diff --git a/dev_test_scripts/debug/debug_cloud_decrypt_audit.js b/dev_test_scripts/debug/debug_cloud_decrypt_audit.js
new file mode 100644
index 0000000..e28de11
--- /dev/null
+++ b/dev_test_scripts/debug/debug_cloud_decrypt_audit.js
@@ -0,0 +1,53 @@
+// 调试脚本：逐行审计 cloud ecs/vas 加密字段，区分"明文原本为空"与"解密失败"
+// 用法：node dev_test_scripts/debug/debug_cloud_decrypt_audit.js
+const crypto = require('crypto')
+const fs = require('fs')
+const path = require('path')
+const os = require('os')
+
+// 与 index.js 相同的凭据加载逻辑
+const userProfile = process.env.USERPROFILE || process.env.HOME || os.homedir()
+const credsPath = path.join(userProfile, 'Toolbox_local_creds.env.local')
+if (fs.existsSync(credsPath)) {
+  fs.readFileSync(credsPath, 'utf-8').split(/\r?\n/).forEach(line => {
+    const t = line.trim()
+    if (!t || t.startsWith('#')) return
+    const i = t.indexOf('=')
+    if (i <= 0) return
+    const k = t.slice(0, i).trim()
+    const v = t.slice(i + 1).trim()
+    if (k && !Object.prototype.hasOwnProperty.call(process.env, k)) process.env[k] = v
+  })
+  console.log('creds loaded from', credsPath)
+} else {
+  console.log('WARN: creds file not found')
+}
+
+const { db } = require('../../src/server/db')
+const cfg = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'config', 'cloud.json'), 'utf-8'))
+const saltStr = String(cfg.machine_salt || '')
+const passphrase = process.env.CLOUD_PASSPHRASE || process.env.SYSTEM_AUTH_PASS_93220 || ''
+console.log('passphrase present:', !!passphrase)
+const key = crypto.scryptSync(passphrase + saltStr, Buffer.from(saltStr || 'default', 'utf-8'), 32)
+
+const audit = (table, ec, ivc, tagc) => {
+  const rows = db.prepare(`SELECT id, ${ec}, ${ivc}, ${tagc} FROM ${table}`).all()
+  let empty = 0
+  let fail = 0
+  let ok = 0
+  for (const r of rows) {
+    if (!r[ec] || !r[ivc] || !r[tagc]) continue
+    try {
+      const d = crypto.createDecipheriv('aes-256-gcm', key, r[ivc])
+      d.setAuthTag(r[tagc])
+      const pt = Buffer.concat([d.update(r[ec]), d.final()]).toString('utf-8')
+      if (pt === '') { empty++; console.log(`${table} id=${r.id}: 解密成功但明文为空（原本就没填）`) } else ok++
+    } catch (e) { fail++; console.log(`${table} id=${r.id}: 解密失败 ${String(e.message)}`) }
+  }
+  console.log(`${table}: ok_non_empty=${ok} empty_plaintext=${empty} auth_fail=${fail}`)
+}
+
+audit('cloud_operators', 'login_password_enc', 'login_password_iv', 'login_password_tag')
+audit('cloud_ecs', 'rdp_password_enc', 'rdp_password_iv', 'rdp_password_tag')
+audit('cloud_vas', 'access_text_enc', 'access_text_iv', 'access_text_tag')
+console.log('audit done')
diff --git a/dev_test_scripts/debug/debug_cloud_load_timing.js b/dev_test_scripts/debug/debug_cloud_load_timing.js
new file mode 100644
index 0000000..ea9e36b
--- /dev/null
+++ b/dev_test_scripts/debug/debug_cloud_load_timing.js
@@ -0,0 +1,80 @@
+// 调试脚本：测量 cloud 工具初始化各接口耗时 + 拉取前端加载日志，定位刷新"顿一下"的卡点
+// 用法：node dev_test_scripts/debug/debug_cloud_load_timing.js
+const BASE = process.env.CLOUD_TIMING_BASE || 'http://localhost:8976'
+
+const getCookieFromGo = async () => {
+  const r1 = await fetch(`${BASE}/go?systemId=Tools-cloud`, { redirect: 'manual' })
+  const loc = r1.headers.get('location')
+  if (!loc) throw new Error('no location from /go, status=' + r1.status)
+  const r2 = await fetch(new URL(loc, BASE).toString(), { redirect: 'manual' })
+  const setc = String(r2.headers.get('set-cookie') || '')
+  if (!/cloud_gate=1/.test(setc)) throw new Error('no cloud_gate cookie, status=' + r2.status + ' set-cookie=' + setc)
+  return 'cloud_gate=1'
+}
+
+const timeIt = async (name, fn) => {
+  const t0 = Date.now()
+  try {
+    const r = await fn()
+    await r.text()
+    return { name, ms: Date.now() - t0, status: r.status }
+  } catch (e) {
+    return { name, ms: Date.now() - t0, error: String((e && e.message) || e) }
+  }
+}
+
+const main = async () => {
+  const cookie = await getCookieFromGo()
+  const get = url => fetch(`${BASE}${url}`, { headers: { Cookie: cookie }, cache: 'no-store' })
+  const post = url => fetch(`${BASE}${url}`, { method: 'POST', headers: { Cookie: cookie, 'Content-Type': 'application/json' }, body: JSON.stringify({ source: 'cloud', action: 'timing_probe' }) })
+
+  // 1) 拉取前端真实加载日志（用户刷新时上报的 start/done/error 序列）
+  try {
+    const logs = await (await get('/api/debug/logs?limit=150&channel=cloud')).json()
+    console.log('=== 最近 cloud 前端事件（旧→新） ===')
+    ;(logs.lines || []).forEach(l => {
+      const o = typeof l === 'string' ? (() => { try { return JSON.parse(l) } catch { return { raw: l } } })() : l
+      console.log(`${o.ts || o.time || o.t || ''} | ${o.action || o.type || o.event || ''} | count=${o.count != null ? o.count : ''} ${o.error ? 'err=' + String(o.error).slice(0, 80) : ''}`)
+    })
+  } catch (e) { console.log('读取 debug logs 失败:', e.message) }
+
+  // 2) 顺序测量各接口（2 轮）
+  const endpoints = [
+    ['GET  /api/cloud/operators', () => get('/api/cloud/operators')],
+    ['GET  /api/cloud/ecs', () => get('/api/cloud/ecs')],
+    ['GET  /api/cloud/vas', () => get('/api/cloud/vas')],
+    ['GET  /api/cloud/renew', () => get('/api/cloud/renew')],
+    ['GET  /api/cloud/notes', () => get('/api/cloud/notes')],
+    ['GET  /api/cloud/balance_alerts/status', () => get('/api/cloud/balance_alerts/status')],
+    ['POST /api/debug/event', () => post('/api/debug/event')],
+    ['GET  /api/flags', () => get('/api/flags')]
+  ]
+  for (let round = 1; round <= 2; round++) {
+    console.log(`=== 顺序测量 第${round}轮 ===`)
+    for (const [name, fn] of endpoints) {
+      const r = await timeIt(name, fn)
+      console.log(`${String(r.ms).padStart(5)}ms ${r.status || ''} ${r.error || ''}  ${name}`)
+    }
+  }
+
+  // 3) 模拟浏览器初始化并发突发（2 轮）
+  for (let round = 1; round <= 2; round++) {
+    console.log(`=== 并发突发 第${round}轮 ===`)
+    const t0 = Date.now()
+    const results = await Promise.all([
+      timeIt('POST boot', () => post('/api/debug/event')),
+      timeIt('POST ops_start', () => post('/api/debug/event')),
+      timeIt('GET  operators', () => get('/api/cloud/operators')),
+      timeIt('GET  ecs', () => get('/api/cloud/ecs')),
+      timeIt('GET  vas', () => get('/api/cloud/vas')),
+      timeIt('GET  renew', () => get('/api/cloud/renew')),
+      timeIt('GET  notes', () => get('/api/cloud/notes')),
+      timeIt('GET  balance_status', () => get('/api/cloud/balance_alerts/status')),
+      timeIt('GET  flags', () => get('/api/flags'))
+    ])
+    results.sort((a, b) => a.ms - b.ms).forEach(r => console.log(`${String(r.ms).padStart(5)}ms ${r.status || ''} ${r.error || ''}  ${r.name}`))
+    console.log(`突发总耗时: ${Date.now() - t0}ms`)
+  }
+}
+
+main().catch(e => { console.error('FATAL', e); process.exit(1) })
diff --git a/dev_test_scripts/debug/debug_cloud_regression.js b/dev_test_scripts/debug/debug_cloud_regression.js
new file mode 100644
index 0000000..fecadf8
--- /dev/null
+++ b/dev_test_scripts/debug/debug_cloud_regression.js
@@ -0,0 +1,46 @@
+// 调试脚本：cloud 重启后鉴权链路 + 解密数据完整性回归
+// 用法：node dev_test_scripts/debug/debug_cloud_regression.js
+const BASE = 'http://localhost:8976'
+
+const main = async () => {
+  const r1 = await fetch(BASE + '/go?systemId=Tools-cloud', { redirect: 'manual' })
+  console.log('entry:', r1.status, r1.headers.get('location') ? '(redirect ok)' : '(NO LOCATION)')
+  const r2 = await fetch(new URL(r1.headers.get('location'), BASE), { redirect: 'manual' })
+  const setc = String(r2.headers.get('set-cookie') || '')
+  console.log('index hop:', r2.status, /cloud_gate=1/.test(setc) ? '(cookie ok)' : '(NO COOKIE)')
+  const r3 = await fetch(BASE + '/tools/cloud/index.html', { headers: { Cookie: 'cloud_gate=1' } })
+  console.log('index.html:', r3.status)
+  const r4 = await fetch(BASE + '/tools/cloud/cloud.js', { headers: { Cookie: 'cloud_gate=1' } })
+  console.log('cloud.js:', r4.status)
+
+  const H = { Cookie: 'cloud_gate=1' }
+  const j = async u => (await fetch(BASE + u, { headers: H })).json()
+
+  const ops = await j('/api/cloud/operators')
+  const opsEnc = (ops.rows || []).filter(r => r.login_password_enc)
+  const opsDecOk = opsEnc.filter(r => String(r.login_password || '') !== '').length
+  console.log(`operators: ok=${ops.ok} rows=${(ops.rows || []).length} enc=${opsEnc.length} decrypted_non_empty=${opsDecOk}`)
+
+  const ecs = await j('/api/cloud/ecs')
+  const ecsEnc = (ecs.rows || []).filter(r => r.rdp_password_enc)
+  const ecsDecOk = ecsEnc.filter(r => String(r.rdp_password || '') !== '').length
+  console.log(`ecs: ok=${ecs.ok} rows=${(ecs.rows || []).length} enc=${ecsEnc.length} decrypted_non_empty=${ecsDecOk}`)
+
+  const vas = await j('/api/cloud/vas')
+  const vasEnc = (vas.rows || []).filter(r => r.access_text_enc)
+  const vasDecOk = vasEnc.filter(r => String(r.access_text || '') !== '').length
+  console.log(`vas: ok=${vas.ok} rows=${(vas.rows || []).length} enc=${vasEnc.length} decrypted_non_empty=${vasDecOk}`)
+
+  const rn = await j('/api/cloud/renew')
+  console.log(`renew: ok=${rn.ok} rows=${(rn.rows || []).length}`)
+  const nt = await j('/api/cloud/notes')
+  console.log(`notes: ok=${nt.ok} rows=${(nt.rows || []).length}`)
+  const bs = await j('/api/cloud/balance_alerts/status')
+  console.log(`balance status: ok=${bs.ok} proxied=${!!bs.proxied_to_automation} listener=${bs.data && bs.data.listener ? 'present' : 'n/a'}`)
+
+  const bad = (opsEnc.length !== opsDecOk) || (ecsEnc.length !== ecsDecOk) || (vasEnc.length !== vasDecOk)
+  console.log(bad ? 'REGRESSION FAIL: 存在解密为空的行' : 'REGRESSION PASS')
+  process.exit(bad ? 1 : 0)
+}
+
+main().catch(e => { console.error('ERR', e.message); process.exit(1) })
diff --git a/dev_test_scripts/debug/debug_cloud_timing_probe.js b/dev_test_scripts/debug/debug_cloud_timing_probe.js
new file mode 100644
index 0000000..ff14be4
--- /dev/null
+++ b/dev_test_scripts/debug/debug_cloud_timing_probe.js
@@ -0,0 +1,29 @@
+// 调试脚本：对指定 BASE 做 cloud 接口顺序+并发耗时复测
+// 用法：node dev_test_scripts/debug/debug_cloud_timing_probe.js [base_url]
+const BASE = process.argv[2] || 'http://localhost:8976'
+
+const main = async () => {
+  const r1 = await fetch(BASE + '/go?systemId=Tools-cloud', { redirect: 'manual' })
+  const loc = r1.headers.get('location')
+  if (!loc) throw new Error('no location, status=' + r1.status)
+  await fetch(new URL(loc, BASE), { redirect: 'manual' })
+  const H = { Cookie: 'cloud_gate=1' }
+  const t = async n => {
+    const t0 = Date.now()
+    const r = await fetch(BASE + n, { headers: H })
+    await r.text()
+    return `${String(Date.now() - t0).padStart(5)}ms ${r.status}  ${n}`
+  }
+  console.log('-- sequential --')
+  for (const u of ['/api/cloud/operators', '/api/cloud/ecs', '/api/cloud/vas', '/api/cloud/renew', '/api/cloud/notes', '/api/cloud/balance_alerts/status']) {
+    console.log(await t(u))
+  }
+  console.log('-- burst --')
+  const t0 = Date.now()
+  const urls = ['/api/cloud/operators', '/api/cloud/ecs', '/api/cloud/vas', '/api/cloud/renew', '/api/cloud/notes', '/api/cloud/balance_alerts/status', '/api/flags']
+  const rs = await Promise.all(urls.map(u => fetch(BASE + u, { headers: H }).then(async r => { await r.text(); return `${String(Date.now() - t0).padStart(5)}ms ${r.status}  ${u}` })))
+  rs.forEach(x => console.log(x))
+  console.log('burst total', Date.now() - t0, 'ms')
+}
+
+main().catch(e => { console.error('ERR', e.message); process.exit(1) })
diff --git a/public/tools/cloud/cloud.css b/public/tools/cloud/cloud.css
index 117a6c8..5a59000 100644
--- a/public/tools/cloud/cloud.css
+++ b/public/tools/cloud/cloud.css
@@ -44,6 +44,8 @@ h2 { margin: 12px 0 8px }
 .btn { background: var(--cloud-accent); color: #fff; border: none; border-radius: 8px; padding: 6px 12px; cursor: pointer }
 .btn:hover { background: #1f5a88 }
 .status { background: #fff8e1; border: 1px solid #ffe08a; color: #7a5900; border-radius: 8px; padding: 6px 10px; margin: 8px 0 }
+.cd-load-error { display: flex; align-items: center; gap: 12px; margin: 8px 0; padding: 8px 12px; border: 1px solid #e5a4a4; background: #fdecec; color: #a33; border-radius: 8px; font-size: 13px }
+body.theme-cloud[data-theme="dark"] .cd-load-error { background: #3a1d1d; border-color: #7a4444; color: #f0b9b9 }
 
