dsh-workbuddy-xdpool 1.7.0 → 1.7.1

package/lib/client.js

@@ -27,10 +27,39 @@ window.__ModuleLoader__.load({
 		const POOL_RESET_COOLDOWN_PATH = "/plugins/dsh-workbuddy-xdpool/cooldowns/reset";
 		/** Plugin-owned daily check-in action endpoint (claim today's reward). */
 		const POOL_CHECKIN_PATH = "/plugins/dsh-workbuddy-xdpool/checkin";
+		/**
+		* Throw one account out of the pool for good, or take it back.
+		*
+		* Separate from the disable route because the semantics differ: disabling is a
+		* rotation preference the account survives, ignoring survives the account.
+		*/
+		const POOL_ACCOUNT_IGNORE_PATH = "/plugins/dsh-workbuddy-xdpool/accounts/ignored";
 		/** Run one automation job immediately, so the card can verify it on demand. */
 		const POOL_AUTOMATION_RUN_PATH = "/plugins/dsh-workbuddy-xdpool/automation/run";
 		/** Set or clear one account's reserved-credit floor. */
 		const POOL_CREDIT_RESERVE_PATH = "/plugins/dsh-workbuddy-xdpool/accounts/credit-reserve";
+		/**
+		* The schedule every automation job falls back to.
+		*
+		* Shared by both halves on purpose. The host uses it when a configured hour
+		* list arrives empty (the settings schema materializes "never configured" into
+		* `[]`), and the card uses it when it writes the `automation` block back, so a
+		* document that already holds an empty list is healed instead of being saved
+		* back as an unrunnable schedule.
+		*
+		* This lives here rather than in `scheduler.ts` because the browser half cannot
+		* import the host module: `scheduler.ts` pulls in `node:crypto` and the whole
+		* upstream client, none of which exists in the browser bundle. Two hand-written
+		* copies would drift, and the drift is invisible — the card would write a
+		* schedule the scheduler does not run.
+		*/
+		const DEFAULT_AUTOMATION_HOURS = {
+			checkin: [9],
+			report: [10],
+			tasks: [11],
+			streak: [12],
+			travel: [9, 21]
+		};
 		//#endregion
 		//#region src/client/icon.ts
 		/**
@@ -168,6 +197,23 @@ window.__ModuleLoader__.load({
 .dsm-workbuddy-xdpool-account-toggle:disabled{cursor:default;opacity:.6}
 .dsm-workbuddy-xdpool-account-toggle-on{background:color-mix(in oklab, var(--dsw-alias-state-success-primary,#22a06b) 14%, transparent);border-color:color-mix(in oklab, var(--dsw-alias-state-success-primary,#22a06b) 55%, transparent);color:var(--dsw-alias-state-success-primary,#22a06b);font-weight:600}
 .dsm-workbuddy-xdpool-account-toggle-dot{width:6px;height:6px;border-radius:50%;flex:none;background:currentColor;opacity:.9}
+/* "Remove" button: destructive and reversible, so it is quiet until hovered. */
+.dsm-workbuddy-xdpool-account-ignore{appearance:none;font:inherit;flex:none;cursor:pointer;border:1px solid transparent;border-radius:999px;padding:3px 10px;font-size:11px;line-height:17px;background:transparent;color:var(--dsw-alias-label-tertiary,#9aa0a8);transition:color .16s,border-color .16s,background .16s}
+.dsm-workbuddy-xdpool-account-ignore:hover:not(:disabled){color:var(--dsw-alias-state-error-primary,#ef4444);border-color:color-mix(in oklab, var(--dsw-alias-state-error-primary,#ef4444) 45%, transparent);background:color-mix(in oklab, var(--dsw-alias-state-error-primary,#ef4444) 10%, transparent)}
+.dsm-workbuddy-xdpool-account-ignore:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:1px}
