dsh-connect-trae 3.5.1 → 3.6.1

package/lib/client.js

@@ -48,6 +48,17 @@ window.__ModuleLoader__.load({
 		* account row.
 		*/
 		const TRAE_CHECKIN_PATH = "/plugins/dsh-connect-trae/checkin";
+		/**
+		* Plugin-owned account transfer endpoint: batch export and import of a region's
+		* stored credentials (issue #37).
+		*
+		* One route with an `action` query parameter (`export` | `preview` | `import`),
+		* mirroring the sibling `dsh-connect-workbuddy` plugin's transfer route so the
+		* two cards behave the same way for a user who has both installed. The vault
+		* document never leaves the Host: the browser receives parsed answers, and a
+		* preview carries display fields only — never token material.
+		*/
+		const TRAE_TRANSFER_PATH = "/plugins/dsh-connect-trae/transfer";
 		/** Query parameter naming the region a card request addresses. */
 		const TRAE_REGION_PARAM = "region";
 		/** Every region, in card tab order. */
@@ -60,6 +71,18 @@ window.__ModuleLoader__.load({
 			return `${path}?${TRAE_REGION_PARAM}=${region}`;
 		}
 		/**
+		* Address one region's transfer route with its step, e.g.
+		* `/plugins/dsh-connect-trae/transfer?region=cn&action=export`.
+		*
+		* Separate from {@link withTraeRegion} because this route carries a second
+		* query parameter: a caller that appended `&action=` by hand would be one typo
+		* away from a 400, which is exactly the failure the sibling workbuddy plugin
+		* hit (#42) when five requests dropped that parameter.
+		*/
+		function withTraeTransferAction(path, region, action) {
+			return `${path}?${TRAE_REGION_PARAM}=${region}&action=${action}`;
+		}
+		/**
 		* Peel ONE `{get(): T}` live reference, the shape DSH 0.1.7 delivers a
 		* volatile-marked settings field as (see {@link unwrapVolatileDeep}).
 		*/
@@ -312,6 +335,13 @@ window.__ModuleLoader__.load({
 .dsm-trae-usage-account{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:12px 14px;border:1px solid var(--dsw-alias-border-l2,#3a3d45);border-radius:14px;background:var(--dsw-alias-bg-layer-2,#24262c)}
 .dsm-trae-usage-account-copy{display:flex;flex-direction:column;gap:3px;min-width:0}
 .dsm-trae-usage-expiry{padding-left:19px;color:var(--dsw-alias-label-tertiary,#9aa0a8);font-size:12px;line-height:18px}
+/* Refresh-token countdown (issue #37 follow-up). Sits under the access-token
+   line and aligns with it, so the two read as one stack: "token renews" then
+   "but this is when renewal itself ends". Only rendered when it is close or
+   already past, so a healthy account is unchanged. */
+.dsm-trae-refresh-warn{padding-left:19px;font-size:12px;line-height:18px}
+.dsm-trae-refresh-warn-soon{color:var(--dsw-alias-state-warn-primary,#b45309)}
+.dsm-trae-refresh-warn-lapsed{color:var(--dsw-alias-state-error-primary,#dc2626)}
 .dsm-trae-account-picker{display:block}
 /* The 璁剧疆 block: label + hint on the left, control on the right, one save for
    the whole block. It replaces the bare checkbox rows that used to write on
@@ -482,6 +512,32 @@ window.__ModuleLoader__.load({
 .dsm-trae-expiry-week{border-color:var(--dsw-alias-border-l2,#3a3d45);background:var(--dsw-alias-bg-layer-3,#2c2f36);color:var(--dsw-alias-label-primary,#e6e6e6)}
 .dsm-trae-expiry-lapsed{border-color:var(--dsw-alias-border-l2,#3a3d45);background:var(--dsw-alias-bg-layer-3,#2c2f36);color:var(--dsw-alias-label-tertiary,#999)}
 .dsm-trae-expiry-detail{font-size:11px;line-height:16px;opacity:.8}
+/* Account import / export (issue #37). A sub-block of the accounts section:
+   the transfer row, plus the two dialogs it opens in place. The file input is
+   hidden rather than absent — the button opens the system picker, and the input
+   must stay mounted to be clicked. */
+.dsm-trae-transfer{margin-top:12px;padding-top:10px;border-top:1px solid var(--dsw-alias-border-l2,rgba(127,127,127,.2))}
+.dsm-trae-transfer-label{margin:0 0 6px;font-size:11px;line-height:16px;color:var(--dsw-alias-label-secondary,GrayText)}
+.dsm-trae-transfer-actions{display:flex;flex-wrap:wrap;gap:8px}
+.dsm-trae-transfer-file{display:none}
+.dsm-trae-transfer-status{margin:6px 0 0;font-size:11px;line-height:16px}
+.dsm-trae-transfer-ok{color:var(--dsw-alias-state-success-primary,#16a34a)}
+.dsm-trae-transfer-error{color:var(--dsw-alias-state-error-primary,#dc2626)}
+.dsm-trae-transfer-dialog{
+  margin-top:8px;padding:10px;border:1px solid var(--dsw-alias-border-l2,rgba(127,127,127,.28));
+  border-radius:8px;font-size:12px;line-height:18px;
+}
+.dsm-trae-transfer-dialog>p{margin:0 0 6px}
+.dsm-trae-transfer-list{list-style:none;margin:6px 0;padding:0;max-height:180px;overflow:auto}
+.dsm-trae-transfer-list label{display:flex;align-items:center;gap:6px;padding:2px 0;cursor:pointer}
+.dsm-trae-transfer-list input{flex:none}
+.dsm-trae-transfer-dialog-actions{display:flex;flex-wrap:wrap;gap:8px;margin-top:8px}
+/* A text-button rather than a boxed one: "select all" is a shortcut inside the
+   dialog, and a third button would compete with the two that act. */
+.dsm-trae-transfer-link{
+  margin-top:6px;padding:0;border:0;background:none;cursor:pointer;
+  color:var(--dsw-alias-brand-primary,#2563eb);font-size:11px;line-height:16px;
+}
 .dsm-trae-models-hint{margin:4px 0 0;color:var(--dsw-alias-label-tertiary,#999);font-size:11px;line-height:16px}
 /* Verdict badge. Only a real refusal is coloured as a warning; an unknown
    verdict stays neutral because an inconclusive probe is not evidence against
@@ -785,6 +841,368 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/client/AccountTransfer.tsx
+		/**
+		* The card's account-transfer section: batch export and import of a region's
+		* stored credentials, in the file format shared with sibling credential
+		* managers for the same upstream (the `dsh-connect-workbuddy` family).
+		*
+		* Modelled on that plugin's `AccountTransfer`, deliberately: the two plugins
+		* share one external-presentation language, and a user who has imported
+		* accounts in one should recognise the flow in the other. The shape is a single
+		* section owning all of its state (busy / result line / error), with the export
+		* dialog (pick accounts → download JSON) and the import dialog (pick file →
+		* desensitised preview → tick → import) split the same way.
+		*
+		* Two properties are load-bearing and must not be relaxed:
+		*  - The preview carries display fields and a `hasToken` boolean only. Tokens
+		*    never enter the browser at all until the user explicitly exports a chosen
+		*    account, and the Host re-parses the file on import rather than trusting
+		*    anything this component says about it.
+		*  - Import is offered even when the region has NO account: a machine that has
+		*    never signed in is exactly where importing someone else's export matters
+		*    most. Only EXPORT needs an existing account to select.
+		*
+		* The download uses `<a download>` on a Blob because the card runs inside the
+		* settings iframe and has no host save dialog; a same-origin anchor download is
+		* the reliable path there.
