mslxdff 0.1.203 → 0.1.208

package/src/providers/traework/constants.js

@@ -1,41 +1,41 @@
-// traework SOLO 上游技术常量（照抄 traework2api internal/upstream/constants.go，禁止改值）。
-export const AGENT_HOST = "https://trae-api-cn.mchost.guru";
-export const UG_HOST = "https://api.trae.cn";
-export const OAUTH_HOST = "https://api.trae.com.cn";
-export const CONSOLE_HOST = "https://www.trae.cn";
-export const CLIENT_ID = "en1oxy7wnw8j9n";
-export const APP_ID = "6eefa01c-1036-4c7e-9ca5-d891f63bfcd8";
-export const IDE_VERSION = "0.1.43";
-export const IDE_VERSION_CODE = "20260716";
-export const DEVICE_BRAND = "83DG";
-export const OS_VERSION = "Windows 11 Pro";
-export const FUNCTION = "solo_work_lite";
-export const TRAE_UA = "Trae/0.1.43";
-export const DEFAULT_MODEL = "glm-5.2";
-export const EP_CHAT = "/api/agent/v3/llm_utils_chat";
-export const EP_MODELS = "/api/ide/v1/get_detail_param";
-export const EP_EXCHANGE = "/cloudide/api/v3/trae/oauth/ExchangeToken";
-export const EP_USER_INFO = "/cloudide/api/v3/trae/GetUserInfo";
-export const EP_CHECKIN_STATUS = "/trae/api/v2/ug/checkin_credits/status";
-export const EP_CHECKIN_CLAIM = "/trae/api/v2/ug/checkin_credits/claim";
-export const EP_ENT_USAGE = "/trae/api/v2/pay/ide_user_ent_usage";
-
-// ── 市场/UG 侧线上契约（status/claim/ent_usage 共用）────────────────────────
-// 出处：抓包复刻自 NextAgentX/trae-workbuddy-switch `modules/trae/credits.rs:49-99`，
-// 不是从客户端源码抄的 —— 该仓自述「把 `x-market-client-id`/`x-market-user-id`/`x-lscbd-aid`
-// 与整串 `VSCode 1.107.1 (TRAE SOLO CN)` 在 Trae 安装目录 5141 个文件（含 .exe/.asar）里全扫一遍，
-// **一个字面量都搜不到**」，即无法从客户端侧核对，只能以「线上实测能用」为准。
-// ⚠ 因此这些值是**线上契约**，不要"顺手改成看起来更对的"；要改必须先拿到抓包证据。
-// 上面那段纪律原文见该仓 credits.rs:53-76。
-export const MARKET_UA_PRODUCT = "TRAE SOLO CN";      // UA 括号里的产品名
-export const MARKET_VSCODE_VERSION = "1.107.1";       // 真机 resources/app/package.json 的 version
-export const MARKET_UA = `VSCode ${MARKET_VSCODE_VERSION} (${MARKET_UA_PRODUCT})`;
-export const MARKET_AID = "787976";                   // x-lscbd-aid（活动/埋点侧应用标识）
-export const MARKET_SDK_TYPE = "3";                   // x-lgw-req-sdk-type
-export const MARKET_PACKAGE_TYPE = "stable_cn";       // package-type，CN 稳定版通道
-export const MARKET_USER_REGION = "CN";               // x-user-region，产品级 CN 通道，不随账号 Region 变
-export const MARKET_APP_VERSION = "0.1.45";           // app-version（≠ 上面的 IDE_VERSION 0.1.43：两条通道各自取值，别合）
-
-// 市场伪设备身份的派生算法版本（抄 device.rs:35 DEVICE_GEN）。
-// auth 文档里的 `market.gen` 缺失或小于此值 → 视为旧算法产物，就地重建（自愈）。
-export const MARKET_DEVICE_GEN = 2;
+// traework SOLO 上游技术常量（照抄 traework2api internal/upstream/constants.go，禁止改值）。
+export const AGENT_HOST = "https://trae-api-cn.mchost.guru";
+export const UG_HOST = "https://api.trae.cn";
+export const OAUTH_HOST = "https://api.trae.com.cn";
+export const CONSOLE_HOST = "https://www.trae.cn";
+export const CLIENT_ID = "en1oxy7wnw8j9n";
+export const APP_ID = "6eefa01c-1036-4c7e-9ca5-d891f63bfcd8";
+export const IDE_VERSION = "0.1.43";
+export const IDE_VERSION_CODE = "20260716";
+export const DEVICE_BRAND = "83DG";
+export const OS_VERSION = "Windows 11 Pro";
+export const FUNCTION = "solo_work_lite";
+export const TRAE_UA = "Trae/0.1.43";
+export const DEFAULT_MODEL = "glm-5.2";
+export const EP_CHAT = "/api/agent/v3/llm_utils_chat";
+export const EP_MODELS = "/api/ide/v1/get_detail_param";
+export const EP_EXCHANGE = "/cloudide/api/v3/trae/oauth/ExchangeToken";
