mslxdff 0.1.203 → 0.1.207

package/src/cli/commands/provider/traework-checkin.js

@@ -1,144 +1,144 @@
-// mslxdff -provider traework checkin|quota —— 签到与积分（仿 qoder 的 login/checkin 分文件范式）。
-//
-// 子命令：
-//   checkin            逐号补领今日积分（到账与否**只认领取后复查**，见 providers/traework/checkin.js 头注）
-//   quota|credits|balance [--json]  只读查签到状态与积分额度：走 api.trae.cn 状态接口，**不发模型请求、不烧配额**
-//
-// ⚠ 两个读数口径（2026-10-15 实测，别再当余额看）：
-//   1. 「额度上限」= 各 entitlement pack 的 credits_limit 求和，是**上限**不是剩余；上游没有已用/剩余字段，
-//      所以模型报 4008（requests exceeded the quota）时这个数照样非零。
-//   2. 今日是否真签到只认 checkinStatus().checked_in，不认 claim 回执 —— raccoon 踩过同一坑
-//      （见 raccoon-quota.js:3-5「判据一律走账单，只信回执就会谎报到账」）。
-import { normalizeProviderId } from "../../../providers/model-id.js";
-import { compatFetch } from "../../../compat.js";
-
-const CHECKIN_SUBS = new Set(["checkin", "signin"]);
-const QUOTA_SUBS = new Set(["quota", "credits", "balance"]);
-// keys 与 auths 是平行数组（account-store 按位序成对）。不像凭据的槽位 = 多半被 CLI 误写过。
-const looksLikeCredential = (k) => typeof k === "string" && k.trim().length >= 20 && ![...k].some((c) => c.trim() === "");
-const badKeyHint = (i, len) => `keys[${i}] 不像 accessToken（${len} 字符），疑被误写 → mslxdff -provider traework login 重登回填（或查 auths/trae-<uid>.json）`;
-
-function isTraework(id) {
-  return (normalizeProviderId(id) || String(id || "").toLowerCase()) === "traework";
-}
-
-// 按位序配号：keys[i] ↔ auths[i]，只回 uid 与 token，绝不外打完整 token（凭据纪律）。
-function accounts(keys, authList) {
-  const out = [];
-  for (let i = 0; i < Math.max(keys.length, authList.length); i++) {
-    const auth = authList[i] || {};
-    const at = keys[i] || "";
-    if (!auth?.uid && !at) continue;
-    out.push({ uid: String(auth.uid || "(无 uid)"), accessToken: at, deviceId: auth.deviceId || "" });
-  }
-  return out;
-}
-
-async function loadCreds(deps) {
-  const { loadProviderConfig, loadProviderKeys } = await import("../../../state.js");
-  const cfg = deps.config ?? loadProviderConfig("traework") ?? {};
-  return {
-    keys: deps.keys || loadProviderKeys("traework") || [],
-    authList: deps.auths || cfg.auths || [],
-  };
-}
-
-/** 手动补领今日积分。退出码：一个都没到账 → 1（旧写法恒 0，配合谎报的 ok:true 会让人以为签好了）。 */
-export async function handleTraeworkCheckin(id, sub, rest = [], deps = {}) {
-  if (!isTraework(id) || !CHECKIN_SUBS.has(String(sub || "").toLowerCase())) return false;
-  const fetchImpl = deps.fetchImpl || compatFetch;
-  const log = deps.log || ((m) => console.log(m));
-  const exit = deps.exit || ((code) => process.exit(code));
-  const { keys, authList } = await loadCreds(deps);
-  if (!keys.length || !authList.length) {
-    console.error("没有 traework 账号，请先 mslxdff -provider traework login");
-    exit(1);
-    return true;
-  }
-  const { checkinStatus, checkinClaimVerified, entUsage } = deps.checkinModule || (await import("../../../providers/traework/checkin.js"));
-  let landed = 0, tried = 0;
-  for (const a of accounts(keys, authList)) {
-    tried++;
-    log(`账号 ${a.uid.slice(0, 8)}...`);
-    if (!looksLikeCredential(a.accessToken)) { log(`  ✗ ${badKeyHint(tried - 1, a.accessToken.length)}`); continue; }
-    const cred = { accessToken: a.accessToken, deviceId: a.deviceId, uid: a.uid };
-    try {
-      const st = await checkinStatus({ cred, fetchImpl });
-      log(`  签到状态: checked_in=${st.checkedIn} credits=${st.credits} enable=${st.enable}`);
-      const r = await checkinClaimVerified({ cred, fetchImpl, before: st });
-      if (r.claimed) { landed++; log("  签到: ✓ 已到账（复查 checked_in=true）"); }
-      else if (r.already) { landed++; log("  签到: 今日已签过，跳过领取"); }
-      else if (r.phantom) log("  签到: ✗ 未到账 —— 上游回执没报错但复查 checked_in 仍 false，**别当今天签过了**，稍后重试");