+		*
+		* @module dsh-connect-trae/client/AccountTransfer
+		*/
+		/** How long the veil may wait for the card's re-read before it comes down. */
+		const REFRESH_SETTLE_TIMEOUT_MS = 5e3;
+		/** Build the default export file name: trae-accounts-YYYY-MM-DD.json. */
+		function exportFileName() {
+			const pad = (value) => String(value).padStart(2, "0");
+			const now = /* @__PURE__ */ new Date();
+			return `trae-accounts-${now.getFullYear()}-${pad(now.getMonth() + 1)}-${pad(now.getDate())}.json`;
+		}
+		/** Download a JSON value as a local file (no host save dialog inside the iframe). */
+		function downloadJson(fileName, data) {
+			const blob = new Blob([JSON.stringify(data, null, 2)], { type: "application/json" });
+			const url = URL.createObjectURL(blob);
+			const anchor = document.createElement("a");
+			anchor.href = url;
+			anchor.download = fileName;
+			document.body.appendChild(anchor);
+			anchor.click();
+			anchor.remove();
+			URL.revokeObjectURL(url);
+		}
+		/** Resolve once `value` settles, or after `timeoutMs` — whichever comes first. */
+		async function settlesWithin(value, timeoutMs) {
+			await Promise.race([Promise.resolve(value).catch(() => void 0), new Promise((resolve) => {
+				setTimeout(resolve, timeoutMs);
+			})]);
+		}
+		function AccountTransfer({ t, region, accounts, onChanged }) {
+			const [phase, setPhase] = (0, react.useState)({ kind: "idle" });
+			const [dialog, setDialog] = (0, react.useState)(void 0);
+			const [selected, setSelected] = (0, react.useState)(/* @__PURE__ */ new Set());
+			const [preview, setPreview] = (0, react.useState)(void 0);
+			const [importSelected, setImportSelected] = (0, react.useState)(/* @__PURE__ */ new Set());
+			const fileInput = (0, react.useRef)(null);
+			/**
+			* The text of the file the user just picked, held here rather than re-read
+			* from the input at import time: the picker is a bare system dialog that
+			* closes immediately, so between preview and confirm no dialog holds the
+			* File. Re-reading `fileInput.current.files` would also break the moment
+			* anything clears the input — and it must be cleared after every pick, or
+			* choosing the SAME file twice fires no change event.
+			*/
+			const importText = (0, react.useRef)("");
+			const mounted = (0, react.useRef)(true);
+			(0, react.useEffect)(() => {
+				mounted.current = true;
+				return () => {
+					mounted.current = false;
+				};
+			}, []);
+			const closeDialog = () => {
+				setDialog(void 0);
+				setSelected(/* @__PURE__ */ new Set());
+				setPreview(void 0);
+				setImportSelected(/* @__PURE__ */ new Set());
+			};
+			const runExport = async () => {
+				if (selected.size === 0) return;
+				setPhase({ kind: "exporting" });
+				try {
+					const response = await fetch(withTraeTransferAction(TRAE_TRANSFER_PATH, region, "export"), {
+						method: "POST",
+						headers: {
+							"content-type": "application/json",
+							accept: "application/json"
+						},
+						credentials: "same-origin",
+						body: JSON.stringify({ accountIds: [...selected] })
+					});
+					const body = await response.json();
+					if (!mounted.current) return;
+					if (!response.ok || !Array.isArray(body.accounts)) {
+						setPhase({
+							kind: "error",
+							message: body.error ?? `HTTP ${response.status}`
+						});
+						return;
+					}
+					const fileName = exportFileName();
+					downloadJson(fileName, body.accounts);
+					closeDialog();
+					setPhase({
+						kind: "done",
+						message: t("row.transferExported", {
+							count: body.accounts.length,
+							fileName
+						})
+					});
+				} catch (error) {
+					if (mounted.current) setPhase({
+						kind: "error",
+						message: error instanceof Error ? error.message : String(error)
+					});
+				}
+			};
+			const readImportFile = async (file) => {
+				setPhase({ kind: "importing" });
+				try {
+					const text = await file.text();
+					importText.current = text;
+					const response = await fetch(withTraeTransferAction(TRAE_TRANSFER_PATH, region, "preview"), {
+						method: "POST",
+						headers: {
+							"content-type": "application/json",
+							accept: "application/json"
+						},
+						credentials: "same-origin",
+						body: JSON.stringify({ text })
+					});
+					const body = await response.json();
+					if (!mounted.current) return;
+					if (!response.ok || !Array.isArray(body.accounts)) {
+						setPhase({
+							kind: "error",
+							message: body.error ?? `HTTP ${response.status}`
+						});
+						return;
+					}