 /* Note specific styles */
 .small-text-area { font-size: 10px !important; line-height: 1.2; font-family: inherit; }
@@ -316,6 +318,16 @@ body.theme-cloud .panel.card { position: relative; }
   color: white;
 }
 
+.action-btn.login {
+  border-color: #6f42c1;
+  color: #6f42c1;
+}
+
+.action-btn.login:hover {
+  background: #6f42c1;
+  color: white;
+}
+
 /* 列表操作列内按钮圆形化 */
 .grid td.col-actions .action-btn {
   width: 28px;
diff --git a/public/tools/cloud/cloud.js b/public/tools/cloud/cloud.js
index f940eae..d114b4e 100644
--- a/public/tools/cloud/cloud.js
+++ b/public/tools/cloud/cloud.js
@@ -1,9 +1,107 @@
 const out = () => document.getElementById('cd-output')
 const logLocal = msg => { const b = out(); if (!b) return; const t = window.fmtCNDateTime?fmtCNDateTime(new Date()):new Date().toLocaleString('zh-CN'); b.textContent = (b.textContent||'') + (b.textContent?"\n":"") + `${t} ${msg}`; b.scrollTop = b.scrollHeight }
 
+// 常用运营商登录页地址（按运营商名称关键字匹配；记录里已填 login_url 时优先）
+const QUICK_LOGIN_URL_TABLE = [
+  { match: /阿里/, url: 'https://account.aliyun.com/login/login.htm' },
+  { match: /racknerd/i, url: 'https://my.racknerd.com/clientarea.php' },
+  { match: /namecheap/i, url: 'https://www.namecheap.com/myaccount/login/' },
+  { match: /华为/, url: 'https://auth.huaweicloud.com/authui/login.html' }
+]
+const quickLoginUrlOf = name => {
+  const n = String(name || '')
+  for (const item of QUICK_LOGIN_URL_TABLE) {
+    if (item.match.test(n)) return item.url
+  }
+  return ''
+}
+
+// 一键登录：复制「账号<Tab>密码」到剪贴板，并打开运营商登录页
+async function quickLoginOperator(row) {
+  if (!row) return
+  const account = String(row.login_account || '').trim()
+  const password = String(row.login_password || '')
+  const loginUrl = String(row.login_url || '').trim() || quickLoginUrlOf(row.name)
+  if (!account) { showStatus('该运营商未填写登录账号'); hideStatusSoon(); return }
+  const text = `${account}\t${password}`
+  try {
+    await navigator.clipboard.writeText(text)
+  } catch {
+    try {
+      const ta = document.createElement('textarea')
+      ta.value = text
+      ta.style.position = 'fixed'
+      ta.style.opacity = '0'
+      document.body.appendChild(ta)
+      ta.select()
+      document.execCommand('copy')
+      document.body.removeChild(ta)
+    } catch { showStatus('复制失败，请手动复制'); hideStatusSoon(); return }
+  }
+  showStatus(`账号密码已复制到剪贴板，正在打开 ${row.name} 登录页…`)
+  if (loginUrl) {
+    window.open(loginUrl, '_blank', 'noopener')
+  } else {
+    showStatus(`账号密码已复制。未配置 ${row.name} 登录页地址，请手动打开登录页后再粘贴（账号框内 Ctrl+V）`)
+  }
+  hideStatusSoon()
+}
+
 const showStatus = s => { const el = document.getElementById('status'); if (!el) return; el.style.display=''; el.textContent=s }
 const hideStatusSoon = () => { const el = document.getElementById('status'); if (!el) return; setTimeout(()=>{ el.style.display='none' }, 1200) }
 
+// 健壮 JSON 加载器：识别 HTML 错误页（IIS 502/服务重启）与未登录，给出可读错误
+const fetchJson = async url => {
+  const r = await fetch(url, { credentials: 'include', cache: 'no-store' })
+  const text = await r.text()
+  let d = null
+  try { d = JSON.parse(text) } catch {}
+  if (d && typeof d === 'object') {
+    if (d.error === 'unauthorized') { const e = new Error('未登录或登录已过期，请从首页九宫格重新进入'); e.noRetry = true; throw e }
+    return d
+  }
+  const isHtml = /<!DOCTYPE|<html/i.test(String(text).slice(0, 200))
+  throw new Error(isHtml ? `收到HTML错误页(HTTP ${r.status}，服务可能正在重启)` : `非JSON响应(HTTP ${r.status})`)
+}
+// 失败自动重试（noRetry 错误不重试）
+const withRetry = async fn => {
+  const delays = [800, 2000, 4000]
+  let lastErr = null
+  for (let i = 0; i <= delays.length; i++) {
+    try { return await fn() } catch (e) {
+      lastErr = e
+      if (e && e.noRetry) throw e
+      if (i < delays.length) await new Promise(res => setTimeout(res, delays[i]))
+    }
+  }
+  throw lastErr
+}
+// 面板级失败横幅：不再静默空表，提供一键重试
+const clearPanelError = panelId => { const old = document.getElementById(`${panelId}-load-error`); if (old) old.remove() }
+const showPanelError = (panelId, label, err, retryFn) => {
+  const pn = document.getElementById(panelId)
+  if (!pn) return
+  clearPanelError(panelId)
+  const div = document.createElement('div')
+  div.id = `${panelId}-load-error`
+  div.className = 'cd-load-error'
+  const msg = document.createElement('span')
+  msg.textContent = `${label}加载失败：${String(err && err.message || err)}（已自动重试多次）`
+  const btn = document.createElement('button')
+  btn.type = 'button'
+  btn.className = 'modal-btn secondary'
+  btn.textContent = '重试'
+  btn.addEventListener('click', async () => {
+    btn.disabled = true
+    btn.textContent = '重试中…'
+    try { await retryFn() } finally { if (document.getElementById(div.id)) { btn.disabled = false; btn.textContent = '重试' } }
+  })
+  div.appendChild(msg)
+  div.appendChild(btn)
+  const anchor = pn.querySelector('.list-card') || pn.querySelector('table') || pn.firstChild
+  pn.insertBefore(div, anchor)
+}
+
 const loadFlags = async () => { try { const r = await fetch('/api/flags'); const d = await r.json(); if (d && d.debug && d.debug.cloud) { const sec = document.getElementById('cloud-debug'); if (sec) sec.style.display = '' } } catch {}
 }
 
@@ -69,6 +167,8 @@ let opMap = {}
 let opsCache = []
 let ecsCache = []
 let vasCache = []
+let renewCache = []
+let notesCache = []
 let editingOpId = null
 let editingEcsId = null
 let editingVasId = null
@@ -80,25 +180,25 @@ let balanceListState = { page: 1, pageSize: 10, keyword: '' }
 let balanceStatusCache = null
 let balanceAutoRefreshTimer = null
 let balanceScanTrace = []
-const renderOps = rows => { const body = document.getElementById('ops-body'); if (!body) return; body.innerHTML=''; rows.forEach(r => { opMap[r.id] = r.name || (`#${r.id}`); const tr = document.createElement('tr'); const td1=document.createElement('td'); td1.textContent=r.name; const td2=document.createElement('td'); td2.textContent=r.login_account||''; const td3=document.createElement('td'); td3.textContent=r.login_password||''; const td4=document.createElement('td'); td4.textContent=r.mobile||''; const td5=document.createElement('td'); td5.textContent=r.contact_person||''; const td6=createExpandableCell(r.remark||'', 'remark-text'); const td7=document.createElement('td'); td7.className='col-cert'; const badge=document.createElement('span'); badge.className = r.is_company_verified ? 'badge success' : 'badge'; badge.textContent = r.is_company_verified ? '已认证' : '未认证'; td7.appendChild(badge); const td8=document.createElement('td'); td8.className='col-actions'; const view=document.createElement('button'); view.className='action-btn view'; view.title='查看'; view.textContent='👁'; view.addEventListener('click', ()=>{ openModal('ops', 'view', r.id) }); const edit=document.createElement('button'); edit.className='action-btn edit'; edit.title='修改'; edit.textContent='✎'; edit.addEventListener('click', ()=>{ openModal('ops', 'edit', r.id) }); const del=document.createElement('button'); del.className='action-btn delete'; del.title='删除'; del.textContent='🗑'; del.addEventListener('click', async ()=>{ if (!window.confirm('确认删除运营商？')) return; await fetch(`/api/cloud/operators/${r.id}`, { method:'DELETE' }); showStatus('删除成功'); hideStatusSoon(); await loadOps() }); td8.appendChild(view); td8.appendChild(edit); td8.appendChild(del); tr.appendChild(td1); tr.appendChild(td2); tr.appendChild(td3); tr.appendChild(td4); tr.appendChild(td5); tr.appendChild(td6); tr.appendChild(td7); tr.appendChild(td8); body.appendChild(tr) }) }
+const renderOps = rows => { const body = document.getElementById('ops-body'); if (!body) return; body.innerHTML=''; rows.forEach(r => { opMap[r.id] = r.name || (`#${r.id}`); const tr = document.createElement('tr'); const td1=document.createElement('td'); td1.textContent=r.name; const td2=document.createElement('td'); td2.textContent=r.login_account||''; const td3=document.createElement('td'); td3.textContent=r.login_password||''; const td4=document.createElement('td'); td4.textContent=r.mobile||''; const td5=document.createElement('td'); td5.textContent=r.contact_person||''; const td6=createExpandableCell(r.remark||'', 'remark-text'); const td7=document.createElement('td'); td7.className='col-cert'; const badge=document.createElement('span'); badge.className = r.is_company_verified ? 'badge success' : 'badge'; badge.textContent = r.is_company_verified ? '已认证' : '未认证'; td7.appendChild(badge); const td8=document.createElement('td'); td8.className='col-actions'; const login=document.createElement('button'); login.className='action-btn login'; login.title='一键登录（复制账号密码并打开登录页）'; login.textContent='🔐'; login.addEventListener('click', (e)=>{ e.preventDefault(); e.stopPropagation(); quickLoginOperator({ id:r.id, name:r.name, login_account:r.login_account, login_password:r.login_password, login_url:r.login_url||'' }) }); const view=document.createElement('button'); view.className='action-btn view'; view.title='查看'; view.textContent='👁'; view.addEventListener('click', ()=>{ openModal('ops', 'view', r.id) }); const edit=document.createElement('button'); edit.className='action-btn edit'; edit.title='修改'; edit.textContent='✎'; edit.addEventListener('click', ()=>{ openModal('ops', 'edit', r.id) }); const del=document.createElement('button'); del.className='action-btn delete'; del.title='删除'; del.textContent='🗑'; del.addEventListener('click', async ()=>{ if (!window.confirm('确认删除运营商？')) return; await fetch(`/api/cloud/operators/${r.id}`, { method:'DELETE' }); showStatus('删除成功'); hideStatusSoon(); await loadOps() }); td8.appendChild(login); td8.appendChild(view); td8.appendChild(edit); td8.appendChild(del); tr.appendChild(td1); tr.appendChild(td2); tr.appendChild(td3); tr.appendChild(td4); tr.appendChild(td5); tr.appendChild(td6); tr.appendChild(td7); tr.appendChild(td8); body.appendChild(tr) }) }
 const setOpOptions = rows => { const fill = id => { const el = document.getElementById(id); if (!el) return; el.innerHTML=''; const ph=document.createElement('option'); ph.value=''; ph.textContent='请选择运营商'; el.appendChild(ph); rows.forEach(r=>{ const op=document.createElement('option'); op.value=String(r.id); op.textContent=r.name||(`#${r.id}`); el.appendChild(op) }) }; fill('ecs-op'); fill('vas-op'); opMap = {}; rows.forEach(r=>{ opMap[r.id] = r.name||(`#${r.id}`) }) }
-const loadOps = async () => { showStatus('正在查询运营商...'); try { await logEvent({ action:'ops_load_start' }); const r = await fetch('/api/cloud/operators', { credentials: 'include' }); const d = await r.json(); console.log('运营商数据:', d); if (d.ok) { opsCache = d.rows || []; renderOps(d.rows); setOpOptions(d.rows); await logEvent({ action:'ops_load_done', count:(d.rows||[]).length }) } else { console.error('运营商数据返回错误:', d); await logEvent({ action:'ops_load_fail', error: JSON.stringify(d) }) } } catch (e) { console.error('加载运营商数据失败:', e); await logEvent({ action:'ops_load_error', error:String(e&&e.message||e) }) } hideStatusSoon() }
+const loadOps = async () => { showStatus('正在查询运营商...'); try { await logEvent({ action:'ops_load_start' }); const d = await withRetry(() => fetchJson('/api/cloud/operators')); if (d.ok) { opsCache = d.rows || []; renderOps(opsCache); setOpOptions(opsCache); clearPanelError('panel-ops'); await logEvent({ action:'ops_load_done', count: opsCache.length }) } else { throw new Error(d.error || '接口返回错误') } } catch (e) { console.error('加载运营商数据失败:', e); showPanelError('panel-ops', '运营商', e, loadOps); await logEvent({ action:'ops_load_error', error:String(e&&e.message||e) }) } hideStatusSoon() }
 const addOp = async () => { try { const name=document.getElementById('op-name').value.trim(); const login_account=document.getElementById('op-account').value.trim(); const login_password=document.getElementById('op-password').value.trim(); const mobile=document.getElementById('op-mobile').value.trim(); const contact_person=document.getElementById('op-contact').value.trim(); const remark=(document.getElementById('op-remark')&&document.getElementById('op-remark').value)||''; const is_company_verified=document.getElementById('op-verified').checked?1:0; if (!name) { showStatus('请填写名称'); hideStatusSoon(); return } const resp = await fetch('/api/cloud/operators', { method:'POST', headers:{'Content-Type':'application/json'}, credentials: 'include', body: JSON.stringify({ name, login_account, login_password, mobile, contact_person, remark, is_company_verified }) }); if (!resp.ok) throw new Error((await resp.json().catch(()=>({}))).error || '保存失败'); showStatus('新增成功'); hideStatusSoon(); await loadOps() } catch(e) { showStatus('保存失败: ' + (e.message||e)); hideStatusSoon(); } }
 const saveOp = async () => { try { if (!editingOpId) { showStatus('请先在列表中点击修改'); hideStatusSoon(); return } const name=document.getElementById('op-name').value.trim(); const login_account=document.getElementById('op-account').value.trim(); const login_password=document.getElementById('op-password').value.trim(); const mobile=document.getElementById('op-mobile').value.trim(); const contact_person=document.getElementById('op-contact').value.trim(); const remark=(document.getElementById('op-remark')&&document.getElementById('op-remark').value)||''; const is_company_verified=document.getElementById('op-verified').checked?1:0; if (!name) { showStatus('请填写名称'); hideStatusSoon(); return } const resp = await fetch(`/api/cloud/operators/${editingOpId}`, { method:'PUT', headers:{'Content-Type':'application/json'}, credentials: 'include', body: JSON.stringify({ id: editingOpId, name, login_account, login_password, mobile, contact_person, remark, is_company_verified }) }); if (!resp.ok) throw new Error((await resp.json().catch(()=>({}))).error || '保存失败'); editingOpId=null; showStatus('保存成功'); hideStatusSoon(); await loadOps() } catch(e) { showStatus('保存失败: ' + (e.message||e)); hideStatusSoon(); } }
 