+.dsm-workbuddy-xdpool-account-ignore:disabled{cursor:default;opacity:.6}
+/* Ignored-account list: visible proof that "remove" can be undone. */
+.dsm-workbuddy-xdpool-ignored-head{display:flex;align-items:baseline;justify-content:space-between;gap:12px;padding:12px 16px;border-bottom:1px solid color-mix(in oklab, var(--dsw-alias-border-l2,#3a3d45) 45%, transparent)}
+.dsm-workbuddy-xdpool-ignored-title{margin:0;color:var(--dsw-alias-label-primary,#e6e6e6);font-size:13px;font-weight:600;line-height:19px}
+.dsm-workbuddy-xdpool-ignored-summary{margin:0;color:var(--dsw-alias-label-tertiary,#9aa0a8);font-size:11px;line-height:17px}
+.dsm-workbuddy-xdpool-ignored-list{display:flex;flex-direction:column}
+.dsm-workbuddy-xdpool-ignored-row{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:9px 16px}
+.dsm-workbuddy-xdpool-ignored-row+.dsm-workbuddy-xdpool-ignored-row{border-top:1px solid color-mix(in oklab, var(--dsw-alias-border-l2,#3a3d45) 30%, transparent)}
+.dsm-workbuddy-xdpool-ignored-label{color:var(--dsw-alias-label-secondary,#c6c9d0);font-size:12px;line-height:18px;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.dsm-workbuddy-xdpool-ignored-restore{appearance:none;font:inherit;flex:none;cursor:pointer;border:1px solid color-mix(in oklab, var(--dsw-alias-border-l2,#3a3d45) 70%, transparent);border-radius:999px;padding:3px 10px;font-size:11px;line-height:17px;background:transparent;color:var(--dsw-alias-label-secondary,#c6c9d0);transition:color .16s,border-color .16s}
+.dsm-workbuddy-xdpool-ignored-restore:hover:not(:disabled){color:var(--dsw-alias-label-primary,#e6e6e6);border-color:var(--dsw-alias-label-dimmed,#777)}
+.dsm-workbuddy-xdpool-ignored-restore:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:1px}
+.dsm-workbuddy-xdpool-ignored-restore:disabled{cursor:default;opacity:.6}
 .dsm-workbuddy-xdpool-account-tags{display:flex;align-items:center;gap:6px;flex-wrap:wrap}
 .dsm-workbuddy-xdpool-account-tag{padding:1px 8px;border-radius:999px;font-size:11px;line-height:18px;background:var(--dsw-alias-state-success-subtle,rgba(34,160,107,.12));color:var(--dsw-alias-state-success-primary,#22a06b)}
 .dsm-workbuddy-xdpool-account-tag-cooling{background:var(--dsw-alias-state-warning-subtle,rgba(217,119,6,.15));color:var(--dsw-alias-state-warning-primary,#d97706)}
@@ -391,6 +437,17 @@ window.__ModuleLoader__.load({
 			"streak",
 			"travel"
 		];
+		/**
+		* The hour list to save for one job: what the card holds, or the default.
+		*
+		* Mirrors the host's own fallback (`hoursOrDefault` in `scheduler.ts`). An
+		* empty list must resolve to the default on BOTH sides, or the card would save
+		* a schedule the scheduler then refuses to run — the exact silent standstill
+		* this pair of fixes exists to remove.
+		*/
+		function hoursOrDefault(configured, fallback) {
+			return configured !== void 0 && configured.length > 0 ? [...configured] : [...fallback];
+		}
 		/** Read one job's configured hours off the status document. */
 		function automationHours(status, kind) {
 			const automation = status.automation;
@@ -473,9 +530,21 @@ window.__ModuleLoader__.load({
 			const days = daysUntil(pack.expiresAtMs);
 			return days !== void 0 && days <= 3;
 		}
+		/**
+		* The promo badge for one model, or undefined when it has none.
