dsh-connect-trae 2.3.0 → 2.3.1

package/lib/index.d.ts

@@ -46,6 +46,15 @@ interface TraeStorageCandidate {
   path: string;
   source: TraeCredentialSource;
 }
+/**
+ * One edition's plausible Windows directory spellings, in probe order.
+ *
+ * Exported so the identity reader and the credential scanner probe the SAME
+ * names: the two resolve different files (the install's `product.json` vs the
+ * per-user `storage.json`) but they describe one installation, and a spelling
+ * that works for one but not the other is a bug rather than a preference.
+ */
+declare function traeWindowsAppNames(edition: TraeEdition): readonly string[];
 declare function traeStorageCandidates(platform?: NodeJS.Platform, home?: string, env?: NodeJS.ProcessEnv): TraeStorageCandidate[];
 //#endregion
 //#region src/region.d.ts
@@ -576,6 +585,8 @@ interface TraeObservedModelConfig {
 declare function parseObservedModelConfig(line: string): TraeObservedModelConfig | undefined;
 //#endregion
 //#region src/model-cache.d.ts
+/** Basename of the SQLite cache sitting beside the credential document. */
+declare const TRAE_STATE_DB_FILENAME = "state.vscdb";
 interface TraeCachedModelConfig {
   name: string;
   customConfig?: Record<string, unknown>;
@@ -594,11 +605,54 @@ interface TraeCachedModelReadOptions {
   home?: string;
   /** Environment override for testing; defaults to process.env. */
   env?: NodeJS.ProcessEnv;
+  /**
+   * The credential candidate whose account is being read. Supplying it pins the
+   * lookup to the installation the credential actually came from, which is the
+   * only way to stay correct when several editions are installed: `storage.json`
+   * and `state.vscdb` live in the SAME `globalStorage` directory, so the cache
+   * belongs to whichever candidate yielded the sign-in.
+   */
+  candidate?: TraeStorageCandidate;
+  /** Injectable for tests; defaults to node:fs existsSync. */
+  exists?: (path: string) => boolean;
+  /**
+   * Injectable `sqlite3` runner for tests; defaults to promisified `execFile`.
+   * Mirrors the `fetchImpl` injection used elsewhere in this plugin, and exists
+   * so a test can assert the exact argv — in particular WHICH database path was
+   * chosen, which no assertion on the candidate list alone can prove.
+   */
+  runSqlite?: (database: string, sql: string) => Promise<{
+    stdout: string;
+  }>;
 }
+/**
+ * The cache paths to try, most-specific first.
+ *
+ * `state.vscdb` is a SIBLING of the credential document (both sit in
+ * `globalStorage`), so a candidate's own path is the authority for its cache —
+ * this is why the database is derived from {@link traeStorageCandidates} rather
+ * than re-spelled here.
+ *
+ * It previously hardcoded the single macOS spelling `Trae CN`, which was wrong
+ * in two ways on Windows: `paths.ts` probes `Trae CN` AND `trae-cn`, and the
+ * edition actually installed is often SOLO (`TRAE SOLO CN`). This module would
+ * then point at a directory that does not exist. That went unnoticed only
+ * because the Windows `sqlite3` dependency is absent, so the lookup failed and
+ * callers fell back — masking the wrong path behind a different error. Sharing
+ * one path table means a spelling that works for sign-in also works for the
+ * cache.
+ */
+declare function traeStateDatabaseCandidates(options?: TraeCachedModelReadOptions): string[];
 /**
  * Read Trae's own current user's model map via sqlite3 without exposing
  * secrets. The sqlite3 command line is a macOS prerequisite; on Windows it is
  * typically absent, so the call fails and callers fall back gracefully.
+ *
+ * Every candidate database is tried in order and the first that EXISTS is
+ * queried. Existence is checked before spawning because a missing file and a
+ * missing `sqlite3` binary are different problems: choosing the wrong directory
+ * would otherwise surface as a confusing `sqlite3` failure, hiding a path bug
+ * behind a dependency error.
  */
 declare function readTraeCachedModel(functionName: string, modelName: string, userId: string, options?: TraeCachedModelReadOptions): Promise<TraeCachedModelConfig | undefined>;
 //#endregion
@@ -634,6 +688,55 @@ interface TraeModelDetailRequest {
 /** Build the exact request shape observed in successful current Trae CN logs. */
 declare function buildTraeModelDetailRequest(configName?: string, custom?: boolean): TraeModelDetailRequest;
 //#endregion
+//#region src/redact.d.ts
+/**
+ * Redaction helpers for diagnostics that a user may paste into a public issue.
+ *
+ * A verification report is only useful if it can be shared, and it is only safe
+ * to share if it carries no personal identifiers. Paths are the hard case:
+ * `C:\Users\<real name>\AppData\Roaming\Trae CN\...` contains both a real
+ * account name AND the single most diagnostic token in the whole report (the
+ * Trae data directory spelling). Redacting the whole path would make the report
+ * worthless; printing it whole would leak the user's name. So the user segment
+ * is replaced and the meaningful tail is preserved.
+ *
+ * @module dsh-connect-trae/redact
+ */
+/**
+ * Replace the user segment of a path with `<user>`, keeping the rest intact.
+ *
+ * Handles the shapes a Trae install can produce:
+ *   - `C:\Users\<name>\...` and `C:\Documents and Settings\<name>\...` (Windows)
+ *   - `/Users/<name>/...` and `/home/<name>/...` (macOS / Linux)
+ *
+ * Anything after that segment — edition directory, `User\globalStorage`,
+ * `storage.json` — is preserved verbatim, because that is what a report is
+ * actually read for. Cross-platform on purpose: the function is called by
+ * Windows-focused diagnostics, but the same helpers run in tests and on other
+ * hosts, and a report from the wrong platform must not leak either.
+ */
+declare function maskUserPath(path: string): string;
+/**
+ * Describe a name by shape instead of by value: a character count, plus whether
+ * it is purely numeric.
