dsh-connect-workbuddy 4.9.2 → 4.9.4

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## 4.9.4 (2026-10-19)
+
+> 版本号是 **patch**：只改**错误文案的取材方式**，发往上游的请求体、路由 id、模型 id、凭据、计费与换号规则一律未变（换号规则的变化只有一处「不再多问一次」的减少，见下）。但它修的是一个**会把人送去查错地方**的故障——一个普通的 400 被渲染成「账号池空了」，而上游唯一那句可执行建议被截断丢掉。
+
+### Fixes
+
+- **issue #78：400/11133 被渲染成「池中其余账号本次请求都已尝试过」，且 `displayTips` 被 400 字截断丢弃**
+  - **原来错在哪**：三个缺陷叠在同一行错误里。
+    1. **描述了一次从未发生的账号遍历**。`isFailoverWorthy()` 明确排除 `client`（同一个请求体换哪个账号都是 400），换号循环因此一次都没跑；但通用分支判断「要不要问池子要解释」用的条件是**回调是否存在**，而真实宿主两个回调都给了。于是 `explainPoolShortfall()` 被问了一次，它看到池里每个成员都健康（400 不记账号故障）、`excluded.length === 0`，命中那条分支返回「池中其余账号本次请求都已尝试过」——**池子其实没被问过任何候选**。句中再加上尾部固定的「池中没有其他可用账号」，整句读起来就是「账号用完了/额度耗尽了」，而真实原因是请求参数。
+    2. **`displayTips` 从未被解析**。`parseUpstreamErrorDetail()` 只取 `code`/`requestId`/`displayMsg`；通用分支把 `result.message.slice(0, 400)` 直接拼进用户可见文本，而这类报文 637–777 字符，前 400 字符全是 `code`/`requestId`/`extError` 的骨架（`param: ""`、`Request: null`），那句「请新建任务、换个模型或稍后重试」必然落在截断之外。报告者看到的回复停在 `Pleas` 中间。
+    3. **状态码印两次**。`failoverReasonText()` 的 `default` 回「不可用（http 400）」，而调用方自己又拼了一次「（http 400）」。
+  - **为什么测试没抓住**：既有测试全都用**不带 `displayTips`** 的报文（#56 的 14003、#51 的策略拒绝），所以「可执行建议被截断」这件事在夹具里根本不存在；而「问了没问池子」只被间接覆盖——`shortfall` 回调存在的用例恰好都是有换号的用例，于是「有没有问」和「该不该问」在测试里始终是同一个问题。状态码重复更无从断言：**没有任何测试读过用户看到的那一行**，只断言过 `detail` 字段本身。
+  - **现在的形状**：
+    - `UpstreamErrorDetail` 增加 `tips?: string`，`parseUpstreamErrorDetail()` 用同一个 `localizedText()` 读 `displayTips` 与 `displayMsg`（字符串与 `{ zh, en }` 两种形态都接受）。两个字段分开存：`displayMsg` 说「错在哪」，`displayTips` 说「该怎么办」——合并会让其中一个失去自己的意思。
+    - 通用分支的正文改成 `detail.tips ?? detail.displayMsg ?? clippedUpstreamText(message, 400)`，`code`/`requestId` 收进紧凑后缀「（code 11133，requestId 33221fe5-…）」（support 要的就是这两个，此前只能从被切碎的 JSON 里自己找）。`clippedUpstreamText()` 压平空白、超长时优先在句末断开并补 `…`——它**只**接住解析不出来的报文（非 JSON 网关页），有 `detail` 的报文永远走不到它。
+    - `failoverReasonText()` 增加 `case 'client': return '请求被上游拒绝'`，`default` 改为 `'不可用'`（不再自带状态码）。另两个分支（`policy_reject` / `model_busy`）里同样的 `slice(0, 200)` 也换成 `clippedUpstreamText()`，形状统一。
+    - **问池子的条件改为「真的搜过」**：`failoverShortfall !== undefined && failoverAccount !== undefined && isFailoverWorthy(result.kind)`。`client` 与 `model_busy` 两类不再触发那次排序（它们本来就不换号，问出来的答案必然是假的）；`client` 另给一句正确的建议——「该请求被上游按参数拒绝：与网络、账号、额度都无关，换账号也不会改变结果」。
+  - **同一份报文现在渲染为**（177 字符，原来是 490）：
+    ```
+    workbuddy 上游失败：请求被上游拒绝（http 400）（code 11133，requestId 33221fe5-f6d5-4ea1-8882-669411e07a5b）。这次对话的内容这个模型不接受，与网络无关。请新建任务、换个模型或稍后重试。该请求被上游按参数拒绝：与网络、账号、额度都无关，换账号也不会改变结果，请按上面的提示调整后重试
+    ```
+  - **测试**：新增 `tests/upstream-error-copy.spec.ts`（12 例）。它**不测 helper 而测渲染出来的那句话**——helper 只值它换来的用户可见结果，且 `detail` 由真实的 `parseUpstreamErrorDetail()` 产出，所以解析与渲染是一起被覆盖的（手搓 `detail` 的夹具可以在解析坏掉时仍然是绿的）。用例含：报告者那份 11133 报文逐字节渲染出上游建议、`message` 里**没有** `extError`/`"requestId"` 等骨架、长度 < 300、`（http 400）` 恰好出现**一次**（数出来的，因为「含有 http 400」对坏文案也成立）、`client` 失败时 shortfall 回调**调用次数为 0**且不出现两句池子术语、429 这类**会**换号的失败仍然既问池子又打印池子的结论并保留上游的重置时间、超长非 JSON 页补 `…` 且长度有界、短的非 JSON 页原样显示且不加 `…`、以及 `policy_reject`/`model_busy` 两个分支的文案不回归。删掉 `tips` 的解析、或把「问池子」的条件改回看回调是否存在，这组里都有用例会失败——已实测确认判别力。
+  - **刻意没做的**：没有改 `explainPoolShortfall()` 本身（它那句「池中其余账号本次请求都已尝试过」在**真的**搜过池子之后是诚实的，问题在于以前没搜过也会被问）；没有把 `triedAccountIds` 传进 shortfall 回调（`tests/pool-e2e.spec.ts` 有源码文本守卫固定 `explainPoolShortfall(region)` 这个调用形状，且现有签名「不从 shim 接收参数」是 `src/index.ts:837-844` 写明的设计）；没有改 400 的换号策略本身——它本来就是对的，错的是文案在描述一次没发生的换号。
