dsh-connect-workbuddy 4.4.6 → 4.5.1

package/CHANGELOG.md

@@ -1,5 +1,48 @@
 # Changelog
 
+## 4.5.1 (2026-10-14)
+
+### Fixes
+
+- **`6004`（账号频率超限）在对话里被显示成「当前请求的额度已用尽」，而账号余额还剩 6,788 —— 现在那句话下面补了一句说明。**（issue #63；维护者判定：**保持不进重试**，只补文案）
+  - **根因（实测，不是读代码猜的）**：宿主对失败按**码**路由，而插件这条链是 —— shim 的错误响应 → pi-ai 抛出的 message → `classifyPiAiError(message)` → 宿主码 → 客户端文案。三个环节的出货代码取出来直接跑之后：`quota_exceeded` 这个拼写里的下划线**恰好命中** `@deepseek-ai/dsh-llm` 的 `isQuotaExceededError` 正则（`quota[\s_-]+exceeded` 的 `[\s_-]+` 能匹配 `_`），于是归成 `QUOTA`；而 `@deepseek-ai/dsh-client-ui-chat` 对 `QUOTA`/`ACCOUNT_QUOTA` **硬编码**成那句固定文案、并**丢弃**插件自己的 message。**这一版之前我在 #56/#61 里把它说成「插件挑了宿主认识的词」，那个解释是错的。**
+  - **为什么不改分类（维护者的决定，也是实测支持的）**：把拼写换成任何一个不再被 quota 正则命中的值，都会落进 `RATE_LIMIT` —— 而它在 `DEFAULT_RETRYABLE_CODES` 里（`EMPTY_RESPONSE`/`RATE_LIMIT`/`SERVER`/`TIMEOUT`/`TRANSPORT`）。按出货默认（`initialDelayMs=500`、指数退避、封顶 10s、`maxRetries=5`）这是**5 次原地重试、标称 15.5 秒退避**，而 `6004` 的恢复点在报文里明写了是**几小时后** —— 退避窗口内不可能恢复。所以「不进重试」保留，「那句话不够准确」用**补充**解决。
+  - **修法**：用宿主**专门为此留的扩展点** `shell.quota-notice`（链式插槽，其自有文档写着「the first entry whose selector claims its code takes over the surface」）。本插件注册一条 `select: owner => code === 'QUOTA' ? owner : null` 的链项：
+    - **只 claim `QUOTA`** —— 其余码（`AUTH`、`ACCOUNT_SIGNED_OUT`、`ACCOUNT_QUOTA` 等）继续走宿主自己的兜底 Toast，本插件不接管自己说不清的提示；
+    - **宿主那句话原样保留**（`matched.message`），补充是**第二行**而不是改写 —— 那句话在别处也显示，重写会让插件与 shell 的用词互相矛盾；
+    - 补充文案：**「部分模型另有每日额度限制，与积分余额无关 —— 也可能确实是本账号积分耗尽。账号池那一行会写明上游给出的恢复时刻；也可以先换个账号或换个模型继续。」** 措辞对 `QUOTA` 覆盖的**两种**情况都成立，因为上游是用中文散文区分的，而插件不允许解析它来下政策判断；中英双语都写。
+    - 带一个「知道了」按钮，调用宿主自己的 `dismiss`；宿主没给 `dismiss` 时只渲染文字而不崩 —— 这是**全窗口**的提示，在这里抛错会连别的插件的提示一起带走。
+  - **组件用本插件自己的 DOM 与样式类**，不引 `@deepseek-ai/dsh-client-ui-primitives`：客户端刻意不依赖它（那条 stale 的 `inject` 曾让整张卡片的到达依赖上宿主最易变的包，见 `tests/client-host-contract.spec.ts` 的说明），所以这里沿用本插件其它组件的做法。
+  - **实机核对**：构建后用 Slot 检查器读运行中的插槽树，`shell.quota-notice` 的 occupants 已包含 `dsh-connect-workbuddy-client`（`active: true`），与宿主自己的 `mf` 并列；插槽目录给出的 `ownerProps`（`code`/`message`/`dismiss`/`keepOpen`）与组件读取的字段一致。
+  - **守卫**：`tests/issue63-quota-notice.spec.tsx`（7 例）覆盖：claim 恰好是 `QUOTA`、其余码（含 `QUOTA_EXCEEDED`、空串、数字、对象）一律不 claim、宿主句子原样保留且补充可见、dismiss 按钮调用宿主回调、无 `dismiss` 时不崩、宿主没给 message 时回退到自己的标题。**变异验证**：把 claim 扩到 `AUTH`/`ACCOUNT_QUOTA` → 2 例红；删掉补充那一行 → 2 例红。
+  - **未做**：没有改任何分类/HTTP 状态，也没有动 `KIND_HOST_CODE` 里 `soft_rate`/`model_busy` → `quota_exceeded` 的翻译（那正是 #56 修复的核心）。
+
+## 4.5.0 (2026-10-14)
+
+> 版本号是 **minor** 而不是 patch：这一版新增了一个**用户可见的设置**（积分读数的位置）和一个**新的渲染席位**，而且配置 schema 多了一个字段 —— 按语义化版本这是特性，不是修错。`4.4.6` 之后没有任何以 4.4.7 发布过的产物或 Release（tag 已撤回重打）。
+
+### Features
+
+- **积分读数只有一个固定位置：装了别的插件后它就不显示了 —— 现在位置可选（输入框工具栏 / 输入框下方）**（issue #62 报告者）
+  - **现象**：报告者装了第三方插件（`dsh-auto-continue`）之后，对话输入框里的 WorkBuddy 积分余额消失。根因是那个位置本身：`conversation.input.left`（输入框工具栏）是一个**共享的 list 插槽**，shell 自己的控件和任何其他 bundle 都注册在那里 —— 而 list 插槽无法保证每个占用者都可见，别人挤进来就可能把本插件的读数挤没。原注释里其实已经记着同类问题（更早放在侧边栏底部时，两个连接器插件互相挤压，才迁到输入框这一行）。
+  - **修法**：把「位置」做成**每区域一个选项**，两个席位都注册、由 gate 决定在哪个席位渲染：
+    - `composer`（默认）—— 输入框工具栏 `conversation.input.left`，与模型选择同一行；
+    - `stats` —— 输入框下方 `conversation.composer.dock`，shell 自己渲染「轮次 / 步数 · tok/s · token · 缓存命中」那一行；`order: 10` 排在 shell 的统计之后，所以官方那几颗统计仍在最左，读数是**追加**而不是顶替。
+    - 选默认值是为了**升级不动任何人的界面**：设置在 schema 里默认 `composer`，升级前写下的 profile 读出来仍是 `composer`。
+  - **为什么两个席位都注册**：位置这种东西用户是「一边看着结果一边改」的，注册哪个席位取决于设置就意味着每次改设置都要**重新注册插槽**；而本仓库的注释里已经写明这种绑定是脆的（晚到的 settings 命名空间必须产生新的注册而不是改闭包）。现在**决定权在 gate 里一处**：席位不符就 `return null`，另一个席位照常渲染。
+  - **判定的顺序**：先归属（是不是本插件的 provider）、再两个开关（区域是否启用、读数是否显示）、**最后**才是席位。所以一个被关掉的区域在**两个席位都不渲染**，而不是先在非当前席位画一帧再被拒。
+  - **卡片新增一个两选一控件**（就在「对话框显示积分」那个勾选旁边，只作用于当前标签页的区域）：读取走 Host 的 usage 应答（与那个勾选同源，因为浏览器 settings 镜像在本命名空间上是过期的那份），写完**重新读一次 Host** —— 否则控件会一直显示旧席位，看起来像没生效。
+  - **守卫**：`tests/issue62-credit-position.spec.tsx`（9 例）覆盖：默认 `composer`（含升级前的 profile 与手改的未知值）、按区域而非全局读取、写入只改该区域该字段（模型列表/预算/兄弟区域都不动）、席位与显示开关相互独立、gate 在**指定席位渲染 / 另一席位渲染 0 个 / 两个席位都不渲染（隐藏或区域关闭）/ 别的 provider 两个席位都不渲染**。**变异验证**：把 gate 的席位判定删掉（两个席位都渲染）→ 2 例红；把读取的默认值去掉（升级前的 profile 读成 stats）→ 2 例红。
+
+
