as defaultDesktopAuthDirs, F as WorkBuddyUpstreamClient, K as WORKBUDDY_APP_EXECUTABLE_ENV, O as legacyWorkbuddyOwnAuthPath, Q as findWorkbuddyAppExecutableWithSource, S as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, j as workbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, ot as hostPeersInfo, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, y as WorkBuddyCredentialStore } from "./host-heartbeat-DvcOd-3C.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/client.js

@@ -233,6 +233,23 @@ window.__ModuleLoader__.load({
 		function regionCreditsShownOf(value, region) {
 			return regionSlotOf(value, region)["showCreditsInMainUi"] !== false;
 		}
+		/** The seat a region's readout uses, defaulting to the composer row. */
+		function regionCreditPositionOf(value, region) {
+			return regionSlotOf(value, region)["creditPosition"] === "stats" ? "stats" : "composer";
+		}
+		/**
+		* Build the next `regions` settings value for one region's credit seat.
+		*
+		* Same merge rule as {@link nextRegionCreditsShown}: only the target region's
+		* field changes, so every other field of that slot and every other region's slot
+		* survive the write.
+		*/
+		function nextRegionCreditPosition(value, region, position) {
+			return nextRegionSlots(regionsMapOf(value), region, {
+				...regionSlotOf(value, region),
+				creditPosition: position
+			});
+		}
 		/**
 		* Build the next `regions` settings value for the sidebar-credit on/off toggle.
 		*
@@ -632,6 +649,20 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/**
+		* Write one region's credit SEAT (issue #62), verifying it landed.
+		*
+		* Sibling of {@link writeRegionCreditsShown}: same whole-slot merge, same
+		* landed check, same reason for both. The seat decides only WHERE the readout
+		* renders, so a lost write would leave the user looking at the old position
+		* while the control claimed the new one.
+		*/
+		async function writeRegionCreditPosition(scope, region, position, slot) {
+			await writeField(scope, "regions", region, slot, (readBack) => {
+				const stored = readBack;
+				return stored !== null && stored !== void 0 && stored["creditPosition"] === position;
+			});
+		}
+		/**
 		* Write one region's account-pool PREFERENCES, verifying they landed.
 		*
 		* Routed through {@link writeField} like every other settings write, so it gets
@@ -3044,6 +3075,15 @@ window.__ModuleLoader__.load({
    render (no Host pool state), so there is no heading row to share. This is the
    spacing the control carried before it moved beside that heading. */
 .dsm-workbuddy-credits-switch-row{display:flex;align-items:center;margin:8px 0 2px}
+/* The credit readout's seat picker (issue #62). Narrower than the pool's model
+   select so the show/hide box and this control share one heading row, and it
+   wraps onto its own line rather than squashing the pool title. */
+/* Its OWN label class, deliberately not the switch's: a query for "the
+   sidebar-credit switch" must not be able to pick this control up, and the two
+   are different widgets (a checkbox and a two-way picker). */
+.dsm-workbuddy-credit-position-switch{display:inline-flex;align-items:center;gap:6px;font-size:12px;line-height:18px;color:var(--dsw-alias-label-secondary,#c6c9d0)}
+.dsm-workbuddy-credit-position{max-width:150px;padding:2px 6px;font-size:12px}
+.dsm-workbuddy-credits-switch-row .dsm-workbuddy-credit-position-switch{margin-left:12px}
 .dsm-workbuddy-credits-switch input{margin:0;cursor:pointer;accent-color:var(--dsw-alias-brand-primary,#5686fe)}
 .dsm-workbuddy-credits-switch input:disabled{opacity:.4;cursor:default}
 .dsm-workbuddy-tab-off{opacity:.55}
@@ -4140,6 +4180,40 @@ window.__ModuleLoader__.load({
 			* hide never drops the directory, model picks, budgets or pool preferences
 			* that live alongside it.
 			*/
+			/**
+			* WHERE the active region's credit readout sits (issue #62).
+			*
+			* Read off the Host's usage answer, like {@link creditsShownOn} and for the
+			* same measured reason: the browser's settings mirror for this namespace is
+			* documented as stale on the affected 0.1.7 deployments, so a control reading
+			* it would keep showing the previous seat after a successful write. Absent
+			* means `composer`, which is what the Host resolves for a profile written
+			* before the setting existed.