+ *
+ * This is the deliberate middle ground for account names. A Trae account name
+ * is often a real name or a phone number, so it must never be printed; but the
+ * report still needs to show that an account WAS resolved, and the shape
+ * distinguishes a real nickname from a generated `用户<n>` id — which is the
+ * only thing a reader needs to judge whether account discovery worked.
+ */
+declare function describeNameShape(name: unknown): string;
+/**
+ * Describe an identifier by shape instead of by value.
+ *
+ * A device id (`x-device-id`) is a stable installation identifier and is
+ * directly tied to the upstream's per-device rules, so it is never printed.
+ * Its shape still proves which resolution path ran: a real `icube-dc` id is
+ * 15 digits, while the fallback is a 32-character hex hash.
+ */
+declare function describeIdShape(value: unknown): string;
+//#endregion
 //#region src/protocol.d.ts
 declare const TRAE_CN_AGENT_TASK_PATH = "/api/agent/v3/create_agent_task";
 declare const TRAE_CN_TITLE_PATH = "/api/agent/v3/llm_utils_chat";
@@ -1239,15 +1342,32 @@ interface TraeUsageSnapshot {
   packs: TraeUsagePack[];
 }
 interface TraeCheckinStatus {
+  /**
+   * Whether the account's REWARD PACK for today already exists. This is the
+   * account-wide answer and it is the one that decides whether there is
+   * anything left to claim: a day with `checkedIn: true` has already been paid
+   * out, whichever device produced it.
+   */
   checkedIn: boolean;
   /** Reward for one check-in, as reported by the upstream (`credits`). */
   credits: number;
   enabled: boolean;
   /**
-   * Whether today's reward was claimed in a previous session. The upstream
-   * reports `did_checked_in` separately from `checked_in`: the app uses the
-   * former to keep the claim button disabled for the rest of the Beijing day
-   * even when the status read happens to report `checked_in: false`.
+   * Whether THIS device's claim for today was already recorded. The upstream
+   * keys this on the `x-device-id` the request carries — not on the account —
+   * so it answers `true` for the device that claimed and `false` for the same
+   * account and day read from any other device.
+   *
+   * Measured 2026-09-26 on a live CN account whose claim had succeeded minutes
+   * earlier: `did_checked_in` was `true` with the claiming device id and
+   * `false` with the header omitted, with a synthetic id, and with another
+   * install's id. Repeating the read never flips it, so it is not "have I seen
+   * you before" state either — only an actual claim sets it.
+   *
+   * It is therefore NOT a "today is done" signal on its own (claiming again
+   * answers the upstream's own 9095 "该设备今日已参与签到" refusal); it is
+   * evidence that this exact device is already accounted for, which is what
+   * makes a claim safe to skip.
    */
   didCheckedIn: boolean;
   /** Bonus credit granted on top of the base reward, when the upstream reports one. */
@@ -1323,6 +1443,12 @@ declare class TraeUsageClient {
   /**
    * Daily check-in status. Read-only, and answered with or without the device
    * header — the claim is what needs it.
+   *
+   * The read DOES carry the header whenever this installation has one, and
+   * that is deliberate rather than incidental: `did_checked_in` is answered
+   * per device, so omitting the header would make a device that already claimed
+   * today look identical to one that never has (measured 2026-09-26, see
+   * {@link TraeCheckinStatus.didCheckedIn}).
    */
   checkinStatus(signal?: AbortSignal): Promise<TraeCheckinStatus>;
   /**
@@ -1402,11 +1528,22 @@ interface TraeWebModel {
 /**
  * Daily check-in state rendered below the credit stats.
  *
- * `didCheckedIn` is not redundant with `checkedIn`: the upstream reports them
- * separately, and the official client keeps the claim button disabled for the
- * rest of the Beijing day off `did_checked_in` even when a status read comes
- * back `checked_in: false`. The card mirrors that rule so a stale-looking
- * status cannot invite a pointless second claim.
+ * The two booleans answer DIFFERENT questions and must never be collapsed into
+ * one "done" flag — doing that was a shipped bug (see CHANGELOG 2.3.1):
+ *
+ *  - `checkedIn` is ACCOUNT-level: today's reward pack exists for this account,
+ *    so there is nothing left to claim and the balance already includes it.
+ *  - `didCheckedIn` is DEVICE-level: this MACHINE already spent its one
+ *    check-in for the day, whichever account spent it. The upstream keys it on
+ *    the `x-device-id` in the request and answers it per device, not per
+ *    account (measured 2026-09-26: the same account and Beijing day answered
+ *    `false` with the header omitted, with a synthetic id, and with another
+ *    install's id, and `true` for the device that actually claimed).
+ *
+ * So `didCheckedIn && !checkedIn` is the "switched account" case: the device's
+ * daily check-in is used up, but THIS account was never rewarded. Claiming
+ * again is refused upstream (business code 9095, "该设备今日已参与签到"), so
+ * the card disables the button — but it must say that, not "claimed today".
  */
 interface TraeWebCheckin {
   checkedIn: boolean;
@@ -1419,8 +1556,19 @@ interface TraeWebCheckin {
 interface TraeWebCheckinClaim {
   /** False when the upstream answered a non-zero business code (e.g. 9004). */
   claimed: boolean;
-  /** True when today was already claimed, so nothing was sent upstream. */
+  /**
+   * True only when THIS ACCOUNT's reward for today already exists, so nothing
+   * was sent upstream. Distinct from {@link TraeWebCheckinClaim.deviceCheckedIn}:
+   * a device that already claimed for another account leaves this false.
+   */
   alreadyCheckedIn: boolean;
+  /**
+   * True when today's check-in was already spent on this DEVICE (by this or
+   * another account), so no claim was sent or the upstream refused it with
+   * 9095. Not an error: it is the truthful answer to "can this account claim
+   * here today?" — no, and the reason is the machine, not the account.
