dsh-connect-workbuddy 4.7.0 → 4.8.1

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## 4.8.1 (2026-10-18)
+
+> 版本号是 **patch**：只改卡片界面的样式与排版，不改请求、响应、计费或任何配置项。发往上游的请求体与本版之前逐字节相同。
+
+### Changes
+
+- **积分读数区重排为「偏好行」，样式与排版对齐 dsh-connect-trae**
+  - **原来错在哪**：这个区块在卡片上换过三个位置 —— 先是 tab 栏下两个并排的复选框（读起来像**一个**共享设置），再被塞进「账号池」标题行（与标题、当前账号徽章挤在同一条基线，最宽的下拉框把徽章推到卡片最右缘，读起来像下拉框的标签），最后成了带独立标题的小节（`justify-content:space-between` 又把每句话劈成「左边缘的标签 + 右边缘的控件」，中间隔着半张卡的空隙）。三次都是**归属**问题，不是间距问题。
+  - **现在的形状**（与参考实现逐条一致）：一块**没有标题的偏好行组**，直接挂在 tab 块下面 —— 一个复选框 + 标题 + 其下一行说明，然后**缩进 25px**（15px 方框 + 10px 行距）的「显示位置」行，标签与下拉框相邻、从左侧打包，行内没有任何元素被拉伸到边缘。
+  - **顺带修掉一个真漏洞**：这个区块此前通过 `AccountPool` 的 `headerExtra` 插槽渲染，而 `AccountPool` 在宿主不报告账号池状态时**整段返回 null** —— 开关会跟着一起消失，用户在那个宿主上**根本没有**打开读数的入口，唯一的线索是一行读数不见了。现在它渲染在 `AccountPool` 之外，与该区块是否存在无关。`headerExtra` 这个插槽已从 `AccountPool` 整个删除，不只是不再传。
+  - **文案随之改为「说明」而非「复述」**：主开关的标题由区域相关（「对话框显示 WB CN 积分」）改为区域无关的「在输入框工具栏显示积分读数」—— 它现在带一行自己的说明，且紧邻的下拉框就叫「输入框工具栏」，旧标题会与它重复。新增两段说明：开关下面那句讲**读数是什么**，下拉框下面那句讲**选位置是什么意思**；主开关关闭时后者换成一句点名原因和做法的提示，而不是留一个灰框让用户猜。
+  - **勾选框交回平台**：区域卡里的勾选框曾用 `appearance:none` 手绘（15px 方块、3px 圆角、两条旋转边框拼的勾）。参考实现没有手绘 —— 它只写 `accent-color`，方框的尺寸/圆角/勾形全由平台决定。截图实测：2x 屏上那个方块是 26 设备像素 = **13 CSS px**，正是引擎自带复选框的默认尺寸，不是任何人写下的数字。已改为与参考实现相同的两条声明，手绘规则全部删除。
+  - **下拉框退回原生外观**：曾手绘成白底细边 + 两条渐变拼的箭头（照一张**浅色**设置页截图），在深色卡片里成了唯一自带填充/边框/箭头的元素，读起来像贴进段落里的一个表单控件。现在用原生控件 + 一条细边，尺寸由它自己的两个选项决定，不再有 `min-width:132px` 这个为「与徽章共享标题行」而设的地板。
+  - **README**（中英同步）：关掉读数的那句话改为新标签，并补上「显示位置」这一行的说明。
+
+## 4.8.0 (2026-10-18)
+
+> 版本号是 **minor**：这不是只改内部的 patch —— 它**会改动会话历史**。跨区/跨窗口切换后原本必然卡死的那一类会话，本版能把上下文折回去继续用。没有溢出时行为完全不变。
+
+### Fixes
+
+- **切到窗口更小的路由后，会话永久卡在 `400 code 11115 prompt is too long`（#59 后半）**
+  - **症状**：会话在一个 1M 窗口的模型上跑得很长，切成国际区（`workbuddy-global`，窗口 1,048,576）后，**每一条**请求都返回 `prompt is too long: 1374460 tokens > 1048576 maximum`。换回原区域能用，再切过去还是卡死；手动压缩同样 400。会话实质报废。
+  - **根因（宿主侧，两处叠加）**：
+    1. **压力阈值按「当前模型」窗口现算**，`compaction-basic/src/config.ts:188-192` 的 `thresholdTokens = min(contextWindow × thresholdRatio, messageBudgetTokens)`。1M 窗口下阈值是 800,000，而 707,801 未到 —— 会话在**切区那一刻就已经超了新模型的窗口**，可自动压缩的触发点还在旧模型的尺度上，永远等不到。
+    2. **溢出兜底把整段历史塞进一次摘要请求**，`compaction-basic/src/index.ts:299` 的 `selectCompactableRange(session, measurement, 0)` 保留量为 0 → `region.ts:150-154` 选出「除最后一条外的全部历史」；`summarizer.ts:141-151` 又把这份摘要发给**当前那条小窗口路由**。于是救援请求和它要救援的请求一样溢出 —— 死锁。
+    宿主侧已按 deepseek-ai/deepseek-harness#9814 提交，上面两处即该 issue 的 A、B 两点。
+  - **本版做的事**：适配器在溢出错误**仍然持有 session id** 的那一刻接手，用宿主**自己的**压缩事务（`ctx.compaction.compactRegion`）把历史折回去，而不是另发一次摘要请求。
+    - 分块上限 = 模型窗口的 **35%**，因此摘要请求本身**按构造**一定装得下（宿主默认那一次是 131%）。
+    - 折叠目标是窗口的 **60%**，逐块折叠直到低于目标；块边界来自宿主自己的 `tokenMeter`。
+    - **绝不折掉当前请求携带的那条消息**（`nodes.at(-1)` 永远保留）。
+    - 宿主拒绝某个区间（切断了 tool call 与 result 的配对、或正有压缩在跑）时，把尾边向内收一格重试；仍是拒绝就放弃，绝不空转。
+    - 折完仍降不下去（单条消息本身就超过窗口）时立刻停手 —— 这是结构性问题，重试只会烧掉重试预算。
+  - **实测（真实 GL 400 载荷）**：`isContextOverflow` 对 `prompt is too long: 1374460 tokens > 1048576 maximum` 与 `{"code":11115,...,"type":"CONTEXT_WINDOW_EXCEEDED"}` 均判定为真，对 `rate limit exceeded` 判定为假 —— 只在真溢出时动手。
+  - **降级路径**：宿主没装压缩包（`compaction` 服务不存在）、或请求没带 `sessionId`（非主循环调用）时，适配器原样返回，行为与本版之前**逐字节相同**。
+
+### 已知未修
+
+- **跨区 prompt token 计数漂移**（#59 前半）：同一份 3.6 MB 请求体，CN 计 642,800、GL 计 447,306。这不是网关数错 —— 历史里的 thinking 块按上游当初实际返回的字段名（`reasoning` / `reasoning_content`）原样回放（宿主 `pi-ai` 0.85.1 `openai-completions.js:428` → `:1006`），同一批字节因此落进不同计费桶。归属宿主，本插件没有改写历史的权限，详见 #59 与 `src/body-report.ts` 头部说明。
+
 ## 4.7.0 (2026-10-17)
 