+			*/
+			const creditPositionOn = (item) => {
+				return statusByRegion[item]?.creditPosition === "stats" ? "stats" : "composer";
+			};
+			/**
+			* Move one region's credit readout between its two seats.
+			*
+			* Same shape as {@link toggleCredits}: whole region slot in, landed check,
+			* then a Host re-read. The re-read is load-bearing here for the same reason —
+			* the control renders the Host's answer, so without it the picker keeps
+			* showing the seat it had and the change looks like it did nothing.
+			*/
+			const changeCreditPosition = async (item, position) => {
+				if (settingsScope === void 0) return;
+				setTogglingCredits(item);
+				try {
+					const slot = nextRegionCreditPosition(settingsScope.getSnapshot().value, item, position)[item];
+					await writeRegionCreditPosition(settingsScope, item, position, typeof slot === "object" && slot !== null ? slot : {});
+					await refreshUsage(item);
+				} catch (error) {
+					if (mounted.current) setAccountError(error instanceof Error ? error.message : t("row.requestFailed"));
+				} finally {
+					if (mounted.current) setTogglingCredits(void 0);
+				}
+			};
 			const toggleCredits = async (item, shown) => {
 				if (settingsScope === void 0) return;
 				setTogglingCredits(item);
@@ -4446,6 +4520,40 @@ window.__ModuleLoader__.load({
 					}
 				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: activeRegion === "cn" ? t("row.showCreditsCn") : t("row.showCreditsGlobal") })]
 			});
+			/**
+			* WHERE the readout sits — a two-way choice, active tab's region only
+			* (issue #62).
+			*
+			* It sits directly under the show/hide switch because the two answer one
+			* question together ("show it, and where"), and because a user only reaches
+			* for this when the default seat is unavailable — typically after installing
+			* another plugin that occupies the composer row. Rendered as a `<select>`
+			* rather than a pair of radios so it stays one compact row on the pool
+			* heading, matching the switch beside it.
+			*
+			* Disabled with the region, exactly like the switch: a region that is off has
+			* no readout to place.
+			*/
+			const creditPositionPicker = /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+				className: "dsm-workbuddy-credit-position-switch",
+				title: t("row.creditPositionHint"),
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+					className: "dsm-workbuddy-pool-select dsm-workbuddy-credit-position",
+					value: activeRegionOn ? creditPositionOn(activeRegion) : "composer",
+					disabled: !activeRegionOn || togglingCredits === activeRegion || !canWrite || saving || poolBusy,
+					"aria-label": t("row.creditPositionAria", { region: activeRegion === "cn" ? t("row.tabCn") : t("row.tabGlobal") }),
+					onChange: (event) => {
+						changeCreditPosition(activeRegion, event.currentTarget.value === "stats" ? "stats" : "composer");
+					},
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+						value: "composer",
+						children: t("row.creditPositionComposer")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+						value: "stats",
+						children: t("row.creditPositionStats")
+					})]
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("row.creditPositionLabel") })]
+			});
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 				className: `dsm-plugin-card${open ? " dsm-plugin-card-open" : ""}`,
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
@@ -4586,15 +4694,15 @@ window.__ModuleLoader__.load({
 									},
 									selectingAccount: switchingAccount,
 									accountTools,
-									...status.pool === void 0 ? {} : { headerExtra: creditsSwitch },
+									...status.pool === void 0 ? {} : { headerExtra: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [creditsSwitch, creditPositionPicker] }) },
 									siblingBusy: saving || togglingRegion !== void 0,
 									onBusyChange: setPoolBusy,
 									onSaved: async () => await refreshUsage(activeRegion) !== void 0,
 									onRefresh: () => refreshUsage(activeRegion)
 								}),
-								status.pool === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								status.pool === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 									className: "dsm-workbuddy-credits-switch-row",
-									children: creditsSwitch
+									children: [creditsSwitch, creditPositionPicker]
 								}) : null,
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("section", {
 									className: "dsm-workbuddy-models",
@@ -5380,6 +5488,17 @@ window.__ModuleLoader__.load({
 		* rows). The composer row is per-session and provider-scoped, so exactly one
 		* plugin's credits are relevant at a time and nothing overlaps.
