dsh-cost-meter 1.7.37 → 1.7.39

package/lib/custom-balance.js

@@ -148,14 +148,15 @@ const warnedHosts = new Set()
  * @param {import('cordis').Context} ctx
  * @param {Record<string, unknown>} config
  */
-export async function queryCustomBalance(ctx, config) {
+export async function queryCustomBalance(ctx, config, { signal } = {}) {
+  signal?.throwIfAborted()
   const custom = config?.customBalance
   if (custom?.enabled !== true) {
     const error = new Error('custom balance disabled')
     error.soft = true
     throw error
   }
-  if (custom.adapter === 'aliyun') return queryAliyunBalance(ctx, config)
+  if (custom.adapter === 'aliyun') return queryAliyunBalance(ctx, config, { signal })
   const request = custom.request
   if (request === null || typeof request !== 'object' || typeof request.url !== 'string' || request.url.length === 0) {
     throw new Error('customBalance.request.url is required')
@@ -203,7 +204,7 @@ export async function queryCustomBalance(ctx, config) {
   }
   const method = typeof request.method === 'string' ? request.method.toUpperCase() : 'GET'
   const headers = await resolveHeaders(rawHeaders, ctx)
-  const init = { method, headers, redirect: 'manual' }
+  const init = { method, headers, redirect: 'manual', signal }
   if (method !== 'GET' && method !== 'HEAD' && request.body !== undefined) {
     init.body = typeof request.body === 'string' ? request.body : JSON.stringify(request.body)
     if (!Object.keys(headers).some(name => name.toLowerCase() === 'content-type')) {
@@ -215,6 +216,7 @@ export async function queryCustomBalance(ctx, config) {
   // 目标主机,一次跨源重定向就足以把密钥发去别处;遇到重定向直接报错。
   const response = await fetchWithRetry(request.url, init, { timeoutMs: 15000 })
   if (response.status >= 300 && response.status < 400) {
+    try { await response.body?.cancel?.() } catch {}
     throw new Error(`custom balance endpoint redirected (HTTP ${String(response.status)}); redirects are refused to avoid forwarding credentials to another host`)
   }
   if (!response.ok) {