+export const EP_USER_INFO = "/cloudide/api/v3/trae/GetUserInfo";
+export const EP_CHECKIN_STATUS = "/trae/api/v2/ug/checkin_credits/status";
+export const EP_CHECKIN_CLAIM = "/trae/api/v2/ug/checkin_credits/claim";
+export const EP_ENT_USAGE = "/trae/api/v2/pay/ide_user_ent_usage";
+
+// ── 市场/UG 侧线上契约（status/claim/ent_usage 共用）────────────────────────
+// 出处：抓包复刻自 NextAgentX/trae-workbuddy-switch `modules/trae/credits.rs:49-99`，
+// 不是从客户端源码抄的 —— 该仓自述「把 `x-market-client-id`/`x-market-user-id`/`x-lscbd-aid`
+// 与整串 `VSCode 1.107.1 (TRAE SOLO CN)` 在 Trae 安装目录 5141 个文件（含 .exe/.asar）里全扫一遍，
+// **一个字面量都搜不到**」，即无法从客户端侧核对，只能以「线上实测能用」为准。
+// ⚠ 因此这些值是**线上契约**，不要"顺手改成看起来更对的"；要改必须先拿到抓包证据。
+// 上面那段纪律原文见该仓 credits.rs:53-76。
+export const MARKET_UA_PRODUCT = "TRAE SOLO CN";      // UA 括号里的产品名
+export const MARKET_VSCODE_VERSION = "1.107.1";       // 真机 resources/app/package.json 的 version
+export const MARKET_UA = `VSCode ${MARKET_VSCODE_VERSION} (${MARKET_UA_PRODUCT})`;
+export const MARKET_AID = "787976";                   // x-lscbd-aid（活动/埋点侧应用标识）
+export const MARKET_SDK_TYPE = "3";                   // x-lgw-req-sdk-type
+export const MARKET_PACKAGE_TYPE = "stable_cn";       // package-type，CN 稳定版通道
+export const MARKET_USER_REGION = "CN";               // x-user-region，产品级 CN 通道，不随账号 Region 变
+export const MARKET_APP_VERSION = "0.1.45";           // app-version（≠ 上面的 IDE_VERSION 0.1.43：两条通道各自取值，别合）
+
+// 市场伪设备身份的派生算法版本（抄 device.rs:35 DEVICE_GEN）。
+// auth 文档里的 `market.gen` 缺失或小于此值 → 视为旧算法产物，就地重建（自愈）。
+export const MARKET_DEVICE_GEN = 2;

package/src/providers/traework/errors.js

@@ -1,52 +1,52 @@
-// SOLO 上游错误分类（照抄 traework2api internal/upstream/client.go Classify）。
-export const ErrKind = {
-  NONE: "none",
-  PLAN_LIMIT: "plan_limit",
-  SOFT_RATE: "soft_rate",
-  SESSION_DEAD: "session_dead",
-  NOT_FOUND: "not_found",
-  SERVER: "server",
-  CLIENT: "client",
-};
-
-// 长冷却时长：plan_limit → 12h。
-export const PLAN_COOLDOWN_MS = 12 * 60 * 60 * 1000;
-export const SOFT_COOLDOWN_MS = 60 * 1000;
-
-const SESSION_DEAD_MARKERS = ["login", "token 失效", "token invalid", "session", "unauthorized", "401"];
-
-export class UpstreamError extends Error {
-  constructor(kind, status, msg) {
-    super(`upstream ${kind} (http ${status}): ${msg}`);
-    this.kind = kind;
-    this.status = status;
-  }
-}
-
-// 流内业务错误（event:error）。
-export class SOLOStreamError extends Error {
-  constructor(code, msg) {
-    super(`solo error code=${code} msg=${msg}`);
-    this.code = code;
-    this.msg = msg;
-  }
-  kind() { return this.code === 1005 ? ErrKind.PLAN_LIMIT : ErrKind.CLIENT; }
-}
-
-export function classify(status, body) {
-  const txt = String(body || "");
-  const lower = txt.toLowerCase();
-  if (txt.includes('"code":1005') || (txt.includes("1005") && lower.includes("plan"))) return ErrKind.PLAN_LIMIT;
-  if (status === 401) return ErrKind.SESSION_DEAD;
-  if (status === 429) return ErrKind.SOFT_RATE;
-  if (status === 404) return ErrKind.NOT_FOUND;
-  if (status >= 500) return ErrKind.SERVER;
-  if (status >= 400) return ErrKind.CLIENT;
-  return ErrKind.NONE;
-}
-
-export function isSessionDead(status, body) {
-  if (status === 401) return true;
-  const lower = String(body || "").toLowerCase();
-  return SESSION_DEAD_MARKERS.some((m) => lower.includes(m.toLowerCase()));
-}
+// SOLO 上游错误分类（照抄 traework2api internal/upstream/client.go Classify）。
+export const ErrKind = {
+  NONE: "none",
+  PLAN_LIMIT: "plan_limit",