+
+## 4.9.3 (2026-10-19)
+
+> 版本号是 **patch**：新增一个**可选**的查询参数（`detail=fast`）和一条**只读**的本地取数路径；不带参数的老请求逐字节不变，发往上游的请求体、路由 id、模型 id、凭据与配置项一律未改。但**它修的是一个用户可见的等待**——打开设置页后要等半分钟到一分钟才出现账号列表。
+
+### Fixes
+
+- **issue #77：打开设置页要等 30–60 秒才出现各个账号**
+  - **原来错在哪**：卡片的账号列表来自**一份**用量文档，而这份文档的**末尾**要等一串上游读取——账号池每个成员一次 `fetchCredits`、每个账号一次 `fetchCheckinStatus`、当前账号自己再一次 `fetchCredits` + `fetchCheckinStatus`。每次上游调用超时是 `JSON_TIMEOUT_MS = 30_000`（`src/upstream.ts`）且**没有重试**，于是慢一点的上游把等待叠成 30–60 秒。更糟的是这段时间里卡片渲染的是 `signed-out` 占位（说是「未登录」并给出「重新检测账号」按钮）——**报告者截图里看到的正是这个占位**，一个已经登录、池里有一堆账号的用户被告知未登录。
+  - **为什么 4.6.7 显得快**：那版还没有账号池的逐账号读数和签到读数（`poolMembersOf` 的逐成员积分读、`checkedInToday` 的逐账号签到读都是更早的提交引入的，但**卡片等整份文档**这个形状把它们的代价直接变成了首屏代价）；不是 4.9.x 新增了扇出，而是 4.9.x 的功能让这份文档变得更长。所以修法不是微调超时，而是**把首屏和计费读解耦**。
+  - **现在的形状**：
+    - **服务端**：用量路由接受 `detail=fast`（`src/status-paths.ts` 的 `withWorkBuddyRegionFastDetail` / `fastDetailOf`），快速文档**只读本地状态**——凭据用 `store.current()`（不触发 token 刷新），实时数字（`credits` / `checkin` / `credentialRejected` / `recovery`）整块省略，账号池成员取自新增的 `localMembers`（就是请求路径本来就在用的 `localPoolMembers`，**零上游调用**），签到状态取自本进程已有的测量缓存 `cachedCheckedInToday`。**不带参数的行为一字未变**：未知或拼错的 `detail` 值一律退回完整文档，绝不会变成一份更空的卡片。
+    - **客户端**：先取 `detail=fast` 把账号表格画出来，再照旧取完整文档补上积分与签到。快速文档**永远不会覆盖**已经拿到完整文档的区域（它更穷，覆盖会把已显示的列抹成「—」）。在这之前（两份都还没回来）渲染 `row.accountsLoading`「正在加载账号…」，**不再假称未登录**。
+    - **为什么快速文档仍然带账号池块**：`AccountPool` 在没有 `pool` 块时返回 `null`，账号行就来自那里——首屏要「出现各个账号」，这个块就是必须的。它现在由本地花名册生成，不再等积分读数。
+  - **测试**：`tests/issue77-fast-first-paint.spec.ts` 在**路由层**断言快速文档**一次上游调用都不发**（积分/签到客户端被换成会抛错的桩，快速文档仍然成功），以及 `detail` 的解析只认精确的 `fast`、其余值全部退回完整文档，并保留完整文档行为不变的用例。`tests/issue77-card-first-paint.spec.tsx` 在**渲染层**用「完整文档永不返回」的桩挂载真实卡片，断言账号行**照样出现**、且不出现「未登录」文案；同时断言全部未返回时显示加载行，以及迟到的快速文档不会覆盖已加载的完整文档。删掉快速路径或让卡片等完整文档，这两组都会失败——已实测确认判别力。
+  - **刻意没做的**：没有给上游调用加重试或缩短超时（那只是把 30 秒变成另一种 30 秒）；没有把 `poolMembersOf` 从完整文档里拿掉（完整文档仍然需要真实积分）；没有让快速文档在宿主不支持时触发那次昂贵读取（缺 `localMembers` 就省略账号池块，宁可少画一行也不拖慢首屏）。
+
 ## 4.9.2 (2026-10-19)
 
 > 版本号是 **patch**：只改 `profiles` 里多登记一个注册表键，外加文档与注释；发往上游的请求体、路由 id、模型 id、模型选择器、目录与凭据一律未变。但**它修的是一个整区不可用的故障**——4.9.0/4.9.1 期间国际版（`workbuddy-global`）的每一个请求都在发出前失败。

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as defaultDesktopAuthDirs, F as WorkBuddyUpstreamClient, K as WORKBUDDY_APP_EXECUTABLE_ENV, O as legacyWorkbuddyOwnAuthPath, Q as findWorkbuddyAppExecutableWithSource, S as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, j as workbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, ot as hostPeersInfo, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, y as WorkBuddyCredentialStore } from "./host-heartbeat-DSMmEhuD.js";
+import { C as defaultDesktopAuthDirs, F as WorkBuddyUpstreamClient, K as WORKBUDDY_APP_EXECUTABLE_ENV, O as legacyWorkbuddyOwnAuthPath, Q as findWorkbuddyAppExecutableWithSource, S as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, j as workbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, ot as hostPeersInfo, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, y as WorkBuddyCredentialStore } from "./host-heartbeat-BpArQi1Q.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/client.js

@@ -123,6 +123,33 @@ window.__ModuleLoader__.load({
 			return `${path}?${WORKBUDDY_REGION_PARAM}=${region}`;
 		}
 		/**
+		* Query parameter selecting how much of a status document the Host assembles.