package/lib/external-usage.js

@@ -0,0 +1,111 @@
+import { constants } from 'node:fs'
+import { open } from 'node:fs/promises'
+import { localDayKey, zeroDay } from './store.js'
+import { costOf, providerPriceEntryFor, usdFromCost } from './pricing.js'
+
+export const EXTERNAL_USAGE_MAX_BYTES = 512 * 1024
+const MAX_AGE = 30 * 86400000
+const FRESH_AGE = 86400000
+const fields = ['input', 'output', 'cacheRead', 'cacheWrite', 'reasoning', 'calls', 'cost', 'apiCost']
+const object = v => v !== null && typeof v === 'object' && !Array.isArray(v)
+const count = v => typeof v === 'number' && Number.isSafeInteger(v) && v >= 0 && v <= 1e12
+const money = v => typeof v === 'number' && Number.isFinite(v) && v >= 0 && v <= 1e9
+const dateKey = v => typeof v === 'string' && /^\d{4}-\d{2}-\d{2}$/.test(v) && !Number.isNaN(Date.parse(v + 'T00:00:00Z')) && new Date(v + 'T00:00:00Z').toISOString().slice(0, 10) === v
+const timestamp = v => typeof v === 'string' && /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/.test(v) && dateKey(v.slice(0, 10)) ? Date.parse(v) : NaN
+
+function add(into, day) {
+  for (const key of fields) into[key] += day[key]
+}
+
+function summary(days, dayKey) {
+  const today = zeroDay(dayKey)
+  const month = zeroDay(dayKey.slice(0, 7))
+  const total = zeroDay('total')
+  const history = Object.values(days).sort((a, b) => b.date.localeCompare(a.date)).slice(0, 90)
+  for (const day of Object.values(days)) {
+    add(total, day)
+    if (day.date.startsWith(dayKey.slice(0, 7))) add(month, day)
+    if (day.date === dayKey) add(today, day)
+  }
+  return { today, month, total, history }
+}
+
+/** A snapshot replaces its predecessor; it never mutates the DSH ledger or balance reconciliation. */
+export function parseExternalUsageSnapshot(value, config, nowMs = Date.now()) {
+  if (!object(value)) return null
+  if (Object.hasOwn(value, 'sources') && !Array.isArray(value.sources)) return null
+  const fetchedAt = timestamp(value.fetchedAt)
+  if (!Number.isFinite(fetchedAt) || fetchedAt > nowMs + 300000 || nowMs - fetchedAt > MAX_AGE) return null
+  const entries = Array.isArray(value.sources) ? value.sources : [value]
+  if (entries.length < 1 || entries.length > 8) return null
+  const seen = new Set()
+  const sources = []
+  const combinedDays = {}
+  let recordCount = 0
+  for (const entry of entries) {
+    if (!object(entry) || typeof entry.source !== 'string' || entry.source.length < 1 || entry.source.length > 64 || seen.has(entry.source)) return null
+    seen.add(entry.source)
+    if (object(entry.days) === Array.isArray(entry.records)) return null // exactly one input mode
+    const days = {}
+    if (object(entry.days)) {
+      if (Object.keys(entry.days).length > 3660) return null
+      for (const [date, raw] of Object.entries(entry.days)) {
+        if (!dateKey(date) || date > localDayKey(nowMs) || !object(raw) || !count(raw.input) || !count(raw.output) || !count(raw.cached) || !count(raw.calls) || !money(raw.costUsd)) return null
+        if (raw.cacheWrite !== undefined && !count(raw.cacheWrite)) return null
+        if (raw.reasoning !== undefined && !count(raw.reasoning)) return null
+        days[date] = { ...zeroDay(date), input: raw.input, output: raw.output, cacheRead: raw.cached, cacheWrite: raw.cacheWrite ?? 0, reasoning: raw.reasoning ?? 0, calls: raw.calls, cost: raw.costUsd, apiCost: raw.costUsd }
+      }
+    } else {
+      recordCount += entry.records.length
+      if (recordCount > 5000) return null
+      const ids = new Set()
+      for (const raw of entry.records) {
+        if (!object(raw) || typeof raw.id !== 'string' || raw.id.length < 1 || raw.id.length > 128 || ids.has(raw.id)) return null
+        ids.add(raw.id)
+        const at = timestamp(raw.at)
+        if (!Number.isFinite(at) || at > nowMs + 300000 || !count(raw.input) || !count(raw.output) || !count(raw.cached)) return null
+        if (raw.cacheWrite !== undefined && !count(raw.cacheWrite)) return null
+        if (raw.reasoning !== undefined && !count(raw.reasoning)) return null
+        if (typeof raw.provider !== 'string' || !raw.provider || typeof raw.model !== 'string' || !raw.model) return null
+        const resolved = providerPriceEntryFor(raw.provider, raw.model, config?.prices, {
+          mode: config?.priceMatch === 'exact' ? 'exact' : 'auto', overrides: config?.priceOverrides,
+        })
+        if (!resolved.priced) return null
+        const peak = { enabled: resolved.billingMode === 'deepseek-peak' && config?.peakEnabled === true,
+          effectiveAtMs: Date.parse(config?.peakEffectiveAt ?? ''), windows: config?.peakWindows, holidays: config?.peakHolidays }
+        const tokens = { input: raw.input, output: raw.output, cacheRead: raw.cached, cacheWrite: raw.cacheWrite ?? 0, reasoning: raw.reasoning ?? 0 }
+        const priced = costOf(tokens, resolved.entry, at, peak)
+        const usd = usdFromCost(priced, resolved.billingMode === 'deepseek-peak' && config?.prices?.currency === 'CNY' ? 'CNY' : 'USD', config?.exchangeRate)
+        const date = localDayKey(at)
+        const day = days[date] ?? (days[date] = zeroDay(date))
+        for (const key of ['input', 'output', 'cacheRead', 'cacheWrite', 'reasoning']) day[key] += tokens[key]
+        day.calls++
+        day.cost += usd
+        day.apiCost += usd
+      }
+    }
+    for (const [date, day] of Object.entries(days)) add(combinedDays[date] ?? (combinedDays[date] = zeroDay(date)), day)
+    sources.push({ source: entry.source, ...summary(days, localDayKey(nowMs)) })
+  }
+  return { fetchedAt, stale: nowMs - fetchedAt > FRESH_AGE, sources,
+    combined: summary(combinedDays, localDayKey(nowMs)) }
+}
+
+/** Bounded, fail-closed read of a regular file. Producers should write a temp file and rename it. */
+export async function readExternalUsageSnapshot(path, config, nowMs = Date.now()) {
+  let file
+  try {
+    file = await open(path, constants.O_RDONLY | (constants.O_NONBLOCK ?? 0))
+    const stat = await file.stat()
+    if (!stat.isFile() || stat.size > EXTERNAL_USAGE_MAX_BYTES) return null
+    const buffer = Buffer.alloc(EXTERNAL_USAGE_MAX_BYTES + 1)
+    let length = 0
+    while (length < buffer.length) {
+      const { bytesRead } = await file.read(buffer, length, buffer.length - length, null)
+      if (!bytesRead) break
+      length += bytesRead
+    }
+    if (length > EXTERNAL_USAGE_MAX_BYTES) return null
+    return parseExternalUsageSnapshot(JSON.parse(buffer.subarray(0, length).toString('utf8')), config, nowMs)
+  } catch { return null } finally { await file?.close().catch(() => {}) }
+}

