@hellolynk-ai/trae-work-mcp 0.4.96 → 0.4.98

package/bin/hellolynk-client-setup.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import crypto from "node:crypto";
-import { lstatSync, realpathSync, writeSync } from "node:fs";
+import { constants, lstatSync, realpathSync, writeSync } from "node:fs";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
@@ -16,11 +16,14 @@ const PACK_PIN = "hellolynk-client-pack-pin.json";
 
 // A person at a terminal reads sentences in the system language; the updater, tests and other
 // programs read one JSON line.
-const jsonOutput = process.argv.includes("--json") || process.stdout.isTTY !== true;
+const explicitJson = process.argv.includes("--json");
+const jsonOutput = explicitJson || process.stdout.isTTY !== true;
 const CHINESE = /^zh\b/i.test(Intl.DateTimeFormat().resolvedOptions().locale);
 const CLIENT_NAMES = Object.freeze({ codex: "Codex", openclaw: "OpenClaw", "trae-work": "TRAE Work",
   workbuddy: "WorkBuddy", cursor: "Cursor", dsh: "DSH" });
 const { packageJson, metadata } = await readPackage();
+const macPackage = metadata.client === "codex" && packageJson.os?.[0] === "darwin"
+  && packageJson.cpu?.[0] === "arm64";
 const commandArguments = process.argv.slice(2).filter((value) => value !== "--json");
 const command = String(commandArguments.shift() || "help").toLowerCase();
 const waitForPending = command === "--wait-for-pending";
@@ -61,8 +64,14 @@ try {
       "--expected-manifest-sha256", sourceRelease.outerManifestSha256,
     ]);
   } else {
-  const originalLocations = resolveLocations();
   const accountModule = await importStableCore(PACKAGE_ROOT, "hellolynk-client-account.mjs", "hellolynk_npm_account_runtime_invalid");
+  const originalLocations = resolveLocations(accountModule.clientAccountBaseRoot);
+  if (macPackage && command !== "uninstall") {
+    const config = await readJson(path.join(sourceReleaseRoot, ".mcp.json"), "hellolynk_npm_release_invalid", true);
+    const commandPath = config.mcpServers?.["hellolynk-codex"]?.command;
+    if (typeof commandPath !== "string" || !path.isAbsolute(commandPath)) fail("hellolynk_npm_release_invalid");
+    await fs.access(commandPath, constants.X_OK).catch(() => fail("hellolynk_npm_codex_mac_node_required"));
+  }
   const baseRoot = accountModule.clientAccountBaseRoot(originalLocations.hostRoot);
   const packageLocations = { ...originalLocations, hostRoot: baseRoot, finalCurrentRoot: path.dirname(baseRoot) };
   const accounts = accountModule.createClientAccountActions({ client: metadata.client, storeRoot: baseRoot });
@@ -250,6 +259,10 @@ try {
       await verifyExactBinding({ ...installed, locations, activation });
       await verifyClientConfiguration({ ...installed, locations });
     }
+    // A running unsigned updater asks the stable package for implicit JSON. A
+    // staged package may still prove its own first install after lost stdout.
+    const legacyUpdateProof = installed && !existingDoctor && !explicitJson && jsonOutput
+      && process.env.HELLOLYNK_NEUTRAL_STORE_ROOT && samePath(PACKAGE_ROOT, installed.packageRoot);
     print({
       ok: true,
       client: metadata.client,
@@ -260,7 +273,7 @@ try {
       activated: activation.ready,
       activationState: activation.state,
       stableReleaseVerified: installed != null,
-      exactBindingVerified: installed != null,
+      ...(legacyUpdateProof ? {} : { exactBindingVerified: installed != null }),
       clientConfigurationVerified: installed != null,
       installsNode: false,
       installsGit: false,
@@ -429,7 +442,8 @@ async function uninstallClient(locations) {
     if (receiverConfigured) await receiver.configureTraeNativeTaskWorker({ storeRoot: locations.hostRoot, enabled: false });
   }
   // A binding names the release it starts, so it cannot outlive the releases removed below.
-  if (await exists(path.join(locations.hostRoot, "capabilities-v1.dpapi.clixml"))) {
+  const protectedFile = macPackage ? "protected-v1.sqlite" : "capabilities-v1.dpapi.clixml";
+  if (await exists(path.join(locations.hostRoot, protectedFile))) {
     const store = await importStableCore(PACKAGE_ROOT, "hellolynk-host-protected-store.mjs", "hellolynk_npm_binding_invalid");
     await store.createHostProtectedStore({ root: locations.hostRoot, followClientAccount: false }).disconnectLocalClient(metadata.client);
   }
@@ -838,17 +852,20 @@ async function verifyRelease(releaseRoot, packageRoot, expectedMetadata = metada
   return Object.freeze({ manifestSha256, outerManifestSha256 });
 }
 