 const renderEcs = rows => { ecsCache = rows || []; const body=document.getElementById('ecs-body'); if (!body) return; body.innerHTML=''; ecsCache.forEach(r=>{ const tr=document.createElement('tr'); const td1=document.createElement('td'); td1.textContent=r.id; const td2=document.createElement('td'); td2.textContent=opMap[r.operator_id]||String(r.operator_id||''); const td2b=document.createElement('td'); td2b.textContent=r.server_name||''; const td3=document.createElement('td'); td3.textContent=r.region||''; const td4=document.createElement('td'); td4.textContent=r.zone||''; const td5=document.createElement('td'); td5.textContent=r.rdp_ip||''; const td6=document.createElement('td'); td6.textContent=r.rdp_user||''; const td7=document.createElement('td'); td7.textContent=r.rdp_password||''; const td8=createExpandableCell(r.spec_text||'', 'spec-text'); const td9=createExpandableCell(r.open_ports_text||'', 'ports-text'); const td10=document.createElement('td'); td10.className='col-actions'; const view=document.createElement('button'); view.className='action-btn view'; view.title='查看'; view.textContent='👁'; view.addEventListener('click', ()=>{ openModal('ecs', 'view', r.id) }); const edit=document.createElement('button'); edit.className='action-btn edit'; edit.title='修改'; edit.textContent='✎'; edit.addEventListener('click', ()=>{ openModal('ecs', 'edit', r.id) }); const del=document.createElement('button'); del.className='action-btn delete'; del.title='删除'; del.textContent='🗑'; del.addEventListener('click', async ()=>{ if (!window.confirm('确认删除服务器？')) return; await fetch(`/api/cloud/ecs/${r.id}`, { method:'DELETE' }); showStatus('删除成功'); hideStatusSoon(); await loadEcs() }); td10.appendChild(view); td10.appendChild(edit); td10.appendChild(del); tr.appendChild(td1); tr.appendChild(td2); tr.appendChild(td2b); tr.appendChild(td3); tr.appendChild(td4); tr.appendChild(td5); tr.appendChild(td6); tr.appendChild(td7); tr.appendChild(td8); tr.appendChild(td9); tr.appendChild(td10); body.appendChild(tr) }) }
-const loadEcs = async () => { showStatus('正在查询服务器...'); try { await logEvent({ action:'ecs_load_start' }); const r = await fetch('/api/cloud/ecs', { credentials: 'include' }); const d = await r.json(); console.log('ECS数据:', d); if (d.ok) { renderEcs(d.rows); await logEvent({ action:'ecs_load_done', count:(d.rows||[]).length }) } else { console.error('ECS返回错误:', d); await logEvent({ action:'ecs_load_fail', error: JSON.stringify(d) }) } } catch (e) { console.error('加载ECS失败:', e); await logEvent({ action:'ecs_load_error', error:String(e&&e.message||e) }) } hideStatusSoon() }
+const loadEcs = async () => { showStatus('正在查询服务器...'); try { await logEvent({ action:'ecs_load_start' }); const d = await withRetry(() => fetchJson('/api/cloud/ecs')); if (d.ok) { renderEcs(d.rows || []); clearPanelError('panel-ecs'); await logEvent({ action:'ecs_load_done', count:(d.rows||[]).length }) } else { throw new Error(d.error || '接口返回错误') } } catch (e) { console.error('加载ECS失败:', e); showPanelError('panel-ecs', 'ECS服务器', e, loadEcs); await logEvent({ action:'ecs_load_error', error:String(e&&e.message||e) }) } hideStatusSoon() }
 const addEcs = async () => { try { const operator_id=parseInt(document.getElementById('ecs-op').value||'0',10); const server_name=document.getElementById('ecs-name').value||''; const spec_text=document.getElementById('ecs-spec').value||''; const region=document.getElementById('ecs-region').value||''; const zone=document.getElementById('ecs-zone').value||''; const rdp_ip=document.getElementById('ecs-ip').value||''; const rdp_user=document.getElementById('ecs-user').value||''; const rdp_password=document.getElementById('ecs-pass').value||''; const open_ports_text=document.getElementById('ecs-ports').value||''; if (!operator_id) { showStatus('请选择运营商'); hideStatusSoon(); return } const resp = await fetch('/api/cloud/ecs', { method:'POST', headers:{'Content-Type':'application/json'}, credentials: 'include', body: JSON.stringify({ operator_id, server_name, spec_text, region, zone, rdp_ip, rdp_user, rdp_password, open_ports_text }) }); if (!resp.ok) throw new Error((await resp.json().catch(()=>({}))).error || '保存失败'); showStatus('新增成功'); hideStatusSoon(); await loadEcs() } catch(e) { showStatus('保存失败: ' + (e.message||e)); hideStatusSoon(); } }
 const saveEcs = async () => { try { if (!editingEcsId) { showStatus('请先在列表中点击修改'); hideStatusSoon(); return } const operator_id=parseInt(document.getElementById('ecs-op').value||'0',10); const server_name=document.getElementById('ecs-name').value||''; const spec_text=document.getElementById('ecs-spec').value||''; const region=document.getElementById('ecs-region').value||''; const zone=document.getElementById('ecs-zone').value||''; const rdp_ip=document.getElementById('ecs-ip').value||''; const rdp_user=document.getElementById('ecs-user').value||''; const rdp_password=document.getElementById('ecs-pass').value||''; const open_ports_text=document.getElementById('ecs-ports').value||''; if (!operator_id) { showStatus('请选择运营商'); hideStatusSoon(); return } const resp = await fetch(`/api/cloud/ecs/${editingEcsId}`, { method:'PUT', headers:{'Content-Type':'application/json'}, credentials: 'include', body: JSON.stringify({ id: editingEcsId, operator_id, server_name, spec_text, region, zone, rdp_ip, rdp_user, rdp_password, open_ports_text }) }); if (!resp.ok) throw new Error((await resp.json().catch(()=>({}))).error || '保存失败'); editingEcsId=null; showStatus('保存成功'); hideStatusSoon(); await loadEcs() } catch(e) { showStatus('保存失败: ' + (e.message||e)); hideStatusSoon(); } }
 
 const renderVas = rows => { vasCache = rows || []; const body=document.getElementById('vas-body'); if (!body) return; body.innerHTML=''; vasCache.forEach(r=>{ const tr=document.createElement('tr'); const td1=document.createElement('td'); td1.textContent=r.id; const td2=document.createElement('td'); td2.textContent=opMap[r.operator_id]||String(r.operator_id||''); const td3=document.createElement('td'); td3.textContent=r.name||''; const td4=createExpandableCell(r.config_text||'', 'vas-config'); const td5=createExpandableCell(r.access_text||'', 'vas-access'); const td6=document.createElement('td'); td6.className='col-actions'; const view=document.createElement('button'); view.className='action-btn view'; view.title='查看'; view.textContent='👁'; view.addEventListener('click', ()=>{ openModal('vas', 'view', r.id) }); const edit=document.createElement('button'); edit.className='action-btn edit'; edit.title='修改'; edit.textContent='✎'; edit.addEventListener('click', ()=>{ openModal('vas', 'edit', r.id) }); const del=document.createElement('button'); del.className='action-btn delete'; del.title='删除'; del.textContent='🗑'; del.addEventListener('click', async ()=>{ if (!window.confirm('确认删除增值服务？')) return; await fetch(`/api/cloud/vas/${r.id}`, { method:'DELETE' }); showStatus('删除成功'); hideStatusSoon(); await loadVas() }); td6.appendChild(view); td6.appendChild(edit); td6.appendChild(del); tr.appendChild(td1); tr.appendChild(td2); tr.appendChild(td3); tr.appendChild(td4); tr.appendChild(td5); tr.appendChild(td6); body.appendChild(tr) }) }
-const loadVas = async () => { showStatus('正在查询增值服务...'); try { await logEvent({ action:'vas_load_start' }); const r = await fetch('/api/cloud/vas', { credentials: 'include' }); const d = await r.json(); console.log('增值服务数据:', d); if (d.ok) { renderVas(d.rows); await logEvent({ action:'vas_load_done', count:(d.rows||[]).length }) } else { console.error('增值服务返回错误:', d); await logEvent({ action:'vas_load_fail', error: JSON.stringify(d) }) } } catch (e) { console.error('加载增值服务失败:', e); await logEvent({ action:'vas_load_error', error:String(e&&e.message||e) }) } hideStatusSoon() }
+const loadVas = async () => { showStatus('正在查询增值服务...'); try { await logEvent({ action:'vas_load_start' }); const d = await withRetry(() => fetchJson('/api/cloud/vas')); if (d.ok) { renderVas(d.rows || []); clearPanelError('panel-vas'); await logEvent({ action:'vas_load_done', count:(d.rows||[]).length }) } else { throw new Error(d.error || '接口返回错误') } } catch (e) { console.error('加载增值服务失败:', e); showPanelError('panel-vas', '增值服务', e, loadVas); await logEvent({ action:'vas_load_error', error:String(e&&e.message||e) }) } hideStatusSoon() }
 const addVas = async () => { const operator_id=parseInt(document.getElementById('vas-op').value||'0',10); const name=document.getElementById('vas-name').value||''; const config_text=document.getElementById('vas-config').value||''; const access_text=document.getElementById('vas-access').value||''; if (!operator_id || !name) { showStatus('请选择运营商并填写名称'); hideStatusSoon(); return } await fetch('/api/cloud/vas', { method:'POST', headers:{'Content-Type':'application/json'}, credentials: 'include', body: JSON.stringify({ operator_id, name, config_text, access_text }) }); showStatus('新增成功'); hideStatusSoon(); await loadVas() }
 const saveVas = async () => { if (!editingVasId) { showStatus('请先在列表中点击修改'); hideStatusSoon(); return } const operator_id=parseInt(document.getElementById('vas-op').value||'0',10); const name=document.getElementById('vas-name').value||''; const config_text=document.getElementById('vas-config').value||''; const access_text=document.getElementById('vas-access').value||''; if (!operator_id || !name) { showStatus('请选择运营商并填写名称'); hideStatusSoon(); return } await fetch(`/api/cloud/vas/${editingVasId}`, { method:'PUT', headers:{'Content-Type':'application/json'}, credentials: 'include', body: JSON.stringify({ id: editingVasId, operator_id, name, config_text, access_text }) }); editingVasId=null; showStatus('保存成功'); hideStatusSoon(); await loadVas() }
 
 const findSubjectName = (type, id) => { if (type==='ecs') { const t=ecsCache.find(x=>x.id===id); if (t) return `${t.server_name||''}` } else if (type==='vas') { const v=vasCache.find(x=>x.id===id); if (v) return `${v.name||''}` } return '' }
 const renderRenew = rows => { const body=document.getElementById('rn-body'); if (!body) return; body.innerHTML=''; rows.forEach(r=>{ const tr=document.createElement('tr'); const td1=document.createElement('td'); td1.textContent=(r.subject_type==='ecs'?'ECS':'增值服务'); const td2=document.createElement('td'); td2.className='rn-text'; td2.textContent=findSubjectName(r.subject_type, r.subject_id)||''; const td3=document.createElement('td'); td3.textContent=r.subject_id; const td4=document.createElement('td'); td4.textContent=r.paid_date||''; const td5=document.createElement('td'); td5.textContent=fmtCents(r.amount_cents); const td6=document.createElement('td'); td6.className='rn-text'; if (r.invoice_path) { const a=document.createElement('a'); a.href=r.invoice_path; a.textContent='下载'; a.target='_blank'; td6.appendChild(a) } else { td6.textContent='' } const td7=document.createElement('td'); td7.textContent=r.payer_company||''; const td8=document.createElement('td'); td8.textContent=r.expire_date||''; const td9=document.createElement('td'); td9.textContent=fmtCents(r.next_expected_amount_cents||0); const td10=document.createElement('td'); td10.className='col-actions'; const view=document.createElement('button'); view.className='action-btn view'; view.title='查看'; view.textContent='👁'; view.addEventListener('click', ()=>{ openModal('renew', 'view', r.id) }); const edit=document.createElement('button'); edit.className='action-btn edit'; edit.title='修改'; edit.textContent='✎'; edit.addEventListener('click', ()=>{ openModal('renew', 'edit', r.id) }); const del=document.createElement('button'); del.className='action-btn delete'; del.title='删除'; del.textContent='🗑'; del.addEventListener('click', async ()=>{ if (!window.confirm('确认删除续费记录？')) return; await fetch(`/api/cloud/renew/${r.id}`, { method:'DELETE' }); showStatus('删除成功'); hideStatusSoon(); await loadRenew() }); td10.appendChild(view); td10.appendChild(edit); td10.appendChild(del); tr.appendChild(td1); tr.appendChild(td2); tr.appendChild(td3); tr.appendChild(td4); tr.appendChild(td5); tr.appendChild(td6); tr.appendChild(td7); tr.appendChild(td8); tr.appendChild(td9); tr.appendChild(td10); body.appendChild(tr) }) }
-const loadRenew = async () => { showStatus('正在查询续费情况...'); const r = await fetch('/api/cloud/renew', { credentials: 'include' }); const d = await r.json(); if (d.ok) renderRenew(d.rows); hideStatusSoon() }
+const loadRenew = async () => { showStatus('正在查询续费情况...'); try { const d = await withRetry(() => fetchJson('/api/cloud/renew')); if (d.ok) { renewCache = d.rows || []; renderRenew(renewCache); clearPanelError('panel-renew') } else { throw new Error(d.error || '接口返回错误') } } catch (e) { console.error('加载续费情况失败:', e); showPanelError('panel-renew', '续费情况', e, loadRenew) } hideStatusSoon() }
 const addRenew = async () => { try { const subject_type=document.getElementById('rn-type').value; const subject_id=parseInt(document.getElementById('rn-subject').value||'0',10); const paid_date=document.getElementById('rn-paid').value; const amount=parseFloat(document.getElementById('rn-amount').value||'0'); const amount_cents=Math.round(amount*100); let invoice_path=document.getElementById('rn-invoice').value||''; const payer_company=document.getElementById('rn-payer').value||''; const expire_date=document.getElementById('rn-expire').value||''; const next=parseFloat(document.getElementById('rn-next').value||'0'); const next_expected_amount_cents=Math.round(next*100); if (!subject_id || !paid_date || !amount_cents) { showStatus('请完整选择主体、填写缴费日期与金额'); hideStatusSoon(); return } const fEl=document.getElementById('rn-invoice-file'); if (fEl && fEl.files && fEl.files[0]) { try { const file=fEl.files[0]; const buf=await file.arrayBuffer(); const rr=await fetch(`/api/cloud/renew/invoice?filename=${encodeURIComponent(file.name)}`, { method:'POST', headers:{'Content-Type':'application/octet-stream'}, credentials: 'include', body: buf }); const dd=await rr.json(); if (dd && dd.ok && dd.path) invoice_path=dd.path } catch {} } const resp = await fetch('/api/cloud/renew', { method:'POST', headers:{'Content-Type':'application/json'}, credentials: 'include', body: JSON.stringify({ subject_type, subject_id, paid_date, amount_cents, invoice_path, payer_company, expire_date, next_expected_amount_cents }) }); if (!resp.ok) throw new Error((await resp.json().catch(()=>({}))).error || '保存失败'); showStatus('新增成功'); hideStatusSoon(); await loadRenew() } catch(e) { showStatus('保存失败: ' + (e.message||e)); hideStatusSoon(); } }
 const saveRenew = async () => { try { if (!editingRnId) { showStatus('请先在列表中点击修改'); hideStatusSoon(); return } const subject_type=document.getElementById('rn-type').value; const subject_id=parseInt(document.getElementById('rn-subject').value||'0',10); const paid_date=document.getElementById('rn-paid').value; const amount=parseFloat(document.getElementById('rn-amount').value||'0'); const amount_cents=Math.round(amount*100); let invoice_path=document.getElementById('rn-invoice').value||''; const payer_company=document.getElementById('rn-payer').value||''; const expire_date=document.getElementById('rn-expire').value||''; const next=parseFloat(document.getElementById('rn-next').value||'0'); const next_expected_amount_cents=Math.round(next*100); if (!subject_id || !paid_date || !amount_cents) { showStatus('请完整选择主体、填写缴费日期与金额'); hideStatusSoon(); return } const fEl=document.getElementById('rn-invoice-file'); if (fEl && fEl.files && fEl.files[0]) { try { const file=fEl.files[0]; const buf=await file.arrayBuffer(); const rr=await fetch(`/api/cloud/renew/invoice?filename=${encodeURIComponent(file.name)}`, { method:'POST', headers:{'Content-Type':'application/octet-stream'}, credentials: 'include', body: buf }); const dd=await rr.json(); if (dd && dd.ok && dd.path) invoice_path=dd.path } catch {} } const resp = await fetch(`/api/cloud/renew/${editingRnId}`, { method:'PUT', headers:{'Content-Type':'application/json'}, credentials: 'include', body: JSON.stringify({ id: editingRnId, subject_type, subject_id, paid_date, amount_cents, invoice_path, payer_company, expire_date, next_expected_amount_cents }) }); if (!resp.ok) throw new Error((await resp.json().catch(()=>({}))).error || '保存失败'); editingRnId=null; showStatus('保存成功'); hideStatusSoon(); await loadRenew() } catch(e) { showStatus('保存失败: ' + (e.message||e)); hideStatusSoon(); } }
 
