tt-help-cli-ycl 1.4.176 → 1.4.178

package/src/main.js

@@ -27,6 +27,7 @@ import { handleSearch } from "./cli/search.js";
 import { handleWatchdog } from "./cli/watchdog.js";
 import { handleClashDaemon } from "./cli/clash-daemon.js";
 import { handleLoginCheck } from "./cli/login-check.js";
+import { handleLoginPool } from "./cli/login-pool.js";
 
 async function main() {
   const parsed = parseArgs();
@@ -80,6 +81,8 @@ async function main() {
       return handleClashDaemon(parsed);
     case "login-check":
       return handleLoginCheck(parsed);
+    case "login-pool":
+      return handleLoginPool(parsed);
   }
 
   const {

package/src/npm-main.js

@@ -23,6 +23,7 @@ import { handleRawSync } from "./cli/raw-sync.js";
 import { handleSearch } from "./cli/search.js";
 import { handleWatchdog } from "./cli/watchdog.js";
 import { handleLoginCheck } from "./cli/login-check.js";
+import { handleLoginPool } from "./cli/login-pool.js";
 
 function exitUnsupportedCommand(command) {
   console.error(
@@ -79,6 +80,8 @@ async function main() {
       return handleWatchdog(parsed);
     case "login-check":
       return handleLoginCheck(parsed);
+    case "login-pool":
+      return handleLoginPool(parsed);
   }
 
   const {

package/src/watch/login-health.js

@@ -0,0 +1,108 @@
+/**
+ * 登录态批量巡检（账号中心）— 服务端无浏览器纯 HTTP 探测
+ *
+ * 原理（POC 实证 2026-10-28，见知识库 worklog）：
+ *   undici + Cookie 头 + 真实 UA + 代理出口，直探 passport/web/account/info/。
+ *   浏览器里必须页面上下文 fetch（CORS），服务端无此限制。阳性对照（真实 cookies）
+ *   判活 / 阴性对照（垃圾 sessionid）判死均已验证，单次 ~700ms。
+ *
+ * 判据边界：探测只回答「登录态还活着吗」，不回答「号还能不能干活」——
+ *   风控限流/影子封禁只有真实业务出活能暴露。
+ */
+import { request, ProxyAgent } from "undici";
+import { healthTargets, recordHealth } from "./login-pool.js";
+
+const ACCOUNT_INFO_URL = "https://www.tiktok.com/passport/web/account/info/";
+const UA =
+  "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36 Edg/155.0.0.0";
+const DEFAULT_TIMEOUT_MS = 20 * 1000;
+const DEFAULT_PACING_MS = 250;
+
+/** proxyHint 归一化：纯数字 → http://127.0.0.1:<port>；http(s):// 开头 → 原样；其余忽略 */
+function normalizeProxy(hint) {
+  const s = String(hint || "").trim();
+  if (!s) return null;
+  if (/^\d{2,5}$/.test(s)) return `http://127.0.0.1:${s}`;
+  if (/^https?:\/\//.test(s)) return s;
+  return null;
+}
+
+/**
+ * 无浏览器探测单个账号登录态
+ * @param {Array} cookies 池内 cookies 数组 [{name,value,domain?...}]
+ * @param {object} opts { proxy?: string|null, timeoutMs?: number }
+ * @returns {Promise<{alive: boolean, username: ?string, expired: boolean, httpStatus: number, error: ?string, ms: number}>}
+ */
+export async function probeLogin(cookies, { proxy = null, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  const cookieHeader = (cookies || [])
+    .filter((c) => c && c.name && c.value != null)
+    .filter((c) => !c.domain || String(c.domain).includes("tiktok"))
+    .map((c) => `${c.name}=${c.value}`)
+    .join("; ");
+  const t0 = Date.now();
+  try {
+    const res = await request(ACCOUNT_INFO_URL, {
+      method: "GET",
+      headers: {
+        cookie: cookieHeader,
+        "user-agent": UA,
+        accept: "application/json",
+        "accept-language": "en-US,en;q=0.9",
+      },
+      ...(proxy ? { dispatcher: new ProxyAgent(proxy) } : {}),
+      headersTimeout: timeoutMs,
+      bodyTimeout: timeoutMs,
+    });
+    const body = await res.body.json().catch(() => null);
+    const ms = Date.now() - t0;
+    const d = (body && body.data) || null;
+    return {
+      httpStatus: res.status,
+      alive: !!d && !!(d.username || d.user_id || d.sec_user_id),
+      username: (d && d.username) || null,
+      expired: (d && d.name === "session_expired") || (body && body.error_code === 13),
+      error: body && !d ? JSON.stringify(body).slice(0, 120) : null,
+      ms,
+    };
+  } catch (e) {
+    return { httpStatus: 0, alive: false, username: null, expired: false, error: String(e).slice(0, 120), ms: Date.now() - t0 };
+  }
+}
+
+/**
+ * 批量巡检：默认探 pool+suspect（leased 由消费方验证兜底、retired 不探测），指定 ids 精确取。
+ * 结果逐号 recordHealth 落账（dead 且在池 → suspect）；串行 + pacing，对 TikTok 友好。
+ * @param {object} opts { ids?: string[], proxy?: string|null(缺省用各号 proxyHint), pacingMs?, probeFn?(测试注入) }
+ * @returns {Promise<{checked: number, alive: number, dead: number, error: number, migrated: number, results: Array}>}
+ */
+export async function checkPoolAccounts(opts = {}) {
+  const { ids, proxy = null, pacingMs = DEFAULT_PACING_MS, probeFn = probeLogin } = opts;
+  const targets = healthTargets({ ids });
+  const summary = { checked: 0, alive: 0, dead: 0, error: 0, migrated: 0, results: [] };
+  for (let i = 0; i < targets.length; i++) {
+    const t = targets[i];
+    const exit = proxy || normalizeProxy(t.proxyHint);
+    const r = await probeFn(t.cookies, { proxy: exit });
+    const ok = r.error ? "error" : r.alive ? "alive" : "dead";
+    let rec = { username: t.username, health: ok, status: t.status, ms: r.ms };
+    try {
+      const applied = recordHealth({
+        id: t.id,
+        ok,
+        detail: r.error ? `探测异常 ${r.error}` : r.alive ? "" : r.expired ? "会话过期" : "未登录",
+      });
+      rec.status = applied.status;
+      if (applied.migrated) rec.migrated = true;
+    } catch (e) {
+      rec.error = e.message;
+    }
+    summary[ok]++;
+    summary.checked++;
+    if (rec.migrated) summary.migrated++;
+    summary.results.push(rec);
+    if (i < targets.length - 1 && pacingMs > 0) {
+      await new Promise((res) => setTimeout(res, pacingMs));
+    }
+  }
+  return summary;
+}

