dsh-remote-plugin 0.5.6-rc.1 → 0.5.7-rc.1

package/README.en.md

@@ -0,0 +1,45 @@
+# dsh-remote-plugin
+
+[![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin)
+
+**English** · [中文](README.md)
+
+The DSH bundle plugin for DSH Remote: registers a native entry in DSH's left sidebar and opens an admin drawer from the right. The plugin **bundles the gateway and auto-starts/stops it with DSH** (standalone systemd unit); the drawer shows the token, host IP and device monitor. Works with the [dsh-Remote](https://github.com/Blank-not-black/dsh-Remote) Android app for remote control and file transfer (`/fs/list`, `/fs/file`, `/fs/upload`). The panel ships four themes (Deep Space / Sunset / Elbphilharmonie / Prairie Tower) — light / dark / neutral, following the system preference automatically.
+
+## Install
+
+```sh
+dsh plugin --profile web add dsh-remote-plugin
+# or pin a version
+dsh plugin --profile web add dsh-remote-plugin@0.5.0
+```
+
+Restart DSH Web and hard-refresh (Ctrl+F5); the app icon entry appears at the bottom of the left sidebar.
+
+git source install (equivalent):
+
+```sh
+dsh plugin --profile web add "github:Blank-not-black/dsh-Remote#main&path:/packages/plugin"
+```
+
+## Gateway
+
+- Auto-start by default: on DSH startup or drawer refresh, the plugin launches the built-in `gateway.cjs` (`0.0.0.0:8787`), independent of the DSH process; Linux uses a standalone systemd unit, and environments without systemd (e.g. macOS) automatically fall back to a resident child process.
+- On/off intent persists in `~/.dsh-remote/gateway.enabled`; it can be stopped/started from the drawer.
+- Token lives in `~/.dsh-remote/token` (auto-generated on first run, reused and never overwritten), shown in the drawer and copyable; supports **QR pairing** and **one-click rotation**.
+- Env var `DSH_REMOTE_AUTOSTART=0` disables auto management.
+- File endpoints: `/fs/list` (list directory), `/fs/file` (download with Range support), `/fs/upload` (chunked resume with pause/cancel, SHA-256 verified before writing to disk); default root is `~`, and `DSH_REMOTE_FS_ROOT` opens multiple roots (`:`-separated).
+
+## Mobile App
+
+The app is embedded in the plugin package (`apk/dsh-remote.apk`) — install the plugin and you have it, no GitHub needed:
+
+- Tap **QR code** in the desktop drawer → scan it with the phone to open the admin page → download the app from that page
+- Or open `http://<gateway-IP>:8787` in a browser to download
+- App updates are pushed by the gateway too (`update.json` relative path), never touching GitHub
+
+The app has built-in multi-server latency switching and offline chat history caching; downloaded files are stored in the system `Download/dsh-remote` folder.
+
+## License
+
+MIT

package/README.md

@@ -2,7 +2,9 @@
 
 [![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin)
 
-DSH Remote 的 DSH bundle 插件：在 DSH 左侧原生边栏注册入口，点击从右侧滑出管理抽屉；插件**内置网关程序并随 DSH 自动启停**（独立 systemd 单元），抽屉直显令牌、主机 IP 与设备监控，配合 [dsh-Remote](https://github.com/Blank-not-black/dsh-Remote) 的 Android App 实现手机远程操控与文件互传（`/fs/list`、`/fs/file`、`/fs/upload`）。
+**中文** · [English](README.en.md)
+
+DSH Remote 的 DSH bundle 插件：在 DSH 左侧原生边栏注册入口，点击从右侧滑出管理抽屉；插件**内置网关程序并随 DSH 自动启停**（独立 systemd 单元），抽屉直显令牌、主机 IP 与设备监控，配合 [dsh-Remote](https://github.com/Blank-not-black/dsh-Remote) 的 Android App 实现手机远程操控与文件互传（`/fs/list`、`/fs/file`、`/fs/upload`）。面板内置四套皮肤（深空 / 落日 / 易北爱乐厅 / 草原孤塔），亮暗中性三档随系统偏好自动切换。
 
 ## 安装
 
@@ -22,7 +24,7 @@ dsh plugin --profile web add "github:Blank-not-black/dsh-Remote#main&path:/packa
 
 ## 网关
 
-- 默认**自动启动**：DSH 启动或抽屉刷新时，插件会拉起内置 `gateway.cjs`（`0.0.0.0:8787`），独立于 DSH 进程。
+- 默认**自动启动**：DSH 启动或抽屉刷新时，插件会拉起内置 `gateway.cjs`（`0.0.0.0:8787`），独立于 DSH 进程；Linux 使用独立 systemd 单元，macOS 等无 systemd 环境自动回退为常驻子进程。
 - 开关持久化在 `~/.dsh-remote/gateway.enabled`；抽屉内可停止/启动。
 - 令牌在 `~/.dsh-remote/token`（首次自动生成，重复使用不覆盖），抽屉里显示并可复制；支持**二维码扫码配对**与**一键轮换**。
 - 环境变量 `DSH_REMOTE_AUTOSTART=0` 可关闭自动管理。
@@ -30,7 +32,13 @@ dsh plugin --profile web add "github:Blank-not-black/dsh-Remote#main&path:/packa
 
