dsh-connect-workbuddy 4.9.2 → 4.9.3

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 4.9.3 (2026-10-19)
+
+> 版本号是 **patch**：新增一个**可选**的查询参数（`detail=fast`）和一条**只读**的本地取数路径；不带参数的老请求逐字节不变，发往上游的请求体、路由 id、模型 id、凭据与配置项一律未改。但**它修的是一个用户可见的等待**——打开设置页后要等半分钟到一分钟才出现账号列表。
+
+### Fixes
+
+- **issue #77：打开设置页要等 30–60 秒才出现各个账号**
+  - **原来错在哪**：卡片的账号列表来自**一份**用量文档，而这份文档的**末尾**要等一串上游读取——账号池每个成员一次 `fetchCredits`、每个账号一次 `fetchCheckinStatus`、当前账号自己再一次 `fetchCredits` + `fetchCheckinStatus`。每次上游调用超时是 `JSON_TIMEOUT_MS = 30_000`（`src/upstream.ts`）且**没有重试**，于是慢一点的上游把等待叠成 30–60 秒。更糟的是这段时间里卡片渲染的是 `signed-out` 占位（说是「未登录」并给出「重新检测账号」按钮）——**报告者截图里看到的正是这个占位**，一个已经登录、池里有一堆账号的用户被告知未登录。
+  - **为什么 4.6.7 显得快**：那版还没有账号池的逐账号读数和签到读数（`poolMembersOf` 的逐成员积分读、`checkedInToday` 的逐账号签到读都是更早的提交引入的，但**卡片等整份文档**这个形状把它们的代价直接变成了首屏代价）；不是 4.9.x 新增了扇出，而是 4.9.x 的功能让这份文档变得更长。所以修法不是微调超时，而是**把首屏和计费读解耦**。
+  - **现在的形状**：
+    - **服务端**：用量路由接受 `detail=fast`（`src/status-paths.ts` 的 `withWorkBuddyRegionFastDetail` / `fastDetailOf`），快速文档**只读本地状态**——凭据用 `store.current()`（不触发 token 刷新），实时数字（`credits` / `checkin` / `credentialRejected` / `recovery`）整块省略，账号池成员取自新增的 `localMembers`（就是请求路径本来就在用的 `localPoolMembers`，**零上游调用**），签到状态取自本进程已有的测量缓存 `cachedCheckedInToday`。**不带参数的行为一字未变**：未知或拼错的 `detail` 值一律退回完整文档，绝不会变成一份更空的卡片。
+    - **客户端**：先取 `detail=fast` 把账号表格画出来，再照旧取完整文档补上积分与签到。快速文档**永远不会覆盖**已经拿到完整文档的区域（它更穷，覆盖会把已显示的列抹成「—」）。在这之前（两份都还没回来）渲染 `row.accountsLoading`「正在加载账号…」，**不再假称未登录**。
+    - **为什么快速文档仍然带账号池块**：`AccountPool` 在没有 `pool` 块时返回 `null`，账号行就来自那里——首屏要「出现各个账号」，这个块就是必须的。它现在由本地花名册生成，不再等积分读数。
+  - **测试**：`tests/issue77-fast-first-paint.spec.ts` 在**路由层**断言快速文档**一次上游调用都不发**（积分/签到客户端被换成会抛错的桩，快速文档仍然成功），以及 `detail` 的解析只认精确的 `fast`、其余值全部退回完整文档，并保留完整文档行为不变的用例。`tests/issue77-card-first-paint.spec.tsx` 在**渲染层**用「完整文档永不返回」的桩挂载真实卡片，断言账号行**照样出现**、且不出现「未登录」文案；同时断言全部未返回时显示加载行，以及迟到的快速文档不会覆盖已加载的完整文档。删掉快速路径或让卡片等完整文档，这两组都会失败——已实测确认判别力。
+  - **刻意没做的**：没有给上游调用加重试或缩短超时（那只是把 30 秒变成另一种 30 秒）；没有把 `poolMembersOf` 从完整文档里拿掉（完整文档仍然需要真实积分）；没有让快速文档在宿主不支持时触发那次昂贵读取（缺 `localMembers` 就省略账号池块，宁可少画一行也不拖慢首屏）。
+
 ## 4.9.2 (2026-10-19)
 
 > 版本号是 **patch**：只改 `profiles` 里多登记一个注册表键，外加文档与注释；发往上游的请求体、路由 id、模型 id、模型选择器、目录与凭据一律未变。但**它修的是一个整区不可用的故障**——4.9.0/4.9.1 期间国际版（`workbuddy-global`）的每一个请求都在发出前失败。

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as defaultDesktopAuthDirs, F as WorkBuddyUpstreamClient, K as WORKBUDDY_APP_EXECUTABLE_ENV, O as legacyWorkbuddyOwnAuthPath, Q as findWorkbuddyAppExecutableWithSource, S as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, j as workbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, ot as hostPeersInfo, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, y as WorkBuddyCredentialStore } from "./host-heartbeat-DSMmEhuD.js";