+   */
+  deviceCheckedIn?: boolean;
   code?: number;
   message?: string;
   /** The refreshed check-in state, present whenever the claim path ran. */
@@ -1731,4 +1879,4 @@ declare function asVolatile<S>(schema: S): S;
 declare const Config: z<Config>;
 declare function apply(ctx: Context, config: Config): void;
 //#endregion
-export { Config, FALLBACK_TRAE_MODELS, FALLBACK_TRAE_MODELS_AI, REGION_GATEWAYS, type RawChatDelta, type RawChatMessage, type RawChatTool, SseDecoder, type SseEvent, TRAE_AI_PROVIDER, TRAE_CHECKIN_PATH, TRAE_CN_AGENT_TASK_PATH, TRAE_CN_TITLE_PATH, TRAE_MODEL_DETAIL_FUNCTIONS, TRAE_MODEL_DETAIL_PATH, TRAE_PAY_BASE, TRAE_PROVIDER, TRAE_PROVIDERS, TRAE_PROVIDER_DISPLAY_NAMES, TRAE_RAW_CHAT_V1_PATH, TRAE_RAW_CHAT_V2_PATH, TRAE_REASONING_EFFORTS, TRAE_REGIONS, TRAE_REGION_PARAM, TRAE_SETTINGS_NS, TRAE_SOLO_CHAT_PATH, TRAE_SOLO_FUNCTION, TRAE_SOLO_MODELS_PATH, TRAE_SOLO_REMOTE_BASE, TRAE_STREAM_IDLE_TIMEOUT_MS, TRAE_USAGE_PATH, TRAE_VERSION_CODE_FALLBACK, type TraeActivityRule, type TraeAdapter, type TraeCachedModelConfig, TraeCatalog, type TraeChatResult, type TraeCheckinClaim, type TraeCheckinStatus, type TraeContextBudget, type TraeCredential, TraeCredentialStore, TraeDelegatingUpstreamClient, type TraeDiscoveredModel, type TraeDiscoveredReasoning, type TraeEdition, TraeFallbackUpstreamClient, type TraeFallbackUpstreamOptions, type TraeFusionRawChatEnvelope, TraeGatedUpstreamClient, type TraeGatedUpstreamOptions, type TraeIdentity, type TraeInputModality, type TraeModelDetailRequest, type TraeModelInfo, type TraeObservedModelConfig, TraeRawCapabilityController, type TraeRawCapabilityControllerOptions, type TraeRawCapabilitySnapshot, TraeRawCapabilityState, type TraeRawChatBehaviorConfig, type TraeRawChatCapability, type TraeRawChatClientOptions, type TraeRawChatConfig, type TraeRawChatFailureReason, type TraeRawChatRuntimeConfig, TraeRawChatUpstreamClient, type TraeRawDiagnostic, type TraeRawDiagnosticState, type TraeRawGateway, type TraeRawGatewayOptions, type TraeRawResolverResult, type TraeReasoningCapability, type TraeReasoningEffort, type TraeRefreshDevice, type TraeRegion, type TraeRegionGateways, TraeRegionState, type TraeShim, TraeSoloBridge, type TraeSoloClientOptions, TraeSoloRemoteCatalogClient, type TraeSoloRemoteCatalogOptions, TraeSoloUpstreamClient, type TraeStorageCandidate, type TraeStreamEvent, type TraeUpstreamClient, TraeUsageClient, type TraeUsageOptions, type TraeUsagePack, type TraeUsageRouteOptions, type TraeUsageSnapshot, type TraeUsageSummary, type TraeUsageView, type TraeWebActivity, type TraeWebCheckin, type TraeWebCheckinClaim, type TraeWebCredits, type TraeWebUsage, type TraeWireModel, UnconfiguredTraeUpstreamClient, apply, applyContextBudgets, applyImageSelection, applyReasoningEffort, asVolatile, bridgeTraeSoloStream, buildTraeAgentTaskBody, buildTraeCnHeaders, buildTraeFusionRawChatEnvelope, buildTraeModelDetailRequest, buildTraeRawChatDraft, buildTraeRawChatRuntimeConfig, classifyTraeRawChatFailure, createTraeAdapter, createTraeRawGateway, createTraeShim, decodeRawChatChunk, decodeTraeEvent, decryptTraeStorageValue, deriveCatalog, discoveredCatalog, fallbackModelsFor, hashTraeRawChatArg, identityHeaders, inject, legacyTraeOwnAuthPath, mergeTraeModelSources, name, nextRegionEnabled, nextRegionSlots, normalizeTraeCredential, normalizeTraeVersionCode, parseObservedModelConfig, parseReasoningCapability, parseTraeAuthValue, parseTraeCachedModel, parseTraeModelExtraConfigLogLine, parseTraeRawChatBehaviorConfig, parseTraeRemoteModel, parseTraeStorageDocument, pickTraeStorageIdentity, prepareSoloBody, probeTraeRawChatCapability, rawCapabilityDiagnostic, rawCapabilityFingerprint, readTraeCachedModel, readTraeCliIdentity, readTraeIdentity, refreshTraeCredential, regionEnabled, regionEnabledOf, regionOfCredential, regionOfEdition, regionOfHost, regionOfTraeProvider, regionOfTraeStatusUrl, regionOfUserRegion, regionStateOf, registerTraeUsageRoute, resolveTraeIdentity, resolveTraeRawRuntime, sanitizeCatalog, settingsNamespaceOf, traeEndpoint, traeInputModalities, traeModelDisplayName, traeOwnAuthPath, traeRawChatExtraInfo, traeStorageCandidates, traeWebUsage, unwrapVolatile, unwrapVolatileDeep, withTraeRegion };