+		*
+		* The card's first paint only needs what local state already knows; live
+		* figures (credit, check-in, per-account readings) arrive through the SAME
+		* route once they have been measured. See {@link WORKBUDDY_DETAIL_FAST}.
+		*/
+		const WORKBUDDY_DETAIL_PARAM = "detail";
+		/**
+		* The `detail` value asking for the first-paint document.
+		*
+		* Absent means the full document, which is what every earlier caller asks for
+		* and what the route keeps answering — the parameter only ever ADDS a cheap
+		* mode, it never changes an existing one.
+		*/
+		const WORKBUDDY_DETAIL_FAST = "fast";
+		/**
+		* Address one region's status route for its first-paint document.
+		*
+		* The Host answers this from local state only (no upstream read, no token
+		* refresh), so a slow billing endpoint cannot decide when the account list
+		* appears. The card paints it first and then upgrades the same snapshot from
+		* the full document.
+		*/
+		function withWorkBuddyRegionFastDetail(path, region) {
+			return `${withWorkBuddyRegion(path, region)}&${WORKBUDDY_DETAIL_PARAM}=${WORKBUDDY_DETAIL_FAST}`;
+		}
+		/**
 		* Narrow a settings value to the `regions` map. Accepts EITHER the whole
 		* settings section (the Host's resolved `Config`) OR the `regions` map itself,
 		* and unwraps the former. This tolerance is deliberate: passing the whole
@@ -4612,23 +4639,16 @@ window.__ModuleLoader__.load({
 			/**
 			* Last-known usage per region, so tab dots survive tab switches.
 			*
-			* The placeholder carries `selectionExplicit: false` because that is the
-			* state the plugin documents as the default before any choice is saved. It
-			* is never rendered: the account picker and its state line only appear once
-			* a real fetch has populated `accounts`.
+			* EMPTY until a real document lands (issue #77). It used to be seeded with a
+			* `signed-out` placeholder, which was then rendered: for as long as the usage
+			* route took to answer — and that wait is exactly what #77 reports — a user
+			* with several signed-in accounts was told they were not signed in, with a
+			* "detect accounts" button as the only way out. An absent region now renders
+			* the loading line instead, and the first paint itself arrives from the
+			* `detail=fast` document (local state only, no upstream call), so the rows
+			* appear before anything billing-side has answered.
 			*/
-			const [statusByRegion, setStatusByRegion] = (0, react.useState)({
-				cn: {
-					status: "signed-out",
-					accounts: [],
-					selectionExplicit: false
-				},
-				global: {
-					status: "signed-out",
-					accounts: [],
-					selectionExplicit: false
-				}
-			});
+			const [statusByRegion, setStatusByRegion] = (0, react.useState)({});
 			const [busy, setBusy] = (0, react.useState)(false);
 			const [settingsRevision, setSettingsRevision] = (0, react.useState)(0);
 			/** Per-region unsaved model edits; a draft on one tab is never dropped by
@@ -4763,19 +4783,86 @@ window.__ModuleLoader__.load({
 					return;
 				}
 			}, [t]);
+			/**
+			* FIRST PAINT (issue #77): the same usage document, built from LOCAL state
+			* only — no billing request, no per-account check-in read.
+			*
+			* Why this exists. The card used to paint nothing until ONE monolithic
+			* document landed, and that document's tail awaited an upstream call per
+			* account (credits for every pool member, check-in for every account, plus
+			* the selected account's own two). Each of those has a 30-second timeout and
+			* no retry, so a slow or throttled upstream stacked the waits and the panel
+			* stayed empty for the reported 30–60 seconds — showing a "not signed in"
+			* placeholder the whole time, because that is what an absent document
+			* rendered as.
+			*
+			* The Host answers `detail=fast` from the credential store, the local pool
+			* roster and the measurement caches, so this is one local round trip. It
+			* carries the whole account table (the row list lives in the `pool` block),
+			* which is the part the user came for; credits, check-in and the selected
+			* account's live figures arrive with the full document that follows.
+			*
+			* Deliberately a SEPARATE callback instead of a `detail` argument on
+			* `refreshUsage`: the ordering guard inside that callback is pinned by a
+			* source test that counts its writes and freshness checks, and a second
+			* write path in there would either break the pin or hide a real regression
+			* behind it. Here the rules are simple and independent — this response never
+			* downgrades a region that has already answered in full.
+			*/
+			const refreshUsageFast = (0, react.useCallback)(async (region, signal) => {
+				const stale = usageGuard.current.begin(region);
+				try {
+					const response = await fetch(withWorkBuddyRegionFastDetail(WORKBUDDY_USAGE_PATH, region), {
+						headers: { accept: "application/json" },
+						credentials: "same-origin",
+						...signal === void 0 ? {} : { signal }
+					});
+					if (!response.ok) return;
+					const usage = await response.json().catch(() => void 0);
+					if (usage === void 0) return;
+					if (stale()) return;
+					if (!mounted.current || signal?.aborted === true) return;
+					setStatusByRegion((prev) => {
+						const previous = prev[region];
+						if (previous !== void 0 && previous.status === "signed-in") return prev;
+						return {
+							...prev,
+							[region]: usage
+						};
+					});
+				} catch {}
+			}, []);
 			(0, react.useEffect)(() => {
 				if (!open) return;
 				const controller = new AbortController();
-				for (const region of WORKBUDDY_REGIONS) refreshUsage(region, controller.signal);
+				(async () => {
+					await Promise.all(WORKBUDDY_REGIONS.map(async (region) => {
+						await refreshUsageFast(region, controller.signal);
+					}));
+					if (controller.signal.aborted) return;
+					for (const region of WORKBUDDY_REGIONS) refreshUsage(region, controller.signal);
+				})();
 				return () => {
 					controller.abort();
 				};
 			}, [
 				open,
 				activeRegion,
-				refreshUsage
+				refreshUsage,
+				refreshUsageFast
 			]);
-			const status = statusByRegion[activeRegion] ?? {
+			/**
+			* The document this tab is rendering, or `undefined` before ANY has landed.