 ## 手机 App
 
-从 [Releases](https://github.com/Blank-not-black/dsh-Remote/releases/latest) 下载 `dsh-remote.apk`。推荐在抽屉点「二维码」，App「设置 → 扫码连接」直接配对；也可手动添加多个服务器地址（局域网 + Tailscale），点「测速」自动选最快。聊天记录会本地缓存，断网也能看历史；下载的文件统一放系统「下载/dsh-remote」。
+App 已随插件包内嵌（`apk/dsh-remote.apk`），装好插件即可获取，无需上 GitHub：
+
+- 桌面抽屉点「二维码」→ 手机扫码打开管理页 → 页面提供 App 下载
+- 或浏览器直接访问 `http://<网关IP>:8787` 下载
+- App 更新同样走网关自动推送（`update.json` 相对路径），全程不绕 GitHub
+
+App 内置多服务器测速切换与聊天记录离线缓存，下载文件统一放系统「下载/dsh-remote」。
 
 ## License
 

package/gateway-stats.cjs

@@ -0,0 +1,413 @@
+/* DSH Remote 统计核心 —— 零依赖
+ *
+ * 事件来源:
+ *   - 插件进程实时监听 DSH 'session/event' (assistant/message + usage) -> POST /stats/ingest
+ *   - 网关扫描 ~/.dsh/sessions 下的 session.jsonl.zstd 历史回填(启动全量 + 定期增量)
+ *
+ * 聚合:
+ *   time(UTC 毫秒) -> Asia/Shanghai(固定 UTC+8, 无夏令时) -> 日 × 小时 × 模型
+ *   时段: 高峰 9:00-12:00 / 14:00-18:00(含起点, 不含终点), 其余空闲
+ *   四桶: input(未缓存输入) / cacheRead(缓存命中读) / cacheWrite(缓存写) / output(输出)
+ *
+ * 存储:
+ *   ~/.dsh-remote/stats/days/YYYY-MM-DD.json   按天一个文件, 内含 hours
+ *   ~/.dsh-remote/stats/cursors.json           每个 session 已处理的最大 seq(幂等游标)
+ *
+ * 费用: 固定价格表(元 / 百万 tokens), v2 将改为可配置。
+ */
+'use strict'
+
+const fs = require('node:fs')
+const path = require('node:path')
+const os = require('node:os')
+const { spawn } = require('node:child_process')
+const readline = require('node:readline')
+
+// ---------- 固定价格表(v1 硬编码; v2 将改为配置文件/环境变量) ----------
+// 时段判定: 北京时间 9:00-12:00 与 14:00-18:00 为高峰(含起点不含终点)
+const PEAK_HOURS = [[9, 12], [14, 18]]
+const PRICES = {
+  'deepseek-v4-flash': {
+    inputCacheHit: { peak: 0.10, off: 0.05 },
+    inputMiss: { peak: 3.0, off: 1.5 },
+    output: { peak: 9.0, off: 4.5 },
+  },
+  'deepseek-v4-pro': {
+    inputCacheHit: { peak: 0.30, off: 0.15 },
+    inputMiss: { peak: 9.0, off: 4.5 },
+    output: { peak: 27.0, off: 13.5 },
+  },
+}
+// 缓存写入按未命中输入价计费(DeepSeek 缓存写入以未命中输入计费)
+const BUCKET_PRICE_KEY = {
+  input: 'inputMiss',
+  cacheRead: 'inputCacheHit',
+  cacheWrite: 'inputMiss',
+  output: 'output',
+}
+
+const BJ_OFFSET_MS = 8 * 3600 * 1000
+const DAYS_DIR = 'days'
+const CURSORS_FILE = 'cursors.json'
+
+function pad2(n) { return String(n).padStart(2, '0') }
+
+/** UTC 毫秒 -> 北京小时(0-23)。固定 UTC+8, 不随服务器本地时区。 */
+function beijingHour(timeMs) {
+  return new Date(timeMs + BJ_OFFSET_MS).getUTCHours()
+}
+
+/** UTC 毫秒 -> 北京自然日 'YYYY-MM-DD'。 */
+function beijingDate(timeMs) {
+  const d = new Date(timeMs + BJ_OFFSET_MS)
+  return `${d.getUTCFullYear()}-${pad2(d.getUTCMonth() + 1)}-${pad2(d.getUTCDate())}`
+}
+
+/** 北京小时 -> 时段。 */
+function periodOfHour(hour) {
+  for (const [start, end] of PEAK_HOURS) {
+    if (hour >= start && hour < end) return 'peak'
+  }
+  return 'off'
+}
+
+/** 时段单价; 未知模型返回全 0(统计照记, 费用为 0)。 */
+function pricesFor(model) {
+  return PRICES[model] || null
+}
+
+function emptyBucket() {
+  return { input: 0, cacheRead: 0, cacheWrite: 0, output: 0, cost: 0 }
+}
+
+function addTokens(bucket, key, tokens) {
+  if (typeof tokens === 'number' && Number.isFinite(tokens) && tokens > 0) {
+    bucket[key] += tokens
+  }
+  return bucket
+}
+
+/** 把一个 usage 事件累计进 bucket(含费用)。 */
+function addUsage(bucket, model, period, usage) {
+  const prices = pricesFor(model)
+  const usageObj = usage || {}
+  for (const key of ['input', 'cacheRead', 'cacheWrite', 'output']) {
+    const tokens = usageObj[key]
+    if (typeof tokens !== 'number' || !Number.isFinite(tokens) || tokens <= 0) continue
+    bucket[key] += tokens
+    if (prices) {
+      const priceKey = BUCKET_PRICE_KEY[key]
+      bucket.cost += tokens / 1e6 * prices[priceKey][period]
+    }
+  }
+  return bucket
+}
+
+function mergeBucket(dst, src) {
+  for (const key of ['input', 'cacheRead', 'cacheWrite', 'output', 'cost']) {
+    dst[key] += src[key]
+  }
+  return dst
+}
+
+/** 时段事件 -> 日/小时/模型聚合的 key。 */
+function eventKey(timeMs) {
+  return { date: beijingDate(timeMs), hour: beijingHour(timeMs), period: periodOfHour(beijingHour(timeMs)) }
+}
+
+/** 事件里的模型: 优先 message.source.model。 */
+function eventModel(event) {
+  try {
+    const m = event?.data?.message?.source?.model
+    if (typeof m === 'string' && m) return m
+  } catch {}
+  return ''
+}
+
+function normalizeUsage(event) {
+  const u = event?.data?.usage
+  if (!u || typeof u !== 'object') return null
+  return {
+    input: typeof u.inputTokens === 'number' && Number.isFinite(u.inputTokens) ? u.inputTokens : 0,
+    cacheRead: typeof u.cacheReadTokens === 'number' && Number.isFinite(u.cacheReadTokens) ? u.cacheReadTokens : 0,
+    cacheWrite: typeof u.cacheWriteTokens === 'number' && Number.isFinite(u.cacheWriteTokens) ? u.cacheWriteTokens : 0,