 > 版本号是 **minor**：这不是只改内部的 patch —— 它**改变了发往上游的请求体**。DSH Desktop 0.2.1-rc.1 随包 pi-ai 1.1.0，本版修的是该组合下「请求静默丢掉 system prompt 与全部工具声明」。若你停留在更早的宿主，行为不变。

package/README.en.md

@@ -29,7 +29,7 @@ A [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) bund
 
   **Two things to know.** ① **It really does spend credits** — one measured probe reported `credit` 0.02 (a refused one 429s and costs almost nothing). So testing is **manual and per-model only**: there is deliberately no “Test selected” batch button, because sweeping the whole list from one click is an uncontrolled spend — and the Host enforces the same rule, **accepting a single model only** and refusing multi-model requests. ② The upstream advertises a 1M context yet throttles far below it, and the plugin advertises each model's **native** window to DSH (no longer clamped to 200K as of 3.5.0), so DSH compacts very late — hitting the throttle in a long session follows directly from that. To make DSH compact sooner, set a “DSH context budget” cap on the model's row (200K / 500K / the model's native window).
 - **Local account switching** — discovers the multiple sign-in credentials WorkBuddy's desktop app leaves behind and lets you switch per region. Tokens are never written to DSH settings.
-- **Credit readout in the composer toolbar (follows the selected model, per region)** — a clickable readout sits at the left of the composer toolbar (e.g. `WB CN · 1,072`) and **switches region automatically with the model this session is using**: pick a WB CN model and it shows the domestic balance, pick a WB AI model and it shows the international one; with any other provider's model it does not appear at all. It refreshes every 5 minutes and can also be refreshed by hand. Clicking it opens a panel: a **table of balances per account**, where clicking a row switches to that account (the same setting the card's account picker writes), and an account that cannot serve right now is **labelled in its row** (e.g. rate-limited, out of credits) using the same wording as the account-pool table. The per-account figures are fetched only while the panel is open, so the 5-minute background refresh never multiplies by the account count. To turn a side off, untick “Show WB CN / WB AI credits in the composer” in that region's tab on the card; while a region's provider is switched off, the readout disappears and its switch is disabled.
+- **Credit readout in the composer toolbar (follows the selected model, per region)** — a clickable readout sits at the left of the composer toolbar (e.g. `WB CN · 1,072`) and **switches region automatically with the model this session is using**: pick a WB CN model and it shows the domestic balance, pick a WB AI model and it shows the international one; with any other provider's model it does not appear at all. It refreshes every 5 minutes and can also be refreshed by hand. Clicking it opens a panel: a **table of balances per account**, where clicking a row switches to that account (the same setting the card's account picker writes), and an account that cannot serve right now is **labelled in its row** (e.g. rate-limited, out of credits) using the same wording as the account-pool table. The per-account figures are fetched only while the panel is open, so the 5-minute background refresh never multiplies by the account count. To turn a side off, untick “Show credits in the composer toolbar” under that region's tab on the card; while a region's provider is switched off, the readout disappears and its switch is disabled. The same block carries a “Position” line: by default the readout sits in the composer toolbar (the row with the model picker); choosing “below the input box” moves it to the turn/step/token stats row instead — useful when another plugin has taken the toolbar seat.
 
   <img src="docs/assets/dsh-connect-workbuddy-composer-credits.png" width="360" alt="Composer credit panel: a per-account balance table for the domestic region, with a refresh button and a last-refreshed time" />
 - **Account pool: batch actions across several accounts, plus automatic failover** — tick the accounts you want into a pool and you get **one-click check-in for every account**, **one-click testing of every account against a model you choose** (defaulting to the region's zero-multiplier free model), and with **Enable the account pool** switched on, **automatic failover**: a request that fails upstream is retried against the pool's other usable accounts, in order, until one serves it or none is left. Membership starts **empty and is an explicit opt-in**: "signed in on this machine" is not the same as "spend this account's credits and claim its rewards". The pool's **ranking decides who serves every request** (usable first, then expiring-credits-first, higher credits, freshest credential), and on a failure the next usable member is tried. It **never writes back your saved selection** — switch the pool off and your own account applies again immediately. **The switch only decides whether the PLUGIN chooses** — with it off, the plugin stops picking and switching accounts for you, but check-in and testing stay available (they are manual actions). Testing reuses the model rows' real-volume probe, so it **does cost real credits**; **automatic check-in is deliberately not offered** — a check-in claims real rewards, so it only ever runs when you press the button. See [Account pool](#account-pool).

package/README.md

@@ -36,7 +36,7 @@
 
   **两点需要知道**：① **它真的花钱**——实测一次报 `credit` 0.02（被限流时直接 429，几乎不花）。因此**只能按单个模型手工点**，没有「测试已勾选」这类批量按钮：一次覆盖整个列表就是一次不可控支出（服务端也据此**只接受单个模型**，多模型请求会被拒）。② 上游虽宣称 1M 上下文，但节流线远低于此；插件按模型的**原生窗口**向 DSH 宣称（3.5.0 起不再默认压到 200K），所以 DSH 很晚才压缩对话——长会话撞限流是这条机制的直接结果。想让 DSH 更早压缩，就在模型行上手动设一个「DSH 上下文预算」上限（可选 200K / 500K / 模型原生窗口）。
 - **本机账号切换** —— 自动发现 WorkBuddy 桌面端留下的多个登录凭据，可按区域切换账号；Token 不写入 DSH 设置。
-- **对话输入框积分读数（国内版 / 国际版自动切换）** —— 对话输入框左侧工具栏常驻一行可点击的读数（如 `WB CN · 1,072`），**按本会话当前选中的模型自动切换区域**：选中 WB CN 的模型就显示国内版余额，选中 WB AI 的模型就显示国际版余额；用其它 provider 的模型时该读数完全不出现。每 5 分钟自动刷新，也可点开手动刷新。点击读数弹出面板：**按账号列出的余额表格**，点某一行即可切换到该账号（与卡片上的账号选择是同一个设置）；**当前不能用的账号会在行内标出原因**（如「被限流」「积分耗尽」），标注口径与账号池表格一致。面板里的余额只在打开时才去查，因此不会让 5 分钟的后台刷新按账号数翻倍。要关掉某一边，就在卡片对应区域的 tab 里取消勾选「在对话框显示 WB CN / WB AI 积分」；该区域的供应商被关闭时，读数不显示、开关也置灰。
+- **对话输入框积分读数（国内版 / 国际版自动切换）** —— 对话输入框左侧工具栏常驻一行可点击的读数（如 `WB CN · 1,072`），**按本会话当前选中的模型自动切换区域**：选中 WB CN 的模型就显示国内版余额，选中 WB AI 的模型就显示国际版余额；用其它 provider 的模型时该读数完全不出现。每 5 分钟自动刷新，也可点开手动刷新。点击读数弹出面板：**按账号列出的余额表格**，点某一行即可切换到该账号（与卡片上的账号选择是同一个设置）；**当前不能用的账号会在行内标出原因**（如「被限流」「积分耗尽」），标注口径与账号池表格一致。面板里的余额只在打开时才去查，因此不会让 5 分钟的后台刷新按账号数翻倍。要关掉某一边，就在卡片对应区域的 tab 下取消勾选「在输入框工具栏显示积分读数」；该区域的供应商被关闭时，读数不显示、开关也置灰。同一个开关下面还有「显示位置」这一行：默认在输入框工具栏（与模型选择同一行），改成「输入框下方」后读数落到轮次/步数/token 统计那一行——装了别的插件把工具栏座位占掉时用得上。
 