+		*
+		* `free` is read off the CREDIT MULTIPLIER, not off a tag. Neither gateway ever
+		* sends a literal `free` tag: the global roster marks its zero-cost models
+		* (`hy3`, `hy4-preview-f`, `deepseek-v4.1-flash`) as `credits: "x0.00"`, so
+		* waiting for a tag meant the badge NEVER appeared — including on models that
+		* genuinely cost nothing.
+		*
+		* An explicit free-ish tag still wins when present, so a gateway that starts
+		* tagging them keeps working without another change.
+		*/
 		function tagFor(model) {
 			const tags = model.tags ?? [];
-			if (tags.includes("free")) return "free";
+			if (tags.includes("free") || model.multiplier === 0) return "free";
 			if (tags.includes("limited-free")) return "limited";
 			if (tags.includes("night-discount")) return "night";
 		}
@@ -687,6 +756,37 @@ window.__ModuleLoader__.load({
 					if (mounted.current) setAccountBusyId(void 0);
 				}
 			};
+			/**
+			* Throw one account out of the pool for good, or take it back.
+			*
+			* The host owns the ignore file, so this is a plain route call: no settings
+			* scope is involved, which is also why it keeps working on a profile whose
+			* settings section is read-only.
+			*/
+			const setAccountIgnored = async (accountId, ignored) => {
+				setAccountBusyId(accountId);
+				setFlash(void 0);
+				try {
+					const response = await fetch(POOL_ACCOUNT_IGNORE_PATH, {
+						method: "POST",
+						headers: { "Content-Type": "application/json" },
+						body: JSON.stringify({
+							accountId,
+							ignored
+						})
+					});
+					if (!response.ok) {
+						const detail = await response.json().catch(() => ({}));
+						throw new Error(detail.error ?? `HTTP ${response.status}`);
+					}
+					await refresh(activeRegion);
+				} catch (cause) {
+					const message = cause instanceof Error ? cause.message : String(cause);
+					if (mounted.current) setError(t?.("row.accountIgnoreError", { message }) ?? "Could not change the ignore list: " + message);
+				} finally {
+					if (mounted.current) setAccountBusyId(void 0);
+				}
+			};
 			/** Keep the draft in step with the server copy while nothing is dirty. */
 			const modelDraft = draft ?? (status === void 0 ? {} : draftFromStatus(status));
 			/** Model edits need a writable settings scope; otherwise the rows are read-only. */
@@ -790,12 +890,11 @@ window.__ModuleLoader__.load({
 				setFlash(void 0);
 				try {
 					await write.call(settingsScope, "automation", {
-						...existing === void 0 ? {} : {
-							checkinHours: [...existing.checkinHours],
-							reportHours: [...existing.reportHours],
-							taskHours: [...existing.taskHours],
-							streakHours: [...existing.streakHours]
-						},
+						checkinHours: hoursOrDefault(existing?.checkinHours, DEFAULT_AUTOMATION_HOURS.checkin),
+						reportHours: hoursOrDefault(existing?.reportHours, DEFAULT_AUTOMATION_HOURS.report),
+						taskHours: hoursOrDefault(existing?.taskHours, DEFAULT_AUTOMATION_HOURS.tasks),
+						streakHours: hoursOrDefault(existing?.streakHours, DEFAULT_AUTOMATION_HOURS.streak),
+						travelHours: hoursOrDefault(existing?.travelHours, DEFAULT_AUTOMATION_HOURS.travel),
 						enabled
 					});
 					await refresh(activeRegion);
@@ -1272,11 +1371,46 @@ window.__ModuleLoader__.load({
 								onToggleDisabled: (accountId, disabled) => {
 									toggleAccountDisabled(accountId, disabled);
 								},
+								onIgnoreAccount: (accountId) => {
+									setAccountIgnored(accountId, true);
+								},
 								...accountBusyId === void 0 ? {} : { accountBusyId },
 								t
 							}, account.id))
 						]
 					}) : null,
+					(status?.ignored.length ?? 0) > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+						className: "dsm-workbuddy-xdpool-card dsm-workbuddy-xdpool-ignored",