+    output: typeof u.outputTokens === 'number' && Number.isFinite(u.outputTokens) ? u.outputTokens : 0,
+  }
+}
+
+/** 汇总一天(hours) -> peak/off/total。 */
+function summarizeDay(day) {
+  const peak = emptyBucket()
+  const off = emptyBucket()
+  for (const hourStr of Object.keys(day?.hours || {})) {
+    const hour = Number(hourStr)
+    const target = periodOfHour(hour) === 'peak' ? peak : off
+    for (const model of Object.keys(day.hours[hourStr] || {})) {
+      mergeBucket(target, day.hours[hourStr][model])
+    }
+  }
+  const total = emptyBucket()
+  mergeBucket(total, peak)
+  mergeBucket(total, off)
+  return { peak, off, total }
+}
+
+function dayTotals(day) {
+  const s = summarizeDay(day)
+  return s
+}
+
+function tokenKeyName(key) {
+  return { input: 'input', cacheRead: 'cacheRead', cacheWrite: 'cacheWrite', output: 'output' }[key] || key
+}
+
+/** 统计存储: 单文件按天 + 游标。写操作由网关单进程调用, 内部用同步队列串行化。 */
+class StatsStore {
+  constructor(dir) {
+    this.dir = dir || path.join(os.homedir(), '.dsh-remote', 'stats')
+    this.daysDir = path.join(this.dir, DAYS_DIR)
+    this.cursorsFile = path.join(this.dir, CURSORS_FILE)
+    this.cursors = null
+    this.queue = Promise.resolve()
+    fs.mkdirSync(this.daysDir, { recursive: true })
+  }
+
+  _dayFile(date) { return path.join(this.daysDir, `${date}.json`) }
+
+  _loadDay(date) {
+    try {
+      return JSON.parse(fs.readFileSync(this._dayFile(date), 'utf8'))
+    } catch {
+      return { date, hours: {} }
+    }
+  }
+
+  _saveDay(day) {
+    const file = this._dayFile(day.date)
+    const tmp = file + '.tmp'
+    fs.mkdirSync(path.dirname(file), { recursive: true })
+    fs.writeFileSync(tmp, JSON.stringify(day))
+    fs.renameSync(tmp, file)
+  }
+
+  _loadCursors() {
+    if (this.cursors) return this.cursors
+    try {
+      this.cursors = JSON.parse(fs.readFileSync(this.cursorsFile, 'utf8'))
+    } catch {
+      this.cursors = {}
+    }
+    return this.cursors
+  }
+
+  _saveCursors() {
+    const tmp = this.cursorsFile + '.tmp'
+    fs.mkdirSync(path.dirname(this.cursorsFile), { recursive: true })
+    fs.writeFileSync(tmp, JSON.stringify(this.cursors))
+    fs.renameSync(tmp, this.cursorsFile)
+  }
+
+  _cursor(sessionId) {
+    const c = this._loadCursors()
+    const cur = c[sessionId]
+    if (cur && typeof cur.lastSeq === 'number') return cur
+    return null
+  }
+
+  _setCursor(sessionId, lastSeq) {
+    const c = this._loadCursors()
+    c[sessionId] = { lastSeq, updatedAt: Date.now() }
+    this._saveCursors()
+  }
+
+  /** 在串行队列里执行统计写操作。 */
+  _enqueue(fn) {
+    const run = this.queue.then(fn)
+    this.queue = run.catch(() => {})
+    return run
+  }
+
+  /**
+   * 处理单个 session 事件(已过滤为 assistant/message 且 usage 有效)。
+   * - seq <= cursor: 重复, 跳过
+   * - seq === cursor+1: 正常聚合
+   * - seq > cursor+1: gap, 不聚合, 等待扫描补漏
+   */
+  processEvent(sessionId, event, fallbackModel) {
+    const seq = typeof event.seq === 'number' ? event.seq : -1
+    const time = typeof event.time === 'number' ? event.time : Date.now()
+    const usage = normalizeUsage(event)
+    if (!usage || seq < 0) return { processed: false, gap: false, skip: true }
+    const cur = this._cursor(sessionId)
+    const lastSeq = cur ? cur.lastSeq : -1
+    if (seq <= lastSeq) return { processed: false, gap: false, skip: true }
+    if (seq > lastSeq + 1) return { processed: false, gap: true, skip: true }
+
+    const model = eventModel(event) || fallbackModel || 'unknown'
+    const { date, hour, period } = eventKey(time)
+    const day = this._loadDay(date)
+    const hourBucket = day.hours[hour] || (day.hours[hour] = {})
+    const modelBucket = hourBucket[model] || (hourBucket[model] = emptyBucket())
+    addUsage(modelBucket, model, period, usage)
+    this._saveDay(day)
+    this._setCursor(sessionId, seq)
+    return { processed: true, gap: false, skip: false }
+  }
+
+  /** 串行化版本(HTTP ingest 用)。 */
+  ingestEvent(sessionId, event, fallbackModel) {
+    return this._enqueue(() => this.processEvent(sessionId, event, fallbackModel))
+  }
+
+  /**
+   * 扫描一个 zstd 会话文件, 从游标后顺序处理。返回处理的事件数。
+   * 用系统 zstd 命令解压(项目约束: 不新增 npm 运行时依赖; Windows 无 zstd 时跳过)。
+   */
+  scanFile(file, onProgress) {
+    return new Promise((resolvePromise) => {
+      const sessionId = path.basename(path.dirname(file))
+      const cur = this._cursor(sessionId)
+      const startSeq = cur ? cur.lastSeq + 1 : 0
+      let lastSeq = cur ? cur.lastSeq : -1
+      let processed = 0
+      let currentModel = ''
+      let headerParsed = false
+
+      const zstd = spawn('zstd', ['-dc', file], { stdio: ['ignore', 'pipe', 'ignore'] })
