dsh-connect-trae 3.7.0 → 3.8.1

package/lib/index.js

@@ -129,9 +129,16 @@ function traeInputModalities(model) {
 * (wire resolution, callable-key filtering) must keep matching the
 * undecorated name; only the model rows handed to DSH (adapter catalog and
 * model discovery) use this decorated name.
+*
+* `withRate` is false for the ENTERPRISE panel. The multiplier is a
+* consumer-pool figure — personal credits per token, read from the consumer
+* directory — and the tenant pool does not bill against it, so printing it in
+* the model picker would price a model the tenant is not charged for. The rate
+* is part of the NAME that reaches DSH, which is why this is a parameter here
+* and not a rendering decision downstream.
 */
-function traeModelDisplayName(model) {
-	return model.creditMultiplier === void 0 ? model.name : `${model.name} · x${model.creditMultiplier.toFixed(2)}`;
+function traeModelDisplayName(model, withRate = true) {
+	return !withRate || model.creditMultiplier === void 0 ? model.name : `${model.name} · x${model.creditMultiplier.toFixed(2)}`;
 }
 /**
 * Whether one model should be offered image input.
@@ -499,24 +506,61 @@ function readManifest(directory) {
 /** Provider route this bundle owns for the domestic (CN) gateway. */
 const TRAE_PROVIDER = "trae";
 /**
+* Provider route this bundle owns for the CN **enterprise (tenant)** gateway.
+*
+* A separate provider id, not a mode switch, because the two pools bill
+* differently: a tenant account (`tob_online`) is served by BOTH gateways with
+* the SAME credential, and only the enterprise one draws on the enterprise
+* pool. Exposing one id would force a per-call guess about who pays.
+*
+* It never falls back to the consumer pool: picking this provider is the user
+* saying "bill the tenant", so a refusal is reported as an error instead of
+* being silently re-run against the personal quota.
+*/
+const TRAE_ENTERPRISE_PROVIDER = "trae-enterprise";
+/**
 * Provider route this bundle owns for the international (trae.ai) gateway.
 * Named `-global` to match the plugin family's convention (`workbuddy-global`);
 * the internal region bucket stays `ai`, which is the gateway/protocol name.
 */
 const TRAE_AI_PROVIDER = "trae-global";
-/** The provider id each region registers as. */
+/** The provider ids one region publishes, in model-picker order. */
+const TRAE_PROVIDER_IDS = {
+	cn: [TRAE_PROVIDER, TRAE_ENTERPRISE_PROVIDER],
+	ai: [TRAE_AI_PROVIDER]
+};
+/** Each region's default (first) provider id. */
 const TRAE_PROVIDERS = {
 	cn: TRAE_PROVIDER,
 	ai: TRAE_AI_PROVIDER
 };
+const TRAE_PROVIDER_ROUTES = {
+	[TRAE_PROVIDER]: "solo",
+	[TRAE_ENTERPRISE_PROVIDER]: "enterprise",
+	[TRAE_AI_PROVIDER]: "solo"
+};
+/** Chat pool a provider id bills against; `undefined` for an unknown id. */
+function routeOfTraeProvider(provider) {
+	return TRAE_PROVIDER_ROUTES[provider];
+}
 /** Human-readable provider names, shown in the DSH model picker. */
 const TRAE_PROVIDER_DISPLAY_NAMES = {
 	cn: "Trae",
 	ai: "Trae Global"
 };
+/** Display name per provider id (the region table above only names the default). */
+const TRAE_PROVIDER_ID_DISPLAY_NAMES = {
+	[TRAE_PROVIDER]: "Trae",
+	[TRAE_ENTERPRISE_PROVIDER]: "Trae 企业版",
+	[TRAE_AI_PROVIDER]: "Trae Global"
+};
+/** Display name of a provider id. */
+function displayNameOfTraeProvider(provider) {
+	return TRAE_PROVIDER_ID_DISPLAY_NAMES[provider] ?? provider;
+}
 /** Region a provider route id belongs to. */
 function regionOfTraeProvider(provider) {
-	for (const [region, id] of Object.entries(TRAE_PROVIDERS)) if (id === provider) return region;
+	for (const [region, ids] of Object.entries(TRAE_PROVIDER_IDS)) if (ids.includes(provider)) return region;
 }
 const TRAE_STREAM_IDLE_TIMEOUT_MS = 3e5;
 const INERT_AUTH = {
@@ -549,10 +593,10 @@ const REQUEST_IMAGE_BUDGETS = {
 * failing the entire provider route (`INVALID_MODEL_CONTEXT`).
 */
 const FALLBACK_CONTEXT_WINDOW = 2e5;
-function toPiModel(info, baseUrl, providerId) {
+function toPiModel(info, baseUrl, providerId, withRate = true) {
 	return {
 		id: info.id,
-		name: traeModelDisplayName(info),
+		name: traeModelDisplayName(info, withRate),
 		api: "openai-completions",
 		provider: providerId,
 		baseUrl,
@@ -770,7 +814,12 @@ function createTraeAdapter(options) {
 	const providerId = options.provider ?? "trae";
 	const providerName = options.displayName ?? "Trae";
 	const generation = options.piAiGeneration ?? piAiRuntimeInfo().generation;
-	const buildModels = () => options.catalog.current().map((info) => toPiModel(info, `${options.shim.baseUrl()}/v1`, providerId));
+	/**
+	* The enterprise provider shows no rate: the multiplier belongs to the
+	* consumer pool, and this provider bills the tenant pool.
+	*/
+	const showRate = options.provider !== TRAE_ENTERPRISE_PROVIDER;
+	const buildModels = () => options.catalog.current().map((info) => toPiModel(info, `${options.shim.baseUrl()}/v1`, providerId, showRate));
 	const provider = {
 		...createProvider({
 			id: providerId,
@@ -806,7 +855,7 @@ function createTraeAdapter(options) {
 		adapter: new PiAiAdapter({
 			profiles: () => profiles,
 			auth: INERT_AUTH,
-			resolveApiKey: async () => options.shim.token(),
+			resolveApiKey: async () => options.secret ?? options.shim.token(),
 			...options.resolveAttachments === void 0 ? {} : { resolveAttachments: options.resolveAttachments }
 		}),
 		invalidate() {
@@ -815,7 +864,113 @@ function createTraeAdapter(options) {
 	};
 }
 //#endregion
+//#region src/region.ts
+/** Every panel, in card tab order. */
+const TRAE_PANELS = [
+	"cn",
+	"enterprise",
+	"ai"
+];
+/** The region whose credential/account pool a panel draws on. */
+function regionOfPanel(panel) {
+	return panel === "ai" ? "ai" : "cn";
+}
+/** The provider id a panel publishes. */
+function providerOfPanel(panel) {
+	if (panel === "enterprise") return "trae-enterprise";
+	return panel === "ai" ? "trae-global" : "trae";
+}
+/** The panel that owns a provider id, or undefined for an unknown id. */
+function panelOfProvider(provider) {
+	return TRAE_PANELS.find((panel) => providerOfPanel(panel) === provider);
+}
+/** Narrow a stored settings key to a panel. */
+function panelOfKey(value) {
+	return TRAE_PANELS.includes(value) ? value : void 0;
+}
+/**
+* Verified gateway bases per region (docs/INTL_SG_EVIDENCE.md §2).
+* The AI gateway is shared by both international installs (Trae desktop and
+* TRAE SOLO); its mchost shards (`api16/api22-normal-alisg.mchost.guru`)
+* answer the same bytes but stay internal — `coresg-normal.trae.ai` is the
+* single stable entry point.
+*/
+const REGION_GATEWAYS = {
+	cn: {
+		chat: "https://trae-api-cn.mchost.guru",
+		remote: "https://solo.trae.cn/api/remote/v1",
+		pay: "https://api.trae.cn"
+	},
+	ai: {
+		chat: "https://coresg-normal.trae.ai",
+		remote: "https://coresg-normal.trae.ai/api/remote/v1",
+		pay: "https://growsg-normal.trae.ai"
+	}
+};
+/**
+* Enterprise (tenant) chat gateway for a CN credential that belongs to a
+* `tob_online` tenant.
+*
+* This is a SECOND chat gateway on the same credential, not a second region:
+* the roster, the credential and the protocol are the same as `cn`, but a
+* tenant account is billed against the enterprise pool when the request goes
+* here. Measured 2026-10-17 on a live `Trae CN` tenant account: the same model
+* served from this host does not move the personal `consumed_amount`, while
+* the same call to `trae-api-cn.mchost.guru` charges it.
+*
+* Two wire differences, both load-bearing:
+*  - the request must carry a per-call `session_id` (the consumer gateway
+*    rejects it with `4001`), and
+*  - a refused call answers **HTTP 200** whose FIRST SSE frame is
+*    `event:error` with `code: 4001` — not an HTTP error status, so the
+*    refusal is only visible if the response body is inspected.
+*/
+const TRAE_ENTERPRISE_HOST = "https://console.enterprise.trae.cn";
+/** Region for an edition label: the international installs belong to `ai`. */
+function regionOfEdition(edition) {
+	return edition === "sg" || edition === "solo-sg" ? "ai" : "cn";
+}
+/**
+* Region from the credential's `userRegion` claim. The desktop storage spells
+* it as an object (`{"region":"CN","_aiRegion":"CN"}`); the app logs also
+* spell the bare value lowercase (`"sg"`). Both are accepted, case-blind.
+*/
+function regionOfUserRegion(value) {
+	const raw = typeof value === "object" && value !== null && !Array.isArray(value) ? value["region"] : value;
+	if (typeof raw !== "string") return void 0;
+	const lowered = raw.trim().toLowerCase();
+	if (lowered === "cn") return "cn";
+	if (lowered === "sg" || lowered === "ai") return "ai";
+}
+/** Region from a credential host (`.trae.ai` → ai, `.trae.cn`/`.trae.com.cn` → cn). */
+function regionOfHost(host) {
+	if (host === void 0) return void 0;
+	const trimmed = host.trim();
+	if (trimmed === "") return void 0;
+	let hostname;
+	try {
+		hostname = new URL(trimmed.startsWith("http") ? trimmed : `https://${trimmed}`).hostname;
+	} catch {
+		return;
+	}
+	if (hostname === "trae.ai" || hostname.endsWith(".trae.ai")) return "ai";
+	if (hostname === "trae.cn" || hostname.endsWith(".trae.cn") || hostname.endsWith(".trae.com.cn")) return "cn";
+}
+/**
+* Region of a credential: the `userRegion` claim wins, the host suffix is the
+* fallback, and the edition label is the last resort. Every level is derived
+* from data the credential itself carries, so no user configuration is needed.
+*/
+function regionOfCredential(credential) {
+	return regionOfUserRegion(credential.userRegion) ?? regionOfHost(credential.host) ?? regionOfEdition(credential.edition);
+}
+//#endregion
 //#region src/status-paths.ts
+/**
+* Node-free constants and types shared by the Host and browser halves.
+* Mirrors the `dsh-workbuddy-connect` status-route pattern so the plugin card
+* stays consistent with that project's external presentation.
+*/
 /** Plugin-owned usage endpoint consumed by its browser half. */
 const TRAE_USAGE_PATH = "/plugins/dsh-connect-trae/usage";
 /** Plugin-owned live model refresh endpoint. */
@@ -882,8 +1037,8 @@ const TRAE_REGIONS = ["cn", "ai"];
 * Address one region's status route. The two regions are separate provider
 * stacks; every card request carries the region whose tab the user is on.
 */
-function withTraeRegion(path, region) {
-	return `${path}?${TRAE_REGION_PARAM}=${region}`;
+function withTraeRegion(path, panel) {
+	return `${path}?${TRAE_REGION_PARAM}=${panel}`;
 }
 /**
 * Read the region parameter off a status-route URL. Absent means the domestic
@@ -894,7 +1049,7 @@ function regionOfTraeStatusUrl(url) {
 	const at = url.indexOf("?");
 	const value = at === -1 ? null : new URLSearchParams(url.slice(at + 1)).get(TRAE_REGION_PARAM);
 	if (value === null || value === "") return "cn";
-	return TRAE_REGIONS.includes(value) ? value : void 0;
+	return TRAE_PANELS.includes(value) ? value : void 0;
 }
 /**
 * Peel ONE `{get(): T}` live reference, the shape DSH 0.1.7 delivers a
@@ -971,11 +1126,11 @@ function followAppLoginEnabled(configured) {
 * region's picks. Tolerates any stored shape (absent, non-object) by starting
 * from an empty document.