+export { Config, FALLBACK_TRAE_MODELS, FALLBACK_TRAE_MODELS_AI, REGION_GATEWAYS, type RawChatDelta, type RawChatMessage, type RawChatTool, SseDecoder, type SseEvent, TRAE_AI_PROVIDER, TRAE_CHECKIN_PATH, TRAE_CN_AGENT_TASK_PATH, TRAE_CN_TITLE_PATH, TRAE_MODEL_DETAIL_FUNCTIONS, TRAE_MODEL_DETAIL_PATH, TRAE_PAY_BASE, TRAE_PROVIDER, TRAE_PROVIDERS, TRAE_PROVIDER_DISPLAY_NAMES, TRAE_RAW_CHAT_V1_PATH, TRAE_RAW_CHAT_V2_PATH, TRAE_REASONING_EFFORTS, TRAE_REGIONS, TRAE_REGION_PARAM, TRAE_SETTINGS_NS, TRAE_SOLO_CHAT_PATH, TRAE_SOLO_FUNCTION, TRAE_SOLO_MODELS_PATH, TRAE_SOLO_REMOTE_BASE, TRAE_STATE_DB_FILENAME, TRAE_STREAM_IDLE_TIMEOUT_MS, TRAE_USAGE_PATH, TRAE_VERSION_CODE_FALLBACK, type TraeActivityRule, type TraeAdapter, type TraeCachedModelConfig, TraeCatalog, type TraeChatResult, type TraeCheckinClaim, type TraeCheckinStatus, type TraeContextBudget, type TraeCredential, TraeCredentialStore, TraeDelegatingUpstreamClient, type TraeDiscoveredModel, type TraeDiscoveredReasoning, type TraeEdition, TraeFallbackUpstreamClient, type TraeFallbackUpstreamOptions, type TraeFusionRawChatEnvelope, TraeGatedUpstreamClient, type TraeGatedUpstreamOptions, type TraeIdentity, type TraeInputModality, type TraeModelDetailRequest, type TraeModelInfo, type TraeObservedModelConfig, TraeRawCapabilityController, type TraeRawCapabilityControllerOptions, type TraeRawCapabilitySnapshot, TraeRawCapabilityState, type TraeRawChatBehaviorConfig, type TraeRawChatCapability, type TraeRawChatClientOptions, type TraeRawChatConfig, type TraeRawChatFailureReason, type TraeRawChatRuntimeConfig, TraeRawChatUpstreamClient, type TraeRawDiagnostic, type TraeRawDiagnosticState, type TraeRawGateway, type TraeRawGatewayOptions, type TraeRawResolverResult, type TraeReasoningCapability, type TraeReasoningEffort, type TraeRefreshDevice, type TraeRegion, type TraeRegionGateways, TraeRegionState, type TraeShim, TraeSoloBridge, type TraeSoloClientOptions, TraeSoloRemoteCatalogClient, type TraeSoloRemoteCatalogOptions, TraeSoloUpstreamClient, type TraeStorageCandidate, type TraeStreamEvent, type TraeUpstreamClient, TraeUsageClient, type TraeUsageOptions, type TraeUsagePack, type TraeUsageRouteOptions, type TraeUsageSnapshot, type TraeUsageSummary, type TraeUsageView, type TraeWebActivity, type TraeWebCheckin, type TraeWebCheckinClaim, type TraeWebCredits, type TraeWebUsage, type TraeWireModel, UnconfiguredTraeUpstreamClient, apply, applyContextBudgets, applyImageSelection, applyReasoningEffort, asVolatile, bridgeTraeSoloStream, buildTraeAgentTaskBody, buildTraeCnHeaders, buildTraeFusionRawChatEnvelope, buildTraeModelDetailRequest, buildTraeRawChatDraft, buildTraeRawChatRuntimeConfig, classifyTraeRawChatFailure, createTraeAdapter, createTraeRawGateway, createTraeShim, decodeRawChatChunk, decodeTraeEvent, decryptTraeStorageValue, deriveCatalog, describeIdShape, describeNameShape, discoveredCatalog, fallbackModelsFor, hashTraeRawChatArg, identityHeaders, inject, legacyTraeOwnAuthPath, maskUserPath, mergeTraeModelSources, name, nextRegionEnabled, nextRegionSlots, normalizeTraeCredential, normalizeTraeVersionCode, parseObservedModelConfig, parseReasoningCapability, parseTraeAuthValue, parseTraeCachedModel, parseTraeModelExtraConfigLogLine, parseTraeRawChatBehaviorConfig, parseTraeRemoteModel, parseTraeStorageDocument, pickTraeStorageIdentity, prepareSoloBody, probeTraeRawChatCapability, rawCapabilityDiagnostic, rawCapabilityFingerprint, readTraeCachedModel, readTraeCliIdentity, readTraeIdentity, refreshTraeCredential, regionEnabled, regionEnabledOf, regionOfCredential, regionOfEdition, regionOfHost, regionOfTraeProvider, regionOfTraeStatusUrl, regionOfUserRegion, regionStateOf, registerTraeUsageRoute, resolveTraeIdentity, resolveTraeRawRuntime, sanitizeCatalog, settingsNamespaceOf, traeEndpoint, traeInputModalities, traeModelDisplayName, traeOwnAuthPath, traeRawChatExtraInfo, traeStateDatabaseCandidates, traeStorageCandidates, traeWebUsage, traeWindowsAppNames, unwrapVolatile, unwrapVolatileDeep, withTraeRegion };

package/lib/index.js

@@ -13,6 +13,7 @@ import { createServer } from "node:http";
 import { Readable } from "node:stream";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
+import { existsSync } from "node:fs";
 //#region src/catalog.ts
 /**
 * Bootstrap catalog: identity only where current Trae metadata has not been
@@ -800,6 +801,43 @@ const LINUX_APP_NAMES = {
 	solo: ["trae-solo-cn", "TRAE SOLO CN"],
 	"solo-sg": ["trae-solo", "TRAE SOLO"]
 };
+/**
+* Windows desktop config directory names.