-      else log(`  签到: ✗ ${r.msg || "未到账"}`);
-      const ent = await entUsage({ cred, fetchImpl });
-      log(`  积分额度上限: ${ent.totalCredits}（${ent.packCount} 个权益包 · 非剩余可用）`);
-    } catch (e) {
-      log(`  失败: ${String(e?.message || e).slice(0, 120)}`);
-    }
-  }
-  if (!deps.noExit) exit(landed === 0 && tried > 0 ? 1 : 0);
-  return true;
-}
-
-/** 只读视图：逐号打印签到状态 + 积分额度上限。 */
-export async function handleTraeworkQuota(id, sub, rest = [], deps = {}) {
-  if (!isTraework(id) || !QUOTA_SUBS.has(String(sub || "").toLowerCase())) return false;
-  const log = deps.log || ((m) => console.log(m));
-  const exit = deps.exit || ((code) => process.exit(code));
-  const wantsJson = rest.includes("--json") || rest.includes("-json");
-  const { keys, authList } = await loadCreds(deps);
-
-  if (!keys.length && !authList.length) {
-    if (wantsJson) log(JSON.stringify({ error: "not_logged_in", hint: "mslxdff -provider traework login" }));
-    else {
-      log("未登录：还没有 traework 账号");
-      log("  先运行: mslxdff -provider traework login（登录后自动回填 keys/auths 并签到）");
-    }
-    exit(1);
-    return true;
-  }
-
-  const { checkinStatus, entUsage } = deps.checkinModule || (await import("../../../providers/traework/checkin.js"));
-  const fetchImpl = deps.fetchImpl || compatFetch;
-  const list = [];
-  for (const [i, a] of accounts(keys, authList).entries()) {
-    const base = { uid: a.uid, tokenLen: a.accessToken.length };
-    if (!looksLikeCredential(a.accessToken)) {
-      list.push({ ...base, ok: false, msg: `keys 槽位不像凭据（${a.accessToken.length} 字符），疑被误写`, fix: badKeyHint(i, a.accessToken.length) });
-      continue;
-    }
-    const cred = { accessToken: a.accessToken, deviceId: a.deviceId, uid: a.uid };
-    try {
-      const st = await checkinStatus({ cred, fetchImpl });
-      const ent = await entUsage({ cred, fetchImpl });
-      list.push({ ...base, ok: true, checkedIn: st.checkedIn, enable: st.enable, dailyCredits: st.credits, totalCredits: ent.totalCredits, packCount: ent.packCount, isCreditsBilling: ent.isCreditsBilling });
-    } catch (e) {
-      list.push({ ...base, ok: false, msg: String(e?.message || e).slice(0, 140), fix: "登录态可能已失效：mslxdff -provider traework login" });
-    }
-  }
-  const failed = list.filter((r) => !r.ok).length;
-  const allBad = failed === list.length && list.length > 0;
-
-  if (wantsJson) {
-    log(JSON.stringify({ provider: "traework", accounts: list, ok: list.length - failed, total: list.length, note: "totalCredits 是额度上限非剩余" }));
-    exit(allBad ? 1 : 0);
-    return true;
-  }
-
-  log(`traework 签到与积分 · 共 ${list.length} 个号`);
-  for (const r of list) {
-    if (!r.ok) {
-      log(`  [${r.uid}] ❌ ${r.msg}`);
-      if (r.fix) log(`      → ${r.fix}`);
-      continue;
-    }
-    const sign = r.checkedIn ? "✓ 今日已签到" : r.enable ? "○ 今日未签到" : "－ 上游未开放签到";
-    log(`  [${r.uid}] ${sign} · 每日可领 ${r.dailyCredits} · 额度上限 ${r.totalCredits}（${r.packCount} 个权益包）`);
-  }
-  log("");
-  log("  ⚠ 「额度上限」= 各权益包 credits_limit 之和，**不是剩余可用**；上游无已用/剩余字段。");
-  log("  ⚠ 判还能不能用只认模型报错本身：4008 exceeded = 该池已触顶，与上面的总数无关。");
-  log("  补领今日积分: mslxdff -provider traework checkin");
-  exit(allBad ? 1 : 0);
-  return true;
-}
+// mslxdff -provider traework checkin|quota —— 签到与积分（仿 qoder 的 login/checkin 分文件范式）。
+//
+// 子命令：
+//   checkin            逐号补领今日积分（到账与否**只认领取后复查**，见 providers/traework/checkin.js 头注）
+//   quota|credits|balance [--json]  只读查签到状态与积分额度：走 api.trae.cn 状态接口，**不发模型请求、不烧配额**
+//
+// ⚠ 两个读数口径（2026-10-15 实测，别再当余额看）：
+//   1. 「额度上限」= 各 entitlement pack 的 credits_limit 求和，是**上限**不是剩余；上游没有已用/剩余字段，
+//      所以模型报 4008（requests exceeded the quota）时这个数照样非零。
+//   2. 今日是否真签到只认 checkinStatus().checked_in，不认 claim 回执 —— raccoon 踩过同一坑
