opencode-claude-code-ua 0.3.6 → 0.3.9

package/src/key-usage.mjs

@@ -0,0 +1,73 @@
+import { siteRoot } from '../lib/ua-protocol.mjs'
+import { boundedResponse, credential } from './ua-runtime.mjs'
+
+const localErrors = new WeakSet()
+const fail = (message, code = 'response') => { const error = Object.assign(new Error(message), { code }); localErrors.add(error); return error }
+const money = value => '$' + value.toLocaleString('en-US', { minimumFractionDigits: 2, maximumFractionDigits: 6 })
+const quota = value => Number.isSafeInteger(value)
+const unavailable = message => ({ signIn: 'kept', error: message, windows: [{ name: 'Key 用量', aside: true, display: `${message}；需签到请绑定站点账号，模型 key 不替代登录凭据` }] })
+
+export function createKeyUsage({ fetchImpl = globalThis.fetch, readAuth } = {}) {
+  async function request(url, headers) {
+    const controller = new AbortController()
+    let timer
+    const deadline = new Promise((_, reject) => { timer = setTimeout(() => { controller.abort(); reject(fail('Key 用量查询超时，请稍后手动重试', 'timeout')) }, 15000) })
+    try {
+      return await Promise.race([deadline, (async () => {
+        const response = await fetchImpl(url, { method: 'GET', headers, redirect: 'manual', credentials: 'omit', referrerPolicy: 'no-referrer', signal: controller.signal })
+        const stop = (message, code) => { void response.body?.cancel().catch(() => {}); throw fail(message, code) }
+        if (response.redirected || response.status >= 300 && response.status < 400 || response.url && new URL(response.url).origin !== new URL(url).origin) stop('站点重定向已阻止，未向其他地址发送凭据', 'redirect')
+        if (response.status === 401 || response.status === 403) stop('Key 用量查询未获授权，请核对 Key 或绑定站点账号', 'auth')
+        if (response.status === 404 || response.status === 405) stop('站点未提供此 Key 用量接口', 'unsupported')
+        if (!response.ok) stop('Key 用量查询失败，请检查站点服务', 'http')
+        const body = await boundedResponse(response, { limit: 1024 * 1024, signal: controller.signal })
+        let result
+        try { result = JSON.parse(body) } catch { throw fail('站点返回的 Key 用量数据无效') }
+        if (!result || typeof result !== 'object' || Array.isArray(result) || result.success === false || result.code === false) throw fail('站点未确认 Key 用量查询成功')
+        return result
+      })()])
+    } catch (error) {
+      if (localErrors.has(error)) throw error
+      throw fail('Key 用量查询未完成，请检查站点地址与网络', 'network')
+    } finally { clearTimeout(timer) }
+  }
+  return async connection => {
+    try {
+      const root = siteRoot(connection.baseURL)
+      const auth = await credential(connection, readAuth)
+      const key = ['api-key', 'bearer'].includes(auth.mode) ? auth.key : auth.mode === 'custom' ? /^Bearer\s+([^\s]+)$/i.exec(auth.value ?? '')?.[1] : null
+      if (!key) return unavailable('此认证方式不提供模型 Key 的只读用量查询')
+      const headers = { accept: 'application/json', authorization: `Bearer ${key}` }
+      let result
+      try { result = await request(root + '/api/usage/token/', headers) }
+      catch (error) {
+        if (error.code !== 'unsupported') throw error
+        const billing = await request(root + '/v1/dashboard/billing/usage', headers)
+        const spent = billing.total_usage ?? billing.data?.total_usage
+        if (typeof spent !== 'number' || !Number.isFinite(spent) || spent < 0) throw fail('站点未返回可确认的 Key 累计消耗')
+        return { plan: 'Key 累计消耗', user: connection.name, signIn: 'kept', windows: [{ name: 'Key 用量', aside: true, amount: spent / 100, unit: 'usd', display: `累计消耗 ${money(spent / 100)}；余额未知。签到需绑定站点账号` }] }
+      }
+      const data = result.data
+      if (result.code !== true || data?.object !== 'token_usage' || !quota(data.total_granted) || data.total_granted < 0 || !quota(data.total_used) || data.total_used < 0 || !quota(data.total_available) || typeof data.unlimited_quota !== 'boolean' || !quota(data.expires_at) || data.expires_at < 0) throw fail('站点返回的 Key 额度字段无效')
+      let scale = 500000, estimated = true
+      try {
+        const status = await request(root + '/api/status', { accept: 'application/json' })
+        if (status.success === true && typeof status.data?.quota_per_unit === 'number' && Number.isFinite(status.data.quota_per_unit) && status.data.quota_per_unit > 0) { scale = status.data.quota_per_unit; estimated = false }
+      } catch { /* The token reading remains valid; label the default conversion as estimated. */ }
+      const available = data.total_available / scale, used = data.total_used / scale, total = data.total_granted / scale
+      if (![available, used, total].every(Number.isFinite)) throw fail('站点额度换算超出允许范围')
+      const user = data.user_quota
+      const userAvailable = quota(user?.total_available) && quota(user?.total_used) && user.total_used >= 0 ? user.total_available / scale : null
+      const suffix = estimated ? '（估算）' : ''
+      const balance = Number.isFinite(userAvailable) ? money(userAvailable) + suffix : data.unlimited_quota ? 'Key 不限额（账号余额未知）' : money(available) + suffix
+      let until
+      if (data.expires_at > 0) { const date = new Date(data.expires_at * 1000); if (!Number.isFinite(date.getTime())) throw fail('Key 过期时间无效'); until = date.toISOString() }
+      return { plan: Number.isFinite(userAvailable) ? 'New API 账号余额（Key 已授权查询）' : 'New API Key 额度', user: connection.name, signIn: 'kept', balance,
+        ...(until ? { until } : {}),
+        windows: [{ name: 'Key 额度', aside: true, amount: used, unit: 'usd',
+          ...(!data.unlimited_quota ? { limit: total, used: total > 0 ? Math.min(100, Math.max(0, used / total * 100)) : 0 } : {}),
+          display: `${data.unlimited_quota ? 'Key 不限额' : `Key 剩余 ${money(available)}`}；累计消耗 ${money(used)}${Number.isFinite(userAvailable) ? `；账号余额 ${money(userAvailable)}` : '；这是 Key 额度，不等于账号总余额'}${estimated ? '；额度倍率未确认，按 500000 quota/USD 估算' : ''}；签到需绑定站点账号` }],
+      }
+    } catch (error) { return unavailable(localErrors.has(error) ? error.message : 'Key 用量读取未完成，请核对连接凭据与地址') }
+  }
+}

