dsh-connect-workbuddy 4.9.4 → 4.10.0

package/CHANGELOG.md

@@ -1,5 +1,65 @@
 # Changelog
 
+## 4.10.0 (2026-10-19)
+
+> 版本号是 **minor**：4.9.5 / 4.9.6 两个 patch 从未单独发布到 npm（npm 上仍是 4.9.4），本次一次性带上它们，并新增福利活动的完整链路。**发往上游的请求体、路由 id、模型 id、凭据、计费与换号规则一律未变。**
+
+### Features
+
+- **issue #79：福利活动自动发现 + 单账号领取（4.9.4 → 4.10.0 的主线）**
+  - **自动发现**：卡片逐账号标出上游活动（模型服务异常补偿 / 新人首月赠送）里**还没领的那一份**。数据来自上游两个只读状态接口 `/billing/meter/compensation-status` 与 `/billing/meter/check-gift-claimed`（注意**没有 `/v2` 前缀**，探 `/v2/...` 会 404）。
+  - **判定规则完全由上游状态决定**：`active && !claimed` 才显示；`claimed` 整行消失；活动过期（上游把 `active` 翻成 `false`）自动消失。**不拿本地时钟去比 `end_time`**，本机时间偏了也不会与服务端打架；`end_time` 只用于 3 天内临期高亮。
+  - `active` 单独看**不行**：已领取的账号 `active` 仍为 `true`，只看它会让领过的活动永远挂着待领取。
+  - 读取复用签到管线：每账号一次、30 分钟缓存、账号池关闭时不发请求；任一接口失败按「未读」处理，**不会把一次失败缓存成「全都没福利」**。
+  - **单账号「领取」按钮**：每个待领取项后一个实心琥珀色胶囊按钮，**一次只领一个账号的一个活动**。没有「全部领取」——一次点击花掉的是一份不可撤销的真实权益。
+  - 新路由 `POST /plugins/dsh-connect-workbuddy/benefit/claim?accountId=&kind=`，沿用写路由的 POST + loopback 守卫，并**强制要求 `accountId`**，请求本身无法批量领取。
+  - 领取前**重新读取**状态再判定；已领取/已过期一律 409 且不调用上游。领取后用上游**新读数**作答并刷新卡片，不做乐观更新。
+  - **领取成功后清掉该账号的福利缓存**：这是本次修掉的最关键 bug。缓存 TTL 30 分钟且此前从不因领取失效，于是「积分涨了、按钮还在」，用户会以为领取失败而重复点击，第二次被 409 拒绝。
+  - **每行按钮只联动自己那一行**：此前行的 busy 标志传的是「有任一行动作」，点一行会让五行同时变成「领取中…」，看起来像一次领了整池。
+  - 实测：真实账号 `19dea97d` 领取后 `claimed` 由 false 变 true，500 积分到账；同一批次 6 个账号 × 500 积分待领取，截止 10/22。
+
+### Docs
+
+- **描述与 README 同步到插件实际能力**：`package.json` 的 `description`、市场提交草稿的 `description.zh` / `description.en`、两个 README 的标题下 tagline 与开头段，统一改写为「国内版 + 国际版接入 / 每次刷新按上游目录自动读取每个模型的积分倍率 / 逐模型图片输入开关 / 多账号切换与账号池自动换号 / 每日签到与只读积分概览」。旧描述只写了「模型接入 + 只读积分概览 + 模型管理」，把 3.x~4.9 长出来的能力全落在了外面。
+- **更正一处不成立的表述**：描述草稿里曾有「费率随错峰时段变化」的说法。全仓（`src/`、`tests/`、`docs/`、两个 README）与 WorkBuddy 桌面端 asar 里都没有任何峰谷/时段折扣逻辑，`git log -S` 也从无此词；插件真正做的是**从上游目录解析每个模型自带的积分倍率**（`x0.79` 这种，解析不出就不显示，绝不猜），且该倍率确实会被上游改动（`deepseek-v4.1-flash` 已从 0 变成 0.11）。会随「时段」变的那个是**免费模型的 token 定额**，不是价格，因此文案按实测口径写「随上游目录刷新更新」，不承诺峰谷计价。
+- **README 补上「福利活动」条目（中英双语）**：4.9.4 的待领取标记与 4.9.6 的单账号「领取」按钮此前在两个 README 里**一次都没提过**。新增条目写清：数据只来自上游两个状态接口、标记阶段只读、三条显示规则由上游状态决定（不用本地时钟比 `end_time`）、一次只领一个账号的一个活动、写路由强制 `accountId` 所以无法批量、领取前重读状态、领取后用上游新读数刷新并清掉该账号的福利缓存。
+- **卡片内说明文案（`src/client/locales.ts` 的 `row.desc`，中英同步）**同步改写，与上面的描述口径一致；两侧键仍严格 1:1。
+- **修 EN README 的编号重复**：自动换号那一节有两个 `7.`，第二条（每次重试写一行 `warn`）改为 `8.`。
+
+### Fixes
+
+- **裁剪福利说明不再撑破积分列**：福利文案与按钮曾被挤成竖排「领取」二字并压住右侧目标模型列；胶囊改为 `white-space:nowrap` + 固定 19px 高 + `flex:none`，让列宽只能压缩文字、压不了按钮。
+- **「领取」二字的视觉居中**：无头 Chrome 像素扫描测得 CJK 字形墨迹比行盒中心偏低约 1px，用 `padding-top:1px` 补偿（`transform` 与 `padding-bottom` 两个方向都试过，都会把墨迹推得更低，已弃用）。
+- **CHANGELOG 结构：补回丢失的 `## 4.9.5 (2026-10-19 · 未单独发布，并入 4.10.0)` 标题**。`6bf825a`（feat: 单账号领取福利按钮）把顶部标题改写成 4.9.6 时，把 4.9.5 那一节的正文留在了下面却没有版本标题——于是 4.9.5 的 Features 看起来像是 4.9.6 的一部分，而 `git tag` 与 npm 上它确实是一个独立版本。现按 `cad9ec3`（chore(release): 4.9.5）的原样恢复标题。
+
+## 4.9.6 (2026-10-19 · 未单独发布，并入 4.10.0)
+
+> 版本号是 **patch**：新增一个写路由与行内按钮，发往上游的请求体、路由 id、模型 id、凭据、计费与换号规则一律未变。
+
+### Features
+
+- **issue #79：账号池卡片提供单账号「领取」按钮**
+  - 每个待领取的福利后面带一个按钮，**一次只领一个账号的一个活动**；没有任何「全部领取」，因为一次点击花掉的是一份不可撤销的真实权益。
+  - 新路由 `POST /plugins/dsh-connect-workbuddy/benefit/claim?accountId=&kind=`，沿用写路由的 POST + loopback 守卫，并**强制要求 accountId**——请求本身无法批量领取。
+  - 领取前**重新读取**状态再判定（窗口内 && 未领取），所以过期的卡片不会触发无谓写入；已领取/已过期一律 409 且不调用上游。
+  - 领取后用上游的**新读数**作答并刷新卡片，不做乐观更新：即使上游静默失败，也不会留下「已领取」的假象。
+  - 实测：真实账号 `19dea97d` 领取后 `claimed` 由 false 变 true，500 积分到账。
+
+## 4.9.5 (2026-10-19 · 未单独发布，并入 4.10.0)
+
+> 版本号是 **patch**：只新增只读查询与界面标记，发往上游的请求体、路由 id、模型 id、凭据、计费与换号规则一律未变。
+
+### Features
+
+- **issue #79：账号池卡片标出「有福利还没领」**
+  - 数据来自上游自己的两个活动状态接口（`/billing/meter/compensation-status`、`/billing/meter/check-gift-claimed`），**只读**；`claim-compensation` / `claim-gift` 两个写接口从不调用。
+  - 三条显示规则都由上游状态直接决定，前端不维护状态：
+    - `active && !claimed` → 显示待领取。
+    - `claimed` → 整行不出现（领过的不再骚扰）。
+    - 活动过期 → `active` 翻 `false`，整行自动消失，**不用本地时钟比 `end_time`**（时钟偏了不会与服务端打架）；`end_time` 只用于 3 天内临期高亮。
+  - `active` 不能单独判断：已领取的账号 `active` 仍为 `true`，只看它会让领过的账号永远挂着待领取。
+  - 读取复用 `checkedInToday` 的管线：每账号一次、TTL 30 分钟、池关闭不发请求；任一接口失败按「未读」处理，不会把一次失败缓存成「全都没福利」。
+
 ## 4.9.4 (2026-10-19)
 
 > 版本号是 **patch**：只改**错误文案的取材方式**，发往上游的请求体、路由 id、模型 id、凭据、计费与换号规则一律未变（换号规则的变化只有一处「不再多问一次」的减少，见下）。但它修的是一个**会把人送去查错地方**的故障——一个普通的 400 被渲染成「账号池空了」，而上游唯一那句可执行建议被截断丢掉。

package/README.en.md

@@ -4,7 +4,7 @@
 
 <h1 align="center">dsh-connect-workbuddy</h1>
 
-<p align="center"><b>Connect locally signed-in WorkBuddy models to DeepSeek Harness, with an account pool and model management.</b></p>
+<p align="center"><b>Connect locally signed-in WorkBuddy models — CN and international — to DeepSeek Harness: read each model's credit multiplier automatically, toggle image input per model, switch between multiple accounts, and keep daily check-in with a read-only credits overview in capsule readouts on the card and in the composer.</b></p>
 
 <p align="center">
   <a href="https://www.npmjs.com/package/dsh-connect-workbuddy"><img src="https://img.shields.io/npm/v/dsh-connect-workbuddy?style=flat-square&label=npm&color=cb3837" alt="npm version"></a>
@@ -17,7 +17,7 @@
 
 [English](README.en.md) | 中文
 
-A [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) bundle plugin that connects locally signed-in WorkBuddy models to the DSH model picker — **both the CN app and the international WorkBuddy AI app are supported** — with an account pool and selectable model management. **The CN and international sides are two parallel providers (`workbuddy` / `workbuddy-global`) that can be used at the same time**; the settings card separates them with tabs for convenient management.
+A [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) bundle plugin that connects locally signed-in WorkBuddy models to the DSH model picker — **both the CN app and the international WorkBuddy AI app are supported** — with an account pool, selectable model management, and a set of read-only capabilities built around credits: **every catalog refresh reads each model's credit multiplier from upstream** (the `x0.79` figure comes entirely from the upstream catalog; the plugin neither hard-codes it nor guesses), image input is toggled per model, multiple accounts can be switched or fail over automatically through the pool, and daily check-in plus read-only credit overviews shown as compact pills on the card and in the composer. **The CN and international sides are two parallel providers (`workbuddy` / `workbuddy-global`) that can be used at the same time**; the settings card separates them with tabs for convenient management. All it needs is a WorkBuddy sign-in on this machine — or **one sign-in from the browser**.
 