 		*
+		* WHY THERE IS A SECOND SEAT (issue #62). The composer tool row is a LIST seat,
+		* so it is shared not only with the shell's own controls but with any other
+		* plugin that registers there — and one report is exactly that: with a
+		* third-party plugin installed the readout stopped appearing at all. A list seat
+		* cannot promise that every occupant is visible, so the seat is the USER's
+		* choice: `composer` (default, unchanged for anyone who does not choose) or
+		* `stats`, the ambient dock below the composer card where the shell renders its
+		* own round/token pills. The gate is registered in BOTH seats and renders in the
+		* one the setting names, which keeps the decision in one function instead of
+		* re-registering slots when the setting changes.
+		*
 		* Kept separate from {@link ComposerCredits} (and from the browser-plugin
 		* entry) so the decision can be unit-tested without a Host: the entry imports
 		* browser-only DSH packages the test environment cannot load, while this module
@@ -5416,6 +5535,16 @@ window.__ModuleLoader__.load({
 		* the authority; the scope is the fallback for a Host line that predates the
 		* field.
 		*/
+		/**
+		* The settings tree this plugin writes, unwrapped to a plain object.
+		*
+		* `unwrapVolatileDeep` first: the scope's value is a live cosmokit reference on
+		* the 0.1.7 line, and reading fields off it without unwrapping yields proxies
+		* whose `===` comparisons against a string are false.
+		*/
+		function scopeValueOf(scope) {
+			return scope === void 0 ? void 0 : unwrapVolatileDeep(scope.getSnapshot().value);
+		}
 		function composerCreditsRegionOf(projection, scope, hostValue) {
 			const provider = selectedProviderOf(projection);
 			const region = provider === void 0 ? void 0 : WORKBUDDY_COMPOSER_PROVIDERS[provider];
@@ -5427,7 +5556,7 @@ window.__ModuleLoader__.load({
 			return region;
 		}
 		function ComposerCreditsGate(props) {
-			const { t, settingsScope, useProjection } = props;
+			const { t, position, settingsScope, useProjection } = props;
 			const [, setRevision] = (0, react.useState)(0);
 			(0, react.useEffect)(() => settingsScope?.subscribe(() => {
 				setRevision((value) => value + 1);
@@ -5435,6 +5564,7 @@ window.__ModuleLoader__.load({
 			const projection = useProjection === void 0 ? void 0 : useProjection("modelSelection");
 			const region = composerCreditsRegionOf(projection, settingsScope);
 			if (region === void 0) return null;
+			if (regionCreditPositionOf(scopeValueOf(settingsScope), region) !== (position ?? "composer")) return null;
 			const provider = selectedProviderOf(projection);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ComposerCredits, {
 				t,
@@ -5704,6 +5834,11 @@ window.__ModuleLoader__.load({
 			"row.showCreditsCn": "WB CN credits in composer",
 			"row.showCreditsGlobal": "WB AI credits in composer",
 			"row.showCreditsCnHint": "Show the domestic (WB CN) credit balance in the composer toolbar, but only while this session uses a WB CN model. Click it for per-account balances and a manual refresh (refreshes by itself every 5 minutes).",
+			"row.creditPositionLabel": "position",
+			"row.creditPositionComposer": "composer toolbar",
+			"row.creditPositionStats": "below the input box",
+			"row.creditPositionAria": "Credit readout position for {region}",
+			"row.creditPositionHint": "Where the credit readout sits. \"composer toolbar\" is the default (the row with the model picker). Choose \"below the input box\" — the row carrying the round / step / token statistics — if another plugin occupies the composer toolbar and the readout does not appear.",
 			"row.showCreditsGlobalHint": "Show the international (WB AI) credit balance in the composer toolbar, but only while this session uses a WB AI model. Click it for per-account balances and a manual refresh (refreshes by itself every 5 minutes).",
 			"composer.pointsCn": "WB CN",
 			"composer.pointsGlobal": "WB AI",
@@ -5975,6 +6110,11 @@ window.__ModuleLoader__.load({
 			"row.showCreditsCn": "对话框显示 WB CN 积分",
 			"row.showCreditsGlobal": "对话框显示 WB AI 积分",
 			"row.showCreditsCnHint": "在对话输入框工具栏显示国内版（WB CN）剩余积分，仅当本会话使用 WB CN 模型时出现。点击可看各账号余额并手动刷新（每 5 分钟也会自动刷新）。",