package/src/newapi.mjs

@@ -23,6 +23,7 @@ const ERRORS = Object.freeze({
   size: '站点响应超过允许大小。',
   identity: '站点返回的用户 ID 与配置不一致，已停止操作。',
   credentials: '请填写所选认证方式对应的系统访问令牌或 Cookie。',
+  login_credentials: '请填写 AgentRouter 用户名和密码。',
   disabled: '该账号或签到功能未启用。',
   checkin: '签到未完成，请前往站点检查签到条件。',
   cookie_required: '当前令牌缺少签到权限或站点要求登录 Cookie，请检查令牌权限或改用 Cookie。',
@@ -31,10 +32,11 @@ const ERRORS = Object.freeze({
 });
 
 export class NewApiError extends Error {
-  constructor(code = 'network') {
+  constructor(code = 'network', status = null) {
     super(ERRORS[code] ?? ERRORS.network);
     this.name = 'NewApiError';
     this.code = Object.hasOwn(ERRORS, code) ? code : 'network';
+    this.status = Number.isInteger(status) ? status : null;
   }
 }
 
@@ -43,6 +45,22 @@ export function safeNewApiMessage(error) {
   return error instanceof NewApiError ? ERRORS[error.code] ?? ERRORS.network : ERRORS.network;
 }
 