 */
-function nextRegionSlots(regions, region, slot) {
+function nextRegionSlots(regions, panel, slot) {
 	const unwrapped = unwrapVolatileDeep(regions);
 	return {
 		...typeof unwrapped === "object" && unwrapped !== null && !Array.isArray(unwrapped) ? unwrapped : {},
-		[region]: slot
+		[panel]: slot
 	};
 }
 /**
@@ -1000,8 +1155,8 @@ function regionsMapOf(value) {
 	return record;
 }
 /** One region's stored slot as a plain object; any other shape reads as empty. */
-function regionSlotOf(value, region) {
-	const slot = unwrapVolatile(regionsMapOf(value)[region]);
+function regionSlotOf(value, panel) {
+	const slot = unwrapVolatile(regionsMapOf(value)[panel]);
 	return typeof slot === "object" && slot !== null && !Array.isArray(slot) ? slot : {};
 }
 /**
@@ -1014,8 +1169,10 @@ function regionSlotOf(value, region) {
 * `value` may be the whole settings section or the `regions` map (see
 * {@link regionsMapOf}).
 */
-function regionEnabledOf(value, region) {
-	return regionSlotOf(value, region)["enabled"] !== false;
+function regionEnabledOf(value, panel) {
+	const stored = regionSlotOf(value, panel)["enabled"];
+	if (typeof stored === "boolean") return stored;
+	return panel !== "enterprise";
 }
 /**
 * Build the next `regions` settings value for a provider on/off toggle. ONLY
@@ -1033,9 +1190,9 @@ function regionEnabledOf(value, region) {
 * value is always the `regions` map, i.e. exactly what `settingsScope.set(
 * 'regions', ...)` needs.
 */
-function nextRegionEnabled(value, region, enabled) {
-	return nextRegionSlots(regionsMapOf(value), region, {
-		...regionSlotOf(value, region),
+function nextRegionEnabled(value, panel, enabled) {
+	return nextRegionSlots(regionsMapOf(value), panel, {
+		...regionSlotOf(value, panel),
 		enabled
 	});
 }
@@ -1052,8 +1209,8 @@ function nextRegionEnabled(value, region, enabled) {
 * `value` may be the whole settings section or the `regions` map (see
 * {@link regionsMapOf}).
 */
-function regionCreditPositionOf(value, region) {
-	return regionSlotOf(value, region)["creditPosition"] === "stats" ? "stats" : "composer";
+function regionCreditPositionOf(value, panel) {
+	return regionSlotOf(value, panel)["creditPosition"] === "stats" ? "stats" : "composer";
 }
 /**
 * Build the next `regions` settings value for one region's credit seat.
@@ -1066,9 +1223,9 @@ function regionCreditPositionOf(value, region) {
 * value is always the `regions` map, i.e. exactly what `settingsScope.set(
 * 'regions', ...)` needs.
 */
-function nextRegionCreditPosition(value, region, position) {
-	return nextRegionSlots(regionsMapOf(value), region, {
-		...regionSlotOf(value, region),
+function nextRegionCreditPosition(value, panel, position) {
+	return nextRegionSlots(regionsMapOf(value), panel, {
+		...regionSlotOf(value, panel),
 		creditPosition: position
 	});
 }
@@ -1564,65 +1721,6 @@ function traeCliCandidates(platform = process.platform, home = homedir(), env =
 	return result;
 }
 //#endregion
-//#region src/region.ts
-/**
-* Verified gateway bases per region (docs/INTL_SG_EVIDENCE.md §2).
-* The AI gateway is shared by both international installs (Trae desktop and
-* TRAE SOLO); its mchost shards (`api16/api22-normal-alisg.mchost.guru`)
-* answer the same bytes but stay internal — `coresg-normal.trae.ai` is the
-* single stable entry point.
-*/
-const REGION_GATEWAYS = {
-	cn: {
-		chat: "https://trae-api-cn.mchost.guru",
-		remote: "https://solo.trae.cn/api/remote/v1",
-		pay: "https://api.trae.cn"
-	},
-	ai: {
-		chat: "https://coresg-normal.trae.ai",
-		remote: "https://coresg-normal.trae.ai/api/remote/v1",
-		pay: "https://growsg-normal.trae.ai"
-	}
-};
-/** Region for an edition label: the international installs belong to `ai`. */
-function regionOfEdition(edition) {
-	return edition === "sg" || edition === "solo-sg" ? "ai" : "cn";
-}
-/**
-* Region from the credential's `userRegion` claim. The desktop storage spells
-* it as an object (`{"region":"CN","_aiRegion":"CN"}`); the app logs also
-* spell the bare value lowercase (`"sg"`). Both are accepted, case-blind.
-*/
-function regionOfUserRegion(value) {
-	const raw = typeof value === "object" && value !== null && !Array.isArray(value) ? value["region"] : value;
-	if (typeof raw !== "string") return void 0;
-	const lowered = raw.trim().toLowerCase();
-	if (lowered === "cn") return "cn";
-	if (lowered === "sg" || lowered === "ai") return "ai";
-}
-/** Region from a credential host (`.trae.ai` → ai, `.trae.cn`/`.trae.com.cn` → cn). */
-function regionOfHost(host) {
-	if (host === void 0) return void 0;
-	const trimmed = host.trim();
-	if (trimmed === "") return void 0;
-	let hostname;
-	try {
-		hostname = new URL(trimmed.startsWith("http") ? trimmed : `https://${trimmed}`).hostname;
-	} catch {
-		return;
-	}
-	if (hostname === "trae.ai" || hostname.endsWith(".trae.ai")) return "ai";
-	if (hostname === "trae.cn" || hostname.endsWith(".trae.cn") || hostname.endsWith(".trae.com.cn")) return "cn";
-}
-/**
-* Region of a credential: the `userRegion` claim wins, the host suffix is the
-* fallback, and the edition label is the last resort. Every level is derived
-* from data the credential itself carries, so no user configuration is needed.
-*/
-function regionOfCredential(credential) {
-	return regionOfUserRegion(credential.userRegion) ?? regionOfHost(credential.host) ?? regionOfEdition(credential.edition);
-}
-//#endregion
 //#region src/auth.ts
 /** Host used for CLI tokens, which carry no host claim of their own. */
 const CLI_DEFAULT_HOST = "https://api.trae.cn";
@@ -1688,12 +1786,15 @@ function normalizeTraeCredential(raw, edition, source) {
 	const refreshExpiresAtMs = timeToMs(value["refreshExpiredAt"] ?? value["refreshExpiresAt"]);
 	const refreshToken = optionalString(value["refreshToken"]);
 	const userRegion = userRegionOf(value["userRegion"]);
-	const accountName = optionalString((typeof value["account"] === "object" && value["account"] !== null && !Array.isArray(value["account"]) ? value["account"] : void 0)?.["username"]);
+	const account = typeof value["account"] === "object" && value["account"] !== null && !Array.isArray(value["account"]) ? value["account"] : void 0;
+	const accountName = optionalString(account?.["username"]);
+	const tenantId = optionalString(account?.["tenant_id"]) ?? (typeof account?.["tenant_id"] === "number" ? String(account["tenant_id"]) : void 0);
 	return {
 		accessToken,
 		...refreshToken === void 0 ? {} : { refreshToken },
 		userId: optionalString(value["userId"]) ?? "",
 		...accountName === void 0 ? {} : { accountName },
+		...tenantId === void 0 ? {} : { tenantId },
 		host: optionalString(value["host"]) ?? "",
 		...userRegion === void 0 ? {} : { userRegion },
 		expiresAtMs,
@@ -1702,6 +1803,18 @@ function normalizeTraeCredential(raw, edition, source) {
 		source
 	};
 }
+/**
+* Whether this account belongs to a Trae tenant, i.e. may bill the enterprise
+* pool.
+*
+* Evidence (2026-10-17, live): the tenant's own account carries
+* `account.tenant_id` / `tenant_name` and `scope: 'saas'`; the personal SOLO
+* account carries neither and reports `scope: 'marscode'`. Only the tenant one
+* streams on the enterprise gateway — the other answers `4019` risk control.
+*/
+function isEnterpriseAccount(credential) {
+	return credential?.tenantId !== void 0 && credential.tenantId.trim() !== "";
+}
 function traeAccountId(credential) {
 	const stable = `${credential.edition}\0${credential.userId || credential.accountName || "unknown"}`;
 	return createHash("sha256").update(stable).digest("hex").slice(0, 24);
@@ -1718,7 +1831,10 @@ function credentialOfStored(stored) {
 		userId: record["userId"],
 		host: record["host"],
 		userRegion: record["userRegion"],
-		account: record["accountName"] === void 0 ? void 0 : { username: record["accountName"] },
+		account: record["accountName"] === void 0 && record["tenantId"] === void 0 ? void 0 : {
+			...record["accountName"] === void 0 ? {} : { username: record["accountName"] },
+			...record["tenantId"] === void 0 ? {} : { tenant_id: record["tenantId"] }
+		},
 		expiredAt: record["expiresAtMs"],
 		refreshExpiredAt: record["refreshExpiredAtMs"]
 	}, edition, "dsh");
@@ -1773,6 +1889,8 @@ var TraeCredentialStore = class {
 	edition;
 	accountId;
 	region;
+	requireTenant;
+	hideTenantAccounts;
 	ownPathExplicit;
 	legacyOwnPath;
 	legacyOwnPathExplicit;
@@ -1784,6 +1902,8 @@ var TraeCredentialStore = class {
 		this.edition = options.edition ?? "auto";
 		this.accountId = options.accountId;
 		this.region = options.region;
+		this.requireTenant = options.requireTenant === true;
+		this.hideTenantAccounts = options.hideTenantAccounts === true;
 		this.ownPathExplicit = options.ownPath;
 		this.legacyOwnPath = options.legacyOwnPath ?? legacyTraeOwnAuthPath();
 		this.legacyOwnPathExplicit = options.legacyOwnPath;
@@ -1867,7 +1987,9 @@ var TraeCredentialStore = class {
 	* the plugin performed is never discarded by this preference.
 	*/
 	preferred(credentials) {
-		return credentials.find((credential) => credential.source === "desktop") ?? credentials[0];
+		const eligible = this.requireTenant ? credentials.filter((credential) => isEnterpriseAccount(credential)) : credentials;
+		if (eligible.length === 0) return void 0;
+		return eligible.find((credential) => credential.source === "desktop") ?? eligible[0];
 	}
 	/**
 	* The account the Trae app is signed in to right now, when that differs from
@@ -1891,6 +2013,7 @@ var TraeCredentialStore = class {
 			id: liveId,
 			accountName: live.accountName ?? (live.userId || `${live.edition} account`),
 			edition: live.edition,
+			enterprise: isEnterpriseAccount(live),
 			region: regionOfCredential(live),
 			source: live.source,
 			tokenExpiresAtMs: live.expiresAtMs,
@@ -1898,25 +2021,94 @@ var TraeCredentialStore = class {
 			selected: false
 		};
 	}
+	/**
+	* The accounts this store is willing to OFFER.
+	*
+	* Scoped to who this store may bill:
+	*   - a consumer store withholds tenant accounts (the enterprise pool is a
+	*     separate tab and a separate billing decision), and
+	*   - a tenant store withholds personal accounts (they cannot bill that
+	*     pool; the tenant gateway answers their chat with 4019).
+	*
+	* Either filter backs off when it would hide EVERYTHING, so a machine whose
+	* only login is on the other side keeps working instead of reading as
+	* "signed out".
+	*/
+	offered(discovered) {
+		const eligible = this.requireTenant ? discovered.filter((credential) => isEnterpriseAccount(credential)) : this.hideTenantAccounts ? discovered.filter((credential) => !isEnterpriseAccount(credential)) : discovered;
+		return eligible.length > 0 ? eligible : discovered;
+	}
 	async accounts() {
-		const credentials = await this.readAll();
-		const selectedExists = this.accountId !== void 0 && credentials.some((credential) => traeAccountId(credential) === this.accountId);
-		const defaultSelected = this.preferred(credentials);
+		const discovered = await this.readAll();
+		const offered = this.offered(discovered);
+		const inUse = this.inUse(discovered, offered);
+		/**
+		* Never hide the account we are actually billing.