@@ -403,11 +503,11 @@ const loadNotes = async (silent = false) => {
   const shouldShowStatus = !silent && currentTab === 'notes'
   if (shouldShowStatus) showStatus('正在查询学习笔记...')
   try {
-    const r = await fetch('/api/cloud/notes', { credentials: 'include' });
-    const d = await r.json();
-    if (d.ok) renderNotes(d.rows);
+    const d = await withRetry(() => fetchJson('/api/cloud/notes'))
+    if (d.ok) { notesCache = d.rows || []; renderNotes(notesCache); clearPanelError('panel-notes') } else { throw new Error(d.error || '接口返回错误') }
   } catch (e) {
-    console.error(e);
+    console.error(e)
+    showPanelError('panel-notes', '学习笔记', e, () => loadNotes(false))
   }
   if (shouldShowStatus) hideStatusSoon()
 };
@@ -645,9 +745,10 @@ const renderBalanceAlerts = data => {
 }
 
 const loadBalanceStatus = async () => {
-  const r = await fetch('/api/cloud/balance_alerts/status', { credentials: 'include', cache: 'no-store' })
-  const d = await r.json()
-  if (d.ok) renderBalanceStatus(d.data)
+  try {
+    const d = await fetchJson('/api/cloud/balance_alerts/status')
+    if (d.ok) renderBalanceStatus(d.data)
+  } catch (e) { console.error(e) }
 }
 
 const loadBalanceAlerts = async (showLoading = true) => {
@@ -1048,11 +1149,9 @@ const initCloud = async () => {
     const brf=document.getElementById('cd-btn-refresh'); if (brf) brf.addEventListener('click', async ()=>{ try { const r=await fetch('/api/debug/logs?limit=5000&channel=cloud'); const d=await r.json(); if (d.ok) { out().textContent=(d.lines||[]).join('\n'); out().scrollTop=out().scrollHeight } } catch {} })
     const bcl=document.getElementById('cd-btn-clear'); if (bcl) bcl.addEventListener('click', async ()=>{ try { await fetch('/api/debug/clear?channel=cloud', { method:'POST' }) } catch {}; out().textContent='' })
     await logEvent({ action:'boot' });
-    await loadOps();
-    await Promise.all([loadEcs(), loadVas()]);
-    await loadRenew();
-    await loadNotes();
-    await loadBalanceStatus();
+    await Promise.all([loadOps(), loadEcs(), loadVas(), loadRenew(), loadNotes(), loadBalanceStatus()]);
+    // 并行加载全部完成后统一重渲染一次，补齐运营商/主体等关联名称
+    renderEcs(ecsCache); renderVas(vasCache); renderRenew(renewCache); renderNotes(notesCache);
     applyGridFontMode();
   } catch (e) {
     try { fetch('/api/debug/event', { method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify({ source:'cloud', action:'init_error', error:String(e&&e.message||e) }) }) } catch {}
@@ -1190,6 +1289,10 @@ function generateModalForm(type, action, id) {
             <label class="modal-label">登录密码：</label>
             <input type="text" class="modal-input" id="modal-op-password" placeholder="登录密码" ${readonly}>
           </div>
+          <div class="modal-form-row">
+            <label class="modal-label">登录页地址：</label>
+            <input type="text" class="modal-input" id="modal-op-login-url" placeholder="https://…（点🔐一键登录时优先用它打开）" ${readonly}>
+          </div>
           <div class="modal-form-row">
             <label class="modal-label">关联手机：</label>
             <input type="tel" class="modal-input" id="modal-op-mobile" placeholder="关联手机" ${readonly}>
@@ -1416,6 +1519,7 @@ function fillModalForm(type, data) {
       document.getElementById('modal-op-name').value = data.name || '';
       document.getElementById('modal-op-account').value = data.login_account || '';
       document.getElementById('modal-op-password').value = data.login_password || '';
+      document.getElementById('modal-op-login-url').value = data.login_url || '';
       document.getElementById('modal-op-mobile').value = data.mobile || '';
       document.getElementById('modal-op-contact').value = data.contact_person || '';
       document.getElementById('modal-op-remark').value = data.remark || '';
@@ -1571,6 +1675,7 @@ function getModalFormData(type) {
         name: document.getElementById('modal-op-name').value.trim(),
         login_account: document.getElementById('modal-op-account').value.trim(),
         login_password: document.getElementById('modal-op-password').value.trim(),
+        login_url: document.getElementById('modal-op-login-url').value.trim(),
         mobile: document.getElementById('modal-op-mobile').value.trim(),
         contact_person: document.getElementById('modal-op-contact').value.trim(),
         remark: document.getElementById('modal-op-remark').value.trim(),
diff --git a/public/tools/markets/markets_dip_eval.js b/public/tools/markets/markets_dip_eval.js
index fc5e00a..baeb118 100644
--- a/public/tools/markets/markets_dip_eval.js
+++ b/public/tools/markets/markets_dip_eval.js
@@ -82,14 +82,14 @@ const runDipEval = async () => {
   try {
     const data = await runTrackedInteraction({
       title: '建行定投评估',
-      action: '抓取四大指数 PE-TTM 与近10年分位并判档',
-      summary: '按需抓取：中证指数官网 / 蛋卷基金（备源 multpl.com）...',
+      action: '读取本地估值快照并判档，必要时通过探针补抓海外数据',
+      summary: 'A股走中证指数官网；标普走 multpl / DQYDJ 探针；纳指走 Yahoo+QQQ 探针自算，蛋卷兜底。',
       button: btn,
       loadingText: '评估中…',
       request: { url: '/api/markets/dip_eval', method: 'GET' },
       successText: d => `评估完成：${(d && Array.isArray(d.rows)) ? d.rows.length : 0} 个指数，${((d && d.errors) || []).length} 条异常`
     }, async ctx => {
-      return await ctx.fetchJson('/api/markets/dip_eval', {}, { 说明: '按需抓取，无定时任务' })
+      return await ctx.fetchJson('/api/markets/dip_eval', {}, { 说明: '优先读取本地快照，必要时补抓海外探针数据' })
     })
     renderDipReport(data || {})
   } catch (e) {
diff --git a/src/server/cloud.js b/src/server/cloud.js
index cd96dba..6ad188f 100644
--- a/src/server/cloud.js
+++ b/src/server/cloud.js
@@ -8,11 +8,21 @@ const cfgPath = path.join(process.cwd(), 'config', 'cloud.json')
 if (!fs.existsSync(path.dirname(cfgPath))) fs.mkdirSync(path.dirname(cfgPath), { recursive: true })
 if (!fs.existsSync(cfgPath)) fs.writeFileSync(cfgPath, JSON.stringify({ machine_salt: crypto.randomBytes(16).toString('hex') }, null, 2))
 const getConfig = () => JSON.parse(fs.readFileSync(cfgPath, 'utf-8'))
+// 派生密钥进程级缓存：scryptSync 单次约 70ms+ 且同步阻塞事件循环，
+// 逐行解密时重复派生会导致列表接口秒级卡顿（operators/ecs/vas 各 1s+）。
+// 仅当 passphrase 或 machine_salt 变化时才重新派生。
+let derivedKeyCache = null
+let derivedKeyCacheSig = ''
 const deriveKey = () => {
   const cfg = getConfig()
-  const salt = Buffer.from(String(cfg.machine_salt || 'default'), 'utf-8')
+  const saltStr = String(cfg.machine_salt || '')
   const passphrase = process.env.CLOUD_PASSPHRASE || process.env.SYSTEM_AUTH_PASS_93220 || ''
-return crypto.scryptSync(passphrase + String(cfg.machine_salt || ''), salt, 32)
+  const sig = passphrase + '|' + saltStr
+  if (derivedKeyCache && sig === derivedKeyCacheSig) return derivedKeyCache
+  const salt = Buffer.from(saltStr || 'default', 'utf-8')
+  derivedKeyCache = crypto.scryptSync(passphrase + saltStr, salt, 32)
+  derivedKeyCacheSig = sig
+  return derivedKeyCache
 }
 const enc = plain => {
   const key = deriveKey()
@@ -39,6 +49,7 @@ db.exec(`CREATE TABLE IF NOT EXISTS cloud_operators (
   login_password TEXT,
   mobile TEXT,
   contact_person TEXT,
+  login_url TEXT,
   remark TEXT,
   is_company_verified INTEGER DEFAULT 0,
   created_at TEXT DEFAULT (datetime('now')),
@@ -109,6 +120,7 @@ const ensureCols = () => {
   if (!hasCol('cloud_operators','login_password_enc')) db.exec(`ALTER TABLE cloud_operators ADD COLUMN login_password_enc BLOB`)
   if (!hasCol('cloud_operators','login_password_iv')) db.exec(`ALTER TABLE cloud_operators ADD COLUMN login_password_iv BLOB`)
   if (!hasCol('cloud_operators','login_password_tag')) db.exec(`ALTER TABLE cloud_operators ADD COLUMN login_password_tag BLOB`)
+  if (!hasCol('cloud_operators','login_url')) db.exec(`ALTER TABLE cloud_operators ADD COLUMN login_url TEXT`)
   if (!hasCol('cloud_operators','remark')) db.exec(`ALTER TABLE cloud_operators ADD COLUMN remark TEXT`)
   if (!hasCol('cloud_ecs','rdp_password_enc')) db.exec(`ALTER TABLE cloud_ecs ADD COLUMN rdp_password_enc BLOB`)
   if (!hasCol('cloud_ecs','rdp_password_iv')) db.exec(`ALTER TABLE cloud_ecs ADD COLUMN rdp_password_iv BLOB`)
@@ -148,8 +160,8 @@ const migrateExisting = () => {
 migrateExisting()
 
 const listOperators = db.prepare(`SELECT * FROM cloud_operators ORDER BY id DESC`)
-const createOperatorStmt = db.prepare(`INSERT INTO cloud_operators (name, login_account, login_password, mobile, contact_person, remark, is_company_verified, login_password_enc, login_password_iv, login_password_tag) VALUES (@name, @login_account, '', @mobile, @contact_person, @remark, @is_company_verified, @login_password_enc, @login_password_iv, @login_password_tag)`)
-const updateOperatorStmt = db.prepare(`UPDATE cloud_operators SET name=@name, login_account=@login_account, login_password='', mobile=@mobile, contact_person=@contact_person, remark=@remark, is_company_verified=@is_company_verified, login_password_enc=@login_password_enc, login_password_iv=@login_password_iv, login_password_tag=@login_password_tag, updated_at=datetime('now') WHERE id=@id`)
+const createOperatorStmt = db.prepare(`INSERT INTO cloud_operators (name, login_account, login_password, mobile, contact_person, login_url, remark, is_company_verified, login_password_enc, login_password_iv, login_password_tag) VALUES (@name, @login_account, '', @mobile, @contact_person, @login_url, @remark, @is_company_verified, @login_password_enc, @login_password_iv, @login_password_tag)`)
+const updateOperatorStmt = db.prepare(`UPDATE cloud_operators SET name=@name, login_account=@login_account, login_password='', mobile=@mobile, contact_person=@contact_person, login_url=@login_url, remark=@remark, is_company_verified=@is_company_verified, login_password_enc=@login_password_enc, login_password_iv=@login_password_iv, login_password_tag=@login_password_tag, updated_at=datetime('now') WHERE id=@id`)
 const deleteOperatorStmt = db.prepare(`DELETE FROM cloud_operators WHERE id=?`)
 
 const listEcs = db.prepare(`SELECT * FROM cloud_ecs ORDER BY id DESC`)
diff --git a/src/server/index.js b/src/server/index.js
index 7b516b7..5a097dc 100644
--- a/src/server/index.js
+++ b/src/server/index.js
@@ -4784,10 +4784,10 @@ app.get('/api/markets/weekly_report', async (req, res) => {
   }
 })
 