   <img src="docs/assets/dsh-connect-workbuddy-composer-credits.png" width="360" alt="对话输入框积分面板：国内版账号余额表格、刷新积分按钮与最近刷新时间" />
 - **账号池：多账号批量操作与自动换号** —— 把要用的账号勾进池子，即可**一键签到所有账号**、**一键测试所有账号 × 你指定的模型**（默认挑该区域倍率为 0 的免费模型）；开启**启用账号池**即同时打开**自动换号**——某个请求在上游失败时，插件会依次用池内其他可用账号重试，直到有一个接手、或全部不可用为止，然后才把错误报给你。成员**默认一个都不含**、必须显式勾选（「本机有登录」不等于「要拿它去签到和花积分」）；**开启后由池子的排序决定每一次请求用谁**（可用优先，其次快过期先花、积分高、凭据更新的）；失败时依次用池内其他可用账号重试。排序**从不写回你保存的选择**——关掉开关，你选定的账号立刻完全生效。只有请求本身不合法（HTTP 400）不换号：同一个请求体换谁都是 400，重试只会白等。**这个开关只管「插件要不要自己决定」**：关掉它，插件不再替你选账号、也不再替你换号，但**签到与测试仍然可用**（它们是手动动作）。测试走的是与模型行同一套真实体积探测，因此**有真实成本**；**不提供自动签到**——签到会真实领取奖励，只在你点按钮时执行。详见[账号池](#账号池)。

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as defaultDesktopAuthDirs, F as WorkBuddyUpstreamClient, K as WORKBUDDY_APP_EXECUTABLE_ENV, O as legacyWorkbuddyOwnAuthPath, Q as findWorkbuddyAppExecutableWithSource, S as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, j as workbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, ot as hostPeersInfo, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, y as WorkBuddyCredentialStore } from "./host-heartbeat-Dd9fsFMR.js";
+import { C as defaultDesktopAuthDirs, F as WorkBuddyUpstreamClient, K as WORKBUDDY_APP_EXECUTABLE_ENV, O as legacyWorkbuddyOwnAuthPath, Q as findWorkbuddyAppExecutableWithSource, S as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, j as workbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, ot as hostPeersInfo, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, y as WorkBuddyCredentialStore } from "./host-heartbeat-BfAvb1_d.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/client.js

