creditdaddy 0.9.5 → 1.2.0

package/src/tenrouterAccounts.js

@@ -0,0 +1,163 @@
+/**
+ * CreditDaddy 账号 → 10Router 连接同步：把本机管理的订阅账号推给 10Router 当上游连接。
+ *
+ * 通道一（推荐）：POST /api/oauth/transfer/import —— 需在 10Router 设置里配置「面板密码」。
+ *   完整 OAuth 形态（accessToken + refreshToken），10R 端按 JWT sub 去重并原位更新，反复同步幂等；
+ *   先用面板密码登录（/api/auth/login）换 auth_token 会话再推送——transfer 路由只认会话 / CLI token。
+ * 通道二（默认）：POST /api/providers —— 仅用已配的 sk- 虚拟 key。
+ *   dashboardGuard 为远程 agent 留的口子（POST /api/providers 认虚拟 key）；apikey 形态、
+ *   不带 refreshToken，token 过期后需重新同步；同名连接返回 409 且不覆盖。
+ *
+ * 扩展新产品：在 TENROUTER_PROVIDER_MAP 加一行即可（如 zcode → glm 等反代就绪后补上），
+ * 同步主流程只读这张表，无需改动其他代码。
+ */
+
+import crypto from 'node:crypto';
+import { buildExportPayload, sealTransfer } from './transfer.js';
+
+/** CreditDaddy provider → 10Router 连接类型。留空 / 缺失 = 该产品暂不同步。 */
+export const TENROUTER_PROVIDER_MAP = {
+  qoder: 'qoder',
+  'qoder-cn': 'qoder-cn',
+  workbuddy: 'codebuddy-cn',
+  'workbuddy-intl': 'codebuddy-intl',
+  // zcode → glm：等 zcode 反代就绪后补一行（同步流程已就绪，无需改代码）
+};
+
+export const mapProviderId = (provider) => TENROUTER_PROVIDER_MAP[provider] || null;
+
+const TIMEOUT_MS = 60_000;
+
+async function trFetch(url, { key, cookie, method = 'GET', body } = {}) {
+  let res;
+  try {
+    res = await fetch(url, {
+      method,
+      headers: {
+        Accept: 'application/json',
+        ...(body ? { 'Content-Type': 'application/json' } : {}),
+        ...(key ? { Authorization: `Bearer ${key}` } : {}),
+        ...(cookie ? { Cookie: cookie } : {}),
+      },
+      body: body ? JSON.stringify(body) : undefined,
+      signal: AbortSignal.timeout(TIMEOUT_MS),
+    });
+  } catch (e) {
+    throw new Error(`无法连接 10Router：${e.cause?.code || e.message}`);
+  }
+  const text = await res.text();
+  let data = null;
+  try { data = text ? JSON.parse(text) : null; } catch {}
+  return { status: res.status, data, setCookie: res.headers.get('set-cookie') || '' };
+}
+
+const authCookie = (setCookie) => {
+  const m = /(?:^|,\s*)auth_token=([^;,\s]+)/.exec(setCookie || '');
+  return m ? `auth_token=${m[1]}` : null;
+};
+
+/** 用面板密码登录换会话 Cookie；失败抛「面板密码不正确」类错误 */
+async function login(endpoint, password) {
+  const r = await trFetch(`${endpoint}/api/auth/login`, { method: 'POST', body: { password } });
+  const cookie = authCookie(r.setCookie);
+  if (r.status !== 200 || !cookie) {
+    throw Object.assign(new Error(r.status === 401 ? '10Router 面板密码不正确' : `10Router 登录失败（HTTP ${r.status}）`), { code: 'BAD_PASSWORD' });
+  }
+  return cookie;
+}
+
+const connName = (a) => a.name || a.email || a.uid || 'account-' + a.id;
+
+/** 通道一：transfer/import（OAuth 形态，按目标 provider 分组推送） */
+async function syncViaTransfer({ endpoint, cookie, groups }) {
+  const results = [];
+  for (const [target, list] of groups) {
+    const passphrase = crypto.randomBytes(18).toString('base64url');   // 仅作传输口令，不落盘
+    const blob = sealTransfer(buildExportPayload(list), passphrase);
+    const r = await trFetch(`${endpoint}/api/oauth/transfer/import`, {
+      cookie, method: 'POST', body: { provider: target, passphrase, blob },
+    });
+    if (r.status !== 200) {
+      results.push({ provider: target, count: list.length, status: 'failed', error: r.data?.error || `HTTP ${r.status}` });
+      continue;
+    }
+    const d = r.data || {};
+    results.push({
+      provider: target, count: list.length, status: (d.failed || 0) ? 'partial' : 'ok',
