dsh-xdpool 2.6.0 → 2.6.2

package/lib/client.js

@@ -116,6 +116,17 @@ window.__ModuleLoader__.load({
 		/** Set or clear one account's reserved-credit floor. */
 		const POOL_CREDIT_RESERVE_PATH = "/plugins/dsh-xdpool/accounts/credit-reserve";
 		/**
+		* Estimated credit spend, per channel and per model.
+		*
+		* Derived from the pack's own token ledger, never from a credit counter — the pack
+		* records tokens, and the vendor's balance is only visible when it is read again. The
+		* arithmetic (tokens ÷ 1e6 × the model's published multiplier) and the honesty about
+		* its error live in `credits.ts`.
+		*
+		* `?days=N` limits the window; the ledger keeps 90 days.
+		*/
+		const POOL_CREDITS_SPEND_PATH = "/plugins/dsh-xdpool/credits/spend";
+		/**
 		* Name the account to try first, or hand the choice back to the strategy.
 		*
 		* A route rather than a settings write for the reason the ignore list is a file:
@@ -1204,7 +1215,13 @@ window.__ModuleLoader__.load({
 .dsm-xdpool-group svg{fill:currentColor;transition:transform .28s cubic-bezier(.34,1.56,.64,1)}
 /* The invite dialog. Positioned against the shell (which is the containing
    block) so it covers the card and nothing of the host dialog around it. */
-.dsm-xdpool-groupmask{position:absolute;inset:0;z-index:60;display:flex;align-items:center;justify-content:center;padding:16px;border-radius:16px;background:color-mix(in srgb, var(--dsw-alias-bg-layer-1,#191a1e) 72%, transparent)}
+/* The invite, expanded in the flow directly under the tab strip.
+   No overlay and no positioning: it is a disclosure, so it pushes the panels below
+   down by its own height and appears exactly where the 交流群 button sits. Two earlier
+   attempts are worth remembering — absolute measured against the page column (so it
+   landed half-way down the scroll), and fixed centred it as a modal (correct for a
+   modal, but the ask was "show it HERE"). */
+.dsm-xdpool-groupinline{display:flex;justify-content:center}
 .dsm-xdpool-groupcard{display:flex;flex-direction:column;align-items:center;gap:10px;max-width:520px;padding:16px 18px 18px;border-radius:16px;border:1px solid color-mix(in srgb, var(--dsw-alias-border-l2,#ffffff1f) 86%, transparent);background:var(--dsw-alias-bg-layer-2,#1c1e22);box-shadow:0 18px 48px rgb(0 0 0 / 34%), inset 0 1px 0 rgb(255 255 255 / 7%)}
 /* The two codes sit side by side and WRAP to a column before either shrinks:
    a QR squeezed narrower than its module grid is a QR that stops scanning, so
@@ -1372,6 +1389,12 @@ window.__ModuleLoader__.load({
 .dsm-xdpool-gw-model input:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:1px}
 .dsm-xdpool-gw-model-name{color:var(--dsw-alias-label-primary,#e8e8ea);font-size:12px;line-height:17px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;min-width:0}
 .dsm-xdpool-gw-model-id{font-family:var(--dsw-alias-font-mono,ui-monospace,Menlo,Consolas,monospace);font-size:11px;line-height:16px;color:var(--dsw-alias-label-tertiary,#8a90a0);white-space:nowrap}
+/* The model id is a copy button living inside a <label>. It has to look like the text it
+   replaced, not like a second submit button — so the chrome is stripped and only the
+   pointer and a hover tint say it is pressable. */
+.dsm-xdpool-gw-copyid{appearance:none;-webkit-appearance:none;background:none;border:0;padding:0 2px;margin:0;cursor:pointer;border-radius:4px;font-family:var(--dsw-alias-font-mono,ui-monospace,Menlo,Consolas,monospace);font-size:11px;line-height:16px;color:var(--dsw-alias-label-tertiary,#8a90a0);white-space:nowrap;text-align:left}
+.dsm-xdpool-gw-copyid:hover{background:color-mix(in srgb, var(--dsw-alias-label-primary,#e8eaf0) 10%, transparent);color:var(--dsw-alias-label-secondary,#b9bfcc)}
+.dsm-xdpool-gw-copyid[data-on='true']{color:#3ba55d}
 .dsm-xdpool-gw-btn:hover:not(:disabled){transform:translateY(-1px);border-color:color-mix(in srgb, var(--dsw-alias-brand-primary,#5686fe) 55%, var(--dsw-alias-border-l2,#36373b));color:var(--dsw-alias-label-primary,#e8e8ea)}
 .dsm-xdpool-gw-btn:active:not(:disabled){transform:translateY(0);box-shadow:inset 0 2px 4px rgb(0 0 0 / 22%)}
 .dsm-xdpool-gw-btn:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:2px}
@@ -1793,6 +1816,92 @@ window.__ModuleLoader__.load({
 .dsm-xdpool-page > .dsm-xdpool-shell{margin:0 auto}
 @media (max-width:720px){.dsm-xdpool-page{padding:14px 16px 26px}}
 `.trim();
+		/**
+		* The composer credit dot and its panel.
+		*
+		* Its OWN export, not a member of a page block. The dot renders in the COMPOSER, which
+		* no settings page's `<style>` ever reaches — CSS parked in `GATEWAY_CARD_CSS` or
+		* `SHARED_CARD_CSS` is injected only inside the settings shell, so the panel came out as
+		* bare text with no dot and no card.
+		*/
+		const CREDIT_DOT_CSS = `
+/* ── Composer credit dot ────────────────────────────────────────────────────
+   A 9px dot on the composer's own row, beside the model name it describes. Its COLOUR
+   is the whole at-a-glance message — green while the serving channel has credits, grey
+   once it does not — and the detail lives behind a click, because that row already
+   holds a back button, a model name, a multiplier and a reasoning level. */
+.dsm-xdpool-dotwrap{position:relative;display:inline-flex;align-items:center;flex:none;margin:0 2px}
+.dsm-xdpool-dot{appearance:none;-webkit-appearance:none;display:grid;place-items:center;width:16px;height:16px;padding:0;margin:0;border:0;background:none;cursor:pointer;flex:none;border-radius:4px;transition:background-color .16s ease}
+.dsm-xdpool-dot:hover{background:color-mix(in srgb, var(--dsw-alias-label-primary,#e8eaf0) 12%, transparent)}
+.dsm-xdpool-dot-glyph{display:block;width:13px;height:13px;background-color:currentColor;-webkit-mask-image:var(--xdpool-dot-mask, none);mask-image:var(--xdpool-dot-mask, none);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-position:center;mask-position:center;-webkit-mask-size:13px 13px;mask-size:13px 13px;transition:color .18s ease}
+.dsm-xdpool-dot[data-state='alive']{color:#22c55e}
+.dsm-xdpool-dot[data-state='empty']{color:color-mix(in srgb, var(--dsw-alias-label-tertiary,#8a90a0) 85%, transparent)}
+.dsm-xdpool-dot:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:3px}
+/* Measured coordinates, not flow: the composer sits at the bottom of the viewport, so a
+   panel laid out downward would be clipped. */
+.dsm-xdpool-dotpanel{position:fixed;z-index:80;width:max-content;min-width:172px;max-width:min(280px,calc(100vw - 24px));display:flex;flex-direction:column;gap:7px;padding:10px 12px 11px;border-radius:14px;border:1px solid color-mix(in srgb, var(--dsw-alias-border-l2,#ffffff1f) 92%, transparent);background:var(--dsw-alias-bg-layer-2,#1c1e22);box-shadow:0 18px 48px rgb(0 0 0 / 44%),0 3px 10px rgb(0 0 0 / 24%),inset 0 1px 0 rgb(255 255 255 / 7%);animation:dsm-xdpool-dotpanel-in .16s cubic-bezier(.16,1,.3,1)}
+@keyframes dsm-xdpool-dotpanel-in{from{opacity:0;transform:translateY(5px) scale(.985)}to{opacity:1;transform:none}}
+.dsm-xdpool-dotpanel-head{display:flex;align-items:center;gap:8px;min-width:0}
+.dsm-xdpool-dotpanel-channel{font-size:12.5px;font-weight:600;letter-spacing:.01em;color:var(--dsw-alias-label-primary,#e8eaf0);overflow:hidden;text-overflow:ellipsis;white-space:nowrap;min-width:0}
+.dsm-xdpool-dotpanel-chip{margin-left:auto;padding:1px 8px;border-radius:999px;font-size:10px;line-height:16px;font-weight:500}
+.dsm-xdpool-dotpanel-chip[data-state='alive']{color:#22c55e;background:rgb(34 197 94 / 15%)}
+.dsm-xdpool-dotpanel-chip[data-state='empty']{color:var(--dsw-alias-label-tertiary,#8a90a0);background:color-mix(in srgb, var(--dsw-alias-label-tertiary,#8a90a0) 15%, transparent)}
+.dsm-xdpool-dotpanel-sec{display:grid;grid-template-columns:auto minmax(0,1fr);gap:10px;align-items:baseline;font-size:12px;line-height:18px}
+.dsm-xdpool-dotpanel-k{color:var(--dsw-alias-label-tertiary,#8a90a0);white-space:nowrap}
+.dsm-xdpool-dotpanel-v{text-align:right;font-variant-numeric:tabular-nums;color:var(--dsw-alias-label-primary,#e8eaf0);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+/* The spend bar. A fuller bar means MORE used, so it reads as a fuel gauge draining
+   toward the right; it turns amber past 90% because that is the point at which a long
+   task becomes a gamble. */
+.dsm-xdpool-dotbar{height:4px;border-radius:999px;overflow:hidden;background:color-mix(in srgb, var(--dsw-alias-label-tertiary,#8a90a0) 22%, transparent);margin:1px 0 2px}
+.dsm-xdpool-dotbar-fill{height:100%;border-radius:999px;background:#22c55e;transition:width .3s cubic-bezier(.16,1,.3,1),background-color .2s ease}
+.dsm-xdpool-dotbar-fill[data-full='true']{background:#f59e0b}
+.dsm-xdpool-dotpanel-more{display:flex;flex-direction:column;gap:2px;padding-top:6px;margin-top:1px;border-top:1px solid color-mix(in srgb, var(--dsw-alias-border-l2,#ffffff1f) 62%, transparent)}
+.dsm-xdpool-dotpanel-row{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:10px;font-size:11px;line-height:16px}
+.dsm-xdpool-dotpanel-rowname{color:var(--dsw-alias-label-tertiary,#8a90a0);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+/* The channel that served today gets a brighter label; the rest still count
+   toward the total and are shown, because hiding them is what made the composer
+   dot disagree with the account-pool card. */
+.dsm-xdpool-dotpanel-rowname[data-used='true']{color:var(--dsw-alias-label-secondary,#b9bfcc)}
+.dsm-xdpool-dotpanel-rowval{font-variant-numeric:tabular-nums;color:var(--dsw-alias-label-secondary,#b9bfcc)}
+`;
+		/**
+		* The account-backup card.
