creditdaddy 1.1.1 → 1.3.0

package/src/providers.js

@@ -1,181 +1,216 @@
-/**
- * 产品线注册表 — 按账号 provider 分发签到 / 积分 / 校验。
- *
- * 每个产品实现（checkin 可缺省：该产品不参与每日签到，如 ZCode）：
- *   checkin(account, ctx) → { status: checked-in|already|limited|no-activity|failed, … }
- *   quota(account, ctx)   → { total, used, remaining, exceeded, parts: [{ name, total, used, remaining, expiresAt, recurring }] }
- *   verify(account)       → { name?, uid?, email? }（添加账号时补全资料，失败抛错）
- * ctx.onRefresh(creds)：产品在 token 刷新后回调，由调用方负责持久化。
- */
-
-import { productOf } from './constants.js';
-import { checkinOne as checkinQoder, fetchQuotaUsage, fetchUserinfo, fetchUsageDetail } from './qoderClient.js';
-import { checkinWorkbuddy, checkinWorkbuddyIntl, fetchWorkbuddyQuota, inspectToken } from './workbuddyClient.js';
-import { fetchZcodeQuota } from './zcodeClient.js';
-import { fetchMirasimQuota, fetchMirasimProfile } from './mirasimClient.js';
-import { fetchCatpawQuota, fetchCatpawProfile } from './catpawClient.js';
-/** 从 userinfo 响应中挑一个可读的显示名 */
-export function displayNameFrom(ui) {
-  const pick = [ui?.nickname, ui?.name, ui?.username, ui?.email]
-    .map((v) => (typeof v === 'string' ? v.trim() : ''))
-    .find(Boolean);
-  return pick || null;
-}
-
-/** Qoder /api/v2/quota/usage → 统一积分结构；detail 为网页端逐资源包明细（可选，已按 uid 校验） */
-export function normalizeQoderQuota(q, detail = null) {
-  const names = [['userQuota', '套餐额度', true], ['addOnQuota', '附加额度', false], ['orgResourcePackage', '组织资源包', false]];
-  const fmtExpiry = (v) => (Number(v) > 0 && Number(v) < 253400000000000 ? new Date(Number(v)).toISOString() : null);
-  let parts = names
-    .map(([k, name, recurring]) => ({ x: q?.[k], name, recurring }))
-    .filter(({ x }) => x && Number(x.total) > 0)
-    .map(({ x, name, recurring }) => ({
-      name, recurring,
-      total: Number(x.total) || 0,
-      used: Number(x.used) || 0,
-      remaining: Number(x.remaining) || 0,
-      expiresAt: fmtExpiry(q?.expiresAt),
-    }));
-  // 网页端明细可用时按「每个资源包一条」展开（含各自到期时间），比聚合值更精确
-  const detailParts = detail ? detailQuotaParts(detail, fmtExpiry) : null;
-  if (detailParts) parts = detailParts;
-  const sum = (k) => Math.round(parts.reduce((s, p) => s + p[k], 0) * 100) / 100;
-  return { total: sum('total'), used: sum('used'), remaining: sum('remaining'), parts, exceeded: Boolean(q?.isQuotaExceeded) };
-}
-
-/** 网页端用量明细的分组 → 统一 parts（组内为空 / 全 0 时返回 null 让调用方回落聚合数据） */
-const DETAIL_SOURCE_NAME = {
-  PLAN: '套餐额度',
-  RESOURCE_PACKAGE_SOURCE_BONUS: '获赠资源包',
-  RESOURCE_PACKAGE_SOURCE_PURCHASE: '购买资源包',
-  RESOURCE_PACKAGE_SOURCE_ORG: '组织资源包',
-};
-function detailQuotaParts(detail, fmtExpiry) {
-  const groups = [['plan_quota', '套餐额度', true], ['resource_package_quota', '资源包', false], ['dedicated_resource_package_quota', '组织资源包', false]];
-  const parts = [];
-  for (const [key, fallbackName, recurring] of groups) {
-    const rows = detail?.[key]?.quota_detail;
-    if (!Array.isArray(rows)) continue;
-    for (const r of rows) {
-      const total = Number(r?.limit_value) || 0;
-      if (total <= 0) continue;
-      parts.push({
-        name: DETAIL_SOURCE_NAME[r?.source] || fallbackName,
-        recurring,
-        total,
-        used: Number(r?.used_value) || 0,
