mslxdff 0.1.138 → 0.1.140

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mslxdff",
-  "version": "0.1.138",
+  "version": "0.1.140",
   "description": "测试项目，请勿使用。",
   "type": "module",
   "bin": {

package/src/chooser.js

@@ -1,33 +1,52 @@
-// 交互式模型选择器的纯渲染逻辑（便于测试）；键盘循环在 bin/mslxdff.js
+// 交互式模型选择器的纯渲染逻辑（便于测试）；键盘循环在 interactive.js
 
-// items: [{ id, status?, ms?, fail?, current?, picked? }]；cursor 当前高亮行
+// items: [{ id, status?, ms?, fail?, current?, picked? }]；cursor 当前高亮行（全局下标）
 // multi=true 时多选勾选（picked 显示 [x]/[ ]），否则单选默认模型（当前显示 ✓）
-// 返回行数组（无 ANSI 颜色，纯文本标记，Windows 终端友好）
-export function renderChooser(items, cursor = 0, { multi = false } = {}) {
-  return items.map((it, i) => {
+// index/size 可选——窗口分页渲染（只画当页 + 页头），不传 size 则全量渲染（行为不变）
+// Note: 分页是本模块职责（键盘循环在 interactive.js），不传 size 必全量渲染 — 见 .agents/notes/implemented/feature/2026-09-21-models-paginated-chooser.md
+export function renderChooser(items, cursor = 0, { multi = false, index = 0, size } = {}) {
+  if (size == null) return renderRows(items, cursor, 0, multi);
+  const total = items.length;
+  const sz = Math.max(1, Number(size) || 1);
+  const pages = Math.max(1, Math.ceil(total / sz));
+  const idx = Math.min(Math.max(Number(index) || 0, 0), pages - 1);
+  const start = idx * sz;
+  const rows = [`── 第 ${idx + 1}/${pages} 页 · 共 ${total} 项（←/→ 翻页） ──`];
+  rows.push(...renderRows(items.slice(start, start + sz), cursor, start, multi));
+  return rows;
+}
+
+function renderRows(slice, cursor, offset, multi) {
+  return slice.map((it, li) => {
+    const i = offset + li;
     const arrow = i === cursor ? "❯" : " ";
-    const check = multi
-      ? (it.picked ? " [✓]" : " [ ]")
-      : (it.current ? " ✓ (current)" : "");
     let state = "";
     if (it.fail) state = `  [fail: ${it.fail}]`;
     else if (it.ms != null) state = `  [${it.ms}ms]`;
     else if (it.status && it.status !== "normal") state = `  [${it.status}]`;
+    if (multi) {
+      const box = it.picked ? "[✓]" : "[ ]";
+      return `${arrow} ${box} ${it.id}${state}`;
+    }
+    const check = it.current ? " ✓ (current)" : "";
     return `${arrow} ${it.id}${check}${state}`;
   });
 }
 
-export function renderChooserHelp(multi = false) {
+export function renderChooserHelp(multi = false, hasPages = false) {
+  const paging = hasPages ? " · ←/→ page" : "";
   return multi
-    ? ["", "↑/↓ move · Space toggle pick · Enter save picks · q/Esc cancel"]
-    : ["", "↑/↓ move · Enter select as default · q/Esc cancel"];
+    ? ["", `↑/↓ move · Space toggle pick${paging} · Enter save picks · q/Esc cancel`]
+    : ["", `↑/↓ move${paging} · Enter select as default · q/Esc cancel`];
 }
 
-// 解析按键：返回 "up" | "down" | "enter" | "cancel" | "space" | null(忽略)
+// 解析按键：返回 "up" | "down" | "pageup" | "pagedown" | "enter" | "cancel" | "space" | null(忽略)
 export function parseKey(str) {
   if (!str) return null;
   if (str === "\x1b[A" || str === "k") return "up";
   if (str === "\x1b[B" || str === "j") return "down";
+  if (str === "\x1b[D" || str === "h" || str === "\x1b[5~") return "pageup";
+  if (str === "\x1b[C" || str === "l" || str === "\x1b[6~") return "pagedown";
   if (str === "\r" || str === "\n") return "enter";
   if (str === " " || str === "\x1b[32") return "space"; // 空格（32=0x20 的 ASC 表示）或某些终端 terminator
   if (str === "\x1b" || str === "q" || str === "\x03") return "cancel";

