diff --git a/.gitignore b/.gitignore
index 52e73a3..3ecac5b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,6 +8,7 @@ Thumbs.db
 /.idea
 /.vscode
 /vendor
+/.secret_encryption.key
 /.settings
 /.buildpath
 /.project
@@ -15,3 +16,8 @@ Thumbs.db
 package.json
 package-lock.json
 static/tailwindcss-browser.js
+
+# Local runtime data
+/data/
+*.sqlite*
+monitor.db
diff --git a/AliyunService.php b/AliyunService.php
index 1bd37c5..16d55c6 100644
--- a/AliyunService.php
+++ b/AliyunService.php
@@ -6,6 +6,10 @@ use AlibabaCloud\Client\Exception\ServerException;
 
 class AliyunService
 {
+    private $regionCache = [];
+    private $managedTagKey = 'ecs-controller-managed';
+    private $managedTagValue = 'true';
+
     /**
      * 智能重试执行器
      * 自动处理网络抖动、超时和服务端临时错误
@@ -73,6 +77,23 @@ class AliyunService
 
     private $trafficCache = [];
 
+    private function setDefaultClient($key, $secret, $regionId)
+    {
+        AlibabaCloud::accessKeyClient($key, $secret)
+            ->regionId($regionId)
+            ->asDefaultClient();
+    }
+
+    private function ecsHost($regionId)
+    {
+        return "ecs.{$regionId}.aliyuncs.com";
+    }
+
+    private function vpcHost($regionId)
+    {
+        return "vpc.{$regionId}.aliyuncs.com";
+    }
+
     /**
      * 判断是否为海外区域
      * 国内区域：cn-* (排除 cn-hongkong)
@@ -164,6 +185,170 @@ class AliyunService
         throw new \Exception("API 响应缺少 TrafficDetails 字段");
     }
 
+    /**
+     * 获取 ECS 实例公网出口分钟带宽点，并换算为字节增量。
+     * 阿里云 ECS 公网按出方向流量计费；这里优先使用 VPC 公网 IP 维度指标，经典网络回退到实例维度指标。
+     *
+     * @return array ['bytes' => float, 'lastSampleMs' => int, 'points' => int, 'metric' => string]
+     * @throws \Exception
+     */
+    public function getInstanceOutboundTrafficDelta($account, $startMs, $endMs)
+    {
+        if (empty($account['instance_id'])) {
+            throw new \Exception('未配置 Instance ID');
+        }
+
+        if ($endMs <= $startMs) {
+            return [
+                'bytes' => 0.0,
+                'lastSampleMs' => (int) $startMs,
+                'points' => 0,
+                'metric' => ''
+            ];
+        }
+
+        $metricCandidates = [];
+        $publicIp = trim((string) ($account['public_ip'] ?? ''));
+        if ($publicIp !== '') {
+            $metricCandidates[] = [
+                'name' => 'VPC_PublicIP_InternetOutRate',
+                'dimensions' => [[
+                    'instanceId' => $account['instance_id'],
+                    'ip' => $publicIp
+                ]]
+            ];
+        }
+
+        $metricCandidates[] = [
+            'name' => 'InternetOutRate',
+            'dimensions' => [[
+                'instanceId' => $account['instance_id']
+            ]]
+        ];
+
+        $lastException = null;
+        foreach ($metricCandidates as $candidate) {
+            try {
+                $result = $this->queryMetricRateAsBytes(
+                    $account['access_key_id'],
+                    $account['access_key_secret'],
+                    $candidate['name'],
+                    $candidate['dimensions'],
+                    $startMs,
+                    $endMs
+                );
+
+                if ($result['points'] > 0 || $candidate['name'] === 'InternetOutRate') {
+                    $result['metric'] = $candidate['name'];
+                    return $result;
+                }
+            } catch (\Exception $e) {
+                $lastException = $e;
+            }
+        }
+
+        if ($lastException) {
+            throw $lastException;
+        }
+
+        return [
+            'bytes' => 0.0,
+            'lastSampleMs' => (int) $startMs,
+            'points' => 0,
+            'metric' => ''
+        ];
+    }
+
+    private function queryMetricRateAsBytes($key, $secret, $metricName, array $dimensions, $startMs, $endMs)
+    {
+        $period = 60;
+        $chunkMs = 24 * 3600 * 1000;
+        $cursor = (int) $startMs;
+        $totalBytes = 0.0;
+        $lastSampleMs = (int) $startMs;
+        $pointCount = 0;
+
+        while ($cursor < $endMs) {
+            $chunkEnd = min($cursor + $chunkMs, (int) $endMs);
+            $nextToken = null;
+
+            do {
+                $query = [
+                    'Namespace' => 'acs_ecs_dashboard',
+                    'MetricName' => $metricName,
+                    'Period' => (string) $period,
+                    'StartTime' => (string) $cursor,
+                    'EndTime' => (string) $chunkEnd,
+                    'Dimensions' => json_encode($dimensions, JSON_UNESCAPED_SLASHES),
+                    'Length' => '1440'
+                ];
+
+                if (!empty($nextToken)) {
+                    $query['NextToken'] = $nextToken;
+                }
+
+                $result = $this->executeWithRetry(function () use ($key, $secret, $query) {
+                    AlibabaCloud::accessKeyClient($key, $secret)
+                        ->regionId('cn-hangzhou')
+                        ->asDefaultClient();
+
+                    return AlibabaCloud::rpc()
+                        ->product('Cms')
+                        ->scheme('https')
+                        ->version('2019-01-01')
+                        ->action('DescribeMetricList')
+                        ->method('POST')
+                        ->host('metrics.aliyuncs.com')
+                        ->options([
+                            'query' => $query,
+                            'connect_timeout' => 5.0,
+                            'timeout' => 15.0
+                        ])
+                        ->request();
+                }, 'queryMetricRateAsBytes');
+
+                $datapoints = $result['Datapoints'] ?? '[]';
+                if (is_string($datapoints)) {
+                    $datapoints = json_decode($datapoints, true);
+                }
+                if (!is_array($datapoints)) {
+                    $datapoints = [];
+                }
+
+                usort($datapoints, function ($a, $b) {
+                    return ((int) ($a['timestamp'] ?? 0)) <=> ((int) ($b['timestamp'] ?? 0));
+                });
+
+                foreach ($datapoints as $point) {
+                    $timestamp = (int) ($point['timestamp'] ?? 0);
+                    if ($timestamp <= $startMs || $timestamp > $endMs) {
+                        continue;
+                    }
+
+                    $rateBitsPerSecond = (float) ($point['Average'] ?? $point['Maximum'] ?? $point['Minimum'] ?? 0);
+                    if ($rateBitsPerSecond < 0) {
+                        $rateBitsPerSecond = 0;
+                    }
+
+                    $totalBytes += ($rateBitsPerSecond * $period) / 8;
+                    $lastSampleMs = max($lastSampleMs, $timestamp);
+                    $pointCount++;
+                }
+
+                $nextToken = $result['NextToken'] ?? null;
+            } while (!empty($nextToken));
+
+            $cursor = $chunkEnd;
+        }
+
+        return [
+            'bytes' => $totalBytes,
+            'lastSampleMs' => $lastSampleMs,
+            'points' => $pointCount,
+            'metric' => $metricName
+        ];
+    }
+
     /**
      * 获取实例状态
      * @throws \Exception
@@ -183,7 +368,8 @@ class AliyunService
             ];
 
             if (!empty($account['instance_id'])) {
-                $options['query']['InstanceId'] = $account['instance_id'];
+                // 修改：阿里云 RPC 风格接口对于列表类参数（如 InstanceId.N）需要明确的索引
+                $options['query']['InstanceId.1'] = $account['instance_id'];
             }
 
             $result = AlibabaCloud::rpc()
@@ -196,14 +382,107 @@ class AliyunService
                 ->options($options)
                 ->request();
 
-            if (isset($result['InstanceStatuses']['InstanceStatus'][0]['Status'])) {
-                return $result['InstanceStatuses']['InstanceStatus'][0]['Status'];
+            $statuses = $result['InstanceStatuses']['InstanceStatus'] ?? [];
+            foreach ($statuses as $item) {
+                if (($item['InstanceId'] ?? '') === $account['instance_id']) {
+                    return $item['Status'];
+                }
             }
 
-            throw new \Exception("API 响应未找到实例状态 (请检查 Instance ID)");
+            // 如果没找到匹配的 ID，且返回了列表（说明过滤参数没生效），且当前账号只有一个实例 ID，则抛出异常
+            if (empty($statuses) || count($statuses) > 1) {
+                throw new \Exception("API 响应未找到匹配的实例状态 (ID: {$account['instance_id']})");
+            }
+
+            return 'Unknown';
         }, 'getInstanceStatus');
     }
 
+    /**
+     * 获取实例详细健康状态 (用于识别操作系统启动中等状态)
+     */
+    public function getInstanceFullStatus($account)
+    {
+        return $this->executeWithRetry(function () use ($account) {
+            AlibabaCloud::accessKeyClient($account['access_key_id'], $account['access_key_secret'])
+                ->regionId($account['region_id'])
+                ->asDefaultClient();
+
+            $options = [
+                'query' => [
+                    'RegionId' => $account['region_id'],
+                    'InstanceId.1' => $account['instance_id']
+                ],
+                'connect_timeout' => 5.0,
+                'timeout' => 10.0
+            ];
+
+            $result = AlibabaCloud::rpc()
+                ->product('Ecs')
+                ->scheme('https')
+                ->version('2014-05-26')
+                ->action('DescribeInstancesFullStatus')
+                ->method('POST')
+                ->host("ecs.{$account['region_id']}.aliyuncs.com")
+                ->options($options)
+                ->request();
+
+            $statusSet = $result['InstanceFullStatusSet']['InstanceFullStatus'][0] ?? null;
+            if ($statusSet && ($statusSet['InstanceId'] ?? '') === $account['instance_id']) {
+                return [
+                    'status' => $statusSet['Status']['Name'] ?? 'Unknown',
+                    'healthStatus' => $statusSet['HealthStatus']['Name'] ?? 'Unknown',
+                ];
+            }
+
+            return null;
+        }, 'getInstanceFullStatus');
+    }
+
+    /**
+     * 释放（删除）实例
+     * @throws \Exception
+     */
+    public function deleteInstance($account, $forceStop = false)
+    {
+        if (empty($account['instance_id'])) {
+            throw new \Exception("未配置 Instance ID");
+        }
+
+        try {
+            return $this->executeWithRetry(function () use ($account) {
+                AlibabaCloud::accessKeyClient($account['access_key_id'], $account['access_key_secret'])
+                    ->regionId($account['region_id'])
+                    ->asDefaultClient();
+
+                AlibabaCloud::rpc()
+                    ->product('Ecs')
+                    ->scheme('https')
+                    ->version('2014-05-26')
+                    ->action('DeleteInstance')
+                    ->method('POST')
+                    ->host("ecs.{$account['region_id']}.aliyuncs.com")
+                    ->options([
+                        'query' => [
+                            'RegionId' => $account['region_id'],
+                            'InstanceId' => $account['instance_id'],
+                            'Force' => true,
+                        ],
+                        'connect_timeout' => 5.0,
+                        'timeout' => 15.0
+                    ])
+                    ->request();
+
+                return true;
+            }, 'deleteInstance');
+        } catch (ServerException $e) {
+            $code = $e->getErrorCode();
+            if (stripos($code, 'NotFound') !== false || stripos($code, 'InvalidInstanceId') !== false) {
+                return true;
+            }
+            throw $e;
+        }
+    }
     /**
      * 控制实例开关机
      * @throws \Exception
@@ -247,6 +526,1020 @@ class AliyunService
         }, 'controlInstance');
     }
 
+    /**
+     * 获取当前账号可访问的地域列表
+     * @param string $key
+     * @param string $secret
+     * @return array
+     * @throws \Exception
+     */
+    public function getRegions($key, $secret)
+    {
+        $cacheKey = md5($key);
+        if (isset($this->regionCache[$cacheKey])) {
+            return $this->regionCache[$cacheKey];
+        }
+
+        $result = $this->executeWithRetry(function () use ($key, $secret) {
+            AlibabaCloud::accessKeyClient($key, $secret)
+                ->regionId('cn-hangzhou')
+                ->asDefaultClient();
+
+            return AlibabaCloud::rpc()
+                ->product('Ecs')
+                ->scheme('https')
+                ->version('2014-05-26')
+                ->action('DescribeRegions')
+                ->method('POST')
+                ->host('ecs.cn-hangzhou.aliyuncs.com')
+                ->options([
+                    'connect_timeout' => 5.0,
+                    'timeout' => 10.0
+                ])
+                ->request();
+        }, 'getRegions');
+
+        $regions = [];
+        foreach (($result['Regions']['Region'] ?? []) as $region) {
+            if (empty($region['RegionId'])) {
+                continue;
+            }
+
+            $regions[] = [
+                'regionId' => $region['RegionId'],
+                'localName' => $region['LocalName'] ?? $region['RegionId']
+            ];
+        }
+
+        $this->regionCache[$cacheKey] = $regions;
+        return $regions;
+    }
+
+    /**
+     * 列出当前账号下所有 ECS 实例
+     * @param string $key
+     * @param string $secret
+     * @return array
+     * @throws \Exception
+     */
+    public function getInstances($key, $secret, $targetRegionId = null)
+    {
+        $regions = $this->getRegions($key, $secret);
+        if (!empty($targetRegionId)) {
+            $matchedRegion = null;
+            foreach ($regions as $region) {
+                if (($region['regionId'] ?? '') === $targetRegionId) {
+                    $matchedRegion = $region;
+                    break;
+                }
+            }
+
+            $regions = [[
+                'regionId' => $targetRegionId,
+                'localName' => $matchedRegion['localName'] ?? $targetRegionId
+            ]];
+        }
+
+        $instances = [];
+
+        foreach ($regions as $region) {
+            $pageNumber = 1;
+
+            try {
+                do {
+                    $result = $this->executeWithRetry(function () use ($key, $secret, $region, $pageNumber) {
+                        AlibabaCloud::accessKeyClient($key, $secret)
+                            ->regionId($region['regionId'])
+                            ->asDefaultClient();
+
+                        return AlibabaCloud::rpc()
+                            ->product('Ecs')
+                            ->scheme('https')
+                            ->version('2014-05-26')
+                            ->action('DescribeInstances')
+                            ->method('POST')
+                            ->host("ecs.{$region['regionId']}.aliyuncs.com")
+                            ->options([
+                                'query' => [
+                                    'RegionId' => $region['regionId'],
+                                    'PageSize' => 100,
+                                    'PageNumber' => $pageNumber
+                                ],
+                                'connect_timeout' => 8.0,
+                                'timeout' => 20.0
+                            ])
+                            ->request();
+                    }, 'getInstances');
+
+                    $items = $result['Instances']['Instance'] ?? [];
+                    foreach ($items as $instance) {
+                        $instances[] = [
+                            'instanceId' => $instance['InstanceId'] ?? '',
+                            'instanceName' => $instance['InstanceName'] ?? '',
+                            'status' => $instance['Status'] ?? 'Unknown',
+                            'regionId' => $region['regionId'],
+                            'regionName' => $region['localName'],
+                            'instanceType' => $instance['InstanceType'] ?? '',
+                            'cpu' => $instance['Cpu'] ?? 0,
+                            'memory' => $instance['Memory'] ?? 0,
+                            'internetMaxBandwidthOut' => (int) ($instance['InternetMaxBandwidthOut'] ?? 0),
+                            'osName' => $instance['OSName'] ?? '',
+                            'publicIp' => $instance['PublicIpAddress']['IpAddress'][0] ?? $instance['EipAddress']['IpAddress'] ?? '',
+                            'privateIp' => $instance['VpcAttributes']['PrivateIpAddress']['IpAddress'][0] ?? '',
+                            'stoppedMode' => $instance['StoppedMode'] ?? '',
+                            'chargeType' => $instance['InstanceChargeType'] ?? ''
+                        ];
+                    }
+
+                    $totalCount = (int) ($result['TotalCount'] ?? count($items));
+                    $pageSize = (int) ($result['PageSize'] ?? 100);
+                    $pageNumber++;
+                } while ($totalCount > 0 && (($pageNumber - 1) * $pageSize) < $totalCount);
+            } catch (\Exception $e) {
+                if (!empty($targetRegionId)) {
+                    throw $e;
+                }
+                continue;
+            }
+        }
+
+        usort($instances, function ($a, $b) {
+            $regionCompare = strcmp($a['regionId'], $b['regionId']);
+            if ($regionCompare !== 0) {
+                return $regionCompare;
+            }
+
+            return strcmp($a['instanceId'], $b['instanceId']);
+        });
+
+        return $instances;
+    }
+
+    public function buildEcsCreatePreview($account, array $request, $clientIp = '')
+    {
+        $regionId = trim((string) ($request['regionId'] ?? $account['region_id'] ?? ''));
+        $instanceType = trim((string) ($request['instanceType'] ?? '')) ?: 'ecs.e-c4m1.large';
+        $osKey = trim((string) ($request['osKey'] ?? 'ubuntu_22'));
+        $instanceName = trim((string) ($request['instanceName'] ?? ''));
+        if ($instanceName === '') {
+            $instanceName = 'launch-' . date('Ymd-His');
+        }
+        $requestedDiskSize = (int) ($request['systemDiskSize'] ?? 20);
+
+        if ($regionId === '') {
+            throw new \Exception('请选择区域');
+        }
+
+        $key = $account['access_key_id'];
+        $secret = $account['access_key_secret'];
+
+        $zone = $this->selectAvailableZone($key, $secret, $regionId, $instanceType);
+        $instanceTypeInfo = $this->describeInstanceType($key, $secret, $regionId, $instanceType);
+        $image = $this->selectSystemImage($key, $secret, $regionId, $osKey, $instanceTypeInfo['CpuArchitecture'] ?? '');
+        $diskCategory = $this->selectDiskCategory($zone);
+        $diskRange = $this->getSystemDiskSizeRange($key, $secret, $regionId, $zone['zoneId'], $instanceType, $diskCategory);
+        $diskSize = $this->normalizeSystemDiskSize($requestedDiskSize, $diskRange);
+        $bandwidth = $this->estimateMaxBandwidthOut($instanceType, $regionId);
+        $loginPort = ($image['osType'] ?? 'linux') === 'windows' ? 3389 : 22;
+        $loginUser = ($image['osType'] ?? 'linux') === 'windows' ? 'Administrator' : 'root';
+        $securityRule = '默认全开：允许 0.0.0.0/0 入方向 TCP/UDP/ICMP';
+
+        return [
+            'account' => [
+                'groupKey' => $account['group_key'] ?? '',
+                'label' => trim((string) ($account['remark'] ?? '')) ?: substr($key, 0, 7) . '***'
+            ],
+            'regionId' => $regionId,
+            'zoneId' => $zone['zoneId'],
+            'instanceType' => $instanceType,
+            'instanceName' => $instanceName,
+            'osKey' => $osKey,
+            'osLabel' => $image['label'],
+            'imageId' => $image['imageId'],
+            'imageSize' => (int) ($image['size'] ?? 0),
+            'loginUser' => $loginUser,
+            'loginPort' => $loginPort,
+            'clientCidrIp' => '0.0.0.0/0',
+            'chargeType' => 'PostPaid',
+            'internetChargeType' => 'PayByTraffic',
+            'internetMaxBandwidthOut' => $bandwidth,
+            'systemDisk' => [
+                'category' => $diskCategory,
+                'size' => $diskSize,
+                'min' => $diskRange['min'],
+                'max' => $diskRange['max'],
+                'unit' => $diskRange['unit']
+            ],
+            'network' => [
+                'vpc' => [
+                    'mode' => 'auto',
+                    'name' => "ecs-controller-vpc-{$regionId}",
+                    'cidr' => '172.31.0.0/16'
+                ],
+                'vswitch' => [
+                    'mode' => 'auto',
+                    'name' => "ecs-controller-vsw-{$zone['zoneId']}",
+                    'cidr' => $this->cidrForZone($zone['zoneId'])
+                ],
+                'securityGroup' => [
+                    'mode' => 'auto',
+                    'name' => "ecs-controller-sg-{$regionId}",
+                    'rules' => [$securityRule]
+                ]
+            ],
+            'cdtCompatible' => true,
+            'backupEnabled' => false,
+            'pricing' => [
+                'available' => false,
+                'currency' => ($account['site_type'] ?? 'international') === 'international' ? 'USD' : 'CNY',
+                'message' => '费用预估暂不可用。实例按量计费，公网按实际出口流量计费，最终以阿里云账单为准。',
+                'trafficNote' => '公网按使用流量计费，并按 CDT 兼容方式创建。'
+            ],
+            'warnings' => array_values(array_filter([
+                '公网带宽峰值会自动尝试最高可用值，若账号配额或规格限制不支持，会自动降级重试。',
+                "系统盘将严格按 {$diskSize} GB 创建；当前 API 返回范围为 {$diskRange['min']}-{$diskRange['max']} {$diskRange['unit']}，超出范围会直接报错。",
+                '文件备份默认不启用；如需备份，请创建后在阿里云控制台单独开启。',
+                '安全组默认全开，便于测试和交付；生产环境建议创建后收紧来源 IP 和端口。'
+            ]))
+        ];
+    }
+
+    public function createManagedEcsFromPreview($account, array $preview, callable $progress = null)
+    {
+        $key = $account['access_key_id'];
+        $secret = $account['access_key_secret'];
+        $regionId = $preview['regionId'];
+        $zoneId = $preview['zoneId'];
+        $instanceType = $preview['instanceType'];
+        $password = $this->generateInstancePassword();
+
+        $this->emitProgress($progress, '准备 VPC');
+        $vpc = $this->ensureVpc($key, $secret, $regionId, $preview['network']['vpc']['name'], $preview['network']['vpc']['cidr']);
+
+        $this->emitProgress($progress, '准备交换机');
+        $vswitch = $this->ensureVSwitch(
+            $key,
+            $secret,
+            $regionId,
+            $zoneId,
+            $vpc['VpcId'],
+            $preview['network']['vswitch']['name'],
+            $preview['network']['vswitch']['cidr']
+        );
+
+        $this->emitProgress($progress, '准备安全组');
+        $securityGroup = $this->ensureSecurityGroup($key, $secret, $regionId, $vpc['VpcId'], $preview['network']['securityGroup']['name']);
+        $this->authorizeOpenSecurityGroupRules($key, $secret, $regionId, $securityGroup['SecurityGroupId']);
+
+        $bandwidthCandidates = $this->bandwidthCandidates((int) ($preview['internetMaxBandwidthOut'] ?? 100));
+        $diskCategories = array_unique(array_filter([
+            $preview['systemDisk']['category'] ?? 'cloud_essd',
+            'cloud_auto',
+            'cloud_essd',
+            'cloud_efficiency',
+            'cloud'
+        ]));
+        // 系统盘成本敏感，严格使用用户确认的值；若阿里云拒绝，不自动放大。
+        $diskSize = $this->normalizeSystemDiskSize($preview['systemDisk']['size'] ?? 20, $preview['systemDisk'] ?? []);
+        $lastError = null;
+
+        foreach ($bandwidthCandidates as $bandwidth) {
+            foreach ($diskCategories as $diskCategory) {
+                try {
+                    $this->emitProgress($progress, "创建 ECS（{$bandwidth} Mbps / {$diskCategory}）");
+                    $instanceIds = $this->runInstance(
+                        $key,
+                        $secret,
+                        $regionId,
+                        [
+                            'zoneId' => $zoneId,
+                            'instanceType' => $instanceType,
+                            'imageId' => $preview['imageId'],
+                            'securityGroupId' => $securityGroup['SecurityGroupId'],
+                            'vSwitchId' => $vswitch['VSwitchId'],
+                            'instanceName' => $preview['instanceName'],
+                            'password' => $password,
+                            'internetMaxBandwidthOut' => $bandwidth,
+                            'systemDiskCategory' => $diskCategory,
+                            'systemDiskSize' => $diskSize
+                        ]
+                    );
+
+                    $instanceId = $instanceIds[0] ?? '';
+                    if ($instanceId === '') {
+                        throw new \Exception('RunInstances 未返回 InstanceId');
+                    }
+
+                    $this->emitProgress($progress, '等待实例启动');
+                    $instance = $this->waitInstanceReady($key, $secret, $regionId, $instanceId);
+
+                    return [
+                        'instanceId' => $instanceId,
+                        'publicIp' => $instance['publicIp'] ?? '',
+                        'privateIp' => $instance['privateIp'] ?? '',
+                        'status' => $instance['status'] ?? 'Unknown',
+                        'instanceName' => $preview['instanceName'],
+                        'instanceType' => $instanceType,
+                        'vpcId' => $vpc['VpcId'],
+                        'vswitchId' => $vswitch['VSwitchId'],
+                        'securityGroupId' => $securityGroup['SecurityGroupId'],
+                        'internetMaxBandwidthOut' => $bandwidth,
+                        'systemDiskCategory' => $diskCategory,
+                        'systemDiskSize' => $diskSize,
+                        'loginUser' => $preview['loginUser'] ?? 'root',
+                        'loginPassword' => $password
+                    ];
+                } catch (\Exception $e) {
+                    $lastError = $e;
+                    $message = $e->getMessage();
+                    if ($this->isDiskSizeError($message)) {
+                        throw new \Exception("系统盘 {$diskSize} GB 不被当前镜像或实例规格支持，请手动调整系统盘大小后重新创建。阿里云返回：" . $message);
+                    }
+                    if (stripos($message, 'InvalidInstanceType.NotSupported') !== false || stripos($message, 'image architecture') !== false) {
+                        $instanceTypeInfo = $this->describeInstanceType($key, $secret, $regionId, $instanceType);
+                        $image = $this->selectSystemImage($key, $secret, $regionId, $preview['osKey'] ?? 'ubuntu_22', $instanceTypeInfo['CpuArchitecture'] ?? '');
+                        $preview['imageId'] = $image['imageId'];
+                        $preview['osLabel'] = $image['label'];
+                    }
+                    continue;
+                }
+            }
+        }
+
+        throw new \Exception($lastError ? $lastError->getMessage() : 'ECS 创建失败');
+    }
+
+    private function selectAvailableZone($key, $secret, $regionId, $instanceType)
+    {
+        $result = $this->executeWithRetry(function () use ($key, $secret, $regionId, $instanceType) {
+            $this->setDefaultClient($key, $secret, $regionId);
+
+            return AlibabaCloud::rpc()
+                ->product('Ecs')
+                ->scheme('https')
+                ->version('2014-05-26')
+                ->action('DescribeZones')
+                ->method('POST')
+                ->host($this->ecsHost($regionId))
+                ->options([
+                    'query' => [
+                        'RegionId' => $regionId,
+                        'InstanceType' => $instanceType,
+                        'AvailableResourceCreation.1' => 'Instance'
+                    ],
+                    'connect_timeout' => 5.0,
+                    'timeout' => 15.0
+                ])
+                ->request();
+        }, 'selectAvailableZone');
+
+        $zones = $result['Zones']['Zone'] ?? [];
+        foreach ($zones as $zone) {
+            if (!empty($zone['ZoneId'])) {
+                return [
+                    'zoneId' => $zone['ZoneId'],
+                    'raw' => $zone
+                ];
+            }
+        }
+
+        throw new \Exception("当前区域 {$regionId} 下未找到规格 {$instanceType} 的可用区库存");
+    }
+
+    private function describeInstanceType($key, $secret, $regionId, $instanceType)
+    {
+        $result = $this->executeWithRetry(function () use ($key, $secret, $regionId, $instanceType) {
+            $this->setDefaultClient($key, $secret, $regionId);
+
+            return AlibabaCloud::rpc()
+                ->product('Ecs')
+                ->scheme('https')
+                ->version('2014-05-26')
+                ->action('DescribeInstanceTypes')
+                ->method('POST')
+                ->host($this->ecsHost($regionId))
+                ->options([
+                    'query' => [
+                        'RegionId' => $regionId,
+                        'InstanceTypes' => json_encode([$instanceType])
+                    ],
+                    'connect_timeout' => 5.0,
+                    'timeout' => 15.0
+                ])
+                ->request();
+        }, 'describeInstanceType');
+
+        $types = $result['InstanceTypes']['InstanceType'] ?? [];
+        foreach ($types as $type) {
+            if (($type['InstanceTypeId'] ?? '') === $instanceType) {
+                return $type;
+            }
+        }
+
+        return $types[0] ?? [];
+    }
+
+    private function selectSystemImage($key, $secret, $regionId, $osKey, $cpuArchitecture = '')
+    {
+        $profiles = [
+            'alibaba_cloud_linux_3' => ['label' => 'Alibaba Cloud Linux 3', 'osType' => 'linux', 'platform' => 'Aliyun', 'patterns' => ['aliyun_3', 'alibaba cloud linux 3']],
+            'ubuntu_22' => ['label' => 'Ubuntu 22.04', 'osType' => 'linux', 'platform' => 'Ubuntu', 'patterns' => ['ubuntu_22', 'ubuntu 22', '22_04']],
+            'ubuntu_24' => ['label' => 'Ubuntu 24.04', 'osType' => 'linux', 'platform' => 'Ubuntu', 'patterns' => ['ubuntu_24', 'ubuntu 24', '24_04']],
+            'debian_12' => ['label' => 'Debian 12', 'osType' => 'linux', 'platform' => 'Debian', 'patterns' => ['debian_12', 'debian 12']],
+            'centos_stream_9' => ['label' => 'CentOS Stream 9', 'osType' => 'linux', 'platform' => 'CentOS', 'patterns' => ['centos_stream_9', 'centos stream 9']],
+            'windows_2022' => ['label' => 'Windows Server 2022', 'osType' => 'windows', 'platform' => 'Windows Server', 'patterns' => ['win2022', 'windows server 2022']]
+        ];
+        $profile = $profiles[$osKey] ?? $profiles['ubuntu_22'];
+        $architecture = $this->normalizeImageArchitecture($cpuArchitecture);
+
+        $result = $this->executeWithRetry(function () use ($key, $secret, $regionId, $profile, $architecture) {
+            $this->setDefaultClient($key, $secret, $regionId);
+
+            $query = [
+                'RegionId' => $regionId,
+                'ImageOwnerAlias' => 'system',
+                'OSType' => $profile['osType'],
+                'Status' => 'Available',
+                'PageSize' => 100
+            ];
+
+            if (!empty($profile['platform'])) {
+                $query['Platform'] = $profile['platform'];
+            }
+            if ($architecture !== '') {
+                $query['Architecture'] = $architecture;
+            }
+
+            return AlibabaCloud::rpc()
+                ->product('Ecs')
+                ->scheme('https')
+                ->version('2014-05-26')
+                ->action('DescribeImages')
+                ->method('POST')
+                ->host($this->ecsHost($regionId))
+                ->options([
+                    'query' => $query,
+                    'connect_timeout' => 5.0,
+                    'timeout' => 15.0
+                ])
+                ->request();
+        }, 'selectSystemImage');
+
+        $images = $result['Images']['Image'] ?? [];
+        usort($images, function ($a, $b) {
+            return strcmp((string) ($b['CreationTime'] ?? ''), (string) ($a['CreationTime'] ?? ''));
+        });
+
+        foreach ($images as $image) {
+            $haystack = strtolower(($image['ImageId'] ?? '') . ' ' . ($image['ImageName'] ?? '') . ' ' . ($image['Description'] ?? ''));
+            foreach ($profile['patterns'] as $pattern) {
+                if (strpos($haystack, strtolower($pattern)) !== false) {
+                    return [
+                        'imageId' => $image['ImageId'],
+                        'label' => $profile['label'],
+                        'osType' => $profile['osType'],
+                        'size' => (int) ($image['Size'] ?? 0)
+                    ];
+                }
+            }
+        }
+
+        throw new \Exception("当前区域未找到可用系统镜像：{$profile['label']}");
+    }
+
+    private function normalizeImageArchitecture($cpuArchitecture)
+    {
+        $value = strtolower((string) $cpuArchitecture);
+        if (strpos($value, 'arm') !== false || strpos($value, 'aarch64') !== false) {
+            return 'arm64';
+        }
+        if (strpos($value, 'x86') !== false || strpos($value, 'amd64') !== false || strpos($value, 'i386') !== false) {
+            return 'x86_64';
+        }
+        return '';
+    }
+
+    private function ensureVpc($key, $secret, $regionId, $name, $cidr)
+    {
+        $existing = $this->describeManagedVpcs($key, $secret, $regionId);
+        if (!empty($existing)) {
+            return $existing[0];
+        }
+
+        $result = $this->executeWithRetry(function () use ($key, $secret, $regionId, $name, $cidr) {
+            $this->setDefaultClient($key, $secret, $regionId);
+
+            return AlibabaCloud::rpc()
+                ->product('Vpc')
+                ->scheme('https')
+                ->version('2016-04-28')
+                ->action('CreateVpc')
+                ->method('POST')
+                ->host($this->vpcHost($regionId))
+                ->options([
+                    'query' => [
+                        'RegionId' => $regionId,
+                        'VpcName' => $name,
+                        'CidrBlock' => $cidr,
+                        'Tag.1.Key' => $this->managedTagKey,
+                        'Tag.1.Value' => $this->managedTagValue
+                    ],
+                    'connect_timeout' => 5.0,
+                    'timeout' => 15.0
+                ])
+                ->request();
+        }, 'ensureVpc');
+
+        return ['VpcId' => $result['VpcId'] ?? '', 'VpcName' => $name, 'CidrBlock' => $cidr];
+    }
+
+    private function ensureVSwitch($key, $secret, $regionId, $zoneId, $vpcId, $name, $cidr)
+    {
+        $existing = $this->describeManagedVSwitches($key, $secret, $regionId, $vpcId, $zoneId);
+        if (!empty($existing)) {
+            return $existing[0];
+        }
+
+        $result = $this->executeWithRetry(function () use ($key, $secret, $regionId, $zoneId, $vpcId, $name, $cidr) {
+            $this->setDefaultClient($key, $secret, $regionId);
+
+            return AlibabaCloud::rpc()
+                ->product('Vpc')
+                ->scheme('https')
+                ->version('2016-04-28')
+                ->action('CreateVSwitch')
+                ->method('POST')
+                ->host($this->vpcHost($regionId))
+                ->options([
+                    'query' => [
+                        'RegionId' => $regionId,
+                        'ZoneId' => $zoneId,
+                        'VpcId' => $vpcId,
+                        'VSwitchName' => $name,
+                        'CidrBlock' => $cidr,
+                        'Tag.1.Key' => $this->managedTagKey,
+                        'Tag.1.Value' => $this->managedTagValue
+                    ],
+                    'connect_timeout' => 5.0,
+                    'timeout' => 20.0
+                ])
+                ->request();
+        }, 'ensureVSwitch');
+
+        return ['VSwitchId' => $result['VSwitchId'] ?? '', 'VSwitchName' => $name, 'ZoneId' => $zoneId, 'CidrBlock' => $cidr];
+    }
+
+    private function ensureSecurityGroup($key, $secret, $regionId, $vpcId, $name)
+    {
+        $existing = $this->describeManagedSecurityGroups($key, $secret, $regionId, $vpcId);
+        if (!empty($existing)) {
+            return $existing[0];
+        }
+
+        $result = $this->executeWithRetry(function () use ($key, $secret, $regionId, $vpcId, $name) {
+            $this->setDefaultClient($key, $secret, $regionId);
+
+            return AlibabaCloud::rpc()
+                ->product('Ecs')
+                ->scheme('https')
+                ->version('2014-05-26')
+                ->action('CreateSecurityGroup')
+                ->method('POST')
+                ->host($this->ecsHost($regionId))
+                ->options([
+                    'query' => [
+                        'RegionId' => $regionId,
+                        'VpcId' => $vpcId,
+                        'SecurityGroupName' => $name,
+                        'Description' => 'Managed by CDT Monitor',
+                        'SecurityGroupType' => 'normal',
+                        'Tag.1.Key' => $this->managedTagKey,
+                        'Tag.1.Value' => $this->managedTagValue
+                    ],
+                    'connect_timeout' => 5.0,
+                    'timeout' => 15.0
+                ])
+                ->request();
+        }, 'ensureSecurityGroup');
+
+        return ['SecurityGroupId' => $result['SecurityGroupId'] ?? '', 'SecurityGroupName' => $name];
+    }
+
+    private function authorizeSecurityGroupRule($key, $secret, $regionId, $securityGroupId, $port, $sourceCidrIp)
+    {
+        try {
+            $this->executeWithRetry(function () use ($key, $secret, $regionId, $securityGroupId, $port, $sourceCidrIp) {
+                $this->setDefaultClient($key, $secret, $regionId);
+
+                return AlibabaCloud::rpc()
+                    ->product('Ecs')
+                    ->scheme('https')
+                    ->version('2014-05-26')
+                    ->action('AuthorizeSecurityGroup')
+                    ->method('POST')
+                    ->host($this->ecsHost($regionId))
+                    ->options([
+                        'query' => [
+                            'RegionId' => $regionId,
+                            'SecurityGroupId' => $securityGroupId,
+                            'IpProtocol' => 'tcp',
+                            'PortRange' => "{$port}/{$port}",
+                            'SourceCidrIp' => $sourceCidrIp,
+                            'Policy' => 'accept',
+                            'Priority' => '1',
+                            'Description' => 'CDT Monitor managed remote access'
+                        ],
+                        'connect_timeout' => 5.0,
+                        'timeout' => 15.0
+                    ])
+                    ->request();
+            }, 'authorizeSecurityGroupRule');
+        } catch (\Exception $e) {
+            if (stripos($e->getMessage(), 'InvalidPermission.Duplicate') === false) {
+                throw $e;
+            }
+        }
+    }
+
+    private function authorizeOpenSecurityGroupRules($key, $secret, $regionId, $securityGroupId)
+    {
+        $rules = [
+            ['protocol' => 'tcp', 'port' => '1/65535'],
+            ['protocol' => 'udp', 'port' => '1/65535'],
+            ['protocol' => 'icmp', 'port' => '-1/-1']
+        ];
+
+        foreach ($rules as $rule) {
+            try {
+                $this->executeWithRetry(function () use ($key, $secret, $regionId, $securityGroupId, $rule) {
+                    $this->setDefaultClient($key, $secret, $regionId);
+
+                    return AlibabaCloud::rpc()
+                        ->product('Ecs')
+                        ->scheme('https')
+                        ->version('2014-05-26')
+                        ->action('AuthorizeSecurityGroup')
+                        ->method('POST')
+                        ->host($this->ecsHost($regionId))
+                        ->options([
+                            'query' => [
+                                'RegionId' => $regionId,
+                                'SecurityGroupId' => $securityGroupId,
+                                'IpProtocol' => $rule['protocol'],
+                                'PortRange' => $rule['port'],
+                                'SourceCidrIp' => '0.0.0.0/0',
+                                'Policy' => 'accept',
+                                'Priority' => '1',
+                                'Description' => 'CDT Monitor open access'
+                            ],
+                            'connect_timeout' => 5.0,
+                            'timeout' => 15.0
+                        ])
+                        ->request();
+                }, 'authorizeOpenSecurityGroupRules');
+            } catch (\Exception $e) {
+                if (stripos($e->getMessage(), 'InvalidPermission.Duplicate') === false) {
+                    throw $e;
+                }
+            }
+        }
+    }
+
+    private function runInstance($key, $secret, $regionId, array $params)
+    {
+        $result = $this->executeWithRetry(function () use ($key, $secret, $regionId, $params) {
+            $this->setDefaultClient($key, $secret, $regionId);
+
+            return AlibabaCloud::rpc()
+                ->product('Ecs')
+                ->scheme('https')
+                ->version('2014-05-26')
+                ->action('RunInstances')
+                ->method('POST')
+                ->host($this->ecsHost($regionId))
+                ->options([
+                    'query' => [
+                        'RegionId' => $regionId,
+                        'ZoneId' => $params['zoneId'],
+                        'InstanceType' => $params['instanceType'],
+                        'ImageId' => $params['imageId'],
+                        'SecurityGroupId' => $params['securityGroupId'],
+                        'VSwitchId' => $params['vSwitchId'],
+                        'InstanceName' => $params['instanceName'],
+                        'HostName' => preg_replace('/[^a-zA-Z0-9-]/', '-', strtolower($params['instanceName'])),
+                        'Password' => $params['password'],
+                        'InstanceChargeType' => 'PostPaid',
+                        'InternetChargeType' => 'PayByTraffic',
+                        'InternetMaxBandwidthOut' => (int) $params['internetMaxBandwidthOut'],
+                        'SystemDisk.Category' => $params['systemDiskCategory'],
+                        'SystemDisk.Size' => (int) $params['systemDiskSize'],
+                        'DeletionProtection' => 'false',
+                        'IoOptimized' => 'optimized',
+                        'Amount' => 1,
+                        'Tag.1.Key' => $this->managedTagKey,
+                        'Tag.1.Value' => $this->managedTagValue
+                    ],
+                    'connect_timeout' => 5.0,
+                    'timeout' => 25.0
+                ])
+                ->request();
+        }, 'runInstance', 1);
+
+        return $result['InstanceIdSets']['InstanceIdSet'] ?? [];
+    }
+
+    private function waitInstanceReady($key, $secret, $regionId, $instanceId)
+    {
+        $last = null;
+        for ($i = 0; $i < 18; $i++) {
+            sleep($i === 0 ? 2 : 5);
+            $instances = $this->describeInstancesByIds($key, $secret, $regionId, [$instanceId]);
+            if (!empty($instances)) {
+                $last = $instances[0];
+                if (in_array($last['status'], ['Running', 'Stopped'], true)) {
+                    return $last;
+                }
+            }
+        }
+
+        return $last ?: ['status' => 'Unknown'];
+    }
+
+    private function describeInstancesByIds($key, $secret, $regionId, array $instanceIds)
+    {
+        $result = $this->executeWithRetry(function () use ($key, $secret, $regionId, $instanceIds) {
+            $this->setDefaultClient($key, $secret, $regionId);
+
+            return AlibabaCloud::rpc()
+                ->product('Ecs')
+                ->scheme('https')
+                ->version('2014-05-26')
+                ->action('DescribeInstances')
+                ->method('POST')
+                ->host($this->ecsHost($regionId))
+                ->options([
+                    'query' => [
+                        'RegionId' => $regionId,
+                        'InstanceIds' => json_encode(array_values($instanceIds))
+                    ],
+                    'connect_timeout' => 5.0,
+                    'timeout' => 15.0
+                ])
+                ->request();
+        }, 'describeInstancesByIds');
+
+        $items = $result['Instances']['Instance'] ?? [];
+        return array_map(function ($instance) {
+            return [
+                'instanceId' => $instance['InstanceId'] ?? '',
+                'instanceName' => $instance['InstanceName'] ?? '',
+                'status' => $instance['Status'] ?? 'Unknown',
+                'instanceType' => $instance['InstanceType'] ?? '',
+                'internetMaxBandwidthOut' => (int) ($instance['InternetMaxBandwidthOut'] ?? 0),
+                'publicIp' => $instance['PublicIpAddress']['IpAddress'][0] ?? $instance['EipAddress']['IpAddress'] ?? '',
+                'privateIp' => $instance['VpcAttributes']['PrivateIpAddress']['IpAddress'][0] ?? ''
+            ];
+        }, $items);
+    }
+
+    private function describeManagedVpcs($key, $secret, $regionId)
+    {
+        $result = $this->executeWithRetry(function () use ($key, $secret, $regionId) {
+            $this->setDefaultClient($key, $secret, $regionId);
+
+            return AlibabaCloud::rpc()
+                ->product('Vpc')
+                ->scheme('https')
+                ->version('2016-04-28')
+                ->action('DescribeVpcs')
+                ->method('POST')
+                ->host($this->vpcHost($regionId))
+                ->options([
+                    'query' => [
+                        'RegionId' => $regionId,
+                        'Tag.1.Key' => $this->managedTagKey,
+                        'Tag.1.Value' => $this->managedTagValue
+                    ],
+                    'connect_timeout' => 5.0,
+                    'timeout' => 15.0
+                ])
+                ->request();
+        }, 'describeManagedVpcs');
+
+        return $result['Vpcs']['Vpc'] ?? [];
+    }
+
+    private function describeManagedVSwitches($key, $secret, $regionId, $vpcId, $zoneId)
+    {
+        $result = $this->executeWithRetry(function () use ($key, $secret, $regionId, $vpcId, $zoneId) {
+            $this->setDefaultClient($key, $secret, $regionId);
+
+            return AlibabaCloud::rpc()
+                ->product('Vpc')
+                ->scheme('https')
+                ->version('2016-04-28')
+                ->action('DescribeVSwitches')
+                ->method('POST')
+                ->host($this->vpcHost($regionId))
+                ->options([
+                    'query' => [
+                        'RegionId' => $regionId,
+                        'VpcId' => $vpcId,
+                        'ZoneId' => $zoneId,
+                        'Tag.1.Key' => $this->managedTagKey,
+                        'Tag.1.Value' => $this->managedTagValue
+                    ],
+                    'connect_timeout' => 5.0,
+                    'timeout' => 15.0
+                ])
+                ->request();
+        }, 'describeManagedVSwitches');
+
+        return $result['VSwitches']['VSwitch'] ?? [];
+    }
+
+    private function describeManagedSecurityGroups($key, $secret, $regionId, $vpcId)
+    {
+        $result = $this->executeWithRetry(function () use ($key, $secret, $regionId, $vpcId) {
+            $this->setDefaultClient($key, $secret, $regionId);
+
+            return AlibabaCloud::rpc()
+                ->product('Ecs')
+                ->scheme('https')
+                ->version('2014-05-26')
+                ->action('DescribeSecurityGroups')
+                ->method('POST')
+                ->host($this->ecsHost($regionId))
+                ->options([
+                    'query' => [
+                        'RegionId' => $regionId,
+                        'VpcId' => $vpcId,
+                        'Tag.1.Key' => $this->managedTagKey,
+                        'Tag.1.Value' => $this->managedTagValue
+                    ],
+                    'connect_timeout' => 5.0,
+                    'timeout' => 15.0
+                ])
+                ->request();
+        }, 'describeManagedSecurityGroups');
+
+        return $result['SecurityGroups']['SecurityGroup'] ?? [];
+    }
+
+    private function defaultMinSystemDiskSize($osKey)
+    {
+        return 20;
+    }
+
+    private function getSystemDiskSizeRange($key, $secret, $regionId, $zoneId, $instanceType, $diskCategory)
+    {
+        $result = $this->executeWithRetry(function () use ($key, $secret, $regionId, $zoneId, $instanceType, $diskCategory) {
+            $this->setDefaultClient($key, $secret, $regionId);
+
+            return AlibabaCloud::rpc()
+                ->product('Ecs')
+                ->scheme('https')
+                ->version('2014-05-26')
+                ->action('DescribeAvailableResource')
+                ->method('POST')
+                ->host($this->ecsHost($regionId))
+                ->options([
+                    'query' => [
+                        'RegionId' => $regionId,
+                        'ZoneId' => $zoneId,
+                        'DestinationResource' => 'SystemDisk',
+                        'ResourceType' => 'instance',
+                        'InstanceType' => $instanceType,
+                        'SystemDiskCategory' => $diskCategory,
+                        'IoOptimized' => 'optimized',
+                        'NetworkCategory' => 'vpc',
+                        'InstanceChargeType' => 'PostPaid'
+                    ],
+                    'connect_timeout' => 5.0,
+                    'timeout' => 15.0
+                ])
+                ->request();
+        }, 'getSystemDiskSizeRange');
+
+        $zones = $result['AvailableZones']['AvailableZone'] ?? [];
+        foreach ($zones as $zone) {
+            $resources = $zone['AvailableResources']['AvailableResource'] ?? [];
+            foreach ($resources as $resource) {
+                if (($resource['Type'] ?? '') !== 'SystemDisk') {
+                    continue;
+                }
+
+                $supported = $resource['SupportedResources']['SupportedResource'] ?? [];
+                foreach ($supported as $item) {
+                    $value = $item['Value'] ?? '';
+                    if ($value !== '' && $value !== $diskCategory) {
+                        continue;
+                    }
+
+                    return [
+                        'min' => max(1, (int) ($item['Min'] ?? 20)),
+                        'max' => max(1, (int) ($item['Max'] ?? 2048)),
+                        'unit' => $item['Unit'] ?? 'GiB',
+                        'status' => $item['Status'] ?? '',
+                        'statusCategory' => $item['StatusCategory'] ?? ''
+                    ];
+                }
+            }
+        }
+
+        throw new \Exception("当前可用区/规格/磁盘类型未返回系统盘容量范围，请更换磁盘类型或实例规格后重试");
+    }
+
+    private function normalizeSystemDiskSize($value, array $range = [])
+    {
+        $size = (int) $value;
+        $min = (int) ($range['min'] ?? 20);
+        $max = (int) ($range['max'] ?? 2048);
+        $unit = $range['unit'] ?? 'GiB';
+
+        if ($size < $min || $size > $max) {
+            throw new \Exception("系统盘大小必须在当前 API 返回范围 {$min}-{$max} {$unit} 之间");
+        }
+        return $size;
+    }
+
+    private function isDiskSizeError($message)
+    {
+        $message = strtolower((string) $message);
+        return strpos($message, 'systemdisk.size') !== false
+            || strpos($message, 'invalidsystemdisksize') !== false
+            || (strpos($message, 'disk') !== false && strpos($message, 'size') !== false);
+    }
+
+    private function selectDiskCategory($zone)
+    {
+        $raw = $zone['raw']['AvailableDiskCategories']['DiskCategories'] ?? $zone['raw']['AvailableDiskCategories']['DiskCategory'] ?? [];
+        $categories = is_array($raw) ? $raw : [];
+        foreach (['cloud_essd', 'cloud_auto', 'cloud_efficiency', 'cloud'] as $preferred) {
+            if (empty($categories) || in_array($preferred, $categories, true)) {
+                return $preferred;
+            }
+        }
+        return 'cloud_essd';
+    }
+
+    private function estimateMaxBandwidthOut($instanceType, $regionId)
+    {
+        return 200;
+    }
+
+    private function bandwidthCandidates($max)
+    {
+        $base = [200, 100, 50, 30, 20, 10, 5, 1];
+        $candidates = array_values(array_filter($base, function ($value) use ($max) {
+            return $value <= max(1, $max);
+        }));
+        if (!in_array($max, $candidates, true)) {
+            array_unshift($candidates, $max);
+        }
+        return array_values(array_unique($candidates));
+    }
+
+    private function normalizePublicCidr($ip)
+    {
+        $ip = trim((string) $ip);
+        if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
+            return $ip . '/32';
+        }
+        return '';
+    }
+
+    private function cidrForZone($zoneId)
+    {
+        $hash = abs(crc32($zoneId));
+        $third = 1 + ($hash % 200);
+        return "172.31.{$third}.0/24";
+    }
+
+    private function generateInstancePassword()
+    {
+        $lower = 'abcdefghijkmnopqrstuvwxyz';
+        $upper = 'ABCDEFGHJKLMNPQRSTUVWXYZ';
+        $digits = '23456789';
+        $symbols = '!@#%^*';
+        $all = $lower . $upper . $digits . $symbols;
+        $password = $lower[random_int(0, strlen($lower) - 1)]
+            . $upper[random_int(0, strlen($upper) - 1)]
+            . $digits[random_int(0, strlen($digits) - 1)]
+            . $symbols[random_int(0, strlen($symbols) - 1)];
+        for ($i = strlen($password); $i < 16; $i++) {
+            $password .= $all[random_int(0, strlen($all) - 1)];
+        }
+        return str_shuffle($password);
+    }
+
+    private function emitProgress($progress, $step)
+    {
+        if (is_callable($progress)) {
+            $progress($step);
+        }
+    }
+
     // ==================== BSS 费用中心 API ====================
 
     private $balanceCache = [];
@@ -416,4 +1709,4 @@ class AliyunService
             'Products' => $products
         ];
     }
-}
\ No newline at end of file
+}
diff --git a/AliyunTrafficCheck.php b/AliyunTrafficCheck.php
index be55517..223aa6f 100644
--- a/AliyunTrafficCheck.php
+++ b/AliyunTrafficCheck.php
@@ -5,6 +5,7 @@ require_once 'Database.php';
 require_once 'ConfigManager.php';
 require_once 'AliyunService.php';
 require_once 'NotificationService.php';
+require_once 'DdnsService.php';
 
 use AlibabaCloud\Client\Exception\ClientException;
 use AlibabaCloud\Client\Exception\ServerException;
@@ -15,6 +16,7 @@ class AliyunTrafficCheck
     private $configManager;
     private $aliyunService;
     private $notificationService;
+    private $ddnsService;
     private $initError = null;
 
 
@@ -26,6 +28,7 @@ class AliyunTrafficCheck
             $this->configManager = new ConfigManager($this->db);
             $this->aliyunService = new AliyunService();
             $this->notificationService = new NotificationService();
+            $this->ddnsService = new DdnsService($this->configManager->getAllSettings());
 
             // 注入配置到通知服务
             $this->notificationService->setConfig($this->configManager->getAllSettings());
@@ -52,6 +55,16 @@ class AliyunTrafficCheck
         return $this->configManager->get('admin_password', '');
     }
 
+    public function getMonitorKey()
+    {
+        $key = $this->configManager->get('monitor_key', '');
+        if (empty($key)) {
+            $key = bin2hex(random_bytes(32));
+            $this->configManager->saveMonitorKey($key);
+        }
+        return $key;
+    }
+
     public function login($password)
     {
         $ip = $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';
@@ -62,7 +75,7 @@ class AliyunTrafficCheck
 
         $attempts = $this->db->getRecentFailedAttempts($ip, 900);
         if ($attempts >= 5) {
-            $this->db->addLog('warning', "登录被锁定: IP {$ip} 尝试次数过多");
+            $this->db->addLog('warning', "登录被锁定: 地址 {$ip} 尝试次数过多");
             throw new Exception("错误次数过多，请 15 分钟后再试。");
         }
 
@@ -70,17 +83,81 @@ class AliyunTrafficCheck
         if (empty($adminPass))
             return false;
 
-        if (hash_equals((string) $adminPass, (string) $password)) {
+        $passwordValid = false;
+
+        if ($this->isPasswordHashed($adminPass)) {
+            $passwordValid = password_verify($password, $adminPass);
+        } else {
+            $passwordValid = hash_equals($adminPass, $password);
+            if ($passwordValid) {
+                $this->configManager->upgradePasswordHash($password);
+            }
+        }
+
+        if ($passwordValid) {
             $this->db->clearLoginAttempts($ip);
-            $this->db->addLog('info', "管理员登录成功 [IP: {$ip}]");
+            $this->db->addLog('info', "管理员登录成功 [地址: {$ip}]");
             return true;
         }
 
         $this->db->recordLoginAttempt($ip);
-        $this->db->addLog('warning', "管理员登录失败 [IP: {$ip}]");
+        $this->db->addLog('warning', "管理员登录失败 [地址: {$ip}]");
         return false;
     }
 