+		*
+		* An explicit binding outranks the display filter (`inUse` honours it even
+		* when the offered list withholds it), and a list whose active row is
+		* invisible is worse than no list: the card's "save the selected account"
+		* press reads `selected`, so a hidden binding would be rewritten to whichever
+		* account merely happened to be DISPLAYED — silently moving the user's
+		* billing to an account they never chose. Re-appending it costs one extra
+		* row and makes the card tell the truth.
+		*/
+		const credentials = inUse !== void 0 && !offered.includes(inUse) ? [...offered, inUse] : offered;
+		const inUseId = inUse === void 0 ? void 0 : traeAccountId(inUse);
 		return credentials.map((credential) => ({
 			id: traeAccountId(credential),
 			accountName: credential.accountName ?? (credential.userId || `${credential.edition} account`),
 			edition: credential.edition,
+			enterprise: isEnterpriseAccount(credential),
 			region: regionOfCredential(credential),
 			source: credential.source,
 			tokenExpiresAtMs: credential.expiresAtMs,
 			...credential.refreshExpiresAtMs === void 0 ? {} : { refreshExpiresAtMs: credential.refreshExpiresAtMs },
-			selected: selectedExists ? traeAccountId(credential) === this.accountId : credential === defaultSelected
+			selected: inUseId !== void 0 && traeAccountId(credential) === inUseId
 		}));
 	}
+	/**
+	* The credential this store bills, given every credential it can see.
+	*
+	* This is the ONE resolution rule, and it exists so that `current()` and
+	* `accounts()` cannot disagree: `current()` applies it to `readAll()`, and
+	* `accounts()` applies the SAME verdict to decide which row reads as
+	* `selected`. Deriving that flag independently is exactly how the two drifted
+	* apart — and a card that marks a different account than the one the chat
+	* bills is worse than no card at all, because a press that "saves the
+	* selected account" then rewrites the binding to the account that was only
+	* ever DISPLAYED.
+	*
+	* Order of business:
+	*   1. No binding — the detected default (`preferred`) is in use, chosen from
+	*      the OFFERED list rather than from every login on the machine. A
+	*      consumer store that withholds tenant accounts must not default its
+	*      billing to the tenant pool merely because that login sorts first;
+	*      withholding is a billing decision, not a display detail.
+	*   2. A binding — honour it verbatim, even when the OFFERED list hides that
+	*      account. Resolution is never scoped by `hideTenantAccounts`: the user's
+	*      explicit choice outranks a display filter.
+	*   3. A tenant-scoped store cannot bill through a personal account, and the
+	*      tenant gateway only reveals that at the first chat (`4019`). Honour the
+	*      binding when it is eligible; otherwise fall back to the preferred
+	*      tenant account, which is the one the user's enterprise tab is meant to
+	*      use.
+	*   4. A saved account can disappear when Trae replaces its local login. Do
+	*      NOT silently fall back to a different account: that would bill a
+	*      different account than the one the user explicitly selected. Return
+	*      undefined so the caller surfaces "no signed-in account" and the user
+	*      can re-select, instead of the plugin quietly switching accounts behind
+	*      their back.
+	*/
+	inUse(discovered, offered) {
+		if (this.accountId === void 0) return this.preferred(offered);
+		const selected = discovered.find((credential) => traeAccountId(credential) === this.accountId);
+		if (this.requireTenant && !isEnterpriseAccount(selected)) return this.preferred(offered);
+		return selected;
+	}
 	async current() {
-		const credentials = await this.readAll();
-		if (this.accountId === void 0) return this.preferred(credentials);
-		return credentials.find((credential) => traeAccountId(credential) === this.accountId);
+		const discovered = await this.readAll();
+		return this.inUse(discovered, this.offered(discovered));
 	}
 	/**
 	* The stored credential of one specific account, without changing which
@@ -2664,7 +2856,19 @@ function readBody(req) {
 	});
 }
 function createTraeShim(options) {
-	const secret = randomBytes(32).toString("base64url");
+	/**
+	* Resolve the route table. The single-client form becomes a one-entry table
+	* labelled `solo`, so existing call sites and tests keep one code path.
+	*/
+	const routes = options.routes !== void 0 ? options.routes.map((route) => ({
+		...route,
+		secret: randomBytes(32).toString("base64url")
+	})) : [{
+		label: "solo",
+		client: options.client,
+		secret: randomBytes(32).toString("base64url")
+	}];
+	const secret = routes[0]?.secret ?? randomBytes(32).toString("base64url");
 	const sockets = /* @__PURE__ */ new Set();
 	const server = createServer((req, res) => {
 		handle(req, res);
@@ -2678,18 +2882,22 @@ function createTraeShim(options) {
 		server.once("error", reject);
 	});
 	server.listen(0, "127.0.0.1");
-	function bearerOk(req) {
+	/** Route whose secret matches the request's bearer, or `undefined`. */
+	function routeOf(req) {
 		const match = typeof req.headers.authorization === "string" ? /^Bearer\s+(.+)$/i.exec(req.headers.authorization.trim()) : null;
-		if (match === null) return false;
+		if (match === null) return void 0;
 		const actual = Buffer.from(match[1] ?? "");
-		const expected = Buffer.from(secret);
-		return actual.length === expected.length && timingSafeEqual(actual, expected);
+		for (const route of routes) {
+			const expected = Buffer.from(route.secret);
+			if (actual.length === expected.length && timingSafeEqual(actual, expected)) return route;
+		}
 	}
 	async function handle(req, res) {
 		try {
 			if (!hostIsLoopback(req.headers.host)) return writeError(res, 403, "host_not_allowed", "Host must be loopback");
 			if (!originIsLoopback(req.headers.origin)) return writeError(res, 403, "origin_not_allowed", "Origin must be loopback");
-			if (!bearerOk(req)) return writeError(res, 401, "unauthorized", "Missing or invalid bearer");
+			const route = routeOf(req);
+			if (route === void 0) return writeError(res, 401, "unauthorized", "Missing or invalid bearer");
 			const url = req.url ?? "/";
 			if (req.method === "GET" && (url === "/healthz" || url === "/healthz/")) return writeJson(res, 200, { ok: true });
 			if (req.method === "GET" && (url === "/v1/models" || url === "/v1/models/")) return writeJson(res, 200, {
@@ -2723,7 +2931,7 @@ function createTraeShim(options) {
 				const abort = () => controller.abort();
 				req.once("aborted", abort);
 				req.socket.once("close", abort);
-				const result = await options.client.chatStream(raw, controller.signal);
+				const result = await route.client.chatStream(raw, controller.signal);
 				if (!result.ok) return writeError(res, STATUS_BY_KIND[result.kind], result.kind, result.message);
 				res.writeHead(200, {
 					"Content-Type": "text/event-stream",
@@ -2759,6 +2967,12 @@ function createTraeShim(options) {
 			return `http://127.0.0.1:${address.port}`;
 		},
 		token: () => secret,
+		tokenOf(label) {
+			if (label === void 0) return secret;
+			const route = routes.find((entry) => entry.label === label);
+			if (route === void 0) throw new Error(`trae shim has no route named ${label}`);
+			return route.secret;
+		},
 		close: () => new Promise((resolve, reject) => {
 			for (const socket of sockets) socket.destroy();
 			server.close((error) => error === void 0 ? resolve() : reject(error));
@@ -3107,7 +3321,7 @@ var TraeSoloUpstreamClient = class {
 	async fetchModels(signal) {
 		const [credential, identity] = await Promise.all([this.options.credential(), this.options.identity()]);
 		const region = regionOfCredential(credential);
-		const base = this.options.baseUrl ?? REGION_GATEWAYS[region].chat;
+		const base = this.options.baseUrl ?? this.chatBaseOf(credential);
 		const headers = {
 			...buildTraeCnHeaders(credential, identity),
 			Accept: "application/json"
@@ -3193,7 +3407,19 @@ var TraeSoloUpstreamClient = class {
 		}
 		const [credential, identity] = await Promise.all([this.options.credential(), this.options.identity()]);
 		const headers = buildTraeCnHeaders(credential, identity);
-		const base = this.options.baseUrl ?? REGION_GATEWAYS[regionOfCredential(credential)].chat;
+		const base = this.options.baseUrl ?? this.chatBaseOf(credential);
+		if (this.options.route === "enterprise") try {
+			const parsed = JSON.parse(prepared);
+			if (parsed["session_id"] === void 0) parsed["session_id"] = randomUUID();
+			prepared = JSON.stringify(parsed);
+		} catch {
+			return {
+				ok: false,
+				status: 400,
+				kind: "client",
+				message: "invalid JSON request"
+			};
+		}
 		let response;
 		try {
 			response = await this.fetchImpl(traeEndpoint(base, TRAE_SOLO_CHAT_PATH), {
@@ -3210,10 +3436,36 @@ var TraeSoloUpstreamClient = class {
 				message: `transport error: ${String(error)}`
 			};
 		}
-		if (response.ok) return {
-			ok: true,
-			response
-		};
+		if (response.ok) {
+			/**
+			* The enterprise gateway reports a refusal as **HTTP 200** whose first
+			* SSE frame is `event:error`. Handing that stream back as a success would
+			* surface the refusal as an empty assistant turn, so it is converted to
+			* a real error here — the same shape the consumer gateway uses for its
+			* non-2xx failures.
+			*/
+			if (this.options.route !== "enterprise") return {
+				ok: true,
+				response
+			};
+			const classified = await classifyEnterpriseResponse(response);
+			if ("response" in classified) return {
+				ok: true,
+				response: classified.response
+			};
+			this.options.log?.("dsh-connect-trae: enterprise llm_utils_chat refused", {
+				status: 200,
+				model: JSON.parse(prepared)["model"],
+				configName: JSON.parse(prepared)["config_name"],
+				body: classified.refusal
+			});
+			return {
+				ok: false,
+				status: 200,
+				kind: "client",
+				message: classified.refusal
+			};
+		}
 		const text = (await response.text()).slice(0, 1024);
 		this.options.log?.("dsh-connect-trae: llm_utils_chat rejected", {
 			status: response.status,
@@ -3229,7 +3481,77 @@ var TraeSoloUpstreamClient = class {
 			message: text || `Trae SOLO returned HTTP ${response.status}`
 		};
 	}
+	/** Chat gateway for this client's pinned route. */
+	chatBaseOf(credential) {
+		if (this.options.route === "enterprise") return TRAE_ENTERPRISE_HOST;
+		return REGION_GATEWAYS[regionOfCredential(credential)].chat;
+	}
 };
+/**
+* Return the refusal frame of an enterprise 200, or `undefined` when the stream
+* is a real answer.
+*
+* Reads (and re-plays) only the first SSE frame: a refusal is emitted before
+* any output token, so peeking that far is enough to classify the call, and
+* the stream is rebuilt so a caller that got `undefined` still sees every byte.
+*/
+function concatStream(head, reader) {
+	return new ReadableStream({ start(controller) {
+		if (head !== "") controller.enqueue(new TextEncoder().encode(head));
+		const drain = () => {
+			reader.read().then((result) => {
+				if (result.done) {
+					controller.close();
+					return;
+				}
+				controller.enqueue(result.value);
+				drain();
+			}).catch((error) => controller.error(error));
+		};
+		drain();
+	} });
+}
+/**
+* Classify an enterprise 200.
+*
+* Returns `{ refusal }` when the first SSE frame is `event:error`, otherwise
+* `{ response }` carrying a REBUILT response whose body re-emits every byte —
+* including the peeked frame. A refusal is emitted before any output token, so
+* peeking one frame is enough to classify the call.
+*
+* The response is rebuilt rather than patched: the original's body has been
+* partially read, so its `text()`/`json()` would keep failing with "Body has
+* already been read" even after `body` is swapped.