+  SOFT_RATE: "soft_rate",
+  SESSION_DEAD: "session_dead",
+  NOT_FOUND: "not_found",
+  SERVER: "server",
+  CLIENT: "client",
+};
+
+// 长冷却时长：plan_limit → 12h。
+export const PLAN_COOLDOWN_MS = 12 * 60 * 60 * 1000;
+export const SOFT_COOLDOWN_MS = 60 * 1000;
+
+const SESSION_DEAD_MARKERS = ["login", "token 失效", "token invalid", "session", "unauthorized", "401"];
+
+export class UpstreamError extends Error {
+  constructor(kind, status, msg) {
+    super(`upstream ${kind} (http ${status}): ${msg}`);
+    this.kind = kind;
+    this.status = status;
+  }
+}
+
+// 流内业务错误（event:error）。
+export class SOLOStreamError extends Error {
+  constructor(code, msg) {
+    super(`solo error code=${code} msg=${msg}`);
+    this.code = code;
+    this.msg = msg;
+  }
+  kind() { return this.code === 1005 ? ErrKind.PLAN_LIMIT : ErrKind.CLIENT; }
+}
+
+export function classify(status, body) {
+  const txt = String(body || "");
+  const lower = txt.toLowerCase();
+  if (txt.includes('"code":1005') || (txt.includes("1005") && lower.includes("plan"))) return ErrKind.PLAN_LIMIT;
+  if (status === 401) return ErrKind.SESSION_DEAD;
+  if (status === 429) return ErrKind.SOFT_RATE;
+  if (status === 404) return ErrKind.NOT_FOUND;
+  if (status >= 500) return ErrKind.SERVER;
+  if (status >= 400) return ErrKind.CLIENT;
+  return ErrKind.NONE;
+}
+
+export function isSessionDead(status, body) {
+  if (status === 401) return true;
+  const lower = String(body || "").toLowerCase();
+  return SESSION_DEAD_MARKERS.some((m) => lower.includes(m.toLowerCase()));
+}

package/src/providers/traework/headers.js

@@ -1,79 +1,79 @@
-// SOLO 三类请求头（照抄 traework2api internal/upstream/headers.go）。纯函数，可测。
-import { APP_ID, DEVICE_BRAND, IDE_VERSION, IDE_VERSION_CODE, OS_VERSION, TRAE_UA, MARKET_UA, MARKET_VSCODE_VERSION, MARKET_USER_REGION, MARKET_SDK_TYPE, MARKET_PACKAGE_TYPE, MARKET_AID, MARKET_APP_VERSION } from "./constants.js";
-import { uuid } from "../../compat.js";
-
-// 对话/模型表（Cloud-IDE-JWT 鉴权 + IDE 指纹）。
-export function soloHeaders(cred = {}, stream = true) {
-  const at = cred?.accessToken || "";
-  const h = {
-    "Content-Type": "application/json",
-    Accept: stream ? "text/event-stream" : "application/json",
-    "User-Agent": TRAE_UA,
-    Authorization: `Cloud-IDE-JWT ${at}`,
-    "X-Cloudide-Token": at,
-    "X-Ide-Token": at,
-    "X-App-Id": APP_ID,
-    "X-App-Version": "default",
-    "X-Ide-Version": IDE_VERSION,
-    "X-Ide-Version-Code": IDE_VERSION_CODE,
-    "X-App-Version-Code": IDE_VERSION_CODE,
-    "X-Ide-Version-Type": "stable",
-    "X-Device-Type": "windows",
-    "X-OS-Version": OS_VERSION,
-    "X-Device-Brand": DEVICE_BRAND,
-    "Request-Traffic-Type": "prod",
-  };
-  if (cred?.uid) h["X-Uid"] = cred.uid;
-  if (cred?.machineId) h["X-Machine-Id"] = cred.machineId;
-  if (cred?.deviceId) h["X-Device-Id"] = cred.deviceId;
-  return h;
-}
-
-// 签到/积分/额度（api.trae.cn 的 UG 与 pay 系接口）。
-// ⚠ 这套头是**线上契约**：三件设备身份（x-device-id / x-market-user-id / vscode-sessionid）缺一或形态不对，
-//   `checkin_credits/claim` 就回 `code=9004 下单参数不正确`（2026-10-15 现网取证）。
-//   逐字对齐 NextAgentX/trae-workbuddy-switch `modules/trae/credits.rs:116-147`，取值出处与该仓纪律见 constants.js 注释。
-export function ugHeaders(cred = {}) {
-  const m = cred?.market || {};
-  const at = String(cred?.accessToken || "");
-  return {
-    accept: "*/*",
-    "accept-language": "zh-CN",
-    "content-type": "application/json",