+- **新增「上游请求体构成」诊断（`WORKBUDDY_BODY_REPORT`），用于定案 issue #59：两份请求体到底是不是同一份历史。**（issue #59）
+  - **为什么需要**：报告里同一份历史被国内网关算约 70.8 万 token、国际网关算约 137.4 万（1.94 倍），切区域即 `code 11115 prompt is too long`。两条独立测量已经把范围压到唯一一个问题：报告者在**两个区域**跑本仓库的内容类别探针，逐字节相同的散文/代码/JSON 六格比值全在 **0.98~1.06**（同一段字节两边计价一致）；代码链路核对又表明**历史 reasoning 根本没进请求体**（pi-ai 只在 `compat.requiresThinkingAsText` 为真时把 `thinking` 当文本转发，本插件从未设置；`reasoning_details` 那条路需要流式解析从不写出的签名）。**剩下唯一可能是两份请求体不同**，而这件事**不需要任何区域有积分**就能查：请求体是本地拼好的，`14018 Credits exhausted` 是发出去之后才可能发生的。
+  - **做法**：`src/body-report.ts` 在 shim 把 body 交给上游**之前**记录它的**构成** —— 每条消息的 `role`、逐块的类型（`system`/`text`/`tool-call`/`tool-result`/`reasoning`/`image`）、字符数与其中**中日韩字符**数（实测中文 0.669、英文 0.224 token/字符，差 3 倍，混在一起看不出来）、`tools` 数组、`messages.length` 与 body 总字节数。按区域写 `<dir>/<region>.jsonl`，一次请求一行（一轮对话有很多次上游调用，**最后一次**才是要比的那份）。
+  - **只记计数、不记文本**：不写任何消息内容、账号名或令牌 —— 一个要被贴进公开 issue 的诊断不能有泄漏用户会话的能力。`tests/issue59-body-report.spec.ts` 里有一条专门的断言：用带特征串的 body 生成报告后，序列化结果**不含**该特征串（变异验证：让 `block()` 把 `text` 一起带上 → 该例与 reasoning 那例同时变红）。
+  - **开关**：环境变量 `WORKBUDDY_BODY_REPORT` 未设置或为空白即**关闭**；`1`/`true` 写到 `<DSH home>/body-reports/`；其他值按**目录路径**解释。写文件失败只走日志，**绝不影响聊天请求**（有专门断言）。
+  - **守卫**：`tests/issue59-body-report.spec.ts`（16 例）。
+  - **配套**：`scripts/probe-region-token-accounting.mjs` 新增 `--language en|zh` 与 `--kind prose|code|json`（六种组合确定性填充、跨区域逐字节相同），并补上国内侧实测基线：prose 214.0 / code 287.0 / json 288.3（en），prose 671.0 / code 480.7 / json 397.3（zh），单位 tokens/1k chars。
+
 ## 4.4.6 (2026-10-14)
 
 ### Fixes
@@ -17,14 +60,6 @@
 
 ### Features
 
-- **新增「上游请求体构成」诊断（`WORKBUDDY_BODY_REPORT`），用于定案 issue #59：两份请求体到底是不是同一份历史。**（issue #59）
-  - **为什么需要**：报告里同一份历史被国内网关算约 70.8 万 token、国际网关算约 137.4 万（1.94 倍），切区域即 `code 11115 prompt is too long`。两条独立测量已经把范围压到唯一一个问题：报告者在**两个区域**跑本仓库的内容类别探针，逐字节相同的散文/代码/JSON 六格比值全在 **0.98~1.06**（同一段字节两边计价一致）；代码链路核对又表明**历史 reasoning 根本没进请求体**（pi-ai 只在 `compat.requiresThinkingAsText` 为真时把 `thinking` 当文本转发，本插件从未设置；`reasoning_details` 那条路需要流式解析从不写出的签名）。**剩下唯一可能是两份请求体不同**，而这件事**不需要任何区域有积分**就能查：请求体是本地拼好的，`14018 Credits exhausted` 是发出去之后才可能发生的。
-  - **做法**：`src/body-report.ts` 在 shim 把 body 交给上游**之前**记录它的**构成** —— 每条消息的 `role`、逐块的类型（`system`/`text`/`tool-call`/`tool-result`/`reasoning`/`image`）、字符数与其中**中日韩字符**数（实测中文 0.669、英文 0.224 token/字符，差 3 倍，混在一起看不出来）、`tools` 数组、`messages.length` 与 body 总字节数。按区域写 `<dir>/<region>.jsonl`，一次请求一行（一轮对话有很多次上游调用，**最后一次**才是要比的那份）。
-  - **只记计数、不记文本**：不写任何消息内容、账号名或令牌 —— 一个要被贴进公开 issue 的诊断不能有泄漏用户会话的能力。`tests/issue59-body-report.spec.ts` 里有一条专门的断言：用带特征串的 body 生成报告后，序列化结果**不含**该特征串（变异验证：让 `block()` 把 `text` 一起带上 → 该例与 reasoning 那例同时变红）。
-  - **开关**：环境变量 `WORKBUDDY_BODY_REPORT` 未设置或为空白即**关闭**；`1`/`true` 写到 `<DSH home>/body-reports/`；其他值按**目录路径**解释。写文件失败只走日志，**绝不影响聊天请求**（有专门断言）。
-  - **守卫**：`tests/issue59-body-report.spec.ts`（16 例）。
-  - **配套**：`scripts/probe-region-token-accounting.mjs` 新增 `--language en|zh` 与 `--kind prose|code|json`（六种组合确定性填充、跨区域逐字节相同），并补上国内侧实测基线：prose 214.0 / code 287.0 / json 288.3（en），prose 671.0 / code 480.7 / json 397.3（zh），单位 tokens/1k chars。
-
 ## 4.4.5 (2026-10-14)
 
 ### Fixes

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as defaultDesktopAuthDirs, F as WorkBuddyUpstreamClient, K as WORKBUDDY_APP_EXECUTABLE_ENV, O as legacyWorkbuddyOwnAuthPath, Q as findWorkbuddyAppExecutableWithSource, S as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, j as workbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, ot as hostPeersInfo, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, y as WorkBuddyCredentialStore } from "./host-heartbeat-B2jrUDhg.js";
+import { C as defaultDesktopAuthDirs, F as WorkBuddyUpstreamClient, K as WORKBUDDY_APP_EXECUTABLE_ENV, O as legacyWorkbuddyOwnAuthPath, Q as findWorkbuddyAppExecutableWithSource, S as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, j as workbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, ot as hostPeersInfo, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, y as WorkBuddyCredentialStore } from "./host-heartbeat-Vd2tNdsv.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/client.js

@@ -233,6 +233,23 @@ window.__ModuleLoader__.load({