-function resolveLocations() {
-  if (process.platform !== "win32") fail("hellolynk_npm_windows_only");
-  const home = path.resolve(process.env.USERPROFILE || os.homedir());
-  const localAppData = path.resolve(process.env.LOCALAPPDATA || path.join(home, "AppData", "Local"));
-  const appData = path.resolve(process.env.APPDATA || path.join(home, "AppData", "Roaming"));
+function resolveLocations(getDefaultHostRoot) {
+  if (macPackage) {
+    if (process.platform !== "darwin" || process.arch !== "arm64") fail("hellolynk_npm_platform_unsupported");
+  } else if (process.platform !== "win32") fail("hellolynk_npm_windows_only");
+  const home = path.resolve((macPackage ? process.env.HOME : process.env.USERPROFILE) || os.homedir());
+  const localAppData = macPackage ? path.join(home, "Library", "Application Support")
+    : path.resolve(process.env.LOCALAPPDATA || path.join(home, "AppData", "Local"));
+  const appData = macPackage ? localAppData : path.resolve(process.env.APPDATA || path.join(home, "AppData", "Roaming"));
   const configuredCodexHome = String(process.env.CODEX_HOME || "");
   if (configuredCodexHome && !path.isAbsolute(configuredCodexHome)) fail("hellolynk_npm_codex_home_invalid");
   const codexHome = path.resolve(configuredCodexHome || path.join(home, ".codex"));
   const configuredHostRoot = String(process.env.HELLOLYNK_NEUTRAL_STORE_ROOT || "").trim();
   if (configuredHostRoot && !path.isAbsolute(configuredHostRoot)) fail("hellolynk_npm_store_root_invalid");
-  const hostRoot = path.resolve(configuredHostRoot || path.join(localAppData, "HelloLynk", "host"));
+  const hostRoot = path.resolve(configuredHostRoot || getDefaultHostRoot());
   if (configuredHostRoot && path.basename(hostRoot).toLowerCase() !== "host") {
     fail("hellolynk_npm_store_root_invalid");
   }
@@ -1004,6 +1021,12 @@ async function startHostWhenAbsent(runtime, binding) {
 }
 
 async function secureStableReleaseTree(locations, releaseId, options = {}) {
+  const releasePath = path.resolve(locations.finalCurrentRoot, "releases", releaseId);
+  // An existing AppData root can be shared while a new release is redirected
+  // into one desktop app's private cache. Other clients cannot use that release.
+  if (process.platform === "win32" && realpathSync.native(releasePath).toLowerCase() !== releasePath.toLowerCase()) {
+    fail("client_root_alias_rejected");
+  }
   const module = await importCore(
     "hellolynk-platform-credential-store.mjs",
     "hellolynk_npm_client_root_security_unavailable",
@@ -2246,6 +2269,13 @@ function runCodexJson(args, code, codexHome) {
 }
 
 function minimalEnv({ codexHome = null } = {}) {
+  if (macPackage) return Object.freeze({
+    PATH: process.env.PATH || "/usr/bin:/bin",
+    HOME: process.env.HOME || os.homedir(),
+    TMPDIR: process.env.TMPDIR || os.tmpdir(),
+    LANG: process.env.LANG || "en_US.UTF-8",
+    ...(codexHome ? { CODEX_HOME: codexHome } : {}),
+  });
   return Object.freeze({
     PATH: process.env.Path || process.env.PATH || "",
     PATHEXT: process.env.PATHEXT || "",
@@ -2261,13 +2291,18 @@ function minimalEnv({ codexHome = null } = {}) {
 
