@ -140,7 +140,7 @@ plugin.kernel = {
-- WebUI 可调用的导出函数（
-- set_endpoints 让运维把渠道端点指向自建代理/镜像；测试用它打假上游。
plugin.exports = { " set_endpoints " , " account_add " , " account_list " , " account_update " , " account_clear_credentialless " , " account_delete " , " account_test " , " account_refresh " , " account_reorder " , " account_reset " , " account_retest " , " account_adopt " , " model_list " , " model_refresh " , " model_set_disabled " , " model_set_disabled_many " , " model_set_all_disabled " , " model_clear_dead " , " provider_status " , " provider_set_enabled " , " provider_get_order " , " provider_set_order " , " credits_claim_all " , " credits_status " , " credits_balances " , " credits_pool_reason " , " credits_permanent_lock " , " backup_export " , " backup_import " , " backup_status " , " auto_checkin " , " gateway_get_enabled " , " gateway_set_enabled " , " usage_token_ledger " , " usage_badge " , " usage_badge_preference " , " onboarding_status " , " onboarding_claim " , " __trae_derive_probe " , " __codearts_sign_probe " , " __qoder_machine_probe " , " __qoder_refresh_probe " , " __codearts_dpop_probe " , " __codearts_cred_probe " , " __codearts_adapter_sign_probe " , " __sync_source_probe " , " __trae_solo_probe " , " __adapter_install_probe " , " __store_dir_probe " , " __set_loopback_probe " , " reap_loopbacks " , " reap_orphan_sources " , " __add_source_for_test " , " __forget_account_probe " , " __set_pool_cred_probe " , " __cred_headers_probe " , " __b64_probe " , " __codearts_jwk_pem_probe " , " __platform_def_probe " , " __zcode_diag_probe " , " __trae_entry_probe " , " __trae_catalog_probe " , " __list_sources_probe " , " __clear_priorities_probe " , " __resync_sources_probe " , " __utf8_clip_probe " , " __event_log_probe " , " __is_model_gone_probe " , " __rank_accounts_probe " , " __chosen_account_probe " , " __inject_refresh_platform_probe " , " __clear_capabilities_probe " , " __qoder_claim_outcome_probe " , " __is_free_probe " , " __claim_covers_probe " , " __schedule_probe " , " __parse_capability_probe " , " __inject_capability_probe " , " __ttl_reset_probe " , " __ttl_probe " , " __ttl_invalidate_probe " , " __serial_probe " , " __serial_release_probe " , " __set_legacy_cred_probe " , " __read_cred_probe " , " __clear_all_creds_probe " , " credits_tier_probe " , " __set_lock_permanent_probe " , " __set_expiring_window_probe " , " __expiring_window_probe " , " __record_dead_probe " , " __catalog_gate_probe " , " __catalog_gate_fail_probe " , " credits_capability " , " claims_capable " }
plugin.exports = { " set_endpoints " , " account_add " , " account_list " , " account_update " , " account_clear_credentialless " , " account_delete " , " account_test " , " account_refresh " , " account_reorder " , " account_reset " , " account_retest " , " account_adopt " , " model_list " , " model_refresh " , " model_set_disabled " , " model_set_disabled_many " , " model_set_all_disabled " , " model_clear_dead " , " provider_status " , " provider_set_enabled " , " provider_get_order " , " provider_set_order " , " credits_claim_all " , " credits_status " , " credits_balances " , " credits_pool_reason " , " credits_permanent_lock " , " backup_export " , " backup_import " , " backup_status " , " auto_checkin " , " gateway_get_enabled " , " gateway_set_enabled " , " usage_token_ledger " , " usage_badge " , " usage_badge_preference " , " onboarding_status " , " onboarding_claim " , " __trae_derive_probe " , " __codearts_sign_probe " , " __qoder_machine_probe " , " __qoder_refresh_probe " , " __codearts_dpop_probe " , " __codearts_cred_probe " , " __codearts_adapter_sign_probe " , " __sync_source_probe " , " __trae_solo_probe " , " __adapter_install_probe " , " __store_dir_probe " , " __set_loopback_probe " , " reap_loopbacks " , " reap_orphan_sources " , " __add_source_for_test " , " __forget_account_probe " , " __set_pool_cred_probe " , " __cred_headers_probe " , " __b64_probe " , " __codearts_jwk_pem_probe " , " __platform_def_probe " , " __zcode_diag_probe " , " __trae_entry_probe " , " __trae_catalog_probe " , " __trae_headers_probe " , " __platforms_probe " , " __list_sources_probe " , " __clear_priorities_probe " , " __resync_sources_probe " , " __utf8_clip_probe " , " __event_log_probe " , " __is_model_gone_probe " , " __rank_accounts_probe " , " __chosen_account_probe " , " __inject_refresh_platform_probe " , " __clear_capabilities_probe " , " __qoder_claim_outcome_probe " , " __is_free_probe " , " __claim_covers_probe " , " __schedule_probe " , " __parse_capability_probe " , " __inject_capability_probe " , " __ttl_reset_probe " , " __ttl_probe " , " __ttl_invalidate_probe " , " __serial_probe " , " __serial_release_probe " , " __set_legacy_cred_probe " , " __read_cred_probe " , " __clear_all_creds_probe " , " credits_tier_probe " , " __set_lock_permanent_probe " , " __set_expiring_window_probe " , " __expiring_window_probe " , " __record_dead_probe " , " __catalog_gate_probe " , " __catalog_gate_fail_probe " , " credits_capability " , " claims_capable " }
@ -197,7 +197,7 @@ local pickAccountForSource, accountBalanceRaw, balanceTier
-- ⇒ 上游回「not able to authenticate you」；
-- （ ，
-- ⇒ 教训：
local traeCheckinHeaders , traeFixNickname
local traeCheckinHeaders , traeFixNickname , traeIdeHeaders
local traeCallback , traeDeriveDeviceId15 , traeDeriveMarketUserId , traeDeriveSessionId
local PLATFORMS = {
@ -273,6 +273,20 @@ local PLATFORMS = {
} } ,
auth = " none " , -- 鉴权头由 headers_fn 负责
parse = " trae_batch " ,
-- ★★ 只收**适配器真正会发的那条通道**里的模型。
--
-- 实测（ ，
-- 同一个 config_name 在不同 function 里的**可用性不同**，而本插件的
-- trae 适配器只会发 `solo_work_lite`（见 TRAE_FUNCTION）
-- 的模型也列出来，用户选中后上游要么回**空内容**（
-- deepseek-V3 / glm-4.7 / code-review-judge 实测皆空），要么**悄悄回落到
-- 默认模型**（
-- 这正是"模型不正确"的真实来源）。
--
-- 收窄到 solo_work_lite 后：
-- 它自称的那个模型（
-- step-5-preview / deepseek-v4.1-flash …）。
admit_functions = { " solo_work_lite " } ,
} ,
-- trae 非 OpenAI 兼容：端点是 SOLO 的 /api/agent/v3/llm_utils_chat，
-- 载荷须转 config_name/function 格式（见 trae-adapter.ts:374）
@ -301,6 +315,12 @@ local PLATFORMS = {
-- custom_model_claude / custom_model_1M 均返回空 content）
-- 表现就是「模型不正确 / 渠道不可用」。
-- 它们与内部子 agent 同性质：保留在目录里（排查可见），但不进可选列表。
-- ★ 远端目录一旦可用，就**不再补兜底表**（ ： ）
-- 兜底表里的名字是历史快照，其中有若干**上游已不存在**的条目