+			"row.creditPositionLabel": "位置",
+			"row.creditPositionComposer": "输入框工具栏",
+			"row.creditPositionStats": "输入框下方",
+			"row.creditPositionAria": "{region} 的积分显示位置",
+			"row.creditPositionHint": "积分显示在哪里。「输入框工具栏」是默认位置（与模型选择同一行）。如果装了别的插件后读数不显示，改成「输入框下方」—— 那是「轮次 / 步数 / token」统计所在的那一行。",
 			"row.showCreditsGlobalHint": "在对话输入框工具栏显示国际版（WB AI）剩余积分，仅当本会话使用 WB AI 模型时出现。点击可看各账号余额并手动刷新（每 5 分钟也会自动刷新）。",
 			"composer.pointsCn": "WB CN",
 			"composer.pointsGlobal": "WB AI",
@@ -6098,8 +6238,12 @@ window.__ModuleLoader__.load({
 							id: "dsh-connect-workbuddy-composer-credits",
 							order: 4,
 							locale: namespace,
-							inject: () => settingsScope === void 0 ? { t } : {
+							inject: () => settingsScope === void 0 ? {
 								t,
+								position: "composer"
+							} : {
+								t,
+								position: "composer",
 								settingsScope
 							}
 						}, ComposerCreditsGate));
@@ -6109,6 +6253,46 @@ window.__ModuleLoader__.load({
 					}
 				};
 				/**
+				* The SAME readout in the ambient dock below the composer card (issue #62).
+				*
+				* Registered unconditionally, like the composer seat, because the CHOICE
+				* between the two seats lives in the gate: it renders in the seat the
+				* setting names and returns null in the other. Registering only the chosen
+				* seat would mean re-registering on every settings change, and the seat is
+				* exactly the kind of thing a user flips once while looking at the result.
+				*
+				* WHY THIS SEAT EXISTS: the composer tool row is a list seat shared with any
+				* other plugin that registers there, and issue #62 is one report of the
+				* readout disappearing when another plugin was installed. This row is where
+				* the shell renders its own round/step/token pills, so it is a place a user
+				* already reads session numbers from.
+				*
+				* `order` places it after the shell's own pills (`stats` registers at 0), so
+				* the shipped statistics stay leftmost and the readout reads as an addition
+				* rather than a replacement.
+				*/
+				const registerStatsCredits = () => {
+					try {
+						return ctx.slots.inject("conversation.composer.dock", () => ctx.slots.register({
+							name: "conversation.composer.dock",
+							id: "dsh-connect-workbuddy-stats-credits",
+							order: 10,
+							locale: namespace,
+							inject: () => settingsScope === void 0 ? {
+								t,
+								position: "stats"
+							} : {
+								t,
+								position: "stats",
+								settingsScope
+							}
+						}, ComposerCreditsGate));
+					} catch (error) {
+						console.error("[dsh-connect-workbuddy] stats credits slot failed to register (host provider unaffected):", error);
+						return;
+					}
+				};
+				/**
 				* Every slot this plugin contributes, and how to (re)create them.
 				*
 				* Kept as one list because the binding of `settingsScope` and the slot
@@ -6126,7 +6310,8 @@ window.__ModuleLoader__.load({
 				const registerAllSlots = () => [
 					...WORKBUDDY_CARD_KEYS.map((key) => registerCard("plugins.bundle.config", key)),
 					...WORKBUDDY_CARD_KEYS.map((key) => registerCard("plugins.row.config", `${key}#${key}`)),
-					registerComposerCredits()
+					registerComposerCredits(),
+					registerStatsCredits()
 				].filter((disposer) => disposer !== void 0);
 				/**
 				* Disposers of the slots registered for the CURRENT binding.

package/lib/{host-heartbeat-B2jrUDhg.js → host-heartbeat-DvcOd-3C.js}

@@ -3825,7 +3825,7 @@ function generationOf(version) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "4.4.6";
+const WORKBUDDY_CONNECT_VERSION = "4.5.0";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -2173,6 +2173,16 @@ declare function regionEnabledOf(value: unknown, region: WorkBuddyWebRegion): bo
 /** Build the next `regions` settings value for a signed-in tab's save. */
 declare function nextRegionSlots<Slot extends object>(regions: unknown, region: WorkBuddyWebRegion, slot: Slot): Record<string, unknown>;
 declare function nextRegionEnabled(value: unknown, region: WorkBuddyWebRegion, enabled: boolean): Record<string, unknown>;
+/**
+ * The two seats the credit readout can occupy (issue #62).