+    private function isPasswordHashed($password)
+    {
+        return preg_match('/^\$2[aby]?\$/', $password) === 1 || preg_match('/^\$argon2[aid]\$/', $password) === 1;
+    }
+
+    private function getAccountLogLabel($account)
+    {
+        $remark = trim((string) ($account['remark'] ?? ''));
+        if ($remark !== '') {
+            return $remark;
+        }
+
+        $instanceName = trim((string) ($account['instance_name'] ?? ''));
+        if ($instanceName !== '') {
+            return $instanceName;
+        }
+
+        $instanceId = trim((string) ($account['instance_id'] ?? ''));
+        if ($instanceId !== '') {
+            return $instanceId;
+        }
+
+        return substr((string) ($account['access_key_id'] ?? ''), 0, 7) . '***';
+    }
+
+    private function resolveSecretFromDatabase($accessKeyId, $regionId)
+    {
+        $pdo = $this->db->getPdo();
+        $stmt = $pdo->prepare("SELECT access_key_secret FROM accounts WHERE access_key_id = ? AND region_id = ? LIMIT 1");
+        $stmt->execute([$accessKeyId, $regionId]);
+        $row = $stmt->fetch();
+
+        if ($row && !empty($row['access_key_secret'])) {
+            $secret = $this->configManager->decryptAccountSecret($row['access_key_secret']);
+            if (!empty($secret)) {
+                return $secret;
+            }
+        }
+
+        foreach ($this->configManager->getAccountGroups() as $group) {
+            if (
+                ($group['AccessKeyId'] ?? '') === $accessKeyId
+                && ($group['regionId'] ?? '') === $regionId
+                && !empty($group['AccessKeySecret'])
+                && $group['AccessKeySecret'] !== '********'
+            ) {
+                return $group['AccessKeySecret'];
+            }
+        }
+
+        throw new Exception('无法读取该账号的AK Secret，请重新输入后保存');
+    }
+
     public function setup($data)
     {
         if ($this->initError)
@@ -105,15 +182,18 @@ class AliyunTrafficCheck
             return [];
 
         $settings = $this->configManager->getAllSettings();
-        $accounts = $this->configManager->getAccounts();
+        $accountGroups = $this->configManager->getAccountGroups();
+        $groupMetrics = $this->configManager->getAccountGroupMetrics();
+        $billingMetrics = $this->getAccountGroupBillingMetrics();
 
         $config = [
-            'admin_password' => $settings['admin_password'] ?? '',
+            'admin_password' => !empty($settings['admin_password']) ? '********' : '',
+            'admin_password_set' => !empty($settings['admin_password']),
             'traffic_threshold' => (int) ($settings['traffic_threshold'] ?? 95),
-            'enable_schedule_email' => ($settings['enable_schedule_email'] ?? '0') === '1',
             'shutdown_mode' => $settings['shutdown_mode'] ?? 'KeepCharging',
             'threshold_action' => $settings['threshold_action'] ?? 'stop_and_notify',
             'keep_alive' => ($settings['keep_alive'] ?? '0') === '1',
+            'monthly_auto_start' => ($settings['monthly_auto_start'] ?? '0') === '1',
             'api_interval' => (int) ($settings['api_interval'] ?? 600),
             'enable_billing' => ($settings['enable_billing'] ?? '0') === '1',
             'Notification' => [
@@ -122,18 +202,18 @@ class AliyunTrafficCheck
                 'host' => $settings['notify_host'] ?? '',
                 'port' => $settings['notify_port'] ?? 465,
                 'username' => $settings['notify_username'] ?? '',
-                'password' => $settings['notify_password'] ?? '',
+                'password' => !empty($settings['notify_password']) ? '********' : '',
                 'secure' => $settings['notify_secure'] ?? 'ssl',
                 'telegram' => [
                     'enabled' => ($settings['notify_tg_enabled'] ?? '0') === '1',
-                    'token' => $settings['notify_tg_token'] ?? '',
+                    'token' => !empty($settings['notify_tg_token']) ? '********' : '',
                     'chat_id' => $settings['notify_tg_chat_id'] ?? '',
                     'proxy_type' => $settings['notify_tg_proxy_type'] ?? 'none',
                     'proxy_url' => $settings['notify_tg_proxy_url'] ?? '',
                     'proxy_ip' => $settings['notify_tg_proxy_ip'] ?? '',
                     'proxy_port' => $settings['notify_tg_proxy_port'] ?? '',
                     'proxy_user' => $settings['notify_tg_proxy_user'] ?? '',
-                    'proxy_pass' => $settings['notify_tg_proxy_pass'] ?? ''
+                    'proxy_pass' => !empty($settings['notify_tg_proxy_pass']) ? '********' : ''
                 ],
                 'webhook' => [
                     'enabled' => ($settings['notify_wh_enabled'] ?? '0') === '1',
@@ -144,23 +224,49 @@ class AliyunTrafficCheck
                     'body' => $settings['notify_wh_body'] ?? ''
                 ]
             ],
+            'Ddns' => [
+                'enabled' => ($settings['ddns_enabled'] ?? '0') === '1',
+                'provider' => $settings['ddns_provider'] ?? 'cloudflare',
+                'domain' => $settings['ddns_domain'] ?? '',
+                'cloudflare' => [
+                    'zone_id' => $settings['ddns_cf_zone_id'] ?? '',
+                    'token' => !empty($settings['ddns_cf_token']) ? '********' : '',
+                    'proxied' => ($settings['ddns_cf_proxied'] ?? '0') === '1'
+                ]
+            ],
             'Accounts' => []
         ];
 
-        foreach ($accounts as $row) {
+        foreach ($accountGroups as $row) {
+            $metrics = $groupMetrics[$row['groupKey']] ?? [
+                'usageUsed' => 0,
+                'usageRemaining' => (float) ($row['maxTraffic'] ?? 0),
+                'usagePercent' => 0,
+                'instanceCount' => 0,
+                'lastUpdated' => 0
+            ];
             $config['Accounts'][] = [
-                'AccessKeyId' => $row['access_key_id'],
-                'AccessKeySecret' => $row['access_key_secret'],
-                'regionId' => $row['region_id'],
-                'instanceId' => $row['instance_id'],
-                'maxTraffic' => (float) $row['max_traffic'],
-                'schedule' => [
-                    'enabled' => $row['schedule_enabled'] == 1,
-                    'startTime' => $row['start_time'],
-                    'stopTime' => $row['stop_time']
-                ],
+                'AccessKeyId' => $row['AccessKeyId'],
+                'AccessKeySecret' => '********',
+                'AccessKeySecretSet' => !empty($row['AccessKeySecret']),
+                'regionId' => $row['regionId'],
+                'maxTraffic' => (float) $row['maxTraffic'],
                 'remark' => $row['remark'] ?? '',
-                'siteType' => $row['site_type'] ?? 'china'
+                'siteType' => $row['siteType'] ?? 'international',
+                'groupKey' => $row['groupKey'] ?? '',
+                'usageUsed' => round((float) ($metrics['usageUsed'] ?? 0), 6),
+                'usageRemaining' => round((float) ($metrics['usageRemaining'] ?? 0), 6),
+                'usagePercent' => round((float) ($metrics['usagePercent'] ?? 0), 2),
+                'instanceCount' => (int) ($metrics['instanceCount'] ?? 0),
+                'usageLastUpdated' => !empty($metrics['lastUpdated']) ? date('Y-m-d H:i:s', (int) $metrics['lastUpdated']) : '',
+                'billing' => $billingMetrics[$row['groupKey']] ?? [
+                    'enabled' => ($settings['enable_billing'] ?? '0') === '1',
+                    'monthly_cost' => null,
+                    'balance' => null,
+                    'currency' => ($row['siteType'] ?? 'international') === 'international' ? 'USD' : 'CNY',
+                    'last_updated' => null,
+                    'error' => null
+                ]
             ];
         }
 
@@ -183,8 +289,25 @@ class AliyunTrafficCheck
 
         // 仅返回最近 20 条
         $logs = $this->db->getLogsByTypes($types, 20);
+        $accounts = $this->configManager->getAccounts();
+        $accessKeyMap = [];
+
+        foreach ($accounts as $account) {
+            $label = $this->getAccountLogLabel($account);
+            $accessKeyId = trim((string) ($account['access_key_id'] ?? ''));
+            if ($accessKeyId === '') {
+                continue;
+            }
+
+            $accessKeyMap[$accessKeyId] = $label;
+            $accessKeyMap[substr($accessKeyId, 0, 7) . '***'] = $label;
+        }
 
         foreach ($logs as &$log) {
+            foreach ($accessKeyMap as $key => $label) {
+                $log['message'] = str_replace("[$key]", "[$label]", $log['message']);
+                $log['message'] = str_replace($key, $label, $log['message']);
+            }
             $log['time_str'] = date('Y-m-d H:i:s', $log['created_at']);
         }
         return $logs;
@@ -220,9 +343,6 @@ class AliyunTrafficCheck
         if (!$account)
             return ['error' => 'Account not found'];
 
-        if (!$account)
-            return ['error' => 'Account not found'];
-
         // Use account ID for stats query
         $rawHourly = $this->db->getHourlyStats($id);
         $chartHourly = [];
@@ -254,7 +374,7 @@ class AliyunTrafficCheck
     public function monitor()
     {
         if ($this->initError)
-            return "Error: " . $this->initError;
+            return "错误: " . $this->initError;
 
         // 优化：分级清理日志
         // 普通/重要日志保留 30 天，高频心跳日志仅保留 3 天
@@ -271,56 +391,28 @@ class AliyunTrafficCheck
         }
 
         $logs = [];
-        $currentUserTime = date('H:i');
         $currentTime = time();
 
         $threshold = (int) $this->configManager->get('traffic_threshold', 95);
         $shutdownMode = $this->configManager->get('shutdown_mode', 'KeepCharging');
         $thresholdAction = $this->configManager->get('threshold_action', 'stop_and_notify');
         $keepAlive = $this->configManager->get('keep_alive', '0') === '1';
+        $monthlyAutoStart = $this->configManager->get('monthly_auto_start', '0') === '1';
         $userInterval = (int) $this->configManager->get('api_interval', 600);
 
         $accounts = $this->configManager->getAccounts();
 
         foreach ($accounts as $account) {
-            $logPrefix = "[{$account['access_key_id']}]";
+            $accountLabel = $this->getAccountLogLabel($account);
+            $logPrefix = "[{$accountLabel}]";
             $actions = [];
             $forceRefresh = false;
-            $statusTransformed = false;
 
-            // 1. 定时任务
-            if ($account['schedule_enabled'] == 1) {
-                if ($account['start_time'] && $currentUserTime === $account['start_time']) {
-                    if ($this->safeControlInstance($account, 'start')) {
-                        $actions[] = "定时启动";
-                        $this->db->addLog('info', "执行定时启动 [{$account['access_key_id']}]");
-
-                        $mailRes = $this->notificationService->notifySchedule("定时启动", $account, "计划任务已触发，实例正在启动。");
-                        $this->logNotificationResult($mailRes, $account['access_key_id']);
-
-                        $forceRefresh = true;
-                        $statusTransformed = true;
-                    }
-                }
-                if ($account['stop_time'] && $currentUserTime === $account['stop_time']) {
-                    if ($this->safeControlInstance($account, 'stop', $shutdownMode)) {
-                        $actions[] = "定时停止({$shutdownMode})";
-                        $this->db->addLog('info', "执行定时停止 [{$account['access_key_id']}]");
-
-                        $mailRes = $this->notificationService->notifySchedule("定时停止", $account, "计划任务已触发，实例已停止。");
-                        $this->logNotificationResult($mailRes, $account['access_key_id']);
-
-                        $forceRefresh = true;
-                        $statusTransformed = true;
-                    }
-                }
-            }
-
-            // 2. 自适应心跳
+            // 1. 自适应心跳
             $lastUpdate = $account['updated_at'] ?? 0;
             $cachedStatus = $account['instance_status'] ?? 'Unknown';
             $isTransientState = in_array($cachedStatus, ['Starting', 'Stopping', 'Pending', 'Unknown']);
-            $currentInterval = ($isTransientState || $statusTransformed) ? 60 : $userInterval;
+            $currentInterval = $isTransientState ? 60 : $userInterval;
 
             $shouldCheckApi = $forceRefresh || (($currentTime - $lastUpdate) > $currentInterval);
 
@@ -341,7 +433,7 @@ class AliyunTrafficCheck
 
                 if ($newTraffic < 0) {
                     $traffic = $account['traffic_used'];
-                    $apiStatusLog = "流量API异常";
+                    $apiStatusLog = "流量接口异常";
                     $newUpdateTime = $lastUpdate;
                 } else {
                     $traffic = $newTraffic;
@@ -358,6 +450,7 @@ class AliyunTrafficCheck
                     $apiStatusLog .= in_array($status, ['Starting', 'Stopping', 'Pending']) ? " [过渡态]" : " [稳定态]";
                 }
 
+                $this->notifyStatusChangeIfNeeded($account, $cachedStatus, $status, '系统同步检测到实例状态变化。');
                 $this->configManager->updateAccountStatus($account['id'], $traffic, $status, $newUpdateTime);
             } else {
                 $traffic = $account['traffic_used'];
@@ -367,59 +460,84 @@ class AliyunTrafficCheck
             }
 
             $maxTraffic = $account['max_traffic'];
-            $usagePercent = ($maxTraffic > 0) ? round(($traffic / $maxTraffic) * 100, 2) : 0;
-            $trafficDesc = "流量:{$usagePercent}%";
+            $accountTraffic = $this->getGroupTrafficUsed($account);
+            $usagePercent = ($maxTraffic > 0) ? round(($accountTraffic / $maxTraffic) * 100, 2) : 0;
+            $trafficDesc = "账号出口流量:{$usagePercent}%";
             $isOverThreshold = $usagePercent >= $threshold;
+            $isHardLimitExceeded = $maxTraffic > 0 && $accountTraffic >= $maxTraffic;
+            $requiresTrafficProtection = $isOverThreshold || $isHardLimitExceeded;
 
-            // 3. 流量熔断
-            if ($isOverThreshold) {
-                $trafficDesc .= "[警告]";
-                if ($shouldCheckApi) {
-                    if ($thresholdAction === 'stop_and_notify') {
-                        if ($status !== 'Stopped') {
-                            if ($this->safeControlInstance($account, 'stop', $shutdownMode)) {
-                                $actions[] = "超限关机";
-                                $this->db->addLog('warning', "流量超限自动关机 [{$account['access_key_id']}] 使用率:{$usagePercent}%");
-                                $this->configManager->updateAccountStatus($account['id'], $traffic, 'Stopping', $currentTime);
-                                $status = 'Stopping';
-                            }
-                        }
-                    } else {
-                        $actions[] = "超限告警";
-                        $this->db->addLog('warning', "流量超限触发告警 [{$account['access_key_id']}] 使用率:{$usagePercent}%");
-                    }
+            // 2. 流量熔断
+            if ($requiresTrafficProtection) {
+                $trafficDesc .= $isHardLimitExceeded ? "[已超出上限]" : "[接近上限]";
 
-                    $mailRes = $this->notificationService->sendTrafficWarning($account['access_key_id'], $traffic, $usagePercent, implode(',', $actions), $threshold);
-                    $this->logNotificationResult($mailRes, $account['access_key_id']);
-                }
-            }
+                if ($thresholdAction === 'stop_and_notify') {
+                    $canAttemptStop = !in_array($status, ['Stopped', 'Stopping', 'Released'], true);
 
-            // 4. 保活逻辑 (跳过已被定时任务操作的实例)
-            if ($keepAlive && !$isOverThreshold && !$statusTransformed) {
-                if ($account['schedule_enabled'] == 0 || $this->isTimeInRange($currentUserTime, $account['start_time'], $account['stop_time'])) {
-                    if ($status === 'Stopped') {
-                        if ($this->safeControlInstance($account, 'start')) {
-                            $actions[] = "保活启动";
-                            $this->db->addLog('info', "执行保活启动 [{$account['access_key_id']}]");
-
-                            $mailRes = $this->notificationService->notifySchedule("保活启动", $account, "检测到实例在工作时段非预期关机，已尝试自动启动。");
-                            $this->logNotificationResult($mailRes, $account['access_key_id']);
-
-                            $this->configManager->updateAccountStatus($account['id'], $traffic, 'Starting', $currentTime);
-                            $status = 'Starting';
+                    // 达到账号流量上限后必须立即保护，不再等待下一次接口刷新窗口。
+                    if ($canAttemptStop) {
+                        if ($this->safeControlInstance($account, 'stop', $shutdownMode)) {
+                            $previousStatus = $status;
+                            $actions[] = $isHardLimitExceeded ? "已超量自动停机" : "接近上限自动停机";
+                            $this->db->addLog('warning', "账号出口流量达到保护线，已自动停机 [{$accountLabel}] 当前使用率:{$usagePercent}%");
+                            $this->configManager->updateAccountStatus($account['id'], $traffic, 'Stopping', $currentTime);
+                            $this->notifyStatusChangeIfNeeded($account, $previousStatus, 'Stopping', '流量达到保护线，已自动停机。');
+                            $status = 'Stopping';
                         } else {
-                            $apiStatusLog .= " [保活启动失败,下次重试]";
+                            $actions[] = "自动停机失败";
+                            $this->db->addLog('error', "账号出口流量达到保护线，但自动停机失败 [{$accountLabel}] 当前使用率:{$usagePercent}%");
                         }
                     }
+                } elseif ($shouldCheckApi) {
+                    $actions[] = "超量提醒";
+                    $this->db->addLog('warning', "账号出口流量超限触发提醒 [{$accountLabel}] 当前使用率:{$usagePercent}%");
+                }
+
+                if (!empty($actions)) {
+                    $mailRes = $this->notificationService->sendTrafficWarning($accountLabel, $accountTraffic, $usagePercent, implode(',', $actions), $threshold);
+                    $this->logNotificationResult($mailRes, $accountLabel);
+                }
+            }
+
+            // 3. 每月自动开机：只在每月 1 号执行，且不会启动已经触发流量保护的实例。
+            $autoStartBlocked = !empty($account['auto_start_blocked']);
+            if ($monthlyAutoStart && !$autoStartBlocked && !$requiresTrafficProtection && date('j', $currentTime) === '1') {
+                $lastMonthlyStart = (int) ($account['last_keep_alive_at'] ?? 0);
+                if ($status === 'Stopped' && !$this->isSameMonth($lastMonthlyStart, $currentTime)) {
+                    if ($this->safeControlInstance($account, 'start')) {
+                        $actions[] = "月初自动开机";
+                        $this->db->addLog('info', "执行月初自动开机 [{$accountLabel}]");
+                        $this->configManager->updateAccountStatus($account['id'], $traffic, 'Starting', $currentTime);
+                        $this->configManager->updateLastKeepAlive($account['id'], $currentTime);
+                        $this->notifyStatusChangeIfNeeded($account, 'Stopped', 'Starting', '每月 1 号自动开机已执行。');
+                        $status = 'Starting';
+                    } else {
+                        $apiStatusLog .= " [月初自动开机失败,下次重试]";
+                    }
                 }
             }
 
-            if ($statusTransformed) {
-                $tempStatus = in_array("定时启动", $actions) ? 'Starting' : 'Stopping';
-                $this->configManager->updateAccountStatus($account['id'], $traffic, $tempStatus, $currentTime);
-                $apiStatusLog .= " -> 强制过渡态";
+            // 4. 保活逻辑
+            if ($keepAlive && !$autoStartBlocked && !$requiresTrafficProtection) {
+                if ($status === 'Stopped') {
+                    if ($this->safeControlInstance($account, 'start')) {
+                        $actions[] = "保活启动";
+                        $this->db->addLog('info', "执行保活启动 [{$accountLabel}]");
+
+                        $mailRes = $this->notificationService->notifySchedule("保活启动", $account, "检测到实例非预期关机，已尝试自动启动。");
+                        $this->logNotificationResult($mailRes, $accountLabel);
+
+                        $this->configManager->updateAccountStatus($account['id'], $traffic, 'Starting', $currentTime);
+                        $this->configManager->updateLastKeepAlive($account['id'], $currentTime);
+                        $this->notifyStatusChangeIfNeeded($account, 'Stopped', 'Starting', '检测到实例非预期关机，保活已尝试自动启动。');
+                        $status = 'Starting';
+                    } else {
+                        $apiStatusLog .= " [保活启动失败,下次重试]";
+                    }
+                }
             }
 
+
             $actionLog = empty($actions) ? "无动作" : implode(", ", $actions);
             $logLine = sprintf("%s %s | %s | %s | %s", $logPrefix, $actionLog, $trafficDesc, $status, $apiStatusLog);
 
@@ -430,88 +548,44 @@ class AliyunTrafficCheck
 
         $this->configManager->updateLastRunTime(time());
 
+        // 执行异步彻底销毁循环
+        $this->processPendingReleases();
+
         return implode(PHP_EOL, $logs);
     }
 
-    public function getStatusForFrontend()
+    public function getStatusForFrontend($includeSensitive = false)
     {
         if ($this->initError)
             return ['error' => $this->initError];
 
+        $this->configManager->syncAccountGroups();
+
         $data = [];
         $threshold = (int) $this->configManager->get('traffic_threshold', 95);
         $userInterval = (int) $this->configManager->get('api_interval', 600);
         $billingEnabled = $this->configManager->get('enable_billing', '0') === '1';
-
-        $currentTime = time();
-        $accounts = $this->configManager->getAccounts();
-        $billingCycle = date('Y-m');
+        $accounts = array_values(array_filter($this->configManager->getAccounts(), function ($account) {
+            return !empty($account['instance_id']);
+        }));
 
         foreach ($accounts as $account) {
-            $lastUpdate = $account['updated_at'] ?? 0;
-            $cachedStatus = $account['instance_status'] ?? 'Unknown';
-            $newUpdateTime = $currentTime;
+            $data[] = $this->buildInstanceSnapshot($account, $threshold, $userInterval, $billingEnabled, $includeSensitive);
+        }
 
-            $isTransientState = in_array($cachedStatus, ['Starting', 'Stopping', 'Pending', 'Unknown']);
-            $checkInterval = $isTransientState ? 60 : $userInterval;
-
-            if (($currentTime - $lastUpdate) > $checkInterval) {
-                $newTraffic = $this->safeGetTraffic($account);
-                $status = $this->safeGetInstanceStatus($account);
-
-                if ($status === 'Unknown') {
-                    usleep(500000);
-                    $status = $this->safeGetInstanceStatus($account);
-                }
-
-                if ($newTraffic < 0) {
-                    $traffic = $account['traffic_used'];
-                    $newUpdateTime = $lastUpdate;
-                } else {
-                    $traffic = $newTraffic;
-                    $this->db->addHourlyStat($account['id'], $traffic);
-                    $this->db->addDailyStat($account['id'], $traffic);
-                }
-
-                if ($status === 'Unknown') {
-                    $newUpdateTime = $lastUpdate;
-                }
-
-                $this->configManager->updateAccountStatus($account['id'], $traffic, $status, $newUpdateTime);
-            } else {
-                $traffic = $account['traffic_used'];
-                $status = $account['instance_status'];
-            }
-
-            $usagePercent = ($account['max_traffic'] > 0) ? round(($traffic / $account['max_traffic']) * 100, 2) : 0;
-            $isFull = $usagePercent >= $threshold;
-
-            $item = [
-                'id' => $account['id'],
-                'account' => substr($account['access_key_id'], 0, 7) . '***',
-                'flow_total' => (float) $account['max_traffic'],
-                'flow_used' => round($traffic, 2),
-                'percentageOfUse' => $usagePercent,
-                'region' => $account['region_id'],
-                'regionName' => $this->getRegionName($account['region_id']),
-                'rate95' => $isFull,
-                'threshold' => $threshold,
-                'instanceStatus' => $status,
-                'lastUpdated' => date('Y-m-d H:i:s', $lastUpdate > 0 ? $lastUpdate : $currentTime),
-                'remark' => $account['remark'] ?? ''
-            ];
-
-            // 注入费用数据 (如果启用)
-            if ($billingEnabled) {
-                $item['cost'] = $this->safeGetBillingInfo($account, $billingCycle);
-            }
-
-            $data[] = $item;
+        $pendingAccounts = $this->configManager->getPendingReleaseAccounts();
+        foreach ($pendingAccounts as $account) {
+            $snap = $this->buildInstanceSnapshot($account, $threshold, $userInterval, $billingEnabled, $includeSensitive);
+            $snap['instanceStatus'] = 'Releasing';
+            $snap['status'] = 'Releasing';
+            $data[] = $snap;
         }
 
         return [
             'data' => $data,
-            'system_last_run' => $this->configManager->getLastRunTime()
+            'system_last_run' => $this->configManager->getLastRunTime(),
+            'sync_interval' => $userInterval,
+            'sensitive_visible' => $includeSensitive
         ];
     }
 
@@ -535,9 +609,10 @@ class AliyunTrafficCheck
             $this->db->addDailyStat($targetAccount['id'], $traffic);
         }
 
+        $this->notifyStatusChangeIfNeeded($targetAccount, $targetAccount['instance_status'] ?? 'Unknown', $status, '手动同步检测到实例状态变化。');
         $this->configManager->updateAccountStatus($id, $traffic, $status, $currentTime);
 
-        // 刷新账单数据：仅在启用费用监控 且 无有效缓存时调用 BSS API
+        // 刷新账单数据：仅在启用费用监控 且 无有效缓存时调用 费用中心 接口
         $billingError = null;
         $billingEnabled = $this->configManager->get('enable_billing', '0') === '1';
         if ($billingEnabled) {
@@ -579,13 +654,355 @@ class AliyunTrafficCheck
         }
 
         if ($billingError) {
-            $this->db->addLog('warning', "账单刷新异常 [{$targetAccount['access_key_id']}]: {$billingError}");
+            $this->db->addLog('warning', "账单刷新异常 [{$this->getAccountLogLabel($targetAccount)}]: {$billingError}");
             return ['success' => true, 'billing_error' => $billingError];
         }
 
         return true;
     }
 
+    public function fetchInstances($accessKeyId, $accessKeySecret, $regionId = '')
+    {
+        if ($this->initError) {
+            throw new Exception($this->initError);
+        }
+
+        if (empty($accessKeyId) || empty($accessKeySecret)) {
+            throw new Exception('请先填写AK ID和AK Secret');
+        }
+
+        try {
+            $instances = $this->aliyunService->getInstances($accessKeyId, $accessKeySecret, $regionId ?: null);
+            $maskedKey = substr($accessKeyId, 0, 7) . '***';
+            $this->db->addLog('info', "实例列表获取成功 [{$maskedKey}] 共 " . count($instances) . " 台");
+            return $instances;
+        } catch (ClientException $e) {
+            $this->db->addLog('warning', "实例列表获取失败: 鉴权错误");
+            throw new Exception('阿里云鉴权失败，请检查AK权限或密钥是否正确');
+        } catch (ServerException $e) {
+            $this->db->addLog('warning', "实例列表获取失败: " . $e->getErrorCode() . " - " . strip_tags($e->getErrorMessage()));
+            throw new Exception('阿里云接口错误 [' . $e->getErrorCode() . ']: ' . $e->getErrorMessage());
+        } catch (\Exception $e) {
+            $this->db->addLog('warning', "实例列表获取失败: " . strip_tags($e->getMessage()));
+            throw $e;
+        }
+    }
+
+    public function testAccountCredentials($account)
+    {
+        if ($this->initError) {
+            throw new Exception($this->initError);
+        }
+
+        $accessKeyId = trim((string) ($account['AccessKeyId'] ?? ''));
+        $accessKeySecret = trim((string) ($account['AccessKeySecret'] ?? ''));
+        $regionId = trim((string) ($account['regionId'] ?? ''));
+        $maxTraffic = (float) ($account['maxTraffic'] ?? 0);
+        $accountLabel = trim((string) ($account['remark'] ?? '')) ?: (substr($accessKeyId, 0, 7) . '***');
+
+        if ($accessKeyId === '' || $accessKeySecret === '' || $regionId === '') {
+            throw new Exception('请先填写完整的AK、区域和账号流量');
+        }
+
+        if ($accessKeySecret === '********') {
+            $accessKeySecret = $this->resolveSecretFromDatabase($accessKeyId, $regionId);
+        }
+
+        try {
+            $regions = $this->aliyunService->getRegions($accessKeyId, $accessKeySecret);
+            $regionIds = array_column($regions, 'regionId');
+            if (!in_array($regionId, $regionIds, true)) {
+                throw new Exception('当前AK无法访问所选区域，请检查权限范围');
+            }
+
+            $instances = $this->aliyunService->getInstances($accessKeyId, $accessKeySecret);
+            $regionInstances = array_values(array_filter($instances, function ($instance) use ($regionId) {
+                return ($instance['regionId'] ?? '') === $regionId;
+            }));
+            $instanceCount = count($regionInstances);
+
+            $monitorWarning = '';
+            $monitorChecked = false;
+            if (!empty($regionInstances)) {
+                $probe = $regionInstances[0];
+                $endMs = (int) (floor((time() - 90) / 60) * 60 * 1000);
+                $startMs = max($endMs - (10 * 60 * 1000), 0);
+                try {
+                    $this->aliyunService->getInstanceOutboundTrafficDelta([
+                        'access_key_id' => $accessKeyId,
+                        'access_key_secret' => $accessKeySecret,
+                        'instance_id' => $probe['instanceId'] ?? '',
+                        'public_ip' => $probe['publicIp'] ?? ''
+                    ], $startMs, $endMs);
+                    $monitorChecked = true;
+                } catch (\Exception $metricException) {
+                    $monitorWarning = '云监控流量探测未通过：' . strip_tags($metricException->getMessage());
+                    $this->db->addLog('warning', "账号云监控探测异常 [{$accountLabel}]: {$monitorWarning}");
+                }
+            }
+
+            $trafficUsed = (float) ($account['usageUsed'] ?? 0);
+            $trafficRemaining = max(round($maxTraffic - $trafficUsed, 2), 0);
+            $trafficPercent = $maxTraffic > 0 ? min(round(($trafficUsed / $maxTraffic) * 100, 2), 100) : 0;
+            $this->db->addLog('info', "账号测试成功 [{$accountLabel}] {$regionId} 实例 {$instanceCount} 台");
+            $message = 'AK可用，ECS API已接通';
+            if ($monitorWarning !== '') {
+                $message .= '；' . $monitorWarning;
+            } elseif ($monitorChecked) {
+                $message .= '，云监控 接口 已接通';
+            } else {
+                $message .= '；当前区域暂无实例，未执行云监控流量探测';
+            }
+
+            return [
+                'success' => true,
+                'message' => $message,
+                'monitorWarning' => $monitorWarning,
+                'usageUsed' => $trafficUsed,
+                'usageRemaining' => $trafficRemaining,
+                'usagePercent' => $trafficPercent,
+                'instanceCount' => $instanceCount
+            ];
+        } catch (ClientException $e) {
+            $message = '鉴权失败，请检查AK ID和AK Secret是否正确，或确认是否具备ECS 权限';
+            $this->db->addLog('warning', "账号测试失败: {$message}");
+            throw new Exception($message);
+        } catch (ServerException $e) {
+            $message = '阿里云接口错误 [' . $e->getErrorCode() . ']: ' . $e->getErrorMessage();
+            $this->db->addLog('warning', "账号测试失败: {$message}");
+            throw new Exception($message);
+        } catch (Exception $e) {
+            $this->db->addLog('warning', "账号测试失败: " . strip_tags($e->getMessage()));
+            throw $e;
+        }
+    }
+
+    public function previewEcsCreate($data)
+    {
+        if ($this->initError) {
+            throw new Exception($this->initError);
+        }
+
+        $groupKey = trim((string) ($data['accountGroupKey'] ?? ''));
+        if ($groupKey === '') {
+            throw new Exception('请选择用于创建 ECS 的账号');
+        }
+
+        $account = $this->resolveAccountGroupForCreate($groupKey, $data['regionId'] ?? '');
+        $preview = $this->aliyunService->buildEcsCreatePreview($account, $data, $this->detectClientPublicIp());
+        $previewId = 'preview_' . bin2hex(random_bytes(12));
+
+        $this->db->addLog('info', "ECS 创建预检完成 [{$preview['account']['label']}] {$preview['regionId']} {$preview['instanceType']}");
+
+        return [
+            'success' => true,
+            'previewId' => $previewId,
+            'summary' => $preview,
+            'pricing' => $preview['pricing'],
+            'warnings' => $preview['warnings']
+        ];
+    }
+
+    public function createEcsFromPreview($previewId, array $preview)
+    {
+        if ($this->initError) {
+            throw new Exception($this->initError);
+        }
+
+        if (empty($preview['account']['groupKey'])) {
+            throw new Exception('创建预检已失效，请重新预检');
+        }
+
+        $groupKey = $preview['account']['groupKey'];
+        $account = $this->resolveAccountGroupForCreate($groupKey, $preview['regionId'] ?? '');
+        $taskId = 'ecs_' . bin2hex(random_bytes(10));
+
+        // 创建新 ECS 不应顺手拉起客户已有的停机实例。先把当前已停机实例视为“有意停机”，保活逻辑会跳过它们。
+        $this->configManager->blockCurrentlyStoppedInstances();
+
+        $this->db->createEcsCreateTask(
+            $taskId,
+            $previewId,
+            $groupKey,
+            $preview['regionId'],
+            $preview['instanceType'],
+            $preview
+        );
+
+        $progress = function ($step) use ($taskId) {
+            $this->db->updateEcsCreateTask($taskId, ['step' => $step]);
+        };
+
+        try {
+            $result = $this->aliyunService->createManagedEcsFromPreview($account, $preview, $progress);
+            $this->db->updateEcsCreateTask($taskId, [
+                'zone_id' => $preview['zoneId'] ?? '',
+                'image_id' => $preview['imageId'] ?? '',
+                'os_label' => $preview['osLabel'] ?? '',
+                'instance_name' => $preview['instanceName'] ?? '',
+                'vpc_id' => $result['vpcId'] ?? '',
+                'vswitch_id' => $result['vswitchId'] ?? '',
+                'security_group_id' => $result['securityGroupId'] ?? '',
+                'internet_max_bandwidth_out' => $result['internetMaxBandwidthOut'] ?? 0,
+                'system_disk_category' => $result['systemDiskCategory'] ?? '',
+                'system_disk_size' => $result['systemDiskSize'] ?? 0,
+                'instance_id' => $result['instanceId'] ?? '',
+                'public_ip' => $result['publicIp'] ?? '',
+                'login_user' => $result['loginUser'] ?? '',
+                'login_password' => '',
+                'status' => 'success',
+                'step' => '创建完成'
+            ]);
+
+            $this->configManager->syncAccountGroups(true);
+            $this->configManager->load();
+            $this->syncDdnsForAccounts($this->configManager->getAccounts(), "ECS 创建后");
+            $this->db->addLog('info', "一键创建 ECS成功 [{$this->getAccountLogLabel($account)}] {$result['instanceId']} {$preview['instanceType']} {$preview['regionId']} {$result['internetMaxBandwidthOut']}Mbps");
+            $notifyResult = $this->notificationService->notifyEcsCreated($this->getAccountLogLabel($account), $result, $preview);
+            $this->logNotificationResult($notifyResult, $this->getAccountLogLabel($account));
+
+            return [
+                'success' => true,
+                'taskId' => $taskId,
+                'data' => $result
+            ];
+        } catch (Exception $e) {
+            $this->db->updateEcsCreateTask($taskId, [
+                'status' => 'failed',
+                'step' => '创建失败',
+                'error_message' => strip_tags($e->getMessage())
+            ]);
+            $this->db->addLog('error', "一键创建 ECS 失败 [{$this->getAccountLogLabel($account)}]: " . strip_tags($e->getMessage()));
+            throw $e;
+        }
+    }
+
+    public function syncAccountGroup($groupKey)
+    {
+        if ($this->initError) {
+            throw new Exception($this->initError);
+        }
+
+        $groupKey = trim((string) $groupKey);
+        if ($groupKey === '') {
+            throw new Exception('缺少账号组标识');
+        }
+
+        $groups = $this->configManager->getAccountGroups();
+        $targetGroup = null;
+        foreach ($groups as $group) {
+            if (($group['groupKey'] ?? '') === $groupKey) {
+                $targetGroup = $group;
+                break;
+            }
+        }
+
+        if (!$targetGroup) {
+            throw new Exception('账号组不存在，请刷新页面后重试');
+        }
+
+        // syncAccountGroups reconciles the full configured set, so use all groups here
+        // and filter refresh work to the clicked group afterwards.
+        $accountsBeforeSync = $this->configManager->getAccounts();
+        $this->configManager->syncAccountGroups(true);
+        $this->configManager->load();
+
+        $threshold = (int) ($this->configManager->get('traffic_threshold', 95) ?? 95);
+        $userInterval = (int) ($this->configManager->get('api_interval', 600) ?? 600);
+        $billingEnabled = $this->configManager->get('enable_billing', '0') === '1';
+        $instanceCount = 0;
+
+        foreach ($this->configManager->getAccounts() as $account) {
+            $accountGroupKey = $account['group_key'] ?: substr(sha1($account['access_key_id'] . '|' . $account['region_id']), 0, 16);
+            if ($accountGroupKey !== $groupKey || empty($account['instance_id'])) {
+                continue;
+            }
+
+            $this->buildInstanceSnapshot($account, $threshold, $userInterval, $billingEnabled, true, true);
+            $instanceCount++;
+        }
+
+        if ($billingEnabled) {
+            $this->getAccountGroupBillingMetrics(true);
+        }
+
+        $this->configManager->load();
+        $this->reconcileDdnsAfterAccountSync($accountsBeforeSync, $this->configManager->getAccounts(), '账号同步');
+        $this->db->addLog('info', "账号同步完成 [{$targetGroup['remark']}] {$targetGroup['regionId']} 实例 {$instanceCount} 台");
+
+        return [
+            'success' => true,
+            'message' => "已同步 {$instanceCount} 台实例，流量和消费情况已刷新",
+            'instanceCount' => $instanceCount
+        ];
+    }
+
+    public function getEcsCreateTask($taskId)
+    {
+        if ($this->initError) {
+            return null;
+        }
+
+        return $this->db->getEcsCreateTask($taskId);
+    }
+
+    private function resolveAccountGroupForCreate($groupKey, $regionId = '')
+    {
+        $groups = $this->configManager->getAccountGroups();
+        foreach ($groups as $group) {
+            if (($group['groupKey'] ?? '') !== $groupKey) {
+                continue;
+            }
+
+            $resolvedRegion = trim((string) $regionId) ?: ($group['regionId'] ?? '');
+            return [
+                'id' => 0,
+                'access_key_id' => $group['AccessKeyId'],
+                'access_key_secret' => $group['AccessKeySecret'],
+                'region_id' => $resolvedRegion,
+                'group_key' => $group['groupKey'],
+                'remark' => $group['remark'] ?? '',
+                'site_type' => $group['siteType'] ?? 'international',
+                'max_traffic' => (float) ($group['maxTraffic'] ?? 200),
+                'instance_id' => '',
+                'instance_name' => ''
+            ];
+        }
+
+        throw new Exception('未找到对应账号，请先在账号管理中保存账号');
+    }
+
+    private function detectClientPublicIp()
+    {
+        $candidates = [];
+        foreach (['HTTP_CF_CONNECTING_IP', 'HTTP_X_REAL_IP', 'REMOTE_ADDR'] as $key) {
+            if (!empty($_SERVER[$key])) {
+                $candidates[] = trim((string) $_SERVER[$key]);
+            }
+        }
+
+        if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
+            foreach (explode(',', $_SERVER['HTTP_X_FORWARDED_FOR']) as $item) {
+                $candidates[] = trim($item);
+            }
+        }
+
+        foreach ($candidates as $ip) {
+            if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
+                return $ip;
+            }
+        }
+
+        $context = stream_context_create(['http' => ['timeout' => 3]]);
+        $externalIp = @file_get_contents('https://api.ipify.org', false, $context);
+        $externalIp = trim((string) $externalIp);
+        if (filter_var($externalIp, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
+            return $externalIp;
+        }
+
+        return '';
+    }
+
     public function sendTestEmail($to)
     {
         return $this->notificationService->sendTestEmail($to);
@@ -610,41 +1027,161 @@ class AliyunTrafficCheck
         }
     }
 
+    private function notifyStatusChangeIfNeeded($account, $fromStatus, $toStatus, $reason = '')
+    {
+        $fromStatus = (string) ($fromStatus ?: 'Unknown');
+        $toStatus = (string) ($toStatus ?: 'Unknown');
+
+        // 核心过滤：
+        // 1. 状态未变则不通知
+        // 2. 只通知进入稳定态（Running/Stopped）的变化
+        // 3. 过滤瞬态跳转，例如从 Starting 到 Running 是预期行为，但如果是在同步中由于 API 抖动导致的跳变则需谨慎
+        if ($fromStatus === $toStatus || !in_array($toStatus, ['Running', 'Stopped'], true)) {
+            return;
+        }
+
+        // 初次发现 (Unknown) 不通知，避免重启程序时大量刷屏
+        // ECS 创建完成后的首次状态同步不通过此逻辑通知（已有专门的 notifyEcsCreated）
+        if ($fromStatus === 'Unknown' || $this->isRecentlyCreatedInstance($account)) {
+            return;
+        }
+
+        // 避免从过渡态到其目标态的冗余通知
+        // 例如：刚刚手动触发了 Start，状态变为了 Starting，然后 API 检测到 Running。
+        // 这时通常用户已经在界面看到了，或者已有操作成功的提示，可根据需要决定是否通知。
+        // 这里保留过渡态到稳定态的通知，但过滤从一个稳定态快速切换到另一个稳定态（如通过脚本极速重启）时的中间干扰。
+
+        $accountLabel = $this->getAccountLogLabel($account);
+        $result = $this->notificationService->notifyInstanceStatusChanged($accountLabel, $account, $fromStatus, $toStatus, $reason);
+        $this->logNotificationResult($result, $accountLabel);
+    }
+
+    private function isRecentlyCreatedInstance(array $account)
+    {
+        $instanceId = trim((string) ($account['instance_id'] ?? ''));
+        if ($instanceId === '') {
+            return false;
+        }
+
+        try {
+            $stmt = $this->db->getPdo()->prepare("
+                SELECT updated_at
+                FROM ecs_create_tasks
+                WHERE instance_id = ?
+                    AND status = 'success'
+                ORDER BY updated_at DESC
+                LIMIT 1
+            ");
+            $stmt->execute([$instanceId]);
+            $updatedAt = (int) $stmt->fetchColumn();
+            return $updatedAt > 0 && (time() - $updatedAt) < 900;
+        } catch (Exception $e) {
+            return false;
+        }
+    }
+
+    private function isSameMonth($timestamp, $currentTime)
+    {
+        if (empty($timestamp)) {
+            return false;
+        }
+        return date('Y-m', (int) $timestamp) === date('Y-m', (int) $currentTime);
+    }
+
     private function safeGetTraffic($account)
     {
         try {
-            return $this->aliyunService->getTraffic($account['access_key_id'], $account['access_key_secret'], $account['region_id']);
+            return $this->getMeteredOutboundTraffic($account);
         } catch (ClientException $e) {
             $code = $e->getErrorCode();
-            $this->db->addLog('error', "流量查询配置错误: " . ($code ?: "鉴权失败"));
+            $this->db->addLog('error', "公网出口流量查询配置错误 [{$this->getAccountLogLabel($account)}]: " . ($code ?: "鉴权失败") . "，请确认AK拥有云监控流量查询权限");
             return -1;
         } catch (ServerException $e) {
-            $this->db->addLog('error', "流量查询失败: 阿里云接口超时");
+            $this->db->addLog('error', "公网出口流量查询失败 [{$this->getAccountLogLabel($account)}]: " . $e->getErrorCode() . " - " . $e->getErrorMessage());
             return -1;
         } catch (\Exception $e) {
             if (strpos($e->getMessage(), 'cURL error') !== false) {
-                $this->db->addLog('error', "流量查询失败: 网络连接超时");
+                $this->db->addLog('error', "公网出口流量查询失败 [{$this->getAccountLogLabel($account)}]: 网络连接超时");
             } else {
-                $this->db->addLog('error', "流量查询失败: 系统未知错误");
+                $this->db->addLog('error', "公网出口流量查询失败 [{$this->getAccountLogLabel($account)}]: " . strip_tags($e->getMessage()));
             }
             return -1;
         }
     }
 
+    private function getGroupTrafficUsed($account)
+    {
+        $pdo = $this->db->getPdo();
+        $groupKey = trim((string) ($account['group_key'] ?? ''));
+        $billingMonth = date('Y-m');
+
+        if ($groupKey !== '') {
+            $stmt = $pdo->prepare("SELECT COALESCE(SUM(traffic_used), 0) FROM accounts WHERE group_key = ? AND traffic_billing_month = ?");
+            $stmt->execute([$groupKey, $billingMonth]);
+            return (float) $stmt->fetchColumn();
+        }
+
+        $stmt = $pdo->prepare("SELECT COALESCE(SUM(traffic_used), 0) FROM accounts WHERE access_key_id = ? AND region_id = ? AND traffic_billing_month = ?");
+        $stmt->execute([$account['access_key_id'] ?? '', $account['region_id'] ?? '', $billingMonth]);
+        return (float) $stmt->fetchColumn();
+    }
+
+    private function getMeteredOutboundTraffic($account)
+    {
+        if (empty($account['id']) || empty($account['instance_id'])) {
+            throw new Exception('缺少账号 ID 或 Instance ID，无法按实例统计公网出口流量');
+        }
+
+        $billingMonth = date('Y-m');
+        $monthStartMs = strtotime($billingMonth . '-01 00:00:00') * 1000;
+        $record = $this->db->getInstanceTrafficUsage($account['id'], $account['instance_id'], $billingMonth);
+
+        $trafficBytes = $record ? (float) ($record['traffic_bytes'] ?? 0) : 0.0;
+        $lastSampleMs = $record ? (int) ($record['last_sample_ms'] ?? 0) : 0;
+        if ($lastSampleMs < $monthStartMs) {
+            $lastSampleMs = $monthStartMs;
+            $trafficBytes = 0.0;
+        }
+
+        // 云监控分钟点有轻微延迟，只同步到上一个完整分钟，避免把未收敛的数据点算进去。
+        $safeEndSeconds = max(strtotime($billingMonth . '-01 00:00:00'), time() - 90);
+        $endMs = (int) (floor($safeEndSeconds / 60) * 60 * 1000);
+
+        if ($endMs > $lastSampleMs) {
+            $delta = $this->aliyunService->getInstanceOutboundTrafficDelta($account, $lastSampleMs, $endMs);
+            $trafficBytes += (float) ($delta['bytes'] ?? 0);
+            $lastSampleMs = max($lastSampleMs, (int) ($delta['lastSampleMs'] ?? $lastSampleMs));
+        }
+
+        $this->db->upsertInstanceTrafficUsage(
+            (int) $account['id'],
+            $account['instance_id'],
+            $billingMonth,
+            $trafficBytes,
+            $lastSampleMs
+        );
+
+        return $trafficBytes / 1024 / 1024 / 1024;
+    }
+
     private function safeGetInstanceStatus($account)
     {
         try {
             return $this->aliyunService->getInstanceStatus($account);
         } catch (\Exception $e) {
-            if (strpos($e->getMessage(), 'cURL error') !== false) {
-            } elseif ($e instanceof ClientException) {
-                $this->db->addLog('error', "实例状态查询配置错误: 鉴权失败");
-            } else {
-            }
             return 'Unknown';
         }
     }
 
+    private function safeGetInstanceFullStatus($account)
+    {
+        try {
+            return $this->aliyunService->getInstanceFullStatus($account);
+        } catch (\Exception $e) {
+            return null;
+        }
+    }
+
     private function safeControlInstance($account, $action, $shutdownMode = 'KeepCharging')
     {
         try {
@@ -653,25 +1190,14 @@ class AliyunTrafficCheck
             $this->db->addLog('error', "实例操作失败 [{$action}]: 权限不足或配置错误");
             return false;
         } catch (ServerException $e) {
-            $this->db->addLog('error', "实例操作失败 [{$action}]: 阿里云服务无响应");
+            $this->db->addLog('error', "实例操作失败 [{$action}]: " . $e->getErrorCode() . " - " . $e->getErrorMessage());
             return false;
         } catch (\Exception $e) {
-            $this->db->addLog('error', "实例操作失败 [{$action}]: 无法连接API");
+            $this->db->addLog('error', "实例操作失败 [{$action}]: 无法连接接口");
             return false;
         }
     }
 
-    private function isTimeInRange($current, $start, $end)
-    {
-        if (!$start || !$end)
-            return false;
-        if ($start < $end) {
-            return $current >= $start && $current < $end;
-        } else {
-            return $current >= $start || $current < $end;
-        }
-    }
-
     private function getRegionName($regionId)
     {
         $regions = [
@@ -750,7 +1276,7 @@ class AliyunTrafficCheck
                     $this->db->setBillingCache($account['id'], 'instance_bill', $billingCycle, $bill);
                 } catch (\Exception $e) {
                     if ($costInfo['error']) {
-                        $costInfo['error'] = 'BSS权限不足';
+                        $costInfo['error'] = '费用中心权限不足';
                     } else {
                         $costInfo['error'] = '账单查询失败';
                     }
@@ -762,6 +1288,470 @@ class AliyunTrafficCheck
         return $costInfo;
     }
 