+			*
+			* The distinction is the point of issue #77: an absent document used to be
+			* rendered as the `signed-out` placeholder below, so for the whole time the
+			* usage route was out the card told a signed-in user they were not signed in
+			* and offered "detect accounts" as the only remedy. `loading` now gates that
+			* branch, and the placeholder is only a safe shape for the reads below it.
+			*/
+			const loaded = statusByRegion[activeRegion];
+			const loading = loaded === void 0;
+			const status = loaded ?? {
 				status: "signed-out",
 				accounts: [],
 				selectionExplicit: false
@@ -5795,7 +5882,12 @@ window.__ModuleLoader__.load({
 									})
 								})
 							] }) : null,
-							status.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+							status.status === "signed-out" && loading ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dsm-workbuddy-usage-text",
+								role: "status",
+								children: t("row.accountsLoading")
+							}) : null,
+							status.status === "signed-out" && !loading ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 									className: "dsm-workbuddy-usage-text",
 									children: signedOutText(notice, t)
@@ -6854,6 +6946,7 @@ window.__ModuleLoader__.load({
 			"row.accountsHint": "Choose from locally detected sign-ins. Tokens are never shown or saved in DSH settings.",
 			"row.accountsRescan": "Detect accounts again",
 			"row.accountsScanning": "Detecting…",
+			"row.accountsLoading": "Loading your accounts…",
 			"row.accountsWriteFailed": "The account change was not saved: {message} — the active profile's configuration file could not be updated (on Windows it may be locked by an antivirus scanner or a sync client). Your previous choice is still in effect; close whatever holds that file and try again (see docs/WINDOWS.md in the plugin repo for the exact path).",
 			"row.selectionLostHint": "The saved account no longer exists locally.",
 			"row.selectionLostMessage": "The account saved for this region is no longer among the local sign-ins (WorkBuddy replaced its login or cleaned up backups). Your other sign-ins are fine — pick a current one from the list above. Signing in again in the desktop app will not fix this.",
@@ -7166,6 +7259,7 @@ window.__ModuleLoader__.load({
 			"row.accountsHint": "选择本机检测到的登录账号；Token 不会显示，也不会保存到 DSH 设置。",
 			"row.accountsRescan": "重新检测账号",
 			"row.accountsScanning": "正在检测…",
+			"row.accountsLoading": "正在加载账号…",
 			"row.accountsWriteFailed": "账号改动未保存：{message} —— 当前 profile 的配置文件写入失败（Windows 上可能被杀毒软件或同步盘占用）。当前仍是原来保存的选择，请先关闭占用该文件的程序再重试（文件的确切路径见插件仓库的 docs/WINDOWS.md）。",
 			"row.selectionLostHint": "已保存的账号在本机已不存在。",
 			"row.selectionLostMessage": "该区域保存的账号已不在本机登录列表中（WorkBuddy 更换了登录或清理了备份文件）。本机其他登录仍然可用——请在上方列表中重新选择一个当前账号。重新登录桌面端 App 无法修复此问题。",

package/lib/{host-heartbeat-DSMmEhuD.js → host-heartbeat-BpArQi1Q.js}

@@ -1095,6 +1095,23 @@ function classifyUpstreamError(status, body) {
 	return "client";
 }
 /**
+* Read one of the upstream's localized fields, in either shape it ships: a plain
+* string, or a `{ zh, en }` object.
+*
+* One reader for every such field on purpose. `displayMsg` and `displayTips`
+* arrive in the same two shapes from the same envelope, so parsing them with two
+* separate hand-rolled branches is how one of them ends up only handling the
+* object form (which is exactly what happened to `displayTips`: it was never
+* read at all, issue #78).
+*/
+function localizedText(value) {
+	if (typeof value === "string") return value;
+	if (typeof value !== "object" || value === null) return void 0;
+	const localized = value;
+	const pick = localized.zh ?? localized.en;
+	return typeof pick === "string" ? pick : void 0;
+}
+/**
 * Parse the known-good fields out of an upstream failure body. Non-JSON
 * bodies (HTML error pages, empty strings) yield undefined rather than a guess.
 */
@@ -1107,19 +1124,13 @@ function parseUpstreamErrorDetail(body) {
 	}
 	if (typeof parsed !== "object" || parsed === null) return void 0;
 	const raw = parsed;
-	let displayMsg;
-	const display = raw.displayMsg;
-	if (typeof display === "string") displayMsg = display;
-	else if (typeof display === "object" && display !== null) {
-		const localized = display;
-		const pick = localized.zh ?? localized.en;
-		if (typeof pick === "string") displayMsg = pick;
-	}
-	if (displayMsg === void 0 && typeof raw.msg === "string") displayMsg = raw.msg;
+	const displayMsg = localizedText(raw.displayMsg) ?? (typeof raw.msg === "string" ? raw.msg : void 0);
+	const tips = localizedText(raw.displayTips);
 	const detail = {};
 	if (typeof raw.code === "number") detail.upstreamCode = raw.code;
 	if (typeof raw.requestId === "string") detail.requestId = raw.requestId;
 	if (displayMsg !== void 0) detail.displayMsg = displayMsg;
+	if (tips !== void 0) detail.tips = tips;
 	return detail;
 }
 /**
@@ -3966,7 +3977,7 @@ function generationOf(version) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "4.9.2";
+const WORKBUDDY_CONNECT_VERSION = "4.9.4";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -754,6 +754,23 @@ interface UpstreamErrorDetail {
   requestId?: string;
   /** Best human-facing message: `displayMsg.zh`, falling back to `.en`, then `msg`. */
   displayMsg?: string;
+  /**
+   * What the upstream says to DO about it: `displayTips.zh`, falling back to
+   * `.en` (issue #78).