+/** Keep only the site's session cookie pair; never persist unrelated Set-Cookie values. */
+function sessionCookie(headers) {
+  const combined = headers.get('set-cookie');
+  const values = typeof headers.getSetCookie === 'function'
+    ? headers.getSetCookie()
+    : combined ? combined.split(/,(?=\s*[^;=,\s]+=)/u) : [];
+  for (const value of values) {
+    const pair = String(value).split(';')[0].trim();
+    const separator = pair.indexOf('=');
+    if (separator <= 0 || pair.slice(0, separator).trim().toLowerCase() !== 'session') continue;
+    if (CONTROL.test(pair) || pair.length > 32768) continue;
+    return pair;
+  }
+  return null;
+}
+
 /** Whitelist the account config; no model-router headers are accepted here. */
 export function normalizeAccountConfig(raw = {}) {
   if (!raw || typeof raw !== 'object' || Array.isArray(raw)) throw new AccountValidationError();
@@ -59,18 +77,25 @@ export function normalizeAccountConfig(raw = {}) {
     if (raw[key] !== undefined && typeof raw[key] !== 'boolean') fields[key] = '必须为开关值。';
     return raw[key] === undefined ? true : raw[key] === true;
   }
+  const siteType = text('siteType', 'newapi', 16);
+  if (!['newapi', 'agentrouter'].includes(siteType)) fields.siteType = '请选择 New API 或 AgentRouter。';
   let siteUrl = text('siteUrl', '', 2048);
   try {
     const url = new URL(siteUrl);
     if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || siteUrl.includes('?') || siteUrl.includes('#') || siteUrl.includes('\\') || /%(?:0[0-9a-f]|1[0-9a-f]|7f)/iu.test(siteUrl)) throw new Error();
+    const loopback = /^127(?:\.\d{1,3}){3}$/u.test(url.hostname) || ['localhost', '::1', '[::1]'].includes(url.hostname.toLowerCase());
     siteUrl = url.href.replace(/\/+$/u, '');
+    if (siteType === 'agentrouter' && url.protocol === 'http:' && !loopback) fields.siteUrl = 'AgentRouter 必须使用 HTTPS 或本机回环地址。';
   } catch { fields.siteUrl = '请输入不含账号、密码、查询参数或片段的 HTTP(S) 站点地址。'; }
   const userId = text('userId', '', 32);
-  if (!/^[1-9]\d*$/u.test(userId)) fields.userId = '用户 ID 必须为正整数字符串。';
-  const name = text('name', 'New API', 100);
+  if (siteType === 'newapi' && !/^[1-9]\d*$/u.test(userId) || siteType === 'agentrouter' && userId && !/^[1-9]\d*$/u.test(userId)) fields.userId = '用户 ID 必须为正整数字符串。';
+  const name = text('name', siteType === 'agentrouter' ? 'AgentRouter' : 'New API', 100);
   if (!name) fields.name = '请输入账号名称。';
   const authMode = text('authMode', 'token', 16);
   if (!['token', 'cookie'].includes(authMode)) fields.authMode = '请选择令牌或 Cookie 认证。';
+  const username = text('username', '', 256);
+  const password = raw.password ?? '';
+  if (typeof password !== 'string' || CONTROL.test(password) || password.length > 4096) fields.password = '请输入不含控制字符且长度合理的密钥。';
   const accessToken = text('accessToken', '', 16384);
   const cookie = text('cookie', '', 32768);
   const quotaPerUnit = raw.quotaPerUnit ?? 500000;
@@ -92,23 +117,37 @@ export function normalizeAccountConfig(raw = {}) {
     for (const field of Object.keys(error.fields)) fields[field] = messages[field] ?? messages.schedule;
   }
   if (Object.keys(fields).length) throw new AccountValidationError('账号配置无效。', 400, fields);
-  return { name, enabled, siteUrl, userId, authMode, accessToken, cookie, quotaPerUnit, unit, checkinEnabled, schedule };
+  return { name, enabled, siteUrl, siteType, userId, username, password, authMode, accessToken, cookie, quotaPerUnit, unit, checkinEnabled, schedule };
 }
 
 export function createNewApiClient({ fetchImpl = globalThis.fetch, now = () => new Date() } = {}) {
   if (typeof fetchImpl !== 'function') throw new AccountValidationError('缺少网络请求实现。');
   const timestamp = () => new Date(now()).toISOString();
 
-  async function request(account, endpoint, { method = 'GET', body } = {}) {
+  async function request(account, endpoint, { method = 'GET', body, accountAuth = true, cookieJar } = {}) {
     const url = new URL(`${account.siteUrl}${endpoint}`);
     if (url.origin !== new URL(account.siteUrl).origin) throw new NewApiError('redirect');
-    const headers = { Accept: 'application/json', 'New-Api-User': account.userId };
-    if (account.authMode === 'token') {
-      if (!account.accessToken) throw new NewApiError('credentials');
-      headers.Authorization = `Bearer ${account.accessToken}`;
-    } else {
-      if (!account.cookie) throw new NewApiError('credentials');
-      headers.Cookie = account.cookie;
+    const headers = { Accept: 'application/json' };
+    if (accountAuth) {
+      if (account.siteType === 'agentrouter') {
+        if (account.userId) headers['New-Api-User'] = account.userId;
+        if (account.authMode === 'token') {
+          if (!account.accessToken) throw new NewApiError('credentials');
+          headers.Authorization = account.accessToken;
+        } else {
+          if (!account.cookie) throw new NewApiError('credentials');
+          headers.Cookie = account.cookie;
+        }
+      } else {
+        headers['New-Api-User'] = account.userId;
+        if (account.authMode === 'token') {
+          if (!account.accessToken) throw new NewApiError('credentials');
+          headers.Authorization = `Bearer ${account.accessToken}`;
+        } else {
+          if (!account.cookie) throw new NewApiError('credentials');
+          headers.Cookie = account.cookie;
+        }
+      }
     }
     if (body !== undefined) headers['Content-Type'] = 'application/json';
     const controller = new AbortController();
@@ -124,11 +163,15 @@ export function createNewApiClient({ fetchImpl = globalThis.fetch, now = () => n
     try {
       return await Promise.race([deadline, (async () => {
         const response = await fetchImpl(url.href, { method, headers, body: body === undefined ? undefined : JSON.stringify(body), redirect: 'manual', credentials: 'omit', referrerPolicy: 'no-referrer', signal: controller.signal });
-        const rejectResponse = code => { void response.body?.cancel().catch(() => {}); throw new NewApiError(code); };
+        const rejectResponse = (code, status = response.status) => { void response.body?.cancel().catch(() => {}); throw new NewApiError(code, status); };
         if (response.redirected || response.status >= 300 && response.status < 400 || response.url && new URL(response.url).origin !== url.origin) rejectResponse('redirect');
         if (response.status === 401 || response.status === 403) rejectResponse('auth');
         if (!response.ok) rejectResponse('http');
         if (Number(response.headers.get('content-length')) > RESPONSE_LIMIT) rejectResponse('size');
+        if (cookieJar && typeof cookieJar === 'object') {
+          const cookie = sessionCookie(response.headers);
+          if (cookie) cookieJar.cookie = cookie;
+        }
         if (!response.body?.getReader) throw new NewApiError('response');
         reader = response.body.getReader();
         const chunks = []; let size = 0;
@@ -151,8 +194,24 @@ export function createNewApiClient({ fetchImpl = globalThis.fetch, now = () => n
     } finally { clearTimeout(timer); }
   }
 
