dsh-connect-trae 1.3.0 → 1.4.1

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # Changelog
 
+## 1.4.1 (2026-09-14)
+
+> **版本号说明**：`v1.4.1` ~ `v1.4.4` 四个 git tag 曾推送到远端，但对应代码已整体回档到 `1.4.0`，
+> 且这批版本**从未发布到 npm**。本次发布前已删除这四个废弃 tag（备份见
+> `backup/abandoned-v1.4.1-v1.4.4` 分支及 `abandoned-tags-v1.4.1-4.bundle`），
+> 使 git tag 与 npm 版本号从 `1.4.1` 起重新对齐、连续编号。
+
+### Fixes
+
+- 修复 CLI 登录（`traecli`）不被识别、插件恒显「未登录」的问题（issue #5，WSL2 用户报告）。插件此前只认桌面版 Electron 的 `globalStorage/storage.json`（加密值 `iCubeAuthInfo://icube.cloudide`），而 `traecli` 把登录信息写在自己的家目录里、内容是**未加密的裸 JWT**（实测 macOS 上是 `~/.trae-cn/trae-jwt-token`）；纯 CLI 环境（WSL2 常见）根本没有 `storage.json`，因此永远解析不出账号。现在：
+  - 凭据来源扩展为 `desktop` / `cli` 两类，`TraeStorageCandidate` 新增 `source` 字段；新增 `parseTraeCliToken()` 直接解析裸 JWT（取 `data.user_id` 与 `exp`），不走 AES 解密链路。CLI token 不含 host 声明，统一补 CN 主机 `https://api.trae.cn`，避免空字符串变成不可用的 base URL。
+  - CLI 候选路径在 macOS / Windows / Linux 三平台都会探测（`~/.trae-cn/`、`~/.trae/`）。
+  - Linux 桌面版目录名改为**多候选并列探测**（`trae-cn` 与 macOS 拼写 `Trae CN` 都试）。此前只认从 macOS 抄来的 `Trae CN`，而 Linux 上 Electron 应用通常用小写无空格目录名；该拼写从未在 Linux 真机验证过。多探测保证猜错也不会漏掉真实安装。
+- 把 `readDesktopAll()` 里的静默 `catch { continue }` 改为记录失败原因，新增 `TraeCredentialStore.diagnose()`：返回探测过的每个路径及其失败类型（`missing` / `unreadable` / `invalid`）。未登录时卡片新增可折叠的「已检查的路径」列表。此前无论路径不存在、key 缺失还是加密头不支持，用户都只看到「未登录」三个字，无从自助定位——`docs/WINDOWS_TOKEN_PROBE.md` 整篇文档的存在本身就是这个可观测性缺口的补丁。诊断内容只含路径与固定原因文案（错误消息不回显输入），不携带任何 token 材料，并有专门测试守住这一点。
+
+## 1.4.0 (2026-09-10)
+
+### Changes
+
+- 对齐 DSH 内核 `0.1.2-rc.1` → `0.1.5-rc.2`（桌面 `dsh-plugin-desktop` 2.0.9 所捆绑通道；`0.1.5-rc.1` 为 npm `latest`，`rc.2` 在 `next`）：
+  - `ResolvedPiAiProviderProfile` 在 0.1.5 新增**必填**字段 `modelErrors`：`PiAiAdapter` 现在按模型查此表，命中即以 `INVALID_CONFIG` 拒绝请求；`piProvider` 同时由必填改为可选。本插件是手工构造 profile（不走内核目录解析，故该表不会被子系统填充），补 `modelErrors: new Map()` 表达「所服务的模型全部可用」这一事实。不补则本插件在 0.1.5 宿主上**无法通过类型检查**（`TS2741`）。
+  - devDependencies 升级至 `@deepseek-ai/dsh-*@0.1.5-rc.2`，`@earendil-works/pi-ai` 由 `0.84.2` 升至 `^0.85.1`：`dsh-llm-pi-ai@0.1.5-rc.2` 要求 `pi-ai@^0.85.1`，版本不一致会在 `node_modules` 里留下两份互不兼容的 `pi-ai`，导致 `Provider<Api>` 结构不匹配的编译错误。
+  - `peerDependencies` 的 `@deepseek-ai/dsh-*` 由 `>=0.1.2-0` 抬到 `>=0.1.5-0`（`modelErrors` 为编译期硬依赖，0.1.2 宿主无法满足），`@earendil-works/pi-ai` 抬到 `>=0.85.1`。仍按范围声明、不锁死补丁版本，与内核 `next` 通道继续前进保持一致。
+  - 经核实本次不受文档列出的其余破坏项影响：未使用 `dsh-session` / `dsh-session-persistence` / `dsh-persona` / `dsh-system-prompt` / `dsh-message-feedback` / `dsh-subagent`；未读取 `DSH_SESSION_JSONL`、未调用已移除的 `locate()` / `readRaw()`；`AttachmentStore` 仅作类型引用，`IconChevronDownOutline14` 与客户端 `dsh.client.inject` 六个包在 0.1.5 均仍存在。会话格式 v3 与 persona 段改名对本插件不适用。
+
+### Fixes
+
+- 修复内置回退模型表被实时线路映射过滤、导致真实安装上模型几乎全部消失的问题：`FALLBACK_TRAE_MODELS` 是本插件自带的静态兜底表，其中每个 id 都**从未**由 Trae Remote 目录公布，因此永远不会出现在 `callableKeys` 里。此前 `configuredModels` / `derive` 把这张表也交给 `dropDeadModels` 过滤，只要实时目录只返回一部分模型（账号权限、版本或网络给出的子集），过滤就会把「这次没被提到的」回退模型一并删掉——本机实测在无凭据环境下只剩 `glm-5.2` / `kimi-k2.6` 两个模型可用。现在回退表不再参与线路过滤，并以 `wireResolved` 标志取代「`callableKeys` 非空」作为「线路目录已解析」的判据，避免空目录被误读为「没有模型可用」。新增回归测试覆盖该路径；该缺陷在本仓库 1.3.0 上本来就会失败（与内核升级无关），修复后 `pnpm run test` 首次达到 157/157 全绿（此前 154/156）。