+   *
+   * Kept separate from {@link displayMsg} because the two answer different
+   * questions and both are needed: `displayMsg` names what was rejected
+   * ("模型无法处理此请求"), while `displayTips` names the REMEDY ("请新建任务、换个
+   * 模型或稍后重试"). The generic failure path used to discard it and render the
+   * raw body instead, whose first 400 characters are the `code`/`requestId`/
+   * `extError` skeleton — so the one actionable sentence was always cut off, and
+   * a plain parameter rejection read like an empty account pool.
+   *
+   * Recorded as data rather than folded into `displayMsg` so a caller that wants
+   * to tell the user what to change can do so without the "what went wrong"
+   * clause losing its own meaning.
+   */
+  tips?: string;
 }
 /**
  * Region for a login domain; an empty domain means CN (matching upstream tooling).
@@ -3079,6 +3096,23 @@ interface WorkBuddyPoolDeps {
   };
   /** One region's CHECKED accounts, plus their credits and last measurements. */
   members(region: WorkBuddyRegion): Promise<readonly WorkBuddyPoolMember[]>;
+  /**
+   * One region's CHECKED accounts from LOCAL state only — the first-paint
+   * source (issue #77).
+   *
+   * Cheap by contract in the strongest sense: no upstream read at all. It
+   * returns the saved members with whatever credit reading a previous full
+   * document already recorded (a snapshot, possibly minutes old, possibly
+   * absent), so the card can paint the account table before any billing
+   * endpoint answers. `credits` being absent is normal here and renders as "—",
+   * which is why {@link WorkBuddyWebPoolAccount} makes every figure optional.
+   *
+   * A Host built without it degrades to omitting the pool block from a
+   * first-paint document (rather than paying {@link members} on that path):
+   * the card then paints its account list from the full document, exactly as
+   * before this contract existed.
+   */
+  localMembers?(region: WorkBuddyRegion): Promise<readonly WorkBuddyPoolMember[]>;
   /**
    * The checked accounts that actually RESOLVE to a local sign-in.
    *
@@ -3126,6 +3160,16 @@ interface WorkBuddyPoolDeps {
    * Only the CN region has a check-in to report; see {@link checkinSupported}.
    */
   checkedInToday?(region: WorkBuddyRegion): Promise<Readonly<Record<string, boolean>>>;
+  /**
+   * Today's check-in state, from the cells already measured this process.
+   *
+   * The first-paint counterpart of {@link checkedInToday}: reads the Host's
+   * measurement cache and nothing else, so a first paint never waits on one
+   * upstream request per account. An account it has not measured is simply
+   * absent, which the card renders as unknown — the same meaning as a failed
+   * per-account read in the full document.
+   */
+  cachedCheckedInToday?(region: WorkBuddyRegion): Readonly<Record<string, boolean>>;
   /**
    * Every local sign-in the pool does NOT cover, so the card can offer them to
    * check in. Absent means the card lists only pool members.
@@ -3172,14 +3216,36 @@ interface WorkBuddyPoolDeps {
   /** The region's live catalog, used to resolve the free target model. */
   catalog?(region: WorkBuddyRegion): readonly WorkBuddyModelInfo[];
 }
+/**
+ * How much live measurement a status document carries (issue #77).
+ *
+ * `full` is the original answer: the selected account's credit and check-in
+ * plus every pool account's credit and check-in, all read from upstream now.
+ * It is what the card's 60-second poll, the composer panel and every
+ * measurement-driven control expect.
+ *
+ * `fast` is the FIRST PAINT. It answers from local state only — no token
+ * refresh, no billing endpoint, no check-in endpoint — so the account list can
+ * render in the first round trip and cannot be held up by a slow or
+ * rate-limited upstream. Live figures are absent from it by construction; the
+ * card then asks for the full document and upgrades the same snapshot.
+ */
+type WorkBuddyStatusDetail = 'full' | 'fast';
 /**
  * Assemble one region's card document. `region` is the tab the card is on;
  * the region-scoped store already answers with only that region's accounts,
  * so the document's model slots and account list are that region's by
  * construction. Sign-in state is read-only; credit is a live billing answer
  * whose failure degrades to `creditsError` rather than failing the document.
+ *
+ * `options.detail` selects the first-paint variant: it uses the credential
+ * already known locally instead of resolving (resolving may refresh a token
+ * over the network) and skips {@link liveFigures} entirely, so nothing about
+ * the account list depends on how fast a billing endpoint answers.
  */
-declare function workBuddyWebStatus(deps: WorkBuddyStatusRouteOptions, region: WorkBuddyRegion): Promise<WorkBuddyWebUsage>;
+declare function workBuddyWebStatus(deps: WorkBuddyStatusRouteOptions, region: WorkBuddyRegion, options?: {
+  detail?: WorkBuddyStatusDetail;
+}): Promise<WorkBuddyWebUsage>;
 /**
  * Mount the read-only routes on a context where `webServer` is available.