+						"aria-label": t?.("row.ignoredTitle") ?? "Removed accounts",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "dsm-workbuddy-xdpool-ignored-head",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+								className: "dsm-workbuddy-xdpool-ignored-title",
+								children: t?.("row.ignoredTitle") ?? "Removed accounts"
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dsm-workbuddy-xdpool-ignored-summary",
+								children: t?.("row.ignoredSummary", { count: status?.ignored.length ?? 0 }) ?? `${status?.ignored.length ?? 0} account(s) no longer in the pool`
+							})]
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: "dsm-workbuddy-xdpool-ignored-list",
+							children: (status?.ignored ?? []).map((entry) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dsm-workbuddy-xdpool-ignored-row",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "dsm-workbuddy-xdpool-ignored-label",
+									children: entry.label
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dsm-workbuddy-xdpool-ignored-restore",
+									title: t?.("row.ignoredRestoreHint") ?? "Put this account back into the pool",
+									disabled: accountBusyId === entry.id,
+									onClick: () => {
+										setAccountIgnored(entry.id, false);
+									},
+									children: t?.("row.ignoredRestore") ?? "Restore"
+								})]
+							}, entry.id))
+						})]
+					}) : null,
 					(status?.models.length ?? 0) > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 						className: "dsm-workbuddy-xdpool-card dsm-workbuddy-xdpool-models",
 						"aria-label": t?.("row.modelsTitle") ?? "Models",
@@ -1332,7 +1466,7 @@ window.__ModuleLoader__.load({
 			});
 		}
 		/** One account block: label + status tag + meta + optional credit panels. */
-		function AccountBlock({ account, t, checkinBusyId, onClaimCheckin, accountBusyId, onToggleDisabled, onSaveCreditReserve, reserveBusyId }) {
+		function AccountBlock({ account, t, checkinBusyId, onClaimCheckin, accountBusyId, onToggleDisabled, onIgnoreAccount, onSaveCreditReserve, reserveBusyId }) {
 			const isDisabled = account.disabled === true;
 			const isCooling = account.cooling === true;
 			const cooldownUntil = account.cooldownUntil !== void 0 ? Date.parse(account.cooldownUntil) : void 0;
@@ -1365,6 +1499,16 @@ window.__ModuleLoader__.load({
 								onToggleDisabled(account.id, !isDisabled);
 							},
 							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { className: "dsm-workbuddy-xdpool-account-toggle-dot" }), isDisabled ? t?.("row.accountOff") ?? "Disabled" : t?.("row.accountInRotation") ?? "Enabled"]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsm-workbuddy-xdpool-account-ignore",
+							title: t?.("row.accountIgnoreHint") ?? "Remove this account from the pool for good",
+							disabled: accountBusyId === account.id,
+							onClick: () => {
+								onIgnoreAccount(account.id);
+							},
+							children: t?.("row.accountIgnore") ?? "Remove"
 						})
 					]
 				}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -1682,7 +1826,7 @@ window.__ModuleLoader__.load({
 							className: "dsm-workbuddy-xdpool-model-copy",
 							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 								className: "dsm-workbuddy-xdpool-model-name",
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: model.name }), model.multiplier === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: model.name }), model.multiplier === void 0 || model.multiplier === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 									className: "dsm-workbuddy-xdpool-model-name-rate",
 									children: t?.("row.rate", { rate: model.multiplier.toFixed(2) }) ?? `${model.multiplier.toFixed(2)}x`
 								})]
@@ -1829,6 +1973,13 @@ window.__ModuleLoader__.load({
 			"row.accountOff": "Disabled",
 			"row.accountToggleHint": "Enable this account (uncheck to keep it out of the pool)",
