linkshell-cli 0.10.45 → 0.10.46

package/dist/client-core/src/pro-membership.d.ts

@@ -0,0 +1,17 @@
+export interface ProMembership {
+    plan: "free" | "pro";
+    expiresAt?: string;
+}
+export interface ProMembershipOptions {
+    supabaseUrl: string;
+    anonKey: string;
+    accessToken: string;
+    userId: string;
+}
+export declare const PRO_CODE_SHOP_URL = "https://pay.ldxp.cn/item/7lgv1s";
+/** The profile is read with the user's token; only the server can grant Pro. */
+export declare function fetchProMembership(options: ProMembershipOptions): Promise<ProMembership>;
+export declare function redeemProCode(accessToken: string, code: string): Promise<{
+    expiresAt: string;
+    idempotent: boolean;
+}>;

package/dist/client-core/src/pro-membership.js

@@ -0,0 +1,107 @@
+export const PRO_CODE_SHOP_URL = "https://pay.ldxp.cn/item/7lgv1s";
+const REDEEM_URL = "https://itool.tech/api/pro/redeem";
+const REQUEST_TIMEOUT_MS = 15_000;
+const LOGIN_REQUIRED = "登录已失效，请重新登录后再试";
+function record(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value) ? value : undefined;
+}
+function timestamp(value) {
+    return typeof value === "string" ? Date.parse(value) : NaN;
+}
+async function request(url, init) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+    try {
+        const response = await fetch(url, { ...init, credentials: "omit", signal: controller.signal });
+        let body;
+        try {
+            body = await response.json();
+        }
+        catch (error) {
+            if (controller.signal.aborted || !(error instanceof SyntaxError))
+                throw error;
+        }
+        return { response, body };
+    }
+    catch {
+        throw new Error(controller.signal.aborted ? "请求超时，请稍后重试" : "网络连接失败，请检查网络后重试");
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/** The profile is read with the user's token; only the server can grant Pro. */
+export async function fetchProMembership(options) {
+    if (!options.accessToken.trim() || !options.userId.trim())
+        throw new Error(LOGIN_REQUIRED);
+    const url = `${options.supabaseUrl.replace(/\/$/, "")}/rest/v1/profiles?select=plan,plan_expires_at&id=eq.${encodeURIComponent(options.userId)}&limit=1`;
+    const { response, body } = await request(url, {
+        headers: { apikey: options.anonKey, Authorization: `Bearer ${options.accessToken}` },
+    });
+    if (response.status === 401 || response.status === 403)
+        throw new Error(LOGIN_REQUIRED);
+    if (!response.ok)
+        throw new Error("暂时无法获取会员状态，请稍后重试");
+    if (!Array.isArray(body))
+        throw new Error("会员状态返回异常，请稍后重试");
+    if (body.length === 0)
+        return { plan: "free" };
+    const profile = record(body[0]);
+    if (!profile || typeof profile.plan !== "string")
+        throw new Error("会员状态返回异常，请稍后重试");
+    const expiresAt = profile.plan_expires_at;
+    const expires = timestamp(expiresAt);
+    const serverTime = timestamp(response.headers.get("date"));
+    const now = Number.isFinite(serverTime) ? serverTime : Date.now();
+    return profile.plan === "pro" && Number.isFinite(expires) && expires > now
+        ? { plan: "pro", expiresAt: expiresAt }
+        : { plan: "free" };
+}
+const redeemErrors = {
+    malformed_request: "激活码格式不正确，请检查后重试",
+    login_required: LOGIN_REQUIRED,
+    request_too_large: "激活码内容过长，请检查后重试",
+    invalid_or_unavailable: "激活码无效或已不可用，请检查后重试",
+    rate_limited: "操作太频繁，请稍后重试",
+    temporarily_unavailable: "兑换服务暂时不可用，请稍后重试",
+};
+const redeemStatusCodes = {
+    400: "malformed_request",
+    401: "login_required",
+    413: "request_too_large",
+    422: "invalid_or_unavailable",
+    429: "rate_limited",
+    503: "temporarily_unavailable",
+};
+export async function redeemProCode(accessToken, code) {
+    if (!accessToken.trim())
+        throw new Error(LOGIN_REQUIRED);
+    const normalizedCode = code.trim();
+    if (!normalizedCode)
+        throw new Error("请输入激活码");
+    const { response, body: responseBody } = await request(REDEEM_URL, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${accessToken}`, "Content-Type": "application/json" },
+        body: JSON.stringify({ code: normalizedCode }),
+    });
+    const body = record(responseBody);
+    if (!response.ok) {
+        const code = body?.code ?? record(body?.error)?.code;
+        const knownCode = typeof code === "string" && Object.hasOwn(redeemErrors, code) ? code : redeemStatusCodes[response.status];
+        throw new Error(knownCode ? redeemErrors[knownCode] : "兑换失败，请稍后重试");
+    }
+    const expires = timestamp(body?.plan_expires_at);
+    const serverTime = timestamp(body?.server_time);
+    if (body?.ok !== true || body.valid !== true || typeof body.idempotent !== "boolean" ||
+        typeof body.months !== "number" || !Number.isFinite(body.months) || body.months < 0 ||
+        !Number.isFinite(expires) || !Number.isFinite(serverTime)) {
+        throw new Error("兑换结果尚未确认，请刷新会员状态后重试");
+    }
+    if (expires <= serverTime) {
+        throw new Error(body.idempotent
+            ? "此激活码已兑换且权益已到期，请使用新的激活码"
+            : "兑换结果尚未确认，请刷新会员状态后重试");
+    }
+    return { expiresAt: body.plan_expires_at, idempotent: body.idempotent };
+}
+//# sourceMappingURL=pro-membership.js.map