package/src/watch/login-pool.js

@@ -229,6 +229,7 @@ function publicView(acc) {
     lastImportFrom: acc.lastImportFrom || null,
     // 最近使用镜像（脱离 lease 独立存在，释放/回收后仍可见）
     lastHealthAt: acc.lastHealthAt || null,
+    lastHealth: acc.lastHealth || null,
     lastBusinessOkAt: acc.lastBusinessOkAt || null,
     lastUsedAt: acc.lastUsedAt || null,
     lease,
@@ -723,7 +724,10 @@ export function importAccount({ userId, port, username, cookies, note, proxyHint
 
   const dup = _accounts.find((a) => a.username === username && a.status !== "retired");
   if (dup) {
-    // 幂等：不覆盖 cookies、不动租约
+    // 幂等：不覆盖 cookies、不动租约；仅补写来源元数据，
+    // 否则已在池的号永远不带 lastImportFrom，节点热路径匹配不上会每次启动全量重导
+    dup.lastImportFrom = importMeta(userId, portNum, t);
+    scheduleSave();
     return { account: publicView(dup), dedup: true };
   }
   if (_accounts.length >= POOL_MAX) throw new Error(`池已满（上限 ${POOL_MAX}）`);
@@ -737,7 +741,7 @@ export function importAccount({ userId, port, username, cookies, note, proxyHint
     status: "pool",
     lease: null,
     useCount: 0, // 导入是登记不是消费；次数只在 acquire/assign 时 +1
-    lastImportFrom: { userId, port: portNum, at: t }, // 来源元数据（供节点热路径跳过 + 账号中心展示），非租约
+    lastImportFrom: importMeta(userId, portNum, t),
     history: [],
     createdAt: t,
     updatedAt: t,
@@ -748,6 +752,111 @@ export function importAccount({ userId, port, username, cookies, note, proxyHint
   return { account: fullView(acc), dedup: false };
 }
 