 		function regionCreditsShownOf(value, region) {
 			return regionSlotOf(value, region)["showCreditsInMainUi"] !== false;
 		}
+		/** The seat a region's readout uses, defaulting to the composer row. */
+		function regionCreditPositionOf(value, region) {
+			return regionSlotOf(value, region)["creditPosition"] === "stats" ? "stats" : "composer";
+		}
+		/**
+		* Build the next `regions` settings value for one region's credit seat.
+		*
+		* Same merge rule as {@link nextRegionCreditsShown}: only the target region's
+		* field changes, so every other field of that slot and every other region's slot
+		* survive the write.
+		*/
+		function nextRegionCreditPosition(value, region, position) {
+			return nextRegionSlots(regionsMapOf(value), region, {
+				...regionSlotOf(value, region),
+				creditPosition: position
+			});
+		}
 		/**
 		* Build the next `regions` settings value for the sidebar-credit on/off toggle.
 		*
@@ -632,6 +649,20 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/**
+		* Write one region's credit SEAT (issue #62), verifying it landed.
+		*
+		* Sibling of {@link writeRegionCreditsShown}: same whole-slot merge, same
+		* landed check, same reason for both. The seat decides only WHERE the readout
+		* renders, so a lost write would leave the user looking at the old position
+		* while the control claimed the new one.
+		*/
+		async function writeRegionCreditPosition(scope, region, position, slot) {
+			await writeField(scope, "regions", region, slot, (readBack) => {
+				const stored = readBack;
+				return stored !== null && stored !== void 0 && stored["creditPosition"] === position;
+			});
+		}
+		/**
 		* Write one region's account-pool PREFERENCES, verifying they landed.
 		*
 		* Routed through {@link writeField} like every other settings write, so it gets
@@ -3044,6 +3075,22 @@ window.__ModuleLoader__.load({
    render (no Host pool state), so there is no heading row to share. This is the
    spacing the control carried before it moved beside that heading. */
 .dsm-workbuddy-credits-switch-row{display:flex;align-items:center;margin:8px 0 2px}
+/* The credit readout's seat picker (issue #62). Narrower than the pool's model
+   select so the show/hide box and this control share one heading row, and it
+   wraps onto its own line rather than squashing the pool title. */
+/* Its OWN label class, deliberately not the switch's: a query for "the
+   sidebar-credit switch" must not be able to pick this control up, and the two
+   are different widgets (a checkbox and a two-way picker). */
+/* The supplement to the host's fixed quota sentence (issue #63). It sits in the
+   frame-wide overlay seat, so it must read on its own and stay narrow: a column
+   with the host's sentence first (verbatim) and the supplement under it. */
+.dsm-workbuddy-quota-notice{display:flex;flex-direction:column;gap:4px;max-width:420px;padding:10px 12px;border-radius:8px;background:var(--dsw-alias-bg-layer-2,#23242a);border:1px solid var(--dsw-alias-border-l1,#2c2d31);font-size:12px;line-height:17px}
+.dsm-workbuddy-quota-notice-head{font-weight:600;color:var(--dsw-alias-label-primary,#e6e6e6)}
+.dsm-workbuddy-quota-notice-body{color:var(--dsw-alias-label-secondary,#c6c9d0)}
+.dsm-workbuddy-quota-notice-dismiss{align-self:flex-start;margin-top:2px;padding:2px 10px;font-size:12px}
+.dsm-workbuddy-credit-position-switch{display:inline-flex;align-items:center;gap:6px;font-size:12px;line-height:18px;color:var(--dsw-alias-label-secondary,#c6c9d0)}
+.dsm-workbuddy-credit-position{max-width:150px;padding:2px 6px;font-size:12px}
+.dsm-workbuddy-credits-switch-row .dsm-workbuddy-credit-position-switch{margin-left:12px}
 .dsm-workbuddy-credits-switch input{margin:0;cursor:pointer;accent-color:var(--dsw-alias-brand-primary,#5686fe)}
 .dsm-workbuddy-credits-switch input:disabled{opacity:.4;cursor:default}
 .dsm-workbuddy-tab-off{opacity:.55}
@@ -4140,6 +4187,40 @@ window.__ModuleLoader__.load({
 			* hide never drops the directory, model picks, budgets or pool preferences
 			* that live alongside it.