+*
+* Trae is a VS Code-family Electron app, and that family names its per-user
+* data directory from the installer-registered product name — which on Windows
+* is `product.json`'s `win32DirName`, NOT the macOS bundle spelling. Measured
+* from the shipped bundles (2026-09-26):
+*
+*   Trae CN      -> win32DirName = "Trae CN"       (applicationName trae-cn)
+*   TRAE SOLO CN -> win32DirName = "TRAE SOLO CN"  (applicationName trae-solo-cn)
+*
+* So the macOS spellings happen to be right here, and `win32DirName` is the
+* authority that says so. The lowercase `applicationName` spellings
+* (`trae-cn`, `trae-solo-cn`) are probed as well because the same family uses
+* them for the Linux config directory, and which of the two a given installer
+* writes has never been confirmed on a real Windows host
+* (docs/WINDOWS_TOKEN_PROBE.md). Windows file systems are case-insensitive, so
+* listing `trae cn` beside `Trae CN` would be the same directory twice — only
+* genuinely different spellings are listed.
+*/
+const WINDOWS_APP_NAMES = {
+	cn: ["Trae CN", "trae-cn"],
+	sg: ["Trae"],
+	solo: ["TRAE SOLO CN", "trae-solo-cn"],
+	"solo-sg": ["TRAE SOLO"]
+};
+/**
+* One edition's plausible Windows directory spellings, in probe order.
+*
+* Exported so the identity reader and the credential scanner probe the SAME
+* names: the two resolve different files (the install's `product.json` vs the
+* per-user `storage.json`) but they describe one installation, and a spelling
+* that works for one but not the other is a bug rather than a preference.
+*/
+function traeWindowsAppNames(edition) {
+	return WINDOWS_APP_NAMES[edition];
+}
 function traeStorageCandidates(platform = process.platform, home = homedir(), env = process.env) {
 	const result = [];
 	for (const edition of [
@@ -816,7 +854,7 @@ function traeStorageCandidates(platform = process.platform, home = homedir(), en
 			appNames = [app];
 		} else if (platform === "win32") {
 			roots = [env.APPDATA, join(home, "AppData", "Roaming")].filter((value, index, all) => typeof value === "string" && value !== "" && all.indexOf(value) === index);
-			appNames = [app];
+			appNames = WINDOWS_APP_NAMES[edition];
 		} else if (platform === "linux") {
 			roots = [env.XDG_CONFIG_HOME || join(home, ".config")];
 			appNames = LINUX_APP_NAMES[edition];
@@ -1402,7 +1440,7 @@ async function readTraeIdentity(candidate, options = {}) {
 		if (platform === "darwin") productPaths.push(join("/Applications", `${appName}.app`, "Contents", "Resources", "app", "product.json"));
 		else {
 			const localRoots = [env.LOCALAPPDATA, join(home, "AppData", "Local")].filter((value) => typeof value === "string" && value !== "").filter((value, index, all) => all.indexOf(value) === index);
-			for (const root of localRoots) productPaths.push(join(root, "Programs", appName, "resources", "app", "product.json"));
+			for (const root of localRoots) for (const spelling of traeWindowsAppNames(candidate.edition)) productPaths.push(join(root, "Programs", spelling, "resources", "app", "product.json"));
 		}
 	}
 	let product = {};
@@ -2952,6 +2990,8 @@ function createTraeRawGateway(options) {
 //#endregion
 //#region src/model-cache.ts
 const execFileAsync = promisify(execFile);
+/** Basename of the SQLite cache sitting beside the credential document. */
+const TRAE_STATE_DB_FILENAME = "state.vscdb";
 function positive$1(value) {
 	return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : void 0;
 }
@@ -2979,18 +3019,59 @@ function parseTraeCachedModel(value) {
 	};
 }
 /**
+* The cache paths to try, most-specific first.
+*
+* `state.vscdb` is a SIBLING of the credential document (both sit in
+* `globalStorage`), so a candidate's own path is the authority for its cache —
+* this is why the database is derived from {@link traeStorageCandidates} rather
+* than re-spelled here.
+*
+* It previously hardcoded the single macOS spelling `Trae CN`, which was wrong
+* in two ways on Windows: `paths.ts` probes `Trae CN` AND `trae-cn`, and the
+* edition actually installed is often SOLO (`TRAE SOLO CN`). This module would
+* then point at a directory that does not exist. That went unnoticed only
+* because the Windows `sqlite3` dependency is absent, so the lookup failed and
+* callers fell back — masking the wrong path behind a different error. Sharing
+* one path table means a spelling that works for sign-in also works for the
+* cache.
+*/
+function traeStateDatabaseCandidates(options = {}) {
+	const platform = options.platform ?? process.platform;
+	const home = options.home ?? homedir();
+	const env = options.env ?? process.env;
+	const paths = [];
+	const push = (storagePath) => {
+		const database = join(dirname(storagePath), TRAE_STATE_DB_FILENAME);
+		if (!paths.some((existing) => existing.toLowerCase() === database.toLowerCase())) paths.push(database);
+	};
+	if (options.candidate !== void 0 && options.candidate.source === "desktop") push(options.candidate.path);
+	for (const candidate of traeStorageCandidates(platform, home, env)) {
+		if (candidate.source !== "desktop") continue;
+		if (options.candidate !== void 0 && candidate.edition !== options.candidate.edition) continue;
+		push(candidate.path);
+	}
+	return paths;
+}
+/**
 * Read Trae's own current user's model map via sqlite3 without exposing
 * secrets. The sqlite3 command line is a macOS prerequisite; on Windows it is
 * typically absent, so the call fails and callers fall back gracefully.
+*
+* Every candidate database is tried in order and the first that EXISTS is
+* queried. Existence is checked before spawning because a missing file and a
+* missing `sqlite3` binary are different problems: choosing the wrong directory
+* would otherwise surface as a confusing `sqlite3` failure, hiding a path bug
+* behind a dependency error.