+					setPreview(body);
+					setImportSelected(new Set(body.accounts.filter((entry) => entry.hasToken).map((entry) => entry.index)));
+					setPhase({ kind: "idle" });
+				} catch (error) {
+					if (mounted.current) setPhase({
+						kind: "error",
+						message: error instanceof Error ? error.message : String(error)
+					});
+				}
+			};
+			const runImport = async () => {
+				if (preview === void 0 || importSelected.size === 0 || importText.current === "") return;
+				setPhase({ kind: "importing" });
+				try {
+					const response = await fetch(withTraeTransferAction(TRAE_TRANSFER_PATH, region, "import"), {
+						method: "POST",
+						headers: {
+							"content-type": "application/json",
+							accept: "application/json"
+						},
+						credentials: "same-origin",
+						body: JSON.stringify({
+							text: importText.current,
+							indexes: [...importSelected]
+						})
+					});
+					const body = await response.json();
+					if (!mounted.current) return;
+					if (!response.ok || typeof body.imported !== "number") {
+						setPhase({
+							kind: "error",
+							message: body.error ?? `HTTP ${response.status}`
+						});
+						return;
+					}
+					closeDialog();
+					const message = t("row.transferImported", {
+						imported: body.imported,
+						skipped: body.skipped ?? 0
+					});
+					setPhase({
+						kind: "refreshing",
+						message
+					});
+					await settlesWithin(onChanged?.(), REFRESH_SETTLE_TIMEOUT_MS);
+					if (!mounted.current) return;
+					setPhase({
+						kind: "done",
+						message
+					});
+				} catch (error) {
+					if (mounted.current) setPhase({
+						kind: "error",
+						message: error instanceof Error ? error.message : String(error)
+					});
+				}
+			};
+			const busy = phase.kind === "exporting" || phase.kind === "importing" || phase.kind === "refreshing";
+			const veilMessage = phase.kind === "exporting" ? t("row.transferExporting") : phase.kind === "importing" || phase.kind === "refreshing" ? t("row.transferImporting") : "";
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "dsm-trae-transfer",
+				"aria-label": t("row.transferTitle"),
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(BusyOverlay, {
+						visible: busy,
+						message: veilMessage,
+						...busy ? { hint: t("row.transferVeilHint") } : {}
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsm-trae-transfer-label",
+						children: t("row.transferTitle")
+					}),
+					phase.kind === "done" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsm-trae-transfer-status dsm-trae-transfer-ok",
+						children: phase.message
+					}) : phase.kind === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsm-trae-transfer-status dsm-trae-transfer-error",
+						children: t("row.transferError", { message: phase.message })
+					}) : null,
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsm-trae-transfer-actions",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsm-btn dsm-btn-outline",
+							disabled: busy || accounts.length === 0,
+							onClick: () => {
+								setSelected(/* @__PURE__ */ new Set());
+								setDialog("export");
+							},
+							children: t("row.transferExport")
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							type: "button",
+							className: "dsm-btn dsm-btn-outline",
+							disabled: busy,
+							onClick: () => {
+								fileInput.current?.click();
+							},
+							children: t("row.transferImport")
+						})]
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+						ref: fileInput,
+						type: "file",
+						accept: "application/json,.json",
+						className: "dsm-trae-transfer-file",
+						onChange: (event) => {
+							const file = event.target.files?.[0];
+							event.target.value = "";
+							if (file !== void 0) {
+								setPreview(void 0);
+								setImportSelected(/* @__PURE__ */ new Set());
+								setDialog("import");
+								readImportFile(file);
+							}
+						}
+					}),
+					dialog === "export" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsm-trae-transfer-dialog",
+						role: "dialog",
+						"aria-label": t("row.transferExport"),
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("row.transferExportPick", { total: accounts.length }) }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dsm-trae-hint",
+								children: t("row.transferHint")
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+								className: "dsm-trae-transfer-list",
+								children: accounts.map((account) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									type: "checkbox",