+import { C as defaultDesktopAuthDirs, F as WorkBuddyUpstreamClient, K as WORKBUDDY_APP_EXECUTABLE_ENV, O as legacyWorkbuddyOwnAuthPath, Q as findWorkbuddyAppExecutableWithSource, S as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, j as workbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, ot as hostPeersInfo, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, y as WorkBuddyCredentialStore } from "./host-heartbeat-BHaBzzOr.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/client.js

@@ -123,6 +123,33 @@ window.__ModuleLoader__.load({
 			return `${path}?${WORKBUDDY_REGION_PARAM}=${region}`;
 		}
 		/**
+		* Query parameter selecting how much of a status document the Host assembles.
+		*
+		* The card's first paint only needs what local state already knows; live
+		* figures (credit, check-in, per-account readings) arrive through the SAME
+		* route once they have been measured. See {@link WORKBUDDY_DETAIL_FAST}.
+		*/
+		const WORKBUDDY_DETAIL_PARAM = "detail";
+		/**
+		* The `detail` value asking for the first-paint document.
+		*
+		* Absent means the full document, which is what every earlier caller asks for
+		* and what the route keeps answering — the parameter only ever ADDS a cheap
+		* mode, it never changes an existing one.
+		*/
+		const WORKBUDDY_DETAIL_FAST = "fast";
+		/**
+		* Address one region's status route for its first-paint document.
+		*
+		* The Host answers this from local state only (no upstream read, no token
+		* refresh), so a slow billing endpoint cannot decide when the account list
+		* appears. The card paints it first and then upgrades the same snapshot from
+		* the full document.
+		*/
+		function withWorkBuddyRegionFastDetail(path, region) {
+			return `${withWorkBuddyRegion(path, region)}&${WORKBUDDY_DETAIL_PARAM}=${WORKBUDDY_DETAIL_FAST}`;
+		}
+		/**
 		* Narrow a settings value to the `regions` map. Accepts EITHER the whole
 		* settings section (the Host's resolved `Config`) OR the `regions` map itself,
 		* and unwraps the former. This tolerance is deliberate: passing the whole
@@ -4612,23 +4639,16 @@ window.__ModuleLoader__.load({
 			/**
 			* Last-known usage per region, so tab dots survive tab switches.
 			*
-			* The placeholder carries `selectionExplicit: false` because that is the
-			* state the plugin documents as the default before any choice is saved. It
-			* is never rendered: the account picker and its state line only appear once
-			* a real fetch has populated `accounts`.
+			* EMPTY until a real document lands (issue #77). It used to be seeded with a
+			* `signed-out` placeholder, which was then rendered: for as long as the usage
+			* route took to answer — and that wait is exactly what #77 reports — a user
+			* with several signed-in accounts was told they were not signed in, with a
+			* "detect accounts" button as the only way out. An absent region now renders
+			* the loading line instead, and the first paint itself arrives from the
+			* `detail=fast` document (local state only, no upstream call), so the rows
+			* appear before anything billing-side has answered.