  * The caller uses `ctx.inject(['webServer'], ...)`, so Desktop startup order

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as isEncryptedFieldWrapper, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as deriveAtRestKey, K as WORKBUDDY_APP_EXECUTABLE_ENV, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as fetchAtRestKeyPayload, Y as deriveAtRestKeyId, Z as findWorkbuddyAppExecutable, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as workbuddyAppExecutableCandidates, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as withFileLock, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as isWorkbuddyBundle, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, it as readAtRestKey, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as writeFileAtomic, m as deriveCatalog, n as clearHostHeartbeat, nt as macosNestedAppBundles, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as clearAtRestKeyCache, r as isHeartbeatProcessAlive, rt as openEncryptedField, s as writeHostHeartbeat, st as resolveDshHome, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as macosBundleExecutable, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-DSMmEhuD.js";
+import { $ as isEncryptedFieldWrapper, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as deriveAtRestKey, K as WORKBUDDY_APP_EXECUTABLE_ENV, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as fetchAtRestKeyPayload, Y as deriveAtRestKeyId, Z as findWorkbuddyAppExecutable, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as workbuddyAppExecutableCandidates, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as withFileLock, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as isWorkbuddyBundle, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, it as readAtRestKey, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as writeFileAtomic, m as deriveCatalog, n as clearHostHeartbeat, nt as macosNestedAppBundles, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as clearAtRestKeyCache, r as isHeartbeatProcessAlive, rt as openEncryptedField, s as writeHostHeartbeat, st as resolveDshHome, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as macosBundleExecutable, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-BpArQi1Q.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, readFile, writeFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -2691,10 +2691,39 @@ function failoverReasonText(failure) {
 		case "policy_reject": return "被服务端策略拒绝";
 		case "not_found": return "模型不可用";
 		case "server": return "上游异常";
-		default: return `不可用（http ${failure.status}）`;
+		case "client": return "请求被上游拒绝";
+		default: return "不可用";
 	}
 }
 /**
+* One upstream sentence, made safe to paste into a single-line error message.
+*
+* `result.message` carries the WHOLE upstream body — for a classified failure
+* that is a JSON envelope 637–777 characters long whose first 400 characters are
+* the `code`/`requestId`/`extError` skeleton (`param: ""`, `Request: null`). A
+* plain `slice(0, 400)` therefore cut the one actionable sentence in half: the
+* reply ended mid-word at `Pleas` and the reader lost `displayTips` entirely
+* (issue #78).
+*
+* Two rules keep that from happening again:
+* - whitespace collapses to single spaces, because the body is JSON/HTML and its
+*   newlines would otherwise render as a ragged block inside one paragraph;
+* - the cut prefers a sentence boundary once one exists past the halfway point,
+*   so a clipped sentence reads as "truncated" instead of as broken prose, and
+*   the `…` always says the text continues.
+*
+* This is the LAST resort: a body that parsed into a `detail` with `displayMsg`
+* or `tips` never reaches it, and those are short by construction.
+*/
+function clippedUpstreamText(text, limit) {
+	const collapsed = text.replace(/\s+/gu, " ").trim();
+	if (collapsed.length <= limit) return collapsed;
+	const cut = collapsed.slice(0, limit);
+	const stop = Math.max(cut.lastIndexOf("。"), cut.lastIndexOf("！"), cut.lastIndexOf("？"), cut.lastIndexOf(". "), cut.lastIndexOf("! "), cut.lastIndexOf("? "));
+	if (stop >= Math.floor(limit / 2)) return `${cut.slice(0, stop + 1).trimEnd()}…`;
+	return `${cut.trimEnd()}…`;
+}
+/**
 * The line prepended to an answer that came from a failover account.
 *
 * Block-quoted and bracketed so it reads as machinery rather than as the model's
@@ -3094,11 +3123,11 @@ function createWorkBuddyShim(options) {
 		if (!result.ok) {
 			const attempts = triedAccountIds.length;
 			const note = attempts > 1 ? `（已尝试 ${attempts} 个账号）` : "";
-			const shortfall = failoverShortfall === void 0 ? void 0 : await failoverShortfall().catch(() => void 0);
+			const shortfall = failoverShortfall !== void 0 && failoverAccount !== void 0 && isFailoverWorthy(result.kind) ? await failoverShortfall().catch(() => void 0) : void 0;
 			const why = shortfall === void 0 ? "" : `：${shortfall}`;
 			if (result.kind === "policy_reject") {
 				const detail = result.detail;
-				const lead = detail?.displayMsg ?? result.message.slice(0, 200);
+				const lead = detail?.displayMsg ?? clippedUpstreamText(result.message, 200);
 				const meta = ["服务端策略拒绝"];
 				if (detail?.upstreamCode !== void 0) meta.push(`code ${detail.upstreamCode}`);
 				if (detail?.requestId !== void 0) meta.push(`requestId ${detail.requestId}`);
@@ -3108,7 +3137,7 @@ function createWorkBuddyShim(options) {
 			}
 			if (result.kind === "model_busy") {
 				const detail = result.detail;
-				const lead = detail?.displayMsg ?? result.message.slice(0, 200);
+				const lead = detail?.displayMsg ?? clippedUpstreamText(result.message, 200);
 				const meta = ["模型当前负载较高"];
 				if (detail?.upstreamCode !== void 0) meta.push(`code ${detail.upstreamCode}`);
 				if (detail?.requestId !== void 0) meta.push(`requestId ${detail.requestId}`);
@@ -3116,7 +3145,15 @@ function createWorkBuddyShim(options) {
 				writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, message, hostErrorCode(result.kind));
 				return;
 			}
-			writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, `workbuddy 上游失败：${failoverReasonText(result)}（http ${result.status}）${note}${why}。${result.message.slice(0, 400)}` + (failoverShortfall === void 0 ? "" : "。池中没有其他可用账号，建议换一个模型继续，或稍后等待该账号的额度恢复"), hostErrorCode(result.kind));
+			const detail = result.detail;
+			const meta = [];
+			if (detail?.upstreamCode !== void 0) meta.push(`code ${detail.upstreamCode}`);
+			if (detail?.requestId !== void 0) meta.push(`requestId ${detail.requestId}`);
+			const stamp = meta.length === 0 ? "" : `（${meta.join("，")}）`;
+			const receipt = detail?.tips ?? detail?.displayMsg ?? clippedUpstreamText(result.message, 400);
+			const advice = result.kind === "client" ? "该请求被上游按参数拒绝：与网络、账号、额度都无关，换账号也不会改变结果，请按上面的提示调整后重试" : shortfall === void 0 ? "" : "建议换一个模型继续，或稍后等待该账号的额度恢复";
+			const body = advice === "" ? receipt : `${receipt.replace(/[。.]$/u, "")}。${advice}`;
+			writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, `workbuddy 上游失败：${failoverReasonText(result)}（http ${result.status}）${note}${why}${stamp}。${body}`, hostErrorCode(result.kind));
 			return;
 		}
 		res.writeHead(200, {
@@ -4829,6 +4866,34 @@ function withWorkBuddyRegion(path, region) {
 	return `${path}?${WORKBUDDY_REGION_PARAM}=${region}`;
 }
 /**
+* Query parameter selecting how much of a status document the Host assembles.