-    "user-agent": MARKET_UA,
-    // 防双前缀：传进来的可能已带 `Cloud-IDE-JWT `（口径同参考实现 jwt.rs:53-61）
-    authorization: at.startsWith("Cloud-IDE-JWT ") ? at : `Cloud-IDE-JWT ${at}`,
-    "x-market-client-id": `VSCode ${MARKET_VSCODE_VERSION}`,
-    "x-market-user-id": String(m.marketUserId || ""),
-    "x-user-region": MARKET_USER_REGION,
-    "x-device-id": String(m.deviceId || ""),
-    "x-lgw-req-sdk-type": MARKET_SDK_TYPE,
-    "package-type": MARKET_PACKAGE_TYPE,
-    "x-request-id": uuid(),
-    "x-lscbd-aid": MARKET_AID,
-    "x-lscbd-platform": ugPlatformTag(),
-    "app-version": MARKET_APP_VERSION,
-    "x-tt-trace-id": ugTraceId(),
-    "vscode-sessionid": String(m.sessionId || ""),
-    "sec-fetch-dest": "empty",
-    "sec-fetch-mode": "no-cors",
-    "sec-fetch-site": "none",
-  };
-}
-
-/** `x-lscbd-platform`：按真实平台报，不自称 Windows（参考实现 credits.rs:150-160 的理由：减少跨平台特征矛盾）。 */
-export function ugPlatformTag(p = process.platform) {
-  if (p === "win32") return "windows";
-  if (p === "darwin") return "macos";
-  return "linux";
-}
-
-/** `x-tt-trace-id` = `00-<uuid 去连字符前 16 位>-01`（参考实现 credits.rs:162-166）。 */
-export function ugTraceId(rnd = uuid) {
-  return `00-${String(rnd()).replace(/-/g, "").slice(0, 16)}-01`;
-}
-
-// ExchangeToken / GetUserInfo（无签名，仅 UA）。
-export function oauthHeaders() {
-  return { "Content-Type": "application/json", Accept: "application/json", "User-Agent": TRAE_UA };
-}
+// SOLO 三类请求头（照抄 traework2api internal/upstream/headers.go）。纯函数，可测。
+import { APP_ID, DEVICE_BRAND, IDE_VERSION, IDE_VERSION_CODE, OS_VERSION, TRAE_UA, MARKET_UA, MARKET_VSCODE_VERSION, MARKET_USER_REGION, MARKET_SDK_TYPE, MARKET_PACKAGE_TYPE, MARKET_AID, MARKET_APP_VERSION } from "./constants.js";
+import { uuid } from "../../compat.js";
+
+// 对话/模型表（Cloud-IDE-JWT 鉴权 + IDE 指纹）。
+export function soloHeaders(cred = {}, stream = true) {
+  const at = cred?.accessToken || "";
+  const h = {
+    "Content-Type": "application/json",
+    Accept: stream ? "text/event-stream" : "application/json",
+    "User-Agent": TRAE_UA,
+    Authorization: `Cloud-IDE-JWT ${at}`,
+    "X-Cloudide-Token": at,
+    "X-Ide-Token": at,
+    "X-App-Id": APP_ID,
+    "X-App-Version": "default",
+    "X-Ide-Version": IDE_VERSION,
+    "X-Ide-Version-Code": IDE_VERSION_CODE,
+    "X-App-Version-Code": IDE_VERSION_CODE,
+    "X-Ide-Version-Type": "stable",
+    "X-Device-Type": "windows",
+    "X-OS-Version": OS_VERSION,
+    "X-Device-Brand": DEVICE_BRAND,
+    "Request-Traffic-Type": "prod",
+  };
+  if (cred?.uid) h["X-Uid"] = cred.uid;
+  if (cred?.machineId) h["X-Machine-Id"] = cred.machineId;
+  if (cred?.deviceId) h["X-Device-Id"] = cred.deviceId;
+  return h;
+}
+
+// 签到/积分/额度（api.trae.cn 的 UG 与 pay 系接口）。
+// ⚠ 这套头是**线上契约**：三件设备身份（x-device-id / x-market-user-id / vscode-sessionid）缺一或形态不对，
+//   `checkin_credits/claim` 就回 `code=9004 下单参数不正确`（2026-10-15 现网取证）。
+//   逐字对齐 NextAgentX/trae-workbuddy-switch `modules/trae/credits.rs:116-147`，取值出处与该仓纪律见 constants.js 注释。
+export function ugHeaders(cred = {}) {
+  const m = cred?.market || {};
+  const at = String(cred?.accessToken || "");
+  return {
+    accept: "*/*",
+    "accept-language": "zh-CN",
+    "content-type": "application/json",
+    "user-agent": MARKET_UA,
+    // 防双前缀：传进来的可能已带 `Cloud-IDE-JWT `（口径同参考实现 jwt.rs:53-61）
+    authorization: at.startsWith("Cloud-IDE-JWT ") ? at : `Cloud-IDE-JWT ${at}`,
+    "x-market-client-id": `VSCode ${MARKET_VSCODE_VERSION}`,