 			*/
+			/**
+			* WHERE the active region's credit readout sits (issue #62).
+			*
+			* Read off the Host's usage answer, like {@link creditsShownOn} and for the
+			* same measured reason: the browser's settings mirror for this namespace is
+			* documented as stale on the affected 0.1.7 deployments, so a control reading
+			* it would keep showing the previous seat after a successful write. Absent
+			* means `composer`, which is what the Host resolves for a profile written
+			* before the setting existed.
+			*/
+			const creditPositionOn = (item) => {
+				return statusByRegion[item]?.creditPosition === "stats" ? "stats" : "composer";
+			};
+			/**
+			* Move one region's credit readout between its two seats.
+			*
+			* Same shape as {@link toggleCredits}: whole region slot in, landed check,
+			* then a Host re-read. The re-read is load-bearing here for the same reason —
+			* the control renders the Host's answer, so without it the picker keeps
+			* showing the seat it had and the change looks like it did nothing.
+			*/
+			const changeCreditPosition = async (item, position) => {
+				if (settingsScope === void 0) return;
+				setTogglingCredits(item);
+				try {
+					const slot = nextRegionCreditPosition(settingsScope.getSnapshot().value, item, position)[item];
+					await writeRegionCreditPosition(settingsScope, item, position, typeof slot === "object" && slot !== null ? slot : {});
+					await refreshUsage(item);
+				} catch (error) {
+					if (mounted.current) setAccountError(error instanceof Error ? error.message : t("row.requestFailed"));
+				} finally {
+					if (mounted.current) setTogglingCredits(void 0);
+				}
+			};
 			const toggleCredits = async (item, shown) => {
 				if (settingsScope === void 0) return;
 				setTogglingCredits(item);
@@ -4446,6 +4527,40 @@ window.__ModuleLoader__.load({
 					}
 				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: activeRegion === "cn" ? t("row.showCreditsCn") : t("row.showCreditsGlobal") })]
 			});
+			/**
+			* WHERE the readout sits — a two-way choice, active tab's region only
+			* (issue #62).
+			*
+			* It sits directly under the show/hide switch because the two answer one
+			* question together ("show it, and where"), and because a user only reaches
+			* for this when the default seat is unavailable — typically after installing
+			* another plugin that occupies the composer row. Rendered as a `<select>`
+			* rather than a pair of radios so it stays one compact row on the pool
+			* heading, matching the switch beside it.
+			*
+			* Disabled with the region, exactly like the switch: a region that is off has
+			* no readout to place.
+			*/
+			const creditPositionPicker = /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+				className: "dsm-workbuddy-credit-position-switch",
+				title: t("row.creditPositionHint"),
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+					className: "dsm-workbuddy-pool-select dsm-workbuddy-credit-position",
+					value: activeRegionOn ? creditPositionOn(activeRegion) : "composer",
+					disabled: !activeRegionOn || togglingCredits === activeRegion || !canWrite || saving || poolBusy,
+					"aria-label": t("row.creditPositionAria", { region: activeRegion === "cn" ? t("row.tabCn") : t("row.tabGlobal") }),
+					onChange: (event) => {
+						changeCreditPosition(activeRegion, event.currentTarget.value === "stats" ? "stats" : "composer");
+					},
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+						value: "composer",
+						children: t("row.creditPositionComposer")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+						value: "stats",
+						children: t("row.creditPositionStats")
+					})]
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("row.creditPositionLabel") })]
+			});
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 				className: `dsm-plugin-card${open ? " dsm-plugin-card-open" : ""}`,
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
@@ -4586,15 +4701,15 @@ window.__ModuleLoader__.load({
 									},
 									selectingAccount: switchingAccount,
 									accountTools,
-									...status.pool === void 0 ? {} : { headerExtra: creditsSwitch },
+									...status.pool === void 0 ? {} : { headerExtra: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [creditsSwitch, creditPositionPicker] }) },
 									siblingBusy: saving || togglingRegion !== void 0,
 									onBusyChange: setPoolBusy,
 									onSaved: async () => await refreshUsage(activeRegion) !== void 0,
 									onRefresh: () => refreshUsage(activeRegion)
 								}),
-								status.pool === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								status.pool === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 									className: "dsm-workbuddy-credits-switch-row",
-									children: creditsSwitch
+									children: [creditsSwitch, creditPositionPicker]
 								}) : null,
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("section", {
 									className: "dsm-workbuddy-models",
@@ -5380,6 +5495,17 @@ window.__ModuleLoader__.load({
 		* rows). The composer row is per-session and provider-scoped, so exactly one
 		* plugin's credits are relevant at a time and nothing overlaps.