+      const rl = readline.createInterface({ input: zstd.stdout })
+
+      zstd.on('error', (err) => {
+        if (err.code === 'ENOENT') {
+          console.warn(`[stats] 未找到 zstd 命令, 跳过历史回填: ${file}`)
+        } else {
+          console.warn(`[stats] zstd 解压失败 ${file}: ${err.message}`)
+        }
+        rl.close()
+        resolvePromise({ sessionId, processed, skipped: 0, error: err.code || err.message })
+      })
+
+      rl.on('line', (line) => {
+        let event
+        try {
+          event = JSON.parse(line)
+        } catch {
+          return
+        }
+        // 首行是 session header, 没有 seq
+        if (!headerParsed) {
+          headerParsed = true
+          return
+        }
+        if (typeof event.seq !== 'number') return
+        if (event.seq <= lastSeq) return
+        if (event.seq > lastSeq + 1) {
+          // 日志理论上是连续 seq; 出现空洞时以文件为准继续顺序推进(seq 游标按文件顺序)
+        }
+        // 跟踪当前模型配置: request/header 与 request/context 都可能带模型
+        try {
+          if (event.type === 'request/header' && event.data?.config?.model) currentModel = event.data.config.model
+          if (event.type === 'request/context' && event.data?.model) currentModel = event.data.model
+        } catch {}
+        if (event.type === 'assistant/message') {
+          const usage = normalizeUsage(event)
+          if (usage) {
+            const model = eventModel(event) || currentModel || 'unknown'
+            const { date, hour, period } = eventKey(event.time)
+            const day = this._loadDay(date)
+            const hourBucket = day.hours[hour] || (day.hours[hour] = {})
+            const modelBucket = hourBucket[model] || (hourBucket[model] = emptyBucket())
+            addUsage(modelBucket, model, period, usage)
+            this._saveDay(day)
+            processed++
+          }
+        }
+        lastSeq = event.seq
+      })
+
+      rl.on('close', () => {
+        if (lastSeq >= 0) {
+          this._setCursor(sessionId, lastSeq)
+        }
+        if (onProgress) onProgress({ sessionId, processed })
+        resolvePromise({ sessionId, processed })
+      })
+    })
+  }
+
+  /** 扫描 ~/.dsh/sessions 下全部 session.jsonl.zstd。 */
+  async scanAll(sessionsRoot, onProgress) {
+    const root = sessionsRoot || path.join(os.homedir(), '.dsh', 'sessions')
+    let files = []
+    try {
+      const walk = (dir) => {
+        for (const ent of fs.readdirSync(dir, { withFileTypes: true })) {
+          if (ent.isDirectory()) walk(path.join(dir, ent.name))
+          else if (ent.name === 'session.jsonl.zstd') files.push(path.join(dir, ent.name))
+        }
+      }
+      walk(root)
+    } catch (err) {
+      console.warn('[stats] 扫描会话目录失败: ' + (err.message || err))
+      return { files: 0, processed: 0 }
+    }
+    let processed = 0
+    // 串行扫描, 避免大量并发 zstd 子进程
+    for (const file of files) {
+      const out = await this.scanFile(file, onProgress)
+      processed += out.processed || 0
+    }
+    return { files: files.length, processed }
+  }
+
+  summary(days) {
+    const n = Math.max(1, Math.min(Number(days) || 7, 90))
+    const out = []
+    for (let i = n - 1; i >= 0; i--) {
+      const d = new Date(Date.now() + BJ_OFFSET_MS)
+      d.setUTCDate(d.getUTCDate() - i)
+      const date = `${d.getUTCFullYear()}-${pad2(d.getUTCMonth() + 1)}-${pad2(d.getUTCDate())}`
+      const day = this._loadDay(date)
+      const s = dayTotals(day)
+      const byModel = {}
+      for (const hourStr of Object.keys(day.hours || {})) {
+        const period = periodOfHour(Number(hourStr))
+        for (const [model, bucket] of Object.entries(day.hours[hourStr])) {
+          const m = byModel[model] || (byModel[model] = { peak: emptyBucket(), off: emptyBucket(), total: emptyBucket() })
+          mergeBucket(m[period], bucket)
+          mergeBucket(m.total, bucket)
+        }
+      }
+      out.push({ date, ...s, byModel })
+    }
+    return out
+  }
+
+  detail(date) {
+    const day = this._loadDay(date)
+    const hours = []
+    for (let hour = 0; hour < 24; hour++) {
+      const models = day.hours[hour] || {}
+      const total = emptyBucket()
+      for (const bucket of Object.values(models)) mergeBucket(total, bucket)
+      hours.push({ hour, period: periodOfHour(hour), models, total })
+    }
+    return { date, hours }
+  }
+}
+
+module.exports = {
+  BJ_OFFSET_MS,
+  PEAK_HOURS,
+  PRICES,
+  beijingHour,
+  beijingDate,
+  periodOfHour,
+  emptyBucket,
+  addUsage,
+  summarizeDay,
+  dayTotals,
+  eventKey,
+  eventModel,
+  normalizeUsage,
+  StatsStore,
+}