+    "x-market-user-id": String(m.marketUserId || ""),
+    "x-user-region": MARKET_USER_REGION,
+    "x-device-id": String(m.deviceId || ""),
+    "x-lgw-req-sdk-type": MARKET_SDK_TYPE,
+    "package-type": MARKET_PACKAGE_TYPE,
+    "x-request-id": uuid(),
+    "x-lscbd-aid": MARKET_AID,
+    "x-lscbd-platform": ugPlatformTag(),
+    "app-version": MARKET_APP_VERSION,
+    "x-tt-trace-id": ugTraceId(),
+    "vscode-sessionid": String(m.sessionId || ""),
+    "sec-fetch-dest": "empty",
+    "sec-fetch-mode": "no-cors",
+    "sec-fetch-site": "none",
+  };
+}
+
+/** `x-lscbd-platform`：按真实平台报，不自称 Windows（参考实现 credits.rs:150-160 的理由：减少跨平台特征矛盾）。 */
+export function ugPlatformTag(p = process.platform) {
+  if (p === "win32") return "windows";
+  if (p === "darwin") return "macos";
+  return "linux";
+}
+
+/** `x-tt-trace-id` = `00-<uuid 去连字符前 16 位>-01`（参考实现 credits.rs:162-166）。 */
+export function ugTraceId(rnd = uuid) {
+  return `00-${String(rnd()).replace(/-/g, "").slice(0, 16)}-01`;
+}
+
+// ExchangeToken / GetUserInfo（无签名，仅 UA）。
+export function oauthHeaders() {
+  return { "Content-Type": "application/json", Accept: "application/json", "User-Agent": TRAE_UA };
+}

package/src/providers/traework/index.js

@@ -1,132 +1,132 @@
-// traework provider 门面：薄聚合（读 state keys/auths，无则扫 auth 目录）。
-import { createKeyRing } from "../keyring.js";
-import { loadProviderKeys, loadProviderAuths, loadProviderBaseUrl } from "../../state.js";
-import { compatFetch, getUndici } from "../../compat.js";
-import { envInt, createAgent } from "../base.js";
-import { AGENT_HOST } from "./constants.js";
-import { listAccountDocs, withTraeworkIdentity } from "./account-store.js";
-import { createChatService } from "./chat.js";
-import { createModelsService } from "./models.js";
-
-const { UndiciFetch } = getUndici();
-
-function resolveBaseUrl(baseUrl) {
-  if (baseUrl) return String(baseUrl).trim().replace(/\/+$/, "");
-  try {
-    const env = loadProviderBaseUrl("traework");
-    if (env) return env;
-  } catch {}
-  return AGENT_HOST;
-}
-
-export function createTraeworkProvider({
-  id = "traework",
-  baseUrl,
-  apiKeys,
-  apiKey,
-  auths,
-  connectTimeoutMs = Number(process.env.MSLXDFF_TRAEWORK_TIMEOUT_MS) || 30_000,
-  cooldownMs = envInt("MSLXDFF_TRAEWORK_COOLDOWN_MS", 30_000),
-  fetchImpl,
-  file,
-  clock = Date.now,
-} = {}) {
-  if (id !== "traework") throw new Error(`traework provider id mismatch: ${id}`);
-  const resolvedBase = resolveBaseUrl(baseUrl);
-  if (!fetchImpl) fetchImpl = UndiciFetch || compatFetch;
-
-  const keysFromState = (() => { try { return loadProviderKeys(id, file ? { file } : {}); } catch { return []; } })();
-  const authsFromState = (() => { try { return loadProviderAuths(id, file ? { file } : {}); } catch { return []; } })();
-  const keys = (() => {
-    const list = [
-      ...(Array.isArray(apiKeys) ? apiKeys : [apiKeys].filter(Boolean)),
-      apiKey,
-      ...(apiKeys === undefined && apiKey === undefined ? keysFromState : []),
-    ].filter((k) => typeof k === "string" && k.trim().length);
-    return [...new Set(list.map((k) => k.trim()))];
-  })();
-  let authList = Array.isArray(auths) && auths.length ? [...auths] : [...authsFromState];
-
-  if (!authList.length && !keys.length) {
-    try {
-      for (const { uid, doc } of listAccountDocs()) {
-        const at = doc?.auth?.accessToken || doc?.accessToken;
