dsh-xdpool 2.4.2 → 2.4.4

package/CHANGELOG.md

@@ -1,6 +1,88 @@
 # Changelog
 本项目的所有重要变更都会记录在此文件。
 版本号遵循 [语义化版本](https://semver.org/lang/zh-CN/)。
+## 2.4.4 — 扫码登录后仍显示「登录已被拒绝」，以及侧栏入口
+
+> 两个都不算新功能：一个是**我上一版自己的代码**把刚扫的凭据判成「旧的」；另一个是入口位置——账号池一直只能从「设置」里进。
+
+### 扫了码、账号池还是说「登录已被拒绝」
+
+**你看到的**：某两个账号卡片一直显示「登录已被拒绝 / 上游已不再接受这个登录状态」，提示你去 WorkBuddy 桌面端重新登录。可你的登录途径是这个插件的扫码登录，而且刚刚扫过——扫完还是那句。
+
+**真实原因**（两处，都在本插件自己的代码里，不在上游）：
+
+1. **新鲜度排序把扫码凭据排在最后**。同一个账号可能同时存在两份凭据：桌面 App 留在 `auth` 目录里的快照文件，和你扫码后由本插件铸造的凭据。`compareFreshness` 原先只认三档——桌面 live 文件、`lastRefreshAtMs`、`expiresAtMs`。扫码凭据的 `sourcePath` 是 `channel-pack:<provider>:<ref>`，既不是 live 文件名、也永远没有 `lastRefreshAtMs`，于是**无条件输给任何残留的旧快照**。它输一次，凭据就不被替换；不替换，就走不到「清除死亡标记」那一行——卡片上那句提示于是永远不会消失，反复扫码也没反应。
+
+   现在改为按来源分三级：桌面 live 文件 > 本插件扫码凭据 > 其它残留快照，同级才继续比签发时间和有效期。
+
+2. **渠道包的去重按昵称分组，会删掉刚扫进来的凭据**。本插件对渠道包做过本地补丁：同渠道同昵称视为重复条目，只保留一条。问题有两个——重扫时新凭据遇到未过期的旧条目会被当作重复删掉（连凭据一起删）；而**同一个人的两个账号如果昵称相同，也会被当成同一个人删掉一个**。本机正好有两个都叫「青楫渡」的账号。
+
+   现在改用凭据里的上游身份 `user_id` 判重，并且：认不出身份的一律保留（宁可留一条重复，也不能删掉别人的账号）；登录半成品（昵称还是生成 id、没有有效期）在比较中让位给已完成登录的条目；都可用时按 `createdAt` 留新的。
+
+### 左侧栏可以直接进账号池了
+
+账号池此前只能从「设置 → XD Pool」进。现在侧栏底部（设置按钮附近）多了一个图标，点开就是同一个账号池卡片，`Esc` 或点面板外关闭。
+
+按钮与面板是两个互不相邻的宿主插槽（`sidebar.footer.action` 与 `shell.overlay`），没有共同祖先，因此开合状态放在模块级而不是组件状态里；面板直接渲染同一个 `PoolCard`，不复制一份界面。宿主只给侧栏注册者 `{ wide }`，没有「打开设置」的接口——这也是同类插件都用自己的浮层而不是跳转的原因。老宿主缺少 `shell.overlay` 时只损失这个入口，不影响设置页。
+
+### 测试
+
+账号发现新增 3 例：扫码凭据胜过旧快照、桌面 live 文件仍胜过扫码凭据、凭据被替换后死亡标记清除；另有 1 例钉住「同昵称的两个人不会被合并」。全套 **79 文件 1023 用例**。
+
+## 2.4.3 — 渠道包补上 11128、粘性绑定跨重启、网关白名单、目录 TTL，外加 CodeArts 重签开关
+
+> 2.4.1 与 2.4.2 修的是**池车道**（`src/upstream.ts`）；这一版把同一套 11128 规则补进**渠道车道**自己那份 channel pack，并顺带解决三件独立的事：会话粘性绑定不该止于进程边界、网关页面的勾选该是真开关、远端模型目录该会过期。四个 PR 来自社区（[@GIGIGIGIbaby](https://github.com/GIGIGIGIbaby)），复核与发布由维护者完成。另附一个默认关闭的 CodeArts 重签开关（见末节）。
+
+### 渠道账号也吃 400 / 11128（PR [#63](https://github.com/XDTrees/dsh-xdpool/pull/63)）
+
+`workbuddy` 渠道在 `channels.ts` 的 `POOL_OWNED_CHANNELS` 列表里，但它**不走** `src/upstream.ts` —— 它由 channel pack 自己的 WorkBuddy 适配器应答。2.4.1 的两道内容指纹、2.4.2 的 role 转换与三个会话身份头都只加在了池车道，于是渠道账号继续吃到 2.4.2 已经替别人修好的那个 `400 / 11128`：
+
+| 项 | 渠道适配器改前 | 改后 |
+|---|---|---|
+| 首条消息 role | `developer` | `system`（就地转换） |
+| `powered by DeepSeek Harness` | 原样发出 | `running on DeepSeek Harness` |
+| `DeepSeek Harness Web GUI` | 原样发出 | `DeepSeek Harness web interface` |
+| `X-Conversation-ID` / `-Request-ID` / `-Message-ID` | 一个都不带 | 三个都带 |
+
+三处编辑各自标了 `[xdpool-local]`，配套的 `tests/chat-identity-headers.test.ts` 直接对**已发布的 bundle** 做源断言（pack.js 是外部构建产物、无法 `import`，所以只能在字节层 pin 住）—— 下次 pack 刷新若把这三处冲掉，测试会变红，而不是静默回退。
+
+### 会话粘性绑定跨过进程边界（PR [#64](https://github.com/XDTrees/dsh-xdpool/pull/64)）
+