-        remaining: Number(r?.remaining_value) || 0,
-        expiresAt: fmtExpiry(r?.expires_at),
-      });
-    }
-  }
-  return parts.length ? parts : null;
-}
-
-/**
- * 网页端逐资源包明细（best-effort）：无会话 Cookie 返回 null；
- * 会话失效（401/403）时清除 Cookie 并回调 ctx.onWebSessionExpired 提示重新登录，同样回落。
- * 明细里的 user_id 与账号 uid 不一致时丢弃（防止把别人的资源包显示到这个账号上）。
- */
-async function qoderWebDetail(account, ctx = {}) {
-  try {
-    const d = await fetchUsageDetail(account);
-    if (!d) return null;
-    if (account.uid && d.user_id && d.user_id !== account.uid) {
-      ctx.log?.('网页会话与账号不匹配，忽略资源包明细');
-      return null;
-    }
-    return d;
-  } catch (e) {
-    if (e.auth) {
-      await clearQoderWebSession(account, ctx);
-      ctx.log?.('Qoder 网页会话已失效，无法显示逐资源包明细（面板里重新登录一次即可）');
-    }
-    return null;
-  }
-}
-
-/** 删除账号上的网页会话 Cookie（失效时），并通知桌面壳可以重新抓取 */
-async function clearQoderWebSession(account, ctx = {}) {
-  const { withAccounts } = await import('./store.js');
-  await withAccounts((list) => {
-    const cur = list.find((a) => a.id === account.id);
-    if (cur?.meta?.qoderWebSession) {
-      const { qoderWebSession, ...meta } = cur.meta;
-      cur.meta = meta;
-      cur.updatedAt = new Date().toISOString();
-      if (account.meta) delete account.meta.qoderWebSession;
-    }
-  });
-  ctx.onWebSessionExpired?.();
-}
-
-const PRODUCTS = {
-  qoder: {
-    label: 'Qoder',
-    checkin: (account) => checkinQoder(account),
-    quota: async (account, ctx = {}) => normalizeQoderQuota(await fetchQuotaUsage(account), await qoderWebDetail(account, ctx)),
-    verify: async (account) => {
-      const ui = await fetchUserinfo(account);
-      return { name: displayNameFrom(ui), uid: typeof ui?.id === 'string' ? ui.id : null, email: ui?.email || null };
-    },
-  },
-  workbuddy: {
-    label: 'WorkBuddy',
-    // 国内版走 billing daily-checkin 签到；国际版没有签到接口，走「活跃领取」（免费档对话探测）
-    checkin: (account, ctx) => (account.provider === 'workbuddy-intl' ? checkinWorkbuddyIntl(account, ctx) : checkinWorkbuddy(account, ctx)),
-    quota: (account, ctx) => fetchWorkbuddyQuota(account, ctx),
-    verify: async (account) => {
-      const info = inspectToken(account.token);
-      if (!info.provider) throw new Error('不是 WorkBuddy / CodeBuddy 的登录 token');
-      if (info.provider !== account.provider) throw new Error(`token 属于${info.provider === 'workbuddy' ? '国内版' : '国际版'}，与所选版本不符`);
-      return { uid: info.uid, name: info.name };
-    },
-  },
-  zcode: {
-    label: 'ZCode',
-    // 无 checkin：ZCode 积分来自活动领取（需阿里云验证码），不做后台自动签到
-    quota: (account) => fetchZcodeQuota(account),
-    verify: async () => {
-      throw new Error('ZCode 账号请通过「本机导入」添加（需要客户端的完整登录快照才能查询额度与切换）');
-    },
-  },
-  mirasim: {
-    label: 'mirasim',
-    // 无 checkin：mirasim 额度按 5h/7d 滚动窗口分配，不设签到。
-    // token 约 1 小时过期：quota 内部 401 时自动用 refreshToken 续期，
-    // ctx.onRefresh（refreshContext）回写账号库后，这里再把新凭据同步回 setting.json（若该账号是客户端当前登录）。
-    quota: async (account, ctx = {}) => {
-      const mirasimLocal = await import('./mirasimLocal.js');
-      const wrapped = {
-        ...ctx,
-        onRefresh: async (creds) => {
-          await ctx.onRefresh?.(creds);
-          try {
