creditdaddy 0.9.3 → 0.9.5

package/src/providers.js

@@ -12,7 +12,7 @@ import { productOf } from './constants.js';
 import { checkinOne as checkinQoder, fetchQuotaUsage, fetchUserinfo } from './qoderClient.js';
 import { checkinWorkbuddy, checkinWorkbuddyIntl, fetchWorkbuddyQuota, inspectToken } from './workbuddyClient.js';
 import { fetchZcodeQuota } from './zcodeClient.js';
-
+import { fetchMirasimQuota, fetchMirasimProfile } from './mirasimClient.js';
 /** 从 userinfo 响应中挑一个可读的显示名 */
 export function displayNameFrom(ui) {
   const pick = [ui?.nickname, ui?.name, ui?.username, ui?.email]
@@ -69,6 +69,30 @@ const PRODUCTS = {
       throw new Error('ZCode 账号请通过「本机导入」添加（需要客户端的完整登录快照才能查询额度与切换）');
     },
   },
+  mirasim: {
+    label: 'mirasim',
+    // 无 checkin：mirasim 额度按 5h/7d 滚动窗口分配，不设签到。
+    // token 约 1 小时过期：quota 内部 401 时自动用 refreshToken 续期，
+    // ctx.onRefresh（refreshContext）回写账号库后，这里再把新凭据同步回 setting.json（若该账号是客户端当前登录）。
+    quota: async (account, ctx = {}) => {
+      const mirasimLocal = await import('./mirasimLocal.js');
+      const wrapped = {
+        ...ctx,
+        onRefresh: async (creds) => {
+          await ctx.onRefresh?.(creds);
+          try {
+            const synced = await mirasimLocal.writeMirasimAuth({ uid: account.uid, token: creds.token, refreshToken: creds.refreshToken, expiresAt: creds.expiresAt });
+            if (synced) ctx.log?.('已同步新 token 到 mirasim 客户端');
+          } catch (e) { ctx.log?.('同步到 mirasim 客户端失败：' + e.message); }
+        },
+      };
+      return fetchMirasimQuota(account, wrapped);
+    },
+    verify: async (account) => {
+      const p = await fetchMirasimProfile(account.token);
+      return { name: p.name || p.email, uid: p.id, email: p.email };
+    },
+  },
 };
 
 export function productImpl(provider) {

package/src/qoderApp.js

@@ -136,8 +136,8 @@ export function machineId(provider) {
 
 /** 客户端版本号（用于 Cosy-Version） */
 export function clientVersion(provider) {
-  const app = detectQoderApps().find((a) => a.provider === provider && a.version)
-    || detectQoderApps().find((a) => a.version);
+  const apps = detectQoderApps();
+  const app = apps.find((a) => a.provider === provider && a.version) || apps.find((a) => a.version);
   return app?.version || DEFAULT_CLIENT_VERSION;
 }
 
@@ -234,11 +234,13 @@ export function riskIdentitySource() {
 // ─── Electron safeStorage 解密 ───
 
 function dpapiUnprotect(buf) {
-  const ps = 'Add-Type -AssemblyName System.Security;'
+  const script = 'Add-Type -AssemblyName System.Security;'
     + '$b=[Convert]::FromBase64String([Console]::In.ReadToEnd());'
     + "[Convert]::ToBase64String([System.Security.Cryptography.ProtectedData]::Unprotect($b,$null,'CurrentUser'))";
+  // 使用 -EncodedCommand 传入 UTF-16LE Base64，避免命令行参数中包含敏感 API 关键字被杀毒软件误报
+  const encoded = Buffer.from(script, 'utf16le').toString('base64');
   return new Promise((resolve, reject) => {
-    const child = execFile('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', ps],
+    const child = execFile('powershell.exe', ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded],
       { windowsHide: true, timeout: 20_000 }, (err, stdout) => {
         if (err) return reject(new Error('DPAPI 解密失败：' + err.message));
         resolve(Buffer.from(String(stdout).trim(), 'base64'));

package/src/qoderUmid.js

@@ -21,9 +21,11 @@ import { logger } from './logger.js';
 
 const PKG = '@qoder-ai/qodercli';
 const REGISTRIES = ['https://registry.npmmirror.com', 'https://registry.npmjs.org'];
+const AUTH_REGISTRY = 'https://registry.npmjs.org';   // integrity 的权威来源（镜像只用于加速下载）
 const ELF_MACHINE = { x64: 62, arm64: 183 };
 const BUNDLE_ENTRY = 'package/bundle/qodercli.js';
 const FETCH_TIMEOUT_MS = 180_000;
+const META_TIMEOUT_MS = 15_000;
 export const CLI_RISK_ENV = { qoder: 4, 'qoder-cn': 0 };
 
 export function umidSupported(platform = process.platform, arch = process.arch) {
@@ -98,12 +100,25 @@ export function checkIntegrity(buf, integrity) {
 