 			"row.accountToggleError": "Could not switch the account: {message}",
+			"row.accountIgnore": "Remove",
+			"row.accountIgnoreHint": "Remove this account from the pool for good — its credential stops being read and it will not come back",
+			"row.accountIgnoreError": "Could not change the ignore list: {message}",
+			"row.ignoredTitle": "Removed accounts",
+			"row.ignoredSummary": "{count} account(s) no longer in the pool",
+			"row.ignoredRestore": "Restore",
+			"row.ignoredRestoreHint": "Put this account back into the pool",
 			"row.currentAccount": "In use now",
 			"row.currentAccountDisabled": "switched off — the next request moves on",
 			"row.cooling": "Cooling (rate-limited)",
@@ -1961,6 +2112,13 @@ window.__ModuleLoader__.load({
 			"row.accountOff": "已停用",
 			"row.accountToggleHint": "启用该账号（取消勾选则不参与池子）",
 			"row.accountToggleError": "切换账号失败：{message}",
+			"row.accountIgnore": "移出池子",
+			"row.accountIgnoreHint": "把这个账号永久移出池子 —— 不再读取它的凭据，即使重新登录也不会回来",
+			"row.accountIgnoreError": "修改忽略列表失败：{message}",
+			"row.ignoredTitle": "已移出的账号",
+			"row.ignoredSummary": "{count} 个账号已不在池中",
+			"row.ignoredRestore": "恢复",
+			"row.ignoredRestoreHint": "把这个账号放回池子",
 			"row.currentAccount": "当前使用",
 			"row.currentAccountDisabled": "已停用 —— 下次请求会换号",
 			"row.cooling": "冷却中（被限流）",

package/lib/index.d.ts

@@ -221,6 +221,21 @@ interface WorkBuddyUpstreamModel {
   descriptionZh?: string;
   descriptionEn?: string;
   supportsToolCall?: boolean;
+  /**
+   * Promo tags the upstream attaches to a model.
+   *
+   * Both gateways send a `tags` array, but the vocabularies are NOT the same
+   * and neither uses the words this plugin used to expect:
+   *
+   * - Global sends `["craft"]`, `["text-to-image"]`, `["text-to-video"]`, `[]`
+   *   — capability/grouping labels, never `free`.
+   * - Zero cost is expressed as `credits: "x0.00"` instead.
+   *
+   * So this field is a passthrough of what the upstream really said, and
+   * `free` is DERIVED from the multiplier rather than awaited as a tag (see
+   * {@link isFreeModel}).
+   */
+  tags?: readonly string[];
 }
 /** One billing package, already normalised. */
 interface WorkBuddyCreditPackage {
@@ -830,6 +845,21 @@ export declare class WorkBuddyAccountPool {
    * lives on the pool and is re-applied from settings after each scan.
    */
   private disabledIds;
+  /**
+   * Account ids the user threw out of the pool for good.
+   *
+   * Enforced BEFORE the credential is parsed: `scan()` skips a file whose
+   * identity is already ignored, so an ignored account costs no at-rest key
+   * lookup (which spawns the desktop app on 5.6.0+) and cannot re-enter the pool
+   * when the app writes a fresh sign-in for it. That is the difference from
+   * {@link disabledIds}, which only filters at pick time and leaves the account
+   * listed, readable and re-discoverable.
+   *
+   * The set is supplied by the host from the plugin's own ignore file, and is
+   * replaced wholesale on every {@link applyIgnored} so removing an entry takes
+   * effect on the next scan without a restart.
+   */
+  private ignoredIds;
   /**
    * Per-account credit floor, keyed by account id. 0 (or absent) means "spend
    * it all".
@@ -875,6 +905,19 @@ export declare class WorkBuddyAccountPool {
     /** Per-account credit floor, keyed by account id. Absent keeps the current map. */
     creditReserves?: Readonly<Record<string, number>>;
   }): void;
+  /**
+   * Replace the permanent ignore list.
+   *
+   * Also drops any already-discovered account that is now ignored, so the change
+   * is visible without waiting for the next scan: the card refreshes its status
+   * document right after the write, and an account still sitting in `accounts`
+   * would keep showing up there.