package/src/cli/commands/model/list-live.js

@@ -0,0 +1,22 @@
+// 交互式 `-models` 候选合并（从 list.js 拆出以守住 ≤10KB 体积门）。
+// allowAny 且空白名单的供应商（qoder/codearts 类）不写 allowlist，其模型只存在于
+// daemon 聚合的 /v1/models —— 不并入这些 id，该供应商在交互列表里「一个都挑不到」。
+import { loadProviderAllowedModels } from "../../../state.js";
+
+/** 把「空白名单且已启用」供应商的网关 live 模型并入候选（按前缀归属，去重）。 */
+export async function mergeLiveIds({ combinedIds, seen, knownProviders, liveIds }) {
+  const needsLive = knownProviders.filter(
+    (k) => String(k).toLowerCase() !== "opencode" && loadProviderAllowedModels(k).length === 0,
+  );
+  if (!needsLive.length) return;
+  const { fetchDaemonModelIds } = await import("./live-models.js");
+  const live = await fetchDaemonModelIds();
+  for (const id of live) {
+    if (liveIds.includes(id)) continue; // 单供应商缓存已含 → 不重复
+    const pid = String(id).includes("/") ? String(id).split("/")[0].toLowerCase() : "opencode";
+    if (!needsLive.some((k) => String(k).toLowerCase() === pid)) continue;
+    if (seen.has(id)) continue;
+    seen.add(id);
+    combinedIds.push(id);
+  }
+}

package/src/cli/commands/model/list.js

@@ -10,6 +10,7 @@ import { pickInteractiveMulti } from "../../interactive.js";
 import { buildAliasMap, readFullAliases, renderProviderList, renderFreeList, groupByProvider } from "./list-render.js";
 import { renderOtherProviders } from "./list-providers.js";
 import { filterStalePicks } from "../../../providers/model-id.js";
+import { mergeLiveIds } from "./list-live.js";
 
 /**
  * `-model list` 全流程：参数解析 → 刷新/回退 → provider 分支 → TTY 交互 → 分组渲染。
@@ -159,6 +160,7 @@ export async function handleModelList(args, idx, sub) {
             }
           }
         }
+        await mergeLiveIds({ combinedIds, seen, knownProviders, liveIds: ids });
         staleFilter = { knownProviders, liveIds: ids, allowedIds };
       } catch {}
       // provider 已不存在的 picks 孤儿不进交互列表（数据不动，status --all 仍可审计）。

package/src/cli/commands/model/live-models.js

@@ -0,0 +1,24 @@
+// 网关 live 模型列表：allowAny 且空白名单的供应商（qoder/codearts 类）不写 allowlist，
+// 其模型只存在于 daemon 聚合的 /v1/models 里；交互式 `-models` 必须并入这些 id，
+// 否则该供应商「一个模型都挑不到」（用户视角：-models 什么也没有）。
+import { compatFetch, timeoutSignal } from "../../../compat.js";
+import { effectivePort, effectiveHost } from "../../policy.js";
+import { loadToken } from "../../../state.js";
+
+export async function fetchDaemonModelIds({ fetchImpl = compatFetch, port, host, token, timeoutMs = 6000 } = {}) {
+  try {
+    const p = port ?? effectivePort([]);
+    const h = host ?? effectiveHost() ?? "127.0.0.1";
+    const tk = (token ?? (await loadToken())?.token) || "";
+    const res = await fetchImpl(`http://${h}:${p}/v1/models?all=1`, {
+      headers: tk ? { Authorization: `Bearer ${tk}` } : {},
+      signal: timeoutSignal(timeoutMs),
+    });
+    if (!res?.ok) return [];
+    const json = await res.json().catch(() => ({}));
+    return (json?.data || []).map((m) => m?.id).filter(Boolean);
+  } catch {
+    // 网关没跑 / 超时 / 鉴权失败：静默降级（候选列表退回 allowlist + picks）
+    return [];
+  }
+}

package/src/cli/commands/provider/codearts-login.js

@@ -0,0 +1,45 @@
+// `-provider codearts login`：浏览器 PKCE 登录华为云 → 凭证 blob 落盘 providerConfigs.codearts。
+// 约定（对齐 cline-login/workbuddy-login）：不匹配返 false 交给下一个 handler；匹配即处理并退出。
+import { normalizeProviderId } from "../../../providers/model-id.js";
+import { defaultStateFile, loadProviderKeys, saveProviderConfig, saveProviderAllowAnyModels, loadProviderBaseUrl } from "../../../state.js";
+import { SNAP_BASE } from "../../../providers/codearts/const.js";
+import { runCodeartsLogin, accountToBlob } from "../../../providers/codearts/login.js";
+import { accountFromBlob } from "../../../providers/codearts/auth-pool.js";
+
+export async function handleCodeartsLogin(id, sub, rest = [], deps = {}) {
+  if (normalizeProviderId(id) !== "codearts") return false;
+  if (!(sub === "login" || sub === "auth" || sub === "oauth")) return false;
+  const noAllowAny = (rest || []).includes("--no-allow-any");
+  const file = deps.file || defaultStateFile();
+  const fetchImpl = deps.fetchImpl;
+  const log = deps.log || ((m) => console.log(m));
+
+  try {
+    const { account, state } = await runCodeartsLogin({ fetchImpl, log });
+    const blob = accountToBlob(account, { codeVerifier: state.codeVerifier, dpopJwk: state.dpopJwk, clientId: state.clientId });
+    // 同一账号重复登录：替换旧 blob；新账号：追加（多账号 keyring 轮转）。
+    // 去重键：userId 非空才可信；双方任一为空时退化为 refreshToken 比较
+    // （空 userId==空 userId 的误判会把第二个不同账号当同一账号替换，真机实测恒剩 1 key）
+    const cur = loadProviderKeys("codearts", { file }).filter((k) => {
+      const parsed = accountFromBlob(k);
+      if (!parsed) return false;
+      if (parsed.userId && account.userId) return parsed.userId !== account.userId;
+      return parsed.refreshToken !== account.refreshToken;
+    });
+    const baseUrl = loadProviderBaseUrl("codearts", { file }) || SNAP_BASE;
+    saveProviderConfig("codearts", { baseUrl, keys: [...cur, blob] }, { file });
+    if (!noAllowAny) saveProviderAllowAnyModels("codearts", true, { file });
+
+    log("");
+    log(`✅ codearts 登录成功：${account.userName || account.userId || "(user)"}（剩余账号数：${cur.length + 1}）`);
+    log(`   baseUrl: ${baseUrl}`);
+    log(`   凭证已写入 providerConfigs.codearts.keys（state.json，0600 权限目录，绝不入库）`);
+    if (!noAllowAny) log("   allowAnyModels=on（免费福利供应商默认放行全部模型；收紧：mslxdff -provider codearts allowAny off）");
+    log("   生效：mslxdff -restart（用户终端跑），然后 mslxdff -provider codearts models 验证");
+    process.exit(0);
+  } catch (err) {
+    console.error(`❌ codearts 登录失败：${String(err?.message || err)}`);
+    process.exit(1);
+  }
+  return true;
+}

