dsh-workbuddy-xdpool 0.4.5 → 1.0.0

package/CHANGELOG.md

@@ -4,6 +4,37 @@
 
 版本号遵循 [语义化版本](https://semver.org/lang/zh-CN/)。
 
+## 1.0.0 (2026-09-21)
+
+这一版把「账号」和「用号方式」都交给你控制。
+
+### 一、可以停用不想用的账号了
+
+账号列表里每个账号右侧新增一个开关，关掉它这个账号就**不再参与请求**。
+
+- 关掉的账号仍然显示在列表里（变灰），随时可以再打开
+- 设置会被保存，**重启 DSH 后依然有效**
+- 只影响路由，不会删除或改动你的登录凭据
+
+### 二、新增「均衡」用号模式
+
+原来的两种方式都保留，另加一种：
+
+| 模式 | 行为 |
+| --- | --- |
+| **优先**（默认，行为不变） | 一直用同一个账号，直到它被限流才换下一个 |
+| **均衡**（新增） | 每个可用账号都参与抽取，**闲置越久权重越高** |
+| **轮换** | 严格轮流，把额度摊平 |
+
+**为什么需要「均衡」**：默认的「优先」会死磕第一个账号，把它打到限流才换 —— 如果你有 5 个号，其余 4 个基本闲着。切到「均衡」后请求会自然分散到各个账号，**更不容易撞限流**，可用时间更长。
+
+在卡片顶部「账号使用方式」里切换，即时生效。
+
+### 其他
+
+- 显式选定的账号（如卡片上「下一个」标记的那个）在三种模式下**都会被优先使用**
+- 处于冷却中的账号在「均衡」模式下**一定不会被选中**，冷却结束自动回到抽取池
+
 ## 0.4.5 (2026-09-21)
 
 本版**功能与 0.4.4 完全相同**，只是换了一条发布通道。

package/lib/bin.js

@@ -758,6 +758,26 @@ function candidateAuthDirs(env = process.env) {
 * Read-only pool of every discovered WorkBuddy account, with rate-limit
 * cooldown and round-robin failover.
 */
+/** Idle bonus per hour an account has been unused (reference-panel default). */
+const IDLE_WEIGHT_PER_HOUR = .5;
+/** Ceiling for the idle bonus, so an idle account cannot dominate forever. */
+const IDLE_WEIGHT_MAX = 5;
+/**
+* Weight one account by how long it has been idle.
+*
+* The base of 1 keeps every eligible account in play: an account that served a
+* moment ago still has a small chance, so a single unhealthy account cannot pin
+* the pool to itself, and the weights never sum to zero.
+*
+* `lastUsedAt === undefined` means "never used in this process", which earns the
+* full bonus: on a fresh start every account ties, and the weighted draw spreads
+* the first requests instead of always picking the first entry.
+*/
+function idleWeight(lastUsedAt, now) {
+	if (lastUsedAt === void 0) return 6;
+	const hours = (now - lastUsedAt) / 36e5;
+	return 1 + Math.min(Math.max(hours, 0) * IDLE_WEIGHT_PER_HOUR, IDLE_WEIGHT_MAX);
+}
 var WorkBuddyAccountPool = class {
 	logger;
 	authDirs;
@@ -770,6 +790,24 @@ var WorkBuddyAccountPool = class {
 	cursor = 0;
 	lastScanAtMs = 0;
 	preferredId;
+	/**
+	* Account ids the user switched off on the card.
+	*
+	* Disabling is a user preference rather than a property of the credential:
+	* `scan()` rebuilds every account object from the auth files, so the set
+	* lives on the pool and is re-applied from settings after each scan.
+	*/
+	disabledIds = /* @__PURE__ */ new Set();
+	/**
+	* Last time each account served a request, epoch ms. Drives the idle term
+	* of the priority-mode weighting below: an account that just served loses to
+	* one that has been idle, so a small pool stops hammering a single account.
+	*
+	* In-memory on purpose: it only biases the next pick, so a cold start that
+	* treats every account as idle is the right default. Not keyed by id lookup
+	* misses because a removed account simply disappears from the map on re-scan.
+	*/
+	lastUsedAt = /* @__PURE__ */ new Map();
 	refreshInflight = /* @__PURE__ */ new Map();
 	constructor(options = {}) {
 		this.logger = options.logger;
@@ -788,6 +826,7 @@ var WorkBuddyAccountPool = class {
 		if (options.authDirs !== void 0 && options.authDirs.length > 0) this.authDirs = options.authDirs;
 		if (options.cooldownMs !== void 0 && options.cooldownMs >= 1e3) this.cooldownMs = options.cooldownMs;
 		if (options.distribution !== void 0) this.distribution = options.distribution;
+		if (options.disabledAccountIds !== void 0) this.disabledIds = new Set(options.disabledAccountIds);
 	}
 	/** Rescan the auth directories and merge newly discovered accounts. */
 	async scan() {
@@ -840,12 +879,47 @@ var WorkBuddyAccountPool = class {
 	*/
 	available(now, modelId, region) {
 		return this.accounts.filter((account) => {
+			if (this.disabledIds.has(account.id)) return false;
 			if (account.cooldownUntilMs > now) return false;
 			if (modelId !== void 0 && (account.modelCooldowns[modelId] ?? 0) > now) return false;
 			if (region !== void 0 && regionOf(account.credential.domain) !== region) return false;
 			return true;
 		});
 	}
+	/** Round-robin: the legacy cursor walk, kept for the distribution that asks for it. */
+	pickRoundRobin(pool) {
+		const index = this.cursor % pool.length;
+		const account = pool[index];
+		if (account === void 0) return void 0;
+		this.cursor = (index + 1) % pool.length;
+		return account;
+	}
+	/**
+	* Priority mode: weighted random over the eligible accounts.