+卡片承诺「一个会话一个账号」，但这个承诺原先止于进程边界：绑定存在一个 `Map` 里，每次重启都重新挑选，于是同一个会话一天里可能被三个账号各服务一遍，每次都按完整 prompt 计费。现在这张表写进插件状态目录（只存哈希到账号 id，不含任何消息内容），构造时加载，写入合并成一次原子 rename，并沿用与内存版相同的 LRU 上限。
+
+测试特意把会话绑到一个「默认挑选不会选中」的账号 —— 新建的空池本来就会同意未绑定会话的选择，所以「两个池答案一致」在禁用加载时也能通过；实测把加载去掉会让其中三个用例变红。
+
+### 网关页面的勾选不再是纯展示（PR [#65](https://github.com/XDTrees/dsh-xdpool/pull/65)）
+
+Gateway 页的模型勾选框与 LAN 共享列表此前只是**展示过滤器**：`/v1/models` 会隐藏没勾的模型，但请求路径照单全收。一台还留着旧模型 id 的手机、或照文档猜一个 id 的第二编辑器，就能继续拿卡片上写着「关」的模型花用户的钱。
+
+现在强制发生在**调用方实际发出的那个 id 上**，且在任何车道剥前缀或改写 body **之前**，覆盖每条车道：pool、aggregate、free、combo，以及登录渠道。列表与闸门读同一份集合——这正是让卡片上的勾选有意义的原因。
+
+### 远端模型目录会过期（PR [#66](https://github.com/XDTrees/dsh-xdpool/pull/66)）
+
+bundle 里每个适配器都把 `remoteModels` 缓存到进程结束，于是厂商改名或调整倍率要等重启才反映到卡片上——而**改名通常就是改价**，因为倍率是名字的一部分。现在由一道 TTL 闸门决定缓存能否应答，时长十分钟，可用 `DSH_XDPOOL_CATALOG_TTL_MS` 覆盖以便测试。
+
+闸门刻意**不清缓存**：加载器只在成功时覆盖，所以刷新失败会继续沿用最后一份已知良好的目录，而不是退化成一堆裸 id；网关侧 30s 的冷却又限住了重试速率。同样无需重建 lib —— `channels.ts` 在运行期按路径加载 `pack.js`。
+
+### 可选：CodeArts 请求带重签头（默认关闭，`[xdpool-local]`）
+
+在 CodeArts 的 chat 请求上追加两个头：
+
+```
+x-bili-resign: sdk-hmac-sha256
+x-bili-resign-credential: base64({"ak":"…","sk":"…","token":"…"})
+```
+
+用途是让 billion-context 用这对凭证**重签**一条它接管的 SDK-HMAC-SHA256 请求：该方案的签名覆盖请求体，压缩改写会让签名失效，而 bili 拿不到重签凭证时会按 compress-or-refuse 契约**本地拒发**（`bili_resign_unavailable`，表现为 403，再被误读成「密钥无效」）。带上这对头，bili 就能重算签名，压缩能力得以保留（billion-context 的 #1884 逃生口）。
+
+**为什么默认关闭**：`billion-context` 只在 `optionalDependencies` 里，未安装时这两个头会**直达上游**，而它们携带的是 AK/SK；另外 bili 的进程内 native client 自己会构造这两个头（`resignExtra`），xdpool 加不加都不影响它。开关留给「xdpool 直接对接 bili 代理路径」或将来需要显式携带凭证的场合 —— 启用方式是在 pool 构造时传 `codeartsResignHeaders: true`（当前没有对应的用户级配置项）。
+
+配套 `tests/codearts-resign-headers.test.ts` 用源断言 pin 住四件事：两个头名齐全、字段名与 bili `decodeApigCredential` 读取的 `ak`/`sk`/`token` 一致、插入位置在 `signRequestHuawei` 之后、以及默认关闭。
+
+### 其他
+
+- 新增测试：渠道包 11128 规则源断言、粘性绑定跨重启（含「去掉加载即变红」的对照）、网关白名单与列表一致性、目录 TTL。
+
 ## 2.4.2 — 第二道内容指纹：`Web GUI` 那句，以及 assistant 历史
 > 2.4.1 之后仍有 11128。这一版补上第二道内容指纹，并把改写范围扩到 assistant 历史。修复来自社区 PR [#62](https://github.com/XDTrees/dsh-xdpool/pull/62)（[@jmglsi](https://github.com/jmglsi)），实测复核与发布由维护者完成。
 ### 同一条提示词里还有第二道指纹

package/lib/bin.js

@@ -1,5 +1,5 @@
 import { createDecipheriv, createHash, randomUUID } from "node:crypto";
-import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, writeFileSync } from "node:fs";
 import { copyFile, mkdir, readFile, readdir, rename, rm, writeFile, writeFile as writeFile$1 } from "node:fs/promises";
 import { homedir, platform } from "node:os";
 import { basename, dirname, join, resolve } from "node:path";
@@ -3084,24 +3084,49 @@ function isLiveAuthFile(path) {
 	return basename(path) === WORKBUDDY_LIVE_FILENAME;
 }
 /**
+* True for a credential this plugin minted from the channel-pack sign-in flow.