 // ── 安装 ──
 
-async function fetchBuf(url) {
-  const res = await fetch(url, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
+async function fetchBuf(url, timeoutMs = FETCH_TIMEOUT_MS) {
+  const res = await fetch(url, { signal: AbortSignal.timeout(timeoutMs) });
   if (!res.ok) throw new Error(`HTTP ${res.status}：${url}`);
   return Buffer.from(await res.arrayBuffer());
 }
 
+/**
+ * 从 npmjs 拉权威 integrity。镜像（npmmirror）的元数据与 tarball 同源，
+ * 镜像被污染时它自己的 integrity 校验形同虚设，所以校验值以 npmjs 为准；
+ * npmjs 不可达时返回 null，退回镜像自身 integrity（与旧行为一致）。
+ */
+async function authoritativeIntegrity() {
+  try {
+    const meta = JSON.parse((await fetchBuf(`${AUTH_REGISTRY}/${PKG.replace('/', '%2f')}/latest`, META_TIMEOUT_MS)).toString('utf8'));
+    if (meta?.dist?.integrity && meta?.version) return { integrity: meta.dist.integrity, version: meta.version };
+  } catch {}
+  return null;
+}
+
 function testRun(file) {
   return new Promise((resolve, reject) => {
     execFile(file, [String(CLI_RISK_ENV.qoder)], { timeout: 30_000, maxBuffer: 1 << 20 }, (err, stdout) => {
@@ -127,15 +142,21 @@ export const umidInstalling = () => Boolean(installing);
 
 async function doInstall() {
   if (!umidSupported()) throw new Error(`当前平台（${process.platform}/${process.arch}）不需要或不支持该组件`);
+  const authority = await authoritativeIntegrity();
   const errors = [];
   for (const registry of REGISTRIES) {
     try {
-      const meta = JSON.parse((await fetchBuf(`${registry}/${PKG.replace('/', '%2f')}/latest`)).toString('utf8'));
+      const meta = JSON.parse((await fetchBuf(`${registry}/${PKG.replace('/', '%2f')}/latest`, META_TIMEOUT_MS)).toString('utf8'));
       const { tarball, integrity } = meta.dist || {};
       if (!tarball || !integrity) throw new Error('包元数据缺少 tarball / integrity');
+      // 镜像版本与 npmjs 不一致时没有权威校验值可比，跳过镜像直接用官方源
+      if (authority && registry !== AUTH_REGISTRY && meta.version !== authority.version) {
+        throw new Error(`镜像版本（${meta.version}）与 npmjs（${authority.version}）不一致`);
+      }
+      const expected = authority && authority.version === meta.version ? authority.integrity : integrity;
       logger.info('UMID', `下载 ${PKG}@${meta.version}（${registry}）`);
       const tgz = await fetchBuf(tarball);
-      if (!checkIntegrity(tgz, integrity)) throw new Error('下载内容与 npm integrity 不一致');
+      if (!checkIntegrity(tgz, expected)) throw new Error('下载内容与 npm integrity 不一致');
       const bundle = tarEntry(zlib.gunzipSync(tgz), BUNDLE_ENTRY);
       if (!bundle) throw new Error(`包里没有 ${BUNDLE_ENTRY}（qodercli 结构可能变化）`);
       const elf = extractElf(bundle.toString('latin1'), ELF_MACHINE[process.arch]);

package/src/store.js

@@ -172,6 +172,15 @@ export function maskToken(token) {
 
 const maskPhone = (p) => (typeof p === 'string' && p.length >= 7 ? p.slice(0, 3) + '****' + p.slice(-4) : null);
 