+/** 来源元数据（供节点热路径跳过 + 账号中心展示），非租约；新入池与幂等补写共用此定义 */
+const importMeta = (userId, portNum, at) => ({ userId, port: portNum, at });
+
+/**
+ * 重登录：按 username 覆盖刷新 cookies（区别于 import 的「已在池即幂等跳过」）。
+ * 守卫：目标必须已在池（新号走 import/add）；使用中（leased）拒绝——先等节点换号/手动释放；
+ *   retired 重登录=复活回 pool；suspect 刷新后回 pool；空闲则原地刷新。
+ * username 必须来自 passport 活体验证（调用方已验，且须与目标一致——身份不符由调用方拦截），
+ * cookies 必须非空。
+ */
+export function reloginAccount({ username, cookies, userId, note } = {}) {
+  ensureLoaded();
+  reapExpiredLeases();
+  if (!username) throw new Error("username 必填（重登录目标）");
+  if (!userId) throw new Error("userId 必填（操作来源）");
+  const norm = normalizeCookies(cookies);
+  if (!norm) throw new Error("cookies 必须是非空数组，且每项含 name/value");
+  const acc = _accounts.find((a) => a.username === username);
+  if (!acc) throw new Error(`账号 ${username} 不在池中（重登录仅针对已有账号，新号走 import/add）`);
+  if (acc.status === "leased") {
+    const w = acc.lease;
+    throw new Error(
+      `账号 ${username} 使用中（${w?.userId || "?"}${w?.port ? ":" + w.port : ""}），先释放再重登录`,
+    );
+  }
+  const revived = acc.status === "retired";
+  const wasSuspect = acc.status === "suspect";
+  acc.cookies = norm;
+  acc.status = "pool";
+  acc.updatedAt = now();
+  pushHistory(
+    acc,
+    "relogin",
+    `${revived ? "重登录复活（已停用→池）" : wasSuspect ? "重登录（疑似→池）" : "重登录刷新"} · ${userId}${note ? ` · ${String(note).slice(0, 80)}` : ""}`,
+  );
+  scheduleSave();
+  return { account: publicView(acc), revived, wasSuspect };
+}
+
+/**
+ * 巡检目标：默认取 pool+suspect（leased 由消费方验证兜底、retired 不探测）；
+ * 指定 ids 时按 id 精确取（仍排除 retired）。返回含明文 cookies，仅限服务端进程内使用。
+ */
+export function healthTargets({ ids } = {}) {
+  ensureLoaded();
+  reapExpiredLeases();
+  const idSet = Array.isArray(ids) && ids.length ? new Set(ids) : null;
+  return _accounts
+    .filter((a) => a.status !== "retired")
+    .filter((a) => (idSet ? idSet.has(a.id) : a.status === "pool" || a.status === "suspect"))
+    .map((a) => ({
+      id: a.id,
+      username: a.username,
+      status: a.status,
+      proxyHint: a.proxyHint || "",
+      cookies: a.cookies,
+    }));
+}
+
+/**
+ * 巡检结果落账：lastHealthAt + lastHealth('alive'|'dead'|'error')。
+ * dead 且在池 → 迁移 suspect（业务不再自动取到死号）；alive 不写 history（避免刷屏，
+ * HISTORY_MAX 只有 20 条）；dead/error 才记 history。leased/retired 仅记录不迁移状态。
+ */
+export function recordHealth({ id, ok, detail } = {}) {
+  ensureLoaded();
+  const acc = _accounts.find((x) => x.id === id);
+  if (!acc) throw new Error(`账号不存在: ${id}`);
+  acc.lastHealthAt = now();
+  acc.lastHealth = ok; // 'alive' | 'dead' | 'error'
+  let migrated = false;
+  if (ok === "dead" && acc.status === "pool") {
+    acc.status = "suspect";
+    migrated = true;
+  }
+  if (ok !== "alive" || migrated) {
+    pushHistory(
+      acc,
+      "health",
+      `${ok}${detail ? ` · ${String(detail).slice(0, 80)}` : ""}${migrated ? " · pool→suspect" : ""}`,
+    );
+  }
+  scheduleSave();
+  return { username: acc.username, status: acc.status, migrated };
+}
+
+/**
+ * 重登录预备：返回目标账号明文 cookies（relogin 命令注入旧登录态用）。
+ * 守卫与 reloginAccount 一致：必须在池、使用中拒绝。
+ */
+export function prepareRelogin({ username } = {}) {
+  ensureLoaded();
+  reapExpiredLeases();
+  if (!username) throw new Error("username 必填");
+  const acc = _accounts.find((a) => a.username === username);
+  if (!acc) throw new Error(`账号 ${username} 不在池中`);
+  if (acc.status === "leased") {
+    const w = acc.lease;
+    throw new Error(
+      `账号 ${username} 使用中（${w?.userId || "?"}${w?.port ? ":" + w.port : ""}），先释放再重登录`,
+    );
+  }
+  return { account: fullView(acc) };
+}
+
 /** 内部：注入账号（测试/迁移工具用，跳过命令队列直接改状态） */
 export function _accountsInternal() {
   ensureLoaded();