-            const synced = await mirasimLocal.writeMirasimAuth({ uid: account.uid, token: creds.token, refreshToken: creds.refreshToken, expiresAt: creds.expiresAt });
-            if (synced) ctx.log?.('已同步新 token 到 mirasim 客户端');
-          } catch (e) { ctx.log?.('同步到 mirasim 客户端失败：' + e.message); }
-        },
-      };
-      return fetchMirasimQuota(account, wrapped);
-    },
-    verify: async (account) => {
-      const p = await fetchMirasimProfile(account.token);
-      return { name: p.name || p.email, uid: p.id, email: p.email };
-    },
-  },
-  catpaw: {
-    label: '妙手',
-    // 无 checkin：妙手（美团 CatPaw）按套餐发放 Credits，无每日签到活动。
-    // 凭据由妙手客户端登录管理（无对外 refresh）：401 时提示到客户端重新登录后重新本机导入。
-    quota: (account) => fetchCatpawQuota(account),
-    verify: async (account) => {
-      const p = await fetchCatpawProfile(account.token);
-      return { name: p.name, uid: p.userId, email: null };
-    },
-  },
-};
-
-export function productImpl(provider) {
-  return PRODUCTS[productOf(provider)];
-}
+/**
+ * 产品线注册表 — 按账号 provider 分发签到 / 积分 / 校验。
+ *
+ * 每个产品实现（checkin 可缺省：该产品不参与每日签到，如 ZCode）：
+ *   checkin(account, ctx) → { status: checked-in|already|limited|no-activity|failed, … }
+ *   quota(account, ctx)   → { total, used, remaining, exceeded, parts: [{ name, total, used, remaining, expiresAt, recurring }] }
+ *   verify(account)       → { name?, uid?, email? }（添加账号时补全资料，失败抛错）
+ * ctx.onRefresh(creds)：产品在 token 刷新后回调，由调用方负责持久化。
+ */
+
+import { productOf } from './constants.js';
+import { checkinOne as checkinQoder, fetchQuotaUsage, fetchUserinfo, fetchUsageDetail } from './qoderClient.js';
+import { checkinWorkbuddy, checkinWorkbuddyIntl, fetchWorkbuddyQuota, inspectToken } from './workbuddyClient.js';
+import { fetchZcodeQuota } from './zcodeClient.js';
+import { fetchMirasimQuota, fetchMirasimProfile } from './mirasimClient.js';
+import { fetchCatpawQuota, fetchCatpawProfile } from './catpawClient.js';
+import { fetchTraeQuota, checkinTrae, verifyTraeAccount } from './traeClient.js';
+import { fetchMiniMaxQuota, checkinMiniMax, verifyMiniMaxAccount } from './minimaxClient.js';
+/** 从 userinfo 响应中挑一个可读的显示名 */
+export function displayNameFrom(ui) {
+  const pick = [ui?.nickname, ui?.name, ui?.username, ui?.email]
+    .map((v) => (typeof v === 'string' ? v.trim() : ''))
+    .find(Boolean);
+  return pick || null;
+}
+
+/** Qoder /api/v2/quota/usage → 统一积分结构；detail 为网页端逐资源包明细（可选，已按 uid 校验） */
+export function normalizeQoderQuota(q, detail = null) {
+  const names = [['userQuota', '套餐额度', true], ['addOnQuota', '附加额度', false], ['orgResourcePackage', '组织资源包', false]];
+  const fmtExpiry = (v) => (Number(v) > 0 && Number(v) < 253400000000000 ? new Date(Number(v)).toISOString() : null);
+  let parts = names
+    .map(([k, name, recurring]) => ({ x: q?.[k], name, recurring }))
+    .filter(({ x }) => x && Number(x.total) > 0)
+    .map(({ x, name, recurring }) => ({
+      name, recurring,
+      total: Number(x.total) || 0,
+      used: Number(x.used) || 0,
+      remaining: Number(x.remaining) || 0,
+      expiresAt: fmtExpiry(q?.expiresAt),
+    }));
+  // 网页端明细可用时按「每个资源包一条」展开（含各自到期时间），比聚合值更精确
+  const detailParts = detail ? detailQuotaParts(detail, fmtExpiry) : null;
+  if (detailParts) parts = detailParts;
+  const sum = (k) => Math.round(parts.reduce((s, p) => s + p[k], 0) * 100) / 100;