@@ -1403,7 +1403,7 @@ window.__ModuleLoader__.load({
 		* section implying the feature exists.
 		*/
 		function AccountPool(props) {
-			const { t, region, pool, settingsScope, siblingBusy, onBusyChange, onSaved, onRefresh, onRescan, rescanning, onSelectAccount, selectingAccount, accountTools, headerExtra } = props;
+			const { t, region, pool, settingsScope, siblingBusy, onBusyChange, onSaved, onRefresh, onRescan, rescanning, onSelectAccount, selectingAccount, accountTools } = props;
 			const [draft, setDraft] = (0, react.useState)(null);
 			const [saving, setSaving] = (0, react.useState)(false);
 			const [saveError, setSaveError] = (0, react.useState)(void 0);
@@ -1863,7 +1863,7 @@ window.__ModuleLoader__.load({
 				visible: true,
 				message: t("row.poolSaving"),
 				hint: t("row.veilHintList")
-			}) : null, (0, react.createElement)("div", { className: "dsm-workbuddy-pool-head" }, (0, react.createElement)("h3", { className: "dsm-workbuddy-pool-title" }, t("row.poolTitle")), headerExtra === void 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-head-extra" }, headerExtra), currentName === void 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-current-badge" }, t("row.poolCurrentHeader", { account: currentName }))), !poolRunning && onSelectAccount !== void 0 && pool.accounts.length > 0 ? (0, react.createElement)("div", { className: "dsm-workbuddy-pool-set" }, (0, react.createElement)("span", { className: "dsm-workbuddy-pool-set-copy" }, (0, react.createElement)("b", null, t("row.poolManualAccountLabel")), (0, react.createElement)("span", null, t("row.poolManualAccountHint"))), (0, react.createElement)("span", { className: "dsm-workbuddy-pool-set-ctl" }, (0, react.createElement)("select", {
+			}) : null, (0, react.createElement)("div", { className: "dsm-workbuddy-pool-head" }, (0, react.createElement)("h3", { className: "dsm-workbuddy-pool-title" }, t("row.poolTitle")), currentName === void 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-current-badge" }, t("row.poolCurrentHeader", { account: currentName }))), !poolRunning && onSelectAccount !== void 0 && pool.accounts.length > 0 ? (0, react.createElement)("div", { className: "dsm-workbuddy-pool-set" }, (0, react.createElement)("span", { className: "dsm-workbuddy-pool-set-copy" }, (0, react.createElement)("b", null, t("row.poolManualAccountLabel")), (0, react.createElement)("span", null, t("row.poolManualAccountHint"))), (0, react.createElement)("span", { className: "dsm-workbuddy-pool-set-ctl" }, (0, react.createElement)("select", {
 				className: "dsm-workbuddy-pool-select dsm-workbuddy-pool-account-select",
 				value: currentAccount?.accountId ?? "",
 				disabled: selectingAccount === true,
@@ -3047,33 +3047,105 @@ window.__ModuleLoader__.load({
 .dsm-btn-primary{background:var(--dsw-alias-label-primary);color:var(--dsw-alias-bg-layer-3)}
 .dsm-btn-primary:hover:not(:disabled){opacity:.9}
 .dsm-workbuddy-usage{display:flex;flex-direction:column;gap:16px;margin:0;padding:16px 0 4px}
-.dsm-workbuddy-tabs{display:flex;gap:6px;padding:4px;border:1px solid var(--dsw-alias-border-l2,#3a3d45);border-radius:10px;background:var(--dsw-alias-bg-layer-3,#2a2c33)}
-.dsm-workbuddy-tab{appearance:none;font:inherit;cursor:pointer;flex:1;border:0;border-radius:7px;padding:7px 10px;color:var(--dsw-alias-label-tertiary,#999);font-size:13px;font-weight:500;line-height:18px;background:transparent;transition:color .15s,background .15s;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+/* The provider bar: one CARD per region, side by side.
+ *
+ * COPIED FROM dsh-connect-trae, rule for rule, because an approximation of it
+ * read as a different component. An earlier revision marked the selected card
+ * with 1px border PLUS an inset 1.5px hairline in the contrast colour, and
+ * that is 2.5 CSS px of near-black on a 2x display — five device pixels of
+ * frame against the reference's one. What the reference does instead:
+ *
+ *   - selected = the accent COLOUR on the same 1px border, plus a slightly
+ *     darker fill. The LIGHTNESS carries the state, not the thickness.
+ *   - the switch is separated from the label by a hairline RULE inside the
+ *     card (border-left in border-l1), not by dead space. That rule is what
+ *     makes the switch read as a second control in the same box rather than
+ *     as a floating square at the card's right edge.
+ *   - the cell owns its padding (8px 12px) and the tab button has none, so
+ *     the label's text sits at a predictable inset no matter how the button's
+ *     focus ring draws.
+ *   - 10px corner radius, matching the reference's card shape.
+ *
+ * The row stays what it was semantically: role="tablist" with one button per
+ * region, and the checkbox inside each card is a SEPARATE control (switch this
+ * provider on/off) — never merged into the tab action. Both regions can be on
+ * at once, so this must not become a radio group just because the cards look
+ * like one.
+ *
+ * The checkbox is the PLATFORM'S OWN, styled only with accent-color — the
+ * same three declarations the reference card has, no more. An earlier revision
+ * drew it here (appearance:none, 15px square, 3px radius, a tick made of two
+ * rotated borders) on the theory that pinning the geometry would match the
+ * reference across platforms. It did not: the reference does not draw it, so
+ * the drawn box was a second, invented control sitting in the same row as the
+ * real one. Measured against the screenshot, its box is 26 device px on a 2x
+ * display — 13 CSS px, which is the engine's own default size, not a number
+ * anyone wrote down.
+ *
+ * accent-color hands size, radius and tick glyph to the platform. That is the
+ * point: the box then follows the reader's OS and theme, which is what makes
+ * it read as a checkbox rather than as a painted square. */
+.dsm-workbuddy-tabs{display:flex;gap:8px;align-items:stretch}
+.dsm-workbuddy-tab-cell{display:flex;align-items:center;gap:4px;flex:1;min-width:0;padding:8px 12px;border:1px solid var(--dsw-alias-border-l2,#3a3d45);border-radius:10px;background:var(--dsw-alias-bg-layer-3,#2a2c33);transition:border-color .15s,background .15s}
+.dsm-workbuddy-tab-cell:hover{border-color:var(--dsw-alias-label-dimmed,#777)}
+.dsm-workbuddy-tab-cell:has(.dsm-workbuddy-tab-active){border-color:var(--dsw-alias-brand-primary,#5686fe);background:var(--dsw-alias-bg-layer-2,#232529)}
+.dsm-workbuddy-tab{appearance:none;font:inherit;cursor:pointer;flex:1;min-width:0;border:0;border-radius:7px;padding:0;color:var(--dsw-alias-label-tertiary,#999);font-size:13px;font-weight:600;line-height:20px;text-align:left;background:transparent;transition:color .15s;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
 .dsm-workbuddy-tab:hover:not(:disabled):not(.dsm-workbuddy-tab-active){color:var(--dsw-alias-label-primary,#e6e6e6)}
 .dsm-workbuddy-tab:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:1px}
-.dsm-workbuddy-tab-active{color:var(--dsw-alias-label-primary,#e6e6e6);background:var(--dsw-alias-bg-layer-2,#232529);box-shadow:inset 0 0 0 1px var(--dsw-alias-border-l2,#3a3d45)}
-.dsm-workbuddy-tab-dot{display:inline-block;width:7px;height:7px;border-radius:50%;margin-right:6px;vertical-align:baseline}
-.dsm-workbuddy-tab-cell{display:flex;align-items:center;gap:2px;flex:1;min-width:0}
-.dsm-workbuddy-tab-switch{display:inline-flex;align-items:center;flex:none;padding:0 8px 0 2px;cursor:pointer}
+.dsm-workbuddy-tab-active{color:var(--dsw-alias-label-primary,#e6e6e6)}
+.dsm-workbuddy-tab-dot{display:inline-block;width:7px;height:7px;border-radius:50%;margin-right:7px;vertical-align:baseline}
+/* The hairline rule between the label and the switch. The auto left margin is
+   what pushes the switch to the card's right edge; without it the rule would
+   sit tight against the text. */
+.dsm-workbuddy-tab-switch{display:inline-flex;align-items:center;flex:none;margin-left:auto;padding-left:10px;border-left:1px solid var(--dsw-alias-border-l1,rgba(127,127,127,.24));cursor:pointer}
 .dsm-workbuddy-tab-switch input{margin:0;cursor:pointer;accent-color:var(--dsw-alias-brand-primary,#5686fe)}