+*/
+async function classifyEnterpriseResponse(response) {
+	const body = response.body;
+	if (body === null) return { response };
+	const reader = body.getReader();
+	const decoder = new TextDecoder();
+	let head = "";
+	try {
+		while (!head.includes("\n\n")) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			head += decoder.decode(value, { stream: true });
+			if (head.length > 8192) break;
+		}
+	} catch {
+		return { response };
+	}
+	const frame = head.split("\n\n")[0] ?? "";
+	const event = /^event:(\S+)/m.exec(frame)?.[1];
+	const data = frame.split("\n").find((line) => line.startsWith("data:"))?.slice(5).trim() ?? "";
+	if (event !== "error") return { response: new Response(concatStream(head, reader), {
+		status: response.status,
+		statusText: response.statusText,
+		headers: response.headers
+	}) };
+	try {
+		await reader.cancel();
+	} catch {}
+	return { refusal: data === "" ? "enterprise gateway refused the request" : data };
+}
 //#endregion
 //#region src/sse.ts
 /** Incremental SSE decoder supporting CRLF, chunk splits and multi-line data. */
@@ -3370,6 +3692,13 @@ function decodeTraeEvent(event) {
 *    two different statements, and a user hits the second without touching the
 *    first (issue #33).
 *  - `4023` — the model name is unknown on the route that was asked.
+*  - `4222` — the ENTERPRISE tenant's allowance is exhausted. Measured
+*    2026-10-17 on a live tenant account whose enterprise credit ran out: the
+*    gateway answered HTTP 200 with `{"code":4222,"message":""}` for a model
+*    that streamed normally moments earlier (and still streams on the consumer
+*    gateway). Like `4008` it is a billing fact rather than a config one, but
+*    it is specific to the tenant pool -- the consumer balance is unaffected,
+*    which is why it must not be folded into the `4008` reading.
 *  - `2001` — the upstream has not published its function config for the route
 *    that was asked. Evidence is issue #39: on a live CN account every SOLO
 *    function's `get_detail_param` answered HTTP 200 with `config_info_list:
@@ -3387,7 +3716,8 @@ const TRAE_ERROR_HINTS = {
 	4001: "Trae does not serve this model under the SOLO function the request used (config_name rejected)",
 	4008: "Trae reports the account's SOLO quota is exhausted for this request",
 	4011: "Trae throttled the SOLO channel for this account (a rate limit, not the credit balance)",
-	4023: "Trae does not recognise this model name on the SOLO route that was asked"
+	4023: "Trae does not recognise this model name on the SOLO route that was asked",
+	4222: "The enterprise tenant allowance is exhausted (tenant spend is separate from the personal credit balance; the consumer gateway still has its own)"
 };
 /** `extra` is a JSON *string* on the wire; unwrap it to read `plan`. */
 function traeErrorPlan(extra) {
@@ -3717,14 +4047,29 @@ var TraeSoloBridge = class {
 		try {
 			const input = JSON.parse(bodyJson);
 			if (typeof input["model"] === "string" && input["model"] !== "") model = input["model"];
-			const entry = this.catalog?.current().find((item) => item.id === model);
+			const entryKey = model.trim().toLowerCase();
+			const entry = this.catalog?.current().find((item) => item.id === model || item.id.trim().toLowerCase() === entryKey);
 			const fromCatalog = entry?.wireConfigName === void 0 ? void 0 : {
 				configName: entry.wireConfigName,
 				...entry.wireFunction === void 0 ? {} : { function: entry.wireFunction }
 			};
 			const fromResolver = this.wireResolver?.(model) ?? this.wireResolver?.(entry?.name ?? "");
 			const target = fromCatalog ?? fromResolver;
-			const wireModel = target?.configName ?? model;
+			/**
+			* Last line of defence: the discovered row's own id.
+			*
+			* For models whose directory id IS the gateway `config_name` the merge
+			* deliberately emits no `wireConfigName` (there is nothing to map), so a
+			* requested id that differs only by case has neither mapping source —
+			* and the row we just matched case-blindly is exactly the canonical
+			* spelling. Sending it is what a correct mapping would have produced.
+			*
+			* Deliberately NOT derived from the row's `name`: the rosters spell most
+			* ids in the opposite case of their display names (`glm-5.3` vs
+			* `GLM-5.3`) and the gateway accepts the LOWERCASE id for those — a
+			* name-derived rewrite answered `4001` for 4 of 5 probed models.
+			*/
+			const wireModel = target?.configName ?? entry?.id ?? model;
 			const wireFunction = target?.function ?? entry?.wireFunction;
 			if (wireModel !== input["model"]) input["model"] = wireModel;
 			if (wireFunction !== void 0 && input["function"] !== wireFunction) input["function"] = wireFunction;
@@ -5469,16 +5814,26 @@ function toCheckin(status) {
 	};
 }
 /**
-* Assemble one region's card document. `region` is the tab the card is on; the
-* region-scoped store already answers with only that region's accounts, so the
+* Assemble one region's card document. `panel` is the tab the card is on; the
+* panel-scoped store already answers with only that region's accounts, so the
 * document's model slots and account list are that region's by construction.
 * Sign-in state is read-only; credit is a live billing answer whose failure
 * degrades to `creditsError` rather than failing the whole document.
 */
-async function traeWebUsage(deps, region) {
-	const store = deps.store(region);
-	const enabled = deps.regionEnabled(region);
-	const accounts = await store.accounts();
+async function traeWebUsage(deps, panel) {
+	const store = deps.store(panel);
+	const enabled = deps.regionEnabled(panel);
+	/**
+	* Accounts this panel may actually bill.
+	*
+	* Filtered ONCE, at the source, because this list is spliced into every
+	* response shape below (`signed-out`, `signed-in`, the credits route). The
+	* enterprise pool can only bill a tenant account, and the tenant gateway does
+	* not make that obvious: it answers a personal token's DIRECTORY read in
+	* full and only refuses its chat (`4019`). Listing a personal account there
+	* would offer a binding that cannot work.
+	*/
+	const accounts = (await store.accounts()).filter((account) => panel !== "enterprise" || account.enterprise);
 	if ((await store.status()).state !== "signed-in") {
 		const { failures } = await store.diagnose();
 		return {
@@ -5507,26 +5862,26 @@ async function traeWebUsage(deps, region) {
 	}
 	let appLogin;
 	try {
-		appLogin = await deps.liveLogin?.(region);
+		appLogin = await deps.liveLogin?.(panel);
 	} catch {}
 	const account = {
 		accountId: accounts.find((item) => item.selected)?.id ?? "",
 		accountName: credential.accountName ?? credential.userId,
 		tokenExpiresAtMs: credential.expiresAtMs,
 		...credential.refreshExpiresAtMs === void 0 ? {} : { refreshExpiresAtMs: credential.refreshExpiresAtMs },
-		region,
+		region: regionOfPanel(panel),
 		enabled,
 		accounts,
 		...appLogin === void 0 ? {} : { appLogin },
-		models: deps.displayModels(region).map((model) => ({
+		models: deps.displayModels(panel).map((model) => ({
 			...model,
 			...model.input === void 0 ? {} : { input: [...model.input] }
 		})),
-		enabledModelIds: [...deps.enabledModelIds(region)],
-		...deps.rawDiagnostic === void 0 ? {} : { rawChat: deps.rawDiagnostic(region) }
+		enabledModelIds: [...deps.enabledModelIds(panel)],
+		...deps.rawDiagnostic === void 0 ? {} : { rawChat: deps.rawDiagnostic(panel) }
 	};
-	const client = deps.client(region);
-	if (region === "ai") try {
+	const client = deps.client(panel);
+	if (regionOfPanel(panel) === "ai") try {
 		const payStatus = await client.payStatus();
 		return {
 			status: "signed-in",
@@ -5540,9 +5895,25 @@ async function traeWebUsage(deps, region) {
 			payStatusError: safeMessage(error)
 		};
 	}
+	/**
+	* The enterprise panel shows NO credit figure, deliberately.
+	*
+	* `client.snapshot()` reads the CONSUMER packs, and that is the personal
+	* balance — not what a tenant turn spends. There is no enterprise counterpart
+	* to read: every tenant quota endpoint answers 404 (probed 2026-10-17), and
+	* the tenant console at console.enterprise.trae.cn is the only place the
+	* enterprise balance exists. Showing the personal number under an enterprise
+	* heading would be actively misleading, so the panel reports the absence
+	* explicitly and the card explains where the real figure lives.
+	*/
+	if (panel === "enterprise") return {
+		status: "signed-in",
+		...account,
+		creditsUnavailable: "enterprise"
+	};
 	const [snapshotResult, checkinResult] = await Promise.allSettled([client.snapshot(), client.checkinStatus()]);
 	const credits = snapshotResult.status === "fulfilled" ? toCredits(snapshotResult.value) : void 0;
-	const alternatives = credits !== void 0 && credits.workAvailable <= 0 && credits.generalAvailable <= 0 ? await creditAlternatives(deps, region, accounts) : void 0;
+	const alternatives = credits !== void 0 && credits.workAvailable <= 0 && credits.generalAvailable <= 0 ? await creditAlternatives(deps, panel, accounts) : void 0;
 	return {
 		status: "signed-in",
 		...account,
@@ -5563,13 +5934,13 @@ async function traeWebUsage(deps, region) {
 * problem to explain. The list is capped so a machine with many stale
 * credentials cannot turn one status read into a burst of upstream calls.
 */
-async function creditAlternatives(deps, region, accounts) {
+async function creditAlternatives(deps, panel, accounts) {
 	if (deps.creditsOfAccount === void 0) return void 0;
-	const candidates = accounts.filter((account) => !account.selected && account.region === region).slice(0, TRAE_CREDIT_ALTERNATIVE_LIMIT);
+	const candidates = accounts.filter((account) => !account.selected && account.region === regionOfPanel(panel)).filter((account) => panel !== "enterprise" || account.enterprise).slice(0, TRAE_CREDIT_ALTERNATIVE_LIMIT);
 	if (candidates.length === 0) return void 0;
 	const alternatives = (await Promise.all(candidates.map(async (account) => {
 		try {
-			const credits = await deps.creditsOfAccount(region, account.id);
+			const credits = await deps.creditsOfAccount(panel, account.id);
 			if (credits === void 0) return void 0;
 			if (credits.workAvailable <= 0 && credits.generalAvailable <= 0) return void 0;
 			return {
@@ -5586,11 +5957,11 @@ async function creditAlternatives(deps, region, accounts) {
 	return alternatives.length === 0 ? void 0 : alternatives;
 }
 /**
-* The region a request addresses, or a 400 answer. Absent parameter means the
+* The panel a request addresses, or a 400 answer. Absent parameter means the
 * domestic tab; an unknown value is refused rather than guessed.
 */
 /**
-* The general balance of every account in one region.
+* The general balance of every account in one panel.
 *
 * One upstream read per account — the same call `creditsOfAccount` already
 * makes for the exhausted-balance alternatives, widened to every account and to
@@ -5601,16 +5972,16 @@ async function creditAlternatives(deps, region, accounts) {
 * figure: the table lists how many accounts exist even when one cannot be
 * quoted, rather than dropping it and making the switch unavailable.