+//      （见 raccoon-quota.js:3-5「判据一律走账单，只信回执就会谎报到账」）。
+import { normalizeProviderId } from "../../../providers/model-id.js";
+import { compatFetch } from "../../../compat.js";
+
+const CHECKIN_SUBS = new Set(["checkin", "signin"]);
+const QUOTA_SUBS = new Set(["quota", "credits", "balance"]);
+// keys 与 auths 是平行数组（account-store 按位序成对）。不像凭据的槽位 = 多半被 CLI 误写过。
+const looksLikeCredential = (k) => typeof k === "string" && k.trim().length >= 20 && ![...k].some((c) => c.trim() === "");
+const badKeyHint = (i, len) => `keys[${i}] 不像 accessToken（${len} 字符），疑被误写 → mslxdff -provider traework login 重登回填（或查 auths/trae-<uid>.json）`;
+
+function isTraework(id) {
+  return (normalizeProviderId(id) || String(id || "").toLowerCase()) === "traework";
+}
+
+// 按位序配号：keys[i] ↔ auths[i]，只回 uid 与 token，绝不外打完整 token（凭据纪律）。
+function accounts(keys, authList) {
+  const out = [];
+  for (let i = 0; i < Math.max(keys.length, authList.length); i++) {
+    const auth = authList[i] || {};
+    const at = keys[i] || "";
+    if (!auth?.uid && !at) continue;
+    out.push({ uid: String(auth.uid || "(无 uid)"), accessToken: at, deviceId: auth.deviceId || "" });
+  }
+  return out;
+}
+
+async function loadCreds(deps) {
+  const { loadProviderConfig, loadProviderKeys } = await import("../../../state.js");
+  const cfg = deps.config ?? loadProviderConfig("traework") ?? {};
+  return {
+    keys: deps.keys || loadProviderKeys("traework") || [],
+    authList: deps.auths || cfg.auths || [],
+  };
+}
+
+/** 手动补领今日积分。退出码：一个都没到账 → 1（旧写法恒 0，配合谎报的 ok:true 会让人以为签好了）。 */
+export async function handleTraeworkCheckin(id, sub, rest = [], deps = {}) {
+  if (!isTraework(id) || !CHECKIN_SUBS.has(String(sub || "").toLowerCase())) return false;
+  const fetchImpl = deps.fetchImpl || compatFetch;
+  const log = deps.log || ((m) => console.log(m));
+  const exit = deps.exit || ((code) => process.exit(code));
+  const { keys, authList } = await loadCreds(deps);
+  if (!keys.length || !authList.length) {
+    console.error("没有 traework 账号，请先 mslxdff -provider traework login");
+    exit(1);
+    return true;
+  }
+  const { checkinStatus, checkinClaimVerified, entUsage } = deps.checkinModule || (await import("../../../providers/traework/checkin.js"));
+  let landed = 0, tried = 0;
+  for (const a of accounts(keys, authList)) {
+    tried++;
+    log(`账号 ${a.uid.slice(0, 8)}...`);
+    if (!looksLikeCredential(a.accessToken)) { log(`  ✗ ${badKeyHint(tried - 1, a.accessToken.length)}`); continue; }
+    const cred = { accessToken: a.accessToken, deviceId: a.deviceId, uid: a.uid };
+    try {
+      const st = await checkinStatus({ cred, fetchImpl });
+      log(`  签到状态: checked_in=${st.checkedIn} credits=${st.credits} enable=${st.enable}`);
+      const r = await checkinClaimVerified({ cred, fetchImpl, before: st });
+      if (r.claimed) { landed++; log("  签到: ✓ 已到账（复查 checked_in=true）"); }
+      else if (r.already) { landed++; log("  签到: 今日已签过，跳过领取"); }
+      else if (r.phantom) log("  签到: ✗ 未到账 —— 上游回执没报错但复查 checked_in 仍 false，**别当今天签过了**，稍后重试");
+      else log(`  签到: ✗ ${r.msg || "未到账"}`);
+      const ent = await entUsage({ cred, fetchImpl });
+      log(`  积分额度上限: ${ent.totalCredits}（${ent.packCount} 个权益包 · 非剩余可用）`);
+    } catch (e) {
+      log(`  失败: ${String(e?.message || e).slice(0, 120)}`);
+    }
+  }
+  if (!deps.noExit) exit(landed === 0 && tried > 0 ? 1 : 0);
+  return true;
+}
+
+/** 只读视图：逐号打印签到状态 + 积分额度上限。 */
+export async function handleTraeworkQuota(id, sub, rest = [], deps = {}) {
+  if (!isTraework(id) || !QUOTA_SUBS.has(String(sub || "").toLowerCase())) return false;
+  const log = deps.log || ((m) => console.log(m));