+		*
+		* Its OWN export, for the same reason `CREDIT_DOT_CSS` exists: this component renders in
+		* the account-pool page, and the rule that hid its raw file input had been parked in
+		* `CREDIT_DOT_CSS` — a stylesheet this page never loads. The visible symptom was the
+		* browser's native picker sitting on screen beside the buttons that were meant to replace
+		* it, so the row offered three "choose file" controls for one action.
+		*/
+		const BACKUP_CSS = `
+.dsm-xdpool-bak{display:flex;flex-direction:column;gap:8px;padding:12px 14px 13px;border-radius:12px;border:1px solid color-mix(in srgb, var(--dsw-alias-border-l2,#ffffff1f) 82%, transparent);background:color-mix(in srgb, var(--dsw-alias-bg-layer-2,#1c1e22) 72%, transparent);min-width:0}
+.dsm-xdpool-bak-head{display:flex;align-items:center;gap:8px;min-width:0}
+.dsm-xdpool-bak-title{font-size:13px;font-weight:600;color:var(--dsw-alias-label-primary,#e8eaf0)}
+/* A one-word badge, not a sentence: the fact that the file is encrypted is worth a
+   glance, not a paragraph. */
+.dsm-xdpool-bak-warn{margin-left:auto;padding:1px 7px;border-radius:999px;font-size:10px;line-height:15px;color:#22c55e;background:rgb(34 197 94 / 13%)}
+.dsm-xdpool-bak-hint{margin:0;font-size:11px;line-height:17px;color:var(--dsw-alias-label-tertiary,#8a90a0)}
+.dsm-xdpool-bak-field{display:flex;align-items:center;gap:8px;min-width:0}
+.dsm-xdpool-bak-label{font-size:11px;color:var(--dsw-alias-label-secondary,#b9bfcc);white-space:nowrap;flex:none}
+.dsm-xdpool-bak-input{flex:1 1 auto;min-width:0;max-width:220px;appearance:none;-webkit-appearance:none;padding:5px 9px;border-radius:7px;border:1px solid color-mix(in srgb, var(--dsw-alias-border-l2,#ffffff1f) 92%, transparent);background:color-mix(in srgb, var(--dsw-alias-bg-layer-1,#191a1e) 88%, transparent);color:var(--dsw-alias-label-primary,#e8eaf0);font-size:12px;line-height:17px;font-family:inherit}
+.dsm-xdpool-bak-input:focus{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:1px;border-color:transparent}
+.dsm-xdpool-bak-input::placeholder{color:var(--dsw-alias-label-tertiary,#8a90a0);opacity:.75}
+.dsm-xdpool-bak-actions{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
+.dsm-xdpool-bak-btn{appearance:none;-webkit-appearance:none;padding:5px 13px;border-radius:7px;cursor:pointer;font:inherit;font-size:12px;line-height:18px;border:1px solid color-mix(in srgb, var(--dsw-alias-border-l2,#ffffff1f) 95%, transparent);background:transparent;color:var(--dsw-alias-label-secondary,#b9bfcc);transition:border-color .15s ease,background-color .15s ease,color .15s ease;white-space:nowrap}
+.dsm-xdpool-bak-btn:hover:not(:disabled){border-color:color-mix(in srgb, var(--dsw-alias-brand-primary,#5686fe) 55%, transparent);color:var(--dsw-alias-label-primary,#e8eaf0)}
+.dsm-xdpool-bak-btn:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:2px}
+.dsm-xdpool-bak-btn:disabled{opacity:.45;cursor:not-allowed}
+.dsm-xdpool-bak-btn[data-tone='primary']{border-color:color-mix(in srgb, var(--dsw-alias-brand-primary,#5686fe) 62%, transparent);background:color-mix(in srgb, var(--dsw-alias-brand-primary,#5686fe) 16%, transparent);color:var(--dsw-alias-brand-primary,#5686fe);font-weight:600}
+.dsm-xdpool-bak-btn[data-tone='primary']:hover:not(:disabled){background:color-mix(in srgb, var(--dsw-alias-brand-primary,#5686fe) 24%, transparent)}
+/* The chosen file as a removable chip, so "which backup am I about to restore" is
+   answered before the confirm dialog rather than by it. */
+.dsm-xdpool-bak-file{display:flex;align-items:center;gap:6px;padding:4px 8px;border-radius:7px;background:color-mix(in srgb, var(--dsw-alias-label-primary,#e8eaf0) 7%, transparent);min-width:0}
+.dsm-xdpool-bak-filename{flex:1 1 auto;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-size:11px;font-family:var(--dsw-alias-font-mono,ui-monospace,Menlo,Consolas,monospace);color:var(--dsw-alias-label-secondary,#b9bfcc)}
+.dsm-xdpool-bak-clear{appearance:none;-webkit-appearance:none;flex:none;width:16px;height:16px;padding:0;border:0;border-radius:4px;background:transparent;cursor:pointer;font-size:13px;line-height:14px;color:var(--dsw-alias-label-tertiary,#8a90a0)}
+.dsm-xdpool-bak-clear:hover{background:color-mix(in srgb, var(--dsw-alias-label-primary,#e8eaf0) 12%, transparent);color:var(--dsw-alias-label-primary,#e8eaf0)}
+.dsm-xdpool-bak-note{margin:0;font-size:11px;line-height:16px;color:var(--dsw-alias-state-success-primary,#22a06b)}
+.dsm-xdpool-bak-error{margin:0;font-size:11px;line-height:16px;color:var(--dsw-alias-state-error-primary,#e5534b)}
+`;
 		//#endregion
 		//#region src/client/avatar.ts
 		/**
@@ -2091,24 +2200,13 @@ window.__ModuleLoader__.load({
 							})
 						]
 					}),
-					hero === void 0 ? null : hero,
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: "dsm-xdpool-body",
-						children
-					}),
 					!groupOpen ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-						className: "dsm-xdpool-groupmask",
+						className: "dsm-xdpool-groupinline",
 						role: "dialog",
-						"aria-modal": "true",
+						"aria-modal": "false",
 						"aria-label": t?.("shell.groupTitle") ?? "XD 交流群",
-						onClick: () => {
-							setGroupOpen(false);
-						},
 						children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 							className: "dsm-xdpool-groupcard",
-							onClick: (event) => {
-								event.stopPropagation();
-							},
 							children: [
 								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 									className: "dsm-xdpool-groupcardhead",
@@ -2170,6 +2268,11 @@ window.__ModuleLoader__.load({
 								})
 							]
 						})
+					}),
+					hero === void 0 ? null : hero,
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsm-xdpool-body",
+						children
 					})
 				]
 			});
@@ -9612,7 +9715,7 @@ window.__ModuleLoader__.load({
 		function countOf(value) {
 			return typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.trunc(value) : 0;
 		}
-		function statusFrom(value) {
+		function statusFrom$1(value) {
 			if (value === null || typeof value !== "object") return void 0;
 			const models = value.models;
 			const accounts = value.accounts;
@@ -9642,7 +9745,7 @@ window.__ModuleLoader__.load({
 			const table = value.statuses;
 			if (table === null || typeof table !== "object") return statuses;
 			for (const [provider, raw] of Object.entries(table)) {
-				const status = statusFrom(raw);
+				const status = statusFrom$1(raw);
 				if (status !== void 0) statuses.set(provider, status);
 			}
 			return statuses;
@@ -10954,6 +11057,44 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/client/clipboard.ts
+		/** `navigator`, when there is one and it exposes a clipboard. */
+		function clipboardOf() {
+			const clipboard = globalThis.navigator?.clipboard;
+			return clipboard !== void 0 && typeof clipboard.writeText === "function" ? clipboard : void 0;
+		}
+		/** `document`, when there is one. */
+		function documentOf() {
+			return globalThis.document;
+		}
+		async function copyText(value) {
+			if (value === "") return false;
+			const clipboard = clipboardOf();
+			if (clipboard !== void 0) try {
+				await clipboard.writeText(value);
+				return true;
+			} catch {}
+			const doc = documentOf();
+			if (doc === void 0) return false;
+			try {
+				const area = doc.createElement("textarea");
+				area.value = value;
+				area.setAttribute("readonly", "");
+				area.style.position = "fixed";
+				area.style.top = "-1000px";
+				area.style.left = "-1000px";
+				area.style.opacity = "0";
+				doc.body.appendChild(area);
+				area.select();
+				area.setSelectionRange(0, value.length);
+				const ok = doc.execCommand("copy");
+				doc.body.removeChild(area);
+				return ok;
+			} catch {
+				return false;
+			}
+		}
+		//#endregion
 		//#region src/client/GatewayPage.tsx
 		/**
 		* The gateway page: the relay that re-exposes the pool to the rest of the LAN.
@@ -10997,7 +11138,7 @@ window.__ModuleLoader__.load({
 			fallback: "every device on this network"
 		}];
 		/** Poll interval. Slower than the pool card: a relay does not change on its own. */
-		const POLL_MS = 15e3;
+		const POLL_MS$1 = 15e3;
 		/**
 		* A masked key for display, never the full value.
 		*
@@ -11015,6 +11156,15 @@ window.__ModuleLoader__.load({
 			const [status, setStatus] = (0, react.useState)(void 0);
 			const [error, setError] = (0, react.useState)(void 0);
 			const [flash, setFlash] = (0, react.useState)(void 0);
+			/**
+			* Which field was last copied, so its own button can say "Copied" for a moment.
+			*
+			* Held per-field rather than one global flag: a single boolean would put "Copied"
+			* on the key button right after the base URL was copied, which reads as a bug in a
+			* panel whose whole job is to hand over exactly the right strings.
+			*/
+			const [copiedField, setCopiedField] = (0, react.useState)(void 0);
+			const copyTimer = (0, react.useRef)(void 0);
 			const [busy, setBusy] = (0, react.useState)(false);
 			const [revealed, setRevealed] = (0, react.useState)(false);
 			const [host, setHost] = (0, react.useState)("127.0.0.1");
@@ -11087,7 +11237,7 @@ window.__ModuleLoader__.load({
 				load(controller.signal);
 				const timer = setInterval(() => {
 					load(controller.signal);
-				}, POLL_MS);
+				}, POLL_MS$1);
 				return () => {
 					controller.abort();
 					clearInterval(timer);
@@ -11126,11 +11276,67 @@ window.__ModuleLoader__.load({
 					if (mounted.current) setBusy(false);
 				}
 			}, [t]);
+			/**
+			* Copy one of the strings a client needs, and say so on that field's own button.
+			*
+			* A copy button earns its place here because the alternative is transcription: the
+			* base URL, the key and the `/v1` suffix have to reach another program exactly, and
+			* a masked key cannot be read off the screen at all. The reference gateway solves
+			* the same problem by printing a shell one-liner that pipes a file into the
+			* clipboard — necessary there because its key lives only in a local file. Here the
+			* key is already in this document, so the button can be honest and direct.
+			*
+			* Failures are reported rather than swallowed: a copy that silently does nothing
+			* leaves the user pasting a stale value and blaming the key.