+  return { total: sum('total'), used: sum('used'), remaining: sum('remaining'), parts, exceeded: Boolean(q?.isQuotaExceeded) };
+}
+
+/** 网页端用量明细的分组 → 统一 parts（组内为空 / 全 0 时返回 null 让调用方回落聚合数据） */
+const DETAIL_SOURCE_NAME = {
+  PLAN: '套餐额度',
+  RESOURCE_PACKAGE_SOURCE_BONUS: '获赠资源包',
+  RESOURCE_PACKAGE_SOURCE_PURCHASE: '购买资源包',
+  RESOURCE_PACKAGE_SOURCE_ORG: '组织资源包',
+};
+function detailQuotaParts(detail, fmtExpiry) {
+  const groups = [['plan_quota', '套餐额度', true], ['resource_package_quota', '资源包', false], ['dedicated_resource_package_quota', '组织资源包', false]];
+  const parts = [];
+  for (const [key, fallbackName, recurring] of groups) {
+    const rows = detail?.[key]?.quota_detail;
+    if (!Array.isArray(rows)) continue;
+    for (const r of rows) {
+      const total = Number(r?.limit_value) || 0;
+      if (total <= 0) continue;
+      parts.push({
+        name: DETAIL_SOURCE_NAME[r?.source] || fallbackName,
+        recurring,
+        total,
+        used: Number(r?.used_value) || 0,
+        remaining: Number(r?.remaining_value) || 0,
+        expiresAt: fmtExpiry(r?.expires_at),
+      });
+    }
+  }
+  return parts.length ? parts : null;
+}
+
+/**
+ * 网页端逐资源包明细（best-effort）：无会话 Cookie 返回 null；
+ * 会话失效（401/403）时清除 Cookie 并回调 ctx.onWebSessionExpired 提示重新登录，同样回落。
+ * 明细里的 user_id 与账号 uid 不一致时丢弃（防止把别人的资源包显示到这个账号上）。
+ */
+async function qoderWebDetail(account, ctx = {}) {
+  try {
+    const d = await fetchUsageDetail(account);
+    if (!d) return null;
+    if (account.uid && d.user_id && d.user_id !== account.uid) {
+      ctx.log?.('网页会话与账号不匹配，忽略资源包明细');
+      return null;
+    }
+    return d;
+  } catch (e) {
+    if (e.auth) {
+      await clearQoderWebSession(account, ctx);
+      ctx.log?.('Qoder 网页会话已失效，无法显示逐资源包明细（面板里重新登录一次即可）');
+    }
+    return null;
+  }
+}
+
+/** 删除账号上的网页会话 Cookie（失效时），并通知桌面壳可以重新抓取 */
+async function clearQoderWebSession(account, ctx = {}) {
+  const { withAccounts } = await import('./store.js');
+  await withAccounts((list) => {
+    const cur = list.find((a) => a.id === account.id);
+    if (cur?.meta?.qoderWebSession) {
+      const { qoderWebSession, ...meta } = cur.meta;
+      cur.meta = meta;
+      cur.updatedAt = new Date().toISOString();
+      if (account.meta) delete account.meta.qoderWebSession;
+    }
+  });
+  ctx.onWebSessionExpired?.();
+}
+
+const PRODUCTS = {
+  qoder: {
+    label: 'Qoder',
+    checkin: (account) => checkinQoder(account),
+    quota: async (account, ctx = {}) => normalizeQoderQuota(await fetchQuotaUsage(account), await qoderWebDetail(account, ctx)),
+    verify: async (account) => {
+      const ui = await fetchUserinfo(account);
+      return { name: displayNameFrom(ui), uid: typeof ui?.id === 'string' ? ui.id : null, email: ui?.email || null };
+    },
+  },
+  workbuddy: {
+    label: 'WorkBuddy',
+    // 国内版走 billing daily-checkin 签到；国际版没有签到接口，走「活跃领取」（免费档对话探测）
+    checkin: (account, ctx) => (account.provider === 'workbuddy-intl' ? checkinWorkbuddyIntl(account, ctx) : checkinWorkbuddy(account, ctx)),
+    quota: (account, ctx) => fetchWorkbuddyQuota(account, ctx),
+    verify: async (account) => {
+      const info = inspectToken(account.token);