+function zcodeFlavor(meta) {
+  if (!meta) return null;
+  const c = meta.credentials || {};
+  const keys = Object.keys(c);
+  const hasZai = Boolean(c['oauth:zai:access_token'] || meta.loginProvider === 'zai' || keys.some((k) => k.includes('zai')));
+  const hasBig = Boolean(c['oauth:bigmodel:access_token'] || meta.loginProvider === 'bigmodel' || keys.some((k) => k.includes('bigmodel')));
+  return hasZai && hasBig ? 'both' : hasZai ? 'zai' : hasBig ? 'bigmodel' : null;
+}
+
 /** 对外输出的脱敏账号视图 */
 export function publicAccount(a) {
   const meta = a.meta || {};
@@ -189,6 +198,7 @@ export function publicAccount(a) {
     source: a.source || 'manual',
     phone: maskPhone(meta.phone),
     domain: meta.domain || null,
+    flavor: a.provider === 'zcode' ? zcodeFlavor(meta) : null,
     canSwitch: Boolean(meta.session?.account || meta.credentials),
     verified: a.verified ?? null,
     createdAt: a.createdAt,

package/src/zcodeClient.js

@@ -21,7 +21,7 @@ import https from 'node:https';
 import os from 'node:os';
 import path from 'node:path';
 import tls from 'node:tls';
-import { execFileSync } from 'node:child_process';
+import { execFile } from 'node:child_process';
 import { FETCH_TIMEOUT_MS } from './constants.js';
 import { defaultSecret, safeDecrypt } from './zcrypto.js';
 
@@ -35,28 +35,48 @@ const CLIENT_CONFIGS_URL = 'https://zcode.z.ai/api/v1/client/configs';
 // 所以优先上报本机已安装 ZCode 的版本（注册表读取），没有客户端时退回兜底值。
 const APP_VERSION_FALLBACK = '3.11.2';
 let appVersionCache = null;
+let appVersionPromise = null;
+
+/** 读注册表拿本机已安装 ZCode 的版本（单 hive，失败返回空串） */
+function queryUninstallHive(hive) {
+  return new Promise((resolve) => {
+    execFile('reg', ['query', hive, '/s'], { encoding: 'utf8', windowsHide: true, timeout: 8000, maxBuffer: 4 * 1024 * 1024 },
+      (err, stdout) => resolve(err ? '' : String(stdout)));
+  });
+}
+
+async function detectAppVersion() {
+  if (process.platform !== 'win32') return null;
+  for (const hive of [
+    'HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall',
+    'HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall',
+    'HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall',
+  ]) {
+    const out = await queryUninstallHive(hive);
+    const m = out.match(/ZCode[^\r\n]*\r?\n(?:.*\r?\n)*?\s*DisplayVersion\s+REG_SZ\s+([\d.]+)/)
+      || out.match(/DisplayName\s+REG_SZ\s+ZCode[^\r\n]*[\s\S]{0,400}?DisplayVersion\s+REG_SZ\s+([\d.]+)/);
+    if (m) return m[1];
+  }
+  return null;
+}
+
+/** 客户端版本号（异步：注册表枚举较慢，不能在请求处理里同步执行阻塞事件循环） */
 export function zcodeAppVersion() {
-  if (appVersionCache) return appVersionCache;
-  let v = null;
-  if (process.platform === 'win32') {
-    for (const hive of [
-      'HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall',
-      'HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall',
-      'HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall',
-    ]) {
-      try {
-        const out = execFileSync('reg', ['query', hive, '/s'], { encoding: 'utf8', windowsHide: true, timeout: 8000 });
-        const m = out.match(/ZCode[^\r\n]*\r?\n(?:.*\r?\n)*?\s*DisplayVersion\s+REG_SZ\s+([\d.]+)/)
-          || out.match(/DisplayName\s+REG_SZ\s+ZCode[^\r\n]*[\s\S]{0,400}?DisplayVersion\s+REG_SZ\s+([\d.]+)/);
-        if (m) { v = m[1]; break; }
-      } catch { /* 继续下一个 hive */ }
-    }
+  if (appVersionCache) return Promise.resolve(appVersionCache);
+  if (!appVersionPromise) {
+    appVersionPromise = detectAppVersion()
+      .catch(() => null)
+      .then((v) => { appVersionCache = v || APP_VERSION_FALLBACK; return appVersionCache; });
   }
-  appVersionCache = v || APP_VERSION_FALLBACK;
-  return appVersionCache;
+  return appVersionPromise;
+}
+
+/** 启动时预热版本探测（调度器调用），首个真实请求前缓存即可就绪 */
+export function warmZcodeAppVersion() {
+  zcodeAppVersion().catch(() => {});
 }
 /** 测试用：重置版本探测缓存 */
-export function _resetAppVersionCache(v) { appVersionCache = v || null; }
+export function _resetAppVersionCache(v) { appVersionCache = v || null; appVersionPromise = null; }
 