+      imported: d.imported || 0, updated: d.updated || 0, skipped: d.skipped || 0, failed: d.failed || 0,
+    });
+  }
+  return results;
+}
+
+/** 通道二：POST /api/providers（apikey 形态，逐账号建连接；同名 409 记「已存在」） */
+async function syncViaProviders({ endpoint, key, groups }) {
+  const results = [];
+  for (const [target, list] of groups) {
+    const row = { provider: target, count: list.length, status: 'ok', imported: 0, skipped: 0, failed: 0 };
+    for (const a of list) {
+      const r = await trFetch(`${endpoint}/api/providers`, {
+        key, method: 'POST', body: { provider: target, apiKey: a.token, name: connName(a) },
+      });
+      if (r.status === 201 || r.status === 200) row.imported++;
+      else if (r.status === 409) row.skipped++;
+      else { row.failed++; row.error = r.data?.error || `HTTP ${r.status}`; }
+    }
+    row.status = row.failed ? (row.imported ? 'partial' : 'failed') : 'ok';
+    results.push(row);
+  }
+  return results;
+}
+
+/**
+ * 同步账号到 10Router。
+ * @returns {{ channel: 'oauth'|'apikey', results: Array, summary: string }}
+ */
+export async function syncAccountsTo10r({ endpoint, key, adminPassword, accounts }) {
+  if (!endpoint) throw Object.assign(new Error('尚未配置 10Router 地址'), { code: 'NOT_CONFIGURED' });
+  if (!key && !adminPassword) throw Object.assign(new Error('尚未配置 10Router 虚拟 key'), { code: 'NOT_CONFIGURED' });
+
+  // 按目标 10R 连接类型分组；无映射的产品（zcode/mirasim/catpaw 等）记入跳过原因
+  const groups = new Map();
+  const unmapped = new Map();
+  for (const a of accounts || []) {
+    if (!a || !a.token) continue;
+    const target = mapProviderId(a.provider);
+    if (!target) {
+      if (a.provider) unmapped.set(a.provider, (unmapped.get(a.provider) || 0) + 1);
+      continue;
+    }
+    if (!groups.has(target)) groups.set(target, []);
+    groups.get(target).push(a);
+  }
+  if (!groups.size) throw new Error('没有可同步的账号（qoder / WorkBuddy 系列支持；zcode 待反代就绪后支持）');
+
+  let channel = 'apikey';
+  let cookie = null;
+  const results = [];
+  if (adminPassword) {
+    channel = 'oauth';
+    cookie = await login(endpoint, adminPassword);
+    try {
+      results.push(...await syncViaTransfer({ endpoint, cookie, groups }));
+    } finally {
+      trFetch(`${endpoint}/api/auth/logout`, { cookie, method: 'POST' }).catch(() => {});
+    }
+  } else {
+    if (!key) throw Object.assign(new Error('尚未配置 10Router 虚拟 key'), { code: 'NOT_CONFIGURED' });
+    results.push(...await syncViaProviders({ endpoint, key, groups }));
+  }
+
+  const sum = (k) => results.reduce((n, r) => n + (r[k] || 0), 0);
+  const failed = results.filter((r) => r.status === 'failed' || r.status === 'partial');
+  const parts = [];
+  if (sum('imported')) parts.push(`导入 ${sum('imported')}`);
+  if (sum('updated')) parts.push(`更新 ${sum('updated')}`);
+  if (sum('skipped')) parts.push(`已存在 ${sum('skipped')}`);
+  if (sum('failed')) parts.push(`失败 ${sum('failed')}`);
+  if (unmapped.size) parts.push('跳过 ' + [...unmapped].map(([p, n]) => `${p} ×${n}`).join('、'));
+  const summary = (channel === 'oauth' ? '账号同步完成（OAuth 通道）：' : '账号同步完成（apikey 通道，token 过期后需重新同步）：')
+    + (parts.join('，') || '无变化')
+    + (failed.length ? `；${failed.map((r) => r.provider + '：' + (r.error || r.status)).join('；')}` : '');
+  return { channel, results, summary };
+}

package/src/traeClient.js

@@ -0,0 +1,258 @@
+/**
+ * Trae CN 服务端 API — 额度查询与每日签到领积分。
+ *