package/src/cli/commands/provider/index.js

@@ -41,6 +41,9 @@ export async function handleProvider(args) {
     console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx gpt-4  add with allowlist");
     console.error("            mslxdff -provider add myapi https://api.example.com/v1 sk-xxx --models-path /v1/models --chat-path /v1/chat/completions");
     console.error("            mslxdff -provider openrouter                      interactive hidden input (append)");
+    console.error("            mslxdff -provider codearts login          华为云 CodeArts PKCE 授权（浏览器登录 → 凭证 blob 落盘，ADR-0027）");
+    console.error("            mslxdff -provider qoder login [--region cn|global]   Qoder 设备授权（国际站默认，国内站 --region cn）");
+    console.error("            mslxdff -provider qoder checkin [--json] [--region cn|global] [--any] [--dry]  每日签到领积分（cn=daily-check-in，global=campaigns）");
     console.error("            mslxdff -provider openrouter clear                remove all keys");
     process.exit(1);
   }
@@ -67,6 +70,15 @@ export async function handleProvider(args) {
   if (await handleClineLogin(id, sub)) return true;
   const { handleWorkbuddyLogin } = await import("./workbuddy-login.js");
   if (await handleWorkbuddyLogin(id, sub, rest)) return true;
+  const { handleCodeartsLogin } = await import("./codearts-login.js");
+  if (await handleCodeartsLogin(id, sub, rest)) return true;
+  const { handleTraeworkLogin, handleTraeworkCheckin } = await import("./traework-login.js");
+  if (await handleTraeworkLogin(id, sub, rest)) return true;
+  if (await handleTraeworkCheckin(id, sub, rest)) return true;
+const { handleQoderLogin } = await import("./qoder-login.js");
+  if (await handleQoderLogin(id, sub, rest)) return true;
+  const { handleQoderCheckin } = await import("./qoder-checkin.js");
+  if (await handleQoderCheckin(id, sub, rest)) return true;
   const { handleProviderConfig } = await import("./config.js");
   if (await handleProviderConfig(id, sub, rest)) return true;
   const { handleProviderAllowlist } = await import("./allowlist.js");

package/src/cli/commands/provider/keys.js

@@ -10,12 +10,23 @@ export async function handleProviderKeys(id, sub, rest, args) {
     else console.log(`provider: ${id}${id === "openrouter" ? " (built-in baseUrl: https://openrouter.ai/api/v1)" : ""}`);
     if (keys.length) {
       console.log(`  keys: ${keys.length} key${keys.length > 1 ? "s" : ""}`);
-      keys.forEach((k, i) => console.log(`  [${i + 1}]  ${k.slice(0, 4)}…${k.slice(-4)} (${k.length} chars)`));
+      if (id === "codearts") {
+        const { accountFromBlob } = await import("../../../providers/codearts/auth-pool.js");
+        for (const [i, k] of keys.entries()) {
+          const a = accountFromBlob(k);
+          if (a) console.log(`  [${i + 1}]  user=${a.userName || "(未识别)"} uid=${a.userId ? `${a.userId.slice(0, 8)}…` : "(空，请删了重登回填)"} domain=${a.domainId ? a.domainId.slice(0, 8) + "…" : "(空)"} (${k.length} chars)`);
+          else console.log(`  [${i + 1}]  ${k.slice(0, 4)}…${k.slice(-4)} (${k.length} chars)`);
+        }
+      } else keys.forEach((k, i) => console.log(`  [${i + 1}]  ${k.slice(0, 4)}…${k.slice(-4)} (${k.length} chars)`));
       console.log(`  remove by: mslxdff -provider ${id} remove <seq> [seq...] | <key-value>`);
     } else {
       console.log(`  keys: (no keys configured)`);
     }
-    console.log(`  share keys to peers:   借出（默认，key 随转发自动附带，ADR-0019）`);
+    try {
+      const { shareableProviderIds } = await import("../../../providers/share-keys.js");
+      const shared = shareableProviderIds().includes(id);
+      console.log(`  share keys to peers:   ${shared ? "借出（随转发自动附带，ADR-0019）" : "不借出（local-only / 硬排除，codearts/cline 恒不借，ADR-0019/0015）"}`);
+    } catch { console.log(`  share keys to peers:   借出（默认，key 随转发自动附带，ADR-0019）`); }
     console.log(`  allowAnyModels: ${allowAny ? "ON (empty allowlist = allow all)" : "OFF (empty allowlist = BLOCK ALL)"}  (mslxdff -provider ${id} allowAny on|off)`);
     if (allowed.length) console.log(`  allowedModels: ${allowed.length} (${allowed.join(", ")})  — only these can be used`);
     else console.log(`  allowedModels: (none — ${allowAny ? "allow all" : "BLOCK ALL"})  (mslxdff -provider ${id} allowlist set <model...>  or  allowAny on)`);