-- （实测 sagitta 自称 Claude、aquila 自称 ChatGPT、glm-5 / DeepSeek-V4-Flash
-- 在 solo_work_lite 通道里根本没有配置）—— 补进来 = 给用户一堆"点了回错模型"
-- 的选项。仅在远端目录为空时才用兜底表（那才是它的用途）。
models_fallback_no_supplement = true ,
models_hidden = {
" browser_use_subagent " , " explore_sub_agent_v13 " , " explore_sub_agent_v2 " , " summary " ,
} ,
@ -3760,6 +3780,23 @@ local function effectiveModels(provider)
-- 进源只会让客户端选中后报错（
local unavailable = { }
for _ , m in ipairs ( plat.models_unavailable or { } ) do unavailable [ m ] = true end
-- ★ admit_functions：
--
-- 白名单（ ）
-- "适配器会发它"。trae 适配器恒发 solo_work_lite，
-- 这条路发出去要么回空内容、要么被上游悄悄回落到默认模型（实测
-- kimi-k2.8-preview / deepseek-V3 空回，
-- GPT）
--
-- 放在这里而不是解析器里，是因为解析器还要负责**元数据合并**：同一模型在
-- solo_agent 里有思考档位、在 solo_work_lite 里没有，合并必须跨通道进行
-- （否则模型显示"未提供推理等级"）。策略只决定"哪些 id 对外露出"。
local admit = nil
local mrAdmit = plat.models_remote and plat.models_remote . admit_functions
if type ( mrAdmit ) == " table " then
admit = { }
for _ , f in ipairs ( mrAdmit ) do admit [ f ] = true end
end
local remote = plugin.state . remoteModels and plugin.state . remoteModels [ provider ]
local out , seen = { } , { }
-- 远端在前（权威顺序）
@ -3770,17 +3807,38 @@ local function effectiveModels(provider)
end
end
end
-- 兜底补位（只补远端没有的）
for _ , id in ipairs ( plat.models or { } ) do
if not seen [ id ] then seen [ id ] = true out [ # out + 1 ] = id end
-- 兜底补位（只补远端没有的）。
-- ⚠️ plat.models_fallback_no_supplement=true 的平台**不补**：远端目录可用时
-- 它就是权威，兜底表只是"拉不到时的替代"，补进来会把已下架/错映射的名字
-- 重新塞进列表（见该字段注释里的实测）。
local haveRemote = type ( remote ) == " table " and type ( remote.ids ) == " table " and # remote.ids > 0
if not ( plat.models_fallback_no_supplement and haveRemote ) then
for _ , id in ipairs ( plat.models or { } ) do
if not seen [ id ] then seen [ id ] = true out [ # out + 1 ] = id end
end
end
-- 剔除**有阳性证据**已失效的模型（照参考 dead-model-store 的剔除语义）。
-- ⚠️ 只剔这里记录过的（真正 404 过的），**绝不**拿远端目录反推下架 ——
-- buddy/qoder 那类平台的远端目录残缺，反推会删掉可用模型。
local dead = deadModelIds ( provider )
local metaAll = plugin.state . modelMeta and plugin.state . modelMeta [ provider ] or { }
local kept = { }
for _ , id in ipairs ( out ) do
if not dead [ id ] and not unavailable [ id ] then kept [ # kept + 1 ] = id end
local keep = ( not dead [ id ] ) and ( not unavailable [ id ] )
if keep and admit then
local e = metaAll [ id ]
-- 有目录元数据 ⇒ 按它声明的通道判；没有元数据（兜底/手工源）⇒ 不拦，
-- 因为"目录没说"不等于"不可调用"。
if type ( e ) == " table " and type ( e.chans ) == " table " then
keep = false
for _ , c in ipairs ( e.chans ) do
if admit [ c ] then keep = true break end
end
elseif type ( e ) == " table " and type ( e.chan ) == " string " and e.chan ~= " " then
keep = admit [ e.chan ] == true
end
end
if keep then kept [ # kept + 1 ] = id end
end
return kept
end
@ -4077,10 +4135,20 @@ local function parseRemoteModels(kind, body, provider)
local groups = rec.function_configs or rec.functionConfigs
if type ( groups ) == " table " then
local byId , chosenRank , order = { } , { } , { }
-- chansOf[id]：该 id 在**哪些通道**里出现过（合并只留一条元数据，但
-- "在哪些通道可发"是策略判定要用的信息 —— admit_functions 不能只看
-- 合并后那条的 chan：
-- solo_work_lite 同时出现，合并会选前者，导致误判"不可发"）。
local chansOf = { }
for _ , g in ipairs ( groups ) do
if type ( g ) == " table " then