+*
+* The card's first paint only needs what local state already knows; live
+* figures (credit, check-in, per-account readings) arrive through the SAME
+* route once they have been measured. See {@link WORKBUDDY_DETAIL_FAST}.
+*/
+const WORKBUDDY_DETAIL_PARAM = "detail";
+/**
+* The `detail` value asking for the first-paint document.
+*
+* Absent means the full document, which is what every earlier caller asks for
+* and what the route keeps answering — the parameter only ever ADDS a cheap
+* mode, it never changes an existing one.
+*/
+const WORKBUDDY_DETAIL_FAST = "fast";
+/**
+* Whether a status-route URL asks for the first-paint document.
+*
+* Only the exact `fast` value is recognized: an unknown or misspelled value
+* degrades to the full document, which is what every earlier caller already
+* gets. A typo must never produce an emptier panel than no parameter at all.
+*/
+function fastDetailOf(url) {
+	const at = url.indexOf("?");
+	if (at === -1) return false;
+	return new URLSearchParams(url.slice(at + 1)).get(WORKBUDDY_DETAIL_PARAM) === WORKBUDDY_DETAIL_FAST;
+}
+/**
 * Read the region parameter off a status-route URL. Absent means the domestic
 * tab (`cn`); a present-but-unknown value returns undefined so the route can
 * answer 400 instead of guessing.
@@ -5156,13 +5221,42 @@ async function workBuddyAccountCredits(deps, region) {
 	}));
 }
 /**
+* Read the selected account's live figures, and classify a refusal.
+*
+* Extracted so the first-paint path can omit it as a unit: the two calls here
+* are the ones that used to gate the account list (each up to the upstream
+* client's 30-second ceiling, and the pool adds one pair per member on top).
+*/
+async function liveFigures(deps, region, credential, selected) {
+	const [creditsResult, checkinResult] = await Promise.allSettled([deps.client.fetchCredits(credential), deps.client.fetchCheckinStatus(credential)]);
+	const rejected = [creditsResult, checkinResult].some((result) => result.status === "rejected" && isCredentialRejectedError(result.reason));
+	const recovery = !rejected ? void 0 : await resolveCredentialRecovery({
+		region,
+		store: deps.store(region),
+		...selected === void 0 ? {} : { rejectedAccountId: selected.id },
+		probe: deps.accountUsable ?? (async () => false)
+	});
+	return {
+		...creditsResult.status === "fulfilled" ? { credits: toCredits(creditsResult.value) } : { creditsError: safeMessage(creditsResult.reason) },
+		...checkinResult.status === "fulfilled" ? { checkin: checkinResult.value } : { checkinError: safeMessage(checkinResult.reason) },
+		...!rejected ? {} : { credentialRejected: true },
+		...recovery === void 0 ? {} : { recovery }
+	};
+}
+/**
 * Assemble one region's card document. `region` is the tab the card is on;
 * the region-scoped store already answers with only that region's accounts,
 * so the document's model slots and account list are that region's by
 * construction. Sign-in state is read-only; credit is a live billing answer
 * whose failure degrades to `creditsError` rather than failing the document.
+*
+* `options.detail` selects the first-paint variant: it uses the credential
+* already known locally instead of resolving (resolving may refresh a token
+* over the network) and skips {@link liveFigures} entirely, so nothing about
+* the account list depends on how fast a billing endpoint answers.
 */
-async function workBuddyWebStatus(deps, region) {
+async function workBuddyWebStatus(deps, region, options = {}) {
+	const fast = options.detail === "fast";
 	const store = deps.store(region);
 	const accounts = await store.accounts();
 	deps.regionUsable?.(region, accounts.length > 0);
@@ -5180,7 +5274,8 @@ async function workBuddyWebStatus(deps, region) {
 	};
 	let credential;
 	try {
-		credential = await store.resolve();
+		credential = fast ? await store.current() : await store.resolve();
+		if (credential === void 0) credential = await store.resolve();
 	} catch (error) {
 		const webAccounts = accounts.map(toWebAccount);
 		return {
@@ -5213,14 +5308,7 @@ async function workBuddyWebStatus(deps, region) {
 		imageModelIds: [...deps.imageModelIds(region)],
 		offModelIds: [...deps.offModelIds(region)]
 	};
-	const [creditsResult, checkinResult] = await Promise.allSettled([deps.client.fetchCredits(credential), deps.client.fetchCheckinStatus(credential)]);
-	const rejected = [creditsResult, checkinResult].some((result) => result.status === "rejected" && isCredentialRejectedError(result.reason));
-	const recovery = !rejected ? void 0 : await resolveCredentialRecovery({
-		region,
-		store: deps.store(region),
-		...selected === void 0 ? {} : { rejectedAccountId: selected.id },
-		probe: deps.accountUsable ?? (async () => false)
-	});
+	const figures = fast ? {} : await liveFigures(deps, region, credential, selected);
 	return {
 		status: "signed-in",
 		contextBudgets: Object.fromEntries(Object.entries(deps.contextBudgets(region)).filter(([, value]) => typeof value === "number")),
@@ -5230,18 +5318,22 @@ async function workBuddyWebStatus(deps, region) {
 			authFile: volatileFlagOf("authFile")
 		},
 		...account,
-		...creditsResult.status === "fulfilled" ? { credits: toCredits(creditsResult.value) } : { creditsError: safeMessage(creditsResult.reason) },
-		...checkinResult.status === "fulfilled" ? { checkin: checkinResult.value } : { checkinError: safeMessage(checkinResult.reason) },
-		...!rejected ? {} : { credentialRejected: true },
-		...recovery === void 0 ? {} : { recovery },
-		...await poolSectionOf(deps, region)
+		...figures,
+		...await poolSectionOf(deps, region, fast)
 	};
 }
-/** The pool block for a status document, or nothing when it cannot be built. */
-async function poolSectionOf(deps, region) {
+/**
+* The pool block for a status document, or nothing when it cannot be built.