+   */
+  applyIgnored(ids: Iterable<string>): void;
+  /** Whether this account has been thrown out of the pool for good. */
+  isIgnored(accountId: string): boolean;
+  /** Every ignored id currently in force, in insertion order. */
+  ignoredIdsInOrder(): string[];
   /** Rescan the auth directories and merge newly discovered accounts. */
   scan(): Promise<WorkBuddyAccount[]>;
   /** All accounts, cooldown state included. */
@@ -1036,7 +1079,20 @@ interface WorkBuddyModelInfo {
   /** Upstream tags: free / limited-free / night-discount. */
   tags?: readonly string[];
 }
-/** Static fallback used before the first live catalog fetch. */
+/**
+ * Static fallback used before the first live catalog fetch, and whenever the
+ * upstream cannot be reached.
+ *
+ * The multipliers are carried on purpose. Without them the provider's model
+ * picker silently loses every rate and every free badge the moment the live
+ * fetch fails — which reads to the user as "the plugin broke my model list"
+ * rather than "the upstream is unreachable". The values are the ones the two
+ * gateways actually advertise for these ids (`credits: "x0.79 credits"` and so
+ * on), so a fallback row looks the same as a live one.
+ *
+ * `multiplier: 0` is the gateways' own spelling of "free" (`credits: "x0.00"`),
+ * which is what turns on the free badge.
+ */
 export declare const FALLBACK_WORKBUDDY_MODELS: readonly WorkBuddyModelInfo[];
 /** Live catalog with a static fallback behind it. */
 export declare class WorkBuddyCatalog {
@@ -1692,11 +1748,18 @@ export declare const POOL_RESET_COOLDOWN_PATH = "/plugins/dsh-workbuddy-xdpool/c
 export declare const POOL_CHECKIN_PATH = "/plugins/dsh-workbuddy-xdpool/checkin";
 /** Plugin-owned model-selection save endpoint (writes the settings section). */
 export declare const POOL_MODELS_SAVE_PATH = "/plugins/dsh-workbuddy-xdpool/models/save";
+/**
+ * Throw one account out of the pool for good, or take it back.
+ *
+ * Separate from the disable route because the semantics differ: disabling is a
+ * rotation preference the account survives, ignoring survives the account.
+ */
+export declare const POOL_ACCOUNT_IGNORE_PATH = "/plugins/dsh-workbuddy-xdpool/accounts/ignored";
 /** Run one automation job immediately, so the card can verify it on demand. */
 export declare const POOL_AUTOMATION_RUN_PATH = "/plugins/dsh-workbuddy-xdpool/automation/run";
 /** Set or clear one account's reserved-credit floor. */
 export declare const POOL_CREDIT_RESERVE_PATH = "/plugins/dsh-workbuddy-xdpool/accounts/credit-reserve";
-/** One pool account's row, token-free. */
+/** One account's row, token-free. */
 interface PoolWebAccount {
   id: string;
   label: string;
@@ -1826,6 +1889,34 @@ interface PoolWebModel {
   /** Whether this model is currently enabled in the picker. */
   enabled: boolean;
 }
+/**
+ * Body of the account ignore/unignore route: exactly one account per request.
+ *
+ * `ignored: true` throws the account out of the pool for good (its credential is
+ * not even read on the next scan, and a fresh desktop sign-in will not bring it
+ * back). `false` restores it, at which point the next scan discovers it again.
+ */
+interface PoolWebAccountIgnore {
+  /** Pool account id, as reported in `PoolWebAccount.id`. */
+  accountId: string;
+  /** `true` ignores the account permanently; `false` takes it back. */
+  ignored: boolean;
+}
+/**
+ * One account the user has thrown out of the pool.
+ *
+ * Kept on the status document so the card can list what was ignored and offer a
+ * way back: without that, "ignored" is a one-way door the user cannot inspect or
+ * undo from the UI, which is how a hidden list becomes a support burden.