package/src/watch/public/app.js

@@ -6044,7 +6044,14 @@ function renderProxySection(c, userId) {
   if (wdSubsConfigured(userId).length > 0) {
     return renderSubsOverview(c, userId, [], []);
   }
-  return renderProxyLegacy(c, userId);
+  var legacy = renderProxyLegacy(c, userId);
+  if (legacy) return legacy;
+  // 新节点引导（2026-10-28）：无通道 + 未配置订阅 + daemon 未跑过 clash 时，原逻辑返回 ""，
+  // 后台看不到任何订阅配置入口——而 proxySettings[userId] 条目只有配置动作才会创建
+  // （注册/心跳从不建，订阅分配器对无条目直接 return null），构成死环（F-11/IB-1 都踩过）。
+  // 渲染最小引导行：配置弹窗对空条目天然兼容（手动列表 / 切自动分配均可用），
+  // 建条目后客户端下个心跳拿到订阅并自动拉起 mihomo，本区块随之变为正常视图。
+  return renderSubsBootstrap(userId);
 }
 
 /** 兼容旧版：仅主控制端（legacy clashHealth） */
@@ -6061,6 +6068,27 @@ function renderProxyLegacy(c, userId) {
   );
 }
 
+/** 新节点引导行：订阅完全未配置且 daemon 无 clash 数据时，仍保留配置入口（打破 UI 死环） */
+function renderSubsBootstrap(userId) {
+  return styled(
+    "div",
+    "margin-top:6px;padding:6px 10px;background:#111;border-radius:6px;display:flex;align-items:center;gap:8px;font-size:12px;flex-wrap:wrap",
+    styled("span", "color:#888", "🛜 订阅配置:") +
+      styled("span", "color:#6b7280", "未配置（保存后下个心跳自动下发并拉起 mihomo）") +
+      tag(
+        "button",
+        {
+          onclick: "wdShowProxyModal('" + esc(userId) + "')",
+          style:
+            "padding:2px 8px;font-size:11px;background:#333;color:#fbbf24;" +
+            "border:1px solid #444;border-radius:3px;cursor:pointer",
+          title: "配置该客户端的代理订阅地址（保存后自动热应用，无需重启）",
+        },
+        "配置 ⚙️",
+      ),
+  );
+}
+
 /** 外部代理通道（Verge 等非内置实例）：节点行 + 节点列表 + 自身订阅摘要 */
 function renderExternalChannel(ch, userId, withConfig) {
   if (!ch || !ch.node) return "";

package/src/watch/server.js

@@ -20,7 +20,10 @@ import {
   takeAccount,
   acquireAccount,
   importAccount,
+  reloginAccount,
+  prepareRelogin,
 } from "./login-pool.js";
+import { checkPoolAccounts } from "./login-health.js";
 
 const __filename = fileURLToPath(import.meta.url);
 