 function resolveCodexRunner(codexHome) {
   if (resolvedCodexRunner) return resolvedCodexRunner;
-  const searchPath = String(process.env.Path || process.env.PATH || "");
+  const searchPath = String((macPackage ? process.env.PATH : process.env.Path || process.env.PATH) || "");
   let sawLoaderCandidate = false;
   let sawNativeCandidate = false;
   for (const rawEntry of searchPath.split(path.delimiter)) {
     try {
       const logical = rawEntry.trim().replace(/^"(.*)"$/, "$1");
       if (!logical || !path.isAbsolute(logical)) continue;
+      if (macPackage) {
+        const runner = probeMacCodex(path.join(logical, "codex"), codexHome);
+        if (runner) return (resolvedCodexRunner = runner);
+        continue;
+      }
       // nvm/fnm and user profile mappings can put a junction on PATH. Resolve
       // that directory once, then retain the ordinary-file checks below it.
       const entry = realpathSync(path.resolve(logical));
@@ -2321,6 +2356,15 @@ function resolveCodexRunner(codexHome) {
 }
 
 function resolveCodexDesktopRunner(codexHome) {
+  if (macPackage) {
+    for (const directory of ["/Applications", path.join(os.homedir(), "Applications")]) {
+      for (const app of ["ChatGPT.app", "Codex.app"]) {
+        const runner = probeMacCodex(path.join(directory, app, "Contents", "Resources", "codex"), codexHome);
+        if (runner) return runner;
+      }
+    }
+    return null;
+  }
   if (process.platform !== "win32") return null;
   const systemRoot = process.env.SystemRoot || process.env.SYSTEMROOT;
   if (!systemRoot || !path.isAbsolute(systemRoot)) return null;
@@ -2348,6 +2392,22 @@ function resolveCodexDesktopRunner(codexHome) {
   return null;
 }
 
+function probeMacCodex(logicalPath, codexHome) {
+  // npm and Homebrew commonly expose a symlink. Execute the canonical file directly.
+  try {
+    const command = realpathSync(logicalPath);
+    const metadata = lstatSync(command);
+    if (!metadata.isFile() || !(metadata.mode & 0o111)) return null;
+    const result = spawnSync(command, ["--version"], {
+      encoding: "utf8", shell: false, timeout: 5000, env: minimalEnv({ codexHome }),
+    });
+    if (result.status === 0 && /^codex-cli\s+\d+\.\d+\.\d+/u.test(String(result.stdout || "").trim())) {
+      return Object.freeze({ command, argsPrefix: Object.freeze([]), kind: "native" });
+    }
+  } catch { /* Missing or unusable CLI. */ }
+  return null;
+}
+
 function resolveRegularDescendantSync(anchor, anchorRealPath, segments) {
   let observed = anchor;
   for (let index = 0; index < segments.length; index += 1) {
@@ -2527,6 +2587,7 @@ function samePath(left, right) {
     const resolved = normalizeWindowsNamespacePath(value);
     let canonical = resolved;
     try { canonical = realpathSync(resolved); } catch { /* comparison can still reject a missing path */ }
+    if (macPackage) return canonical;
     return normalizeWindowsNamespacePath(canonical).replace(/[\\/]+$/u, "").toLowerCase();
   };
   return normalize(left) === normalize(right);
@@ -2646,7 +2707,9 @@ function helpText() {
     : [[say("安装", "Install"), "init"], [say("连接账号", "Connect an account"), connect],
       [say("更新或修复", "Update or repair"), "setup"], [say("检查", "Check"), "doctor"],
       [say("卸载", "Uninstall"), "uninstall"]];
-  return `${[`HelloLynk for ${CLIENT_NAMES[metadata.client]}${say("（Windows，Node.js 22.16.0+）", " (Windows, Node.js 22.16.0+)")}`,
+  const platform = macPackage ? " (macOS arm64, Node.js 22.16.0+)"
+    : say("（Windows，Node.js 22.16.0+）", " (Windows, Node.js 22.16.0+)");
+  return `${[`HelloLynk for ${CLIENT_NAMES[metadata.client]}${platform}`,
     ...rows.map(([label, args]) => `${label}${say("：", ": ")}${run} ${args}`),
     say("加 --json 输出一行 JSON。", "Add --json for one line of JSON.")].join("\n")}\n`;
 }
@@ -2720,6 +2783,9 @@ function failureText(failure) {
 function failureReason(code, name) {
   if (code === "hellolynk_node_22_16_required") return say("需要 Node.js 22.16 或更高版本。", "Node.js 22.16 or later is required.");
   if (code === "hellolynk_npm_windows_only") return say("只支持 Windows。", "Windows only.");
+  if (code === "hellolynk_npm_platform_unsupported") return say("此安装包适用于 Apple 芯片的 Mac。", "This package requires an Apple silicon Mac.");
+  if (code === "hellolynk_npm_codex_mac_node_required") return say("请将 ChatGPT 安装到「应用程序」，打开 Codex 后再试。",
+    "Install ChatGPT in Applications, open Codex, and try again.");
   if (code === "hellolynk_npm_connect_id_invalid") {
     return say("灵信号不对。请从官网复制从 hellolynk: 开始的完整灵信号。",
       "This HelloLynk ID is not valid. Copy the complete ID, starting with hellolynk:, from the website.");