+			*/
+			const copy = (0, react.useCallback)(async (field, value) => {
+				const ok = await copyText(value);
+				if (!mounted.current) return;
+				if (!ok) {
+					setFlash(t?.("gw.copyFailed") ?? "Could not copy — select the text and copy it manually.");
+					return;
+				}
+				setFlash(void 0);
+				setCopiedField(field);
+				if (copyTimer.current !== void 0) window.clearTimeout(copyTimer.current);
+				copyTimer.current = window.setTimeout(() => {
+					if (mounted.current) setCopiedField(void 0);
+				}, 1600);
+			}, [t]);
+			(0, react.useEffect)(() => () => {
+				if (copyTimer.current !== void 0) window.clearTimeout(copyTimer.current);
+			}, []);
 			const enabled = status?.enabled === true;
 			const listening = status?.listening === true;
 			const key = status?.key ?? "";
 			const parsedPort = Number(port);
 			const portUsable = Number.isInteger(parsedPort) && parsedPort >= 1 && parsedPort <= 65535;
+			/**
+			* The origin, without `/v1`.
+			*
+			* WHAT GETS COPIED DEPENDS ON THE CLIENT, and getting it wrong produces a 404 that
+			* blames the relay:
+			*
+			*   - clients that append the path themselves (`{base}/v1/chat/completions`) want
+			*     the BARE origin — handed `/v1`, they ask for `/v1/v1/chat/completions`,
+			*     which is exactly the `404 /v1/v1/responses` a user reported;
+			*   - clients that want the full prefix pasted in (many "OpenAI compatible"
+			*     fields, and `OPENAI_BASE_URL`) want it WITH `/v1`.
+			*
+			* There is no single right answer, so the panel offers both and labels each with
+			* the client behaviour it suits. Silently picking one is what produced the report.
+			*/
+			const origin = (status?.endpoint ?? "").replace(/\/+$/u, "");
+			const baseUrl = origin === "" ? "" : `${origin}/v1`;
+			/**
+			* Base URL and key together, in the shape every OpenAI client asks for.
+			*
+			* Not JSON: pasting a JSON blob into a client that wants two separate fields is
+			* more work than pasting nothing, and the user still has to split it by eye. Two
+			* labelled lines survive that trip — and if they paste it into a chat to ask a
+			* question, the labels make it readable.
+			*/
+			const configSnippet = baseUrl === "" || key === "" ? "" : `Base URL: ${baseUrl}\nAPI Key: ${key}`;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: "dsm-xdpool-gw",
 				children: [
@@ -11242,10 +11448,51 @@ window.__ModuleLoader__.load({
 								className: "dsm-xdpool-gw-warn",
 								children: t?.("gw.portInvalid") ?? ""
 							}),
-							listening && status?.endpoint !== void 0 && status.endpoint !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								className: "dsm-xdpool-gw-note",
-								children: t?.("gw.endpoint", { endpoint: status.endpoint }) ?? status.endpoint
-							}) : null
+							listening && status?.endpoint !== void 0 && status.endpoint !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: "dsm-xdpool-gw-note",
+									children: t?.("gw.endpoint", { endpoint: status.endpoint }) ?? status.endpoint
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+									className: "dsm-xdpool-gw-actions",
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: "dsm-xdpool-gw-btn",
+											"data-on": copiedField === "base" ? "true" : "false",
+											onClick: () => {
+												copy("base", origin);
+											},
+											title: t?.("gw.copyOriginHint") ?? "客户端自己会补 /v1 时用这个（大多数 SDK）",
+											children: copiedField === "base" ? t?.("gw.copied") ?? "Copied" : t?.("gw.copyOrigin") ?? "Copy base URL"
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: "dsm-xdpool-gw-btn",
+											"data-on": copiedField === "baseV1" ? "true" : "false",
+											onClick: () => {
+												copy("baseV1", baseUrl);
+											},
+											title: t?.("gw.copyV1Hint") ?? "要填完整前缀时用这个（含 /v1）",
+											children: copiedField === "baseV1" ? t?.("gw.copied") ?? "Copied" : t?.("gw.copyV1") ?? "Copy with /v1"
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											className: "dsm-xdpool-gw-btn",
+											"data-on": copiedField === "all" ? "true" : "false",
+											onClick: () => {
+												copy("all", configSnippet);
+											},
+											title: t?.("gw.copyAllHint") ?? "base URL + key，可直接粘进客户端",
+											children: copiedField === "all" ? t?.("gw.copied") ?? "Copied" : t?.("gw.copyAll") ?? "Copy both"
+										})
+									]
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									className: "dsm-xdpool-gw-note",
+									children: t?.("gw.wire") ?? "只支持 Chat Completions（/v1/chat/completions 与 /v1/models）。若客户端用 Responses 或 Anthropic 协议，请改成 Chat Completions。"
+								})
+							] }) : null
 						]
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
@@ -11261,25 +11508,38 @@ window.__ModuleLoader__.load({
 							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								className: "dsm-xdpool-gw-actions",
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-									type: "button",
-									className: "dsm-xdpool-gw-btn",
-									"data-on": "false",
-									disabled: busy || key === "",
-									onClick: () => {
-										setRevealed((current) => !current);
-									},
-									children: revealed ? t?.("gw.hideKey") ?? "Hide" : t?.("gw.showKey") ?? "Show"
-								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
-									type: "button",
-									className: "dsm-xdpool-gw-btn",
-									"data-on": "false",
-									disabled: busy,
-									onClick: () => {
-										write({ key: "" });
-									},
-									children: t?.("gw.rotate") ?? "Rotate"
-								})]
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "dsm-xdpool-gw-btn",
+										"data-on": copiedField === "key" ? "true" : "false",
+										disabled: busy || key === "",
+										onClick: () => {
+											copy("key", key);
+										},
+										children: copiedField === "key" ? t?.("gw.copied") ?? "Copied" : t?.("gw.copyKey") ?? "Copy key"
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "dsm-xdpool-gw-btn",
+										"data-on": "false",
+										disabled: busy || key === "",
+										onClick: () => {
+											setRevealed((current) => !current);
+										},
+										children: revealed ? t?.("gw.hideKey") ?? "Hide" : t?.("gw.showKey") ?? "Show"
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+										type: "button",
+										className: "dsm-xdpool-gw-btn",
+										"data-on": "false",
+										disabled: busy,
+										onClick: () => {
+											write({ key: "" });
+										},
+										children: t?.("gw.rotate") ?? "Rotate"
+									})
+								]
 							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								className: "dsm-xdpool-gw-note",
@@ -11363,9 +11623,17 @@ window.__ModuleLoader__.load({
 												className: "dsm-xdpool-gw-model-name",
 												children: row.name
 											}),
-											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-												className: "dsm-xdpool-gw-model-id",
-												children: row.id
+											/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+												type: "button",
+												className: "dsm-xdpool-gw-model-id dsm-xdpool-gw-copyid",
+												"data-on": copiedField === `id:${row.id}` ? "true" : "false",
+												title: t?.("gw.copyModelIdHint") ?? "复制模型 id —— 客户端里要填的就是这个",
+												onClick: (event) => {
+													event.preventDefault();
+													event.stopPropagation();
+													copy(`id:${row.id}`, row.id);
+												},
+												children: copiedField === `id:${row.id}` ? t?.("gw.copied") ?? "Copied" : row.id
 											})
 										]
 									}, row.id))]
@@ -11779,6 +12047,27 @@ window.__ModuleLoader__.load({
 		let providerStatusCache;
 		const PROVIDER_STATUS_TTL_MS = 3e4;
 		/**
+		* Channels whose rewards are collected through `onboarding.claim`, not a daily
+		* check-in.
+		*
+		* Kept as a literal rather than derived from `channel.credits`, because the two
+		* rewards are different in kind: `credits.claim` is repeatable tomorrow and pays
+		* daily points, while these pay once per account and are then gone. The pack exposes
+		* them on separate endpoints for exactly that reason, and a channel can have either,
+		* both, or neither:
+		*
+		*   - `raccoon` — the daily points arrive on their own (the server credits them),
+		*     so its `credits` field is EMPTY on purpose. Only the desktop-login bonus is
+		*     claimable, and it lives here.
+		*   - `loomy` — onboarding tasks, topped up to a maximum rather than granted per
+		*     task.
+		*
+		* Both are implemented in the pack; before this the card simply never called the
+		* endpoint, so a signed-in Raccoon account had no way to collect the bonus its own
+		* note told the reader to look for.
+		*/
+		const ONBOARDING_CHANNELS = /* @__PURE__ */ new Set(["raccoon", "loomy"]);
+		/**
 		* Drop the snapshot after anything that changes the data behind it.
 		*
 		* Logins, deletions, toggles and manual balance refreshes all make the snapshot
@@ -12253,6 +12542,71 @@ window.__ModuleLoader__.load({
 					if (mountedRef.current) markBusy(provider, false);
 				}
 			};
+			/**
+			* Claim the ONE-OFF rewards a channel hands out per account.
+			*
+			* Two channels have such a reward and neither is a daily check-in:
+			*
+			*   - Raccoon (商汤) pays a desktop-login bonus once per account. Its daily
+			*     points are credited by the server on their own, which is why
+			*     `credits.claimAll` answers "不支持每日签到" for it — that answer is
+			*     correct and is not the whole story.
+			*   - Loomy (讯飞) has onboarding tasks that pay once each, with the reward
+			*     topped up to the maximum rather than granted per task.
+			*
+			* Both live behind `onboarding.claim`, a SEPARATE endpoint from
+			* `credits.claimAll` because the semantics differ in the way that matters: a
+			* daily claim may be repeated tomorrow, this one may not be repeated at all. The
+			* pack has implemented it for both channels all along; the card simply never
+			* called it, so a user with a signed-in Raccoon account saw no way to collect
+			* the login bonus the pack's own note told them to look for.
+			*
+			* Per ACCOUNT, not per channel: the endpoint takes an `accountId`, because one
+			* account having claimed does not mean the next one has.
+			*/
+			const claimOnboarding = async (provider, accounts) => {
+				if (accounts.length === 0) {
+					setNotice(t?.("channelpool.onboardingNoAccounts") ?? "No account to claim for.");
+					return;
+				}
+				markBusy(provider, true);
+				let claimed = 0;
+				let earned = 0;
+				let skipped = 0;
+				let failed = 0;
+				let firstError = "";
+				try {
+					for (const account of accounts) {
+						const envelope = await callPack("onboarding.claim", {
+							provider,
+							accountId: account.id
+						});
+						if (!mountedRef.current) return;
+						if (envelope.ok === false) {
+							failed += 1;
+							if (firstError === "") firstError = envelope.error?.message ?? "";
+							continue;
+						}
+						const value = envelope.value;
+						const got = Array.isArray(value?.claimed) ? value.claimed.length : 0;
+						const total = typeof value?.earned === "number" ? value.earned : 0;
+						claimed += got;
+						earned += total;
+						if (got === 0) skipped += 1;
+					}
+					if (!mountedRef.current) return;
+					if (failed > 0) setNotice(firstError !== "" ? firstError : t?.("channelpool.onboardingFailed", { failed }) ?? `${failed} account(s) could not claim.`);
+					else if (claimed === 0) setNotice(t?.("channelpool.onboardingNone") ?? "Nothing left to claim — already collected.");
+					else setNotice(t?.("channelpool.onboardingResult", {
+						claimed,
+						credit: amount(earned),
+						skipped
+					}) ?? `Claimed ${claimed} reward(s): +${amount(earned)}.`);
+					await refreshBalances(provider, true);
+				} finally {
+					if (mountedRef.current) markBusy(provider, false);
+				}
+			};
 			const accountAction = async (provider, accountId, action) => {
 				if (action === "delete" && typeof window !== "undefined") {
 					const prompt = t?.("channelpool.deleteConfirm") ?? "Remove this account?";
@@ -12367,6 +12721,17 @@ window.__ModuleLoader__.load({
 									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 										className: "dsm-xdpool-cpool-acts",
 										children: [
+											ONBOARDING_CHANNELS.has(channel.id) && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+												type: "button",
+												className: "dsm-xdpool-btn",
+												"data-tone": "primary",
+												disabled: isBusy,
+												onClick: () => {
+													claimOnboarding(channel.id, enabledAccounts);
+												},
+												title: t?.("channelpool.onboardingHint") ?? "一次性奖励（登录奖励 / 新手任务），每号只能领一次",
+												children: isBusy ? t?.("channelpool.claiming") ?? "Claiming…" : t?.("channelpool.onboarding") ?? "领取一次性奖励"
+											}),
 											channel.credits?.claim === true && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 												type: "button",
 												className: "dsm-xdpool-btn",
@@ -12669,6 +13034,418 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/client/backup-crypto.ts
+		/**
+		* Password-encrypted backup envelope for the credential export.