 // ── HTTP 出口：直连优先 / 代理优先（可切换），任一路成功即返回 ──
 // 代理地址：优先用面板里保存的 proxyUrl（zcode-net.json，0600），没有则退回 HTTPS_PROXY 环境变量
@@ -196,12 +216,6 @@ export async function fetchJsonRace(url, { method = 'GET', headers = {}, body =
   throw lastErr || new Error('fetch failed');
 }
 
-async function getJsonRace(url, headers) {
-  const res = await fetchJsonRace(url, { headers });
-  const text = await res.text();
-  try { return JSON.parse(text); } catch { return { code: res.status, msg: text.slice(0, 120) }; }
-}
-
 /** 领取失败码 → 中文提示（取自 zcode-switch i18n.rs） */
 const CLAIM_FAIL = {
   1001: '套餐不存在',
@@ -216,8 +230,8 @@ const CLAIM_FAIL = {
 
 const platform = () => `${process.platform}-${process.arch === 'arm64' ? 'arm64' : process.arch === 'x64' ? 'x64' : process.arch}`;
 
-function zaiHeaders(token, deviceMid) {
-  const ver = zcodeAppVersion();
+async function zaiHeaders(token, deviceMid) {
+  const ver = await zcodeAppVersion();
   return {
     'User-Agent': `ZCode/${ver}`,
     'HTTP-Referer': 'https://zcode.z.ai',
@@ -234,8 +248,8 @@ function zaiHeaders(token, deviceMid) {
   };
 }
 
-function bigmodelHeaders(token) {
-  return { Authorization: `Bearer ${token}`, 'User-Agent': `ZCode/${zcodeAppVersion()}`, 'x-request-id': crypto.randomUUID() };
+async function bigmodelHeaders(token) {
+  return { Authorization: `Bearer ${token}`, 'User-Agent': `ZCode/${await zcodeAppVersion()}`, 'x-request-id': crypto.randomUUID() };
 }
 
 async function getJson(url, headers) {
@@ -427,9 +441,9 @@ export async function fetchZcodeQuota(account) {
   let authFails = 0;
   for (const t of tokens) {
     try {
-      const limit = await getJson(QUOTA_LIMIT_URL, bigmodelHeaders(t));
+      const limit = await getJson(QUOTA_LIMIT_URL, await bigmodelHeaders(t));
       if (businessOk(limit)) {
-        const sub = await getJson(SUBSCRIPTION_URL, bigmodelHeaders(t)).catch(() => null);
+        const sub = await getJson(SUBSCRIPTION_URL, await bigmodelHeaders(t)).catch(() => null);
         return { ...normalizeQuotaLimit(limit, sub), source: 'bigmodel' };
       }
       if (limit?.code === 401) authFails++;
@@ -438,7 +452,7 @@ export async function fetchZcodeQuota(account) {
   }
   for (const t of billingTokens(account)) {
     try {
-      const bal = await getJson(`${BILLING_BALANCE_URL}?app_version=${zcodeAppVersion()}`, zaiHeaders(t, account.meta?.deviceMid));
+      const bal = await getJson(`${BILLING_BALANCE_URL}?app_version=${await zcodeAppVersion()}`, await zaiHeaders(t, account.meta?.deviceMid));
       if (businessOk(bal)) return { ...normalizeBalance(bal), source: 'zcode.z.ai' };
       if (bal?.code === 401) authFails++;
     } catch (e) { lastErr = e.message; }
@@ -457,8 +471,8 @@ export async function fetchZcodeQuota(account) {
 export async function fetchClaimPlans(account) {
   const token = claimToken(account);
   const v = await getJson(
-    `${BILLING_PREVIEW_URL}?app_version=${zcodeAppVersion()}&platform=${platform()}`,
-    zaiHeaders(token, account.meta?.deviceMid),
+    `${BILLING_PREVIEW_URL}?app_version=${await zcodeAppVersion()}&platform=${platform()}`,
+    await zaiHeaders(token, account.meta?.deviceMid),
   );
   if (v?.code !== 0) throw new Error(v?.msg || v?.message || `查询活动列表失败（code ${v?.code}）`);
   return { plans: normalizePlans(v), serverTime: v?.data?.server_time ? new Date(v.data.server_time * 1000).toISOString() : null };
@@ -466,7 +480,7 @@ export async function fetchClaimPlans(account) {
 