 		*
+		* WHY THERE IS A SECOND SEAT (issue #62). The composer tool row is a LIST seat,
+		* so it is shared not only with the shell's own controls but with any other
+		* plugin that registers there — and one report is exactly that: with a
+		* third-party plugin installed the readout stopped appearing at all. A list seat
+		* cannot promise that every occupant is visible, so the seat is the USER's
+		* choice: `composer` (default, unchanged for anyone who does not choose) or
+		* `stats`, the ambient dock below the composer card where the shell renders its
+		* own round/token pills. The gate is registered in BOTH seats and renders in the
+		* one the setting names, which keeps the decision in one function instead of
+		* re-registering slots when the setting changes.
+		*
 		* Kept separate from {@link ComposerCredits} (and from the browser-plugin
 		* entry) so the decision can be unit-tested without a Host: the entry imports
 		* browser-only DSH packages the test environment cannot load, while this module
@@ -5416,6 +5542,16 @@ window.__ModuleLoader__.load({
 		* the authority; the scope is the fallback for a Host line that predates the
 		* field.
 		*/
+		/**
+		* The settings tree this plugin writes, unwrapped to a plain object.
+		*
+		* `unwrapVolatileDeep` first: the scope's value is a live cosmokit reference on
+		* the 0.1.7 line, and reading fields off it without unwrapping yields proxies
+		* whose `===` comparisons against a string are false.
+		*/
+		function scopeValueOf(scope) {
+			return scope === void 0 ? void 0 : unwrapVolatileDeep(scope.getSnapshot().value);
+		}
 		function composerCreditsRegionOf(projection, scope, hostValue) {
 			const provider = selectedProviderOf(projection);
 			const region = provider === void 0 ? void 0 : WORKBUDDY_COMPOSER_PROVIDERS[provider];
@@ -5427,7 +5563,7 @@ window.__ModuleLoader__.load({
 			return region;
 		}
 		function ComposerCreditsGate(props) {
-			const { t, settingsScope, useProjection } = props;
+			const { t, position, settingsScope, useProjection } = props;
 			const [, setRevision] = (0, react.useState)(0);
 			(0, react.useEffect)(() => settingsScope?.subscribe(() => {
 				setRevision((value) => value + 1);
@@ -5435,6 +5571,7 @@ window.__ModuleLoader__.load({
 			const projection = useProjection === void 0 ? void 0 : useProjection("modelSelection");
 			const region = composerCreditsRegionOf(projection, settingsScope);
 			if (region === void 0) return null;
+			if (regionCreditPositionOf(scopeValueOf(settingsScope), region) !== (position ?? "composer")) return null;
 			const provider = selectedProviderOf(projection);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ComposerCredits, {
 				t,
@@ -5444,6 +5581,77 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/client/WorkBuddyQuotaNotice.tsx
+		/**
+		* The supplement this plugin adds to the host's quota notice (issue #63).
+		*
+		* WHY THIS EXISTS. When an upstream failure is classified `QUOTA`, the host
+		* renders ONE fixed sentence — 「当前请求的额度已用尽」 — and (measured on the
+		* shipped client) it DISCARDS the provider's own message to do so:
+		*
+		*   function failureMessage(message, code, t) {
+		*     if (code === 'QUOTA' || code === 'ACCOUNT_QUOTA') return t('message.failure.quota')
+		*     return code === 'AUTH' ? t('message.failure.auth') : message
+		*   }
+		*
+		* That sentence is right for a genuinely exhausted account (14018), and wrong
+		* for `6004` — the upstream's own words are 「您的使用量已超出频率限制，将在
+		* <时刻> 重置」, and the reporter's account still held 6,788 credits. The
+		* plugin cannot fix that by re-classifying: measured against the shipped
+		* classifier, every spelling that stops reading as `QUOTA` falls into
+		* `RATE_LIMIT`, which IS in `DEFAULT_RETRYABLE_CODES` — so it would buy an
+		* honest sentence with 5 in-place retries and ~15.5s of backoff on a limit that
+		* resets hours later. Staying out of the retry set is the behaviour we keep
+		* (the maintainer's call on issue #63); the sentence is what we supplement.
+		*
+		* HOW. The host ships a CHAIN seat for exactly this: `shell.quota-notice`, a
+		* frame-wide overlay whose own comment says "a `shell.quota-notice` entry may
+		* replace the generic Toast for codes it claims". The chain hands a claiming
+		* entry the host's own owner object — `{ code, message, dismiss, keepOpen }` —
+		* so this component can keep the host's sentence VERBATIM and append the one
+		* fact the sentence is missing. Claiming only `QUOTA` leaves every other code on
+		* the host's fallback Toast.
+		*
+		* WHY THE HOST'S SENTENCE IS KEPT, not rewritten: it is the string the shell
+		* shows everywhere else for this code, and a plugin that reworded it would
+		* contradict the shell's own vocabulary. The supplement is additive, and it is
+		* written to be TRUE FOR BOTH CASES the code covers — a model's own daily quota
+		* (not credits) and a genuinely empty balance — because the plugin cannot always
+		* tell which one it is: the upstream states it in Chinese prose the plugin is
+		* not allowed to parse for policy.
+		*
+		* Rendered as plain DOM with this plugin's own classes: the client half
+		* deliberately does not depend on `@deepseek-ai/dsh-client-ui-primitives` (see
+		* the note in `src/client/index.tsx` — a stale inject entry there once made the
+		* whole card's arrival depend on the churn-heaviest host package), so the
+		* notice is built from the same primitives every other component here uses.
+		*/
+		/**
+		* Which notice codes this plugin claims.
+		*
+		* `QUOTA` only — it is what the shipped classifier produces for BOTH failures
+		* this plugin raises (`6004` account rate limit and `14018` exhausted credits),
+		* and claiming anything else would take over a notice this plugin knows nothing
+		* about. Exported so the claim is unit-testable without a host.