package/dist/client-core/src/pro-membership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pro-membership.js","sourceRoot":"","sources":["../../../../client-core/src/pro-membership.ts"],"names":[],"mappings":"AAYA,MAAM,CAAC,MAAM,iBAAiB,GAAG,iCAAiC,CAAC;AAEnE,MAAM,UAAU,GAAG,mCAAmC,CAAC;AACvD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7H,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,IAAiB;IACnD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;gBAAE,MAAM,KAAK,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAChF,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA6B;IACpE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3F,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,uDAAuD,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;IACzJ,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;QAC5C,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,WAAW,EAAE,EAAE;KACrF,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IACxF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC;IAC1C,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAClE,OAAO,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,GAAG;QACxE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAmB,EAAE;QACjD,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,YAAY,GAA2B;IAC3C,iBAAiB,EAAE,iBAAiB;IACpC,cAAc,EAAE,cAAc;IAC9B,iBAAiB,EAAE,gBAAgB;IACnC,sBAAsB,EAAE,mBAAmB;IAC3C,YAAY,EAAE,aAAa;IAC3B,uBAAuB,EAAE,iBAAiB;CAC3C,CAAC;AAEF,MAAM,iBAAiB,GAA2B;IAChD,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,gBAAgB;IACrB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,wBAAwB;IAC7B,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,yBAAyB;CAC/B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAmB,EAAE,IAAY;IACnE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE;QACjE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QACvF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;KAC/C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC;QACrD,MAAM,SAAS,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5H,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAChD,IACE,IAAI,EAAE,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,SAAS;QAChF,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QACnF,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EACzD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU;YAC7B,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,eAAyB,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AACpF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "linkshell-cli",
-  "version": "0.10.45",
+  "version": "0.10.46",
   "description": "Follow, steer and approve the coding agents on your computer (Claude Code, Codex, Gemini, Copilot and more) from your phone",
   "type": "module",
   "main": "dist/cli/src/index.js",
@@ -33,8 +33,8 @@
     "commander": "^13.1.0",
     "node-pty": "^1.1.0",
     "qrcode-terminal": "^0.12.0",
-    "@linkshell/host": "0.4.43",
-    "@linkshell/gateway": "0.6.22",
+    "@linkshell/gateway": "0.6.23",
+    "@linkshell/host": "0.4.44",
     "@linkshell/wire": "0.2.16"
   },
   "devDependencies": {

package/src/auth.ts

@@ -91,6 +91,9 @@ export async function refreshAccessToken(): Promise<AuthTokens | null> {
         userId: body.user.id,
         email: body.user.email ?? auth.email,
       };
+      // A login or logout may finish while the refresh is in flight.
+      const current = loadAuth();
+      if (tokens.userId !== auth.userId || current?.userId !== auth.userId || current.refreshToken !== auth.refreshToken) return null;
       saveAuth(tokens);
       return tokens;
     } catch {