-// 建行定投评估：按需抓取四大指数 PE-TTM 与近10年分位（点击页面按钮触发，无定时任务）
+// 建行定投评估：A股按需评估；海外部分优先读取本地快照，必要时通过美西探针补抓并持久化
 app.get('/api/markets/dip_eval', async (req, res) => {
   try {
-    const payload = await marketsDipEval.getDipEvalReport()
+    const payload = await marketsDipEval.getDipEvalReport({ force: String(req.query.force || '') === '1' })
     // 统一 200 + ok 标志：整体失败时 ok=false，前端交互弹窗读取 error 文案
     res.json(payload || { ok: false, error: '评估失败' })
   } catch (e) {
@@ -5626,7 +5626,7 @@ app.get('/api/cloud/balance_alerts', (req, res) => {
 app.get('/api/cloud/balance_alerts/status', (req, res) => {
   ;(async () => {
     try {
-      const forwarded = await proxyCloudBalanceAutomationStatus('/api/cloud/balance_alerts/status')
+      const forwarded = await proxyCloudBalanceAutomationStatus('/api/cloud/balance_alerts/status', req)
       if (forwarded) return res.status(forwarded.status).json(forwarded.body)
       res.json({ ok: true, data: cloudBalanceWatch.getStatus() })
     } catch (e) { res.status(500).json({ ok: false, error: String(e.message || e) }) }
@@ -5665,13 +5665,15 @@ const proxyCloudBalanceAutomationRequest = async (req, routePath) => {
     })
   }
 }
-const proxyCloudBalanceAutomationStatus = async routePath => {
+const proxyCloudBalanceAutomationStatus = async (routePath, req) => {
   const cfg = cloudBalanceWatch.readConfig()
   const currentPort = Number(process.env.PORT || '8976') || 8976
   const automationPort = Number(cfg.automation_port || 8977) || 8977
   if (currentPort === automationPort) return null
   const url = `http://127.0.0.1:${automationPort}${routePath}`
+  // 必须转发 Cookie，否则 8977 的 /api/cloud 守卫会返回 401
   const proxied = await axios.get(url, {
+    headers: { Cookie: (req && req.headers && req.headers.cookie) || '' },
     timeout: 15000,
     validateStatus: () => true
   })
@@ -7376,6 +7378,7 @@ if (currentPort === marketsAutomationPort) {
 securityCalendar.startScheduler()
 securityCalendarBridge.startScheduler(securityCalendar)
 marketsWeeklyReport.startScheduler()
+marketsDipEval.startScheduler()
 globalNews.startScheduler()
 
 app.use('/api/yuanzhupai', (req, res, next) => {
diff --git a/src/server/markets_dip_eval.js b/src/server/markets_dip_eval.js
index 85c6219..1a7e25f 100644
--- a/src/server/markets_dip_eval.js
+++ b/src/server/markets_dip_eval.js
@@ -1,43 +1,17 @@
 /**
  * 建行定投评估（markets 子模块）
  *
- * 用途：银行场外基金定投/赎回参考。按需抓取四大指数 PE-TTM 与近 10 年 PE 分位，
- *       对照个人定投档位阈值给出建议。不做定时任务，点击页面按钮才触发。
- *
- * 数据源（探针验证于 dev_test_scripts/debug/debug_dip_eval_sources*.js）：
- *  - 沪深300 / 中证500：中证指数官网 index-perf（官方日频市盈率历史，精确计算近 10 年分位），备源：蛋卷基金
- *  - 标普500 / 纳指100：蛋卷基金 index_eva/dj（每日更新 PE + 分位），标普备源：multpl.com
- *  - 东方财富 push2 / 数据中心对指数不返回 PE，故未采用
- *
- * ============================================================
- * 个人定投档位阈值（配套我的估值阈值，档位判定的唯一依据）
- * ============================================================
- * 沪深300（000300）：
- *   PE＜12（分位＜30%）→ 每日定投 200 元
- *   12 ≤ PE ＜ 14.5    → 每日定投 150 元
- *   14.5 ≤ PE ＜ 16    → 每日定投 100 元，可止盈 50%
- *   PE ≥ 16            → 暂停定投 + 止盈清仓
- *
- * 中证500（000905）：
- *   PE＜25             → 每日定投 200 元
- *   25 ≤ PE ＜ 32      → 每日定投 150 元
- *   32 ≤ PE ＜ 36      → 每日定投 100 元，可止盈 50%
- *   PE ≥ 36            → 暂停定投 + 止盈清仓
- *
- * 纳指100（NDX）：
- *   PE＜24             → 每日定投 200 元
- *   24 ≤ PE ＜ 30      → 每日定投 150 元
- *   30 ≤ PE ＜ 36      → 每日定投 100 元，可止盈 50%
- *   PE ≥ 36            → 暂停定投 + 止盈清仓
- *
- * 标普500（SP500）：
- *   PE＜16             → 每日定投 200 元
- *   16 ≤ PE ＜ 21      → 每日定投 150 元
- *   21 ≤ PE ＜ 25      → 每日定投 100 元，可止盈 50%
- *   PE ≥ 25            → 暂停定投 + 止盈清仓
- * ============================================================
+ * 本轮改造目标：
+ * 1. 海外估值不再由当前服务直接访问海外站点；
+ * 2. 通过美西轻量探针拉取原始页面/原始 JSON，本地负责清洗、计算与落库；
+ * 3. 标普500：multpl 主源，DQYDJ 兜底；
+ * 4. 纳指100：本地用 Nasdaq 成分 + Yahoo quote 自算主源，蛋卷兜底；
+ * 5. 8977 自动化实例每日同步一次，8976 页面评估优先读本地快照。
  */
 const axios = require('axios')
+const fs = require('fs')
+const path = require('path')
+const { db } = require('./db')
 const { logJSON } = require('./logger')
 
 // 通用请求头（模拟浏览器，避免被数据源拦截）
@@ -45,21 +19,20 @@ const HTTP_HEADERS = {
   'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36'
 }
 
-// 四大指数的档位阈值配置（含义见文件头注释）
-// bands 按 PE 从低到高排列，max 为该档上边界（不含），命中即停
+// 四大指数的档位阈值配置（bands 按 PE 从低到高排列，max 为上边界不含）
 const INDEX_PLAN = [
   {
     key: 'csi300',
     name: '沪深300',
     code: '000300',
     market: 'A股',
-    danjuan_code: 'SH000300',       // 蛋卷基金接口中的指数代码
-    csindex: true,                  // A股指数可走中证指数官网（官方日频PE历史）
+    danjuan_code: 'SH000300',
+    csindex: true,
     bands: [
-      { max: 12, advice: '每日定投 200 元', level: 'buy_heavy' },            // PE＜12（分位＜30%）
-      { max: 14.5, advice: '每日定投 150 元', level: 'buy' },                // 12 ≤ PE ＜ 14.5
-      { max: 16, advice: '每日定投 100 元，可止盈 50%', level: 'take_half' }, // 14.5 ≤ PE ＜ 16
-      { max: Infinity, advice: '暂停定投 + 止盈清仓', level: 'exit' }         // PE ≥ 16
+      { max: 12, advice: '每日定投 200 元', level: 'buy_heavy' },
+      { max: 14.5, advice: '每日定投 150 元', level: 'buy' },
+      { max: 16, advice: '每日定投 100 元，可止盈 50%', level: 'take_half' },
+      { max: Infinity, advice: '暂停定投 + 止盈清仓', level: 'exit' }
     ]
   },
   {
@@ -70,10 +43,10 @@ const INDEX_PLAN = [
     danjuan_code: 'SH000905',
     csindex: true,
     bands: [
-      { max: 25, advice: '每日定投 200 元', level: 'buy_heavy' },            // PE＜25
-      { max: 32, advice: '每日定投 150 元', level: 'buy' },                  // 25 ≤ PE ＜ 32
-      { max: 36, advice: '每日定投 100 元，可止盈 50%', level: 'take_half' }, // 32 ≤ PE ＜ 36
-      { max: Infinity, advice: '暂停定投 + 止盈清仓', level: 'exit' }         // PE ≥ 36
+      { max: 25, advice: '每日定投 200 元', level: 'buy_heavy' },
+      { max: 32, advice: '每日定投 150 元', level: 'buy' },
+      { max: 36, advice: '每日定投 100 元，可止盈 50%', level: 'take_half' },
+      { max: Infinity, advice: '暂停定投 + 止盈清仓', level: 'exit' }
     ]
   },
   {
@@ -82,12 +55,12 @@ const INDEX_PLAN = [
     code: 'NDX',
     market: '美股',
     danjuan_code: 'NDX',
-    csindex: false,                  // 美股无中证官网数据，仅蛋卷主源；缺源时分位显示 —
+    csindex: false,
     bands: [
-      { max: 24, advice: '每日定投 200 元', level: 'buy_heavy' },            // PE＜24
-      { max: 30, advice: '每日定投 150 元', level: 'buy' },                // 24 ≤ PE ＜ 30
-      { max: 36, advice: '每日定投 100 元，可止盈 50%', level: 'take_half' }, // 30 ≤ PE ＜ 36
-      { max: Infinity, advice: '暂停定投 + 止盈清仓', level: 'exit' }         // PE ≥ 36
+      { max: 24, advice: '每日定投 200 元', level: 'buy_heavy' },
+      { max: 30, advice: '每日定投 150 元', level: 'buy' },
+      { max: 36, advice: '每日定投 100 元，可止盈 50%', level: 'take_half' },
+      { max: Infinity, advice: '暂停定投 + 止盈清仓', level: 'exit' }
     ]
   },
   {
@@ -98,43 +71,502 @@ const INDEX_PLAN = [
     danjuan_code: 'SP500',
     csindex: false,
     bands: [
-      { max: 16, advice: '每日定投 200 元', level: 'buy_heavy' },            // PE＜16
-      { max: 21, advice: '每日定投 150 元', level: 'buy' },                  // 16 ≤ PE ＜ 21
-      { max: 25, advice: '每日定投 100 元，可止盈 50%', level: 'take_half' }, // 21 ≤ PE ＜ 25
-      { max: Infinity, advice: '暂停定投 + 止盈清仓', level: 'exit' }         // PE ≥ 25
+      { max: 16, advice: '每日定投 200 元', level: 'buy_heavy' },
+      { max: 21, advice: '每日定投 150 元', level: 'buy' },
+      { max: 25, advice: '每日定投 100 元，可止盈 50%', level: 'take_half' },
+      { max: Infinity, advice: '暂停定投 + 止盈清仓', level: 'exit' }
     ]
   }
 ]
 
+const SOURCE_LABEL_MAP = Object.freeze({
+  csindex_official: '中证指数官网',
+  danjuan_fallback: '蛋卷基金(备源)',
+  sp500_multpl_probe: 'multpl（探针）',
+  sp500_dqydj_probe: 'DQYDJ（探针兜底）',
+  ndx_self_calc_probe: 'Nasdaq+Yahoo（本地自算）',
+  ndx_danjuan_fallback: '蛋卷基金(兜底)'
+})
+
+// ---------- 本地持久化 ----------
+
+db.exec(
+  `CREATE TABLE IF NOT EXISTS market_valuation_snapshots (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    index_key TEXT NOT NULL,
+    index_code TEXT NOT NULL DEFAULT '',
+    market TEXT NOT NULL DEFAULT '',
+    source TEXT NOT NULL DEFAULT '',
+    snapshot_date TEXT NOT NULL,
+    pe_ttm REAL,
+    percentile REAL,
+    percentile_note TEXT NOT NULL DEFAULT '',
+    note TEXT NOT NULL DEFAULT '',
+    payload_json TEXT NOT NULL DEFAULT '',
+    captured_at TEXT DEFAULT (datetime('now')),
+    UNIQUE(index_key, snapshot_date, source)
+  );`
+)
+try { db.exec(`CREATE INDEX IF NOT EXISTS idx_market_valuation_key_date ON market_valuation_snapshots(index_key, snapshot_date DESC, id DESC)`) } catch {}
+
+const upsertValuationSnapshotStmt = db.prepare(
+  `INSERT INTO market_valuation_snapshots (
+    index_key, index_code, market, source, snapshot_date, pe_ttm, percentile, percentile_note, note, payload_json, captured_at
+  ) VALUES (
+    @index_key, @index_code, @market, @source, @snapshot_date, @pe_ttm, @percentile, @percentile_note, @note, @payload_json, datetime('now')
+  )
+  ON CONFLICT(index_key, snapshot_date, source) DO UPDATE SET
+    pe_ttm = excluded.pe_ttm,
+    percentile = excluded.percentile,
+    percentile_note = excluded.percentile_note,
+    note = excluded.note,
+    payload_json = excluded.payload_json,
+    captured_at = datetime('now')`
+)
+
+const getLatestValuationSnapshotStmt = db.prepare(
+  `SELECT * FROM market_valuation_snapshots
+   WHERE index_key = ?
+   ORDER BY snapshot_date DESC, id DESC
+   LIMIT 1`
+)
+
+const listValuationSnapshotsStmt = db.prepare(
+  `SELECT * FROM market_valuation_snapshots
+   WHERE index_key = ?
+   ORDER BY snapshot_date DESC, id DESC`
+)
+
 // ---------- 工具函数 ----------
 
-// 当前北京时间字符串：YYYY-MM-DD HH:mm:ss（项目统一北京时间）
-const beijingNow = () => new Date(Date.now() + 8 * 3600 * 1000).toISOString().replace('T', ' ').slice(0, 19)
+const beijingDate = date => {
+  try {
+    const formatter = new Intl.DateTimeFormat('sv-SE', {
+      timeZone: 'Asia/Shanghai',
+      year: 'numeric',
+      month: '2-digit',
+      day: '2-digit'
+    })
+    const parts = formatter.formatToParts(date)
+    const map = {}
+    for (const part of parts) map[part.type] = part.value
+    return `${map.year}-${map.month}-${map.day}`
+  } catch {
+    return new Date().toISOString().slice(0, 10)
+  }
+}
+
+const beijingNow = () => {
+  try {
+    const formatter = new Intl.DateTimeFormat('sv-SE', {
+      timeZone: 'Asia/Shanghai',
+      year: 'numeric',
+      month: '2-digit',
+      day: '2-digit',
+      hour: '2-digit',
+      minute: '2-digit',
+      second: '2-digit',
+      hour12: false
+    })
+    const parts = formatter.formatToParts(new Date())
+    const map = {}
+    for (const part of parts) map[part.type] = part.value
+    return `${map.year}-${map.month}-${map.day} ${map.hour}:${map.minute}:${map.second}`
+  } catch {
+    return new Date(Date.now() + 8 * 3600 * 1000).toISOString().replace('T', ' ').slice(0, 19)
+  }
+}
 
-// 北京时间的 YYYYMMDD（用于中证官网日期参数）
 const beijingDateCompact = offsetDays => {
   const d = new Date(Date.now() + 8 * 3600 * 1000 + (offsetDays || 0) * 86400 * 1000)
   return d.toISOString().slice(0, 10).replace(/-/g, '')
 }
 
-const toNum = v => {
-  const n = Number(v)
+const toNum = value => {
+  const n = Number(value)
   return Number.isFinite(n) ? n : NaN
 }
 