+	*
+	* The weight is an idle bonus — `1 + min(idleHours * perHour, max)` — so an
+	* account that has never served (or has been idle for a while) outranks one
+	* that just answered. Reference panel logic drops its success-rate term
+	* entirely because a lifetime error counter penalises an account forever;
+	* instantaneous health is already handled by cooldowns, which is why those
+	* accounts never reach this list.
+	*
+	* A pool with no idle history (fresh process) hashes to equal weights, which
+	* spreads the very first picks instead of always returning index 0.
+	*/
+	pickByWeight(pool) {
+		if (pool.length === 1) return pool[0];
+		const now = Date.now();
+		const weights = pool.map((account) => idleWeight(this.lastUsedAt.get(account.id), now));
+		const total = weights.reduce((sum, weight) => sum + weight, 0);
+		if (!Number.isFinite(total) || total <= 0) return pool[0];
+		let roll = Math.random() * total;
+		for (let index = 0; index < pool.length; index += 1) {
+			roll -= weights[index] ?? 0;
+			if (roll < 0) return pool[index];
+		}
+		return pool[pool.length - 1];
+	}
 	/**
 	* Pick the account to serve a request.
 	*
@@ -875,16 +949,16 @@ var WorkBuddyAccountPool = class {
 		}
 		if (pool.length === 0) return void 0;
 		if (this.preferredId !== void 0) {
-			const preferredIndex = pool.findIndex((account) => account.id === this.preferredId);
-			if (preferredIndex > 0) {
-				const [preferred] = pool.splice(preferredIndex, 1);
-				if (preferred !== void 0) pool = [preferred, ...pool];
+			const preferred = pool.find((account) => account.id === this.preferredId);
+			if (preferred !== void 0) {
+				this.lastUsedAt.set(preferred.id, Date.now());
+				await this.ensureFresh(preferred);
+				return preferred;
 			}
 		}
-		const index = this.distribution === "round-robin" ? this.cursor % pool.length : 0;
-		const account = pool[index];
+		const account = this.distribution === "round-robin" ? this.pickRoundRobin(pool) : this.distribution === "balanced" ? this.pickByWeight(pool) : pool[0];
 		if (account === void 0) return void 0;
-		if (this.distribution === "round-robin") this.cursor = (index + 1) % pool.length;
+		this.lastUsedAt.set(account.id, Date.now());
 		await this.ensureFresh(account);
 		return account;
 	}
@@ -896,6 +970,14 @@ var WorkBuddyAccountPool = class {
 	prefer(accountId) {
 		this.preferredId = accountId;
 	}
+	/** Whether the user switched this account off on the card. */
+	isDisabled(accountId) {
+		return this.disabledIds.has(accountId);
+	}
+	/** Every account id the user switched off, in discovery order. */
+	disabledIdsInOrder() {
+		return this.accounts.filter((account) => this.disabledIds.has(account.id)).map((account) => account.id);
+	}
 	/** Best-effort refresh of one account after a session-dead upstream answer. */
 	async refreshAccount(accountId) {
 		const account = this.accounts.find((item) => item.id === accountId);
@@ -1173,6 +1255,7 @@ z.object({
 	authFile: z.string().description("WorkBuddy desktop auth file (defaults to the app own location)"),
 	cooldownMs: z.number().step(1).min(1e3).default(6e4).description("Rate-limit cooldown per account, in milliseconds"),
 	distribution: z.union(["priority", "round-robin"]).default("priority").description("How requests are spread: priority (drain one) or round-robin"),
+	disabledAccountIds: z.array(z.string()).default([]).description("Account ids excluded from the pool (empty = every discovered account participates)"),
 	enabledModelIds: z.array(z.string()).default([]).description("Legacy shared model-id list; used by a region that has no per-region selection yet"),
 	imageModelIds: z.array(z.string()).default([]).description("Legacy shared image-id list; used by a region that has no per-region selection yet"),
 	contextBudgets: z.dict(z.number().step(1).min(1)).default({}).description("Legacy shared context budgets; used by a region with no per-region selection yet"),

package/lib/client.js

@@ -28,6 +28,8 @@ window.__ModuleLoader__.load({
 		const POOL_RESET_COOLDOWN_PATH = "/plugins/dsh-workbuddy-xdpool/cooldowns/reset";
 		/** Plugin-owned daily check-in action endpoint (claim today's reward). */
 		const POOL_CHECKIN_PATH = "/plugins/dsh-workbuddy-xdpool/checkin";
+		/** Switch one account in or out of the pool (card toggle). */
+		const POOL_ACCOUNT_DISABLE_PATH = "/plugins/dsh-workbuddy-xdpool/accounts/disabled";
 		//#endregion
 		//#region src/client/icon.ts
 		/**
@@ -133,6 +135,13 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-xdpool-account{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:12px 14px;border:1px solid var(--dsw-alias-border-l2,#3a3d45);border-radius:14px;background:var(--dsw-alias-bg-layer-2,#24262c)}
 .dsm-workbuddy-xdpool-account-copy{display:flex;flex-direction:column;gap:3px;min-width:0}
 .dsm-workbuddy-xdpool-account-label{color:var(--dsw-alias-label-primary,#e6e6e6);font-size:14px;font-weight:600;line-height:20px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.dsm-workbuddy-xdpool-account-head{display:flex;align-items:center;gap:8px;min-width:0}
+/* Account switched off on the card: still listed (so it can be turned back on) but visually muted. */