package/src/commands/desktop.ts

@@ -10,17 +10,22 @@ import { prepareDesktopUpdate, recoverDesktopUpdate } from "./desktop-update.js"
 import { sep } from "node:path";
 import { ensureHostRunning, silenceSqliteWarning, withRunningHost } from "./host.js";
 import { linkshellDir, readHostLaunch, readHostOwner, readPid, stopDaemonAndWait } from "../utils/daemon.js";
+import { cachedMembership, redeemDesktopPro, refreshMembership } from "../pro-membership.js";
 
 export function installationSource(path: string): "homebrew" | "npm" {
   return path.includes(`${sep}Cellar${sep}linkshell${sep}`) ? "homebrew" : "npm";
 }
 
+function desktopAccount() {
+  const auth = loadAuth();
+  return auth?.userId ? { state: "signed-in", email: auth.email, userId: auth.userId, ...cachedMembership(auth.userId) } : { state: "signed-out" };
+}
+
 /** A versioned, read-only snapshot. Missing sections stay unknown, never healthy. */
 export async function desktopSnapshot(version: string) {
   let executable = process.argv[1]!;
   try { executable = realpathSync(executable); } catch { /* Retain the launch path for diagnosis. */ }
-  const auth = loadAuth();
-  const account = auth?.userId ? { state: "signed-in", email: auth.email, userId: auth.userId } : { state: "signed-out" };
+  const account = desktopAccount();
   const base = { account, schema: 1, cliVersion: version, home: linkshellDir(), source: standaloneBundle() ? "standalone" : installationSource(executable), executable, hostOwner: readPid("host") ? readHostOwner(readPid("host")!) ?? "external" : "none", appBundle: standaloneBundle() };
   const result = await withRunningHost(async (client) => {
     const machine = await client.call("machine.info", {}, 5000);
@@ -33,10 +38,49 @@ export async function desktopSnapshot(version: string) {
   return result ? { ...base, status: "running", ...result } : { ...base, status: readPid("host") ? "unreachable" : "stopped" };
 }
 
-export async function runDesktop(version: string, action: string): Promise<void> {
+async function redemptionInput(input: AsyncIterable<string | Buffer>): Promise<{ code: string; userId: string }> {
+  const chunks: Buffer[] = [];
+  let length = 0;
+  for await (const chunk of input) {
+    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+    length += buffer.length;
+    if (length > 4096) throw new Error("激活码内容过长，请检查后重试");
+    chunks.push(buffer);
+  }
+  try {
+    const value = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    if (typeof value?.code === "string" && typeof value?.userId === "string" && value.userId.trim()) return { code: value.code, userId: value.userId };
+  } catch { /* Never echo an input that contains the activation code. */ }
+  throw new Error("激活码请求无效，请刷新账号后重试");
+}
+
+export async function runDesktop(version: string, action: string, input: AsyncIterable<string | Buffer> = process.stdin): Promise<void> {
   silenceSqliteWarning();
   try {
-    if (action === "pair") {
+    if (action === "redeem-pro") {
+      const { code, userId } = await redemptionInput(input);
+      const result = await redeemDesktopPro(code, userId);
+      if (loadAuth()?.userId === userId) {
+        try {
+          const gateway = await refreshGateway(15_000);
+          if (gateway && gateway.status !== "online" && gateway.status !== "off") result.accountWarning ??= "兑换已成功，网关尚未连接，请稍后重新连接";
+        } catch {
+          result.accountWarning ??= "兑换已成功，本机服务暂未刷新，请稍后重新连接网关";
+        }
+      }
+      // A host query failing cannot turn a confirmed redemption into a failed redemption.
+      const snapshot = await desktopSnapshot(version).catch(() => {
+        result.accountWarning ??= "兑换已成功，本机服务状态暂时无法读取，请稍后刷新";
+        return { schema: 1, cliVersion: version, status: "unknown", account: desktopAccount() };
+      });
+      snapshot.account = desktopAccount();
+      if (snapshot.account.state === "signed-in" && "userId" in snapshot.account && snapshot.account.userId === userId) Object.assign(snapshot.account, { plan: "pro", planExpiresAt: result.redemption.planExpiresAt });
+      else result.accountWarning = "兑换已成功，登录账号已变更，请切回兑换时的账号查看会员状态";
+      process.stdout.write(`${JSON.stringify({ ...snapshot, ...result })}\n`);
+      return;
+    }
+    if (action === "account-refresh") await refreshMembership();
+    else if (action === "pair") {
       const result = await withRunningHost(async client => {
         const gateway = await client.call("gateway.status", {});
         if (gateway.status !== "online") throw new Error("请先连接网关。官方网关需要登录 Pro 账号；自建网关可以免登录配对。");
@@ -77,7 +121,7 @@ export async function runDesktop(version: string, action: string): Promise<void>
       const env = { ...process.env, ...(pid ? readHostLaunch(pid) : {}) };
       await stopDaemonAndWait("host", 30_000, pid ?? undefined);
       if (action === "restart") await ensureHostRunning(env);
-    } else if (action !== "snapshot") throw new Error("Unknown desktop action");
+    } else if (action !== "snapshot" && action !== "account-refresh") throw new Error("Unknown desktop action");
     process.stdout.write(`${JSON.stringify(await desktopSnapshot(version))}\n`);
   } catch (error) {
     process.stdout.write(`${JSON.stringify({ schema: 1, status: "unknown", error: error instanceof Error ? error.message : String(error) })}\n`);