+  const exit = deps.exit || ((code) => process.exit(code));
+  const wantsJson = rest.includes("--json") || rest.includes("-json");
+  const { keys, authList } = await loadCreds(deps);
+
+  if (!keys.length && !authList.length) {
+    if (wantsJson) log(JSON.stringify({ error: "not_logged_in", hint: "mslxdff -provider traework login" }));
+    else {
+      log("未登录：还没有 traework 账号");
+      log("  先运行: mslxdff -provider traework login（登录后自动回填 keys/auths 并签到）");
+    }
+    exit(1);
+    return true;
+  }
+
+  const { checkinStatus, entUsage } = deps.checkinModule || (await import("../../../providers/traework/checkin.js"));
+  const fetchImpl = deps.fetchImpl || compatFetch;
+  const list = [];
+  for (const [i, a] of accounts(keys, authList).entries()) {
+    const base = { uid: a.uid, tokenLen: a.accessToken.length };
+    if (!looksLikeCredential(a.accessToken)) {
+      list.push({ ...base, ok: false, msg: `keys 槽位不像凭据（${a.accessToken.length} 字符），疑被误写`, fix: badKeyHint(i, a.accessToken.length) });
+      continue;
+    }
+    const cred = { accessToken: a.accessToken, deviceId: a.deviceId, uid: a.uid };
+    try {
+      const st = await checkinStatus({ cred, fetchImpl });
+      const ent = await entUsage({ cred, fetchImpl });
+      list.push({ ...base, ok: true, checkedIn: st.checkedIn, enable: st.enable, dailyCredits: st.credits, totalCredits: ent.totalCredits, packCount: ent.packCount, isCreditsBilling: ent.isCreditsBilling });
+    } catch (e) {
+      list.push({ ...base, ok: false, msg: String(e?.message || e).slice(0, 140), fix: "登录态可能已失效：mslxdff -provider traework login" });
+    }
+  }
+  const failed = list.filter((r) => !r.ok).length;
+  const allBad = failed === list.length && list.length > 0;
+
+  if (wantsJson) {
+    log(JSON.stringify({ provider: "traework", accounts: list, ok: list.length - failed, total: list.length, note: "totalCredits 是额度上限非剩余" }));
+    exit(allBad ? 1 : 0);
+    return true;
+  }
+
+  log(`traework 签到与积分 · 共 ${list.length} 个号`);
+  for (const r of list) {
+    if (!r.ok) {
+      log(`  [${r.uid}] ❌ ${r.msg}`);
+      if (r.fix) log(`      → ${r.fix}`);
+      continue;
+    }
+    const sign = r.checkedIn ? "✓ 今日已签到" : r.enable ? "○ 今日未签到" : "－ 上游未开放签到";
+    log(`  [${r.uid}] ${sign} · 每日可领 ${r.dailyCredits} · 额度上限 ${r.totalCredits}（${r.packCount} 个权益包）`);
+  }
+  log("");
+  log("  ⚠ 「额度上限」= 各权益包 credits_limit 之和，**不是剩余可用**；上游无已用/剩余字段。");
+  log("  ⚠ 判还能不能用只认模型报错本身：4008 exceeded = 该池已触顶，与上面的总数无关。");
+  log("  补领今日积分: mslxdff -provider traework checkin");
+  exit(allBad ? 1 : 0);
+  return true;
+}

package/src/cli/commands/provider/traework-login.js

@@ -1,164 +1,164 @@
-// mslxdff -provider traework login — 复刻 traework2api login.sh。
-// 随机 hex16 machine/device id → 构造 trae.cn 授权链接 → 打印 → stdin 读回调链接 →
-// 解析 refreshToken/userInfo/userJwt → ExchangeToken → GetUserInfo → 落盘 → 自动签到+查积分。
-import { randomBytes } from "node:crypto";
-import { compatFetch, timeoutSignal } from "../../../compat.js";
-import { CLIENT_ID, IDE_VERSION, OAUTH_HOST } from "../../../providers/traework/constants.js";
-import { normalizeExpiresAt } from "../../../providers/traework/token.js";
-
-const API_HOST = OAUTH_HOST;
-const APP_VERSION = IDE_VERSION;
-
-function hex(n) { return randomBytes(n).toString("hex"); }
-
-function readStdinLine(prompt) {
-  return new Promise((resolve) => {
-    try { process.stdout.write(`${prompt}`); } catch {}
-    let data = "";
-    const onData = (chunk) => { data += String(chunk || ""); if (data.includes("\n")) done(); };
-    const done = () => {
-      try { process.stdin.removeListener("data", onData); } catch {}
-      try { if (process.stdin.isTTY) process.stdin.setRawMode(false); } catch {}