+  async function agentRouterBalance(account) {
+    if (!/^[1-9]\d*$/u.test(account.userId)) throw new NewApiError('identity');
+    if (account.authMode === 'token' ? !account.accessToken : !account.cookie) throw new NewApiError('credentials');
+    const result = await request(account, '/api/user/self');
+    if (result.success !== true || !result.data || typeof result.data !== 'object') throw new NewApiError('response');
+    const data = result.data;
+    const id = typeof data.id === 'number' && Number.isSafeInteger(data.id) ? String(data.id)
+      : typeof data.id === 'string' && /^[1-9]\d*$/u.test(data.id) ? data.id : null;
+    if (!id || id !== account.userId) throw new NewApiError('identity');
+    if (!Number.isSafeInteger(data.quota) || !Number.isSafeInteger(data.used_quota) || data.used_quota < 0) throw new NewApiError('response');
+    const requestCount = data.request_count === undefined || data.request_count === null ? 0 : data.request_count;
+    if (!Number.isSafeInteger(requestCount) || requestCount < 0) throw new NewApiError('response');
+    return { at: timestamp(), quota: data.quota, usedQuota: data.used_quota, requestCount };
+  }
+
   async function balance(raw) {
     const account = normalizeAccountConfig(raw);
+    if (account.siteType === 'agentrouter') return agentRouterBalance(account);
     const result = await request(account, '/api/user/self');
     if (result.success !== true || !result.data || typeof result.data !== 'object') throw new NewApiError('response');
     const data = result.data;
@@ -162,9 +221,43 @@ export function createNewApiClient({ fetchImpl = globalThis.fetch, now = () => n
     return { at: timestamp(), quota: data.quota, usedQuota: data.used_quota, requestCount: data.request_count };
   }
 
+  async function agentRouterCheckin(account) {
+    if (!account.username || !account.password) throw new NewApiError('login_credentials');
+    const cookieJar = {};
+    let result;
+    try {
+      result = await request(account, '/api/user/login', {
+        method: 'POST',
+        body: { username: account.username, password: account.password },
+        accountAuth: false,
+        cookieJar,
+      });
+    } catch (error) {
+      if (!(error instanceof NewApiError)) throw new NewApiError('ambiguous');
+      if (['credentials', 'identity', 'redirect', 'auth'].includes(error.code)) throw error;
+      // A 4xx response is a definite rejection; a 5xx/body/transport failure may
+      // have happened after the site completed the login.
+      if (error.code === 'http' && Number.isInteger(error.status) && error.status >= 400 && error.status < 500) {
+        throw new NewApiError('checkin', error.status);
+      }
+      throw new NewApiError('ambiguous', error.status);
+    }
+    if (result.success === false) throw new NewApiError('checkin');
+    if (result.success !== true) throw new NewApiError('ambiguous');
+    if (!result.data || typeof result.data !== 'object') throw new NewApiError('ambiguous');
+    const data = result.data;
+    if (typeof data.id !== 'number' || !Number.isSafeInteger(data.id) || data.id <= 0) throw new NewApiError('identity');
+    const discovered = String(data.id);
+    if (account.userId && account.userId !== discovered) throw new NewApiError('identity');
+    if (data.checked_in !== undefined && data.checked_in !== true && data.checked_in !== false) throw new NewApiError('ambiguous');
+    return { state: data.checked_in === true ? 'success' : 'already', date: null, rewardQuota: null,
+      userId: discovered, cookie: cookieJar.cookie, authenticated: true };
+  }
+
   async function checkin(raw, { turnstileToken } = {}) {
     const account = normalizeAccountConfig(raw);
     if (!account.enabled || !account.checkinEnabled) throw new NewApiError('disabled');
+    if (account.siteType === 'agentrouter') return agentRouterCheckin(account);
     if (turnstileToken !== undefined && (typeof turnstileToken !== 'string' || CONTROL.test(turnstileToken) || turnstileToken.length > 4096)) throw new AccountValidationError('验证码参数无效。');
     await balance(account);
     const site = await request(account, '/api/status');