 ## Features
 
@@ -33,6 +33,7 @@ A [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) bund
 
   <img src="docs/assets/dsh-connect-workbuddy-composer-credits.png" width="360" alt="Composer credit panel: a per-account balance table for the domestic region, with a refresh button and a last-refreshed time" />
 - **Account pool: batch actions across several accounts, plus automatic failover** — tick the accounts you want into a pool and you get **one-click check-in for every account**, **one-click testing of every account against a model you choose** (defaulting to the region's zero-multiplier free model), and with **Enable the account pool** switched on, **automatic failover**: a request that fails upstream is retried against the pool's other usable accounts, in order, until one serves it or none is left. Membership starts **empty and is an explicit opt-in**: "signed in on this machine" is not the same as "spend this account's credits and claim its rewards". The pool's **ranking decides who serves every request** (usable first, then expiring-credits-first, higher credits, freshest credential), and on a failure the next usable member is tried. It **never writes back your saved selection** — switch the pool off and your own account applies again immediately. **The switch only decides whether the PLUGIN chooses** — with it off, the plugin stops picking and switching accounts for you, but check-in and testing stay available (they are manual actions). Testing reuses the model rows' real-volume probe, so it **does cost real credits**; **automatic check-in is deliberately not offered** — a check-in claims real rewards, so it only ever runs when you press the button. See [Account pool](#account-pool).
+- **Benefits: a marker for what is unclaimed, plus a per-account Claim button** — the card marks, account by account, anything in the upstream's benefit campaigns (compensation / gifts) that **has not been claimed yet**. The data comes from the upstream's own two status endpoints; in the marking stage the plugin is **read-only** and never calls the two write endpoints. Three display rules all follow the upstream's state: `active && !claimed` shows the row, `claimed` removes it entirely, and an expired campaign (upstream flips `active` to `false`) disappears by itself — the plugin **never compares `end_time` against the local clock**, so a skewed machine cannot argue with the server; `end_time` only drives the "three days left" highlight. `active` alone is not enough to decide: an already-claimed account still reports `active: true`, and reading it alone would leave a claimed campaign hanging there forever. The read reuses the check-in pipeline (once per account, cached for 30 minutes, no request while the account pool is off), and a failing endpoint counts as "unread" rather than caching "nobody has benefits". Each row ends in a solid amber **Claim pill**, and one click claims **one campaign of one account**: there is no "claim everything", because a click spends one irrevocable real entitlement — and the write route **requires `accountId`**, so the request itself cannot batch. Before writing it **re-reads** the status and decides again; anything already claimed or expired returns 409 without touching upstream. After a successful claim it answers with the upstream's **fresh reading** and refreshes the card, with no optimistic update — even a silent upstream failure cannot leave a false "claimed" behind — and it also drops that account's cached benefit state, so the pill cannot linger on a stale status.
 - **Actionable advice when a credential is refused** — when the upstream rejects the selected account's token, the plugin actually **probes** the other local sign-ins: if one still answers, it tells you to switch to it (with a one-click switch) instead of vaguely asking you to sign in again — re-authenticating fixes nothing while you are pinned to a revoked backup. Only when there is genuinely no other local account does it ask you to sign in again.
 - **Add accounts by QR sign-in, import/export them in bulk, test or delete them one by one** — the WorkBuddy desktop app is no longer a prerequisite: the card's **Add account by QR code** (labelled **Sign in on the web** for the international build — that region uses a browser login page, there is no QR) opens a dialog and takes you **straight to the authorization page** in your browser; if the browser blocks that, the dialog's link, copy and **Open page again** are the fallback. Every credential lands in the plugin's own vault (`$DSH_HOME/workbuddy-vault/<region>/<accountId>.json`, one file per account), and the desktop app's auth files stay **read-only and are never modified**. Each row of the account table gains **Test** and **Remove**: a row test reuses the same probe as the batch run, so the two are comparable; removing deletes only the copy the plugin stored and **hides** the account: it disappears at once and the automatic poll cannot bring it back, while **Detect accounts again** restores it (signing in or importing the same account clears the hide too). **The desktop app's sign-in is never touched** — removing means "this plugin no longer lists it", not "sign out of the app". **Export / import accounts** moves credentials to another machine: pick accounts to export a JSON file → choose a file and read a **redacted preview** (field names and whether a token is present; the token itself never enters the preview) → tick what to import. An import overwrites per account rather than duplicating, and **only a record positively identified as belonging to that region is stored** — a domain the plugin cannot classify is skipped and counted as skipped. See [Account pool](#account-pool).
 - **Credits live in the account pool** — the member table shows each account's remaining credits and nearest expiry, and credits are the ranking's second key (more credits serves first). The queries are **read-only** and consume no credits.
@@ -96,7 +97,7 @@ This plugin's standing rule is that it **never rewrites who pays** — your save
 5. **Which do not:** a malformed request (HTTP 400). Every account answers the same 400, so walking the pool would only multiply the wait before the user sees an error they must act on anyway. A stream that dies **mid-flight** is not retried either — bytes are already on the wire, and replaying would splice two answers together.
 6. **Members already known to be unusable are skipped** — a rate-limited account still inside its stated cooldown, or one whose credential the upstream rejected. **An account that was never tested counts as usable**: a freshly discovered sign-in must not be invisible just because nobody has measured it yet.
 7. **A live failure is RECORDED as a measurement** (with the reset time the upstream stated), so the NEXT request starts from an available account instead of re-hitting the account that just refused it. Before this, only the manual batch test wrote measurements — so a just-limited account still read as untested and kept being picked first. HTTP 400 is the exception: that is the REQUEST being rejected, which says nothing about the account, and recording it would sideline a good one. Accounts not checked into the pool are not measured either, since the tick is what grants "you may spend this account's credits".
-7. Every retry leaves a `warn` line in the host log naming the failure and the account that follows.
+8. Every retry leaves a `warn` line in the host log naming the failure and the account that follows.
 
 ### What the switch actually controls
 

package/README.md

@@ -4,7 +4,7 @@
 
 <h1 align="center">dsh-connect-workbuddy</h1>
 
-<p align="center"><b>把本机登录的 WorkBuddy 模型接入 DeepSeek Harness，并提供账号池与模型管理。</b></p>
+<p align="center"><b>把本机登录的 WorkBuddy 模型（国内版与国际版）接入 DeepSeek Harness —— 每次刷新自动读取每个模型的积分倍率，逐模型开关图片输入，多账号可切换，并带每日签到与只读积分概览（卡片与输入框里的胶囊读数）。</b></p>
 
 <p align="center">
   <a href="README.en.md">English</a> ·
@@ -24,7 +24,7 @@
   <a href="https://dshfind.com/plugins/dingminhua/dsh-connect-workbuddy"><img src="https://dshfind.com/api/badge/dingminhua/dsh-connect-workbuddy" alt="dshfind plugin"></a>
 </p>
 
-一个独立的 [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) bundle 插件。它把本机已登录的 WorkBuddy 账号（**国内版与国际版 WorkBuddy AI 均支持**）接到 DSH 的模型选择器，同时提供账号池与可勾选的模型管理界面。**国内版与国际版是两个并行的供应商（`workbuddy` / `workbuddy-global`），可同时使用**；插件设置卡片以 tab 区分两者，方便统一管理。
+一个独立的 [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness) bundle 插件。它把本机已登录的 WorkBuddy 账号（**国内版与国际版 WorkBuddy AI 均支持**）接到 DSH 的模型选择器，同时提供账号池、可勾选的模型管理，以及一套围绕积分的只读能力：**每次刷新按上游目录自动读取每个模型的积分倍率**（`x0.79` 这种，倍率完全由上游给出，插件不写死也不猜）、逐模型开关图片输入、多账号切换与账号池自动换号、每日签到、以及卡片与输入框里胶囊式的只读积分读数。**国内版与国际版是两个并行的供应商（`workbuddy` / `workbuddy-global`），可同时使用**；插件设置卡片以 tab 区分两者，方便统一管理。只需本机 WorkBuddy 的登录态，**或在浏览器里登录一次**即可。
 