package/lib/index.js

@@ -33,6 +33,7 @@ import { queryGatewayQuota, emptyGatewayQuota, managementKeyVarOf, gatewaySource
 import { stateSchema, TYPERT } from './typert.host.js'
 import { customBalanceCredentialVars } from './custom-balance.js'
 import { readScnetSnapshot } from './scnet-snapshot.js'
+import { readExternalUsageSnapshot } from './external-usage.js'
 import { queryQwenCli } from './qwen-cli.js'
 import { queryBailianCli } from './bailian-cli.js'
 import { getSessionCost as readSessionCost } from './session-tree.js'
@@ -776,7 +777,7 @@ function normalizeGoWindow(raw) {
  * @param config - 插件配置(goQuota.apiKey / 消息语言)。
  * @param locale - 消息语言(zh/en)。
  */
-async function queryGoQuota(ctx, config, locale) {
+async function queryGoQuota(ctx, config, locale, signal) {
   const key = await resolveGoKey(ctx, config)
   if (key === null) {
     const error = new Error(tmsg(locale, 'goQuotaKeyMissing'))
@@ -786,6 +787,7 @@ async function queryGoQuota(ctx, config, locale) {
   // Cloudflare 前置会间歇性重置连接(ECONNRESET → fetch failed):瞬时网络错误
   // 自动重试,401/403 等业务状态仍走下方原语义(issue #28)。
   const response = await fetchWithRetry(GO_QUOTA_URL, {
+    signal,
     headers: {
       authorization: `Bearer ${key}`,
       // 浏览器 UA:避免被 opencode.ai 前置 Cloudflare 以 error 1010 拦截。
@@ -943,7 +945,7 @@ function balanceEndpoint(baseURL) {
  * @param locale - 消息语言(zh/en)。
  * @returns { currency, totalBalance, grantedBalance, toppedUpBalance }。
  */
-async function queryBalance(ctx, locale) {
+async function queryBalance(ctx, locale, signal) {
   const settings = ctx.get('settings')
   const section = typeof settings?.get === 'function' ? settings.get('llm-deepseek') : undefined
   const baseURL = section?.baseURL
@@ -975,6 +977,7 @@ async function queryBalance(ctx, locale) {
   }
   // 瞬时网络错误自动重试(issue #28 同一封装);非 2xx 状态仍按业务错误处理。
   const response = await fetchWithRetry(endpoint, {
+    signal,
     headers: { authorization: `Bearer ${apiKey}` },
   }, { timeoutMs: 15000 })
   if (!response.ok) throw new Error(tmsg(locale, 'balanceHttp', { code: String(response.status) }))
@@ -1165,6 +1168,9 @@ async function buildState(ledger, balance = emptyBalance(), goQuota = emptyGoQuo
     codingPlans,
     planStats,
     history: ledger.history(90),
+    // 独立来源账本只读快照；today/month/history 继续仅指 DSH，官方余额对账不混入外部费用。
+    ...(await readExternalUsageSnapshot(join(dirname(ledger.path), 'external_usage.json'), ledger.config, now)
+      .then(externalUsage => externalUsage ? { externalUsage } : {})),
     // 密钥脱敏(v1.6.8):下发给前端的 config 不含任何明文密钥,只留空占位字符串。
     config: clientConfig,
     priceCatalog: ledger.config.prices?.currency === 'CNY' ? PRICE_CATALOG_CNY : PRICE_CATALOG,
@@ -1313,17 +1319,32 @@ async function describeGoKey(ctx, config) {
 }
 
 function createService(ctx, ledger, openRouterPrices) {
+  let active = true
   // 余额进程内缓存:display=off 时不清缓存但不下发;按 refreshMinutes 过期。
   let balanceCache = { fetchedAt: 0, value: emptyBalance() }
   // OpenCode Go 订阅额度进程内缓存(同上策略)。
   let goQuotaCache = { fetchedAt: 0, value: emptyGoQuota() }
   // Coding plan 额度进程内缓存(每家一个条目,同上策略)。
   let codingPlanCaches = {}
+  const resetQueryCache = target => {
+    if (target === 'balance') {
+      balanceCache.controller?.abort()
+      balanceCache = { fetchedAt: 0, value: emptyBalance() }
+    } else if (target === 'goQuota') {
+      goQuotaCache.controller?.abort()
+      goQuotaCache = { fetchedAt: 0, value: emptyGoQuota() }
+    } else if (target.startsWith('codingPlans.')) {
+      const id = target.split('.')[1]
+      codingPlanCaches[id]?.controller?.abort()
+      delete codingPlanCaches[id]
+    }
+  }
   ctx.effect(() => () => {
-    codingPlanCaches.qwen?.controller?.abort()
-    delete codingPlanCaches.qwen
-    codingPlanCaches.minimax?.controller?.abort()
-    delete codingPlanCaches.minimax
+    active = false
+    gatewayQuotaCaches = {}
+    resetQueryCache('balance')
+    resetQueryCache('goQuota')
+    for (const id of Object.keys(codingPlanCaches)) resetQueryCache('codingPlans.' + id)
   }, 'cost-meter: quota query cancellation')
   // 余额差对账提示(drift 时 ok=false 携带文案,其余静默)。
   let reconcileNotice = { ok: true, message: '' }
@@ -1400,8 +1421,10 @@ function createService(ctx, ledger, openRouterPrices) {
 