 */
-async function traeAccountCredits(deps, region) {
-	const accounts = (await deps.store(region).accounts()).filter((account) => account.region === region);
+async function traeAccountCredits(deps, panel) {
+	const accounts = (await deps.store(panel).accounts()).filter((account) => account.region === regionOfPanel(panel)).filter((account) => panel !== "enterprise" || account.enterprise);
 	if (accounts.length === 0) return [];
 	return Promise.all(accounts.map(async (account) => {
 		let generalAvailable;
 		if (account.selected) try {
-			generalAvailable = toCredits(await deps.client(region).snapshot()).generalAvailable;
+			generalAvailable = toCredits(await deps.client(panel).snapshot()).generalAvailable;
 		} catch {}
 		else if (deps.creditsOfAccount !== void 0) try {
-			generalAvailable = (await deps.creditsOfAccount(region, account.id))?.generalAvailable;
+			generalAvailable = (await deps.creditsOfAccount(panel, account.id))?.generalAvailable;
 		} catch {}
 		return {
 			id: account.id,
@@ -5621,12 +5992,12 @@ async function traeAccountCredits(deps, region) {
 	}));
 }
 function requestRegion(req, res) {
-	const region = regionOfTraeStatusUrl(req.url ?? "/");
-	if (region === void 0) {
+	const panel = regionOfTraeStatusUrl(req.url ?? "/");
+	if (panel === void 0) {
 		json(res, 400, { error: "unknown region" });
 		return;
 	}
-	return region;
+	return panel;
 }
 /** Mount the GET usage route on an optional webServer context. */
 function registerTraeUsageRoute(ctx, deps) {
@@ -5643,17 +6014,17 @@ function registerTraeUsageRoute(ctx, deps) {
 					json(res, 403, { error: "origin-not-trusted" });
 					return;
 				}
-				const region = requestRegion(req, res);
-				if (region === void 0) return;
+				const panel = requestRegion(req, res);
+				if (panel === void 0) return;
 				try {
-					json(res, 200, await traeWebUsage(deps, region));
+					json(res, 200, await traeWebUsage(deps, panel));
 				} catch (error) {
 					json(res, 500, { error: safeMessage(error) });
 				}
 			}
 		});
 		/**
-		* General balance of every account in the region — read only when the
+		* General balance of every account in the panel — read only when the
 		* composer panel is opened. One upstream read per account, paid once per
 		* open rather than on the 5-minute cycle (see
 		* {@link TRAE_ACCOUNT_CREDITS_PATH}).
@@ -5664,10 +6035,10 @@ function registerTraeUsageRoute(ctx, deps) {
 			handler: async (req, res) => {
 				if (req.method !== "GET") return json(res, 405, { error: "method not allowed" });
 				if (!loopbackOrigin(req)) return json(res, 403, { error: "origin-not-trusted" });
-				const region = requestRegion(req, res);
-				if (region === void 0) return;
+				const panel = requestRegion(req, res);
+				if (panel === void 0) return;
 				try {
-					json(res, 200, { accounts: await traeAccountCredits(deps, region) });
+					json(res, 200, { accounts: await traeAccountCredits(deps, panel) });
 				} catch (error) {
 					json(res, 500, { error: safeMessage(error) });
 				}
@@ -5687,12 +6058,12 @@ function registerTraeUsageRoute(ctx, deps) {
 				if (req.method !== "GET") return json(res, 405, { error: "method not allowed" });
 				if (!loopbackOrigin(req)) return json(res, 403, { error: "origin-not-trusted" });
 				if (deps.accountStateOf === void 0) return json(res, 503, { error: "account status unavailable" });
-				const region = requestRegion(req, res);
-				if (region === void 0) return;
+				const panel = requestRegion(req, res);
+				if (panel === void 0) return;
 				const accountId = new URL(req.url ?? "/", "http://localhost").searchParams.get("accountId");
 				if (accountId === null || accountId.trim() === "") return json(res, 400, { error: "missing accountId" });
 				try {
-					const state = await deps.accountStateOf(region, accountId);
+					const state = await deps.accountStateOf(panel, accountId);
 					if (state === void 0) return json(res, 404, { error: "unknown account" });
 					json(res, 200, state);
 				} catch (error) {
@@ -5706,10 +6077,10 @@ function registerTraeUsageRoute(ctx, deps) {
 			handler: async (req, res) => {
 				if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
 				if (!loopbackOrigin(req)) return json(res, 403, { error: "origin-not-trusted" });
-				const region = requestRegion(req, res);
-				if (region === void 0) return;
+				const panel = requestRegion(req, res);
+				if (panel === void 0) return;
 				try {
-					json(res, 200, { accounts: await deps.store(region).accounts() });
+					json(res, 200, { accounts: (await deps.store(panel).accounts()).filter((account) => panel !== "enterprise" || account.enterprise) });
 				} catch (error) {
 					json(res, 500, { error: safeMessage(error) });
 				}
@@ -5730,15 +6101,15 @@ function registerTraeUsageRoute(ctx, deps) {
 			handler: async (req, res) => {
 				if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
 				if (!loopbackOrigin(req)) return json(res, 403, { error: "origin-not-trusted" });
-				const region = requestRegion(req, res);
-				if (region === void 0) return;
+				const panel = requestRegion(req, res);
+				if (panel === void 0) return;
 				const action = transferActionOf(req.url ?? "");
 				if (action === void 0) return json(res, 400, { error: "unknown transfer action" });
 				try {
 					const body = await readTransferBody(req);
 					if (action === "export") {
 						const wanted = new Set(Array.isArray(body["accountIds"]) ? body["accountIds"].filter((id) => typeof id === "string") : []);
-						const store = deps.store(region);
+						const store = deps.store(panel);
 						const records = [];
 						for (const account of await store.accounts()) {
 							if (!wanted.has(account.id)) continue;
@@ -5765,8 +6136,8 @@ function registerTraeUsageRoute(ctx, deps) {
 					const text = typeof body["text"] === "string" ? body["text"] : "";
 					if (action === "preview") return json(res, 200, previewTransferFile(text));
 					const indexes = Array.isArray(body["indexes"]) ? body["indexes"].filter((index) => typeof index === "number" && Number.isInteger(index)) : [];
-					const { changes, imported, skipped } = mergeTransferRecords(parseTransferFile(text), indexes, region);
-					if (changes.size > 0) await deps.store(region).importAccounts([...changes.values()]);
+					const { changes, imported, skipped } = mergeTransferRecords(parseTransferFile(text), indexes, regionOfPanel(panel));
+					if (changes.size > 0) await deps.store(panel).importAccounts([...changes.values()]);
 					json(res, 200, {
 						imported,
 						skipped
@@ -5783,10 +6154,10 @@ function registerTraeUsageRoute(ctx, deps) {
 				if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
 				if (!loopbackOrigin(req)) return json(res, 403, { error: "origin-not-trusted" });
 				if (deps.discoverModels === void 0) return json(res, 503, { error: "model refresh unavailable" });
-				const region = requestRegion(req, res);
-				if (region === void 0) return;
+				const panel = requestRegion(req, res);
+				if (panel === void 0) return;
 				try {
-					json(res, 200, { models: await deps.discoverModels(region) });
+					json(res, 200, { models: await deps.discoverModels(panel) });
 				} catch (error) {
 					json(res, 500, { error: safeMessage(error) });
 				}
@@ -5809,8 +6180,8 @@ function registerTraeUsageRoute(ctx, deps) {
 				if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
 				if (!loopbackOrigin(req)) return json(res, 403, { error: "origin-not-trusted" });
 				if (deps.probeModels === void 0) return json(res, 503, { error: "model test unavailable" });
-				const region = requestRegion(req, res);
-				if (region === void 0) return;
+				const panel = requestRegion(req, res);
+				if (panel === void 0) return;
 				let ids;
 				try {
 					ids = await readModelTestBody(req);
@@ -5820,7 +6191,7 @@ function registerTraeUsageRoute(ctx, deps) {
 				if (ids.length === 0) return json(res, 400, { error: "no models to test" });
 				if (ids.length > 64) return json(res, 400, { error: `too many models (limit ${String(64)})` });
 				try {
-					json(res, 200, await deps.probeModels(region, ids));
+					json(res, 200, await deps.probeModels(panel, ids));
 				} catch (error) {
 					json(res, 500, { error: safeMessage(error) });
 				}
@@ -5852,9 +6223,9 @@ function registerTraeUsageRoute(ctx, deps) {
 			handler: async (req, res) => {
 				if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
 				if (!loopbackOrigin(req)) return json(res, 403, { error: "origin-not-trusted" });
-				const region = requestRegion(req, res);
-				if (region === void 0) return;
-				if (region !== "cn") return json(res, 404, { error: "check-in is not available for the international region" });
+				const panel = requestRegion(req, res);
+				if (panel === void 0) return;
+				if (regionOfPanel(panel) !== "cn") return json(res, 404, { error: "check-in is not available for the international region" });
 				try {
 					let accountId;
 					try {
@@ -5864,7 +6235,7 @@ function registerTraeUsageRoute(ctx, deps) {
 					}
 					if (accountId !== void 0) {
 						if (deps.claimCheckinOf === void 0) return json(res, 503, { error: "check-in by account unavailable" });
-						const outcome = await deps.claimCheckinOf(region, accountId);
+						const outcome = await deps.claimCheckinOf(panel, accountId);
 						if (outcome === void 0) return json(res, 404, { error: "unknown account" });
 						const { claim, checkin: after } = outcome;
 						const deviceClaimed = claim.code === CHECKIN_DEVICE_ALREADY_CLAIMED;
@@ -5877,7 +6248,7 @@ function registerTraeUsageRoute(ctx, deps) {
 							checkin: toCheckin(after)
 						});
 					}
-					const client = deps.client(region);
+					const client = deps.client(panel);
 					const current = await client.checkinStatus();
 					if (!current.enabled) return json(res, 409, { error: "check-in is not enabled for this account" });
 					if (current.checkedIn) return json(res, 200, {
@@ -6146,18 +6517,24 @@ function settingsNamespaceOf(ctx) {
 	return typeof id === "string" && id !== "" ? id : TRAE_SETTINGS_NS;
 }
 /**
-* One region's saved state. A config written before the region split has only
+* One panel's saved state. A config written before the region split has only
 * the flat fields: those were always captured from the CN endpoint (the
 * plugin had no international support), so they are read as the CN state and
 * only when no explicit CN slot exists. The ai region never inherits them —
 * that inheritance is exactly the bug where a stale CN directory would be
 * intersected with the international catalog and silently drop the user's
 * picks (the same failure workbuddy fixed with its region split).
+*
+* Keyed by PANEL (`cn` | `enterprise` | `ai`), because each panel carries its
+* own switch, account binding and model selection. `enterprise` has no legacy
+* equivalent: it starts from an EMPTY state (its own directory, its own model
+* picks) and never inherits CN's, so switching it on cannot silently activate
+* a model list the user never chose for the tenant pool.
 */
-function regionStateOf(config, region) {
-	const stored = unwrapVolatile(unwrapVolatile(config.regions)?.[region]);
+function regionStateOf(config, panel) {
+	const stored = unwrapVolatile(unwrapVolatile(config.regions)?.[panel]);
 	if (stored !== void 0) return stored;
-	if (region !== "cn") return {};
+	if (panel !== "cn") return {};
 	return {
 		...config.lastCatalog === void 0 ? {} : { lastCatalog: config.lastCatalog },
 		...config.enabledModelIds === void 0 ? {} : { enabledModelIds: config.enabledModelIds },
@@ -6166,15 +6543,23 @@ function regionStateOf(config, region) {
 	};
 }
 /**
-* Whether one region's provider is switched on (issue #11). Opt-out semantics:
+* Whether one panel's provider is switched on (issue #11). Opt-out semantics:
 * only an explicit `false` disables it, so every config written before this
 * switch existed — including the pre-region-split flat fields, which never
 * carry `enabled` — keeps both providers running exactly as before. The card
 * reads the same rule through `regionEnabledOf`, so the two halves can never
 * disagree about a region's state.
+*
+* The ENTERPRISE panel is the one deliberate exception: it defaults OFF. A
+* consumer-only account (`tenant 7o2d894p7dr0o4`) cannot use that pool at all,
+* so opting every existing user into a second CN provider would put a route in
+* their model picker that fails on first use. It is switched on from its card
+* tab, by someone whose account actually belongs to a tenant.
 */
-function regionEnabled(config, region) {
-	return regionStateOf(config, region).enabled !== false;
+function regionEnabled(config, panel) {
+	const stored = regionStateOf(config, panel).enabled;
+	if (stored !== void 0) return stored !== false;
+	return panel !== "enterprise";
 }
 /**
 * WHERE one region's credit readout sits (learned from workbuddy #62).
@@ -6216,10 +6601,16 @@ const modelConfig = z.object({
 	input: z.array(z.union(["text", "image"])),
 	creditMultiplier: z.number(),
 	wireFunction: z.string(),
+	wireConfigName: z.string(),
 	multimodal: z.boolean()
 });
+/**
+* One panel's saved state. Panels are keyed `cn | enterprise | ai` — see
+* {@link TraePanel}; `enterprise` is a second CN provider with its own switch,
+* account binding and model selection.