+		*/
+		const WORKBUDDY_QUOTA_NOTICE_CODES = ["QUOTA"];
+		/** Whether this plugin should take over the notice for one owner object. */
+		function claimsQuotaNotice(code) {
+			return typeof code === "string" && WORKBUDDY_QUOTA_NOTICE_CODES.includes(code);
+		}
+		/** The frame-wide supplement shown under the host's sentence. */
+		function WorkBuddyQuotaNotice(props) {
+			const { matched, t } = props;
+			return (0, react.createElement)("div", {
+				className: "dsm-workbuddy-quota-notice",
+				role: "status"
+			}, (0, react.createElement)("span", { className: "dsm-workbuddy-quota-notice-head" }, matched.message ?? t("quotaNotice.fallbackHead")), (0, react.createElement)("span", { className: "dsm-workbuddy-quota-notice-body" }, t("quotaNotice.supplement")), matched.dismiss === void 0 ? null : (0, react.createElement)("button", {
+				type: "button",
+				className: "dsm-btn dsm-btn-outline dsm-workbuddy-quota-notice-dismiss",
+				onClick: () => matched.dismiss?.()
+			}, t("quotaNotice.dismiss")));
+		}
+		//#endregion
 		//#region src/client/locales.ts
 		/**
 		* Plugin-card copy registered under the settings.workbuddy locale namespace.
@@ -5704,6 +5912,14 @@ window.__ModuleLoader__.load({
 			"row.showCreditsCn": "WB CN credits in composer",
 			"row.showCreditsGlobal": "WB AI credits in composer",
 			"row.showCreditsCnHint": "Show the domestic (WB CN) credit balance in the composer toolbar, but only while this session uses a WB CN model. Click it for per-account balances and a manual refresh (refreshes by itself every 5 minutes).",
+			"row.creditPositionLabel": "position",
+			"row.creditPositionComposer": "composer toolbar",
+			"row.creditPositionStats": "below the input box",
+			"row.creditPositionAria": "Credit readout position for {region}",
+			"quotaNotice.fallbackHead": "The quota for this request is exhausted",
+			"quotaNotice.supplement": "Some models have their own daily limit that is unrelated to your credit balance — check the account pool row for the stated reset time, or switch account or model to continue.",
+			"quotaNotice.dismiss": "Got it",
+			"row.creditPositionHint": "Where the credit readout sits. \"composer toolbar\" is the default (the row with the model picker). Choose \"below the input box\" — the row carrying the round / step / token statistics — if another plugin occupies the composer toolbar and the readout does not appear.",
 			"row.showCreditsGlobalHint": "Show the international (WB AI) credit balance in the composer toolbar, but only while this session uses a WB AI model. Click it for per-account balances and a manual refresh (refreshes by itself every 5 minutes).",
 			"composer.pointsCn": "WB CN",
 			"composer.pointsGlobal": "WB AI",
@@ -5975,6 +6191,14 @@ window.__ModuleLoader__.load({
 			"row.showCreditsCn": "对话框显示 WB CN 积分",
 			"row.showCreditsGlobal": "对话框显示 WB AI 积分",
 			"row.showCreditsCnHint": "在对话输入框工具栏显示国内版（WB CN）剩余积分，仅当本会话使用 WB CN 模型时出现。点击可看各账号余额并手动刷新（每 5 分钟也会自动刷新）。",
+			"row.creditPositionLabel": "位置",
+			"row.creditPositionComposer": "输入框工具栏",
+			"row.creditPositionStats": "输入框下方",
+			"row.creditPositionAria": "{region} 的积分显示位置",
+			"quotaNotice.fallbackHead": "当前请求的额度已用尽",
+			"quotaNotice.supplement": "部分模型另有每日额度限制，与积分余额无关 —— 也可能确实是本账号积分耗尽。账号池那一行会写明上游给出的恢复时刻；也可以先换个账号或换个模型继续。",
+			"quotaNotice.dismiss": "知道了",
+			"row.creditPositionHint": "积分显示在哪里。「输入框工具栏」是默认位置（与模型选择同一行）。如果装了别的插件后读数不显示，改成「输入框下方」—— 那是「轮次 / 步数 / token」统计所在的那一行。",
 			"row.showCreditsGlobalHint": "在对话输入框工具栏显示国际版（WB AI）剩余积分，仅当本会话使用 WB AI 模型时出现。点击可看各账号余额并手动刷新（每 5 分钟也会自动刷新）。",
 			"composer.pointsCn": "WB CN",
 			"composer.pointsGlobal": "WB AI",
@@ -6098,8 +6322,12 @@ window.__ModuleLoader__.load({
 							id: "dsh-connect-workbuddy-composer-credits",
 							order: 4,
 							locale: namespace,
-							inject: () => settingsScope === void 0 ? { t } : {
+							inject: () => settingsScope === void 0 ? {
 								t,
+								position: "composer"
+							} : {
+								t,
+								position: "composer",
 								settingsScope
 							}
 						}, ComposerCreditsGate));
@@ -6109,6 +6337,80 @@ window.__ModuleLoader__.load({
 					}
 				};
 				/**
+				* The SAME readout in the ambient dock below the composer card (issue #62).
+				*
+				* Registered unconditionally, like the composer seat, because the CHOICE
+				* between the two seats lives in the gate: it renders in the seat the
+				* setting names and returns null in the other. Registering only the chosen
+				* seat would mean re-registering on every settings change, and the seat is
+				* exactly the kind of thing a user flips once while looking at the result.
+				*
+				* WHY THIS SEAT EXISTS: the composer tool row is a list seat shared with any
+				* other plugin that registers there, and issue #62 is one report of the
+				* readout disappearing when another plugin was installed. This row is where
+				* the shell renders its own round/step/token pills, so it is a place a user
+				* already reads session numbers from.
+				*
+				* `order` places it after the shell's own pills (`stats` registers at 0), so
+				* the shipped statistics stay leftmost and the readout reads as an addition
+				* rather than a replacement.