   /** 按需刷新余额(过期或 force);失败落 error 状态,不影响其余状态字段。 */
   const ensureBalance = async (force = false) => {
+    if (!active) return
     const config = balanceConfig()
     if (config.display === 'off') {
+      balanceCache.controller?.abort()
       balanceCache = { fetchedAt: Date.now(), value: emptyBalance() }
       return
     }
@@ -1413,9 +1436,12 @@ function createService(ctx, ledger, openRouterPrices) {
       // force 链式等待:等上一个任务结束后由本调用继续走新建流程,
       // 保证手动强制刷新不被在途任务吞掉(否则返回的是即将过期的旧数据)。
       await prev.catch(() => {})
+      if (!active || balanceConfig().display === 'off') return
       if (balanceCache.inFlight === prev) break // 上一个任务结束后由本调用继续走新建流程
     }
-    const task = queryBalance(ctx, localeOf(ledger.config)).then(result => {
+    const controller = new AbortController()
+    const task = queryBalance(ctx, localeOf(ledger.config), controller.signal).then(result => {
+      if (!active || balanceCache.inFlight !== task) return
       balanceCache = { fetchedAt: Date.now(), value: { status: 'ok', message: '', fetchedAt: Date.now(), ...result } }
       // 余额差交叉校验(issue #18):官方余额当日变动 vs 本地账本今日官方渠道费用,偏差超阈提示。
       // issue #36:Coding Plan / 自定义 Provider 的费用不动官方余额,对账只统计 deepseek 渠道,否则订阅用户会恒报 drift。
@@ -1452,6 +1478,7 @@ function createService(ctx, ledger, openRouterPrices) {
           : { ok: true, message: '' }
       }
     }, error => {
+      if (!active || balanceCache.inFlight !== task) return
       // 软失败(未配置 Key / 非官方端点等守卫错误,不会自愈)标记 fetchedAt 避免无意义重试;
       // 硬失败(网络超时等临时性问题)写入 error 状态但保留外层 fetchedAt——UI 仍显示失败原因,
       // 且下次轮询自动重试,不再被缓存有效期钉死(PR #40 补全)。
@@ -1466,13 +1493,16 @@ function createService(ctx, ledger, openRouterPrices) {
       if (balanceCache.inFlight === task) delete balanceCache.inFlight
     })
     balanceCache.inFlight = task
+    balanceCache.controller = controller
     await task
   }
 
   /** 按需刷新 OpenCode Go 额度(过期或 force);未启用/显示关闭/失败均落空或 error 状态。 */
   const ensureGoQuota = async (force = false) => {
+    if (!active) return
     const config = goQuotaConfig()
     if (config.enabled === false || config.display === 'off') {
+      goQuotaCache.controller?.abort()
       goQuotaCache = { fetchedAt: Date.now(), value: emptyGoQuota() }
       return
     }
@@ -1484,12 +1514,16 @@ function createService(ctx, ledger, openRouterPrices) {
       // force 链式等待:等上一个任务结束后由本调用继续走新建流程,
       // 保证手动强制刷新不被在途任务吞掉(否则返回的是即将过期的旧数据)。
       await prev.catch(() => {})
+      if (!active || goQuotaConfig().enabled === false || goQuotaConfig().display === 'off') return
       if (goQuotaCache.inFlight === prev) break // 上一个任务结束后由本调用继续走新建流程
     }
-    const task = queryGoQuota(ctx, ledger.config, localeOf(ledger.config)).then(result => {
+    const controller = new AbortController()
+    const task = queryGoQuota(ctx, ledger.config, localeOf(ledger.config), controller.signal).then(result => {
+      if (!active || goQuotaCache.inFlight !== task) return
       goQuotaCache = { fetchedAt: Date.now(), value: { status: 'ok', message: '', fetchedAt: Date.now(), ...result } }
       recordQuotaSamples('go', { rolling: result.rolling, weekly: result.weekly, monthly: result.monthly })
     }, error => {
+      if (!active || goQuotaCache.inFlight !== task) return
       // 失败不更新外层 fetchedAt:让下次轮询重试,而非在缓存有效期内一直跳过(PR #40)。
       // 软失败(未登录/无订阅,不会自愈)完整缓存避免无意义重试;硬失败(网络超时等)写入
       // error 状态但保留旧 fetchedAt——UI 仍显示失败原因,轮询到点自动重试。
@@ -1504,6 +1538,7 @@ function createService(ctx, ledger, openRouterPrices) {
       if (goQuotaCache.inFlight === task) delete goQuotaCache.inFlight
     })
     goQuotaCache.inFlight = task
+    goQuotaCache.controller = controller
     await task
   }
 