local chan = rstr ( g , " function " , " Function " )
-- 准入：未声明 function 或不在白名单 → 整组丢弃
--
-- ⚠️ 「白名单」只回答"该通道在本适配器的推理端点下**可调用**"；
-- "适配器会不会发这条通道"是另一回事，由 effectiveModels 的
-- models_remote.admit_functions 过滤（那是产品策略，不该写进解析器：
-- 解析器的职责是把目录如实解出来，含元数据合并）。
if chan and rankOf [ chan ] then
local list = g.config_info_list or g.ConfigInfoList
if type ( list ) == " table " then
@ -4096,6 +4164,8 @@ local function parseRemoteModels(kind, body, provider)
-- is_custom_model: 仅可见但不可调用（上游流内 4001 拒绝）
if e.custom == true then ok = false end
if ok then
chansOf [ e.id ] = chansOf [ e.id ] or { }
chansOf [ e.id ] [ chan ] = true
local inc = byId [ e.id ]
if inc == nil then
byId [ e.id ] = e
@ -4131,7 +4201,14 @@ local function parseRemoteModels(kind, body, provider)
-- 上层只能显示"未提供推理等级"）。
if not plugin.state . modelMeta then plugin.state . modelMeta = { } end
plugin.state . modelMeta [ provider ] = plugin.state . modelMeta [ provider ] or { }
plugin.state . modelMeta [ provider ] [ id ] = byId [ id ]
local entry = byId [ id ]
if type ( entry ) == " table " and chansOf [ id ] then
local list = { }
for c in pairs ( chansOf [ id ] ) do list [ # list + 1 ] = c end
table.sort ( list )
entry.chans = list
end
plugin.state . modelMeta [ provider ] [ id ] = entry
end
end
@ -4227,10 +4304,10 @@ local function refreshRemoteModels(provider)
local req = { url = url , method = method , headers = headers }
if ep.body then req.body = ep.body end
if ep.sign == " trae_solo " then
-- TRAE 的鉴权是 Cloud-IDE-JWT + 约 20 个客户端头（含按 user_id 派生的
-- 设备身份）—— 不能只发 Bearer。这里复用**平台既有的 ** traeCheckinHeaders
-- 实现（它已经过实测：简化头会被拒），不另写一套头部构造 ，
-- 否则“chat 能通、目录 401”这类差异极难查 。
-- TRAE 的鉴权是 Cloud-IDE-JWT + 一组客户端头 —— 不能只发 Bearer。
-- ⚠️ 必须用 **IDE 头 **（ IdeHeaders） ， ：
-- 签到头是 `api.trae.cn` 的 UG/积分形态（ ） ，
-- 发到 IDE 目录端点会被逐 function 判 2001（ 。
local cred
for _ , a in ipairs ( poolList ( provider ) ) do
if a.enabled ~= false then
@ -4243,11 +4320,13 @@ local function refreshRemoteModels(provider)
end
if not cred then
lastErr = " 无可用 TRAE 凭据 "
elseif type ( traeCheckin Headers ) ~= " function " then
lastErr = " traeCheckin Headers 未就绪（前向引用顺序问题） "
elseif type ( traeIde Headers ) ~= " function " then
lastErr = " traeIde Headers 未就绪（前向引用顺序问题） "
else
local uid = cred.uid or " "
local h , herr = traeCheckinHeaders ( plat , cred , uid )
-- ★ 目录是 **IDE 端点**，必须用 IDE 头（不是签到头）。
-- 2026-10-20 事故：这里曾复用 traeCheckinHeaders ⇒ 22 个 function 全回
-- 2001 "Config detail ... not found" ⇒ 永远拉不到目录。详见 traeIdeHeaders。
local h , herr = traeIdeHeaders ( plat , cred , " application/json " )
if herr then
lastErr = tostring ( herr )
else
@ -9043,14 +9122,42 @@ end
function plugin . list_platforms ( req )
local out = { }
for _ , p in ipairs ( allPlatforms ( ) ) do
-- ★ logged_in 必须看**账号池**，不能只看旧的单账号键。
--
-- 真实缺陷（
-- `credentialOf("channels:" .. id)` —— 那是**旧版单账号**的保险库键；
-- 现网凭据键是 `channels:<platform>:<accountId>`（一平台多账号），
-- 于是**所有**通过账号池接入的平台都被判成未登录（
-- 是因为它还留着一条旧格式凭据） ，
-- 用户看到的就是"渠道不可用"，而底层模型其实完全能用。
local logged , first , claimed = false , nil , nil
for _ , a in ipairs ( poolList ( p.id ) ) do
if a.enabled ~= false and credentialOf ( a.credentialRef ) ~= nil then
logged = true
if first == nil then first = a end