+		*
+		* WHAT IS BEING PROTECTED
+		*
+		* The exported payload is not a summary — it contains every account's credential
+		* value, which is enough to sign in as those accounts. An unencrypted file dropped in
+		* a downloads folder, a chat window, or a cloud-synced desktop is a credential leak
+		* with extra steps. So the default is encrypted, and the password is the only thing
+		* that opens it.
+		*
+		* THE PRIMITIVES, AND WHY THESE
+		*
+		* PBKDF2-SHA256 at 310,000 iterations derives the key, then AES-GCM encrypts with a
+		* random 12-byte IV. Both are in WebCrypto with no dependencies, which matters for a
+		* bundle that ships into someone else's host:
+		*
+		*   - PBKDF2 over a raw hash because a password has no entropy of its own; the
+		*     iteration count is the only thing standing between a leaked file and an
+		*     offline dictionary attack. 310k follows OWASP's current floor for SHA-256.
+		*   - AES-GCM (not CBC) because it authenticates: a wrong password and a tampered
+		*     file are both a hard failure rather than a plausible-looking plaintext.
+		*
+		* The salt and IV are random per export and travel in the envelope's header — they are
+		* not secrets, and reusing either across exports would be the actual mistake.
+		*
+		* WHAT THIS DOES NOT PROTECT AGAINST
+		*
+		* A weak password. Nothing here can fix that, so `MIN_PASSWORD` exists to refuse the
+		* obviously-bad cases, and the UI says plainly that the file is only as strong as the
+		* password.
+		*
+		* @module dsh-xdpool/client/backup-crypto
+		*/
+		/** Marks an encrypted envelope so a plain payload is never mistaken for one. */
+		const ENCRYPTED_FORMAT = "dsh-xdpool/backup-encrypted";
+		/** PBKDF2 rounds. OWASP's floor for PBKDF2-SHA256; see the module note. */
+		const ITERATIONS = 31e4;
+		function toBase64(bytes) {
+			let binary = "";
+			for (const byte of bytes) binary += String.fromCharCode(byte);
+			return btoa(binary);
+		}
+		function fromBase64(text) {
+			const binary = atob(text);
+			const bytes = new Uint8Array(binary.length);
+			for (let index = 0; index < binary.length; index += 1) bytes[index] = binary.charCodeAt(index);
+			return bytes;
+		}
+		async function deriveKey(password, salt, iterations) {
+			const material = await crypto.subtle.importKey("raw", new TextEncoder().encode(password), "PBKDF2", false, ["deriveKey"]);
+			return await crypto.subtle.deriveKey({
+				name: "PBKDF2",
+				salt,
+				iterations,
+				hash: "SHA-256"
+			}, material, {
+				name: "AES-GCM",
+				length: 256
+			}, false, ["encrypt", "decrypt"]);
+		}
+		/**
+		* Encrypt a JSON payload.
+		*
+		* `plaintext` is the payload as a string, not an object: the caller already has it in
+		* the shape the pack produced, and re-serialising here would be a second chance to
+		* lose a field.
+		*/
+		async function encryptBackup(plaintext, password) {
+			const salt = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16));
+			const iv = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(12));
+			const key = await deriveKey(password, salt, ITERATIONS);
+			const cipher = await crypto.subtle.encrypt({
+				name: "AES-GCM",
+				iv
+			}, key, new TextEncoder().encode(plaintext));
+			return {
+				format: ENCRYPTED_FORMAT,
+				version: 1,
+				salt: toBase64(salt),
+				iv: toBase64(iv),
+				iterations: ITERATIONS,
+				data: toBase64(new Uint8Array(cipher))
+			};
+		}
+		/** True when `value` looks like this module's envelope rather than a plain payload. */
+		function isEncryptedEnvelope(value) {
+			if (value === null || typeof value !== "object") return false;
+			const record = value;
+			return record["format"] === "dsh-xdpool/backup-encrypted" && typeof record["salt"] === "string" && typeof record["iv"] === "string" && typeof record["data"] === "string";
+		}
+		/**
+		* Decrypt an envelope back to the payload string.
+		*
+		* Throws on a wrong password — AES-GCM's tag check fails, and there is no partial
+		* plaintext to leak. The message is deliberately identical for "wrong password" and
+		* "corrupt file": telling them apart would let someone confirm a guess about which it
+		* was, and the user's next step is the same either way.
+		*/
+		async function decryptBackup(envelope, password) {
+			const salt = fromBase64(envelope.salt);
+			const iv = fromBase64(envelope.iv);
+			const key = await deriveKey(password, salt, Number.isFinite(envelope.iterations) ? envelope.iterations : ITERATIONS);
+			try {
+				const plain = await crypto.subtle.decrypt({
+					name: "AES-GCM",
+					iv
+				}, key, fromBase64(envelope.data));
+				return new TextDecoder().decode(plain);
+			} catch {
+				throw new Error("wrong password, or the file is damaged");
+			}
+		}
+		//#endregion
+		//#region src/client/BackupPanel.tsx
+		/**
+		* Export and import the whole credential set, as one password-protected file.
+		*
+		* WHAT MOVES
+		*
+		* Every channel account's credential value, the model blacklist, the permanent-lock
+		* table, and — through the pool half — the WorkBuddy accounts with their selection and
+		* routing settings. The point is moving to a new machine without re-scanning a dozen QR
+		* codes.
+		*
+		* WHY ENCRYPTION IS NOT OPTIONAL
+		*
+		* The payload contains credential values, which are enough to sign in as those accounts. A
+		* plain file in a downloads folder or a chat window is a leak with extra steps, so the
+		* export refuses to run without a password.
+		*
+		* ONE ACTION AT A TIME
+		*
+		* The first version put a raw `<input type="file">` on screen beside two buttons, which
+		* rendered as three separate "choose file" controls — the browser's own picker, plus the
+		* buttons meant to hide it. The input's `display:none` rule lived in a stylesheet that
+		* this page never loads, so the native control was never hidden.
+		*
+		* This version carries its OWN stylesheet and hides the input structurally: there is one
+		* button per action, and the file is chosen as part of the import, not before it. Picking
+		* a file and then pressing "import" was two steps for one intention.
+		*
+		* @module dsh-xdpool/client/BackupPanel
+		*/
+		function statusFrom(value) {
+			if (value === null || typeof value !== "object") return void 0;
+			const record = value;
+			const accounts = record["accounts"];
+			if (typeof accounts !== "number") return void 0;
+			return {
+				accounts,
+				withoutExpiry: typeof record["withoutExpiry"] === "number" ? record["withoutExpiry"] : 0
+			};
+		}
+		function BackupPanel({ t }) {
+			const [password, setPassword] = (0, react.useState)("");
+			const [busy, setBusy] = (0, react.useState)(false);
+			const [notice, setNotice] = (0, react.useState)(void 0);
+			const [error, setError] = (0, react.useState)(void 0);
+			/**
+			* The chosen file, held in state rather than only in a ref.
+			*
+			* The old version read `input.files[0]` at import time, which meant the user had to
+			* pick a file BEFORE knowing whether the password was even long enough — and the button
+			* that did the picking sat beside the one that used it. Holding the name lets the row
+			* say what is selected and lets one button do the whole job.
+			*/
+			const [picked, setPicked] = (0, react.useState)(void 0);
+			const fileRef = (0, react.useRef)(null);
+			const reset = () => {
+				setNotice(void 0);
+				setError(void 0);
+			};
+			const tooShort = password.length < 8;
+			/**
+			* Export: ask the pack for the payload, encrypt it here, hand the user a file.
+			*
+			* The RPC answer is never written to disk in plaintext — it lives in this closure and in
+			* memory for the length of one encrypt.
+			*/
+			const exportBackup = (0, react.useCallback)(async () => {
+				reset();
+				if (tooShort) {
+					setError(t?.("backup.passwordShort", { min: 8 }) ?? `Password must be at least ${String(8)} characters.`);
+					return;
+				}
+				setBusy(true);
+				try {
+					const answer = await callPack("backup.export", {});
+					if (answer.ok === false) {
+						setError(answer.error?.message ?? t?.("backup.exportFailed") ?? "Export failed.");
+						return;
+					}
+					const value = answer.value;
+					if (value?.payload === void 0) {
+						setError(t?.("backup.exportEmpty") ?? "The pack returned no payload.");
+						return;
+					}
+					const envelope = await encryptBackup(JSON.stringify(value.payload), password);
+					const blob = new Blob([JSON.stringify(envelope, null, 2)], { type: "application/json" });
+					const url = URL.createObjectURL(blob);
+					const anchor = document.createElement("a");
+					anchor.href = url;
+					anchor.download = `xdpool-accounts-${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}.json`;
+					anchor.click();
+					URL.revokeObjectURL(url);
+					const warnings = Array.isArray(value.warnings) ? value.warnings.length : 0;
+					setNotice(warnings > 0 ? t?.("backup.exportedWarn", { count: warnings }) ?? `Exported, with ${String(warnings)} warning(s).` : t?.("backup.exported") ?? "Exported. Keep the password — the file cannot be opened without it.");
+				} catch (cause) {
+					setError(cause instanceof Error ? cause.message : String(cause));
+				} finally {
+					setBusy(false);
+				}
+			}, [
+				password,
+				tooShort,
+				t
+			]);
+			/** Remember the file the user chose, and clear the input so the same one can be re-picked. */
+			const chooseFile = (0, react.useCallback)(() => {
+				const input = fileRef.current;
+				if (input === null) return;
+				input.click();
+			}, []);
+			const onFileChosen = (0, react.useCallback)(() => {
+				reset();
+				const file = fileRef.current?.files?.[0];
+				if (file === void 0) {
+					setPicked(void 0);
+					return;
+				}
+				setPicked({
+					name: file.name,
+					text: file.text()
+				});
+				if (fileRef.current !== null) fileRef.current.value = "";
+			}, []);
+			/**
+			* Import: decrypt in the browser, then hand the pack a plaintext payload.