+      if (!info.provider) throw new Error('不是 WorkBuddy / CodeBuddy 的登录 token');
+      if (info.provider !== account.provider) throw new Error(`token 属于${info.provider === 'workbuddy' ? '国内版' : '国际版'}，与所选版本不符`);
+      return { uid: info.uid, name: info.name };
+    },
+  },
+  zcode: {
+    label: 'ZCode',
+    // 无 checkin：ZCode 积分来自活动领取（需阿里云验证码），不做后台自动签到
+    quota: (account) => fetchZcodeQuota(account),
+    verify: async () => {
+      throw new Error('ZCode 账号请通过「本机导入」添加（需要客户端的完整登录快照才能查询额度与切换）');
+    },
+  },
+  mirasim: {
+    label: 'mirasim',
+    // 无 checkin：mirasim 额度按 5h/7d 滚动窗口分配，不设签到。
+    // token 约 1 小时过期：quota 内部 401 时自动用 refreshToken 续期，
+    // ctx.onRefresh（refreshContext）回写账号库后，这里再把新凭据同步回 setting.json（若该账号是客户端当前登录）。
+    quota: async (account, ctx = {}) => {
+      const mirasimLocal = await import('./mirasimLocal.js');
+      const wrapped = {
+        ...ctx,
+        onRefresh: async (creds) => {
+          await ctx.onRefresh?.(creds);
+          try {
+            const synced = await mirasimLocal.writeMirasimAuth({ uid: account.uid, token: creds.token, refreshToken: creds.refreshToken, expiresAt: creds.expiresAt });
+            if (synced) ctx.log?.('已同步新 token 到 mirasim 客户端');
+          } catch (e) { ctx.log?.('同步到 mirasim 客户端失败：' + e.message); }
+        },
+      };
+      return fetchMirasimQuota(account, wrapped);
+    },
+    verify: async (account) => {
+      const p = await fetchMirasimProfile(account.token);
+      return { name: p.name || p.email, uid: p.id, email: p.email };
+    },
+  },
+  catpaw: {
+    label: '妙手',
+    // 无 checkin：妙手（美团 CatPaw）按套餐发放 Credits，无每日签到活动。
+    // 凭据由妙手客户端登录管理（无对外 refresh）：401 时提示到客户端重新登录后重新本机导入。
+    quota: (account) => fetchCatpawQuota(account),
+    verify: async (account) => {
+      const p = await fetchCatpawProfile(account.token);
+      return { name: p.name, uid: p.userId, email: null };
+    },
+  },
+  trae: {
+    label: 'Trae',
+    // 每日签到发 150 通用积分（7 天有效）。凭据只来自本机 Trae 客户端的 storage.json，
+    // 无对外 refresh：token 约 14 天过期，失效后到 Trae 客户端重新登录再重新本机导入。
+    checkin: (account, ctx) => checkinTrae(account, ctx),
+    quota: (account) => fetchTraeQuota(account),
+    verify: (account) => verifyTraeAccount(account),
+  },
+  minimax: {
+    label: 'MiniMax',
+    // token 约 1 小时过期：checkin / quota 内部 401 时用 refreshToken 自动续期（withMiniMaxAuth）。
+    // 本机导入账号刷新前会重读 ~/.minimax auth.json 对齐客户端最新 refreshToken；
+    // ctx.onRefresh 回写账号库后，这里再安全回写 auth.json（仅客户端未运行时，见 minimaxLocal.writeMiniMaxAuth）。
+    // device 登录账号自持独立凭据链（无 meta.authRecordKey），writeMiniMaxAuth 对其 no-op，不与本机客户端互斥。
+    checkin: (account, ctx = {}) => checkinMiniMax(account, wrapMiniMaxRefresh(account, ctx)),
+    quota: (account, ctx = {}) => fetchMiniMaxQuota(account, wrapMiniMaxRefresh(account, ctx)),
+    verify: (account) => verifyMiniMaxAccount(account),
+  },
+};
+
+/** 包裹 MiniMax 的 ctx.onRefresh：回写账号库后，安全同步新凭据回本机 auth.json（仅本机导入账号且客户端未运行时） */
+function wrapMiniMaxRefresh(account, ctx = {}) {
+  return {
+    ...ctx,
+    onRefresh: async (creds) => {
+      await ctx.onRefresh?.(creds);
+      try {
+        const { writeMiniMaxAuth } = await import('./minimaxLocal.js');
+        const synced = writeMiniMaxAuth({ ...account, ...creds });
+        if (synced) ctx.log?.('已同步新 token 到 MiniMax 客户端');