+ *   POST https://api.trae.cn/trae/api/v2/ug/checkin_credits/status  {}  是否已签 / 可领额度
+ *   POST https://api.trae.cn/trae/api/v2/ug/checkin_credits/claim   {}  领取（约 150 通用积分/天）
+ *   POST https://api.trae.cn/trae/api/v2/pay/ide_user_ent_usage     {"require_usage":true,"req_source":2}
+ *
+ * 鉴权：authorization: Cloud-IDE-JWT <jwt>（本机客户端 storage.json 解出的那个）。
+ * 这些接口是 IDE 自己在调的，因此必须带全套 IDE 请求头；风控要求 x-device-id 为纯数字设备号，
+ * 传 GUID 会返回 code 9074。响应统一信封 { code, message, ... }，code !== 0 即业务失败。
+ *
+ * 请求头集与错误码口径来自社区逆向（TraeWorkAssistant trae_checkin.rs / star620 TraeApiClient.cs 实测）。
+ */
+
+import crypto from 'node:crypto';
+import { fetchJsonRace } from './zcodeClient.js';
+import { FETCH_TIMEOUT_MS } from './constants.js';
+import { uidFromJwt } from './traeLocal.js';
+
+export const TRAE_API = 'https://api.trae.cn';
+
+const STATUS_URL = `${TRAE_API}/trae/api/v2/ug/checkin_credits/status`;
+const CLAIM_URL = `${TRAE_API}/trae/api/v2/ug/checkin_credits/claim`;
+const USAGE_URL = `${TRAE_API}/trae/api/v2/pay/ide_user_ent_usage`;
+const PAY_STATUS_URL = `${TRAE_API}/trae/api/v2/pay/ide_user_pay_status`;
+
+/** 时间戳宽容转换：Trae 部分字段是秒、部分是毫秒 */
+const iso = (v) => {
+  const n = Number(v);
+  if (!Number.isFinite(n) || n <= 0) return null;
+  const ms = n < 1e11 ? n * 1000 : n;
+  const d = new Date(ms);
+  return Number.isFinite(d.getTime()) && d.getUTCFullYear() < 9000 ? d.toISOString() : null;
+};
+
+const hex = (bytes) => crypto.randomBytes(bytes).toString('hex');
+
+/**
+ * x-market-user-id / vscode-sessionid 不在客户端 storage.json 里，按 uid 确定性派生：
+ * 同一账号每次请求指纹恒定（随机值会让服务端看到「每台请求换一台设备」）。
+ */
+function seeded(uid, salt, n) {
+  const prefix = `${salt}:${uid}`;
+  const out = [];
+  for (let counter = 0; out.length < n; counter++) {
+    out.push(...crypto.createHash('sha256').update(`${prefix}:${counter}`).digest());
+  }
+  return out.slice(0, n);
+}
+
+export function traeDevice(uid, storedDeviceId) {
+  const d = seeded(uid, 'devid', 15).map((b) => String(48 + (b % 10)));
+  const m = seeded(uid, 'market', 16);
+  m[6] = (m[6] & 0x0f) | 0x40;
+  m[8] = (m[8] & 0x3f) | 0x80;
+  const h = m.map((b) => b.toString(16).padStart(2, '0')).join('');
+  return {
+    // 优先用客户端自报的真实设备号，缺失时回落 uid 派生值
+    deviceId: /^\d{8,}$/.test(String(storedDeviceId || '')) ? String(storedDeviceId) : d.join(''),
+    marketUserId: `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20, 32)}`,
+    sessionId: seeded(uid, 'sess', 32).map((b) => b.toString(16).padStart(2, '0')).join(''),
+  };
+}
+
+function traeHeaders(jwt, dev) {
+  const token = jwt.startsWith('Cloud-IDE-JWT ') ? jwt : `Cloud-IDE-JWT ${jwt.trim()}`;
+  return {
+    accept: '*/*',
+    'accept-language': 'zh-CN',
+    authorization: token,
+    'content-type': 'application/json',
+    'user-agent': 'VSCode 1.107.1 (TRAE SOLO CN)',
+    'x-market-client-id': 'VSCode 1.107.1',
+    'x-market-user-id': dev.marketUserId,
+    'x-user-region': 'CN',
+    'x-device-id': dev.deviceId,
+    'x-lgw-req-sdk-type': '3',
+    'package-type': 'stable_cn',
+    'x-request-id': hex(16),
+    'x-lscbd-aid': '787976',
+    'x-lscbd-platform': process.platform === 'win32' ? 'windows' : process.platform,
+    'app-version': '0.1.45',
+    'x-tt-trace-id': `00-${hex(8)}-01`,
+    'vscode-sessionid': dev.sessionId,
+  };
+}
+
+/** checked_in / credits 可能被包在 data / result 信封里，只读顶层会把已签账号判成未签而重复领取 */
+function findField(obj, key, depth = 0) {
+  if (!obj || typeof obj !== 'object' || depth > 2) return undefined;