package/src/cli/commands/provider/models.js

@@ -41,6 +41,15 @@ export async function handleProviderModels(id, sub, args, rest) {
       // 与聚合目录同源：recommended-models 的 free（generic 的 /api/v1/models 是全量目录，含大量不可用条目）
       const { createClineProvider } = await import("../../../providers/cline.js");
       provider = createClineProvider({ id, baseUrl: baseUrl || undefined, apiKeys: keys, file: defaultStateFile() });
+    } else if (id === "codearts") {
+      const { createCodeartsProvider } = await import("../../../providers/codearts.js");
+      provider = createCodeartsProvider({ baseUrl: baseUrl || undefined, apiKeys: keys, file: defaultStateFile() });
+    } else if (id === "traework") {
+      const { createTraeworkProvider } = await import("../../../providers/traework.js");
+      provider = createTraeworkProvider({ baseUrl: baseUrl || undefined, apiKeys: keys, auths, file: defaultStateFile() });
+    } else if (id === "qoder") {
+      const { createQoderProvider } = await import("../../../providers/qoder/index.js");
+      provider = createQoderProvider({ id, apiKeys: keys, file: defaultStateFile() });
     } else {
       if (!baseUrl) {
         console.error(`provider ${id}: missing baseUrl — set via: mslxdff -provider ${id} set-url <baseUrl>`);