+
 ## 1.3.0 (2026-09-08)
 
 ### Changes

package/lib/client.js

@@ -114,6 +114,13 @@ window.__ModuleLoader__.load({
 .dsm-trae-usage-cheer{display:inline-flex;align-items:center;gap:4px;flex:none;text-decoration:underline;text-underline-offset:2px;color:var(--dsw-alias-label-tertiary,#999);font-size:13px;line-height:1.5;transition:color .16s}
 .dsm-trae-usage-cheer-star{font-size:12px;line-height:1;display:inline-flex}
 .dsm-trae-usage-cheer:hover{color:var(--dsw-alias-label-primary,#e6e6e6)}
+.dsm-trae-searched{margin-top:8px;font-size:12px;line-height:18px;color:var(--dsw-alias-label-tertiary,#999)}
+.dsm-trae-searched>summary{cursor:pointer;color:var(--dsw-alias-label-secondary,#b8b8b8);user-select:none}
+.dsm-trae-searched-hint{margin:6px 0 4px;color:var(--dsw-alias-label-tertiary,#999)}
+.dsm-trae-searched-list{margin:0;padding:0;list-style:none;display:flex;flex-direction:column;gap:4px}
+.dsm-trae-searched-list li{display:flex;flex-direction:column;gap:1px;min-width:0}
+.dsm-trae-searched-list code{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:11px;line-height:16px;color:var(--dsw-alias-label-secondary,#b8b8b8);word-break:break-all}
+.dsm-trae-searched-reason{color:var(--dsw-alias-label-tertiary,#999);font-size:11px}
 .dsm-trae-usage-cheer:focus-visible{outline:2px solid var(--dsw-alias-brand-primary,#5686fe);outline-offset:2px}
 `;
 		//#endregion
@@ -618,10 +625,35 @@ window.__ModuleLoader__.load({
 									]
 								})
 							] }) : null,
-							status.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							status.status === "signed-out" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								className: "dsm-trae-usage-text",
 								children: status.message ?? t("row.signedOutHint")
-							}) : null,
+							}), status.searched && status.searched.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("details", {
+								className: "dsm-trae-searched",
+								children: [
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("summary", { children: [
+										t("row.searchedTitle"),
+										" (",
+										status.searched.length,
+										")"
+									] }),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+										className: "dsm-trae-searched-hint",
+										children: t("row.searchedHint")
+									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+										className: "dsm-trae-searched-list",
+										children: status.searched.map((item) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: item.path }), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+											className: "dsm-trae-searched-reason",
+											children: [
+												t(item.source === "cli" ? "row.sourceCli" : "row.sourceDesktop"),
+												" · ",
+												t(item.reason === "missing" ? "row.reasonMissing" : item.reason === "unreadable" ? "row.reasonUnreadable" : "row.reasonInvalid")
+											]
+										})] }, `${item.source}:${item.path}`))
+									})
+								]