-// 按 PE 档位表判定建议（bands 从低到高，max 为上边界不含）
+const normalizePercentile = value => {
+  const n = Number(value)
+  if (!Number.isFinite(n)) return null
+  if (n >= 0 && n <= 1) return Math.round(n * 1000) / 10
+  if (n >= 0 && n <= 100) return Math.round(n * 10) / 10
+  return null
+}
+
+const safeJsonStringify = value => {
+  try { return JSON.stringify(value || {}) } catch { return '{}' }
+}
+
+const parseJsonSafely = value => {
+  try { return JSON.parse(String(value || '{}')) } catch { return {} }
+}
+
+const normalizeDateOnly = raw => {
+  const text = String(raw || '').trim()
+  if (!text) return beijingDate(new Date())
+  const m1 = text.match(/^(\d{4})[-/](\d{2})[-/](\d{2})/)
+  if (m1) return `${m1[1]}-${m1[2]}-${m1[3]}`
+  const m2 = text.match(/^(\d{4})(\d{2})(\d{2})$/)
+  if (m2) return `${m2[1]}-${m2[2]}-${m2[3]}`
+  const m3 = text.match(/^([A-Za-z]{3,9})\s+(\d{1,2}),\s*(\d{4})$/)
+  if (m3) {
+    const monthMap = {
+      january: '01', february: '02', march: '03', april: '04', may: '05', june: '06',
+      july: '07', august: '08', september: '09', october: '10', november: '11', december: '12',
+      jan: '01', feb: '02', mar: '03', apr: '04', jun: '06', jul: '07', aug: '08', sep: '09', oct: '10', nov: '11', dec: '12'
+    }
+    const month = monthMap[String(m3[1]).toLowerCase()] || ''
+    if (month) return `${m3[3]}-${month}-${String(m3[2]).padStart(2, '0')}`
+  }
+  return beijingDate(new Date())
+}
+
+const decodeHtmlEntities = text => String(text || '')
+  .replace(/&nbsp;/gi, ' ')
+  .replace(/&amp;/gi, '&')
+  .replace(/&quot;/gi, '"')
+  .replace(/&#39;/gi, "'")
+  .replace(/&lt;/gi, '<')
+  .replace(/&gt;/gi, '>')
+
+const stripTags = text => decodeHtmlEntities(
+  String(text || '')
+    .replace(/<script[\s\S]*?<\/script>/gi, ' ')
+    .replace(/<style[\s\S]*?<\/style>/gi, ' ')
+    .replace(/<[^>]+>/g, ' ')
+).replace(/\s+/g, ' ').trim()
+
+const parseLooseNum = value => {
+  const text = String(value == null ? '' : value).replace(/[,$%†*]/g, '').trim()
+  const n = Number(text)
+  return Number.isFinite(n) ? n : NaN
+}
+
+const parseMultplCurrentPage = html => {
+  const text = stripTags(html)
+  const currentMatch = text.match(/Current\s*S&P\s*500\s*PE\s*Ratio[:\s]+([0-9]+(?:\.[0-9]+)?)/i)
+  const dateMatch = text.match(/([A-Z][a-z]{2}\s+\d{1,2},\s+\d{4})/i)
+  return {
+    pe_ttm: currentMatch ? parseLooseNum(currentMatch[1]) : NaN,
+    snapshot_date: normalizeDateOnly(dateMatch ? dateMatch[1] : '')
+  }
+}
+
+const parseMultplHistoryPage = html => {
+  const history = []
+  let match
+  const rowRegex = /<tr[^>]*>\s*<td[^>]*>\s*([^<]+?)\s*<\/td>\s*<td[^>]*>[\s\S]*?([0-9]+(?:\.[0-9]+)?)\s*<\/td>/gi
+  while ((match = rowRegex.exec(html))) {
+    const date = normalizeDateOnly(stripTags(match[1]))
+    const pe = parseLooseNum(match[2])
+    if (!date || !Number.isFinite(pe) || pe <= 0) continue
+    history.push({ date, pe })
+  }
+  if (history.length) return history
+  const text = stripTags(html)
+  const fallbackRegex = /([A-Z][a-z]{2}\s+\d{1,2},\s+\d{4})\s+([0-9]+(?:\.[0-9]+)?)/g
+  while ((match = fallbackRegex.exec(text))) {
+    const date = normalizeDateOnly(match[1])
+    const pe = parseLooseNum(match[2])
+    if (!date || !Number.isFinite(pe) || pe <= 0) continue
+    history.push({ date, pe })
+  }
+  return history
+}
+
+const parseDqydjPage = html => {
+  const history = []
+  let match
+  const rowRegex = /<tr[^>]*>\s*<td[^>]*>\s*([0-9]{2}-[0-9]{4})\s*<\/td>\s*<td[^>]*>\s*([^<]+?)\s*<\/td>\s*<td[^>]*>\s*([^<]+?)\s*<\/td>\s*<td[^>]*>\s*([0-9]+(?:\.[0-9]+)?)\s*<\/td>/gi
+  while ((match = rowRegex.exec(html))) {
+    const m = String(match[1] || '').trim().match(/^(\d{2})-(\d{4})$/)
+    if (!m) continue
+    const date = `${m[2]}-${m[1]}-01`
+    const pe = parseLooseNum(match[4])
+    if (!Number.isFinite(pe) || pe <= 0) continue
+    history.push({ date, pe })
+  }
+  return {
+    pe_ttm: history.length ? history[0].pe : NaN,
+    snapshot_date: history.length ? history[0].date : beijingDate(new Date()),
+    history
+  }
+}
+
+const parseNasdaq100List = payload => {
+  const rows = payload && payload.data && payload.data.data && Array.isArray(payload.data.data.rows)
+    ? payload.data.data.rows
+    : payload && payload.data && Array.isArray(payload.data.rows)
+      ? payload.data.rows
+      : Array.isArray(payload && payload.rows)
+        ? payload.rows
+        : []
+  const asOfRaw = payload && payload.data && (payload.data.date || (payload.data.data && payload.data.data.asOf))
+  const holdings = []
+  let totalMarketCap = 0
+  for (const row of rows) {
+    const symbol = String(row && row.symbol || '').trim().toUpperCase()
+    const marketCap = parseLooseNum(row && row.marketCap)
+    if (!/^[A-Z][A-Z.\-]{0,9}$/.test(symbol)) continue
+    if (!Number.isFinite(marketCap) || marketCap <= 0) continue
+    totalMarketCap += marketCap
+    holdings.push({ symbol, marketCap })
+  }
+  return {
+    snapshot_date: normalizeDateOnly(asOfRaw),
+    holdings: totalMarketCap > 0 ? holdings.map(item => ({ symbol: item.symbol, weight: item.marketCap / totalMarketCap * 100 })) : []
+  }
+}
+
+const calcWeightedPeByHoldings = (holdings, quotes) => {
+  const bySymbol = new Map()
+  for (const item of Array.isArray(quotes) ? quotes : []) {
+    const symbol = String(item && item.symbol || '').trim().toUpperCase()
+    if (!symbol) continue
+    bySymbol.set(symbol, item)
+  }
+  let denominator = 0
+  let validWeight = 0
+  let validCount = 0
+  const missing = []
+  for (const item of Array.isArray(holdings) ? holdings : []) {
+    const quote = bySymbol.get(item.symbol)
+    let pe = quote ? parseLooseNum(quote.trailingPE) : NaN
+    if ((!Number.isFinite(pe) || pe <= 0) && quote) {
+      const price = parseLooseNum(quote.regularMarketPrice)
+      const eps = parseLooseNum(quote.epsTrailingTwelveMonths)
+      if (Number.isFinite(price) && Number.isFinite(eps) && eps > 0) pe = price / eps
+    }
+    if (!Number.isFinite(pe) || pe <= 0) {
+      missing.push(item.symbol)
+      continue
+    }
+    const weight = Number(item.weight) / 100
+    denominator += weight / pe
+    validWeight += weight
+    validCount += 1
+  }
+  return {
+    pe_ttm: denominator > 0 && validWeight > 0 ? validWeight / denominator : NaN,
+    coverage_weight: validWeight * 100,
+    component_count: Array.isArray(holdings) ? holdings.length : 0,
+    valid_component_count: validCount,
+    missing_symbols: missing
+  }
+}
+
+const daysDiffFromToday = dateOnly => {
+  const target = normalizeDateOnly(dateOnly)
+  const today = beijingDate(new Date())
+  const a = new Date(`${target}T00:00:00+08:00`).getTime()
+  const b = new Date(`${today}T00:00:00+08:00`).getTime()
+  if (!Number.isFinite(a) || !Number.isFinite(b)) return Infinity
+  return Math.floor((b - a) / 86400000)
+}
+
+const isSnapshotFresh = (snapshotDate, staleDays) => daysDiffFromToday(snapshotDate) <= Math.max(1, Number(staleDays || 2))
+
 const matchBand = (bands, pe) => {
   if (!Number.isFinite(pe)) return null
-  for (const b of bands) {
-    if (pe < b.max) return b
+  for (const band of bands) {
+    if (pe < band.max) return band
   }
   return bands[bands.length - 1]
 }
 
+const getPlan = key => INDEX_PLAN.find(item => item.key === key) || null
+
+const getLatestStoredSnapshot = (indexKey, preferredSources) => {
+  const rows = listValuationSnapshotsStmt.all(String(indexKey || '').trim())
+  if (!rows.length) return null
+  if (!Array.isArray(preferredSources) || !preferredSources.length) return rows[0]
+  for (const source of preferredSources) {
+    const hit = rows.find(row => String(row.source || '').trim() === String(source || '').trim())
+    if (hit) return hit
+  }
+  return rows[0]
+}
+
+const saveSnapshot = (plan, source, row, payload) => {
+  const snapshot = {
+    index_key: String(plan.key || '').trim(),
+    index_code: String(plan.code || '').trim(),
+    market: String(plan.market || '').trim(),
+    source: String(source || '').trim(),
+    snapshot_date: normalizeDateOnly(row.pe_date || row.snapshot_date || row.trade_date),
+    pe_ttm: Number.isFinite(row.pe_ttm) ? row.pe_ttm : null,
+    percentile: Number.isFinite(row.percentile) ? row.percentile : null,
+    percentile_note: String(row.percentile_note || '').trim(),
+    note: String(row.note || '').trim(),
+    payload_json: safeJsonStringify(payload || row || {})
+  }
+  upsertValuationSnapshotStmt.run(snapshot)
+  return getLatestValuationSnapshotStmt.get(plan.key)
+}
+
+const rowFromStoredSnapshot = (plan, snapshot, override) => {
+  if (!snapshot) return null
+  const pe = toNum(snapshot.pe_ttm)
+  const band = matchBand(plan.bands, pe)
+  const payload = parseJsonSafely(snapshot.payload_json)
+  const next = Object.assign({
+    name: plan.name,
+    code: plan.code,
+    market: plan.market,
+    pe_ttm: pe,
+    pe_date: normalizeDateOnly(snapshot.snapshot_date),
+    percentile: Number.isFinite(Number(snapshot.percentile)) ? Number(snapshot.percentile) : null,
+    percentile_note: String(snapshot.percentile_note || '').trim(),
+    source: SOURCE_LABEL_MAP[String(snapshot.source || '').trim()] || String(snapshot.source || '').trim() || '本地快照',
+    advice: band ? band.advice : '—',
+    level: band ? band.level : 'unknown',
+    note: String(snapshot.note || '').trim(),
+    payload
+  }, override || {})
+  return next
+}
+
+const calcPercentileBySeries = (series, currentPe) => {
+  const values = (Array.isArray(series) ? series : []).map(item => Number(item && item.pe)).filter(n => Number.isFinite(n) && n > 0)
+  if (!values.length || !Number.isFinite(currentPe) || currentPe <= 0) return null
+  let below = 0
+  for (const value of values) {
+    if (value <= currentPe) below += 1
+  }
+  return Math.round((below / values.length) * 1000) / 10
+}
+
+const extractSeriesFromPayload = payload => {
+  const candidates = [
+    payload && payload.history,
+    payload && payload.history_points,
+    payload && payload.series,
+    payload && payload.rows,
+    payload && payload.data && payload.data.history,
+    payload && payload.data && payload.data.rows,
+    payload && payload.data && payload.data.series
+  ]
+  for (const candidate of candidates) {
+    if (!Array.isArray(candidate)) continue
+    const out = candidate
+      .map(item => ({
+        date: normalizeDateOnly(item && (item.date || item.trade_date || item.month || item.snapshot_date)),
+        pe: toNum(item && (item.pe || item.pe_ttm || item.value || item.trailing_pe || item.current_pe))
+      }))
+      .filter(item => Number.isFinite(item.pe) && item.pe > 0)
+    if (out.length) return out
+  }
+  return []
+}
+
+const readMarketsConfig = () => {
+  try {
+    const p = path.join(process.cwd(), 'config', 'markets.json')
+    if (!fs.existsSync(p)) return {}
+    return JSON.parse(fs.readFileSync(p, 'utf-8'))
+  } catch {
+    return {}
+  }
+}
+
+const getDipEvalProbeConfig = () => {
+  const cfg = readMarketsConfig()
+  const yahooProbe = cfg && typeof cfg.yahoo_probe === 'object' ? cfg.yahoo_probe : {}
+  const raw = cfg && typeof cfg.dip_eval_probe === 'object' ? cfg.dip_eval_probe : {}
+  const baseUrl = String(raw.base_url || yahooProbe.base_url || 'https://yang-probe.umersoft.com').trim().replace(/\/+$/, '')
+  return {
+    enabled: raw.enabled !== false,
+    base_url: baseUrl || 'https://yang-probe.umersoft.com',
+    token: String(raw.token || yahooProbe.token || '').trim(),
+    request_timeout_ms: Math.max(5000, Number(raw.request_timeout_ms || 20000)),
+    min_interval_ms: Math.max(2500, Number(raw.min_interval_ms || 4500)),
+    stale_days: Math.max(1, Number(raw.stale_days || 2)),
+    daily_sync_hour_bj: Math.max(0, Math.min(23, Number(raw.daily_sync_hour_bj == null ? 7 : raw.daily_sync_hour_bj))),
+    daily_sync_minute_bj: Math.max(0, Math.min(59, Number(raw.daily_sync_minute_bj == null ? 20 : raw.daily_sync_minute_bj))),
+    weekend_sync: raw.weekend_sync === true
+  }
+}
+
+const probeState = { lastRequestAt: 0 }
+const sleep = ms => new Promise(resolve => setTimeout(resolve, ms))
+const throttleProbe = async cfg => {
+  const minInterval = Math.max(0, Number(cfg.min_interval_ms || 4500))
+  const waitMs = Math.max(0, minInterval - (Date.now() - Number(probeState.lastRequestAt || 0)))
+  if (waitMs > 0) await sleep(waitMs)
+  probeState.lastRequestAt = Date.now()
+}
+
+const requestProbeRaw = async (endpoint, extraParams, options) => {
+  const cfg = getDipEvalProbeConfig()
+  if (!cfg.enabled) throw new Error('dip_eval_probe_disabled')
+  if (!cfg.base_url) throw new Error('dip_eval_probe_base_missing')
+  if (!cfg.token) throw new Error('dip_eval_probe_token_missing')
+  await throttleProbe(cfg)
+  const url = `${cfg.base_url}${String(endpoint || '').startsWith('/') ? endpoint : `/${String(endpoint || '')}`}`
+  const resp = await axios.get(url, {
+    timeout: cfg.request_timeout_ms,
+    validateStatus: () => true,
+    headers: HTTP_HEADERS,
+    params: Object.assign({ token: cfg.token }, extraParams || {}),
+    responseType: 'text',
+    transformResponse: [data => data]
+  })
+  if (!resp || resp.status >= 400) {
+    const detail = String((resp && resp.data) || '').replace(/<[^>]+>/g, ' ').replace(/\s+/g, ' ').trim().slice(0, 80)
+    throw new Error(`dip_eval_probe_http_${resp && resp.status ? resp.status : 'ERR'}_${String(endpoint || '').replace(/[^\w]+/g, '_')}${detail ? `:${detail}` : ''}`)
+  }
+  return String(resp.data || '')
+}
+
+const requestProbeHtml = async (url, profile) => requestProbeRaw('/probe/rss', {
+  url,
+  profile: String(profile || '').trim() || undefined
+})
+
+const requestProbeJson = async (url, profile) => {
+  const text = await requestProbeHtml(url, profile)
+  try {
+    return JSON.parse(text)
+  } catch {
+    throw new Error('probe_json_invalid')
+  }
+}
+
+const requestProbeYahooQuote = async symbols => {
+  const text = await requestProbeRaw('/probe/yahoo', {
+    type: 'quote',
+    symbols: Array.isArray(symbols) ? symbols.join(',') : String(symbols || '')
+  })
+  try {
+    const payload = JSON.parse(text)
+    return payload && payload.quoteResponse && Array.isArray(payload.quoteResponse.result)
+      ? payload.quoteResponse.result
+      : []
+  } catch {
+    throw new Error('probe_yahoo_quote_json_invalid')
+  }
+}
+
+const buildProbeNote = (payload, defaultNote) => {
+  const note = []
+  const coverageWeight = toNum(payload && payload.coverage_weight)
+  const holdingsDate = String(payload && (payload.holdings_date || payload.holdings_as_of || payload.qqq_holdings_date) || '').trim()
+  const componentCount = Number(payload && (payload.component_count || payload.constituent_count || payload.holdings_count))
+  const validCount = Number(payload && (payload.valid_component_count || payload.valid_count))
+  if (Number.isFinite(coverageWeight)) note.push(`覆盖权重 ${coverageWeight.toFixed(1)}%`)
+  if (holdingsDate) note.push(`持仓日期 ${normalizeDateOnly(holdingsDate)}`)
+  if (Number.isFinite(componentCount) && componentCount > 0) {
+    if (Number.isFinite(validCount) && validCount >= 0) note.push(`有效成分 ${validCount}/${componentCount}`)
+    else note.push(`成分数量 ${componentCount}`)
+  }
+  if (defaultNote) note.unshift(defaultNote)
+  return note.join('；')
+}
+
 // ---------- 数据源抓取 ----------
 