package/src/plugin.mjs

@@ -15,6 +15,7 @@ import { createConnectionDiagnostics } from './diagnostics.mjs';
 import { createAccountProfileStore } from './account-profile.mjs';
 import { isDeepStrictEqual } from 'node:util';
 import { pluginOptions, optionProfile } from './options.mjs';
+import { accountUsage, accountCheckin } from './account-usage.mjs';
 
 export const PROVIDER_ID = 'claude-code-ua';
 function modelsFor(profile) {
@@ -111,7 +112,7 @@ export async function createPlugin(input, rawOptions, dependencies = {}) {
 
   const uaStore = dependencies.uaStore ?? createUAStore(join(dirname(store.path), 'ua-pro.json'));
   const uaService = dependencies.uaService ?? createUAService({
-    store: uaStore, legacyStore: store,
+    store: uaStore, legacyStore: store, accountManager,
     readAuth: (provider, account) => currentHostAuth(account || provider),
     fetchImpl: dependencies.fetchImpl ?? globalThis.fetch,
   });
@@ -274,47 +275,16 @@ export async function createPlugin(input, rawOptions, dependencies = {}) {
         let account;
         try { account = await accountManager.refresh(id); }
         catch { return { signIn: 'kept', windows: [{ name: '可选余额', display: '绑定的站点账号不可用，请检查账号管理', aside: true }] }; }
-        return {
-          plan: 'New API',
-          user: account.name,
-          signIn: 'kept',
-          windows: [account].map((account) => {
-            const snapshot = account.snapshot;
-            const amount = (value) => value === null || value === undefined ? '—' : Number(value).toLocaleString('en-US', { maximumFractionDigits: 6 });
-            return {
-              name: account.name,
-              aside: true,
-              unit: account.unit,
-              ...(snapshot ? { balance: snapshot.remaining } : {}),
-              display: snapshot
-                ? `余额 ${amount(snapshot.remaining)} ${account.unit}；累计消耗 ${amount(snapshot.used)}；消耗增量 ${amount(snapshot.deltaUsed)}；余额变化 ${amount(snapshot.deltaBalance)}${account.status.stale ? '（缓存）' : ''}${account.status.error ? `；${account.status.error}` : ''}`
-                : account.status.error || '尚未读取余额',
-            };
-          }),
-        };
+        return accountUsage(account);
       },
       async checkin(getAuth) {
         const id = await boundAccount(getAuth);
         if (!id) return { outcome: 'inactive', message: '当前宿主账号未绑定站点账号，未发起签到' };
         let account;
         try {
-          const configured = await accountManager.get?.(id);
-          if (configured?.schedule?.enabled) return { outcome: 'inactive', message: `此账号由插件按每天 ${configured.schedule.time}（${configured.schedule.timeZone}）自动签到；如需现在执行，请在账号管理页手动签到` };
           account = await accountManager.checkin(id);
         } catch { return { outcome: 'failed', message: '绑定的站点账号签到未完成，请检查账号管理' }; }
-        const active = [account].filter((account) => account.enabled && account.checkinEnabled);
-        if (!active.length) return { outcome: 'inactive', message: '当前账号未启用签到' };
-        const success = new Set(['success', 'claimed']);
-        const done = new Set(['already', 'already_checked', 'checked', 'done']);
-        const captcha = new Set(['requires_verification', 'verification_required', 'captcha']);
-        const failed = active.some((account) => !success.has(account.checkin.state) && !done.has(account.checkin.state) && !captcha.has(account.checkin.state) && account.checkin.state !== 'disabled');
-        const needsCaptcha = active.some((account) => captcha.has(account.checkin.state));
-        const claimed = active.some((account) => success.has(account.checkin.state));
-        return {
-          outcome: failed ? 'failed' : needsCaptcha ? 'captcha' : claimed ? 'claimed' : active.every((account) => account.checkin.state === 'disabled') ? 'inactive' : 'done',
-          ...(claimed && Number.isFinite(account.checkin.reward) ? { credit: account.checkin.reward } : {}),
-          message: active.map((account) => `${account.name}：${success.has(account.checkin.state) ? `签到成功${account.checkin.reward == null ? '' : `，奖励 ${account.checkin.reward} ${account.unit}`}` : done.has(account.checkin.state) ? '今日已签到' : captcha.has(account.checkin.state) ? '需要在站点完成验证' : account.checkin.state === 'disabled' ? '站点未开启签到' : `签到失败（${account.checkin.message || '未完成'}）`}`).join('；'),
-        };
+        return accountCheckin(account);
       },
       async loader(getAuth, provider) {
         const auth = await getAuth();