+.dsm-workbuddy-xdpool-account-off{opacity:.55}
+/* Small pill switch: "in rotation" vs "off". Native checkbox styled by the label. */
+.dsm-workbuddy-xdpool-account-toggle{display:inline-flex;align-items:center;gap:5px;flex:none;cursor:pointer;color:var(--dsw-alias-label-secondary,#c6c9d0);font-size:11px;line-height:16px;white-space:nowrap}
+.dsm-workbuddy-xdpool-account-toggle input{margin:0;accent-color:var(--dsw-alias-brand-primary,#5686fe)}
+.dsm-workbuddy-xdpool-account-toggle:hover{color:var(--dsw-alias-label-primary,#e6e6e6)}
 .dsm-workbuddy-xdpool-account-tags{display:flex;align-items:center;gap:6px;flex-wrap:wrap}
 .dsm-workbuddy-xdpool-account-tag{padding:1px 8px;border-radius:999px;font-size:11px;line-height:18px;background:var(--dsw-alias-state-success-subtle,rgba(34,160,107,.12));color:var(--dsw-alias-state-success-primary,#22a06b)}
 .dsm-workbuddy-xdpool-account-tag-cooling{background:var(--dsw-alias-state-warning-subtle,rgba(217,119,6,.15));color:var(--dsw-alias-state-warning-primary,#d97706)}
@@ -374,6 +383,8 @@ window.__ModuleLoader__.load({
 			const [flash, setFlash] = (0, react.useState)(void 0);
 			/** Account id whose daily claim is currently in flight. */
 			const [checkinBusyId, setCheckinBusyId] = (0, react.useState)(void 0);
+			/** Account id whose enable/disable switch is in flight, if any. */
+			const [accountBusyId, setAccountBusyId] = (0, react.useState)(void 0);
 			/**
 			* Draft model selection. `undefined` means "no local edits"; once a checkbox
 			* is touched the draft takes over and is what the Save button posts. Discard
@@ -509,6 +520,41 @@ window.__ModuleLoader__.load({
 					if (mounted.current) setCheckinBusyId(void 0);
 				}
 			};
+			/**
+			* Switch one account in or out of the pool.
+			*
+			* The id travels in the body and the host validates it against the accounts it
+			* really knows, so a stale tab cannot write an orphan id. Disabling only stops
+			* the account from being picked — it stays listed so it can be turned back on —
+			* and the change is saved through the settings section, so it survives a
+			* restart and is re-applied after every re-scan.
+			*/
+			const toggleAccountDisabled = async (accountId, disabled) => {
+				setAccountBusyId(accountId);
+				setFlash(void 0);
+				try {
+					const response = await fetch(POOL_ACCOUNT_DISABLE_PATH, {
+						method: "POST",
+						headers: {
+							accept: "application/json",
+							"content-type": "application/json"
+						},
+						credentials: "same-origin",
+						body: JSON.stringify({
+							accountId,
+							disabled
+						})
+					});
+					const body = await response.json().catch(() => void 0);
+					if (!response.ok) throw new Error(body?.error ?? `HTTP ${response.status}`);
+					await refresh(activeRegion);
+				} catch (cause) {
+					const message = cause instanceof Error ? cause.message : String(cause);
+					if (mounted.current) setError(t?.("row.accountToggleError", { message }) ?? `Could not switch the account: ${message}`);
+				} finally {
+					if (mounted.current) setAccountBusyId(void 0);
+				}
+			};
 			/** Keep the draft in step with the server copy while nothing is dirty. */
 			const modelDraft = draft ?? (status === void 0 ? {} : draftFromStatus(status));
 			/** Model edits need a writable settings scope; otherwise the rows are read-only. */
@@ -722,17 +768,21 @@ window.__ModuleLoader__.load({
 											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 												className: "dsm-workbuddy-xdpool-dist-title",
 												children: t?.("row.distTitle") ?? "Account usage"
-											}), ["priority", "round-robin"].map((option) => {
+											}), [
+												"priority",
+												"balanced",
+												"round-robin"
+											].map((option) => {
 												const active = (status.distribution ?? "priority") === option;
-												const label = option === "priority" ? t?.("row.distPriority") ?? "Priority" : t?.("row.distRoundRobin") ?? "Round-robin";
-												const hint = option === "priority" ? t?.("row.distPriorityHint") ?? "" : t?.("row.distRoundRobinHint") ?? "";
+												const label = option === "priority" ? t?.("row.distPriority") ?? "Priority" : option === "balanced" ? t?.("row.distBalanced") ?? "Balanced" : t?.("row.distRoundRobin") ?? "Round-robin";
+												const hint = option === "priority" ? t?.("row.distPriorityHint") ?? "" : option === "balanced" ? t?.("row.distBalancedHint") ?? "" : t?.("row.distRoundRobinHint") ?? "";
 												return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 													type: "button",
 													role: "radio",
 													"aria-checked": active,
 													title: hint,
 													disabled: !modelsEditable,
-													className: `dsm-workbuddy-xdpool-dist-option${active ? " dsm-workbuddy-xdpool-dist-option-active" : ""}`,
+													className: "dsm-workbuddy-xdpool-dist-option" + (active ? " dsm-workbuddy-xdpool-dist-option-active" : ""),
 													onClick: () => {
 														setDistribution(option);
 													},
@@ -820,6 +870,10 @@ window.__ModuleLoader__.load({
 									onClaimCheckin: (accountId) => {
 										claimCheckin(accountId);