@@ -643,37 +646,52 @@ function serveLoginPoolPage(res) {
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>账号中心 · 登录池</title>
 <style>
-  body { font-family: system-ui, sans-serif; margin: 20px; background: #f7f8fa; color: #1f2329; }
-  h1 { font-size: 20px; }
-  .bar { margin: 12px 0; display: flex; gap: 8px; align-items: center; flex-wrap: wrap; }
-  button { padding: 4px 10px; border: 1px solid #d0d3d9; border-radius: 6px; background: #fff; cursor: pointer; font-size: 12px; }
-  button:hover { background: #f0f2f5; }
-  button:disabled { color: #c0c4cc; cursor: not-allowed; background: #fafafa; }
-  table { border-collapse: collapse; width: 100%; background: #fff; }
-  th, td { border: 1px solid #e5e7eb; padding: 6px 10px; font-size: 13px; text-align: left; vertical-align: top; }
-  th { background: #f2f3f5; white-space: nowrap; }
-  .badge { display: inline-block; padding: 1px 8px; border-radius: 10px; font-size: 12px; font-weight: 600; }
+  body { font-family: system-ui, sans-serif; margin: 0; background: #f3f4f6; color: #1f2329; }
+  .wrap { max-width: 1280px; margin: 0 auto; padding: 22px 24px 48px; }
+  h1 { font-size: 20px; margin: 0 0 2px; }
+  .sub { color: #9ca3af; font-size: 12px; margin-bottom: 14px; }
+  .bar { display: flex; gap: 8px; align-items: center; flex-wrap: wrap; margin-bottom: 12px; }
+  button { padding: 6px 14px; border: 1px solid #d0d3d9; border-radius: 8px; background: #fff; cursor: pointer; font-size: 13px; transition: all .15s; }
+  button:hover { background: #f0f2f5; border-color: #b8bdc7; }
+  button:disabled { color: #9ca3af; cursor: not-allowed; background: #f5f5f5; border-color: #e5e7eb; }
+  button.primary { background: #2563eb; border-color: #2563eb; color: #fff; font-weight: 600; }
+  button.primary:hover:not(:disabled) { background: #1d4ed8; }
+  .chips { display: inline-flex; gap: 6px; margin-left: auto; flex-wrap: wrap; }
+  .chip { background: #fff; border: 1px solid #e5e7eb; border-radius: 999px; padding: 3px 12px; font-size: 12px; color: #6b7280; }
+  .chip b { color: #1f2329; }
+  .card { background: #fff; border: 1px solid #e5e7eb; border-radius: 12px; overflow: auto; box-shadow: 0 1px 2px rgba(0,0,0,.04); }
+  table { border-collapse: collapse; width: 100%; }
+  th, td { padding: 9px 12px; font-size: 13px; text-align: left; vertical-align: top; border-bottom: 1px solid #f0f1f3; }
+  thead th { background: #f9fafb; color: #6b7280; font-weight: 600; white-space: nowrap; border-bottom: 1px solid #e5e7eb; }
+  tbody tr:hover { background: #f8faff; }
+  tbody tr:last-child td { border-bottom: none; }
+  .badge { display: inline-block; padding: 1px 9px; border-radius: 999px; font-size: 12px; font-weight: 600; }
   .b-leased { background: #dbeafe; color: #2563eb; }
   .b-pool { background: #dcfce7; color: #16a34a; }
   .b-suspect { background: #fef3c7; color: #d97706; }
   .b-retired { background: #e5e7eb; color: #6b7280; }
   .muted { color: #9ca3af; font-size: 12px; }
   .warn { color: #dc2626; }
-  #msg { margin: 0 8px; }
+  #msg { font-size: 13px; color: #16a34a; }
+  .spin { display: inline-block; width: 12px; height: 12px; border: 2px solid #cbd5e1; border-top-color: #2563eb; border-radius: 50%; animation: spin .8s linear infinite; vertical-align: -2px; margin-right: 6px; }
+  @keyframes spin { to { transform: rotate(360deg); } }
   details { margin-top: 2px; }
   summary { cursor: pointer; }
