@jsonstudio/rcc 0.89.1552 → 0.89.1562

package/docs/providers/antigravity-fingerprint-ua-warmup.md

@@ -63,6 +63,31 @@ RouteCodex 的版本号来源（从高到低）：
 2. 对被标记需要 reauth 的 alias 重新 OAuth：
    - `routecodex oauth antigravity-auto <token-selector-or-path>`
    - 或批量：`routecodex oauth reauth-required`
+3. 如果 Google 提示需要二次验证（账户风控页），用对应 alias 的 profile 打开浏览器完成验证（“养号/解封”）：
+   - `rcc camoufox ~/.routecodex/auth/antigravity-oauth-<alias>.json --url '<verify_url>'`
+
+> 关键点：必须用 **同一个 alias 的 Camoufox profile** 打开验证页，否则容易造成“验证通过但指纹漂移 → 继续 403”。
+
+---
+
+## 1.1) 多账号并发：为什么会“一个号 403 牵连别的号”
+
+### 现象
+- 多个 Antigravity alias 同时跑（或者同一会话内快速切换 alias）时，某个 alias 触发 `verify your account` 之后，其他 alias 也开始陆续 403。
+
+### 我们确认过的根因（与 Antigravity-Manager 行为对齐）
+- Antigravity/Cloud Code Assist **对同一会话指纹（sessionId）跨账号切换极敏感**：同一个会话如果在短时间内换 OAuth cookie / device profile，极容易触发 Google 风控。
+- Antigravity-Manager 的策略是 **session_id → account 绑定**：同一 session 不随便换账号；账号需要验证就让它失败并提示用户完成验证。
+
+### RouteCodex 的修复策略（现在的默认行为）
+- 当某个 Antigravity alias 命中 **403 verify** 时：
+  - Virtual Router 会将该 alias（同 runtimeKey 下的所有模型 key）立即标记为 `auth_verify` 冷却（默认 24h，可通过 OAuth 重新恢复）。
+  - 同一次请求的重试阶段，会 **避免命中任何 Antigravity alias**，只尝试非 Antigravity 的兜底池（例如 `gemini-cli`）。
+- 当某个 Antigravity alias 命中 **429** 时：
+  - 重试阶段同样 **不在 Antigravity 内换号**，只走非 Antigravity 兜底（避免“429→换号→全家 403”）。
+  - 具体“换号”交给后续请求 + Virtual Router 健康/冷却机制（而不是在单次请求里瞬间轮询所有账号）。
+
+> 经验：这条策略会让“单次请求”的 fallback 更克制，但能显著降低“多账号一起用 → 全部触发二次验证”的概率。
 
 ---
 

package/docs/providers/tabglm-claude-code-compat.md

@@ -0,0 +1,31 @@
+# TabGLM（Anthropic）Claude Code 对齐（System Prompt compat）
+
+tabglm 的 Anthropic 入口会对请求做“官方客户端”校验；当 `system` prompt 不符合 Claude Code 官方格式时，会返回：
+
+- `HTTP 403` + `验证失败原因：System Prompt 不匹配 Claude Code 官方格式`
+
+本仓库的修复原则是：**Host/CLI 不做硬编码**，通过 llmswitch-core 的 `compatibilityProfile` 在 compat 层完成对齐。
+
+## 启用方式（推荐：只改 config）
+
+在 `~/.routecodex/config.json`（或你的自定义 config）里为 tabglm provider 开启 compat profile：
+
+- `virtualrouter.providers.tabglm.compatibilityProfile = "chat:claude-code"`
+
+示例可参考：`configsamples/provider/tabglm/config.v1.json`
+
+## compat 做了什么
+
+当 `compatibilityProfile = chat:claude-code` 且协议为 `anthropic-messages` 时：
+
+- 强制将请求体中的 `system` 设置为 Claude Code 官方字符串：
+  - `You are Claude Code, Anthropic's official CLI for Claude.`
+- 可选：将原有 `system` 内容移入 `messages` 的开头（默认开启），避免丢失原始指令内容。
+
+## 快照验证（black-box）
+
+开启 `routecodex start --snap` 后，检查对应请求的 `provider-request.json`：
+
+- `body.system` 是否为上述官方字符串
+- 旧的 system 是否被移动到了 `body.messages[0].content` 前缀（如果原本存在）
+