-        if (at && !keys.includes(at)) keys.push(at);
-        authList.push({
-          uid,
-          domain: doc?.auth?.domain || "trae.cn",
-          apiHost: doc?.auth?.apiHost || "",
-          machineId: doc?.auth?.machineId || "",
-          deviceId: doc?.auth?.deviceId || "",
-          enterpriseId: doc?.account?.enterpriseId || "",
-          refreshToken: doc?.auth?.refreshToken || "",
-          expiresAt: doc?.auth?.expiresAt || 0,
-          nickname: doc?.account?.nickname || "",
-        });
-      }
-    } catch {}
-  }
-  // 无论 authList 来自 state 还是刚扫的目录，都回 auth 文档补一次设备身份：
-  // state 的 auths 行被 `normalizeAuths` 四字段白名单剥掉了 machineId/deviceId（见 account-store.js 同段注释），
-  // 不补则 SOLO 对话永远不发 X-Machine-Id / X-Device-Id。
-  authList = withTraeworkIdentity(authList);
-  // auths 行自带 refreshToken 但无 accessToken（login 后 keys 与 auths 平行）；
-  // 补齐触发条件不能只看长度相等：2026-10-15 实测 `-provider traework <未接线子命令>` 掉进 keys 兜底分支，
-  // 把 keys[0] 覆盖成 5 字符垃圾串，长度仍与 authList 相等 → 旧判据放行，真拿垃圾串当 accessToken 鉴权。
-  // 故加形态判据：不像凭据（短、含空白）的槽位一律回 auth 目录重取。
-  // （判空白逐字符 trim 比对，不用 \s 正则——本仓 Edit 通道会把单反斜杠吃成两个，留可读写法防再踩）
-  const hasBlank = (k) => [...k].some((c) => c.trim() === "");
-  const looksLikeCredential = (k) => typeof k === "string" && k.trim().length >= 20 && !hasBlank(k);
-  const needRefill = authList.length && (keys.length !== authList.length || keys.some((k, i) => authList[i]?.uid && !looksLikeCredential(k)));
-  if (needRefill) {
-    try {
-      const docs = new Map(listAccountDocs().map((d) => [String(d.uid), d.doc]));
-      authList.forEach((a, i) => {
-        const at = docs.get(String(a.uid))?.auth?.accessToken;
-        if (at) keys[i] = at; // 按位序覆盖：keys 与 authList 是平行数组（account-store 同语义），去重判据会留垃圾槽位
-      });
-    } catch {}
-  }
-
-  const ring = createKeyRing(keys, { cooldownMs, now: clock });
-  let agent = null; let dispatcher = null;
-  try {
-    const a = createAgent({
-      keepAliveTimeout: envInt("MSLXDFF_TRAEWORK_KEEPALIVE_TIMEOUT", 30_000),
-      keepAliveMaxTimeout: envInt("MSLXDFF_TRAEWORK_KEEPALIVE_MAX_TIMEOUT", 60_000),
-      connections: envInt("MSLXDFF_TRAEWORK_KEEPALIVE_CONNECTIONS", 20),
-    });
-    agent = a.agent; dispatcher = a.dispatcher;
-  } catch {}
-
-  function getKey() { return ring.next() || keys[0] || ""; }
-  function getAuth(k) {
-    const idx = keys.indexOf(k);
-    if (idx >= 0 && authList[idx]) return authList[idx];
-    if (authList.length) return authList[0];
-    return { uid: "", accessToken: k || "", refreshToken: "", expiresAt: 0, domain: "trae.cn", apiHost: "", machineId: "", deviceId: "" };
-  }
-
-  const chatSvc = createChatService({ id, baseUrl: resolvedBase, keys, authList, ring, fetchImpl, dispatcher, connectTimeoutMs, file, clock, cooldownMs });
-  const modelsSvc = createModelsService({ id, baseUrl: resolvedBase, fetchImpl, getKey, getAuth, clock });
-
-  async function chat(body, opts = {}) { return chatSvc.runChat(body, ring, opts); }
-
-  async function chatWithKeys(body, keysOverride) {
-    const tmpKeys = [...keysOverride].filter((k) => typeof k === "string" && k.trim().length).map((k) => k.trim());
-    const tmpAuth = authList[0] || getAuth("");
-    const tmpAuthList = tmpKeys.map(() => tmpAuth);
-    const tmpRing = createKeyRing(tmpKeys, { cooldownMs, now: clock });
-    const tmpSvc = createChatService({ id, baseUrl: resolvedBase, keys: tmpKeys, authList: tmpAuthList, ring: tmpRing, fetchImpl, dispatcher: null, connectTimeoutMs, file, clock, cooldownMs });