package/src/cli/commands/provider/qoder-checkin.js

@@ -0,0 +1,81 @@
+// mslxdff -provider qoder checkin [--json] [--region cn|global] [--any] [--dry]
+// 四态反馈：空（无账号→引导 login）→ 执行中（逐号打印）→ 成功 ✅ / 失败 ❌ + 下一步。
+// 账号单一源 = auths/qoder-<uid>.json（含每号 region）；device token 直接取该文件。
+import { normalizeProviderId } from "../../../providers/model-id.js";
+import { normalizeRegion } from "../../../providers/qoder/constants.js";
+import { compatFetch } from "../../../compat.js";
+
+function parseFlags(rest) {
+  const has = (...names) => names.some((n) => rest.includes(n));
+  const regionArg = (() => {
+    const i = rest.findIndex((x) => x === "--region");
+    return i >= 0 ? String(rest[i + 1] || "") : "";
+  })();
+  return {
+    json: has("--json"),
+    dry: has("--dry", "--dry-run"),
+    any: has("--any", "--promo"),
+    region: regionArg ? normalizeRegion(regionArg) : "",
+    badRegion: Boolean(regionArg) && !["cn", "global"].includes(String(regionArg).trim().toLowerCase()),
+  };
+}
+
+export async function handleQoderCheckin(id, sub, rest = [], deps = {}) {
+  if (normalizeProviderId(id) !== "qoder") return false;
+  if (sub !== "checkin" && sub !== "check-in" && sub !== "signin") return false;
+  const log = deps.log || ((m) => console.log(m));
+  const err = deps.err || ((m) => console.error(m));
+  const fetchImpl = deps.fetchImpl || compatFetch;
+  const flags = parseFlags(rest.slice(1));
+  if (flags.badRegion) { err("usage: mslxdff -provider qoder checkin [--json] [--region cn|global] [--any] [--dry]"); if (!deps.noExit) process.exit(1); return true; }
+
+  const accounts = deps.accounts
+    || (await import("../../../providers/qoder/account-store.js")).listAccountDocs()
+      .map((d) => ({ uid: d.uid, deviceToken: d.doc?.auth?.deviceToken || "", region: d.doc?.auth?.region || "global", name: d.doc?.account?.name || "" }));
+  const picked = flags.region ? accounts.filter((a) => normalizeRegion(a.region) === flags.region) : accounts;
+
+  // 空状态：不留白
+  if (!picked.length) {
+    log(accounts.length
+      ? `qoder 签到：没有 ${flags.region} 区账号（现有 ${accounts.length} 个：${accounts.map((a) => normalizeRegion(a.region)).join("/")}）`
+      : "qoder 签到：还没有账号");
+    log("  下一步：mslxdff -provider qoder login [--region cn|global]");
+    if (!deps.noExit) process.exit(accounts.length ? 0 : 1);
+    return true;
+  }
+
+  const { runCheckin, fetchQuota } = await import("../../../providers/qoder/checkin.js");
+  log(`Qoder 签到 · ${picked.length} 个账号（cn ${picked.filter((a) => normalizeRegion(a.region) === "cn").length} / global ${picked.filter((a) => normalizeRegion(a.region) === "global").length}）${flags.dry ? " · 干跑（只查不领）" : ""}`);
+  const results = [];
+  for (let i = 0; i < picked.length; i++) {
+    const a = picked[i];
+    const tag = `${String(a.uid).slice(0, 8)}…（${normalizeRegion(a.region)}）`;
+    if (!a.deviceToken) {
+      results.push({ uid: a.uid, region: normalizeRegion(a.region), ok: false, status: "no_token", message: "无 device token" });
+      log(`  ❌ [${i + 1}/${picked.length}] ${tag} 无 device token → 重新 login`);
+      continue;
+    }
+    log(`  ⏳ [${i + 1}/${picked.length}] ${tag} 签到中…`);
+    const r = flags.dry
+      ? { ...(await runCheckin({ deviceToken: a.deviceToken, region: a.region, fetchImpl: deps.fetchImpl, allowPromo: flags.any, probeOnly: true })), dry: true }
+      : await runCheckin({ deviceToken: a.deviceToken, region: a.region, fetchImpl: deps.fetchImpl, allowPromo: flags.any });
+    const quota = await fetchQuota({ deviceToken: a.deviceToken, region: a.region, fetchImpl: deps.fetchImpl }).catch(() => ({ ok: false }));
+    r.quota = quota.ok ? `${quota.remaining}/${quota.total} ${quota.unit}${quota.exhausted ? "（已耗尽）" : ""}` : "余额不可用";
+    r.name = a.name;
+    results.push(r);
+    const icon = r.ok ? (r.status === "claimed" ? "✅" : "⚠️") : "❌";
+    const stats = r.streak || r.totalDays ? ` · 连续 ${r.streak} 天 · 累计 ${r.totalDays} 天 · 共 ${r.totalCredits} 积分` : "";
+    log(`  ${icon} [${i + 1}/${picked.length}] ${tag} ${r.message}${stats} · 余额 ${r.quota}`);
+  }
+
+  const okCount = results.filter((r) => r.ok).length;
+  const claimed = results.filter((r) => r.status === "claimed").length;
+  if (flags.json) {
+    log(JSON.stringify({ ok: okCount, total: results.length, claimed, results }, null, 2));
+  } else {
+    log(`\n结果：${okCount}/${results.length} 正常${claimed ? ` · 新领取 ${claimed} 个` : ""}`);
+    if (claimed) log("  积分到账可能有延迟（上游记账异步），可用 -provider qoder checkin 复查余额");
+  }
+  if (!deps.noExit) process.exit(results.some((r) => r.status === "error" || r.status === "no_token") ? 1 : 0);
+  return true;
+}