+    private function getAccountGroupBillingMetrics($forceRefresh = false)
+    {
+        if ($this->configManager->get('enable_billing', '0') !== '1') {
+            return [];
+        }
+
+        $billingCycle = date('Y-m');
+        $groups = $this->configManager->getAccountGroups();
+        $accounts = $this->configManager->getAccounts();
+        $accountsByGroup = [];
+
+        foreach ($accounts as $account) {
+            $groupKey = $account['group_key'] ?: ($account['access_key_id'] . '@' . $account['region_id']);
+            if (!isset($accountsByGroup[$groupKey])) {
+                $accountsByGroup[$groupKey] = [];
+            }
+            $accountsByGroup[$groupKey][] = $account;
+        }
+
+        $metrics = [];
+
+        foreach ($groups as $group) {
+            $groupKey = $group['groupKey'] ?? '';
+            $row = $accountsByGroup[$groupKey][0] ?? null;
+            $currency = ($group['siteType'] ?? 'international') === 'international' ? 'USD' : 'CNY';
+            $summary = [
+                'enabled' => true,
+                'monthly_cost' => null,
+                'balance' => null,
+                'currency' => $currency,
+                'last_updated' => null,
+                'error' => null
+            ];
+
+            if (!$row) {
+                $summary['error'] = '尚未同步实例';
+                $metrics[$groupKey] = $summary;
+                continue;
+            }
+
+            try {
+                $balanceCache = $forceRefresh ? null : $this->db->getBillingCache($row['id'], 'balance', '', 21600);
+                if ($balanceCache) {
+                    $summary['balance'] = $balanceCache['AvailableAmount'] ?? null;
+                    $summary['currency'] = $balanceCache['Currency'] ?? $currency;
+                } else {
+                    $balance = $this->aliyunService->getAccountBalance(
+                        $row['access_key_id'],
+                        $row['access_key_secret'],
+                        $row['site_type'] ?? ($group['siteType'] ?? 'international')
+                    );
+                    $summary['balance'] = $balance['AvailableAmount'] ?? null;
+                    $summary['currency'] = $balance['Currency'] ?? $currency;
+                    $this->db->setBillingCache($row['id'], 'balance', '', $balance);
+                }
+            } catch (\Exception $e) {
+                $summary['error'] = '余额查询失败';
+            }
+
+            try {
+                $overviewCache = $forceRefresh ? null : $this->db->getBillingCache($row['id'], 'bill_overview', $billingCycle, 21600);
+                if ($overviewCache) {
+                    $summary['monthly_cost'] = $overviewCache['TotalCost'] ?? null;
+                } else {
+                    $overview = $this->aliyunService->getBillOverview(
+                        $row['access_key_id'],
+                        $row['access_key_secret'],
+                        $billingCycle,
+                        $row['site_type'] ?? ($group['siteType'] ?? 'international')
+                    );
+                    $summary['monthly_cost'] = $overview['TotalCost'] ?? null;
+                    $this->db->setBillingCache($row['id'], 'bill_overview', $billingCycle, $overview);
+                }
+            } catch (\Exception $e) {
+                $summary['error'] = $summary['error'] ? '费用中心权限不足' : '账单查询失败';
+            }
+
+            $summary['last_updated'] = date('Y-m-d H:i:s');
+            $metrics[$groupKey] = $summary;
+        }
+
+        return $metrics;
+    }
+
+    public function controlInstanceAction($accountId, $action, $shutdownMode = 'KeepCharging')
+    {
+        if ($this->initError)
+            return false;
+
+        $targetAccount = $this->configManager->getAccountById($accountId);
+        if (!$targetAccount)
+            return false;
+
+        try {
+            $result = $this->aliyunService->controlInstance($targetAccount, $action, $shutdownMode);
+            if ($result) {
+                $this->db->addLog('info', "实例操作 [{$action}] 成功 [{$this->getAccountLogLabel($targetAccount)}] {$targetAccount['instance_id']}");
+                $newStatus = $action === 'stop' ? 'Stopping' : 'Starting';
+                $this->configManager->updateAccountStatus($accountId, $targetAccount['traffic_used'], $newStatus, time());
+                $this->configManager->updateAutoStartBlocked($accountId, $action === 'stop');
+                if ($action === 'start') {
+                    sleep(8);
+                    $this->configManager->syncAccountGroups(true);
+                    $this->configManager->load();
+                    $syncedAccount = $this->configManager->getAccountById($accountId);
+                    if (($syncedAccount['instance_status'] ?? '') === 'Running') {
+                        $this->notifyStatusChangeIfNeeded($syncedAccount, $targetAccount['instance_status'] ?? 'Unknown', 'Running', '用户手动启动成功。');
+                    }
+                    $this->syncDdnsForAccounts($this->configManager->getAccounts(), '实例启动后');
+                }
+            }
+            return true;
+        } catch (ClientException $e) {
+            $this->db->addLog('error', "实例操作失败 [{$action}]: 权限不足或配置错误");
+            return false;
+        } catch (ServerException $e) {
+            $this->db->addLog('error', "实例操作失败 [{$action}]: " . $e->getErrorCode() . " - " . $e->getErrorMessage());
+            return false;
+        } catch (\Exception $e) {
+            $this->db->addLog('error', "实例操作失败 [{$action}]: 无法连接接口");
+            return false;
+        }
+    }
+
+    public function deleteInstanceAction($accountId, $forceStop = false)
+    {
+        if ($this->initError)
+            return false;
+
+        $targetAccount = $this->configManager->getAccountById($accountId);
+        if (!$targetAccount)
+            return false;
+
+        // 异步方案：仅标记为删除并记录日志
+        $this->db->addLog('warning', "操作成功：秒级标记释放指令已提交，后台安全队列正在接管 [{$this->getAccountLogLabel($targetAccount)}] {$targetAccount['instance_id']}");
+        $this->configManager->markAccountAsDeleted($accountId);
+
+        return true;
+    }
+
+    private function processPendingReleases()
+    {
+        $pendingAccounts = $this->configManager->getPendingReleaseAccounts();
+        foreach ($pendingAccounts as $account) {
+            $accountLabel = $this->getAccountLogLabel($account);
+            try {
+                $status = $this->aliyunService->getInstanceStatus($account);
+            } catch (\Exception $e) {
+                if (stripos($e->getMessage(), 'NotFound') !== false || stripos($e->getMessage(), 'InvalidInstanceId') !== false) {
+                    $status = 'NotFound';
+                } else {
+                    $this->db->addLog('error', "后台异步释放引擎探测异常 [{$accountLabel}]: " . $e->getMessage());
+                    continue;
+                }
+            }
+
+            try {
+                if ($status === 'Stopped') {
+                    $result = $this->aliyunService->deleteInstance($account, false);
+                    if ($result) {
+                        $this->db->addLog('warning', "后台异步彻底销毁成功 [{$accountLabel}] {$account['instance_id']}");
+                        $releaseNotifyResult = $this->notificationService->notifyInstanceReleased(
+                            $accountLabel,
+                            $account,
+                            '用户前端提交指令后，后台成功执行安全彻底销毁。'
+                        );
+                        $this->logNotificationResult($releaseNotifyResult, $accountLabel);
+                        
+                        $accountsBeforeDelete = $this->configManager->getAccounts();
+                        $this->deleteDdnsForAccount($account, $accountsBeforeDelete, '后台实例彻底释放');
+                        $this->configManager->physicallyDeleteAccount($account['id']);
+                        $this->reconcileDdnsAfterAccountSync($accountsBeforeDelete, $this->configManager->getAccounts(), '异步释放后同步');
+                    }
+                } elseif ($status === 'NotFound' || $status === 'Unknown') {
+                    $this->db->addLog('warning', "待释放实例云端已灭迹，自动擦除本地账本 [{$accountLabel}]");
+                    $this->configManager->physicallyDeleteAccount($account['id']);
+                } elseif (!in_array($status, ['Stopping'])) {
+                    $this->db->addLog('info', "后台异步释放引擎：向活跃实例下发强制离线指令 [{$accountLabel}]");
+                    // 仅调用 stop 并允许返回，不产生同步堵塞死循环
+                    $this->aliyunService->controlInstance($account, 'stop'); 
+                }
+            } catch (\Exception $e) {
+                // 如果 DeleteInstance 等遇到暂时性 API 禁止，让它下一分钟随 Cron 重新再轮询一次，不需要人工介入
+                $this->db->addLog('error', "后台异步释放行动异常，将于下一分钟轮询重试 [{$accountLabel}]: " . $e->getMessage());
+            }
+        }
+    }
+
+    /**
+     * 获取所有已配置账号的实例列表（合并去重）
+     */
+    public function getAllManagedInstances($sync = false)
+    {
+        if ($this->initError)
+            return [];
+
+        if ($sync) {
+            $accountsBeforeSync = $this->configManager->getAccounts();
+            $this->configManager->syncAccountGroups(true);
+            $this->configManager->load();
+            $this->reconcileDdnsAfterAccountSync($accountsBeforeSync, $this->configManager->getAccounts(), '实例手动同步');
+        } else {
+            $this->configManager->load();
+        }
+
+        $threshold = (int) ($this->configManager->get('traffic_threshold', 95) ?? 95);
+        $userInterval = (int) ($this->configManager->get('api_interval', 600) ?? 600);
+        $accounts = array_values(array_filter($this->configManager->getAccounts(), function ($account) {
+            return !empty($account['instance_id']);
+        }));
+        $allInstances = [];
+
+        foreach ($accounts as $account) {
+            $allInstances[] = $this->buildInstanceSnapshot($account, $threshold, $userInterval, false, true, $sync);
+        }
+
+        $pendingAccounts = $this->configManager->getPendingReleaseAccounts();
+        foreach ($pendingAccounts as $account) {
+            $snap = $this->buildInstanceSnapshot($account, $threshold, $userInterval, false, true, $sync);
+            $snap['instanceStatus'] = 'Releasing';
+            $snap['status'] = 'Releasing';
+            $allInstances[] = $snap;
+        }
+
+        return $allInstances;
+    }
+
+    private function syncDdnsForAccounts(array $accounts, $source = '同步')
+    {
+        if (!$this->ddnsService || !$this->ddnsService->isEnabled()) {
+            return;
+        }
+
+        $groupCounts = $this->getDdnsGroupCounts($accounts);
+
+        foreach ($accounts as $account) {
+            if (empty($account['instance_id']) || empty($account['public_ip'])) {
+                continue;
+            }
+
+            try {
+                $recordName = $this->buildDdnsRecordNameForAccount($account, $groupCounts);
+
+                $result = $this->ddnsService->syncARecord($recordName, $account['public_ip']);
+                if (!empty($result['success']) && empty($result['skipped'])) {
+                    $this->db->addLog('info', "DDNS 已同步 [{$this->getAccountLogLabel($account)}] {$recordName} -> {$account['public_ip']} ({$source})");
+                } elseif (empty($result['success'])) {
+                    $this->db->addLog('warning', "DDNS 同步失败 [{$this->getAccountLogLabel($account)}]: " . strip_tags($result['message'] ?? '未知错误'));
+                }
+            } catch (Exception $e) {
+                $this->db->addLog('warning', "DDNS 同步失败 [{$this->getAccountLogLabel($account)}]: " . strip_tags($e->getMessage()));
+            }
+        }
+    }
+
+    private function reconcileDdnsAfterAccountSync(array $beforeAccounts, array $afterAccounts, $source = '同步')
+    {
+        if (!$this->ddnsService || !$this->ddnsService->isEnabled()) {
+            return;
+        }
+
+        $beforeRecords = $this->getDdnsRecordNamesForAccounts($beforeAccounts);
+        $afterRecords = $this->getDdnsRecordNamesForAccounts($afterAccounts);
+
+        foreach ($beforeRecords as $instanceId => $recordName) {
+            if ($recordName === '' || in_array($recordName, $afterRecords, true)) {
+                continue;
+            }
+            $this->deleteDdnsRecord($recordName, $source . '清理');
+        }
+
+        $this->syncDdnsForAccounts($afterAccounts, $source);
+    }
+
+    private function deleteDdnsForAccount(array $account, array $accountsBeforeDelete, $source = '释放')
+    {
+        if (!$this->ddnsService || !$this->ddnsService->isEnabled()) {
+            return;
+        }
+
+        try {
+            $recordName = $this->buildDdnsRecordNameForAccount($account, $this->getDdnsGroupCounts($accountsBeforeDelete));
+            $this->deleteDdnsRecord($recordName, $source);
+        } catch (Exception $e) {
+            $this->db->addLog('warning', "DDNS 清理失败 [{$this->getAccountLogLabel($account)}]: " . strip_tags($e->getMessage()));
+        }
+    }
+
+    private function deleteDdnsRecord($recordName, $source = '清理')
+    {
+        try {
+            $result = $this->ddnsService->deleteARecord($recordName);
+            if (!empty($result['success']) && empty($result['skipped'])) {
+                $this->db->addLog('info', "DDNS 已删除 {$recordName} ({$source})");
+            } elseif (empty($result['success'])) {
+                $this->db->addLog('warning', "DDNS 删除失败 {$recordName}: " . strip_tags($result['message'] ?? '未知错误'));
+            }
+        } catch (Exception $e) {
+            $this->db->addLog('warning', "DDNS 删除失败 {$recordName}: " . strip_tags($e->getMessage()));
+        }
+    }
+
+    private function getDdnsRecordNamesForAccounts(array $accounts)
+    {
+        $groupCounts = $this->getDdnsGroupCounts($accounts);
+        $records = [];
+
+        foreach ($accounts as $account) {
+            if (empty($account['instance_id'])) {
+                continue;
+            }
+
+            try {
+                $records[$account['instance_id']] = $this->buildDdnsRecordNameForAccount($account, $groupCounts);
+            } catch (Exception $e) {
+                $this->db->addLog('warning', "DDNS 记录名生成失败 [{$this->getAccountLogLabel($account)}]: " . strip_tags($e->getMessage()));
+            }
+        }
+
+        return $records;
+    }
+
+    private function buildDdnsRecordNameForAccount(array $account, array $groupCounts)
+    {
+        $groupKey = $this->getDdnsGroupKey($account);
+        return $this->ddnsService->buildRecordName([
+            'account_remark' => $this->resolveGroupRemark($account),
+            'remark' => $account['remark'] ?? '',
+            'instance_name' => $account['instance_name'] ?? '',
+            'instance_id' => $account['instance_id'] ?? ''
+        ], $groupCounts[$groupKey] ?? 1);
+    }
+
+    private function getDdnsGroupCounts(array $accounts)
+    {
+        $groupCounts = [];
+
+        foreach ($accounts as $account) {
+            if (empty($account['instance_id'])) {
+                continue;
+            }
+            $groupKey = $this->getDdnsGroupKey($account);
+            $groupCounts[$groupKey] = ($groupCounts[$groupKey] ?? 0) + 1;
+        }
+
+        return $groupCounts;
+    }
+
+    private function getDdnsGroupKey(array $account)
+    {
+        return $account['group_key'] ?: (($account['access_key_id'] ?? '') . '|' . ($account['region_id'] ?? ''));
+    }
+
+    private function resolveGroupRemark(array $account)
+    {
+        $groupKey = trim((string) ($account['group_key'] ?? ''));
+        if ($groupKey !== '') {
+            foreach ($this->configManager->getAccountGroups() as $group) {
+                if (($group['groupKey'] ?? '') === $groupKey) {
+                    return trim((string) ($group['remark'] ?? ''));
+                }
+            }
+        }
+
+        return trim((string) ($account['remark'] ?? ''));
+    }
+
+    private function buildInstanceSnapshot($account, $threshold, $userInterval, $billingEnabled, $includeSensitive = true, $forceRefresh = false)
+    {
+        $currentTime = time();
+        $lastUpdate = (int) ($account['updated_at'] ?? 0);
+        $cachedStatus = $account['instance_status'] ?? 'Unknown';
+        $newUpdateTime = $currentTime;
+
+        $isTransientState = in_array($cachedStatus, ['Starting', 'Stopping', 'Pending', 'Unknown'], true);
+        $checkInterval = $isTransientState ? 60 : $userInterval;
+
+        if ($forceRefresh || ($currentTime - $lastUpdate) > $checkInterval) {
+            $newTraffic = $this->safeGetTraffic($account);
+            $status = $this->safeGetInstanceStatus($account);
+
+            if ($status === 'Unknown') {
+                $status = $cachedStatus;
+            }
+
+            if ($newTraffic < 0) {
+                $traffic = (float) ($account['traffic_used'] ?? 0);
+                $newUpdateTime = $lastUpdate;
+            } else {
+                $traffic = $newTraffic;
+                $this->db->addHourlyStat($account['id'], $traffic);
+                $this->db->addDailyStat($account['id'], $traffic);
+            }
+
+            if ($newUpdateTime <= 0) {
+                $newUpdateTime = $currentTime;
+            }
+
+            $this->notifyStatusChangeIfNeeded($account, $cachedStatus, $status, '页面刷新检测到实例状态变化。');
+
+            $metadata = [];
+            // 如果处于运行中且健康状态未知或非 OK，尝试获取详细状态以识别“操作系统启动中”
+            if ($status === 'Running' && ($account['health_status'] ?? '') !== 'OK') {
+                $full = $this->safeGetInstanceFullStatus($account);
+                if ($full) {
+                    $metadata['health_status'] = $full['healthStatus'];
+                }
+            }
+
+            $this->configManager->updateAccountStatus($account['id'], $traffic, $status, $newUpdateTime, $metadata);
+            $lastUpdate = $newUpdateTime;
+        } else {
+            $traffic = (float) ($account['traffic_used'] ?? 0);
+            $status = $cachedStatus;
+        }
+
+        $maxTraffic = (float) ($account['max_traffic'] ?? 0);
+        $usagePercent = $maxTraffic > 0 ? round(($traffic / $maxTraffic) * 100, 2) : 0;
+        $instanceName = $account['instance_name'] ?? '';
+        $remark = $account['remark'] ?? '';
+
+        $accountDisplayLabel = $this->getAccountLogLabel($account);
+
+        $item = [
+            'id' => (int) $account['id'],
+            'accountId' => (int) $account['id'],
+            'groupKey' => $account['group_key'] ?? '',
+            'account' => substr($account['access_key_id'], 0, 7) . '***',
+            'accountMasked' => substr($account['access_key_id'], 0, 7) . '***',
+            'accountLabel' => $accountDisplayLabel . ' / ' . $this->getRegionName($account['region_id']),
+            'flow_total' => $maxTraffic,
+                'flow_used' => round($traffic, 6),
+            'percentageOfUse' => $usagePercent,
+            'region' => $account['region_id'],
+            'regionId' => $account['region_id'],
+            'regionName' => $this->getRegionName($account['region_id']),
+            'rate95' => $usagePercent >= $threshold,
+            'threshold' => $threshold,
+            'instanceStatus' => $status,
+            'status' => $status,
+            'healthStatus' => $account['health_status'] ?? 'Unknown',
+            'stoppedMode' => $account['stopped_mode'] ?? 'KeepCharging',
+            'cpu' => (int) ($account['cpu'] ?? 0),
+            'memory' => (int) ($account['memory'] ?? 0),
+            'lastUpdated' => date('Y-m-d H:i:s', $lastUpdate > 0 ? $lastUpdate : $currentTime),
+            'remark' => $remark !== '' ? $remark : ($instanceName !== '' ? $instanceName : ($account['instance_id'] ?? '')),
+            'instanceId' => $account['instance_id'] ?? '',
+            'instanceName' => $instanceName,
+            'instanceType' => $account['instance_type'] ?? '',
+            'osName' => $account['os_name'] ?? '',
+            'internetMaxBandwidthOut' => (int) ($account['internet_max_bandwidth_out'] ?? 0),
+            'publicIp' => $includeSensitive ? ($account['public_ip'] ?? '') : '',
+            'privateIp' => $includeSensitive ? ($account['private_ip'] ?? '') : '',
+            'maxTraffic' => $maxTraffic,
+            'siteType' => $account['site_type'] ?? 'international'
+        ];
+
+        if ($billingEnabled) {
+            $item['cost'] = $this->safeGetBillingInfo($account, date('Y-m'));
+        }
+
+        return $item;
+    }
+
     public function renderTemplate()
     {
         if (!file_exists('template.html'))
diff --git a/ConfigManager.php b/ConfigManager.php
index 112e67e..ec42778 100644
--- a/ConfigManager.php
+++ b/ConfigManager.php
@@ -2,25 +2,110 @@
 
 class ConfigManager
 {
+    private $database;
     private $db;
     private $configCache = [];
     private $accountsCache = [];
+    private $encryptionKey = null;
 
     public function __construct(Database $db)
     {
+        $this->database = $db;
         $this->db = $db->getPdo();
+        $this->encryptionKey = $this->getEncryptionKey();
         $this->load();
     }
 
+    private function getEncryptionKey()
+    {
+        $keyDir = __DIR__ . '/data';
+        $keyFile = $keyDir . '/.secret_encryption.key';
+
+        if (!is_dir($keyDir)) {
+            @mkdir($keyDir, 0755, true);
+        }
+
+        if (@file_exists($keyFile)) {
+            $key = @file_get_contents($keyFile);
+            if ($key !== false && strlen($key) === SODIUM_CRYPTO_SECRETBOX_KEYBYTES) {
+                return $key;
+            }
+        }
+
+        $key = random_bytes(SODIUM_CRYPTO_SECRETBOX_KEYBYTES);
+        @file_put_contents($keyFile, $key, LOCK_EX);
+        @chmod($keyFile, 0600);
+        return $key;
+    }
+
+    private function encryptValue($value)
+    {
+        if (!function_exists('sodium_crypto_secretbox') || empty($value)) {
+            return $value;
+        }
+        $nonce = random_bytes(SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
+        $encrypted = sodium_crypto_secretbox($value, $nonce, $this->encryptionKey);
+        return 'ENC1' . base64_encode($nonce . $encrypted);
+    }
+
+    private function decryptValue($value)
+    {
+        if (!function_exists('sodium_crypto_secretbox') || empty($value) || strlen($value) < 8 || substr($value, 0, 4) !== 'ENC1') {
+            return $value;
+        }
+        $raw = base64_decode(substr($value, 4));
+        if ($raw === false) {
+            return $value;
+        }
+        $nonce = substr($raw, 0, SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
+        $ciphertext = substr($raw, SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
+        $decrypted = sodium_crypto_secretbox_open($ciphertext, $nonce, $this->encryptionKey);
+        return $decrypted !== false ? $decrypted : $value;
+    }
+
+    private function isEncryptedValue($value)
+    {
+        return strlen($value) >= 8 && substr($value, 0, 4) === 'ENC1';
+    }
+
     public function load()
     {
+        $this->configCache = [];
         $stmt = $this->db->query("SELECT key, value FROM settings");
         while ($row = $stmt->fetch()) {
             $this->configCache[$row['key']] = $row['value'];
         }
 
-        $stmt = $this->db->query("SELECT * FROM accounts ORDER BY id ASC");
+        $this->resetMonthlyTrafficCacheIfNeeded();
+
+        $stmt = $this->db->query("SELECT * FROM accounts WHERE is_deleted = 0 ORDER BY region_id ASC, remark ASC, id ASC");
         $this->accountsCache = $stmt->fetchAll();
+
+        foreach ($this->accountsCache as &$row) {
+            if (!empty($row['access_key_secret']) && $this->isEncryptedValue($row['access_key_secret'])) {
+                $row['access_key_secret'] = $this->decryptValue($row['access_key_secret']);
+            }
+        }
+        unset($row);
+    }
+
+    private function resetMonthlyTrafficCacheIfNeeded()
+    {
+        $currentMonth = date('Y-m');
+
+        // 首次升级时，已有缓存默认视为当前月，避免上线当天误清空。
+        $stmt = $this->db->prepare("UPDATE accounts SET traffic_billing_month = ? WHERE traffic_billing_month IS NULL OR traffic_billing_month = ''");
+        $stmt->execute([$currentMonth]);
+
+        // 阿里云 CDT/公网流量按自然月结算。月切换后，展示值和熔断判断都必须从当月重新开始。
+        $stmt = $this->db->prepare("
+            UPDATE accounts
+            SET traffic_used = 0,
+                traffic_billing_month = ?,
+                updated_at = 0
+            WHERE traffic_billing_month <> ?
+        ");
+        $stmt->execute([$currentMonth, $currentMonth]);
     }
 
     public function get($key, $default = null)
@@ -41,12 +126,84 @@ class ConfigManager
     public function getAccountById($id)
     {
         foreach ($this->accountsCache as $acc) {
-            if ($acc['id'] == $id)
+            if ((int) $acc['id'] === (int) $id) {
                 return $acc;
+            }
         }
         return null;
     }
 
+    public function decryptAccountSecret($secretFromDb)
+    {
+        if (empty($secretFromDb)) {
+            return '';
+        }
+        return $this->decryptValue($secretFromDb);
+    }
+
+    public function getAccountGroups()
+    {
+        $raw = $this->configCache['account_groups'] ?? '';
+        if (!empty($raw)) {
+            $decoded = json_decode($raw, true);
+            if (is_array($decoded)) {
+                return $this->normalizeAccountGroups($decoded, true);
+            }
+        }
+
+        return $this->deriveAccountGroupsFromAccounts();
+    }
+
+    public function getAccountGroupMetrics()
+    {
+        $groups = $this->getAccountGroups();
+        $metrics = [];
+
+        foreach ($groups as $group) {
+            $groupKey = $group['groupKey'];
+            $maxTraffic = (float) ($group['maxTraffic'] ?? 0);
+            $metrics[$groupKey] = [
+                'usageUsed' => 0.0,
+                'usageRemaining' => $maxTraffic,
+                'usagePercent' => 0.0,
+                'instanceCount' => 0,
+                'lastUpdated' => 0
+            ];
+        }
+
+        foreach ($this->accountsCache as $row) {
+            $groupKey = $row['group_key'] ?: $this->buildGroupKey($row['access_key_id'], $row['region_id']);
+            if (!isset($metrics[$groupKey])) {
+                $maxTraffic = (float) ($row['max_traffic'] ?? 0);
+                $metrics[$groupKey] = [
+                    'usageUsed' => 0.0,
+                    'usageRemaining' => $maxTraffic,
+                    'usagePercent' => 0.0,
+                    'instanceCount' => 0,
+                    'lastUpdated' => 0
+                ];
+            }
+
+            if (!empty($row['instance_id'])) {
+                $metrics[$groupKey]['instanceCount']++;
+            }
+
+            $isCurrentMonthTraffic = ($row['traffic_billing_month'] ?? '') === date('Y-m');
+            $metrics[$groupKey]['usageUsed'] += $isCurrentMonthTraffic ? (float) ($row['traffic_used'] ?? 0) : 0.0;
+            $metrics[$groupKey]['lastUpdated'] = max($metrics[$groupKey]['lastUpdated'], (int) ($row['updated_at'] ?? 0));
+        }
+
+        foreach ($groups as $group) {
+            $groupKey = $group['groupKey'];
+            $maxTraffic = (float) ($group['maxTraffic'] ?? 0);
+            $used = (float) ($metrics[$groupKey]['usageUsed'] ?? 0);
+            $metrics[$groupKey]['usageRemaining'] = max($maxTraffic - $used, 0);
+            $metrics[$groupKey]['usagePercent'] = $maxTraffic > 0 ? min(round(($used / $maxTraffic) * 100, 2), 100) : 0;
+        }
+
+        return $metrics;
+    }
+
     public function isInitialized()
     {
         return !empty($this->configCache['admin_password']);
@@ -59,7 +216,21 @@ class ConfigManager
         $this->configCache[$key] = $value;
     }
 
-    // --- 新增：心跳时间管理 ---
+    public function upgradePasswordHash($plainPassword)
+    {
+        $hashed = password_hash($plainPassword, PASSWORD_BCRYPT);
+        $this->saveSetting('admin_password', $hashed);
+    }
+
+    public function getMonitorKey()
+    {
+        return $this->get('monitor_key', '');
+    }
+
+    public function saveMonitorKey($key)
+    {
+        $this->saveSetting('monitor_key', $key);
+    }
 
     public function updateLastRunTime($time)
     {
@@ -71,177 +242,525 @@ class ConfigManager
         return (int) ($this->configCache['last_monitor_run'] ?? 0);
     }
 
-    // ------------------------
+    public function updateLastInstanceSyncTime($time)
+    {
+        $this->saveSetting('last_instance_sync', $time);
+    }
+
+    public function getLastInstanceSyncTime()
+    {
+        return (int) ($this->configCache['last_instance_sync'] ?? 0);
+    }
 
     public function updateConfig($data)
     {
         try {
             $this->db->beginTransaction();
 
-            // 1. 保存全局设置
-            $this->saveSetting('admin_password', $data['admin_password']);
-            $this->saveSetting('traffic_threshold', $data['traffic_threshold']);
-            $this->saveSetting('enable_schedule_email', $data['enable_schedule_email'] ? '1' : '0');
-            $this->saveSetting('shutdown_mode', $data['shutdown_mode']);
-            $this->saveSetting('threshold_action', $data['threshold_action']);
-            $this->saveSetting('keep_alive', isset($data['keep_alive']) && $data['keep_alive'] ? '1' : '0');
+            $adminPassword = $data['admin_password'] ?? '';
+            if (!empty($adminPassword) && $adminPassword !== '********') {
+                if (!preg_match('/^\$2[aby]?\$/', $adminPassword) && !preg_match('/^\$argon2[aid]\$/', $adminPassword)) {
+                    $adminPassword = password_hash($adminPassword, PASSWORD_BCRYPT);
+                }
+                $this->saveSetting('admin_password', $adminPassword);
+            }
+            $this->saveSetting('traffic_threshold', $data['traffic_threshold'] ?? 95);
+            $this->saveSetting('shutdown_mode', $data['shutdown_mode'] ?? 'KeepCharging');
+            $this->saveSetting('threshold_action', $data['threshold_action'] ?? 'stop_and_notify');
+            $this->saveSetting('keep_alive', !empty($data['keep_alive']) ? '1' : '0');
+            $this->saveSetting('monthly_auto_start', !empty($data['monthly_auto_start']) ? '1' : '0');
             $this->saveSetting('api_interval', $data['api_interval'] ?? 600);
-            $this->saveSetting('enable_billing', isset($data['enable_billing']) && $data['enable_billing'] ? '1' : '0');
+            $this->saveSetting('enable_billing', !empty($data['enable_billing']) ? '1' : '0');
+            $this->saveDdnsSettings($data['Ddns'] ?? []);
 
             if (isset($data['Notification'])) {
-                // Email
-                $this->saveSetting('notify_email_enabled', isset($data['Notification']['email_enabled']) && $data['Notification']['email_enabled'] ? '1' : '0');
-                $this->saveSetting('notify_email', $data['Notification']['email'] ?? '');
-                $this->saveSetting('notify_host', $data['Notification']['host'] ?? '');
-                $this->saveSetting('notify_port', $data['Notification']['port'] ?? 465);
-                $this->saveSetting('notify_username', $data['Notification']['username'] ?? '');
-                $this->saveSetting('notify_password', $data['Notification']['password'] ?? '');
-                $this->saveSetting('notify_secure', $data['Notification']['secure'] ?? 'ssl');
-
-                // Telegram
-                if (isset($data['Notification']['telegram'])) {
-                    $tg = $data['Notification']['telegram'];
-                    $this->saveSetting('notify_tg_enabled', isset($tg['enabled']) && $tg['enabled'] ? '1' : '0');
-                    $this->saveSetting('notify_tg_token', $tg['token'] ?? '');
-                    $this->saveSetting('notify_tg_chat_id', $tg['chat_id'] ?? '');
-                    $this->saveSetting('notify_tg_proxy_type', $tg['proxy_type'] ?? 'none');
-                    $this->saveSetting('notify_tg_proxy_url', $tg['proxy_url'] ?? '');
-                    $this->saveSetting('notify_tg_proxy_ip', $tg['proxy_ip'] ?? '');
-                    $this->saveSetting('notify_tg_proxy_port', $tg['proxy_port'] ?? '');
-                    $this->saveSetting('notify_tg_proxy_user', $tg['proxy_user'] ?? '');
-                    $this->saveSetting('notify_tg_proxy_pass', $tg['proxy_pass'] ?? '');
-                }
-
-                // Webhook
-                if (isset($data['Notification']['webhook'])) {
-                    $wh = $data['Notification']['webhook'];
-                    $this->saveSetting('notify_wh_enabled', isset($wh['enabled']) && $wh['enabled'] ? '1' : '0');
-                    $this->saveSetting('notify_wh_url', $wh['url'] ?? '');
-                    $this->saveSetting('notify_wh_method', $wh['method'] ?? 'GET');
-                    $this->saveSetting('notify_wh_request_type', $wh['request_type'] ?? 'JSON');
-                    $this->saveSetting('notify_wh_headers', $wh['headers'] ?? '');
-                    $this->saveSetting('notify_wh_body', $wh['body'] ?? '');
-                }
+                $this->saveNotificationSettings($data['Notification']);
             }
 
-            // 2. 账号增量同步
-            $newAccounts = $data['Accounts'] ?? [];
-            $stmt = $this->db->query("SELECT id, access_key_id, region_id, instance_id FROM accounts");
-            $existingMap = [];
-            while ($row = $stmt->fetch()) {
-                // Use composite key for deduplication: AK + Region + InstanceID
-                $compositeKey = $row['access_key_id'] . '|' . $row['region_id'] . '|' . ($row['instance_id'] ?? '');
-                $existingMap[$compositeKey] = $row['id'];
-            }
-
-            $keptIds = [];
-            $insertStmt = $this->db->prepare("INSERT INTO accounts (access_key_id, access_key_secret, region_id, instance_id, max_traffic, schedule_enabled, start_time, stop_time, remark, site_type, traffic_used, instance_status, updated_at, last_keep_alive_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, 'Unknown', 0, 0)");
-            $updateStmt = $this->db->prepare("UPDATE accounts SET access_key_secret = ?, region_id = ?, instance_id = ?, max_traffic = ?, schedule_enabled = ?, start_time = ?, stop_time = ?, remark = ?, site_type = ? WHERE id = ?");
-
-            foreach ($newAccounts as $acc) {
-                $key = $acc['AccessKeyId'];
-                $region = $acc['regionId'];
-                $instance = $acc['instanceId'] ?? '';
-                $compositeKey = $key . '|' . $region . '|' . $instance;
-
-                $params = [
-                    $acc['AccessKeySecret'],
-                    $region,
-                    $instance,
-                    $acc['maxTraffic'],
-                    ($acc['schedule']['enabled'] ?? false) ? 1 : 0,
-                    $acc['schedule']['startTime'] ?? '',
-                    $acc['schedule']['stopTime'] ?? '',
-                    $acc['remark'] ?? '',
-                    $acc['siteType'] ?? 'china'
-                ];
-
-                if (isset($existingMap[$compositeKey])) {
-                    $id = $existingMap[$compositeKey];
-                    $params[] = $id;
-                    $updateStmt->execute($params);
-                    $keptIds[] = $id;
-                } else {
-                    $insertParams = [$key];
-                    array_push($insertParams, ...$params);
-                    $insertStmt->execute($insertParams);
-                    // For new inserts, we need to track the ID to avoid deleting it if user sends duplicate valid entries in one request? 
-                    // But assume frontend sends unique list. If not, this logic might add duplicates. 
-                    // Ideally we should track inserted IDs too but here we just rely on existingMap keys.
-                    // Actually, if we just inserted, we can't easily get the ID back without lastInsertId but we don't strictly need it for the delete logic below if we assume input list is unique.
-                    // However, to be safe against deleting effectively "new" accounts just added, let's just trust input list defines the "desired state".
-                    // Wait, $idsToDelete is calculated from existingMap vs keptIds. If it's a new insert, it wasn't in existingMap, so it won't be in idsToDelete anyway.
-                }
-            }
-
-            // 3. 删除移除的账号
-            $idsToDelete = array_diff(array_values($existingMap), $keptIds);
-            if (!empty($idsToDelete)) {
-                $placeholders = implode(',', array_fill(0, count($idsToDelete), '?'));
-                $deleteStmt = $this->db->prepare("DELETE FROM accounts WHERE id IN ($placeholders)");
-                $deleteStmt->execute(array_values($idsToDelete));
-            }
+            $groups = $this->normalizeAccountGroups($data['Accounts'] ?? []);
+            $this->saveSetting('account_groups', json_encode($groups, JSON_UNESCAPED_UNICODE));
+            $this->syncAccountGroups(true, $groups);
 
             $this->db->commit();
-
-            // 4. 重排 ID
-            $this->reorderIds();
-
-            // 5. 刷新缓存
             $this->load();
             return true;
         } catch (Exception $e) {
-            if ($this->db->inTransaction())
+            if ($this->db->inTransaction()) {
                 $this->db->rollBack();
+            }
+            $this->database->addLog('error', "配置保存失败: " . strip_tags($e->getMessage()));
             return false;
         }
     }
 
-    private function reorderIds()
+    public function syncAccountGroups($force = false, $groups = null)
     {
-        try {
-            $this->db->beginTransaction();
-            $stmt = $this->db->query("SELECT * FROM accounts ORDER BY id ASC");
-            $rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
+        $lastSync = $this->getLastInstanceSyncTime();
+        if (!$force && (time() - $lastSync) < 60) {
+            $this->load();
+            return;
+        }
 
-            if (!empty($rows)) {
-                $this->db->exec("DELETE FROM accounts");
-                $this->db->exec("DELETE FROM sqlite_sequence WHERE name='accounts'");
+        $groups = $groups === null ? $this->getAccountGroups() : $this->normalizeAccountGroups($groups, true);
 
-                $insertStmt = $this->db->prepare("INSERT INTO accounts (id, access_key_id, access_key_secret, region_id, instance_id, max_traffic, schedule_enabled, start_time, stop_time, remark, site_type, traffic_used, instance_status, updated_at, last_keep_alive_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)");
+        $existingRows = $this->db->query("SELECT * FROM accounts ORDER BY id ASC")->fetchAll(PDO::FETCH_ASSOC);
+        $existingByGroup = [];
+        $existingByComposite = [];
 
-                $newId = 1;
-                foreach ($rows as $row) {
+        foreach ($existingRows as $row) {
+            $groupKey = $row['group_key'] ?: $this->buildGroupKey($row['access_key_id'], $row['region_id']);
+            $existingByGroup[$groupKey][] = $row;
+            $existingByComposite[$groupKey . '|' . $row['instance_id']] = $row;
+        }
+
+        $configuredGroupKeys = [];
+
+        $insertStmt = $this->db->prepare("
+            INSERT INTO accounts (
+                access_key_id,
+                access_key_secret,
+                region_id,
+                instance_id,
+                max_traffic,
+                schedule_enabled,
+                start_time,
+                stop_time,
+                traffic_used,
+                traffic_billing_month,
+                instance_status,
+                updated_at,
+                last_keep_alive_at,
+                remark,
+                site_type,
+                group_key,
+                instance_name,
+                instance_type,
+                internet_max_bandwidth_out,
+                public_ip,
+                private_ip,
+                cpu,
+                memory,
+                os_name,
+                stopped_mode
+            ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?, 0, 0, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        ");
+
+        $updateStmt = $this->db->prepare("
+            UPDATE accounts
+            SET access_key_id = ?,
+                access_key_secret = ?,
+                region_id = ?,
+                instance_id = ?,
+                max_traffic = ?,
+                schedule_enabled = ?,
+                start_time = ?,
+                stop_time = ?,
+                instance_status = ?,
+                remark = ?,
+                site_type = ?,
+                group_key = ?,
+                instance_name = ?,
+                instance_type = ?,
+                internet_max_bandwidth_out = ?,
+                public_ip = ?,
+                private_ip = ?,
+                cpu = ?,
+                memory = ?,
+                os_name = ?,
+                stopped_mode = ?
+            WHERE id = ?
+        ");
+
+        foreach ($groups as $group) {
+            $configuredGroupKeys[] = $group['groupKey'];
+
+            try {
+                $service = new AliyunService();
+                $instances = $service->getInstances($group['AccessKeyId'], $group['AccessKeySecret'], $group['regionId']);
+            } catch (Exception $e) {
+                $maskedKey = substr($group['AccessKeyId'], 0, 7) . '***';
+                $this->database->addLog('warning', "实例同步失败 [{$maskedKey}] {$group['regionId']}: " . strip_tags($e->getMessage()));
+                $this->updateGroupBaseSettings($group['groupKey'], $group);
+                continue;
+            }
+
+            $remoteInstanceIds = [];
+
+            foreach ($instances as $instance) {
+                $remoteInstanceIds[] = $instance['instanceId'];
+                $compositeKey = $group['groupKey'] . '|' . $instance['instanceId'];
+                $existingRow = $existingByComposite[$compositeKey] ?? null;
+                $remark = $this->resolveRemark($group, $instance, $existingRow);
+
+                if ($existingRow) {
+                    $updateStmt->execute([
+                        $group['AccessKeyId'],
+                        $this->encryptValue($group['AccessKeySecret']),
+                        $group['regionId'],
+                        $instance['instanceId'],
+                        $group['maxTraffic'],
+                        0,
+                        '',
+                        '',
+                        $instance['status'] ?: ($existingRow['instance_status'] ?? 'Unknown'),
+                        $remark,
+                        $group['siteType'],
+                        $group['groupKey'],
+                        $instance['instanceName'] ?? '',
+                        $instance['instanceType'] ?? '',
+                        (int) ($instance['internetMaxBandwidthOut'] ?? 0),
+                        $instance['publicIp'] ?? '',
+                        $instance['privateIp'] ?? '',
+                        (int) ($instance['cpu'] ?? 0),
+                        (int) ($instance['memory'] ?? 0),
+                        $instance['osName'] ?? '',
+                        $instance['stoppedMode'] ?? '',
+                        $existingRow['id']
+                    ]);
+                } else {
                     $insertStmt->execute([
-                        $newId++,
-                        $row['access_key_id'],
-                        $row['access_key_secret'],
-                        $row['region_id'],
-                        $row['instance_id'],
-                        $row['max_traffic'],
-                        $row['schedule_enabled'],
-                        $row['start_time'],
-                        $row['stop_time'],
-                        $row['remark'] ?? '',
-                        $row['site_type'] ?? 'china',
-                        $row['traffic_used'],
-                        $row['instance_status'],
-                        $row['updated_at'],
-                        $row['last_keep_alive_at']
+                        $group['AccessKeyId'],
+                        $this->encryptValue($group['AccessKeySecret']),
+                        $group['regionId'],
+                        $instance['instanceId'],
+                        $group['maxTraffic'],
+                        0,
+                        '',
+                        '',
+                        date('Y-m'),
+                        $instance['status'] ?? 'Unknown',
+                        $remark,
+                        $group['siteType'],
+                        $group['groupKey'],
+                        $instance['instanceName'] ?? '',
+                        $instance['instanceType'] ?? '',
+                        (int) ($instance['internetMaxBandwidthOut'] ?? 0),
+                        $instance['publicIp'] ?? '',
+                        $instance['privateIp'] ?? '',
+                        (int) ($instance['cpu'] ?? 0),
+                        (int) ($instance['memory'] ?? 0),
+                        $instance['osName'] ?? '',
+                        $instance['stoppedMode'] ?? ''
                     ]);
                 }
             }
-            $this->db->commit();
-        } catch (Exception $e) {
-            if ($this->db->inTransaction())
-                $this->db->rollBack();
+
+            if (!empty($existingByGroup[$group['groupKey']])) {
+                foreach ($existingByGroup[$group['groupKey']] as $row) {
+                    if (!in_array($row['instance_id'], $remoteInstanceIds, true)) {
+                        $deleteStmt = $this->db->prepare("DELETE FROM accounts WHERE id = ?");
+                        $deleteStmt->execute([$row['id']]);
+                    }
+                }
+            }
         }
+
+        if (!empty($existingRows)) {
+            foreach ($existingRows as $row) {
+                $groupKey = $row['group_key'] ?: $this->buildGroupKey($row['access_key_id'], $row['region_id']);
+                if (!in_array($groupKey, $configuredGroupKeys, true)) {
+                    $deleteStmt = $this->db->prepare("DELETE FROM accounts WHERE id = ?");
+                    $deleteStmt->execute([$row['id']]);
+                }
+            }
+        }
+
+        $this->updateLastInstanceSyncTime(time());
+        $this->load();
     }
 
-    public function updateAccountStatus($id, $traffic, $status, $updatedAt)
+    private function saveNotificationSettings($notification)
     {
-        $stmt = $this->db->prepare("UPDATE accounts SET traffic_used = ?, instance_status = ?, updated_at = ? WHERE id = ?");
-        return $stmt->execute([$traffic, $status, $updatedAt, $id]);
+        $this->saveSetting('notify_email_enabled', !empty($notification['email_enabled']) ? '1' : '0');
+        $this->saveSetting('notify_email', $notification['email'] ?? '');
+        $this->saveSetting('notify_host', $notification['host'] ?? '');
+        $this->saveSetting('notify_port', $notification['port'] ?? 465);
+        $this->saveSetting('notify_username', $notification['username'] ?? '');
+
+        if (isset($notification['password']) && $notification['password'] !== '********') {
+            $this->saveSetting('notify_password', $notification['password'] ?? '');
+        }
+
+        $this->saveSetting('notify_secure', $notification['secure'] ?? 'ssl');
+
+        $telegram = $notification['telegram'] ?? [];
+        $this->saveSetting('notify_tg_enabled', !empty($telegram['enabled']) ? '1' : '0');
+
+        if (isset($telegram['token']) && $telegram['token'] !== '********') {
+            $this->saveSetting('notify_tg_token', $telegram['token'] ?? '');
+        }
+
+        $this->saveSetting('notify_tg_chat_id', $telegram['chat_id'] ?? '');
+        $this->saveSetting('notify_tg_proxy_type', $telegram['proxy_type'] ?? 'none');
+        $this->saveSetting('notify_tg_proxy_url', $telegram['proxy_url'] ?? '');
+        $this->saveSetting('notify_tg_proxy_ip', $telegram['proxy_ip'] ?? '');
+        $this->saveSetting('notify_tg_proxy_port', $telegram['proxy_port'] ?? '');
+        $this->saveSetting('notify_tg_proxy_user', $telegram['proxy_user'] ?? '');
+
+        if (isset($telegram['proxy_pass']) && $telegram['proxy_pass'] !== '********') {
+            $this->saveSetting('notify_tg_proxy_pass', $telegram['proxy_pass'] ?? '');
+        }
+
+        $webhook = $notification['webhook'] ?? [];
+        $this->saveSetting('notify_wh_enabled', !empty($webhook['enabled']) ? '1' : '0');
+        $this->saveSetting('notify_wh_url', $webhook['url'] ?? '');
+        $this->saveSetting('notify_wh_method', $webhook['method'] ?? 'GET');
+        $this->saveSetting('notify_wh_request_type', $webhook['request_type'] ?? 'JSON');
+        $this->saveSetting('notify_wh_headers', $webhook['headers'] ?? '');
+        $this->saveSetting('notify_wh_body', $webhook['body'] ?? '');
+    }
+
+    private function saveDdnsSettings($ddns)
+    {
+        $cloudflare = is_array($ddns['cloudflare'] ?? null) ? $ddns['cloudflare'] : [];
+        $this->saveSetting('ddns_enabled', !empty($ddns['enabled']) ? '1' : '0');
+        $this->saveSetting('ddns_provider', $ddns['provider'] ?? 'cloudflare');
+        $this->saveSetting('ddns_domain', trim((string) ($ddns['domain'] ?? '')));
+        $this->saveSetting('ddns_cf_zone_id', trim((string) ($cloudflare['zone_id'] ?? '')));
+
+        $token = $cloudflare['token'] ?? '';
+        if ($token !== '********') {
+            $this->saveSetting('ddns_cf_token', trim((string) $token));
+        }
+
+        $this->saveSetting('ddns_cf_proxied', !empty($cloudflare['proxied']) ? '1' : '0');
+    }
+
+    private function normalizeAccountGroups(array $groups, $allowEmpty = false)
+    {
+        $normalized = [];
+
+        foreach ($groups as $group) {
+            $accessKeyId = trim((string) ($group['AccessKeyId'] ?? ''));
+            $accessKeySecret = trim((string) ($group['AccessKeySecret'] ?? ''));
+            $regionId = trim((string) ($group['regionId'] ?? ''));
+
+            $isPlaceholder = $accessKeySecret === '********';
+            if ($isPlaceholder) {
+                $accessKeySecret = $this->resolveExistingSecret($accessKeyId, $regionId);
+            }
+
+            if (!$allowEmpty && $accessKeyId === '' && $accessKeySecret === '' && $regionId === '') {
+                continue;
+            }
+
+            if ($accessKeyId === '' || $accessKeySecret === '' || $regionId === '') {
+                if ($isPlaceholder && !$allowEmpty) {
+                    throw new Exception('账号配置缺少 AccessKeySecret');
+                }
+                if ($allowEmpty) {
+                    continue;
+                }
+                throw new Exception('账号配置缺少必填项');
+            }
+
+            $groupKey = trim((string) ($group['groupKey'] ?? ''));
+            if ($groupKey === '') {
+                $groupKey = $this->buildGroupKey($accessKeyId, $regionId);
+            }
+
+            $normalized[] = [
+                'groupKey' => $groupKey,
+                'AccessKeyId' => $accessKeyId,
+                'AccessKeySecret' => $accessKeySecret,
+                'regionId' => $regionId,
+                'siteType' => $group['siteType'] ?? $this->inferSiteType($regionId),
+                'maxTraffic' => (float) ($group['maxTraffic'] ?? 200),
+                'remark' => trim((string) ($group['remark'] ?? ''))
+            ];
+        }
+
+        return array_values($normalized);
+    }
+
+    private function resolveExistingSecret($accessKeyId, $regionId)
+    {
+        $accessKeyId = trim((string) $accessKeyId);
+        $regionId = trim((string) $regionId);
+
+        foreach ($this->accountsCache as $row) {
+            if ($row['access_key_id'] === $accessKeyId && $row['region_id'] === $regionId) {
+                return $row['access_key_secret'];
+            }
+        }
+
+        $groupKey = $this->buildGroupKey($accessKeyId, $regionId);
+        foreach ($this->accountsCache as $row) {
+            if (($row['group_key'] === $groupKey) && !empty($row['access_key_secret'])) {
+                return $row['access_key_secret'];
+            }
+        }
+
+        $rawGroups = json_decode((string) ($this->configCache['account_groups'] ?? ''), true);
+        if (is_array($rawGroups)) {
+            foreach ($rawGroups as $group) {
+                $savedAccessKeyId = trim((string) ($group['AccessKeyId'] ?? ''));
+                $savedRegionId = trim((string) ($group['regionId'] ?? ''));
+                $savedSecret = trim((string) ($group['AccessKeySecret'] ?? ''));
+
+                if (
+                    $savedAccessKeyId === $accessKeyId
+                    && $savedRegionId === $regionId
+                    && $savedSecret !== ''
+                    && $savedSecret !== '********'
+                ) {
+                    return $savedSecret;
+                }
+            }
+        }
+
+        return '';
+    }
+
+    private function deriveAccountGroupsFromAccounts()
+    {
+        $groups = [];
+
+        foreach ($this->accountsCache as $row) {
+            $accessKeyId = trim((string) ($row['access_key_id'] ?? ''));
+            $regionId = trim((string) ($row['region_id'] ?? ''));
+            if ($accessKeyId === '' || $regionId === '') {
+                continue;
+            }
+
+            $groupKey = $row['group_key'] ?: $this->buildGroupKey($accessKeyId, $regionId);
+            if (isset($groups[$groupKey])) {
+                continue;
+            }
+
+            $groups[$groupKey] = [
+                'groupKey' => $groupKey,
+                'AccessKeyId' => $accessKeyId,
+                'AccessKeySecret' => $row['access_key_secret'] ?? '',
+                'regionId' => $regionId,
+                'siteType' => $row['site_type'] ?? $this->inferSiteType($regionId),
+                'maxTraffic' => (float) ($row['max_traffic'] ?? 200),
+                'remark' => $row['remark'] ?? ''
+            ];
+        }
+
+        return array_values($groups);
+    }
+
+    private function buildGroupKey($accessKeyId, $regionId)
+    {
+        return substr(sha1($accessKeyId . '|' . $regionId), 0, 16);
+    }
+
+    private function inferSiteType($regionId)
+    {
+        if (strpos($regionId, 'cn-') === 0 && $regionId !== 'cn-hongkong') {
+            return 'china';
+        }
+        return 'international';
+    }
+
+    private function resolveRemark($group, $instance, $existingRow = null)
+    {
+        if (!empty($group['remark'])) {
+            return $group['remark'];
+        }
+
+        if ($existingRow) {
+            $existingRemark = trim((string) ($existingRow['remark'] ?? ''));
+            $existingName = trim((string) ($existingRow['instance_name'] ?? ''));
+            if ($existingRemark !== '' && $existingRemark !== $existingName) {
+                return $existingRemark;
+            }
+        }
+
+        if (!empty($instance['instanceName'])) {
+            return $instance['instanceName'];
+        }
+
+        return $instance['instanceId'] ?? '';
+    }
+
+    private function updateGroupBaseSettings($groupKey, $group)
+    {
+        $stmt = $this->db->prepare("
+            UPDATE accounts
+            SET access_key_id = ?,
+                access_key_secret = ?,
+                region_id = ?,
+                max_traffic = ?,
+                schedule_enabled = ?,
+                start_time = ?,
+                stop_time = ?,
+                site_type = ?,
+                group_key = ?
+            WHERE group_key = ?
+        ");
+
+        $stmt->execute([
+            $group['AccessKeyId'],
+            $this->encryptValue($group['AccessKeySecret']),
+            $group['regionId'],
+            $group['maxTraffic'],
+            0,
+            '',
+            '',
+            $group['siteType'],
+            $groupKey,
+            $groupKey
+        ]);
+    }
+
+    public function deleteAccountById($id)
+    {
+        $stmt = $this->db->prepare("DELETE FROM accounts WHERE id = ?");
+        $stmt->execute([$id]);
+        $this->load();
+    }
+
+    public function markAccountAsDeleted($id)
+    {
+        $stmt = $this->db->prepare("UPDATE accounts SET is_deleted = 1 WHERE id = ?");
+        $stmt->execute([$id]);
+        $this->load();
+    }
+
+    public function getPendingReleaseAccounts()
+    {
+        $stmt = $this->db->query("SELECT * FROM accounts WHERE is_deleted = 1");
+        $accounts = $stmt->fetchAll();
+        foreach ($accounts as &$row) {
+            if (!empty($row['access_key_secret']) && $this->isEncryptedValue($row['access_key_secret'])) {
+                $row['access_key_secret'] = $this->decryptValue($row['access_key_secret']);
+            }
+        }
+        return $accounts;
+    }
+
+    public function physicallyDeleteAccount($id)
+    {
+        // 软删除机制：标记为 2 (彻底销毁完毕状态)。
+        // 目的：阻断刚执行完释放后，阿里云 API 缓存尚未更新，导致同步器误认为这是"新冒出来的机器"从而执行重新插入。
+        // 此尸体记录会在下一次或下下一次定时同步时，由于彻底在阿里云失联，被同步器的 deleteStmt 收尸清理。
+        $stmt = $this->db->prepare("UPDATE accounts SET is_deleted = 2, instance_status = 'Released' WHERE id = ?");
+        $stmt->execute([$id]);
+        // 不强制更新 cache，后台无声息处理。
+    }
+
+    public function updateAccountStatus($id, $traffic, $status, $updatedAt, $metadata = [])
+    {
+        $sql = "UPDATE accounts SET traffic_used = ?, traffic_billing_month = ?, instance_status = ?, updated_at = ?";
+        $params = [$traffic, date('Y-m'), $status, $updatedAt];
+
+        if (isset($metadata['health_status'])) {
+            $sql .= ", health_status = ?";
+            $params[] = $metadata['health_status'];
+        }
+        if (isset($metadata['stopped_mode'])) {
+            $sql .= ", stopped_mode = ?";
+            $params[] = $metadata['stopped_mode'];
+        }
+
+        $sql .= " WHERE id = ?";
+        $params[] = $id;
+
+        $stmt = $this->db->prepare($sql);
+        return $stmt->execute($params);
     }
 
     public function updateLastKeepAlive($id, $time)
@@ -249,4 +768,17 @@ class ConfigManager
         $stmt = $this->db->prepare("UPDATE accounts SET last_keep_alive_at = ? WHERE id = ?");
         return $stmt->execute([$time, $id]);
     }
-}
\ No newline at end of file
+
+    public function updateAutoStartBlocked($id, $blocked)
+    {
+        $stmt = $this->db->prepare("UPDATE accounts SET auto_start_blocked = ? WHERE id = ?");
+        return $stmt->execute([$blocked ? 1 : 0, $id]);
+    }
+
+    public function blockCurrentlyStoppedInstances()
+    {
+        $stmt = $this->db->prepare("UPDATE accounts SET auto_start_blocked = 1 WHERE instance_status = 'Stopped'");
+        $stmt->execute();
+        $this->load();
+    }
+}
diff --git a/Database.php b/Database.php
index 72b0148..a6d8a84 100644
--- a/Database.php
+++ b/Database.php
@@ -92,9 +92,17 @@ class Database
             traffic_used REAL DEFAULT 0,
             instance_status TEXT DEFAULT 'Unknown',
             updated_at INTEGER DEFAULT 0,
-            last_keep_alive_at INTEGER DEFAULT 0
+            last_keep_alive_at INTEGER DEFAULT 0,
+            is_deleted INTEGER DEFAULT 0
         )");
 
+        // 向下兼容：自动补充新增字段
+        try {
+            $this->pdo->exec("ALTER TABLE accounts ADD COLUMN is_deleted INTEGER DEFAULT 0");
+        } catch (PDOException $e) {
+            // 忽略字段已存在错误
+        }
+
         $this->pdo->exec("CREATE TABLE IF NOT EXISTS logs (id INTEGER PRIMARY KEY AUTOINCREMENT, type TEXT, message TEXT, created_at INTEGER)");
 
         $this->pdo->exec("CREATE TABLE IF NOT EXISTS login_attempts (
@@ -132,12 +140,66 @@ class Database
             UNIQUE(account_id, cache_type, billing_cycle)
         )");
 
+        // ECS 公网出口流量累计账本。CDT/账单接口有延迟且偏账号聚合，这里按实例和自然月保存云监控分钟采样的累计结果。
+        $this->pdo->exec("CREATE TABLE IF NOT EXISTS instance_traffic_usage (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            account_id INTEGER NOT NULL,
+            instance_id TEXT NOT NULL,
+            billing_month TEXT NOT NULL,
+            traffic_bytes REAL DEFAULT 0,
+            last_sample_ms INTEGER DEFAULT 0,
+            updated_at INTEGER NOT NULL,
+            UNIQUE(account_id, instance_id, billing_month)
+        )");
+
+        $this->pdo->exec("CREATE TABLE IF NOT EXISTS ecs_create_tasks (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            task_id TEXT UNIQUE NOT NULL,
+            preview_id TEXT DEFAULT '',
+            account_group_key TEXT NOT NULL,
+            region_id TEXT NOT NULL,
+            zone_id TEXT DEFAULT '',
+            instance_type TEXT NOT NULL,
+            image_id TEXT DEFAULT '',
+            os_label TEXT DEFAULT '',
+            instance_name TEXT DEFAULT '',
+            vpc_id TEXT DEFAULT '',
+            vswitch_id TEXT DEFAULT '',
+            security_group_id TEXT DEFAULT '',
+            internet_max_bandwidth_out INTEGER DEFAULT 0,
+            system_disk_category TEXT DEFAULT '',
+            system_disk_size INTEGER DEFAULT 0,
+            instance_id TEXT DEFAULT '',
+            public_ip TEXT DEFAULT '',
+            login_user TEXT DEFAULT '',
+            login_password TEXT DEFAULT '',
+            status TEXT NOT NULL,
+            step TEXT DEFAULT '',
+            error_message TEXT DEFAULT '',
+            payload TEXT DEFAULT '',
+            created_at INTEGER NOT NULL,
+            updated_at INTEGER NOT NULL
+        )");
+
         $this->ensureColumn('accounts', 'traffic_used', 'REAL DEFAULT 0');
+        $this->ensureColumn('accounts', 'traffic_billing_month', "TEXT DEFAULT ''");
         $this->ensureColumn('accounts', 'instance_status', "TEXT DEFAULT 'Unknown'");
         $this->ensureColumn('accounts', 'updated_at', 'INTEGER DEFAULT 0');
         $this->ensureColumn('accounts', 'last_keep_alive_at', 'INTEGER DEFAULT 0');
+        $this->ensureColumn('accounts', 'auto_start_blocked', 'INTEGER DEFAULT 0');
         $this->ensureColumn('accounts', 'remark', "TEXT DEFAULT ''");
-        $this->ensureColumn('accounts', 'site_type', "TEXT DEFAULT 'china'");
+        $this->ensureColumn('accounts', 'site_type', "TEXT DEFAULT 'international'");
+        $this->ensureColumn('accounts', 'group_key', "TEXT DEFAULT ''");
+        $this->ensureColumn('accounts', 'instance_name', "TEXT DEFAULT ''");
+        $this->ensureColumn('accounts', 'instance_type', "TEXT DEFAULT ''");
+        $this->ensureColumn('accounts', 'internet_max_bandwidth_out', 'INTEGER DEFAULT 0');
+        $this->ensureColumn('accounts', 'public_ip', "TEXT DEFAULT ''");
+        $this->ensureColumn('accounts', 'private_ip', "TEXT DEFAULT ''");
+        $this->ensureColumn('accounts', 'cpu', "INTEGER DEFAULT 0");
+        $this->ensureColumn('accounts', 'memory', "INTEGER DEFAULT 0");
+        $this->ensureColumn('accounts', 'os_name', "TEXT DEFAULT ''");
+        $this->ensureColumn('accounts', 'stopped_mode', "TEXT DEFAULT ''");
+        $this->ensureColumn('accounts', 'health_status', "TEXT DEFAULT 'Unknown'");
 