+							}) : null] }) : null,
 							status.status === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 								className: "dsm-trae-usage-error",
 								children: status.message
@@ -645,6 +677,14 @@ window.__ModuleLoader__.load({
 			"row.collapse": "Collapse",
 			"row.signedOut": "Not signed in",
 			"row.signedOutHint": "Sign in once in the Trae desktop app; this plugin follows that sign-in automatically.",
+			"row.searchedTitle": "Paths checked",
+			"row.searchedHint": "No sign-in was found. These locations were probed; if your Trae stores its login elsewhere, please report the path.",
+			"row.searchedMore": "Show {count} more",
+			"row.reasonMissing": "not found",
+			"row.reasonUnreadable": "unreadable",
+			"row.reasonInvalid": "unreadable format",
+			"row.sourceDesktop": "desktop app",
+			"row.sourceCli": "Trae CLI",
 			"row.signedIn": "Signed in: {accountName}",
 			"row.tokenExpiry": "Access token expires {expiresAt} (auto-renewal)",
 			"row.requestFailed": "Request failed",
@@ -692,6 +732,14 @@ window.__ModuleLoader__.load({
 			"row.collapse": "收起",
 			"row.signedOut": "未登录",
 			"row.signedOutHint": "在 Trae 桌面 App 里登录一次即可，插件会自动跟随当前登录的账号。",
+			"row.searchedTitle": "已检查的路径",
+			"row.searchedHint": "未找到登录信息。以下是插件探测过的位置；如果你的 Trae 把登录信息存在别处，请把该路径反馈给我们。",
+			"row.searchedMore": "展开其余 {count} 条",
+			"row.reasonMissing": "文件不存在",
+			"row.reasonUnreadable": "无法读取",
+			"row.reasonInvalid": "格式无法识别",
+			"row.sourceDesktop": "桌面版",
+			"row.sourceCli": "Trae CLI",
 			"row.signedIn": "已登录：{accountName}",
 			"row.tokenExpiry": "访问令牌 {expiresAt} 过期（自动续期）",
 			"row.requestFailed": "请求失败",

package/lib/index.d.ts

@@ -187,9 +187,16 @@ declare function createTraeAdapter(options: TraeAdapterOptions): TraeAdapter;
 //#endregion
 //#region src/paths.d.ts
 type TraeEdition = 'cn' | 'sg' | 'solo' | 'solo-sg';
+/**
+ * Where a local sign-in was persisted. `desktop` candidates hold an Electron
+ * `globalStorage/storage.json` whose auth value is encrypted; `cli` candidates
+ * hold a bare JWT written by the Trae CLI, which needs no decryption.
+ */
+type TraeCredentialSource = 'desktop' | 'cli';
 interface TraeStorageCandidate {
   edition: TraeEdition;
   path: string;
+  source: TraeCredentialSource;
 }
 declare function traeStorageCandidates(platform?: NodeJS.Platform, home?: string, env?: NodeJS.ProcessEnv): TraeStorageCandidate[];
 //#endregion
@@ -203,7 +210,7 @@ interface TraeCredential {
   expiresAtMs: number;
   refreshExpiresAtMs?: number;
   edition: TraeEdition;
-  source: 'desktop' | 'dsh';
+  source: 'desktop' | 'dsh' | 'cli';
 }
 interface TraeRefreshOutcome {
   accessToken: string;
@@ -224,10 +231,21 @@ interface TraeAccountChoice {
   id: string;
   accountName: string;
   edition: TraeEdition;
-  source: 'desktop' | 'dsh';
+  source: 'desktop' | 'dsh' | 'cli';
   tokenExpiresAtMs: number;
   selected: boolean;
 }
+/**
+ * Why one candidate path did not yield an account. These are safe to surface:
+ * they carry paths and error text, never token material.