package/gateway.cjs

@@ -30,6 +30,15 @@ const path = require('node:path')
 const os = require('node:os')
 const crypto = require('node:crypto')
 
+let statsCore = null
+let statsStore = null
+try {
+  statsCore = require('./gateway-stats.cjs')
+  statsStore = new statsCore.StatsStore()
+} catch (err) {
+  console.warn('[stats] 统计模块初始化失败, 统计 API 将不可用: ' + (err?.message || err))
+}
+
 const ROOT = __dirname
 const PUBLIC_DIR = path.join(ROOT, 'public')
 const PORT = Number(process.env.PORT) || 8787
@@ -393,6 +402,97 @@ function cors(res) {
   res.setHeader('access-control-allow-methods', 'GET, POST, OPTIONS')
 }
 
+// ---------- 统计 API ----------
+let statsScanning = false
+async function scanStatsOnce(delay) {
+  if (statsScanning || !statsStore) return
+  statsScanning = true
+  if (delay) await new Promise(r => setTimeout(r, delay))
+  try {
+    const out = await statsStore.scanAll()
+    if (out.files) console.log(`[stats] 历史回填扫描完成: ${out.processed} 个新事件 (${out.files} 个会话文件)`)
+  } catch (err) {
+    console.warn('[stats] 历史回填扫描失败: ' + (err?.message || err))
+  } finally {
+    statsScanning = false
+  }
+}
+
+function serveStats(req, res, url) {
+  cors(res)
+  if (req.method === 'OPTIONS') {
+    res.writeHead(204)
+    res.end()
+    return
+  }
+  if (!statsStore) {
+    res.writeHead(503, { 'content-type': 'application/json; charset=utf-8' })
+    res.end(JSON.stringify({ error: 'stats unavailable' }))
+    return
+  }
+  if (!authorized(req, url)) {
+    authFailures++
+    touchDevice(req, { failedAuth: true })
+    res.writeHead(401, { 'content-type': 'application/json; charset=utf-8' })
+    res.end(JSON.stringify({ error: 'unauthorized' }))
+    return
+  }
+  touchDevice(req)
+  const pathname = url.pathname
+
+  if (pathname === '/stats/summary' && req.method === 'GET') {
+    res.writeHead(200, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })
+    res.end(JSON.stringify({ ok: true, days: statsStore.summary(url.searchParams.get('days')) }))
+    return
+  }
+
+  if (pathname === '/stats/detail' && req.method === 'GET') {
+    const date = url.searchParams.get('date') || statsCore.beijingDate(Date.now())
+    if (!/^\d{4}-\d{2}-\d{2}$/.test(date)) {
+      res.writeHead(400, { 'content-type': 'application/json; charset=utf-8' })
+      res.end(JSON.stringify({ error: 'invalid date', expect: 'YYYY-MM-DD' }))
+      return
+    }
+    res.writeHead(200, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })
+    res.end(JSON.stringify({ ok: true, ...statsStore.detail(date) }))
+    return
+  }
+
+  if (pathname === '/stats/ingest' && req.method === 'POST') {
+    let body = ''
+    req.on('data', c => { body += c; if (body.length > 256 * 1024) req.destroy() })
+    req.on('end', () => {
+      let payload
+      try {
+        payload = JSON.parse(body || '{}')
+      } catch {
+        res.writeHead(400, { 'content-type': 'application/json; charset=utf-8' })
+        res.end(JSON.stringify({ error: 'invalid json' }))
+        return
+      }
+      const sessionId = payload.sessionId
+      const event = payload.event
+      if (!sessionId || !event || typeof event !== 'object') {
+        res.writeHead(400, { 'content-type': 'application/json; charset=utf-8' })
+        res.end(JSON.stringify({ error: 'sessionId 与 event 必填' }))
+        return
+      }
+      statsStore.ingestEvent(sessionId, event, payload.fallbackModel).then((out) => {
+        if (out.gap) scanStatsOnce(3000)
+        res.writeHead(200, { 'content-type': 'application/json; charset=utf-8' })
+        res.end(JSON.stringify({ ok: true, ...out }))
+      }).catch((err) => {
+        res.writeHead(500, { 'content-type': 'application/json; charset=utf-8' })
+        res.end(JSON.stringify({ ok: false, error: String(err?.message || err) }))
+      })
+    })
+    return
+  }
+
+  res.writeHead(404, { 'content-type': 'application/json; charset=utf-8' })
+  res.end(JSON.stringify({ error: 'not found' }))
+}
+
 // ---------- 静态文件 ----------
 function serveStatic(req, res, url) {
   if (req.method !== 'GET' && req.method !== 'HEAD') {
@@ -1328,6 +1428,7 @@ const server = http.createServer((req, res) => {
     const url = new URL(req.url, 'http://dsh-remote.local')
     if (url.pathname === '/fs' || url.pathname.startsWith('/fs/')) return serveFs(req, res, url)
     if (url.pathname.startsWith('/admin/api')) return serveAdminApi(req, res, url)
+    if (url.pathname.startsWith('/stats')) return serveStats(req, res, url)
     if (url.pathname.startsWith('/api/')) return proxyApi(req, res, url)
     if (url.pathname === '/health') return serveHealth(res)
     touchDevice(req)
@@ -1452,4 +1553,7 @@ server.listen(PORT, HOST, () => {
   // 启动 8 秒后首查, 之后每 6 小时查一次 GitHub/镜像最新版
   setTimeout(() => checkForUpdates(false), 8000)
   setInterval(() => checkForUpdates(false), UPDATE_INTERVAL_MS)
+  // 统计回填: 启动 2 秒后全量扫描一次, 之后每 5 分钟增量扫描(seq 游标保证幂等)
+  scanStatsOnce(2000)
+  setInterval(() => scanStatsOnce(0), 5 * 60 * 1000)
 })