+ *
+ * `composer` is the composer tool row (`conversation.input.left`); `stats` is
+ * the ambient dock below the composer card (`conversation.composer.dock`),
+ * beside the shell's own round/step/token pills. Named as a union rather than a
+ * boolean because a third seat is plausible and `showAtTop: boolean` would have
+ * to be migrated rather than extended.
+ */
+type WorkBuddyCreditPosition = 'composer' | 'stats';
 /** One credit package as the upstream returns it, node-free. */
 interface WorkBuddyWebCreditPackage {
   packageName: string;
@@ -2361,6 +2371,8 @@ type WorkBuddyWebUsage =
    * "关闭不了" report.
    */
   showCreditsInMainUi?: boolean;
+  /** WHERE this region's readout sits (issue #62); absent means `composer`. */
+  creditPosition?: WorkBuddyCreditPosition;
   message?: string;
   /** The persisted account id matches no local account. */
   selectionLost?: boolean;
@@ -2395,6 +2407,8 @@ type WorkBuddyWebUsage =
    * settings mirror.
    */
   showCreditsInMainUi?: boolean;
+  /** WHERE this region's readout sits (issue #62); absent means `composer`. */
+  creditPosition?: WorkBuddyCreditPosition;
   source?: 'desktop' | 'dsh';
   tokenExpiresAtMs: number;
   /** A saved per-region choice is in effect (false = following the app). */
@@ -2784,6 +2798,13 @@ interface WorkBuddyStatusRouteOptions {
    * absent reads as ON, matching the schema's `default(true)`.
    */
   showCreditsInMainUi?(region: WorkBuddyRegion): boolean;
+  /**
+   * WHERE this region's credit readout sits (issue #62).
+   *
+   * Optional, and absent reads as `composer` — the only seat before the setting
+   * existed, so a Host that predates it renders exactly as it used to.
+   */
+  creditPosition?(region: WorkBuddyRegion): WorkBuddyCreditPosition;
   /**
    * Send one real-volume request to each named model of a region and report what
    * came back.
@@ -3107,6 +3128,25 @@ interface WorkBuddyRegionState {
    * written before this switch existed keeps whatever the default was.
    */
   showCreditsInMainUi?: boolean;
+  /**
+   * WHERE this region's credit readout sits (issue #62).
+   *
+   * Two seats, because the first one is not always available:
+   *
+   *   - `composer` — the composer tool row (`conversation.input.left`), shared
+   *     with the shell's own controls. It is the closer, more glanceable seat,
+   *     and it is the default so nothing moves for anyone who does not choose.
+   *   - `stats` — the ambient dock below the composer card
+   *     (`conversation.composer.dock`), where the shell renders its own
+   *     round/step/token pills. That row is a LIST seat whose shipped occupant
+   *     registers separately, so a third-party plugin that ALSO parks something
+   *     in the composer row cannot crowd this readout out of existence.
+   *
+   * The report behind this (issue #62) was exactly that: with another plugin
+   * installed, the readout vanished from the composer row. Making the seat a
+   * choice is what keeps one plugin's presence from deciding another's.