-    return tmpSvc.runChat(body, tmpRing);
-  }
-
-  async function close() { if (agent && typeof agent.close === "function") { try { await agent.close(); } catch {} } }
-
-  return { id, chat, chatWithKeys, listModels: modelsSvc.listModels, preheat: modelsSvc.preheat, close, agent, keyRing: ring, baseUrl: resolvedBase };
-}
-
-export { mapModel, normalizeModelName, staticModels } from "./models.js";
-export { soloHeaders, ugHeaders, oauthHeaders } from "./headers.js";
-export { prepareBody } from "./payload.js";
-export { classify, ErrKind } from "./errors.js";
+// traework provider 门面：薄聚合（读 state keys/auths，无则扫 auth 目录）。
+import { createKeyRing } from "../keyring.js";
+import { loadProviderKeys, loadProviderAuths, loadProviderBaseUrl } from "../../state.js";
+import { compatFetch, getUndici } from "../../compat.js";
+import { envInt, createAgent } from "../base.js";
+import { AGENT_HOST } from "./constants.js";
+import { listAccountDocs, withTraeworkIdentity } from "./account-store.js";
+import { createChatService } from "./chat.js";
+import { createModelsService } from "./models.js";
+
+const { UndiciFetch } = getUndici();
+
+function resolveBaseUrl(baseUrl) {
+  if (baseUrl) return String(baseUrl).trim().replace(/\/+$/, "");
+  try {
+    const env = loadProviderBaseUrl("traework");
+    if (env) return env;
+  } catch {}
+  return AGENT_HOST;
+}
+
+export function createTraeworkProvider({
+  id = "traework",
+  baseUrl,
+  apiKeys,
+  apiKey,
+  auths,
+  connectTimeoutMs = Number(process.env.MSLXDFF_TRAEWORK_TIMEOUT_MS) || 30_000,
+  cooldownMs = envInt("MSLXDFF_TRAEWORK_COOLDOWN_MS", 30_000),
+  fetchImpl,
+  file,
+  clock = Date.now,
+} = {}) {
+  if (id !== "traework") throw new Error(`traework provider id mismatch: ${id}`);
+  const resolvedBase = resolveBaseUrl(baseUrl);
+  if (!fetchImpl) fetchImpl = UndiciFetch || compatFetch;
+
+  const keysFromState = (() => { try { return loadProviderKeys(id, file ? { file } : {}); } catch { return []; } })();
+  const authsFromState = (() => { try { return loadProviderAuths(id, file ? { file } : {}); } catch { return []; } })();
+  const keys = (() => {
+    const list = [
+      ...(Array.isArray(apiKeys) ? apiKeys : [apiKeys].filter(Boolean)),
+      apiKey,
+      ...(apiKeys === undefined && apiKey === undefined ? keysFromState : []),
+    ].filter((k) => typeof k === "string" && k.trim().length);
+    return [...new Set(list.map((k) => k.trim()))];
+  })();
+  let authList = Array.isArray(auths) && auths.length ? [...auths] : [...authsFromState];
+
+  if (!authList.length && !keys.length) {
+    try {
+      for (const { uid, doc } of listAccountDocs()) {
+        const at = doc?.auth?.accessToken || doc?.accessToken;
+        if (at && !keys.includes(at)) keys.push(at);
+        authList.push({
+          uid,
+          domain: doc?.auth?.domain || "trae.cn",
+          apiHost: doc?.auth?.apiHost || "",
+          machineId: doc?.auth?.machineId || "",
+          deviceId: doc?.auth?.deviceId || "",
+          enterpriseId: doc?.account?.enterpriseId || "",
+          refreshToken: doc?.auth?.refreshToken || "",
+          expiresAt: doc?.auth?.expiresAt || 0,
+          nickname: doc?.account?.nickname || "",
+        });
+      }
+    } catch {}
+  }
+  // 无论 authList 来自 state 还是刚扫的目录，都回 auth 文档补一次设备身份：