 									},
+									onToggleDisabled: (accountId, disabled) => {
+										toggleAccountDisabled(accountId, disabled);
+									},
+									...accountBusyId === void 0 ? {} : { accountBusyId },
 									t
 								}, account.id))]
 							}) : null,
@@ -880,8 +934,9 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/** One account block: label + status tag + meta + optional credit panels. */
-		function AccountBlock({ account, activeAccountId, t, checkinBusyId, onClaimCheckin }) {
+		function AccountBlock({ account, activeAccountId, t, checkinBusyId, onClaimCheckin, accountBusyId, onToggleDisabled }) {
 			const isActive = account.id === activeAccountId;
+			const isDisabled = account.disabled === true;
 			const isCooling = account.cooling === true;
 			const cooldownUntil = account.cooldownUntil !== void 0 ? Date.parse(account.cooldownUntil) : void 0;
 			const modelCooldowns = account.modelCooldowns ?? [];
@@ -893,13 +948,27 @@ window.__ModuleLoader__.load({
 				cls: "dsm-workbuddy-xdpool-account-tag dsm-workbuddy-xdpool-account-tag-cooling"
 			} : null;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: "dsm-workbuddy-xdpool-account",
+				className: isDisabled ? "dsm-workbuddy-xdpool-account dsm-workbuddy-xdpool-account-off" : "dsm-workbuddy-xdpool-account",
 				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 					className: "dsm-workbuddy-xdpool-account-copy",
 					children: [
-						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-							className: "dsm-workbuddy-xdpool-account-label",
-							children: account.label
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "dsm-workbuddy-xdpool-account-head",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsm-workbuddy-xdpool-account-label",
+								children: account.label
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								className: "dsm-workbuddy-xdpool-account-toggle",
+								title: t?.("row.accountToggleHint") ?? "Include this account in the pool",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									type: "checkbox",
+									checked: !isDisabled,
+									disabled: accountBusyId === account.id,
+									onChange: (event) => {
+										onToggleDisabled(account.id, !event.target.checked);
+									}
+								}), isDisabled ? t?.("row.accountOff") ?? "Off" : t?.("row.accountInRotation") ?? "In rotation"]
+							})]
 						}),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 							className: "dsm-workbuddy-xdpool-account-tags",
@@ -1186,6 +1255,10 @@ window.__ModuleLoader__.load({
 			"row.ok": "Healthy — requests auto-rotate across accounts",
 			"row.allCooling": "Every account is rate-limited right now; requests pause until a cooldown lifts.",
 			"row.accountNext": "Next up",
+			"row.accountInRotation": "In rotation",
+			"row.accountOff": "Off",
+			"row.accountToggleHint": "Include this account in the pool",
+			"row.accountToggleError": "Could not switch the account: {message}",
 			"row.cooling": "Cooling (rate-limited)",
 			"row.cooldownHits": "{hits} hit(s)",
 			"row.cooldownUntil": "until {time}",
@@ -1238,6 +1311,8 @@ window.__ModuleLoader__.load({
 			"row.distPriorityHint": "Drain one account before moving to the next",
 			"row.distRoundRobin": "Round-robin",
 			"row.distRoundRobinHint": "Spread the spend evenly across accounts",
+			"row.distBalanced": "Balanced",
+			"row.distBalancedHint": "Draw from every account, favouring whichever has been idle longest",
 			"row.accountsScanning": "Detecting…",
 			"row.resetCooldowns": "Clear all cooldowns",
 			"row.resetCooldownsBusy": "Clearing…",
@@ -1272,6 +1347,10 @@ window.__ModuleLoader__.load({
 			"row.ok": "运行健康 —— 请求会在各账号间自动轮换",
 			"row.allCooling": "当前所有账号都处于限流冷却，请求会暂停直到某个冷却结束。",
 			"row.accountNext": "下一个",
+			"row.accountInRotation": "参与轮换",
+			"row.accountOff": "已停用",
+			"row.accountToggleHint": "把这个账号计入池子",
+			"row.accountToggleError": "切换账号失败：{message}",
 			"row.cooling": "冷却中（被限流）",
 			"row.cooldownHits": "触发 {hits} 次",
 			"row.cooldownUntil": "至 {time}",
@@ -1324,6 +1403,8 @@ window.__ModuleLoader__.load({
 			"row.distPriorityHint": "优先用完一个账号再换下一个",
 			"row.distRoundRobin": "轮换模式",
 			"row.distRoundRobinHint": "积分平均分摊到各账号",
+			"row.distBalanced": "均衡",
+			"row.distBalancedHint": "每个账号都参与抽取，闲置越久权重越高",
 			"row.accountsScanning": "正在检测…",
 			"row.resetCooldowns": "清除所有冷却",
 			"row.resetCooldownsBusy": "正在清除…",

package/lib/index.d.ts

@@ -228,7 +228,7 @@ export declare function workbuddyAccountId(credential: Pick<WorkBuddyCredential,
 /** Every directory the pool should scan, in probe order. */
 export declare function candidateAuthDirs(env?: NodeJS.ProcessEnv): string[];
 /** How the pool chooses which account serves the next request. */
-type AccountDistribution = 'priority' | 'round-robin';
+type AccountDistribution = 'priority' | 'round-robin' | 'balanced';
 interface AccountPoolOptions {
   /** Logger for discovery and rotation events. */
   logger?: {
@@ -256,10 +256,6 @@ interface AccountPoolOptions {
    */
   distribution?: AccountDistribution;
 }
-/**
- * Read-only pool of every discovered WorkBuddy account, with rate-limit
- * cooldown and round-robin failover.