if claimed == nil and a.last_claim ~= nil then claimed = a.last_claim end
end
end
-- 兼容旧单账号：池里没有时回落到 state.accounts + 旧凭据键
local acct = accountOf ( p.id ) or { }
local has = credentialOf ( " channels: " .. p.id )
local hasLegacy = credentialOf ( " channels: " .. p.id ) ~= nil
if not logged and hasLegacy then logged = true end
if first == nil and ( hasLegacy or acct.account ~= nil ) then
first = { id = acct.id , nickname = acct.account , enabled = acct.enabled }
end
out [ # out + 1 ] = {
id = p.id , name = p.name , flow = p.flow ,
logged_in = has ~= nil ,
account = acct.account ,
enabled = acct.enabled ,
last_claim = acct.last_claim ,
logged_in = logged ,
-- 账号展示： （ ，
account_id = first and first.id or nil ,
account = ( first and first.nickname ) or acct.account ,
enabled = first and first.enabled ~= false or acct.enabled ,
last_claim = claimed or acct.last_claim ,
accounts = ( function ( )
local n = 0
for _ , a in ipairs ( poolList ( p.id ) ) do if a.enabled ~= false then n = n + 1 end end
return n
end ) ( ) ,
}
end
return { status = 200 , json = { platforms = out } }
@ -9389,8 +9496,32 @@ end
function plugin . status_page ( req )
local r = __llmsproxy_kernel.call ( " status " , { } )
-- accounts 必须**合并账号池**：只回 state.accounts（ ） ，
-- 通过账号池接入的平台在这里是空的， ，
-- 与 platforms 的 logged_in 一样会让人误判成"渠道不可用"
-- （ ，
local accounts = { }
for k , v in pairs ( plugin.state . accounts or { } ) do accounts [ k ] = v end
for _ , p in ipairs ( allPlatforms ( ) ) do
local list = { }
for _ , a in ipairs ( poolList ( p.id ) ) do
list [ # list + 1 ] = {
id = a.id , nickname = a.nickname , enabled = a.enabled ~= false ,
expiresAt = a.expiresAt , last_claim = a.last_claim ,
has_credential = credentialOf ( a.credentialRef ) ~= nil ,
}
end
if # list > 0 then
local base = accounts [ p.id ] or { }
local merged = { }
for k , v in pairs ( base ) do merged [ k ] = v end
merged.accounts = list
merged.count = # list
accounts [ p.id ] = merged
end
end
return { status = 200 , json = {
accounts = plugin.state . ,
accounts = accounts ,
log = plugin.state . log ,
kernel_ready = r and r.ready or false ,
} }
@ -9803,6 +9934,52 @@ traeCheckinHeaders = function(plat, cred, uid)
return h , nil
end
-- traeIdeHeaders(plat, cred, accept)： ）
--
-- ⚠️ 与 traeCheckinHeaders 是**两套不同的头**，不能互相替代：
-- - traeCheckinHeaders 面向 `api.trae.cn/trae/api/v2/ug|pay`（签到/积分）：
-- VSCode 形态的 UA + X-Market-* + X-Lscbd-* + Vscode-Sessionid，
-- 设备身份用**派生**的 market device id。
-- - traeIdeHeaders 面向 `trae-api-cn.mchost.guru/api/...`（模型目录、对话）：
-- Trae/0.1.52 UA + X-App-Id + X-Ide-Version(*) + Request-Traffic-Type，
-- 设备身份用**凭据里登录时的** device_id / machine_id。
--
-- 2026-10-20 真实事故：目录刷新复用了 traeCheckinHeaders，
-- **全部**回 `error_code 2001 Config detail for function: X not found`（ ） ，
-- 于是插件永远拿不到远端目录、只剩兜底表 —— 用 IDE 头直发同一端点，返回
-- 2.6 MB、每个 function 都带 config_info_list。症状（
-- （头用错了）之间隔着整整一层协议，这就是必须分开写、并在注释里点明的原因。
traeIdeHeaders = function ( plat , cred , accept )
local tok = tostring ( ( cred and cred.access_token ) or " " )
if tok == " " then return nil , " 缺少 access_token " end
local h = {
[ " Content-Type " ] = " application/json " ,
[ " Accept " ] = accept or " application/json " ,