+  // state 的 auths 行被 `normalizeAuths` 四字段白名单剥掉了 machineId/deviceId（见 account-store.js 同段注释），
+  // 不补则 SOLO 对话永远不发 X-Machine-Id / X-Device-Id。
+  authList = withTraeworkIdentity(authList);
+  // auths 行自带 refreshToken 但无 accessToken（login 后 keys 与 auths 平行）；
+  // 补齐触发条件不能只看长度相等：2026-10-15 实测 `-provider traework <未接线子命令>` 掉进 keys 兜底分支，
+  // 把 keys[0] 覆盖成 5 字符垃圾串，长度仍与 authList 相等 → 旧判据放行，真拿垃圾串当 accessToken 鉴权。
+  // 故加形态判据：不像凭据（短、含空白）的槽位一律回 auth 目录重取。
+  // （判空白逐字符 trim 比对，不用 \s 正则——本仓 Edit 通道会把单反斜杠吃成两个，留可读写法防再踩）
+  const hasBlank = (k) => [...k].some((c) => c.trim() === "");
+  const looksLikeCredential = (k) => typeof k === "string" && k.trim().length >= 20 && !hasBlank(k);
+  const needRefill = authList.length && (keys.length !== authList.length || keys.some((k, i) => authList[i]?.uid && !looksLikeCredential(k)));
+  if (needRefill) {
+    try {
+      const docs = new Map(listAccountDocs().map((d) => [String(d.uid), d.doc]));
+      authList.forEach((a, i) => {
+        const at = docs.get(String(a.uid))?.auth?.accessToken;
+        if (at) keys[i] = at; // 按位序覆盖：keys 与 authList 是平行数组（account-store 同语义），去重判据会留垃圾槽位
+      });
+    } catch {}
+  }
+
+  const ring = createKeyRing(keys, { cooldownMs, now: clock });
+  let agent = null; let dispatcher = null;
+  try {
+    const a = createAgent({
+      keepAliveTimeout: envInt("MSLXDFF_TRAEWORK_KEEPALIVE_TIMEOUT", 30_000),
+      keepAliveMaxTimeout: envInt("MSLXDFF_TRAEWORK_KEEPALIVE_MAX_TIMEOUT", 60_000),
+      connections: envInt("MSLXDFF_TRAEWORK_KEEPALIVE_CONNECTIONS", 20),
+    });
+    agent = a.agent; dispatcher = a.dispatcher;
+  } catch {}
+
+  function getKey() { return ring.next() || keys[0] || ""; }
+  function getAuth(k) {
+    const idx = keys.indexOf(k);
+    if (idx >= 0 && authList[idx]) return authList[idx];
+    if (authList.length) return authList[0];
+    return { uid: "", accessToken: k || "", refreshToken: "", expiresAt: 0, domain: "trae.cn", apiHost: "", machineId: "", deviceId: "" };
+  }
+
+  const chatSvc = createChatService({ id, baseUrl: resolvedBase, keys, authList, ring, fetchImpl, dispatcher, connectTimeoutMs, file, clock, cooldownMs });
+  const modelsSvc = createModelsService({ id, baseUrl: resolvedBase, fetchImpl, getKey, getAuth, clock });
+
+  async function chat(body, opts = {}) { return chatSvc.runChat(body, ring, opts); }
+
+  async function chatWithKeys(body, keysOverride) {
+    const tmpKeys = [...keysOverride].filter((k) => typeof k === "string" && k.trim().length).map((k) => k.trim());
+    const tmpAuth = authList[0] || getAuth("");
+    const tmpAuthList = tmpKeys.map(() => tmpAuth);
+    const tmpRing = createKeyRing(tmpKeys, { cooldownMs, now: clock });
+    const tmpSvc = createChatService({ id, baseUrl: resolvedBase, keys: tmpKeys, authList: tmpAuthList, ring: tmpRing, fetchImpl, dispatcher: null, connectTimeoutMs, file, clock, cooldownMs });
+    return tmpSvc.runChat(body, tmpRing);
+  }
+
+  async function close() { if (agent && typeof agent.close === "function") { try { await agent.close(); } catch {} } }
+
+  return { id, chat, chatWithKeys, listModels: modelsSvc.listModels, preheat: modelsSvc.preheat, close, agent, keyRing: ring, baseUrl: resolvedBase };
+}
+
+export { mapModel, normalizeModelName, staticModels } from "./models.js";
+export { soloHeaders, ugHeaders, oauthHeaders } from "./headers.js";
+export { prepareBody } from "./payload.js";
+export { classify, ErrKind } from "./errors.js";