+ */
+interface PoolWebIgnoredAccount {
+  /** Pool account id, the same key `PoolWebAccount.id` uses. */
+  id: string;
+  /** Human label captured at ignore time, so the row reads without a rescan. */
+  label: string;
+  /** ISO timestamp of when it was ignored. */
+  ignoredAt: string;
+}
 interface PoolWebModelSelection {
   /** Absent = every model is enabled. */
   enabledModelIds?: readonly string[];
@@ -1861,6 +1952,14 @@ interface PoolWebStatus {
   automation: PoolWebAutomation;
   /** Per-account credit floors currently in force, keyed by account id. */
   creditReserves: Readonly<Record<string, number>>;
+  /**
+   * Accounts thrown out of the pool, in the order they were ignored.
+   *
+   * Reported so the card can show the list and offer a way back. These accounts
+   * are NOT in `accounts`: they are filtered out before their credentials are
+   * read, which is the whole point of the feature.
+   */
+  ignored: readonly PoolWebIgnoredAccount[];
 }
 /** One automation job's last run, as shown on the card. */
 interface PoolWebAutomationJob {
@@ -1952,6 +2051,89 @@ interface PoolWebAutomationEarnings {
 type PoolRegion = 'cn' | 'global';
 /** How the pool spreads requests across its accounts. */
 type PoolDistribution = 'priority' | 'round-robin' | 'balanced';
+/**
+ * The schedule every automation job falls back to.
+ *
+ * Shared by both halves on purpose. The host uses it when a configured hour
+ * list arrives empty (the settings schema materializes "never configured" into
+ * `[]`), and the card uses it when it writes the `automation` block back, so a
+ * document that already holds an empty list is healed instead of being saved
+ * back as an unrunnable schedule.
+ *
+ * This lives here rather than in `scheduler.ts` because the browser half cannot
+ * import the host module: `scheduler.ts` pulls in `node:crypto` and the whole
+ * upstream client, none of which exists in the browser bundle. Two hand-written
+ * copies would drift, and the drift is invisible — the card would write a
+ * schedule the scheduler does not run.
+ */
+export declare const DEFAULT_AUTOMATION_HOURS: {
+  readonly checkin: readonly [9];
+  readonly report: readonly [10];
+  readonly tasks: readonly [11];
+  readonly streak: readonly [12];
+  readonly travel: readonly [9, 21];
+};
+//#endregion
+//#region src/ignored.d.ts
+/** Directory holding this plugin's own state (imported snapshots, ignore list). */
+export declare const PLUGIN_DATA_DIR_NAME = ".workbuddy-xdpool";
+/** File holding the permanent ignore list, inside {@link pluginDataDir}. */
+export declare const IGNORED_FILE_NAME = "ignored.json";
+/** One ignored account, as stored on disk and shown on the card. */
+type IgnoredAccount = PoolWebIgnoredAccount;
+/**
+ * The DSH home directory, honouring the same override the host uses.
+ *
+ * Shared by the CLI and the host so both halves resolve the same file: an
+ * `ignore` written from the terminal has to be visible to the running plugin,
+ * which is only true if they agree on where "home" is.
+ */
+export declare function dshHome(env?: NodeJS.ProcessEnv): string;
+/** This plugin's own state directory. */
+export declare function pluginDataDir(env?: NodeJS.ProcessEnv): string;
+/** Absolute path of the ignore list. */
+export declare function ignoredIdsPath(env?: NodeJS.ProcessEnv): string;
+/**
+ * Read the ignore list, tolerating every "no list yet" shape.
+ *
+ * A missing file, unreadable file, or invalid JSON all mean the same thing to
+ * the caller — nothing is ignored — so none of them throws. The pool must be
+ * able to start on a machine that has never ignored anything.
+ */
+export declare function readIgnoredAccounts(path?: string): Promise<IgnoredAccount[]>;
+/**
+ * Synchronous read, for startup.