 			*/
-			const [statusByRegion, setStatusByRegion] = (0, react.useState)({
-				cn: {
-					status: "signed-out",
-					accounts: [],
-					selectionExplicit: false
-				},
-				global: {
-					status: "signed-out",
-					accounts: [],
-					selectionExplicit: false
-				}
-			});
+			const [statusByRegion, setStatusByRegion] = (0, react.useState)({});
 			const [busy, setBusy] = (0, react.useState)(false);
 			const [settingsRevision, setSettingsRevision] = (0, react.useState)(0);
 			/** Per-region unsaved model edits; a draft on one tab is never dropped by
@@ -4763,19 +4783,86 @@ window.__ModuleLoader__.load({
 					return;
 				}
 			}, [t]);
+			/**
+			* FIRST PAINT (issue #77): the same usage document, built from LOCAL state
+			* only — no billing request, no per-account check-in read.
+			*
+			* Why this exists. The card used to paint nothing until ONE monolithic
+			* document landed, and that document's tail awaited an upstream call per
+			* account (credits for every pool member, check-in for every account, plus
+			* the selected account's own two). Each of those has a 30-second timeout and
+			* no retry, so a slow or throttled upstream stacked the waits and the panel
+			* stayed empty for the reported 30–60 seconds — showing a "not signed in"
+			* placeholder the whole time, because that is what an absent document
+			* rendered as.
+			*
+			* The Host answers `detail=fast` from the credential store, the local pool
+			* roster and the measurement caches, so this is one local round trip. It
+			* carries the whole account table (the row list lives in the `pool` block),
+			* which is the part the user came for; credits, check-in and the selected
+			* account's live figures arrive with the full document that follows.
+			*
+			* Deliberately a SEPARATE callback instead of a `detail` argument on
+			* `refreshUsage`: the ordering guard inside that callback is pinned by a
+			* source test that counts its writes and freshness checks, and a second
+			* write path in there would either break the pin or hide a real regression
+			* behind it. Here the rules are simple and independent — this response never
+			* downgrades a region that has already answered in full.
+			*/
+			const refreshUsageFast = (0, react.useCallback)(async (region, signal) => {
+				const stale = usageGuard.current.begin(region);
+				try {
+					const response = await fetch(withWorkBuddyRegionFastDetail(WORKBUDDY_USAGE_PATH, region), {
+						headers: { accept: "application/json" },
+						credentials: "same-origin",
+						...signal === void 0 ? {} : { signal }
+					});
+					if (!response.ok) return;
+					const usage = await response.json().catch(() => void 0);
+					if (usage === void 0) return;
+					if (stale()) return;
+					if (!mounted.current || signal?.aborted === true) return;
+					setStatusByRegion((prev) => {
+						const previous = prev[region];
+						if (previous !== void 0 && previous.status === "signed-in") return prev;
+						return {
+							...prev,
+							[region]: usage
+						};
+					});
+				} catch {}
+			}, []);
 			(0, react.useEffect)(() => {
 				if (!open) return;
 				const controller = new AbortController();
-				for (const region of WORKBUDDY_REGIONS) refreshUsage(region, controller.signal);
+				(async () => {
+					await Promise.all(WORKBUDDY_REGIONS.map(async (region) => {
+						await refreshUsageFast(region, controller.signal);
+					}));
+					if (controller.signal.aborted) return;
+					for (const region of WORKBUDDY_REGIONS) refreshUsage(region, controller.signal);
+				})();
 				return () => {
 					controller.abort();
 				};
 			}, [
 				open,
 				activeRegion,
-				refreshUsage
+				refreshUsage,
+				refreshUsageFast
 			]);
-			const status = statusByRegion[activeRegion] ?? {
+			/**
+			* The document this tab is rendering, or `undefined` before ANY has landed.