+			*
+			* `backup.import` REPLACES the account set, so the overwrite count is read first and
+			* shown in the confirm dialog.
+			*/
+			const importBackup = (0, react.useCallback)(async () => {
+				reset();
+				if (picked === void 0) {
+					chooseFile();
+					return;
+				}
+				setBusy(true);
+				try {
+					let text;
+					try {
+						text = await picked.text;
+					} catch {
+						setError(t?.("backup.fileUnreadable") ?? "The file could not be read.");
+						setPicked(void 0);
+						return;
+					}
+					let parsed;
+					try {
+						parsed = JSON.parse(text);
+					} catch {
+						setError(t?.("backup.notJson") ?? "That file is not a backup.");
+						setPicked(void 0);
+						return;
+					}
+					let payload;
+					if (isEncryptedEnvelope(parsed)) {
+						if (tooShort) {
+							setError(t?.("backup.passwordShort", { min: 8 }) ?? `Password must be at least ${String(8)} characters.`);
+							return;
+						}
+						try {
+							payload = JSON.parse(await decryptBackup(parsed, password));
+						} catch {
+							setError(t?.("backup.badPassword") ?? "Wrong password, or the file is damaged.");
+							return;
+						}
+					} else payload = parsed;
+					const replacing = statusFrom((await callPack("backup.status", {})).value)?.accounts ?? 0;
+					const message = t?.("backup.confirm", { count: replacing }) ?? `This REPLACES all ${String(replacing)} account(s). Continue?`;
+					if (typeof window !== "undefined" && typeof window.confirm === "function" && !window.confirm(message)) return;
+					const answer = await callPack("backup.import", { payload });
+					if (answer.ok === false) {
+						setError(answer.error?.message ?? t?.("backup.importFailed") ?? "Import failed.");
+						return;
+					}
+					const result = answer.value;
+					const accounts = typeof result?.accountsImported === "number" ? result.accountsImported : 0;
+					const credentials = typeof result?.credentialsImported === "number" ? result.credentialsImported : 0;
+					const skipped = Array.isArray(result?.skipped) ? result.skipped.length : 0;
+					setNotice(skipped > 0 ? t?.("backup.importedPartial", {
+						accounts,
+						credentials,
+						skipped
+					}) ?? `Imported ${String(accounts)} account(s), ${String(skipped)} skipped.` : t?.("backup.imported", {
+						accounts,
+						credentials
+					}) ?? `Imported ${String(accounts)} account(s) with ${String(credentials)} credential(s).`);
+					setPicked(void 0);
+				} catch (cause) {
+					setError(cause instanceof Error ? cause.message : String(cause));
+				} finally {
+					setBusy(false);
+				}
+			}, [
+				chooseFile,
+				password,
+				picked,
+				tooShort,
+				t
+			]);
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "dsm-xdpool-bak",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("style", { children: BACKUP_CSS }),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsm-xdpool-bak-head",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsm-xdpool-bak-title",
+							children: t?.("backup.title") ?? "账号备份"
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsm-xdpool-bak-warn",
+							children: t?.("backup.encrypted") ?? "加密"
+						})]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsm-xdpool-bak-hint",
+						children: t?.("backup.hint") ?? ""
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+						className: "dsm-xdpool-bak-field",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsm-xdpool-bak-label",
+							children: t?.("backup.password") ?? "密码"
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+							type: "password",
+							className: "dsm-xdpool-bak-input",
+							value: password,
+							disabled: busy,
+							autoComplete: "new-password",
+							placeholder: t?.("backup.passwordPlaceholder", { min: 8 }) ?? `至少 ${String(8)} 位`,
+							onChange: (event) => {
+								setPassword(event.target.value);
+							}
+						})]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsm-xdpool-bak-actions",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsm-xdpool-bak-btn",
+								"data-tone": "primary",
+								disabled: busy || tooShort,
+								title: tooShort ? t?.("backup.passwordShort", { min: 8 }) ?? "" : t?.("backup.exportHint") ?? "导出为加密文件",
+								onClick: () => {
+									exportBackup();
+								},
+								children: t?.("backup.export") ?? "导出"
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsm-xdpool-bak-btn",
+								"data-tone": "quiet",
+								disabled: busy,
+								title: picked === void 0 ? t?.("backup.pickHint") ?? "选择要导入的备份文件" : t?.("backup.importHint") ?? "导入会整体替换现有账号",
+								onClick: () => {
+									importBackup();
+								},
+								children: picked === void 0 ? t?.("backup.pick") ?? "选择文件并导入" : t?.("backup.import") ?? "导入"
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+								ref: fileRef,
+								type: "file",
+								accept: "application/json,.json",
+								hidden: true,
+								onChange: onFileChosen
+							})
+						]
+					}),
+					picked === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsm-xdpool-bak-file",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsm-xdpool-bak-filename",
+							title: picked.name,
+							children: picked.name
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsm-xdpool-bak-clear",
+							"aria-label": t?.("backup.clearFile") ?? "取消选择",
+							disabled: busy,
+							onClick: () => {
+								setPicked(void 0);
+							},
+							children: "×"
+						})]
+					}),
+					notice === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsm-xdpool-bak-note",
+						children: notice
+					}),
+					error === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsm-xdpool-bak-error",
+						children: error
+					})
+				]
+			});
+		}
+		//#endregion
 		//#region src/version.ts
 		/**
 		* The plugin's own version, hand-maintained for the browser bundle.
@@ -12683,7 +13460,7 @@ window.__ModuleLoader__.load({
 		*
 		* @module dsh-xdpool/version
 		*/
-		const POOL_VERSION = "2.6.0";
+		const POOL_VERSION = "2.6.2";
 		//#endregion
 		//#region src/client/PoolCard.tsx
 		/**
@@ -13076,6 +13853,10 @@ window.__ModuleLoader__.load({
 				{
 					id: "gateway",
 					label: t?.("shell.tabGateway") ?? "Gateway"
+				},
+				{
+					id: "backup",
+					label: t?.("shell.tabBackup") ?? "Backup"
 				}
 			];
 			const [page, setPage] = (0, react.useState)(() => initialShellTab(rememberedShellTab(), shellTabs));
@@ -13962,7 +14743,7 @@ window.__ModuleLoader__.load({
 				children: page === "aggregate" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(AggregatePage, { t }) : page === "channels" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ChannelsPage, { t }) : page === "ledger" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(LedgerPage, {
 					t,
 					usage
-				}) : page === "routing" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RoutingPage, { t }) : page === "gateway" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(GatewayPage, { t }) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+				}) : page === "routing" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RoutingPage, { t }) : page === "gateway" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(GatewayPage, { t }) : page === "backup" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(BackupPanel, { t }) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("style", { children: POOL_CARD_CSS }),
 					usage === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 						className: "dsm-xdpool-card dsm-xdpool-usage",
@@ -14309,7 +15090,7 @@ window.__ModuleLoader__.load({
 															children: entry.file
 														}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 															className: "dsm-xdpool-skipped-reason",
-															children: entry.reason === "encrypted" ? t?.("row.skippedEncrypted") ?? "encrypted — start WorkBuddy once" : entry.reason === "unreadable" ? t?.("row.skippedUnreadable") ?? "file could not be read" : t?.("row.skippedMalformed") ?? "not a credential file"
+															children: entry.reason === "encrypted" ? t?.("row.skippedEncrypted") ?? "encrypted — start WorkBuddy once" : entry.reason === "expired" ? t?.("row.skippedExpired") ?? "expired — sign in again, or delete it" : entry.reason === "unreadable" ? t?.("row.skippedUnreadable") ?? "file could not be read" : t?.("row.skippedMalformed") ?? "not a credential file"
 														})]
 													}, entry.file))]
 												}),
@@ -15179,6 +15960,36 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/client/credit-strip.tsx
+		/**
+		* The credit-spend strip above the composer.
+		*
+		* WHAT IT ANSWERS
+		*
+		* "How much have I spent, and on which channel." The pool's data panel shows tokens
+		* and per-request rows, which is the wrong shape for the question people actually ask
+		* while typing: *am I burning quota, and on what*. So this is one line, one total, and
+		* a per-channel breakdown behind a click.
+		*
+		* IT IS AN ESTIMATE, AND SAYS SO
+		*
+		* No channel publishes a credit counter we can read per request; the pack records
+		* tokens. The figure is `tokens ÷ 1e6 × the model's multiplier`, and the multiplier is
+		* parsed from the model's display name (`Hy3 · x0.05`) — the same number the user sees
+		* in their picker. A model whose name carries no multiplier is counted in tokens and
+		* reported as unpriced, never billed at zero: "we do not know the price" and "this was
+		* free" are different facts and the panel must not merge them.
+		*
+		* WHY IT POLLS SLOWLY
+		*
+		* Every turn changes the ledger, but the ledger is a file on disk read by the host —
+		* polling on each keystroke would be pure cost for a number that moves once per
+		* request. Thirty seconds matches the pool card and is comfortably faster than a
+		* person notices.
+		*
+		* @module dsh-xdpool/client/credit-strip
+		*/
+		//#endregion
 		//#region src/client/nav-icon.ts
 		/**
 		* Nav glyph for the WorkBuddy XD Pool settings page.
@@ -15241,6 +16052,468 @@ window.__ModuleLoader__.load({
 		*/
 		const POOL_NAV_ICON_MASK_URL = `data:image/svg+xml;utf8,${encodeURIComponent(POOL_NAV_ICON_SVG)}`;
 		//#endregion
+		//#region src/client/CreditDot.tsx
+		/**
+		* The credit indicator beside the model name in the composer, and the panel it opens.
+		*
+		* A DOT, NOT A STRIP
+		*
+		* The composer row already carries a back button, the model name, its multiplier and the
+		* reasoning level. A table of balances there would be a second toolbar. So the inline
+		* form is a single 9px dot whose COLOUR is the whole at-a-glance message, and the detail
+		* lives behind a click:
+		*
+		*   - **green**  — this session's channel still has credits;
+		*   - **grey**   — it has run out (or the channel cannot be priced), which is the state
+		*                  that means "switch models before starting something long".
+		*
+		* WHICH CHANNEL IS "THIS SESSION'S"
+		*
+		* The channel that serves the model the composer currently has selected. That is read
+		* from the pool status (`selection` / the active account) rather than guessed, because
+		* the dot is a claim about the model the user is about to send to; a dot describing some
+		* other channel would be worse than no dot.
+		*
+		* THE PANEL ANSWERS THREE THINGS
+		*
+		* Remaining credits for that channel, credits used today, and how much of the model is
+		* being consumed (its multiplier and the token totals). Those are the three numbers a
+		* person checks before starting a long task, and they come from two sources: the balance
+		* from the status document, the spend from the token ledger.
+		*
+		* POSITIONING AND DISMISSAL ARE DONE HERE
+		*
+		* The host's own floating primitive is internal to its packages, so this uses a fixed
+		* anchor measured from the button plus a document-level listener for outside clicks and
+		* Escape. That is the same contract the host's meters use, implemented locally rather
+		* than depending on a module this bundle cannot import.