-.dsm-workbuddy-tab-switch input:disabled{opacity:.4;cursor:default}
-/* One sidebar-credit switch, belonging to the ACTIVE tab's region. It rides in
-   the account-pool heading row (dsm-workbuddy-pool-head-extra) so one
-   checkbox no longer costs a full line of vertical space; the tab bar already
-   says which region is in scope, so it still reads as this tab's property
-   rather than as a shared pair of settings. No vertical margin: the heading row
-   owns the spacing. */
-.dsm-workbuddy-credits-switch{display:inline-flex;align-items:center;gap:6px;cursor:pointer;font-size:12px;line-height:18px;color:var(--dsw-alias-label-secondary,#c6c9d0)}
-/* The standalone fallback site: used only when the account-pool section did not
-   render (no Host pool state), so there is no heading row to share. This is the
-   spacing the control carried before it moved beside that heading. */
-.dsm-workbuddy-credits-switch-row{display:flex;align-items:center;margin:8px 0 2px}
-/* The credit readout's seat picker (issue #62). Narrower than the pool's model
-   select so the show/hide box and this control share one heading row, and it
-   wraps onto its own line rather than squashing the pool title. */
-/* Its OWN label class, deliberately not the switch's: a query for "the
-   sidebar-credit switch" must not be able to pick this control up, and the two
-   are different widgets (a checkbox and a two-way picker). */
+.dsm-workbuddy-tab-switch input:disabled{cursor:default}
+/* PREFERENCE LINES: a checkbox on a line that commits on the click, packed from
+   the LEFT — the shape the reference card uses for this exact block.
+ *
+ * They belong to the TAB block above and carry no heading of their own, because
+ * both switches describe THIS tab. Earlier revisions gave them a headed section,
+ * which meant a second 「积分」 heading one line under the tab hint; the reference
+ * card never had one either.
+ *
+ * The picker used to sit at the row's far edge, pushed there by
+ * justify-content:space-between. That split one sentence into two objects with
+ * half a card of empty space between them, and left the reader to guess which
+ * label the control belonged to. Here nothing in a row stretches: the words ask
+ * the question and the control answers right beside them.
+ *
+ * align-items:flex-start, not center: the hint wraps to two lines at narrow
+ * widths, and centring would float the checkbox against the middle of it.
+ *
+ * No horizontal inset: the reference card pads this block by the same 2px its
+ * tab hint carries, so box and caption share one left edge. THIS card's tab hint
+ * (the dsm-workbuddy-models-summary class) has no side padding, so copying the
+ * reference's 2px would leave the two edges 2px apart — a difference too small
+ * to name and just big enough to look unaligned. */
+.dsm-workbuddy-prefs{display:flex;flex-direction:column;gap:14px;padding:2px 0 0}
+.dsm-workbuddy-pref{display:flex;align-items:flex-start;gap:10px;font-size:13px;line-height:18px;color:var(--dsw-alias-label-secondary,#c6c9d0);cursor:pointer}
+/* The platform's own checkbox, themed only with accent-color. A hand-drawn box
+   was tried on this card and reverted: brand-primary resolves to the host's
+   CONTRAST colour, so a ticked box painted itself as a heavy black pill — the
+   loudest object in a section made of plain 13px text. */
+.dsm-workbuddy-pref input{flex:none;cursor:pointer;accent-color:var(--dsw-alias-brand-primary,#5686fe)}
+.dsm-workbuddy-pref-check{inline-size:15px;block-size:15px;margin:3px 0 0}
+.dsm-workbuddy-pref input:disabled{cursor:default}
+.dsm-workbuddy-pref:has(input:disabled){opacity:.6;cursor:default}
+/* The NAME and what it does are TWO lines, not one wrapped blob: first what the
+   switch does, then what it means. Running them together is what made this
+   block read as a wall of text. */
+.dsm-workbuddy-pref-copy{display:flex;flex-direction:column;gap:3px;min-width:0}
+.dsm-workbuddy-pref-label{font-weight:500;color:var(--dsw-alias-label-primary,#e6e6e6)}
+/* The picker's own line: indented by the checkbox's width plus the row gap
+   (15px + 10px), so its label starts on the same left edge as the checkbox
+   labels above it rather than under their boxes. */
+.dsm-workbuddy-pref-indent{padding-left:25px}
+/* Name then control, packed left — 显示位置 [输入框工具栏] — so the row reads as
+   one sentence instead of a text column facing a control column. */
+.dsm-workbuddy-pref-lead{display:flex;align-items:center;justify-content:flex-start;gap:10px;min-width:0}
+.dsm-workbuddy-pref-lead .dsm-workbuddy-pref-label{flex:none}
+.dsm-workbuddy-pref-hint{color:var(--dsw-alias-label-tertiary,#999);font-size:12px;line-height:17px}
 /* The supplement to the host's fixed quota sentence (issue #63). The plugin no
    longer claims the host's shell.quota-notice chain seat, so this no longer
    paints into shell.overlay — that seat is the reason the previous build's
@@ -3084,11 +3156,34 @@ window.__ModuleLoader__.load({
    The body is one step quieter than the text it follows. */
 .dsm-workbuddy-quota-notice{display:inline}
 .dsm-workbuddy-quota-notice-body{color:var(--dsw-alias-label-tertiary,#8b8f98);font-size:12px}
-.dsm-workbuddy-credit-position-switch{display:inline-flex;align-items:center;gap:6px;font-size:12px;line-height:18px;color:var(--dsw-alias-label-secondary,#c6c9d0)}
-.dsm-workbuddy-credit-position{max-width:150px;padding:2px 6px;font-size:12px}
-.dsm-workbuddy-credits-switch-row .dsm-workbuddy-credit-position-switch{margin-left:12px}
-.dsm-workbuddy-credits-switch input{margin:0;cursor:pointer;accent-color:var(--dsw-alias-brand-primary,#5686fe)}
-.dsm-workbuddy-credits-switch input:disabled{opacity:.4;cursor:default}
+/* The seat picker is the PLATFORM's select, sized by its own two options rather
+ * than stretched: the control answers one short question and sits beside the
+ * words that ask it.
+ *
+ * This was drawn by hand for one revision — appearance:none, a layer-2 panel and
+ * a chevron built from two rotated gradients — copying a reference screenshot's
+ * white field. That does not survive the trip: the screenshot was a LIGHT
+ * settings page, this card is dark, and the drawn field ended up the only
+ * element here with its own fill, border and arrow, so it read as a form control
+ * pasted into a paragraph. The reference card's own dark build uses the native
+ * control with a hairline border, which is what this rule is.
+ *
+ * Sized by content, not by a min-width: it used to carry min-width:132px so it
+ * could share a heading row with the account badge, and that floor is now the
+ * reason a two-word option would still leave a gap after the word it answers. */
+.dsm-workbuddy-credit-position{flex:none;max-width:none;margin-top:0;padding:3px 8px;border:1px solid var(--dsw-alias-border-l2,#3a3d45);border-radius:7px;background:var(--dsw-alias-bg-layer-3,#2a2c33);color:var(--dsw-alias-label-primary,#e6e6e6);font:inherit;font-size:12px;line-height:16px;cursor:pointer}
+.dsm-workbuddy-credit-position:hover:not(:disabled){border-color:var(--dsw-alias-label-dimmed,#777)}
+.dsm-workbuddy-credit-position:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:1px}
+.dsm-workbuddy-credit-position:disabled{opacity:.5;cursor:default}
+/* A card whose provider is switched OFF dims its LABEL AND DOT. The checkbox
+ * beside them must stay at full strength, because that checkbox is the only
+ * way to switch the region back on — dimming it would grey out the control
+ * that fixes the state it is reporting. Its own disabled rule still dims it
+ * when writes are unavailable, which is a different condition and reads as a
+ * different thing.
+ *
+ * That is also what the reference card does: it marks the off state on the
+ * tab button and leaves the switch live. */
 .dsm-workbuddy-tab-off{opacity:.55}
 /* Re-detection keeps a copy in the signed-out branch (that branch is where
    "I just signed in over there" applies), so it needs its own placement: the
@@ -3187,14 +3282,19 @@ window.__ModuleLoader__.load({
 