+  if (key in obj) return obj[key];
+  for (const child of [obj.data, obj.result, obj.Result]) {
+    const v = findField(child, key, depth + 1);
+    if (v !== undefined) return v;
+  }
+  return undefined;
+}
+
+/** 统一 POST → { status, body }；401 / code 1001 抛 auth 错误（凭据失效） */
+async function post(url, account, body = {}) {
+  const jwt = account.token;
+  if (!jwt) throw new Error('账号缺少 Trae 登录 token（请到 Trae 客户端登录后用「本机导入」同步）');
+  const uid = account.uid || uidFromJwt(jwt);
+  const dev = traeDevice(uid || 'anonymous', account.meta?.deviceId);
+  const res = await fetchJsonRace(url, {
+    method: 'POST',
+    headers: traeHeaders(jwt, dev),
+    body: JSON.stringify(body),
+    timeoutMs: FETCH_TIMEOUT_MS,
+  });
+  if (res.status === 401) {
+    const e = new Error('Trae 登录凭据已失效，请在 Trae 客户端重新登录后重新本机导入');
+    e.auth = true;
+    throw e;
+  }
+  const parsed = await res.json().catch(() => null);
+  if (!parsed || typeof parsed !== 'object') {
+    throw new Error(`Trae 接口返回无法解析（HTTP ${res.status}）`);
+  }
+  const code = Number(parsed.code);
+  if (code === 1001) {
+    const e = new Error(String(parsed.message || 'Trae JWT 已被服务端吊销'));
+    e.auth = true;
+    throw e;
+  }
+  return { status: res.status, body: parsed, uid, code: Number.isFinite(code) ? code : null, message: String(parsed.message || '') };
+}
+
+/** claim/status 的业务失败（code !== 0）不带 HTTP 错误状态，按 code 与 message 判定 */
+const authDead = (e) => Boolean(e && e.auth);
+
+/**
+ * 额度：ide_user_ent_usage 的权益包列表 → CreditDaddy 统一结构。
+ * 剩余 = entitlement_base_info.quota.credits_limit − pack 顶层 usage.credits_amount（逐包求和）。
+ *
+ * ⚠️ 这个接口返回裸对象，没有 { code, message } 信封（与签到接口不同），
+ * 只有 code 存在且非 0 才算业务失败。总额度优先取服务端自报的 usage_summary，
+ * 逐包明细仍按 pack 展开（面板要显示每包到期时间）。
+ */
+export async function fetchTraeQuota(account) {
+  const r = await post(USAGE_URL, account, { require_usage: true, req_source: 2 });
+  if (r.code !== null && r.code !== 0) throw new Error(`Trae 额度接口返回错误：${r.message || `code ${r.code}`}`);
+  const packs = (findField(r.body, 'user_entitlement_pack_list') || []).filter((p) => p && typeof p === 'object');
+  // 每天签到会新发一个 150 分 / 7 天有效期的包，账户上同名包能堆到 30 个；
+  // 逐包直出会淹掉面板，故按名称归并（到期时间取最早的那个）。
+  const byName = new Map();
+  let total = 0;
+  let used = 0;
+  for (const pack of packs) {
+    const base = pack.entitlement_base_info || {};
+    const limit = Number(base.quota?.credits_limit);
+    if (!Number.isFinite(limit) || limit <= 0) continue;
+    const spent = Number(pack.usage?.credits_amount) || 0;
+    // product_id 209 = Work 积分，其余是通用积分
+    const isWork = Number(base.product_id) === 209;
+    const name = pack.group_name || pack.display_desc || (isWork ? 'Work 积分' : '通用积分');
+    const expiresAt = iso(pack.expire_time ?? base.end_time);
+    const prev = byName.get(name);
+    if (prev) {
+      prev.total += limit;
+      prev.used += spent;
+      if (expiresAt && (!prev.expiresAt || expiresAt < prev.expiresAt)) prev.expiresAt = expiresAt;
+    } else {
+      byName.set(name, { name, total: limit, used: spent, expiresAt, recurring: !isWork, unit: '积分' });
+    }
+    total += limit;
+    used += spent;
+  }
+  const parts = [...byName.values()]
+    .map((p) => ({ ...p, total: round2(p.total), used: round2(p.used), remaining: round2(Math.max(p.total - p.used, 0)) }))
+    .sort((a, b) => b.remaining - a.remaining);