+		*
+		* @module dsh-xdpool/client/CreditDot
+		*/
+		/** Re-read cadence. A balance moves only when something spends. */
+		const POLL_MS = 45e3;
+		/** `21887` → `21,887`. */
+		function grouped(value) {
+			return Number.isFinite(value) ? Math.round(value).toLocaleString("en-US") : "0";
+		}
+		/** `0.11` → `0.11`, `0` → `0`. Kept exact: a multiplier is a price, not a count. */
+		function rate(value) {
+			return Number.isFinite(value) ? String(value) : "—";
+		}
+		/**
+		* Group accounts the way the pool CARD groups them: by REGION, not by credential origin.
+		*
+		* WHY THIS CHANGED
+		*
+		* The first version keyed channels off the credential's domain, which split one pool card
+		* into two rows — `www.codebuddy.cn` 13,990 and `www.workbuddy.cn` 99 — while the card
+		* itself showed a single "WorkBuddy 国内版 · 14,089". Both numbers were on screen at once
+		* and they disagreed, which is the defect this fixes.
+		*
+		* The card is right and the domain split was wrong. A pool is a set of accounts that serve
+		* the same lane; signing in through `copilot.tencent.com` (CodeBuddy's endpoint) or
+		* `www.workbuddy.cn` only changes which origin issued the credential, not which pool the
+		* account belongs to. `regionOf()` already owns that mapping for the host half, and a
+		* credential's domain is exactly what decides its region — so the grouping follows the
+		* domain's REGION rather than the domain string itself.
+		*
+		* One consequence worth stating: an account whose balance has not been read is skipped
+		* from the total (it would understate), but it still belongs to its region — which is why
+		* the count can be lower than the card's account count without the two disagreeing about
+		* money.
+		*/
+		function regionOfDomain(domain) {
+			return domain.toLowerCase().includes("workbuddy.ai") ? "global" : "cn";
+		}
+		function channelsOf(value) {
+			if (value === null || typeof value !== "object") return [];
+			const accounts = value.accounts;
+			if (!Array.isArray(accounts)) return [];
+			const byRegion = /* @__PURE__ */ new Map();
+			for (const raw of accounts) {
+				if (raw === null || typeof raw !== "object") continue;
+				const row = raw;
+				const credits = row["credits"];
+				if (credits === null || typeof credits !== "object") continue;
+				const total = credits["total"];
+				if (typeof total !== "number" || !Number.isFinite(total)) continue;
+				const id = regionOfDomain(typeof row["domain"] === "string" ? row["domain"] : "");
+				const current = byRegion.get(id) ?? {
+					total: 0,
+					accounts: 0
+				};
+				current.total += total;
+				current.accounts += 1;
+				byRegion.set(id, current);
+			}
+			return [...byRegion.entries()].map(([id, value2]) => ({
+				id,
+				name: id === "global" ? "WorkBuddy 国际版" : "WorkBuddy 国内版",
+				total: value2.total,
+				accounts: value2.accounts
+			})).sort((a, b) => b.total - a.total);
+		}
+		/**
+		* The model the composer currently has selected.
+		*
+		* WHY THIS READS THE DOM
+		*
+		* The pool's status document has no "current model" field — only `selection`, which lists
+		* the models the user has ENABLED. Reading its first entry always reported `hy4-preview`
+		* no matter what was selected, which is the reported bug.
+		*
+		* The live choice lives in the host's model-selection store, which is owned by the
+		* `conversation.input.model` slot's `inject`. A plugin cannot reach that service, but the
+		* trigger it renders is right next to this dot and displays exactly the answer we want —
+		* `DeepSeek-V4.1-Flash · x0.11 High`. Reading it means the dot and the row can never
+		* disagree, which is the whole requirement.
+		*
+		* The multiplier and effort are stripped off, because only the model id is used: the
+		* caption appends them with a middle dot, and they must not end up inside the id.
+		*
+		* Returns '' when the row is not rendered yet (a fresh session, or the hero screen), and
+		* the panel then shows an em dash rather than naming a model it cannot see.
+		*/
+		function readSelectedModel() {
+			if (typeof document === "undefined") return "";
+			const roots = document.querySelectorAll("[data-composer-seat], [data-composer-dock]");
+			for (const root of roots) for (const button of root.querySelectorAll("button")) {
+				const text = (button.textContent ?? "").trim();
+				if (text === "") continue;
+				if (!/·\s*x\d/u.test(text)) continue;
+				const model = text.split("·")[0]?.trim() ?? "";
+				if (model !== "") return model;
+			}
+			return "";
+		}
+		function CreditDot({ t }) {
+			const [snapshot, setSnapshot] = (0, react.useState)(void 0);
+			const [open, setOpen] = (0, react.useState)(false);
+			const [failed, setFailed] = (0, react.useState)(false);
+			const anchorRef = (0, react.useRef)(null);
+			const panelRef = (0, react.useRef)(null);
+			const [pos, setPos] = (0, react.useState)(void 0);
+			const mounted = (0, react.useRef)(true);
+			const load = (0, react.useCallback)(async () => {
+				try {
+					const [statusRes, spendRes] = await Promise.all([fetch(POOL_STATUS_PATH, { headers: { accept: "application/json" } }), fetch(`${POOL_CREDITS_SPEND_PATH}?days=1`, { headers: { accept: "application/json" } }).catch(() => void 0)]);
+					if (!statusRes.ok) throw new Error(String(statusRes.status));
+					const status = await statusRes.json();
+					if (!mounted.current) return;
+					const all = channelsOf(status);
+					/**
+					* The model the composer is actually on.
+					*
+					* NOT the first entry of `selection`'s enabled list — that is the set of models the
+					* user has ENABLED, in picker order, so reading its first item always reported
+					* `hy4-preview` no matter what was selected. The reported symptom was exactly that:
+					* the panel said hy4-preview while the composer said DeepSeek-V4.1-Flash.
+					*
+					* The host keeps the live choice in `localStorage` under the model-selection
+					* store; its `current` field is what the composer renders. Reading it is the only
+					* way to see the same answer the row shows, because the pool's own status document
+					* does not carry a "currently selected" field at all.
+					*/
+					const chosen = readSelectedModel();
+					const models = Array.isArray(status["models"]) ? status["models"] : [];
+					const row = chosen === "" ? void 0 : models.find((candidate) => candidate["id"] === chosen);
+					const multiplier = typeof row?.["multiplier"] === "number" ? row["multiplier"] : void 0;
+					const channel = all[0];
+					let spentToday;
+					let requestsToday;
+					/** Channel ids that served at least one request today. */
+					const activeChannels = /* @__PURE__ */ new Set();
+					if (spendRes !== void 0 && spendRes.ok) {
+						const spend = await spendRes.json();
+						const rows = Array.isArray(spend.channels) ? spend.channels : [];
+						let total = 0;
+						let requests = 0;
+						let any = false;
+						for (const raw of rows) {
+							if (raw === null || typeof raw !== "object") continue;
+							const record = raw;
+							const credits = record["credits"];
+							if (typeof credits === "number" && Number.isFinite(credits)) {
+								total += credits;
+								any = true;
+							}
+							const count = record["requests"];
+							if (typeof count === "number" && Number.isFinite(count) && count > 0) {
+								requests += count;
+								const id = record["channel"];
+								if (typeof id === "string" && id !== "") activeChannels.add(id);
+							}
+						}
+						if (any) spentToday = Math.round(total * 100) / 100;
+						if (requests > 0) requestsToday = requests;
+					}
+					/**
+					* Which channels served today.
+					*
+					* The ledger names a channel the way the PACK does — `buddy` for the domestic pool
+					* and `workbuddy` for the international one — which is the same split
+					* `regionOfDomain` applies, so the ids line up directly.
+					*/
+					const usedChannels = all.filter((channel) => activeChannels.has(channel.id));
+					const baseline = (channel?.total ?? 0) + (spentToday ?? 0);
+					if (!mounted.current) return;
+					setSnapshot({
+						channel,
+						all,
+						spentToday,
+						requestsToday,
+						model: chosen,
+						multiplier,
+						baseline,
+						usedChannels
+					});
+					setFailed(false);
+				} catch {
+					if (mounted.current) setFailed(true);
+				}
+			}, []);
+			(0, react.useEffect)(() => {
+				mounted.current = true;
+				load();
+				const timer = window.setInterval(() => {
+					load();
+				}, POLL_MS);
+				return () => {
+					mounted.current = false;
+					window.clearInterval(timer);
+				};
+			}, [load]);
+			/**
+			* Watch the composer's model caption and follow it.
+			*
+			* The 60s poll is right for a BALANCE (it moves only when something spends) and wrong
+			* for the MODEL (it changes the moment the user picks another one). Re-reading the
+			* caption on a MutationObserver keeps the panel honest without polling the network:
+			* a caption swap is a DOM change, so the observer fires exactly when there is news.
+			*
+			* Debounced to the next frame so a burst of mutations during a re-render collapses into
+			* one read.
+			*/
+			(0, react.useEffect)(() => {
+				if (typeof document === "undefined" || typeof MutationObserver === "undefined") return void 0;
+				let scheduled = false;
+				const sync = () => {
+					scheduled = false;
+					if (!mounted.current) return;
+					const next = readSelectedModel();
+					if (next === "") return;
+					setSnapshot((current) => {
+						if (current === void 0 || current.model === next) return current;
+						return {
+							...current,
+							model: next
+						};
+					});
+				};
+				const observer = new MutationObserver(() => {
+					if (scheduled) return;
+					scheduled = true;
+					window.requestAnimationFrame(sync);
+				});
+				observer.observe(document.body, {
+					childList: true,
+					subtree: true,
+					characterData: true
+				});
+				return () => {
+					observer.disconnect();
+				};
+			}, []);
+			/**
+			* Place the panel above the dot.
+			*
+			* Measured rather than CSS-anchored because the composer row can be at the bottom of
+			* the viewport, and a panel that opens downward would be clipped by it. `side: top`
+			* with a viewport clamp is the same rule the host's own meters follow.
+			*/
+			(0, react.useLayoutEffect)(() => {
+				if (!open) {
+					setPos(void 0);
+					return;
+				}
+				const anchor = anchorRef.current;
+				if (anchor === null) return;
+				const box = anchor.getBoundingClientRect();
+				/**
+				* The panel sizes to its content (`width: max-content`), so its width can only be
+				* read AFTER it has rendered. A hard-coded number here was what made a short line of
+				* text sit in a 300px box: the width came from this layout maths rather than from
+				* what the text needed. Measuring the element keeps the two in step.
+				*
+				* Falling back to 200 when the ref is not attached yet (first frame) is safe: the
+				* effect re-runs on `open`, and the panel is `visibility: hidden` until `pos` exists.
+				*/
+				const width = panelRef.current?.offsetWidth ?? 200;
+				const margin = 8;
+				const left = Math.min(Math.max(margin, box.left + box.width / 2 - width / 2), Math.max(margin, window.innerWidth - width - margin));
+				const panelHeight = panelRef.current?.offsetHeight ?? 240;
+				const above = box.top - panelHeight - 8;
+				const top = above >= margin ? above : box.bottom + 8;
+				setPos({
+					top,
+					left
+				});
+			}, [open]);
+			/**
+			* Re-measure once the panel has painted.