         $this->migrateStatsToAccountId();
     }
@@ -383,6 +445,41 @@ class Database
 
         $dayLimit = time() - (60 * 86400);
         $this->pdo->exec("DELETE FROM traffic_daily WHERE recorded_at < $dayLimit");
+
+        $monthLimit = date('Y-m', strtotime('-4 months'));
+        $stmt = $this->pdo->prepare("DELETE FROM instance_traffic_usage WHERE billing_month < ?");
+        $stmt->execute([$monthLimit]);
+    }
+
+    public function getInstanceTrafficUsage($accountId, $instanceId, $billingMonth)
+    {
+        $stmt = $this->pdo->prepare("SELECT * FROM instance_traffic_usage WHERE account_id = ? AND instance_id = ? AND billing_month = ? LIMIT 1");
+        $stmt->execute([$accountId, $instanceId, $billingMonth]);
+        $row = $stmt->fetch(PDO::FETCH_ASSOC);
+
+        return $row ?: null;
+    }
+
+    public function upsertInstanceTrafficUsage($accountId, $instanceId, $billingMonth, $trafficBytes, $lastSampleMs)
+    {
+        $stmt = $this->pdo->prepare("
+            INSERT INTO instance_traffic_usage (account_id, instance_id, billing_month, traffic_bytes, last_sample_ms, updated_at)
+            VALUES (?, ?, ?, ?, ?, ?)
+            ON CONFLICT(account_id, instance_id, billing_month)
+            DO UPDATE SET
+                traffic_bytes = excluded.traffic_bytes,
+                last_sample_ms = excluded.last_sample_ms,
+                updated_at = excluded.updated_at
+        ");
+
+        return $stmt->execute([
+            $accountId,
+            $instanceId,
+            $billingMonth,
+            max(0, (float) $trafficBytes),
+            max(0, (int) $lastSampleMs),
+            time()
+        ]);
     }
 
     // --- 账单缓存相关方法 ---
@@ -421,4 +518,68 @@ class Database
         $limit = time() - (90 * 86400);
         $this->pdo->exec("DELETE FROM billing_cache WHERE updated_at < $limit");
     }
-}
\ No newline at end of file
+
+    public function createEcsCreateTask($taskId, $previewId, $groupKey, $regionId, $instanceType, $payload)
+    {
+        $stmt = $this->pdo->prepare("
+            INSERT INTO ecs_create_tasks (
+                task_id, preview_id, account_group_key, region_id, instance_type, status, step, payload, created_at, updated_at
+            ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        ");
+
+        $now = time();
+        $stmt->execute([
+            $taskId,
+            $previewId,
+            $groupKey,
+            $regionId,
+            $instanceType,
+            'running',
+            '初始化创建任务',
+            json_encode($payload, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES),
+            $now,
+            $now
+        ]);
+    }
+
+    public function updateEcsCreateTask($taskId, array $fields)
+    {
+        if (empty($fields)) {
+            return false;
+        }
+
+        $fields['updated_at'] = time();
+        $allowed = [
+            'zone_id', 'image_id', 'os_label', 'instance_name', 'vpc_id', 'vswitch_id',
+            'security_group_id', 'internet_max_bandwidth_out', 'system_disk_category',
+            'system_disk_size', 'instance_id', 'public_ip', 'login_user', 'login_password',
+            'status', 'step', 'error_message', 'payload', 'updated_at'
+        ];
+
+        $sets = [];
+        $values = [];
+        foreach ($fields as $key => $value) {
+            if (!in_array($key, $allowed, true)) {
+                continue;
+            }
+            $sets[] = "$key = ?";
+            $values[] = is_array($value) ? json_encode($value, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES) : $value;
+        }
+
+        if (empty($sets)) {
+            return false;
+        }
+
+        $values[] = $taskId;
+        $stmt = $this->pdo->prepare("UPDATE ecs_create_tasks SET " . implode(', ', $sets) . " WHERE task_id = ?");
+        return $stmt->execute($values);
+    }
+
+    public function getEcsCreateTask($taskId)
+    {
+        $stmt = $this->pdo->prepare("SELECT * FROM ecs_create_tasks WHERE task_id = ? LIMIT 1");
+        $stmt->execute([$taskId]);
+        $row = $stmt->fetch(PDO::FETCH_ASSOC);
+        return $row ?: null;
+    }
+}
diff --git a/DdnsService.php b/DdnsService.php
new file mode 100644
index 0000000..09d77e6
--- /dev/null
+++ b/DdnsService.php
@@ -0,0 +1,252 @@
+<?php
+
+class DdnsService
+{
+    private $config;
+
+    public function __construct(array $config)
+    {
+        $this->config = $config;
+    }
+
+    public function isEnabled()
+    {
+        return ($this->config['ddns_enabled'] ?? '0') === '1'
+            && ($this->config['ddns_provider'] ?? 'cloudflare') === 'cloudflare'
+            && !empty($this->config['ddns_cf_token'])
+            && !empty($this->config['ddns_domain']);
+    }
+
+    public function buildRecordName(array $account, $sameGroupInstanceCount = 1)
+    {
+        $domain = $this->normalizeDomain($this->config['ddns_domain'] ?? '');
+        if ($domain === '') {
+            throw new Exception('请先填写 DDNS 根域名');
+        }
+
+        $accountSlug = $this->slug($account['account_remark'] ?? $account['remark'] ?? '');
+        $instanceSlug = $this->slug($account['instance_name'] ?? '');
+        $instanceId = trim((string) ($account['instance_id'] ?? ''));
+        $shortId = $this->slug($instanceId !== '' ? preg_replace('/^i-/', '', $instanceId) : '');
+
+        if ($accountSlug === '') {
+            $accountSlug = $instanceSlug ?: $shortId;
+        }
+        if ($accountSlug === '') {
+            throw new Exception('DDNS 记录名生成失败，请检查账号备注或实例名称');
+        }
+
+        $subdomain = $accountSlug;
+        if ((int) $sameGroupInstanceCount > 1) {
+            $suffix = $instanceSlug ?: $shortId;
+            if ($suffix !== '' && $suffix !== $accountSlug) {
+                $subdomain .= '-' . $suffix;
+            }
+        }
+
+        $subdomain = trim($subdomain, '-');
+        return $subdomain . '.' . $domain;
+    }
+
+    public function syncARecord($recordName, $ip)
+    {
+        if (!$this->isEnabled()) {
+            return ['success' => true, 'skipped' => true, 'message' => 'DDNS 未启用'];
+        }
+
+        $recordName = strtolower(trim((string) $recordName));
+        $ip = trim((string) $ip);
+        if (!filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
+            return ['success' => false, 'message' => '公网 IP 为空或不是公网 IPv4'];
+        }
+
+        $existing = $this->findRecord($recordName);
+        $payload = [
+            'type' => 'A',
+            'name' => $recordName,
+            'content' => $ip,
+            'ttl' => 1,
+            'proxied' => ($this->config['ddns_cf_proxied'] ?? '0') === '1',
+            'comment' => 'Managed by CDT Monitor'
+        ];
+
+        if ($existing) {
+            $response = $this->request('PUT', '/dns_records/' . $existing['id'], $payload);
+        } else {
+            $response = $this->request('POST', '/dns_records', $payload);
+        }
+
+        if (empty($response['success'])) {
+            return ['success' => false, 'message' => $this->formatErrors($response)];
+        }
+
+        return [
+            'success' => true,
+            'record' => $recordName,
+            'ip' => $ip,
+            'action' => $existing ? 'updated' : 'created'
+        ];
+    }
+
+    public function deleteARecord($recordName)
+    {
+        if (!$this->isEnabled()) {
+            return ['success' => true, 'skipped' => true, 'message' => 'DDNS 未启用'];
+        }
+
+        $recordName = strtolower(trim((string) $recordName));
+        if ($recordName === '') {
+            return ['success' => false, 'message' => 'DDNS 记录名为空'];
+        }
+
+        $existing = $this->findRecord($recordName);
+        if (!$existing) {
+            return ['success' => true, 'skipped' => true, 'record' => $recordName, 'message' => '记录不存在'];
+        }
+
+        $response = $this->request('DELETE', '/dns_records/' . $existing['id']);
+        if (empty($response['success'])) {
+            return ['success' => false, 'message' => $this->formatErrors($response)];
+        }
+
+        return [
+            'success' => true,
+            'record' => $recordName,
+            'action' => 'deleted'
+        ];
+    }
+
+    private function findRecord($recordName)
+    {
+        $response = $this->request('GET', '/dns_records?type=A&name=' . rawurlencode($recordName));
+        if (empty($response['success'])) {
+            throw new Exception('Cloudflare 查询记录失败: ' . $this->formatErrors($response));
+        }
+
+        $records = $response['result'] ?? [];
+        return $records[0] ?? null;
+    }
+
+    private function request($method, $path, array $payload = null)
+    {
+        $zoneId = $this->resolveZoneId();
+        $token = trim((string) ($this->config['ddns_cf_token'] ?? ''));
+        $url = 'https://api.cloudflare.com/client/v4/zones/' . rawurlencode($zoneId) . $path;
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 15);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            'Authorization: Bearer ' . $token,
+            'Content-Type: application/json'
+        ]);
+
+        if ($payload !== null) {
+            curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE));
+        }
+
+        $body = curl_exec($ch);
+        $error = curl_error($ch);
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        curl_close($ch);
+
+        if ($error) {
+            throw new Exception('Cloudflare 网络请求失败: ' . $error);
+        }
+
+        $decoded = json_decode((string) $body, true);
+        if (!is_array($decoded)) {
+            throw new Exception("Cloudflare 响应解析失败，状态码 {$httpCode}");
+        }
+
+        return $decoded;
+    }
+
+    private function resolveZoneId()
+    {
+        $zoneId = trim((string) ($this->config['ddns_cf_zone_id'] ?? ''));
+        if ($zoneId !== '') {
+            return $zoneId;
+        }
+
+        $domain = $this->normalizeDomain($this->config['ddns_domain'] ?? '');
+        if ($domain === '') {
+            throw new Exception('请先填写 DDNS 根域名');
+        }
+
+        $token = trim((string) ($this->config['ddns_cf_token'] ?? ''));
+        $url = 'https://api.cloudflare.com/client/v4/zones?name=' . rawurlencode($domain) . '&status=active';
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 15);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            'Authorization: Bearer ' . $token,
+            'Content-Type: application/json'
+        ]);
+        $body = curl_exec($ch);
+        $error = curl_error($ch);
+        curl_close($ch);
+
+        if ($error) {
+            throw new Exception('Cloudflare Zone 查询失败: ' . $error);
+        }
+
+        $decoded = json_decode((string) $body, true);
+        if (empty($decoded['success'])) {
+            throw new Exception('Cloudflare Zone 查询失败: ' . $this->formatErrors(is_array($decoded) ? $decoded : []));
+        }
+
+        $zone = $decoded['result'][0] ?? null;
+        if (empty($zone['id'])) {
+            throw new Exception("Cloudflare 未找到域名 {$domain}，请确认 Token 有该域名的 DNS 编辑权限，或手动填写 Zone ID");
+        }
+
+        return $zone['id'];
+    }
+
+    private function formatErrors(array $response)
+    {
+        $errors = $response['errors'] ?? [];
+        if (empty($errors)) {
+            return '未知错误';
+        }
+
+        $messages = [];
+        foreach ($errors as $error) {
+            $messages[] = $error['message'] ?? json_encode($error, JSON_UNESCAPED_UNICODE);
+        }
+        return implode('；', $messages);
+    }
+
+    private function slug($value)
+    {
+        $original = trim((string) $value);
+        $value = strtolower($original);
+        if ($value === '') {
+            return '';
+        }
+
+        if (function_exists('iconv')) {
+            $converted = @iconv('UTF-8', 'ASCII//TRANSLIT//IGNORE', $value);
+            if ($converted !== false) {
+                $value = $converted;
+            }
+        }
+
+        $value = preg_replace('/[^a-z0-9]+/', '-', $value);
+        $value = trim($value, '-');
+        if ($value === '') {
+            $value = substr(sha1($original), 0, 8);
+        }
+        return substr($value, 0, 48);
+    }
+
+    private function normalizeDomain($domain)
+    {
+        $domain = strtolower(trim((string) $domain));
+        $domain = preg_replace('#^https?://#', '', $domain);
+        $domain = trim(explode('/', $domain)[0] ?? '', '.');
+        return $domain;
+    }
+}
diff --git a/Dockerfile b/Dockerfile
index 407e1da..a6ccb6c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,7 +8,9 @@ WORKDIR /app
 COPY composer.json composer.lock ./
 
 # 安装依赖 (排除开发依赖，优化自动加载)
-RUN composer install --no-dev --optimize-autoloader --ignore-platform-reqs --no-interaction --no-scripts
+# 注意：SDK Sign::uuid() 的 microtime() 返回带空格的字符串导致签名失败，需修复
+RUN composer install --no-dev --optimize-autoloader --ignore-platform-reqs --no-interaction --no-scripts \
+    && sed -i 's/return md5(\$salt . uniqid(md5(microtime(true)), true)) . microtime();/return md5(\$salt . uniqid(md5(microtime(true)), true)) . str_replace(" ", "", microtime());/' /app/vendor/alibabacloud/client/src/Support/Sign.php
 
 # 复制其余项目文件
 COPY . .
@@ -20,7 +22,7 @@ COPY . .
 FROM php:8.2-fpm-alpine
 
 # 设置镜像元数据
-LABEL maintainer="CDT-Monitor-Docker"
+LABEL maintainer="ECS-Controller-Docker"
 
 # 设置环境变量
 ENV TZ=Asia/Shanghai
diff --git a/NotificationService.php b/NotificationService.php
index c07003a..31bb8f8 100644
--- a/NotificationService.php
+++ b/NotificationService.php
@@ -22,22 +22,22 @@ class NotificationService
 
         $title = "定时任务: " . $actionType;
         $maskedKey = substr($account['access_key_id'], 0, 7) . '***';
-        $traffic = isset($account['traffic_used']) ? round($account['traffic_used'], 2) : 'N/A';
+        $traffic = isset($account['traffic_used']) ? $this->formatTraffic((float) $account['traffic_used']) : '暂无';
         $threshold = $this->config['traffic_threshold'] ?? 95;
 
         $details = [
-            ['label' => '账号 ID', 'value' => $maskedKey],
+            ['label' => '账号', 'value' => $maskedKey],
             ['label' => '执行动作', 'value' => $actionType, 'highlight' => true],
             ['label' => '执行时间', 'value' => date('Y-m-d H:i:s')],
-            ['label' => '当前流量', 'value' => $traffic . ' GB'],
+            ['label' => '当前流量', 'value' => $traffic],
             ['label' => '设定阈值', 'value' => $threshold . '%'],
             ['label' => '详情说明', 'value' => $description ?: '根据预设时间表自动执行。']
         ];
 
-        $textMsg = "【CDT Monitor】{$title}\n" .
-            "账号 ID: {$maskedKey}\n" .
+        $textMsg = "【ECS 服务器管家】{$title}\n" .
+            "账号: {$maskedKey}\n" .
             "执行动作: {$actionType}\n" .
-            "当前流量: {$traffic} GB\n" .
+            "当前流量: {$traffic}\n" .
             "设定阈值: {$threshold}%\n" .
             "执行时间: " . date('Y-m-d H:i:s') . "\n" .
             "详情说明: " . ($description ?: '根据预设时间表自动执行。');
@@ -52,17 +52,18 @@ class NotificationService
     public function sendTrafficWarning($accessKeyId, $traffic, $percentage, $statusText, $threshold)
     {
         $title = "流量告警 - " . $statusText;
+        $trafficText = $this->formatTraffic((float) $traffic);
         $details = [
-            ['label' => '账号 ID', 'value' => substr($accessKeyId, 0, 7) . '***'],
-            ['label' => '当前流量', 'value' => $traffic . ' GB'],
+            ['label' => '账号', 'value' => substr($accessKeyId, 0, 7) . '***'],
+            ['label' => '当前流量', 'value' => $trafficText],
             ['label' => '使用率', 'value' => $percentage . '%', 'highlight' => true],
             ['label' => '设定阈值', 'value' => $threshold . '%'],
             ['label' => '当前状态', 'value' => $statusText]
         ];
 
-        $textMsg = "【CDT Monitor】{$title}\n" .
-            "账号 ID: " . substr($accessKeyId, 0, 7) . '***' . "\n" .
-            "当前流量: {$traffic} GB\n" .
+        $textMsg = "【ECS 服务器管家】{$title}\n" .
+            "账号: " . substr($accessKeyId, 0, 7) . '***' . "\n" .
+            "当前流量: {$trafficText}\n" .
             "使用率: {$percentage}%\n" .
             "设定阈值: {$threshold}%\n" .
             "当前状态: {$statusText}";
@@ -70,30 +71,144 @@ class NotificationService
         return $this->dispatchNotifications($title, "检测到流量异常或达到阈值", $details, 'warning', $textMsg, $accessKeyId);
     }
 
+    public function notifyEcsCreated($accountLabel, array $result, array $preview = [])
+    {
+        $title = 'ECS 创建并启动成功';
+        $instanceId = $result['instanceId'] ?? '';
+        $publicIp = $result['publicIp'] ?? '';
+        $loginUser = $result['loginUser'] ?? '';
+        $loginPassword = $result['loginPassword'] ?? '';
+        $regionId = $preview['regionId'] ?? '';
+        $instanceType = $preview['instanceType'] ?? ($result['instanceType'] ?? '');
+        $instanceName = $preview['instanceName'] ?? ($result['instanceName'] ?? '');
+
+        $details = [
+            ['label' => '账号', 'value' => $accountLabel],
+            ['label' => '实例名称', 'value' => $instanceName ?: '-'],
+            ['label' => '实例编号', 'value' => $instanceId ?: '-', 'highlight' => true],
+            ['label' => '区域', 'value' => $regionId ?: '-'],
+            ['label' => '实例规格', 'value' => $instanceType ?: '-'],
+            ['label' => '公网地址', 'value' => $publicIp ?: '等待阿里云分配'],
+            ['label' => '登录用户', 'value' => $loginUser ?: '-'],
+            ['label' => '初始密码', 'value' => $loginPassword ?: '-', 'highlight' => true],
+            ['label' => '安全提醒', 'value' => '初始密码仅在本次创建完成通知和控制台弹窗展示，请立即保存。']
+        ];
+
+        $textMsg = "【ECS 服务器管家】ECS 创建并启动成功\n" .
+            "账号: {$accountLabel}\n" .
+            "实例名称: " . ($instanceName ?: '-') . "\n" .
+            "实例编号: " . ($instanceId ?: '-') . "\n" .
+            "区域: " . ($regionId ?: '-') . "\n" .
+            "规格: " . ($instanceType ?: '-') . "\n" .
+            "公网地址: " . ($publicIp ?: '等待阿里云分配') . "\n" .
+            "登录用户: " . ($loginUser ?: '-') . "\n" .
+            "初始密码: " . ($loginPassword ?: '-') . "\n" .
+            "安全提醒: 初始密码仅在本次创建完成通知和控制台弹窗展示，请立即保存。";
+
+        return $this->dispatchNotifications($title, '实例已创建并启动，请立即保存一次性登录密码。', $details, 'success', $textMsg, $accountLabel);
+    }
+
+    public function notifyInstanceStatusChanged($accountLabel, array $account, $fromStatus, $toStatus, $reason = '')
+    {
+        $fromLabel = $this->statusLabel($fromStatus);
+        $toLabel = $this->statusLabel($toStatus);
+        $instanceName = $account['instance_name'] ?? ($account['remark'] ?? '');
+        $instanceId = $account['instance_id'] ?? '';
+        $region = $account['region_id'] ?? '';
+        $title = $toStatus === 'Running' ? '实例已启动' : ($toStatus === 'Stopped' ? '实例已停机' : "实例状态变化 - {$toLabel}");
+
+        $details = [
+            ['label' => '账号', 'value' => $accountLabel],
+            ['label' => '实例名称', 'value' => $instanceName ?: '-'],
+            ['label' => '实例编号', 'value' => $instanceId ?: '-', 'highlight' => true],
+            ['label' => '区域', 'value' => $region ?: '-'],
+            ['label' => '原状态', 'value' => $fromLabel],
+            ['label' => '新状态', 'value' => $toLabel, 'highlight' => true],
+            ['label' => '变化时间', 'value' => date('Y-m-d H:i:s')],
+            ['label' => '说明', 'value' => $reason ?: '系统检测到实例运行状态发生变化。']
+        ];
+
+        $textMsg = "【ECS 服务器管家】{$title}\n" .
+            "账号: {$accountLabel}\n" .
+            "实例名称: " . ($instanceName ?: '-') . "\n" .
+            "实例编号: " . ($instanceId ?: '-') . "\n" .
+            "区域: " . ($region ?: '-') . "\n" .
+            "原状态: {$fromLabel}\n" .
+            "新状态: {$toLabel}\n" .
+            "变化时间: " . date('Y-m-d H:i:s') . "\n" .
+            "说明: " . ($reason ?: '系统检测到实例运行状态发生变化。');
+
+        return $this->dispatchNotifications($title, '实例已进入最终状态', $details, 'success', $textMsg, $accountLabel);
+    }
+
+    public function notifyInstanceReleased($accountLabel, array $account, $reason = '')
+    {
+        $instanceName = $account['instance_name'] ?? ($account['remark'] ?? '');
+        $instanceId = $account['instance_id'] ?? '';
+        $region = $account['region_id'] ?? '';
+        $publicIp = $account['public_ip'] ?? '';
+        $title = '实例已释放';
+
+        $details = [
+            ['label' => '账号', 'value' => $accountLabel],
+            ['label' => '实例名称', 'value' => $instanceName ?: '-'],
+            ['label' => '实例编号', 'value' => $instanceId ?: '-', 'highlight' => true],
+            ['label' => '区域', 'value' => $region ?: '-'],
+            ['label' => '公网地址', 'value' => $publicIp ?: '-'],
+            ['label' => '释放时间', 'value' => date('Y-m-d H:i:s')],
+            ['label' => '说明', 'value' => $reason ?: '实例已从 ECS 控制台释放，本地记录和 DDNS 解析将同步清理。']
+        ];
+
+        $textMsg = "【ECS 服务器管家】实例已释放\n" .
+            "账号: {$accountLabel}\n" .
+            "实例名称: " . ($instanceName ?: '-') . "\n" .
+            "实例编号: " . ($instanceId ?: '-') . "\n" .
+            "区域: " . ($region ?: '-') . "\n" .
+            "公网地址: " . ($publicIp ?: '-') . "\n" .
+            "释放时间: " . date('Y-m-d H:i:s') . "\n" .
+            "说明: " . ($reason ?: '实例已从 ECS 控制台释放，本地记录和 DDNS 解析将同步清理。');
+
+        return $this->dispatchNotifications($title, '实例已释放，本地记录和 DDNS 解析将同步清理。', $details, 'warning', $textMsg, $accountLabel);
+    }
+
+    private function statusLabel($status)
+    {
+        $map = [
+            'Running' => '已启动',
+            'Starting' => '启动中',
+            'Stopping' => '停机中',
+            'Stopped' => '已停机',
+            'Pending' => '创建中',
+            'Released' => '已释放',
+            'Unknown' => '未知'
+        ];
+        return $map[$status] ?? ($status ?: '未知');
+    }
+
     public function sendTestEmail($to)
     {
         $details = [
-            ['label' => '测试结果', 'value' => '成功 (Success)'],
+            ['label' => '测试结果', 'value' => '成功'],
             ['label' => '发送时间', 'value' => date('Y-m-d H:i:s')],
             ['label' => '服务器', 'value' => $_SERVER['SERVER_NAME'] ?? 'localhost']
         ];
-        $html = $this->renderEmailTemplate("测试邮件", "SMTP 配置验证成功", $details, 'success');
-        return $this->sendMail($to, 'Admin', 'CDT Monitor Test', $html);
+        $html = $this->renderEmailTemplate("测试邮件", "邮件服务配置验证成功", $details, 'success');
+        return $this->sendMail($to, '管理员', 'ECS 服务器管家测试邮件', $html);
     }
 
     public function sendTestTelegram($data)
     {
-        $textMsg = "【CDT Monitor】测试推送\n这是一条来自 Telegram 的测试消息。\n发送时间: " . date('Y-m-d H:i:s');
+        $textMsg = "【ECS 服务器管理】测试推送\n这是一条来自 Telegram 的测试消息。\n发送时间: " . date('Y-m-d H:i:s');
         return $this->sendTelegram($textMsg, $data);
     }
 
     public function sendTestWebhook($data)
     {
-        $textMsg = "【CDT Monitor】测试推送\n这是一条来自 Webhook 的测试消息。\n发送时间: " . date('Y-m-d H:i:s');
-        $summary = "这是一条来自 Webhook 的测试消息。";
+        $textMsg = "【ECS 服务器管家】测试推送\n这是一条来自接口回调的测试消息。\n发送时间: " . date('Y-m-d H:i:s');
+        $summary = "这是一条来自接口回调的测试消息。";
         $threshold = $this->config['traffic_threshold'] ?? 95;
         $details = [
-            ['label' => '当前流量', 'value' => '0 GB'],
+            ['label' => '当前流量', 'value' => '0 MB'],
             ['label' => '设定阈值', 'value' => $threshold . '%']
         ];
         return $this->sendWebhook($textMsg, "测试推送", $summary, $details, 'test_account_id', $data);
@@ -105,15 +220,15 @@ class NotificationService
         $successCount = 0;
         $attemptCount = 0;
 
-        // Email
+        // 邮件通知
         if (($this->config['notify_email_enabled'] ?? '1') === '1' && !empty($this->config['notify_email'])) {
             $attemptCount++;
             $html = $this->renderEmailTemplate($title, $summary, $details, $type);
-            $res = $this->sendMail($this->config['notify_email'], '', "CDT通知 - " . $title, $html);
+            $res = $this->sendMail($this->config['notify_email'], '', "ECS 服务器管家通知 - " . $title, $html);
             if ($res === true)
                 $successCount++;
             else
-                $errors[] = "Email: " . $res;
+                $errors[] = "邮件通知: " . $res;
         }
 
         // Telegram
@@ -123,21 +238,21 @@ class NotificationService
             if ($res === true)
                 $successCount++;
             else
-                $errors[] = "TG: " . $res;
+                $errors[] = "Telegram: " . $res;
         }
 
-        // Webhook
+        // 接口回调
         if (($this->config['notify_wh_enabled'] ?? '0') === '1' && !empty($this->config['notify_wh_url'])) {
             $attemptCount++;
             $res = $this->sendWebhook($textMsg, $title, $summary, $details, $accountId);
             if ($res === true)
                 $successCount++;
             else
-                $errors[] = "WH: " . $res;
+                $errors[] = "接口回调: " . $res;
         }
 
         if ($attemptCount == 0)
-            return true; // No notifications enabled
+            return true;
 
         if ($successCount == 0 && count($errors) > 0) {
             return implode(" | ", $errors);
@@ -175,12 +290,12 @@ class NotificationService
                     <table width='100%' border='0' cellspacing='0' cellpadding='0' style='max-width: 500px; background-color: #FFFFFF; border-radius: 24px; overflow: hidden;'>
                         <tr><td style='height: 6px; background-color: {$color};'></td></tr>
                         <tr><td style='padding: 40px 30px;'>
-                            <div style='color: {$color}; font-size: 12px; font-weight: 700; text-transform: uppercase; margin-bottom: 8px;'>CDT MONITOR</div>
+                            <div style='color: {$color}; font-size: 12px; font-weight: 700; margin-bottom: 8px;'>ECS 服务器管家</div>
                             <h1 style='margin: 0 0 10px 0; font-size: 24px; color: #1C1C1E;'>{$title}</h1>
                             <p style='margin: 0 0 30px 0; font-size: 15px; color: #8E8E93;'>{$summary}</p>
                             <table width='100%' border='0' cellspacing='0' cellpadding='0' style='border-top: 1px solid #F2F2F7;'>{$rows}</table>
                         </td></tr>
-                        <tr><td style='background-color: #FAFAFC; padding: 20px; text-align: center; color: #AEAEB2; font-size: 12px;'>&copy; " . date('Y') . " CDT Monitor</td></tr>
+                        <tr><td style='background-color: #FAFAFC; padding: 20px; text-align: center; color: #AEAEB2; font-size: 12px;'>&copy; " . date('Y') . " ECS 服务器管家</td></tr>
                     </table>
                 </td></tr>
             </table>
@@ -208,7 +323,7 @@ class NotificationService
         $mail->Username = $this->config['notify_username'] ?? '';
         $mail->Password = $this->config['notify_password'] ?? '';
 
-        $mail->SetFrom($mail->Username, '阿里云CDT监控');
+        $mail->SetFrom($mail->Username, 'ECS 服务器管家');
         $mail->Subject = $subject;
         $mail->MsgHTML($body);
         $mail->AddAddress($to, $name);
@@ -228,7 +343,7 @@ class NotificationService
         $proxyType = $overrideConfig['proxy_type'] ?? $this->config['notify_tg_proxy_type'] ?? 'none';
 
         if (empty($token) || empty($chatId))
-            return "Telegram Token 或 Chat ID 为空";
+            return "Telegram 的机器人令牌或接收会话编号为空";
 
         $url = "https://api.telegram.org/bot{$token}/sendMessage";
         if ($proxyType === 'custom' && !empty($overrideConfig['proxy_url'] ?? $this->config['notify_tg_proxy_url'] ?? '')) {
@@ -268,9 +383,9 @@ class NotificationService
         curl_close($ch);
 
         if ($error)
-            return "Curl Error: " . $error;
+            return "网络请求错误: " . $error;
         if ($httpCode != 200)
-            return "HTTP Error {$httpCode}: " . $result;
+            return "接口返回错误 {$httpCode}: " . $result;
         return true;
     }
 
@@ -283,14 +398,14 @@ class NotificationService
         $bodyTemplate = $overrideConfig['body'] ?? $this->config['notify_wh_body'] ?? '';
 
         if (empty($url))
-            return "Webhook URL为空";
+            return "接口回调地址为空";
 
         // Parse variables
-        $traffic = 'N/A';
-        $maxTraffic = 'N/A';
+        $traffic = '暂无';
+        $maxTraffic = '暂无';
         foreach ($details as $d) {
             if ($d['label'] === '当前流量')
-                $traffic = str_replace(' GB', '', $d['value']);
+                $traffic = str_replace([' GB', ' MB', ' GB', ' MB'], '', $d['value']);
             if ($d['label'] === '设定阈值')
                 $maxTraffic = str_replace('%', '', $d['value']);
         }
@@ -322,10 +437,8 @@ class NotificationService
             }
             $finalUrl = strtr($url, $urlReplacePairs);
 
-            // If body template exists, replace vars and append it to URL query string if no URL vars were found. 
-            // Fallback for simple GET without body:
+            // 读取请求没有请求体时，将默认参数拼到地址上。
             if (empty($bodyTemplate) && strpos($finalUrl, '?') === false && strpos($url, '#') === false) {
-                // Default fallback if no variables exist in URL or body
                 $payload = [
                     'title' => $title,
                     'text' => $text,
@@ -335,7 +448,7 @@ class NotificationService
             }
             curl_setopt($ch, CURLOPT_URL, $finalUrl);
         } else {
-            // POST request
+            // 发送请求
             $urlReplacePairs = [];
             foreach ($replacePairs as $k => $v) {
                 $urlReplacePairs[$k] = urlencode((string) $v);
@@ -348,7 +461,7 @@ class NotificationService
                 $bodyReplacePairs = $replacePairs;
                 if ($requestType === 'JSON') {
                     foreach ($bodyReplacePairs as $k => $v) {
-                        // Safe JSON encoding for values injected into string literals
+                        // 数据格式安全转义，避免模板变量破坏 JSON 字符串。
                         $bodyReplacePairs[$k] = substr(json_encode((string) $v, JSON_UNESCAPED_UNICODE), 1, -1);
                     }
                 } else if ($requestType === 'FORM') {
@@ -363,14 +476,14 @@ class NotificationService
                     $customHeaders[] = 'Content-Type: application/json';
                 } else if ($requestType === 'FORM') {
                     $customHeaders[] = 'Content-Type: application/x-www-form-urlencoded';
-                    // Test if user provided JSON instead of form data, attempt conversion
+                    // 用户误填 JSON 时，尽量转换为表单格式。
                     $decoded = json_decode($finalBody, true);
                     if (is_array($decoded)) {
                         $finalBody = http_build_query($decoded);
                     }
                 }
             } else {
-                // Fallback default payload if no body is configured
+                // 未配置请求体时发送默认内容。
                 $payload = ['title' => $title, 'text' => $text, 'time' => date('Y-m-d H:i:s')];
                 if ($requestType === 'JSON') {
                     $finalBody = json_encode($payload, JSON_UNESCAPED_UNICODE);
@@ -396,9 +509,21 @@ class NotificationService
         curl_close($ch);
 
         if ($error)
-            return "Curl Error: " . $error;
+            return "网络请求错误: " . $error;
         if ($httpCode >= 400)
-            return "HTTP Error {$httpCode}: " . $result;
+            return "接口返回错误 {$httpCode}: " . $result;
         return true;
     }
-}
\ No newline at end of file
+
+    private function formatTraffic($trafficGb)
+    {
+        $trafficGb = (float) $trafficGb;
+        if ($trafficGb <= 0) {
+            return '0 MB';
+        }
+        if ($trafficGb < 1) {
+            return round($trafficGb * 1024, 2) . ' MB';
+        }
+        return round($trafficGb, 2) . ' GB';
+    }
+}
diff --git a/README.MD b/README.MD
index 0dbc0d1..735f124 100644
--- a/README.MD
+++ b/README.MD
@@ -1,189 +1,143 @@
-# CDT-Monitor 🌩️
+# ecs-controller 🌩️
 
-> **阿里云 CDT 流量监控与自动化熔断解决方案**
+<p align="center">
+  <img src="./icon.png" width="120" height="120" alt="ecs-controller Logo">
+</p>
+
+> **阿里云 CDT 流量监控与自动化管理终极解决方案**
 > 
-> 旨在通过集成流量追踪、阈值熔断机制及抢占式实例保活策略，优化云端资源成本管理。
+> 专为 **MJJ** 大佬设计。旨在最大化榨干阿里云 CDT 200GB 免费流量，集成流量实时监控、自动熔断保护、抢占式实例保活、**实例规格与价格透明展示**于一体。
 
-## 📖 项目概述 (Introduction)
+## ⚠️ 免责声明
 
-**CDT-Monitor** 是一款专为阿里云云数据传输（CDT）用户研发的轻量级流量监控与管理系统。该系统基于 **PHP** 与 **SQLite** 架构设计，无需复杂的数据库配置即可快速部署。
+1. **配置参考**：本项目提供的默认一键创建配置仅供参考，请在下单前务必核对阿里云最新的 API 返回价格。
+2. **代码修改**：代码完全开源，您可以根据个人需求自行修改逻辑或 UI。
+3. **AI 开发声明**：本项目由 **AI (Antigravity)** 深度参与开发。作者已尽最大努力确保核心功能（如流量熔断、自动释放）的逻辑正确性。
+4. **Bug 修复**：由于云平台 API 变动或环境差异，如遇见 Bug 建议先行尝试自行修复，或提交 **Issue / PR**，由于精力有限，作者不保证实时维护。
+5. **风险自担**：因使用本脚本、或是阿里云 API 异常导致的相关资源损失或超支费用，作者概不负责。
 
-其核心价值在于自动化解决云资源管理中的“黑天鹅”事件：**通过实时流量熔断机制防止 CDT 免费额度超支扣费，利用智能保活算法解决抢占式实例非预期释放导致的业务中断，并提供精准的定时任务调度，是个人开发者与中小团队控制云成本的理想管家。**
-
-## 📸 界面预览 (Interface Preview)
-
-| 登陆界面 | 初始化 |
-| --- | --- |
-| ![https://assets.qninq.cn/qning/tzONAKQq.webp](https://assets.qninq.cn/qning/tzONAKQq.webp) | ![https://assets.qninq.cn/qning/xDFaQTTX.webp](https://assets.qninq.cn/qning/xDFaQTTX.webp) |
-
-| 后台页面 | 后台页面 |
-| --- | --- |
-| ![https://assets.qninq.cn/qning/WQG9I8qC.webp](https://assets.qninq.cn/qning/WQG9I8qC.webp) | ![https://assets.qninq.cn/qning/ipOStKeK.webp](https://assets.qninq.cn/qning/ipOStKeK.webp) |
-
-| 图表展示 | 邮件展示 |
-| --- | --- |
-| ![https://assets.qninq.cn/qning/a5zqmuJQ.webp](https://assets.qninq.cn/qning/a5zqmuJQ.webp) | ![https://assets.qninq.cn/qning/6KEjK7bw.webp](https://assets.qninq.cn/qning/6KEjK7bw.webp) |
-## ✨ 核心功能 (Core Features)
-
-* **便捷部署架构** ：基于 SQLite 构建，无需配置 MySQL 或 Redis 等外部数据库，支持数据私有化存储与快速部署。
-* **多账户聚合监控** ：提供统一管理面板，实现对多个阿里云账户下 CDT 流量使用情况及实例运行状态的集中监控。
-* **流量熔断机制** ：
-  * **阈值控制** ：支持自定义流量使用阈值（例如 95%）。
-  * **自动化停机** ：当流量超出预设阈值时自动触发实例停机，支持配置 **普通停机** 或 **节省停机（停止计费）** 模式。
-  * **告警通知** ：集成 SMTP 协议，支持通过邮件发送即时告警通知。
-* **实例保活策略** ：内置保活逻辑算法，旨在防止抢占式实例在预定运行时间段内被异常回收。
-* **定时任务管理** ：支持针对特定实例设定每日自动开关机计划。
-* **现代化用户界面** ：采用原生 Tailwind CSS 构建，提供统一的响应式布局，确保移动端与桌面端的兼容性与视觉一致性。
-* **安全保障体系** ：内置初始化配置向导，确保敏感配置信息的本地加密存储与安全性。
-
-## 🛠️ 环境要求 (System Requirements)
-
-* **PHP** 版本 >= 8.0
-* **Composer** 依赖管理工具
-* **PHP 扩展** ：`pdo_sqlite`, `curl`, `json`
-* **Web 服务器** ：Nginx / Apache / OpenLiteSpeed
-
-## 🚀 安装指南 (Installation Guide)
-
-### 1. 获取源代码
-
-```
-git clone https://github.com/wang4386/CDT-Monitor.git
-cd CDT-Monitor
-```
-
-### 2. 安装依赖包
-
-```
-composer install --no-dev
-```
-
-### 3. 配置目录权限
-
-请确保 Web 服务器用户对项目根目录及 `data.sqlite` 文件拥有 **写入权限** 。
-
-```
-# 示例：假设 Web 根目录为 /www/wwwroot/yoursite.com
-chown -R www:www /www/wwwroot/yoursite.com
-chmod -R 755 /www/wwwroot/yoursite.com
-```
-
-> **🛡️ Nginx 安全配置（重要）**
-> 
-> 为防止数据库文件被下载，请务必在 Nginx 配置文件（server 段）中添加以下伪静态规则以禁止访问 `/data/` 目录：
-> 
-> ```
-> location ^~ /data/ {
->     deny all;
->     return 403;
-> }
-> ```
-
-### 4. 系统初始化
-
-通过浏览器访问站点（例如 `https://monitor.yourdomain.com`）。首次访问将自动进入  **初始化向导** ，请按照提示完成管理员密码及相关参数的配置。
-
-## 🐳 Docker 部署 (Docker Deployment)
-
-无需配置 PHP 环境，直接使用 Docker 即可快速部署。Docker 版本已内置定时任务，**无需** 额外配置 Crontab。
+---
+## 🚀 快速部署
 
 ### 方式一：Docker Compose (推荐)
+这是最省心的部署方案，内置了自动化的定时任务巡检，无需额外配置 Crontab。
 
-创建一个 `docker-compose.yml` 文件：
-
-```
+1. **新建配置文件** `docker-compose.yml`：
+```yaml
 services:
-  cdt-monitor:
-    image: qninq/cdt-monitor:latest
-    # build: .
-    container_name: cdt-monitor
+  ecs-controller:
+    image: kori1c/ecs-controller:latest
+    container_name: ecs-controller
     restart: always
     ports:
-      - "43210:80"  # 将容器的 80 端口映射到宿主机的 43210 端口
+      - "43210:80"
     volumes:
-      # 持久化数据目录，确保重启后配置和数据库不丢失
       - ./data:/var/www/html/data
-      # 可选：如果你想查看 Docker 内部的日志
-      # - ./logs:/var/log/nginx
     environment:
-      - TZ=Asia/Shanghai  # 设置时区，对 Cron 任务很重要
+      - TZ=Asia/Shanghai
 ```
 
-启动服务：
-
-```
+2. **启动服务**：
+```bash
 docker-compose up -d
 ```
+访问 `http://localhost:43210` 即可开始使用。
 
-### 方式二：Docker CLI
+---
 
-```
-docker run -d \
-    --name cdt-monitor \
-    --restart always \
-    -p 43210:80 \
-    -v $(pwd)/data:/var/www/html/data \
-    -e TZ=Asia/Shanghai \
-    qninq/cdt-monitor:latest
-```
+## 🔑 获取阿里云密钥
 
-部署完成后，访问 `http://服务器IP:43210` 即可开始使用。
+为了让系统能够正常获取流量数据并管理实例，您需要准备具有相关权限的阿里云 AccessKey：
 
-## ⚙️ 自动化任务配置 (Automation Setup)
+1. **登录阿里云控制台**，前往 [RAM 访问控制 - 用户](https://ram.console.aliyun.com/users)。
+2. **创建用户**：点击“创建用户”，勾选“OpenAPI 调用访问”。
+3. **获取密钥**：保存好生成的 `AccessKey ID` 和 `AccessKey Secret`。
+4. **添加权限**：为该用户添加以下三个权限策略（必须包含）：
+   - `AliyunECSFullAccess`：用于查看实例状态、开关机及释放。
+   - `AliyunBSSFullAccess`：用于查询账号余额及消费账单。
+   - `AliyunCDTFullAccess`：用于获取 CDT 流量实时统计信息。
 
-> **注意：** 如果您使用 Docker 部署，请跳过此步骤（容器已内置自动任务）。
+---
 
-CDT-Monitor 依赖定时任务以实现精确的流量监控与实例保活功能。建议执行频率为 **每分钟一次** 。
+## ✨ 核心功能
 
-您可以根据服务器环境选择以下任意一种方式：
 
-### 方式一：命令行 Crontab (推荐)
+### 🛡️ 流量盾牌 (CDT 监控)
+- **多账户聚合**：支持同时管理多个阿里云 AK/SK，多区域实例一屏尽览。
+- **自然月流量重置**：自动适配阿里云 CDT 计费周期，每月 1 号零点自动重置已用流量统计。
+- **熔断机制**：支持设定 **告警阈值 (如 95%)**，触发时自动执行关机动作。
+- **灵活关机模式**：可选 **普通停机 (KeepCharging)** 或 **节省停机 (StopCharging/释放计算资源停止计费)**。
 
-最稳定且高效的方式，适合有服务器 SSH 权限的用户。
+### ⚡ 自动化高阶管理
+- **异步安全释放**：彻底解决释放逻辑响应缓慢问题。点击后后台接管，自动执行“强制离线 -> 等待状态 -> 物理销毁”全流程，无需前台苦等。
+- **抢占式实例保活**：实时守护低成本 Spot 实例，检测到非预期停机时（如被回收）自动重试拉起。
+- **定时任务清单**：支持为指定实例设置每日定时开机、定时关机计划（自定义时间点）。
+- **ECS 快速创建**：支持从预设规格中一键拉起新实例（默认采用最低配置、最低价格方案），并自动配置安全组与防火墙规则。
+- **预检与成本预览**：创建前自动调用阿里云 API 进行库存预检与其费用估算，拒绝盲目下单。
+- **初次登录信息保护**：针对新建实例，系统仅在创建成功的瞬间展示初始密码，确保 AK/SK 与凭据安全。
+- **DDNS 联动**：深度集成 **Cloudflare**，实例重启 IP 变更后自动同步 A 记录。
 
-```
-# CDT-Monitor 核心任务
-* * * * * /usr/bin/php /path/to/your/project/monitor.php > /dev/null 2>&1
-```
+### 📊 成本与审计
+- **费用中心**：实时拉取账号 **可用余额**，并预估当月实例已产生账单金额。
+- **实时日志审计**：详细记录系统心跳、API 调用状态、告警触发记录，支持分级清理，保证系统轻量运行。
+- **一键同步**：支持主动从阿里云云端同步最新机器规格、状态、公网 IP 等所有属性。
 
-> **注意** ：请将路径替换为实际的项目部署路径，并确保使用 PHP CLI 版本执行。
+### 📢 预警系统
+- **多通路覆盖**：集成 **Telegram (纸飞机)**、**SMTP 邮件** 及 **通用 Webhook** 接口。
+- **状态变更通知**：实例关机、启动、释放成功、流量超标时均会发送详尽的富文本通知。
 
-### 方式二：URL 监控 (Web Cron)
+---
 
-如果您使用虚拟主机或希望通过第三方监控服务（如 UptimeRobot, 宝塔计划任务-访问URL）来触发，可以使用此方式。
+## 💡 省钱小秘籍 (Saving Tips)
 
-**监控地址格式：**
+- **流量熔断**：系统默认检测到流量即将用尽时自动关机（建议配合“节省停机”模式），确保不产生额外扣费，真正做到“用完即止”。
+- **折扣充值**：本项目可搭配 [portal.acm.ee](https://portal.acm.ee/) 使用，享受阿里云七折充值优惠，叠加 CDT 200GB 免费流量，实现在线极致性价比。
 
-```
-https://您的域名/monitor.php?key=您的管理员密码
-```
+---
 
-> **注意** ：
-> 
-> 1. 为了安全起见，Web 访问必须携带 `key` 参数，该参数值即为您初始化时设置的 **管理员密码** 。
-> 2. 如果密码错误，系统将返回 403 禁止访问。
+## 📸 界面预览
 
-无论使用哪种方式，`monitor.php` 均内置了智能缓存机制，高频执行不会导致 API 调用额度的过度消耗。
+### 汇总监控
+![监控状态](./image/截屏2026-04-16%2012.15.51.png)
 
-## 💡 功能详解 (Advanced Documentation)
+### 系统配置
+![系统设置](./image/截屏2026-04-16%2012.16.12.png)
 
-### 停机模式说明
+### 实例生命周期管理
+![创建结果展示](./image/截屏2026-04-16%2011.24.14.png)
 
-* **普通停机 (KeepCharging)** ：停止实例后保留计算资源与 IP 地址，持续产生费用，具备快速启动特性。
-* **节省停机 (StopCharging)** ：释放计算资源并停止计费。**注意：固定公网 IP 地址可能会在重启后发生变更，但弹性公网 IP (EIP) 地址保持不变。建议用于成本控制场景。**
+---
 
-### 抢占式实例保活机制
 
-该机制专为**抢占式实例**设计。系统激活后，将实时监控处于“预定运行时间段”内的实例状态。若检测到非预期的关机状态（如被云平台释放），系统将尝试自动重启实例以维持服务可用性。
 
-* *注：为防止状态频繁震荡，触发保活操作后将执行 30 分钟的冷却期。*
+## 🛠️ 技术架构
 
-## 🤝 参与贡献 (Contributing)
+- **Backend**: 原生 PHP 8.1+，无框架依赖，追求极致性能。
+- **Database**: SQLite 3 (WAL 模式)，兼顾轻量与读写并发。
+- **Frontend**: Vue 3.x (SFC 理念) + 原生 Vanilla CSS。
+- **SDK**: Alibaba Cloud SDK for PHP (V1)。
 
-欢迎提交 Issue 或 Pull Request 以协助改进本项目。
+---
 
-## 📄 开源协议 (License)
+## ☕ 赏杯咖啡 (Donation)
 
-本项目遵循 [MIT License](https://mit-license.org/ "null") 开源协议。
+如果您觉得这个工具对您有帮助，阔佬随手赏杯咖啡：
 
-<p align="center">Created by <a href="https://qninq.cn/">青柠·倾城于你</a></p>
\ No newline at end of file
+- **USDT-TRC20**: `TMBmXngHcKtNo9nLxTCJcGTfNutsbb9rp3`
+- **USDT-Polygon**: `0x846ad38ed7159aee70b0ebd8ec39ad2d7b32835b`
+- **USDT-BSC**: `0x846ad38ed7159aee70b0ebd8ec39ad2d7b32835b`
+- **USDT-ERC20**: `0x846ad38ed7159aee70b0ebd8ec39ad2d7b32835b`
+- **USDT-ArbitrumOne**: `0x846ad38ed7159aee70b0ebd8ec39ad2d7b32835b`
+
+---
+
+
+
+
+## 📄 许可协议
+
+本项目遵循 [MIT License](https://opensource.org/licenses/MIT) 开源协议。
+
+---
+<p align="center">Made with ❤️ for Aliyun Users</p>
+<p align="center">Based on <a href="https://github.com/wang4386/CDT-Monitor">CDT-Monitor</a></p>
\ No newline at end of file
diff --git a/docker-compose.yml b/docker-compose.yml
index 2a88e5b..5133f9a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,15 +1,14 @@
 services:
-  cdt-monitor:
-    image: qninq/cdt-monitor:latest
-    # build: .
-    container_name: cdt-monitor
+  ecs-controller:
+    image: kori1c/ecs-controller:latest
+    container_name: ecs-controller
     restart: always
     ports:
-      - "43210:80"  # 将容器的 80 端口映射到宿主机的 8080 端口
+      - "43211:80"
     volumes:
-      # 持久化数据目录，确保重启后配置和数据库不丢失
       - ./data:/var/www/html/data
-      # 可选：如果你想查看 Docker 内部的日志
-      # - ./logs:/var/log/nginx
     environment:
-      - TZ=Asia/Shanghai  # 设置时区，对 Cron 任务很重要
\ No newline at end of file
+      - TZ=Asia/Shanghai
+    dns:
+      - 223.5.5.5
+      - 114.114.114.114
\ No newline at end of file
diff --git a/docker/entrypoint.sh b/docker/entrypoint.sh
index bb47272..131099c 100644
--- a/docker/entrypoint.sh
+++ b/docker/entrypoint.sh
@@ -1,7 +1,7 @@
 #!/bin/sh
 set -e
 
-echo "Starting CDT-Monitor..."
+echo "Starting ECS-Controller..."
 