-      try { process.stdin.pause(); } catch {}
-      resolve(data.trim());
-    };
-    try {
-      process.stdin.resume();
-      process.stdin.setEncoding("utf8");
-      process.stdin.on("data", onData);
-      process.stdin.on("end", done);
-    } catch { resolve(""); }
-  });
-}
-export function buildLoginUrl({ machineId, deviceId, traceId = hex(8) } = {}) {
-  const params = new URLSearchParams({
-    login_version: "1",
-    auth_from: "solo",
-    login_channel: "native_ide",
-    plugin_version: "2.3.62834",
-    auth_type: "local",
-    client_id: CLIENT_ID,
-    redirect: "0",
-    login_trace_id: traceId,
-    auth_callback_url: "http://127.0.0.1:18080/authorize",
-    machine_id: machineId,
-    device_id: deviceId,
-    x_device_id: deviceId,
-    x_machine_id: machineId,
-    x_device_brand: "PC",
-    x_device_type: "PC",
-    x_os_version: "1.0",
-    x_app_version: APP_VERSION,
-    x_app_type: "stable",
-  });
-  return `https://www.trae.cn/authorization?${params.toString()}`;
-}
-
-// 解析回调链接：parse_qs + 双层 unquote 容错 → { refreshToken, userInfo, userJwt }。
-export function parseCallbackUrl(url) {
-  let u;
-  try { u = new URL(String(url || "").trim()); } catch { throw new Error("回调链接不是合法 URL，请复制浏览器地址栏完整链接"); }
-  const qs = u.searchParams;
-  const rawRefresh = qs.get("refreshToken") || "";
-  const parseJsonParam = (raw) => {
-    if (!raw) return {};
-    for (const v of [raw, decodeURIComponent(raw)]) {
-      try { const o = JSON.parse(v); if (o && typeof o === "object") return o; } catch {}
-    }
-    return {};
-  };
-  const userInfo = parseJsonParam(qs.get("userInfo") || "");
-  const userJwt = parseJsonParam(qs.get("userJwt") || "");
-  let refreshToken = rawRefresh || String(userJwt.RefreshToken || "");
-  return {
-    refreshToken,
-    userInfo: { uid: String(userInfo.UserID || ""), nickname: String(userInfo.ScreenName || ""), enterpriseId: String(userInfo.TenantID || "") },
-    userJwt: { token: String(userJwt.Token || ""), refreshToken: String(userJwt.RefreshToken || ""), expiresAt: Number(userJwt.TokenExpireAt) || 0 },
-  };
-}
-
-async function postJson(fetchImpl, url, obj, headers = {}) {
-  const res = await fetchImpl(url, { method: "POST", headers: { "Content-Type": "application/json", "User-Agent": `Trae/${APP_VERSION}`, ...headers }, body: JSON.stringify(obj), signal: timeoutSignal(30000) });
-  const txt = await res.text();
-  let j;
-  try { j = JSON.parse(txt); } catch { throw new Error(`上游返回非 JSON: ${txt.slice(0, 200)}`); }
-  if (res.status >= 400) throw new Error(`上游 HTTP ${res.status}: ${txt.slice(0, 200)}`);
-  return j;
-}
-
-export async function handleTraeworkLogin(id, sub, rest = [], deps = {}) {
-  if (String(id || "").toLowerCase() !== "traework") return false;
-  if (sub !== "login" && sub !== "auth" && sub !== "oauth") return false;
-  const fetchImpl = deps.fetchImpl || compatFetch;
-  const log = deps.log || ((m) => console.log(m));
-  const machineId = hex(16);
-  const deviceId = hex(16);
-  const loginUrl = buildLoginUrl({ machineId, deviceId });
-  log("=".repeat(60));
-  log("  TRAE SOLO 登录");
-  log("=".repeat(60));
-  log("");
-  log("  1. 在浏览器打开下面链接，用手机号/验证码登录");
-  log("  2. 登录成功后浏览器会跳到打不开的 127.0.0.1 地址");
-  log("  3. 复制浏览器地址栏的完整链接，粘贴到下面");
-  log("");
-  log(`  ${loginUrl}`);
-  log("");
-  let callback;
-  if (deps.callbackUrl) callback = deps.callbackUrl;
-  else callback = await readStdinLine("登录完成后，请粘贴浏览器地址栏的完整回调链接: ");
-  if (!callback || !String(callback).trim()) { console.error("未输入回调链接，已取消"); process.exit(1); }
-  const parsed = parseCallbackUrl(callback);
-  let token = "";
-  let refreshToken = parsed.refreshToken;