+			*
+			* The distinction is the point of issue #77: an absent document used to be
+			* rendered as the `signed-out` placeholder below, so for the whole time the
+			* usage route was out the card told a signed-in user they were not signed in
+			* and offered "detect accounts" as the only remedy. `loading` now gates that
+			* branch, and the placeholder is only a safe shape for the reads below it.
+			*/
+			const loaded = statusByRegion[activeRegion];
+			const loading = loaded === void 0;
+			const status = loaded ?? {
 				status: "signed-out",
 				accounts: [],
 				selectionExplicit: false
@@ -5795,7 +5882,12 @@ window.__ModuleLoader__.load({
 									})
 								})
 							] }) : null,
-							status.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+							status.status === "signed-out" && loading ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dsm-workbuddy-usage-text",
+								role: "status",
+								children: t("row.accountsLoading")
+							}) : null,
+							status.status === "signed-out" && !loading ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 									className: "dsm-workbuddy-usage-text",
 									children: signedOutText(notice, t)
@@ -6854,6 +6946,7 @@ window.__ModuleLoader__.load({
 			"row.accountsHint": "Choose from locally detected sign-ins. Tokens are never shown or saved in DSH settings.",
 			"row.accountsRescan": "Detect accounts again",
 			"row.accountsScanning": "Detecting…",
+			"row.accountsLoading": "Loading your accounts…",
 			"row.accountsWriteFailed": "The account change was not saved: {message} — the active profile's configuration file could not be updated (on Windows it may be locked by an antivirus scanner or a sync client). Your previous choice is still in effect; close whatever holds that file and try again (see docs/WINDOWS.md in the plugin repo for the exact path).",
 			"row.selectionLostHint": "The saved account no longer exists locally.",
 			"row.selectionLostMessage": "The account saved for this region is no longer among the local sign-ins (WorkBuddy replaced its login or cleaned up backups). Your other sign-ins are fine — pick a current one from the list above. Signing in again in the desktop app will not fix this.",
@@ -7166,6 +7259,7 @@ window.__ModuleLoader__.load({
 			"row.accountsHint": "选择本机检测到的登录账号；Token 不会显示，也不会保存到 DSH 设置。",
 			"row.accountsRescan": "重新检测账号",
 			"row.accountsScanning": "正在检测…",
+			"row.accountsLoading": "正在加载账号…",
 			"row.accountsWriteFailed": "账号改动未保存：{message} —— 当前 profile 的配置文件写入失败（Windows 上可能被杀毒软件或同步盘占用）。当前仍是原来保存的选择，请先关闭占用该文件的程序再重试（文件的确切路径见插件仓库的 docs/WINDOWS.md）。",
 			"row.selectionLostHint": "已保存的账号在本机已不存在。",
 			"row.selectionLostMessage": "该区域保存的账号已不在本机登录列表中（WorkBuddy 更换了登录或清理了备份文件）。本机其他登录仍然可用——请在上方列表中重新选择一个当前账号。重新登录桌面端 App 无法修复此问题。",

package/lib/{host-heartbeat-DSMmEhuD.js → host-heartbeat-BHaBzzOr.js}

@@ -3966,7 +3966,7 @@ function generationOf(version) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "4.9.2";
+const WORKBUDDY_CONNECT_VERSION = "4.9.3";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -3079,6 +3079,23 @@ interface WorkBuddyPoolDeps {
   };
   /** One region's CHECKED accounts, plus their credits and last measurements. */
   members(region: WorkBuddyRegion): Promise<readonly WorkBuddyPoolMember[]>;
+  /**
+   * One region's CHECKED accounts from LOCAL state only — the first-paint
+   * source (issue #77).
+   *
+   * Cheap by contract in the strongest sense: no upstream read at all. It
+   * returns the saved members with whatever credit reading a previous full
+   * document already recorded (a snapshot, possibly minutes old, possibly
+   * absent), so the card can paint the account table before any billing
+   * endpoint answers. `credits` being absent is normal here and renders as "—",
+   * which is why {@link WorkBuddyWebPoolAccount} makes every figure optional.