package/index.mjs

@@ -238,6 +238,52 @@ async function stopGateway() {
   }
 }
 
+// ---------- 统计事件投递(实时 assistant/message + usage -> 网关 /stats/ingest) ----------
+// 网关未运行时静默失败: 网关启动后会按 seq 游标扫描 session.jsonl.zstd 补齐。
+const statsQueues = new Map() // sessionId -> Promise 串行队列(保证 seq 顺序)
+
+function statsSend(session, event) {
+  if (event.type !== 'assistant/message') return
+  const usage = event.data?.usage
+  if (!usage || typeof usage !== 'object') return
+  const token = gatewayToken()
+  if (!token) return
+  let fallbackModel = ''
+  try { fallbackModel = session.requestContext?.()?.model || '' } catch {}
+  const payload = {
+    sessionId: session.id,
+    fallbackModel,
+    event: {
+      type: 'assistant/message',
+      seq: event.seq,
+      time: event.time,
+      data: {
+        usage: {
+          inputTokens: usage.inputTokens,
+          outputTokens: usage.outputTokens,
+          cacheReadTokens: usage.cacheReadTokens,
+          cacheWriteTokens: usage.cacheWriteTokens,
+        },
+        message: { source: { model: event.data?.message?.source?.model || '' } },
+      },
+    },
+  }
+  const prev = statsQueues.get(session.id) || Promise.resolve()
+  const next = prev.then(async () => {
+    try {
+      await fetch(`${GATEWAY_BASE}/stats/ingest`, {
+        method: 'POST',
+        headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },
+        body: JSON.stringify(payload),
+        signal: AbortSignal.timeout(2000),
+      })
+    } catch {}
+  }).finally(() => {
+    if (statsQueues.get(session.id) === next) statsQueues.delete(session.id)
+  })
+  statsQueues.set(session.id, next)
+}
+
 async function resolveFile(pathname) {
   let abs = targetPath(pathname)
   if (abs === null) return null
@@ -284,6 +330,19 @@ async function serveStatic(req, res) {
     return
   }
 
+  // 统计面板数据: 代理到本地网关 /stats/*(网关未运行则返回 502)
+  if (pathname === `${MOUNT}/admin/api/stats/summary` || pathname === `${MOUNT}/admin/api/stats/detail`) {
+    const query = new URL(req.url ?? '/', 'http://x').search
+    const sub = pathname.slice(`${MOUNT}/admin/api/stats`.length)
+    const proxied = await proxyGateway(`/stats${sub}${query}`, 'GET', '')
+    if (proxied !== null) {
+      sendJson(res, proxied.status, proxied.json)
+    } else {
+      sendJson(res, 502, { ok: false, error: '本地网关不可用, Token 统计需要 8787 网关运行' })
+    }
+    return
+  }
+
   // 管理控制台数据: 优先代理本地网关(设备监控/更新检查完整), 网关不可用回退插件状态
   if (pathname === `${MOUNT}/admin/api/state`) {
     void ensureGateway() // 自愈: 开关为 on 而网关没起来时, 后台拉起, 下个轮询即可见网关
@@ -389,6 +448,10 @@ export function apply(ctx) {
     path: MOUNT,
     handler: serveStatic,
   }), 'dsh-remote: /remote route')
+  // 实时统计: 监听 DSH 会话事件流, 把带 usage 的 assistant/message 投递到网关聚合
+  ctx.on('session/event', (session, event) => {
+    statsSend(session, event)
+  })
   // DSH 启动/重启后自愈: 用户没关过网关就自动拉起(默认开, DSH_REMOTE_AUTOSTART=0 关闭)
   void ensureGateway()
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-remote-plugin",
-  "version": "0.5.6-rc.1",
+  "version": "0.5.7-rc.1",
   "description": "DSH Remote 官方 bundle 插件：DSH 左侧原生边栏入口 + 右侧抽屉内嵌管理控制台；内置网关随 DSH 自动启停(systemd 独立单元)，抽屉直显令牌与设备监控；网关提供 /fs/* 文件传输端点(列表/断点下载/上传)，配合 Android App 远程操控会话/审批/提问/goal 与文件互传(多服务器测速切换、聊天记录离线缓存)。",
   "type": "module",
   "main": "./index.mjs",
@@ -14,9 +14,11 @@
     "index.mjs",
     "client.js",
     "gateway.cjs",
+    "gateway-stats.cjs",
     "public",
     "apk",
-    "cordis.patch.yml"
+    "cordis.patch.yml",
+    "*.md"
   ],
   "keywords": [
     "dsh-plugin",