+*
+* `packCredentialToWorkBuddy` stamps `channel-pack:<provider>:<ref>` here, so the
+* prefix is the only thing distinguishing a scanned credential from a file the
+* desktop app wrote. Nothing about it is a path on disk — there is no file to
+* stat and no mtime to read.
+*/
+function isChannelPackSource(path) {
+	return path.startsWith("channel-pack:");
+}
+/**
 * Which of two credentials for the same account the pool should keep.
 *
 * Ordering, highest first:
 *
 * 1. the live file the desktop app is signed in with;
-* 2. the credential the upstream issued most recently (`lastRefreshAtMs`);
-* 3. the longer stored expiry, as a fallback for documents that carry no issue
+* 2. a credential minted by our own channel-pack sign-in;
+* 3. the credential the upstream issued most recently (`lastRefreshAtMs`);
+* 4. the longer stored expiry, as a fallback for documents that carry no issue
 *    time (the plugin's own refreshed copy, older builds).
 *
 * The stored expiry alone is NOT a freshness signal: the upstream does not
 * rewrite it when it revokes a token, so a long-dead backup can claim to expire
 * later than the token that actually works. Selecting on it made every upstream
 * call return 401 while a perfectly good credential sat in the same directory.
+*
+* Rank 2 exists because a scanned credential loses both of the lower tests by
+* construction: it is not the live filename, and the sign-in flow records no
+* `lastRefreshAtMs`. Ranking it below a leftover snapshot meant a user who had
+* just scanned a fresh sign-in still saw "sign-in was rejected", because the
+* abandoned file kept winning the comparison and the dead mark was never
+* cleared. The live file stays on top: that is the session the running desktop
+* app is genuinely using right now, and it is newer than anything we mint.
 */
 function compareFreshness(a, b) {
-	const aLive = isLiveAuthFile(a.sourcePath) ? 1 : 0;
-	const bLive = isLiveAuthFile(b.sourcePath) ? 1 : 0;
-	if (aLive !== bLive) return bLive - aLive;
+	const rankOf = (credential) => {
+		if (isLiveAuthFile(credential.sourcePath)) return 2;
+		if (isChannelPackSource(credential.sourcePath)) return 1;
+		return 0;
+	};
+	const aRank = rankOf(a);
+	const bRank = rankOf(b);
+	if (aRank !== bRank) return bRank - aRank;
 	const aIssued = a.lastRefreshAtMs ?? 0;
 	const bIssued = b.lastRefreshAtMs ?? 0;
 	if (aIssued !== bIssued) return bIssued - aIssued;
@@ -3363,6 +3388,9 @@ var WorkBuddyAccountPool = class {
 	* the LRU order: re-binding deletes then re-inserts.
 	*/
 	affinity = /* @__PURE__ */ new Map();
+	/** Where the bindings above are persisted; undefined keeps them in memory. */
+	affinityPath;
+	affinitySaveTimer;
 	lastScanAtMs = 0;
 	/**
 	* The account id the user pinned, or undefined for none.
@@ -3472,6 +3500,8 @@ var WorkBuddyAccountPool = class {
 		this.distribution = options.distribution ?? "priority";
 		this.persistent = options.persistent ?? false;
 		this.storePath = accountStorePath();
+		this.affinityPath = options.affinityPath;
+		if (this.affinityPath !== void 0) this.loadAffinity();
 	}
 	/**
 	* Re-apply configuration that only affects discovery and cooldown policy,
@@ -3747,6 +3777,49 @@ var WorkBuddyAccountPool = class {
 			if (oldest === void 0) break;
 			this.affinity.delete(oldest);
 		}
+		this.scheduleAffinitySave();
+	}
+	/**
+	* Restore bindings written by a previous process.