package/hellolynk-client-pack-manifest.json

@@ -2,7 +2,7 @@
   "contract": "hellolynk-client-npm-pack-manifest-v1",
   "client": "trae-work",
   "packageName": "@hellolynk-ai/trae-work-mcp",
-  "version": "0.4.96",
+  "version": "0.4.98",
   "workbench": {
     "path": "runtime/workbench/hellolynk-workbench-build.json",
     "contract": "hellolynk-shared-workbench-build-v1",
@@ -12,8 +12,8 @@
   "files": [
     {
       "path": "bin/hellolynk-client-setup.mjs",
-      "bytes": 141769,
-      "sha256": "0bb0706c06bd193cfa37007dd95e3107b52aacb0a7ebaec2249b153ff7dd772b"
+      "bytes": 145615,
+      "sha256": "044321ea6c5757a985b92a826ffc1fb3ffa4fb8355b732abecc64210d4ac3399"
     },
     {
       "path": "bin/hellolynk-mcp-config-shape.mjs",
@@ -23,7 +23,7 @@
     {
       "path": "integrations/trae-work/package.json",
       "bytes": 495,
-      "sha256": "ce683cd463372123a217bf1c12273acd4ca18d52061fa9be3d3928416c2962d1"
+      "sha256": "76d72f67de8dc545e61f39ad7edc996f5ce6344078e897fddfe3ff3c67eb5994"
     },
     {
       "path": "integrations/trae-work/runtime/neutral-host-bootstrap.mjs",
@@ -103,7 +103,7 @@
     {
       "path": "package.json",
       "bytes": 1850,
-      "sha256": "49eccf3664afaea43b576bced8afdcaef575f4d77fdf95bcc0d79119898a4d6b"
+      "sha256": "044b9058ec8fbd7c098085fd0bfc72401a65fed9c4a9bc2700be9214a5adba85"
     },
     {
       "path": "README.md",
@@ -112,8 +112,8 @@
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-client-account.mjs",
-      "bytes": 8594,
-      "sha256": "a22f14f494c1a44a9272ca95e160f8cb1df612a1ceb8b54e32596b13f90c3740"
+      "bytes": 8603,
+      "sha256": "57082d5ea5e068dad81a47dd8abd38e34663e4563d8efa40f5130b817a346670"
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-client-core.mjs",
@@ -122,8 +122,18 @@
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-client-profile.mjs",
-      "bytes": 8473,
-      "sha256": "81d4f64c11c8dbccec04a05435cc42b53823db2649f2c88739647299b3c97fd2"
+      "bytes": 9573,
+      "sha256": "4528f2eb90417dbe232c4fef254beeb20c94f9216388ec721f982dd7ee4adde5"
+    },
+    {
+      "path": "runtime/bootstrap/core/hellolynk-darwin-host.mjs",
+      "bytes": 15511,
+      "sha256": "43dba4cd61cff66f2479c39532e504348a46e76faae0f7b1e09a7a7f5362e64a"
+    },
+    {
+      "path": "runtime/bootstrap/core/hellolynk-darwin-vault.mjs",
+      "bytes": 7659,
+      "sha256": "2972df9fa8a0d7594072a39bc8dfa2a41b8fb33ddf79cc5abe5e66636c1ea3ca"
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-host-auth.mjs",
@@ -132,8 +142,8 @@
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-host-protected-store.mjs",
-      "bytes": 129557,
-      "sha256": "0cefa22574df9dd99073d73bb688e9cae3faf6da862af013c1dfe9c87efef32e"
+      "bytes": 130518,
+      "sha256": "bb0167b7861de2c408b90c16f24765f45dfeca7033f90d31e17dca3fc9e30c41"
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-local-process-lock.mjs",