package/src/scheduler.mjs

@@ -7,7 +7,7 @@ const schedulers = new Map();
 
 function identityOf(account) {
   const url = new URL(account.siteUrl);
-  return `${url.origin}${url.pathname.replace(/\/+$/, '')}\n${account.userId}`;
+  return `${url.origin}${url.pathname.replace(/\/+$/, '')}\n${account.userId || `username:${account.username}`}`;
 }
 
 export function createCheckinScheduler({
@@ -78,7 +78,7 @@ export function createCheckinScheduler({
         if (!occurrence) return false;
         const identity = identityOf(account);
         if (accounts.some((other) => {
-          const checkedAt = Date.parse(other.checkin?.checkedAt);
+          const checkedAt = Date.parse(other.checkin?.lastAttemptAt ?? other.checkin?.checkedAt);
           return Number.isFinite(checkedAt) && identityOf(other) === identity && scheduleDate(checkedAt, occurrence.timeZone) === occurrence.date;
         })) return false;
         if (identities.has(identity)) return false;

package/src/setup-server.mjs

@@ -4,6 +4,7 @@ import { readFile } from 'node:fs/promises';
 import { createConnectionDiagnostics } from './diagnostics.mjs';
 import { CLIENT_PRESETS, DEFAULT_METADATA_TEMPLATES, VARIABLE_DEFINITIONS, redactProfile } from './profile.mjs';
 
+const application = JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8'));
 const MAX_BODY_BYTES = 256 * 1024;
 // Fetch/browser bad-port list: a random listener must still be browser reachable.
 const BLOCKED_PORTS = new Set([1,7,9,11,13,15,17,19,20,21,22,23,25,37,42,43,53,69,77,79,87,95,101,102,103,104,109,110,111,113,115,117,119,123,135,137,139,143,161,179,389,427,465,512,513,514,515,526,530,531,532,540,548,554,556,563,587,601,636,989,990,993,995,1719,1720,1723,2049,3659,4045,4190,5060,5061,6000,6566,6665,6666,6667,6668,6669,6697,10080]);
@@ -235,7 +236,7 @@ export async function startSetupServer({
           if (request.method !== 'GET') return json(response, 405, { error: '不支持此请求方法' });
           const state = await uaService.state();
           if (settled) return ended(response);
-          return json(response, 200, { ...state, session: sessionInfo() });
+          return json(response, 200, { ...state, application: { name: 'UA PRO', version: application.version, provider: 'ua-pro' }, session: sessionInfo() });
         }
         if (request.method !== 'POST') return json(response, 405, { error: '不支持此请求方法' });
         if (request.headers.origin !== origin) return json(response, 403, { error: '操作必须从当前配置页面发起' });
@@ -302,11 +303,12 @@ export async function startSetupServer({
         if (settled) return ended(response);
         if (!accountManager) return json(response, 503, { error: '账号管理尚未初始化' });
         const accounts = await accountManager.list();
+        const connections = uaService?.accountConnections ? await uaService.accountConnections() : [];
         if (settled) return ended(response);
-        return json(response, 200, { ...accounts, ...(hostBinding ? { binding: { account: hostBinding.account, selected: hostBinding.selected } } : {}) });
+        return json(response, 200, { ...accounts, connections, ...(hostBinding ? { binding: { account: hostBinding.account, selected: hostBinding.selected } } : {}) });
       }
       const accountAction = route.startsWith('api/accounts/') ? route.slice('api/accounts/'.length) : null;
-      if (accountAction && !['save', 'remove', 'refresh', 'checkin', 'bind', 'done'].includes(accountAction)) return json(response, 404, { error: '账号接口不存在' });
+      if (accountAction && !['save', 'remove', 'refresh', 'checkin', 'bind', 'done', 'connection-usage'].includes(accountAction)) return json(response, 404, { error: '账号接口不存在' });
       if (!accountAction && !['api/save', 'api/check', 'api/cancel'].includes(route)) return json(response, 404, { error: '配置接口不存在' });
       if (request.method !== 'POST') return json(response, 405, { error: '不支持此请求方法' });
       if (request.headers.origin !== origin) return json(response, 403, { error: '保存必须从当前配置页面发起' });
@@ -332,6 +334,17 @@ export async function startSetupServer({
       if (settled) return ended(response, 409);
       if (saving) return busy(response);
       if (accountAction) {
+        if (accountAction === 'connection-usage') {
+          if (!uaService) return json(response, 503, { error: '连接余额查询尚未初始化' });
+          try {
+            const result = await uaService.execute('connections/usage', data);
+            if (settled) return ended(response);
+            return json(response, 200, result);
+          } catch (error) {
+            const status = [400, 404, 409].includes(error.status) ? error.status : 500;
+            return json(response, status, { error: status === 500 ? '连接余额读取未完成，请核对连接状态' : error.message });
+          }
+        }
         if (!accountManager) return json(response, 503, { error: '账号管理尚未初始化' });
         if (accountAction === 'done') {
           json(response, 200, { done: true });