- */
 export declare class WorkBuddyAccountPool {
   private readonly logger;
   private authDirs;
@@ -272,6 +268,24 @@ export declare class WorkBuddyAccountPool {
   private cursor;
   private lastScanAtMs;
   private preferredId;
+  /**
+   * Account ids the user switched off on the card.
+   *
+   * Disabling is a user preference rather than a property of the credential:
+   * `scan()` rebuilds every account object from the auth files, so the set
+   * lives on the pool and is re-applied from settings after each scan.
+   */
+  private disabledIds;
+  /**
+   * Last time each account served a request, epoch ms. Drives the idle term
+   * of the priority-mode weighting below: an account that just served loses to
+   * one that has been idle, so a small pool stops hammering a single account.
+   *
+   * In-memory on purpose: it only biases the next pick, so a cold start that
+   * treats every account as idle is the right default. Not keyed by id lookup
+   * misses because a removed account simply disappears from the map on re-scan.
+   */
+  private lastUsedAt;
   private refreshInflight;
   constructor(options?: AccountPoolOptions);
   /**
@@ -283,6 +297,7 @@ export declare class WorkBuddyAccountPool {
     authDirs?: readonly string[];
     cooldownMs?: number;
     distribution?: AccountDistribution;
+    disabledAccountIds?: readonly string[];
   }): void;
   /** Rescan the auth directories and merge newly discovered accounts. */
   scan(): Promise<WorkBuddyAccount[]>;
@@ -298,6 +313,22 @@ export declare class WorkBuddyAccountPool {
    * model, e.g. CLI diagnostics).
    */
   private available;
+  /** Round-robin: the legacy cursor walk, kept for the distribution that asks for it. */
+  private pickRoundRobin;
+  /**
+   * Priority mode: weighted random over the eligible accounts.
+   *
+   * The weight is an idle bonus — `1 + min(idleHours * perHour, max)` — so an
+   * account that has never served (or has been idle for a while) outranks one
+   * that just answered. Reference panel logic drops its success-rate term
+   * entirely because a lifetime error counter penalises an account forever;
+   * instantaneous health is already handled by cooldowns, which is why those
+   * accounts never reach this list.
+   *
+   * A pool with no idle history (fresh process) hashes to equal weights, which
+   * spreads the very first picks instead of always returning index 0.
+   */
+  private pickByWeight;
   /**
    * Pick the account to serve a request.
    *
@@ -323,6 +354,10 @@ export declare class WorkBuddyAccountPool {
   /** How the pool currently spreads requests. Shown on the card. */
   currentDistribution(): AccountDistribution;
   prefer(accountId: string | undefined): void;
+  /** Whether the user switched this account off on the card. */
+  isDisabled(accountId: string): boolean;
+  /** Every account id the user switched off, in discovery order. */
+  disabledIdsInOrder(): string[];
   /** Best-effort refresh of one account after a session-dead upstream answer. */
   refreshAccount(accountId: string): Promise<void>;
   /**
@@ -572,6 +607,11 @@ interface PoolWebAccount {
     modelId: string;
     until: string;
   }>;
+  /**
+   * Whether the user switched this account off. A disabled account never
+   * serves a request, but it stays listed so the card can switch it back on.
+   */
+  disabled: boolean;
   rateLimitHits: number;
   /** ISO timestamp of the last successful use (best-effort pool bookkeeping). */
   lastUsedAt?: string;
@@ -657,7 +697,6 @@ interface PoolWebModel {
   /** Whether this model is currently enabled in the picker. */
   enabled: boolean;
 }
-/** The user's saved model selection, echoed back so the card can diff a draft. */
 interface PoolWebModelSelection {
   /** Absent = every model is enabled. */
   enabledModelIds?: readonly string[];
@@ -697,7 +736,7 @@ interface PoolWebStatus {
  */
 type PoolRegion = 'cn' | 'global';
 /** How the pool spreads requests across its accounts. */
-type PoolDistribution = 'priority' | 'round-robin';
+type PoolDistribution = 'priority' | 'round-robin' | 'balanced';
 //#endregion
 //#region src/index.d.ts
 /** Stable Cordis plugin name. */
@@ -725,6 +764,13 @@ export interface Config {
    * spend evenly instead. Absent reads as `priority`.