@@ -142,13 +152,13 @@
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-neutral-host-installation-store.mjs",
-      "bytes": 34290,
-      "sha256": "9ff399639d320e5527e51cd0ddbf049e7e0e8d3cc225cdc30f0d4637356a1590"
+      "bytes": 33993,
+      "sha256": "f6e04183e8e0c945006c5348ed251833ec12a6ab9777031609b5a3ccd0d2252d"
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-platform-credential-store.mjs",
-      "bytes": 35294,
-      "sha256": "0558aca043ff586f10d7b82e1b2fe9b537ff661913dce76fc92feaf9bd7e5546"
+      "bytes": 39386,
+      "sha256": "0ab136d36e890309b4cb5ff6f1cef6f3d82caf65f5b1d08c7b3992442ffe38a7"
     },
     {
       "path": "runtime/bootstrap/core/hellolynk-runtime-safety.cjs",
@@ -162,8 +172,8 @@
     },
     {
       "path": "runtime/connect-activate.mjs",
-      "bytes": 33499,
-      "sha256": "50ec8b0a58ac5b099a653722b0946acb23d0a29a054bfb3856dc963db6f84bee"
+      "bytes": 33789,
+      "sha256": "93c68c23ed2d18e87766ecd8dae6c3d8e757eca6ad7569477c8ec994402a8b0e"
     },
     {
       "path": "runtime/core/hellolynk-agent-configurator.mjs",
@@ -172,8 +182,8 @@
     },
     {
       "path": "runtime/core/hellolynk-client-account.mjs",
-      "bytes": 8594,
-      "sha256": "a22f14f494c1a44a9272ca95e160f8cb1df612a1ceb8b54e32596b13f90c3740"
+      "bytes": 8603,
+      "sha256": "57082d5ea5e068dad81a47dd8abd38e34663e4563d8efa40f5130b817a346670"
     },
     {
       "path": "runtime/core/hellolynk-client-core.mjs",
@@ -182,29 +192,39 @@
     },
     {
       "path": "runtime/core/hellolynk-client-profile.mjs",
-      "bytes": 8473,
-      "sha256": "81d4f64c11c8dbccec04a05435cc42b53823db2649f2c88739647299b3c97fd2"
+      "bytes": 9573,
+      "sha256": "4528f2eb90417dbe232c4fef254beeb20c94f9216388ec721f982dd7ee4adde5"
     },
     {
       "path": "runtime/core/hellolynk-client-update-entry.mjs",
-      "bytes": 1612,
-      "sha256": "dc62228a7351c721514b5ca7921d485dc6aa05475aaa2e3881b78d7de0e1a134"
+      "bytes": 1974,
+      "sha256": "8b872933f9883a92889202cf370e1e8d878c2172e4e1c5d8aa8261f314577d90"
     },
     {
       "path": "runtime/core/hellolynk-client-update-runtime.mjs",
-      "bytes": 40309,
-      "sha256": "0a76f2bdcf338c544e493ca7d0b7168f03ffa32ed223e3537eccafc1cbaafba0"
+      "bytes": 42247,
+      "sha256": "6bdcc525579963fa3ffc46f29527817acc0b8090fdc6a9cbdadb0fc262eee12e"
     },
     {
       "path": "runtime/core/hellolynk-client-update.mjs",
-      "bytes": 28385,
-      "sha256": "a4104a67dd72cb7a1950585c92aa8424b9387c1eda4f191e0df3f901c4f16a8f"
+      "bytes": 31391,
+      "sha256": "374690bb6cc7335b5f1cf030c33989aba9713e0922369edda0348b40ef71b02f"
     },
     {
       "path": "runtime/core/hellolynk-contact-request-e2ee.mjs",
       "bytes": 35030,
       "sha256": "18526628b354d18bcbe5e621360ecfcd5dfa4cb4d91397fb87d0c20e1f332a5d"
     },
+    {
+      "path": "runtime/core/hellolynk-darwin-host.mjs",
+      "bytes": 15511,