-  let expiresAt = 0;
-  if (refreshToken) {
-    const resp = await postJson(fetchImpl, `${API_HOST}/cloudide/api/v3/trae/oauth/ExchangeToken`, { ClientID: CLIENT_ID, RefreshToken: refreshToken, ClientSecret: "-", UserID: "" });
-    const result = resp?.Result || {};
-    token = result.Token || "";
-    if (!token) { console.error(`ExchangeToken 失败: ${JSON.stringify(resp).slice(0, 300)}`); process.exit(1); }
-    refreshToken = result.RefreshToken || refreshToken;
-    expiresAt = normalizeExpiresAt(result.TokenExpireAt || 0);
-    if (!(expiresAt > Math.floor(Date.now() / 1000))) expiresAt = Math.floor(Date.now() / 1000) + (Number(result.TokenExpireDuration) || 1209600);
-    log("ExchangeToken 成功");
-  } else {
-    token = parsed.userJwt.token;
-    expiresAt = normalizeExpiresAt(parsed.userJwt.expiresAt);
-    if (!token) { console.error("回调链接缺少 refreshToken，且 userJwt 也没有 Token"); process.exit(1); }
-    log("无 refreshToken，使用 userJwt 的 Token 兜底");
-  }
-  let uid = parsed.userInfo.uid;
-  let nickname = parsed.userInfo.nickname;
-  let enterpriseId = parsed.userInfo.enterpriseId;
-  try {
-    const ui = await postJson(fetchImpl, `${API_HOST}/cloudide/api/v3/trae/GetUserInfo`, { ReqSource: "IDE", IDEVersion: APP_VERSION }, { "x-cloudide-token": token });
-    const u = ui?.Result || ui || {};
-    if (u.UserID) { uid = String(u.UserID); nickname = String(u.ScreenName || nickname); enterpriseId = String(u.EnterpriseID || enterpriseId); }
-  } catch (e) { log(`GetUserInfo 失败（使用回调 userInfo）: ${e.message}`); }
-  if (!uid) { console.error("未能获取 uid，请检查 token 是否有效"); process.exit(1); }
-  const { saveTraeworkAccount } = await import("../../../providers/traework/account-store.js");
-  const save = deps.saveAccount || saveTraeworkAccount;
-  const saved = await save({ uid, enterpriseId, nickname, accessToken: token, refreshToken, expiresAt, domain: "trae.cn", apiHost: API_HOST, machineId, deviceId });
-  // 自动签到 + 查积分（到账与否只认「领取后复查」，口径见 providers/traework/checkin.js 头注）
-  try {
-    const { checkinStatus, checkinClaimVerified, entUsage } = await import("../../../providers/traework/checkin.js");
-    // 必须带 uid：UG 接口的市场身份（x-device-id 等）是按 uid 派生的，缺 uid 只能拿到不可复现的兜底值
-    const cred = { accessToken: token, uid, deviceId };
-    const st = await checkinStatus({ cred, fetchImpl });
-    log(`签到状态: checked_in=${st.checkedIn} credits=${st.credits} enable=${st.enable}`);
-    const r = await checkinClaimVerified({ cred, fetchImpl, before: st });
-    log(r.claimed ? "签到: ✓ 已到账" : r.already ? "签到: 今日已签过" : `签到: ✗ 未到账（${r.msg || "复查 checked_in=false"}）→ 稍后 mslxdff -provider traework checkin 重试`);
-    const ent = await entUsage({ cred, fetchImpl });
-    log(`积分额度上限: ${ent.totalCredits}（${ent.packCount} 个权益包 · 非剩余可用）`);
-  } catch (e) { log(`签到/查积分: ${String(e?.message || e).slice(0, 200)}`); }
-  log("");
-  log("=".repeat(60));
-  log("  登录完成！");
-  log(`  UID: ${uid}`);
-  log(`  Nickname: ${nickname || "（未获取到）"}`);
-  log(`  账号数: ${saved.accounts}`);
-  log("=".repeat(60));
-  log("下一步：mslxdff -restart（用户终端跑），然后 mslxdff -provider traework models 验证");
-  if (!deps.noExit) process.exit(0);
-  return true;
-}
+// mslxdff -provider traework login — 复刻 traework2api login.sh。
+// 随机 hex16 machine/device id → 构造 trae.cn 授权链接 → 打印 → stdin 读回调链接 →
+// 解析 refreshToken/userInfo/userJwt → ExchangeToken → GetUserInfo → 落盘 → 自动签到+查积分。
+import { randomBytes } from "node:crypto";
+import { compatFetch, timeoutSignal } from "../../../compat.js";
+import { CLIENT_ID, IDE_VERSION, OAUTH_HOST } from "../../../providers/traework/constants.js";
+import { normalizeExpiresAt } from "../../../providers/traework/token.js";
+