+      } catch {}
+    },
+  };
+}
+
+export function productImpl(provider) {
+  return PRODUCTS[productOf(provider)];
+}

package/src/qoderApp.js

@@ -19,6 +19,7 @@ import path from 'node:path';
 import crypto from 'node:crypto';
 import { spawn, execFile, execFileSync } from 'node:child_process';
 import { dataDir } from './store.js';
+import { anyProcRunning } from './winProc.js';
 import { installedUmid, CLI_RISK_ENV } from './qoderUmid.js';
 
 const RISK_TTL_MS = 50 * 60 * 1000;        // 客户端每 60±5 分钟刷新一次，这里保守取 50 分钟
@@ -364,10 +365,14 @@ function macKeychainPassword(service) {
 
 const keyCache = new Map();
 
-/** 取得某个 Electron userData 目录对应的 safeStorage 解密器 */
-async function safeStorageDecryptor(userData, appNames) {
+/**
+ * 某个 Electron userData 目录对应的 safeStorage 编解码器。
+ * encrypt 用于把账号库里的登录快照写回客户端（切换账号），与 decrypt 同密钥同格式：
+ * Windows = 'v10' + nonce(12) + AES-256-GCM 密文 + tag(16)；mac/linux = 'v10' + AES-128-CBC。
+ */
+export async function safeStorageCodec(userData, appNames) {
   if (keyCache.has(userData)) return keyCache.get(userData);
-  let decrypt;
+  let decrypt, encrypt;
   if (process.platform === 'win32') {
     const ls = JSON.parse(fs.readFileSync(path.join(userData, 'Local State'), 'utf8'));
     const enc = Buffer.from(ls?.os_crypt?.encrypted_key || '', 'base64');
@@ -381,6 +386,12 @@ async function safeStorageDecryptor(userData, appNames) {
       d.setAuthTag(tag);
       return Buffer.concat([d.update(data.subarray(15, data.length - 16)), d.final()]).toString('utf8');
     };
+    encrypt = (text) => {
+      const nonce = crypto.randomBytes(12);
+      const c = crypto.createCipheriv('aes-256-gcm', key, nonce);
+      const ct = Buffer.concat([c.update(text, 'utf8'), c.final()]);
+      return Buffer.concat([Buffer.from('v10'), nonce, ct, c.getAuthTag()]);
+    };
   } else {
     let password = 'peanuts', iterations = 1;
     if (process.platform === 'darwin') {
@@ -392,15 +403,21 @@ async function safeStorageDecryptor(userData, appNames) {
       iterations = 1003;
     }
     const key = crypto.pbkdf2Sync(password, 'saltysalt', iterations, 16, 'sha1');
+    const iv = Buffer.alloc(16, ' ');
     decrypt = (data) => {
       const ver = data.subarray(0, 3).toString();
       if (ver !== 'v10') throw new Error(ver === 'v11' ? '需要系统密钥环（v11），暂不支持' : '未知的加密格式');
-      const d = crypto.createDecipheriv('aes-128-cbc', key, Buffer.alloc(16, ' '));
+      const d = crypto.createDecipheriv('aes-128-cbc', key, iv);
       return Buffer.concat([d.update(data.subarray(3)), d.final()]).toString('utf8');
     };
+    encrypt = (text) => {
+      const c = crypto.createCipheriv('aes-128-cbc', key, iv);
+      return Buffer.concat([Buffer.from('v10'), c.update(text, 'utf8'), c.final()]);
+    };
   }
-  keyCache.set(userData, decrypt);
-  return decrypt;
+  const codec = { decrypt, encrypt };
+  keyCache.set(userData, codec);
+  return codec;
 }
 
 /**
@@ -414,13 +431,14 @@ export async function readQoderAppAccounts() {
     const file = path.join(app.dataDir, 'auth.v1.dat');
     if (!exists(file)) continue;
     try {
-      const decrypt = await safeStorageDecryptor(app.dataDir, ['Qoder App', app.label.includes('国内') ? 'Qoder CN' : 'Qoder']);