package/src/commands/login.ts

@@ -2,6 +2,8 @@ import * as http from "node:http";
 import { execSync } from "node:child_process";
 import { saveAuth, SUPABASE_URL, SUPABASE_ANON_KEY } from "../auth.js";
 import type { AuthTokens } from "../auth.js";
+import { cacheMembership, type DesktopMembership } from "../pro-membership.js";
+import { fetchProMembership } from "../../../client-core/src/pro-membership.js";
 
 const ITOOL_AUTH_URL = "https://itool.tech/en/auth/linkshell";
 
@@ -76,6 +78,7 @@ export async function runLogin(): Promise<LoginResult | null> {
         let userId = "";
         let email = "";
         let plan = "free";
+        let membership: DesktopMembership = { plan: "unknown", planExpiresAt: null };
         try {
           const userRes = await fetch(`${SUPABASE_URL}/auth/v1/user`, {
             headers: {
@@ -92,31 +95,9 @@ export async function runLogin(): Promise<LoginResult | null> {
             userId = user.id;
             email = user.email ?? "";
 
-            // Check subscription from profiles table
-            const profileRes = await fetch(
-              `${SUPABASE_URL}/rest/v1/profiles?id=eq.${userId}&select=plan,plan_expires_at&limit=1`,
-              {
-                headers: {
-                  Authorization: `Bearer ${accessToken}`,
-                  apikey: SUPABASE_ANON_KEY,
-                },
-                signal: AbortSignal.timeout(5_000),
-              },
-            );
-            if (profileRes.ok) {
-              const profiles = (await profileRes.json()) as {
-                plan: string;
-                plan_expires_at: string | null;
-              }[];
-              if (
-                profiles.length > 0 &&
-                profiles[0]!.plan === "pro" &&
-                profiles[0]!.plan_expires_at &&
-                new Date(profiles[0]!.plan_expires_at) > new Date()
-              ) {
-                plan = "pro";
-              }
-            }
+            const profile = await fetchProMembership({ userId, accessToken, supabaseUrl: SUPABASE_URL, anonKey: SUPABASE_ANON_KEY });
+            plan = profile.plan;
+            membership = { plan: profile.plan, planExpiresAt: profile.expiresAt ?? null };
           }
         } catch {}
 
@@ -134,6 +115,7 @@ export async function runLogin(): Promise<LoginResult | null> {
           email,
         };
         saveAuth(tokens);
+        try { cacheMembership(userId, membership); } catch { /* A cache write cannot invalidate a completed login. */ }
 
         res.writeHead(200);
         res.end("ok");