+ */
+interface TraeCandidateFailure {
+  path: string;
+  edition: TraeEdition;
+  source: TraeCredentialSource;
+  reason: 'missing' | 'unreadable' | 'invalid';
+  message?: string;
+}
 declare function traeOwnAuthPath(): string;
 declare function normalizeTraeCredential(raw: unknown, edition: TraeEdition, source: TraeCredential['source']): TraeCredential | undefined;
 declare class TraeCredentialStore {
@@ -256,11 +274,23 @@ declare class TraeCredentialStore {
     state: 'signed-in' | 'signed-out';
     edition?: TraeEdition;
     expiresAtMs?: number;
-    source?: 'desktop' | 'dsh';
+    source?: TraeCredential['source'];
   }>;
   desktopFilePresent(): Promise<boolean>;
   logout(): Promise<void>;
   private readAll;
+  /**
+   * Which paths were tried and why each one failed. Read-only and token-free:
+   * it exists so a signed-out card can explain itself instead of showing a bare
+   * "not signed in", which is undiagnosable on a machine whose layout differs
+   * from the ones the plugin was written against.
+   */
+  diagnose(): Promise<{
+    tried: TraeStorageCandidate[];
+    failures: TraeCandidateFailure[];
+  }>;
+  /** Parse one candidate file's text into a credential, or throw. */
+  private credentialFrom;
   private readDesktopAll;
   private readOwn;
   private refreshNow;
@@ -976,15 +1006,24 @@ interface TraeWebAccount {
   id: string;
   accountName: string;
   edition: 'cn' | 'sg' | 'solo' | 'solo-sg';
-  source: 'desktop' | 'dsh';
+  source: 'desktop' | 'dsh' | 'cli';
   tokenExpiresAtMs: number;
   selected: boolean;
 }
+/** One probed candidate path and why it did not yield an account. */
+interface TraeWebSearchPath {
+  path: string;
+  edition: 'cn' | 'sg' | 'solo' | 'solo-sg';
+  source: 'desktop' | 'cli';
+  reason: 'missing' | 'unreadable' | 'invalid';
+  message?: string;
+}
 /** The JSON document the plugin card renders. */
 type TraeWebUsage = {
   status: 'signed-out';
   accounts: readonly TraeWebAccount[];
   message?: string;
+  searched?: readonly TraeWebSearchPath[];
 } | {
   status: 'signed-in';
   accountId: string;

package/lib/index.js

@@ -262,6 +262,7 @@ function createTraeAdapter(options) {
 		streamIdleTimeoutMs: TRAE_STREAM_IDLE_TIMEOUT_MS,
 		retryPolicy: resolveRetryPolicy(void 0, "dsh-connect-trae retryPolicy"),
 		configuredMaxTokens: /* @__PURE__ */ new Map(),
+		modelErrors: /* @__PURE__ */ new Map(),
 		...REQUEST_IMAGE_BUDGETS,
 		piProvider: provider
 	};
@@ -598,6 +599,46 @@ function parseTraeStorageDocument(text) {
 	if (typeof value !== "string") throw new Error(`Trae storage document has no ${TRAE_AUTH_STORAGE_KEY}`);
 	return parseTraeAuthValue(value);
 }
+function decodeBase64UrlJson(segment) {
+	try {
+		const padded = segment.replace(/-/g, "+").replace(/_/g, "/");
+		const decoded = Buffer.from(padded, "base64").toString("utf8");
+		const parsed = JSON.parse(decoded);
+		return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed) ? parsed : void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* Parse the CLI token file. Accepts either the bare JWT itself or a JSON
+* envelope containing one, since the on-disk shape is only verified on macOS
+* and a future CLI revision may wrap it.