+  const summary = r.body.usage_summary && typeof r.body.usage_summary === 'object' ? r.body.usage_summary : null;
+  if (summary && Number(summary.total_amount) > 0) {
+    total = Number(summary.total_amount);
+    used = Number(summary.consumed_amount) || 0;
+  }
+  const plan = await fetchTraePlan(account).catch(() => null);
+  return {
+    total: round2(total),
+    used: round2(used),
+    remaining: round2(Math.max(total - used, 0)),
+    exceeded: total > 0 && total - used <= 0,
+    // 顶层不设 unit：面板 creditSum 用「有 unit 即异单位」来排除合计，
+    // Trae 与 Qoder 同为「积分」口径，必须计入剩余积分合计。
+    plan: plan?.plan || null,
+    planExpiresAt: plan?.expiresAt || null,
+    parts,
+    empty: parts.length === 0 && !summary,
+  };
+}
+
+const round2 = (n) => Math.round(n * 100) / 100;
+
+/** ide_user_pay_status → 套餐名（Free / Lite / Pro）与到期时间；查不到不影响额度 */
+async function fetchTraePlan(account) {
+  const r = await post(PAY_STATUS_URL, account, { req_source: 2 });
+  if (r.code !== null && r.code !== 0) return null;
+  const name = findField(r.body, 'user_pay_identity_str');
+  const expire = findField(r.body, 'end_time') ?? findField(r.body, 'next_billing_time');
+  return { plan: typeof name === 'string' && name ? name : null, expiresAt: iso(expire) };
+}
+
+/**
+ * 每日签到：先查 status，已签则报 already，未签才 claim。
+ * 返回 CreditDaddy 的签到契约 { status, claimedAmount?, message?, uid? }。
+ */
+export async function checkinTrae(account, ctx = {}) {
+  const uid = account.uid || uidFromJwt(account.token || '');
+  const label = account.name || account.id;
+  const base = { accountId: account.id, account: label, provider: 'trae' };
+  let r;
+  try {
+    r = await post(STATUS_URL, account);
+  } catch (e) {
+    if (authDead(e)) throw e;
+    return { ...base, status: 'failed', message: e.message, uid };
+  }
+  if (r.code !== 0) {
+    return { ...base, status: r.code === 9074 ? 'limited' : 'failed', message: r.message || `code ${r.code}`, uid };
+  }
+  const already = findField(r.body, 'checked_in');
+  if (already === true || already === 1) {
+    return { ...base, status: 'already', message: '今天已签到', uid };
+  }
+
+  const c = await post(CLAIM_URL, account);
+  if (c.code !== 0) {
+    ctx.log?.(`Trae 领取失败：${c.message || `code ${c.code}`}`);
+    return {
+      ...base,
+      status: c.code === 9074 ? 'limited' : 'failed',
+      message: c.message || `code ${c.code}`,
+      uid,
+    };
+  }
+  const claimed = Number(findField(c.body, 'credits')) || 0;
+  return { ...base, status: 'checked-in', claimedAmount: claimed, message: claimed ? `签到成功，+${claimed} 积分` : '签到成功', uid };
+}
+
+/**
+ * 添加账号时的校验：Trae 的 token 是本地可自证的 JWT（含 uid 与到期时间），
+ * 不需要网络往返；凭据只来自 Trae 客户端登录后的本机导入。
+ */
+export async function verifyTraeAccount(account) {
+  const token = account.token;
+  if (!token || token.split('.').length !== 3) throw new Error('不是 Trae 的 Cloud-IDE-JWT token');
+  let payload;
+  try { payload = JSON.parse(Buffer.from(token.split('.')[1], 'base64url').toString('utf8')); } catch {
+    throw new Error('Trae token 的 JWT 负载无法解析');
+  }
+  const uid = payload?.data?.id ? String(payload.data.id) : null;
+  if (!uid) throw new Error('Trae token 里缺少用户 id');
+  const exp = Number(payload.exp);
+  if (Number.isFinite(exp) && exp * 1000 < Date.now()) {
+    throw new Error(`这个 Trae token 已于 ${new Date(exp * 1000).toLocaleString()} 过期，请到 Trae 客户端重新登录后重新导入`);
+  }
+  return { uid, name: account.name || null, email: account.email || null };
+}