+	*
+	* Tolerant like the other state files: a malformed document or one bad entry
+	* must not take the pool down, and an account id that no longer exists is
+	* simply never matched (the next acquire re-picks and rebinds).
+	*/
+	loadAffinity() {
+		if (this.affinityPath === void 0) return;
+		try {
+			const bindings = JSON.parse(readFileSync(this.affinityPath, "utf8")).bindings;
+			if (typeof bindings !== "object" || bindings === null || Array.isArray(bindings)) return;
+			for (const [key, value] of Object.entries(bindings)) {
+				if (key === "" || typeof value !== "string" || value === "") continue;
+				this.affinity.set(key, value);
+			}
+			while (this.affinity.size > STICKY_AFFINITY_LIMIT) {
+				const oldest = this.affinity.keys().next().value;
+				if (oldest === void 0) break;
+				this.affinity.delete(oldest);
+			}
+		} catch {}
+	}
+	/** Write the bindings back, coalescing a burst into one atomic rename. */
+	scheduleAffinitySave() {
+		if (this.affinityPath === void 0 || this.affinitySaveTimer !== void 0) return;
+		this.affinitySaveTimer = setTimeout(() => {
+			this.affinitySaveTimer = void 0;
+			const path = this.affinityPath;
+			if (path === void 0) return;
+			try {
+				mkdirSync(dirname(path), { recursive: true });
+				writeFileSync(`${path}.tmp`, `${JSON.stringify({
+					version: 1,
+					bindings: Object.fromEntries(this.affinity)
+				}, null, 2)}
+`, "utf8");
+				renameSync(`${path}.tmp`, path);
+			} catch {}
+		}, 500);
+		this.affinitySaveTimer.unref?.();
 	}
 	/**
 	* `sticky`: the account this conversation already used, when it can still
@@ -11217,7 +11290,8 @@ function createCore(logger) {
 	const pool = new WorkBuddyAccountPool({
 		...logger === void 0 ? {} : { logger },
 		client,
-		persistent: true
+		persistent: true,
+		affinityPath: join(pluginDataDir(), "sticky-affinity.json")
 	});
 	return {
 		pool,

package/lib/client.js

@@ -1255,6 +1255,21 @@ window.__ModuleLoader__.load({
 .dsm-xdpool-gw-actions{display:flex;align-items:center;gap:6px;flex-wrap:wrap}
 .dsm-xdpool-gw-flash{margin:0;padding:6px 10px;border-radius:9px;border:1px solid color-mix(in srgb, var(--dsw-alias-border-l1,#ffffff14) 70%, transparent);background:color-mix(in srgb, var(--dsw-alias-bg-layer-1,#191a1e) 72%, transparent);color:var(--dsw-alias-label-secondary,#c6c9d0);font-size:11px;line-height:17px;word-break:break-word}
 .dsm-xdpool-gw-btn{appearance:none;display:inline-flex;align-items:center;gap:6px;font:inherit;font-size:11.5px;font-weight:560;line-height:17px;padding:4px 12px;border-radius:8px;border:1px solid color-mix(in srgb, var(--dsw-alias-border-l2,#36373b) 85%, transparent);background:color-mix(in srgb, var(--dsw-alias-bg-layer-3,#2a2c33) 70%, transparent);color:var(--dsw-alias-label-secondary,#c6c9d0);cursor:pointer;white-space:nowrap;transition:border-color .16s ease,color .16s ease,background .16s ease,transform .18s var(--ease-instrument,cubic-bezier(.16,1,.3,1))}
+/* The gateway's shared-model picker. Grouped by lane, and each row carries BOTH
+   the display name and the wire id, because for the login channels they are
+   different words: the user knows the model as "Qwen3.8-Flash · 免费" and has to
+   type "qfmodel" into the client. Showing only one of the two makes the list
+   either unreadable or unusable. */
+.dsm-xdpool-gw-group{margin-top:10px;display:flex;flex-direction:column;gap:2px;min-width:0}
+.dsm-xdpool-gw-group-title{margin:0 0 2px;color:var(--dsw-alias-label-tertiary,#8a90a0);font-size:11px;line-height:16px;font-weight:650;letter-spacing:.1px;text-transform:lowercase}
+.dsm-xdpool-gw-model{display:grid;grid-template-columns:16px minmax(0,1fr) auto;align-items:center;gap:8px;padding:3px 6px;border-radius:8px;cursor:pointer;min-width:0}
+.dsm-xdpool-gw-model:hover{background:color-mix(in srgb, var(--dsw-alias-bg-layer-1,#191a1e) 60%, transparent)}