@@ -1516,6 +1551,18 @@ function createService(ctx, ledger, openRouterPrices) {
   const customBalanceConfigs = () => Array.isArray(ledger.config?.customBalances)
     ? ledger.config.customBalances : []
   const customBalanceCaches = {}
+  const customBalanceFingerprint = index => {
+    // Currency conversion is presentation-only; it must preserve the API snapshot.
+    const { convertToDisplayCurrency, labelEn, ...query } = customBalanceConfigs()[index] ?? {}
+    return JSON.stringify([query, localeOf(ledger.config)])
+  }
+  const discardCustomBalanceCache = index => {
+    customBalanceCaches[index]?.controller?.abort()
+    delete customBalanceCaches[index]
+  }
+  ctx.effect(() => () => {
+    for (const index of Object.keys(customBalanceCaches)) discardCustomBalanceCache(index)
+  }, 'cost-meter: custom balance cancellation')
   /**
    * 作废引用了指定变量的全部自定义余额快照缓存(v1.7.6,issue #86):
    * setCredential / clearCredential 写过 customVar 后调用,下一次状态组装
@@ -1526,17 +1573,24 @@ function createService(ctx, ledger, openRouterPrices) {
     for (const key of Object.keys(customBalanceCaches)) {
       const index = Number(key)
       const uses = customBalanceCredentialVars(entries[index]).includes(varName)
-      if (uses) customBalanceCaches[index] = { fetchedAt: 0, value: emptyCustomBalance() }
+      if (uses) discardCustomBalanceCache(index)
     }
   }
   const customBalanceCacheAt = index => {
+    const fingerprint = customBalanceFingerprint(index)
+    if (customBalanceCaches[index]?.fingerprint !== fingerprint) discardCustomBalanceCache(index)
     if (customBalanceCaches[index] === undefined) {
-      customBalanceCaches[index] = { fetchedAt: 0, value: emptyCustomBalance() }
+      customBalanceCaches[index] = { fingerprint, fetchedAt: 0, value: emptyCustomBalance() }
     }
     return customBalanceCaches[index]
   }
   const ensureCustomBalance = async (force = false, index = null) => {
+    if (!active) return
     const entries = customBalanceConfigs()
+    for (const key of Object.keys(customBalanceCaches)) {
+      if (!entries[key]) discardCustomBalanceCache(key)
+      else customBalanceCacheAt(key)
+    }
     const targets = []
     if (index === null) {
       // ambient:全部启用且非 off 的条目;一条都没有时清理出空缓存(与旧单条 off 行为一致)。
@@ -1545,7 +1599,7 @@ function createService(ctx, ledger, openRouterPrices) {
       })
       if (targets.length === 0) {
         for (const key of Object.keys(customBalanceCaches)) {
-          customBalanceCaches[key] = { fetchedAt: Date.now(), value: emptyCustomBalance() }
+          discardCustomBalanceCache(key)
         }
         return
       }
@@ -1558,6 +1612,7 @@ function createService(ctx, ledger, openRouterPrices) {
   const ensureCustomBalanceEntry = async (force, index) => {
     const config = customBalanceConfigs()[index]
     const cache = customBalanceCacheAt(index)
+    const current = () => active && customBalanceCaches[index] === cache && cache.fingerprint === customBalanceFingerprint(index)
     const interval = Math.max(1, Number(config?.refreshMinutes) || 15) * 60_000
     if (!force && Date.now() - cache.fetchedAt < interval) return
     while (cache.inFlight !== undefined) {
@@ -1566,50 +1621,50 @@ function createService(ctx, ledger, openRouterPrices) {
       // force 链式等待:等上一个任务结束后由本调用继续走新建流程,
       // 保证手动强制刷新不被在途任务吞掉(否则返回的是即将过期的旧数据)。
       await prev.catch(() => {})
+      if (!current()) return
       if (cache.inFlight === prev) break // 上一个任务结束后由本调用继续走新建流程
     }
     // queryCustomBalance 的单条入参重载:customBalances[i] 视图(兼容旧键,设置页
     // 面向 entries 编辑)。
     const configForEntry = { ...ledger.config, customBalance: config, customBalances: undefined }
-    const task = queryCustomBalance(ctx, configForEntry).then(result => {
-      customBalanceCaches[index] = {
-        fetchedAt: Date.now(),
-        value: { status: 'ok', message: '', fetchedAt: Date.now(), index, ...result },
-      }
+    cache.controller = new AbortController()
+    const task = queryCustomBalance(ctx, configForEntry, { signal: cache.controller.signal }).then(result => {
+      if (!current()) return
+      cache.fetchedAt = Date.now()
+      cache.value = { status: 'ok', message: '', fetchedAt: cache.fetchedAt, index, ...result }
     }, error => {
+      if (!current()) return
       // 失败不更新外层 fetchedAt:让下次轮询重试(PR #40,与 ensureGoQuota 同策略)。
       // 软失败完整缓存;硬失败写 error 状态但保留旧 fetchedAt(UI 可见 + 自动重试)。
       const now = Date.now()
       const message = error instanceof Error ? error.message : String(error)
       if (error && error.soft === true) {
-        customBalanceCaches[index] = {
+        cache.fetchedAt = now
+        cache.value = {
+          ...emptyCustomBalance(),
+          label: typeof config?.label === 'string' ? config.label : '',
+          status: 'off',
+          message,
           fetchedAt: now,
-          value: {
-            ...emptyCustomBalance(),
-            label: typeof config?.label === 'string' ? config.label : '',
-            status: 'off',
-            message,
-            fetchedAt: now,
-            index,
-          },
+          index,
         }
       } else {
-        customBalanceCaches[index] = {
-          ...cache,
-          value: {
-            ...emptyCustomBalance(),
-            label: typeof config?.label === 'string' ? config.label : '',
-            status: 'error',
-            message,
-            fetchedAt: now,
-            index,
-          },
+        cache.value = {
+          ...emptyCustomBalance(),
+          label: typeof config?.label === 'string' ? config.label : '',
+          status: 'error',
+          message,
+          fetchedAt: now,
+          index,
         }
       }
     }).finally(() => {
-      if (customBalanceCaches[index]?.inFlight === task) delete customBalanceCaches[index].inFlight
+      if (cache.inFlight === task) {
+        delete cache.inFlight
+        delete cache.controller
+      }
     })
-    customBalanceCaches[index] = { ...cache, inFlight: task }
+    cache.inFlight = task
     await task
   }
   /** 多条快照(仅含有缓存值的条目;旧单条镜像取第一条可见条目)。 */
@@ -1617,7 +1672,7 @@ function createService(ctx, ledger, openRouterPrices) {
     const entries = customBalanceConfigs()
     const out = []
     entries.forEach((entry, index) => {
-      const cached = customBalanceCaches[index]
+      const cached = active ? customBalanceCacheAt(index) : undefined
       if (cached === undefined) return
       out.push({ ...emptyCustomBalance(), ...cached.value, index })
     })
@@ -1734,10 +1789,12 @@ function createService(ctx, ledger, openRouterPrices) {
 