package/public/admin.html

@@ -18,6 +18,17 @@
     .stat-card .v { font-size: 20px; font-weight: 700; line-height: 1.3; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
     .stat-card .k { font-size: 11px; color: var(--dsr-muted); margin-top: 2px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
     .stat-card.ok .v { color: var(--dsr-success); } .stat-card.warn .v { color: var(--dsr-warning); }
+    .stats-dash { margin-bottom: 14px; }
+    .stats-dash .stat-grid { margin-bottom: 8px; }
+    .stats-chart { display: flex; align-items: flex-end; gap: 8px; height: 150px; padding: 12px 14px 10px; background: var(--dsr-panel); border: 1px solid var(--dsr-line); border-radius: var(--dsr-radius); overflow-x: auto; overflow-y: hidden; }
+    .stats-bar { flex: 1; min-width: 38px; height: 100%; display: flex; flex-direction: column; align-items: center; justify-content: flex-end; gap: 5px; }
+    .stats-bar .bars { width: 100%; max-width: 46px; height: 100%; display: flex; flex-direction: column; justify-content: flex-end; border-radius: 6px 6px 0 0; overflow: hidden; background: var(--dsr-accent-soft); }
+    .stats-bar .seg { width: 100%; }
+    .stats-bar .seg.peak { background: var(--dsr-accent-strong); }
+    .stats-bar .seg.off { background: var(--dsr-accent-2); }
+    .stats-bar .lbl { font-size: 10px; color: var(--dsr-muted); white-space: nowrap; }
+    .stats-bar .val { font-size: 10px; color: var(--dsr-text); white-space: nowrap; }
+    .stats-empty { color: var(--dsr-muted); text-align: center; padding: 20px 0; font-size: 12px; }
     .table-wrap { background: var(--dsr-panel); border: 1px solid var(--dsr-line); border-radius: var(--dsr-radius); overflow-x: auto; }
     table { width: 100%; border-collapse: collapse; font-size: 13px; min-width: 0; }
     th, td { text-align: left; padding: 9px 10px; border-bottom: 1px solid var(--dsr-line); vertical-align: top; }
@@ -144,6 +155,12 @@
 
       <div class="stat-grid" id="stats"></div>
 
+      <div class="stats-dash">
+        <div class="section-head"><span data-i18n="stats.title">Token 统计</span><span id="stats-sub" class="muted"></span></div>
+        <div class="stat-grid" id="stats-cards"></div>
+        <div id="stats-chart" class="stats-chart"></div>
+      </div>
+
       <div class="section-head"><span data-i18n="devices">已连接设备</span><span id="device-summary" class="muted"></span></div>
       <div class="table-wrap">
         <table>
@@ -209,6 +226,17 @@
         'stat.reachable': '可达', 'stat.unreachable': '不可达', 'stat.dshUpstream': 'DSH 上游 {url}',
         'stat.devicesOnline': '设备在线 / 累计', 'stat.totalRequests': '总请求数', 'stat.authFailures': '认证失败',
         'stat.uptime': '运行时长 · {host}:{port}',
+        'stats.title': 'Token 统计',
+        'stats.todayTokens': '今日 Token',
+        'stats.todayCost': '今日费用',
+        'stats.peakShare': '高峰占比',
+        'stats.input': '未缓存输入',
+        'stats.cacheRead': '缓存命中',
+        'stats.cacheWrite': '缓存写入',
+        'stats.output': '输出',
+        'stats.peak': '高峰', 'stats.off': '空闲',
+        'stats.days': '近 {n} 天',
+        'stats.gatewayDown': '统计需要 8787 网关运行', 'stats.empty': '暂无统计，产生会话后自动聚合',
         'unit.sec': ' 秒', 'unit.min': ' 分钟', 'unit.hour': ' 小时 ', 'unit.minShort': ' 分', 'unit.day': ' 天 ',
         'device.installedNotRunning': '网关已安装 · 当前未运行', 'device.noGatewayBinary': '未检测到网关程序',
         'device.ipRefresh': '{n} 个 IP · 每 5 秒刷新',
@@ -269,6 +297,17 @@
         'stat.reachable': 'Reachable', 'stat.unreachable': 'Unreachable', 'stat.dshUpstream': 'DSH upstream {url}',
         'stat.devicesOnline': 'Devices online / total', 'stat.totalRequests': 'Total requests', 'stat.authFailures': 'Auth failures',
         'stat.uptime': 'Uptime · {host}:{port}',
+        'stats.title': 'Token stats',
+        'stats.todayTokens': 'Tokens today',
+        'stats.todayCost': 'Cost today',
+        'stats.peakShare': 'Peak share',
+        'stats.input': 'Uncached input',
+        'stats.cacheRead': 'Cache read',
+        'stats.cacheWrite': 'Cache write',
+        'stats.output': 'Output',
+        'stats.peak': 'Peak', 'stats.off': 'Off-peak',
+        'stats.days': 'Last {n} days',
+        'stats.gatewayDown': 'Stats require the gateway on 8787', 'stats.empty': 'No stats yet — they aggregate as sessions happen',
         'unit.sec': 's', 'unit.min': 'min', 'unit.hour': 'h ', 'unit.minShort': 'm', 'unit.day': 'd ',
         'device.installedNotRunning': 'Gateway installed · not running', 'device.noGatewayBinary': 'Gateway binary not found',
         'device.ipRefresh': '{n} IPs · refreshed every 5s',

package/public/admin.js

@@ -25,6 +25,81 @@ let shownToken = token
 let lastState = null
 let qrShown = false
 