 /* ---- Account pool ---- */
 .dsm-workbuddy-pool{display:flex;flex-direction:column;gap:12px;margin:0;padding:16px 0 4px;border-top:1px solid var(--dsw-alias-border-l2,#36373b)}
-/* Title, then the inline extra (the sidebar-credit switch), then the
-   serving-account badge on the far edge. The badge is pushed right with
-   margin-left:auto rather than the row using space-between: with three
-   children the latter would strand the switch in the middle instead of binding
-   it to the title, and with only two (no switch) margin-left:auto keeps the
-   badge on the right edge exactly as before. */
+/* The block's heading: title on the left, serving-account badge on the right.
+ *
+ * It used to hold a THIRD child — the credit-readout switch, slotted in between
+ * the title and the badge by the card. A control that configures something else
+ * spent several revisions sitting inside this block's title, and it forced the
+ * row onto a shared baseline with a picker whose width shoved the badge to the
+ * far edge. The switch now has its own section above; what is left is the one
+ * thing that is genuinely this block's title row.
+ *
+ * The badge is pushed right with margin-left:auto rather than the row using
+ * space-between, so it stays on the right edge even if a future change adds a
+ * child or removes one. */
 .dsm-workbuddy-pool-head{display:flex;align-items:center;gap:10px;flex-wrap:wrap}
-.dsm-workbuddy-pool-head-extra{display:inline-flex;align-items:center}
 .dsm-workbuddy-pool-current-badge{margin-left:auto;padding:2px 10px;border-radius:999px;background:rgba(86,134,254,.16);color:var(--dsw-alias-brand-primary,#5686fe);font-size:12px;font-weight:600;line-height:18px;white-space:nowrap}
 /* Sits under the header block, before the batch buttons: account discovery is
    the first step of using the pool, so it reads above the actions it enables. */
@@ -4614,39 +4714,6 @@ window.__ModuleLoader__.load({
 				}))
 			})] });
 			/**
-			* Sidebar credit line switch — ONE control, for the ACTIVE tab's region only.
-			*
-			* The two regions are independent providers with independent accounts, so
-			* each tab owns its own switch and they are never shown as a pair: this one
-			* writes `regions.<activeRegion>.showCreditsInMainUi`, which decides only
-			* whether THAT region's line appears in the sidebar. That matches how every
-			* other control in this card is scoped to the selected tab (account, pool,
-			* model list), and it means a CN-only user is never shown a switch for an
-			* account they do not have. An earlier revision rendered both boxes side by
-			* side under the tab bar regardless of the active tab; that read as one
-			* shared setting and was replaced.
-			*
-			* RENDERED BESIDE THE POOL HEADING, not on its own row. It used to occupy a
-			* full line of vertical space for a single checkbox; the pool heading already
-			* had a title-left / badge-right row, so the control fits there without the
-			* block growing. It is handed to `AccountPool` as a ready-made node purely so
-			* the two can share a flex row — the write path, the disabled rules and the
-			* serialization against the card's other region writers all stay here, where
-			* the settings scope and the save state live.
-			*/
-			const creditsSwitch = /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
-				className: "dsm-workbuddy-credits-switch",
-				title: activeRegion === "cn" ? t("row.showCreditsCnHint") : t("row.showCreditsGlobalHint"),
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
-					type: "checkbox",
-					checked: activeRegionOn ? creditsShownOn(activeRegion) : false,
-					disabled: !activeRegionOn || togglingCredits === activeRegion || !canWrite || saving || poolBusy,
-					onChange: (event) => {
-						toggleCredits(activeRegion, event.target.checked);
-					}
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: activeRegion === "cn" ? t("row.showCreditsCn") : t("row.showCreditsGlobal") })]
-			});
-			/**
 			* WHERE the readout sits — a two-way choice, active tab's region only
 			* (issue #62).
 			*
@@ -4654,31 +4721,76 @@ window.__ModuleLoader__.load({
 			* question together ("show it, and where"), and because a user only reaches
 			* for this when the default seat is unavailable — typically after installing
 			* another plugin that occupies the composer row. Rendered as a `<select>`
-			* rather than a pair of radios so it stays one compact row on the pool
-			* heading, matching the switch beside it.
+			* rather than a pair of radios so it stays one compact row.
+			*
+			* LABEL LEFT, CONTROL RIGHT — the reverse of the first draft, which put the
+			* select first. Under an always-visible caption the label is what the eye
+			* scans for ("显示位置"), so it leads and the value follows; leading with the
+			* control made it read as a second checkbox whose box happened to be a
+			* dropdown. It also matches the reference settings screen, where the option
+			* name sits left of its picker.
 			*
 			* Disabled with the region, exactly like the switch: a region that is off has
 			* no readout to place.
 			*/
-			const creditPositionPicker = /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
-				className: "dsm-workbuddy-credit-position-switch",
-				title: t("row.creditPositionHint"),
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
-					className: "dsm-workbuddy-pool-select dsm-workbuddy-credit-position",
-					value: activeRegionOn ? creditPositionOn(activeRegion) : "composer",
-					disabled: !activeRegionOn || togglingCredits === activeRegion || !canWrite || saving || poolBusy,
-					"aria-label": t("row.creditPositionAria", { region: activeRegion === "cn" ? t("row.tabCn") : t("row.tabGlobal") }),
-					onChange: (event) => {
-						changeCreditPosition(activeRegion, event.currentTarget.value === "stats" ? "stats" : "composer");
-					},
-					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
-						value: "composer",
-						children: t("row.creditPositionComposer")
-					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
-						value: "stats",
-						children: t("row.creditPositionStats")
+			const creditPositionPicker = /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("select", {
+				className: "dsm-workbuddy-credit-position",
+				value: activeRegionOn ? creditPositionOn(activeRegion) : "composer",
+				disabled: !activeRegionOn || togglingCredits === activeRegion || !canWrite || saving || poolBusy,
+				"aria-label": t("row.creditPositionAria", { region: activeRegion === "cn" ? t("row.tabCn") : t("row.tabGlobal") }),
+				onChange: (event) => {
+					changeCreditPosition(activeRegion, event.currentTarget.value === "stats" ? "stats" : "composer");
+				},
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+					value: "composer",
+					children: t("row.creditPositionComposer")
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("option", {
+					value: "stats",
+					children: t("row.creditPositionStats")
+				})]
+			});
+			const creditPositionCaption = t("row.creditPositionHintInline");
+			const creditPositionDisabledCaption = t("row.creditPositionDisabledHint");
+			const creditPreferences = /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsm-workbuddy-prefs",
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+					className: "dsm-workbuddy-pref",
+					title: activeRegion === "cn" ? t("row.showCreditsCnHint") : t("row.showCreditsGlobalHint"),
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+						type: "checkbox",
+						className: "dsm-workbuddy-pref-check",
+						checked: activeRegionOn ? creditsShownOn(activeRegion) : false,
+						disabled: !activeRegionOn || togglingCredits === activeRegion || !canWrite || saving || poolBusy,
+						onChange: (event) => {
+							toggleCredits(activeRegion, event.target.checked);
+						}
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+						className: "dsm-workbuddy-pref-copy",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsm-workbuddy-pref-label",
+							children: activeRegion === "cn" ? t("row.showCreditsCn") : t("row.showCreditsGlobal")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsm-workbuddy-pref-hint",
+							children: t("row.showCreditsHintInline")
+						})]
 					})]
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t("row.creditPositionLabel") })]
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("label", {
+					className: "dsm-workbuddy-pref dsm-workbuddy-pref-indent",
+					title: t("row.creditPositionHint"),
+					children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+						className: "dsm-workbuddy-pref-copy",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+							className: "dsm-workbuddy-pref-lead",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsm-workbuddy-pref-label",
+								children: t("row.creditPositionLabel")
+							}), creditPositionPicker]
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsm-workbuddy-pref-hint",
+							children: activeRegionOn ? creditPositionCaption : creditPositionDisabledCaption
+						})]
+					})
+				})]
 			});
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 				className: `dsm-plugin-card${open ? " dsm-plugin-card-open" : ""}`,
@@ -4768,6 +4880,7 @@ window.__ModuleLoader__.load({
 								className: "dsm-workbuddy-tab-off-notice",
 								children: t("row.tabOffNotice")
 							}) : null,
+							creditPreferences,
 							status.status === "error" || status.status === "signed-in" && status.creditsError !== void 0 ? status.status === "signed-in" && status.credentialRejected === true ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								className: "dsm-workbuddy-usage-hint",
 								children: t("row.reloginHint")
@@ -4824,16 +4937,11 @@ window.__ModuleLoader__.load({
 									},
 									selectingAccount: switchingAccount,
 									accountTools,
-									...status.pool === void 0 ? {} : { headerExtra: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [creditsSwitch, creditPositionPicker] }) },
 									siblingBusy: saving || togglingRegion !== void 0,
 									onBusyChange: setPoolBusy,
 									onSaved: async () => await refreshUsage(activeRegion) !== void 0,
 									onRefresh: () => refreshUsage(activeRegion)
 								}),
-								status.pool === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-									className: "dsm-workbuddy-credits-switch-row",
-									children: [creditsSwitch, creditPositionPicker]
-								}) : null,
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("section", {
 									className: "dsm-workbuddy-models",
 									"aria-label": t("row.modelsTitle"),
@@ -6188,13 +6296,16 @@ window.__ModuleLoader__.load({
 			"row.poolRowRemoved": "{accountName}: hidden from the list. 「Detect accounts again」 re-adds it; the desktop app stays signed in.",
 			"row.poolRowRemoving": "Removing the account…",
 			"row.poolRowRemoveDesktopOnly": "{accountName}: hidden from the list — this account comes from the desktop app's own sign-in, which is left untouched. 「Detect accounts again」 re-adds it.",
-			"row.showCreditsCn": "WB CN credits in composer",
-			"row.showCreditsGlobal": "WB AI credits in composer",
+			"row.showCreditsCn": "Show credits in the composer toolbar",
+			"row.showCreditsGlobal": "Show credits in the composer toolbar",
 			"row.showCreditsCnHint": "Show the domestic (WB CN) credit balance in the composer toolbar, but only while this session uses a WB CN model. Click it for per-account balances and a manual refresh (refreshes by itself every 5 minutes).",
-			"row.creditPositionLabel": "position",
+			"row.creditPositionLabel": "Position",
 			"row.creditPositionComposer": "composer toolbar",
 			"row.creditPositionStats": "below the input box",
 			"row.creditPositionAria": "Credit readout position for {region}",
+			"row.creditPositionHintInline": "Where the readout sits. \"composer toolbar\" is the default — the row with the model picker.",
+			"row.creditPositionDisabledHint": "Unavailable while the switch above is off: tick \"Show credits in the composer toolbar\" first.",
+			"row.showCreditsHintInline": "The balance for the account currently serving this tab. Click for per-account balances; it also refreshes every 5 minutes.",
 			"quotaNotice.fallbackHead": "The quota for this request is exhausted",
 			"quotaNotice.supplement": " (some models also have a daily limit that is unrelated to your credits)",
 			"row.creditPositionHint": "Where the credit readout sits. \"composer toolbar\" is the default (the row with the model picker). Choose \"below the input box\" — the row carrying the round / step / token statistics — if another plugin occupies the composer toolbar and the readout does not appear.",
@@ -6473,13 +6584,16 @@ window.__ModuleLoader__.load({
 			"row.poolRowRemoved": "{accountName}：已从列表中隐藏。点「重新检测账号」会重新加入，桌面 App 的登录不受影响。",
 			"row.poolRowRemoving": "正在删除账号…",
 			"row.poolRowRemoveDesktopOnly": "{accountName}：已从列表中隐藏——这个账号来自桌面 App 自己的登录，该登录未被改动。点「重新检测账号」会重新加入。",
-			"row.showCreditsCn": "对话框显示 WB CN 积分",
-			"row.showCreditsGlobal": "对话框显示 WB AI 积分",
+			"row.showCreditsCn": "在输入框工具栏显示积分读数",
+			"row.showCreditsGlobal": "在输入框工具栏显示积分读数",
 			"row.showCreditsCnHint": "在对话输入框工具栏显示国内版（WB CN）剩余积分，仅当本会话使用 WB CN 模型时出现。点击可看各账号余额并手动刷新（每 5 分钟也会自动刷新）。",
-			"row.creditPositionLabel": "位置",
+			"row.creditPositionLabel": "显示位置",
 			"row.creditPositionComposer": "输入框工具栏",
 			"row.creditPositionStats": "输入框下方",
 			"row.creditPositionAria": "{region} 的积分显示位置",
+			"row.creditPositionHintInline": "读数显示在哪里。「输入框工具栏」是默认位置，与模型选择同一行。",
+			"row.creditPositionDisabledHint": "主开关关闭时不可调整：先勾选上方「在输入框工具栏显示积分读数」。",
+			"row.showCreditsHintInline": "当前为本 tab 服务的那个账号的余额。点一下能看各账号明细，另外每 5 分钟自动刷新一次。",
 			"quotaNotice.fallbackHead": "当前请求的额度已用尽",
 			"quotaNotice.supplement": "（部分模型另有每日额度，与积分无关）",
 			"row.creditPositionHint": "积分显示在哪里。「输入框工具栏」是默认位置（与模型选择同一行）。如果装了别的插件后读数不显示，改成「输入框下方」—— 那是「轮次 / 步数 / token」统计所在的那一行。",