 ## 功能特性
 
@@ -40,6 +40,7 @@
 
   <img src="docs/assets/dsh-connect-workbuddy-composer-credits.png" width="360" alt="对话输入框积分面板：国内版账号余额表格、刷新积分按钮与最近刷新时间" />
 - **账号池：多账号批量操作与自动换号** —— 把要用的账号勾进池子，即可**一键签到所有账号**、**一键测试所有账号 × 你指定的模型**（默认挑该区域倍率为 0 的免费模型）；开启**启用账号池**即同时打开**自动换号**——某个请求在上游失败时，插件会依次用池内其他可用账号重试，直到有一个接手、或全部不可用为止，然后才把错误报给你。成员**默认一个都不含**、必须显式勾选（「本机有登录」不等于「要拿它去签到和花积分」）；**开启后由池子的排序决定每一次请求用谁**（可用优先，其次快过期先花、积分高、凭据更新的）；失败时依次用池内其他可用账号重试。排序**从不写回你保存的选择**——关掉开关，你选定的账号立刻完全生效。只有请求本身不合法（HTTP 400）不换号：同一个请求体换谁都是 400，重试只会白等。**这个开关只管「插件要不要自己决定」**：关掉它，插件不再替你选账号、也不再替你换号，但**签到与测试仍然可用**（它们是手动动作）。测试走的是与模型行同一套真实体积探测，因此**有真实成本**；**不提供自动签到**——签到会真实领取奖励，只在你点按钮时执行。详见[账号池](#账号池)。
+- **福利活动：待领取标记 + 单账号「领取」按钮** —— 卡片会逐账号标出上游活动（补偿 / 赠礼）里**还没领的那一份**，数据来自上游自己的两个状态接口，标记阶段**只读**、两个写接口一次都不调用。显示规则完全由上游状态决定：`active && !claimed` 才显示，`claimed` 整行消失，活动过期（`active` 翻 `false`）自动消失——**不用本地时钟去比 `end_time`**，本机时间偏了也不会与服务端打架；`end_time` 只用于 3 天内临期高亮。`active` 单独看不行：已领取的账号 `active` 仍为 `true`，只看它会让领过的账号永远挂着待领取。读取复用签到的管线（每账号一次、30 分钟缓存、账号池关闭时不发请求），任一接口失败按「未读」处理，不会把一次失败缓存成「全都没福利」。行尾是一个实心琥珀色的**胶囊按钮「领取」**，一次只领**一个账号的一个活动**：没有「全部领取」，因为一次点击花掉的是一份不可撤销的真实权益，写路由也**强制要求 `accountId`**，请求本身无法批量领取。领取前**重新读取**状态再判定，已领取或已过期一律 409 且不调用上游；领取后用上游的**新读数**作答并刷新卡片，不做乐观更新——即使上游静默失败也不会留下「已领取」的假象，成功后同时清掉该账号的福利缓存，按钮不会顶着旧状态赖着不走。
 - **凭据失效时给出可执行的建议** —— 上游拒绝当前账号的 token 时，插件会**实际探测**本机其他账号：若有账号仍然可用，就直接告诉你「切换到它即可」（并附一键切换），而不是笼统地让你重新登录——被钉在一个作废的旧备份上时，重新登录并不能解决问题。只有本机确实没有别的账号可切换时，才会提示重新登录。
 - **扫码添加账号、批量导入导出、逐账号测试/删除** —— 不必先装 WorkBuddy 桌面 App：卡片里的「扫码添加账号」（国际版为「网页登录」——那边是浏览器登录页，没有二维码）点开即弹出对话框，并在浏览器里**自动打开**授权页；被浏览器拦截时对话框内提供链接、复制与「重新打开页面」兜底。所有凭据统一落到插件自己的凭据库（`$DSH_HOME/workbuddy-vault/<region>/<accountId>.json`，一账号一文件），**桌面 App 的认证文件始终只读、永不被改动**。账号表格每一行右侧有「测试」与「删除」：测试与批量测试走同一套探测，结果可比；删除只删插件自己存的那份，并把这个账号**暂时隐藏**：删掉后立刻消失，也不会被自动轮询带回来；点「重新检测账号」即可找回（重新登录或导入同一账号也会清除隐藏记录）。**桌面 App 的登录始终不动**——删除是「本插件不再列出它」，不是退出 App 登录。「导出 / 导入账号」可把凭据搬到另一台机器：多选导出 JSON → 选文件后先看**脱敏预览**（只显示字段与是否有 token，明文不进预览）→ 勾选导入。导入按账号去重覆盖，**只有确认属于该区域**的记录才入库，认不出的域名会被跳过并如实计入「已跳过」。详见[账号池](#账号池)。
 - **积分信息在账号池里** —— 成员表逐账号显示剩余积分与最近到期时间，排序的第二键就是积分（谁多谁优先）。查询是**只读**的、不消耗积分。

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as defaultDesktopAuthDirs, F as WorkBuddyUpstreamClient, K as WORKBUDDY_APP_EXECUTABLE_ENV, O as legacyWorkbuddyOwnAuthPath, Q as findWorkbuddyAppExecutableWithSource, S as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, j as workbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, ot as hostPeersInfo, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, y as WorkBuddyCredentialStore } from "./host-heartbeat-BpArQi1Q.js";
+import { C as defaultDesktopAuthDirs, F as WorkBuddyUpstreamClient, K as WORKBUDDY_APP_EXECUTABLE_ENV, O as legacyWorkbuddyOwnAuthPath, Q as findWorkbuddyAppExecutableWithSource, S as defaultDesktopAuthCandidates, a as readHostHeartbeat, c as WORKBUDDY_CONNECT_VERSION, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, j as workbuddyOwnAuthPath, l as piAiRuntimeInfo, o as workbuddyHostHeartbeatPath, ot as hostPeersInfo, r as isHeartbeatProcessAlive, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, y as WorkBuddyCredentialStore } from "./host-heartbeat-BQHO4oiB.js";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts

package/lib/client.js

@@ -44,6 +44,23 @@ window.__ModuleLoader__.load({
 		* costs nothing on the Host side either.
 		*/
 		const WORKBUDDY_GITHUB_URL = "https://github.com/dingminhua/dsh-connect-workbuddy";
+		/**
+		* The page where a human claims a benefit: 「套餐与积分」.
+		*
+		* Named here rather than inline in the card because it is the page the benefit
+		* line points at when the plugin itself declines to claim (an unknown campaign
+		* kind). One constant keeps that pointer honest if the page moves.
+		*/
+		const WORKBUDDY_PLAN_URL = "https://www.workbuddy.cn/profile/plans-usage";
+		/**
+		* Plugin-owned benefit claim endpoint: POST + loopback, ONE account per call.
+		*
+		* A credit grant is a write on a real account, so it carries the same guards as
+		* check-in, plus `?accountId=` because the pool can hold accounts this plugin
+		* did not pick. There is deliberately no batch action here — see
+		* `claimBenefit` and the route handler.
+		*/
+		const WORKBUDDY_BENEFIT_CLAIM_PATH = "/plugins/dsh-connect-workbuddy/benefit/claim";
 		/** Plugin-owned live model refresh endpoint. */
 		const WORKBUDDY_MODELS_REFRESH_PATH = "/plugins/dsh-connect-workbuddy/models/refresh";
 		/** Plugin-owned local account rescan endpoint. */
@@ -2243,6 +2260,65 @@ window.__ModuleLoader__.load({
 				t
 			]);
 			/**
+			* Claim ONE benefit on ONE account, from its row (issue #79).
+			*
+			* Always a single account and a single campaign: there is no batch entry
+			* point, because a claim spends a real entitlement that cannot be undone. The
+			* row is the unit of consent, so the row is the only way to ask for it.
+			*
+			* The Host re-reads the campaign before AND after the write, so the message
+			* here reports what the gateway says now rather than what was requested. The
+			* refresh afterwards is what actually removes the 待领取 line: the card has no
+			* optimistic update, so a claim that silently did nothing cannot leave a stale
+			* line claiming credits were taken.
+			*/
+			const runRowClaim = (0, react.useCallback)(async (accountId, accountName, kind, title, creditNum) => {
+				const name = accountName === "" ? t("row.accountUnnamed") : accountName;
+				setRowBusyAccountId(accountId);
+				setRowBusyAction("claim");
+				setActionError(void 0);
+				const url = withWorkBuddyRegion(WORKBUDDY_BENEFIT_CLAIM_PATH, region) + "&accountId=" + encodeURIComponent(accountId) + "&kind=" + encodeURIComponent(kind);
+				try {
+					const response = await fetch(url, {
+						method: "POST",
+						headers: { accept: "application/json" },
+						credentials: "same-origin"
+					});
+					const body = await response.json().catch(() => void 0);
+					if (!response.ok) throw new Error(poolFailureText(t, {
+						status: response.status,
+						reason: body?.reason,
+						error: body?.error
+					}));
+					if (!mounted.current) return;
+					appendLog(t("row.poolLogBenefitClaimed", {
+						accountName: name,
+						title,
+						count: formatNumber$1(creditNum)
+					}), "ok");
+					await onRefresh?.();
+				} catch (error) {
+					const message = error instanceof Error ? error.message : t("row.requestFailed");
+					if (mounted.current) {
+						setActionError(message);
+						appendLog(t("row.poolLogBenefitFailed", {
+							accountName: name,
+							message
+						}), "error");
+					}
+				} finally {
+					if (mounted.current) {
+						setRowBusyAccountId(void 0);
+						setRowBusyAction(void 0);
+					}
+				}
+			}, [
+				appendLog,
+				onRefresh,
+				region,
+				t
+			]);
+			/**
 			* Remove ONE account from its row, via the Host.
 			*
 			* The Host dismisses the account (and deletes its vault entry when it has
@@ -2393,7 +2469,11 @@ window.__ModuleLoader__.load({
 						canEdit: canEditPool,
 						checkinSupported: pool.checkinSupported,
 						onToggle: (next) => toggleMember(account.accountId, next),
-						busy: rowBusyAccountId !== void 0,
+						busy: rowBusyAccountId === account.accountId,
+						rowBusy: rowBusyAccountId !== void 0,
+						rowBusyAction,
+						/** The pill also needs to know WHICH row is busy, not just that one is. */
+						claimBusy: rowBusyAccountId === account.accountId,
 						testDisabled: pool.targetModelSource === "none" || pool.targetModelSource === "stale",
 						targetHint: pool.targetModelSource === "none" ? t("row.poolTargetNone") : pool.targetModelSource === "stale" ? t("row.poolTargetStale", { model: pool.staleTargetModelId ?? "" }) : void 0,
 						onTest: () => {
@@ -2402,6 +2482,9 @@ window.__ModuleLoader__.load({
 						onRemove: () => {
 							runRowRemove(account.accountId, account.accountName);
 						},
+						onClaim: (kind, title, creditNum) => {
+							runRowClaim(account.accountId, account.accountName, kind, title, creditNum);
+						},
 						orderIndex: isMember && orderIsManual ? left + 1 : void 0,
 						orderIsManual,
 						moveEnabled: pool.enabled === true && isMember && canEditPool,
@@ -2481,7 +2564,7 @@ window.__ModuleLoader__.load({
 		}
 		/** One account's row. */
 		function renderAccountRow(input) {
-			const { t, account, checked, canEdit, checkinSupported, onToggle, busy, testDisabled, targetHint, onTest, onRemove, orderIndex, orderIsManual, moveEnabled, onMoveUp, onMoveDown, moveUpDisabled, moveDownDisabled } = input;
+			const { t, account, checked, canEdit, checkinSupported, onToggle, busy, rowBusy, testDisabled, targetHint, onTest, onRemove, onClaim, rowBusyAction, claimBusy, orderIndex, orderIsManual, moveEnabled, onMoveUp, onMoveDown, moveUpDisabled, moveDownDisabled } = input;
 			const name = account.accountName === "" ? t("row.accountUnnamed") : account.accountName;
 			const excluded = exclusionText(t, account.excludedBy);
 			const probe = account.probe;
@@ -2531,7 +2614,30 @@ window.__ModuleLoader__.load({
 				"aria-label": t("row.poolMoveDownAria", { accountName: name }),
 				disabled: moveDownDisabled,
 				onClick: onMoveDown
-			}, "↓")) : null) : null, account.current ? (0, react.createElement)("span", { className: "dsm-workbuddy-pool-current-tag" }, t("row.poolCurrentBadge")) : null, (0, react.createElement)("span", { className: checked ? "dsm-workbuddy-pool-member" : "dsm-workbuddy-pool-not-member" }, checked ? t("row.poolMember") : t("row.poolNotMember")), excluded === void 0 ? probe === void 0 ? null : (0, react.createElement)("span", null, t("row.poolTestedAt", { at: formatShortClock(probe.atMs) })) : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-excluded" }, excluded))), (0, react.createElement)("span", { className: "dsm-workbuddy-pool-credits" }, account.credits === void 0 ? (0, react.createElement)("span", null, "—") : (0, react.createElement)("b", null, formatNumber$1(account.credits)), account.expiringSoon !== void 0 && account.expiringSoon > 0 ? (0, react.createElement)("span", { className: "dsm-workbuddy-pool-soon" }, t("row.poolCreditSoon", { count: formatNumber$1(account.expiringSoon) })) : account.nearestExpiryMs === void 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-soon-plain" }, t("row.poolCreditNearest", { at: formatShortClock(account.nearestExpiryMs) }))), (0, react.createElement)("span", {
+			}, "↓")) : null) : null, account.current ? (0, react.createElement)("span", { className: "dsm-workbuddy-pool-current-tag" }, t("row.poolCurrentBadge")) : null, (0, react.createElement)("span", { className: checked ? "dsm-workbuddy-pool-member" : "dsm-workbuddy-pool-not-member" }, checked ? t("row.poolMember") : t("row.poolNotMember")), excluded === void 0 ? probe === void 0 ? null : (0, react.createElement)("span", null, t("row.poolTestedAt", { at: formatShortClock(probe.atMs) })) : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-excluded" }, excluded))), (0, react.createElement)("span", { className: "dsm-workbuddy-pool-credits" }, account.credits === void 0 ? (0, react.createElement)("span", null, "—") : (0, react.createElement)("b", null, formatNumber$1(account.credits)), account.expiringSoon !== void 0 && account.expiringSoon > 0 ? (0, react.createElement)("span", { className: "dsm-workbuddy-pool-soon" }, t("row.poolCreditSoon", { count: formatNumber$1(account.expiringSoon) })) : account.nearestExpiryMs === void 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-soon-plain" }, t("row.poolCreditNearest", { at: formatShortClock(account.nearestExpiryMs) })), account.benefits === void 0 || account.benefits.length === 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-benefits" }, account.benefits.map((benefit, index) => (0, react.createElement)("span", {
+				key: benefit.kind,
+				className: benefit.urgent ? "dsm-workbuddy-pool-benefit dsm-workbuddy-pool-benefit-urgent" : "dsm-workbuddy-pool-benefit"
+			}, index === 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-prov-sep" }, "·"), (0, react.createElement)("span", { className: "dsm-workbuddy-pool-benefit-tag" }, benefit.urgent ? benefit.daysLeft === void 0 || benefit.daysLeft === 0 ? t("row.poolBenefitDueToday", {
+				title: benefit.title,
+				count: formatNumber$1(benefit.creditNum)
+			}) : t("row.poolBenefitUrgent", {
+				title: benefit.title,
+				count: formatNumber$1(benefit.creditNum),
+				days: formatNumber$1(benefit.daysLeft)
+			}) : t("row.poolBenefitClaimable", {
+				title: benefit.title,
+				count: formatNumber$1(benefit.creditNum)
+			})), (0, react.createElement)("button", {
+				type: "button",
+				className: "dsm-btn dsm-btn-outline dsm-workbuddy-pool-small-btn dsm-workbuddy-pool-benefit-btn",
+				disabled: rowBusy,
+				title: t("row.poolBenefitHint", { url: WORKBUDDY_PLAN_URL }),
+				"aria-label": t("row.poolBenefitClaimAria", {
+					title: benefit.title,
+					count: formatNumber$1(benefit.creditNum)
+				}),
+				onClick: () => onClaim(benefit.kind, benefit.title, benefit.creditNum)
+			}, (0, react.createElement)("span", null, claimBusy && rowBusyAction === "claim" ? t("row.poolBenefitClaiming") : t("row.poolBenefitClaim"))))))), (0, react.createElement)("span", {
 				className: "dsm-workbuddy-pool-probe",
 				...probe?.message === void 0 ? {} : { title: probe.message }
 			}, (0, react.createElement)("span", { className: "dsm-workbuddy-pool-probe-main" }, probeLine), probeLabel === void 0 && age === void 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-probe-prov" }, probeLabel === void 0 ? null : (0, react.createElement)("span", { className: probeLabel.className }, probeLabel.text), probeLabel === void 0 || age === void 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-prov-sep" }, "·"), age === void 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-prov-age" }, age), probe === void 0 ? null : (0, react.createElement)("span", { className: "dsm-workbuddy-pool-prov-model" }, probe.modelId === void 0 ? t("row.poolProbeModelUnknown") : t("row.poolProbeModel", { model: probe.modelId })))), checkinSupported ? (0, react.createElement)("span", { className: "dsm-workbuddy-pool-checkin" }, account.checkedInToday === void 0 ? (0, react.createElement)("span", {
@@ -2540,13 +2646,13 @@ window.__ModuleLoader__.load({
 			}, t("row.poolCheckinUnknown")) : account.checkedInToday ? (0, react.createElement)("span", { className: "dsm-workbuddy-pool-checked" }, t("row.poolCheckedIn")) : t("row.poolNotCheckedIn")) : null, (0, react.createElement)("span", { className: "dsm-workbuddy-pool-row-actions" }, (0, react.createElement)("button", {
 				type: "button",
 				className: "dsm-btn dsm-btn-outline dsm-workbuddy-pool-small-btn",
-				disabled: busy || testDisabled,
+				disabled: rowBusy || testDisabled,
 				title: testDisabled ? targetHint : void 0,
 				onClick: onTest
 			}, t("row.poolRowTest")), (0, react.createElement)("button", {
 				type: "button",
 				className: "dsm-btn dsm-btn-outline dsm-workbuddy-pool-small-btn",
-				disabled: busy,
+				disabled: rowBusy,
 				title: t("row.poolRowRemoveHint"),
 				"aria-label": t("row.poolRowRemoveAria", { accountName: name }),
 				onClick: onRemove
@@ -3566,11 +3672,11 @@ window.__ModuleLoader__.load({
 		* Client styles for the WorkBuddy plugin card.
 		*
 		* 参考：dingminhua/dsh-connect-trae（MIT，Copyright (c) 2026 LaoDing）