 # 1. 确保数据目录权限正确
 # Docker 挂载卷时可能会导致权限归属为 root，这里强制修正为 www-data
diff --git a/image/截屏2026-04-16 11.24.03.png b/image/截屏2026-04-16 11.24.03.png
new file mode 100644
index 0000000..e5391c9
Binary files /dev/null and b/image/截屏2026-04-16 11.24.03.png differ
diff --git a/image/截屏2026-04-16 11.24.14.png b/image/截屏2026-04-16 11.24.14.png
new file mode 100644
index 0000000..f62e763
Binary files /dev/null and b/image/截屏2026-04-16 11.24.14.png differ
diff --git a/image/截屏2026-04-16 11.24.31.png b/image/截屏2026-04-16 11.24.31.png
new file mode 100644
index 0000000..91c9c2d
Binary files /dev/null and b/image/截屏2026-04-16 11.24.31.png differ
diff --git a/image/截屏2026-04-16 12.15.51.png b/image/截屏2026-04-16 12.15.51.png
new file mode 100644
index 0000000..b790901
Binary files /dev/null and b/image/截屏2026-04-16 12.15.51.png differ
diff --git a/image/截屏2026-04-16 12.15.56.png b/image/截屏2026-04-16 12.15.56.png
new file mode 100644
index 0000000..eb26abe
Binary files /dev/null and b/image/截屏2026-04-16 12.15.56.png differ
diff --git a/image/截屏2026-04-16 12.16.05.png b/image/截屏2026-04-16 12.16.05.png
new file mode 100644
index 0000000..8cc34a8
Binary files /dev/null and b/image/截屏2026-04-16 12.16.05.png differ
diff --git a/image/截屏2026-04-16 12.16.12.png b/image/截屏2026-04-16 12.16.12.png
new file mode 100644
index 0000000..183c5b3
Binary files /dev/null and b/image/截屏2026-04-16 12.16.12.png differ
diff --git a/image/截屏2026-04-16 12.16.18.png b/image/截屏2026-04-16 12.16.18.png
new file mode 100644
index 0000000..0e95747
Binary files /dev/null and b/image/截屏2026-04-16 12.16.18.png differ
diff --git a/image/截屏2026-04-16 12.16.27.png b/image/截屏2026-04-16 12.16.27.png
new file mode 100644
index 0000000..f6b77d0
Binary files /dev/null and b/image/截屏2026-04-16 12.16.27.png differ
diff --git a/index.php b/index.php
index 183854b..f883dd0 100644
--- a/index.php
+++ b/index.php
@@ -1,4 +1,9 @@
 <?php
+ini_set('session.cookie_httponly', 1);
+ini_set('session.cookie_secure', isset($_SERVER['HTTPS']) ? 1 : 0);
+ini_set('session.cookie_samesite', 'Lax');
+ini_set('session.use_strict_mode', 1);
+ini_set('session.use_only_cookies', 1);
 session_start();
 
 error_reporting(E_ALL & ~E_NOTICE & ~E_WARNING & ~E_DEPRECATED);
@@ -28,7 +33,7 @@ if ($action === 'setup') {
     header('Content-Type: application/json');
     if ($app->isInitialized()) {
         http_response_code(403);
-        echo json_encode(['success' => false, 'message' => 'System already initialized']);
+        echo json_encode(['success' => false, 'message' => '系统已完成初始化']);
         exit;
     }
     
@@ -38,7 +43,7 @@ if ($action === 'setup') {
             $_SESSION['is_admin'] = true;
             echo json_encode(['success' => true]);
         } else {
-            echo json_encode(['success' => false, 'message' => 'Setup failed']);
+            echo json_encode(['success' => false, 'message' => '初始化失败']);
         }
     } catch (Exception $e) {
         echo json_encode(['success' => false, 'message' => $e->getMessage()]);
@@ -72,7 +77,13 @@ if ($action === 'get_status') {
     if ($initError) {
         echo json_encode(['error' => $initError]);
     } else {
-        echo json_encode($app->getStatusForFrontend());
+        $isAdmin = isset($_SESSION['is_admin']) && $_SESSION['is_admin'] === true;
+        if (!$isAdmin) {
+            http_response_code(403);
+            echo json_encode(['error' => '请先登录后再操作']);
+        } else {
+            echo json_encode($app->getStatusForFrontend(true));
+        }
     }
     exit;
 }
@@ -81,7 +92,7 @@ if ($action === 'get_status') {
 
 if ($action !== 'view' && !isset($_SESSION['is_admin'])) {
     http_response_code(403);
-    echo json_encode(['error' => 'Unauthorized']);
+    echo json_encode(['error' => '请先登录后再操作']);
     exit;
 }
 
@@ -126,7 +137,7 @@ if ($action === 'refresh_account') {
     $id = $data['id'] ?? 0;
     $result = $app->refreshAccount($id);
     if ($result === false) {
-        echo json_encode(['success' => false, 'message' => 'Refresh failed']);
+        echo json_encode(['success' => false, 'message' => '刷新失败']);
     } elseif (is_array($result)) {
         // 流量/状态刷新成功，但账单获取失败
         echo json_encode($result);
@@ -136,6 +147,111 @@ if ($action === 'refresh_account') {
     exit;
 }
 
+if ($action === 'fetch_instances') {
+    header('Content-Type: application/json; charset=utf-8');
+    $data = json_decode(file_get_contents('php://input'), true);
+
+    try {
+        $instances = $app->fetchInstances($data['accessKeyId'] ?? '', $data['accessKeySecret'] ?? '', $data['regionId'] ?? '');
+        echo json_encode(['success' => true, 'data' => $instances]);
+    } catch (Exception $e) {
+        http_response_code(400);
+        echo json_encode(['success' => false, 'message' => $e->getMessage()]);
+    }
+    exit;
+}
+
+if ($action === 'test_account') {
+    header('Content-Type: application/json; charset=utf-8');
+    $data = json_decode(file_get_contents('php://input'), true);
+
+    try {
+        $result = $app->testAccountCredentials($data['account'] ?? []);
+        echo json_encode($result);
+    } catch (Exception $e) {
+        http_response_code(400);
+        echo json_encode([
+            'success' => false,
+            'message' => $e->getMessage()
+        ]);
+    }
+    exit;
+}
+
+if ($action === 'sync_account_group') {
+    header('Content-Type: application/json; charset=utf-8');
+    $data = json_decode(file_get_contents('php://input'), true) ?: [];
+
+    try {
+        echo json_encode($app->syncAccountGroup($data['groupKey'] ?? ''));
+    } catch (Exception $e) {
+        http_response_code(400);
+        echo json_encode([
+            'success' => false,
+            'message' => $e->getMessage()
+        ]);
+    }
+    exit;
+}
+
+if ($action === 'preview_ecs_create') {
+    header('Content-Type: application/json; charset=utf-8');
+    $data = json_decode(file_get_contents('php://input'), true) ?: [];
+
+    try {
+        $result = $app->previewEcsCreate($data);
+        $_SESSION['ecs_create_previews'] = $_SESSION['ecs_create_previews'] ?? [];
+        $_SESSION['ecs_create_previews'][$result['previewId']] = [
+            'summary' => $result['summary'],
+            'created_at' => time()
+        ];
+        echo json_encode($result);
+    } catch (Exception $e) {
+        http_response_code(400);
+        echo json_encode(['success' => false, 'message' => $e->getMessage()]);
+    }
+    exit;
+}
+
+if ($action === 'create_ecs') {
+    header('Content-Type: application/json; charset=utf-8');
+    $data = json_decode(file_get_contents('php://input'), true) ?: [];
+    $previewId = $data['previewId'] ?? '';
+    $confirmed = !empty($data['confirmed']);
+
+    try {
+        if (!$confirmed) {
+            throw new Exception('请先确认配置清单和费用提示');
+        }
+        $previewStore = $_SESSION['ecs_create_previews'][$previewId] ?? null;
+        if (!$previewStore || (time() - ($previewStore['created_at'] ?? 0)) > 900) {
+            throw new Exception('配置清单已过期，请重新预检');
+        }
+
+        $result = $app->createEcsFromPreview($previewId, $previewStore['summary']);
+        unset($_SESSION['ecs_create_previews'][$previewId]);
+        echo json_encode($result);
+    } catch (Exception $e) {
+        http_response_code(400);
+        echo json_encode(['success' => false, 'message' => $e->getMessage()]);
+    }
+    exit;
+}
+
+if ($action === 'get_ecs_create_task') {
+    header('Content-Type: application/json; charset=utf-8');
+    $taskId = $_GET['taskId'] ?? '';
+    $task = $app->getEcsCreateTask($taskId);
+    if (!$task) {
+        http_response_code(404);
+        echo json_encode(['success' => false, 'message' => '任务不存在']);
+    } else {
+        unset($task['login_password']);
+        echo json_encode(['success' => true, 'data' => $task]);
+    }
+    exit;
+}
+
 // 修改：获取系统日志，支持 Tab
 if ($action === 'get_logs') {
     header('Content-Type: application/json; charset=utf-8');
@@ -151,7 +267,7 @@ if ($action === 'clear_logs') {
     if ($app->clearSystemLogs($tab)) {
         echo json_encode(['success' => true]);
     } else {
-        echo json_encode(['success' => false, 'message' => 'Clear failed']);
+        echo json_encode(['success' => false, 'message' => '清空失败']);
     }
     exit;
 }
@@ -169,4 +285,38 @@ if ($action === 'logout') {
     exit;
 }
 
-echo $app->renderTemplate();
\ No newline at end of file
+if ($action === 'get_all_instances') {
+    header('Content-Type: application/json; charset=utf-8');
+    $sync = ($_GET['sync'] ?? '0') === '1';
+    echo json_encode(['data' => $app->getAllManagedInstances($sync)]);
+    exit;
+}
+
+if ($action === 'control_instance') {
+    $data = json_decode(file_get_contents('php://input'), true);
+    $accountId = $data['accountId'] ?? 0;
+    $actionType = $data['action'] ?? '';
+    $shutdownMode = $data['shutdownMode'] ?? 'KeepCharging';
+
+    if (!in_array($actionType, ['start', 'stop'])) {
+        http_response_code(400);
+        echo json_encode(['success' => false, 'message' => '无效的操作类型']);
+        exit;
+    }
+
+    $result = $app->controlInstanceAction($accountId, $actionType, $shutdownMode);
+    echo json_encode(['success' => $result]);
+    exit;
+}
+
+if ($action === 'delete_instance') {
+    $data = json_decode(file_get_contents('php://input'), true);
+    $accountId = $data['accountId'] ?? 0;
+    $forceStop = $data['forceStop'] ?? false;
+
+    $result = $app->deleteInstanceAction($accountId, $forceStop);
+    echo json_encode(['success' => $result]);
+    exit;
+}
+
+echo $app->renderTemplate();
diff --git a/monitor.php b/monitor.php
index 5bd4522..d09fcd7 100644
--- a/monitor.php
+++ b/monitor.php
@@ -8,20 +8,24 @@ header('Content-Type: text/plain; charset=utf-8');
 
 $app = new AliyunTrafficCheck();
 
-// CLI 模式直接运行，Web 模式需要密码
+// CLI 模式直接运行，Web 模式使用 Bearer Token 鉴权
 $isCli = (PHP_SAPI === 'cli');
 
 if (!$isCli) {
-    $inputKey = $_GET['key'] ?? '';
-    $adminPassword = $app->getAdminPassword();
-    if ($inputKey !== $adminPassword) {
+    $authHeader = $_SERVER['HTTP_AUTHORIZATION'] ?? $_SERVER['HTTP_X_MONITOR_TOKEN'] ?? '';
+    if (preg_match('/^Bearer\s+(.+)$/i', $authHeader, $matches)) {
+        $authHeader = $matches[1];
+    }
+
+    $monitorKey = $app->getMonitorKey();
+    if (empty($monitorKey) || !hash_equals($monitorKey, $authHeader)) {
         http_response_code(403);
-        echo "Access Denied.";
+        echo "访问被拒绝，请使用有效的监控密钥。";
         exit;
     }
 }
 
 // 输出简洁日志
-echo "--- CDT Monitor Start: " . date('Y-m-d H:i:s') . " ---\n";
+echo "--- ECS 服务器管理 开始检测: " . date('Y-m-d H:i:s') . " ---\n";
 echo $app->monitor();
-echo "\n--- End ---\n";
\ No newline at end of file
+echo "\n--- 检测结束 ---\n";
diff --git a/template.html b/template.html
index baa1b0f..a58118c 100644
--- a/template.html
+++ b/template.html
@@ -1,969 +1,2568 @@
 <!DOCTYPE html>
-<html lang="zh-CN" class="antialiased">
+<html lang="zh-CN">
 
 <head>
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>阿里云 CDT 监控控制台</title>
-    <meta name="description" content="阿里云 CDT 流量监控控制台，实时监控 ECS 实例流量使用情况，支持自动告警与定时开关机。">
-    <!-- 引用 Favicon 图标 -->
+    <title>ECS 服务器管理</title>
+    <meta name="description" content="阿里云 流量抵扣服务 流量监控控制台，支持实例状态查看、实例管理、账号管理、系统设置与日志审计。">
     <link rel="icon" type="image/png" href="icon.png">
-    <!-- 预编译的 Tailwind CSS v4 -->
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet">
     <link rel="stylesheet" href="static/tailwind-compiled.css">
-
     <style>
+        :root {
+            --canvas: #f8fafc;
+            --panel: #ffffff;
+            --panel-strong: #ffffff;
+            --line: #e5e7eb;
+            --text: #111827;
+            --muted: #6b7280;
+            --accent: #4f46e5;
+            --accent-strong: #4338ca;
+            --accent-light: #eef2ff;
+            --danger: #ef4444;
+            --warning: #f59e0b;
+            --success: #10b981;
+        }
+
+        @keyframes panel-fade-up {
+            from {
+                opacity: 0;
+                transform: translateY(12px);
+            }
+
+            to {
+                opacity: 1;
+                transform: translateY(0);
+            }
+        }
+
+        @keyframes soft-fade-in {
+            from {
+                opacity: 0;
+            }
+
+            to {
+                opacity: 1;
+            }
+        }
+
+        @keyframes modal-rise {
+            from {
+                opacity: 0;
+                transform: translateY(16px) scale(0.98);
+            }
+
+            to {
+                opacity: 1;
+                transform: translateY(0) scale(1);
+            }
+        }
+
+        * {
+            box-sizing: border-box;
+        }
+
+        html,
+        body {
+            min-height: 100%;
+        }
+
+        body {
+            margin: 0;
+            color: var(--text);
+            background: var(--canvas);
+            font-family: "Inter", -apple-system, BlinkMacSystemFont, "PingFang SC", "Hiragino Sans GB", "Noto Sans CJK SC", sans-serif;
+            -webkit-font-smoothing: antialiased;
+        }
+
         [v-cloak] {
             display: none !important;
         }
 
-        .no-scrollbar::-webkit-scrollbar {
+        .glass-panel {
+            background: var(--panel);
+            border: 1px solid var(--line);
+            box-shadow: 0 1px 3px rgba(0, 0, 0, 0.04);
+            transition: box-shadow .2s ease, border-color .2s ease;
+        }
+
+        .glass-input,
+        .glass-textarea {
+            width: 100%;
+            border: 1px solid #e5e7eb;
+            background: #ffffff;
+            color: var(--text);
+            border-radius: 10px;
+            padding: 0.65rem 0.85rem;
+            font-size: 0.875rem;
+            outline: none;
+            transition: border-color .15s ease, box-shadow .15s ease;
+        }
+
+        .glass-input:focus,
+        .glass-textarea:focus {
+            border-color: var(--accent);
+            box-shadow: 0 0 0 3px rgba(79, 70, 229, 0.1);
+        }
+
+        .glass-textarea {
+            min-height: 108px;
+            resize: vertical;
+        }
+
+        .glass-input:hover,
+        .glass-textarea:hover {
+            border-color: #d1d5db;
+        }
+
+        input[type="number"] {
+            appearance: textfield;
+            -moz-appearance: textfield;
+        }
+
+        input[type="number"]::-webkit-outer-spin-button,
+        input[type="number"]::-webkit-inner-spin-button {
+            margin: 0;
+            -webkit-appearance: none;
+        }
+
+        .glass-select {
+            width: 100%;
+            min-width: 0;
+        }
+
+        .select-shell {
+            position: relative;
+            width: 100%;
+        }
+
+        .select-shell.open {
+            z-index: 30;
+        }
+
+        .select-trigger {
+            width: 100%;
+            min-height: 44px;
+            display: flex;
+            align-items: center;
+            justify-content: space-between;
+            gap: 12px;
+            padding: 0.6rem 0.85rem;
+            border-radius: 10px;
+            border: 1px solid #e5e7eb;
+            background: #ffffff;
+            color: var(--text);
+            transition: border-color .15s ease, box-shadow .15s ease;
+        }
+
+        .select-trigger:hover {
+            border-color: #d1d5db;
+        }
+
+        .select-shell.open .select-trigger,
+        .select-trigger:focus-visible {
+            border-color: var(--accent);
+            box-shadow: 0 0 0 3px rgba(79, 70, 229, 0.1);
+        }
+
+        .select-trigger:disabled {
+            cursor: not-allowed;
+            opacity: 0.5;
+        }
+
+        .select-value {
+            min-width: 0;
+            overflow: hidden;
+            text-overflow: ellipsis;
+            white-space: nowrap;
+            text-align: left;
+            font-size: 0.92rem;
+            font-weight: 600;
+        }
+
+        .select-value.is-placeholder {
+            color: #8a94a6;
+            font-weight: 500;
+        }
+
+        .select-chevron {
+            width: 1.5rem;
+            height: 1.5rem;
+            display: inline-flex;
+            align-items: center;
+            justify-content: center;
+            border-radius: 6px;
+            background: #f3f4f6;
+            color: var(--muted);
+            flex-shrink: 0;
+            transition: transform .15s ease;
+        }
+
+        .select-shell.open .select-chevron {
+            transform: rotate(180deg);
+        }
+
+        .select-menu {
+            position: absolute;
+            top: calc(100% + 6px);
+            left: 0;
+            right: 0;
+            max-height: 280px;
+            overflow-y: auto;
+            padding: 4px;
+            border-radius: 12px;
+            border: 1px solid var(--line);
+            background: #ffffff;
+            box-shadow: 0 4px 16px rgba(0, 0, 0, 0.08);
+        }
+
+        .account-modal .select-menu {
+            max-height: 210px;
+            border-radius: 10px;
+        }
+
+        .account-modal .select-option {
+            padding: 0.5rem 0.65rem;
+            border-radius: 8px;
+            font-size: 0.875rem;
+        }
+
+        .select-option {
+            width: 100%;
+            display: flex;
+            align-items: center;
+            justify-content: space-between;
+            gap: 12px;
+            padding: 0.55rem 0.7rem;
+            border-radius: 8px;
+            color: var(--text);
+            font-size: 0.875rem;
+            font-weight: 500;
+            text-align: left;
+            transition: background .12s ease;
+        }
+
+        .select-option:hover {
+            background: #f3f4f6;
+        }
+
+        .select-option.selected {
+            background: var(--accent-light);
+            color: var(--accent);
+        }
+
+        .select-check {
+            width: 1.15rem;
+            height: 1.15rem;
+            display: inline-flex;
+            align-items: center;
+            justify-content: center;
+            color: inherit;
+            flex-shrink: 0;
+        }
+
+        .select-pop-enter-active,
+        .select-pop-leave-active {
+            transition: opacity .12s ease, transform .12s ease;
+        }
+
+        .select-pop-enter-from,
+        .select-pop-leave-to {
+            opacity: 0;
+            transform: translateY(-4px);
+        }
+
+        .toast-stack {
+            position: fixed;
+            top: 20px;
+            left: 50%;
+            transform: translateX(-50%);
+            z-index: 80;
+            display: flex;
+            flex-direction: column;
+            align-items: center;
+            gap: 10px;
+            width: min(380px, calc(100vw - 32px));
+        }
+
+        .toast-card {
+            border-radius: 12px;
+            padding: 12px 16px;
+            border: 1px solid var(--line);
+            background: #ffffff;
+            box-shadow: 0 4px 12px rgba(0, 0, 0, 0.08);
+        }
+
+        .toast-card.info {
+            border-left: 3px solid var(--accent);
+        }
+
+        .toast-card.success {
+            border-left: 3px solid var(--success);
+        }
+
+        .toast-card.error {
+            border-left: 3px solid var(--danger);
+        }
+
+        .toast-title {
+            font-size: 0.75rem;
+            font-weight: 600;
+            letter-spacing: 0.04em;
+            text-transform: uppercase;
+            color: var(--muted);
+        }
+
+        .toast-message {
+            margin-top: 4px;
+            font-size: 0.875rem;
+            line-height: 1.5;
+            color: var(--text);
+        }
+
+        .toast-enter-active,
+        .toast-leave-active {
+            transition: opacity .18s ease, transform .18s ease;
+        }
+
+        .toast-enter-from,
+        .toast-leave-to {
+            opacity: 0;
+            transform: translateY(-8px);
+        }
+
+        .dialog-overlay {
+            position: fixed;
+            inset: 0;
+            z-index: 90;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            padding: 16px;
+            background: rgba(0, 0, 0, 0.3);
+            animation: soft-fade-in .15s ease both;
+        }
+
+        .dialog-card {
+            width: min(520px, 100%);
+            border-radius: 16px;
+            padding: 24px;
+            animation: modal-rise .2s ease both;
+        }
+
+        .dialog-actions {
+            margin-top: 20px;
+            display: flex;
+            justify-content: flex-end;
+            gap: 10px;
+            flex-wrap: wrap;
+        }
+
+        .menu-button {
+            display: flex;
+            align-items: center;
+            gap: 0.65rem;
+            width: 100%;
+            padding: 0.6rem 0.75rem;
+            border-radius: 10px;
+            border: 1px solid transparent;
+            background: transparent;
+            color: var(--muted);
+            text-align: left;
+            font-weight: 500;
+            font-size: 0.875rem;
+            transition: background .12s ease, color .12s ease;
+        }
+
+        .menu-button:hover {
+            background: #f3f4f6;
+            color: var(--text);
+        }
+
+        .menu-button.active {
+            background: var(--accent-light);
+            color: var(--accent);
+            font-weight: 600;
+        }
+
+        .menu-icon {
+            width: 1.75rem;
+            height: 1.75rem;
+            display: inline-flex;
+            align-items: center;
+            justify-content: center;
+            border-radius: 8px;
+            background: #f3f4f6;
+            color: var(--accent);
+            flex-shrink: 0;
+        }
+
+        .menu-button.active .menu-icon {
+            background: rgba(79, 70, 229, 0.12);
+        }
+
+        .menu-button:hover .menu-icon,
+        .menu-button.active .menu-icon {
+            color: var(--accent);
+        }
+
+        .metric-card {
+            border-radius: 14px;
+            border: 1px solid var(--line);
+            background: #ffffff;
+            padding: 1.5rem;
+            box-shadow: 0 1px 3px rgba(0, 0, 0, 0.04);
+            transition: box-shadow .2s ease, border-color .2s ease;
+            animation: panel-fade-up .3s ease both;
+        }
+
+        .metric-card:hover {
+            box-shadow: 0 4px 12px rgba(0, 0, 0, 0.06);
+            border-color: #d1d5db;
+        }
+
+        .section-title {
+            font-size: 1.05rem;
+            font-weight: 600;
+            letter-spacing: -0.01em;
+        }
+
+        .status-pill {
+            display: inline-flex;
+            align-items: center;
+            gap: 0.35rem;
+            padding: 0.2rem 0.55rem;
+            border-radius: 6px;
+            font-size: 0.75rem;
+            font-weight: 600;
+            white-space: nowrap;
+        }
+
+        .status-running {
+            background: #ecfdf5;
+            color: #059669;
+        }
+
+        .status-stopped,
+        .status-released {
+            background: #fef2f2;
+            color: #dc2626;
+        }
+
+        .status-transition {
+            background: #fffbeb;
+            color: #d97706;
+        }
+
+        .status-unknown {
+            background: #f3f4f6;
+            color: #6b7280;
+        }
+
+        .table-shell {
+            border-radius: 14px;
+            border: 1px solid var(--line);
+            background: #ffffff;
+            overflow: hidden;
+            animation: panel-fade-up .3s ease both;
+        }
+
+        .table-scroll {
+            overflow-x: auto;
+        }
+
+        .table-scroll table {
+            width: 100%;
+        }
+
+        .progress-track {
+            width: 100%;
+            height: 6px;
+            border-radius: 3px;
+            background: #f3f4f6;
+            overflow: hidden;
+            border: none !important;
+            box-shadow: none !important;
+        }
+
+        .progress-fill {
+            height: 100%;
+            border-radius: 3px;
+            background: var(--accent);
+            transition: width .4s ease;
+        }
+
+        .progress-fill.warning {
+            background: var(--danger);
+        }
+
+        .subtle-label {
+            font-size: 0.7rem;
+            font-weight: 600;
+            letter-spacing: 0.06em;
+            text-transform: uppercase;
+            color: var(--muted);
+        }
+
+        .ghost-button,
+        .solid-button,
+        .danger-button,
+        .success-button,
+        .warning-button {
+            border-radius: 8px;
+            padding: 0.5rem 0.85rem;
+            font-size: 0.8rem;
+            font-weight: 600;
+            transition: background .12s ease, opacity .12s ease;
+        }
+
+        .ghost-button:hover,
+        .solid-button:hover,
+        .danger-button:hover,
+        .success-button:hover,
+        .warning-button:hover {
+            opacity: 0.85;
+        }
+
+        .ghost-button {
+            background: #f3f4f6;
+            border: 1px solid var(--line);
+            color: var(--text);
+        }
+
+        .ghost-button:hover {
+            background: #e5e7eb;
+            opacity: 1;
+        }
+
+        .solid-button {
+            background: var(--accent);
+            color: #fff;
+            border: none;
+        }
+
+        .success-button {
+            background: #ecfdf5;
+            border: 1px solid #d1fae5;
+            color: #059669;
+        }
+
+        .warning-button {
+            background: #fffbeb;
+            border: 1px solid #fef3c7;
+            color: #d97706;
+        }
+
+        .danger-button {
+            background: #fef2f2;
+            border: 1px solid #fecaca;
+            color: #dc2626;
+        }
+
+        .sync-button {
+            min-width: 78px;
+            border-radius: 8px;
+        }
+
+        .sync-button.pending {
+            color: #6b7280;
+        }
+
+        .sync-button.synced {
+            background: #ecfdf5;
+            border-color: #d1fae5;
+            color: #059669;
+        }
+
+        .sync-button.error {
+            background: #fef2f2;
+            border-color: #fecaca;
+            color: #dc2626;
+        }
+
+        .chip {
+            display: inline-flex;
+            align-items: center;
+            gap: 0.3rem;
+            padding: 0.2rem 0.55rem;
+            border-radius: 6px;
+            border: 1px solid var(--line);
+            background: #f9fafb;
+            font-size: 0.75rem;
+            color: var(--muted);
+        }
+
+        .switch-row {
+            cursor: pointer;
+            transition: background .12s ease;
+        }
+
+        .switch-row:hover {
+            background: #f9fafb;
+        }
+
+        .switch-control {
+            position: relative;
+            display: inline-flex;
+            width: 44px;
+            height: 24px;
+            flex: 0 0 auto;
+        }
+
+        .switch-control input {
+            position: absolute;
+            inset: 0;
+            opacity: 0;
+            cursor: pointer;
+        }
+
+        .switch-slider {
+            position: absolute;
+            inset: 0;
+            border-radius: 999px;
+            background: #d1d5db;
+            transition: background .15s ease;
+        }
+
+        .switch-slider::after {
+            content: "";
+            position: absolute;
+            left: 2px;
+            top: 2px;
+            width: 20px;
+            height: 20px;
+            border-radius: 999px;
+            background: #fff;
+            box-shadow: 0 1px 3px rgba(0, 0, 0, 0.1);
+            transition: transform .15s ease;
+        }
+
+        .switch-control input:checked + .switch-slider {
+            background: var(--accent);
+        }
+
+        .switch-control input:checked + .switch-slider::after {
+            transform: translateX(20px);
+        }
+
+        .switch-control input:focus-visible + .switch-slider {
+            outline: 2px solid var(--accent);
+            outline-offset: 2px;
+        }
+
+        .account-row {
+            display: grid;
+            grid-template-columns: minmax(180px, 1.45fr) minmax(120px, 0.9fr) minmax(110px, 0.8fr) 180px 220px 180px;
+            gap: 0.85rem;
+            padding: 0.85rem 1rem;
+            border-bottom: 1px solid #f3f4f6;
+            align-items: center;
+            transition: background .1s ease;
+        }
+
+        .account-row:hover {
+            background: #f9fafb;
+        }
+
+        .account-row:last-child {
+            border-bottom: 0;
+        }
+
+        .account-cell label {
+            display: block;
+            margin-bottom: 0.3rem;
+            font-size: 0.7rem;
+            font-weight: 600;
+            letter-spacing: 0.04em;
+            color: var(--muted);
+            text-transform: uppercase;
+        }
+
+        .mobile-stack {
             display: none;
         }
 
-        .no-scrollbar {
-            -ms-overflow-style: none;
-            scrollbar-width: none;
+        .summary-table-head {
+            background: #f9fafb;
+            color: var(--muted);
+            font-size: 0.75rem;
+            font-weight: 600;
+            text-transform: uppercase;
+            letter-spacing: 0.06em;
         }
 
-        .glass-panel {
-            background: rgba(255, 255, 255, 0.65);
-            backdrop-filter: blur(40px);
-            -webkit-backdrop-filter: blur(40px);
-            border: 1px solid rgba(255, 255, 255, 0.6);
-            box-shadow: 0 1px 2px rgba(0, 0, 0, 0.02), 0 8px 32px rgba(0, 0, 0, 0.04), inset 0 0 0 1px rgba(255, 255, 255, 0.2);
+        .summary-cell {
+            min-width: 0;
         }
 
-        .glass-input {
-            background: rgba(242, 242, 247, 0.5);
-            box-shadow: inset 0 2px 4px rgba(0, 0, 0, 0.02);
-            transition: all 0.2s;
+        .center-column {
+            display: flex;
+            flex-direction: column;
+            align-items: center;
+            justify-content: center;
+            text-align: center;
+            width: 100%;
         }
 
-        .glass-input:focus {
-            background: #fff;
-            box-shadow: 0 0 0 2px rgba(0, 0, 0, 0.05);
+        .summary-primary {
+            font-weight: 600;
+            color: var(--text);
+            white-space: nowrap;
+            overflow: hidden;
+            text-overflow: ellipsis;
         }
 
-        .tap-effect:active {
-            transform: scale(0.96);
-            transition: transform 0.1s cubic-bezier(0.2, 0.8, 0.2, 1);
+        .summary-secondary {
+            margin-top: 0.2rem;
+            font-size: 0.75rem;
+            color: var(--muted);
         }
 
-        .tooltip-content {
-            visibility: hidden;
+        .row-actions {
+            display: flex;
+            justify-content: center;
+            gap: 8px;
+            flex-wrap: wrap;
+            width: 100%;
+            max-width: 260px;
+            margin: 0 auto;
+        }
+
+        .account-modal-overlay {
+            position: fixed;
+            inset: 0;
+            z-index: 60;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            padding: 16px;
+            background: rgba(0, 0, 0, 0.3);
+            animation: soft-fade-in .15s ease both;
+        }
+
+        .account-modal {
+            width: min(760px, 100%);
+            border-radius: 16px;
+            padding: 24px;
+            animation: modal-rise .2s ease both;
+        }
+
+        .modal-form-grid {
+            margin-top: 20px;
+            display: grid;
+            grid-template-columns: repeat(2, minmax(0, 1fr));
+            gap: 16px;
+        }
+
+        .modal-field-full {
+            grid-column: 1 / -1;
+        }
+
+        .create-modal {
+            width: min(920px, 100%);
+            max-height: min(86vh, 860px);
+            overflow: auto;
+        }
+
+        .summary-block {
+            margin-top: 16px;
+            border: 1px solid var(--line);
+            border-radius: 12px;
+            background: #f9fafb;
+            padding: 16px;
+        }
+
+        .summary-block h4 {
+            font-size: 0.85rem;
+            font-weight: 700;
+            color: var(--text);
+            margin-bottom: 10px;
+        }
+
+        .summary-list {
+            display: grid;
+            grid-template-columns: repeat(2, minmax(0, 1fr));
+            gap: 8px 16px;
+            font-size: 0.875rem;
+        }
+
+        .summary-list div {
+            display: flex;
+            justify-content: space-between;
+            gap: 12px;
+            color: var(--muted);
+        }
+
+        .summary-list strong {
+            color: var(--text);
+            text-align: right;
+            overflow-wrap: anywhere;
+        }
+
+        .warning-list {
+            margin-top: 12px;
+            display: grid;
+            gap: 6px;
+            color: #92400e;
+            font-size: 0.85rem;
+        }
+
+        .confirm-check {
+            margin-top: 16px;
+            display: flex;
+            gap: 10px;
+            align-items: center;
+            border: 1px solid var(--line);
+            border-radius: 10px;
+            padding: 10px 12px;
+            background: #f9fafb;
+            font-size: 0.875rem;
+            color: #374151;
+        }
+
+        .field-label {
+            display: block;
+            margin-bottom: 6px;
+            font-size: 0.8rem;
+            font-weight: 600;
+            color: var(--muted);
+        }
+
+        .account-card-grid {
+            display: grid;
+            gap: 8px;
+            margin-top: 14px;
+            color: #4b5563;
+            font-size: 0.875rem;
+        }
+
+        .account-usage {
+            width: 100%;
+            max-width: 132px;
+            min-width: 0;
+            display: flex;
+            flex-direction: column;
+            align-items: center;
+            margin: 0 auto;
+        }
+
+        .account-usage__meta {
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+            gap: 10px;
+            font-size: 0.8rem;
+            color: var(--muted);
+        }
+
+        .account-usage__meta.single {
+            justify-content: center;
+            width: 100%;
+            text-align: center;
+        }
+
+        .account-usage__bar {
+            margin-top: 6px;
+            width: 100%;
+            min-width: 0;
+            max-width: none;
+        }
+
+        .account-billing {
+            width: 100%;
+            max-width: 180px;
+            margin: 0 auto;
+            display: flex;
+            flex-direction: column;
+            gap: 4px;
+            text-align: center;
+        }
+
+        .account-billing__line {
+            font-size: 0.8rem;
+            color: var(--muted);
+            line-height: 1.4;
+        }
+
+        .account-billing__value {
+            font-weight: 600;
+            color: var(--text);
+        }
+
+        .account-billing__hint {
+            font-size: 0.75rem;
+            color: #9ca3af;
+        }
+
+        .account-billing__error {
+            font-size: 0.75rem;
+            color: var(--danger);
+            line-height: 1.4;
+        }
+
+        .tab-pill-group {
+            display: flex;
+            flex-wrap: wrap;
+            align-items: center;
+            gap: 8px;
+            margin-bottom: 14px;
+        }
+
+        .login-gate-card {
+            width: 100%;
+            max-width: 440px;
+            border-radius: 16px;
+            padding: 28px;
+            animation: modal-rise .2s ease both;
+        }
+
+        .login-gate-actions {
+            margin-top: 16px;
+        }
+
+        .test-state {
+            margin-top: 8px;
+            font-size: 0.75rem;
+            line-height: 1.4;
+            text-align: center;
+        }
+
+        .test-state.success {
+            color: #059669;
+        }
+
+        .test-state.error {
+            color: var(--danger);
+        }
+
+        .credential-result {
+            border-color: #fef3c7;
+            background: #fffbeb;
+        }
+
+        .credential-line {
+            display: flex;
+            align-items: center;
+            justify-content: space-between;
+            gap: 12px;
+            border-radius: 8px;
+            background: #ffffff;
+            padding: 8px 10px;
+        }
+
+        .credential-value {
+            font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+            font-size: 0.875rem;
+            font-weight: 700;
+            color: var(--text);
+            overflow-wrap: anywhere;
+        }
+
+        .credential-modal-overlay {
+            position: fixed;
+            inset: 0;
+            z-index: 90;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            padding: 18px;
+            background: rgba(0, 0, 0, 0.35);
+            animation: soft-fade-in .15s ease both;
+        }
+
+        .credential-modal {
+            width: min(580px, 100%);
+            border-radius: 16px;
+            padding: 24px;
+            border: 1px solid #fef3c7;
+            animation: modal-rise .2s ease both;
+        }
+
+        .credential-alert-title {
+            font-size: clamp(1.3rem, 3.5vw, 1.8rem);
+            line-height: 1.1;
+            letter-spacing: -0.02em;
+            font-weight: 800;
+        }
+
+        .credential-grid {
+            margin-top: 16px;
+            display: grid;
+            gap: 10px;
+        }
+
+        .credential-save-check {
+            margin-top: 14px;
+            display: flex;
+            align-items: flex-start;
+            gap: 10px;
+            border-radius: 10px;
+            border: 1px solid #fef3c7;
+            background: #fffbeb;
+            padding: 12px;
+            color: #92400e;
+            font-size: 0.85rem;
+            font-weight: 600;
+            line-height: 1.5;
+        }
+
+        .app-shell {
+            min-height: 100vh;
+            padding: 16px;
+        }
+
+        .app-container {
+            width: min(1400px, 100%);
+            margin: 0 auto;
+        }
+
+        .page-header {
+            border-radius: 14px;
+            padding: 20px 24px;
+            animation: panel-fade-up .25s ease both;
+        }
+
+        .page-header__row {
+            display: flex;
+            justify-content: space-between;
+            align-items: flex-start;
+            gap: 20px;
+        }
+
+        .page-brand {
+            min-width: 0;
+        }
+
+        .page-actions {
+            display: flex;
+            align-items: center;
+            justify-content: flex-end;
+            gap: 10px;
+            flex-wrap: wrap;
+        }
+
+        .status-dot {
+            width: 8px;
+            height: 8px;
+            border-radius: 999px;
+            display: inline-block;
+            flex-shrink: 0;
+        }
+
+        .warning-banner {
+            margin-top: 14px;
+            border-radius: 10px;
+            border: 1px solid #fef3c7;
+            background: #fffbeb;
+            color: #92400e;
+            padding: 12px 16px;
+            font-size: 0.875rem;
+            animation: panel-fade-up .25s ease both;
+        }
+
+        .workspace-grid {
+            margin-top: 24px;
+            display: grid;
+            grid-template-columns: 240px minmax(0, 1fr);
+            gap: 24px;
+            align-items: start;
+        }
+
+        .sidebar-panel {
+            border-radius: 14px;
+            padding: 12px;
+            position: sticky;
+            top: 16px;
+            animation: panel-fade-up .25s ease both;
+        }
+
+        .menu-stack {
+            display: flex;
+            flex-direction: column;
+            gap: 4px;
+        }
+
+        .content-stack {
+            display: flex;
+            flex-direction: column;
+            gap: 20px;
+            min-width: 0;
+            align-self: start;
+        }
+
+        .mobile-bottom-nav {
+            display: none;
+        }
+
+        .section-panel {
+            border-radius: 14px;
+            padding: 20px 24px;
+            animation: panel-fade-up .3s ease both;
+        }
+
+        .table-scroll tbody tr {
+            transition: background .1s ease;
+        }
+
+        .table-scroll tbody tr:hover {
+            background: #f9fafb;
+        }
+
+        .batch-bar-enter-active {
+            transition: all .25s ease;
+        }
+        .batch-bar-leave-active {
+            transition: all .2s ease;
+        }
+        .batch-bar-enter-from {
             opacity: 0;
-            left: -2rem;
-            transform: translateY(10px);
-            transition: all 0.3s cubic-bezier(0.4, 0, 0.2, 1);
+            transform: translateY(-10px);
         }
-
-        .group:hover .tooltip-content {
-            visibility: visible;
-            opacity: 1;
-            transform: translateY(0);
-        }
-
-        @media (min-width: 768px) {
-            .tooltip-content {
-                left: 50%;
-                transform: translateY(10px) translateX(-50%);
-            }
-
-            .group:hover .tooltip-content {
-                transform: translateY(0) translateX(-50%);
-            }
-        }
-
-        .dropdown-enter-active,
-        .dropdown-leave-active {
-            transition: all 0.2s ease;
-        }
-
-        .dropdown-enter-from,
-        .dropdown-leave-to {
+        .batch-bar-leave-to {
             opacity: 0;
             transform: translateY(-10px);
         }
 
-        body {
-            background-color: #F2F2F7;
+        .section-head {
+            display: flex;
+            justify-content: space-between;
+            align-items: flex-start;
+            gap: 18px;
+            flex-wrap: wrap;
         }
 
-        /* Chart Modal Animations */
-        .chart-enter-active,
-        .chart-leave-active {
-            transition: all 0.3s ease;
+        .toolbar-grid {
+            display: grid;
+            gap: 12px;
+            align-items: center;
         }
 
-        .chart-enter-from,
-        .chart-leave-to {
-            opacity: 0;
-            transform: translateY(10px);
+        .toolbar-grid.status-toolbar {
+            display: flex;
+            flex-wrap: wrap;
+            gap: 12px;
+            align-items: center;
+        }
+        .status-toolbar app-select { flex: 0 0 220px; }
+        .status-toolbar .glass-input { flex: 1 1 260px; min-width: 220px; }
+        .status-toolbar .ghost-button,
+        .status-toolbar .solid-button { flex: 0 0 auto; min-width: 104px; }
+
+        .toolbar-grid.manage-toolbar {
+            display: flex;
+            flex-wrap: wrap;
+            gap: 12px;
+            align-items: center;
+            width: 100%;
+        }
+        .manage-toolbar app-select:nth-of-type(1) { flex: 0 0 220px; }
+        .manage-toolbar app-select:nth-of-type(2),
+        .manage-toolbar app-select:nth-of-type(3) { flex: 0 0 180px; }
+        .manage-toolbar .glass-input { flex: 1 1 260px; min-width: 220px; }
+        .manage-toolbar .solid-button { flex: 0 0 auto; min-width: 104px; }
+
+        .manage-head-actions {
+            display: flex;
+            align-items: center;
+            justify-content: flex-end;
+            gap: 12px;
+            flex-wrap: wrap;
+        }
+
+        .status-card-grid {
+            margin-top: 24px;
+            display: grid;
+            grid-template-columns: repeat(3, minmax(0, 1fr));
+            gap: 16px;
+        }
+
+        .settings-grid {
+            margin-top: 24px;
+            display: grid;
+            grid-template-columns: minmax(360px, 420px) minmax(0, 1fr);
+            gap: 24px;
+            align-items: start;
+        }
+
+        .two-col-grid {
+            display: grid;
+            grid-template-columns: repeat(2, minmax(0, 1fr));
+            gap: 12px;
+        }
+
+        .mobile-manage-grid {
+            margin-top: 24px;
+            display: none;
+            gap: 16px;
+        }
+
+        .top-action-row {
+            display: flex;
+            gap: 12px;
+            flex-wrap: wrap;
+            align-items: center;
+        }
+
+        .muted-text {
+            color: var(--muted);
+        }
+
+        .muted-text-strong {
+            color: #7c8698;
+        }
+
+        .body-text {
+            color: #334155;
+        }
+
+        .text-dark-button {
+            background: #1f2937 !important;
+            color: #fff !important;
+        }
+
+        .compact-button {
+            padding: 0.38rem 0.62rem !important;
+            min-width: 48px;
+            font-size: 0.74rem;
+        }
+
+        .log-card {
+            border-radius: 22px !important;
+            padding: 1rem !important;
+        }
+
+        .desktop-visible {
+            display: block;
+        }
+
+        .mobile-visible {
+            display: none;
+        }
+
+        .page-header p,
+        .section-panel p,
+        .section-panel label,
+        .section-panel span,
+        .section-panel div,
+        .section-panel td,
+        .section-panel th {
+            word-break: break-word;
+        }
+
+        .full-width-button {
+            min-width: 120px;
+        }
+
+        .text-slate-700 {
+            color: #334155;
+        }
+
+        .text-slate-500 {
+            color: #6f7787;
+        }
+
+        .text-slate-400 {
+            color: #7c8698;
+        }
+
+        .text-\[\#6f7787\] {
+            color: #6f7787;
+        }
+
+        .text-\[\#7c8698\] {
+            color: #7c8698;
+        }
+
+        .text-\[\#334155\] {
+            color: #334155;
+        }
+
+        .rounded-\[18px\] {
+            border-radius: 18px;
+        }
+
+        .rounded-\[20px\] {
+            border-radius: 20px;
+        }
+
+        .rounded-\[22px\] {
+            border-radius: 22px;
+        }
+
+        .rounded-\[24px\] {
+            border-radius: 24px;
+        }
+
+        .rounded-\[30px\] {
+            border-radius: 30px;
+        }
+
+        .rounded-\[34px\] {
+            border-radius: 34px;
+        }
+
+        .rounded-\[38px\] {
+            border-radius: 38px;
+        }
+
+        .tracking-\[0\.18em\] {
+            letter-spacing: 0.18em;
+        }
+
+        .tracking-\[0\.12em\] {
+            letter-spacing: 0.12em;
+        }
+
+        .min-w-\[120px\] {
+            min-width: 120px;
+        }
+
+        .\!rounded-\[22px\] {
+            border-radius: 22px !important;
+        }
+
+        .\!p-4 {
+            padding: 1rem !important;
+        }
+
+        .\!px-3 {
+            padding-left: 0.75rem !important;
+            padding-right: 0.75rem !important;
+        }
+
+        .\!py-2 {
+            padding-top: 0.5rem !important;
+            padding-bottom: 0.5rem !important;
+        }
+
+        @media (prefers-reduced-motion: reduce) {
+            *,
+            *::before,
+            *::after {
+                animation: none !important;
+                transition: none !important;
+                scroll-behavior: auto !important;
+            }
+        }
+
+        @media (max-width: 1279px) {
+            .status-card-grid {
+                grid-template-columns: repeat(2, minmax(0, 1fr));
+            }
+
+            .settings-grid {
+                grid-template-columns: 1fr;
+            }
+        }
+
+        @media (max-width: 1180px) {
+            .workspace-grid {
+                grid-template-columns: 1fr;
+            }
+
+            .sidebar-panel {
+                position: static;
+            }
+
+            .toolbar-grid.manage-toolbar {
+                align-items: stretch;
+            }
+        }
+
+        @media (max-width: 1023px) {
+            .page-header {
+                padding: 22px;
+            }
+
+            .page-header__row {
+                flex-direction: column;
+            }
+
+            .page-actions {
+                width: 100%;
+                justify-content: flex-start;
+            }
+
+            .section-panel {
+                padding: 20px;
+            }
+
+            .toolbar-grid.status-toolbar,
+            .toolbar-grid.manage-toolbar {
+                align-items: stretch;
+            }
+
+            .manage-head-actions {
+                width: 100%;
+                justify-content: flex-start;
+            }
+
+            .status-toolbar app-select,
+            .status-toolbar .glass-input,
+            .status-toolbar .ghost-button,
+            .status-toolbar .solid-button,
+            .manage-toolbar app-select,
+            .manage-toolbar .glass-input,
+            .manage-toolbar .solid-button {
+                flex: 1 1 100%;
+                min-width: 0;
+            }
+
+            .status-card-grid {
+                grid-template-columns: 1fr;
+            }
+
+            .desktop-visible {
+                display: none !important;
+            }
+
+            .mobile-visible,
+            .mobile-manage-grid {
+                display: grid;
+            }
+
+            .account-row {
+                display: none;
+            }
+
+            .mobile-stack {
+                display: block;
+            }
+
+            .account-billing {
+                max-width: none;
+                text-align: left;
+                margin: 0;
+            }
+
+            .sidebar-panel {
+                display: none;
+            }
+
+            .content-stack {
+                gap: 18px;
+            }
+
+            .modal-form-grid {
+                grid-template-columns: 1fr;
+            }
+
+            .summary-list {
+                grid-template-columns: 1fr;
+            }
+        }
+
+        @media (min-width: 768px) {
+            .md\:grid-cols-2 {
+                grid-template-columns: repeat(2, minmax(0, 1fr));
+            }
+        }
+
+        @media (max-width: 1023px) {
+            .app-shell {
+                padding: 14px 14px 108px;
+            }
+
+            .mobile-bottom-nav {
+                position: fixed;
+                left: 14px;
+                right: 14px;
+                bottom: 14px;
+                z-index: 45;
+                display: grid;
+                grid-template-columns: repeat(5, minmax(0, 1fr));
+                gap: 8px;
+                padding: 10px;
+                border-radius: 24px;
+                background: rgba(255, 255, 255, 0.9);
+                border: 1px solid rgba(148, 163, 184, 0.18);
+                box-shadow: 0 20px 40px rgba(15, 23, 42, 0.12);
+                backdrop-filter: blur(16px);
+            }
+
+            .mobile-bottom-nav__button {
+                display: flex;
+                flex-direction: column;
+                align-items: center;
+                justify-content: center;
+                gap: 6px;
+                min-height: 58px;
+                padding: 8px 4px;
+                border-radius: 18px;
+                color: #64748b;
+                transition: background .18s ease, color .18s ease, transform .18s ease;
+            }
+
+            .mobile-bottom-nav__button.active {
+                background: rgba(230, 244, 241, 0.95);
+                color: #0f172a;
+                box-shadow: inset 0 0 0 1px rgba(15, 118, 110, 0.12);
+            }
+
+            .mobile-bottom-nav__button span:last-child {
+                font-size: 0.68rem;
+                font-weight: 700;
+                letter-spacing: 0.02em;
+            }
+        }
+
+        @media (max-width: 767px) {
+            .metric-card {
+                padding: 1rem;
+            }
+
+            .page-header,
+            .section-panel {
+                border-radius: 24px;
+            }
+
+            .glass-input,
+            .glass-select,
+            .glass-textarea {
+                padding: 0.75rem 0.85rem;
+                border-radius: 16px;
+            }
+
+            .two-col-grid {
+                grid-template-columns: 1fr;
+            }
+
+            .mobile-stack .row-actions {
+                max-width: none;
+                width: 100%;
+                justify-content: stretch !important;
+                flex-wrap: nowrap;
+                gap: 10px;
+            }
+
+            .mobile-stack .row-actions > button {
+                flex: 1 1 0;
+            }
         }
     </style>
 </head>
 
-<body class="text-[#1C1C1E]">
+<body>
+    <div id="app" v-cloak class="app-shell">
+        <div class="app-container">
+            <header v-if="initialized && !loadingCheckInit && !criticalError && isAdmin" class="glass-panel page-header">
+                <div class="page-header__row">
+                    <div class="page-brand">
+                        <div class="flex items-center gap-3">
+                            <div class="h-12 w-12 rounded-2xl bg-[#1f2937] text-white flex items-center justify-center text-lg font-black">C</div>
+                            <div>
+                                <p class="subtle-label">云服务器流量管理</p>
+                                <h1 class="text-2xl font-black tracking-tight md:text-3xl">ECS 服务器管理</h1>
+                            </div>
+                        </div>
+                        <p class="max-w-3xl text-sm leading-6 text-slate-500" style="margin-top: 12px;">
+                            将实例状态、实例管理、账号管理、系统设置和日志审计拆分到独立菜单，统一以账号组驱动实例同步，避免状态页和管理页数据漂移。
+                        </p>
+                    </div>
 