+.dsm-xdpool-gw-model input{appearance:none;width:14px;height:14px;margin:0;border-radius:4px;border:1px solid var(--dsw-alias-border-l2,#36373b);background:color-mix(in srgb, var(--dsw-alias-bg-layer-1,#191a1e) 78%, transparent);cursor:pointer;display:grid;place-items:center}
+.dsm-xdpool-gw-model input:checked{background:var(--dsw-alias-brand-primary,#5686fe);border-color:var(--dsw-alias-brand-primary,#5686fe)}
+.dsm-xdpool-gw-model input:checked::after{content:"";width:6px;height:3px;border-left:1.5px solid #fff;border-bottom:1.5px solid #fff;transform:rotate(-45deg) translateY(-1px)}
+.dsm-xdpool-gw-model input:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:1px}
+.dsm-xdpool-gw-model-name{color:var(--dsw-alias-label-primary,#e8e8ea);font-size:12px;line-height:17px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;min-width:0}
+.dsm-xdpool-gw-model-id{font-family:var(--dsw-alias-font-mono,ui-monospace,Menlo,Consolas,monospace);font-size:11px;line-height:16px;color:var(--dsw-alias-label-tertiary,#8a90a0);white-space:nowrap}
 .dsm-xdpool-gw-btn:hover:not(:disabled){transform:translateY(-1px);border-color:color-mix(in srgb, var(--dsw-alias-brand-primary,#5686fe) 55%, var(--dsw-alias-border-l2,#36373b));color:var(--dsw-alias-label-primary,#e8e8ea)}
 .dsm-xdpool-gw-btn:active:not(:disabled){transform:translateY(0);box-shadow:inset 0 2px 4px rgb(0 0 0 / 22%)}
 .dsm-xdpool-gw-btn:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:2px}
@@ -1655,6 +1670,39 @@ window.__ModuleLoader__.load({
 ):active:not(:disabled){transform:none}
 }
 
+/* ── Docked entry beside the settings control ────────────────────────────────
+   The sidebar button and the overlay are two separate registrations with no
+   shared ancestor, so neither can carry the shell's own custom properties: the
+   easing curves are re-declared here rather than inherited. Everything below is
+   scoped to .dsm-xdpool-dock so it cannot reach into the host's sidebar. */
+.dsm-xdpool-dock{--ease-instrument:cubic-bezier(.16,1,.3,1);position:relative;z-index:1;display:flex;align-items:center;gap:8px;width:100%;min-width:0;padding:6px 8px;border:1px solid transparent;border-radius:9px;background:transparent;color:var(--dsw-alias-label-secondary,#c6c9d0);font:inherit;font-size:12px;line-height:17px;font-weight:560;text-align:left;cursor:pointer;overflow:hidden;transition:color .2s var(--ease-instrument),background .2s var(--ease-instrument),border-color .2s var(--ease-instrument)}
+.dsm-xdpool-dock:hover{color:var(--dsw-alias-label-primary,#e8e8ea);background:color-mix(in srgb, var(--dsw-alias-label-primary,#e8e8ea) 7%, transparent);border-color:color-mix(in srgb, var(--dsw-alias-border-l2,#ffffff1f) 70%, transparent)}
+.dsm-xdpool-dock-on{color:var(--dsw-alias-label-primary,#e8e8ea);background:color-mix(in srgb, var(--dsw-alias-state-business-primary,#5686fe) 14%, transparent);border-color:color-mix(in srgb, var(--dsw-alias-state-business-primary,#5686fe) 40%, transparent)}
+/* The sweep is the same gesture the card's own buttons make, so the dock reads
+   as part of the plugin rather than a host control. */
+.dsm-xdpool-dock::after{content:"";position:absolute;top:0;bottom:0;left:-60%;width:42%;pointer-events:none;background:linear-gradient(100deg,transparent,rgb(255 255 255 / 12%),transparent);transform:skewX(-18deg);transition:left .5s var(--ease-instrument)}
+.dsm-xdpool-dock:hover::after{left:118%}
+.dsm-xdpool-dockicon{flex:none;width:16px;height:16px;background-color:currentColor;-webkit-mask-image:var(--dsm-xdpool-dock-glyph);mask-image:var(--dsm-xdpool-dock-glyph);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-position:center;mask-position:center;-webkit-mask-size:16px 16px;mask-size:16px 16px}
+.dsm-xdpool-docklabel{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+/* No dark backdrop: the panel is a companion to the conversation, not a modal,
+   and dimming the whole host for a settings card reads as a page navigation.