package/src/cli/commands/provider/qoder-login.js

@@ -0,0 +1,103 @@
+// mslxdff -provider qoder login — Qoder 设备授权（PKCE + poll），对齐 cline-login/traework-login。
+// 授权后落盘 auths/qoder-<uid>.json + state.json，完成后进程退出。
+import { compatFetch, timeoutSignal } from "../../../compat.js";
+import { normalizeProviderId } from "../../../providers/model-id.js";
+import { pkce, hex16, buildLoginUrl, waitForAuth, fetchUserInfo } from "../../../providers/qoder/oauth.js";
+
+const REGIONS = ["global", "cn"];
+
+export async function handleQoderLogin(id, sub, rest = [], deps = {}) {
+  if (normalizeProviderId(id) !== "qoder") return false;
+  if (sub !== "login" && sub !== "auth" && sub !== "oauth") return false;
+  const fetchImpl = deps.fetchImpl || compatFetch;
+  const log = deps.log || ((m) => console.log(m));
+
+  // 可选参数：--region cn 或 --region global（默认 global）
+  const regionIdx = rest.indexOf("--region") >= 0 ? rest.indexOf("--region") : rest.indexOf("-r");
+  const region = regionIdx >= 0 ? String(rest[regionIdx + 1] || "global").trim() : "global";
+  const normRegion = region === "cn" ? "cn" : "global";
+
+  const { verifier, challenge } = pkce();
+  const nonce = hex16();
+  const loginUrl = buildLoginUrl({ region: normRegion, nonce, challenge });
+
+  log("=".repeat(60));
+  log("  Qoder 登录");
+  log(`  Region: ${normRegion === "cn" ? "中国站 (qoder.com.cn)" : "国际站 (qoder.com)"}`);
+  log("=".repeat(60));
+  log("");
+  log("  1. 在浏览器打开下面链接，用 Qoder 账号登录（OAuth 授权）");
+  log("  2. 登录成功后会自动完成授权，请等待回显");
+  log("");
+  log(`  ${loginUrl}`);
+  log("");
+  log("🔄 等待你授权（自动轮询，每 3 秒，最多 10 分钟）...");
+
+  let bundle;
+  try {
+    bundle = await waitForAuth({ region: normRegion, nonce, verifier, fetchImpl, log });
+  } catch (e) {
+    console.error(`\n❌ ${e.message}`);
+    process.exit(1);
+  }
+  if (!bundle || !bundle.deviceToken) {
+    console.error("\n❌ 未获取到 device token");
+    process.exit(1);
+  }
+
+  log(`\n✅ 授权成功！deviceToken=${bundle.deviceToken.slice(0, 12)}...`);
+  if (bundle.refreshToken) log(`    refreshToken=${bundle.refreshToken.slice(0, 12)}...`);
+
+  // 取 userinfo
+  let user = { uid: "", name: "", email: "", userType: "personal_standard", organizationId: "", organizationName: "" };
+  try {
+    user = await fetchUserInfo({ region: normRegion, deviceToken: bundle.deviceToken, fetchImpl });
+    log(`    UID: ${user.uid}  昵称: ${user.name || "(空)"}  邮箱: ${user.email || "(空)"}`);
+  } catch (e) {
+    log(`    ⚠️ userinfo 失败: ${e.message}（使用 device token 前 8 位兜底 uid）`);
+    user.uid = bundle.deviceToken.slice(0, 8);
+  }
+  if (!user.uid) {
+    console.error("❌ 无法获取用户标识");
+    process.exit(1);
+  }
+
+  // 落盘
+  const { saveQoderAccount } = await import("../../../providers/qoder/account-store.js");
+  const save = deps.saveAccount || saveQoderAccount;
+  const saved = await save({
+    uid: user.uid,
+    deviceToken: bundle.deviceToken,
+    refreshToken: bundle.refreshToken || "",
+    region: normRegion,
+    name: user.name,
+    email: user.email,
+    userType: user.userType,
+    organizationId: user.organizationId,
+    organizationName: user.organizationName,
+  });
+
+  log("");
+  log("=".repeat(60));
+  log(`✅ 登录完成！`);
+  log(`   UID: ${user.uid}`);
+  log(`   账号数: ${saved.accounts}${saved.updated ? "（旧号凭证已更新）" : ""}`);
+  log(`   数据文件: ${saved.file}`);
+  log("=".repeat(60));
+  // 默认 allowAny on（免费福利供应商，对齐 codearts 惯例）
+  try {
+    const { saveProviderAllowAnyModels } = await import("../../../state.js");
+    saveProviderAllowAnyModels("qoder", true);
+    log("   allowAnyModels=on（免费福利供应商默认放行；收紧：mslxdff -provider qoder allowAny off）");
+  } catch {}
+
+  log("下一步：");
+  log("  mslxdff -provider qoder models                  列模型列表");
+  log("  mslxdff -restart（用户终端跑）                   重启网关使新账号生效");
+  log("  然后 curl http://localhost:8989/v1/chat/completions -d '{\"model\":\"qoder/auto\",\"messages\":[{\"role\":\"user\",\"content\":\"hi\"}]}'");
+  log("");
+  log("多账号：重复 `mslxdff -provider qoder login` 追加，每号独立 uid，对话自动轮换");
+
+  if (!deps.noExit) process.exit(0);
+  return true;
+}