+ *
+ * The host applies the ignore list from inside `apply()`, which is synchronous,
+ * and doing it there removes a startup race: an async load could resolve AFTER
+ * the first account scan, which would let an ignored account slip into the pool
+ * once per boot. The file is a few hundred bytes, so a blocking read at startup
+ * costs nothing measurable.
+ */
+export declare function readIgnoredAccountsSync(path?: string): IgnoredAccount[];
+/**
+ * Replace the ignore list, atomically.
+ *
+ * Written to a sibling temp file and renamed over the target so a crash (or a
+ * concurrent reader) can never observe a half-written document — the ignore
+ * list is the only thing standing between a dead account and the rotation, and
+ * a truncated file reads as "nothing is ignored", which would quietly put every
+ * discarded account back in the pool.
+ */
+export declare function writeIgnoredAccounts(accounts: readonly IgnoredAccount[], path?: string): Promise<void>;
+/**
+ * Add one account to the ignore list, preserving the rest.
+ *
+ * A read-modify-write rather than a wholesale replace: the card and the CLI can
+ * both be open, and each request names exactly one account, so re-writing the
+ * whole list from a stale view would drop the other side's edits.
+ */
+export declare function ignoreAccount(account: {
+  id: string;
+  label?: string;
+}, path?: string): Promise<IgnoredAccount[]>;
+/** Drop one account from the ignore list. Returns the resulting list. */
+export declare function unignoreAccount(accountId: string, path?: string): Promise<IgnoredAccount[]>;
 //#endregion
 //#region src/web-status.d.ts
 /** Constructor dependencies — a narrow slice of the pool runtime. */
@@ -2005,6 +2187,21 @@ interface PoolStatusRouteOptions {
    * Absent without a settings service: the route then answers 503.
    */
   setAccountDisabled?: (accountId: string, disabled: boolean) => Promise<void> | void;
+  /**
+   * Throw one account out of the pool for good, or take it back.
+   *
+   * Backed by the plugin's own ignore file rather than the settings document,
+   * because the CLI writes the same list and has no settings service. Absent
+   * when the host did not wire it: the route then answers 503.
+   */
+  setAccountIgnored?: (accountId: string, ignored: boolean) => Promise<void> | void;
+  /**
+   * The accounts currently ignored, for the card's "ignored" list.
+   *
+   * A thunk rather than a snapshot so the document always reflects the file on
+   * disk, including edits made by the CLI while the card is open.
+   */
+  ignoredAccounts?: () => readonly PoolWebIgnoredAccount[];
 }
 /**
  * Assemble the card's status document. Per-account credits and check-in state
@@ -2214,4 +2411,4 @@ export declare function createCore(logger?: {
  */
 export declare function apply(ctx: Context, config?: Config): void;
 //#endregion
-export type { AccountStatus, AutomationLedger, AutomationRunSummary, AutomationStatus, Context, ExpertUseMode, MarketExpert, ModelSelection, PoolStatusRouteOptions, PoolWebCheckin, PoolWebCheckinClaim, PoolWebModel, PoolWebModelSelection, PoolWebStatus, SchedulerLogger, TaskEventChain, TaskEventTransport, UpstreamErrorKind, WorkBuddyAccount, WorkBuddyAdapter, WorkBuddyCredential, WorkBuddyModelInfo, WorkBuddyShim, WorkBuddyStatus };
+export type { AccountStatus, AutomationLedger, AutomationRunSummary, AutomationStatus, Context, ExpertUseMode, IgnoredAccount, MarketExpert, ModelSelection, PoolStatusRouteOptions, PoolWebAccountIgnore, PoolWebCheckin, PoolWebCheckinClaim, PoolWebIgnoredAccount, PoolWebModel, PoolWebModelSelection, PoolWebStatus, SchedulerLogger, TaskEventChain, TaskEventTransport, UpstreamErrorKind, WorkBuddyAccount, WorkBuddyAdapter, WorkBuddyCredential, WorkBuddyModelInfo, WorkBuddyShim, WorkBuddyStatus };