package/lib/{host-heartbeat-Dd9fsFMR.js → host-heartbeat-BfAvb1_d.js}

@@ -3957,7 +3957,7 @@ function generationOf(version) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "4.7.0";
+const WORKBUDDY_CONNECT_VERSION = "4.8.1";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -1246,6 +1246,18 @@ declare function createWorkBuddyShim(options: WorkBuddyShimOptions): WorkBuddySh
 /** The resolved pi-ai generation, by context-shape capability. */
 type PiAiGeneration = 'modern' | 'legacy';
 //#endregion
+//#region src/context-rescue.d.ts
+interface ContextRescue {
+  /**
+   * Fold history until the next request fits the given window.
+   *
+   * @param sessionId - session whose history should be folded.
+   * @param window - context window of the route that just overflowed.
+   * @returns whether any history was folded.
+   */
+  rescue(sessionId: string, window: number): Promise<boolean>;
+}
+//#endregion
 //#region src/adapter.d.ts
 /** Provider route this bundle owns for the domestic (CN) gateway. */
 declare const WORKBUDDY_PROVIDER = "workbuddy";
@@ -1270,6 +1282,12 @@ interface WorkBuddyAdapterOptions {
   displayName?: string;
   /** Resolve the durable attachment service at request time, when present. */
   resolveAttachments?: () => AttachmentStore | undefined;
+  /**
+   * Resolve the host-side context-overflow rescue, when this host exposes one.
+   * Omitted (or resolving to `undefined`) leaves the adapter exactly as it was:
+   * a provider overflow is forwarded and the host's own recovery decides.
+   */
+  resolveContextRescue?: () => ContextRescue | undefined;
   /**
    * Override the pi-ai generation gate (see {@link piAiRuntimeInfo}); tests
    * inject both branches because this checkout only ever RESOLVES one of