+									checked: selected.has(account.id),
+									onChange: (event) => {
+										const next = new Set(selected);
+										if (event.target.checked) next.add(account.id);
+										else next.delete(account.id);
+										setSelected(next);
+									}
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: account.accountName })] }) }, account.id))
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dsm-trae-transfer-dialog-actions",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dsm-btn",
+									disabled: selected.size === 0,
+									onClick: () => {
+										runExport();
+									},
+									children: t("row.transferExportConfirm", { count: selected.size })
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dsm-btn dsm-btn-outline",
+									onClick: closeDialog,
+									children: t("row.transferCancel")
+								})]
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsm-trae-transfer-link",
+								onClick: () => setSelected(new Set(accounts.map((account) => account.id))),
+								children: t("row.transferSelectAll")
+							})
+						]
+					}) : null,
+					dialog === "import" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: "dsm-trae-transfer-dialog",
+						role: "dialog",
+						"aria-label": t("row.transferImport"),
+						children: preview === void 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("row.transferReading") }) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("row.transferImportPick", { total: preview.total }) }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("ul", {
+								className: "dsm-trae-transfer-list",
+								children: preview.accounts.map((entry) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									type: "checkbox",
+									checked: importSelected.has(entry.index),
+									disabled: !entry.hasToken,
+									onChange: (event) => {
+										const next = new Set(importSelected);
+										if (event.target.checked) next.add(entry.index);
+										else next.delete(entry.index);
+										setImportSelected(next);
+									}
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [
+									entry.nickname || entry.uid || t("row.transferUnnamed"),
+									entry.email === "" ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+										className: "dsm-trae-hint",
+										children: [" · ", entry.email]
+									}),
+									entry.hasToken ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+										className: "dsm-trae-hint",
+										children: [" · ", t("row.transferNoToken")]
+									})
+								] })] }) }, entry.index))
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								className: "dsm-trae-transfer-dialog-actions",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dsm-btn",
+									disabled: importSelected.size === 0,
+									onClick: () => {
+										runImport();
+									},
+									children: t("row.transferImportConfirm", { count: importSelected.size })
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+									type: "button",
+									className: "dsm-btn dsm-btn-outline",
+									onClick: closeDialog,
+									children: t("row.transferCancel")
+								})]
+							})
+						] })
+					}) : null
+				]
+			});
+		}
+		//#endregion
 		//#region src/client/plan-text.ts
 		/**
 		* The international region's "what plan is this account on" text.
@@ -895,6 +1313,40 @@ window.__ModuleLoader__.load({
 				minute: "2-digit"
 			}).format(new Date(value));
 		}
+		/** How close a refresh token must be to lapsing before the card warns, in days. */
+		const REFRESH_WARN_DAYS = 30;
+		/**
+		* The refresh-token warning for one account, or undefined when there is nothing
+		* worth saying.
+		*
+		* The access token renews itself every few minutes, so its own expiry answers
+		* "when does this need attention" with "never, until the refresh token lapses".
+		* The refresh token is therefore the only honest countdown on this card, and it
+		* has to be shown BEFORE it runs out: once it lapses the plugin cannot renew at
+		* all and the only recovery is signing in to Trae again, which a user who has
+		* been reading "auto-renewal" for months has no reason to expect.
+		*
+		* Three tones, matching the credit-expiry notice: `lapsed` (renewal already
+		* dead), `soon` (inside the warning window), and nothing otherwise — a healthy
+		* token must not add a line to every account row forever.
+		*/
+		function refreshTokenWarning(expiresAtMs, nowMs, t, formatTime) {
+			if (expiresAtMs === void 0) return void 0;