-    <div id="app" v-cloak class="min-h-screen p-6 md:p-12 flex flex-col items-center">
-
-        <div v-if="cronWarning && initialized && !criticalError"
-            class="w-full max-w-5xl mb-6 bg-yellow-50 border-l-4 border-yellow-400 p-4 rounded-r-xl shadow-sm animate-fade-in">
-            <div class="flex">
-                <div class="flex-shrink-0">
-                    <svg class="h-5 w-5 text-yellow-400" viewBox="0 0 20 20" fill="currentColor">
-                        <path fill-rule="evenodd"
-                            d="M8.257 3.099c.765-1.36 2.722-1.36 3.486 0l5.58 9.92c.75 1.334-.213 2.98-1.742 2.98H4.42c-1.53 0-2.493-1.646-1.743-2.98l5.58-9.92zM11 13a1 1 0 11-2 0 1 1 0 012 0zm-1-8a1 1 0 00-1 1v3a1 1 0 002 0V6a1 1 0 00-1-1z"
-                            clip-rule="evenodd" />
-                    </svg>
+                    <div class="page-actions">
+                        <div v-if="initialized" class="chip">
+                            <span class="status-dot" :style="{ background: cronWarning ? '#eab308' : '#22c55e' }"></span>
+                            <span>{{ cronWarning ? '自动检测可能中断' : '自动检测正常' }}</span>
+                        </div>
+                        <button v-if="initialized && !checkingLogin && !criticalError" @click="toggleAdmin"
+                            class="solid-button full-width-button">
+                            {{ isAdmin ? '退出管理' : '管理员登录' }}
+                        </button>
+                    </div>
                 </div>
-                <div class="ml-3">
-                    <p class="text-sm text-yellow-700">
-                        <span class="font-bold">监控心跳异常：</span>
-                        计划任务可能未运行，请检查 Crontab 设置 (超过 3 分钟无响应)。
-                    </p>
+            </header>
+
+            <div v-if="isAdmin && cronWarning && initialized && !criticalError" class="warning-banner">
+                超过 3 分钟未检测到自动检测任务，请检查后台监控任务是否正常运行。
+            </div>
+
+            <div v-if="initialized && !loadingCheckInit && !criticalError && !isAdmin" class="fixed inset-0 z-40 flex items-center justify-center p-4">
+                <div class="glass-panel login-gate-card">
+                    <p class="subtle-label">管理员登录</p>
+                    <h2 class="mt-2 text-2xl font-black">管理员登录</h2>
+                    <p class="mt-3 text-sm leading-6 text-slate-500">登录后才可查看实例状态、实例管理、账号配置、系统设置和系统日志。</p>
+                    <input
+                        v-model="passwordInput"
+                        @keyup.enter="performLogin"
+                        type="password"
+                        class="glass-input mt-6"
+                        placeholder="请输入管理员密码"
+                    >
+                    <div class="login-gate-actions flex">
+                        <button @click="performLogin" class="solid-button flex-1">登录</button>
+                    </div>
+                </div>
+            </div>
+
+            <div v-if="initialized && !loadingCheckInit && !criticalError && isAdmin" class="workspace-grid">
+                <aside class="glass-panel sidebar-panel">
+                    <div class="menu-stack">
+                        <button v-for="item in menuItems" :key="item.key" @click="currentMenu = item.key"
+                            class="menu-button" :class="{ active: currentMenu === item.key }">
+                            <span class="menu-icon" v-html="item.icon"></span>
+                            <span class="flex-1">{{ item.label }}</span>
+                        </button>
+                    </div>
+                </aside>
+
+                <main class="content-stack">
+                    <section v-if="currentMenu === 'status'" class="glass-panel section-panel">
+                        <div class="section-head">
+                            <div>
+                                <p class="subtle-label">实例总览</p>
+                                <h2 class="section-title">实例状态</h2>
+                                <p class="mt-1 text-sm text-slate-500">以卡片方式展示所有已同步实例，可按账号筛选，并支持通过备注或实例标识搜索。</p>
+                            </div>
+
+                            <div class="toolbar-grid status-toolbar">
+                                <app-select
+                                    v-model="statusFilter.account"
+                                    class="glass-select"
+                                    placeholder="所有账号"
+                                    :options="[{ value: '', label: '所有账号' }, ...accountOptions]"
+                                />
+                                <input v-model="statusFilter.search" class="glass-input" placeholder="搜索备注、实例名称或实例编号">
+                                <button @click="syncCloudInstances" class="ghost-button" :disabled="syncingInstances">
+                                    {{ syncingInstances ? '同步中...' : '手动同步' }}
+                                </button>
+                                <button @click="fetchStatusData" class="solid-button" :disabled="loading">
+                                    {{ loading ? '刷新中...' : '刷新状态' }}
+                                </button>
+                            </div>
+                        </div>
+
+                        <div class="status-card-grid">
+                            <article v-for="item in filteredStatusInstances" :key="'card-' + item.id" class="metric-card">
+                                <div class="flex items-start justify-between gap-3">
+                                    <div class="min-w-0">
+                                        <p class="subtle-label">备注</p>
+                                        <h3 class="mt-1 truncate text-lg font-bold">{{ item.remark || item.instanceName || item.instanceId }}</h3>
+                                        <p class="mt-1 text-xs text-[#7c8698]">{{ item.accountLabel }}</p>
+                                    </div>
+                                    <div class="flex flex-col items-end gap-1.5 flex-shrink-0">
+                                        <span v-if="!(item.status === 'Stopped' && item.stoppedMode === 'StopCharging')" class="status-pill" :class="statusClass(item.instanceStatus)">
+                                            {{ statusText(item.instanceStatus) }}
+                                        </span>
+                                        <span v-else class="status-pill status-unknown !bg-slate-100 !border !border-slate-200 !text-slate-600">
+                                            节省停机
+                                        </span>
+                                        <span v-if="item.status === 'Running' && item.healthStatus === 'Initializing'" class="status-pill status-transition !text-[10px] animate-pulse">
+                                            操作系统启动中
+                                        </span>
+                                    </div>
+                                </div>
+
+                                <div class="mt-8 space-y-5">
+                                    <div class="grid grid-cols-2 gap-5">
+                                        <div class="min-w-0">
+                                            <p class="text-[13px] text-[#7c8698] mb-1">硬件系统</p>
+                                            <p class="text-[14px] text-slate-700 truncate" :title="item.osName">{{ item.osName || '-' }}</p>
+                                        </div>
+                                        <div class="min-w-0">
+                                            <p class="text-[13px] text-[#7c8698] mb-1">规格</p>
+                                            <p class="text-[14px] text-slate-700 font-semibold">{{ item.cpu }} 核 {{ item.memory < 1024 ? item.memory + ' MiB' : (item.memory/1024).toFixed(1) + ' GiB' }}</p>
+                                        </div>
+                                    </div>
+                                    <div class="grid grid-cols-1">
+                                        <div class="min-w-0">
+                                            <p class="text-[13px] text-[#7c8698] mb-1">公网 IP</p>
+                                            <p class="text-[14px] text-slate-700 font-mono">{{ isAdmin ? (item.publicIp || '-') : '登录后可见' }}</p>
+                                        </div>
+                                    </div>
+                                </div>
+
+                                <div class="mt-8">
+                                    <div class="flex items-end justify-between mb-3">
+                                        <span class="text-[12px] text-[#7c8698]">流量消耗 ({{ item.percentageOfUse }}%)</span>
+                                        <span class="text-[15px] font-bold text-slate-800">
+                                            {{ formatTrafficValue(item.flow_used) }} <span class="text-[#7c8698] font-normal text-[14px]">/ {{ item.flow_total }} GB</span>
+                                        </span>
+                                    </div>
+                                    <div class="progress-track h-2">
+                                        <div class="progress-fill h-full" :class="{ warning: item.rate95 }"
+                                            :style="{ width: Math.min(item.percentageOfUse, 100) + '%' }"></div>
+                                    </div>
+                                </div>
+
+                                <div class="mt-6 flex items-center justify-between pt-4 text-xs text-[#7c8698]">
+                                    <div class="flex items-center gap-1.5 text-[11px] text-[#7c8698]">
+                                        <svg class="h-3.5 w-3.5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 8v4l3 3m6-3a9 9 0 11-18 0 9 9 0 0118 0z"></path></svg>
+                                        <span>{{ item.lastUpdated }}</span>
+                                    </div>
+                                    <button v-if="isAdmin" @click="refreshInstanceCard(item.id)" class="ghost-button !py-1.5 !px-3" :disabled="isRefreshingInstance(item.id)">
+                                        <div class="flex items-center gap-1.5">
+                                            <svg :class="{'animate-spin': isRefreshingInstance(item.id)}" class="h-3.5 w-3.5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 4v5h.582m15.356 2A8.001 8.001 0 004.582 9m0 0H9m11 11v-5h-.581m0 0a8.003 8.003 0 01-15.357-2m15.357 2H15"></path></svg>
+                                            {{ isRefreshingInstance(item.id) ? '刷新中' : '刷新状态' }}
+                                        </div>
+                                    </button>
+                                </div>
+                            </article>
+
+                            <div v-if="filteredStatusInstances.length === 0" class="metric-card" style="grid-column: 1 / -1;">
+                                <p class="text-center text-sm text-[#7c8698]">暂无实例状态数据。</p>
+                            </div>
+                        </div>
+                    </section>
+
+                    <section v-if="currentMenu === 'manage' && isAdmin" class="glass-panel section-panel">
+                        <div class="section-head">
+                            <div>
+                                <p class="subtle-label">实例管理</p>
+                                <h2 class="section-title">实例管理</h2>
+                                <p class="mt-1 text-sm text-slate-500">管理所有账号组同步下来的实例，可按账号、区域、状态过滤并执行批量操作。</p>
+                            </div>
+                            <div class="manage-head-actions">
+                                <button @click="openCreateEcsModal" class="solid-button">
+                                    一键创建 ECS
+                                </button>
+                                <button @click="fetchAllInstances(true)" class="ghost-button" :disabled="fetchingAllInstances">
+                                    {{ fetchingAllInstances ? '同步中...' : '手动同步' }}
+                                </button>
+                            </div>
+
+                            <div class="toolbar-grid manage-toolbar">
+                                <app-select
+                                    v-model="manageFilter.account"
+                                    class="glass-select"
+                                    placeholder="所有账号"
+                                    :options="[{ value: '', label: '所有账号' }, ...accountOptions]"
+                                />
+                                <app-select
+                                    v-model="manageFilter.region"
+                                    class="glass-select"
+                                    placeholder="所有区域"
+                                    :options="[{ value: '', label: '所有区域' }, ...aliyunRegions.map(region => ({ value: region.id, label: region.name }))]"
+                                />
+                                <app-select
+                                    v-model="manageFilter.status"
+                                    class="glass-select"
+                                    placeholder="所有状态"
+                                    :options="[
+                                        { value: '', label: '所有状态' },
+                                        { value: 'Running', label: '运行中' },
+                                        { value: 'Stopped', label: '已停止' },
+                                        { value: 'Starting', label: '启动中' },
+                                        { value: 'Stopping', label: '停止中' },
+                                        { value: 'Unknown', label: '未知' }
+                                    ]"
+                                />
+                                <input v-model="manageFilter.search" class="glass-input" placeholder="搜索备注、实例名称或实例编号">
+                            </div>
+                        </div>
+
+                        <transition name="batch-bar">
+                        <div v-if="selectedInstanceIds.length > 0" class="mt-5 flex flex-wrap items-center gap-3 rounded-xl border border-gray-200 bg-white px-5 py-3.5">
+                            <span class="chip">已选择 {{ selectedInstanceIds.length }} 台实例</span>
+                            <button @click="batchAction('start')" class="success-button">批量启动</button>
+                            <button @click="batchAction('stop')" class="warning-button">批量停止</button>
+                            <button @click="batchAction('delete')" class="danger-button">批量释放</button>
+                            <button @click="selectedInstanceIds = []" class="ghost-button">取消选择</button>
+                        </div>
+                        </transition>
+
+                        <div class="table-shell desktop-visible" style="margin-top: 24px;">
+                            <div class="bg-white/65 px-5 py-3 text-xs font-bold uppercase tracking-[0.18em] text-[#7c8698]">
+                                列表模式
+                            </div>
+                            <div class="overflow-x-auto">
+                                <div class="min-w-[1024px]">
+                                    <div class="account-row summary-table-head" style="grid-template-columns: 40px minmax(260px,2fr) 100px 80px minmax(120px,0.9fr) minmax(100px,0.7fr) minmax(140px,1fr) 140px;">
+                                    <div></div>
+                                    <div>账号 / 实例</div>
+                                    <div>区域</div>
+                                    <div>状态</div>
+                                    <div>规格</div>
+                                    <div>地址</div>
+                                    <div class="center-column">出口流量</div>
+                                    <div class="center-column">操作</div>
+                                </div>
+
+                                <div v-for="inst in filteredManagedInstances" :key="'manage-row-' + inst.id"
+                                    class="account-row"
+                                    style="grid-template-columns: 40px minmax(260px,2fr) 100px 80px minmax(120px,0.9fr) minmax(100px,0.7fr) minmax(140px,1fr) 140px;">
+                                    <div class="flex items-center">
+                                        <input v-model="selectedInstanceIds" type="checkbox" class="rounded" :value="inst.id">
+                                    </div>
+                                    <div class="summary-cell">
+                                        <div class="summary-primary truncate" :title="inst.accountLabel || inst.remark || inst.instanceName">{{ inst.accountLabel || inst.remark || inst.instanceName }}</div>
+                                        <div class="summary-secondary font-mono truncate" :title="inst.instanceId">{{ inst.instanceId }}</div>
+                                    </div>
+                                    <div class="summary-cell">
+                                        <div class="summary-primary">{{ inst.regionName }}</div>
+                                    </div>
+                                    <div class="summary-cell">
+                                        <span class="status-pill" :class="statusClass(inst.instanceStatus)">{{ statusText(inst.instanceStatus) }}</span>
+                                    </div>
+                                    <div class="summary-cell">
+                                        <div class="summary-primary text-sm">{{ inst.instanceType || '-' }}</div>
+                                        <div v-if="inst.internetMaxBandwidthOut" class="summary-secondary">{{ inst.internetMaxBandwidthOut }} Mbps</div>
+                                    </div>
+                                    <div class="summary-cell">
+                                        <div class="summary-primary font-mono text-sm">{{ inst.publicIp || inst.privateIp || '-' }}</div>
+                                    </div>
+                                    <div class="summary-cell center-column">
+                                        <div class="account-usage">
+                                            <div class="account-usage__meta single">
+                                                <span>{{ formatTrafficValue(inst.flow_used) }} / {{ inst.flow_total }} GB</span>
+                                            </div>
+                                            <div class="progress-track account-usage__bar">
+                                                <div class="progress-fill" :class="{ warning: inst.rate95 }"
+                                                    :style="{ width: Math.min(inst.percentageOfUse, 100) + '%' }"></div>
+                                            </div>
+                                        </div>
+                                    </div>
+                                    <div class="summary-cell center-column">
+                                        <div class="row-actions">
+                                            <button v-if="inst.instanceStatus === 'Stopped' || inst.instanceStatus === 'Unknown'" @click="controlInstance(inst.id, 'start')" class="success-button !px-3 !py-1.5 !text-xs" :disabled="isRefreshingInstance(inst.id)">启动</button>
+                                            <button v-if="inst.instanceStatus === 'Running'" @click="controlInstance(inst.id, 'stop')" class="warning-button !px-3 !py-1.5 !text-xs" :disabled="isRefreshingInstance(inst.id)">停止</button>
+                                            <button @click="deleteInstance(inst.id)" class="danger-button !px-3 !py-1.5 !text-xs" :disabled="isRefreshingInstance(inst.id)">释放</button>
+                                        </div>
+                                    </div>
+                                </div>
+
+                                <div v-if="filteredManagedInstances.length === 0" class="px-5 py-12 text-center text-sm text-[#7c8698]">
+                                    暂无实例数据，点击"手动同步"获取最新实例。
+                                </div>
+                                </div>
+                            </div>
+                        </div>
+
+                        <div class="mobile-manage-grid">
+                            <article v-for="inst in filteredManagedInstances" :key="'manage-card-' + inst.id" class="metric-card">
+                                <div class="flex items-start justify-between gap-3">
+                                    <div>
+                                        <p class="text-base font-bold">{{ inst.remark || inst.instanceName || inst.instanceId }}</p>
+                                        <p class="mt-1 font-mono text-xs text-[#7c8698]">{{ inst.instanceId }}</p>
+                                    </div>
+                                    <input v-model="selectedInstanceIds" type="checkbox" class="rounded" :value="inst.id">
+                                </div>
+                                <div class="mt-4 grid grid-cols-2 gap-3 text-sm">
+                                    <div><span class="text-[#7c8698]">账号</span><p class="mt-1 text-xs">{{ inst.accountLabel }}</p></div>
+                                    <div><span class="text-[#7c8698]">区域</span><p class="mt-1">{{ inst.regionName }}</p></div>
+                                    <div><span class="text-[#7c8698]">状态</span><p class="mt-1"><span class="status-pill" :class="statusClass(inst.instanceStatus)">{{ statusText(inst.instanceStatus) }}</span></p></div>
+                                    <div><span class="text-[#7c8698]">地址</span><p class="mt-1 font-mono text-xs">{{ inst.publicIp || inst.privateIp || '-' }}</p></div>
+                                    <div><span class="text-[#7c8698]">公网带宽峰值</span><p class="mt-1">{{ inst.internetMaxBandwidthOut ? inst.internetMaxBandwidthOut + ' Mbps' : '-' }}</p></div>
+                                </div>
+                                <div class="mt-4 flex gap-2">
+                                    <button v-if="inst.instanceStatus === 'Stopped' || inst.instanceStatus === 'Unknown'" @click="controlInstance(inst.id, 'start')" class="success-button flex-1" :disabled="isRefreshingInstance(inst.id)">启动</button>
+                                    <button v-if="inst.instanceStatus === 'Running'" @click="controlInstance(inst.id, 'stop')" class="warning-button flex-1" :disabled="isRefreshingInstance(inst.id)">停止</button>
+                                    <button @click="deleteInstance(inst.id)" class="danger-button flex-1" :disabled="isRefreshingInstance(inst.id)">释放</button>
+                                </div>
+                            </article>
+
+                            <div v-if="filteredManagedInstances.length === 0" class="metric-card">
+                                <p class="text-center text-sm text-[#7c8698]">暂无实例数据。</p>
+                            </div>
+                        </div>
+                    </section>
+
+                    <section v-if="currentMenu === 'accounts' && isAdmin" class="glass-panel section-panel">
+                        <div class="section-head">
+                            <div>
+                                <p class="subtle-label">账号管理</p>
+                                <h2 class="section-title">账号管理</h2>
+                                <p class="mt-1 text-sm text-slate-500">账号通过弹窗维护。每次新增或编辑保存后，会自动同步该账号在所选区域下的全部实例，并把备注一并带到实例卡片中。</p>
+                            </div>
+                            <div class="top-action-row">
+                                <button @click="openCreateAccountModal" class="ghost-button">新增账号</button>
+                            </div>
+                        </div>
+
+                        <div class="table-shell desktop-visible" style="margin-top: 24px;">
+                            <div class="bg-white/65 px-4 py-3 text-xs font-bold uppercase tracking-[0.18em] text-[#7c8698]">
+                                列表模式
+                            </div>
+                            <div>
+                                <div class="account-row summary-table-head">
+                                    <div>备注</div>
+                                    <div>区域</div>
+                                    <div>站点</div>
+                                    <div class="center-column">账号流量</div>
+                                    <div class="center-column">消费情况</div>
+                                    <div class="center-column">操作</div>
+                                </div>
+
+                                <div v-for="(acc, idx) in config.Accounts" :key="'account-row-' + idx" class="account-row">
+                                    <div class="summary-cell">
+                                        <div class="summary-primary">{{ acc.remark || '未命名账号' }}</div>
+                                        <div class="summary-secondary">实例会同步到这个备注名下</div>
+                                    </div>
+                                    <div class="summary-cell">
+                                        <div class="summary-primary">{{ getRegionName(acc.regionId) }}</div>
+                                    </div>
+                                    <div class="summary-cell">
+                                        <div class="summary-primary">{{ getSiteTypeLabel(acc.siteType) }}</div>
+                                    </div>
+                                    <div class="summary-cell center-column">
+                                        <div class="account-usage">
+                                            <div class="account-usage__meta single">
+                                                <span>{{ formatTrafficValue(acc.usageUsed) }} / {{ acc.maxTraffic }} GB</span>
+                                            </div>
+                                            <div class="progress-track account-usage__bar">
+                                                <div class="progress-fill" :class="{ warning: (acc.usagePercent || 0) >= 95 }"
+                                                    :style="{ width: Math.min(acc.usagePercent || 0, 100) + '%' }"></div>
+                                            </div>
+                                        </div>
+                                    </div>
+                                    <div class="summary-cell center-column">
+                                        <div class="account-billing">
+                                            <template v-if="acc.billing && acc.billing.enabled && !acc.billing.error">
+                                                <div class="account-billing__line">
+                                                    本月消费
+                                                    <span class="account-billing__value">{{ formatCurrencyValue(acc.billing.monthly_cost, acc.billing.currency) }}</span>
+                                                </div>
+                                                <div class="account-billing__line">
+                                                    账户余额
+                                                    <span class="account-billing__value">{{ formatCurrencyValue(acc.billing.balance, acc.billing.currency) }}</span>
+                                                </div>
+                                                <div v-if="acc.billing.last_updated" class="account-billing__hint">{{ acc.billing.last_updated }} 更新</div>
+                                            </template>
+                                            <div v-else-if="acc.billing && acc.billing.error" class="account-billing__error">{{ acc.billing.error }}</div>
+                                            <div v-else class="account-billing__hint">未启用 费用中心</div>
+                                        </div>
+                                    </div>
+	                                    <div class="summary-cell center-column">
+	                                        <div class="row-actions">
+	                                            <button @click="syncAccount(idx)" class="ghost-button compact-button sync-button"
+                                                    :class="getAccountSyncButtonClass(idx)"
+                                                    :disabled="isSyncingAccount(idx)">
+	                                                {{ getAccountSyncLabel(idx) }}
+	                                            </button>
+	                                            <button @click="openEditAccountModal(idx)" class="ghost-button compact-button">编辑</button>
+	                                            <button @click="removeAccountRow(idx)" class="danger-button compact-button">删除</button>
+	                                        </div>
+	                                    </div>
+	                                </div>
+
+                                <div v-if="config.Accounts.length === 0" class="account-row">
+                                    <div class="summary-cell" style="grid-column: 1 / -1; text-align: center; color: #7c8698;">
+                                        还没有账号，点击“新增账号”开始配置。
+                                    </div>
+                                </div>
+                            </div>
+                        </div>
+
+                        <div class="mobile-stack" style="margin-top: 24px;">
+                            <article v-for="(acc, idx) in config.Accounts" :key="'account-card-' + idx" class="metric-card">
+                                <div class="flex items-center justify-between">
+                                    <h3 class="text-base font-bold">{{ acc.remark || `账号 ${idx + 1}` }}</h3>
+                                    <span class="text-xs text-[#7c8698]">{{ acc.instanceCount || 0 }} 台实例</span>
+                                </div>
+                                <div class="account-card-grid">
+                                    <div>区域：{{ getRegionName(acc.regionId) }}</div>
+                                    <div>站点：{{ getSiteTypeLabel(acc.siteType) }}</div>
+                                    <div>账号流量：{{ formatTrafficValue(acc.usageUsed) }} / {{ acc.maxTraffic }} GB</div>
+                                    <div class="progress-track">
+                                        <div class="progress-fill" :class="{ warning: (acc.usagePercent || 0) >= 95 }"
+                                            :style="{ width: Math.min(acc.usagePercent || 0, 100) + '%' }"></div>
+                                    </div>
+                                    <div v-if="acc.billing && acc.billing.enabled && !acc.billing.error">消费情况：本月消费 {{ formatCurrencyValue(acc.billing.monthly_cost, acc.billing.currency) }} / 余额 {{ formatCurrencyValue(acc.billing.balance, acc.billing.currency) }}</div>
+                                    <div v-else-if="acc.billing && acc.billing.error" class="account-billing__error">{{ acc.billing.error }}</div>
+                                    <div v-else class="account-billing__hint">消费情况：未启用 费用中心</div>
+	                                </div>
+	                                <div class="row-actions" style="margin-top: 16px;">
+	                                    <button @click="syncAccount(idx)" class="ghost-button !px-3 !py-2 sync-button"
+                                            :class="getAccountSyncButtonClass(idx)"
+                                            :disabled="isSyncingAccount(idx)">
+	                                        {{ getAccountSyncLabel(idx) }}
+	                                    </button>
+	                                    <button @click="openEditAccountModal(idx)" class="ghost-button !px-3 !py-2">编辑</button>
+	                                    <button @click="removeAccountRow(idx)" class="danger-button !px-3 !py-2">删除</button>
+	                                </div>
+                            </article>
+
+                            <div v-if="config.Accounts.length === 0" class="metric-card">
+                                <p class="text-center text-sm text-[#7c8698]">还没有账号，点击“新增账号”开始配置。</p>
+                            </div>
+                        </div>
+                    </section>
+
+                    <section v-if="currentMenu === 'settings' && isAdmin" class="glass-panel section-panel">
+                        <div>
+                            <p class="subtle-label">系统配置</p>
+                            <h2 class="section-title">系统设置</h2>
+                        </div>
+
+                        <div class="settings-grid">
+                            <div class="metric-card space-y-4">
+                                <div>
+                                    <p class="subtle-label">全局配置</p>
+                                    <h3 class="mt-1 text-lg font-bold">全局设置</h3>
+                                </div>
+                                <div class="space-y-3">
+                                    <div>
+                                        <label class="mb-2 block text-sm font-semibold text-[#6f7787]">管理员密码</label>
+                                        <input v-model="config.admin_password" type="text" class="glass-input">
+                                    </div>
+                                    <div class="two-col-grid">
+                                        <div>
+                                            <label class="mb-2 block text-sm font-semibold text-[#6f7787]">告警阈值 (%)</label>
+                                            <input v-model.number="config.traffic_threshold" type="number" class="glass-input" min="1" max="100">
+                                        </div>
+                                        <div>
+                                            <label class="mb-2 block text-sm font-semibold text-[#6f7787]">实例同步频率</label>
+                                            <app-select
+                                                v-model="config.api_interval"
+                                                class="glass-select"
+                                                :options="[
+                                                    { value: 60, label: '1 分钟' },
+                                                    { value: 180, label: '3 分钟' },
+                                                    { value: 300, label: '5 分钟' },
+                                                    { value: 600, label: '10 分钟' },
+                                                    { value: 1800, label: '30 分钟' }
+                                                ]"
+                                            />
+                                        </div>
+                                    </div>
+                                    <div class="two-col-grid">
+                                        <div>
+                                            <label class="mb-2 block text-sm font-semibold text-[#6f7787]">停机模式</label>
+                                            <app-select
+                                                v-model="config.shutdown_mode"
+                                                class="glass-select"
+                                                :options="[
+                                                    { value: 'KeepCharging', label: '普通停机' },
+                                                    { value: 'StopCharging', label: '节省停机' }
+                                                ]"
+                                            />
+                                        </div>
+                                        <div>
+                                            <label class="mb-2 block text-sm font-semibold text-[#6f7787]">阈值动作</label>
+                                            <app-select
+                                                v-model="config.threshold_action"
+                                                class="glass-select"
+                                                :options="[
+                                                    { value: 'stop_and_notify', label: '自动关机并告警' },
+                                                    { value: 'notify_only', label: '仅发送告警' }
+                                                ]"
+                                            />
+                                        </div>
+                                    </div>
+                                    <label class="switch-row flex items-center justify-between rounded-[18px] border border-slate-200/70 bg-white/70 px-4 py-3 text-sm">
+                                        <span>抢占式实例保活</span>
+                                        <span class="switch-control">
+                                            <input type="checkbox" v-model="config.keep_alive">
+                                            <span class="switch-slider"></span>
+                                        </span>
+                                    </label>
+                                    <label class="switch-row flex items-center justify-between gap-4 rounded-[18px] border border-slate-200/70 bg-white/70 px-4 py-3 text-sm">
+                                        <span>
+                                            <span class="block font-semibold text-[#1f2328]">每月 1 号自动开机</span>
+                                            <span class="mt-1 block text-xs leading-5 text-[#6f7787]">当实例处于已停机且未触发流量保护时，每月 1 号自动启动一次。</span>
+                                        </span>
+                                        <span class="switch-control shrink-0">
+                                            <input type="checkbox" v-model="config.monthly_auto_start">
+                                            <span class="switch-slider"></span>
+                                        </span>
+                                    </label>
+                                    <label class="switch-row flex items-center justify-between rounded-[18px] border border-slate-200/70 bg-white/70 px-4 py-3 text-sm">
+                                        <span>成本分析（费用中心）</span>
+                                        <span class="switch-control">
+                                            <input type="checkbox" v-model="config.enable_billing">
+                                            <span class="switch-slider"></span>
+                                        </span>
+                                    </label>
+                                </div>
+                            </div>
+
+                            <div class="metric-card">
+                                <div>
+                                    <p class="subtle-label">DDNS</p>
+                                    <h3 class="mt-1 text-lg font-bold">动态域名解析</h3>
+                                    <p class="mt-2 text-sm leading-6 text-[#6f7787]">
+                                        默认使用 Cloudflare。系统会在 ECS 创建、实例启动后和手动同步时，把公网 IP 写入 A 记录。
+                                    </p>
+                                </div>
+                                <div class="mt-5 space-y-3">
+                                    <label class="switch-row flex items-center justify-between rounded-[18px] border border-slate-200/70 bg-white/70 px-4 py-3 text-sm">
+                                        <span>启用 DDNS</span>
+                                        <span class="switch-control">
+                                            <input type="checkbox" v-model="config.Ddns.enabled">
+                                            <span class="switch-slider"></span>
+                                        </span>
+                                    </label>
+                                    <input type="hidden" v-model="config.Ddns.provider">
+                                    <div class="rounded-[18px] border border-slate-200/70 bg-white/70 px-4 py-3 text-sm">
+                                        <div class="font-bold text-[#1f2937]">Cloudflare</div>
+                                        <div class="mt-1 text-xs leading-5 text-[#7c8698]">当前仅支持 Cloudflare，后续可扩展其他 DNS 服务商。</div>
+                                    </div>
+                                    <div>
+                                        <label class="mb-2 block text-sm font-semibold text-[#6f7787]">Cloudflare API Token</label>
+                                        <input v-model="config.Ddns.cloudflare.token" type="password" class="glass-input" placeholder="需要 Zone DNS Edit 权限">
+                                    </div>
+                                    <div class="two-col-grid">
+                                        <div>
+                                            <label class="mb-2 block text-sm font-semibold text-[#6f7787]">根域名</label>
+                                            <input v-model="config.Ddns.domain" class="glass-input" placeholder="例如 example.com">
+                                        </div>
+                                        <div>
+                                            <label class="mb-2 block text-sm font-semibold text-[#6f7787]">Zone ID（可选）</label>
+                                            <input v-model="config.Ddns.cloudflare.zone_id" class="glass-input" placeholder="留空时自动查询">
+                                        </div>
+                                    </div>
+                                    <label class="switch-row flex items-center justify-between rounded-[18px] border border-slate-200/70 bg-white/70 px-4 py-3 text-sm">
+                                        <span>开启 Cloudflare 代理</span>
+                                        <span class="switch-control">
+                                            <input type="checkbox" v-model="config.Ddns.cloudflare.proxied">
+                                            <span class="switch-slider"></span>
+                                        </span>
+                                    </label>
+                                    <p class="text-xs leading-6 text-[#7c8698]">
+                                        必填：API Token 和根域名。Zone ID 可不填，系统会根据根域名自动查询。命名规则：单机器使用“账号备注.根域名”；同账号多机器使用“账号备注-实例备注或实例短 ID.根域名”。
+                                    </p>
+                                </div>
+                            </div>
+
+                            <div class="metric-card">
+                                <div class="tab-pill-group">
+                                    <button @click="currentNotifyTab = 'email'" class="ghost-button" :class="{ 'text-dark-button': currentNotifyTab === 'email' }">邮件</button>
+                                    <button @click="currentNotifyTab = 'telegram'" class="ghost-button" :class="{ 'text-dark-button': currentNotifyTab === 'telegram' }">Telegram</button>
+                                    <button @click="currentNotifyTab = 'webhook'" class="ghost-button" :class="{ 'text-dark-button': currentNotifyTab === 'webhook' }">接口回调</button>
+                                </div>
+
+                                <div v-if="currentNotifyTab === 'email'" class="mt-5 space-y-3">
+                                    <label class="switch-row flex items-center justify-between rounded-[18px] border border-slate-200/70 bg-white/70 px-4 py-3 text-sm">
+                                        <span>启用邮件推送</span>
+                                        <span class="switch-control">
+                                            <input type="checkbox" v-model="config.Notification.email_enabled">
+                                            <span class="switch-slider"></span>
+                                        </span>
+                                    </label>
+                                    <input v-model="config.Notification.email" class="glass-input" placeholder="接收邮箱">
+                                    <div class="two-col-grid">
+                                        <input v-model="config.Notification.host" class="glass-input" placeholder="邮件服务器地址">
+                                        <input v-model.number="config.Notification.port" type="number" class="glass-input" placeholder="端口">
+                                    </div>
+                                    <div class="grid gap-3 md:grid-cols-2">
+                                        <input v-model="config.Notification.username" class="glass-input" placeholder="邮箱账号">
+                                        <input v-model="config.Notification.password" type="password" class="glass-input" placeholder="邮箱密码或授权码">
+                                    </div>
+                                    <app-select
+                                        v-model="config.Notification.secure"
+                                        class="glass-select"
+                                        :options="[
+                                            { value: 'ssl', label: '安全加密' },
+                                            { value: 'tls', label: '传输加密' },
+                                            { value: '', label: '无加密' }
+                                        ]"
+                                    />
+                                    <button @click="sendTestEmail" class="solid-button" :disabled="sendingEmail">{{ sendingEmail ? '发送中...' : '测试邮件通知' }}</button>
+                                </div>
+
+                                <div v-if="currentNotifyTab === 'telegram'" class="mt-5 space-y-3">
+                                    <label class="switch-row flex items-center justify-between rounded-[18px] border border-slate-200/70 bg-white/70 px-4 py-3 text-sm">
+		                                        <span>启用 Telegram 通知</span>
+                                        <span class="switch-control">
+                                            <input type="checkbox" v-model="config.Notification.telegram.enabled">
+                                            <span class="switch-slider"></span>
+                                        </span>
+                                    </label>
+	                                    <input v-model="config.Notification.telegram.token" class="glass-input" placeholder="机器人令牌">
+	                                    <input v-model="config.Notification.telegram.chat_id" class="glass-input" placeholder="接收会话编号">
+                                    <app-select
+                                        v-model="config.Notification.telegram.proxy_type"
+                                        class="glass-select"
+                                        :options="[
+                                            { value: 'none', label: '不使用代理' },
+	                                            { value: 'custom', label: '自定义转发地址' },
+	                                            { value: 'socks5', label: '代理服务器' }
+                                        ]"
+                                    />
+	                                    <input v-if="config.Notification.telegram.proxy_type === 'custom'" v-model="config.Notification.telegram.proxy_url" class="glass-input" placeholder="自定义转发地址">
+                                    <div v-if="config.Notification.telegram.proxy_type === 'socks5'" class="two-col-grid">
+	                                        <input v-model="config.Notification.telegram.proxy_ip" class="glass-input" placeholder="代理地址">
+                                        <input v-model="config.Notification.telegram.proxy_port" class="glass-input" placeholder="代理端口">
+                                        <input v-model="config.Notification.telegram.proxy_user" class="glass-input" placeholder="代理账号">
+                                        <input v-model="config.Notification.telegram.proxy_pass" type="password" class="glass-input" placeholder="代理密码">
+                                    </div>
+	                                    <button @click="sendTestTelegram" class="solid-button" :disabled="testingTelegram">{{ testingTelegram ? '发送中...' : '测试 Telegram' }}</button>
+                                </div>
+
+                                <div v-if="currentNotifyTab === 'webhook'" class="mt-5 space-y-3">
+                                    <label class="switch-row flex items-center justify-between rounded-[18px] border border-slate-200/70 bg-white/70 px-4 py-3 text-sm">
+		                                        <span>启用接口回调</span>
+                                        <span class="switch-control">
+                                            <input type="checkbox" v-model="config.Notification.webhook.enabled">
+                                            <span class="switch-slider"></span>
+                                        </span>
+                                    </label>
+	                                    <input v-model="config.Notification.webhook.url" class="glass-input" placeholder="接口回调地址">
+                                    <div class="two-col-grid">
+                                        <app-select
+                                            v-model="config.Notification.webhook.method"
+                                            class="glass-select"
+                                            :options="[
+	                                                { value: 'GET', label: '读取请求' },
+	                                                { value: 'POST', label: '发送请求' }
+                                            ]"
+                                        />
+                                        <app-select
+                                            v-model="config.Notification.webhook.request_type"
+                                            class="glass-select"
+                                            :options="[
+	                                                { value: 'JSON', label: '数据格式' },
+	                                                { value: 'FORM', label: '表单格式' }
+                                            ]"
+                                        />
+                                    </div>
+	                                    <textarea v-model="config.Notification.webhook.headers" class="glass-textarea" placeholder='请求头配置，例如 {"Authorization":"Bearer xxx"}'></textarea>
+	                                    <textarea v-model="config.Notification.webhook.body" class="glass-textarea" placeholder='消息模板，例如 {"title":"#TITLE#","msg":"#MSG#"}'></textarea>
+                                    <button @click="sendTestWebhook" class="solid-button" :disabled="testingWebhook">{{ testingWebhook ? '发送中...' : '发送测试消息' }}</button>
+                                </div>
+                            </div>
+                        </div>
+
+                        <div class="mt-6 flex justify-end">
+                            <button @click="saveConfig" class="solid-button">保存系统设置</button>
+                        </div>
+                    </section>
+
+                    <section v-if="currentMenu === 'logs' && isAdmin" class="glass-panel section-panel">
+                        <div class="section-head">
+                            <div>
+                                <p class="subtle-label">系统日志</p>
+                                <h2 class="section-title">系统日志</h2>
+                            </div>
+                            <div class="tab-pill-group">
+                                <button @click="currentLogTab = 'action'; fetchLogs()" class="ghost-button" :class="{ 'text-dark-button': currentLogTab === 'action' }">动作日志</button>
+                                <button @click="currentLogTab = 'heartbeat'; fetchLogs()" class="ghost-button" :class="{ 'text-dark-button': currentLogTab === 'heartbeat' }">心跳日志</button>
+                                <button @click="clearLogs" class="danger-button">清空</button>
+                            </div>
+                        </div>
+
+                        <div class="mt-5 space-y-3">
+                            <article v-for="log in systemLogs" :key="log.id || log.time_str + log.message" class="metric-card log-card">
+                                <div class="flex flex-wrap items-center justify-between gap-2">
+                                    <div class="flex items-center gap-2">
+                                        <span v-if="currentLogTab === 'action'" class="status-pill"
+                                            :class="log.type === 'warning' ? 'status-transition' : log.type === 'error' ? 'status-stopped' : 'status-running'">
+                                            {{ logTypeLabel(log.type) }}
+                                        </span>
+                                        <span class="text-xs text-[#7c8698] font-mono">{{ log.time_str }}</span>
+                                    </div>
+                                </div>
+                                <p class="mt-3 font-mono text-sm leading-6 text-[#334155]">{{ log.message }}</p>
+                            </article>
+
+                            <div v-if="systemLogs.length === 0" class="metric-card">
+                                <p class="text-center text-sm text-[#7c8698]">当前没有日志记录。</p>
+                            </div>
+                        </div>
+                    </section>
+                </main>
+            </div>
+
+            <nav v-if="initialized && !loadingCheckInit && !criticalError && isAdmin" class="mobile-bottom-nav">
+                <button
+                    v-for="item in menuItems"
+                    :key="'mobile-nav-' + item.key"
+                    @click="currentMenu = item.key"
+                    class="mobile-bottom-nav__button"
+                    :class="{ active: currentMenu === item.key }"
+                >
+                    <span v-html="item.icon"></span>
+                    <span>{{ item.label }}</span>
+                </button>
+            </nav>
+        </div>
+
+        <transition-group name="toast" tag="div" class="toast-stack">
+            <div v-for="toast in toasts" :key="toast.id" class="toast-card" :class="toast.type">
+                <div class="toast-title">{{ toast.type === 'error' ? '错误' : toast.type === 'success' ? '完成' : '提示' }}</div>
+                <div class="toast-message">{{ toast.message }}</div>
+            </div>
+        </transition-group>
+
+        <div v-if="dialogState.open" class="dialog-overlay">
+            <div class="glass-panel dialog-card">
+                <p class="subtle-label">{{ dialogState.mode === 'confirm' ? '操作确认' : '系统提示' }}</p>
+                <h2 class="mt-2 text-2xl font-black">{{ dialogState.title }}</h2>
+                <p class="mt-4 text-sm leading-7 text-[#475569]">{{ dialogState.message }}</p>
+                <div class="dialog-actions">
+                    <button v-if="dialogState.mode === 'confirm'" @click="resolveDialog(false)" class="ghost-button">
+                        {{ dialogState.cancelLabel }}
+                    </button>
+                    <button @click="resolveDialog(true)" class="solid-button">
+                        {{ dialogState.confirmLabel }}
+                    </button>
                 </div>
             </div>
         </div>
 
-        <header class="w-full max-w-5xl flex justify-between items-center mb-10 px-2">
-            <div>
-                <h1 class="text-2xl font-bold tracking-tight text-[#1C1C1E]">CDT Monitor</h1>
-                <p class="text-xs font-semibold tracking-widest text-gray-400 uppercase mt-1">Status & Control</p>
-            </div>
-
-            <button v-if="initialized && !checkingLogin && !criticalError" @click="toggleAdmin"
-                class="tap-effect px-5 py-2 rounded-full text-sm font-medium transition-all duration-300"
-                :class="isAdmin ? 'bg-[#1C1C1E] text-white shadow-lg' : 'bg-white text-gray-600 shadow-sm border border-gray-200'">
-                {{ isAdmin ? '退出管理' : '管理员登录' }}
-            </button>
-        </header>
-
-        <main v-if="initialized && !loading && !criticalError"
-            class="w-full max-w-5xl grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-6 animate-fade-in-up">
-            <div v-for="(item, index) in statusData" :key="index"
-                class="glass-panel rounded-[32px] p-6 flex flex-col justify-between relative overflow-hidden group hover:shadow-2xl transition-all duration-500">
-                <div class="absolute top-0 right-0 p-6 opacity-50 flex gap-2">
-                    <button v-if="isAdmin" @click="openChart(item.id, item.account)"
-                        class="p-1 rounded-full hover:bg-white/50 text-gray-400 hover:text-blue-500 transition-colors mr-1"
-                        title="查看流量历史">
-                        <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="2"
-                            stroke="currentColor" class="w-4 h-4">
-                            <path stroke-linecap="round" stroke-linejoin="round"
-                                d="M3 13.125C3 12.504 3.504 12 4.125 12h2.25c.621 0 1.125.504 1.125 1.125v6.75C7.5 20.496 6.996 21 6.375 21h-2.25A1.125 1.125 0 013 19.875v-6.75zM9.75 8.625c0-.621.504-1.125 1.125-1.125h2.25c.621 0 1.125.504 1.125 1.125v11.25c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 01-1.125-1.125V8.625zM16.5 4.125c0-.621.504-1.125 1.125-1.125h2.25C20.496 3 21 3.504 21 4.125v15.75c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 01-1.125-1.125V4.125z" />
-                        </svg>
-                    </button>
-
-                    <button v-if="isAdmin" @click="refreshSingle(item.id, index)"
-                        class="p-1 rounded-full hover:bg-white/50 text-gray-400 hover:text-gray-600 transition-colors"
-                        :class="{'animate-spin': refreshingMap[index]}" :disabled="refreshingMap[index]">
-                        <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="2"
-                            stroke="currentColor" class="w-4 h-4">
-                            <path stroke-linecap="round" stroke-linejoin="round"
-                                d="M16.023 9.348h4.992v-.001M2.985 19.644v-4.992m0 0h4.992m-4.993 0l3.181 3.183a8.25 8.25 0 0013.803-3.7M4.031 9.865a8.25 8.25 0 0113.803-3.7l3.181 3.182m0-4.991v4.99" />
-                        </svg>
-                    </button>
-                    <div class="w-2 h-2 rounded-full transition-colors duration-500 mt-1.5"
-                        :class="item.rate95 ? 'bg-red-500 shadow-[0_0_10px_rgba(255,59,48,0.5)]' : 'bg-green-500 shadow-[0_0_10px_rgba(52,199,89,0.5)]'">
-                    </div>
-                </div>
-
-                <div>
-                    <div class="flex items-center gap-2 mb-4">
-                        <span
-                            class="px-2 py-1 bg-gray-100/50 rounded-lg text-[10px] font-bold tracking-wider text-gray-500 uppercase border border-white/40">{{
-                            item.regionName }}</span>
-                        <span class="text-[10px] text-gray-400">{{ item.lastUpdated ? item.lastUpdated.split(' ')[1] :
-                            '' }} 更新</span>
-                    </div>
-                    <h3 class="text-3xl font-extrabold tracking-tighter text-[#1C1C1E]">
-                        {{ item.flow_used }} <span class="text-base font-medium text-gray-400">GB</span>
-                    </h3>
-                    <div class="flex justify-between items-end mt-1">
-                        <p class="text-xs font-semibold text-gray-400 uppercase tracking-wide">已用流量</p>
-                        <p class="text-xs font-medium text-gray-400">{{ item.percentageOfUse }}% / {{ item.flow_total
-                            }}G</p>
-                    </div>
-                    <div class="w-full h-1.5 bg-gray-200/50 rounded-full mt-3 overflow-hidden">
-                        <div class="h-full rounded-full transition-all duration-1000 ease-out"
-                            :class="item.rate95 ? 'bg-[#FF3B30]' : 'bg-[#1C1C1E]'"
-                            :style="{ width: Math.min(item.percentageOfUse, 100) + '%' }"></div>
-                    </div>
-                </div>
-                <div class="mt-6 pt-6 border-t border-gray-200/40 flex flex-col gap-2">
-                    <div class="flex justify-between items-center">
-                        <span class="text-sm font-medium text-gray-500">运行状态</span>
-                        <span class="text-sm font-bold" :class="getInstanceStatusColor(item.instanceStatus)">{{
-                            item.instanceStatus }}</span>
-                    </div>
-                    <div class="flex justify-between items-center">
-                        <span class="text-sm font-medium text-gray-500">账号</span>
-                        <span class="text-sm font-medium text-[#1C1C1E] font-mono">{{ item.account }}</span>
-                    </div>
-                    <div v-if="item.cost && item.cost.enabled" class="flex justify-between items-center">
-                        <span class="text-sm font-medium text-gray-500">本月费用</span>
-                        <span v-if="!item.cost.error" class="text-xs font-medium">
-                            <span v-if="item.cost.monthly_cost !== null" class="font-bold text-orange-500">{{ item.cost.currency === 'USD' ? '$' : '¥' }}{{
-                                item.cost.monthly_cost }}</span>
-                            <span v-if="item.cost.monthly_cost !== null && item.cost.balance !== null"
-                                class="text-gray-300 mx-1">|</span>
-                            <span v-if="item.cost.balance !== null" class="text-gray-400">余<span class="font-bold"
-                                    :class="parseFloat(item.cost.balance) < 100 ? 'text-red-500' : 'text-green-600'">{{ item.cost.currency === 'USD' ? '$' : '¥' }}{{
-                                    item.cost.balance }}</span></span>
-                        </span>
-                        <span v-else class="text-[10px] text-gray-400">{{ item.cost.error }}</span>
-                    </div>
-                    <div v-if="item.remark" class="flex justify-between items-center">
-                        <span class="text-sm font-medium text-gray-500">备注</span>
-                        <span class="text-sm font-medium text-[#1C1C1E]">{{ item.remark }}</span>
-                    </div>
-                    <div class="flex justify-between items-center">
-                        <span class="text-xs font-medium text-gray-400">当前阈值</span>
-                        <span class="text-xs font-medium text-gray-400">{{ item.threshold }}%</span>
-                    </div>
+        <div v-if="criticalError" class="fixed inset-0 z-50 flex items-center justify-center bg-black/20 p-4 backdrop-blur-sm">
+            <div class="glass-panel w-full max-w-lg rounded-[34px] p-8">
+                <p class="subtle-label">初始化异常</p>
+                <h2 class="mt-2 text-2xl font-black">系统初始化错误</h2>
+                <p class="mt-4 rounded-[20px] bg-red-50/90 px-4 py-4 font-mono text-sm text-red-700">{{ criticalError }}</p>
+                <div class="mt-6 flex justify-end">
+                    <button @click="reloadPage" class="solid-button">重试</button>
                 </div>
             </div>
-            <div v-if="statusData.length === 0" class="col-span-full py-20 text-center text-gray-400">
-                <p>暂无监控账号，请点击右上角登录管理员添加。</p>
-            </div>
-        </main>
-
-        <div v-if="initialized && loading && !criticalError" class="w-full h-64 flex items-center justify-center">
-            <div class="animate-spin rounded-full h-8 w-8 border-b-2 border-gray-800"></div>
         </div>
 
-        <div v-if="showChartModal" class="fixed inset-0 z-50 flex items-center justify-center p-4">
-            <div class="absolute inset-0 bg-gray-300/30 backdrop-blur-md" @click="closeChart"></div>
-            <div
-                class="glass-panel w-full max-w-5xl h-[500px] flex flex-col p-0 rounded-[32px] relative z-10 shadow-2xl bg-white/90 overflow-hidden">
-                <div class="flex justify-between items-center p-6 border-b border-gray-100">
+        <div v-if="showLoginModal && isAdmin" class="fixed inset-0 z-50 flex items-center justify-center bg-black/20 p-4 backdrop-blur-sm">
+            <div class="glass-panel w-full max-w-md rounded-[34px] p-8">
+                <p class="subtle-label">管理员登录</p>
+                <h2 class="mt-2 text-2xl font-black">管理员登录</h2>
+                <input v-model="passwordInput" type="password" class="glass-input mt-6" placeholder="请输入管理员密码">
+                <div class="mt-5 flex gap-3">
+                    <button @click="showLoginModal = false" class="ghost-button flex-1">取消</button>
+                    <button @click="performLogin" class="solid-button flex-1">登录</button>
+                </div>
+            </div>
+        </div>
+
+        <div v-if="showAccountModal" class="account-modal-overlay">
+            <div class="glass-panel account-modal">
+                <div class="section-head">
                     <div>
-                        <h3 class="text-xl font-bold text-[#1C1C1E]">流量统计</h3>
-                        <p class="text-xs text-gray-400 font-mono mt-1">账号: {{ currentChartAccount }}</p>
+                        <p class="subtle-label">账号信息</p>
+                        <h2 class="section-title">{{ accountModalMode === 'edit' ? '编辑账号' : '新增账号' }}</h2>
+                        <p class="mt-1 text-sm text-slate-500">填写账号信息后会立即保存并同步当前区域下的实例。</p>
                     </div>
+                    <button @click="closeAccountModal" class="ghost-button compact-button">关闭</button>
+                </div>
 
-                    <div class="bg-gray-100 p-1 rounded-xl flex gap-1">
-                        <button @click="switchChartMode('24h')"
-                            class="px-4 py-1.5 text-xs font-bold rounded-lg transition-all"
-                            :class="chartMode === '24h' ? 'bg-white text-[#1C1C1E] shadow-sm' : 'text-gray-400 hover:text-gray-600'">
-                            近24小时
-                        </button>
-                        <button @click="switchChartMode('30d')"
-                            class="px-4 py-1.5 text-xs font-bold rounded-lg transition-all"
-                            :class="chartMode === '30d' ? 'bg-white text-[#1C1C1E] shadow-sm' : 'text-gray-400 hover:text-gray-600'">
-                            近30天
-                        </button>
+                <div class="modal-form-grid">
+                    <div class="modal-field-full">
+                        <label class="field-label">备注名</label>
+                        <input v-model="accountDraft.remark" class="glass-input" placeholder="例如：香港节点组">
                     </div>
+                    <div>
+                        <label class="field-label">AK ID</label>
+                        <input v-model="accountDraft.AccessKeyId" class="glass-input" placeholder="请输入AK ID">
+                    </div>
+                    <div>
+                        <label class="field-label">AK Secret</label>
+                        <input v-model="accountDraft.AccessKeySecret" type="password" class="glass-input" placeholder="请输入AK Secret">
+                    </div>
+                    <div>
+                        <label class="field-label">区域</label>
+                        <app-select
+                            v-model="accountDraft.regionId"
+                            class="glass-select"
+                            placeholder="请选择区域"
+                            :options="[{ value: '', label: '请选择区域' }, ...aliyunRegions.map(region => ({ value: region.id, label: region.name }))]"
+                        />
+                    </div>
+                    <div>
+                        <label class="field-label">站点</label>
+                        <app-select
+                            v-model="accountDraft.siteType"
+                            class="glass-select"
+                            :options="[
+                                { value: 'china', label: '中国站' },
+                                { value: 'international', label: '国际站' }
+                            ]"
+                        />
+                    </div>
+                    <div>
+                        <label class="field-label">账号可用流量（GB）</label>
+                        <input v-model.number="accountDraft.maxTraffic" type="number" min="1" class="glass-input" placeholder="200">
+                    </div>
+                </div>
 
-                    <button @click="closeChart" class="p-2 rounded-full hover:bg-gray-100 text-gray-400 transition">
-                        <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
-                                d="M6 18L18 6M6 6l12 12"></path>
-                        </svg>
+                <div class="top-action-row" style="justify-content: flex-end; margin-top: 24px;">
+                    <button @click="closeAccountModal" class="ghost-button">取消</button>
+                    <button @click="saveAccountModal" class="solid-button" :disabled="savingAccountModal">
+                        {{ savingAccountModal ? '保存中...' : '保存账号' }}
                     </button>
                 </div>
+            </div>
+        </div>
 
-                <div class="flex-1 p-6 relative">
-                    <div v-if="chartLoading" class="absolute inset-0 flex items-center justify-center bg-white/50 z-20">
-                        <div class="animate-spin rounded-full h-8 w-8 border-b-2 border-gray-800"></div>
+        <div v-if="showCreateEcsModal" class="account-modal-overlay">
+            <div class="glass-panel account-modal create-modal">
+                <div class="section-head">
+                    <div>
+                        <p class="subtle-label">快速创建 ECS</p>
+                        <h2 class="section-title">一键创建 ECS</h2>
+                        <p class="mt-1 text-sm text-slate-500">只填写规格和系统，网络、安全组、系统盘、按流量公网与同步流程由系统自动处理。</p>
                     </div>
-                    <div id="echarts-container" class="w-full h-full"></div>
+                    <button @click="closeCreateEcsModal" class="ghost-button compact-button">关闭</button>
+                </div>
 
-                    <div v-if="!chartLoading && isChartEmpty"
-                        class="absolute inset-0 flex flex-col items-center justify-center text-gray-400 pointer-events-none">
-                        <svg class="w-12 h-12 mb-2 opacity-20" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
-                                d="M9 19v-6a2 2 0 00-2-2H5a2 2 0 00-2 2v6a2 2 0 002 2h2a2 2 0 002-2zm0 0V9a2 2 0 012-2h2a2 2 0 012 2v10m-6 0a2 2 0 002 2h2a2 2 0 002-2m0 0V5a2 2 0 012-2h2a2 2 0 012 2v14a2 2 0 01-2 2h-2a2 2 0 01-2-2z">
-                            </path>
-                        </svg>
-                        <p class="text-sm">暂无统计数据 (等待整点更新)</p>
+                <div v-if="!ecsCreatePreview" class="modal-form-grid">
+                    <div>
+                        <label class="field-label">账号</label>
+                        <app-select
+                            v-model="ecsCreateDraft.accountGroupKey"
+                            class="glass-select"
+                            placeholder="请选择账号"
+                            :options="accountOptions"
+                        />
                     </div>
+                    <div>
+                        <label class="field-label">区域</label>
+                        <input :value="selectedCreateAccountRegionName" class="glass-input" disabled>
+                    </div>
+                    <div>
+                        <label class="field-label">实例规格</label>
+                        <input v-model="ecsCreateDraft.instanceType" class="glass-input" placeholder="ecs.e-c4m1.large">
+                    </div>
+                    <div>
+                        <label class="field-label">系统</label>
+                        <app-select
+                            v-model="ecsCreateDraft.osKey"
+                            class="glass-select"
+                            :options="ecsOsOptions"
+                        />
+                    </div>
+                    <div class="modal-field-full">
+                        <label class="field-label">系统盘大小（GB）</label>
+                        <input v-model.number="ecsCreateDraft.systemDiskSize" type="number" min="1" class="glass-input" placeholder="20">
+                        <p class="mt-2 text-xs text-amber-700">成本敏感项，默认 20G，可自定义。点击下一步后会按阿里云 API 返回的当前规格/磁盘类型范围校验，超出范围会直接报错，不会自动放大磁盘。</p>
+                    </div>
+                    <div class="modal-field-full">
+                        <label class="field-label">实例备注 / 名称</label>
+                        <input v-model="ecsCreateDraft.instanceName" class="glass-input" placeholder="launch-20260415-2010">
+                    </div>
+                </div>
+
+                <div v-else>
+                    <div class="summary-block">
+                        <h4>基础配置</h4>
+                        <div class="summary-list">
+                            <div><span>账号</span><strong>{{ ecsCreatePreview.summary.account.label }}</strong></div>
+                            <div><span>区域</span><strong>{{ getRegionName(ecsCreatePreview.summary.regionId) }}</strong></div>
+                            <div><span>可用区</span><strong>{{ ecsCreatePreview.summary.zoneId }}</strong></div>
+                            <div><span>实例规格</span><strong>{{ ecsCreatePreview.summary.instanceType }}</strong></div>
+                            <div><span>系统</span><strong>{{ ecsCreatePreview.summary.osLabel }}</strong></div>
+                            <div><span>镜像编号</span><strong>{{ ecsCreatePreview.summary.imageId }}</strong></div>
+                            <div><span>实例名称</span><strong>{{ ecsCreatePreview.summary.instanceName }}</strong></div>
+                            <div><span>登录用户</span><strong>{{ ecsCreatePreview.summary.loginUser }}</strong></div>
+                        </div>
+                    </div>
+
+                    <div class="summary-block">
+                        <h4>计费与资源</h4>
+                        <div class="summary-list">
+                            <div><span>实例计费</span><strong>按量付费</strong></div>
+                            <div><span>公网计费</span><strong>按使用流量计费</strong></div>
+                            <div><span>流量抵扣服务</span><strong>兼容方式创建</strong></div>
+	                            <div><span>公网带宽峰值</span><strong>{{ ecsCreatePreview.summary.internetMaxBandwidthOut }} Mbps起自动降级</strong></div>
+	                            <div><span>系统盘</span><strong>{{ ecsCreatePreview.summary.systemDisk.size }} GB / {{ diskCategoryText(ecsCreatePreview.summary.systemDisk.category) }}</strong></div>
+	                            <div><span>系统盘范围</span><strong>{{ ecsCreatePreview.summary.systemDisk.min }} - {{ ecsCreatePreview.summary.systemDisk.max }} {{ diskUnitText(ecsCreatePreview.summary.systemDisk.unit) }}</strong></div>
+	                            <div><span>文件备份</span><strong>{{ ecsCreatePreview.summary.backupEnabled ? '启用' : '不启用' }}</strong></div>
+                            <div><span>费用</span><strong>{{ ecsCreatePreview.pricing.message }}</strong></div>
+                        </div>
+                    </div>
+
+                    <div class="summary-block">
+                        <h4>自动网络配置</h4>
+                        <div class="summary-list">
+                            <div><span>专有网络</span><strong>{{ ecsCreatePreview.summary.network.vpc.name }} / {{ ecsCreatePreview.summary.network.vpc.cidr }}</strong></div>
+                            <div><span>交换机</span><strong>{{ ecsCreatePreview.summary.network.vswitch.name }} / {{ ecsCreatePreview.summary.network.vswitch.cidr }}</strong></div>
+                            <div><span>安全组</span><strong>{{ ecsCreatePreview.summary.network.securityGroup.name }}</strong></div>
+                            <div><span>安全组规则</span><strong>{{ ecsCreatePreview.summary.network.securityGroup.rules.join('；') }}</strong></div>
+                        </div>
+                        <div class="warning-list">
+                            <div v-for="warning in ecsCreatePreview.warnings" :key="warning">· {{ warning }}</div>
+                        </div>
+                    </div>
+
+                    <label class="confirm-check">
+                        <input v-model="ecsCreateConfirmed" type="checkbox">
+                        <span>我确认以上配置和可能产生的按量费用，最终费用以阿里云账单为准。</span>
+                    </label>
+                </div>
+
+                <div class="top-action-row" style="justify-content: flex-end; margin-top: 24px;">
+                    <button @click="ecsCreatePreview ? resetCreateEcsPreview() : closeCreateEcsModal()" class="ghost-button">
+                        {{ ecsCreatePreview ? '返回修改' : '取消' }}
+                    </button>
+                    <button v-if="!ecsCreatePreview" @click="previewCreateEcs" class="solid-button" :disabled="ecsCreating || ecsPreviewing">
+                        {{ ecsPreviewing ? '预检中...' : '下一步：查看清单' }}
+                    </button>
+                    <button v-else @click="confirmCreateEcs" class="solid-button" :disabled="ecsCreating || !ecsCreateConfirmed || !!ecsCreateResult">
+                        {{ ecsCreating ? '创建中...' : '确认创建' }}
+                    </button>
                 </div>
             </div>
         </div>
 
+        <div v-if="showCredentialModal && ecsCredentialResult" class="credential-modal-overlay">
+            <div class="glass-panel credential-modal">
+                <p class="subtle-label">重要登录信息</p>
+                <h2 class="credential-alert-title mt-2">请立即保存ECS 登录信息</h2>
+                <p class="mt-3 text-sm leading-7 text-[#64748b]">
+                    这些信息只在本次创建完成后展示。为了安全，系统不会在任务记录、日志或通知里保存初始密码。
+                </p>
 
+                <div class="credential-grid">
+                    <div class="credential-line">
+                        <span class="text-sm text-[#64748b]">实例编号</span>
+                        <div class="flex items-center gap-2">
+                            <span class="credential-value">{{ ecsCredentialResult.instanceId }}</span>
+                            <button @click="copyCredential(ecsCredentialResult.instanceId || '')" class="ghost-button compact-button">复制</button>
+                        </div>
+                    </div>
+                    <div class="credential-line">
+                        <span class="text-sm text-[#64748b]">公网地址</span>
+                        <div class="flex items-center gap-2">
+                            <span class="credential-value">{{ ecsCredentialResult.publicIp || '-' }}</span>
+                            <button @click="copyCredential(ecsCredentialResult.publicIp || '')" class="ghost-button compact-button">复制</button>
+                        </div>
+                    </div>
+                    <div class="credential-line">
+                        <span class="text-sm text-[#64748b]">登录用户</span>
+                        <div class="flex items-center gap-2">
+                            <span class="credential-value">{{ ecsCredentialResult.loginUser }}</span>
+                            <button @click="copyCredential(ecsCredentialResult.loginUser || '')" class="ghost-button compact-button">复制</button>
+                        </div>
+                    </div>
+                    <div class="credential-line">
+                        <span class="text-sm text-[#64748b]">初始密码</span>
+                        <div class="flex items-center gap-2">
+                            <span class="credential-value">{{ ecsCredentialResult.loginPassword }}</span>
+                            <button @click="copyCredential(ecsCredentialResult.loginPassword || '')" class="solid-button compact-button">复制密码</button>
+                        </div>
+                    </div>
+                </div>
 
-        <div v-if="criticalError"
-            class="fixed inset-0 z-50 flex items-center justify-center p-6 bg-red-50/50 backdrop-blur-sm">
-            <div class="glass-panel w-full max-w-md p-8 rounded-[40px] shadow-xl border-red-200 bg-red-50/80">
-                <div class="text-center">
-                    <div class="mx-auto flex items-center justify-center h-12 w-12 rounded-full bg-red-100 mb-4">
-                        <svg class="h-6 w-6 text-red-600" fill="none" viewBox="0 0 24 24" stroke="currentColor">
-                            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
-                                d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z" />
-                        </svg>
-                    </div>
-                    <h3 class="text-lg font-medium leading-6 text-red-900">系统初始化错误</h3>
-                    <div class="mt-2 px-2 py-3">
-                        <p class="text-sm text-red-700 break-words font-mono bg-red-100/50 p-2 rounded-lg">{{
-                            criticalError }}</p>
-                    </div>
-                    <p class="mt-4 text-xs text-gray-500">请检查服务器目录权限，确保 Web 用户对当前目录有写入权限。</p>
-                    <div class="mt-6">
-                        <button @click="location.reload()"
-                            class="w-full inline-flex justify-center rounded-xl border border-transparent shadow-sm px-4 py-2 bg-red-600 text-base font-medium text-white hover:bg-red-700 focus:outline-none sm:text-sm">重试</button>
-                    </div>
+                <label class="credential-save-check">
+                    <input v-model="credentialSavedAck" type="checkbox" class="mt-1">
+                    <span>我已将公网地址、登录用户和初始密码保存到安全位置。关闭后系统不会再次展示初始密码。</span>
+                </label>
+
+                <div class="dialog-actions">
+                    <button @click="copyCredential(buildCredentialCopyText())" class="ghost-button">
+                        复制全部
+                    </button>
+                    <button @click="closeCredentialModal" class="solid-button" :disabled="!credentialSavedAck">
+                        我已保存，关闭
+                    </button>
                 </div>
             </div>
         </div>
 