+			*
+			* `width: max-content` means the first pass measures a zero-width element: the panel is
+			* attached but `pos` is still undefined, so it is laid out at its min-width. Re-running
+			* after the content exists is what makes the width follow the text rather than the
+			* placeholder. Keyed on the model and the channel so a longer name (a real possibility
+			* with a `· 14,031` suffix) triggers a fresh measurement.
+			*/
+			(0, react.useLayoutEffect)(() => {
+				if (!open) return;
+				const anchor = anchorRef.current;
+				const panel = panelRef.current;
+				if (anchor === null || panel === null) return;
+				const box = anchor.getBoundingClientRect();
+				const width = panel.offsetWidth;
+				const margin = 8;
+				const left = Math.min(Math.max(margin, box.left + box.width / 2 - width / 2), Math.max(margin, window.innerWidth - width - margin));
+				const above = box.top - panel.offsetHeight - 8;
+				setPos((current) => {
+					if (current === void 0) return current;
+					const top = above >= margin ? above : box.bottom + 8;
+					if (current.top === top && current.left === left) return current;
+					return {
+						top,
+						left
+					};
+				});
+			}, [
+				open,
+				snapshot?.model,
+				snapshot?.channel?.total,
+				snapshot?.spentToday
+			]);
+			/** Outside click and Escape, the two ways any popover on this host closes. */
+			(0, react.useEffect)(() => {
+				if (!open) return void 0;
+				const onPointer = (event) => {
+					const target = event.target;
+					if (target === null) return;
+					if (anchorRef.current?.contains(target) === true) return;
+					if (panelRef.current?.contains(target) === true) return;
+					setOpen(false);
+				};
+				const onKey = (event) => {
+					if (event.key === "Escape") setOpen(false);
+				};
+				document.addEventListener("mousedown", onPointer, true);
+				document.addEventListener("keydown", onKey);
+				return () => {
+					document.removeEventListener("mousedown", onPointer, true);
+					document.removeEventListener("keydown", onKey);
+				};
+			}, [open]);
+			if (failed || snapshot === void 0) return null;
+			/**
+			* Green when the serving channel still has credits, grey when it does not.
+			*
+			* `total > 0` is the whole test: the pool's own gate already refuses an account at its
+			* reserved floor, so a non-zero total is genuinely spendable. A channel that could not
+			* be read is grey — the dot must not claim "you are fine" on missing data.
+			*/
+			const alive = snapshot.channel !== void 0 && snapshot.channel.total > 0;
+			const label = alive ? t?.("dot.alive") ?? "还有积分" : t?.("dot.empty") ?? "没有积分了";
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+				className: "dsm-xdpool-dotwrap",
+				style: { ["--xdpool-dot-mask"]: `url("${POOL_NAV_ICON_MASK_URL}")` },
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("style", { children: CREDIT_DOT_CSS }),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+						ref: anchorRef,
+						type: "button",
+						className: "dsm-xdpool-dot",
+						"data-state": alive ? "alive" : "empty",
+						"aria-label": label,
+						"aria-expanded": open,
+						title: `${label} · ${snapshot.channel === void 0 ? "—" : grouped(snapshot.channel.total)}`,
+						onClick: () => {
+							setOpen((current) => !current);
+						},
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsm-xdpool-dot-glyph",
+							"aria-hidden": "true"
+						})
+					}),
+					!open ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						ref: panelRef,
+						className: "dsm-xdpool-dotpanel",
+						role: "dialog",
+						"aria-label": t?.("dot.panelTitle") ?? "本会话积分",
+						style: pos === void 0 ? { visibility: "hidden" } : {
+							top: `${String(pos.top)}px`,
+							left: `${String(pos.left)}px`
+						},
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: "dsm-xdpool-dotpanel-head",
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "dsm-xdpool-dotpanel-channel",
+									children: snapshot.all.length === 0 ? t?.("dot.channelUnknown") ?? "未连接渠道" : `${snapshot.channel?.name ?? ""} · ${grouped(snapshot.all.reduce((sum, row) => sum + row.total, 0))}`
+								})
+							}),
+							snapshot.baseline <= 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: "dsm-xdpool-dotbar",
+								role: "img",
+								"aria-label": t?.("dot.barLabel") ?? "今日已用占比",
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+									className: "dsm-xdpool-dotbar-fill",
+									"data-full": snapshot.spentToday !== void 0 && snapshot.baseline > 0 && snapshot.spentToday / snapshot.baseline >= .9 ? "true" : "false",
+									style: { width: `${String(Math.min(100, Math.max(0, snapshot.baseline > 0 ? (snapshot.spentToday ?? 0) / snapshot.baseline * 100 : 0)))}%` }
+								})
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dsm-xdpool-dotpanel-sec",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "dsm-xdpool-dotpanel-k",
+									children: t?.("dot.spentToday") ?? "今日已用"
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "dsm-xdpool-dotpanel-v",
+									children: snapshot.spentToday === void 0 ? "—" : grouped(snapshot.spentToday)
+								})]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dsm-xdpool-dotpanel-sec",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									className: "dsm-xdpool-dotpanel-k",
+									children: t?.("dot.model") ?? "模型"
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+									className: "dsm-xdpool-dotpanel-v",
+									children: [snapshot.model === "" ? "—" : snapshot.model, snapshot.multiplier === void 0 ? "" : ` · x${rate(snapshot.multiplier)}`]
+								})]
+							}),
+							snapshot.all.length > 1 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: "dsm-xdpool-dotpanel-more",
+								children: snapshot.all.map((channel) => {
+									const used = snapshot.usedChannels?.some((row) => row.id === channel.id) === true;
+									return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+										className: "dsm-xdpool-dotpanel-row",
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											className: "dsm-xdpool-dotpanel-rowname",
+											"data-used": used ? "true" : "false",
+											children: channel.name
+										}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+											className: "dsm-xdpool-dotpanel-rowval",
+											children: grouped(channel.total)
+										})]
+									}, channel.id);
+								})
+							}) : null
+						]
+					})
+				]
+			});
+		}
+		//#endregion
 		//#region src/client/panel-icon.tsx
 		/**
 		* Render the pool's mark.
@@ -15458,6 +16731,7 @@ window.__ModuleLoader__.load({
 			"row.skippedEncrypted": "encrypted — start WorkBuddy once so its key can be read",
 			"row.skippedUnreadable": "file could not be read",
 			"row.skippedMalformed": "not a credential file",
+			"row.skippedExpired": "expired — sign in again, or delete it",
 			"row.imageCapable": "image input",
 			"row.rate": "{rate}x credits",
 			"row.accountsRescan": "Detect accounts again",
@@ -15684,6 +16958,7 @@ window.__ModuleLoader__.load({
 			"shell.tabRouting": "Routing",
 			"shell.subRouting": "Chains that try models in order, so one busy or rate-limited model falls through to the next.",
 			"shell.tabGateway": "Gateway",
+			"shell.tabBackup": "Backup",
 			"shell.subGateway": "Open the pool to the other devices on your network.",
 			"gw.title": "Gateway",
 			"gw.sub": "An OpenAI-compatible endpoint other devices on your network can point at. Off until you turn it on, and bound to this computer only until you say otherwise.",
@@ -15708,6 +16983,80 @@ window.__ModuleLoader__.load({
 			"gw.showKey": "Show",
 			"gw.hideKey": "Hide",
 			"gw.rotate": "Rotate key",
+			/** One-click copy for the two strings a client must transcribe exactly. */
+			"gw.copyOrigin": "Copy base URL",
+			"gw.copyOriginHint": "For clients that append /v1 themselves (most SDKs).",
+			"gw.copyV1": "Copy with /v1",
+			"gw.copyV1Hint": "For a field that wants the full prefix, e.g. OPENAI_BASE_URL.",
+			"gw.copyBase": "Copy base URL",
+			"gw.copyKey": "Copy key",
+			"gw.copyAll": "Copy both",
+			"gw.copyAllHint": "Base URL and key on two labelled lines — paste both into your client.",
+			"gw.copied": "Copied",
+			"gw.copyFailed": "Could not copy. Select the text and copy it manually.",
+			"gw.copyModelIdHint": "Copy the model id — this exact string is what the client must send.",
+			"gw.wire": "Chat Completions only: /v1/chat/completions and /v1/models. A client set to the Responses or Anthropic API will get a 404 here — switch it to Chat Completions.",
+			/** Composer credit strip: an estimate, and it says so. */
+			"strip.today": "Spent today",
+			"strip.credits": "credits",
+			"strip.hint": "Estimated from tokens × the model multiplier. Not an invoice.",
+			"strip.unpriced": "{count} unpriced",
+			"strip.unpricedHint": "These models publish no multiplier, so only their tokens are counted.",
+			"strip.calls": "calls",
+			"strip.gatewayExcluded": "{count} more came through the gateway (other devices) and are not counted here.",
+			/** Credential backup: export/import, encrypted. */
+			"backup.title": "Account backup",
+			"backup.encrypted": "Encrypted",
+			"backup.passwordPlaceholder": "at least {min} characters",
+			"backup.exportHint": "Export an encrypted file",
+			"backup.pickHint": "Choose a backup file to import",
+			"backup.importHint": "Import replaces every existing account",
+			"backup.clearFile": "Clear selection",
+			"backup.hint": "Exports every account credential plus the model and routing settings into one file. The file is encrypted with the password below — without it the file cannot be opened, and it contains enough to sign in as these accounts.",
+			"backup.password": "Password",
+			"backup.passwordShort": "The password needs at least {min} characters.",