 */
 async function readTraeCachedModel(functionName, modelName, userId, options = {}) {
-	const platform = options.platform ?? process.platform;
-	const home = options.home ?? homedir();
-	const env = options.env ?? process.env;
-	const database = platform === "win32" ? join(env.APPDATA ?? join(home, "AppData", "Roaming"), "Trae CN", "User", "globalStorage", "state.vscdb") : join(home, "Library", "Application Support", "Trae CN", "User", "globalStorage", "state.vscdb");
+	const exists = options.exists ?? existsSync;
+	const databases = traeStateDatabaseCandidates(options);
+	const fallback = databases[0];
+	if (fallback === void 0) throw new Error("trae: no desktop storage candidate to locate the model cache from");
+	const database = databases.find((candidate) => exists(candidate)) ?? fallback;
 	const key = `${userId}_AI.agent.model.model_list_map`;
 	const sql = `select value from ItemTable where key=${JSON.stringify(key)} limit 1;`;
-	const { stdout } = await execFileAsync("sqlite3", [database, sql], { maxBuffer: 8388608 });
+	const { stdout } = await (options.runSqlite ?? ((db, statement) => execFileAsync("sqlite3", [db, statement], { maxBuffer: 8388608 })))(database, sql);
 	const document = JSON.parse(stdout);
 	return parseTraeCachedModel((Array.isArray(document[functionName]) ? document[functionName] : []).find((item) => typeof item === "object" && item !== null && item.name === modelName));
 }
@@ -3002,7 +3083,7 @@ async function resolveTraeRawRuntime(store, modelName) {
 	const candidate = store.candidates().find((item) => item.edition === credential.edition);
 	if (candidate === void 0) throw new Error(`no Trae ${credential.edition} storage candidate for Raw Chat identity`);
 	const identity = await readTraeIdentity(candidate);
-	const cached = credential.edition === "cn" ? await readTraeCachedModel("solo_agent", modelName, credential.userId).catch(() => void 0) : void 0;
+	const cached = credential.edition === "cn" ? await readTraeCachedModel("solo_agent", modelName, credential.userId, { candidate }).catch(() => void 0) : void 0;
 	return {
 		identity,
 		runtime: buildTraeRawChatRuntimeConfig(modelName, cached, {
@@ -3202,6 +3283,12 @@ var TraeUsageClient = class {
 	/**
 	* Daily check-in status. Read-only, and answered with or without the device
 	* header — the claim is what needs it.
+	*
+	* The read DOES carry the header whenever this installation has one, and
+	* that is deliberate rather than incidental: `did_checked_in` is answered
+	* per device, so omitting the header would make a device that already claimed
+	* today look identical to one that never has (measured 2026-09-26, see
+	* {@link TraeCheckinStatus.didCheckedIn}).
 	*/
 	async checkinStatus(signal) {
 		await this.requireCnRegion("check-in status");
@@ -3423,6 +3510,16 @@ function nextRegionEnabled(value, region, enabled) {
 }
 //#endregion
 //#region src/web-status.ts
+/**
+* The upstream's business code for "该设备今日已参与签到" — this DEVICE already
+* used today's check-in (measured 2026-09-26 on a CN account whose claim was
+* refused with exactly this code after an account switch on the same machine).
+*
+* It arrives as HTTP 200 with a non-zero `code`, which is why it has to be
+* matched on the code rather than on the HTTP status: read as a transport
+* failure it looks like the plugin is broken, when the day is simply spent.
+*/
+const CHECKIN_DEVICE_ALREADY_CLAIMED = 9095;
 /** Redact token-like content before it crosses to the browser. */
 function safeMessage(error) {
 	return (error instanceof Error ? error.message : String(error)).replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/gu, "[redacted token]").replace(/(\b(?:code|token|refresh_token|access_token)=)[^&\s]+/giu, "$1[redacted]").slice(0, 500);
@@ -3619,11 +3716,22 @@ function registerTraeUsageRoute(ctx, deps) {
 		/**
 		* Daily check-in claim — the ONLY route in this plugin that mutates
 		* upstream account state, so it is guarded more tightly than its siblings:
-		* POST only, loopback origin only, and the status read runs FIRST so an
-		* already-claimed day never reaches the upstream claim at all. The upstream
-		* is idempotent per Beijing day anyway (verified 2026-09-24: a repeat claim
-		* answers `code: 0` with the entitlement total unchanged), but relying on
-		* that for correctness would put the guard in someone else's hands.
+		* POST only, loopback origin only, and the status read runs FIRST so a day
+		* the ACCOUNT has already been paid for never reaches the upstream claim.
+		*
+		* `alreadyCheckedIn` and `deviceCheckedIn` are deliberately separate
+		* answers, because the two flags mean different things (see
+		* {@link TraeWebCheckin}): `checkedIn` is the account's reward for today
+		* existing, `didCheckedIn` is this MACHINE having spent its check-in —
+		* possibly for a different account. Treating the latter as "claimed today"
+		* was a shipped bug: after switching accounts the card said "claimed
+		* today" and disabled the button, which is the right call for the wrong
+		* reason and hides that the new account was never rewarded.
+		*
+		* The upstream is idempotent per Beijing day (verified 2026-09-24: a
+		* repeat claim answers `code: 0` with the entitlement total unchanged), but
+		* relying on that for correctness would put the guard in someone else's
+		* hands.