+      "sha256": "43dba4cd61cff66f2479c39532e504348a46e76faae0f7b1e09a7a7f5362e64a"
+    },
+    {
+      "path": "runtime/core/hellolynk-darwin-vault.mjs",
+      "bytes": 7659,
+      "sha256": "2972df9fa8a0d7594072a39bc8dfa2a41b8fb33ddf79cc5abe5e66636c1ea3ca"
+    },
     {
       "path": "runtime/core/hellolynk-device-enrollment.mjs",
       "bytes": 27099,
@@ -227,8 +247,8 @@
     },
     {
       "path": "runtime/core/hellolynk-host-protected-store.mjs",
-      "bytes": 129557,
-      "sha256": "0cefa22574df9dd99073d73bb688e9cae3faf6da862af013c1dfe9c87efef32e"
+      "bytes": 130518,
+      "sha256": "bb0167b7861de2c408b90c16f24765f45dfeca7033f90d31e17dca3fc9e30c41"
     },
     {
       "path": "runtime/core/hellolynk-host-transport-client.mjs",
@@ -242,8 +262,8 @@
     },
     {
       "path": "runtime/core/hellolynk-human-confirmation-ledger.mjs",
-      "bytes": 11327,
-      "sha256": "265ae39e93112416588841a14eb0351905d60b2552cf04c8cf8bd057acd64586"
+      "bytes": 14719,
+      "sha256": "746f2d23f19fa110ecd87d0b1dc3d88138776accc3b177afd8f5d266223ccc81"
     },
     {
       "path": "runtime/core/hellolynk-human-relationship-controller.mjs",
@@ -282,8 +302,8 @@
     },
     {
       "path": "runtime/core/hellolynk-local-data-protection.mjs",
-      "bytes": 26467,
-      "sha256": "798f42e9bd45a00565b628282233a55abfdc4d7102423cb0558a7e01fab76810"
+      "bytes": 27425,
+      "sha256": "e33b0c83fff59ba3ed49ae880d1b95016be4457bc7fd223367683942c78525bc"
     },
     {
       "path": "runtime/core/hellolynk-local-identity-trust.mjs",
@@ -327,8 +347,8 @@
     },
     {
       "path": "runtime/core/hellolynk-native-human-confirmation-broker.mjs",
-      "bytes": 40527,
-      "sha256": "755fd03a4ee3b97cdfdb1efc491fb4cf602e25173819380ea8a715c04c82ea5a"
+      "bytes": 40773,
+      "sha256": "98d986f492a9e646f4601f25588cabe065e3c7bb00f0773b5dfd99e72e65c324"
     },
     {
       "path": "runtime/core/hellolynk-native-inbox-runtime.mjs",
@@ -357,18 +377,18 @@
     },
     {
       "path": "runtime/core/hellolynk-neutral-host-installation-store.mjs",
-      "bytes": 34290,
-      "sha256": "9ff399639d320e5527e51cd0ddbf049e7e0e8d3cc225cdc30f0d4637356a1590"
+      "bytes": 33993,
+      "sha256": "f6e04183e8e0c945006c5348ed251833ec12a6ab9777031609b5a3ccd0d2252d"
     },
     {
       "path": "runtime/core/hellolynk-neutral-host-launcher.mjs",
-      "bytes": 30122,
-      "sha256": "490f8010bd84fc7c92a00ec4d4a996c27dd398b2e3584ded8bcebb74c598c18d"
+      "bytes": 30326,
+      "sha256": "0afe5310d1d9f7b1448a9f50aeb2c1fc93b42ce7eb48dd8472fbde5d33e898af"
     },
     {
       "path": "runtime/core/hellolynk-neutral-host-process.mjs",
       "bytes": 229535,
-      "sha256": "5e5b9f535331444d284b2e62cc2593d6279b8a30332c82f4f85c7ff25e2f3727"
+      "sha256": "634279c96b8b4e83bcbcc92c5184f4ec7c31713a097f45af3f5650f8151fb78b"
     },
     {
       "path": "runtime/core/hellolynk-neutral-host-store-adapters.mjs",