+  td button { padding: 3px 10px; font-size: 12px; border-radius: 6px; margin: 1px 0; }
 </style>
 </head>
 <body>
+<div class="wrap">
 <h1>账号中心 · 登录池</h1>
+<div class="sub">登录态统一存放与租借：业务取号注入 / 节点启动导入 / 巡检与重登录</div>
 <div class="bar">
   <button onclick="load()">刷新</button>
-  <label><input type="checkbox" id="auto" checked> 自动刷新(15s)</label>
-  <button onclick="addDlg()">入池</button>
-  <button onclick="takeDlg()" title="调试：走命令队列的 take（watchdog 注入流）">模拟取号</button>
+  <button onclick="addCmdDlg()" title="生成一条命令，在任意装有 tt-help 的机器执行：弹出 Edge 人工登录 TikTok 后自动入池">新增账号</button>
+  <button id="btn-check" class="primary" onclick="checkNow()" title="逐号 HTTP 探测登录态（空闲+疑似），死号自动标疑似">批量检测</button>
   <span id="msg"></span>
+  <span class="chips" id="stats"></span>
 </div>
-<div id="content">加载中…</div>
+<div id="content" class="card">加载中…</div>
 <script>
 const esc = s => String(s ?? '').replace(/[&<>"']/g, c => ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;','\\'':'&#39;'}[c]));
 const fmt = t => t ? new Date(t).toLocaleString('zh-CN', {hour12:false}) : '—';
@@ -715,6 +733,10 @@ async function load() {
       const who = l
         ? esc(l.userId) + (l.port ? ':' + esc(l.port) : '') + (l.appName ? ' <span class="muted">· ' + esc(l.appName) + '</span>' : '')
         : '<span class="muted">—</span>';
+      const health = a.lastHealth === 'alive' ? '<span style="color:#16a34a">✓</span>'
+        : a.lastHealth === 'dead' ? '<span class="warn">✗</span>'
+        : a.lastHealth === 'error' ? '<span class="muted">?</span>'
+        : '<span class="muted">—</span>';
       const meta = [];
       if (a.note) meta.push(esc(a.note));
       if (a.proxyHint) meta.push('出口 ' + esc(a.proxyHint));
@@ -728,6 +750,7 @@ async function load() {
         '<td title="最后使用: ' + fmt(a.lastUsedAt) + '\\n最后出活: ' + biz + '">' + rel(a.lastUsedAt) + '</td>' +
         '<td>' + (a.useCount || 0) + '</td>' +
         '<td' + (expired ? ' class="warn"' : '') + ' title="sessionid 到期: ' + fmt(a.sessionExpiresAt) + '（cookie 承诺寿命，非实时有效性）">' + day(a.sessionExpiresAt) + (expired ? '（已过）' : '') + '</td>' +
+        '<td title="上次检测: ' + fmt(a.lastHealthAt) + (a.lastHealth === 'dead' ? '\\n死号已标疑似，可重登录复活' : a.lastHealth === 'alive' ? '\\n登录态存活' : '') + '">' + health + ' <span class="muted">' + rel(a.lastHealthAt) + '</span></td>' +
         '<td>' +
           (a.status === 'leased' ? '<button onclick="releaseDlg(\\'' + a.id + '\\',\\'' + esc(a.username) + '\\')">释放</button> ' : '') +
           (a.status === 'pool' ? '<button onclick="assignDlg(\\'' + a.id + '\\',\\'' + esc(a.username) + '\\')" title="手动指派给节点端口（watchdog 注入流）">指派</button> ' : '') +
@@ -735,7 +758,7 @@ async function load() {
           (a.status === 'retired' ? '<button onclick="enable(\\'' + a.id + '\\',\\'' + esc(a.username) + '\\',false)">启用</button> ' : '') +
           (a.status !== 'retired' ? '<button onclick="disable(\\'' + a.id + '\\',\\'' + esc(a.username) + '\\',' + (a.status === 'leased') + ')">停用</button> ' : '') +
           (a.status === 'retired' ? '<button onclick="del(\\'' + a.id + '\\')">删除</button> ' : '') +
-          '<button disabled title="开发中：引导重新登录并更新池内登录态">重登录</button>' +
+          '<button onclick="reloginDlg(\\'' + esc(a.username) + '\\')" title="生成重登录命令：本机执行后旧登录态自动复活（或人工登录），验证身份后覆盖刷新池内 cookies">重登录</button>' +
         '</td>' +
         '<td><details data-acc="' + esc(a.id) + '" ' + (openHist.has(a.id) ? 'open' : '') + ' ontoggle="onHistToggle(this)"><summary class="muted">' + (a.history ? a.history.length : 0) + ' 条</summary>' +