[ " User-Agent " ] = ( plat and plat.user_agent ) or " Trae/0.1.52 " ,
[ " Authorization " ] = " Cloud-IDE-JWT " .. tok ,
[ " X-Cloudide-Token " ] = tok ,
[ " X-Ide-Token " ] = tok ,
[ " X-App-Id " ] = ( plat and plat.app_id ) or " 6eefa01c-1036-4c7e-9ca5-d891f63bfcd8 " ,
[ " X-App-Version " ] = " default " ,
[ " X-Ide-Version " ] = ( plat and plat.ide_version ) or " 0.1.52 " ,
[ " X-Ide-Version-Code " ] = ( plat and plat.ide_version_code ) or " 20260811 " ,
[ " X-App-Version-Code " ] = ( plat and plat.ide_version_code ) or " 20260811 " ,
[ " X-Ide-Version-Type " ] = " stable " ,
[ " X-Device-Type " ] = ( plat and plat.device_type ) or " macos " ,
[ " X-OS-Version " ] = ( plat and plat.os_version ) or " macOS 15.7.4 " ,
[ " X-Device-Brand " ] = ( plat and plat.device_brand ) or " Apple " ,
[ " Request-Traffic-Type " ] = " prod " ,
}
local uid = tostring ( ( cred and cred.uid ) or " " )
if uid ~= " " then h [ " X-Uid " ] = uid end
-- ★ 设备身份只认凭据里登录时落下的那两个值；不派生、不造。
local mid = tostring ( ( cred and cred.machine_id ) or " " )
local did = tostring ( ( cred and cred.device_id ) or " " )
if mid ~= " " then h [ " X-Machine-Id " ] = mid end
if did ~= " " then h [ " X-Device-Id " ] = did end
return h , nil
end
-- 表驱动签到推广到需自定义头的平台：在 PLATFORMS 定义后绑定。
--
-- credentialRef 是「秘密引用」， （ ）
@ -13040,6 +13217,44 @@ function plugin.__list_sources_probe()
return { json = { sources = out } }
end
-- plugin.__platforms_probe：
--
-- 为什么需要它：`list_platforms` 是 plugin.http 的路由处理器，**不在**
-- plugin.exports 里（
-- Call 到它。走探针是仓库既有做法（见 channels_remove_source_perm_test.go
-- 对 `status` 的同类处理），避免为了测试把只读状态处理器塞进 exports。
function plugin . __platforms_probe ( args )
local r = plugin.list_platforms ( nil ) or { }
return { json = r.json or { } }
end
-- plugin.__trae_headers_probe：
--
-- 存在理由： （ ）
-- IDE 头（ ） ，
-- 这个错误**在代码里看不出来**（两套头都"能跑"），只能靠契约钉死：
-- - 签到头面向 api.trae.cn 的 UG/积分：必须有 X-Market-Client-Id / X-Lscbd-*，
-- **不得**有 X-App-Id / X-Machine-Id（
-- - IDE 头面向 trae-api-cn.mchost.guru：
-- X-Machine-Id，
-- 判据比对键集合即可，不需要真实网络。
function plugin . __trae_headers_probe ( args )
local plat = platformById ( " trae " )
local cred = {
access_token = " jwt-test " , uid = " 1000 " ,
device_id = " dev-32 " , machine_id = " mid-32 " ,
}
local ide = traeIdeHeaders ( plat , cred , " application/json " )
local chk = traeCheckinHeaders ( plat , cred , cred.uid )
local function keyset ( h )
local out = { }
for k in pairs ( h or { } ) do out [ # out + 1 ] = k end
table.sort ( out )
return out
end
return { json = { ide = keyset ( ide ) , checkin = keyset ( chk ) } }
end
-- plugin.__trae_catalog_probe：
-- HTTP 状态与前 1200 字节响应体。
--
@ -13087,7 +13302,8 @@ function plugin.__trae_catalog_probe(args)
h [ " X-Ide-Version-Code " ] = args.ide_version
end
local resp , err = __llmsproxy_http ( {
url = ep.url , method = ep.method or " POST " ,
url = ( type ( args.url ) == " string " and args.url ~= " " and args.url ) or ep.url ,
method = ep.method or " POST " ,
headers = h , body = ( type ( args.body ) == " string " and args.body ~= " " and args.body ) or ep.body or " {} " ,
} )
if err then return { json = { error = tostring ( err ) } } end