+const API_HOST = OAUTH_HOST;
+const APP_VERSION = IDE_VERSION;
+
+function hex(n) { return randomBytes(n).toString("hex"); }
+
+function readStdinLine(prompt) {
+  return new Promise((resolve) => {
+    try { process.stdout.write(`${prompt}`); } catch {}
+    let data = "";
+    const onData = (chunk) => { data += String(chunk || ""); if (data.includes("\n")) done(); };
+    const done = () => {
+      try { process.stdin.removeListener("data", onData); } catch {}
+      try { if (process.stdin.isTTY) process.stdin.setRawMode(false); } catch {}
+      try { process.stdin.pause(); } catch {}
+      resolve(data.trim());
+    };
+    try {
+      process.stdin.resume();
+      process.stdin.setEncoding("utf8");
+      process.stdin.on("data", onData);
+      process.stdin.on("end", done);
+    } catch { resolve(""); }
+  });
+}
+export function buildLoginUrl({ machineId, deviceId, traceId = hex(8) } = {}) {
+  const params = new URLSearchParams({
+    login_version: "1",
+    auth_from: "solo",
+    login_channel: "native_ide",
+    plugin_version: "2.3.62834",
+    auth_type: "local",
+    client_id: CLIENT_ID,
+    redirect: "0",
+    login_trace_id: traceId,
+    auth_callback_url: "http://127.0.0.1:18080/authorize",
+    machine_id: machineId,
+    device_id: deviceId,
+    x_device_id: deviceId,
+    x_machine_id: machineId,
+    x_device_brand: "PC",
+    x_device_type: "PC",
+    x_os_version: "1.0",
+    x_app_version: APP_VERSION,
+    x_app_type: "stable",
+  });
+  return `https://www.trae.cn/authorization?${params.toString()}`;
+}
+
+// 解析回调链接：parse_qs + 双层 unquote 容错 → { refreshToken, userInfo, userJwt }。
+export function parseCallbackUrl(url) {
+  let u;
+  try { u = new URL(String(url || "").trim()); } catch { throw new Error("回调链接不是合法 URL，请复制浏览器地址栏完整链接"); }
+  const qs = u.searchParams;
+  const rawRefresh = qs.get("refreshToken") || "";
+  const parseJsonParam = (raw) => {
+    if (!raw) return {};
+    for (const v of [raw, decodeURIComponent(raw)]) {
+      try { const o = JSON.parse(v); if (o && typeof o === "object") return o; } catch {}
+    }
+    return {};
+  };
+  const userInfo = parseJsonParam(qs.get("userInfo") || "");
+  const userJwt = parseJsonParam(qs.get("userJwt") || "");
+  let refreshToken = rawRefresh || String(userJwt.RefreshToken || "");
+  return {
+    refreshToken,
+    userInfo: { uid: String(userInfo.UserID || ""), nickname: String(userInfo.ScreenName || ""), enterpriseId: String(userInfo.TenantID || "") },
+    userJwt: { token: String(userJwt.Token || ""), refreshToken: String(userJwt.RefreshToken || ""), expiresAt: Number(userJwt.TokenExpireAt) || 0 },
+  };
+}
+
+async function postJson(fetchImpl, url, obj, headers = {}) {
+  const res = await fetchImpl(url, { method: "POST", headers: { "Content-Type": "application/json", "User-Agent": `Trae/${APP_VERSION}`, ...headers }, body: JSON.stringify(obj), signal: timeoutSignal(30000) });
+  const txt = await res.text();
+  let j;
+  try { j = JSON.parse(txt); } catch { throw new Error(`上游返回非 JSON: ${txt.slice(0, 200)}`); }
+  if (res.status >= 400) throw new Error(`上游 HTTP ${res.status}: ${txt.slice(0, 200)}`);
+  return j;
+}
+
+export async function handleTraeworkLogin(id, sub, rest = [], deps = {}) {
+  if (String(id || "").toLowerCase() !== "traework") return false;
+  if (sub !== "login" && sub !== "auth" && sub !== "oauth") return false;
+  const fetchImpl = deps.fetchImpl || compatFetch;
+  const log = deps.log || ((m) => console.log(m));
+  const machineId = hex(16);
+  const deviceId = hex(16);
+  const loginUrl = buildLoginUrl({ machineId, deviceId });
+  log("=".repeat(60));
+  log("  TRAE SOLO 登录");
+  log("=".repeat(60));