+*/
+function parseTraeCliToken(text) {
+	const trimmed = text.trim();
+	if (trimmed === "") throw new Error("Trae CLI token file is empty");
+	let token = trimmed;
+	if (trimmed.startsWith("{")) {
+		const envelope = JSON.parse(trimmed);
+		const candidate = envelope["token"] ?? envelope["accessToken"] ?? envelope["jwt"];
+		if (typeof candidate !== "string" || candidate.trim() === "") throw new Error("Trae CLI token document has no token field");
+		token = candidate.trim();
+	}
+	const segments = token.split(".");
+	if (segments.length !== 3 || segments.some((segment) => segment === "")) throw new Error("Trae CLI token is not a three-part JWT");
+	const payload = decodeBase64UrlJson(segments[1]);
+	if (payload === void 0) throw new Error("Trae CLI token payload is not decodable JSON");
+	const data = typeof payload["data"] === "object" && payload["data"] !== null && !Array.isArray(payload["data"]) ? payload["data"] : void 0;
+	const userId = typeof data?.["user_id"] === "string" ? data["user_id"] : void 0;
+	if (userId === void 0 || userId === "") throw new Error("Trae CLI token has no data.user_id claim");
+	const exp = payload["exp"];
+	const expiresAtMs = typeof exp === "number" && Number.isFinite(exp) && exp > 0 ? exp * 1e3 : void 0;
+	return {
+		accessToken: token,
+		userId,
+		...expiresAtMs === void 0 ? {} : { expiresAtMs }
+	};
+}
 //#endregion
 //#region src/paths.ts
 const APP_NAMES = {
@@ -606,6 +647,33 @@ const APP_NAMES = {
 	solo: "TRAE SOLO CN",
 	"solo-sg": "TRAE SOLO"
 };
+/**
+* Directory names the Trae CLI uses for its own home. These are deliberately
+* separate from the Electron app-support names above: the CLI keeps a dotfile
+* home (observed on macOS as `~/.trae-cn`) rather than an `Application Support`
+* entry, so a machine with only the CLI installed has no `storage.json` at all.
+*/
+const CLI_HOME_NAMES = [".trae-cn", ".trae"];
+/** Basename of the CLI's persisted bare JWT. */
+const TRAE_CLI_TOKEN_FILENAME = "trae-jwt-token";
+/**
+* Linux desktop config directory names. Electron apps on Linux normally use a
+* lowercase, space-free name rather than the macOS `Trae CN` spelling, so both
+* are probed: guessing only the macOS spelling would silently miss a real
+* install, and guessing only the Linux spelling would break every existing
+* user. The actual name is unverified on a real Linux host.
+*/
+const LINUX_APP_NAMES = {
+	cn: [
+		"trae-cn",
+		"Trae CN",
+		"trae",
+		"Trae"
+	],
+	sg: ["trae", "Trae"],
+	solo: ["trae-solo-cn", "TRAE SOLO CN"],
+	"solo-sg": ["trae-solo", "TRAE SOLO"]
+};
 function traeStorageCandidates(platform = process.platform, home = homedir(), env = process.env) {
 	const result = [];
 	for (const edition of [
@@ -616,19 +684,59 @@ function traeStorageCandidates(platform = process.platform, home = homedir(), en
 	]) {
 		const app = APP_NAMES[edition];
 		let roots;
-		if (platform === "darwin") roots = [join(home, "Library", "Application Support")];
-		else if (platform === "win32") roots = [env.APPDATA, join(home, "AppData", "Roaming")].filter((value, index, all) => typeof value === "string" && value !== "" && all.indexOf(value) === index);
-		else if (platform === "linux") roots = [env.XDG_CONFIG_HOME || join(home, ".config")];
-		else roots = [];
-		for (const root of roots) result.push({
+		let appNames;
+		if (platform === "darwin") {
+			roots = [join(home, "Library", "Application Support")];
+			appNames = [app];
+		} else if (platform === "win32") {
+			roots = [env.APPDATA, join(home, "AppData", "Roaming")].filter((value, index, all) => typeof value === "string" && value !== "" && all.indexOf(value) === index);
+			appNames = [app];
+		} else if (platform === "linux") {
+			roots = [env.XDG_CONFIG_HOME || join(home, ".config")];
+			appNames = LINUX_APP_NAMES[edition];
+		} else {
+			roots = [];
+			appNames = [app];
+		}
+		for (const root of roots) for (const appName of appNames) result.push({
 			edition,
-			path: join(root, app, "User", "globalStorage", "storage.json")
+			path: join(root, appName, "User", "globalStorage", "storage.json"),
+			source: "desktop"
+		});
+	}
+	return [...result, ...traeCliCandidates(platform, home, env)];
+}
+/**
+* Candidate CLI token paths. Only CN/SOLO editions are targeted here for the
+* same reason the store ignores SG desktop installs, and `.trae-cn` is mapped
+* to `cn` while `.trae` is the CLI's international home and is therefore
+* skipped by the store's edition filter.
+*
+* The CLI home is a dotfile directory directly under `$HOME` on every platform
+* observed so far, but this is only verified on macOS; the Windows and Linux
+* spellings are probed speculatively and a miss is harmless because every
+* candidate is tried in order.