    */
   distribution?: 'priority' | 'round-robin';
+  /**
+   * Account ids switched off on the card. A disabled account is never picked
+   * to serve a request, but it stays in the pool and on the card so it can be
+   * switched back on. Ids are the pool's stable per-credential keys, which
+   * survive re-scans (see WorkBuddyAccountPool.disabledIds).
+   */
+  disabledAccountIds?: string[];
   /**
    * Model ids enabled in the picker. Absent means "every model the catalog
    * advertises" — an unconfigured install should never present an empty model

package/lib/index.js

@@ -774,6 +774,26 @@ function candidateAuthDirs(env = process.env) {
 * Read-only pool of every discovered WorkBuddy account, with rate-limit
 * cooldown and round-robin failover.
 */
+/** Idle bonus per hour an account has been unused (reference-panel default). */
+const IDLE_WEIGHT_PER_HOUR = .5;
+/** Ceiling for the idle bonus, so an idle account cannot dominate forever. */
+const IDLE_WEIGHT_MAX = 5;
+/**
+* Weight one account by how long it has been idle.
+*
+* The base of 1 keeps every eligible account in play: an account that served a
+* moment ago still has a small chance, so a single unhealthy account cannot pin
+* the pool to itself, and the weights never sum to zero.
+*
+* `lastUsedAt === undefined` means "never used in this process", which earns the
+* full bonus: on a fresh start every account ties, and the weighted draw spreads
+* the first requests instead of always picking the first entry.
+*/
+function idleWeight(lastUsedAt, now) {
+	if (lastUsedAt === void 0) return 6;
+	const hours = (now - lastUsedAt) / 36e5;
+	return 1 + Math.min(Math.max(hours, 0) * IDLE_WEIGHT_PER_HOUR, IDLE_WEIGHT_MAX);
+}
 var WorkBuddyAccountPool = class {
 	logger;
 	authDirs;
@@ -786,6 +806,24 @@ var WorkBuddyAccountPool = class {
 	cursor = 0;
 	lastScanAtMs = 0;
 	preferredId;
+	/**
+	* Account ids the user switched off on the card.
+	*
+	* Disabling is a user preference rather than a property of the credential:
+	* `scan()` rebuilds every account object from the auth files, so the set
+	* lives on the pool and is re-applied from settings after each scan.
+	*/
+	disabledIds = /* @__PURE__ */ new Set();
+	/**
+	* Last time each account served a request, epoch ms. Drives the idle term
+	* of the priority-mode weighting below: an account that just served loses to
+	* one that has been idle, so a small pool stops hammering a single account.
+	*
+	* In-memory on purpose: it only biases the next pick, so a cold start that
+	* treats every account as idle is the right default. Not keyed by id lookup
+	* misses because a removed account simply disappears from the map on re-scan.
+	*/
+	lastUsedAt = /* @__PURE__ */ new Map();
 	refreshInflight = /* @__PURE__ */ new Map();
 	constructor(options = {}) {
 		this.logger = options.logger;
@@ -804,6 +842,7 @@ var WorkBuddyAccountPool = class {
 		if (options.authDirs !== void 0 && options.authDirs.length > 0) this.authDirs = options.authDirs;
 		if (options.cooldownMs !== void 0 && options.cooldownMs >= 1e3) this.cooldownMs = options.cooldownMs;
 		if (options.distribution !== void 0) this.distribution = options.distribution;
+		if (options.disabledAccountIds !== void 0) this.disabledIds = new Set(options.disabledAccountIds);
 	}
 	/** Rescan the auth directories and merge newly discovered accounts. */
 	async scan() {
@@ -856,12 +895,47 @@ var WorkBuddyAccountPool = class {
 	*/
 	available(now, modelId, region) {
 		return this.accounts.filter((account) => {
+			if (this.disabledIds.has(account.id)) return false;
 			if (account.cooldownUntilMs > now) return false;
 			if (modelId !== void 0 && (account.modelCooldowns[modelId] ?? 0) > now) return false;
 			if (region !== void 0 && regionOf(account.credential.domain) !== region) return false;
 			return true;
 		});
 	}
+	/** Round-robin: the legacy cursor walk, kept for the distribution that asks for it. */
+	pickRoundRobin(pool) {
+		const index = this.cursor % pool.length;
+		const account = pool[index];
+		if (account === void 0) return void 0;
+		this.cursor = (index + 1) % pool.length;
+		return account;
+	}
+	/**
+	* Priority mode: weighted random over the eligible accounts.
+	*
+	* The weight is an idle bonus — `1 + min(idleHours * perHour, max)` — so an
+	* account that has never served (or has been idle for a while) outranks one
+	* that just answered. Reference panel logic drops its success-rate term
+	* entirely because a lifetime error counter penalises an account forever;
+	* instantaneous health is already handled by cooldowns, which is why those
+	* accounts never reach this list.