package/src/cli/commands/provider/traework-login.js

@@ -0,0 +1,202 @@
+// mslxdff -provider traework login — 复刻 traework2api login.sh。
+// 随机 hex16 machine/device id → 构造 trae.cn 授权链接 → 打印 → stdin 读回调链接 →
+// 解析 refreshToken/userInfo/userJwt → ExchangeToken → GetUserInfo → 落盘 → 自动签到+查积分。
+import { randomBytes } from "node:crypto";
+import { compatFetch, timeoutSignal } from "../../../compat.js";
+import { CLIENT_ID, IDE_VERSION, OAUTH_HOST } from "../../../providers/traework/constants.js";
+import { normalizeExpiresAt } from "../../../providers/traework/token.js";
+
+const API_HOST = OAUTH_HOST;
+const APP_VERSION = IDE_VERSION;
+
+function hex(n) { return randomBytes(n).toString("hex"); }
+
+function readStdinLine(prompt) {
+  return new Promise((resolve) => {
+    try { process.stdout.write(`${prompt}`); } catch {}
+    let data = "";
+    const onData = (chunk) => { data += String(chunk || ""); if (data.includes("\n")) done(); };
+    const done = () => {
+      try { process.stdin.removeListener("data", onData); } catch {}
+      try { if (process.stdin.isTTY) process.stdin.setRawMode(false); } catch {}
+      try { process.stdin.pause(); } catch {}
+      resolve(data.trim());
+    };
+    try {
+      process.stdin.resume();
+      process.stdin.setEncoding("utf8");
+      process.stdin.on("data", onData);
+      process.stdin.on("end", done);
+    } catch { resolve(""); }
+  });
+}
+export function buildLoginUrl({ machineId, deviceId, traceId = hex(8) } = {}) {
+  const params = new URLSearchParams({
+    login_version: "1",
+    auth_from: "solo",
+    login_channel: "native_ide",
+    plugin_version: "2.3.62834",
+    auth_type: "local",
+    client_id: CLIENT_ID,
+    redirect: "0",
+    login_trace_id: traceId,
+    auth_callback_url: "http://127.0.0.1:18080/authorize",
+    machine_id: machineId,
+    device_id: deviceId,
+    x_device_id: deviceId,
+    x_machine_id: machineId,
+    x_device_brand: "PC",
+    x_device_type: "PC",
+    x_os_version: "1.0",
+    x_app_version: APP_VERSION,
+    x_app_type: "stable",
+  });
+  return `https://www.trae.cn/authorization?${params.toString()}`;
+}
+
+// 解析回调链接：parse_qs + 双层 unquote 容错 → { refreshToken, userInfo, userJwt }。
+export function parseCallbackUrl(url) {
+  let u;
+  try { u = new URL(String(url || "").trim()); } catch { throw new Error("回调链接不是合法 URL，请复制浏览器地址栏完整链接"); }
+  const qs = u.searchParams;
+  const rawRefresh = qs.get("refreshToken") || "";
+  const parseJsonParam = (raw) => {
+    if (!raw) return {};
+    for (const v of [raw, decodeURIComponent(raw)]) {
+      try { const o = JSON.parse(v); if (o && typeof o === "object") return o; } catch {}
+    }
+    return {};
+  };
+  const userInfo = parseJsonParam(qs.get("userInfo") || "");
+  const userJwt = parseJsonParam(qs.get("userJwt") || "");
+  let refreshToken = rawRefresh || String(userJwt.RefreshToken || "");
+  return {
+    refreshToken,
+    userInfo: { uid: String(userInfo.UserID || ""), nickname: String(userInfo.ScreenName || ""), enterpriseId: String(userInfo.TenantID || "") },
+    userJwt: { token: String(userJwt.Token || ""), refreshToken: String(userJwt.RefreshToken || ""), expiresAt: Number(userJwt.TokenExpireAt) || 0 },
+  };
+}
+
+async function postJson(fetchImpl, url, obj, headers = {}) {
+  const res = await fetchImpl(url, { method: "POST", headers: { "Content-Type": "application/json", "User-Agent": `Trae/${APP_VERSION}`, ...headers }, body: JSON.stringify(obj), signal: timeoutSignal(30000) });
+  const txt = await res.text();
+  let j;
+  try { j = JSON.parse(txt); } catch { throw new Error(`上游返回非 JSON: ${txt.slice(0, 200)}`); }
+  if (res.status >= 400) throw new Error(`上游 HTTP ${res.status}: ${txt.slice(0, 200)}`);
+  return j;
+}
+
+export async function handleTraeworkLogin(id, sub, rest = [], deps = {}) {
+  if (String(id || "").toLowerCase() !== "traework") return false;
+  if (sub !== "login" && sub !== "auth" && sub !== "oauth") return false;
+  const fetchImpl = deps.fetchImpl || compatFetch;
+  const log = deps.log || ((m) => console.log(m));
+  const machineId = hex(16);
+  const deviceId = hex(16);
+  const loginUrl = buildLoginUrl({ machineId, deviceId });
+  log("=".repeat(60));
+  log("  TRAE SOLO 登录");
+  log("=".repeat(60));
+  log("");
+  log("  1. 在浏览器打开下面链接，用手机号/验证码登录");
+  log("  2. 登录成功后浏览器会跳到打不开的 127.0.0.1 地址");
+  log("  3. 复制浏览器地址栏的完整链接，粘贴到下面");
+  log("");
+  log(`  ${loginUrl}`);
+  log("");
+  let callback;
+  if (deps.callbackUrl) callback = deps.callbackUrl;
+  else callback = await readStdinLine("登录完成后，请粘贴浏览器地址栏的完整回调链接: ");
+  if (!callback || !String(callback).trim()) { console.error("未输入回调链接，已取消"); process.exit(1); }
+  const parsed = parseCallbackUrl(callback);