+*/
 const regionStateConfig = z.object({
-	enabled: z.boolean().default(true).description("Whether this region's provider is offered to DSH (opt-out; false withdraws it entirely)"),
+	enabled: z.boolean().description("Whether this panel's provider is offered to DSH (false withdraws it entirely)"),
 	lastCatalog: z.array(modelConfig).default([]),
 	enabledModelIds: z.array(z.string()).default([]),
 	imageModelIds: z.array(z.string()).default([]),
@@ -6228,7 +6619,8 @@ const regionStateConfig = z.object({
 });
 const accountSelectionConfig = z.object({
 	cn: z.string().description("Selected domestic (CN) account id (never a token)"),
-	ai: z.string().description("Selected international account id (never a token)")
+	ai: z.string().description("Selected international account id (never a token)"),
+	enterprise: z.string().description("Selected account id for the CN enterprise pool (never a token)")
 });
 const Config = z.object({
 	authFile: asVolatile(z.string().description("Optional Trae storage.json path override")),
@@ -6242,8 +6634,8 @@ const Config = z.object({
 	accountId: z.string().description("Deprecated: pre-split account selector, attributed to its own region"),
 	showPointsInMainUi: asVolatile(z.boolean().default(false).description("在输入框工具栏显示积分读数「Trae CN · <数值>」（仅当选中的模型属于本插件时出现，可点击查看账号与积分明细）")),
 	followAppLogin: asVolatile(z.boolean().default(false).description("跟随 Trae 桌面端当前登录账号换绑（打开后每次配置生效时重绑到 App 现在登录的账号）")),
-	accounts: asVolatile(accountSelectionConfig.description("Per-region account selections, keyed cn | ai")),
-	regions: asVolatile(z.dict(regionStateConfig).default({}).description("Per-region model directory and selection, keyed cn | ai")),
+	accounts: asVolatile(accountSelectionConfig.description("Per-panel account selections, keyed cn | enterprise | ai")),
+	regions: asVolatile(z.dict(regionStateConfig).default({}).description("Per-panel model directory and selection, keyed cn | enterprise | ai")),
 	lastCatalog: z.array(modelConfig).description("Deprecated: pre-region-split CN model directory"),
 	enabledModelIds: z.array(z.string()).default([]).description("Deprecated: pre-region-split CN selection"),
 	contextBudgets: z.dict(z.number().step(1).min(1)).default({}).description("Deprecated: pre-region-split CN context budgets"),
@@ -6255,8 +6647,8 @@ const REGION_KEYS = ["cn", "ai"];
 function apply(ctx, config) {
 	const settingsNs = settingsNamespaceOf(ctx);
 	let current = () => config;
-	const enabledSet = (value, region) => new Set(regionStateOf(value, region).enabledModelIds ?? []);
-	const imageSet = (value, region) => new Set(regionStateOf(value, region).imageModelIds ?? []);
+	const enabledSet = (value, panel) => new Set(regionStateOf(value, panel).enabledModelIds ?? []);
+	const imageSet = (value, panel) => new Set(regionStateOf(value, panel).imageModelIds ?? []);
 	/**
 	* Per-region wire state. Each region's discovery owns its own maps: the CN
 	* and international rosters overlap (and spell some ids differently), so a
@@ -6269,30 +6661,30 @@ function apply(ctx, config) {
 	* `lastCatalog` / `models` / `enabledModelIds` that still lists it.
 	*/
 	const wireState = {};
-	for (const region of REGION_KEYS) wireState[region] = {
+	for (const panel of TRAE_PANELS) wireState[panel] = {
 		callableKeys: /* @__PURE__ */ new Set(),
 		resolved: false,
 		byId: /* @__PURE__ */ new Map(),
 		byName: /* @__PURE__ */ new Map()
 	};
-	const dropDeadModels = (rows, region) => {
-		const wire = wireState[region];
+	const dropDeadModels = (rows, panel) => {
+		const wire = wireState[panel];
 		if (!wire.resolved) return rows;
 		return rows.filter((model) => wire.callableKeys.has(model.id.trim().toLowerCase()) || wire.callableKeys.has(model.name.trim().toLowerCase()));
 	};
-	const fallbackModels = (value, region) => applyImageSelection(fallbackModelsFor(region), imageSet(value, region));
-	const derive = (value, raw, region) => {
-		const selectedImages = imageSet(value, region);
-		const derived = deriveCatalog(applyImageSelection(sanitizeCatalog(dropDeadModels(raw, region)), selectedImages), enabledSet(value, region), regionStateOf(value, region).contextBudgets ?? {});
-		return derived.length > 0 ? derived : fallbackModels(value, region);
+	const fallbackModels = (value, panel) => applyImageSelection(fallbackModelsFor(regionOfPanel(panel)), imageSet(value, panel));
+	const derive = (value, raw, panel) => {
+		const selectedImages = imageSet(value, panel);
+		const derived = deriveCatalog(applyImageSelection(sanitizeCatalog(dropDeadModels(raw, panel)), selectedImages), enabledSet(value, panel), regionStateOf(value, panel).contextBudgets ?? {});
+		return derived.length > 0 ? derived : fallbackModels(value, panel);
 	};
-	const configuredModels = (value, region) => {
-		const state = regionStateOf(value, region);
-		return state.lastCatalog?.length ? derive(value, state.lastCatalog, region) : region === "cn" && value.models?.length ? derive(value, value.models, region) : fallbackModels(value, region);
+	const configuredModels = (value, panel) => {
+		const state = regionStateOf(value, panel);
+		return state.lastCatalog?.length ? derive(value, state.lastCatalog, panel) : panel === "cn" && value.models?.length ? derive(value, value.models, panel) : fallbackModels(value, panel);
 	};
-	const displayModels = (value, region) => {
-		const state = regionStateOf(value, region);
-		return state.lastCatalog?.length ? dropDeadModels(sanitizeCatalog(state.lastCatalog), region) : region === "cn" && value.models?.length ? dropDeadModels(sanitizeCatalog(value.models), region) : fallbackModelsFor(region);
+	const displayModels = (value, panel) => {
+		const state = regionStateOf(value, panel);
+		return state.lastCatalog?.length ? dropDeadModels(sanitizeCatalog(state.lastCatalog), panel) : panel === "cn" && value.models?.length ? dropDeadModels(sanitizeCatalog(value.models), panel) : fallbackModelsFor(regionOfPanel(panel));
 	};
 	/**
 	* Legacy migration for the pre-split single `accountId`: its region is
@@ -6302,9 +6694,20 @@ function apply(ctx, config) {
 	* inheriting a selection that belongs to the other side of the split.
 	*/
 	let legacyAccountRegion;
-	const effectiveAccountFor = (region, value) => {
-		const explicit = unwrapVolatile(value.accounts)?.[region];
+	/**
+	* Which account a panel is bound to.
+	*
+	* Keyed by PANEL: the enterprise pool draws on the same CN credentials but
+	* keeps its OWN binding, so pointing the consumer tab at a personal account
+	* never moves the enterprise tab (and vice versa). A panel with no explicit
+	* binding falls through to that REGION's default selection, which is the
+	* store's own "preferred account for this region".
+	*/
+	const effectiveAccountFor = (panel, value) => {
+		const explicit = unwrapVolatile(value.accounts)?.[panel];
 		if (explicit !== void 0) return explicit;
+		const region = regionOfPanel(panel);
+		if (panel === "enterprise") return void 0;
 		return legacyAccountRegion === region ? value.accountId : void 0;
 	};
 	/**
@@ -6326,10 +6729,29 @@ function apply(ctx, config) {
 			}
 		}
 	}
+	/**
+	* One stack per PANEL.
+	*
+	* `cn` and `enterprise` share a credential REGION but not a directory, a wire
+	* map or a model selection: the two pools publish different rosters, so a
+	* shared catalog would let one pool's answer filter the other's models. Each
+	* panel therefore gets its own catalog, wire state, clients and shim routes,
+	* and the credential store below is the only thing they have in common.
+	*/
 	const stacks = {};
-	for (const region of REGION_KEYS) {
+	for (const panel of TRAE_PANELS) {
+		const region = regionOfPanel(panel);
+		/**
+		* Whether tenant (enterprise) accounts are also offered by the CONSUMER
+		* panels.
+		*
+		* Off by default, so a published build offers an enterprise login only
+		* under the enterprise panel. Opt-in per machine, and intentionally not
+		* surfaced in user-facing documentation.
+		*/
+		const tenantLocal = process.env["DSH_TRAE_TENANT_IN_CONSUMER"] === "1";
 		const catalog = new TraeCatalog(region);
-		const wire = wireState[region];
+		const wire = wireState[panel];
 		/**
 		* Best-effort device identity for this region's installation. Prefer the
 		* selected credential's own edition so an international account reads its
@@ -6382,6 +6804,7 @@ function apply(ctx, config) {
 		};
 		const store = new TraeCredentialStore({
 			region,
+			...panel === "enterprise" ? { requireTenant: true } : { hideTenantAccounts: !tenantLocal },
 			...unwrapVolatile(config.authFile) === void 0 ? {} : { storagePath: unwrapVolatile(config.authFile) },
 			edition: unwrapVolatile(config.edition) ?? "auto",
 			refresh: async (credential) => refreshTraeCredential(credential, void 0, await refreshDeviceSafe())
@@ -6389,19 +6812,65 @@ function apply(ctx, config) {
 		const solo = new TraeSoloUpstreamClient({
 			credential: () => store.resolve(),
 			identity,
+			...panel === "enterprise" ? { route: "enterprise" } : {},
 			log: (message, detail) => ctx.logger.warn(message, detail)
 		});
 		const remoteCatalog = new TraeSoloRemoteCatalogClient({ credential: () => store.resolve() });
 		const wireResolver = (displayId) => wire.byId.get(displayId) ?? wire.byName.get(displayId.trim().toLowerCase());
-		const upstream = new TraeSoloBridge(solo, catalog, wireResolver);
-		const delegating = new TraeDelegatingUpstreamClient(upstream);
+		/**
+		* One client + bridge per provider id.
+		*
+		* `routeOfTraeProvider` pins each to its billing pool: the consumer ids get
+		* the region gateway exactly as before, `trae-enterprise` gets the tenant
+		* gateway and stamps the `session_id` it requires. The discovery client
+		* below stays UNROUTED on purpose — it owns the roster/probe path and, for
+		* a tenant credential, reads both pools so the shared catalogue keeps every
+		* model either one serves.
+		*/
+		/**
+		* Latest successful discovery for this panel, mutated by discoverModels
+		* and READ by applySelection (via the stack): a settings write rebuilds
+		* the catalog from saved rows that may predate wireConfigName, and the
+		* merge below is what keeps the case mapping alive across it.
+		*/
+		const latestDiscovery = [];
+		const routeClients = {};
+		const shimRoutes = [];
+		for (const provider of [providerOfPanel(panel)]) {
+			const route = routeOfTraeProvider(provider) ?? "solo";
+			const client = new TraeSoloUpstreamClient({
+				credential: () => store.resolve(),
+				identity,
+				route,
+				log: (message, detail) => ctx.logger.warn(message, detail)
+			});
+			const delegating = new TraeDelegatingUpstreamClient(new TraeSoloBridge(client, catalog, wireResolver));
+			routeClients[provider] = {
+				provider,
+				route,
+				client,
+				upstream: delegating,
+				secret: ""
+			};
+			shimRoutes.push({
+				label: route,
+				client: delegating
+			});
+		}
 		const shim = createTraeShim({
 			catalog,
-			client: delegating,
+			routes: shimRoutes,
 			logger: ctx.logger
 		});
+		for (const entry of Object.values(routeClients)) entry.secret = shim.tokenOf(entry.route);
+		/**
+		* The region's PRIMARY provider plumbing, used by region-wide paths that
+		* are not pool-specific: model probing, Raw-Chat status, and the stack's
+		* `delegating` handle. Per-provider turns never go through this.