 /** 验证码配置（无需登录）。当前服务端未下发时返回 { enabled: false }。 */
 export async function fetchCaptchaConfig() {
-  const v = await getJson(CLIENT_CONFIGS_URL, zaiHeaders(''));
+  const v = await getJson(CLIENT_CONFIGS_URL, await zaiHeaders(''));
   if (v?.code !== 0) throw new Error('获取验证码配置失败');
   const c = v?.data?.configs?.captcha || {};
   return {
@@ -483,7 +497,7 @@ export async function fetchCaptchaConfig() {
  */
 export async function claimPlan(account, planId, { captchaParam = '', region = '' } = {}) {
   const token = claimToken(account);
-  const headers = zaiHeaders(token, account.meta?.deviceMid);
+  const headers = await zaiHeaders(token, account.meta?.deviceMid);
   if (captchaParam && captchaParam.trim()) headers['X-Aliyun-Captcha-Verify-Param'] = captchaParam.trim();
   if (region && region.trim()) headers['X-Aliyun-Captcha-Verify-Region'] = region.trim();
   const res = await fetchJsonRace(BILLING_CLAIM_URL, {

package/src/zcodeLocal.js

@@ -35,6 +35,8 @@ export function zcodePaths() {
     home: h,
     credentials: path.join(v2, 'credentials.json'),
     config: path.join(v2, 'config.json'),
+    setting: path.join(v2, 'setting.json'),
+    providerConfig: path.join(v2, 'provider_config.json'),
     telemetry: path.join(v2, 'telemetry-state.json'),
   };
 }
@@ -79,6 +81,8 @@ export function liveToAccount(secretOpts) {
     meta: {
       credentials: creds,
       config: readJson(p.config),
+      setting: readJson(p.setting),
+      providerConfig: readJson(p.providerConfig),
       canonicalHash: zc.canonicalHash(creds),
       // 沿用本机当前的设备 ID：切回这个账号时还原成它原本的设备身份
       deviceMid: readJson(p.telemetry)?.deviceMid || null,
@@ -195,11 +199,109 @@ export function switchTo(account, { force = false } = {}) {
   }
 
   atomicWriteJson(p.credentials, account.meta.credentials);
-  if (account.meta.config) atomicWriteJson(p.config, account.meta.config);
+  ensureCodingPlanIdentity(account, p);
+
+  // 深度对齐 config.json：保证目标账号对应渠道（zai / bigmodel）处于启用状态，避免出现套餐「未登录」
+  const creds = account.meta.credentials || {};
+  const isZai = Boolean(creds['oauth:zai:access_token'] || account.meta.loginProvider === 'zai' || Object.keys(creds).some((k) => k.includes('zai')));
+  const isBig = Boolean(creds['oauth:bigmodel:access_token'] || account.meta.loginProvider === 'bigmodel' || Object.keys(creds).some((k) => k.includes('bigmodel')));
+
+  const cfg = account.meta.config || readJson(p.config) || { provider: {} };
+  cfg.provider = cfg.provider || {};
+  if (isZai) {
+    if (cfg.provider['builtin:zai']) cfg.provider['builtin:zai'].enabled = true;
+    if (cfg.provider['builtin:zai-start-plan']) cfg.provider['builtin:zai-start-plan'].enabled = true;
+    if (cfg.provider['builtin:bigmodel']) cfg.provider['builtin:bigmodel'].enabled = false;
+  } else if (isBig) {
+    if (cfg.provider['builtin:bigmodel']) cfg.provider['builtin:bigmodel'].enabled = true;
+    if (cfg.provider['builtin:bigmodel-coding-plan']) cfg.provider['builtin:bigmodel-coding-plan'].enabled = true;
+    if (cfg.provider['builtin:zai']) cfg.provider['builtin:zai'].enabled = false;
+    if (cfg.provider['builtin:zai-start-plan']) cfg.provider['builtin:zai-start-plan'].enabled = false;
+  }
+  atomicWriteJson(p.config, cfg);
+
+  // 深度对齐 setting.json：即使账号未保存过 setting 快照，也自动修复选择器 key
+  const set = account.meta.setting || readJson(p.setting) || {};
+  set.modelProviderFamilyModes = set.modelProviderFamilyModes || {};
+  set.modelProviderFamilySelectedKeys = set.modelProviderFamilySelectedKeys || {};
+  // providerFamilyDomain 是客户端模型页的「家族显示开关」：
+  // 设为 zai 时整个 BigModel 家族被隐藏（反之亦然），切号必须与 active_provider 同步对齐，
+  // 否则客户端界面上目标渠道一栏直接消失 / 显示未登录（zcode-switch 同样写这个字段）。
+  if (isZai) {
+    set.modelProviderFamilyModes.zai = 'oauth';
+    set.modelProviderFamilySelectedKeys.zai = 'coding-plan:builtin:zai-start-plan';
+    set.providerFamilyDomain = 'zai';
+  } else if (isBig) {
+    set.modelProviderFamilyModes.bigmodel = 'oauth';
+    set.modelProviderFamilySelectedKeys.bigmodel = 'coding-plan:builtin:bigmodel-coding-plan';
+    set.providerFamilyDomain = 'bigmodel';
+  }
+  if (set.providerFamilyDomain) set.providerFamilyDomainUpdatedAt = Date.now();
+  atomicWriteJson(p.setting, set);
+
+  // 深度对齐 provider_config.json：默认模型选择指向目标账号的 Coding Plan，否则客户端模型页会判定「未登录」
+  if (account.meta.providerConfig) atomicWriteJson(p.providerConfig, account.meta.providerConfig);
+  alignDefaultModelSelection(account, isZai ? 'zai' : isBig ? 'bigmodel' : null);
+
   writeVirtualDeviceMid(account);
   return { switched: true, alreadyActive: false };
 }
 