+*/
+function traeCliCandidates(platform = process.platform, home = homedir(), env = process.env) {
+	const roots = [];
+	if (platform === "win32") {
+		for (const value of [env.USERPROFILE, home]) if (typeof value === "string" && value !== "" && !roots.includes(value)) roots.push(value);
+	} else roots.push(home);
+	const result = [];
+	for (const root of roots) for (const name of CLI_HOME_NAMES) {
+		const edition = name === ".trae-cn" ? "cn" : "sg";
+		result.push({
+			edition,
+			path: join(root, name, TRAE_CLI_TOKEN_FILENAME),
+			source: "cli"
 		});
 	}
 	return result;
 }
 //#endregion
 //#region src/auth.ts
+/** Host used for CLI tokens, which carry no host claim of their own. */
+const CLI_DEFAULT_HOST = "https://api.trae.cn";
 const OWN_VERSION = 1;
 const TRAE_AUTH_FILENAME = ".trae-auth.json";
 function traeOwnAuthPath() {
@@ -717,10 +825,18 @@ var TraeCredentialStore = class {
 		this.inflight = void 0;
 	}
 	candidates() {
-		if (this.storagePathOverride !== void 0) return [{
-			edition: this.edition === "auto" ? "cn" : this.edition,
-			path: this.storagePathOverride
-		}];
+		if (this.storagePathOverride !== void 0) {
+			const edition = this.edition === "auto" ? "cn" : this.edition;
+			return [{
+				edition,
+				path: this.storagePathOverride,
+				source: "desktop"
+			}, {
+				edition,
+				path: this.storagePathOverride,
+				source: "cli"
+			}];
+		}
 		const all = traeStorageCandidates();
 		return this.edition === "auto" ? all.filter((candidate) => candidate.edition === "cn" || candidate.edition === "solo") : all.filter((candidate) => candidate.edition === this.edition && (candidate.edition === "cn" || candidate.edition === "solo"));
 	}
@@ -784,21 +900,87 @@ var TraeCredentialStore = class {
 		await rm(`${this.ownPath}.lock`, { force: true });
 	}
 	async readAll() {
-		const desktop = await this.readDesktopAll();
+		const { credentials: desktop } = await this.readDesktopAll();
 		const own = await this.readOwn();
 		const cnOwn = own?.edition === "cn" || own?.edition === "solo" ? own : void 0;
 		if (cnOwn === void 0 || desktop.some((credential) => traeAccountId(credential) === traeAccountId(cnOwn))) return desktop;
 		return [...desktop, cnOwn];
 	}
+	/**
+	* Which paths were tried and why each one failed. Read-only and token-free:
+	* it exists so a signed-out card can explain itself instead of showing a bare
+	* "not signed in", which is undiagnosable on a machine whose layout differs
+	* from the ones the plugin was written against.
+	*/
+	async diagnose() {
+		const tried = this.candidates();
+		const failures = [];
+		for (const candidate of tried) {
+			const raw = await readFile(candidate.path, "utf8").then((text) => ({ text }), (error) => ({ error }));
+			if ("error" in raw) {
+				const code = typeof raw.error === "object" && raw.error !== null && "code" in raw.error ? raw.error.code : void 0;
+				failures.push({
+					path: candidate.path,
+					edition: candidate.edition,
+					source: candidate.source,
+					reason: code === "ENOENT" ? "missing" : "unreadable",
+					...code === "ENOENT" ? {} : { message: String(raw.error) }
+				});
+				continue;
+			}
+			try {
+				this.credentialFrom(candidate, raw.text);
+			} catch (error) {
+				failures.push({
+					path: candidate.path,
+					edition: candidate.edition,
+					source: candidate.source,
+					reason: "invalid",
+					message: error instanceof Error ? error.message : String(error)
+				});
+			}
+		}
+		return {
+			tried,
+			failures
+		};
+	}
+	/** Parse one candidate file's text into a credential, or throw. */
+	credentialFrom(candidate, text) {
+		let credential;
+		if (candidate.source === "cli") {
+			const claims = parseTraeCliToken(text);
+			credential = normalizeTraeCredential({
+				token: claims.accessToken,
+				userId: claims.userId,
+				host: CLI_DEFAULT_HOST,
+				expiredAt: claims.expiresAtMs
+			}, candidate.edition === "sg" ? "cn" : candidate.edition, "cli");