 		*/
 		const disposeCheckin = ctx.webServer.register({
 			kind: "exact",
@@ -3638,16 +3746,27 @@ function registerTraeUsageRoute(ctx, deps) {
 					const client = deps.client(region);
 					const current = await client.checkinStatus();
 					if (!current.enabled) return json(res, 409, { error: "check-in is not enabled for this account" });
-					if (current.checkedIn || current.didCheckedIn) return json(res, 200, {
+					if (current.checkedIn) return json(res, 200, {
 						claimed: false,
 						alreadyCheckedIn: true,
+						deviceCheckedIn: current.didCheckedIn,
+						checkin: toCheckin(current)
+					});
+					if (current.didCheckedIn) return json(res, 200, {
+						claimed: false,
+						alreadyCheckedIn: false,
+						deviceCheckedIn: true,
+						code: CHECKIN_DEVICE_ALREADY_CLAIMED,
+						message: "this device already used today's check-in",
 						checkin: toCheckin(current)
 					});
 					const claim = await client.claimCheckin();
 					const checkin = await client.checkinStatus();
+					const deviceClaimed = claim.code === CHECKIN_DEVICE_ALREADY_CLAIMED;
 					json(res, 200, {
 						claimed: claim.claimed,
 						alreadyCheckedIn: false,
+						...deviceClaimed ? { deviceCheckedIn: true } : {},
 						code: claim.code,
 						message: claim.message,
 						checkin: toCheckin(checkin)
@@ -3764,6 +3883,64 @@ function buildTraeModelDetailRequest(configName = "", custom = false) {
 	};
 }
 //#endregion
+//#region src/redact.ts
+/**
+* Redaction helpers for diagnostics that a user may paste into a public issue.
+*
+* A verification report is only useful if it can be shared, and it is only safe
+* to share if it carries no personal identifiers. Paths are the hard case:
+* `C:\Users\<real name>\AppData\Roaming\Trae CN\...` contains both a real
+* account name AND the single most diagnostic token in the whole report (the
+* Trae data directory spelling). Redacting the whole path would make the report
+* worthless; printing it whole would leak the user's name. So the user segment
+* is replaced and the meaningful tail is preserved.
+*
+* @module dsh-connect-trae/redact
+*/
+/**
+* Replace the user segment of a path with `<user>`, keeping the rest intact.
+*
+* Handles the shapes a Trae install can produce:
+*   - `C:\Users\<name>\...` and `C:\Documents and Settings\<name>\...` (Windows)
+*   - `/Users/<name>/...` and `/home/<name>/...` (macOS / Linux)
+*
+* Anything after that segment — edition directory, `User\globalStorage`,
+* `storage.json` — is preserved verbatim, because that is what a report is
+* actually read for. Cross-platform on purpose: the function is called by
+* Windows-focused diagnostics, but the same helpers run in tests and on other
+* hosts, and a report from the wrong platform must not leak either.
+*/
+function maskUserPath(path) {
+	return String(path).replace(/([A-Za-z]:\\Users\\)[^\\]+/i, "$1<user>").replace(/([A-Za-z]:\\Documents and Settings\\)[^\\]+/i, "$1<user>").replace(/^(\/(?:Users|home)\/)[^/]+/, "$1<user>");
+}
+/**
+* Describe a name by shape instead of by value: a character count, plus whether
+* it is purely numeric.
+*
+* This is the deliberate middle ground for account names. A Trae account name
+* is often a real name or a phone number, so it must never be printed; but the
+* report still needs to show that an account WAS resolved, and the shape
+* distinguishes a real nickname from a generated `用户<n>` id — which is the
+* only thing a reader needs to judge whether account discovery worked.
+*/
+function describeNameShape(name) {
+	const text = String(name ?? "");
+	return `${text.length} 字符${/^\d+$/.test(text) ? "，纯数字" : ""}`;
+}
+/**
+* Describe an identifier by shape instead of by value.
+*
+* A device id (`x-device-id`) is a stable installation identifier and is
+* directly tied to the upstream's per-device rules, so it is never printed.
+* Its shape still proves which resolution path ran: a real `icube-dc` id is
+* 15 digits, while the fallback is a 32-character hex hash.
+*/
+function describeIdShape(value) {
+	const text = String(value ?? "");
+	if (text === "") return "(空)";
+	return `${text.length} 位${/^\d+$/.test(text) ? "，纯数字" : "，含非数字"}`;
+}
+//#endregion
 //#region src/raw-envelope.ts
 /** Stable JSON hash candidate used by the native DTO's arg/args_hash fields. */
 function hashTraeRawChatArg(arg) {