package/src/pro-membership.ts

@@ -0,0 +1,82 @@
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { fetchProMembership, redeemProCode } from "../../client-core/src/pro-membership.js";
+import { getValidToken, loadAuth, SUPABASE_ANON_KEY, SUPABASE_URL } from "./auth.js";
+import { linkshellDir } from "./utils/daemon.js";
+
+export interface DesktopMembership {
+  plan: "pro" | "free" | "unknown";
+  planExpiresAt: string | null;
+}
+
+const unknownMembership: DesktopMembership = { plan: "unknown", planExpiresAt: null };
+const changedAccount = "登录账号已变更，请刷新账号后重试";
+const cachePath = () => join(linkshellDir(), "account-pro.json");
+
+/** Snapshot polling stays offline; the dashboard refreshes this account-scoped cache separately. */
+export function cachedMembership(userId: string): DesktopMembership {
+  try {
+    const value = JSON.parse(readFileSync(cachePath(), "utf8"));
+    if (value.userId !== userId || !["pro", "free", "unknown"].includes(value.plan)) return { ...unknownMembership };
+    const expiry = typeof value.planExpiresAt === "string" && Number.isFinite(Date.parse(value.planExpiresAt)) ? value.planExpiresAt : null;
+    if (value.plan === "pro" && !expiry) return { ...unknownMembership };
+    return { plan: value.plan === "pro" ? expiry && Date.parse(expiry) > Date.now() ? "pro" : "free" : value.plan, planExpiresAt: expiry };
+  } catch {
+    return { ...unknownMembership };
+  }
+}
+
+export function cacheMembership(userId: string, membership: DesktopMembership, observedAt = Date.now()): void {
+  try {
+    const previous = JSON.parse(readFileSync(cachePath(), "utf8"));
+    // A profile request begun before redemption cannot replace its confirmed result.
+    if (previous.userId === userId && previous.observedAt > observedAt) return;
+  } catch { /* There may not be a prior account observation. */ }
+  mkdirSync(linkshellDir(), { recursive: true });
+  writeFileSync(cachePath(), JSON.stringify({ userId, ...membership, observedAt }) + "\n", { encoding: "utf8", mode: 0o600 });
+}
+
+async function accountToken(expectedUserId?: string): Promise<{ userId: string; accessToken: string }> {
+  const auth = loadAuth();
+  if (!auth?.userId) throw new Error("请先登录账号");
+  if (expectedUserId !== undefined && auth.userId !== expectedUserId) throw new Error(changedAccount);
+  const accessToken = await getValidToken();
+  const current = loadAuth();
+  if (current?.userId !== auth.userId) throw new Error(changedAccount);
+  if (!accessToken || current.accessToken !== accessToken) throw new Error("登录已失效，请重新登录后再试");
+  return { userId: auth.userId, accessToken };
+}
+
+export async function refreshMembership(): Promise<DesktopMembership> {
+  const userId = loadAuth()?.userId;
+  const observedAt = Date.now();
+  try {
+    const account = await accountToken(userId);
+    const membership = await fetchProMembership({ ...account, supabaseUrl: SUPABASE_URL, anonKey: SUPABASE_ANON_KEY });
+    if (loadAuth()?.userId !== account.userId) throw new Error(changedAccount);
+    const result: DesktopMembership = { plan: membership.plan, planExpiresAt: membership.expiresAt ?? null };
+    cacheMembership(account.userId, result, observedAt);
+    return result;
+  } catch (error) {
+    if (userId && loadAuth()?.userId === userId) {
+      try { cacheMembership(userId, unknownMembership, observedAt); } catch { /* Preserve the request's error. */ }
+    }
+    throw error;
+  }
+}
+
+export async function redeemDesktopPro(code: string, userId: string) {
+  if (!code.trim()) throw new Error("请输入激活码");
+  if (Buffer.byteLength(code, "utf8") > 512) throw new Error("激活码内容过长，请检查后重试");
+  const account = await accountToken(userId);
+  const redeemed = await redeemProCode(account.accessToken, code);
+  const redemption = { userId, idempotent: redeemed.idempotent, planExpiresAt: redeemed.expiresAt };
+  let accountWarning: string | undefined;
+  try {
+    if (loadAuth()?.userId === userId) cacheMembership(userId, { plan: "pro", planExpiresAt: redeemed.expiresAt });
+  } catch {
+    accountWarning = "兑换已成功，会员状态暂未保存，请刷新会员状态";
+  }
+  if (loadAuth()?.userId !== userId) accountWarning = "兑换已成功，登录账号已变更，请切回兑换时的账号查看会员状态";
+  return { redemption, accountWarning };
+}