+		*/
+		const primary = routeClients[providerOfPanel(panel)];
 		let rawDiagnostic = () => ({ state: "disabled" });
-		if (region === "cn") (async () => {
+		if (panel === "cn") (async () => {
 			try {
 				const resolved = await resolveTraeRawRuntime(store, "qwen-3.7-plus");
 				const gateway = createTraeRawGateway({
@@ -6415,7 +6884,7 @@ function apply(ctx, config) {
 							runtime: resolved.runtime
 						}
 					}),
-					solo: upstream,
+					solo: new TraeSoloBridge(primary.client, catalog, wireResolver),
 					endpoint: `${REGION_GATEWAYS.cn.chat}/api/ide/v2/llm_raw_chat`,
 					edition: resolved.identity.edition,
 					identity: {
@@ -6425,7 +6894,7 @@ function apply(ctx, config) {
 					runtime: resolved.runtime,
 					enabled: false
 				});
-				delegating.replace(gateway.upstream);
+				primary.upstream.replace(gateway.upstream);
 				rawDiagnostic = () => gateway.diagnostic();
 				ctx.effect(() => () => gateway.invalidate(), "dsh-connect-trae: Raw capability invalidation");
 			} catch (error) {
@@ -6436,12 +6905,14 @@ function apply(ctx, config) {
 			credential: () => store.resolve(),
 			deviceId: async () => (await identity()).deviceId
 		});
-		stacks[region] = {
+		stacks[panel] = {
 			region,
 			store,
 			catalog,
 			shim,
-			delegating,
+			lastDiscovery: latestDiscovery,
+			delegating: routeClients[providerOfPanel(panel)]?.upstream,
+			routeClients,
 			usageClient,
 			/**
 			* Credit balance of one named account, WITHOUT rebinding the store
@@ -6510,6 +6981,8 @@ function apply(ctx, config) {
 					wire.byId.set(model.id, target);
 					wire.byName.set(model.name.trim().toLowerCase(), target);
 				}
+				latestDiscovery.length = 0;
+				latestDiscovery.push(...merged);
 				return merged;
 			},
 			/**
@@ -6532,7 +7005,7 @@ function apply(ctx, config) {
 				const skipped = [];
 				for (const id of ids) if (known.has(id.trim().toLowerCase())) testable.push(id);
 				else skipped.push(id);
-				const results = await probeModelsSequentially((body, signal) => upstream.chatStream(body, signal), testable);
+				const results = await probeModelsSequentially((body, signal) => primary.upstream.chatStream(body, signal), testable);
 				return skipped.length === 0 ? { results } : {
 					results,
 					skipped
@@ -6548,9 +7021,10 @@ function apply(ctx, config) {
 	* never moves from here — the card's hint and the follow switch below are
 	* the only writers.
 	*/
-	const liveLoginOf = async (region) => {
+	const liveLoginOf = async (panel) => {
+		const region = regionOfPanel(panel);
 		try {
-			const live = await stacks[region].store.liveLogin();
+			const live = await stacks[panel].store.liveLogin();
 			if (live === void 0 || live.region !== region) return void 0;
 			return {
 				id: live.id,
@@ -6574,30 +7048,30 @@ function apply(ctx, config) {
 	* event (`loader/volatile-update`) is what re-runs `applySelection` with the
 	* updated document — the same channel every card write already uses.
 	*/
-	const followAppLogin = async (region) => {
-		const live = await liveLoginOf(region);
+	const followAppLogin = async (panel) => {
+		const live = await liveLoginOf(panel);
 		if (live === void 0 || writeSettings === void 0) return void 0;
 		const configured = configuredAccountsOf(current());
-		if (configured[region] === live.id) return live;
+		if (configured[panel] === live.id) return live;
 		await writeSettings({ accounts: {
 			...configured,
-			[region]: live.id
+			[panel]: live.id
 		} });
 		return live;
 	};
 	ctx.inject(["webServer"], (webCtx) => registerTraeUsageRoute(webCtx, {
-		store: (region) => stacks[region].store,
-		client: (region) => stacks[region].usageClient,
-		displayModels: (region) => displayModels(current(), region),
-		enabledModelIds: (region) => regionStateOf(current(), region).enabledModelIds ?? [],
-		regionEnabled: (region) => regionEnabled(current(), region),
-		discoverModels: (region, signal) => stacks[region].discoverModels(signal),
-		probeModels: (region, ids) => stacks[region].probeModels(ids),
-		rawDiagnostic: (region) => stacks[region].rawDiagnostic(),
-		creditsOfAccount: (region, accountId) => stacks[region].creditsOfAccount(accountId),
-		accountStateOf: (region, accountId) => stacks[region].accountStateOf(accountId),
-		claimCheckinOf: (region, accountId) => stacks[region].claimCheckinOf(accountId),
-		liveLogin: (region) => liveLoginOf(region)
+		store: (panel) => stacks[panel].store,
+		client: (panel) => stacks[panel].usageClient,
+		displayModels: (panel) => displayModels(current(), panel),
+		enabledModelIds: (panel) => regionStateOf(current(), panel).enabledModelIds ?? [],
+		regionEnabled: (panel) => regionEnabled(current(), panel),
+		discoverModels: (panel, signal) => stacks[panel].discoverModels(signal),
+		probeModels: (panel, ids) => stacks[panel].probeModels(ids),
+		rawDiagnostic: (panel) => stacks[panel].rawDiagnostic(),
+		creditsOfAccount: (panel, accountId) => stacks[panel].creditsOfAccount(accountId),
+		accountStateOf: (panel, accountId) => stacks[panel].accountStateOf(accountId),
+		claimCheckinOf: (panel, accountId) => stacks[panel].claimCheckinOf(accountId),
+		liveLogin: (panel) => liveLoginOf(panel)
 	}));
 	/**
 	* Live registration handles per region, filled once the shim is listening.
@@ -6609,8 +7083,18 @@ function apply(ctx, config) {
 	* card tab alone would leave every model selectable.
 	*/
 	const registration = {
-		cn: {},
-		ai: {}
+		cn: { adapters: [] },
+		enterprise: { adapters: [] },
+		ai: { adapters: [] }
+	};
+	/** Release every live registration this apply() created. */
+	const disposeRegistration = () => {
+		for (const panel of TRAE_PANELS) {
+			for (const entry of registration[panel].adapters) entry.handle();
+			registration[panel].adapters.length = 0;
+		}
+		registration.cn.directory?.();
+		delete registration.cn.directory;
 	};
 	/**
 	* Publish each region's on/off state to the harness (issue #11). Both swaps
@@ -6622,21 +7106,53 @@ function apply(ctx, config) {
 	* lands immediately.
 	*/
 	const syncRegionRegistration = (value) => {
-		for (const region of REGION_KEYS) registration[region].adapter?.replace(regionEnabled(value, region) ? [TRAE_PROVIDERS[region]] : []);
-		registration.cn.directory?.replace(REGION_KEYS.filter((region) => regionEnabled(value, region)).map((region) => ({
-			provider: TRAE_PROVIDERS[region],
-			displayName: TRAE_PROVIDER_DISPLAY_NAMES[region],
+		for (const panel of TRAE_PANELS) {
+			const enabled = regionEnabled(value, panel);
+			for (const entry of registration[panel].adapters) entry.handle.replace(enabled ? [entry.provider] : []);
+		}
+		registration.cn.directory?.replace(TRAE_PANELS.filter((panel) => regionEnabled(value, panel)).map((panel) => ({
+			provider: providerOfPanel(panel),
+			displayName: displayNameOfTraeProvider(providerOfPanel(panel)),
 			settingsNs,
 			settingsPath: [],
 			declared: false
 		})));
 	};
-	/** Push the current config into every region's store selection and catalog. */
+	/** Push the current config into every panel's store selection and catalog. */
 	const applySelection = (value) => {
-		for (const region of REGION_KEYS) {
-			const stack = stacks[region];
-			stack.store.setSource(unwrapVolatile(value.authFile), unwrapVolatile(value.edition) ?? "auto", effectiveAccountFor(region, value));
-			stack.catalog.set(configuredModels(value, region));
+		for (const panel of TRAE_PANELS) {
+			const stack = stacks[panel];
+			stack.store.setSource(unwrapVolatile(value.authFile), unwrapVolatile(value.edition) ?? "auto", effectiveAccountFor(panel, value));
+			/**
+			* Re-merge the wire mapping the last discovery taught us.
+			*
+			* configuredModels rebuilds from the SAVED rows, and rows saved before
+			* wireConfigName existed carry wireFunction alone. Every settings write
+			* goes through here (card writes, follow-app-login, the initial seed),
+			* so without this each write would strip the case mapping until the next
+			* discovery -- the exact window that turns deepseek-v4.1-flash into a
+			* 4001, because the gateway is case-sensitive and the lowercase
+			* directory id is the one spelling it refuses.
+			*/
+			const known = /* @__PURE__ */ new Map();
+			for (const model of stack.lastDiscovery) {
+				known.set(model.id, model);
+				known.set(model.id.trim().toLowerCase(), model);
+				if (model.name.trim() !== "") known.set(model.name.trim().toLowerCase(), model);
+			}
+			const rows = configuredModels(value, panel).map((model) => {
+				const match = known.get(model.id) ?? known.get(model.id.trim().toLowerCase()) ?? (model.name.trim() !== "" ? known.get(model.name.trim().toLowerCase()) : void 0);
+				if (match === void 0) return model;
+				const wireConfigName = model.wireConfigName ?? match.wireConfigName;
+				const wireFunction = model.wireFunction ?? match.wireFunction;
+				if (wireConfigName === model.wireConfigName && wireFunction === model.wireFunction) return model;
+				return {
+					...model,
+					...wireConfigName === void 0 ? {} : { wireConfigName },
+					...wireFunction === void 0 ? {} : { wireFunction }
+				};
+			});
+			stack.catalog.set(rows);
 			stack.invalidateAdapter();
 		}
 		syncRegionRegistration(value);
@@ -6695,9 +7211,9 @@ function apply(ctx, config) {
 		if (followInFlight || !followAppLoginEnabled(current())) return;
 		followInFlight = true;
 		try {
-			for (const region of REGION_KEYS) {
-				if (!regionEnabled(current(), region)) continue;
-				await followAppLogin(region);
+			for (const panel of TRAE_PANELS) {
+				if (!regionEnabled(current(), panel)) continue;
+				await followAppLogin(panel);
 			}
 		} catch (error) {
 			ctx.logger.warn("dsh-connect-trae: follow-app-login rebind skipped", error);
@@ -6709,77 +7225,78 @@ function apply(ctx, config) {
 	let stopped = false;
 	ctx.effect(() => () => {
 		stopped = true;
-		for (const region of REGION_KEYS) stacks[region].shim.close();
+		for (const panel of TRAE_PANELS) stacks[panel].shim.close();
 	});
-	Promise.all(REGION_KEYS.map((region) => stacks[region].shim.ready)).then(async () => {
+	Promise.all(TRAE_PANELS.map((panel) => stacks[panel].shim.ready)).then(async () => {
 		if (stopped) return;
 		try {
 			const piAi = piAiRuntimeInfo();
 			ctx.logger.info(`dsh-connect-trae: pi-ai ${piAi.version ?? "unknown"} (${piAi.generation} generation)${piAi.inspected ? "" : " — not resolved locally, the host supplies it"}`);
-			for (const region of REGION_KEYS) {