-// 蛋卷基金指数估值：一次返回全部指数（含沪深300/中证500/标普500/纳指100）
-// 返回 Map<index_code, {pe, pe_percentile(0~1), date, begin_at}>
 const fetchDanjuanEva = async () => {
   const url = 'https://danjuanfunds.com/djapi/index_eva/dj'
   const res = await axios.get(url, { timeout: 15000, headers: HTTP_HEADERS, validateStatus: () => true })
@@ -146,237 +578,322 @@ const fetchDanjuanEva = async () => {
     if (!code) continue
     map[code] = {
       pe: toNum(it.pe),
-      pe_percentile: toNum(it.pe_percentile), // 0~1 小数
-      date: String(it.date || ''),            // 数据日期 MM-DD
-      begin_at: Number(it.begin_at || 0)      // 分位统计窗口起点（毫秒）
+      pe_percentile: toNum(it.pe_percentile),
+      date: String(it.date || ''),
+      begin_at: Number(it.begin_at || 0)
     }
   }
   return map
 }
 
-// 中证指数官网：指数官方日频行情（含市盈率 peg 字段，实测即 PE）
-// 返回按日期升序的 [{date, pe}]，覆盖近 10 年
 const fetchCsindexPeSeries = async code => {
   const end = beijingDateCompact(0)
-  const start = beijingDateCompact(-3652) // 约 10 年
+  const start = beijingDateCompact(-3652)
   const url = `https://www.csindex.com.cn/csindex-home/perf/index-perf?indexCode=${encodeURIComponent(code)}&startDate=${start}&endDate=${end}`
   const res = await axios.get(url, {
     timeout: 20000,
-    headers: { ...HTTP_HEADERS, 'Referer': 'https://www.csindex.com.cn/' },
+    headers: { ...HTTP_HEADERS, Referer: 'https://www.csindex.com.cn/' },
     validateStatus: () => true
   })
   const list = res && res.data && Array.isArray(res.data.data) ? res.data.data : []
   if (!list.length) throw new Error(`中证官网无数据(HTTP ${res ? res.status : '无响应'})`)
   const out = []
-  for (const r of list) {
-    const pe = toNum(r.peg) // 官网字段名为 peg，实测值即市盈率（与蛋卷 PE 一致）
+  for (const row of list) {
+    const pe = toNum(row.peg)
     if (!Number.isFinite(pe) || pe <= 0) continue
-    out.push({ date: String(r.tradeDate || ''), pe })
+    out.push({ date: String(row.tradeDate || ''), pe })
   }
   if (!out.length) throw new Error('中证官网返回记录中无有效市盈率')
   return out
 }
 
-// multpl.com：标普500 当前 PE 备源（页面文本 "Current S&P 500 PE Ratio is 29.26"）
-const fetchMultplSp500Pe = async () => {
-  const res = await axios.get('https://www.multpl.com/s-p-500-pe-ratio', { timeout: 15000, headers: HTTP_HEADERS, validateStatus: () => true })
-  const html = String(res && res.data ? res.data : '')
-  const m = html.match(/Current S&P 500 PE Ratio[^0-9]{0,40}([0-9]+(?:\.[0-9]+)?)/i)
-  if (!m) throw new Error('multpl 页面未匹配到 PE 数值')
-  const pe = toNum(m[1])
-  if (!Number.isFinite(pe) || pe <= 0) throw new Error('multpl PE 数值无效')
-  return pe
-}
-
 // ---------- 单指数评估 ----------
 
-// A股指数：中证官网主源（精确近10年分位），蛋卷备源
+const buildDanjuanFallbackRow = (plan, dj, sourceId, note) => {
+  if (!dj || !Number.isFinite(dj.pe)) return null
+  const band = matchBand(plan.bands, dj.pe)
+  const beginYear = dj.begin_at ? new Date(dj.begin_at + 8 * 3600 * 1000).toISOString().slice(0, 4) : ''
+  return {
+    name: plan.name,
+    code: plan.code,
+    market: plan.market,
+    pe_ttm: Math.round(dj.pe * 100) / 100,
+    pe_date: dj.date ? `${new Date().getFullYear()}-${dj.date}` : beijingDate(new Date()),
+    percentile: Number.isFinite(dj.pe_percentile) ? Math.round(dj.pe_percentile * 1000) / 10 : null,
+    percentile_note: beginYear ? `统计窗口自 ${beginYear} 年起（约10年）` : '蛋卷口径',
+    source: SOURCE_LABEL_MAP[sourceId] || '蛋卷基金',
+    advice: band ? band.advice : '—',
+    level: band ? band.level : 'unknown',
+    note: String(note || '').trim()
+  }
+}
+
 const evalAShareIndex = async (plan, danjuanMap, errors) => {
-  // 主源：中证指数官网近 10 年日频 PE，自行计算分位
   try {
     const series = await fetchCsindexPeSeries(plan.code)
     const latest = series[series.length - 1]
     const pe = latest.pe
-    // 分位 = 历史中 ≤ 当前 PE 的样本占比（样本即近10年全部交易日）
-    let below = 0
-    for (const s of series) {
-      if (s.pe <= pe) below++
-    }
-    const percentile = Math.round((below / series.length) * 1000) / 10
-    const band = matchBand(plan.bands, pe)
-    // 双源口径校验：蛋卷与中证官网的 PE 计算口径不同（如中证500 差异可达 30%），
-    // 差异超过 15% 时在界面上备注，避免单一口径误导定投决策
-    let note = ''
+    const percentile = calcPercentileBySeries(series, pe)
     const dj = danjuanMap && danjuanMap[plan.danjuan_code]
+    let note = ''
     if (dj && Number.isFinite(dj.pe) && Math.abs(dj.pe - pe) / pe > 0.15) {
       const djBand = matchBand(plan.bands, dj.pe)
       note = `蛋卷口径 PE=${dj.pe.toFixed(2)}（对应档位：${djBand ? djBand.advice : '—'}），与官方口径差异较大，请结合自身基金跟踪口径判断`
     }
-    return {
-      name: plan.name,
-      code: plan.code,
-      market: plan.market,
+    const row = rowFromStoredSnapshot(plan, saveSnapshot(plan, 'csindex_official', {
       pe_ttm: Math.round(pe * 100) / 100,
-      pe_date: latest.date.replace(/^(\d{4})(\d{2})(\d{2})$/, '$1-$2-$3'),
+      pe_date: latest.date,
       percentile,
       percentile_note: `近10年日频自算（${series.length} 个样本）`,
-      source: '中证指数官网',
-      advice: band ? band.advice : '—',
-      level: band ? band.level : 'unknown',
       note
-    }
-  } catch (e) {
-    errors.push(`${plan.name}：中证官网获取失败（${String(e.message || e)}），尝试备源`)
+    }, { history: series }), {
+      source: SOURCE_LABEL_MAP.csindex_official
+    })
+    return row
+  } catch (error) {
+    errors.push(`${plan.name}：中证官网获取失败（${String(error.message || error)}），尝试备源`)
   }
-  // 备源：蛋卷基金（其分位窗口自 2016-04 起，约 10 年）
   const dj = danjuanMap && danjuanMap[plan.danjuan_code]
-  if (dj && Number.isFinite(dj.pe)) {
-    const band = matchBand(plan.bands, dj.pe)
-    const beginYear = dj.begin_at ? new Date(dj.begin_at + 8 * 3600 * 1000).toISOString().slice(0, 4) : ''
-    return {
-      name: plan.name,
-      code: plan.code,
-      market: plan.market,
-      pe_ttm: Math.round(dj.pe * 100) / 100,
-      pe_date: dj.date ? `${new Date().getFullYear()}-${dj.date}` : '',
-      percentile: Number.isFinite(dj.pe_percentile) ? Math.round(dj.pe_percentile * 1000) / 10 : null,
-      percentile_note: beginYear ? `统计窗口自 ${beginYear} 年起（约10年）` : '蛋卷口径',
-      source: '蛋卷基金(备源)',
-      advice: band ? band.advice : '—',
-      level: band ? band.level : 'unknown'
-    }
+  const fallbackRow = buildDanjuanFallbackRow(plan, dj, 'danjuan_fallback')
+  if (fallbackRow) {
+    saveSnapshot(plan, 'danjuan_fallback', fallbackRow, dj || {})
+    return fallbackRow
   }
   errors.push(`${plan.name}：主源与备源均获取失败`)
   return null
 }
 
-// 美股指数：蛋卷主源（PE+分位）；标普500 额外有 multpl 备源（仅PE，分位显示 —）
-const evalUsIndex = async (plan, danjuanMap, errors) => {
+const syncSp500FromProbe = async errors => {
+  const plan = getPlan('sp500')
+  try {
+    const currentHtml = await requestProbeHtml('https://www.multpl.com/s-p-500-pe-ratio', 'browser_html')
+    const historyHtml = await requestProbeHtml('https://www.multpl.com/s-p-500-pe-ratio/table/by-month', 'browser_html')
+    const current = parseMultplCurrentPage(currentHtml)
+    const series = parseMultplHistoryPage(historyHtml)
+    const pe = toNum(current && current.pe_ttm)
+    if (!Number.isFinite(pe) || pe <= 0) throw new Error('multpl_probe_invalid_pe')
+    const percentile = calcPercentileBySeries(series, pe)
+    const percentileNote = series.length ? `multpl 月度历史自算（${series.length} 个样本）` : 'multpl 当前值'
+    const snapshot = saveSnapshot(plan, 'sp500_multpl_probe', {
+      pe_ttm: Math.round(pe * 100) / 100,
+      pe_date: current.snapshot_date || beijingDate(new Date()),
+      percentile,
+      percentile_note: percentileNote,
+      note: ''
+    }, { pe_ttm: pe, snapshot_date: current.snapshot_date, history: series })
+    return rowFromStoredSnapshot(plan, snapshot)
+  } catch (error) {
+    errors.push(`标普500：multpl 探针失败（${String(error.message || error)}），尝试 DQYDJ 兜底`)
+  }
+
+  try {
+    const html = await requestProbeHtml('https://dqydj.net/sp-500-pe-ratio/', 'browser_html')
+    const parsed = parseDqydjPage(html)
+    const pe = toNum(parsed && parsed.pe_ttm)
+    if (!Number.isFinite(pe) || pe <= 0) throw new Error('dqydj_probe_invalid_pe')
+    const series = parsed.history || []
+    const percentile = calcPercentileBySeries(series, pe)
+    const percentileNote = series.length ? `DQYDJ 月度历史自算（${series.length} 个样本）` : 'DQYDJ 当前值兜底'
+    const note = 'multpl 不可用时启用 DQYDJ 兜底'
+    const snapshot = saveSnapshot(plan, 'sp500_dqydj_probe', {
+      pe_ttm: Math.round(pe * 100) / 100,
+      pe_date: parsed.snapshot_date || beijingDate(new Date()),
+      percentile,
+      percentile_note: percentileNote,
+      note
+    }, { pe_ttm: pe, snapshot_date: parsed.snapshot_date, history: series })
+    return rowFromStoredSnapshot(plan, snapshot)
+  } catch (error) {
+    errors.push(`标普500：DQYDJ 兜底也失败（${String(error.message || error)}）`)
+  }
+  return rowFromStoredSnapshot(plan, getLatestStoredSnapshot('sp500', ['sp500_multpl_probe', 'sp500_dqydj_probe']))
+}
+
+const calcStoredSelfCalcPercentile = indexKey => {
+  const today = beijingDate(new Date())
+  const threshold = new Date(`${today}T00:00:00+08:00`)
+  threshold.setUTCFullYear(threshold.getUTCFullYear() - 10)
+  const limitDate = threshold.toISOString().slice(0, 10)
+  const rows = listValuationSnapshotsStmt.all(indexKey)
+    .filter(row => String(row.source || '') === 'ndx_self_calc_probe')
+    .filter(row => String(row.snapshot_date || '') >= limitDate)
+  const values = rows.map(row => Number(row.pe_ttm)).filter(n => Number.isFinite(n) && n > 0)
+  if (values.length < 30) return { percentile: null, sampleCount: values.length }
+  const current = values[0]
+  return { percentile: calcPercentileBySeries(values.map(pe => ({ pe })), current), sampleCount: values.length }
+}
+
+const syncNdxFromProbe = async (danjuanMap, errors) => {
+  const plan = getPlan('ndx')
+  try {
+    const ndxPayload = await requestProbeJson('https://api.nasdaq.com/api/quote/list-type/nasdaq100', 'nasdaq_json')
+    const ndx = parseNasdaq100List(ndxPayload)
+    if (!Array.isArray(ndx.holdings) || ndx.holdings.length < 80) throw new Error('nasdaq100_list_parse_failed')
+    const quotes = await requestProbeYahooQuote(ndx.holdings.map(item => item.symbol))
+    const calc = calcWeightedPeByHoldings(ndx.holdings, quotes)
+    const pe = toNum(calc && calc.pe_ttm)
+    if (!Number.isFinite(pe) || pe <= 0) throw new Error('ndx_self_calc_invalid_pe')
+    const rawPayload = {
+      snapshot_date: ndx.snapshot_date,
+      coverage_weight: calc.coverage_weight,
+      component_count: calc.component_count,
+      valid_component_count: calc.valid_component_count,
+      missing_symbols: calc.missing_symbols.slice(0, 20)
+    }
+    const snapshot = saveSnapshot(plan, 'ndx_self_calc_probe', {
+      pe_ttm: Math.round(pe * 100) / 100,
+      pe_date: ndx.snapshot_date || beijingDate(new Date()),
+      percentile: null,
+      percentile_note: '自算历史待累积',
+      note: buildProbeNote({
+        coverage_weight: calc.coverage_weight,
+        holdings_date: ndx.snapshot_date,
+        component_count: calc.component_count,
+        valid_component_count: calc.valid_component_count
+      }, '')
+    }, rawPayload)
+
+    const stored = getLatestStoredSnapshot('ndx', ['ndx_self_calc_probe'])
+    const next = rowFromStoredSnapshot(plan, stored)
+    if (!next) throw new Error('ndx_self_calc_snapshot_missing')
+
+    const ownPercentile = calcStoredSelfCalcPercentile('ndx')
+    if (Number.isFinite(ownPercentile.percentile)) {
+      next.percentile = ownPercentile.percentile
+      next.percentile_note = `本地自算历史（${ownPercentile.sampleCount} 个日样本）`
+      saveSnapshot(plan, 'ndx_self_calc_probe', next, rawPayload)
+      return next
+    }
+
+    const dj = danjuanMap && danjuanMap[plan.danjuan_code]
+    if (dj && Number.isFinite(dj.pe_percentile)) {
+      next.percentile = Math.round(dj.pe_percentile * 1000) / 10
+      next.percentile_note = `本地自算历史样本 ${ownPercentile.sampleCount} 个，分位暂用蛋卷兜底`
+      next.note = [next.note, `蛋卷 PE=${Number.isFinite(dj.pe) ? dj.pe.toFixed(2) : '—'}`].filter(Boolean).join('；')
+      saveSnapshot(plan, 'ndx_self_calc_probe', next, rawPayload)
+      return next
+    }
+
+    next.percentile = null
+    next.percentile_note = `本地自算历史样本 ${ownPercentile.sampleCount} 个，暂不显示分位`
+    saveSnapshot(plan, 'ndx_self_calc_probe', next, rawPayload)
+    return next
+  } catch (error) {
+    errors.push(`纳指100：Nasdaq+Yahoo 本地自算失败（${String(error.message || error)}），尝试蛋卷兜底`)
+  }
+
   const dj = danjuanMap && danjuanMap[plan.danjuan_code]
-  if (dj && Number.isFinite(dj.pe)) {
-    const band = matchBand(plan.bands, dj.pe)
-    const beginYear = dj.begin_at ? new Date(dj.begin_at + 8 * 3600 * 1000).toISOString().slice(0, 4) : ''
-    return {
-      name: plan.name,
-      code: plan.code,
-      market: plan.market,
-      pe_ttm: Math.round(dj.pe * 100) / 100,
-      pe_date: dj.date ? `${new Date().getFullYear()}-${dj.date}` : '',
-      percentile: Number.isFinite(dj.pe_percentile) ? Math.round(dj.pe_percentile * 1000) / 10 : null,
-      percentile_note: beginYear ? `统计窗口自 ${beginYear} 年起（约10年）` : '蛋卷口径',
-      source: '蛋卷基金',
-      advice: band ? band.advice : '—',
-      level: band ? band.level : 'unknown'
-    }
+  const fallbackRow = buildDanjuanFallbackRow(plan, dj, 'ndx_danjuan_fallback', '本地自算不可用时启用蛋卷兜底')
+  if (fallbackRow) {
+    saveSnapshot(plan, 'ndx_danjuan_fallback', fallbackRow, dj || {})
+    return fallbackRow
   }
-  errors.push(`${plan.name}：蛋卷主源获取失败，尝试备源`)
-  // 备源：仅标普500 有 multpl（月度更新的当前PE，无历史分位 → 分位显示 —）
-  if (plan.key === 'sp500') {
-    try {
-      const pe = await fetchMultplSp500Pe()
-      const band = matchBand(plan.bands, pe)
-      return {
-        name: plan.name,
-        code: plan.code,
-        market: plan.market,
-        pe_ttm: Math.round(pe * 100) / 100,
-        pe_date: beijingNow().slice(0, 10),
-        percentile: null, // 备源无历史序列，分位无法计算，显示 —
-        percentile_note: '备源无历史数据',
-        source: 'multpl.com(备源)',
-        advice: band ? band.advice : '—',
-        level: band ? band.level : 'unknown'
-      }
-    } catch (e) {
-      errors.push(`${plan.name}：multpl 备源也失败（${String(e.message || e)}）`)
-    }
-  }
-  return null
+  errors.push('纳指100：主源与兜底均获取失败')
+  return rowFromStoredSnapshot(plan, getLatestStoredSnapshot('ndx', ['ndx_self_calc_probe', 'ndx_danjuan_fallback']))
 }
 