+	*
+	* A pool with no idle history (fresh process) hashes to equal weights, which
+	* spreads the very first picks instead of always returning index 0.
+	*/
+	pickByWeight(pool) {
+		if (pool.length === 1) return pool[0];
+		const now = Date.now();
+		const weights = pool.map((account) => idleWeight(this.lastUsedAt.get(account.id), now));
+		const total = weights.reduce((sum, weight) => sum + weight, 0);
+		if (!Number.isFinite(total) || total <= 0) return pool[0];
+		let roll = Math.random() * total;
+		for (let index = 0; index < pool.length; index += 1) {
+			roll -= weights[index] ?? 0;
+			if (roll < 0) return pool[index];
+		}
+		return pool[pool.length - 1];
+	}
 	/**
 	* Pick the account to serve a request.
 	*
@@ -891,16 +965,16 @@ var WorkBuddyAccountPool = class {
 		}
 		if (pool.length === 0) return void 0;
 		if (this.preferredId !== void 0) {
-			const preferredIndex = pool.findIndex((account) => account.id === this.preferredId);
-			if (preferredIndex > 0) {
-				const [preferred] = pool.splice(preferredIndex, 1);
-				if (preferred !== void 0) pool = [preferred, ...pool];
+			const preferred = pool.find((account) => account.id === this.preferredId);
+			if (preferred !== void 0) {
+				this.lastUsedAt.set(preferred.id, Date.now());
+				await this.ensureFresh(preferred);
+				return preferred;
 			}
 		}
-		const index = this.distribution === "round-robin" ? this.cursor % pool.length : 0;
-		const account = pool[index];
+		const account = this.distribution === "round-robin" ? this.pickRoundRobin(pool) : this.distribution === "balanced" ? this.pickByWeight(pool) : pool[0];
 		if (account === void 0) return void 0;
-		if (this.distribution === "round-robin") this.cursor = (index + 1) % pool.length;
+		this.lastUsedAt.set(account.id, Date.now());
 		await this.ensureFresh(account);
 		return account;
 	}
@@ -912,6 +986,14 @@ var WorkBuddyAccountPool = class {
 	prefer(accountId) {
 		this.preferredId = accountId;
 	}
+	/** Whether the user switched this account off on the card. */
+	isDisabled(accountId) {
+		return this.disabledIds.has(accountId);
+	}
+	/** Every account id the user switched off, in discovery order. */
+	disabledIdsInOrder() {
+		return this.accounts.filter((account) => this.disabledIds.has(account.id)).map((account) => account.id);
+	}
 	/** Best-effort refresh of one account after a session-dead upstream answer. */
 	async refreshAccount(accountId) {
 		const account = this.accounts.find((item) => item.id === accountId);
@@ -1333,10 +1415,10 @@ function createWorkBuddyAdapter(options) {
 		streamIdleTimeoutMs: WORKBUDDY_STREAM_IDLE_TIMEOUT_MS,
 		retryPolicy: resolveRetryPolicy(void 0, "dsh-workbuddy-xdpool retryPolicy"),
 		configuredMaxTokens: /* @__PURE__ */ new Map(),
-		modelErrors: /* @__PURE__ */ new Map(),
 		...REQUEST_IMAGE_BUDGETS,
 		piProvider: provider
 	};
+	Object.assign(profile, { modelErrors: /* @__PURE__ */ new Map() });
 	let profiles = /* @__PURE__ */ new Map([[providerId, profile]]);
 	return {
 		providerId,
@@ -1739,6 +1821,8 @@ const POOL_RESET_COOLDOWN_PATH = "/plugins/dsh-workbuddy-xdpool/cooldowns/reset"
 const POOL_CHECKIN_PATH = "/plugins/dsh-workbuddy-xdpool/checkin";
 /** Plugin-owned model-selection save endpoint (writes the settings section). */
 const POOL_MODELS_SAVE_PATH = "/plugins/dsh-workbuddy-xdpool/models/save";
+/** Switch one account in or out of the pool (card toggle). */
+const POOL_ACCOUNT_DISABLE_PATH = "/plugins/dsh-workbuddy-xdpool/accounts/disabled";
 //#endregion
 //#region src/web-status.ts
 /** Redact token-like content before it crosses to the browser. */
@@ -1830,7 +1914,25 @@ function parseSelection(body) {
 	}
 	return out;
 }
-function toWebAccount(account) {
+/**
+* Validate the account-toggle body. Returns undefined for anything malformed so
+* the route answers 400 instead of writing a half-applied switch.
+*
+* The id must name a currently known account: accepting an arbitrary string
+* would let a stale tab (or a renamed credential) leave orphan ids in the
+* settings file that no card can ever switch back off.