-		*   — 整套 `dsm-*` 卡片样式系统（卡片外壳、按钮原语、`--dsw-alias-*`
+		*   — 整套 dsm-* 卡片样式系统（卡片外壳、按钮原语、--dsw-alias-*
 		*     主题变量与十六进制回退值）逐字沿用自该项目，其又复制自
 		*     dingminhua/dsh-subagent-default-model（MIT）的 SETTINGS_CSS。
 		*     沿用目的是让两个插件共享同一套外部表现语言。
-		* 改动：类名由 `dsm-trae-*` 改为 `dsm-workbuddy-*`；
+		* 改动：类名由 dsm-trae-* 改为 dsm-workbuddy-*；
 		*   移除 trae 特有的 1M 变体样式，新增按套餐聚合的积分行样式；
 		*   双 provider 化后新增国内版/国际版 tab 栏样式。
 		*
@@ -3960,6 +4066,114 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-pool-credits b{color:var(--dsw-alias-label-primary,#e6e6e6);font-weight:600}
 .dsm-workbuddy-pool-soon{font-size:11px;line-height:16px;color:var(--dsw-alias-state-warn-primary,#f59e0b)}
 .dsm-workbuddy-pool-soon-plain{font-size:11px;line-height:16px;color:var(--dsw-alias-label-tertiary,#999)}
+/* Claimable benefits (issue #79). A quiet line by default — it is an opportunity, not a fault — and loud only when the window is about to close. */
+.dsm-workbuddy-pool-benefits{display:flex;flex-wrap:wrap;align-items:center;gap:6px;font-size:11px;line-height:16px;color:var(--dsw-alias-label-tertiary,#999);min-width:0}
+/* One entry = text + pill, and the text wraps rather than being cut.
+   The tag used to be nowrap + ellipsis, which truncated the label to
+   「模型服务异常补偿…」 — dropping the amount, i.e. the only part the user is
+   deciding on. Measured in headless Chrome at the card's real width, the entry
+   line has room for two lines, so the tag clamps to two and shows the whole
+   label; the pill wraps to the line below and never shrinks.
+   line-clamp, not plain wrapping: an unexpectedly long upstream title must not
+   push the row taller than the pill can travel. */
+.dsm-workbuddy-pool-benefit-tag{min-width:0;overflow-wrap:anywhere;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;overflow:hidden}
+/* min-width:0 IS the whole fix (issue #79).
+   The pill made this entry's min-content 229px (full line + button) inside a
+   148px column, so it painted over the probe column beside it.
+   A flex ITEM defaults to min-width:auto and refuses to shrink below its
+   content, which is what pinned it at 229; min-width:0 lets the tag ellipsize
+   and the pill keep its size.
+
+   Measured in headless Chrome against the real rendered row, as an A/B:
+     min-width:0        -> 0 overflowing children, entry 148px
+     without it          -> 3 overflowing children, entry 229px
+   Changing the row's grid tracks to minmax(0,...) was tried too and made NO
+   difference (the entry overflows its CELL, so the CELL was never the
+   constraint) — so the tracks are left as they were. */
+.dsm-workbuddy-pool-benefit{display:flex;flex-wrap:wrap;align-items:center;gap:2px 5px;min-width:0;max-width:100%}
+.dsm-workbuddy-pool-benefit-urgent{color:var(--dsw-alias-state-warn-primary,#f59e0b);font-weight:600}
+/* The claim pill: a solid amber call to action.
+   Orange, not the brand blue, because this is the ONE control in the pool that
+   hands the user something (500 credits) instead of spending their attention on
+   a read-only figure. It should read as an opportunity, and amber is the hue
+   that says "take this" without shouting.
+
+   Solid fill rather than a tinted outline: at 19px tall and 46px wide, a tinted
+   outline sat next to the 1,294 credit figure above it and read as DISABLED.
+   The solid fill also survives the row's grey text without competing for the
+   eye. The card's own 已签到 green is the only other saturated element here.
+
+   Load-bearing details, each measured in headless Chrome:
+   - white-space:nowrap: without it the flex row squeezed 领取 into 领/取 on
+     two lines and the pill grew into a 32px-tall blob;
+   - a fixed 19px height, so it matches the 11px text beside it instead of
+     inheriting .dsm-btn's padding;
+   - flex:none, so the shrinking column eats the TEXT and never the pill. */
+/* Order matters: this rule must come AFTER .dsm-btn-outline (line ~36) so its
+   amber background wins. Two-class specificity turned out to be the wrong lever
+   and was REMOVED after measuring: pairing the classes also beat the
+   dsm-workbuddy-pool-small-btn padding, and without dsm-btn-outline on the
+   element the button fell back to dsm-btn's default background — rendered white
+   on a dark row. Source order is what was already working; keep it. */
+.dsm-workbuddy-pool-benefit-btn{
+  /* Flex centring plus a 1px nudge is what actually centres 领取.
+     Measured on the rendered pill in headless Chrome (OCR-free pixel scan of
+     the glyph mask inside the 46x19 box):
+       display:inline-flex; align-items:center  ->  above 3.5px, below 4.5px,
+                                                     glyph sat 1.0px low
+       plus translateY(-0.5px) below           ->  above 4.0px, below 4.0px
+     Flex centring centres the LINE BOX, and a CJK glyph's ink sits below the
+     centre of its em box, so centring the box leaves the ink low. The nudge
+     compensates for the ink, not for the box. It is half a pixel because the
+     label renders at 2x on a retina display and 1px would overshoot there. */
+  display:inline-flex;
+  align-items:center;
+  justify-content:center;
+  flex:none;
+  padding:0 9px;
+  height:19px;
+  font-size:11px;
+  line-height:1;
+  font-weight:600;
+  border-radius:999px;
+  white-space:nowrap;
+  letter-spacing:.01em;
+  border-color:var(--dsw-alias-state-warn-primary,#f59e0b);
+  color:#2a1d05;
+  background:var(--dsw-alias-state-warn-primary,#f59e0b);
+  /* The only shadow in the pool table: it lifts the pill off the row so the
+     control reads as clickable rather than as part of the label. */
+  box-shadow:0 1px 2px rgba(0,0,0,.28);
+  transition:filter .12s ease;
+}
+/* Optical centring for the label (issue #79).
+   Flex centring centres the LINE BOX, but a CJK glyph's ink sits below the
+   centre of that box, so 领取 measured 3.5px above / 4.5px below — visibly low.
+   padding-top pushes the ink down by shifting the line box within the centred
+   flex item. Measured on the rendered pill in headless Chrome, as a sweep:
+     (none)        -> above 3.5 / below 4.5  (+1.0 low)
+     padding-top:1px -> above 4.0 / below 4.0  (centred)
+     padding-top:2px -> above 4.5 / below 3.5  (-1.0 high)
+   transform and padding-bottom were both tried first and moved the ink the
+   WRONG way, because both grow the flex item, which re-centres the line box
+   downward. Padding-top is the one that shifts the ink up. */
+.dsm-workbuddy-pool-benefit-btn > span{display:block;padding-top:1px}
+.dsm-workbuddy-pool-benefit-btn:hover:not(:disabled){
+  /* Brighten, do not invert: an inverted pill loses its "take this" reading,
+     and the dark-on-amber swap is the part that looked cheap in the draft. */
+  filter:brightness(1.08);
+  border-color:var(--dsw-alias-state-warn-primary,#f59e0b);
+  color:#2a1d05;
+  background:var(--dsw-alias-state-warn-primary,#f59e0b);
+}
+.dsm-workbuddy-pool-benefit-btn:active:not(:disabled){filter:brightness(.94)}
+/* A row action is in flight: this row, or another one. The pill goes flat so it
+   cannot be clicked twice while the first claim is still landing. */
+.dsm-workbuddy-pool-benefit-btn:disabled{
+  opacity:.45;
+  cursor:default;
+  box-shadow:none;
+}
 .dsm-workbuddy-pool-probe,.dsm-workbuddy-pool-checkin{font-size:12px;line-height:17px;color:var(--dsw-alias-label-tertiary,#999);min-width:0;overflow-wrap:anywhere}
 .dsm-workbuddy-pool-probe{display:flex;flex-direction:column;gap:4px}
 .dsm-workbuddy-pool-probe-main{color:var(--dsw-alias-label-secondary,#c6c9d0)}
@@ -3977,6 +4191,12 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-pool-members-head{display:flex;align-items:flex-start;justify-content:space-between;gap:12px;flex-wrap:wrap}
 .dsm-workbuddy-pool-members-title{margin:0 0 3px;font-size:13px;font-weight:600;color:var(--dsw-alias-label-primary,#e6e6e6)}
 .dsm-workbuddy-pool-members-actions{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
+/* The 测试/删除 and 全选/全不选 buttons. Shared with the benefit pill, which
+ * OVERRIDES both properties at higher specificity (see its rule above): a pill is
+ * a capsule whose height is fixed at 19px, so inheriting this 3px/10px rhythm
+ * pushed its own padding/line-height out and changed how the label sat.
+ * Kept as-is rather than narrowed to the parents that use it, so the row-action
+ * and select-all sizing stays in one place. */
 .dsm-workbuddy-pool-small-btn{padding:3px 10px;font-size:12px}
 .dsm-workbuddy-pool-check{display:inline-flex;align-items:center;flex:none;cursor:pointer}
 .dsm-workbuddy-pool-check input{margin:0;cursor:pointer;accent-color:var(--dsw-alias-brand-primary,#5686fe)}
@@ -4137,7 +4357,7 @@ window.__ModuleLoader__.load({
 		* Composer credit readout styles, injected by the readout component itself.
 		*
 		* 参考：dingminhua/dsh-connect-trae（MIT，Copyright (c) 2026 LaoDing）
-		*   — 该项目的 `COMPOSER_POINTS_CSS`，类名改为 `dsm-workbuddy-*`，
+		*   — 该项目的 COMPOSER_POINTS_CSS，类名改为 dsm-workbuddy-*，
 		*     其余（尺寸、节奏、主题变量与回退值、表格对齐）逐条沿用。
 		*
 		* Separate from the card bundle because the readout lives in the session's
@@ -6898,7 +7118,7 @@ window.__ModuleLoader__.load({
 		*/
 		const en = {
 			"row.title": "WorkBuddy credits & models (dsh-connect-workbuddy)",
-			"row.desc": "Use WorkBuddy models in DSH and see your remaining credits; the domestic and international sides are two independent providers, each with its own account — use both at the same time.",
+			"row.desc": "Use WorkBuddy models in DSH: each refresh reads every model's credit multiplier from the upstream catalog, image input is toggled per model, several accounts can be switched or failed over automatically, and daily check-in plus your remaining credits are one click away. The domestic and international sides are two independent providers, each with its own account — use both at the same time.",
 			"row.expand": "Expand",
 			"row.collapse": "Collapse",
 			"row.tabCn": "Domestic",
@@ -7068,6 +7288,15 @@ window.__ModuleLoader__.load({
 			"row.poolCheckedIn": "Checked in",
 			"row.poolNotCheckedIn": "Not checked in",
 			"row.poolCheckinUnknown": "—",
+			"row.poolBenefitClaimable": "{title}: {count} credits",
+			"row.poolBenefitUrgent": "{title}: {count} credits · {days}d left",
+			"row.poolBenefitDueToday": "{title}: {count} credits · last day",
+			"row.poolBenefitClaim": "Claim",
+			"row.poolBenefitClaiming": "Claiming…",
+			"row.poolBenefitClaimAria": "Claim {title} ({count} credits) for this account",
+			"row.poolLogBenefitClaimed": "{accountName} claimed {title}: {count} credits",
+			"row.poolLogBenefitFailed": "{accountName} claim failed: {message}",
+			"row.poolBenefitHint": "Claim it on the plans page: {url}",
 			"row.poolCreditSoon": "{count} expiring within 3 days",
 			"row.poolCreditNearest": "Nearest package expires {at}",
 			"row.poolExcludedRateLimited": "Rate limited",
@@ -7211,7 +7440,7 @@ window.__ModuleLoader__.load({
 		};
 		const zh = {
 			"row.title": "接入使用 WorkBuddy 积分与模型（dsh-connect-workbuddy）",
-			"row.desc": "在 DSH 中使用 WorkBuddy 模型并随时查看剩余积分；国内版与国际版是两个独立供应商，各有自己的账号，可同时使用。",
+			"row.desc": "在 DSH 中使用 WorkBuddy 模型：每次刷新都按上游目录读取每个模型的积分倍率，图片输入可逐模型开关，多个账号可切换或由账号池自动换号，每日签到与剩余积分一键可查。国内版与国际版是两个独立供应商，各有自己的账号，可同时使用。",
 			"row.expand": "展开",
 			"row.collapse": "收起",
 			"row.tabCn": "国内版",
@@ -7381,6 +7610,15 @@ window.__ModuleLoader__.load({
 			"row.poolCheckedIn": "已签到",
 			"row.poolNotCheckedIn": "未签到",
 			"row.poolCheckinUnknown": "—",
+			"row.poolBenefitClaimable": "{title}：{count} 积分",
+			"row.poolBenefitUrgent": "{title}：{count} 积分 · 剩 {days} 天",
+			"row.poolBenefitDueToday": "{title}：{count} 积分 · 今天截止",
+			"row.poolBenefitClaim": "领取",
+			"row.poolBenefitClaiming": "领取中…",
+			"row.poolBenefitClaimAria": "为该账号领取{title}（{count} 积分）",
+			"row.poolLogBenefitClaimed": "{accountName} 已领取{title}：{count} 积分",
+			"row.poolLogBenefitFailed": "{accountName} 领取失败：{message}",
+			"row.poolBenefitHint": "去套餐与积分页领取：{url}",
 			"row.poolCreditSoon": "{count} 积分 3 天内过期",
 			"row.poolCreditNearest": "最近积分包 {at} 过期",
 			"row.poolExcludedRateLimited": "被限流",