+   *
+   * A Host built without it degrades to omitting the pool block from a
+   * first-paint document (rather than paying {@link members} on that path):
+   * the card then paints its account list from the full document, exactly as
+   * before this contract existed.
+   */
+  localMembers?(region: WorkBuddyRegion): Promise<readonly WorkBuddyPoolMember[]>;
   /**
    * The checked accounts that actually RESOLVE to a local sign-in.
    *
@@ -3126,6 +3143,16 @@ interface WorkBuddyPoolDeps {
    * Only the CN region has a check-in to report; see {@link checkinSupported}.
    */
   checkedInToday?(region: WorkBuddyRegion): Promise<Readonly<Record<string, boolean>>>;
+  /**
+   * Today's check-in state, from the cells already measured this process.
+   *
+   * The first-paint counterpart of {@link checkedInToday}: reads the Host's
+   * measurement cache and nothing else, so a first paint never waits on one
+   * upstream request per account. An account it has not measured is simply
+   * absent, which the card renders as unknown — the same meaning as a failed
+   * per-account read in the full document.
+   */
+  cachedCheckedInToday?(region: WorkBuddyRegion): Readonly<Record<string, boolean>>;
   /**
    * Every local sign-in the pool does NOT cover, so the card can offer them to
    * check in. Absent means the card lists only pool members.
@@ -3172,14 +3199,36 @@ interface WorkBuddyPoolDeps {
   /** The region's live catalog, used to resolve the free target model. */
   catalog?(region: WorkBuddyRegion): readonly WorkBuddyModelInfo[];
 }
+/**
+ * How much live measurement a status document carries (issue #77).
+ *
+ * `full` is the original answer: the selected account's credit and check-in
+ * plus every pool account's credit and check-in, all read from upstream now.
+ * It is what the card's 60-second poll, the composer panel and every
+ * measurement-driven control expect.
+ *
+ * `fast` is the FIRST PAINT. It answers from local state only — no token
+ * refresh, no billing endpoint, no check-in endpoint — so the account list can
+ * render in the first round trip and cannot be held up by a slow or
+ * rate-limited upstream. Live figures are absent from it by construction; the
+ * card then asks for the full document and upgrades the same snapshot.
+ */
+type WorkBuddyStatusDetail = 'full' | 'fast';
 /**
  * Assemble one region's card document. `region` is the tab the card is on;
  * the region-scoped store already answers with only that region's accounts,
  * so the document's model slots and account list are that region's by
  * construction. Sign-in state is read-only; credit is a live billing answer
  * whose failure degrades to `creditsError` rather than failing the document.
+ *
+ * `options.detail` selects the first-paint variant: it uses the credential
+ * already known locally instead of resolving (resolving may refresh a token
+ * over the network) and skips {@link liveFigures} entirely, so nothing about
+ * the account list depends on how fast a billing endpoint answers.
  */
-declare function workBuddyWebStatus(deps: WorkBuddyStatusRouteOptions, region: WorkBuddyRegion): Promise<WorkBuddyWebUsage>;
+declare function workBuddyWebStatus(deps: WorkBuddyStatusRouteOptions, region: WorkBuddyRegion, options?: {
+  detail?: WorkBuddyStatusDetail;
+}): Promise<WorkBuddyWebUsage>;
 /**
  * Mount the read-only routes on a context where `webServer` is available.