package/src/ua-plugin.mjs

@@ -12,13 +12,15 @@ import { createProfileStore } from './store.mjs'
 import { createAccountManager } from './accounts.mjs'
 import { ensureCheckinScheduler } from './scheduler.mjs'
 import { isDeepStrictEqual } from 'node:util'
-import { createPlugin as createLegacyPlugin } from './plugin.mjs'
+import { createUAUsage } from './ua-usage.mjs'
+import { createKeyUsage } from './key-usage.mjs'
 import { resolveProfilePath } from './runtime.mjs'
 
 const PREFIX = 'ua-pro:connection:'
 const observed = new Map()
 const stores = new Map()
 const modelRoutes = new Map()
+const loadedProviders = new Map()
 const digest = value => createHash('sha256').update(JSON.stringify(value)).digest('hex').slice(0, 20)
 export function uaStorePath(options = {}, env = process.env) {
   const path = options.uaFile ?? env.UA_PRO_FILE ?? fileURLToPath(new URL('../runtime/ua-pro.json', import.meta.url))
@@ -39,6 +41,8 @@ export async function createUAPlugin(input = {}, options = {}, dependencies = {}
   const store = dependencies.uaStore ?? sharedStore(path)
   await store.initialize()
   const id = siteId ? `ua-pro-${siteId}` : 'ua-pro'
+  if (!loadedProviders.has(store.path)) loadedProviders.set(store.path, new Set())
+  loadedProviders.get(store.path).add(id)
   const legacyStore = dependencies.legacyStore ?? createProfileStore(resolveProfilePath({ configPath: options.profileFile }))
   const accountManager = dependencies.accountManager ?? createAccountManager({ path: join(dirname(path), 'accounts.json') })
   if (input.magpie && !siteId) (dependencies.startScheduler ?? ensureCheckinScheduler)({ accountManager, stateDirectory: join(dirname(path), 'schedule-claims'), onError: () => {} })
@@ -53,16 +57,44 @@ export async function createUAPlugin(input = {}, options = {}, dependencies = {}
     catch (error) { if (error.code === 'ENOENT') return {}; throw new Error('无法读取宿主账号，停止操作以保护已有凭据') }
   }
   const readAuth = async (provider, account) => (await auths())[account || provider]
-  const register = async connection => {
-    if (!input.client?.auth?.set || connection.auth?.source === 'host') return
+  const connectionStatus = async (connection, all = {}) => {
     const provider = providerOf(connection)
-    const account = `${provider}#${digest(connection.id)}`
-    const existing = (await auths())[account]
-    const key = PREFIX + connection.id
-    if (existing && existing.key !== key) throw new Error('目标宿主账号已被其他凭据占用')
-    if (existing) return
-    const response = await input.client.auth.set({ path: { id: account }, body: { type: 'api', key, accountId: connection.name, metadata: { uaConnectionId: connection.id } } })
-    if (response?.data !== true) throw new Error('宿主未确认连接注册，请重载并核对')
+    const account = connection.auth?.source === 'host' ? connection.auth.account : `${provider}#${digest(connection.id)}`
+    const base = { connectionId: connection.id, provider, account, name: connection.name }
+    if (!connection.enabled) return { ...base, status: 'disabled' }
+    if (!loadedProviders.get(store.path)?.has(provider)) return { ...base, status: 'reload-required', message: '新增独立站点需要在 Magpie 重载此插件后载入' }
+    if (connection.auth?.source === 'host') {
+      const saved = all[account]
+      const endpoint = saved?.metadata?.baseURL ?? saved?.metadata?.endpoint
+      if (saved?.type !== 'api' || !saved.key || !endpoint || siteRoot(endpoint) !== siteRoot(connection.baseURL)) return { ...base, status: 'unregistered', message: '该连接引用的宿主账号尚未确认，请重新打开账号配置' }
+      return { ...base, status: 'registered' }
+    }
+    const saved = all[account]
+    if (saved && (saved.type !== 'api' || saved.key !== PREFIX + connection.id)) return { ...base, status: 'conflict', message: '目标宿主账号已被其他凭据占用，未覆盖' }
+    return { ...base, status: saved ? 'registered' : 'unregistered' }
+  }
+  const register = async connection => {
+    const all = await auths()
+    const current = await connectionStatus(connection, all)
+    if (current.status === 'conflict') throw new Error(current.message)
+    if (['disabled', 'reload-required'].includes(current.status) || connection.auth?.source === 'host') return current
+    if (!input.client?.auth?.set) return { ...current, status: 'host-unavailable', message: '请从 Magpie 打开管理页后同步连接' }