   /** 按需刷新单家 coding plan 额度(过期或 force);未启用/显示关闭/失败均落空或 error 状态。 */
   const ensureCodingPlan = async (id, force = false) => {
+    if (!active) return
     if (id === 'qwen') return ensureQwenPlan(force)
     if (id === 'minimax') return ensureMiniMaxPlan(force)
     const config = codingPlanConfigOf(id)
     if (config.enabled !== true || config.display === 'off') {
+      codingPlanCaches[id]?.controller?.abort()
       codingPlanCaches[id] = { fetchedAt: Date.now(), value: emptyCodingPlan() }
       return
     }
@@ -1776,22 +1833,27 @@ function createService(ctx, ledger, openRouterPrices) {
       // force 链式等待:等上一个任务结束后由本调用继续走新建流程,
       // 保证手动强制刷新不被在途任务吞掉(否则返回的是即将过期的旧数据)。
       await prev.catch(() => {})
+      if (!active || codingPlanConfigOf(id).enabled !== true || codingPlanConfigOf(id).display === 'off') return
       // 任务完成时代码会整体替换 codingPlanCaches[id] 条目:必须重读活引用后再
       // 回到 while 条件判定,否则旧对象上的 inFlight 恒等于 prev,并发 force 刷新
       // 会各自重复发起任务(双重上游请求)。
       cache = codingPlanCaches[id]
     }
     const locale = localeOf(ledger.config)
+    const controller = new AbortController()
     const task = (async () => {
       const key = await resolveCodingPlanKey(ctx, id, ledger.config)
       return queryCodingPlan(id, key, locale, tmsg, {
+        signal: controller.signal,
         onAttempt: attempt => ctx.logger?.debug?.('[cost-meter] quota candidate', attempt),
       })
     })().then(result => {
+      if (!active || codingPlanCaches[id]?.inFlight !== task) return
       codingPlanCaches[id] = { fetchedAt: Date.now(), value: { status: 'ok', message: '', fetchedAt: Date.now(), windows: result.windows } }
       // SCNet 百分比来自本地自估(自我引用),不参与采样估算。
       if (id !== 'scnet') recordQuotaSamples(id, result.windows)
     }, error => {
+      if (!active || codingPlanCaches[id]?.inFlight !== task) return
       // 失败不更新外层 fetchedAt:让下次轮询重试(PR #40,与 ensureGoQuota 同策略)。
       // 软失败(未配置凭据/无订阅)完整缓存;硬失败写 error 状态但保留旧 fetchedAt。
       const now = Date.now()
@@ -1807,7 +1869,7 @@ function createService(ctx, ledger, openRouterPrices) {
     }).finally(() => {
       if (codingPlanCaches[id]?.inFlight === task) delete codingPlanCaches[id].inFlight
     })
-    codingPlanCaches[id] = { ...(codingPlanCaches[id] ?? { fetchedAt: 0, value: emptyCodingPlan() }), inFlight: task }
+    codingPlanCaches[id] = { ...(codingPlanCaches[id] ?? { fetchedAt: 0, value: emptyCodingPlan() }), inFlight: task, controller }
     await task
   }
 