+const STATS_API = pluginMode ? API + '/stats' : '/stats'
+let statsTimer = null
+
+function fmtTokens(n) {
+  n = Number(n) || 0
+  if (n >= 1e6) return (n / 1e6).toFixed(n >= 1e7 ? 0 : 1) + 'M'
+  if (n >= 1e3) return (n / 1e3).toFixed(n >= 1e5 ? 0 : 1) + 'K'
+  return String(Math.round(n))
+}
+
+function fmtCost(n) {
+  return '¥' + (Number(n) || 0).toFixed(2)
+}
+
+function bucketTokens(b) {
+  return (b.input || 0) + (b.cacheRead || 0) + (b.cacheWrite || 0) + (b.output || 0)
+}
+
+async function loadStats() {
+  if (!token && !pluginMode) return
+  try {
+    const res = await fetch(`${STATS_API}/summary?days=7`, {
+      headers: { authorization: 'Bearer ' + token, 'x-dsh-remote-client': 'admin' }
+    })
+    if (!res.ok) {
+      if (res.status === 401) return
+      throw new Error('HTTP ' + res.status)
+    }
+    const json = await res.json()
+    renderStats(json.days || [])
+  } catch (e) {
+    $('stats-cards').innerHTML = ''
+    $('stats-chart').innerHTML = `<div class="stats-empty">${t('stats.gatewayDown')}</div>`
+    $('stats-sub').textContent = ''
+  }
+}
+
+function renderStats(days) {
+  if (!days.length) {
+    $('stats-cards').innerHTML = ''
+    $('stats-chart').innerHTML = `<div class="stats-empty">${t('stats.empty')}</div>`
+    $('stats-sub').textContent = ''
+    return
+  }
+  const today = days[days.length - 1]
+  const totalTokens = bucketTokens(today.total)
+  const peakCost = today.peak.cost || 0
+  const offCost = today.off.cost || 0
+  const totalCost = peakCost + offCost
+  const peakShare = totalCost > 0 ? Math.round(peakCost / totalCost * 100) : 0
+  $('stats-cards').innerHTML = `
+    <div class="stat-card"><div class="v">${fmtTokens(totalTokens)}</div><div class="k">${t('stats.todayTokens')} · ${t('stats.input')} ${fmtTokens(today.total.input)} · ${t('stats.cacheRead')} ${fmtTokens(today.total.cacheRead)} · ${t('stats.cacheWrite')} ${fmtTokens(today.total.cacheWrite)} · ${t('stats.output')} ${fmtTokens(today.total.output)}</div></div>
+    <div class="stat-card"><div class="v">${fmtCost(totalCost)}</div><div class="k">${t('stats.todayCost')} · ${t('stats.peak')} ${fmtCost(peakCost)} / ${t('stats.off')} ${fmtCost(offCost)}</div></div>
+    <div class="stat-card ${peakShare >= 50 ? 'warn' : 'ok'}"><div class="v">${peakShare}%</div><div class="k">${t('stats.peakShare')} · ${t('stats.days', { n: days.length })}</div></div>`
+  $('stats-sub').textContent = today.date
+
+  // 近 7 日柱状图: 每根按费用堆叠高峰/空闲, 高度按费用相对比例
+  const maxCost = Math.max(...days.map(d => (d.total.cost || 0)), 0.0001)
+  $('stats-chart').innerHTML = days.map(d => {
+    const cost = d.total.cost || 0
+    const peakH = Math.max(2, Math.round((d.peak.cost || 0) / maxCost * 100))
+    const offH = Math.max(0, Math.round((d.off.cost || 0) / maxCost * 100))
+    const total = peakH + offH
+    const label = d.date.slice(5)
+    return `<div class="stats-bar" title="${d.date} · ${t('stats.peak')} ${fmtCost(d.peak.cost)} · ${t('stats.off')} ${fmtCost(d.off.cost)} · tokens ${fmtTokens(bucketTokens(d.total))}">
+      <div class="bars" style="height:${Math.max(total, 2)}%">
+        <div class="seg peak" style="height:${peakH}%"></div>
+        <div class="seg off" style="height:${offH}%"></div>
+      </div>
+      <div class="val">${cost > 0 ? fmtCost(cost) : ''}</div>
+      <div class="lbl">${label}</div>
+    </div>`
+  }).join('')
+}
+
 function toast(text, kind = '') {
   const el = $('toast')
   el.textContent = text
@@ -227,7 +302,10 @@ function enter() {
   history.replaceState(null, '', location.pathname)
   showMain()
   loadState()
+  loadStats()
   timer = setInterval(loadState, 5000)
+  if (statsTimer) clearInterval(statsTimer)
+  statsTimer = setInterval(loadStats, 30000)
 }
 
 function showMain() {
@@ -239,6 +317,8 @@ function logout() {
   token = ''
   store.del('dshAdminToken')
   clearInterval(timer)
+  if (statsTimer) clearInterval(statsTimer)
+  statsTimer = null
   $('main-view').classList.add('hidden')
   $('login-view').classList.remove('hidden')
   $('conn-badge').textContent = t('unauth')
@@ -394,7 +474,10 @@ function start(showLogin) {
   }
   showMain()
   loadState()
+  loadStats()
   timer = setInterval(loadState, 5000)
+  if (statsTimer) clearInterval(statsTimer)
+  statsTimer = setInterval(loadStats, 30000)
 }
 
 if (pluginMode) {

package/public/update.json

@@ -1,6 +1,6 @@
 {
-  "version": "0.5.6-rc.1",
+  "version": "0.5.7-rc.1",
   "apkUrl": "dsh-remote.apk",
-  "releasedAt": "2026-08-16T15:29:43.309Z",
-  "notes": "修复：APK 内置版本文件滞后导致“已装新版本仍提示更新”；检查更新弹窗只显示版本号，完整说明在设置页展开查看"
+  "releasedAt": "2026-08-17T05:34:41.185Z",
+  "notes": "新增：Token 统计 v1 — 管理页展示今日四桶/费用/高峰占比与近 7 日柱状图，按北京时间高峰计费；历史会话自动回填。"
 }

package/public/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.5.6-rc.1"
+  "version": "0.5.7-rc.1"
 }