+   Clicking outside still closes it — the scrim covers the viewport and is
+   transparent, so only the click is caught. */
+.dsm-xdpool-dockscrim{position:fixed;inset:0;z-index:60;display:flex;align-items:stretch;justify-content:flex-end;background:transparent}
+.dsm-xdpool-dockpanel{--ease-instrument:cubic-bezier(.16,1,.3,1);display:flex;flex-direction:column;width:min(760px, 92vw);margin:14px;border:1px solid color-mix(in srgb, var(--dsw-alias-border-l2,#ffffff1f) 82%, transparent);border-radius:16px;background:color-mix(in srgb, var(--dsw-alias-bg-layer-1,#141517) 96%, transparent);box-shadow:0 20px 60px rgb(0 0 0 / 45%);overflow:hidden;animation:dsm-xdpool-dock-in .3s var(--ease-instrument)}
+@keyframes dsm-xdpool-dock-in{from{opacity:0;transform:translateX(18px)}to{opacity:1;transform:none}}
+.dsm-xdpool-dockhead{display:flex;align-items:center;gap:10px;padding:10px 12px;border-bottom:1px solid color-mix(in srgb, var(--dsw-alias-border-l1,#ffffff14) 80%, transparent)}
+.dsm-xdpool-docktitle{flex:1 1 auto;font-size:12px;line-height:17px;font-weight:640;color:var(--dsw-alias-label-primary,#e8e8ea)}
+.dsm-xdpool-dockclose{appearance:none;flex:none;width:22px;height:22px;padding:0;border:1px solid transparent;border-radius:7px;background:transparent;color:var(--dsw-alias-label-tertiary,#8a90a0);font:inherit;font-size:15px;line-height:1;cursor:pointer;transition:color .16s ease,background .16s ease}
+.dsm-xdpool-dockclose:hover{color:var(--dsw-alias-label-primary,#e8e8ea);background:color-mix(in srgb, var(--dsw-alias-label-primary,#e8e8ea) 9%, transparent)}
+/* The card inside the panel was built for the settings dialog's width; scroll
+   the panel body, never the card, so its own sticky header keeps working. */
+.dsm-xdpool-dockbody{flex:1 1 auto;min-height:0;overflow:auto;padding:14px}
+@media (prefers-reduced-motion:reduce){
+.dsm-xdpool-dock::after{display:none}
+.dsm-xdpool-dockpanel{animation:none}
+}
+
 `.trim();
 		//#endregion
 		//#region src/client/avatar.ts
@@ -10776,6 +10824,35 @@ window.__ModuleLoader__.load({
 			const [revealed, setRevealed] = (0, react.useState)(false);
 			const [host, setHost] = (0, react.useState)("127.0.0.1");
 			const [port, setPort] = (0, react.useState)("8326");
+			/**
+			* The in-progress share list, or undefined while it still mirrors the server.
+			*
+			* Held as a draft for the same reason the model card holds one: saving is a
+			* deliberate act here, because every unchecked row stops working on whatever
+			* device is already pointed at the gateway.
+			*/
+			const [draftShared, setDraftShared] = (0, react.useState)(void 0);
+			/**
+			* Which ids are shared right now.
+			*
+			* `status.shared === undefined` means the user has never chosen, and the
+			* gateway is serving everything — so the picker must show every row ticked
+			* rather than an empty list, which would read as "nothing is shared" and invite
+			* a save that closes a gateway that was open.
+			*/
+			const candidates = status?.candidates ?? [];
+			const serverShared = status?.shared ?? candidates.map((row) => row.id);
+			const shared = draftShared ?? new Set(serverShared);
+			const sharedDirty = draftShared !== void 0 && (draftShared.size !== serverShared.length || [...draftShared].some((id) => !serverShared.includes(id)));
+			const toggleShared = (id) => {
+				const next = new Set(shared);
+				if (next.has(id)) next.delete(id);
+				else next.add(id);
+				setDraftShared(next);
+			};
+			const setAllShared = (on) => {
+				setDraftShared(on ? new Set(candidates.map((row) => row.id)) : /* @__PURE__ */ new Set());
+			};
 			/** True once the server's values were adopted, so polls do not stomp edits. */
 			const seeded = (0, react.useRef)(false);
 			const mounted = (0, react.useRef)(true);
@@ -11015,6 +11092,92 @@ window.__ModuleLoader__.load({
 							})
 						]
 					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsm-xdpool-sec",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dsm-xdpool-sectitle",
+								children: t?.("gw.share") ?? "Shared models"
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dsm-xdpool-gw-note",
+								children: t?.("gw.shareHint") ?? ""
+							}),
+							candidates.length === 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dsm-xdpool-gw-note",
+								children: t?.("gw.shareNone") ?? ""
+							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: "dsm-xdpool-gw-actions",
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: "dsm-xdpool-gw-btn",
+											"data-on": "false",
+											disabled: busy,
+											onClick: () => {
+												setAllShared(true);
+											},
+											children: t?.("gw.shareAll") ?? "Select all"
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: "dsm-xdpool-gw-btn",
+											"data-on": "false",
+											disabled: busy,
+											onClick: () => {
+												setAllShared(false);
+											},
+											children: t?.("gw.shareNoneBtn") ?? "Select none"
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: "dsm-xdpool-gw-btn",
+											"data-on": "true",
+											disabled: busy || !sharedDirty,
+											onClick: () => {
+												write({ models: [...shared] }).then(() => {