+/** ZCode 客户端判定套餐已登录的必要键：account-provider:<providerId>:identity（值为该账号身份 ID）。
+ *  缺失时客户端 nPn/oPn 读不到 accountIdentity，直接跳过该套餐 → 界面显示「未登录」。 */
+export function ensureCodingPlanIdentity(account, paths = zcodePaths()) {
+  const creds = account?.meta?.credentials;
+  if (!creds) return;
+  const secret = zc.defaultSecret(paths.home);
+  let changed = false;
+
+  const putIdentity = (providerId, identity) => {
+    if (!identity) return;
+    const key = `account-provider:${providerId}:identity`;
+    if (creds[key]) return; // 已有则不覆盖
+    creds[key] = zc.encryptWithSecret(String(identity), secret);
+    changed = true;
+  };
+
+  // BigModel：身份 ID 取自 oauth:bigmodel:user_info.id
+  const bigInfo = zc.decryptJsonOpt(creds['oauth:bigmodel:user_info'], secret);
+  const bigUid = bigInfo?.id ?? bigInfo?.user_id ?? null;
+  if (bigUid) {
+    putIdentity('account:bigmodel-individual-coding-plan', bigUid);
+    putIdentity('account:bigmodel-team-coding-plan', bigUid);
+  }
+
+  // Z.ai：身份 ID 取自 oauth:zai:user_info.user_id
+  const zaiInfo = zc.decryptJsonOpt(creds['oauth:zai:user_info'], secret);
+  const zaiUid = zaiInfo?.user_id ?? zaiInfo?.id ?? null;
+  if (zaiUid) {
+    putIdentity('account:zai-individual-coding-plan', zaiUid);
+    putIdentity('account:zai-team-coding-plan', zaiUid);
+    putIdentity('account:zai-start-plan', zaiUid);
+  }
+
+  if (changed) atomicWriteJson(paths.credentials, creds);
+}
+
+/** 把 provider_config.json 的 defaultModelSelection 指向目标账号对应的 Coding Plan */
+export function alignDefaultModelSelection(account, family) {
+  if (!family) return;
+  const p = zcodePaths();
+  const file = p.providerConfig;
+  if (!fs.existsSync(file)) return;
+  const cfg = readJson(file);
+  if (!cfg || typeof cfg !== 'object') return;
+  cfg.config = cfg.config || {};
+
+  const providerId = family === 'zai'
+    ? 'account:zai-individual-coding-plan'
+    : 'account:bigmodel-individual-coding-plan';
+  const modelId = family === 'zai' ? 'glm-5.3-flash' : 'glm-5.3';
+  cfg.config.defaultModelSelection = { providerId, modelId };
+  atomicWriteJson(file, cfg);
+  return providerId;
+}
+
 /** 每个账号的虚拟设备 ID（随机生成一次，落在 account.meta.deviceMid），切换时写回 telemetry-state.json */
 export function ensureVirtualDeviceMid(account) {
   if (account.meta?.deviceMid) return account.meta.deviceMid;