+		} else credential = normalizeTraeCredential(parseTraeStorageDocument(text), candidate.edition, "desktop");
+		if (credential === void 0) throw new Error(`${candidate.source} candidate could not be normalized into a credential`);
+		return credential;
+	}
 	async readDesktopAll() {
 		const credentials = [];
+		const failures = [];
 		for (const candidate of this.candidates()) try {
-			const credential = normalizeTraeCredential(parseTraeStorageDocument(await readFile(candidate.path, "utf8")), candidate.edition, "desktop");
-			if (credential !== void 0 && !credentials.some((existing) => traeAccountId(existing) === traeAccountId(credential))) credentials.push(credential);
-		} catch {
+			const credential = this.credentialFrom(candidate, await readFile(candidate.path, "utf8"));
+			if (!credentials.some((existing) => traeAccountId(existing) === traeAccountId(credential))) credentials.push(credential);
+		} catch (error) {
+			const code = typeof error === "object" && error !== null && "code" in error ? error.code : void 0;
+			failures.push({
+				path: candidate.path,
+				edition: candidate.edition,
+				source: candidate.source,
+				reason: code === "ENOENT" ? "missing" : code === void 0 ? "invalid" : "unreadable",
+				...code === "ENOENT" || code === void 0 && !(error instanceof Error) ? {} : { message: error instanceof Error ? error.message : String(error) }
+			});
 			continue;
 		}
-		return credentials;
+		return {
+			credentials,
+			failures
+		};
 	}
 	async readOwn() {
 		try {
@@ -2512,10 +2694,20 @@ function toCredits(snapshot) {
 */
 async function traeWebUsage(deps) {
 	const accounts = await deps.store.accounts();
-	if ((await deps.store.status()).state !== "signed-in") return {
-		status: "signed-out",
-		accounts
-	};
+	if ((await deps.store.status()).state !== "signed-in") {
+		const { failures } = await deps.store.diagnose();
+		return {
+			status: "signed-out",
+			accounts,
+			searched: failures.map((failure) => ({
+				path: failure.path,
+				edition: failure.edition,
+				source: failure.source,
+				reason: failure.reason,
+				...failure.message === void 0 ? {} : { message: safeMessage(failure.message) }
+			}))
+		};
+	}
 	let credential;
 	try {
 		credential = await deps.store.resolve();
@@ -2783,17 +2975,19 @@ function apply(ctx, config) {
 	const enabledSet = (value) => new Set(value.enabledModelIds ?? []);
 	const imageSet = (value) => new Set(value.imageModelIds ?? []);
 	const callableKeys = /* @__PURE__ */ new Set();
+	let wireResolved = false;
 	const dropDeadModels = (rows) => {
-		if (callableKeys.size === 0) return rows;
+		if (!wireResolved) return rows;
 		return rows.filter((model) => callableKeys.has(model.id.trim().toLowerCase()) || callableKeys.has(model.name.trim().toLowerCase()));
 	};
+	const fallbackModels = (value) => applyImageSelection(FALLBACK_TRAE_MODELS, imageSet(value));
 	const derive = (value, raw) => {
 		const selectedImages = imageSet(value);
 		const derived = deriveCatalog(applyImageSelection(sanitizeCatalog(dropDeadModels(raw)), selectedImages), enabledSet(value), value.contextBudgets ?? {});
-		return derived.length > 0 ? derived : applyImageSelection(dropDeadModels(FALLBACK_TRAE_MODELS), selectedImages);
+		return derived.length > 0 ? derived : fallbackModels(value);
 	};
-	const configuredModels = (value) => value.lastCatalog?.length ? derive(value, value.lastCatalog) : value.models?.length ? derive(value, value.models) : applyImageSelection(dropDeadModels(FALLBACK_TRAE_MODELS), imageSet(value));
-	const displayModels = (value) => value.lastCatalog?.length ? dropDeadModels(sanitizeCatalog(value.lastCatalog)) : value.models?.length ? dropDeadModels(sanitizeCatalog(value.models)) : dropDeadModels(FALLBACK_TRAE_MODELS);
+	const configuredModels = (value) => value.lastCatalog?.length ? derive(value, value.lastCatalog) : value.models?.length ? derive(value, value.models) : fallbackModels(value);