+      const { decrypt } = await safeStorageCodec(app.dataDir, ['Qoder App', app.label.includes('国内') ? 'Qoder CN' : 'Qoder']);
       const obj = JSON.parse(decrypt(fs.readFileSync(file)));
       if (typeof obj?.token !== 'string' || !obj.token) throw new Error('auth.v1.dat 中没有 token');
       accounts.push({
         provider: app.provider,
         source: `${app.label} 客户端`,
         file,
+        authJson: obj,
         token: obj.token,
         refreshToken: typeof obj.refreshToken === 'string' ? obj.refreshToken : null,
         expiresAt: typeof obj.expiresAt === 'string' ? obj.expiresAt : null,
@@ -436,3 +454,65 @@ export async function readQoderAppAccounts() {
   }
   return { accounts, errors };
 }
+
+// ─── 切换本机 Qoder 登录账号 ───
+
+const QODER_EXES = ['Qoder.exe', 'Qoder CN.exe'];
+
+/** Qoder IDE（国际版 / 国内版）是否在运行 */
+export function qoderRunning() {
+  // 走 winProc：这里曾经用 latin1 解 tasklist，中文 Windows 上恒为 true
+  return anyProcRunning(QODER_EXES);
+}
+
+const nap = (ms) => Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+
+/** 结束 Qoder 进程：先普通终止（给客户端落盘的机会），超时后 /F */
+export function terminateQoder({ timeoutMs = 8000 } = {}) {
+  if (process.platform !== 'win32') return { closed: false, supported: false };
+  if (!qoderRunning()) return { closed: false, running: false };
+  for (const exe of QODER_EXES) {
+    try { execFileSync('taskkill.exe', ['/IM', exe, '/T'], { windowsHide: true, stdio: 'ignore' }); } catch {}
+  }
+  let deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline && qoderRunning()) nap(250);
+  if (qoderRunning()) {
+    for (const exe of QODER_EXES) {
+      try { execFileSync('taskkill.exe', ['/IM', exe, '/T', '/F'], { windowsHide: true, stdio: 'ignore' }); } catch {}
+    }
+    deadline = Date.now() + 3000;
+    while (Date.now() < deadline && qoderRunning()) nap(250);
+  }
+  return { closed: !qoderRunning(), running: qoderRunning() };
+}
+
+/**
+ * 把本机 Qoder 客户端的登录换成目标账号（写回 auth.v1.dat）。
+ * force：由调用方先 terminateQoder 再进来（运行中的 Qoder 退出时会把内存里的旧登录覆盖回文件）。
+ */
+export async function switchTo(account, { force = false } = {}) {
+  const auth = account.meta?.qoderAuth;
+  const file = account.meta?.qoderAuthFile;
+  if (!auth || !file) {
+    throw new Error(`账号「${account.name || account.id}」没有本机登录快照，无法切换：请在 Qoder 里登录该账号后到「添加账号 → 本机导入」导入一次`);
+  }
+  if (!fs.existsSync(file)) throw new Error(`Qoder 凭据文件不存在：${file}（客户端可能被卸载或换了数据目录）`);
+  if (!force && qoderRunning()) {
+    const e = new Error('Qoder 正在运行。切换会改写 Qoder 的登录文件，运行中的 Qoder 退出时会把旧登录写回去——退出后重试，或选择「关闭并强制切换」。');
+    e.qoderRunning = true;
+    throw e;
+  }
+  const { encrypt, decrypt } = await safeStorageCodec(path.dirname(file), ['Qoder App', account.provider === 'qoder-cn' ? 'Qoder CN' : 'Qoder']);
+  try {
+    if (JSON.parse(decrypt(fs.readFileSync(file))).token === auth.token) {
+      return { switched: false, alreadyActive: true };
+    }
+  } catch { /* 当前文件解不开就当作不同账号，继续写入 */ }
+  const buf = encrypt(JSON.stringify(auth));
+  const bak = file + '.creditdaddy.bak';
+  try { fs.copyFileSync(file, bak); } catch { /* 备份失败不阻断，下面原子写仍会成功 */ }
+  const tmp = file + '.tmp';
+  fs.writeFileSync(tmp, buf, { mode: 0o600 });
+  fs.renameSync(tmp, file);
+  return { switched: true, alreadyActive: false };
+}