+				*/
+				const registerStatsCredits = () => {
+					try {
+						return ctx.slots.inject("conversation.composer.dock", () => ctx.slots.register({
+							name: "conversation.composer.dock",
+							id: "dsh-connect-workbuddy-stats-credits",
+							order: 10,
+							locale: namespace,
+							inject: () => settingsScope === void 0 ? {
+								t,
+								position: "stats"
+							} : {
+								t,
+								position: "stats",
+								settingsScope
+							}
+						}, ComposerCreditsGate));
+					} catch (error) {
+						console.error("[dsh-connect-workbuddy] stats credits slot failed to register (host provider unaffected):", error);
+						return;
+					}
+				};
+				/**
+				* The frame-wide quota notice, claimed so the supplement can be shown
+				* (issue #63).
+				*
+				* The host renders ONE fixed sentence for a `QUOTA` failure — 「当前请求的
+				* 额度已用尽」 — and discards the provider's message while doing it. For
+				* `6004` that sentence is wrong (the upstream's own words say 「频率限制」,
+				* with a reset time, and the reporting account still held thousands of
+				* credits), but re-classifying is NOT the fix: measured against the shipped
+				* classifier, every spelling that stops reading as `QUOTA` lands in
+				* `RATE_LIMIT`, which is IN the host's retry set — 5 in-place retries and
+				* ~15.5s of backoff on a limit that resets hours later. So the behaviour
+				* (no retry) stays and the sentence gets a SUPPLEMENT.
+				*
+				* `select` claims `QUOTA` only, and the chain is the host's own designed
+				* extension point for this ("a shell.quota-notice entry may replace the
+				* generic Toast for codes it claims") — every other code keeps the host's
+				* fallback Toast untouched.
+				*/
+				const registerQuotaNotice = () => {
+					try {
+						return ctx.slots.inject("shell.quota-notice", () => ctx.slots.register({
+							name: "shell.quota-notice",
+							locale: namespace,
+							select: (owner) => {
+								return claimsQuotaNotice(typeof owner === "object" && owner !== null ? owner.code : void 0) ? owner : null;
+							},
+							inject: () => ({ t })
+						}, WorkBuddyQuotaNotice));
+					} catch (error) {
+						console.error("[dsh-connect-workbuddy] quota notice slot failed to register (host provider unaffected):", error);
+						return;
+					}
+				};
+				/**
 				* Every slot this plugin contributes, and how to (re)create them.
 				*
 				* Kept as one list because the binding of `settingsScope` and the slot
@@ -6126,7 +6428,9 @@ window.__ModuleLoader__.load({
 				const registerAllSlots = () => [
 					...WORKBUDDY_CARD_KEYS.map((key) => registerCard("plugins.bundle.config", key)),
 					...WORKBUDDY_CARD_KEYS.map((key) => registerCard("plugins.row.config", `${key}#${key}`)),
-					registerComposerCredits()
+					registerComposerCredits(),
+					registerStatsCredits(),
+					registerQuotaNotice()
 				].filter((disposer) => disposer !== void 0);
 				/**
 				* Disposers of the slots registered for the CURRENT binding.

package/lib/{host-heartbeat-B2jrUDhg.js → host-heartbeat-Vd2tNdsv.js}

@@ -3825,7 +3825,7 @@ function generationOf(version) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "4.4.6";
+const WORKBUDDY_CONNECT_VERSION = "4.5.1";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -2173,6 +2173,16 @@ declare function regionEnabledOf(value: unknown, region: WorkBuddyWebRegion): bo
 /** Build the next `regions` settings value for a signed-in tab's save. */
 declare function nextRegionSlots<Slot extends object>(regions: unknown, region: WorkBuddyWebRegion, slot: Slot): Record<string, unknown>;
 declare function nextRegionEnabled(value: unknown, region: WorkBuddyWebRegion, enabled: boolean): Record<string, unknown>;
+/**
+ * The two seats the credit readout can occupy (issue #62).
+ *
+ * `composer` is the composer tool row (`conversation.input.left`); `stats` is
+ * the ambient dock below the composer card (`conversation.composer.dock`),
+ * beside the shell's own round/step/token pills. Named as a union rather than a
+ * boolean because a third seat is plausible and `showAtTop: boolean` would have
+ * to be migrated rather than extended.
+ */
+type WorkBuddyCreditPosition = 'composer' | 'stats';
 /** One credit package as the upstream returns it, node-free. */
 interface WorkBuddyWebCreditPackage {
   packageName: string;
@@ -2361,6 +2371,8 @@ type WorkBuddyWebUsage =
    * "关闭不了" report.
    */
   showCreditsInMainUi?: boolean;
+  /** WHERE this region's readout sits (issue #62); absent means `composer`. */
+  creditPosition?: WorkBuddyCreditPosition;
   message?: string;
   /** The persisted account id matches no local account. */
   selectionLost?: boolean;
@@ -2395,6 +2407,8 @@ type WorkBuddyWebUsage =
    * settings mirror.
    */
   showCreditsInMainUi?: boolean;
+  /** WHERE this region's readout sits (issue #62); absent means `composer`. */
+  creditPosition?: WorkBuddyCreditPosition;
   source?: 'desktop' | 'dsh';
   tokenExpiresAtMs: number;
   /** A saved per-region choice is in effect (false = following the app). */
@@ -2784,6 +2798,13 @@ interface WorkBuddyStatusRouteOptions {
    * absent reads as ON, matching the schema's `default(true)`.
    */
   showCreditsInMainUi?(region: WorkBuddyRegion): boolean;
+  /**
+   * WHERE this region's credit readout sits (issue #62).
+   *
+   * Optional, and absent reads as `composer` — the only seat before the setting
+   * existed, so a Host that predates it renders exactly as it used to.
+   */
+  creditPosition?(region: WorkBuddyRegion): WorkBuddyCreditPosition;
   /**
    * Send one real-volume request to each named model of a region and report what
    * came back.
@@ -3107,6 +3128,25 @@ interface WorkBuddyRegionState {
    * written before this switch existed keeps whatever the default was.
    */
   showCreditsInMainUi?: boolean;
+  /**
+   * WHERE this region's credit readout sits (issue #62).
+   *
+   * Two seats, because the first one is not always available:
+   *
+   *   - `composer` — the composer tool row (`conversation.input.left`), shared
+   *     with the shell's own controls. It is the closer, more glanceable seat,
+   *     and it is the default so nothing moves for anyone who does not choose.