  * The caller uses `ctx.inject(['webServer'], ...)`, so Desktop startup order

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as isEncryptedFieldWrapper, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as deriveAtRestKey, K as WORKBUDDY_APP_EXECUTABLE_ENV, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as fetchAtRestKeyPayload, Y as deriveAtRestKeyId, Z as findWorkbuddyAppExecutable, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as workbuddyAppExecutableCandidates, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as withFileLock, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as isWorkbuddyBundle, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, it as readAtRestKey, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as writeFileAtomic, m as deriveCatalog, n as clearHostHeartbeat, nt as macosNestedAppBundles, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as clearAtRestKeyCache, r as isHeartbeatProcessAlive, rt as openEncryptedField, s as writeHostHeartbeat, st as resolveDshHome, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as macosBundleExecutable, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-DSMmEhuD.js";
+import { $ as isEncryptedFieldWrapper, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as deriveAtRestKey, K as WORKBUDDY_APP_EXECUTABLE_ENV, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as fetchAtRestKeyPayload, Y as deriveAtRestKeyId, Z as findWorkbuddyAppExecutable, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as workbuddyAppExecutableCandidates, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as withFileLock, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as isWorkbuddyBundle, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, it as readAtRestKey, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as writeFileAtomic, m as deriveCatalog, n as clearHostHeartbeat, nt as macosNestedAppBundles, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as clearAtRestKeyCache, r as isHeartbeatProcessAlive, rt as openEncryptedField, s as writeHostHeartbeat, st as resolveDshHome, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as macosBundleExecutable, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-BHaBzzOr.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, readFile, writeFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -4829,6 +4829,34 @@ function withWorkBuddyRegion(path, region) {
 	return `${path}?${WORKBUDDY_REGION_PARAM}=${region}`;
 }
 /**
+* Query parameter selecting how much of a status document the Host assembles.
+*
+* The card's first paint only needs what local state already knows; live
+* figures (credit, check-in, per-account readings) arrive through the SAME
+* route once they have been measured. See {@link WORKBUDDY_DETAIL_FAST}.
+*/
+const WORKBUDDY_DETAIL_PARAM = "detail";
+/**
+* The `detail` value asking for the first-paint document.
+*
+* Absent means the full document, which is what every earlier caller asks for
+* and what the route keeps answering — the parameter only ever ADDS a cheap
+* mode, it never changes an existing one.
+*/
+const WORKBUDDY_DETAIL_FAST = "fast";
+/**
+* Whether a status-route URL asks for the first-paint document.
+*
+* Only the exact `fast` value is recognized: an unknown or misspelled value
+* degrades to the full document, which is what every earlier caller already
+* gets. A typo must never produce an emptier panel than no parameter at all.
+*/
+function fastDetailOf(url) {
+	const at = url.indexOf("?");
+	if (at === -1) return false;
+	return new URLSearchParams(url.slice(at + 1)).get(WORKBUDDY_DETAIL_PARAM) === WORKBUDDY_DETAIL_FAST;
+}
+/**
 * Read the region parameter off a status-route URL. Absent means the domestic
 * tab (`cn`); a present-but-unknown value returns undefined so the route can
 * answer 400 instead of guessing.
@@ -5156,13 +5184,42 @@ async function workBuddyAccountCredits(deps, region) {
 	}));
 }
 /**
+* Read the selected account's live figures, and classify a refusal.
+*
+* Extracted so the first-paint path can omit it as a unit: the two calls here
+* are the ones that used to gate the account list (each up to the upstream
+* client's 30-second ceiling, and the pool adds one pair per member on top).
+*/
+async function liveFigures(deps, region, credential, selected) {
+	const [creditsResult, checkinResult] = await Promise.allSettled([deps.client.fetchCredits(credential), deps.client.fetchCheckinStatus(credential)]);
+	const rejected = [creditsResult, checkinResult].some((result) => result.status === "rejected" && isCredentialRejectedError(result.reason));
+	const recovery = !rejected ? void 0 : await resolveCredentialRecovery({
+		region,
+		store: deps.store(region),
+		...selected === void 0 ? {} : { rejectedAccountId: selected.id },
+		probe: deps.accountUsable ?? (async () => false)
+	});
+	return {
+		...creditsResult.status === "fulfilled" ? { credits: toCredits(creditsResult.value) } : { creditsError: safeMessage(creditsResult.reason) },
+		...checkinResult.status === "fulfilled" ? { checkin: checkinResult.value } : { checkinError: safeMessage(checkinResult.reason) },
+		...!rejected ? {} : { credentialRejected: true },
+		...recovery === void 0 ? {} : { recovery }
+	};
+}
+/**
 * Assemble one region's card document. `region` is the tab the card is on;
 * the region-scoped store already answers with only that region's accounts,
 * so the document's model slots and account list are that region's by
 * construction. Sign-in state is read-only; credit is a live billing answer
 * whose failure degrades to `creditsError` rather than failing the document.