+			const text = formatTime(expiresAtMs);
+			if (expiresAtMs <= nowMs) return {
+				tone: "lapsed",
+				text: t("row.refreshTokenLapsed", { expiresAt: text })
+			};
+			const days = Math.ceil((expiresAtMs - nowMs) / 864e5);
+			if (days > REFRESH_WARN_DAYS) return void 0;
+			return {
+				tone: "soon",
+				text: t("row.refreshTokenExpiring", {
+					expiresAt: text,
+					days
+				})
+			};
+		}
 		function formatCapacity(value, unknown) {
 			if (value === void 0) return unknown;
 			if (value >= 1e6 && value % 1e6 === 0) return `${value / 1e6}M`;
@@ -2164,6 +2616,14 @@ window.__ModuleLoader__.load({
 																			sourceLabel(account.source)
 																		]
 																	}),
+																	(() => {
+																		const warning = refreshTokenWarning(account.refreshExpiresAtMs, Date.now(), t, formatDateTime);
+																		return warning === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+																			className: `dsm-trae-refresh-warn dsm-trae-refresh-warn-${warning.tone}`,
+																			role: "status",
+																			children: warning.text
+																		});
+																	})(),
 																	error === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 																		className: "dsm-trae-account-note",
 																		role: "alert",
@@ -2246,6 +2706,21 @@ window.__ModuleLoader__.load({
 											className: "dsm-trae-usage-note",
 											role: "status",
 											children: rescanNote
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)(AccountTransfer, {
+											t,
+											region: activeRegion,
+											accounts: status.status === "signed-in" ? status.accounts.map((account) => ({
+												id: account.id,
+												accountName: account.accountName
+											})) : [],
+											onChanged: async () => {
+												const fresh = await refreshUsage(activeRegion);
+												if (fresh !== void 0) setStatusByRegion((current) => ({
+													...current,
+													[activeRegion]: fresh
+												}));
+											}
 										})
 									]
 								}),
@@ -3191,6 +3666,8 @@ window.__ModuleLoader__.load({
 			"row.sourceCli": "Trae CLI",
 			"row.signedIn": "Signed in: {accountName}",
 			"row.tokenExpiry": "Access token expires {expiresAt} (auto-renewal)",
+			"row.refreshTokenExpiring": "Sign in to Trae again by {expiresAt} ({days} day(s) left) — automatic renewal stops after that.",
+			"row.refreshTokenLapsed": "Automatic renewal has stopped: the Trae sign-in expired {expiresAt}. Sign in to Trae again to restore it.",
 			"row.requestFailed": "Request failed",
 			"row.creditsAvailableLabel": "Available",
 			"row.workCreditsLabel": "Work credits",
@@ -3225,6 +3702,25 @@ window.__ModuleLoader__.load({
 			"row.refreshing": "Refreshing…",
 			"row.accountsTitle": "Trae account",
 			"row.accountsHint": "Sign-ins detected on this machine. Tokens are never shown or saved.",
+			"row.transferTitle": "Import & export accounts",
+			"row.transferExport": "Export selected",
+			"row.transferImport": "Import from file",
+			"row.transferCancel": "Cancel",
+			"row.transferSelectAll": "Select all",
+			"row.transferExportPick": "Choose which of the {total} accounts to export.",
+			"row.transferExportConfirm": "Export {count}",
+			"row.transferExported": "Exported {count} account(s) to {fileName}.",
+			"row.transferExporting": "Preparing the export…",
+			"row.transferImportPick": "This file holds {total} record(s). Untick anything you do not want to add.",
+			"row.transferImportConfirm": "Import {count}",
+			"row.transferImported": "Imported {imported} account(s), skipped {skipped}.",
+			"row.transferImporting": "Importing…",
+			"row.transferReading": "Reading the file…",
+			"row.transferHint": "The exported file contains live tokens — treat it as a password. Records belonging to the other region are skipped.",
+			"row.transferError": "Import/export failed: {message}",
+			"row.transferVeilHint": "The account list refreshes when this finishes.",
+			"row.transferUnnamed": "Unnamed account",
+			"row.transferNoToken": "no token, will be skipped",
 			"row.accountsRescan": "Detect accounts again",
 			"row.accountsScanning": "Detecting…",
 			"row.accountsNone": "This region reports no usable account.",
@@ -3338,6 +3834,8 @@ window.__ModuleLoader__.load({
 			"row.sourceCli": "Trae CLI",
 			"row.signedIn": "已登录：{accountName}",
 			"row.tokenExpiry": "访问令牌 {expiresAt} 过期（自动续期）",
+			"row.refreshTokenExpiring": "请在 {expiresAt} 前重新登录一次 Trae（还剩 {days} 天），此后将无法自动续期。",