package/lib/{host-heartbeat-BpArQi1Q.js → host-heartbeat-BQHO4oiB.js}

@@ -917,6 +917,19 @@ function clearAtRestKeyCache() {
 *
 * @module dsh-connect-workbuddy/upstream
 */
+/**
+* The write half of each campaign: the endpoint that actually grants the
+* credits.
+*
+* Kept beside the status paths because they must move together: the pair is
+* what the 「套餐与积分」 page itself uses (`xp`/`vp` in its bundle), and a
+* campaign whose status is read from one path can only be claimed through its
+* matching claim path. Note the same absence of a `/v2` prefix.
+*/
+const BENEFIT_CLAIM_PATHS = {
+	compensation: "/billing/meter/claim-compensation",
+	gift: "/billing/meter/claim-gift"
+};
 const CN_CHAT_BASE = "https://copilot.tencent.com";
 const CN_BILLING_BASE = "https://www.codebuddy.cn";
 const GLOBAL_BASE = "https://www.workbuddy.ai";
@@ -1921,6 +1934,90 @@ var WorkBuddyUpstreamClient = class {
 			...typeof data["claim_button_text"] === "string" && data["claim_button_text"] !== "" ? { claimButtonText: data["claim_button_text"] } : {}
 		};
 	}
+	/**
+	* Read every promotional benefit this account can still see, WITHOUT claiming
+	* anything.
+	*
+	* The campaign list is closed and small on purpose: the gateway exposes one
+	* status endpoint per campaign, so "discover benefits" is a fixed fan-out, not
+	* a search. A new campaign type means a new `/billing/meter/*-status` endpoint
+	* added here — the plugin never guesses at undocumented ones.
+	*
+	* Every endpoint is read in parallel because they are independent, and a
+	* failure is per-endpoint: one campaign answering 5xx must not blank out the
+	* other. The caller gets only what was actually read.
+	*
+	* Note the paths carry NO `/v2` prefix — these are not the `/v2/billing/meter`
+	* family the credit and check-in calls use. Probing `/v2/...` answers 404, which
+	* is how this distinction was found.
+	*/
+	async fetchBenefits(credential) {
+		const read = async (kind, path) => {
+			try {
+				return await this.readBenefitStatus(kind, credential, path);
+			} catch {
+				return;
+			}
+		};
+		const [compensation, gift] = await Promise.all([read("compensation", "/billing/meter/compensation-status"), read("gift", "/billing/meter/check-gift-claimed")]);
+		return [compensation, gift].filter((benefit) => benefit !== void 0);
+	}
+	/** One benefit status endpoint. Throws on anything that is not a clean `code: 0`. */
+	async readBenefitStatus(kind, credential, path) {
+		const response = await fetch(`${billingBase(credential)}${path}`, {
+			method: "POST",
+			headers: billingHeaders(credential),
+			body: "{}",
+			signal: AbortSignal.timeout(JSON_TIMEOUT_MS)
+		});
+		const envelope = await readEnvelope(response);
+		if (!response.ok || envelope.code !== 0) throw envelopeError(response.status, envelope);
+		const data = typeof envelope.data === "object" && envelope.data !== null ? envelope.data : {};
+		const numberField = (key) => typeof data[key] === "number" ? data[key] : 0;
+		/** The gateway states times as `YYYY-MM-DD HH:MM:SS` in local time. */
+		const timeField = (key) => {
+			const raw = data[key];
+			if (typeof raw !== "string" || raw.trim() === "") return void 0;
+			const parsed = Date.parse(raw.replace(" ", "T"));
+			return Number.isNaN(parsed) ? void 0 : parsed;
+		};
+		const endsAtMs = timeField("end_time");
+		const startsAtMs = timeField("start_time");
+		const claimedAtMs = timeField("claimed_at");
+		return {
+			kind,
+			active: data["active"] === true,
+			claimed: data["claimed"] === true,
+			creditNum: numberField("credit_num"),
+			...endsAtMs === void 0 ? {} : { endsAtMs },
+			...startsAtMs === void 0 ? {} : { startsAtMs },
+			...claimedAtMs === void 0 ? {} : { claimedAtMs }
+		};
+	}
+	/**
+	* Claim one benefit campaign on ONE account (issue #79).
+	*
+	* This is a real credit grant on a real account, so it takes no account
+	* argument other than the credential it is handed: the caller decides which
+	* single account, and there is deliberately no batch form of this method. The
+	* browser route is the only caller, and it guards the mutation with the same
+	* POST + loopback checks the check-in route carries.
+	*
+	* The response is not parsed: the documented envelope of these two endpoints
+	* is an empty success, and the caller re-reads the status afterwards. That
+	* re-read, not this answer, is what the user is shown — which is why a claim
+	* that silently did nothing still cannot leave the card saying 待领取.
+	*/
+	async claimBenefit(credential, kind) {
+		const response = await fetch(`${billingBase(credential)}${BENEFIT_CLAIM_PATHS[kind]}`, {
+			method: "POST",
+			headers: billingHeaders(credential),
+			body: "{}",
+			signal: AbortSignal.timeout(JSON_TIMEOUT_MS)
+		});
+		const envelope = await readEnvelope(response);
+		if (!response.ok || envelope.code !== 0) throw envelopeError(response.status, envelope);
+	}
 	/** Claim today's check-in reward. The browser route guards this mutation. */
 	async claimDailyCheckin(credential) {
 		const response = await fetch(`${billingBase(credential)}/v2/billing/meter/daily-checkin`, {
@@ -3977,7 +4074,7 @@ function generationOf(version) {
 //#endregion
 //#region src/version.ts
 /** The npm package version this build was produced from. */
-const WORKBUDDY_CONNECT_VERSION = "4.9.4";
+const WORKBUDDY_CONNECT_VERSION = "4.10.0";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/lib/index.d.ts