-				const stack = stacks[region];
+			for (const panel of TRAE_PANELS) {
+				const stack = stacks[panel];
+				const provider = providerOfPanel(panel);
+				const entry = stack.routeClients[provider];
+				if (entry === void 0) continue;
 				const trae = createTraeAdapter({
 					shim: stack.shim,
 					catalog: stack.catalog,
-					provider: TRAE_PROVIDERS[region],
-					displayName: TRAE_PROVIDER_DISPLAY_NAMES[region],
+					provider,
+					displayName: displayNameOfTraeProvider(provider),
+					secret: entry.secret,
 					resolveAttachments: () => ctx.get("attachments")
 				});
 				stack.invalidateAdapter = () => {
 					trae.invalidate();
 				};
-				registration[region].adapter = region === "cn" ? ctx.llm.registerAdapter([TRAE_PROVIDER], trae.adapter) : ctx.llm.registerAdapter([TRAE_AI_PROVIDER], trae.adapter);
+				registration[panel].adapters.push({
+					provider,
+					handle: ctx.llm.registerAdapter([provider], trae.adapter)
+				});
 			}
 			ctx.llm.registerModelDiscovery(settingsNs, async (request, signal) => {
-				const region = regionOfTraeProvider(request.provider ?? "");
-				if (region === void 0) return [];
-				if (!regionEnabled(current(), region)) return [];
+				const panel = panelOfProvider(request.provider ?? "");
+				if (panel === void 0) return [];
+				if (!regionEnabled(current(), panel)) return [];
 				const cancellation = signal ?? request.signal;
-				return applyImageSelection(await stacks[region].discoverModels(cancellation), imageSet(current(), region)).map((model) => ({
+				const next = applyImageSelection(await stacks[panel].discoverModels(cancellation), imageSet(current(), panel));
+				const withRate = panel !== "enterprise";
+				return next.map((model) => ({
 					id: model.id,
-					name: traeModelDisplayName(model),
+					name: traeModelDisplayName(model, withRate),
 					...model.contextWindow === void 0 ? {} : { contextWindow: model.contextWindow },
 					...model.maxTokens === void 0 ? {} : { maxTokens: model.maxTokens },
 					inputModalities: traeInputModalities(model)
 				}));
 			});
-			registration.cn.directory = ctx.llm.registerConfigurableProviders(REGION_KEYS.map((region) => ({
-				provider: TRAE_PROVIDERS[region],
-				displayName: TRAE_PROVIDER_DISPLAY_NAMES[region],
+			registration.cn.directory = ctx.llm.registerConfigurableProviders(TRAE_PANELS.map((panel) => ({
+				provider: providerOfPanel(panel),
+				displayName: displayNameOfTraeProvider(providerOfPanel(panel)),
 				settingsNs,
 				settingsPath: [],
 				declared: false
 			})));
 			syncRegionRegistration(current());
 		} finally {
-			if (registration.cn.adapter === void 0 || registration.ai.adapter === void 0 || registration.cn.directory === void 0) {
-				registration.cn.adapter?.();
-				registration.ai.adapter?.();
-				registration.cn.directory?.();
-			}
+			if (registration.cn.adapters.length === 0 || registration.ai.adapters.length === 0 || registration.cn.directory === void 0) disposeRegistration();
 		}
 		try {
 			ctx.effect(() => () => {
-				registration.cn.adapter?.();
-				registration.ai.adapter?.();
-				registration.cn.directory?.();
+				disposeRegistration();
 			});
 		} catch {
-			registration.cn.adapter?.();
-			registration.ai.adapter?.();
-			registration.cn.directory?.();
+			disposeRegistration();
 		}
-		for (const region of REGION_KEYS) {
-			if (!regionEnabled(current(), region)) continue;
+		for (const panel of TRAE_PANELS) {
+			if (!regionEnabled(current(), panel)) continue;
 			(async () => {
-				const stack = stacks[region];
+				const stack = stacks[panel];
 				try {
 					const models = await stack.discoverModels();
 					if (stopped) return;
-					stack.catalog.set(derive(current(), models, region));
+					stack.catalog.set(derive(current(), models, panel));
 				} catch (error) {
-					ctx.logger.warn(`dsh-connect-trae: live ${region} model directory unavailable; serving the configured catalog`, error);
-					stack.catalog.set(configuredModels(current(), region));
+					ctx.logger.warn(`dsh-connect-trae: live ${panel} model directory unavailable; serving the configured catalog`, error);
+					stack.catalog.set(configuredModels(current(), panel));
 				}
 				stack.invalidateAdapter();
 			})();
@@ -6789,4 +7306,4 @@ function apply(ctx, config) {
 	});
 }
 //#endregion
-export { Config, FALLBACK_TRAE_MODELS, FALLBACK_TRAE_MODELS_AI, REGION_GATEWAYS, SseDecoder, TRAE_ACCOUNT_STATUS_PATH, TRAE_AI_PROVIDER, TRAE_CHECKIN_PATH, TRAE_CN_AGENT_TASK_PATH, TRAE_CN_TITLE_PATH, TRAE_MODELS_TEST_PATH, TRAE_MODEL_DETAIL_FUNCTIONS, TRAE_MODEL_DETAIL_PATH, TRAE_PAY_BASE, TRAE_PROBE_TIMEOUT_MS, TRAE_PROVIDER, TRAE_PROVIDERS, TRAE_PROVIDER_DISPLAY_NAMES, TRAE_RAW_CHAT_V1_PATH, TRAE_RAW_CHAT_V2_PATH, TRAE_REASONING_EFFORTS, TRAE_REGIONS, TRAE_REGION_PARAM, TRAE_SETTINGS_NS, TRAE_SOLO_CHAT_PATH, TRAE_SOLO_FUNCTION, TRAE_SOLO_MODELS_PATH, TRAE_SOLO_REMOTE_BASE, TRAE_STATE_DB_FILENAME, TRAE_STREAM_IDLE_TIMEOUT_MS, TRAE_USAGE_PATH, TRAE_VERSION_CODE_FALLBACK, TraeCatalog, TraeCredentialStore, TraeDelegatingUpstreamClient, TraeFallbackUpstreamClient, TraeGatedUpstreamClient, TraeRawCapabilityController, TraeRawCapabilityState, TraeRawChatUpstreamClient, TraeSoloBridge, TraeSoloRemoteCatalogClient, TraeSoloUpstreamClient, TraeUsageClient, UnconfiguredTraeUpstreamClient, adaptLegacyPiAiContext, adaptModernPiAiContext, apply, applyContextBudgets, applyImageSelection, applyReasoningEffort, asVolatile, bridgeTraeSoloStream, buildTraeAgentTaskBody, buildTraeCnHeaders, buildTraeFusionRawChatEnvelope, buildTraeModelDetailRequest, buildTraeRawChatDraft, buildTraeRawChatRuntimeConfig, classifyProbeError, classifyProbeResult, classifyTraeRawChatFailure, configuredAccountsOf, createTraeAdapter, createTraeRawGateway, createTraeShim, creditPosition, decidePiAiGeneration, decodeRawChatChunk, decodeTraeEvent, decryptTraeStorageValue, deriveCatalog, describeIdShape, describeNameShape, discoveredCatalog, fallbackModelsFor, followAppLoginEnabled, generationOf, hashTraeRawChatArg, identityHeaders, inject, legacyTraeOwnAuthPath, maskUserPath, mergeTraeModelSources, name, nextRegionCreditPosition, nextRegionEnabled, nextRegionSlots, normalizeTraeCredential, normalizeTraeVersionCode, parseObservedModelConfig, parseReasoningCapability, parseTraeAuthValue, parseTraeCachedModel, parseTraeModelExtraConfigLogLine, parseTraeRawChatBehaviorConfig, parseTraeRemoteModel, parseTraeStorageDocument, piAiRuntimeInfo, pickTraeStorageIdentity, prepareSoloBody, probeBody, probeModelsSequentially, probeOneModel, probeTraeRawChatCapability, rawCapabilityDiagnostic, rawCapabilityFingerprint, readTraeCachedModel, readTraeCliIdentity, readTraeIdentity, refreshTraeCredential, regionCreditPositionOf, regionEnabled, regionEnabledOf, regionOfCredential, regionOfEdition, regionOfHost, regionOfTraeProvider, regionOfTraeStatusUrl, regionOfUserRegion, regionStateOf, registerTraeUsageRoute, resolveTraeIdentity, resolveTraeRawRuntime, sanitizeCatalog, settingsNamespaceOf, traeEndpoint, traeInputModalities, traeModelDisplayName, traeOwnAuthPath, traeRawChatExtraInfo, traeStateDatabaseCandidates, traeStorageCandidates, traeWebUsage, traeWindowsAppNames, unwrapVolatile, unwrapVolatileDeep, withContextAdaptation, withTraeRegion };
+export { Config, FALLBACK_TRAE_MODELS, FALLBACK_TRAE_MODELS_AI, REGION_GATEWAYS, SseDecoder, TRAE_ACCOUNT_STATUS_PATH, TRAE_AI_PROVIDER, TRAE_CHECKIN_PATH, TRAE_CN_AGENT_TASK_PATH, TRAE_CN_TITLE_PATH, TRAE_ENTERPRISE_PROVIDER, TRAE_MODELS_TEST_PATH, TRAE_MODEL_DETAIL_FUNCTIONS, TRAE_MODEL_DETAIL_PATH, TRAE_PANELS, TRAE_PAY_BASE, TRAE_PROBE_TIMEOUT_MS, TRAE_PROVIDER, TRAE_PROVIDERS, TRAE_PROVIDER_DISPLAY_NAMES, TRAE_PROVIDER_IDS, TRAE_PROVIDER_ID_DISPLAY_NAMES, TRAE_PROVIDER_ROUTES, TRAE_RAW_CHAT_V1_PATH, TRAE_RAW_CHAT_V2_PATH, TRAE_REASONING_EFFORTS, TRAE_REGIONS, TRAE_REGION_PARAM, TRAE_SETTINGS_NS, TRAE_SOLO_CHAT_PATH, TRAE_SOLO_FUNCTION, TRAE_SOLO_MODELS_PATH, TRAE_SOLO_REMOTE_BASE, TRAE_STATE_DB_FILENAME, TRAE_STREAM_IDLE_TIMEOUT_MS, TRAE_USAGE_PATH, TRAE_VERSION_CODE_FALLBACK, TraeCatalog, TraeCredentialStore, TraeDelegatingUpstreamClient, TraeFallbackUpstreamClient, TraeGatedUpstreamClient, TraeRawCapabilityController, TraeRawCapabilityState, TraeRawChatUpstreamClient, TraeSoloBridge, TraeSoloRemoteCatalogClient, TraeSoloUpstreamClient, TraeUsageClient, UnconfiguredTraeUpstreamClient, adaptLegacyPiAiContext, adaptModernPiAiContext, apply, applyContextBudgets, applyImageSelection, applyReasoningEffort, asVolatile, bridgeTraeSoloStream, buildTraeAgentTaskBody, buildTraeCnHeaders, buildTraeFusionRawChatEnvelope, buildTraeModelDetailRequest, buildTraeRawChatDraft, buildTraeRawChatRuntimeConfig, classifyProbeError, classifyProbeResult, classifyTraeRawChatFailure, configuredAccountsOf, createTraeAdapter, createTraeRawGateway, createTraeShim, creditPosition, decidePiAiGeneration, decodeRawChatChunk, decodeTraeEvent, decryptTraeStorageValue, deriveCatalog, describeIdShape, describeNameShape, describeTraeFailure, discoveredCatalog, displayNameOfTraeProvider, fallbackModelsFor, followAppLoginEnabled, generationOf, hashTraeRawChatArg, identityHeaders, inject, isEnterpriseAccount, legacyTraeOwnAuthPath, maskUserPath, mergeTraeModelSources, name, nextRegionCreditPosition, nextRegionEnabled, nextRegionSlots, normalizeTraeCredential, normalizeTraeVersionCode, panelOfKey, panelOfProvider, parseObservedModelConfig, parseReasoningCapability, parseTraeAuthValue, parseTraeCachedModel, parseTraeModelExtraConfigLogLine, parseTraeRawChatBehaviorConfig, parseTraeRemoteModel, parseTraeStorageDocument, piAiRuntimeInfo, pickTraeStorageIdentity, prepareSoloBody, probeBody, probeModelsSequentially, probeOneModel, probeTraeRawChatCapability, providerOfPanel, rawCapabilityDiagnostic, rawCapabilityFingerprint, readTraeCachedModel, readTraeCliIdentity, readTraeIdentity, refreshTraeCredential, regionCreditPositionOf, regionEnabled, regionEnabledOf, regionOfCredential, regionOfEdition, regionOfHost, regionOfPanel, regionOfTraeProvider, regionOfTraeStatusUrl, regionOfUserRegion, regionStateOf, registerTraeUsageRoute, resolveTraeIdentity, resolveTraeRawRuntime, routeOfTraeProvider, sanitizeCatalog, settingsNamespaceOf, traeEndpoint, traeInputModalities, traeModelDisplayName, traeOwnAuthPath, traeRawChatExtraInfo, traeStateDatabaseCandidates, traeStorageCandidates, traeWebUsage, traeWindowsAppNames, unwrapVolatile, unwrapVolatileDeep, withContextAdaptation, withTraeRegion };