+			"row.refreshTokenLapsed": "自动续期已停止：Trae 登录凭据已于 {expiresAt} 过期。请重新登录一次 Trae 以恢复。",
 			"row.requestFailed": "请求失败",
 			"row.creditsAvailableLabel": "可用",
 			"row.workCreditsLabel": "Work 积分",
@@ -3372,6 +3870,25 @@ window.__ModuleLoader__.load({
 			"row.refreshing": "正在刷新…",
 			"row.accountsTitle": "Trae 账号",
 			"row.accountsHint": "本机检测到的登录账号；Token 不会显示或保存。",
+			"row.transferTitle": "导入 / 导出账号",
+			"row.transferExport": "导出所选",
+			"row.transferImport": "从文件导入",
+			"row.transferCancel": "取消",
+			"row.transferSelectAll": "全选",
+			"row.transferExportPick": "从这 {total} 个账号中选择要导出的。",
+			"row.transferExportConfirm": "导出 {count} 个",
+			"row.transferExported": "已导出 {count} 个账号到 {fileName}。",
+			"row.transferExporting": "正在准备导出…",
+			"row.transferImportPick": "该文件包含 {total} 条记录，取消勾选不想添加的。",
+			"row.transferImportConfirm": "导入 {count} 个",
+			"row.transferImported": "已导入 {imported} 个账号，跳过 {skipped} 个。",
+			"row.transferImporting": "正在导入…",
+			"row.transferReading": "正在读取文件…",
+			"row.transferHint": "导出的文件里是有效 Token，请当作密码保管。属于另一区域的记录会被跳过。",
+			"row.transferError": "导入/导出失败：{message}",
+			"row.transferVeilHint": "完成后账号列表会自动刷新。",
+			"row.transferUnnamed": "未命名账号",
+			"row.transferNoToken": "无 Token，将被跳过",
 			"row.accountsRescan": "重新检测账号",
 			"row.accountsScanning": "正在检测…",
 			"row.accountsNone": "该区域没有可列出的账号。",

package/lib/index.d.ts

@@ -590,6 +590,13 @@ interface TraeAccountChoice {
   region: TraeRegion;
   source: 'desktop' | 'dsh' | 'cli';
   tokenExpiresAtMs: number;
+  /**
+   * When this account's refresh token lapses, when the credential carries one.
+   * The access token above renews itself automatically until this expires; see
+   * the mirror field on `TraeWebAccount` in status-paths.ts for why the card
+   * needs it.
+   */
+  refreshExpiresAtMs?: number;
   selected: boolean;
 }
 /**
@@ -698,6 +705,22 @@ declare class TraeCredentialStore {
    * fallback, for the same reason {@link current} refuses to fall back.
    */
   credentialOf(accountId: string): Promise<TraeCredential | undefined>;
+  /**
+   * Store imported credentials (issue #37), replacing any entry with the same
+   * account id and leaving every other entry alone.
+   *
+   * Why an additive write rather than the refresh path: an imported credential
+   * has NO desktop file behind it, so unlike a refresh result it cannot be
+   * rediscovered from the machine. If it were written the way a refresh is —
+   * as the whole document — importing account B would delete account A, and a
+   * later refresh would delete both. `readAll`'s desktop-first preference is
+   * therefore also not enough on its own: these entries survive only because
+   * `readOwns` reads them back and the dedupe keeps the longest-lived copy.
+   *
+   * Returns the account ids actually written, so the caller can report how many
+   * landed without re-reading the store.
+   */
+  importAccounts(credentials: readonly Omit<TraeCredential, 'source'>[]): Promise<string[]>;
   resolve(): Promise<TraeCredential>;
   status(): Promise<{
     state: 'signed-in' | 'signed-out';
@@ -1986,6 +2009,18 @@ interface TraeWebAccount {
   region: TraeRegion;
   source: 'desktop' | 'dsh' | 'cli';
   tokenExpiresAtMs: number;
+  /**
+   * When this account's REFRESH token expires, when the credential carries one.
+   *
+   * The access token above is renewed automatically — the plugin refreshes it
+   * five minutes before it lapses — so by itself it answers "when does this
+   * need attention", which is "never, while the refresh token lives". The
+   * refresh token is the real horizon: once IT expires the automatic renewal
+   * stops working and the user must sign in to Trae again. Before this field the
+   * card could only say "auto-renewal", which stays true right up to the moment
+   * it silently stops being true.
+   */
+  refreshExpiresAtMs?: number;
   selected: boolean;
 }
 /**
@@ -2212,6 +2247,13 @@ type TraeWebUsage = {
   accountId: string;
   accountName: string;
   tokenExpiresAtMs: number;
+  /**
+   * When the BOUND account's refresh token expires (absent when the credential
+   * carries none). See {@link TraeWebAccount.refreshExpiresAtMs} — this is the
+   * horizon that actually matters, because the access token above renews
+   * itself until this one lapses.
+   */
+  refreshExpiresAtMs?: number;
   /** Which per-region model directory and selection this account owns. */
   region: TraeRegion;
   /** Whether this region's provider is currently offered to DSH. */