+	const displayModels = (value) => value.lastCatalog?.length ? dropDeadModels(sanitizeCatalog(value.lastCatalog)) : value.models?.length ? dropDeadModels(sanitizeCatalog(value.models)) : FALLBACK_TRAE_MODELS;
 	const store = new TraeCredentialStore({
 		...config.authFile === void 0 ? {} : { storagePath: config.authFile },
 		edition: config.edition ?? "auto",
@@ -2801,9 +2995,10 @@ function apply(ctx, config) {
 		refresh: (credential) => refreshTraeCredential(credential)
 	});
 	const identity = async () => {
-		const candidates = config.authFile === void 0 ? traeStorageCandidates().filter((item) => (item.edition === "cn" || item.edition === "solo") && (config.edition === void 0 || config.edition === "auto" || item.edition === config.edition)) : [{
+		const candidates = config.authFile === void 0 ? traeStorageCandidates().filter((item) => item.source === "desktop" && (item.edition === "cn" || item.edition === "solo") && (config.edition === void 0 || config.edition === "auto" || item.edition === config.edition)) : [{
 			edition: config.edition === void 0 || config.edition === "auto" ? "solo" : config.edition,
-			path: config.authFile
+			path: config.authFile,
+			source: "desktop"
 		}];
 		if (candidates.length === 0) throw new Error("Trae storage was not found");
 		return pickTraeStorageIdentity(candidates);
@@ -2869,6 +3064,7 @@ function apply(ctx, config) {
 			callableKeys.add(model.id.trim().toLowerCase());
 			callableKeys.add(model.name.trim().toLowerCase());
 		}
+		wireResolved = merged.length > 0;
 		wireById.clear();
 		wireByName.clear();
 		for (const model of merged) if (model.wireConfigName !== void 0) {

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-connect-trae",
   "displayName": "DSH Connect Trae",
   "description": "Connect locally signed-in Trae models to DeepSeek Harness, plus a read-only usage/credits summary.",
-  "version": "1.3.0",
+  "version": "1.4.1",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",
@@ -73,35 +73,35 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1-rc.1",
-    "@deepseek-ai/dsh-atomic-write": ">=0.1.2-0 <0.2.0-0",
-    "@deepseek-ai/dsh-attachment": ">=0.1.2-0 <0.2.0-0",
-    "@deepseek-ai/dsh-home-paths": ">=0.1.2-0 <0.2.0-0",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.2-0 <0.2.0-0",
-    "@deepseek-ai/dsh-llm": ">=0.1.2-0 <0.2.0-0",
-    "@deepseek-ai/dsh-llm-pi-ai": ">=0.1.2-0 <0.2.0-0",
-    "@deepseek-ai/dsh-settings": ">=0.1.2-0 <0.2.0-0",
-    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.2-0 <0.2.0-0",
+    "@deepseek-ai/dsh-atomic-write": ">=0.1.5-0 <0.2.0-0",
+    "@deepseek-ai/dsh-attachment": ">=0.1.5-0 <0.2.0-0",
+    "@deepseek-ai/dsh-home-paths": ">=0.1.5-0 <0.2.0-0",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.5-0 <0.2.0-0",
+    "@deepseek-ai/dsh-llm": ">=0.1.5-0 <0.2.0-0",
+    "@deepseek-ai/dsh-llm-pi-ai": ">=0.1.5-0 <0.2.0-0",
+    "@deepseek-ai/dsh-settings": ">=0.1.5-0 <0.2.0-0",
+    "@deepseek-ai/dsh-client-ui-primitives": ">=0.1.5-0 <0.2.0-0",
     "@deepseek-ai/schemastery": "^3.18.1-rc.1",
-    "@earendil-works/pi-ai": ">=0.82.1",
+    "@earendil-works/pi-ai": ">=0.85.1",
     "react": "^18.2.0"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-atomic-write": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-attachment": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-locale": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-home-paths": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-host-webserver": "0.1.2-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.2-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.2-rc.1",
+    "@deepseek-ai/dsh-atomic-write": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-attachment": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-home-paths": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.5-rc.2",
     "@deepseek-ai/schemastery": "3.18.2",
-    "@earendil-works/pi-ai": "0.84.2",
+    "@earendil-works/pi-ai": "^0.85.1",
     "@types/node": "^22.20.0",
     "@types/react": "~18.3.31",
     "react": "^18.3.1",