-// ---------- 控制台文本表格（对齐打印，中文按 2 列宽处理） ----------
+const ensureOverseasSnapshots = async (danjuanMap, errors, options) => {
+  const opts = options || {}
+  const cfg = getDipEvalProbeConfig()
+  const force = !!opts.force
+  const spStored = getLatestStoredSnapshot('sp500', ['sp500_multpl_probe', 'sp500_dqydj_probe'])
+  const ndxStored = getLatestStoredSnapshot('ndx', ['ndx_self_calc_probe', 'ndx_danjuan_fallback'])
+
+  let spRow = spStored ? rowFromStoredSnapshot(getPlan('sp500'), spStored) : null
+  let ndxRow = ndxStored ? rowFromStoredSnapshot(getPlan('ndx'), ndxStored) : null
+
+  const needRefreshSp = force || !spStored || !isSnapshotFresh(spStored.snapshot_date, cfg.stale_days)
+  const needRefreshNdx = force || !ndxStored || !isSnapshotFresh(ndxStored.snapshot_date, cfg.stale_days)
+
+  if (needRefreshSp) {
+    const refreshed = await syncSp500FromProbe(errors)
+    if (refreshed) spRow = refreshed
+  }
+  if (needRefreshNdx) {
+    const refreshed = await syncNdxFromProbe(danjuanMap, errors)
+    if (refreshed) ndxRow = refreshed
+  }
+
+  return { sp500: spRow, ndx: ndxRow }
+}
+
+// ---------- 控制台文本表格 ----------
 
-// 计算字符串显示宽度（CJK 字符按 2 列）
 const displayWidth = str => {
-  let w = 0
+  let width = 0
   for (const ch of String(str == null ? '' : str)) {
-    w += /[\u1100-\u115F\u2E80-\uA4CF\uAC00-\uD7A3\uF900-\uFAFF\uFE30-\uFE4F\uFF00-\uFF60\uFFE0-\uFFE6]/.test(ch) ? 2 : 1
+    width += /[\u1100-\u115F\u2E80-\uA4CF\uAC00-\uD7A3\uF900-\uFAFF\uFE30-\uFE4F\uFF00-\uFF60\uFFE0-\uFFE6]/.test(ch) ? 2 : 1
   }
-  return w
+  return width
 }
 
-// 按显示宽度填充对齐
 const padCell = (str, width) => {
   const s = String(str == null ? '' : str)
   const gap = width - displayWidth(s)
   return s + (gap > 0 ? ' '.repeat(gap) : '')
 }
 
-// 控制台打印清晰文本表格（用户要求：运行后控制台打印）
 const printConsoleTable = (rows, errors) => {
   try {
     const header = ['指数名称', '代码', 'PE-TTM', '近10年PE分位', '数据日期', '定投建议']
-    const lines = rows.map(r => [
-      r.name,
-      r.code,
-      Number.isFinite(r.pe_ttm) ? r.pe_ttm.toFixed(2) : '—',
-      Number.isFinite(r.percentile) ? `${r.percentile.toFixed(1)}%` : '—',
-      r.pe_date || '—',
-      r.advice || '—'
+    const lines = rows.map(row => [
+      row.name,
+      row.code,
+      Number.isFinite(row.pe_ttm) ? row.pe_ttm.toFixed(2) : '—',
+      Number.isFinite(row.percentile) ? `${row.percentile.toFixed(1)}%` : '—',
+      row.pe_date || '—',
+      row.advice || '—'
     ])
-    const widths = header.map((h, i) => Math.max(displayWidth(h), ...lines.map(l => displayWidth(l[i]))))
+    const widths = header.map((title, index) => Math.max(displayWidth(title), ...lines.map(line => displayWidth(line[index]))))
     const sep = '─'.repeat(widths.reduce((a, b) => a + b, 0) + widths.length * 3 + 1)
     console.log('')
     console.log(`┌${sep}┐`)
     console.log(`│ 【建行定投评估】 ${beijingNow()} │`)
     console.log(`├${sep}┤`)
-    console.log(`│ ${header.map((h, i) => padCell(h, widths[i])).join(' │ ')} │`)
+    console.log(`│ ${header.map((title, index) => padCell(title, widths[index])).join(' │ ')} │`)
     console.log(`├${sep}┤`)
-    for (const l of lines) {
-      console.log(`│ ${l.map((c, i) => padCell(c, widths[i])).join(' │ ')} │`)
+    for (const line of lines) {
+      console.log(`│ ${line.map((cell, index) => padCell(cell, widths[index])).join(' │ ')} │`)
     }
     console.log(`└${sep}┘`)
     if (errors && errors.length) {
       console.log('【异常提示】')
-      for (const e of errors) console.log(`  ⚠ ${e}`)
+      for (const item of errors) console.log(`  ⚠ ${item}`)
     }
     console.log('')
-  } catch (e) {
-    // 打印失败不影响主流程
-    try { logJSON('markets.dip_eval.print.error', { error: String(e.message || e) }, 'markets') } catch {}
+  } catch (error) {
+    try { logJSON('markets.dip_eval.print.error', { error: String(error.message || error) }, 'markets') } catch {}
   }
 }
 
 // ---------- 主入口 ----------
 
-const getDipEvalReport = async () => {
+const getDipEvalReport = async options => {
   const startedAt = Date.now()
   const errors = []
-
-  // 1. 先抓蛋卷（一次覆盖四指数），失败不中断，A股还有中证官网主源
   let danjuanMap = {}
   try {
     danjuanMap = await fetchDanjuanEva()
-  } catch (e) {
-    errors.push(`蛋卷基金接口整体失败：${String(e.message || e)}`)
+  } catch (error) {
+    errors.push(`蛋卷基金接口整体失败：${String(error.message || error)}`)
   }
 
-  // 2. 并行评估四个指数，单个失败不影响其他
-  const evalTasks = INDEX_PLAN.map(plan => {
-    const worker = plan.csindex ? evalAShareIndex : evalUsIndex
-    return worker(plan, danjuanMap, errors).catch(e => {
-      errors.push(`${plan.name}：评估过程异常（${String(e.message || e)}）`)
-      return null
-    })
-  })
-  const results = await Promise.all(evalTasks)
+  const results = []
+  const csi300 = await evalAShareIndex(getPlan('csi300'), danjuanMap, errors)
+  if (csi300) results.push(csi300)
+  const csi500 = await evalAShareIndex(getPlan('csi500'), danjuanMap, errors)
+  if (csi500) results.push(csi500)
 
-  const rows = []
-  INDEX_PLAN.forEach((plan, i) => {
-    if (results[i]) rows.push(results[i])
-  })
+  const overseas = await ensureOverseasSnapshots(danjuanMap, errors, options)
+  if (overseas.sp500) results.push(overseas.sp500)
+  if (overseas.ndx) results.push(overseas.ndx)
+
+  const sortOrder = { csi300: 1, csi500: 2, ndx: 3, sp500: 4 }
+  const rows = results
+    .map(row => ({ row, key: (INDEX_PLAN.find(item => item.code === row.code) || {}).key || '' }))
+    .sort((a, b) => (sortOrder[a.key] || 999) - (sortOrder[b.key] || 999))
+    .map(item => item.row)
 
-  // 3. 控制台打印文本表格（用户要求）
   printConsoleTable(rows, errors)
 
   try {
@@ -384,15 +901,70 @@ const getDipEvalReport = async () => {
       ok: rows.length > 0,
       rows: rows.length,
       errors,
+      force_refresh: !!(options && options.force),
       elapsed_ms: Date.now() - startedAt
     }, 'markets')
   } catch {}
 
-  // 全部失败才视为整体失败（前端弹窗强提示）；部分失败在 errors 中逐条说明
   if (!rows.length) {
     return { ok: false, error: `所有数据源均获取失败：${errors.join('；')}`, rows: [], errors, captured_at: beijingNow() }
   }
   return { ok: true, rows, errors, captured_at: beijingNow(), elapsed_ms: Date.now() - startedAt }
 }
 
-module.exports = { getDipEvalReport }
+// ---------- 日频同步调度（8977） ----------
+
+let schedulerStarted = false
+
+const shouldRunToday = cfg => {
+  if (cfg.weekend_sync) return true
+  const now = new Date(new Date().toLocaleString('en-US', { timeZone: 'Asia/Shanghai' }))
+  const day = now.getDay()
+  return day >= 1 && day <= 5
+}
+
+const scheduleNextDailySync = () => {
+  const cfg = getDipEvalProbeConfig()
+  const now = new Date()
+  const bjNow = new Date(now.toLocaleString('en-US', { timeZone: 'Asia/Shanghai' }))
+  const target = new Date(bjNow)
+  target.setHours(cfg.daily_sync_hour_bj, cfg.daily_sync_minute_bj, 0, 0)
+  if (bjNow >= target) target.setDate(target.getDate() + 1)
+  const delayMs = Math.max(5000, target.getTime() - bjNow.getTime())
+  setTimeout(async () => {
+    try {
+      if (shouldRunToday(cfg)) {
+        await getDipEvalReport({ force: true })
+        logJSON('markets.dip_eval.scheduler.sync', { ok: true, captured_at: beijingNow() }, 'markets')
+      } else {
+        logJSON('markets.dip_eval.scheduler.skip_weekend', { captured_at: beijingNow() }, 'markets')
+      }
+    } catch (error) {
+      logJSON('markets.dip_eval.scheduler.error', { error: String(error && error.message ? error.message : error) }, 'markets')
+    }
+    scheduleNextDailySync()
+  }, delayMs)
+}
+
+const startScheduler = () => {
+  if (schedulerStarted) return
+  schedulerStarted = true
+  const port = Number(process.env.PORT || '8976') || 8976
+  if (port !== 8977) {
+    try { logJSON('markets.dip_eval.scheduler.skip', { port, recommended_runner_port: 8977 }, 'markets') } catch {}
+    return
+  }
+  setTimeout(async () => {
+    try {
+      if (shouldRunToday(getDipEvalProbeConfig())) {
+        await getDipEvalReport({ force: true })
+        logJSON('markets.dip_eval.scheduler.warmup', { ok: true, captured_at: beijingNow() }, 'markets')
+      }
+    } catch (error) {
+      logJSON('markets.dip_eval.scheduler.warmup_error', { error: String(error && error.message ? error.message : error) }, 'markets')
+    }
+  }, 30000)
+  scheduleNextDailySync()
+}
+
+module.exports = { getDipEvalReport, startScheduler }