+*/
+function parseAccountToggle(body, known) {
+	const accountId = typeof body["accountId"] === "string" ? body["accountId"].trim() : "";
+	const disabled = body["disabled"];
+	if (accountId === "" || typeof disabled !== "boolean") return void 0;
+	if (!known(accountId)) return void 0;
+	return {
+		accountId,
+		disabled
+	};
+}
+function toWebAccount(account, disabled) {
 	const now = Date.now();
 	const cooling = account.cooldownUntilMs > now;
 	const modelCooldowns = Object.entries(account.modelCooldowns).filter(([, until]) => until > now).sort((a, b) => a[1] - b[1]).map(([modelId, until]) => ({
@@ -1846,6 +1948,7 @@ function toWebAccount(account) {
 		cooling,
 		...cooling ? { cooldownUntil: new Date(account.cooldownUntilMs).toISOString() } : {},
 		...modelCooldowns.length === 0 ? {} : { modelCooldowns },
+		disabled,
 		rateLimitHits: account.rateLimitHits
 	};
 }
@@ -1878,7 +1981,7 @@ async function poolWebStatus(deps, region = "cn") {
 	const rows = [];
 	const now = Date.now();
 	for (const account of accounts) {
-		const row = toWebAccount(account);
+		const row = toWebAccount(account, deps.pool.isDisabled(account.id));
 		if (!row.cooling) {
 			try {
 				const credits = await deps.client.fetchCredits(account.credential);
@@ -2040,8 +2143,31 @@ function registerPoolStatusRoute(ctx, deps) {
 				}
 			}
 		});
+		const disposeAccountDisable = ctx.webServer.register({
+			kind: "exact",
+			path: POOL_ACCOUNT_DISABLE_PATH,
+			handler: async (req, res) => {
+				if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
+				if (!loopbackOrigin(req)) return json(res, 403, { error: "origin-not-trusted" });
+				if (deps.setAccountDisabled === void 0) return json(res, 503, { error: "settings service unavailable; the account switch cannot be saved" });
+				try {
+					const body = await readJsonBody(req);
+					const known = new Set(deps.pool.list().map((account) => account.id));
+					const toggle = parseAccountToggle(body, (id) => known.has(id));
+					if (toggle === void 0) return json(res, 400, { error: "invalid account toggle payload" });
+					await deps.setAccountDisabled(toggle.accountId, toggle.disabled);
+					json(res, 200, {
+						ok: true,
+						...toggle
+					});
+				} catch (error) {
+					json(res, 500, { error: safeMessage(error) });
+				}
+			}
+		});
 		return () => {
 			disposeCheckin();
+			disposeAccountDisable();
 			disposeModelsSave();
 			disposeReset();
 			disposeRescan();
@@ -2100,6 +2226,7 @@ const Config = z.object({
 	authFile: z.string().description("WorkBuddy desktop auth file (defaults to the app own location)"),
 	cooldownMs: z.number().step(1).min(1e3).default(6e4).description("Rate-limit cooldown per account, in milliseconds"),
 	distribution: z.union(["priority", "round-robin"]).default("priority").description("How requests are spread: priority (drain one) or round-robin"),
+	disabledAccountIds: z.array(z.string()).default([]).description("Account ids excluded from the pool (empty = every discovered account participates)"),
 	enabledModelIds: z.array(z.string()).default([]).description("Legacy shared model-id list; used by a region that has no per-region selection yet"),
 	imageModelIds: z.array(z.string()).default([]).description("Legacy shared image-id list; used by a region that has no per-region selection yet"),
 	contextBudgets: z.dict(z.number().step(1).min(1)).default({}).description("Legacy shared context budgets; used by a region with no per-region selection yet"),
@@ -2169,11 +2296,12 @@ function apply(ctx, config = {}) {
 		}
 	};
 	const applyConfigFromSource = () => {
-		const { authFile, cooldownMs, distribution, enabledModelIds, imageModelIds, contextBudgets, modelSelectionCn, modelSelectionGlobal } = current();
+		const { authFile, cooldownMs, distribution, disabledAccountIds, enabledModelIds, imageModelIds, contextBudgets, modelSelectionCn, modelSelectionGlobal } = current();
 		core.pool.applyConfig({
 			...authFile === void 0 ? {} : { authDirs: [dirname(authFile)] },
 			...cooldownMs === void 0 ? {} : { cooldownMs },
-			distribution: distribution ?? "priority"
+			distribution: distribution ?? "priority",
+			...disabledAccountIds === void 0 ? {} : { disabledAccountIds }
 		});
 		const legacySelection = {
 			...enabledModelIds === void 0 ? {} : { enabledModelIds },
@@ -2246,6 +2374,11 @@ function apply(ctx, config = {}) {
 				...selection.imageModelIds === void 0 ? {} : { imageModelIds: [...selection.imageModelIds] },
 				...selection.contextBudgets === void 0 ? {} : { contextBudgets: { ...selection.contextBudgets } }
 			});
+		},
+		setAccountDisabled: (accountId, disabled) => {
+			const currentIds = current().disabledAccountIds ?? [];
+			const next = disabled ? currentIds.includes(accountId) ? currentIds : [...currentIds, accountId] : currentIds.filter((id) => id !== accountId);
+			setSetting("disabledAccountIds", next);
 		}
 	}));
 	api = {

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-workbuddy-xdpool",
   "displayName": "DSH WorkBuddy XD Pool",
   "description": "Merge every locally signed-in WorkBuddy account into DeepSeek Harness as one auto-failing-over model pool (multi-account rotation, live credits, daily check-in and model catalog).",
-  "version": "0.4.5",
+  "version": "1.0.0",
   "license": "MIT",
   "author": "XDTrees",
   "homepage": "https://github.com/XDTrees/dsh-workbuddy-xdpool#readme",