+			"backup.export": "Export",
+			"backup.import": "Import",
+			"backup.pick": "Choose file",
+			"backup.pickFile": "Choose a backup file first.",
+			"backup.fileUnreadable": "The file could not be read.",
+			"backup.notJson": "That file is not a backup.",
+			"backup.badPassword": "Wrong password, or the file is damaged.",
+			"backup.exported": "Exported. Keep the password — the file cannot be opened without it.",
+			"backup.exportedWarn": "Exported, with {count} warning(s).",
+			"backup.exportFailed": "Export failed.",
+			"backup.exportEmpty": "The pack returned no payload.",
+			"backup.importFailed": "Import failed.",
+			"backup.confirm": "This REPLACES all {count} account(s). Continue?",
+			"backup.imported": "Imported {accounts} account(s) with {credentials} credential(s).",
+			"backup.importedPartial": "Imported {accounts} account(s), {skipped} skipped.",
+			/** Balance panel: what is LEFT, not what was spent. */
+			"bal.title": "Channel credits",
+			"bal.refresh": "Refresh",
+			"bal.accounts": "{count} accounts",
+			"bal.morePacks": "{count} more package(s)",
+			/** The composer strip: remaining credits, one line, expandable. */
+			"bstrip.label": "Channel credits",
+			"bstrip.accounts": "{count} accounts",
+			"bstrip.hint": "Remaining credits per channel. Open for the per-account breakdown.",
+			/** The sidebar credit panel, above the account block. */
+			"rail.title": "Channel credits",
+			"rail.hint": "Remaining credits per channel. Open a row for its accounts.",
+			"rail.accounts": "{count} accounts",
+			"rail.footCount": "{read}/{all} accounts",
+			"rail.today": "Used today {n}",
+			"rail.morePacks": "{count} more package(s)",
+			"rail.refresh": "Refresh",
+			/** The composer dot and its popover. */
+			"dot.alive": "Credits available",
+			"dot.empty": "Out of credits",
+			"dot.panelTitle": "This session",
+			"dot.channel": "Channel",
+			"dot.spentToday": "Used today",
+			"dot.model": "Model",
+			"dot.channelUnknown": "No channel connected",
+			"dot.remaining": "Remaining",
+			"dot.barLabel": "Share of the period budget used",
 			"gw.keyHint": "This key survives a DSH restart. Rotating it drops every device that still holds the old one. This is not the per-process secret of the pool itself — a client that learned that one would stop working the next time DSH restarts.",
 			"gw.usage": "Using it",
 			"gw.usageHint": "Any OpenAI-compatible app works. Set its base URL to the endpoint above, pick a model out of /v1/models, and send this key as the API key. The relay passes /v1/models and /v1/chat/completions only; everything else is refused before a byte is forwarded.",
@@ -15796,6 +17145,13 @@ window.__ModuleLoader__.load({
 			"channelpool.claiming": "Claiming…",
 			"channelpool.claimResult": "Claimed {claimed} of {total}: +{credit} {unit}.",
 			"channelpool.claimNone": "Nothing to claim today ({already} already claimed, {inactive} with no daily credit).",
+			/** The one-off rewards (Raccoon's login bonus, Loomy's onboarding tasks). */
+			"channelpool.onboarding": "Claim one-off rewards",
+			"channelpool.onboardingHint": "Login bonus / onboarding tasks — collectable once per account.",
+			"channelpool.onboardingNoAccounts": "No account to claim for.",
+			"channelpool.onboardingNone": "Nothing left to claim — already collected.",
+			"channelpool.onboardingFailed": "{failed} account(s) could not claim.",
+			"channelpool.onboardingResult": "Claimed {claimed} reward(s): +{credit} ({skipped} already collected).",
 			"channelpool.claimFailed": "{failed} account(s) could not claim; the others are done.",
 			"channelpool.refreshBalance": "Refresh balances",
 			"channelpool.refreshAccount": "Refresh",
@@ -15969,6 +17325,7 @@ window.__ModuleLoader__.load({
 			"row.skippedEncrypted": "已加密 —— 启动一次 WorkBuddy 才能取到密钥",
 			"row.skippedUnreadable": "文件读不出来",
 			"row.skippedMalformed": "不是凭据文件",
+			"row.skippedExpired": "已过期（refresh token 失效）—— 重新登录或删除该文件即可",
 			"row.imageCapable": "图片输入",
 			"row.rate": "{rate}x 积分",
 			"row.accountsRescan": "重新检测账号",
@@ -16195,6 +17552,7 @@ window.__ModuleLoader__.load({
 			"shell.tabRouting": "路由",
 			"shell.subRouting": "把几个模型串成一条链，按顺序试；一个忙了或被限流，就自动落到下一个。",
 			"shell.tabGateway": "网关",
+			"shell.tabBackup": "备份",
 			"shell.subGateway": "把账号池开放给同网络里的其它设备。",
 			"gw.title": "网关",
 			"gw.sub": "开一个 OpenAI 兼容的入口，同网络的其它设备可以指过来。默认关闭，默认只绑定本机 —— 你不改，它就一直只在你这台电脑上。",
@@ -16219,6 +17577,80 @@ window.__ModuleLoader__.load({
 			"gw.showKey": "显示",
 			"gw.hideKey": "隐藏",
 			"gw.rotate": "轮换密钥",
+			/** 一键复制客户端必须逐字填对的那两个值。 */
+			"gw.copyOrigin": "复制 Base URL",
+			"gw.copyOriginHint": "客户端自己会补 /v1 时用这个（大多数 SDK）。",
+			"gw.copyV1": "复制含 /v1 的地址",
+			"gw.copyV1Hint": "要填完整前缀时用这个，例如 OPENAI_BASE_URL。",
+			"gw.copyBase": "复制 Base URL",
+			"gw.copyKey": "复制密钥",
+			"gw.copyAll": "复制全部",
+			"gw.copyAllHint": "Base URL 和密钥分两行带标签，可直接粘进客户端。",
+			"gw.copied": "已复制",
+			"gw.copyFailed": "复制失败，请手动选中文本复制。",
+			"gw.copyModelIdHint": "复制模型 id —— 客户端里要逐字填这个，不是上面的显示名。",
+			"gw.wire": "只支持 Chat Completions（/v1/chat/completions 与 /v1/models）。若客户端设成 Responses 或 Anthropic 协议，在这里会拿到 404 —— 请改成 Chat Completions。",
+			/** 输入框上方的积分估算条。 */
+			"strip.today": "今日消耗",
+			"strip.credits": "积分",
+			"strip.hint": "按 token × 模型倍率估算，不是账单。",
+			"strip.unpriced": "{count} 个未定价",
+			"strip.unpricedHint": "这些模型没有公布倍率，只统计 token 不计积分。",
+			"strip.calls": "次",
+			"strip.gatewayExcluded": "另有 {count} 次来自网关（其他设备），未计入。",
+			/** 凭据备份：导出 / 导入，加密。 */
+			"backup.title": "账号备份",
+			"backup.encrypted": "加密",
+			"backup.passwordPlaceholder": "至少 {min} 位",
+			"backup.exportHint": "导出为加密文件",
+			"backup.pickHint": "选择要导入的备份文件",
+			"backup.importHint": "导入会整体替换现有账号",
+			"backup.clearFile": "取消选择",
+			"backup.hint": "把所有账号凭据连同模型选择与路由设置导出成一个文件。文件用下面的密码加密 —— 没有密码打不开；而它包含的东西足以登录这些账号，请妥善保存。",
+			"backup.password": "密码",
+			"backup.passwordShort": "密码至少要 {min} 个字符。",
+			"backup.export": "导出",
+			"backup.import": "导入",
+			"backup.pick": "选择文件",
+			"backup.pickFile": "先选一个备份文件。",
+			"backup.fileUnreadable": "文件读不出来。",
+			"backup.notJson": "这个文件不是备份。",
+			"backup.badPassword": "密码不对，或文件已损坏。",
+			"backup.exported": "已导出。请记住密码 —— 没有它打不开这个文件。",
+			"backup.exportedWarn": "已导出，有 {count} 条警告。",
+			"backup.exportFailed": "导出失败。",
+			"backup.exportEmpty": "渠道包没有返回内容。",
+			"backup.importFailed": "导入失败。",
+			"backup.confirm": "这会**整体替换**现有 {count} 个账号，继续吗？",
+			"backup.imported": "已导入 {accounts} 个账号、{credentials} 份凭据。",
+			"backup.importedPartial": "已导入 {accounts} 个账号，{skipped} 个被跳过。",
+			/** 余额看板：显示还剩多少，不是花了多少。 */
+			"bal.title": "渠道积分",
+			"bal.refresh": "刷新",
+			"bal.accounts": "{count} 个账号",
+			"bal.morePacks": "还有 {count} 个包",
+			/** 输入框上方的余额条：剩余积分，一行，可展开。 */
+			"bstrip.label": "渠道积分",
+			"bstrip.accounts": "{count} 个账号",
+			"bstrip.hint": "各渠道剩余积分，点开看每个账号的明细。",
+			/** 侧栏积分面板，在账号行上方。 */
+			"rail.title": "渠道积分",
+			"rail.hint": "各渠道剩余积分，点开某一行看账号明细。",
+			"rail.accounts": "{count} 账号",
+			"rail.footCount": "{read}/{all} 账号",
+			"rail.today": "今日已用 {n}",
+			"rail.morePacks": "还有 {count} 个包",
+			"rail.refresh": "刷新",
+			/** 输入框旁的圆点与弹层。 */
+			"dot.alive": "还有积分",
+			"dot.empty": "积分已用完",
+			"dot.panelTitle": "本会话",
+			"dot.channel": "渠道",
+			"dot.spentToday": "今日已用",
+			"dot.model": "模型",
+			"dot.channelUnknown": "未连接渠道",
+			"dot.remaining": "剩余积分",
+			"dot.barLabel": "本期已用占比",
 			"gw.keyHint": "这把密钥在 DSH 重启后仍然有效。轮换会让所有还在用旧密钥的设备立刻断线。这里给的也不是账号池自己每进程生成的秘密 —— 客户端要是拿到它，DSH 下次一重启就全废了。",
 			"gw.usage": "怎么用",
 			"gw.usageHint": "任何 OpenAI 兼容的客户端都行：接口地址填上面那个入口，模型从 /v1/models 里挑，密钥填到这个 API 密钥的位置。中继只放行 /v1/models 和 /v1/chat/completions，其余路径在转发任何字节之前就拒掉。",
@@ -16307,6 +17739,13 @@ window.__ModuleLoader__.load({
 			"channelpool.claiming": "领取中…",
 			"channelpool.claimResult": "共 {total} 个账号，领取 {claimed} 个：+{credit} {unit}。",
 			"channelpool.claimNone": "今天没有可领的（{already} 个已领，{inactive} 个无每日积分）。",
+			/** 一次性奖励（商汤的登录奖励、讯飞的新手任务）。 */
+			"channelpool.onboarding": "领取一次性奖励",
+			"channelpool.onboardingHint": "登录奖励 / 新手任务 —— 每个账号只能领一次。",
+			"channelpool.onboardingNoAccounts": "没有可领取的账号。",
+			"channelpool.onboardingNone": "没有可领的了 —— 已经领过。",
+			"channelpool.onboardingFailed": "有 {failed} 个账号领取失败。",
+			"channelpool.onboardingResult": "领到 {claimed} 项：+{credit}（{skipped} 个之前已领）。",
 			"channelpool.claimFailed": "有 {failed} 个账号领取失败，其余已完成。",
 			"channelpool.refreshBalance": "刷新余额",
 			"channelpool.refreshAccount": "刷新凭据",
@@ -16416,6 +17855,30 @@ window.__ModuleLoader__.load({
 				} catch (error) {
 					console.error("[dsh-xdpool] sidebar entry unavailable (settings page unaffected):", error);
 				}
+				/**
+				* The credit dot beside the model name, in the composer's own row.
+				*
+				* `conversation.composer.dock` is inside `InputBar`, on the line that already holds
+				* the back button, the model name and the reasoning level. That adjacency is the
+				* point: the dot is a statement about the model it sits next to, so putting it
+				* anywhere else would leave the reader to work out which channel it describes.
+				*
+				* It renders on the `composer` variant only (the host gates it), and does not appear
+				* on the hero screen where no session exists yet.
+				*
+				* Own try/catch: a host line without this slot must not take the settings page down
+				* with it.
+				*/
+				try {
+					ctx.slots.inject("conversation.composer.dock", () => ctx.slots.register({
+						name: "conversation.composer.dock",
+						id: "xdpool-credit-dot",
+						order: 20,
+						inject: () => t === void 0 ? {} : { t }
+					}, CreditDot));
+				} catch (error) {
+					console.error("[dsh-xdpool] composer credit dot unavailable (everything else unaffected):", error);
+				}
 			} catch (error) {
 				console.error("[dsh-xdpool] client page failed to load (host provider unaffected):", error);
 			}