           (a.history || []).slice(0, 8).map(h => '<div class="muted">' + fmt(h.at) + ' ' + esc(h.event) + ' ' + esc(h.detail) + '</div>').join('') + '</details></td>' +
@@ -743,27 +766,70 @@ async function load() {
     }).join('');
     const nLeased = j.accounts.filter(a => a.status === 'leased').length;
     const nFree = j.accounts.filter(a => a.status === 'pool').length;
+    const nSus = j.accounts.filter(a => a.status === 'suspect').length;
+    const nRet = j.accounts.filter(a => a.status === 'retired').length;
+    document.getElementById('stats').innerHTML =
+      '<span class="chip">共 <b>' + j.total + '</b></span>' +
+      '<span class="chip">使用中 <b>' + nLeased + '</b></span>' +
+      '<span class="chip">空闲 <b>' + nFree + '</b></span>' +
+      '<span class="chip">疑似 <b>' + nSus + '</b></span>' +
+      '<span class="chip">已停用 <b>' + nRet + '</b></span>';
     document.getElementById('content').innerHTML =
-      '<table><tr><th>#</th><th>账号</th><th>状态</th><th>使用者</th><th>最近使用</th><th>次数</th><th>有效期</th><th>操作</th><th>历史</th></tr>' + rows + '</table>' +
-      '<p class="muted">共 ' + j.total + ' 个 · 使用中 ' + nLeased + ' · 空闲 ' + nFree + ' · 排序：使用中 → 空闲 → 疑似 → 已停用 · 有效期 = sessionid cookie 承诺寿命（非实时有效性，真实判据 = 业务出活）· cookies 明文不出服务端</p>';
+      '<table><tr><th>#</th><th>账号</th><th>状态</th><th>使用者</th><th>最近使用</th><th>次数</th><th>有效期</th><th>检测</th><th>操作</th><th>历史</th></tr>' + rows + '</table>' +
+      '<div style="padding: 10px 14px;"><p class="muted" style="margin:0">排序：使用中 → 空闲 → 疑似 → 已停用 · 每 15 秒自动刷新 · 有效期 = sessionid cookie 承诺寿命 · 检测 = 登录态探测（真实判据 = 业务出活）· cookies 明文不出服务端</p></div>';
   } catch (e) { msg('加载失败: ' + e.message, true); }
 }
-async function addDlg() {
-  const username = prompt('账号名(uniqueId，可留空自动从 cookies 提取):'); if (username === null) return;
-  const cookiesRaw = prompt('cookies JSON 数组（可直接粘 export.mjs 导出的整个 JSON，会自动取 cookies 字段）:'); if (!cookiesRaw) return;
-  try {
-    let cookies = JSON.parse(cookiesRaw);
-    if (cookies && !Array.isArray(cookies) && Array.isArray(cookies.cookies)) cookies = cookies.cookies;
-    const note = prompt('备注(可空，如来源 F-11:9223):');
-    await api('/api/login-pool/add', { username: username || undefined, cookies, note: note || undefined });
-    msg('入池成功'); load();
-  } catch (e) { msg('入池失败: ' + e.message, true); }
+function copyCmd(cmd) {
+  if (navigator.clipboard) navigator.clipboard.writeText(cmd).catch(() => {});
+  prompt('复制命令（在装有 tt-help 的机器上执行）:', cmd);
 }
-async function takeDlg() {
-  const userId = prompt('节点 userId（如 F-11）:'); if (!userId) return;
-  const port = prompt('端口:'); if (!port) return;
-  try { const j = await api('/api/login-pool/take', { userId, port: Number(port) }); msg('已取号: ' + j.account.username); load(); }
-  catch (e) { msg('取号失败: ' + e.message, true); }
+function addCmdDlg() {
+  copyCmd('tt-help login-pool add --server ' + location.origin);
+  msg('命令已生成：执行成功后点刷新查看新号');
+}
+function reloginDlg(name) {
+  copyCmd('tt-help login-pool relogin ' + name + ' --server ' + location.origin);
+  msg('重登录命令已生成（' + name + '）：执行成功后点刷新');
+}
+function setProgress(t) {
+  const el = document.getElementById('msg');
+  el.innerHTML = '<span class="spin"></span>' + esc(t);
+  el.style.color = '#2563eb';
+}
+let checking = false;
+async function checkNow() {
+  if (checking) return;
+  let targets;
+  try {
+    const j = await api('/api/login-pool');