@@ -4273,4 +4450,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { Config, FALLBACK_TRAE_MODELS, FALLBACK_TRAE_MODELS_AI, REGION_GATEWAYS, SseDecoder, TRAE_AI_PROVIDER, TRAE_CHECKIN_PATH, TRAE_CN_AGENT_TASK_PATH, TRAE_CN_TITLE_PATH, TRAE_MODEL_DETAIL_FUNCTIONS, TRAE_MODEL_DETAIL_PATH, TRAE_PAY_BASE, TRAE_PROVIDER, TRAE_PROVIDERS, TRAE_PROVIDER_DISPLAY_NAMES, TRAE_RAW_CHAT_V1_PATH, TRAE_RAW_CHAT_V2_PATH, TRAE_REASONING_EFFORTS, TRAE_REGIONS, TRAE_REGION_PARAM, TRAE_SETTINGS_NS, TRAE_SOLO_CHAT_PATH, TRAE_SOLO_FUNCTION, TRAE_SOLO_MODELS_PATH, TRAE_SOLO_REMOTE_BASE, TRAE_STREAM_IDLE_TIMEOUT_MS, TRAE_USAGE_PATH, TRAE_VERSION_CODE_FALLBACK, TraeCatalog, TraeCredentialStore, TraeDelegatingUpstreamClient, TraeFallbackUpstreamClient, TraeGatedUpstreamClient, TraeRawCapabilityController, TraeRawCapabilityState, TraeRawChatUpstreamClient, TraeSoloBridge, TraeSoloRemoteCatalogClient, TraeSoloUpstreamClient, TraeUsageClient, UnconfiguredTraeUpstreamClient, apply, applyContextBudgets, applyImageSelection, applyReasoningEffort, asVolatile, bridgeTraeSoloStream, buildTraeAgentTaskBody, buildTraeCnHeaders, buildTraeFusionRawChatEnvelope, buildTraeModelDetailRequest, buildTraeRawChatDraft, buildTraeRawChatRuntimeConfig, classifyTraeRawChatFailure, createTraeAdapter, createTraeRawGateway, createTraeShim, decodeRawChatChunk, decodeTraeEvent, decryptTraeStorageValue, deriveCatalog, discoveredCatalog, fallbackModelsFor, hashTraeRawChatArg, identityHeaders, inject, legacyTraeOwnAuthPath, mergeTraeModelSources, name, nextRegionEnabled, nextRegionSlots, normalizeTraeCredential, normalizeTraeVersionCode, parseObservedModelConfig, parseReasoningCapability, parseTraeAuthValue, parseTraeCachedModel, parseTraeModelExtraConfigLogLine, parseTraeRawChatBehaviorConfig, parseTraeRemoteModel, parseTraeStorageDocument, pickTraeStorageIdentity, prepareSoloBody, probeTraeRawChatCapability, rawCapabilityDiagnostic, rawCapabilityFingerprint, readTraeCachedModel, readTraeCliIdentity, readTraeIdentity, refreshTraeCredential, regionEnabled, regionEnabledOf, regionOfCredential, regionOfEdition, regionOfHost, regionOfTraeProvider, regionOfTraeStatusUrl, regionOfUserRegion, regionStateOf, registerTraeUsageRoute, resolveTraeIdentity, resolveTraeRawRuntime, sanitizeCatalog, settingsNamespaceOf, traeEndpoint, traeInputModalities, traeModelDisplayName, traeOwnAuthPath, traeRawChatExtraInfo, traeStorageCandidates, traeWebUsage, unwrapVolatile, unwrapVolatileDeep, withTraeRegion };
+export { Config, FALLBACK_TRAE_MODELS, FALLBACK_TRAE_MODELS_AI, REGION_GATEWAYS, SseDecoder, TRAE_AI_PROVIDER, TRAE_CHECKIN_PATH, TRAE_CN_AGENT_TASK_PATH, TRAE_CN_TITLE_PATH, TRAE_MODEL_DETAIL_FUNCTIONS, TRAE_MODEL_DETAIL_PATH, TRAE_PAY_BASE, TRAE_PROVIDER, TRAE_PROVIDERS, TRAE_PROVIDER_DISPLAY_NAMES, TRAE_RAW_CHAT_V1_PATH, TRAE_RAW_CHAT_V2_PATH, TRAE_REASONING_EFFORTS, TRAE_REGIONS, TRAE_REGION_PARAM, TRAE_SETTINGS_NS, TRAE_SOLO_CHAT_PATH, TRAE_SOLO_FUNCTION, TRAE_SOLO_MODELS_PATH, TRAE_SOLO_REMOTE_BASE, TRAE_STATE_DB_FILENAME, TRAE_STREAM_IDLE_TIMEOUT_MS, TRAE_USAGE_PATH, TRAE_VERSION_CODE_FALLBACK, TraeCatalog, TraeCredentialStore, TraeDelegatingUpstreamClient, TraeFallbackUpstreamClient, TraeGatedUpstreamClient, TraeRawCapabilityController, TraeRawCapabilityState, TraeRawChatUpstreamClient, TraeSoloBridge, TraeSoloRemoteCatalogClient, TraeSoloUpstreamClient, TraeUsageClient, UnconfiguredTraeUpstreamClient, apply, applyContextBudgets, applyImageSelection, applyReasoningEffort, asVolatile, bridgeTraeSoloStream, buildTraeAgentTaskBody, buildTraeCnHeaders, buildTraeFusionRawChatEnvelope, buildTraeModelDetailRequest, buildTraeRawChatDraft, buildTraeRawChatRuntimeConfig, classifyTraeRawChatFailure, createTraeAdapter, createTraeRawGateway, createTraeShim, decodeRawChatChunk, decodeTraeEvent, decryptTraeStorageValue, deriveCatalog, describeIdShape, describeNameShape, discoveredCatalog, fallbackModelsFor, hashTraeRawChatArg, identityHeaders, inject, legacyTraeOwnAuthPath, maskUserPath, mergeTraeModelSources, name, nextRegionEnabled, nextRegionSlots, normalizeTraeCredential, normalizeTraeVersionCode, parseObservedModelConfig, parseReasoningCapability, parseTraeAuthValue, parseTraeCachedModel, parseTraeModelExtraConfigLogLine, parseTraeRawChatBehaviorConfig, parseTraeRemoteModel, parseTraeStorageDocument, pickTraeStorageIdentity, prepareSoloBody, probeTraeRawChatCapability, rawCapabilityDiagnostic, rawCapabilityFingerprint, readTraeCachedModel, readTraeCliIdentity, readTraeIdentity, refreshTraeCredential, regionEnabled, regionEnabledOf, regionOfCredential, regionOfEdition, regionOfHost, regionOfTraeProvider, regionOfTraeStatusUrl, regionOfUserRegion, regionStateOf, registerTraeUsageRoute, resolveTraeIdentity, resolveTraeRawRuntime, sanitizeCatalog, settingsNamespaceOf, traeEndpoint, traeInputModalities, traeModelDisplayName, traeOwnAuthPath, traeRawChatExtraInfo, traeStateDatabaseCandidates, traeStorageCandidates, traeWebUsage, traeWindowsAppNames, unwrapVolatile, unwrapVolatileDeep, withTraeRegion };

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "dsh-connect-trae",
   "displayName": "DSH Connect Trae",
-  "description": "Connect locally signed-in Trae models to DeepSeek Harness, with a usage/credits summary and daily check-in claiming.",
-  "version": "2.3.0",
+  "description": "把本机登录的 Trae 模型接入 DeepSeek Harness：国内版与国际版双供应商并行，提供用量/积分概览与每日签到领取。",
+  "version": "2.3.1",
   "author": "dingminhua",
   "copyright": "Copyright (c) 2026 LaoDing",
   "license": "MIT",
@@ -34,6 +34,7 @@
     "lib",
     "icons",
     "docs/assets/dsh-connect-trae-usage-card.png",
+    "scripts/verify-windows.mjs",
     "screenshots.json",
     "cordis.patch.yml",
     "README.md",