@@ -382,8 +402,8 @@
     },
     {
       "path": "runtime/core/hellolynk-platform-credential-store.mjs",
-      "bytes": 35294,
-      "sha256": "0558aca043ff586f10d7b82e1b2fe9b537ff661913dce76fc92feaf9bd7e5546"
+      "bytes": 39386,
+      "sha256": "0ab136d36e890309b4cb5ff6f1cef6f3d82caf65f5b1d08c7b3992442ffe38a7"
     },
     {
       "path": "runtime/core/hellolynk-relay-client-cli.mjs",
@@ -392,8 +412,8 @@
     },
     {
       "path": "runtime/core/hellolynk-release-retention.mjs",
-      "bytes": 20922,
-      "sha256": "9f8b5b97eee7530dc8ef965b0df6a19065b06012255100977d8abb17ce50d204"
+      "bytes": 26013,
+      "sha256": "b894c452019b89486dd3090c9eeee7b7c2bb4e50753565bf88ecd14ce0efeaf1"
     },
     {
       "path": "runtime/core/hellolynk-runtime-safety.cjs",
@@ -407,8 +427,8 @@
     },
     {
       "path": "runtime/core/hellolynk-workbench-connection.mjs",
-      "bytes": 14486,
-      "sha256": "198fb21c3db2c91b85ca38d334c0ffe56ef28f2f052b6b62a8d2ed5c166fcd82"
+      "bytes": 14575,
+      "sha256": "0f24d28316253a761dc03d8096dace3da7a3cf8cb8eaf575765b2aa07d30274c"
     },
     {
       "path": "runtime/neutral-host-bootstrap.mjs",
@@ -422,18 +442,18 @@
     },
     {
       "path": "runtime/neutral-host-release-loader.mjs",
-      "bytes": 7599,
-      "sha256": "70bacded7cd42bef424e927d4002b6171aa613b0609f62ea02ebe8344359bfd6"
+      "bytes": 7609,
+      "sha256": "137c5663e34ef8ee62340b1c2d46f7284dc60576b6f25d3d0122390bb600e372"
     },
     {
       "path": "runtime/neutral-host-release-manifest.json",
-      "bytes": 15032,
-      "sha256": "b5af5aa6e30ccbb16a0f2f7d93297dda19871e52bf69d3e222667e5258f38db4"
+      "bytes": 15630,
+      "sha256": "719385851a5847c41a5d32c1ab1c13d6057db194f9345e1df3212190b13d1192"
     },
     {
       "path": "runtime/neutral-host-release-pin.json",
       "bytes": 146,
-      "sha256": "8ca524cbb349659eb01dbfaa36d63a54a2780e77ee8a449441afd6c1bfcba9af"
+      "sha256": "5e85436a917df172ea0e8fbddf1ec296135d7b1ec847d5a54ccc5a8db4078010"
     },
     {
       "path": "runtime/platform/windows/configure-agent.ps1",
@@ -442,8 +462,8 @@
     },
     {
       "path": "runtime/platform/windows/credential-store.ps1",
-      "bytes": 39278,
-      "sha256": "7ec7362eba2c442d9417035ff14c1108c7a58558b6f09ac36a2275828370debb"
+      "bytes": 41068,
+      "sha256": "4817c3c91d5d180763794a7a528f83664602f34cf1d1a8396e75ad6d56bd874f"
     },
     {
       "path": "runtime/platform/windows/hellolynk-host-protected-store.ps1",
@@ -607,8 +627,8 @@
     },
     {
       "path": "tools/hellolynk-activate-neutral-host-clients.mjs",
-      "bytes": 33553,
-      "sha256": "f8007370c54756e4792affe3fbffe5209b3ece619eddc5713c20c8bed8a86b34"
+      "bytes": 33852,
+      "sha256": "123eb4a08cf5a6df748972c64c5cf911697a669e68ecab7c409c1c4006c47277"
     },
     {
       "path": "tools/hellolynk-install-client-skills.mjs",