+  let token = "";
+  let refreshToken = parsed.refreshToken;
+  let expiresAt = 0;
+  if (refreshToken) {
+    const resp = await postJson(fetchImpl, `${API_HOST}/cloudide/api/v3/trae/oauth/ExchangeToken`, { ClientID: CLIENT_ID, RefreshToken: refreshToken, ClientSecret: "-", UserID: "" });
+    const result = resp?.Result || {};
+    token = result.Token || "";
+    if (!token) { console.error(`ExchangeToken 失败: ${JSON.stringify(resp).slice(0, 300)}`); process.exit(1); }
+    refreshToken = result.RefreshToken || refreshToken;
+    expiresAt = normalizeExpiresAt(result.TokenExpireAt || 0);
+    if (!(expiresAt > Math.floor(Date.now() / 1000))) expiresAt = Math.floor(Date.now() / 1000) + (Number(result.TokenExpireDuration) || 1209600);
+    log("ExchangeToken 成功");
+  } else {
+    token = parsed.userJwt.token;
+    expiresAt = normalizeExpiresAt(parsed.userJwt.expiresAt);
+    if (!token) { console.error("回调链接缺少 refreshToken，且 userJwt 也没有 Token"); process.exit(1); }
+    log("无 refreshToken，使用 userJwt 的 Token 兜底");
+  }
+  let uid = parsed.userInfo.uid;
+  let nickname = parsed.userInfo.nickname;
+  let enterpriseId = parsed.userInfo.enterpriseId;
+  try {
+    const ui = await postJson(fetchImpl, `${API_HOST}/cloudide/api/v3/trae/GetUserInfo`, { ReqSource: "IDE", IDEVersion: APP_VERSION }, { "x-cloudide-token": token });
+    const u = ui?.Result || ui || {};
+    if (u.UserID) { uid = String(u.UserID); nickname = String(u.ScreenName || nickname); enterpriseId = String(u.EnterpriseID || enterpriseId); }
+  } catch (e) { log(`GetUserInfo 失败（使用回调 userInfo）: ${e.message}`); }
+  if (!uid) { console.error("未能获取 uid，请检查 token 是否有效"); process.exit(1); }
+  const { saveTraeworkAccount } = await import("../../../providers/traework/account-store.js");
+  const save = deps.saveAccount || saveTraeworkAccount;
+  const saved = await save({ uid, enterpriseId, nickname, accessToken: token, refreshToken, expiresAt, domain: "trae.cn", apiHost: API_HOST, machineId, deviceId });
+  // 自动签到 + 查积分
+  try {
+    const { checkinStatus, checkinClaim, entUsage } = await import("../../../providers/traework/checkin.js");
+    const cred = { accessToken: token, deviceId };
+    const st = await checkinStatus({ cred, fetchImpl });
+    log(`签到状态: checked_in=${st.checkedIn} credits=${st.credits} enable=${st.enable}`);
+    if (!st.checkedIn && st.enable) {
+      await checkinClaim({ cred, fetchImpl });
+      log("签到: success");
+    }
+    const ent = await entUsage({ cred, fetchImpl });
+    log(`当前积分: ${ent.remain}`);
+  } catch (e) { log(`签到/查积分: ${String(e?.message || e).slice(0, 200)}`); }
+  log("");
+  log("=".repeat(60));
+  log("  登录完成！");
+  log(`  UID: ${uid}`);
+  log(`  Nickname: ${nickname || "（未获取到）"}`);
+  log(`  账号数: ${saved.accounts}`);
+  log("=".repeat(60));
+  log("下一步：mslxdff -restart（用户终端跑），然后 mslxdff -provider traework models 验证");
+  if (!deps.noExit) process.exit(0);
+  return true;
+}
+
+// 手动签到：-provider traework checkin
+export async function handleTraeworkCheckin(id, sub, rest = [], deps = {}) {
+  if (String(id || "").toLowerCase() !== "traework") return false;
+  if (sub !== "checkin") return false;
+  const fetchImpl = deps.fetchImpl || compatFetch;
+  const log = deps.log || ((m) => console.log(m));
+  const { loadProviderConfig, loadProviderKeys, defaultStateFile } = await import("../../../state.js");
+  const cfg = loadProviderConfig("traework");
+  const keys = deps.keys || loadProviderKeys("traework");
+  const authList = deps.auths || cfg?.auths || [];
+  if (!keys.length || !authList.length) { console.error("没有 traework 账号，请先 mslxdff -provider traework login"); process.exit(1); }
+  const { checkinStatus, checkinClaim, entUsage } = await import("../../../providers/traework/checkin.js");
+  for (let i = 0; i < Math.min(keys.length, authList.length); i++) {
+    const auth = authList[i];
+    const at = keys[i];
+    if (!auth?.uid || !at) continue;
+    const cred = { accessToken: at, deviceId: auth?.deviceId || "", uid: auth.uid };
+    log(`账号 ${auth.uid.slice(0, 8)}...`);
+    try {
+      const st = await checkinStatus({ cred, fetchImpl });
+      log(`  签到状态: checked_in=${st.checkedIn} credits=${st.credits} enable=${st.enable}`);
+      if (!st.checkedIn && st.enable) {
+        await checkinClaim({ cred, fetchImpl });
+        log(`  签到: success`);
+        const st2 = await checkinStatus({ cred, fetchImpl });
+        log(`  签到后积分: ${st2.credits}`);
+      }
+      const ent = await entUsage({ cred, fetchImpl });
+      log(`  总积分: ${ent.remain}`);
+    } catch (e) {
+      log(`  失败: ${String(e?.message || e).slice(0, 120)}`);
+    }
+  }
+  if (!deps.noExit) process.exit(0);
+  return true;
+}