+*
+* `options.detail` selects the first-paint variant: it uses the credential
+* already known locally instead of resolving (resolving may refresh a token
+* over the network) and skips {@link liveFigures} entirely, so nothing about
+* the account list depends on how fast a billing endpoint answers.
 */
-async function workBuddyWebStatus(deps, region) {
+async function workBuddyWebStatus(deps, region, options = {}) {
+	const fast = options.detail === "fast";
 	const store = deps.store(region);
 	const accounts = await store.accounts();
 	deps.regionUsable?.(region, accounts.length > 0);
@@ -5180,7 +5237,8 @@ async function workBuddyWebStatus(deps, region) {
 	};
 	let credential;
 	try {
-		credential = await store.resolve();
+		credential = fast ? await store.current() : await store.resolve();
+		if (credential === void 0) credential = await store.resolve();
 	} catch (error) {
 		const webAccounts = accounts.map(toWebAccount);
 		return {
@@ -5213,14 +5271,7 @@ async function workBuddyWebStatus(deps, region) {
 		imageModelIds: [...deps.imageModelIds(region)],
 		offModelIds: [...deps.offModelIds(region)]
 	};
-	const [creditsResult, checkinResult] = await Promise.allSettled([deps.client.fetchCredits(credential), deps.client.fetchCheckinStatus(credential)]);
-	const rejected = [creditsResult, checkinResult].some((result) => result.status === "rejected" && isCredentialRejectedError(result.reason));
-	const recovery = !rejected ? void 0 : await resolveCredentialRecovery({
-		region,
-		store: deps.store(region),
-		...selected === void 0 ? {} : { rejectedAccountId: selected.id },
-		probe: deps.accountUsable ?? (async () => false)
-	});
+	const figures = fast ? {} : await liveFigures(deps, region, credential, selected);
 	return {
 		status: "signed-in",
 		contextBudgets: Object.fromEntries(Object.entries(deps.contextBudgets(region)).filter(([, value]) => typeof value === "number")),
@@ -5230,18 +5281,22 @@ async function workBuddyWebStatus(deps, region) {
 			authFile: volatileFlagOf("authFile")
 		},
 		...account,
-		...creditsResult.status === "fulfilled" ? { credits: toCredits(creditsResult.value) } : { creditsError: safeMessage(creditsResult.reason) },
-		...checkinResult.status === "fulfilled" ? { checkin: checkinResult.value } : { checkinError: safeMessage(checkinResult.reason) },
-		...!rejected ? {} : { credentialRejected: true },
-		...recovery === void 0 ? {} : { recovery },
-		...await poolSectionOf(deps, region)
+		...figures,
+		...await poolSectionOf(deps, region, fast)
 	};
 }
-/** The pool block for a status document, or nothing when it cannot be built. */
-async function poolSectionOf(deps, region) {
+/**
+* The pool block for a status document, or nothing when it cannot be built.
+*
+* `fast` asks for the first-paint variant: local state only, no upstream call.
+* A Host without a local member source then omits the block rather than paying
+* the full read, so a first-paint document never regresses into the expensive
+* path this mode exists to avoid.
+*/
+async function poolSectionOf(deps, region, fast) {
 	if (deps.pool === void 0) return {};
 	try {
-		const pool = await workBuddyWebPool(deps, region);
+		const pool = await workBuddyWebPool(deps, region, fast);
 		return pool === void 0 ? {} : { pool };
 	} catch {
 		return {};
@@ -5260,11 +5315,12 @@ async function poolSectionOf(deps, region) {
 * SHOULD serve, `current` says who IS serving. Marking the winner as current
 * would make the card claim a switch that may not have been applied yet.