+*
+* `fast` asks for the first-paint variant: local state only, no upstream call.
+* A Host without a local member source then omits the block rather than paying
+* the full read, so a first-paint document never regresses into the expensive
+* path this mode exists to avoid.
+*/
+async function poolSectionOf(deps, region, fast) {
 	if (deps.pool === void 0) return {};
 	try {
-		const pool = await workBuddyWebPool(deps, region);
+		const pool = await workBuddyWebPool(deps, region, fast);
 		return pool === void 0 ? {} : { pool };
 	} catch {
 		return {};
@@ -5260,11 +5352,12 @@ async function poolSectionOf(deps, region) {
 * SHOULD serve, `current` says who IS serving. Marking the winner as current
 * would make the card claim a switch that may not have been applied yet.
 */
-async function workBuddyWebPool(deps, region) {
+async function workBuddyWebPool(deps, region, fast = false) {
 	const pool = deps.pool;
 	if (pool === void 0) return void 0;
 	const preferences = pool.preferences(region);
-	const members = await pool.members(region);
+	const members = fast ? await pool.localMembers?.(region) : await pool.members(region);
+	if (members === void 0) return void 0;
 	const ranked = rankPool(members, Date.now(), preferences.orderAccountIds);
 	const catalog = pool.catalog?.(region) ?? [];
 	const target = resolveTargetModel(catalog, preferences.targetModelId);
@@ -5272,7 +5365,7 @@ async function workBuddyWebPool(deps, region) {
 	const byId = new Map(members.map((member) => [member.account.id, member]));
 	const rankedIds = new Set(ranked.map((row) => row.account.id));
 	const others = await pool.otherAccounts?.(region) ?? [];
-	const checkedIn = await pool.checkedInToday?.(region).catch(() => ({})) ?? {};
+	const checkedIn = fast ? pool.cachedCheckedInToday?.(region) ?? {} : await pool.checkedInToday?.(region).catch(() => ({})) ?? {};
 	const rows = [...ranked.map((row) => ({
 		account: row.account,
 		member: true,
@@ -5379,8 +5472,9 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 				}
 				const region = requestRegion(req, res);
 				if (region === void 0) return;
+				const detail = fastDetailOf(req.url ?? "") ? "fast" : "full";
 				try {
-					json(res, 200, await workBuddyWebStatus(deps, region));
+					json(res, 200, await workBuddyWebStatus(deps, region, { detail }));
 				} catch (error) {
 					json(res, 500, { error: safeMessage(error) });
 				}
@@ -6451,6 +6545,19 @@ function apply(ctx, config) {
 			preferences: (region) => poolPreferencesOf(current(), region),
 			members: (region) => poolMembersOf(region),
 			/**
+			* The first-paint member list (issue #77): local state only.
+			*
+			* This is `localPoolMembers`, i.e. the SAME list the request path already
+			* consults — saved members, their last credit snapshot (if it is still
+			* fresh), and their last probe result. No upstream call, so the card's
+			* account table can paint before any billing endpoint answers; live
+			* figures arrive with the full document a moment later.
+			*
+			* A member whose credit snapshot has expired simply carries no `credits`,
+			* which the card renders as "—" rather than as zero.
+			*/
+			localMembers: (region) => localPoolMembers(region),
+			/**
 			* The checked accounts that resolve to a local sign-in.
 			*
 			* A local scan only — no upstream calls — so the route's empty-pool guard
@@ -6527,6 +6634,25 @@ function apply(ctx, config) {
 				}));
 				return Object.fromEntries(entries.filter((entry) => entry !== void 0));
 			},
+			/**
+			* Today's check-in state from the cells already measured this process.
+			*
+			* The first-paint counterpart (issue #77) of `checkedInToday`: it reads
+			* `checkinStateCache` and nothing else, so painting the table never waits
+			* on one request per account. An unmeasured account is absent, which the
+			* card already renders as unknown rather than as "not checked in".
+			*/
+			cachedCheckedInToday(region) {
+				if (!poolPreferencesOf(current(), region).enabled) return {};
+				const now = Date.now();
+				const state = checkinStateCache[region] ?? {};
+				const cached = {};
+				for (const [accountId, entry] of Object.entries(state)) {
+					if (now - entry.atMs >= CHECKIN_CACHE_MS) continue;
+					cached[accountId] = entry.checkedIn;
+				}
+				return cached;
+			},
 			async currentAccountId(region) {
 				await applyPoolSelection(region).catch(() => void 0);
 				const credential = await stacks[region].store.current().catch(() => void 0);

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
   "description": "把本机登录的 WorkBuddy 模型接入 DeepSeek Harness，并提供只读的积分概览与模型管理。",
-  "version": "4.9.2",
+  "version": "4.9.4",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",