package/docs/stop-message-auto.md

@@ -44,6 +44,7 @@
   - 删除上述所有字段。
 - **会话标识要求**  
   - sticky state 依赖 `sessionId` / `conversationId`。`/v1/chat` 与 `/v1/responses` 默认通过请求头即可提供；`/v1/messages` 需要确保请求体中的 `metadata.user_id` 含有 `session_<uuid>` 片段（Claude/Antigravity 默认行为）。llmswitch-core 会在缺少 header/metadata.sessionId 时回退解析 `metadata.__raw_request_body.metadata.user_id`，自动恢复 sessionId 并写入 sticky 文件。若缺失上述字段，stopMessage 无法跨请求记忆次数。
+  - compaction 保护：当捕获到的上一跳请求被判定为“compaction 请求”时，stopMessage 不会触发（避免 compaction 流程被 stopMessage 反复续写干扰）。判定逻辑只对 **payload 起始处**的 sentinel 生效；在对话历史中粘贴包含 “Handoff Summary …” 等字样的文本，不应再误伤 stopMessage。
 
 ## 2. 路由层解析与指令清理
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jsonstudio/rcc",
-  "version": "0.89.1552",
+  "version": "0.89.1562",
   "description": "Multi-provider OpenAI proxy server with anthropic/responses/chat support (release)",
   "type": "module",
   "main": "dist/index.js",
@@ -45,8 +45,8 @@
     "test:ci": "npm run test:ci:jest && npm run mock:regressions && npm run test:blackbox-antigravity-parity",
     "test:ci:coverage": "npm run test:ci:jest:coverage",
     "verify:repo-sanity": "node scripts/ci/repo-sanity.mjs",
-    "test:routing-instructions": "npm run jest:run -- --runTestsByPath tests/server/runtime/request-executor.single-attempt.spec.ts tests/server/runtime/executor-provider.retryable.spec.ts tests/providers/auth/tokenfile-auth.iflow.spec.ts tests/providers/auth/antigravity-user-agent.unit.test.ts tests/providers/auth/antigravity-fingerprint.unit.test.ts tests/providers/auth/antigravity-warmup.unit.test.ts tests/providers/core/runtime/gemini-cli-http-provider.unit.test.ts tests/providers/core/runtime/antigravity-quota-client.unit.test.ts tests/manager/quota/provider-quota-center.spec.ts tests/manager/quota/provider-quota-store.spec.ts tests/manager/quota/quota-manager-refresh.spec.ts tests/manager/quota/provider-quota-daemon-module.spec.ts tests/manager/quota/provider-key-normalization.spec.ts tests/server/http-server/daemon-admin.e2e.spec.ts tests/server/http-server/quota-view-injection.spec.ts tests/server/http-server/quota-refresh-triggers.e2e.spec.ts tests/server/http-server/hub-policy-injection.spec.ts tests/server/http-server/session-header-injection.spec.ts tests/server/http-server/session-dir.spec.ts tests/server/handlers/sse-timeout.spec.ts tests/utils/is-direct-execution.test.ts tests/utils/windows-netstat.test.ts tests/servertool/virtual-router-context-fallback.spec.ts tests/servertool/virtual-router-longcontext-fallback.spec.ts tests/servertool/virtual-router-series-cooldown.spec.ts tests/servertool/recursive-detection-guard.spec.ts tests/servertool/routing-instructions.spec.ts tests/servertool/stop-message-auto.spec.ts tests/servertool/stopmessage-session-scope.spec.ts tests/servertool/stopmessage-anthropic-stop-sequence.spec.ts tests/servertool/servertool-progress-logging.spec.ts tests/servertool/servertool-clock.spec.ts tests/sharedmodule/mcp-tool-descriptions.spec.ts tests/unified-hub/hub-v1-single-path-imports.spec.ts",
-    "test:cli": "npm run jest:run -- --runTestsByPath tests/cli/clean-command.spec.ts tests/cli/code-command.spec.ts tests/cli/config-command.spec.ts tests/cli/env-command.spec.ts tests/cli/env-output.spec.ts tests/cli/examples-command.spec.ts tests/cli/port-command.spec.ts tests/cli/port-utils.spec.ts tests/cli/restart-command.spec.ts tests/cli/smoke.spec.ts tests/cli/start-command.spec.ts tests/cli/status-command.spec.ts tests/cli/stop-command.spec.ts",