+													setDraftShared(void 0);
+												});
+											},
+											children: t?.("gw.shareSave") ?? "Save"
+										})
+									]
+								}),
+								sharedDirty ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: "dsm-xdpool-gw-warn",
+									children: t?.("gw.shareDirty") ?? ""
+								}) : null,
+								[...new Set(candidates.map((row) => row.source))].map((source) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: "dsm-xdpool-gw-group",
+									children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										className: "dsm-xdpool-gw-group-title",
+										children: source
+									}), candidates.filter((row) => row.source === source).map((row) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+										className: "dsm-xdpool-gw-model",
+										children: [
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+												type: "checkbox",
+												checked: shared.has(row.id),
+												disabled: busy,
+												onChange: () => {
+													toggleShared(row.id);
+												}
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												className: "dsm-xdpool-gw-model-name",
+												children: row.name
+											}),
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												className: "dsm-xdpool-gw-model-id",
+												children: row.id
+											})
+										]
+									}, row.id))]
+								}, source))
+							] })
+						]
+					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: "dsm-xdpool-sec",
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
@@ -12195,7 +12358,7 @@ window.__ModuleLoader__.load({
 		*
 		* @module dsh-xdpool/version
 		*/
-		const POOL_VERSION = "2.4.2";
+		const POOL_VERSION = "2.4.4";
 		//#endregion
 		//#region src/client/PoolCard.tsx
 		/**
@@ -14589,6 +14752,138 @@ window.__ModuleLoader__.load({
 		*/
 		const POOL_NAV_ICON_MASK_URL = `data:image/svg+xml;utf8,${encodeURIComponent(POOL_NAV_ICON_SVG)}`;
 		//#endregion
+		//#region src/client/dock.tsx
+		/**
+		* The docked entry: a `sidebar.footer.action` button that opens the pool card in
+		* a `shell.overlay` panel.
+		*
+		* Why not link to the Settings page the card already lives on: the host's
+		* sidebar slot hands a registrant exactly `{ wide }` — no `openSettings`, no
+		* navigation seat. dsh-purge, dshmarket and everything else third-party solve it
+		* the same way, by owning the surface: a button that toggles an overlay of its
+		* own. Re-implementing the card for the overlay would mean two copies to keep in
+		* step, so the overlay renders the very same `PoolCard` the settings section
+		* renders, page state and all.
+		*
+		* The open flag lives at module scope rather than in React state because the
+		* button and the panel are two separate slot registrations with no common
+		* ancestor; module state plus a subscription is the only channel between them.
+		*/
+		/** Subscribers re-read {@link dockedOpen}; the setter notifies them. */
+		const listeners = /* @__PURE__ */ new Set();
+		let dockedOpen = false;
+		/** Read whether the docked panel is showing. */
+		function isDockedOpen() {
+			return dockedOpen;
+		}
+		/** Show or hide the docked panel, notifying every registrant. */
+		function setDockedOpen(open) {
+			if (dockedOpen === open) return;
+			dockedOpen = open;
+			for (const listener of [...listeners]) listener();
+		}
+		/** Subscribe to {@link setDockedOpen}. Returns the unsubscribe. */
+		function subscribeDockedOpen(listener) {
+			listeners.add(listener);
+			return () => {
+				listeners.delete(listener);
+			};
+		}
+		/** Subscribe a component to the open flag. */
+		function useDockedOpen() {
+			const [open, setOpen] = (0, react.useState)(isDockedOpen);
+			(0, react.useEffect)(() => {
+				setOpen(isDockedOpen());
+				return subscribeDockedOpen(() => {
+					setOpen(isDockedOpen());
+				});
+			}, []);
+			return open;
+		}
+		/**
+		* The sidebar button.
+		*
+		* Renders a glyph and, only when the rail is wide, the product name: a label in
+		* the collapsed 56px rail is clipped mid-word, which reads as a layout bug.
+		*/
+		function SidebarEntry({ wide }) {
+			const open = useDockedOpen();
+			const label = "XD Pool";
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+				type: "button",
+				className: `dsm-xdpool-dock${open ? " dsm-xdpool-dock-on" : ""}`,
+				title: open ? "收起 XD Pool" : "打开 XD Pool",
+				"aria-expanded": open,
+				"aria-label": label,
+				style: { "--dsm-xdpool-dock-glyph": `url("${POOL_NAV_ICON_MASK_URL}")` },
+				onClick: () => {
+					setDockedOpen(!isDockedOpen());
+				},
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					className: "dsm-xdpool-dockicon",
+					"aria-hidden": "true"
+				}), wide === true ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					className: "dsm-xdpool-docklabel",
+					children: label
+				}) : null]
+			});
+		}
+		/**
+		* The panel, rendered into `shell.overlay`.
+		*
+		* `children` is the card itself, passed in rather than imported so this module
+		* stays free of the card's dependency graph (the overlay must not drag the
+		* settings scope in with it when the host line has no scope to hand out).