@@ -1822,11 +1884,15 @@ function createService(ctx, ledger, openRouterPrices) {
     const configured = await resolveGatewayKeyConfigured(ctx, source)
     const fingerprint = gatewaySourceFingerprint(source, configured)
     const configFingerprint = gatewaySourceConfigFingerprintOf(source)
+    const currentSource = () => active && gatewaySourceConfigs().some(entry => entry.id === id && entry.enabled !== false
+      && gatewaySourceConfigFingerprintOf(entry) === configFingerprint)
+    if (!currentSource()) return emptyGatewayForSource(source)
     let cache = gatewayQuotaCaches[id]
     if (cache === undefined || cache.configFingerprint !== configFingerprint || cache.keyConfigured !== configured) {
       // Preserve only a valid LKG when config/key identity is unchanged. A changed
       // source starts empty; an old in-flight task is intentionally detached.
-      cache = { fetchedAt: 0, value: emptyGatewayForSource(source), lastGood: null, sourceFingerprint: fingerprint }
+      cache = { fetchedAt: 0, value: emptyGatewayForSource(source), lastGood: null, sourceFingerprint: fingerprint,
+        configFingerprint, keyConfigured: configured }
       gatewayQuotaCaches[id] = cache
     }
     const interval = Math.max(1, Number(source.refreshMinutes) || 15) * 60_000
@@ -1839,8 +1905,9 @@ function createService(ctx, ledger, openRouterPrices) {
       }
       // Force intentionally waits for the current request, then starts a new one.
       await current.catch(() => {})
+      if (!currentSource()) return emptyGatewayForSource(source)
       cache = gatewayQuotaCaches[id]
-      if (cache?.inFlight !== undefined) return ensureGatewayQuota(source, true)
+      if (cache === undefined || cache.inFlight !== undefined) return ensureGatewayQuota(source, true)
     }
     const task = queryGatewayQuota(ctx, source).then(value => {
       const active = gatewayQuotaCaches[id]
@@ -1852,14 +1919,14 @@ function createService(ctx, ledger, openRouterPrices) {
         message: typeof value?.message === 'string' ? value.message : '', attemptedAt: value?.attemptedAt ?? Date.now(),
         keyConfigured: value?.keyConfigured === true, keySource: typeof value?.keySource === 'string' ? value.keySource : 'none',
       }
-      gatewayQuotaCaches[id] = { fetchedAt: ok ? Date.now() : (active.fetchedAt ?? 0), value: next, lastGood, sourceFingerprint: fingerprint }
+      gatewayQuotaCaches[id] = { ...active, fetchedAt: ok ? Date.now() : (active.fetchedAt ?? 0), value: next, lastGood }
       return next
     }).catch(error => {
       const active = gatewayQuotaCaches[id]
       if (active?.inFlight !== task || active.sourceFingerprint !== fingerprint) return active?.value ?? emptyGatewayForSource(source)
       const lastGood = active.lastGood
       const next = { ...(lastGood ?? emptyGatewayForSource(source)), status: lastGood ? 'stale' : 'error', message: 'gateway query failed', attemptedAt: Date.now() }
-      gatewayQuotaCaches[id] = { fetchedAt: active.fetchedAt ?? 0, value: next, lastGood, sourceFingerprint: fingerprint }
+      gatewayQuotaCaches[id] = { ...active, fetchedAt: active.fetchedAt ?? 0, value: next, lastGood }
       return next
     }).finally(() => {
       if (gatewayQuotaCaches[id]?.inFlight === task) {
@@ -1897,7 +1964,9 @@ function createService(ctx, ledger, openRouterPrices) {
     }
     kick(balanceCache.fetchedAt > 0, () => ensureBalance(forceBalance))
     kick(goQuotaCache.fetchedAt > 0, () => ensureGoQuota(false))
-    kick(Object.values(customBalanceCaches).some(cache => (cache?.fetchedAt ?? 0) > 0), () => ensureCustomBalance(false))
+    const customWarm = customBalanceConfigs().every((entry, index) => entry?.enabled !== true || entry.display === 'off'
+      || customBalanceCacheAt(index).fetchedAt > 0)
+    kick(customWarm, () => ensureCustomBalance(false))
     kick(Object.values(codingPlanCaches).some(cache => (cache?.fetchedAt ?? 0) > 0), () => ensureCodingPlans(false))
     pending.push(ensureCodingPlan('scnet', false))
     const enabledGatewaySources = gatewaySourceConfigs().filter(source => source?.enabled !== false)
@@ -1914,6 +1983,7 @@ function createService(ctx, ledger, openRouterPrices) {
     },
 