-        <div v-if="showLoginModal" class="fixed inset-0 z-50 flex items-center justify-center p-4">
-            <div class="absolute inset-0 bg-gray-200/30 backdrop-blur-md" @click="showLoginModal = false"></div>
-            <div
-                class="glass-panel w-full max-w-md p-8 rounded-[40px] relative z-10 transform transition-all shadow-2xl">
-                <h2 class="text-2xl font-bold mb-6 text-center">管理员验证</h2>
-                <input type="password" v-model="passwordInput" placeholder="请输入配置密码"
-                    class="w-full glass-input px-4 py-3 rounded-xl border border-transparent focus:outline-none transition-all text-center text-lg mb-6">
-                <button @click="performLogin"
-                    class="w-full bg-[#1C1C1E] text-white py-3 rounded-2xl font-semibold tap-effect shadow-lg">解锁控制台</button>
-            </div>
-        </div>
+        <div v-if="!initialized && !loadingCheckInit && !criticalError" class="fixed inset-0 z-50 flex items-center justify-center p-4">
+            <div class="glass-panel w-full max-w-xl rounded-[38px] p-8">
+                <p class="subtle-label">初始化向导</p>
+                        <h2 class="mt-2 text-3xl font-black">初始化 ECS 服务器管理</h2>
+                        <p class="mt-2 text-sm text-[#6f7787]">首次使用时需要先设置管理员密码和流量保护阈值。</p>
 
-        <div v-if="!initialized && !loadingCheckInit && !criticalError"
-            class="fixed inset-0 z-50 flex flex-col items-center justify-center p-6 bg-[#F2F2F7]">
-            <div class="glass-panel w-full max-w-lg p-10 rounded-[48px] shadow-2xl border border-white/80">
-                <div class="text-center mb-8">
-                    <h1 class="text-3xl font-extrabold text-[#1C1C1E] mb-2">欢迎使用 CDT Monitor</h1>
-                    <p class="text-gray-500 text-sm">初次使用，请先配置核心参数。</p>
-                </div>
-                <div class="space-y-6">
-                    <div class="space-y-2">
-                        <label class="text-xs font-bold text-gray-500 ml-2 uppercase tracking-wider">设置管理员密码 <span
-                                class="text-red-500">*</span></label>
-                        <input type="text" v-model="setupData.admin_password" placeholder="用于登录后台管理"
-                            class="w-full glass-input rounded-2xl px-5 py-3 text-base focus:ring-2 focus:ring-gray-200 focus:bg-white transition-all">
-                    </div>
-                    <div class="grid grid-cols-2 gap-4">
-                        <div class="space-y-2">
-                            <label class="text-xs font-bold text-gray-500 ml-2 uppercase tracking-wider">流量阈值
-                                (%)</label>
-                            <input type="number" v-model.number="setupData.traffic_threshold"
-                                class="w-full glass-input rounded-2xl px-5 py-3 text-base">
-                        </div>
-                        <div class="space-y-2">
-                            <label class="text-xs font-bold text-gray-500 ml-2 uppercase tracking-wider">停机模式</label>
-                            <select v-model="setupData.shutdown_mode"
-                                class="w-full glass-input rounded-2xl px-5 py-3 text-base appearance-none bg-transparent">
-                                <option value="KeepCharging">普通停机</option>
-                                <option value="StopCharging">节省停机</option>
-                            </select>
-                        </div>
-                    </div>
-                    <button @click="performSetup" :disabled="!setupData.admin_password"
-                        class="w-full bg-[#1C1C1E] text-white py-4 rounded-2xl font-bold text-lg shadow-xl hover:shadow-2xl hover:scale-[1.02] active:scale-95 transition-all disabled:opacity-50 disabled:cursor-not-allowed mt-4">初始化系统</button>
-                    <p class="text-center text-[10px] text-gray-400">点击后将创建本地数据库并自动登录。</p>
-                </div>
-            </div>
-        </div>
-
-        <div v-if="isAdmin && config" class="w-full max-w-5xl mt-12 mb-20 animate-fade-in-up space-y-8">
-            <div class="flex items-center gap-4">
-                <h2 class="text-xl font-bold">系统配置</h2>
-                <div class="h-px bg-gray-300 flex-1"></div>
-            </div>
-
-            <div class="grid grid-cols-1 lg:grid-cols-3 gap-8">
-                <div class="lg:col-span-1 space-y-8">
-                    <div class="glass-panel rounded-[32px] p-6 overflow-visible z-20">
-                        <h3 class="text-sm font-bold uppercase tracking-widest text-gray-400 mb-4">全局设置</h3>
-                        <div class="space-y-4">
-                            <div class="space-y-1">
-                                <label class="text-xs font-medium text-gray-500 ml-2">管理员密码</label>
-                                <input v-model="config.admin_password" type="text"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                            </div>
-                            <div class="space-y-1">
-                                <label class="text-xs font-medium text-gray-500 ml-2">告警阈值 (%)</label>
-                                <input v-model.number="config.traffic_threshold" type="number" min="1" max="100"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                            </div>
-
-                            <div class="space-y-1">
-                                <label class="text-xs font-medium text-gray-500 ml-2">接口调用频率</label>
-                                <select v-model.number="config.api_interval"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm appearance-none cursor-pointer">
-                                    <option value="60">1 分钟 (高频)</option>
-                                    <option value="180">3 分钟</option>
-                                    <option value="300">5 分钟</option>
-                                    <option value="600">10 分钟 (默认)</option>
-                                    <option value="1800">30 分钟 (低频)</option>
-                                </select>
-                                <p class="text-[10px] text-gray-400 px-2 mt-1">控制更新状态和流量的频率。开关机操作触发时会自动加速至 1 分钟。</p>
-                            </div>
-
-                            <div class="space-y-1 relative">
-                                <div class="flex items-center gap-1">
-                                    <label class="text-xs font-medium text-gray-500 ml-2">停机模式</label>
-                                    <div class="group relative flex items-center">
-                                        <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24"
-                                            stroke-width="1.5" stroke="currentColor"
-                                            class="w-3.5 h-3.5 text-gray-400 cursor-help hover:text-gray-600 transition-colors">
-                                            <path stroke-linecap="round" stroke-linejoin="round"
-                                                d="M11.25 11.25l.041-.02a.75.75 0 011.063.852l-.708 2.836a.75.75 0 001.063.853l.041-.021M21 12a9 9 0 11-18 0 9 9 0 0118 0zm-9-3.75h.008v.008H12V8.25z" />
-                                        </svg>
-                                        <div
-                                            class="tooltip-content absolute bottom-full mb-2 w-64 md:w-80 p-4 bg-[#1C1C1E]/95 backdrop-blur-md text-white text-xs rounded-2xl shadow-[0_8px_30px_rgba(0,0,0,0.3)] z-50 border border-gray-700 pointer-events-none text-left leading-relaxed">
-                                            <div class="space-y-3">
-                                                <div>
-                                                    <h4 class="text-orange-400 font-bold mb-1">普通停机模式 (KeepCharging)
-                                                    </h4>
-                                                    <p class="text-gray-300">停止实例后保留实例的资源并继续收费。</p>
-                                                </div>
-                                                <div class="w-full h-px bg-gray-700/50"></div>
-                                                <div>
-                                                    <h4 class="text-green-400 font-bold mb-1">节省停机模式 (StopCharging)</h4>
-                                                    <p class="text-gray-300">计算资源(CPU/内存)、固定公网IP带宽暂停计费。</p>
-                                                </div>
-                                            </div>
-                                            <div
-                                                class="absolute top-full left-10 md:left-1/2 md:-translate-x-1/2 -mt-2 border-8 border-transparent border-t-[#1C1C1E]/95">
-                                            </div>
-                                        </div>
-                                    </div>
-                                </div>
-                                <select v-model="config.shutdown_mode"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm appearance-none cursor-pointer">
-                                    <option value="KeepCharging">普通停机 (保留IP/收费)</option>
-                                    <option value="StopCharging">节省停机 (回收IP/免费)</option>
-                                </select>
-                            </div>
-
-                            <div class="space-y-1">
-                                <label class="text-xs font-medium text-gray-500 ml-2">流量阈值动作</label>
-                                <select v-model="config.threshold_action"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm appearance-none cursor-pointer">
-                                    <option value="stop_and_notify">自动关机并告警 (默认)</option>
-                                    <option value="notify_only">仅发送告警 (不关机)</option>
-                                </select>
-                            </div>
-
-                            <div class="flex items-center justify-between pt-2">
-                                <div class="flex items-center gap-1">
-                                    <label class="text-xs font-medium text-gray-500 ml-2">实例保活 (抢占式)</label>
-                                    <div class="group relative flex items-center">
-                                        <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24"
-                                            stroke-width="1.5" stroke="currentColor"
-                                            class="w-3.5 h-3.5 text-gray-400 cursor-help hover:text-gray-600 transition-colors">
-                                            <path stroke-linecap="round" stroke-linejoin="round"
-                                                d="M11.25 11.25l.041-.02a.75.75 0 011.063.852l-.708 2.836a.75.75 0 001.063.853l.041-.021M21 12a9 9 0 11-18 0 9 9 0 0118 0zm-9-3.75h.008v.008H12V8.25z" />
-                                        </svg>
-                                        <div
-                                            class="tooltip-content absolute bottom-full mb-2 w-64 md:w-72 p-4 bg-[#1C1C1E]/95 backdrop-blur-md text-white text-xs rounded-2xl shadow-[0_8px_30px_rgba(0,0,0,0.3)] z-50 border border-gray-700 pointer-events-none text-left leading-relaxed">
-                                            <p class="text-gray-300">防止抢占式实例在<span
-                                                    class="text-green-400 font-bold">非关机时间段</span>被意外释放。</p>
-                                            <div
-                                                class="absolute top-full left-10 md:left-1/2 md:-translate-x-1/2 -mt-2 border-8 border-transparent border-t-[#1C1C1E]/95">
-                                            </div>
-                                        </div>
-                                    </div>
-                                </div>
-                                <div class="relative inline-block w-10 mr-2">
-                                    <input type="checkbox" v-model="config.keep_alive" id="toggle-keep-alive"
-                                        class="peer sr-only" />
-                                    <label for="toggle-keep-alive"
-                                        class="block overflow-hidden h-5 w-10 rounded-full bg-gray-300 cursor-pointer transition-colors peer-checked:bg-[#1C1C1E]"></label>
-                                    <div
-                                        class="absolute left-0.5 top-0.5 w-4 h-4 bg-white rounded-full transition-transform peer-checked:translate-x-5">
-                                    </div>
-                                </div>
-                            </div>
-
-                            <div class="flex items-center justify-between pt-2">
-                                <label class="text-xs font-medium text-gray-500 ml-2">定时任务邮件通知</label>
-                                <div class="relative inline-block w-10 mr-2">
-                                    <input type="checkbox" v-model="config.enable_schedule_email" id="toggle-sched"
-                                        class="peer sr-only" />
-                                    <label for="toggle-sched"
-                                        class="block overflow-hidden h-5 w-10 rounded-full bg-gray-300 cursor-pointer transition-colors peer-checked:bg-[#1C1C1E]"></label>
-                                    <div
-                                        class="absolute left-0.5 top-0.5 w-4 h-4 bg-white rounded-full transition-transform peer-checked:translate-x-5">
-                                    </div>
-                                </div>
-                            </div>
-
-                            <div class="flex items-center justify-between pt-2">
-                                <div class="flex items-center gap-1">
-                                    <label class="text-xs font-medium text-gray-500 ml-2">成本分析 (BSS)</label>
-                                    <div class="group relative flex items-center">
-                                        <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24"
-                                            stroke-width="1.5" stroke="currentColor"
-                                            class="w-3.5 h-3.5 text-gray-400 cursor-help hover:text-gray-600 transition-colors">
-                                            <path stroke-linecap="round" stroke-linejoin="round"
-                                                d="M11.25 11.25l.041-.02a.75.75 0 011.063.852l-.708 2.836a.75.75 0 001.063.853l.041-.021M21 12a9 9 0 11-18 0 9 9 0 0118 0zm-9-3.75h.008v.008H12V8.25z" />
-                                        </svg>
-                                        <div
-                                            class="tooltip-content absolute bottom-full mb-2 w-64 md:w-72 p-4 bg-[#1C1C1E]/95 backdrop-blur-md text-white text-xs rounded-2xl shadow-[0_8px_30px_rgba(0,0,0,0.3)] z-50 border border-gray-700 pointer-events-none text-left leading-relaxed">
-                                            <p class="text-gray-300">调用阿里云 BSS 费用中心 API，在实例卡片上显示<span
-                                                    class="text-orange-400 font-bold">本月费用</span>和<span
-                                                    class="text-green-400 font-bold">账户余额</span>。需要 AccessKey 具有
-                                                bssapi 权限。</p>
-                                            <div
-                                                class="absolute top-full left-10 md:left-1/2 md:-translate-x-1/2 -mt-2 border-8 border-transparent border-t-[#1C1C1E]/95">
-                                            </div>
-                                        </div>
-                                    </div>
-                                </div>
-                                <div class="relative inline-block w-10 mr-2">
-                                    <input type="checkbox" v-model="config.enable_billing" id="toggle-billing"
-                                        class="peer sr-only" />
-                                    <label for="toggle-billing"
-                                        class="block overflow-hidden h-5 w-10 rounded-full bg-gray-300 cursor-pointer transition-colors peer-checked:bg-[#1C1C1E]"></label>
-                                    <div
-                                        class="absolute left-0.5 top-0.5 w-4 h-4 bg-white rounded-full transition-transform peer-checked:translate-x-5">
-                                    </div>
-                                </div>
-                            </div>
-                        </div>
-                    </div>
-
-                    <div class="glass-panel rounded-[32px] p-6 z-10 flex flex-col">
-                        <h3 class="text-sm font-bold uppercase tracking-widest text-gray-400 mb-4">通知配置</h3>
-
-                        <!-- Tabs -->
-                        <div class="flex bg-gray-100/80 p-1 rounded-xl mb-4 overflow-x-auto no-scrollbar">
-                            <button @click="currentNotifyTab = 'email'"
-                                class="flex-1 whitespace-nowrap px-3 py-1.5 text-xs font-bold rounded-lg transition-all"
-                                :class="currentNotifyTab === 'email' ? 'bg-white text-[#1C1C1E] shadow-sm' : 'text-gray-400 hover:text-gray-600'">
-                                邮件推送
-                            </button>
-                            <button @click="currentNotifyTab = 'telegram'"
-                                class="flex-1 whitespace-nowrap px-3 py-1.5 text-xs font-bold rounded-lg transition-all"
-                                :class="currentNotifyTab === 'telegram' ? 'bg-white text-[#1C1C1E] shadow-sm' : 'text-gray-400 hover:text-gray-600'">
-                                Telegram Bot
-                            </button>
-                            <button @click="currentNotifyTab = 'webhook'"
-                                class="flex-1 whitespace-nowrap px-3 py-1.5 text-xs font-bold rounded-lg transition-all"
-                                :class="currentNotifyTab === 'webhook' ? 'bg-white text-[#1C1C1E] shadow-sm' : 'text-gray-400 hover:text-gray-600'">
-                                Webhook
-                            </button>
-                        </div>
-
-                        <!-- Email Tab -->
-                        <div v-show="currentNotifyTab === 'email'" class="space-y-3 animate-fade-in flex-1">
-                            <div class="flex items-center justify-between pb-2 border-b border-gray-100">
-                                <span class="text-xs font-bold text-gray-700 ml-2">启用邮件推送</span>
-                                <div class="relative inline-block w-10 mr-2">
-                                    <input type="checkbox" v-model="config.Notification.email_enabled" id="toggle-email"
-                                        class="peer sr-only" />
-                                    <label for="toggle-email"
-                                        class="block overflow-hidden h-5 w-10 rounded-full bg-gray-300 cursor-pointer transition-colors peer-checked:bg-[#1C1C1E]"></label>
-                                    <div
-                                        class="absolute left-0.5 top-0.5 w-4 h-4 bg-white rounded-full transition-transform peer-checked:translate-x-5">
-                                    </div>
-                                </div>
-                            </div>
-                            <div class="space-y-1">
-                                <label class="text-xs font-medium text-gray-500 ml-2">SMTP Host</label>
-                                <input v-model="config.Notification.host"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                            </div>
-                            <div class="grid grid-cols-2 gap-3">
-                                <div class="space-y-1">
-                                    <label class="text-xs font-medium text-gray-500 ml-2">Port</label>
-                                    <input v-model.number="config.Notification.port" type="number"
-                                        class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                                </div>
-                                <div class="space-y-1">
-                                    <label class="text-xs font-medium text-gray-500 ml-2">Secure</label>
-                                    <select v-model="config.Notification.secure"
-                                        class="w-full glass-input rounded-xl px-4 py-2 text-sm appearance-none cursor-pointer">
-                                        <option value="ssl">SSL</option>
-                                        <option value="tls">TLS</option>
-                                        <option value="">无 (None)</option>
-                                    </select>
-                                </div>
-                            </div>
-                            <div class="space-y-1">
-                                <label class="text-xs font-medium text-gray-500 ml-2">Username</label>
-                                <input v-model="config.Notification.username"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                            </div>
-                            <div class="space-y-1">
-                                <label class="text-xs font-medium text-gray-500 ml-2">Password</label>
-                                <input v-model="config.Notification.password" type="password"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                            </div>
-                            <div class="space-y-1">
-                                <label class="text-xs font-medium text-gray-500 ml-2">Receiver Email</label>
-                                <input v-model="config.Notification.email"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                            </div>
-
-                            <div class="pt-4 mt-auto">
-                                <button @click="sendTestEmail" :disabled="sendingEmail"
-                                    class="w-full border border-gray-300 text-gray-600 py-2 rounded-xl text-xs font-semibold hover:bg-gray-50 transition disabled:opacity-50">
-                                    {{ sendingEmail ? '发送中...' : '发送测试消息' }}
-                                </button>
-                            </div>
-                        </div>
-
-                        <!-- Telegram Tab -->
-                        <div v-show="currentNotifyTab === 'telegram'" class="space-y-3 animate-fade-in flex-1">
-                            <div class="flex items-center justify-between pb-2 border-b border-gray-100">
-                                <span class="text-xs font-bold text-gray-700 ml-2">启用 Telegram 推送</span>
-                                <div class="relative inline-block w-10 mr-2">
-                                    <input type="checkbox" v-model="config.Notification.telegram.enabled" id="toggle-tg"
-                                        class="peer sr-only" />
-                                    <label for="toggle-tg"
-                                        class="block overflow-hidden h-5 w-10 rounded-full bg-gray-300 cursor-pointer transition-colors peer-checked:bg-[#1C1C1E]"></label>
-                                    <div
-                                        class="absolute left-0.5 top-0.5 w-4 h-4 bg-white rounded-full transition-transform peer-checked:translate-x-5">
-                                    </div>
-                                </div>
-                            </div>
-                            <div class="space-y-1">
-                                <label class="text-xs font-medium text-gray-500 ml-2">Bot Token</label>
-                                <input v-model="config.Notification.telegram.token" placeholder="来自 @BotFather"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                            </div>
-                            <div class="space-y-1">
-                                <label class="text-xs font-medium text-gray-500 ml-2">Chat ID</label>
-                                <input v-model="config.Notification.telegram.chat_id" placeholder="数字 ID"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                            </div>
-                            <div class="space-y-1">
-                                <label class="text-xs font-medium text-gray-500 ml-2">代理服务器类型</label>
-                                <select v-model="config.Notification.telegram.proxy_type"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm appearance-none cursor-pointer">
-                                    <option value="none">不使用代理</option>
-                                    <option value="custom">自定义反代 URL</option>
-                                    <option value="socks5">SOCKS5 代理</option>
-                                </select>
-                            </div>
-
-                            <div v-if="config.Notification.telegram.proxy_type === 'custom'"
-                                class="space-y-1 animate-fade-in">
-                                <label class="text-xs font-medium text-gray-500 ml-2">自定义反代 URL</label>
-                                <input v-model="config.Notification.telegram.proxy_url"
-                                    placeholder="默认: https://api.telegram.org"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                            </div>
-
-                            <div v-if="config.Notification.telegram.proxy_type === 'socks5'"
-                                class="grid grid-cols-2 gap-3 animate-fade-in">
-                                <div class="space-y-1">
-                                    <label class="text-xs font-medium text-gray-500 ml-2">代理 IP</label>
-                                    <input v-model="config.Notification.telegram.proxy_ip" placeholder="127.0.0.1"
-                                        class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                                </div>
-                                <div class="space-y-1">
-                                    <label class="text-xs font-medium text-gray-500 ml-2">代理端口</label>
-                                    <input v-model="config.Notification.telegram.proxy_port" placeholder="1080"
-                                        class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                                </div>
-                                <div class="space-y-1">
-                                    <label class="text-xs font-medium text-gray-500 ml-2">代理账号</label>
-                                    <input v-model="config.Notification.telegram.proxy_user" placeholder="留空无验证"
-                                        class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                                </div>
-                                <div class="space-y-1">
-                                    <label class="text-xs font-medium text-gray-500 ml-2">代理密码</label>
-                                    <input v-model="config.Notification.telegram.proxy_pass" type="password"
-                                        placeholder="留空无验证" class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                                </div>
-                            </div>
-
-                            <div class="pt-4 mt-auto">
-                                <button @click="sendTestTelegram" :disabled="testingTelegram"
-                                    class="w-full border border-gray-300 text-gray-600 py-2 rounded-xl text-xs font-semibold hover:bg-gray-50 transition disabled:opacity-50">
-                                    {{ testingTelegram ? '发送中...' : '发送测试消息' }}
-                                </button>
-                            </div>
-                        </div>
-
-                        <!-- Webhook Tab -->
-                        <div v-show="currentNotifyTab === 'webhook'" class="space-y-3 animate-fade-in flex-1">
-                            <div class="flex items-center justify-between pb-2 border-b border-gray-100">
-                                <span class="text-xs font-bold text-gray-700 ml-2">启用 Webhook 推送</span>
-                                <div class="relative inline-block w-10 mr-2">
-                                    <input type="checkbox" v-model="config.Notification.webhook.enabled" id="toggle-wh"
-                                        class="peer sr-only" />
-                                    <label for="toggle-wh"
-                                        class="block overflow-hidden h-5 w-10 rounded-full bg-gray-300 cursor-pointer transition-colors peer-checked:bg-[#1C1C1E]"></label>
-                                    <div
-                                        class="absolute left-0.5 top-0.5 w-4 h-4 bg-white rounded-full transition-transform peer-checked:translate-x-5">
-                                    </div>
-                                </div>
-                            </div>
-                            <div class="space-y-1">
-                                <label class="text-xs font-medium text-gray-500 ml-2">Webhook URL</label>
-                                <input v-model="config.Notification.webhook.url"
-                                    placeholder="http://example.com/api/notify"
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                            </div>
-                            <div class="grid grid-cols-2 gap-3">
-                                <div class="space-y-1">
-                                    <label class="text-xs font-medium text-gray-500 ml-2">请求方式 (Method)</label>
-                                    <select v-model="config.Notification.webhook.method"
-                                        class="w-full glass-input rounded-xl px-4 py-2 text-sm appearance-none cursor-pointer">
-                                        <option value="GET">GET</option>
-                                        <option value="POST">POST</option>
-                                    </select>
-                                </div>
-                                <div class="space-y-1" v-if="config.Notification.webhook.method === 'POST'">
-                                    <label class="text-xs font-medium text-gray-500 ml-2">请求类型 (Type)</label>
-                                    <select v-model="config.Notification.webhook.request_type"
-                                        class="w-full glass-input rounded-xl px-4 py-2 text-sm appearance-none cursor-pointer">
-                                        <option value="JSON">JSON</option>
-                                        <option value="FORM">Form (urlencoded)</option>
-                                    </select>
-                                </div>
-                            </div>
-
-                            <div class="space-y-1 pt-2">
-                                <label class="text-[11px] font-bold text-gray-700 ml-2">自定义 Headers (JSON格式，可选)</label>
-                                <textarea v-model="config.Notification.webhook.headers"
-                                    placeholder='{"Authorization": "Bearer token", "Content-Type": "application/json"}'
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-xs font-mono min-h-[60px]"></textarea>
-                            </div>
-
-                            <div class="space-y-1">
-                                <label class="text-[11px] font-bold text-gray-700 ml-2">自定义 Body 模板 (可选)</label>
-                                <textarea v-model="config.Notification.webhook.body"
-                                    placeholder='{"title": "#TITLE#", "content": "#MSG#", "traffic": "#TRAFFIC#"}'
-                                    class="w-full glass-input rounded-xl px-4 py-2 text-xs font-mono min-h-[100px]"></textarea>
-                                <p class="text-[10px] text-gray-400 mt-1 px-1 leading-tight">
-                                    可用变量: <code>#TITLE#</code> (标题), <code>#MSG#</code> (内容), <code>#ACCOUNT#</code> (账号
-                                    ID), <code>#TRAFFIC#</code> (使用流量), <code>#MAX_TRAFFIC#</code> (阈值流量)<br />
-                                    GET 请求的变量可直接写在 URL 中，或留空 Body。<br>POST 请求若留空 Body 将发送默认 JSON 或 Form 载荷。
-                                </p>
-                            </div>
-
-                            <div class="pt-4 mt-auto">
-                                <button @click="sendTestWebhook" :disabled="testingWebhook"
-                                    class="w-full border border-gray-300 text-gray-600 py-2 rounded-xl text-xs font-semibold hover:bg-gray-50 transition disabled:opacity-50">
-                                    {{ testingWebhook ? '发送中...' : '发送测试消息' }}
-                                </button>
-                            </div>
-                        </div>
+                <div class="mt-6 grid gap-4">
+                    <input v-model="setupData.admin_password" class="glass-input" placeholder="管理员密码">
+                    <div class="grid gap-4 md:grid-cols-2">
+                        <input v-model.number="setupData.traffic_threshold" type="number" class="glass-input" placeholder="流量阈值">
+                        <app-select
+                            v-model="setupData.shutdown_mode"
+                            class="glass-select"
+                            :options="[
+                                { value: 'KeepCharging', label: '普通停机' },
+                                { value: 'StopCharging', label: '节省停机' }
+                            ]"
+                        />
                     </div>
                 </div>
 
-                <div class="lg:col-span-2 space-y-8">
-                    <div class="glass-panel rounded-[40px] p-8 h-fit z-0">
-                        <div class="space-y-8">
-                            <div v-for="(acc, idx) in config.Accounts" :key="idx"
-                                class="p-6 bg-white/40 rounded-[28px] border border-white/60 relative hover:bg-white/60 transition-colors">
-                                <button @click="removeAccount(idx)"
-                                    class="absolute top-4 right-4 text-xs text-red-500 font-bold hover:bg-red-50 p-2 rounded-lg transition">移除</button>
-
-                                <h3 class="text-sm font-bold uppercase tracking-widest text-gray-400 mb-4">账号 {{ idx + 1
-                                    }}</h3>
-
-                                <div class="grid grid-cols-1 md:grid-cols-2 gap-4">
-                                    <div class="space-y-1">
-                                        <label class="text-xs font-medium text-gray-500 ml-2">AccessKey ID</label>
-                                        <input v-model="acc.AccessKeyId"
-                                            class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                                    </div>
-                                    <div class="space-y-1">
-                                        <label class="text-xs font-medium text-gray-500 ml-2">AccessKey Secret</label>
-                                        <input v-model="acc.AccessKeySecret" type="password"
-                                            class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                                    </div>
-                                    <div class="space-y-1">
-                                        <label class="text-xs font-medium text-gray-500 ml-2">Instance ID</label>
-                                        <input v-model="acc.instanceId" placeholder="实例 ID (必填)"
-                                            class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                                    </div>
-                                    <div class="space-y-1 relative">
-                                        <label class="text-xs font-medium text-gray-500 ml-2">Region ID</label>
-                                        <input v-model="acc.regionId" @focus="regionSearchFocus = idx"
-                                            @blur="setTimeout(() => regionSearchFocus = -1, 200)"
-                                            placeholder="输入地域名称或代码..."
-                                            class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-
-                                        <transition name="dropdown">
-                                            <div v-show="regionSearchFocus === idx"
-                                                class="absolute left-0 right-0 top-full mt-2 bg-white/90 backdrop-blur-md border border-gray-200 rounded-xl shadow-xl z-50 max-h-60 overflow-y-auto no-scrollbar">
-                                                <ul>
-                                                    <li v-for="region in aliyunRegions.filter(r => !acc.regionId || r.id.toLowerCase().includes(acc.regionId.toLowerCase()) || r.name.includes(acc.regionId))"
-                                                        @click="acc.regionId = region.id; regionSearchFocus = -1"
-                                                        class="px-4 py-2 text-xs hover:bg-gray-100 cursor-pointer border-b border-gray-100/50 last:border-0 flex justify-between items-center group">
-                                                        <span class="font-medium text-gray-800">{{ region.name }}</span>
-                                                        <span
-                                                            class="text-[10px] text-gray-400 group-hover:text-gray-600 font-mono">{{
-                                                            region.id }}</span>
-                                                    </li>
-                                                    <li v-if="aliyunRegions.filter(r => !acc.regionId || r.id.toLowerCase().includes(acc.regionId.toLowerCase()) || r.name.includes(acc.regionId)).length === 0"
-                                                        class="px-4 py-3 text-xs text-gray-400 text-center">
-                                                        无匹配地域
-                                                    </li>
-                                                </ul>
-                                            </div>
-                                        </transition>
-                                    </div>
-                                    <div class="space-y-1">
-                                        <label class="text-xs font-medium text-gray-500 ml-2">Max Traffic (GB)</label>
-                                        <input v-model.number="acc.maxTraffic" type="number"
-                                            class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                                    </div>
-                                </div>
-
-                                <div class="mt-4 grid grid-cols-1 md:grid-cols-2 gap-4">
-                                    <div class="space-y-1">
-                                        <label class="text-xs font-medium text-gray-500 ml-2">站点类型</label>
-                                        <select v-model="acc.siteType" class="w-full glass-input rounded-xl px-4 py-2 text-sm appearance-none cursor-pointer">
-                                            <option value="china">中国站 (CNY ¥)</option>
-                                            <option value="international">国际站 (USD $)</option>
-                                        </select>
-                                    </div>
-                                    <div class="space-y-1">
-                                        <label class="text-xs font-medium text-gray-500 ml-2">备注 <span
-                                                class="text-gray-400">(可选)</span></label>
-                                        <input v-model="acc.remark" placeholder="为该实例添加备注说明"
-                                            class="w-full glass-input rounded-xl px-4 py-2 text-sm">
-                                    </div>
-                                </div>
-
-                                <div class="mt-6 pt-4 border-t border-gray-200/50">
-                                    <div class="flex items-center gap-3 mb-3">
-                                        <div class="relative inline-block w-8 mr-1">
-                                            <input type="checkbox" v-model="acc.schedule.enabled" :id="'sched-'+idx"
-                                                class="peer sr-only" />
-                                            <label :for="'sched-'+idx"
-                                                class="block overflow-hidden h-4 w-8 rounded-full bg-gray-300 cursor-pointer transition-colors peer-checked:bg-[#1C1C1E]"></label>
-                                            <div
-                                                class="absolute left-0.5 top-0.5 w-3 h-3 bg-white rounded-full transition-transform peer-checked:translate-x-4">
-                                            </div>
-                                        </div>
-                                        <span class="text-sm font-bold text-gray-700">启用定时开关机</span>
-                                    </div>
-
-                                    <div v-if="acc.schedule && acc.schedule.enabled"
-                                        class="flex flex-wrap gap-4 items-center animate-fade-in">
-                                        <div class="flex items-center gap-2">
-                                            <span class="text-xs text-gray-500">开机时间</span>
-                                            <input type="time" v-model="acc.schedule.startTime"
-                                                class="bg-white/80 border border-gray-200 rounded-lg px-2 py-1 text-sm">
-                                        </div>
-                                        <div class="w-4 h-px bg-gray-300"></div>
-                                        <div class="flex items-center gap-2">
-                                            <span class="text-xs text-gray-500">关机时间</span>
-                                            <input type="time" v-model="acc.schedule.stopTime"
-                                                class="bg-white/80 border border-gray-200 rounded-lg px-2 py-1 text-sm">
-                                        </div>
-                                    </div>
-                                </div>
-                            </div>
-
-                            <button @click="addAccount"
-                                class="w-full py-4 rounded-2xl border border-dashed border-gray-300 text-gray-400 hover:bg-white/40 hover:text-gray-600 transition font-medium">+
-                                添加账号</button>
-
-                            <div class="flex justify-end pt-6">
-                                <button @click="saveConfig"
-                                    class="bg-[#1C1C1E] text-white px-10 py-4 rounded-2xl font-bold shadow-xl tap-effect hover:shadow-2xl transition-all">保存所有配置</button>
-                            </div>
-                        </div>
-                    </div>
-
-                    <div class="glass-panel rounded-[32px] md:rounded-[40px] p-5 md:p-8 relative overflow-hidden">
-                        <div class="flex flex-wrap items-center justify-between gap-3 mb-5 md:mb-6">
-                            <div class="flex items-center gap-3 md:gap-4">
-                                <h3 class="text-base md:text-lg font-bold text-[#1C1C1E]">系统日志</h3>
-                                <div class="flex bg-gray-100/80 p-1 rounded-xl">
-                                    <button @click="currentLogTab = 'action'; fetchLogs()"
-                                        class="px-3 md:px-4 py-1.5 text-xs font-bold rounded-lg transition-all"
-                                        :class="currentLogTab === 'action' ? 'bg-white text-[#1C1C1E] shadow-sm' : 'text-gray-400 hover:text-gray-600'">
-                                        动作日志
-                                    </button>
-                                    <button @click="currentLogTab = 'heartbeat'; fetchLogs()"
-                                        class="px-3 md:px-4 py-1.5 text-xs font-bold rounded-lg transition-all"
-                                        :class="currentLogTab === 'heartbeat' ? 'bg-white text-[#1C1C1E] shadow-sm' : 'text-gray-400 hover:text-gray-600'">
-                                        心跳日志
-                                    </button>
-                                </div>
-                            </div>
-                            <div class="flex items-center gap-3">
-                                <div v-if="logAutoRefresh" class="flex items-center gap-1.5">
-                                    <span class="relative flex h-2 w-2">
-                                        <span
-                                            class="animate-ping absolute inline-flex h-full w-full rounded-full bg-green-400 opacity-75"></span>
-                                        <span class="relative inline-flex rounded-full h-2 w-2 bg-green-500"></span>
-                                    </span>
-                                    <span class="text-[10px] text-gray-400 font-mono">LIVE</span>
-                                </div>
-                                <button @click="clearLogs"
-                                    class="text-xs text-red-400 hover:text-red-500 font-medium transition px-2">清空</button>
-                            </div>
-                        </div>
-
-                        <!-- 桌面端：表格布局 -->
-                        <div
-                            class="hidden md:block overflow-y-auto max-h-96 pr-2 no-scrollbar bg-white/30 rounded-2xl border border-white/40">
-                            <table class="w-full text-left border-collapse">
-                                <thead class="bg-gray-50/50 sticky top-0 backdrop-blur-md">
-                                    <tr>
-                                        <th
-                                            class="text-[10px] font-bold text-gray-400 uppercase tracking-wider py-3 pl-4">
-                                            时间</th>
-                                        <th v-if="currentLogTab === 'action'"
-                                            class="text-[10px] font-bold text-gray-400 uppercase tracking-wider py-3">类型
-                                        </th>
-                                        <th
-                                            class="text-[10px] font-bold text-gray-400 uppercase tracking-wider py-3 pr-4">
-                                            内容</th>
-                                    </tr>
-                                </thead>
-                                <tbody class="text-xs text-gray-600">
-                                    <tr v-for="(log, i) in systemLogs" :key="i"
-                                        class="border-b border-gray-100/50 hover:bg-white/60 transition-colors last:border-0">
-                                        <td class="py-3 pl-4 text-gray-400 font-mono whitespace-nowrap w-40">{{
-                                            log.time_str }}</td>
-                                        <td v-if="currentLogTab === 'action'" class="py-3 w-20">
-                                            <span
-                                                class="px-2 py-1 rounded-md text-[10px] font-bold uppercase tracking-wide"
-                                                :class="{
-                                                  'bg-blue-100 text-blue-700': log.type === 'info',
-                                                  'bg-yellow-100 text-yellow-700': log.type === 'warning',
-                                                  'bg-red-100 text-red-700': log.type === 'error'
-                                              }">
-                                                {{ log.type }}
-                                            </span>
-                                        </td>
-                                        <td class="py-3 pr-4 font-mono leading-relaxed break-all"
-                                            :class="{'text-gray-400': currentLogTab === 'heartbeat'}">
-                                            {{ log.message }}
-                                        </td>
-                                    </tr>
-                                    <tr v-if="systemLogs.length === 0">
-                                        <td colspan="3" class="py-12 text-center text-gray-400">
-                                            暂无{{ currentLogTab === 'action' ? '动作' : '心跳' }}记录
-                                        </td>
-                                    </tr>
-                                </tbody>
-                            </table>
-                        </div>
-
-                        <!-- 移动端：卡片列表布局 -->
-                        <div
-                            class="md:hidden overflow-y-auto max-h-96 no-scrollbar bg-white/30 rounded-2xl border border-white/40">
-                            <div v-if="systemLogs.length === 0" class="py-12 text-center text-gray-400 text-xs">
-                                暂无{{ currentLogTab === 'action' ? '动作' : '心跳' }}记录
-                            </div>
-                            <div v-for="(log, i) in systemLogs" :key="'m'+i"
-                                class="px-4 py-3 border-b border-gray-100/50 last:border-0">
-                                <div class="flex items-center justify-between mb-1.5">
-                                    <span class="text-[10px] text-gray-400 font-mono">{{ log.time_str }}</span>
-                                    <span v-if="currentLogTab === 'action'"
-                                        class="px-2 py-0.5 rounded-md text-[10px] font-bold uppercase tracking-wide"
-                                        :class="{
-                                          'bg-blue-100 text-blue-700': log.type === 'info',
-                                          'bg-yellow-100 text-yellow-700': log.type === 'warning',
-                                          'bg-red-100 text-red-700': log.type === 'error'
-                                      }">
-                                        {{ log.type }}
-                                    </span>
-                                </div>
-                                <p class="text-xs font-mono leading-relaxed break-all"
-                                    :class="currentLogTab === 'heartbeat' ? 'text-gray-400' : 'text-gray-600'">
-                                    {{ log.message }}
-                                </p>
-                            </div>
-                        </div>
-                    </div>
+                <div class="mt-6 flex justify-end">
+                    <button @click="performSetup" class="solid-button" :disabled="!setupData.admin_password">初始化系统</button>
                 </div>
             </div>
         </div>
@@ -971,388 +2570,619 @@
 
     <script src="static/vue.global.prod.js"></script>
     <script>
-        const { createApp, ref, onMounted, onUnmounted, computed } = Vue;
+        const { createApp, ref, computed, onMounted, onUnmounted, watch } = Vue;
+
+        const AppSelect = {
+            name: 'AppSelect',
+            props: {
+                modelValue: [String, Number],
+                options: {
+                    type: Array,
+                    default: () => []
+                },
+                placeholder: {
+                    type: String,
+                    default: '请选择'
+                },
+                disabled: {
+                    type: Boolean,
+                    default: false
+                }
+            },
+            emits: ['update:modelValue'],
+            setup(props, { emit }) {
+                const open = ref(false);
+                const root = ref(null);
+                const instanceId = `select-${Math.random().toString(36).slice(2)}`;
+
+                const selectedOption = computed(() =>
+                    props.options.find((option) => String(option.value) === String(props.modelValue)) || null
+                );
+
+                const isSelected = (option) => String(option.value) === String(props.modelValue);
+
+                const toggle = () => {
+                    if (props.disabled) return;
+                    if (!open.value) {
+                        window.dispatchEvent(new CustomEvent('app-select-opened', {
+                            detail: { id: instanceId }
+                        }));
+                    }
+                    open.value = !open.value;
+                };
+
+                const selectOption = (option) => {
+                    emit('update:modelValue', option.value);
+                    open.value = false;
+                };
+
+                const handleClickOutside = (event) => {
+                    if (root.value && !root.value.contains(event.target)) {
+                        open.value = false;
+                    }
+                };
+
+                const handleKeydown = (event) => {
+                    if (!root.value || !root.value.contains(document.activeElement)) return;
+                    if (event.key === 'Escape') {
+                        open.value = false;
+                    }
+                };
+
+                const handleSelectOpened = (event) => {
+                    if (event?.detail?.id !== instanceId) {
+                        open.value = false;
+                    }
+                };
+
+                onMounted(() => {
+                    document.addEventListener('click', handleClickOutside);
+                    document.addEventListener('keydown', handleKeydown);
+                    window.addEventListener('app-select-opened', handleSelectOpened);
+                });
+
+                onUnmounted(() => {
+                    document.removeEventListener('click', handleClickOutside);
+                    document.removeEventListener('keydown', handleKeydown);
+                    window.removeEventListener('app-select-opened', handleSelectOpened);
+                });
+
+                return {
+                    open,
+                    root,
+                    selectedOption,
+                    isSelected,
+                    toggle,
+                    selectOption
+                };
+            },
+            template: `
+                <div ref="root" class="select-shell" :class="{ open, disabled }">
+                    <button type="button" class="select-trigger" :disabled="disabled" @click.stop="toggle">
+                        <span class="select-value" :class="{ 'is-placeholder': !selectedOption }">
+                            {{ selectedOption ? selectedOption.label : placeholder }}
+                        </span>
+                        <span class="select-chevron">
+                            <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                                <path d="m6 9 6 6 6-6"/>
+                            </svg>
+                        </span>
+                    </button>
+
+                    <transition name="select-pop">
+                        <div v-if="open" class="select-menu">
+                            <button
+                                v-for="option in options"
+                                :key="String(option.value)"
+                                type="button"
+                                class="select-option"
+                                :class="{ selected: isSelected(option) }"
+                                @click="selectOption(option)"
+                            >
+                                <span>{{ option.label }}</span>
+                                <span class="select-check">
+                                    <svg v-if="isSelected(option)" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2">
+                                        <path d="m5 13 4 4L19 7"/>
+                                    </svg>
+                                </span>
+                            </button>
+                        </div>
+                    </transition>
+                </div>
+            `
+        };
 
         createApp({
+            components: {
+                AppSelect
+            },
             setup() {
-                const statusData = ref([]);
-                const config = ref(null);
-                const loading = ref(true);
-                const isAdmin = ref(false);
-                const checkingLogin = ref(true);
-                const showLoginModal = ref(false);
-                const passwordInput = ref('');
-                const sendingEmail = ref(false);
-                const criticalError = ref(null);
-
-                const initialized = ref(true);
-                const loadingCheckInit = ref(true);
-                const regionSearchFocus = ref(-1);
-                const refreshingMap = ref({});
-
-                // 日志相关
-                const systemLogs = ref([]);
-                const currentLogTab = ref('action');
-                const logAutoRefresh = ref(false);
-                let logInterval = null;
-
-                const cronWarning = ref(false);
-
-                // 通知相关
-                const currentNotifyTab = ref('email');
-                const testingTelegram = ref(false);
-                const testingWebhook = ref(false);
-
-                // 图表相关
-                const showChartModal = ref(false);
-                const chartLoading = ref(false);
-                const chartMode = ref('24h');
-                const currentChartId = ref(0);
-                const currentChartAccount = ref('');
-                let chartInstance = null;
-                let currentChartData = {};
-
-
-
-                // 阿里云地域数据
                 const aliyunRegions = [
                     { id: 'cn-hongkong', name: '中国香港' },
                     { id: 'ap-southeast-1', name: '新加坡' },
-                    { id: 'ap-northeast-1', name: '日本 (东京)' },
-                    { id: 'us-west-1', name: '美国 (硅谷)' },
-                    { id: 'us-east-1', name: '美国 (弗吉尼亚)' },
-                    { id: 'eu-central-1', name: '德国 (法兰克福)' },
-                    { id: 'eu-west-1', name: '英国 (伦敦)' },
-                    { id: 'ap-southeast-2', name: '澳大利亚 (悉尼)' },
-                    { id: 'ap-southeast-3', name: '马来西亚 (吉隆坡)' },
-                    { id: 'ap-southeast-5', name: '印度尼西亚 (雅加达)' },
-                    { id: 'ap-southeast-6', name: '菲律宾 (马尼拉)' },
-                    { id: 'ap-southeast-7', name: '泰国 (曼谷)' },
-                    { id: 'ap-northeast-2', name: '韩国 (首尔)' },
-                    { id: 'me-east-1', name: '阿联酋 (迪拜)' },
-                    { id: 'cn-hangzhou', name: '华东1 (杭州)' },
-                    { id: 'cn-shanghai', name: '华东2 (上海)' },
-                    { id: 'cn-qingdao', name: '华北1 (青岛)' },
-                    { id: 'cn-beijing', name: '华北2 (北京)' },
-                    { id: 'cn-zhangjiakou', name: '华北3 (张家口)' },
-                    { id: 'cn-huhehaote', name: '华北5 (呼和浩特)' },
-                    { id: 'cn-wulanchabu', name: '华北6 (乌兰察布)' },
-                    { id: 'cn-shenzhen', name: '华南1 (深圳)' },
-                    { id: 'cn-heyuan', name: '华南2 (河源)' },
-                    { id: 'cn-guangzhou', name: '华南3 (广州)' },
-                    { id: 'cn-chengdu', name: '西南1 (成都)' }
+                    { id: 'ap-northeast-1', name: '日本（东京）' },
+                    { id: 'ap-northeast-2', name: '韩国（首尔）' },
+                    { id: 'us-west-1', name: '美国（硅谷）' },
+                    { id: 'us-east-1', name: '美国（弗吉尼亚）' },
+                    { id: 'eu-central-1', name: '德国（法兰克福）' },
+                    { id: 'eu-west-1', name: '英国（伦敦）' },
+                    { id: 'ap-southeast-2', name: '澳大利亚（悉尼）' },
+                    { id: 'ap-southeast-3', name: '马来西亚（吉隆坡）' },
+                    { id: 'ap-southeast-5', name: '印度尼西亚（雅加达）' },
+                    { id: 'ap-southeast-6', name: '菲律宾（马尼拉）' },
+                    { id: 'ap-southeast-7', name: '泰国（曼谷）' },
+                    { id: 'me-east-1', name: '阿联酋（迪拜）' },
+                    { id: 'cn-hangzhou', name: '华东 1（杭州）' },
+                    { id: 'cn-shanghai', name: '华东 2（上海）' },
+                    { id: 'cn-qingdao', name: '华北 1（青岛）' },
+                    { id: 'cn-beijing', name: '华北 2（北京）' },
+                    { id: 'cn-zhangjiakou', name: '华北 3（张家口）' },
+                    { id: 'cn-huhehaote', name: '华北 5（呼和浩特）' },
+                    { id: 'cn-wulanchabu', name: '华北 6（乌兰察布）' },
+                    { id: 'cn-shenzhen', name: '华南 1（深圳）' },
+                    { id: 'cn-heyuan', name: '华南 2（河源）' },
+                    { id: 'cn-guangzhou', name: '华南 3（广州）' },
+                    { id: 'cn-chengdu', name: '西南 1（成都）' }
                 ];
 
-                const setupData = ref({
+                const createDefaultAccount = () => ({
+                    groupKey: '',
+                    AccessKeyId: '',
+                    AccessKeySecret: '',
+                    regionId: '',
+                    siteType: 'international',
+                    maxTraffic: 200,
+                    remark: '',
+                    usageUsed: 0,
+                    usageRemaining: 200,
+                    usagePercent: 0,
+                    instanceCount: 0,
+                    usageLastUpdated: ''
+                });
+
+                const createDefaultConfig = () => ({
                     admin_password: '',
                     traffic_threshold: 95,
                     shutdown_mode: 'KeepCharging',
                     threshold_action: 'stop_and_notify',
                     keep_alive: false,
-                    enable_schedule_email: false,
+                    monthly_auto_start: false,
+                    api_interval: 600,
+                    enable_billing: false,
+                    Ddns: {
+                        enabled: false,
+                        provider: 'cloudflare',
+                        domain: '',
+                        cloudflare: {
+                            zone_id: '',
+                            token: '',
+                            proxied: false
+                        }
+                    },
                     Notification: {
-                        email_enabled: true, email: '', host: '', port: 465, secure: 'ssl', username: '', password: '',
-                        telegram: { enabled: false, token: '', chat_id: '', proxy_type: 'none', proxy_url: '', proxy_ip: '', proxy_port: '', proxy_user: '', proxy_pass: '' },
-                        webhook: { enabled: false, url: '', method: 'GET', request_type: 'JSON', headers: '', body: '' }
+                        email_enabled: true,
+                        email: '',
+                        host: '',
+                        port: 465,
+                        username: '',
+                        password: '',
+                        secure: 'ssl',
+                        telegram: {
+                            enabled: false,
+                            token: '',
+                            chat_id: '',
+                            proxy_type: 'none',
+                            proxy_url: '',
+                            proxy_ip: '',
+                            proxy_port: '',
+                            proxy_user: '',
+                            proxy_pass: ''
+                        },
+                        webhook: {
+                            enabled: false,
+                            url: '',
+                            method: 'GET',
+                            request_type: 'JSON',
+                            headers: '',
+                            body: ''
+                        }
                     },
                     Accounts: []
                 });
 
-                const checkInitStatus = async () => {
-                    loadingCheckInit.value = true;
-                    try {
-                        const res = await fetch('index.php?action=check_init');
-                        const data = await res.json();
+                const ecsOsOptions = [
+                    { value: 'ubuntu_22', label: 'Ubuntu 22.04' },
+                    { value: 'ubuntu_24', label: 'Ubuntu 24.04' },
+                    { value: 'alibaba_cloud_linux_3', label: 'Alibaba Cloud Linux 3' },
+                    { value: 'debian_12', label: 'Debian 12' },
+                    { value: 'centos_stream_9', label: 'CentOS Stream 9' },
+                    { value: 'windows_2022', label: 'Windows Server 2022' }
+                ];
 
-                        if (data.error) {
-                            criticalError.value = data.error;
-                            loading.value = false;
-                            return;
-                        }
-
-                        initialized.value = data.initialized;
-
-                        if (data.initialized) {
-                            checkLoginStatus();
-                        } else {
-                            loading.value = false;
-                        }
-                    } catch (e) {
-                        console.error('Init check failed', e);
-                        criticalError.value = "无法连接到服务器或响应格式错误。";
-                        loading.value = false;
-                    } finally {
-                        loadingCheckInit.value = false;
-                    }
-                };
-
-                const performSetup = async () => {
-                    try {
-                        const res = await fetch('index.php?action=setup', {
-                            method: 'POST',
-                            body: JSON.stringify(setupData.value)
-                        });
-                        const data = await res.json();
-                        if (data.success) {
-                            alert('系统初始化成功！');
-                            location.reload();
-                        } else {
-                            alert('初始化失败: ' + (data.message || '未知错误'));
-                        }
-                    } catch (e) {
-                        alert('网络请求失败');
-                    }
-                };
-
-                const checkLoginStatus = async () => {
-                    checkingLogin.value = true;
-                    try {
-                        const res = await fetch('index.php?action=check_login');
-                        const data = await res.json();
-                        if (data.logged_in) {
-                            isAdmin.value = true;
-                            fetchConfig();
-                            startLogPolling(); // 登录后开始轮询日志
-                        }
-                        fetchData();
-                    } catch (e) {
-                        console.error('Session check failed', e);
-                    } finally {
-                        checkingLogin.value = false;
-                    }
-                };
-
-                const fetchData = async () => {
-                    if (statusData.value.length === 0) loading.value = true;
-                    try {
-                        const res = await fetch('index.php?action=get_status');
-                        const json = await res.json();
-
-                        if (json.error) {
-                            criticalError.value = json.error;
-                        } else {
-                            statusData.value = json.data || [];
-                            if (json.system_last_run) {
-                                const now = Math.floor(Date.now() / 1000);
-                                const diff = now - json.system_last_run;
-                                cronWarning.value = diff > 180;
-                            } else {
-                                if (statusData.value.length > 0) cronWarning.value = true;
-                            }
-                        }
-                    } catch (e) {
-                        console.error(e);
-                        statusData.value = [];
-                    } finally {
-                        loading.value = false;
-                    }
-                };
-
-                const refreshSingle = async (id, index) => {
-                    refreshingMap.value[index] = true;
-                    try {
-                        const res = await fetch('index.php?action=refresh_account', {
-                            method: 'POST',
-                            body: JSON.stringify({ id: id })
-                        });
-                        const data = await res.json();
-                        if (data.success) {
-                            await fetchData();
-                        }
-                    } catch (e) {
-                        console.error(e);
-                    } finally {
-                        refreshingMap.value[index] = false;
-                    }
-                };
-
-                // 按需加载 ECharts
-                let echartsLoaded = typeof echarts !== 'undefined';
-                const loadECharts = () => {
-                    if (echartsLoaded) return Promise.resolve();
-                    return new Promise((resolve, reject) => {
-                        const s = document.createElement('script');
-                        s.src = 'static/echarts.min.js';
-                        s.onload = () => { echartsLoaded = true; resolve(); };
-                        s.onerror = reject;
-                        document.head.appendChild(s);
-                    });
-                };
-
-                // 图表功能
-                const openChart = async (id, accountName) => {
-                    showChartModal.value = true;
-                    chartLoading.value = true;
-                    currentChartId.value = id;
-                    currentChartAccount.value = accountName;
-                    chartMode.value = '24h';
-
-                    try {
-                        const [res] = await Promise.all([
-                            fetch(`index.php?action=get_history&id=${id}`),
-                            loadECharts()
-                        ]);
-                        const json = await res.json();
-                        currentChartData = json.data || {};
-
-                        setTimeout(() => {
-                            initChart();
-                            renderChart();
-                            chartLoading.value = false;
-                        }, 100);
-
-                    } catch (e) {
-                        console.error('Fetch history failed', e);
-                        chartLoading.value = false;
-                    }
-                };
-
-                const initChart = () => {
-                    const dom = document.getElementById('echarts-container');
-                    if (chartInstance) {
-                        chartInstance.dispose();
-                    }
-                    chartInstance = echarts.init(dom);
-                    window.addEventListener('resize', () => chartInstance && chartInstance.resize());
-                };
-
-                const switchChartMode = (mode) => {
-                    chartMode.value = mode;
-                    renderChart();
-                };
-
-                const isChartEmpty = computed(() => {
-                    if (chartMode.value === '24h') {
-                        return !currentChartData.history_24h || currentChartData.history_24h.length === 0;
-                    } else {
-                        return !currentChartData.history_30d || currentChartData.history_30d.length === 0;
-                    }
+                const createDefaultEcsDraft = () => ({
+                    accountGroupKey: '',
+                    regionId: '',
+                    instanceType: 'ecs.e-c4m1.large',
+                    osKey: 'debian_12',
+                    systemDiskSize: 20,
+                    instanceName: `launch-${new Date().toISOString().slice(0, 19).replace(/[-:T]/g, '').slice(0, 12)}`
                 });
 