+   *   - `stats` — the ambient dock below the composer card
+   *     (`conversation.composer.dock`), where the shell renders its own
+   *     round/step/token pills. That row is a LIST seat whose shipped occupant
+   *     registers separately, so a third-party plugin that ALSO parks something
+   *     in the composer row cannot crowd this readout out of existence.
+   *
+   * The report behind this (issue #62) was exactly that: with another plugin
+   * installed, the readout vanished from the composer row. Making the seat a
+   * choice is what keeps one plugin's presence from deciding another's.
+   */
+  creditPosition?: WorkBuddyCreditPosition;
   /** The last-refreshed directory for this region; what the card displays. */
   lastCatalog?: WorkBuddyModelInfo[];
   /** The user's selection in this region, as model ids. */

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as isEncryptedFieldWrapper, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as deriveAtRestKey, K as WORKBUDDY_APP_EXECUTABLE_ENV, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as fetchAtRestKeyPayload, Y as deriveAtRestKeyId, Z as findWorkbuddyAppExecutable, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as workbuddyAppExecutableCandidates, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as withFileLock, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as isWorkbuddyBundle, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, it as readAtRestKey, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as writeFileAtomic, m as deriveCatalog, n as clearHostHeartbeat, nt as macosNestedAppBundles, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as clearAtRestKeyCache, r as isHeartbeatProcessAlive, rt as openEncryptedField, s as writeHostHeartbeat, st as resolveDshHome, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as macosBundleExecutable, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-B2jrUDhg.js";
+import { $ as isEncryptedFieldWrapper, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as deriveAtRestKey, K as WORKBUDDY_APP_EXECUTABLE_ENV, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as fetchAtRestKeyPayload, Y as deriveAtRestKeyId, Z as findWorkbuddyAppExecutable, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as workbuddyAppExecutableCandidates, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as withFileLock, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as isWorkbuddyBundle, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, it as readAtRestKey, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as writeFileAtomic, m as deriveCatalog, n as clearHostHeartbeat, nt as macosNestedAppBundles, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as clearAtRestKeyCache, r as isHeartbeatProcessAlive, rt as openEncryptedField, s as writeHostHeartbeat, st as resolveDshHome, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as macosBundleExecutable, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-Vd2tNdsv.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, readFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -4207,6 +4207,7 @@ async function workBuddyWebStatus(deps, region) {
 	deps.regionUsable?.(region, accounts.length > 0);
 	const enabled = deps.regionEnabled(region);
 	const showCreditsInMainUi = deps.showCreditsInMainUi?.(region) ?? true;
+	const creditPosition = deps.creditPosition?.(region) ?? "composer";
 	const authStatus = await store.status();
 	const selectionExplicit = store.hasExplicitSelection();
 	if (authStatus.state !== "signed-out" && accounts.length === 0) return {
@@ -4228,6 +4229,7 @@ async function workBuddyWebStatus(deps, region) {
 			selectionExplicit,
 			enabled,
 			showCreditsInMainUi,
+			creditPosition,
 			...await store.selectionLost() ? { selectionLost: true } : {},
 			...webAccounts.length === 0 ? await searchedPaths(store) : {}
 		};
@@ -4243,6 +4245,7 @@ async function workBuddyWebStatus(deps, region) {
 		selectionExplicit,
 		enabled,
 		showCreditsInMainUi,
+		creditPosition,
 		accounts: accounts.map(toWebAccount),
 		models: deps.displayModels(region).map((model) => toWebModel(model, deps.contextBudgets(region))),
 		enabledModelIds: [...deps.enabledModelIds(region)],
@@ -5013,6 +5016,7 @@ const regionStateConfig = z.object({
 	* which is reachable exactly where the feature renders.
 	*/
 	showCreditsInMainUi: z.boolean().default(true).description("Show this region's remaining credits at the DSH sidebar foot (opt-out; the line carries its own hide button)"),
+	creditPosition: z.union([z.const("composer"), z.const("stats")]).default("composer").description("Where the credit readout sits: \"composer\" = the composer tool row (default), \"stats\" = the ambient row below the composer card, next to the shell's own token pills. Choose \"stats\" if another plugin occupies the composer row."),
 	lastCatalog: z.array(modelConfig).default([]),
 	enabledModelIds: z.array(z.string()).default([]),
 	imageModelIds: z.array(z.string()).default([]),
@@ -5405,6 +5409,13 @@ function apply(ctx, config) {
 		*/
 		showCreditsInMainUi: (region) => regionStateOf(current(), region).showCreditsInMainUi !== false,
 		/**
+		* WHERE the readout sits, resolved here rather than read from the browser
+		* settings mirror, for the same measured reason as the flag above: on the
+		* affected 0.1.7 deployments that mirror never picks up this plugin's
+		* writes, and a control reading it would keep showing the old seat.
+		*/
+		creditPosition: (region) => creditPositionOf(current(), region),
+		/**
 		* One minimal request per named model, through the region's own credential.
 		*
 		* Resolved here rather than in the route so the browser half never touches a
@@ -5950,6 +5961,14 @@ function apply(ctx, config) {
 		return resolveTargetModel(displayModels(current(), region), targetModelPreference(poolPreferencesOf(current(), region), accountId)).modelId;
 	};
 	/** One region's pool preferences, with the schema's defaults applied. */
+	/**
+	* WHERE this region's credit readout sits (issue #62).
+	*
+	* A local reader rather than a schema default so a config written before the
+	* setting existed reads as `composer` — the seat that was the only one, so an
+	* upgrade moves nothing on screen.
+	*/
+	const creditPositionOf = (config, region) => regionStateOf(config, region).creditPosition === "stats" ? "stats" : "composer";
 	const poolPreferencesOf = (config, region) => {
 		const pool = regionStateOf(config, region).pool;
 		const probeInputTokens = pool?.probeInputTokens;

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型接入 DeepSeek Harness，并提供只读的积分概览与模型管理。",
-  "version": "4.4.6",
+  "version": "4.5.1",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",