     async updateConfig(patch) {
+      const before = ledger.config
       const gatewayBefore = ledger.config?.gatewayQuotas
       const gatewayBeforeSources = gatewayBefore?.sources
       const currencyBefore = ledger.config.prices?.currency === 'CNY' ? 'CNY' : 'USD'
@@ -1923,6 +1993,12 @@ function createService(ctx, ledger, openRouterPrices) {
         throw new Error(tmsg(locale, 'configRejected', { errors: errors.join(locale === 'zh' ? ';' : '; ') }))
       }
       ledger.config = config
+      // Cache values belong to their query settings and credential generation.
+      // Reset before build() so disabled or changed queries cannot publish late results.
+      for (const target of ['balance', 'goQuota', ...CODING_PLAN_PROVIDER_IDS.map(id => 'codingPlans.' + id)]) {
+        const value = cfg => target.startsWith('codingPlans.') ? cfg.codingPlans?.[target.split('.')[1]] : cfg[target]
+        if (before.locale !== config.locale || JSON.stringify(value(before)) !== JSON.stringify(value(config))) resetQueryCache(target)
+      }
       if (patch?.gatewayQuotas !== undefined || gatewayBefore !== config.gatewayQuotas) {
         syncGatewayQuotaCaches(gatewayBeforeSources, config.gatewayQuotas?.sources)
       }
@@ -2100,6 +2176,7 @@ function createService(ctx, ledger, openRouterPrices) {
         invalidateCustomBalanceCachesForVar(customVar)
         for (const source of gatewaySourceConfigs()) if (managementKeyVarOf(source) === customVar) delete gatewayQuotaCaches[source.id]
       }
+      else resetQueryCache(key)
       return {
         ok: true,
         message: tmsg(locale, 'credentialSaved'),
@@ -2140,6 +2217,7 @@ function createService(ctx, ledger, openRouterPrices) {
         invalidateCustomBalanceCachesForVar(customVar)
         for (const source of gatewaySourceConfigs()) if (managementKeyVarOf(source) === customVar) delete gatewayQuotaCaches[source.id]
       }
+      else resetQueryCache(key)
       return {
         ok: true,
         message: tmsg(locale, 'credentialCleared'),

package/lib/store.js

@@ -1972,6 +1972,9 @@ export class Ledger {
     let historyReset = null
     try {
       const parsed = JSON.parse(readFileSync(path, 'utf8'))
+      if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new Error('Unsupported ledger format')
+      }
       if (parsed !== null && typeof parsed === 'object') {
         if (parsed.version !== LEDGER_VERSION) {
           // 先把旧文件改名留存,再按空账本启动:防止下一次 flush 直接覆盖销毁历史。

package/lib/typert.host.js

@@ -38,6 +38,14 @@ const daySchema = z.object({
   sessions: z.array(sessionSchema),
 })
 
+const externalSummarySchema = z.object({ today: daySchema, month: daySchema, total: daySchema, history: z.array(daySchema) })
+const externalUsageSchema = z.object({
+  fetchedAt: num,
+  stale: z.boolean(),
+  sources: z.array(externalSummarySchema.extend({ source: z.string() })),
+  combined: externalSummarySchema,
+})
+
 // 带所属日期的会话条目(issue #22 按会话排行:不分日期视角)。
 const datedSessionSchema = sessionSchema.extend({ date: z.string() })
 
@@ -470,6 +478,7 @@ export const stateSchema = z.object({
   // Token Plan 统计(issue #64);缺席 = 旧快照/降级路径。
   planStats: planStatsSchema.optional(),
   history: z.array(daySchema),
+  externalUsage: externalUsageSchema.optional(),
   config: configSchema,
   priceCatalog: z.record(z.string(), z.record(z.string(), z.record(z.string(), catalogEntrySchema))).optional(),
   // 存量密钥迁移提示(v1.6.8):仅在有密钥未能自动导入凭据库时出现,值为环境变量名。