 */
-async function workBuddyWebPool(deps, region) {
+async function workBuddyWebPool(deps, region, fast = false) {
 	const pool = deps.pool;
 	if (pool === void 0) return void 0;
 	const preferences = pool.preferences(region);
-	const members = await pool.members(region);
+	const members = fast ? await pool.localMembers?.(region) : await pool.members(region);
+	if (members === void 0) return void 0;
 	const ranked = rankPool(members, Date.now(), preferences.orderAccountIds);
 	const catalog = pool.catalog?.(region) ?? [];
 	const target = resolveTargetModel(catalog, preferences.targetModelId);
@@ -5272,7 +5328,7 @@ async function workBuddyWebPool(deps, region) {
 	const byId = new Map(members.map((member) => [member.account.id, member]));
 	const rankedIds = new Set(ranked.map((row) => row.account.id));
 	const others = await pool.otherAccounts?.(region) ?? [];
-	const checkedIn = await pool.checkedInToday?.(region).catch(() => ({})) ?? {};
+	const checkedIn = fast ? pool.cachedCheckedInToday?.(region) ?? {} : await pool.checkedInToday?.(region).catch(() => ({})) ?? {};
 	const rows = [...ranked.map((row) => ({
 		account: row.account,
 		member: true,
@@ -5379,8 +5435,9 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 				}
 				const region = requestRegion(req, res);
 				if (region === void 0) return;
+				const detail = fastDetailOf(req.url ?? "") ? "fast" : "full";
 				try {
-					json(res, 200, await workBuddyWebStatus(deps, region));
+					json(res, 200, await workBuddyWebStatus(deps, region, { detail }));
 				} catch (error) {
 					json(res, 500, { error: safeMessage(error) });
 				}
@@ -6451,6 +6508,19 @@ function apply(ctx, config) {
 			preferences: (region) => poolPreferencesOf(current(), region),
 			members: (region) => poolMembersOf(region),
 			/**
+			* The first-paint member list (issue #77): local state only.
+			*
+			* This is `localPoolMembers`, i.e. the SAME list the request path already
+			* consults — saved members, their last credit snapshot (if it is still
+			* fresh), and their last probe result. No upstream call, so the card's
+			* account table can paint before any billing endpoint answers; live
+			* figures arrive with the full document a moment later.
+			*
+			* A member whose credit snapshot has expired simply carries no `credits`,
+			* which the card renders as "—" rather than as zero.
+			*/
+			localMembers: (region) => localPoolMembers(region),
+			/**
 			* The checked accounts that resolve to a local sign-in.
 			*
 			* A local scan only — no upstream calls — so the route's empty-pool guard
@@ -6527,6 +6597,25 @@ function apply(ctx, config) {
 				}));
 				return Object.fromEntries(entries.filter((entry) => entry !== void 0));
 			},
+			/**
+			* Today's check-in state from the cells already measured this process.
+			*
+			* The first-paint counterpart (issue #77) of `checkedInToday`: it reads
+			* `checkinStateCache` and nothing else, so painting the table never waits
+			* on one request per account. An unmeasured account is absent, which the
+			* card already renders as unknown rather than as "not checked in".
+			*/
+			cachedCheckedInToday(region) {
+				if (!poolPreferencesOf(current(), region).enabled) return {};
+				const now = Date.now();
+				const state = checkinStateCache[region] ?? {};
+				const cached = {};
+				for (const [accountId, entry] of Object.entries(state)) {
+					if (now - entry.atMs >= CHECKIN_CACHE_MS) continue;
+					cached[accountId] = entry.checkedIn;
+				}
+				return cached;
+			},
 			async currentAccountId(region) {
 				await applyPoolSelection(region).catch(() => void 0);
 				const credential = await stacks[region].store.current().catch(() => void 0);

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型接入 DeepSeek Harness，并提供只读的积分概览与模型管理。",
-  "version": "4.9.2",
+  "version": "4.9.3",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",