@@ -706,6 +706,47 @@ interface WorkBuddyCheckinClaim {
   streakDays: number;
   isStreakDay: boolean;
 }
+/**
+ * One promotional benefit the account may or may not still be entitled to.
+ *
+ * Read from the billing gateway's OWN status endpoints — the same two the
+ * 「套餐与积分」 page calls before it decides whether to render a claim card
+ * (`/billing/meter/compensation-status`, `/billing/meter/check-gift-claimed`).
+ * Reading them is what makes the card honest: the plugin shows a benefit only
+ * while the gateway itself would still show one.
+ *
+ * The two flags answer DIFFERENT questions and neither can be derived from the
+ * other — this is the single most important fact about this shape, measured on
+ * a real account pool:
+ *
+ *   - `active` is about the WINDOW, not about the reader. An account that has
+ *     already claimed still reports `active: true` (observed: `claimed: true`
+ *     together with `active: true` on a claimed gift), so `active` alone cannot
+ *     mean "claimable".
+ *   - `claimed` is about THIS account, and it survives the window: once the
+ *     campaign lapses the endpoint keeps answering `claimed: false` with
+ *     `active: false` (observed on every international account, whose campaign
+ *     ended months ago).
+ *
+ * Hence a benefit is claimable exactly when {@link active} AND NOT
+ * {@link claimed}. See `benefitOf` in `src/benefits.ts`.
+ */
+interface WorkBuddyBenefit {
+  /** Which campaign this is; the plugin renders one row per kind. */
+  kind: 'compensation' | 'gift';
+  /** The campaign is inside its window (empty, see: already claimed ≠ inactive). */
+  active: boolean;
+  /** This account has already taken it — permanently, even after the window. */
+  claimed: boolean;
+  /** Credits on offer, as the gateway states them. */
+  creditNum: number;
+  /** Window end, epoch ms. Absent when the gateway sent none it could parse. */
+  endsAtMs?: number;
+  /** Window start, epoch ms. Compensation omits it. */
+  startsAtMs?: number;
+  /** When this account claimed it, epoch ms. Only meaningful with `claimed`. */
+  claimedAtMs?: number;
+}
 /** Token refresh answer; fields the upstream omits stay absent. */
 interface WorkBuddyRefreshOutcome {
   accessToken: string;
@@ -934,6 +975,41 @@ declare class WorkBuddyUpstreamClient {
   fetchModels(credential: WorkBuddyCredential, signal?: AbortSignal): Promise<readonly WorkBuddyUpstreamModel[]>;
   /** Query today's check-in status without changing account state. */
   fetchCheckinStatus(credential: WorkBuddyCredential): Promise<WorkBuddyCheckinStatus>;
+  /**
+   * Read every promotional benefit this account can still see, WITHOUT claiming
+   * anything.
+   *
+   * The campaign list is closed and small on purpose: the gateway exposes one
+   * status endpoint per campaign, so "discover benefits" is a fixed fan-out, not
+   * a search. A new campaign type means a new `/billing/meter/*-status` endpoint
+   * added here — the plugin never guesses at undocumented ones.
+   *
+   * Every endpoint is read in parallel because they are independent, and a
+   * failure is per-endpoint: one campaign answering 5xx must not blank out the
+   * other. The caller gets only what was actually read.
+   *
+   * Note the paths carry NO `/v2` prefix — these are not the `/v2/billing/meter`
+   * family the credit and check-in calls use. Probing `/v2/...` answers 404, which
+   * is how this distinction was found.
+   */
+  fetchBenefits(credential: WorkBuddyCredential): Promise<readonly WorkBuddyBenefit[]>;
+  /** One benefit status endpoint. Throws on anything that is not a clean `code: 0`. */
+  private readBenefitStatus;
+  /**
+   * Claim one benefit campaign on ONE account (issue #79).
+   *
+   * This is a real credit grant on a real account, so it takes no account
+   * argument other than the credential it is handed: the caller decides which
+   * single account, and there is deliberately no batch form of this method. The
+   * browser route is the only caller, and it guards the mutation with the same
+   * POST + loopback checks the check-in route carries.
+   *
+   * The response is not parsed: the documented envelope of these two endpoints
+   * is an empty success, and the caller re-reads the status afterwards. That
+   * re-read, not this answer, is what the user is shown — which is why a claim
+   * that silently did nothing still cannot leave the card saying 待领取.
+   */
+  claimBenefit(credential: WorkBuddyCredential, kind: WorkBuddyBenefit['kind']): Promise<void>;
   /** Claim today's check-in reward. The browser route guards this mutation. */
   claimDailyCheckin(credential: WorkBuddyCredential): Promise<WorkBuddyCheckinClaim>;
   /**
@@ -2011,6 +2087,29 @@ declare function probeModel(input: {
   signal?: AbortSignal;
 }): Promise<WorkBuddyProbeResult>;
 //#endregion
+//#region src/benefits.d.ts
+/** What the account card shows for one campaign. */
+type WorkBuddyBenefitState =
+/** Offered, inside its window, not taken yet. The only state with a claim button. */
+'claimable' |
+/** This account already took it. Rendered as nothing at all. */
+'claimed' |
+/** The window is over and it was never taken — the offer is gone. */
+'expired';
+/** One campaign, resolved for display. */
+interface WorkBuddyBenefitView {
+  kind: WorkBuddyBenefit['kind'];
+  state: WorkBuddyBenefitState;
+  /** Credits on offer, as the gateway stated them. */
+  creditNum: number;
+  /** Window end, epoch ms. */
+  endsAtMs?: number;
+  /** Whole days until the window closes, floored at 0. Absent without `endsAtMs`. */
+  daysLeft?: number;
+  /** True while the window closes within {@link URGENT_DAYS} days. */
+  urgent: boolean;
+}
+//#endregion
 //#region src/account-pool.d.ts
 /**
  * Which of the pool's writers produced a measurement.
@@ -2651,6 +2750,24 @@ type WorkBuddyWebPoolExclusion = 'unusable' | 'rate-limited' |
  * does not say (issue #56).
  */
 'model-busy' | 'out-of-credit' | 'credential-rejected' | 'not-found' | 'unavailable' | 'failed';
+/** One claimable benefit, as the card renders it (issue #79). */
+interface WorkBuddyWebBenefit {
+  /** Which campaign: compensation (crash补偿) or gift (新人首月赠送). */
+  kind: 'compensation' | 'gift';
+  /** Display name for the campaign, resolved Host-side so both clients agree. */
+  title: string;
+  /** Credits on offer. */
+  creditNum: number;
+  /**
+   * Whole days until the window closes, floored at 0.
+   *
+   * ABSENT when the gateway stated no end time — the card must then omit the
+   * countdown rather than print a number nobody knows.
+   */
+  daysLeft?: number;
+  /** True when the window closes within 3 days, so the card can say 即将到期. */
+  urgent: boolean;
+}
 /**
  * One account's row in the pool, as the card renders it.
  *
@@ -2727,6 +2844,16 @@ interface WorkBuddyWebPoolAccount {
    * result the user just watched succeed.
    */
   checkedInToday?: boolean;
+  /**
+   * Promotional benefits this account can STILL claim (issue #79).
+   *
+   * Never carries a claimed or lapsed campaign: the issue's rule is that those
+   * do not appear at all, so their absence here IS the "hide it" instruction.
+   * ABSENT means not read (or nothing claimable), and the card renders no line
+   * either way — a benefit line is only ever added to say "there is something
+   * here for you", never to announce its own absence.
+   */
+  benefits?: readonly WorkBuddyWebBenefit[];
   /**
    * The model a TEST of this row would use (issue #61).
    *
@@ -2884,7 +3011,7 @@ declare const WORKBUDDY_SETTINGS_NS: "workbuddy";
 interface WorkBuddyStatusRouteOptions {
   /** The region-scoped credential store backing each region's requests. */
   store(region: WorkBuddyRegion): WorkBuddyCredentialStore;
-  client: Pick<WorkBuddyUpstreamClient, 'fetchCredits' | 'fetchCheckinStatus' | 'claimDailyCheckin'>;
+  client: Pick<WorkBuddyUpstreamClient, 'fetchCredits' | 'fetchCheckinStatus' | 'claimDailyCheckin' | 'fetchBenefits' | 'claimBenefit'>;
   /**
    * The requested region's last-refreshed model directory (unfiltered) for
    * card display. Region-scoped because the CN and international apps expose
@@ -3170,6 +3297,37 @@ interface WorkBuddyPoolDeps {
    * per-account read in the full document.
    */
   cachedCheckedInToday?(region: WorkBuddyRegion): Readonly<Record<string, boolean>>;
+  /**
+   * Claimable promotional benefits per account id (issue #79).
+   *
+   * Only campaigns the account can STILL claim are present; a claimed or lapsed
+   * campaign is absent on purpose, so the card renders nothing for it. Absent
+   * (or a missing entry) also means "not read yet", which the card treats the
+   * same way — no line, rather than a guessed state.
+   */
+  benefits?(region: WorkBuddyRegion): Promise<Readonly<Record<string, readonly WorkBuddyBenefitView[]>>>;
+  /**
+   * Claimable benefits, from the readings already taken this process.
+   *
+   * The first-paint counterpart of {@link benefits}: no request, so painting
+   * never waits on two upstream reads per account.
+   */
+  cachedBenefits?(region: WorkBuddyRegion): Readonly<Record<string, readonly WorkBuddyBenefitView[]>>;
+  /**
+   * Forget this account's cached benefit reading so the next status read is live.
+   *
+   * The claim route writes to upstream directly, so nothing else in the plugin
+   * knows the campaign just changed. Without this the card kept showing 领取 for
+   * up to `BENEFIT_CACHE_MS` (30 min) after a SUCCESSFUL claim: the credits went
+   * up, the pill stayed, and the only remaining explanation was "the claim
+   * silently failed" — which invited a second click the route then refused as
+   * already-claimed. `checkin` has the same rule and invalidates its own cache;
+   * this is the benefit counterpart.
+   *
+   * Absent is legal (a Host from before this hook) and means "the click refreshes
+   * the card, but the host-side cache may still answer stale for a while".
+   */
+  invalidateBenefit?(region: WorkBuddyRegion, accountId: string): void;
   /**
    * Every local sign-in the pool does NOT cover, so the card can offer them to
    * check in. Absent means the card lists only pool members.