+  log("");
+  log("  1. 在浏览器打开下面链接，用手机号/验证码登录");
+  log("  2. 登录成功后浏览器会跳到打不开的 127.0.0.1 地址");
+  log("  3. 复制浏览器地址栏的完整链接，粘贴到下面");
+  log("");
+  log(`  ${loginUrl}`);
+  log("");
+  let callback;
+  if (deps.callbackUrl) callback = deps.callbackUrl;
+  else callback = await readStdinLine("登录完成后，请粘贴浏览器地址栏的完整回调链接: ");
+  if (!callback || !String(callback).trim()) { console.error("未输入回调链接，已取消"); process.exit(1); }
+  const parsed = parseCallbackUrl(callback);
+  let token = "";
+  let refreshToken = parsed.refreshToken;
+  let expiresAt = 0;
+  if (refreshToken) {
+    const resp = await postJson(fetchImpl, `${API_HOST}/cloudide/api/v3/trae/oauth/ExchangeToken`, { ClientID: CLIENT_ID, RefreshToken: refreshToken, ClientSecret: "-", UserID: "" });
+    const result = resp?.Result || {};
+    token = result.Token || "";
+    if (!token) { console.error(`ExchangeToken 失败: ${JSON.stringify(resp).slice(0, 300)}`); process.exit(1); }
+    refreshToken = result.RefreshToken || refreshToken;
+    expiresAt = normalizeExpiresAt(result.TokenExpireAt || 0);
+    if (!(expiresAt > Math.floor(Date.now() / 1000))) expiresAt = Math.floor(Date.now() / 1000) + (Number(result.TokenExpireDuration) || 1209600);
+    log("ExchangeToken 成功");
+  } else {
+    token = parsed.userJwt.token;
+    expiresAt = normalizeExpiresAt(parsed.userJwt.expiresAt);
+    if (!token) { console.error("回调链接缺少 refreshToken，且 userJwt 也没有 Token"); process.exit(1); }
+    log("无 refreshToken，使用 userJwt 的 Token 兜底");
+  }
+  let uid = parsed.userInfo.uid;
+  let nickname = parsed.userInfo.nickname;
+  let enterpriseId = parsed.userInfo.enterpriseId;
+  try {
+    const ui = await postJson(fetchImpl, `${API_HOST}/cloudide/api/v3/trae/GetUserInfo`, { ReqSource: "IDE", IDEVersion: APP_VERSION }, { "x-cloudide-token": token });
+    const u = ui?.Result || ui || {};
+    if (u.UserID) { uid = String(u.UserID); nickname = String(u.ScreenName || nickname); enterpriseId = String(u.EnterpriseID || enterpriseId); }
+  } catch (e) { log(`GetUserInfo 失败（使用回调 userInfo）: ${e.message}`); }
+  if (!uid) { console.error("未能获取 uid，请检查 token 是否有效"); process.exit(1); }
+  const { saveTraeworkAccount } = await import("../../../providers/traework/account-store.js");
+  const save = deps.saveAccount || saveTraeworkAccount;
+  const saved = await save({ uid, enterpriseId, nickname, accessToken: token, refreshToken, expiresAt, domain: "trae.cn", apiHost: API_HOST, machineId, deviceId });
+  // 自动签到 + 查积分（到账与否只认「领取后复查」，口径见 providers/traework/checkin.js 头注）
+  try {
+    const { checkinStatus, checkinClaimVerified, entUsage } = await import("../../../providers/traework/checkin.js");
+    // 必须带 uid：UG 接口的市场身份（x-device-id 等）是按 uid 派生的，缺 uid 只能拿到不可复现的兜底值
+    const cred = { accessToken: token, uid, deviceId };
+    const st = await checkinStatus({ cred, fetchImpl });
+    log(`签到状态: checked_in=${st.checkedIn} credits=${st.credits} enable=${st.enable}`);
+    const r = await checkinClaimVerified({ cred, fetchImpl, before: st });
+    log(r.claimed ? "签到: ✓ 已到账" : r.already ? "签到: 今日已签过" : `签到: ✗ 未到账（${r.msg || "复查 checked_in=false"}）→ 稍后 mslxdff -provider traework checkin 重试`);
+    const ent = await entUsage({ cred, fetchImpl });
+    log(`积分额度上限: ${ent.totalCredits}（${ent.packCount} 个权益包 · 非剩余可用）`);
+  } catch (e) { log(`签到/查积分: ${String(e?.message || e).slice(0, 200)}`); }
+  log("");
+  log("=".repeat(60));
+  log("  登录完成！");
+  log(`  UID: ${uid}`);
+  log(`  Nickname: ${nickname || "（未获取到）"}`);
+  log(`  账号数: ${saved.accounts}`);
+  log("=".repeat(60));
+  log("下一步：mslxdff -restart（用户终端跑），然后 mslxdff -provider traework models 验证");
+  if (!deps.noExit) process.exit(0);
+  return true;
+}