+    "test:routing-instructions": "npm run jest:run -- --runTestsByPath tests/server/runtime/request-executor.single-attempt.spec.ts tests/server/runtime/executor-provider.retryable.spec.ts tests/providers/auth/tokenfile-auth.iflow.spec.ts tests/providers/auth/antigravity-user-agent.unit.test.ts tests/providers/auth/antigravity-fingerprint.unit.test.ts tests/providers/auth/antigravity-warmup.unit.test.ts tests/providers/core/runtime/gemini-cli-http-provider.unit.test.ts tests/providers/core/runtime/antigravity-quota-client.unit.test.ts tests/manager/quota/provider-quota-center.spec.ts tests/manager/quota/provider-quota-store.spec.ts tests/manager/quota/quota-manager-refresh.spec.ts tests/manager/quota/provider-quota-daemon-module.spec.ts tests/manager/quota/provider-key-normalization.spec.ts tests/server/http-server/daemon-admin.e2e.spec.ts tests/server/http-server/quota-view-injection.spec.ts tests/server/http-server/quota-refresh-triggers.e2e.spec.ts tests/server/http-server/hub-policy-injection.spec.ts tests/server/http-server/session-header-injection.spec.ts tests/server/http-server/session-dir.spec.ts tests/server/handlers/sse-timeout.spec.ts tests/utils/is-direct-execution.test.ts tests/utils/windows-netstat.test.ts tests/servertool/virtual-router-context-fallback.spec.ts tests/servertool/virtual-router-longcontext-fallback.spec.ts tests/servertool/virtual-router-series-cooldown.spec.ts tests/servertool/recursive-detection-guard.spec.ts tests/servertool/routing-instructions.spec.ts tests/servertool/stop-message-auto.spec.ts tests/servertool/stopmessage-session-scope.spec.ts tests/servertool/stopmessage-anthropic-stop-sequence.spec.ts tests/servertool/stopmessage-compaction-false-positive.spec.ts tests/servertool/servertool-progress-logging.spec.ts tests/servertool/servertool-clock.spec.ts tests/compat/tabglm-claude-code-profile.spec.ts tests/compat/antigravity-thought-signature.spec.ts tests/sharedmodule/mcp-tool-descriptions.spec.ts tests/unified-hub/hub-v1-single-path-imports.spec.ts",
+    "test:cli": "npm run jest:run -- --runTestsByPath tests/cli/camoufox-command.spec.ts tests/cli/clean-command.spec.ts tests/cli/code-command.spec.ts tests/cli/config-command.spec.ts tests/cli/env-command.spec.ts tests/cli/env-output.spec.ts tests/cli/examples-command.spec.ts tests/cli/port-command.spec.ts tests/cli/port-utils.spec.ts tests/cli/restart-command.spec.ts tests/cli/smoke.spec.ts tests/cli/start-command.spec.ts tests/cli/status-command.spec.ts tests/cli/stop-command.spec.ts",
     "test:watch": "npm run jest:run -- --watch",
     "test:coverage": "npm run jest:run -- --coverage",
     "test:integration": "npm run jest:run -- --testPathPattern=integration",
@@ -147,7 +147,7 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.65.0",
-    "@jsonstudio/llms": "0.6.1435",
+    "@jsonstudio/llms": "0.6.1449",
     "@lmstudio/sdk": "^1.5.0",
     "@radix-ui/react-switch": "^1.2.6",
     "@types/socket.io": "^3.0.1",
@@ -161,7 +161,6 @@
     "express": "^4.18.2",
     "helmet": "^7.0.0",
     "lmstudio": "^0.0.32",
-    "node-fetch": "^3.3.2",
     "open": "^9.1.0",
     "openai": "^5.23.0",
     "ora": "^9.0.0",

package/scripts/responses-compare-server.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import express from 'express';
 import cors from 'cors';
-import fetch from 'node-fetch';
+const fetch = globalThis.fetch;
 import { randomUUID } from 'crypto';
 
 const PORT = Number(process.env.COMPARE_PORT || process.argv[2]) || 5555;