-                const renderChart = () => {
-                    if (!chartInstance) return;
+                const config = ref(createDefaultConfig());
+                const statusInstances = ref([]);
+                const allInstances = ref([]);
+                const systemLogs = ref([]);
+                const selectedInstanceIds = ref([]);
+                const initialized = ref(true);
+                const loadingCheckInit = ref(true);
+                const loading = ref(true);
+                const checkingLogin = ref(true);
+                const showLoginModal = ref(false);
+                const passwordInput = ref('');
+                const criticalError = ref(null);
+                const isAdmin = ref(false);
+                const cronWarning = ref(false);
+                const currentMenu = ref('status');
+                const currentNotifyTab = ref('email');
+                const currentLogTab = ref('action');
+                const logAutoRefresh = ref(false);
+                const statusSyncInterval = ref(600);
+                const sendingEmail = ref(false);
+                const testingTelegram = ref(false);
+                const testingWebhook = ref(false);
+                const fetchingAllInstances = ref(false);
+                const syncingInstances = ref(false);
+                const refreshingInstanceIds = ref([]);
+                const accountSyncStates = ref({});
+                const accountSyncResults = ref({});
+                const toasts = ref([]);
+                const dialogState = ref({
+                    open: false,
+                    mode: 'alert',
+                    title: '提示',
+                    message: '',
+                    confirmLabel: '确定',
+                    cancelLabel: '取消',
+                    resolve: null
+                });
+                const showAccountModal = ref(false);
+                const savingAccountModal = ref(false);
+                const accountModalMode = ref('create');
+                const editingAccountIndex = ref(-1);
+                const accountDraft = ref(createDefaultAccount());
+                const showCreateEcsModal = ref(false);
+                const ecsCreateDraft = ref(createDefaultEcsDraft());
+                const ecsCreatePreview = ref(null);
+                const ecsCreateConfirmed = ref(false);
+                const ecsCreateResult = ref(null);
+                const ecsCredentialResult = ref(null);
+                const showCredentialModal = ref(false);
+                const credentialSavedAck = ref(false);
+                const ecsPreviewing = ref(false);
+                const ecsCreating = ref(false);
+                const setupData = ref({
+                    admin_password: '',
+                    traffic_threshold: 95,
+                    shutdown_mode: 'KeepCharging'
+                });
 
-                    let xData = [];
-                    let sData = [];
-                    let is30d = chartMode.value === '30d';
+                const statusFilter = ref({ account: '', search: '' });
+                const manageFilter = ref({ account: '', region: '', status: '', search: '' });
+                let logInterval = null;
+                let statusInterval = null;
 
-                    if (is30d) {
-                        if (currentChartData.history_30d) {
-                            xData = currentChartData.history_30d.map(i => i.date);
-                            sData = currentChartData.history_30d.map(i => i.value);
-                        }
-                    } else {
-                        if (currentChartData.history_24h) {
-                            xData = currentChartData.history_24h.map(i => i.time);
-                            sData = currentChartData.history_24h.map(i => i.value);
-                        }
+                const getRegionName = (regionId) => {
+                    const found = aliyunRegions.find((item) => item.id === regionId);
+                    return found ? found.name : (regionId || '-');
+                };
+
+                const getSiteTypeLabel = (siteType) => siteType === 'international' ? '国际站' : '中国站';
+                const formatTrafficUsage = (value) => Number(value || 0).toFixed(2).replace(/\.00$/, '');
+                const formatTrafficValue = (value) => {
+                    const traffic = Number(value || 0);
+                    if (!Number.isFinite(traffic) || traffic <= 0) return '0 MB';
+                    if (traffic >= 1) return `${traffic.toFixed(2).replace(/\.00$/, '')} GB`;
+
+                    const mb = traffic * 1024;
+                    return `${mb.toFixed(2).replace(/\.00$/, '')} MB`;
+                };
+                const formatCurrencyValue = (value, currency = 'CNY') => {
+                    const amount = Number(value ?? 0);
+                    if (!Number.isFinite(amount)) {
+                        return '--';
                     }
 
-                    if (xData.length === 0) {
-                        chartInstance.clear();
+                    const symbol = currency === 'USD' ? '$' : currency === 'CNY' ? '¥' : `${currency} `;
+                    return `${symbol}${amount.toFixed(2).replace(/\.00$/, '')}`;
+                };
+                const diskUnitText = (unit) => {
+                    if (!unit || unit === 'GiB' || unit === 'GB') return 'GB';
+                    return unit;
+                };
+                const diskCategoryText = (category) => ({
+                    cloud_auto: '自动选择',
+                    cloud_essd: '增强型固态盘',
+                    cloud_efficiency: '高效云盘',
+                    cloud: '普通云盘'
+                }[category] || category || '-');
+                const getAccountKey = (account, index) => account?.groupKey || `${account?.remark || 'account'}-${account?.regionId || 'region'}-${index}`;
+                const isRefreshingInstance = (id) => refreshingInstanceIds.value.includes(id);
+                let toastCounter = 0;
+                const pushToast = (message, type = 'info') => {
+                    if (!message) return;
+                    const id = `${Date.now()}-${toastCounter++}`;
+                    toasts.value = [...toasts.value, { id, message, type }];
+                    setTimeout(() => {
+                        toasts.value = toasts.value.filter((toast) => toast.id !== id);
+                    }, 3200);
+                };
+                const openAlert = (message, type = 'info') => {
+                    pushToast(message, type);
+                };
+                const copyCredential = async (value) => {
+                    if (!value) {
+                        openAlert('没有可复制的内容', 'error');
                         return;
                     }
 
-                    const option = {
-                        tooltip: {
-                            trigger: 'axis',
-                            formatter: function (params) {
-                                const item = params[0];
-                                return `${item.name}<br/><span style="display:inline-block;margin-right:4px;border-radius:10px;width:10px;height:10px;background-color:${item.color};"></span>流量: <span style="font-weight:bold">${item.value}</span> GB`;
-                            },
-                            backgroundColor: 'rgba(255, 255, 255, 0.9)',
-                            borderColor: '#E5E7EB',
-                            textStyle: { color: '#1F2937' }
-                        },
-                        grid: {
-                            left: '2%', right: '3%', bottom: '3%', top: '12%',
-                            containLabel: true
-                        },
-                        xAxis: {
-                            type: 'category',
-                            boundaryGap: is30d,
-                            data: xData,
-                            axisLine: { lineStyle: { color: '#E5E7EB' } },
-                            axisLabel: { color: '#6B7280', fontSize: 11 },
-                            axisTick: { show: false }
-                        },
-                        yAxis: {
-                            type: 'value',
-                            name: '流量 (GB)',
-                            nameTextStyle: { color: '#9CA3AF', padding: [0, 0, 0, 20] },
-                            splitLine: { lineStyle: { type: 'dashed', color: '#F3F4F6' } },
-                            axisLabel: { color: '#6B7280', fontSize: 11 }
-                        },
-                        series: [{
-                            data: sData,
-                            type: is30d ? 'bar' : 'line',
-                            smooth: true,
-                            barMaxWidth: 30,
-                            itemStyle: {
-                                color: is30d ? new echarts.graphic.LinearGradient(0, 0, 0, 1, [
-                                    { offset: 0, color: '#1C1C1E' },
-                                    { offset: 1, color: '#4B5563' }
-                                ]) : '#007AFF',
-                                borderRadius: is30d ? [4, 4, 0, 0] : 0
-                            },
-                            lineStyle: is30d ? {} : {
-                                width: 3,
-                                shadowColor: 'rgba(0, 122, 255, 0.3)',
-                                shadowBlur: 10
-                            },
-                            areaStyle: is30d ? null : {
-                                color: new echarts.graphic.LinearGradient(0, 0, 0, 1, [
-                                    { offset: 0, color: 'rgba(0,122,255,0.2)' },
-                                    { offset: 1, color: 'rgba(0,122,255,0.0)' }
-                                ])
-                            },
-                            showSymbol: !is30d,
-                            symbolSize: 6
-                        }]
-                    };
+                    const copyText = String(value).replace(/\\n/g, '\n');
 
-                    chartInstance.setOption(option, true);
-                };
-
-                const closeChart = () => {
-                    showChartModal.value = false;
-                    if (chartInstance) {
-                        chartInstance.dispose();
-                        chartInstance = null;
-                    }
-                };
-
-                const toggleAdmin = () => {
-                    if (isAdmin.value) {
-                        fetch('index.php?action=logout').then(() => {
-                            isAdmin.value = false;
-                            config.value = null;
-                            systemLogs.value = [];
-                            stopLogPolling();
-                        });
-                    } else {
-                        showLoginModal.value = true;
-                    }
-                };
-
-                const performLogin = async () => {
                     try {
-                        const res = await fetch('index.php?action=login', {
-                            method: 'POST',
-                            body: JSON.stringify({ password: passwordInput.value })
+                        await navigator.clipboard.writeText(copyText);
+                        openAlert('已复制到剪贴板', 'success');
+                    } catch (error) {
+                        const textarea = document.createElement('textarea');
+                        textarea.value = copyText;
+                        textarea.style.position = 'fixed';
+                        textarea.style.left = '-9999px';
+                        document.body.appendChild(textarea);
+                        textarea.focus();
+                        textarea.select();
+                        document.execCommand('copy');
+                        document.body.removeChild(textarea);
+                        openAlert('已复制到剪贴板', 'success');
+                    }
+                };
+                const buildCredentialCopyText = () => {
+                    const result = ecsCredentialResult.value || {};
+                    return [
+                        `地址: ${result.publicIp || '-'}`,
+                        `用户: ${result.loginUser || '-'}`,
+                        `密码: ${result.loginPassword || '-'}`
+                    ].join('\n');
+                };
+                const askConfirm = (message, options = {}) => new Promise((resolve) => {
+                    dialogState.value = {
+                        open: true,
+                        mode: 'confirm',
+                        title: options.title || '请确认',
+                        message,
+                        confirmLabel: options.confirmLabel || '确认',
+                        cancelLabel: options.cancelLabel || '取消',
+                        resolve
+                    };
+                });
+                const resolveDialog = (confirmed) => {
+                    const resolver = dialogState.value.resolve;
+                    dialogState.value = {
+                        open: false,
+                        mode: 'alert',
+                        title: '提示',
+                        message: '',
+                        confirmLabel: '确定',
+                        cancelLabel: '取消',
+                        resolve: null
+                    };
+                    if (typeof resolver === 'function') {
+                        resolver(confirmed);
+                    }
+                };
+                const getAccountSyncResult = (index) => {
+                    const account = config.value.Accounts[index];
+                    if (!account) return null;
+                    return accountSyncResults.value[getAccountKey(account, index)] || null;
+                };
+                const isSyncingAccount = (index) => {
+                    const account = config.value.Accounts[index];
+                    if (!account) return false;
+                    return !!accountSyncStates.value[getAccountKey(account, index)];
+                };
+                const getAccountSyncLabel = (index) => {
+                    if (isSyncingAccount(index)) return '同步中...';
+                    const result = getAccountSyncResult(index);
+                    if (!result) return '待同步';
+                    return result.success ? '已同步' : '同步错误';
+                };
+                const getAccountSyncButtonClass = (index) => {
+                    const result = getAccountSyncResult(index);
+                    if (!result) return 'pending';
+                    return result.success ? 'synced' : 'error';
+                };
+
+                const maskAccessKey = (value) => {
+                    if (!value) return '未配置账号';
+                    return value.length <= 7 ? value : `${value.slice(0, 7)}***`;
+                };
+
+                const accountOptions = computed(() => {
+                    const options = [];
+                    const seen = new Set();
+
+                    const groups = config.value?.Accounts || [];
+                    groups.forEach((group) => {
+                        const key = group.groupKey || `${group.AccessKeyId}|${group.regionId}`;
+                        if (!group.AccessKeyId || !group.regionId || seen.has(key)) return;
+                        seen.add(key);
+                        const labelBase = group.remark || maskAccessKey(group.AccessKeyId);
+                        options.push({
+                            value: key,
+                            label: `${labelBase} / ${getRegionName(group.regionId)}`
                         });
-                        const data = await res.json();
-                        if (data.success) {
-                            isAdmin.value = true;
-                            showLoginModal.value = false;
-                            passwordInput.value = '';
-                            fetchConfig();
-                            startLogPolling();
-                        } else {
-                            alert(data.message || '登录失败');
+                    });
+
+                    if (options.length > 0) return options;
+
+                    statusInstances.value.forEach((item) => {
+                        const key = item.groupKey || item.accountMasked;
+                        if (!key || seen.has(key)) return;
+                        seen.add(key);
+                        options.push({
+                            value: key,
+                            label: item.accountLabel || item.accountMasked
+                        });
+                    });
+
+                    return options;
+                });
+
+                const selectedCreateAccount = computed(() => {
+                    return (config.value.Accounts || []).find((account) => {
+                        const key = account.groupKey || `${account.AccessKeyId}|${account.regionId}`;
+                        return key === ecsCreateDraft.value.accountGroupKey;
+                    }) || null;
+                });
+
+                const selectedCreateAccountRegionName = computed(() => {
+                    const account = selectedCreateAccount.value;
+                    if (!account) return '请先选择账号';
+                    return `${getRegionName(account.regionId)} (${account.regionId})`;
+                });
+
+                const filteredStatusInstances = computed(() => {
+                    const search = statusFilter.value.search.trim().toLowerCase();
+                    return statusInstances.value.filter((item) => {
+                        if (statusFilter.value.account && item.groupKey !== statusFilter.value.account) {
+                            return false;
                         }
-                    } catch (e) {
-                        alert('登录请求失败');
+
+                        if (!search) return true;
+
+                        return [
+                            item.remark,
+                            item.instanceName,
+                            item.instanceId,
+                            item.accountLabel
+                        ].some((field) => (field || '').toLowerCase().includes(search));
+                    });
+                });
+
+                const filteredManagedInstances = computed(() => {
+                    const search = manageFilter.value.search.trim().toLowerCase();
+                    return allInstances.value.filter((item) => {
+                        if (manageFilter.value.account && item.groupKey !== manageFilter.value.account) return false;
+                        if (manageFilter.value.region && item.regionId !== manageFilter.value.region) return false;
+                        if (manageFilter.value.status && item.instanceStatus !== manageFilter.value.status) return false;
+                        if (!search) return true;
+
+                        return [
+                            item.remark,
+                            item.instanceName,
+                            item.instanceId,
+                            item.accountLabel
+                        ].some((field) => (field || '').toLowerCase().includes(search));
+                    });
+                });
+
+                const isAllSelected = computed(() => {
+                    if (filteredManagedInstances.value.length === 0) return false;
+                    return filteredManagedInstances.value.every((item) => selectedInstanceIds.value.includes(item.id));
+                });
+
+                const menuItems = computed(() => {
+                    const items = [
+                        {
+                            key: 'status',
+                            label: '实例状态',
+                            icon: '<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8"><path d="M4 19.5V9m8 10.5V4.5m8 15V13"/></svg>'
+                        }
+                    ];
+
+                    if (isAdmin.value) {
+                        items.push(
+                            {
+                                key: 'manage',
+                                label: '实例管理',
+                                icon: '<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8"><path d="M4 7h16M4 12h16M4 17h10"/></svg>'
+                            },
+                            {
+                                key: 'accounts',
+                                label: '账号管理',
+                                icon: '<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8"><path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M22 21v-2a4 4 0 0 0-3-3.87"/><path d="M16 3.13a4 4 0 0 1 0 7.75"/></svg>'
+                            },
+                            {
+                                key: 'settings',
+                                label: '系统设置',
+                                icon: '<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8"><path d="M12 15.5A3.5 3.5 0 1 0 12 8.5a3.5 3.5 0 0 0 0 7Z"/><path d="M19.4 15a1.7 1.7 0 0 0 .34 1.87l.06.06a2 2 0 0 1-2.83 2.83l-.06-.06A1.7 1.7 0 0 0 15 19.4a1.7 1.7 0 0 0-1 .6 1.7 1.7 0 0 0-.4 1.08V21a2 2 0 0 1-4 0v-.09a1.7 1.7 0 0 0-.4-1.08 1.7 1.7 0 0 0-1-.6 1.7 1.7 0 0 0-1.87.34l-.06.06a2 2 0 0 1-2.83-2.83l.06-.06A1.7 1.7 0 0 0 4.6 15a1.7 1.7 0 0 0-.6-1 1.7 1.7 0 0 0-1.08-.4H2.9a2 2 0 0 1 0-4H3a1.7 1.7 0 0 0 1.08-.4 1.7 1.7 0 0 0 .6-1 1.7 1.7 0 0 0-.34-1.87l-.06-.06a2 2 0 0 1 2.83-2.83l.06.06A1.7 1.7 0 0 0 9 4.6a1.7 1.7 0 0 0 1-.6 1.7 1.7 0 0 0 .4-1.08V2.9a2 2 0 0 1 4 0V3a1.7 1.7 0 0 0 .4 1.08 1.7 1.7 0 0 0 1 .6 1.7 1.7 0 0 0 1.87-.34l.06-.06a2 2 0 0 1 2.83 2.83l-.06.06A1.7 1.7 0 0 0 19.4 9a1.7 1.7 0 0 0 .6 1 1.7 1.7 0 0 0 1.08.4h.09a2 2 0 0 1 0 4h-.09a1.7 1.7 0 0 0-1.08.4 1.7 1.7 0 0 0-.6 1Z"/></svg>'
+                            },
+                            {
+                                key: 'logs',
+                                label: '系统日志',
+                                icon: '<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8"><path d="M8 6h13M8 12h13M8 18h13M3 6h.01M3 12h.01M3 18h.01"/></svg>'
+                            }
+                        );
+                    }
+
+                    return items;
+                });
+
+                const normalizeConfig = (payload) => {
+                    const next = createDefaultConfig();
+                    Object.assign(next, payload || {});
+
+                    next.Notification = payload?.Notification || next.Notification;
+                    next.Notification.telegram = payload?.Notification?.telegram || next.Notification.telegram;
+                    next.Notification.webhook = payload?.Notification?.webhook || next.Notification.webhook;
+                    next.Ddns = {
+                        ...next.Ddns,
+                        ...(payload?.Ddns || {}),
+                        cloudflare: {
+                            ...next.Ddns.cloudflare,
+                            ...(payload?.Ddns?.cloudflare || {})
+                        }
+                    };
+                    next.Accounts = Array.isArray(payload?.Accounts) ? payload.Accounts.map((item) => ({
+                        ...createDefaultAccount(),
+                        ...item
+                    })) : [];
+
+                    return next;
+                };
+
+                const fetchStatusData = async (restartPolling = true) => {
+                    if (!isAdmin.value) {
+                        statusInstances.value = [];
+                        loading.value = false;
+                        cronWarning.value = false;
+                        stopStatusPolling();
+                        return;
+                    }
+                    loading.value = true;
+                    try {
+                        const res = await fetch('index.php?action=get_status');
+                        const json = await res.json();
+                        if (!res.ok || json.error) {
+                            if (res.status === 403 || json.error === 'Unauthorized' || json.error === '请先登录后再操作') {
+                                isAdmin.value = false;
+                                statusInstances.value = [];
+                                stopStatusPolling();
+                                return;
+                            }
+                            criticalError.value = json.error;
+                            statusInstances.value = [];
+                        } else {
+                            statusInstances.value = json.data || [];
+                            statusSyncInterval.value = Number(json.sync_interval || statusSyncInterval.value || 600);
+                            const now = Math.floor(Date.now() / 1000);
+                            cronWarning.value = json.system_last_run ? (now - json.system_last_run) > 180 : statusInstances.value.length > 0;
+                            if (restartPolling) {
+                                startStatusPolling();
+                            }
+                        }
+                    } catch (error) {
+                        console.error('Fetch status failed', error);
+                        statusInstances.value = [];
+                    } finally {
+                        loading.value = false;
                     }
                 };
 
@@ -1360,64 +3190,71 @@
                     try {
                         const res = await fetch('index.php?action=get_config');
                         const data = await res.json();
-                        if (!data.Accounts) data.Accounts = [];
-                        data.Accounts.forEach(acc => {
-                            if (!acc.schedule) acc.schedule = { enabled: false, startTime: '', stopTime: '' };
-                            if (typeof acc.maxTraffic === 'undefined') acc.maxTraffic = 200;
-                            if (typeof acc.remark === 'undefined') acc.remark = '';
-                            if (typeof acc.siteType === 'undefined') acc.siteType = 'china';
-                        });
+                        config.value = normalizeConfig(data);
+                    } catch (error) {
+                        console.error('Fetch config failed', error);
+                    }
+                };
 
-                        if (!data.Notification) {
-                            data.Notification = {
-                                email_enabled: true, email: '', host: '', port: 465, secure: 'ssl', username: '', password: '',
-                                telegram: { enabled: false, token: '', chat_id: '', proxy_type: 'none', proxy_url: '', proxy_ip: '', proxy_port: '', proxy_user: '', proxy_pass: '' },
-                                webhook: { enabled: false, url: '', method: 'GET' }
-                            };
+                const fetchAllInstances = async (sync = false) => {
+                    fetchingAllInstances.value = true;
+                    try {
+                        const res = await fetch(`index.php?action=get_all_instances&sync=${sync ? '1' : '0'}`);
+                        const data = await res.json();
+                        if (data.error) {
+                            openAlert(data.error, 'error');
+                            allInstances.value = [];
                         } else {
-                            if (typeof data.Notification.email_enabled === 'undefined') data.Notification.email_enabled = true;
-                            if (!data.Notification.telegram) data.Notification.telegram = { enabled: false, token: '', chat_id: '', proxy_type: 'none', proxy_url: '', proxy_ip: '', proxy_port: '', proxy_user: '', proxy_pass: '' };
-                            if (!data.Notification.webhook) {
-                                data.Notification.webhook = { enabled: false, url: '', method: 'GET', request_type: 'JSON', headers: '', body: '' };
-                            } else {
-                                if (!data.Notification.webhook.request_type) data.Notification.webhook.request_type = 'JSON';
-                                if (typeof data.Notification.webhook.headers === 'undefined') data.Notification.webhook.headers = '';
-                                if (typeof data.Notification.webhook.body === 'undefined') data.Notification.webhook.body = '';
+                            allInstances.value = data.data || [];
+                            if (sync) {
+                                openAlert('实例已从阿里云同步完成', 'success');
                             }
                         }
-
-                        if (typeof data.enable_billing === 'undefined') data.enable_billing = false;
-
-                        config.value = data;
-                    } catch (e) { console.error(e); }
+                    } catch (error) {
+                        console.error('Fetch instances failed', error);
+                        openAlert('实例列表请求失败', 'error');
+                    } finally {
+                        fetchingAllInstances.value = false;
+                    }
                 };
 
-
-
-                const saveConfig = async () => {
-                    if (!config.value) return;
+                const syncCloudInstances = async () => {
+                    syncingInstances.value = true;
                     try {
-                        const res = await fetch('index.php?action=save_config', { method: 'POST', body: JSON.stringify(config.value) });
+                        const res = await fetch('index.php?action=get_all_instances&sync=1');
                         const data = await res.json();
-                        if (data.success) { alert('配置已保存'); fetchData(); } else { alert('保存失败'); }
-                    } catch (e) { alert('保存请求失败'); }
+                        if (data.error) {
+                            openAlert(data.error, 'error');
+                        } else {
+                            allInstances.value = data.data || [];
+                            statusInstances.value = data.data || [];
+                            openAlert('实例状态已与阿里云同步完成', 'success');
+                            fetchStatusData(false);
+                        }
+                    } catch (error) {
+                        console.error('Sync instances failed', error);
+                        openAlert('同步请求失败', 'error');
+                    } finally {
+                        syncingInstances.value = false;
+                    }
                 };
 
-                // 获取系统日志 (带Tab参数)
                 const fetchLogs = async () => {
                     if (!isAdmin.value) return;
                     try {
                         const res = await fetch(`index.php?action=get_logs&tab=${currentLogTab.value}`);
                         const data = await res.json();
-                        if (data.data) {
-                            systemLogs.value = data.data;
-                        }
-                    } catch (e) { console.error('Fetch logs failed', e); }
+                        systemLogs.value = data.data || [];
+                    } catch (error) {
+                        console.error('Fetch logs failed', error);
+                    }
                 };
 
-                // 清空日志
                 const clearLogs = async () => {
-                    if (!confirm(`确定清空"${currentLogTab.value === 'action' ? '动作' : '心跳'}"日志吗？`)) return;
+                    const confirmed = await askConfirm(`确定清空${currentLogTab.value === 'action' ? '动作' : '心跳'}日志吗？`, {
+                        title: '清空日志'
+                    });
+                    if (!confirmed) return;
                     try {
                         const res = await fetch('index.php?action=clear_logs', {
                             method: 'POST',
@@ -1427,14 +3264,16 @@
                         if (data.success) {
                             fetchLogs();
                         }
-                    } catch (e) { console.error(e); }
+                    } catch (error) {
+                        console.error('Clear logs failed', error);
+                    }
                 };
 
                 const startLogPolling = () => {
-                    fetchLogs(); // 立即执行一次
+                    fetchLogs();
                     logAutoRefresh.value = true;
                     if (logInterval) clearInterval(logInterval);
-                    logInterval = setInterval(fetchLogs, 3000); // 3秒刷新一次
+                    logInterval = setInterval(fetchLogs, 3000);
                 };
 
                 const stopLogPolling = () => {
@@ -1445,69 +3284,820 @@
                     }
                 };
 
+                const stopStatusPolling = () => {
+                    if (statusInterval) {
+                        clearInterval(statusInterval);
+                        statusInterval = null;
+                    }
+                };
+
+                const startStatusPolling = () => {
+                    stopStatusPolling();
+                    if (!initialized.value || criticalError.value || currentMenu.value !== 'status') {
+                        return;
+                    }
+
+                    const intervalSeconds = Math.max(Number(statusSyncInterval.value || 600), 60);
+                    statusInterval = setInterval(() => {
+                        fetchStatusData(false);
+                    }, intervalSeconds * 1000);
+                };
+
+                const validateAccounts = () => {
+                    const accounts = config.value.Accounts || [];
+                    for (const account of accounts) {
+                        const isEmpty = !account.AccessKeyId && !account.AccessKeySecret && !account.regionId && !account.remark;
+                        if (isEmpty) continue;
+                        if (!account.remark || !account.AccessKeyId || !account.AccessKeySecret || !account.regionId || !account.maxTraffic) {
+                            openAlert('账号管理中存在未填完整的行，请补齐备注、AK、区域和账号流量。', 'error');
+                            return false;
+                        }
+                    }
+                    return true;
+                };
+
+                const persistConfig = async (successMessage = '配置已保存并完成实例同步') => {
+                    if (!validateAccounts()) return;
+                    try {
+                        const res = await fetch('index.php?action=save_config', {
+                            method: 'POST',
+                            body: JSON.stringify(config.value)
+                        });
+                        const data = await res.json();
+                        if (data.success) {
+                            await fetchConfig();
+                            await fetchStatusData();
+                            if (isAdmin.value) {
+                                await fetchAllInstances(false);
+                            }
+                            if (successMessage) {
+                                openAlert(successMessage, 'success');
+                            }
+                            return true;
+                        } else {
+                            openAlert(data.message || '保存失败', 'error');
+                            return false;
+                        }
+                    } catch (error) {
+                        console.error('Save config failed', error);
+                        openAlert('保存请求失败', 'error');
+                        return false;
+                    }
+                };
+
+                const saveConfig = async () => {
+                    return persistConfig();
+                };
+
+                const refreshInstanceCard = async (id) => {
+                    refreshingInstanceIds.value = [...new Set([...refreshingInstanceIds.value, id])];
+                    try {
+                        const res = await fetch('index.php?action=refresh_account', {
+                            method: 'POST',
+                            body: JSON.stringify({ id })
+                        });
+                        const data = await res.json();
+                        if (!data.success && !data.billing_error) {
+                            openAlert(data.message || '刷新失败', 'error');
+                            return;
+                        }
+                        await fetchStatusData(false);
+                        if (isAdmin.value && currentMenu.value === 'manage') {
+                            await fetchAllInstances(false);
+                        }
+                        const refreshed = statusInstances.value.find((item) => item.id === id);
+                        if (data.billing_error) {
+                            openAlert(`实例已刷新，账单查询异常：${data.billing_error}`, 'info');
+                        } else if (refreshed) {
+                            openAlert(`实例已刷新，当前流量 ${formatTrafficValue(refreshed.flow_used)}`, 'success');
+                        } else {
+                            openAlert('实例已刷新', 'success');
+                        }
+                    } catch (error) {
+                        console.error('Refresh instance failed', error);
+                        openAlert('刷新请求失败', 'error');
+                    } finally {
+                        refreshingInstanceIds.value = refreshingInstanceIds.value.filter((itemId) => itemId !== id);
+                    }
+                };
+
+                const patchInstanceLists = (accountId, changes = {}, options = {}) => {
+                    const id = Number(accountId);
+                    const patchItem = (item) => {
+                        if (Number(item.id) !== id && Number(item.accountId) !== id) {
+                            return item;
+                        }
+
+                        return {
+                            ...item,
+                            ...changes,
+                            status: changes.instanceStatus || changes.status || item.status,
+                            instanceStatus: changes.instanceStatus || changes.status || item.instanceStatus,
+                            lastUpdated: new Date().toLocaleString('zh-CN', { hour12: false })
+                        };
+                    };
+
+                    if (options.remove) {
+                        allInstances.value = allInstances.value.filter((item) => Number(item.id) !== id && Number(item.accountId) !== id);
+                        statusInstances.value = statusInstances.value.filter((item) => Number(item.id) !== id && Number(item.accountId) !== id);
+                        selectedInstanceIds.value = selectedInstanceIds.value.filter((itemId) => Number(itemId) !== id);
+                        return;
+                    }
+
+                    allInstances.value = allInstances.value.map(patchItem);
+                    statusInstances.value = statusInstances.value.map(patchItem);
+                };
+
+                const controlInstance = async (accountId, action) => {
+                    const label = action === 'start' ? '启动' : '停止';
+                    const confirmed = await askConfirm(`确定${label}该实例吗？`, {
+                        title: `${label}实例`
+                    });
+                    if (!confirmed) return;
+                    const nextStatus = action === 'start' ? 'Starting' : 'Stopping';
+                    patchInstanceLists(accountId, { instanceStatus: nextStatus, status: nextStatus });
+                    refreshingInstanceIds.value = [...new Set([...refreshingInstanceIds.value, accountId])];
+                    try {
+                        const res = await fetch('index.php?action=control_instance', {
+                            method: 'POST',
+                            body: JSON.stringify({ accountId, action, shutdownMode: config.value.shutdown_mode || 'KeepCharging' })
+                        });
+                        const data = await res.json();
+                        if (!data.success) {
+                            openAlert('操作失败', 'error');
+                            return;
+                        }
+                        openAlert(`${label}指令已提交，实例状态正在更新`, 'success');
+                        fetchAllInstances(false);
+                        fetchStatusData(false);
+                    } catch (error) {
+                        console.error('Control instance failed', error);
+                        openAlert('操作请求失败', 'error');
+                        fetchAllInstances(false);
+                        fetchStatusData(false);
+                    } finally {
+                        refreshingInstanceIds.value = refreshingInstanceIds.value.filter((itemId) => Number(itemId) !== Number(accountId));
+                    }
+                };
+
+                const deleteInstance = async (accountId) => {
+                    const confirmed = await askConfirm('确定释放这台实例吗？该操作不可恢复。', {
+                        title: '释放实例',
+                        confirmLabel: '确认释放'
+                    });
+                    if (!confirmed) return;
+                    patchInstanceLists(accountId, { instanceStatus: 'Releasing', status: 'Releasing' });
+                    refreshingInstanceIds.value = [...new Set([...refreshingInstanceIds.value, accountId])];
+                    try {
+                        const res = await fetch('index.php?action=delete_instance', {
+                            method: 'POST',
+                            body: JSON.stringify({ accountId, forceStop: true })
+                        });
+                        const data = await res.json();
+                        if (!data.success) {
+                            openAlert('释放失败', 'error');
+                            fetchAllInstances(false);
+                            fetchStatusData(false);
+                            return;
+                        }
+                        openAlert('释放指令已完成，实例已从列表移除', 'success');
+                        fetchAllInstances(false);
+                        fetchStatusData(false);
+                    } catch (error) {
+                        console.error('Delete instance failed', error);
+                        openAlert('释放请求失败', 'error');
+                        fetchAllInstances(false);
+                        fetchStatusData(false);
+                    } finally {
+                        refreshingInstanceIds.value = refreshingInstanceIds.value.filter((itemId) => Number(itemId) !== Number(accountId));
+                    }
+                };
+
+                const batchAction = async (action) => {
+                    if (selectedInstanceIds.value.length === 0) return;
+                    const actionLabel = action === 'delete' ? '释放' : (action === 'start' ? '启动' : '停止');
+                    const confirmed = await askConfirm(`确定批量${actionLabel}选中的 ${selectedInstanceIds.value.length} 台实例吗？`, {
+                        title: `批量${actionLabel}`
+                    });
+                    if (!confirmed) return;
+                    const pendingIds = [...selectedInstanceIds.value];
+                    const nextStatus = action === 'delete' ? 'Released' : (action === 'start' ? 'Starting' : 'Stopping');
+                    pendingIds.forEach((accountId) => {
+                        patchInstanceLists(accountId, { instanceStatus: nextStatus, status: nextStatus }, { remove: action === 'delete' });
+                    });
+                    refreshingInstanceIds.value = [...new Set([...refreshingInstanceIds.value, ...pendingIds])];
+
+                    try {
+                        for (const accountId of pendingIds) {
+                            const endpoint = action === 'delete' ? 'delete_instance' : 'control_instance';
+                            const body = action === 'delete'
+                                ? { accountId, forceStop: true }
+                                : { accountId, action, shutdownMode: config.value.shutdown_mode || 'KeepCharging' };
+
+                            await fetch(`index.php?action=${endpoint}`, {
+                                method: 'POST',
+                                body: JSON.stringify(body)
+                            });
+                        }
+
+                        selectedInstanceIds.value = [];
+                        openAlert(`批量${actionLabel}指令已提交`, 'success');
+                        fetchAllInstances(false);
+                        fetchStatusData(false);
+                    } catch (error) {
+                        console.error('Batch action failed', error);
+                        openAlert('批量操作失败', 'error');
+                        fetchAllInstances(false);
+                        fetchStatusData(false);
+                    } finally {
+                        refreshingInstanceIds.value = refreshingInstanceIds.value.filter((itemId) => !pendingIds.map(Number).includes(Number(itemId)));
+                    }
+                };
+
+                const toggleSelectAll = () => {
+                    if (isAllSelected.value) {
+                        selectedInstanceIds.value = [];
+                        return;
+                    }
+                    selectedInstanceIds.value = filteredManagedInstances.value.map((item) => item.id);
+                };
+
+                const syncAccount = async (index) => {
+                    const account = config.value.Accounts[index];
+                    if (!account) return;
+
+                    if (!account.groupKey) {
+                        openAlert('账号信息不完整，请先保存账号后再同步。', 'error');
+                        return;
+                    }
+
+                    const key = getAccountKey(account, index);
+                    accountSyncStates.value = { ...accountSyncStates.value, [key]: true };
+
+                    try {
+                        const res = await fetch('index.php?action=sync_account_group', {
+                            method: 'POST',
+                            body: JSON.stringify({ groupKey: account.groupKey })
+                        });
+                        const data = await res.json();
+
+                        if (!res.ok || !data.success) {
+                            const message = data.message || '账号同步失败';
+                            accountSyncResults.value = {
+                                ...accountSyncResults.value,
+                                [key]: { success: false, message }
+                            };
+                            openAlert(message, 'error');
+                            return;
+                        }
+
+                        await fetchConfig();
+                        await fetchAllInstances(false);
+                        await fetchStatusData(false);
+                        accountSyncResults.value = {
+                            ...accountSyncResults.value,
+                            [key]: {
+                                success: true,
+                                message: data.message || '同步完成'
+                            }
+                        };
+                        openAlert(data.message || '账号已同步', 'success');
+                    } catch (error) {
+                        console.error('Sync account failed', error);
+                        accountSyncResults.value = {
+                            ...accountSyncResults.value,
+                            [key]: { success: false, message: '同步请求失败，请稍后重试' }
+                        };
+                        openAlert('同步请求失败，请稍后重试', 'error');
+                    } finally {
+                        accountSyncStates.value = { ...accountSyncStates.value, [key]: false };
+                    }
+                };
+
+                const openCreateAccountModal = () => {
+                    accountModalMode.value = 'create';
+                    editingAccountIndex.value = -1;
+                    accountDraft.value = createDefaultAccount();
+                    showAccountModal.value = true;
+                };
+
+                const openEditAccountModal = (index) => {
+                    accountModalMode.value = 'edit';
+                    editingAccountIndex.value = index;
+                    accountDraft.value = {
+                        ...createDefaultAccount(),
+                        ...(config.value.Accounts[index] || {})
+                    };
+                    showAccountModal.value = true;
+                };
+
+                const closeAccountModal = () => {
+                    showAccountModal.value = false;
+                    savingAccountModal.value = false;
+                    editingAccountIndex.value = -1;
+                    accountDraft.value = createDefaultAccount();
+                };
+
+                const validateAccountDraft = () => {
+                    const draft = accountDraft.value;
+                    if (!draft.remark || !draft.AccessKeyId || !draft.AccessKeySecret || !draft.regionId || !draft.maxTraffic) {
+                        openAlert('请填写完整的账号信息，包括备注、AK、区域和账号流量。', 'error');
+                        return false;
+                    }
+                    return true;
+                };
+
+                const saveAccountModal = async () => {
+                    if (!validateAccountDraft()) return;
+                    savingAccountModal.value = true;
+                    const nextAccounts = [...(config.value.Accounts || [])];
+                    const draft = {
+                        ...createDefaultAccount(),
+                        ...accountDraft.value
+                    };
+
+                    if (accountModalMode.value === 'edit' && editingAccountIndex.value > -1) {
+                        nextAccounts.splice(editingAccountIndex.value, 1, draft);
+                    } else {
+                        nextAccounts.push(draft);
+                    }
+
+                    const previousAccounts = config.value.Accounts;
+                    config.value.Accounts = nextAccounts;
+                    const success = await persistConfig('账号已保存并完成实例同步');
+                    if (success) {
+                        closeAccountModal();
+                        return;
+                    }
+
+                    config.value.Accounts = previousAccounts;
+                    savingAccountModal.value = false;
+                };
+
+                const openCreateEcsModal = () => {
+                    const draft = createDefaultEcsDraft();
+                    const firstAccount = config.value.Accounts?.[0];
+                    if (firstAccount) {
+                        draft.accountGroupKey = firstAccount.groupKey || `${firstAccount.AccessKeyId}|${firstAccount.regionId}`;
+                        draft.regionId = firstAccount.regionId || '';
+                    }
+                    ecsCreateDraft.value = draft;
+                    ecsCreatePreview.value = null;
+                    ecsCreateConfirmed.value = false;
+                    ecsCreateResult.value = null;
+                    showCreateEcsModal.value = true;
+                };
+
+                const closeCreateEcsModal = () => {
+                    if (ecsCreating.value) return;
+                    showCreateEcsModal.value = false;
+                    ecsCreateDraft.value = createDefaultEcsDraft();
+                    ecsCreatePreview.value = null;
+                    ecsCreateConfirmed.value = false;
+                    ecsCreateResult.value = null;
+                };
+
+                const closeCredentialModal = () => {
+                    if (!credentialSavedAck.value) {
+                        openAlert('请先确认已保存登录信息', 'error');
+                        return;
+                    }
+
+                    showCredentialModal.value = false;
+                    ecsCredentialResult.value = null;
+                    credentialSavedAck.value = false;
+                };
+
+                const resetCreateEcsPreview = () => {
+                    if (ecsCreating.value) return;
+                    ecsCreatePreview.value = null;
+                    ecsCreateConfirmed.value = false;
+                    ecsCreateResult.value = null;
+                };
+
+                const previewCreateEcs = async () => {
+                    const account = selectedCreateAccount.value;
+                    if (!account) {
+                        openAlert('请先选择用于创建 ECS 的账号', 'error');
+                        return;
+                    }
+                    if (!ecsCreateDraft.value.instanceType) {
+                        openAlert('请填写实例规格，例如 ecs.e-c4m1.large', 'error');
+                        return;
+                    }
+                    const diskSize = Number(ecsCreateDraft.value.systemDiskSize || 0);
+                    if (!Number.isFinite(diskSize) || diskSize < 1) {
+                        openAlert('系统盘大小请填写大于 0 的整数，具体范围会在下一步由阿里云 API 校验。', 'error');
+                        return;
+                    }
+
+                    ecsPreviewing.value = true;
+                    try {
+                        const res = await fetch('index.php?action=preview_ecs_create', {
+                            method: 'POST',
+                            body: JSON.stringify({
+                                ...ecsCreateDraft.value,
+                                regionId: account.regionId
+                            })
+                        });
+                        const data = await res.json();
+                        if (!res.ok || !data.success) {
+                            openAlert(data.message || '创建预检失败', 'error');
+                            return;
+                        }
+                        ecsCreatePreview.value = data;
+                        ecsCreateConfirmed.value = false;
+                    } catch (error) {
+                        console.error('Preview ECS failed', error);
+                        openAlert('创建预检请求失败', 'error');
+                    } finally {
+                        ecsPreviewing.value = false;
+                    }
+                };
+
+                const confirmCreateEcs = async () => {
+                    if (!ecsCreatePreview.value || !ecsCreateConfirmed.value) return;
+                    ecsCreating.value = true;
+                    try {
+                        const res = await fetch('index.php?action=create_ecs', {
+                            method: 'POST',
+                            body: JSON.stringify({
+                                previewId: ecsCreatePreview.value.previewId,
+                                confirmed: true
+                            })
+                        });
+                        const data = await res.json();
+                        if (!res.ok || !data.success) {
+                            openAlert(data.message || 'ECS 创建失败', 'error');
+                            return;
+                        }
+                        ecsCreateResult.value = data.data || {};
+                        ecsCredentialResult.value = data.data || {};
+                        credentialSavedAck.value = false;
+                        showCreateEcsModal.value = false;
+                        showCredentialModal.value = true;
+                        openAlert('ECS 创建成功，登录信息已弹出，请立即保存', 'success');
+                        await fetchConfig();
+                        await fetchAllInstances(true);
+                        await fetchStatusData(false);
+                    } catch (error) {
+                        console.error('Create ECS failed', error);
+                        openAlert('ECS 创建请求失败', 'error');
+                    } finally {
+                        ecsCreating.value = false;
+                    }
+                };
+
+                const removeAccountRow = async (index) => {
+                    const confirmed = await askConfirm('确定删除这条账号配置吗？', {
+                        title: '删除账号配置',
+                        confirmLabel: '确认删除'
+                    });
+                    if (!confirmed) return;
+                    const previousAccounts = [...config.value.Accounts];
+                    config.value.Accounts.splice(index, 1);
+                    const success = await persistConfig('账号已删除并完成实例同步');
+                    if (!success) {
+                        config.value.Accounts = previousAccounts;
+                    }
+                };
+
                 const sendTestEmail = async () => {
-                    if (!config.value || !config.value.Notification.email) { alert('请先填写接收邮箱并保存配置'); return; }
-                    if (!confirm('发送测试邮件将使用已保存的配置。继续发送吗？')) { return; }
+                    if (!config.value.Notification.email) {
+                        openAlert('请先填写接收邮箱', 'error');
+                        return;
+                    }
                     sendingEmail.value = true;
                     try {
-                        const res = await fetch('index.php?action=send_test_email', { method: 'POST', body: JSON.stringify({ email: config.value.Notification.email }) });
+                        const res = await fetch('index.php?action=send_test_email', {
+                            method: 'POST',
+                            body: JSON.stringify({ email: config.value.Notification.email })
+                        });
                         const data = await res.json();
-                        if (data.success) { alert('邮件发送成功！'); } else { alert('邮件发送失败: ' + data.message); }
-                    } catch (e) { alert('发送请求失败'); } finally { sendingEmail.value = false; }
+                        openAlert(data.success ? '测试邮件已发送' : `发送失败：${data.message}`, data.success ? 'success' : 'error');
+                    } catch (error) {
+                        console.error(error);
+                        openAlert('发送请求失败', 'error');
+                    } finally {
+                        sendingEmail.value = false;
+                    }
                 };
 
                 const sendTestTelegram = async () => {
-                    if (!config.value || !config.value.Notification.telegram.token || !config.value.Notification.telegram.chat_id) { alert('请先填写Token和Chat ID，建议保存后再测试'); return; }
                     testingTelegram.value = true;
                     try {
-                        const res = await fetch('index.php?action=send_test_telegram', { method: 'POST', body: JSON.stringify({ telegram: config.value.Notification.telegram }) });
+                        const res = await fetch('index.php?action=send_test_telegram', {
+                            method: 'POST',
+                            body: JSON.stringify({ telegram: config.value.Notification.telegram })
+                        });
                         const data = await res.json();
-                        if (data.success) { alert('Telegram 测试消息发送成功！'); } else { alert('发送失败: ' + data.message); }
-                    } catch (e) { alert('发送请求失败'); } finally { testingTelegram.value = false; }
+                        openAlert(data.success ? 'Telegram 测试消息已发送' : `发送失败：${data.message}`, data.success ? 'success' : 'error');
+                    } catch (error) {
+                        console.error(error);
+                        openAlert('发送请求失败', 'error');
+                    } finally {
+                        testingTelegram.value = false;
+                    }
                 };
 
                 const sendTestWebhook = async () => {
-                    if (!config.value || !config.value.Notification.webhook.url) { alert('请先填写Webhook URL，建议保存后再测试'); return; }
                     testingWebhook.value = true;
                     try {
-                        const res = await fetch('index.php?action=send_test_webhook', { method: 'POST', body: JSON.stringify({ webhook: config.value.Notification.webhook }) });
+                        const res = await fetch('index.php?action=send_test_webhook', {
+                            method: 'POST',
+                            body: JSON.stringify({ webhook: config.value.Notification.webhook })
+                        });
                         const data = await res.json();
-                        if (data.success) { alert('Webhook 测试消息发送成功！'); } else { alert('发送失败: ' + data.message); }
-                    } catch (e) { alert('发送请求失败'); } finally { testingWebhook.value = false; }
+                        openAlert(data.success ? '接口回调 测试消息已发送' : `发送失败：${data.message}`, data.success ? 'success' : 'error');
+                    } catch (error) {
+                        console.error(error);
+                        openAlert('发送请求失败', 'error');
+                    } finally {
+                        testingWebhook.value = false;
+                    }
                 };
 
-                const addAccount = () => {
-                    if (!config.value.Accounts) config.value.Accounts = [];
-                    config.value.Accounts.push({ AccessKeyId: '', AccessKeySecret: '', maxTraffic: 200, regionId: '', instanceId: '', remark: '', siteType: 'china', schedule: { enabled: false, startTime: '', stopTime: '' } });
+                const performLogin = async () => {
+                    try {
+                        const res = await fetch('index.php?action=login', {
+                            method: 'POST',
+                            body: JSON.stringify({ password: passwordInput.value })
+                        });
+                        const data = await res.json();
+                        if (!data.success) {
+                            openAlert(data.message || '登录失败', 'error');
+                            return;
+                        }
+                        passwordInput.value = '';
+                        showLoginModal.value = false;
+                        isAdmin.value = true;
+                        await fetchConfig();
+                        await fetchAllInstances(false);
+                    } catch (error) {
+                        console.error(error);
+                        openAlert('登录请求失败', 'error');
+                    }
                 };
 
-                const removeAccount = (index) => { if (confirm('确定删除该账号配置？')) config.value.Accounts.splice(index, 1); };
+                const toggleAdmin = async () => {
+                    if (!isAdmin.value) {
+                        showLoginModal.value = true;
+                        return;
+                    }
 
-                const getInstanceStatusColor = (status) => {
-                    const map = { 'Running': 'text-green-500', 'Stopped': 'text-red-500', 'Starting': 'text-yellow-500', 'Stopping': 'text-yellow-500' };
-                    return map[status] || 'text-gray-400';
+                    await fetch('index.php?action=logout');
+                    isAdmin.value = false;
+                    currentMenu.value = 'status';
+                    config.value = createDefaultConfig();
+                    allInstances.value = [];
+                    selectedInstanceIds.value = [];
+                    stopLogPolling();
                 };
 
+                const performSetup = async () => {
+                    try {
+                        const res = await fetch('index.php?action=setup', {
+                            method: 'POST',
+                            body: JSON.stringify({
+                                ...createDefaultConfig(),
+                                ...setupData.value
+                            })
+                        });
+                        const data = await res.json();
+                        if (data.success) {
+                            reloadPage();
+                        } else {
+                            openAlert(data.message || '初始化失败', 'error');
+                        }
+                    } catch (error) {
+                        console.error(error);
+                        openAlert('初始化请求失败', 'error');
+                    }
+                };
+
+                const checkLoginStatus = async () => {
+                    checkingLogin.value = true;
+                    try {
+                        const res = await fetch('index.php?action=check_login');
+                        const data = await res.json();
+                        isAdmin.value = !!data.logged_in;
+                        if (isAdmin.value) {
+                            await fetchConfig();
+                        }
+                    } catch (error) {
+                        console.error('Session check failed', error);
+                    } finally {
+                        checkingLogin.value = false;
+                    }
+                };
+
+                const checkInitStatus = async () => {
+                    loadingCheckInit.value = true;
+                    try {
+                        const res = await fetch('index.php?action=check_init');
+                        const data = await res.json();
+                        if (data.error) {
+                            criticalError.value = data.error;
+                            return;
+                        }
+                        initialized.value = !!data.initialized;
+                        if (initialized.value) {
+                            await checkLoginStatus();
+                            if (isAdmin.value) {
+                                await fetchStatusData();
+                            } else {
+                                loading.value = false;
+                            }
+                        } else {
+                            loading.value = false;
+                        }
+                    } catch (error) {
+                        console.error('Init check failed', error);
+                        criticalError.value = '无法连接服务器或响应格式错误。';
+                    } finally {
+                        loadingCheckInit.value = false;
+                    }
+                };
+
+                const statusClass = (status) => {
+                    if (status === 'Running') return 'status-running';
+                    if (status === 'Stopped' || status === 'Released') return 'status-stopped';
+                    if (status === 'Starting' || status === 'Stopping' || status === 'Pending' || status === 'Releasing') return 'status-transition';
+                    return 'status-unknown';
+                };
+
+                const statusText = (status) => ({
+                    Running: '运行中',
+                    Stopped: '已停止',
+                    Released: '已释放',
+                    Releasing: '释放中',
+                    Starting: '启动中',
+                    Stopping: '停止中',
+                    Pending: '创建中',
+                    Unknown: '未知'
+                }[status] || '未知');
+
+                const logTypeLabel = (type) => ({
+                    info: '信息',
+                    warning: '提醒',
+                    error: '错误',
+                    heartbeat: '检测'
+                }[type] || '信息');
+
+                const reloadPage = () => {
+                    window.location.reload();
+                };
+
+                watch(currentMenu, async (menu) => {
+                    if (menu === 'status' && isAdmin.value) {
+                        await fetchStatusData();
+                    } else {
+                        stopStatusPolling();
+                    }
+
+                    if (menu === 'manage' && isAdmin.value) {
+                        await fetchAllInstances(false);
+                    }
+
+                    if (menu === 'logs' && isAdmin.value) {
+                        startLogPolling();
+                    } else {
+                        stopLogPolling();
+                    }
+                });
+
+                watch(isAdmin, async (value) => {
+                    if (value) {
+                        await fetchConfig();
+                        await fetchStatusData();
+                    } else {
+                        statusInstances.value = [];
+                        stopStatusPolling();
+                    }
+                });
+
+                watch(() => ecsCreateDraft.value.accountGroupKey, () => {
+                    if (selectedCreateAccount.value) {
+                        ecsCreateDraft.value.regionId = selectedCreateAccount.value.regionId || '';
+                    }
+                    ecsCreatePreview.value = null;
+                    ecsCreateConfirmed.value = false;
+                    ecsCreateResult.value = null;
+                });
+
                 onMounted(() => {
                     checkInitStatus();
                 });
 
                 onUnmounted(() => {
                     stopLogPolling();
+                    stopStatusPolling();
                 });
 
                 return {
-                    statusData, loading, isAdmin, checkingLogin, showLoginModal, passwordInput, config, initialized, loadingCheckInit, setupData, criticalError,
-                    regionSearchFocus, aliyunRegions, refreshingMap, systemLogs, cronWarning,
-                    showChartModal, chartLoading, chartMode, currentChartAccount, openChart, closeChart, switchChartMode, isChartEmpty,
-
-                    toggleAdmin, performLogin, saveConfig, sendTestEmail, sendingEmail, addAccount, removeAccount, getInstanceStatusColor, performSetup, refreshSingle, fetchLogs,
-                    currentLogTab, clearLogs, logAutoRefresh,
-                    currentNotifyTab, testingTelegram, testingWebhook, sendTestTelegram, sendTestWebhook
+                    aliyunRegions,
+                    allInstances,
+                    config,
+                    cronWarning,
+                    criticalError,
+                    currentLogTab,
+                    currentMenu,
+                    currentNotifyTab,
+                    accountDraft,
+                    accountModalMode,
+                    accountSyncResults,
+                    accountSyncStates,
+                    fetchingAllInstances,
+                    syncingInstances,
+                    filteredManagedInstances,
+                    filteredStatusInstances,
+                    initialized,
+                    isAdmin,
+                    isAllSelected,
+                    loading,
+                    loadingCheckInit,
+                    logAutoRefresh,
+                    menuItems,
+                    manageFilter,
+                    accountOptions,
+                    passwordInput,
+                    reloadPage,
+                    savingAccountModal,
+                    ecsCreateConfirmed,
+                    ecsCreateDraft,
+                    ecsCreatePreview,
+                    ecsCreateResult,
+                    ecsCredentialResult,
+                    showCredentialModal,
+                    credentialSavedAck,
+                    ecsCreating,
+                    ecsOsOptions,
+                    ecsPreviewing,
+                    selectedCreateAccountRegionName,
+                    showCreateEcsModal,
+                    selectedInstanceIds,
+                    sendingEmail,
+                    setupData,
+                    showAccountModal,
+                    showLoginModal,
+                    statusFilter,
+                    statusInstances,
+                    systemLogs,
+                    testingTelegram,
+                    testingWebhook,
+                    checkingLogin,
+                    closeAccountModal,
+                    dialogState,
+                    formatCurrencyValue,
+                    formatTrafficValue,
+                    formatTrafficUsage,
+                    diskUnitText,
+                    diskCategoryText,
+                    getAccountSyncLabel,
+                    getAccountSyncButtonClass,
+                    getSiteTypeLabel,
+                    isSyncingAccount,
+                    isRefreshingInstance,
+                    copyCredential,
+                    buildCredentialCopyText,
+                    resolveDialog,
+                    openCreateAccountModal,
+                    openEditAccountModal,
+                    openCreateEcsModal,
+                    closeCreateEcsModal,
+                    closeCredentialModal,
+                    resetCreateEcsPreview,
+                    previewCreateEcs,
+                    confirmCreateEcs,
+                    saveAccountModal,
+                    statusClass,
+                    statusText,
+                    logTypeLabel,
+                    syncAccount,
+                    toasts,
+                    getRegionName,
+                    toggleAdmin,
+                    performLogin,
+                    performSetup,
+                    fetchStatusData,
+                    fetchAllInstances,
+                    syncCloudInstances,
+                    refreshInstanceCard,
+                    controlInstance,
+                    deleteInstance,
+                    batchAction,
+                    toggleSelectAll,
+                    removeAccountRow,
+                    saveConfig,
+                    sendTestEmail,
+                    sendTestTelegram,
+                    sendTestWebhook,
+                    fetchLogs,
+                    clearLogs
                 };
             }
         }).mount('#app');
     </script>
 </body>
 
-</html>
\ No newline at end of file
+</html>