+   */
+  creditPosition?: WorkBuddyCreditPosition;
   /** The last-refreshed directory for this region; what the card displays. */
   lastCatalog?: WorkBuddyModelInfo[];
   /** The user's selection in this region, as model ids. */

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as isEncryptedFieldWrapper, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as deriveAtRestKey, K as WORKBUDDY_APP_EXECUTABLE_ENV, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as fetchAtRestKeyPayload, Y as deriveAtRestKeyId, Z as findWorkbuddyAppExecutable, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as workbuddyAppExecutableCandidates, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as withFileLock, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as isWorkbuddyBundle, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, it as readAtRestKey, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as writeFileAtomic, m as deriveCatalog, n as clearHostHeartbeat, nt as macosNestedAppBundles, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as clearAtRestKeyCache, r as isHeartbeatProcessAlive, rt as openEncryptedField, s as writeHostHeartbeat, st as resolveDshHome, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as macosBundleExecutable, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-B2jrUDhg.js";
+import { $ as isEncryptedFieldWrapper, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as deriveAtRestKey, K as WORKBUDDY_APP_EXECUTABLE_ENV, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as fetchAtRestKeyPayload, Y as deriveAtRestKeyId, Z as findWorkbuddyAppExecutable, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as workbuddyAppExecutableCandidates, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as withFileLock, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as isWorkbuddyBundle, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, it as readAtRestKey, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as writeFileAtomic, m as deriveCatalog, n as clearHostHeartbeat, nt as macosNestedAppBundles, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as clearAtRestKeyCache, r as isHeartbeatProcessAlive, rt as openEncryptedField, s as writeHostHeartbeat, st as resolveDshHome, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as macosBundleExecutable, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-DvcOd-3C.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, readFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -4207,6 +4207,7 @@ async function workBuddyWebStatus(deps, region) {
 	deps.regionUsable?.(region, accounts.length > 0);
 	const enabled = deps.regionEnabled(region);
 	const showCreditsInMainUi = deps.showCreditsInMainUi?.(region) ?? true;
+	const creditPosition = deps.creditPosition?.(region) ?? "composer";
 	const authStatus = await store.status();
 	const selectionExplicit = store.hasExplicitSelection();
 	if (authStatus.state !== "signed-out" && accounts.length === 0) return {
@@ -4228,6 +4229,7 @@ async function workBuddyWebStatus(deps, region) {
 			selectionExplicit,
 			enabled,
 			showCreditsInMainUi,
+			creditPosition,
 			...await store.selectionLost() ? { selectionLost: true } : {},
 			...webAccounts.length === 0 ? await searchedPaths(store) : {}
 		};
@@ -4243,6 +4245,7 @@ async function workBuddyWebStatus(deps, region) {
 		selectionExplicit,
 		enabled,
 		showCreditsInMainUi,
+		creditPosition,
 		accounts: accounts.map(toWebAccount),
 		models: deps.displayModels(region).map((model) => toWebModel(model, deps.contextBudgets(region))),
 		enabledModelIds: [...deps.enabledModelIds(region)],
@@ -5013,6 +5016,7 @@ const regionStateConfig = z.object({
 	* which is reachable exactly where the feature renders.
 	*/
 	showCreditsInMainUi: z.boolean().default(true).description("Show this region's remaining credits at the DSH sidebar foot (opt-out; the line carries its own hide button)"),
+	creditPosition: z.union([z.const("composer"), z.const("stats")]).default("composer").description("Where the credit readout sits: \"composer\" = the composer tool row (default), \"stats\" = the ambient row below the composer card, next to the shell's own token pills. Choose \"stats\" if another plugin occupies the composer row."),
 	lastCatalog: z.array(modelConfig).default([]),
 	enabledModelIds: z.array(z.string()).default([]),
 	imageModelIds: z.array(z.string()).default([]),
@@ -5405,6 +5409,13 @@ function apply(ctx, config) {
 		*/
 		showCreditsInMainUi: (region) => regionStateOf(current(), region).showCreditsInMainUi !== false,
 		/**
+		* WHERE the readout sits, resolved here rather than read from the browser
+		* settings mirror, for the same measured reason as the flag above: on the
+		* affected 0.1.7 deployments that mirror never picks up this plugin's
+		* writes, and a control reading it would keep showing the old seat.
+		*/
+		creditPosition: (region) => creditPositionOf(current(), region),
+		/**
 		* One minimal request per named model, through the region's own credential.
 		*
 		* Resolved here rather than in the route so the browser half never touches a
@@ -5950,6 +5961,14 @@ function apply(ctx, config) {
 		return resolveTargetModel(displayModels(current(), region), targetModelPreference(poolPreferencesOf(current(), region), accountId)).modelId;
 	};
 	/** One region's pool preferences, with the schema's defaults applied. */
+	/**
+	* WHERE this region's credit readout sits (issue #62).
+	*
+	* A local reader rather than a schema default so a config written before the
+	* setting existed reads as `composer` — the seat that was the only one, so an
+	* upgrade moves nothing on screen.
+	*/
+	const creditPositionOf = (config, region) => regionStateOf(config, region).creditPosition === "stats" ? "stats" : "composer";
 	const poolPreferencesOf = (config, region) => {
 		const pool = regionStateOf(config, region).pool;
 		const probeInputTokens = pool?.probeInputTokens;

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型接入 DeepSeek Harness，并提供只读的积分概览与模型管理。",
-  "version": "4.4.6",
+  "version": "4.5.0",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",