package/lib/index.js

@@ -1,4 +1,4 @@
-import { $ as isEncryptedFieldWrapper, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as deriveAtRestKey, K as WORKBUDDY_APP_EXECUTABLE_ENV, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as fetchAtRestKeyPayload, Y as deriveAtRestKeyId, Z as findWorkbuddyAppExecutable, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as workbuddyAppExecutableCandidates, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as withFileLock, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as isWorkbuddyBundle, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, it as readAtRestKey, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as writeFileAtomic, m as deriveCatalog, n as clearHostHeartbeat, nt as macosNestedAppBundles, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as clearAtRestKeyCache, r as isHeartbeatProcessAlive, rt as openEncryptedField, s as writeHostHeartbeat, st as resolveDshHome, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as macosBundleExecutable, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-BpArQi1Q.js";
+import { $ as isEncryptedFieldWrapper, A as workbuddyAccountId, B as modelIdOfBody, C as defaultDesktopAuthDirs, D as isVaultAccountId, E as isEncryptedCredentialError, F as WorkBuddyUpstreamClient, G as regionOf, H as parseReasoning, I as classifyUpstreamError, J as deriveAtRestKey, K as WORKBUDDY_APP_EXECUTABLE_ENV, L as declaredTools, M as CREDENTIAL_REJECTED_CODE, N as WORKBUDDY_FALLBACK_SYSTEM_PROMPT, O as legacyWorkbuddyOwnAuthPath, P as WorkBuddyCredentialRejectedError, R as isCredentialRejectedError, S as defaultDesktopAuthCandidates, T as hasEncryptedCredentialFields, U as parseUpstreamModel, V as parseCreditMultiplier, W as prepareChatBody, X as fetchAtRestKeyPayload, Y as deriveAtRestKeyId, Z as findWorkbuddyAppExecutable, _ as WORKBUDDY_AUTH_FILENAME, a as readHostHeartbeat, at as workbuddyAppExecutableCandidates, b as WorkBuddyEncryptedCredentialError, c as WORKBUDDY_CONNECT_VERSION, ct as withFileLock, d as FALLBACK_WORKBUDDY_MODELS_GLOBAL, et as isWorkbuddyBundle, f as WorkBuddyCatalog, g as ENCRYPTED_CREDENTIAL_CODE, h as fallbackModelsFor, i as processStartTimeMs, it as readAtRestKey, j as workbuddyOwnAuthPath, k as parseWorkBuddyAuth, l as piAiRuntimeInfo, lt as writeFileAtomic, m as deriveCatalog, n as clearHostHeartbeat, nt as macosNestedAppBundles, o as workbuddyHostHeartbeatPath, p as applyContextBudgets, q as clearAtRestKeyCache, r as isHeartbeatProcessAlive, rt as openEncryptedField, s as writeHostHeartbeat, st as resolveDshHome, t as WORKBUDDY_HOST_HEARTBEAT_FILENAME, tt as macosBundleExecutable, u as FALLBACK_WORKBUDDY_MODELS, v as WORKBUDDY_AUTH_FILE_ENV, w as defaultDesktopAuthPath, x as authFileName, y as WorkBuddyCredentialStore, z as knownRegionOf } from "./host-heartbeat-BQHO4oiB.js";
 import z from "@deepseek-ai/schemastery";
 import { appendFile, mkdir, readFile, writeFile } from "node:fs/promises";
 import { randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -78,6 +78,46 @@ async function resolveCredentialRecovery(options) {
 	};
 	return { reloginRequired: false };
 }
+/** How the display copy names each campaign. */
+const WORKBUDDY_BENEFIT_TITLES = {
+	compensation: "模型服务异常补偿",
+	gift: "新人首月赠送"
+};
+/**
+* Resolve one campaign against the clock.
+*
+* `active` is the gateway's own window verdict and is trusted as-is; the clock is
+* consulted only for the countdown, never to override `active`. An account whose
+* clock is skewed therefore still renders the upstream's answer rather than a
+* locally-invented one.
+*/
+function benefitOf(benefit, nowMs) {
+	const daysLeft = benefit.endsAtMs === void 0 ? void 0 : Math.max(0, Math.ceil((benefit.endsAtMs - nowMs) / 864e5));
+	const state = benefit.claimed ? "claimed" : benefit.active ? "claimable" : "expired";
+	return {
+		kind: benefit.kind,
+		state,
+		creditNum: benefit.creditNum,
+		...benefit.endsAtMs === void 0 ? {} : { endsAtMs: benefit.endsAtMs },
+		...daysLeft === void 0 ? {} : { daysLeft },
+		urgent: state === "claimable" && daysLeft !== void 0 && daysLeft <= 3
+	};
+}
+/**
+* The claimable campaigns of one account, urgent first.
+*
+* Ordered by `daysLeft` ascending so the soonest-expiring offer leads — the whole
+* point of surfacing this is that a 3-day window otherwise lapses unnoticed. A
+* campaign with no stated end sorts last, because "no deadline" is never more
+* urgent than a deadline.
+*
+* `claimed` and `expired` campaigns are dropped here, not in the renderer: the
+* user asked for them to be ABSENT, and encoding that in one tested place beats
+* asking every caller to remember to filter.
+*/
+function claimableBenefits(benefits, nowMs) {
+	return benefits.map((benefit) => benefitOf(benefit, nowMs)).filter((view) => view.state === "claimable").sort((left, right) => (left.daysLeft ?? 1e6) - (right.daysLeft ?? 1e6));
+}
 //#endregion
 //#region src/adapter.ts
 /**
@@ -4772,6 +4812,15 @@ const WORKBUDDY_USAGE_PATH = "/plugins/dsh-connect-workbuddy/usage";
 * per-account figures.
 */
 const WORKBUDDY_ACCOUNT_CREDITS_PATH = "/plugins/dsh-connect-workbuddy/account-credits";
+/**
+* Plugin-owned benefit claim endpoint: POST + loopback, ONE account per call.
+*
+* A credit grant is a write on a real account, so it carries the same guards as
+* check-in, plus `?accountId=` because the pool can hold accounts this plugin
+* did not pick. There is deliberately no batch action here — see
+* `claimBenefit` and the route handler.
+*/
+const WORKBUDDY_BENEFIT_CLAIM_PATH = "/plugins/dsh-connect-workbuddy/benefit/claim";
 /** Plugin-owned live model refresh endpoint. */
 const WORKBUDDY_MODELS_REFRESH_PATH = "/plugins/dsh-connect-workbuddy/models/refresh";
 /** Plugin-owned local account rescan endpoint. */
@@ -5366,6 +5415,7 @@ async function workBuddyWebPool(deps, region, fast = false) {
 	const rankedIds = new Set(ranked.map((row) => row.account.id));
 	const others = await pool.otherAccounts?.(region) ?? [];
 	const checkedIn = fast ? pool.cachedCheckedInToday?.(region) ?? {} : await pool.checkedInToday?.(region).catch(() => ({})) ?? {};
+	const claimable = fast ? pool.cachedBenefits?.(region) ?? {} : await pool.benefits?.(region).catch(() => ({})) ?? {};
 	const rows = [...ranked.map((row) => ({
 		account: row.account,
 		member: true,
@@ -5413,7 +5463,18 @@ async function workBuddyWebPool(deps, region, fast = false) {
 			...row?.excludedBy === void 0 ? {} : { excludedBy: row.excludedBy },
 			current: account.id === currentAccountId,
 			member,
-			...checkedIn[account.id] === void 0 ? {} : { checkedInToday: checkedIn[account.id] }
+			...checkedIn[account.id] === void 0 ? {} : { checkedInToday: checkedIn[account.id] },
+			...(() => {
+				const views = claimable[account.id];
+				if (views === void 0 || views.length === 0) return {};
+				return { benefits: views.map((view) => ({
+					kind: view.kind,
+					title: WORKBUDDY_BENEFIT_TITLES[view.kind],
+					creditNum: view.creditNum,
+					...view.daysLeft === void 0 ? {} : { daysLeft: view.daysLeft },
+					urgent: view.urgent
+				})) };
+			})()
 		};
 	});
 	return {
@@ -5543,6 +5604,43 @@ function registerWorkBuddyStatusRoute(ctx, deps) {
 				}
 			}
 		});
+		ctx.webServer.register({
+			kind: "exact",
+			path: WORKBUDDY_BENEFIT_CLAIM_PATH,
+			handler: async (req, res) => {
+				if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
+				if (!loopbackOrigin(req)) return json(res, 403, { error: "origin-not-trusted" });
+				const region = requestRegion(req, res);
+				if (region === void 0) return;
+				const url = new URL(req.url ?? "/", "http://127.0.0.1");
+				const accountId = url.searchParams.get(WORKBUDDY_POOL_ACCOUNT_PARAM);
+				const kind = url.searchParams.get("kind");
+				if (accountId === null || accountId === "") return json(res, 400, { error: "accountId is required" });
+				if (kind !== "compensation" && kind !== "gift") return json(res, 400, { error: "kind must be compensation or gift" });
+				try {
+					const credential = await deps.store(region).credentialFor(accountId);
+					if (credential === void 0) return json(res, 404, { error: "no credential for this account" });
+					const target = (await deps.client.fetchBenefits(credential)).find((benefit) => benefit.kind === kind);
+					if (target === void 0) return json(res, 404, { error: "benefit not available on this account" });
+					if (target.claimed) return json(res, 409, {
+						error: "benefit already claimed",
+						benefit: target
+					});
+					if (!target.active) return json(res, 409, {
+						error: "benefit activity is not active",
+						benefit: target
+					});
+					await deps.client.claimBenefit(credential, kind);
+					deps.pool?.invalidateBenefit?.(region, accountId);
+					json(res, 200, {
+						claimed: true,
+						benefit: (await deps.client.fetchBenefits(credential)).find((benefit) => benefit.kind === kind) ?? target
+					});
+				} catch (error) {
+					json(res, 500, { error: safeMessage(error) });
+				}
+			}
+		});
 		const disposeRefresh = ctx.webServer.register({
 			kind: "exact",
 			path: WORKBUDDY_MODELS_REFRESH_PATH,
@@ -6268,6 +6366,16 @@ function apply(ctx, config) {
 	* immediately instead of waiting out the TTL.
 	*/
 	const checkinStateCache = {};
+	/**
+	* Per-region, per-account benefit readings (issue #79).
+	*
+	* Same shape and same reasoning as `checkinStateCache`: claim state changes
+	* when a human acts on the web page or in the desktop app, not spontaneously,
+	* so a per-poll read of two endpoints per account would be thousands of
+	* requests a day to learn nothing. Coarser than the check-in TTL because a
+	* benefit window is measured in days, not hours.
+	*/
+	const benefitStateCache = {};
 	const settingsNs = settingsNamespaceOf(ctx);
 	const stacks = {};
 	for (const region of REGION_KEYS) {
@@ -6653,6 +6761,77 @@ function apply(ctx, config) {
 				}
 				return cached;
 			},
+			/**
+			* Claimable promotional benefits per account (issue #79).
+			*
+			* Only campaigns the account can STILL claim are returned — a claimed or
+			* lapsed one is absent, which is what the issue asked for. Absent means
+			* the card shows no benefit line at all.
+			*
+			* Two status reads per account, so it is cached for `BENEFIT_CACHE_MS` and
+			* skipped entirely when the pool is off (same reasoning as
+			* `checkedInToday`: no table, no request).
+			*/
+			async benefits(region) {
+				if (!poolPreferencesOf(current(), region).enabled) return {};
+				const store = stacks[region].store;
+				const accounts = await store.accounts();
+				const now = Date.now();
+				const entries = await Promise.all(accounts.map(async (account) => {
+					const cached = benefitStateCache[region]?.[account.id];
+					if (cached !== void 0 && now - cached.atMs < 18e5) return [account.id, cached.views];
+					const credential = await store.credentialFor(account.id).catch(() => void 0);
+					if (credential === void 0) return void 0;
+					const read = await client.fetchBenefits(credential).catch(() => void 0);
+					if (read === void 0) return void 0;
+					const views = claimableBenefits(read, now);
+					benefitStateCache[region] = {
+						...benefitStateCache[region],
+						[account.id]: {
+							views,
+							atMs: now
+						}
+					};
+					return [account.id, views];
+				}));
+				return Object.fromEntries(entries.filter((entry) => entry !== void 0));
+			},
+			/**
+			* Claimable benefits from the readings already taken this process.
+			*
+			* The first-paint counterpart of `benefits`, mirroring
+			* `cachedCheckedInToday`: no request, so painting never blocks on two
+			* calls per account. An unmeasured account is absent, not empty.
+			*/
+			cachedBenefits(region) {
+				if (!poolPreferencesOf(current(), region).enabled) return {};
+				const now = Date.now();
+				const state = benefitStateCache[region] ?? {};
+				const cached = {};
+				for (const [accountId, entry] of Object.entries(state)) {
+					if (now - entry.atMs >= 18e5) continue;
+					cached[accountId] = entry.views;
+				}
+				return cached;
+			},
+			/**
+			* Drop one account's cached benefit reading (issue #79).
+			*
+			* The claim route writes upstream itself, so this cache is the ONLY thing
+			* that can keep answering "claimable" after a successful claim — and it was
+			* never invalidated: the credits went up, the 领取 pill stayed for up to 30
+			* minutes, and the claim looked like it had silently failed. That is the
+			* exact symptom the user reported. `checkin` already deletes its entries
+			* after a batch; this is the same rule for the claim.
+			*
+			* Deleting (rather than overwriting with the post-claim read) keeps the
+			* ownership where it belongs: the route already made the authoritative
+			* re-read, and the next `benefits()` refills this from live data.
+			*/
+			invalidateBenefit(region, accountId) {
+				const cached = benefitStateCache[region];
+				if (cached !== void 0) delete cached[accountId];
+			},
 			async currentAccountId(region) {
 				await applyPoolSelection(region).catch(() => void 0);
 				const credential = await stacks[region].store.current().catch(() => void 0);

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "dsh-connect-workbuddy",
   "displayName": "DSH Connect WorkBuddy",
-  "description": "把本机登录的 WorkBuddy 模型接入 DeepSeek Harness，并提供只读的积分概览与模型管理。",
-  "version": "4.9.4",
+  "description": "把本机登录的 WorkBuddy 模型（国内版与国际版）接入 DeepSeek Harness：每次刷新按上游目录自动读取每个模型的积分倍率，支持逐模型图片输入开关、多账号切换与账号池自动换号，并提供每日签到、卡片与输入框里的胶囊积分读数等只读积分概览。",
+  "version": "4.10.0",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",