+    targets = j.accounts.filter(a => a.status === 'pool' || a.status === 'suspect');
+  } catch (e) { msg('加载失败: ' + e.message, true); return; }
+  if (!targets.length) { msg('没有待检测账号（空闲+疑似为空，使用中的由业务自验）'); return; }
+  if (!confirm('批量检测 ' + targets.length + ' 个账号的登录态？（死号自动标疑似）')) return;
+  checking = true;
+  const btn = document.getElementById('btn-check');
+  btn.disabled = true; btn.textContent = '检测中…';
+  let done = 0, alive = 0, dead = 0, err = 0, mig = 0;
+  try {
+    for (const a of targets) {
+      setProgress('巡检中 ' + (done + 1) + '/' + targets.length + ' · 正在检测 @' + a.username + ' …');
+      let health = 'error';
+      try {
+        const r = await api('/api/login-pool/check', { ids: [a.id] });
+        const x = r.results && r.results[0];
+        if (x) { health = x.health; if (x.migrated) mig++; }
+      } catch (e) { health = 'error'; }
+      if (health === 'alive') alive++; else if (health === 'dead') dead++; else err++;
+      done++;
+      setProgress('巡检中 ' + done + '/' + targets.length + ' · 活 ' + alive + ' / 死 ' + dead + ' / 异常 ' + err);
+      load();
+      if (done < targets.length) await new Promise(r => setTimeout(r, 300));
+    }
+    msg('巡检完成: 探测 ' + done + '，活 ' + alive + ' / 死 ' + dead + ' / 异常 ' + err + (mig ? '，死号标疑似 ' + mig + ' 个' : ''));
+  } finally {
+    checking = false;
+    btn.disabled = false; btn.textContent = '批量检测';
+  }
 }
 async function assignDlg(id, name) {
   const userId = prompt('指派给节点 userId（如 F-11）:'); if (!userId) return;
@@ -795,8 +861,9 @@ async function del(id) {
   catch (e) { msg('失败: ' + e.message, true); }
 }
 load();
-setInterval(() => { if (document.getElementById('auto').checked) load(); }, 15000);
+setInterval(() => load(), 15000);
 </script>
+</div>
 </body>
 </html>`;
   res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
@@ -1616,6 +1683,28 @@ export function startWatchServer(
             );
             sendJSON(res, 200, { ok: true, dedup: imp.dedup, account: ret });
             return;
+          } else if (lpAction === "relogin") {
+            // 重登录覆盖刷新（以号为主键）：目标必须已在池；使用中拒绝；retired 复活、suspect 回池
+            const rel = reloginAccount(body);
+            ret = rel.account;
+            console.error(
+              `[登录池 ${ts}] RELOGIN: ${ret.username} ← ${body.userId}${rel.revived ? "（复活）" : rel.wasSuspect ? "（疑似→池）" : ""} (${ret.cookieCount} 条 cookies)`,
+            );
+            sendJSON(res, 200, { ok: true, revived: rel.revived, wasSuspect: rel.wasSuspect, account: ret });
+            return;
+          } else if (lpAction === "prepare") {
+            // 重登录预备：返回目标账号明文 cookies（relogin 命令注入旧登录态用；与 acquire 同级信任）
+            const prep = prepareRelogin(body);
+            sendJSON(res, 200, { ok: true, account: prep.account });
+            return;
+          } else if (lpAction === "check") {
+            // 巡检：无浏览器纯 HTTP 探测登录态（默认 pool+suspect，指定 ids 精确取）
+            const sum = await checkPoolAccounts({ ids: body.ids, proxy: body.proxy });
+            console.error(
+              `[登录池 ${ts}] CHECK: 探测 ${sum.checked}，alive ${sum.alive} / dead ${sum.dead} / error ${sum.error}，migrated ${sum.migrated}`,
+            );
+            sendJSON(res, 200, { ok: true, ...sum });
+            return;
           } else if (lpAction === "assign") {
             ret = assignAccount(body);
             console.error(`[登录池 ${ts}] ASSIGN: ${ret.username} → ${body.userId}:${body.port}`);