package/lib/index.js

@@ -1,9 +1,9 @@
-import { $ as isEncryptedFieldWrapper, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as deriveAtRestKey, K as WORKBUDDY_APP_EXECUTABLE_ENV, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as fetchAtRestKeyPayload, Y as deriveAtRestKeyId, Z as findWorkbuddyAppExecutable, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as workbuddyAppExecutableCandidates, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as withFileLock, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as isWorkbuddyBundle, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, it as readAtRestKey, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as writeFileAtomic, m as deriveCatalog, n as clearHostHeartbeat, nt as macosNestedAppBundles, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as clearAtRestKeyCache, r as isHeartbeatProcessAlive, rt as openEncryptedField, s as writeHostHeartbeat, st as resolveDshHome, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as macosBundleExecutable, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-Dd9fsFMR.js";
+import { $ as isEncryptedFieldWrapper, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as deriveAtRestKey, K as WORKBUDDY_APP_EXECUTABLE_ENV, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as fetchAtRestKeyPayload, Y as deriveAtRestKeyId, Z as findWorkbuddyAppExecutable, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as workbuddyAppExecutableCandidates, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as withFileLock, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as isWorkbuddyBundle, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, it as readAtRestKey, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as writeFileAtomic, m as deriveCatalog, n as clearHostHeartbeat, nt as macosNestedAppBundles, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as clearAtRestKeyCache, r as isHeartbeatProcessAlive, rt as openEncryptedField, s as writeHostHeartbeat, st as resolveDshHome, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as macosBundleExecutable, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-BfAvb1_d.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, readFile, writeFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { join } from "node:path";
-import { createProvider } from "@earendil-works/pi-ai";
+import { createAssistantMessageEventStream, createProvider, isContextOverflow } from "@earendil-works/pi-ai";
 import { openAICompletionsApi } from "@earendil-works/pi-ai/api/openai-completions.lazy";
 import { resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
@@ -473,6 +473,51 @@ function withLegacyContext(api, generation) {
 	};
 }
 /**
+* Layer the host-side context-overflow rescue onto a provider's streams.
+*
+* pi-ai reports a provider failure as an `error` event rather than a throw, so
+* the rescue runs while the failing assistant message is still in hand: history
+* is folded before the event continues on its way, and the host's retry then
+* rebuilds its request against a smaller surface. Nothing is swallowed — the
+* error event is forwarded unchanged, because deciding whether to retry is the
+* host's policy, not this transport's.
+*
+* Both gates are deliberate. Without `sessionId` there is no session to fold,
+* and without a declared `contextWindow` there is no budget to fold against;
+* either absence leaves the stream untouched.
+*/
+function withContextRescue(api, resolve) {
+	if (resolve === void 0) return api;
+	const wrap = (inner) => (model, context, options) => {
+		const source = inner(model, context, options);
+		const rescue = resolve();
+		const sessionId = options?.sessionId;
+		const window = model.contextWindow;
+		if (rescue === void 0 || sessionId === void 0 || window === void 0) return source;
+		const out = createAssistantMessageEventStream();
+		let final;
+		(async () => {
+			try {
+				for await (const event of source) {
+					if (event.type === "done") final = event.message;
+					if (event.type === "error") final = event.error;
+					if (event.type === "error" && isContextOverflow(event.error)) await rescue.rescue(sessionId, window);
+					out.push(event);
+				}
+				out.end(final);
+			} catch {
+				out.end(final);
+			}
+		})();
+		return out;
+	};
+	return {
+		...api,
+		stream: wrap(api.stream),
+		streamSimple: wrap(api.streamSimple)
+	};
+}
+/**
 * Assemble the adapter. The provider's `getModels` reads the live catalog,
 * and every model's `baseUrl` is re-resolved per read so the shim's
 * ephemeral port applies from the first snapshot after startup.
@@ -501,7 +546,7 @@ function createWorkBuddyAdapter(options) {
 				}
 			} },
 			models: buildModels(),
-			api: withLegacyContext(openAICompletionsApi(), generation)
+			api: withContextRescue(withLegacyContext(openAICompletionsApi(), generation), options.resolveContextRescue)
 		}),
 		getModels: () => buildModels()
 	};
@@ -529,6 +574,104 @@ function createWorkBuddyAdapter(options) {
 	};
 }
 //#endregion
+//#region src/context-rescue.ts
+/** Share of the window one fold chunk may consume, leaving room for the prompt. */
+const CHUNK_FRACTION = .35;
+/** Post-fold measurement target: comfortably below the window the route allows. */
+const TARGET_FRACTION = .6;
+/** A session is never folded more than this many times by one rescue. */
+const MAX_ROUNDS = 8;
+/** How many times one chunk may shrink its tail edge before giving up. */
+const MAX_SHRINK = 24;
+/** A single fold is abandoned after this long. */
+const FOLD_TIMEOUT_MS = 18e4;
+/**
+* Create the rescue bound to a live host.
+*
+* @param resolve - resolves host services at call time.
+* @returns the rescue handle the adapter calls on a provider overflow.
+*/
+function createContextRescue(resolve) {
+	const inflight = /* @__PURE__ */ new Set();
+	return { async rescue(sessionId, window) {
+		if (inflight.has(sessionId)) return false;
+		inflight.add(sessionId);
+		try {
+			return await foldUntilFits(resolve(), sessionId, window);
+		} catch (error) {
+			resolve().log?.("dsh-connect-workbuddy: context rescue failed", error);
+			return false;
+		} finally {
+			inflight.delete(sessionId);
+		}
+	} };
+}
+async function foldUntilFits(deps, sessionId, window) {
+	const { meter, compaction, agents } = deps;
+	if (meter === void 0 || compaction === void 0 || agents === void 0) return false;
+	const agent = agents.get(sessionId);
+	if (agent === void 0) return false;
+	const target = Math.max(1, Math.floor(window * TARGET_FRACTION));
+	let foldedAny = false;
+	let previous = Number.POSITIVE_INFINITY;
+	for (let round = 0; round < MAX_ROUNDS; round += 1) {
+		const measurement = meter.measure(agent.session);
+		if (measurement.totalTokens <= target) return foldedAny;
+		if (measurement.totalTokens >= previous) return foldedAny;
+		previous = measurement.totalTokens;
+		if (!await foldOnce(deps, agent, measurement, window, target)) return foldedAny;
+		foldedAny = true;
+	}
+	return foldedAny;
+}
+/**
+* Fold the oldest chunk that fits, shrinking its tail edge when the host
+* refuses the range.
+*
+* The host rejects a range whose edges split a tool call from its result, and
+* it rejects an active or missing range before appending anything — so a
+* refused attempt costs no durable state and the edge can simply move inward.
+*
+* @returns whether one chunk was folded.
+*/
+async function foldOnce(deps, agent, measurement, window, target) {
+	const nodes = measurement.nodes;
+	if (nodes.length < 2) return false;
+	const budget = Math.floor(window * CHUNK_FRACTION);
+	const excess = measurement.totalTokens - target;
+	const chunk = Math.max(1, Math.min(budget, excess));
+	const head = nodes[0];
+	const compaction = deps.compaction;
+	if (head === void 0 || compaction === void 0) return false;
+	let end = -1;
+	let accumulated = 0;
+	for (let index = 0; index < nodes.length - 1; index += 1) {
+		const node = nodes[index];
+		if (node === void 0) break;
+		accumulated += node.tokens;
+		end = index;
+		if (accumulated >= chunk) break;
+	}
+	if (end < 0) return false;
+	const signal = AbortSignal.timeout(FOLD_TIMEOUT_MS);
+	const floor = Math.max(0, end - MAX_SHRINK);
+	for (; end >= floor; end -= 1) {
+		const tail = nodes[end];
+		if (tail === void 0) break;
+		try {
+			await compaction.compactRegion(head.seq, tail.seq, agent, signal);
+			return true;
+		} catch (error) {
+			if (signal.aborted) {
+				deps.log?.("dsh-connect-workbuddy: context rescue timed out", error);
+				return false;
+			}
+		}
+	}
+	deps.log?.("dsh-connect-workbuddy: context rescue found no foldable range");
+	return false;
+}
+//#endregion
 //#region src/body-report.ts
 /**
 * Body-composition report: WHAT was sent upstream, in counts (issue #59).
@@ -541,16 +684,32 @@ function createWorkBuddyAdapter(options) {
 *   - the gateways count identical bytes differently (upstream's business); or
 *   - the two requests did not carry the same messages (ours to fix).
 *
-* The second world was left standing by two independent measurements. The
-* reporter ran this project's `--kind`/`--language` probe on BOTH regions and
-* got the same tokens-per-1000-chars on byte-identical prose, code and JSON
-* (ratios 0.98–1.06 across six cells), so identical bytes really do bill
-* identically. And a code trace showed historical `reasoning` never reaches the
-* wire at all: pi-ai only forwards `thinking` blocks as text when
-* `compat.requiresThinkingAsText` is set — this plugin never sets it — and the
-* `reasoning_details` route needs a signature the stream parser never writes.
-* With the counting difference excluded and reasoning excluded, the remaining
-* candidate is that the two bodies differ in the first place.
+* Neither world, it turned out — the answer was a third one, and this report is
+* what produced it. A paired capture in one session (4.6.7) measured
+* `bodyBytes` 3,628,068 vs 3,626,374, a ratio of 0.9995: both requests carried
+* the same bytes. What differed was the BUCKET each byte was counted in — CN
+* text 741,952 vs GL 184,821, CN reasoning 72,270 vs GL 627,994, with a
+* complementary residual of 0.3%. The gateways did not miscount; the same
+* history was labelled differently on the two sides.
+*
+* The labelling is pi-ai's replay, not this plugin's. `openai-completions.js`
+* records the reasoning field name the upstream stream actually used into
+* `thinkingSignature` (`:428`), and on the way back out writes
+* `assistantMsg[<that name>] = <the thinking text>` (`:1006`), so a
+* transcript produced against a gateway that says `reasoning` is replayed as
+* `reasoning` and one that says `reasoning_content` as `reasoning_content`.
+* This plugin sets only `compat.supportsReasoningEffort` (`src/adapter.ts:200`),
+* so the `else` branch is taken and the field goes out raw rather than folded
+* into text.
+*
+* An earlier revision of this comment claimed the opposite — that historical
+* `reasoning` never reaches the wire, because `requiresThinkingAsText` is unset
+* and the `reasoning_details` route needs a signature the parser never writes.
+* Both halves are wrong under pi-ai 0.85.1: the unset flag is precisely what
+* routes thinking out as a raw field, and the parser does write the
+* `reasoning_details` signature (`:188–193`). The correction matters because it
+* turns `reasoning` into a bucket that can be non-zero — and diffing it across
+* regions is the direct measurement of the drift.
 *
 * This module exists to settle exactly that, and it can do it WITHOUT either
 * region having credit: the body is assembled locally, before the upstream ever
@@ -6609,6 +6768,15 @@ function apply(ctx, config) {
 	Promise.all(REGION_KEYS.map((region) => stacks[region].shim.ready)).then(async () => {
 		if (stopped) return;
 		const adapters = {};
+		const hostService = (name) => ctx.get(name);
+		const contextRescue = createContextRescue(() => ({
+			meter: hostService("tokenMeter"),
+			compaction: hostService("compaction"),
+			agents: hostService("agents"),
+			log: (message, error) => {
+				ctx.logger.warn(message, error);
+			}
+		}));
 		try {
 			for (const region of REGION_KEYS) adapters[region] = createWorkBuddyAdapter({
 				shim: stacks[region].shim,
@@ -6616,7 +6784,8 @@ function apply(ctx, config) {
 				catalog: stacks[region].catalog,
 				provider: WORKBUDDY_PROVIDERS[region],
 				displayName: WORKBUDDY_PROVIDER_DISPLAY_NAMES[region],
-				resolveAttachments: () => ctx.get("attachments")
+				resolveAttachments: () => ctx.get("attachments"),
+				resolveContextRescue: () => contextRescue
 			});
 			invalidateCatalog = () => {
 				for (const region of REGION_KEYS) adapters[region].invalidate();

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型接入 DeepSeek Harness，并提供只读的积分概览与模型管理。",
-  "version": "4.7.0",
+  "version": "4.8.1",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",