package/hellolynk-client-pack-pin.json

@@ -1,4 +1,4 @@
 {
   "contract": "hellolynk-client-npm-pack-pin-v1",
-  "manifestSha256": "2c72d065aff9243a2e32740fe00f4304c7559123f97418f9b12f7563eebb889e"
+  "manifestSha256": "1978e485dcdcfaa07baf9a8ee837b111ab28a25cc1ee6e24d49c2bd02d3608c4"
 }

package/integrations/trae-work/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hellolynk-ai/trae-work-mcp",
-  "version": "0.4.96",
+  "version": "0.4.98",
   "private": true,
   "type": "module",
   "description": "TRAE Work one-click bridge for local HelloLynk Messaging.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hellolynk-ai/trae-work-mcp",
-  "version": "0.4.96",
+  "version": "0.4.98",
   "description": "HelloLynk Messaging for TRAE Work: open conversations and let your AI message other people's AI assistants.",
   "homepage": "https://hellolynk.com",
   "repository": {

package/runtime/bootstrap/core/hellolynk-client-account.mjs

@@ -68,7 +68,7 @@ export function withClientAccountLock(client, root, operation) {
 
 export function createClientAccountActions(options) {
   const client = options?.client;
-  const root = options?.storeRoot || defaultNeutralHostStoreRoot("win32", options?.env || process.env);
+  const root = options?.storeRoot || defaultNeutralHostStoreRoot(process.platform, options?.env || process.env);
   statePath(client, clientAccountBaseRoot(root));
   const readAccountState = () => {
     const state = readClientAccount(client, root);

package/runtime/bootstrap/core/hellolynk-client-profile.mjs

@@ -1,4 +1,5 @@
 import { lstat, mkdir, open, readFile, rename, rm, stat } from "node:fs/promises";
+import { readdirSync } from "node:fs";
 import { homedir } from "node:os";
 import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { randomUUID } from "node:crypto";
@@ -19,12 +20,34 @@ const SAFE_SCOPE = /^[a-z][a-z0-9_.:-]{0,127}$/;
 const MAX_PROFILE_BYTES = 64 * 1024;
 
 export function defaultHelloLynkClientRoot(platform = process.platform, env = process.env) {
-  const home = resolve(String(env.HOME || env.USERPROFILE || homedir()));
-  if (platform === "win32") return resolve(String(env.LOCALAPPDATA || join(home, "AppData", "Local")), "HelloLynk");
+  const home = resolve(String((platform === "win32" ? env.USERPROFILE || env.HOME : env.HOME || env.USERPROFILE) || homedir()));
+  if (platform === "win32") {
+    const current = join(home, ".hellolynk", "hellolynk-v2");
+    // Once selected, another client's older installer must not move us back.
+    if (hasWindowsClientInstallation(current)) return current;
+    const existing = resolve(String(env.LOCALAPPDATA || join(home, "AppData", "Local")), "HelloLynk");
+    // AppData created from a packaged desktop app can be private to that app.
+    // Keep an existing installation; an empty failed setup is not an account.
+    if (hasWindowsClientInstallation(existing)) return existing;
+    return current;
+  }
   if (platform === "darwin") return join(home, "Library", "Application Support", "HelloLynk");
   return resolve(String(env.XDG_DATA_HOME || join(home, ".local", "share")), "hellolynk");
 }
 
+function hasWindowsClientInstallation(root) {
+  for (const directory of ["profiles", "releases", "host", "credentials", "e2ee-private-keys"]) {
+    try {
+      const entries = readdirSync(join(root, directory), { withFileTypes: true });
+      if (entries.some((entry) => directory !== "host" || entry.name !== "runtime")) return true;
+    } catch (error) {
+      // An unreadable existing location must not silently become a fresh account.
+      if (error.code !== "ENOENT") return true;
+    }
+  }
+  return false;
+}
+
 function safeId(value, code) {
   const normalized = String(value || "").trim();
   if (!SAFE_ID.test(normalized)) throw new Error(code);