+    const existing = all[current.account]
+    if (current.status === 'registered' && existing.accountId === connection.name && existing.metadata?.uaConnectionId === connection.id) return current
+    const body = { ...existing, type: 'api', key: PREFIX + connection.id, accountId: connection.name, metadata: { ...existing?.metadata, uaConnectionId: connection.id } }
+    const response = await input.client.auth.set({ path: { id: current.account }, body })
+    const confirmed = (await auths())[current.account]
+    if (response?.data !== true || !isDeepStrictEqual(confirmed, body)) throw new Error('宿主未确认连接注册，请重载并核对')
+    return { ...current, status: 'registered' }
+  }
+  const syncConnections = async () => {
+    const snapshot = await store.snapshot()
+    const connections = []
+    for (const connection of snapshot.connections) {
+      try { connections.push(await register(connection)) }
+      catch { connections.push({ connectionId: connection.id, provider: providerOf(connection), status: 'failed', message: '宿主同步未完成；配置和凭据保留，请重载插件后核对' }) }
+    }
+    return { connections, message: connections.some(item => item.status === 'reload-required') ? '已同步可用账号；新增独立站点需要重载 UA PRO 插件' : '宿主同步结果已核对' }
   }
   const routeKey = scope => `${store.path}:${scope}`
   const modelFetchFor = scope => {
@@ -73,7 +105,13 @@ export async function createUAPlugin(input = {}, options = {}, dependencies = {}
     return fetchImpl
   }
   const service = createUAService({ store, legacyStore, accountManager, fetchImpl, readAuth, modelCatalog, modelFetchFor, onConnectionSaved: input.client?.auth?.set ? register : undefined,
-    runtime: () => ({ mode: input.magpie ? 'host' : 'standalone', observed: [...observed.values()].filter(item => item.provider === id) }) })
+    syncConnections: input.client?.auth?.set ? syncConnections : undefined,
+    runtime: async snapshot => {
+      const all = await auths()
+      return { mode: input.magpie ? 'host' : 'standalone', storagePath: store.path,
+        connections: await Promise.all((snapshot?.connections ?? []).map(connection => connectionStatus(connection, all))),
+        observed: [...observed.values()].filter(item => item.provider === id) }
+    } })
   let declared = {}
   const getNativeConnection = async (auth, provider = {}) => {
     if (auth?.type !== 'api' || typeof auth.key !== 'string' || !auth.key.trim()) return null
@@ -129,7 +167,12 @@ export async function createUAPlugin(input = {}, options = {}, dependencies = {}
         } finally { if (stop) signal.removeEventListener('abort', stop); await session.close() }
       } }
   }
-  const usageHooks = await createLegacyPlugin({ ...input, magpie: undefined }, { profileFile: legacyStore.path, ...(options.accountBindings ? { accountBindings: options.accountBindings } : {}) }, { store: legacyStore, accountManager })
+  const resolveAccount = async auth => {
+    const matches = Object.entries(await auths()).filter(([slot, saved]) => (slot === id || slot.startsWith(id + '#')) && isDeepStrictEqual(saved, auth))
+    return matches.length === 1 ? matches[0][0] : null
+  }
+  const usageHooks = createUAUsage({ providerId: id, input, options, accountManager, getConnection: getNativeConnection, resolveAccount,
+    queryKeyUsage: (connection, auth) => createKeyUsage({ fetchImpl, readAuth: executeWithAuth(auth, connection) })(connection) })
   return {
     async config(config) {
       const snapshot = await store.snapshot({ secrets: true })
@@ -162,8 +205,8 @@ export async function createUAPlugin(input = {}, options = {}, dependencies = {}
             return transport(url, { ...init, headers })
           } }
       },
-      usage: usageHooks.auth.usage,
-      checkin: usageHooks.auth.checkin,
+      usage: usageHooks.usage,
+      checkin: usageHooks.checkin,
     },
     provider: { id, async models(provider = {}, { auth } = {}) {
       const connection = await getNativeConnection(auth, provider)

package/src/ua-runtime.mjs

@@ -18,7 +18,7 @@ export function operationForURL(input) {
   throw err('请求路径不是支持的模型操作')
 }
 
-async function credential(connection, readAuth) {
+export async function credential(connection, readAuth) {
   let auth = connection.auth ?? {}
   if (auth.source === 'host') {
     const current = await readAuth?.(auth.provider, auth.account)