+		*/
+		function DockedPanel({ children }) {
+			const open = useDockedOpen();
+			(0, react.useEffect)(() => {
+				if (!open) return;
+				const onKeyDown = (event) => {
+					if (event.key === "Escape") setDockedOpen(false);
+				};
+				window.addEventListener("keydown", onKeyDown);
+				return () => {
+					window.removeEventListener("keydown", onKeyDown);
+				};
+			}, [open]);
+			if (!open) return null;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: "dsm-xdpool-dockscrim",
+				role: "presentation",
+				onClick: () => {
+					setDockedOpen(false);
+				},
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: "dsm-xdpool-dockpanel",
+					role: "dialog",
+					"aria-modal": "false",
+					"aria-label": "XD Pool",
+					onClick: (event) => {
+						event.stopPropagation();
+					},
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsm-xdpool-dockhead",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsm-xdpool-docktitle",
+							children: "XD Pool"
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsm-xdpool-dockclose",
+							"aria-label": "关闭",
+							onClick: () => {
+								setDockedOpen(false);
+							},
+							children: "×"
+						})]
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsm-xdpool-dockbody",
+						children
+					})]
+				})
+			});
+		}
+		//#endregion
 		//#region src/client/locales.ts
 		/**
 		* Plugin-card copy registered under the `settings.xdpool` locale
@@ -14961,6 +15256,15 @@ window.__ModuleLoader__.load({
 			"gw.usageHint": "Any OpenAI-compatible app works. Set its base URL to the endpoint above, pick a model out of /v1/models, and send this key as the API key. The relay passes /v1/models and /v1/chat/completions only; everything else is refused before a byte is forwarded.",
 			"gw.loading": "Reading the relay status…",
 			"gw.saveFailed": "Could not save",
+			"gw.share": "Shared models",
+			"gw.shareHint": "Only the ticked models are reachable over the gateway. Unticking one does not just hide it from /v1/models — the gateway refuses it, because the relay key is a single secret shared by every device on the network, and a listing a client can ignore is not a restriction.",
+			"gw.shareNone": "Nothing to offer yet: no model is reachable until an account pool, an aggregate key or a signed-in channel provides one.",
+			"gw.shareAll": "Select all",
+			"gw.shareNoneBtn": "Select none",
+			"gw.shareSave": "Save sharing",
+			"gw.shareSaved": "Gateway sharing updated",
+			"gw.shareDirty": "Not saved yet. A device already using an unticked model will start getting 403.",
+			"gw.shareCount": "{shared} of {total} shared",
 			"ledger.title": "Data dashboard",
 			"ledger.sub": "Every number here is counted from calls this pool actually made.",
 			"ledger.window": "last {count} call(s)",
@@ -15463,6 +15767,15 @@ window.__ModuleLoader__.load({
 			"gw.usageHint": "任何 OpenAI 兼容的客户端都行：接口地址填上面那个入口，模型从 /v1/models 里挑，密钥填到这个 API 密钥的位置。中继只放行 /v1/models 和 /v1/chat/completions，其余路径在转发任何字节之前就拒掉。",
 			"gw.loading": "正在读取中继状态……",
 			"gw.saveFailed": "没能保存",
+			"gw.share": "共享哪些模型",
+			"gw.shareHint": "只有勾选的模型能通过网关访问。取消勾选不只是把它从 /v1/models 里藏起来——网关会直接拒绝它。因为中继密钥是整台网络上所有设备共用的同一把，而一份客户端可以无视的列表算不上限制。",
+			"gw.shareNone": "暂时无可提供：在账号池、聚合渠道密钥或已登录的渠道给出模型之前，这里不会有任何条目。",
+			"gw.shareAll": "全选",
+			"gw.shareNoneBtn": "全不选",
+			"gw.shareSave": "保存共享设置",
+			"gw.shareSaved": "网关共享设置已更新",
+			"gw.shareDirty": "尚未保存。已在使用某个被取消勾选模型的设备，会开始收到 403。",
+			"gw.shareCount": "已共享 {shared} / {total}",
 			"ledger.title": "数据看板",
 			"ledger.sub": "这里每个数字，都是这个池子真实发出去的调用数出来的。",
 			"ledger.window": "最近 {count} 次调用",
@@ -15647,6 +15960,24 @@ window.__ModuleLoader__.load({
 					}
 				}, PoolCard));
 				installNavIcon(ctx, () => t("row.navLabel"));
+				try {
+					ctx.slots.inject("sidebar.footer.action", () => ctx.slots.register({
+						name: "sidebar.footer.action",
+						id: "xdpool-dock",
+						order: 60,
+						label: "XD Pool"
+					}, SidebarEntry));
+					ctx.slots.inject("shell.overlay", () => ctx.slots.register({
+						name: "shell.overlay",
+						id: "xdpool-dock-panel",
+						order: 60
+					}, () => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(DockedPanel, { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PoolCard, { ...settingsScope === void 0 ? { t } : {
+						t,
+						settingsScope
+					} }) })));
+				} catch (error) {
+					console.error("[dsh-xdpool] docked entry unavailable (settings page unaffected):", error);
+				}
 			} catch (error) {
 				console.error("[dsh-xdpool] client page failed to load (host provider unaffected):", error);
 			}