mslxdff 0.1.155 → 0.1.158

package/src/providers/qoder/index.js

@@ -1,185 +1,231 @@
-// qoder provider 门面（原生直连，零桥依赖）：
-// 多号 = keys[] 里每条 device_token blob（auths/qoder-<uid>.json 落盘由 login 维护）；
-// 每请求 round-robin 选号 → 建会话 → COSY 签名直调上游；恒 local-only 不借 key。
-import { loadProviderKeys, loadProviderConfig } from "../../state.js";
-import { listAccountDocs } from "./account-store.js";
-import { defaultStateFile } from "../../state/store.js";
-import { createKeyRing } from "../keyring.js";
-import { envInt } from "../base.js";
-import { accountFromBlob } from "./account-store.js";
-import { normalizeRegion } from "./constants.js";
-import { fingerprintSeed, deriveMachineId, deriveMachineToken, deriveMachineType } from "./fingerprint.js";
-import { newSession } from "./session.js";
-import { createChatService } from "./chat.js";
-import { createStickyPicker } from "./sticky.js";
-import { createModelsService } from "./models.js";
-import { compatFetch } from "../../compat.js";
-
-function buildSessionFor(cred) {
-  const uid = cred.uid || cred.deviceToken.slice(0, 8);
-  const seed = fingerprintSeed(uid, cred.deviceToken);
-  const identity = {
-    name: cred.name || "", aid: uid, uid, yxUid: "",
-    organizationId: cred.organizationId || "", organizationName: cred.organizationName || "",
-    userType: cred.userType || "personal_standard",
-    securityOauthToken: cred.deviceToken, refreshToken: cred.refreshToken || "",
-  };
-  return newSession(identity, deriveMachineId(seed), deriveMachineToken(seed), deriveMachineType(seed));
-}
-
-export function createQoderProvider({
-  id = "qoder",
-  apiKeys,
-  file,
-  region,
-  fetchImpl,
-  cooldownMs = envInt("MSLXDFF_QODER_COOLDOWN_MS", 30_000),
-  connectTimeoutMs = Number(process.env.MSLXDFF_QODER_TIMEOUT_MS) || 120_000,
-} = {}) {
-  const keys = (() => {
-    if (Array.isArray(apiKeys) && apiKeys.length) return [...new Set(apiKeys.map((k) => String(k).trim()).filter(Boolean))];
-    try { return loadProviderKeys(id, file ? { file } : {}); } catch { return []; }
-  })();
-  let authList = [];
-  try { authList = loadProviderConfig(id, file ? { file } : {})?.auths || []; } catch {}
-  // auths 行的 region 会被 state.normalizeAuths 剥掉：每号真实 region 从 auths/qoder-<uid>.json 读（单一源）
-  try {
-    const docs = listAccountDocs();
-    for (const d of docs) {
-      const row = authList.find((a) => String(a?.uid) === String(d.uid));
-      if (row) row.region = d.doc?.auth?.region || "global";
-      else authList.push({ uid: d.uid, refreshToken: d.doc?.auth?.refreshToken || "", region: d.doc?.auth?.region || "global", name: d.doc?.account?.name || "" });
-    }
-  } catch {}
-  const ring = createKeyRing(keys, { cooldownMs });
-  if (!fetchImpl) fetchImpl = compatFetch;
-
-
-
-  // 选号：同一客户端请求内粘住（重试不换号），只有该号被冷却（401/403/429/5xx）才换下一个；
-  // 无 scope（拿不到 reqId，如独立的 models 探活）时退回原 round-robin。
-  const pickKey = createStickyPicker({
-    pick: () => ring.next() || keys[0] || "",
-    isCooling: (k) => ring.isCooling(k),
-    ttlMs: envInt("MSLXDFF_QODER_STICKY_MS", 600_000),
-  });
-
-  // 凭据 → 会话（会话含 RSA/AES 临时密钥，进程内可复用；此处按请求轻建，成本低）
-  function pickSession(scope) {
-    let decision = "new";
-    const key = pickKey(scope, (d) => { decision = d; });
-    // 全部号都在冷却时 pick() 只能兜底取 keys[0]：这是"被迫选择"，必须与正常轮转区分开
-    if (ring.available() === 0) decision = "forced";
-    const blob = accountFromBlob(key);
-    if (!blob?.deviceToken) return null;
-    const auth = authList.find((a) => String(a?.refreshToken || "") === String(blob.refreshToken || "")) || authList[0] || {};
-    const region = normalizeRegion(region0 || auth.region || "global");
-    const sess = buildSessionFor({ ...blob, uid: auth.uid, name: auth.name, region });
-    // key/pick 带出：onError(key) 要冷却"刚用过的这个号"；pick 让日志能写"这次为什么是它"
-    return { sess, region, key, pick: decision };
-  }
-  const region0 = region; // 构造参数优先
-
-  const chatSvc = createChatService({ id, fetchImpl, timeoutMs: connectTimeoutMs });
-  // models 服务按号选区：构造时无固定 region，listModels(sess, region) 动态传
-  const modelsSvc = createModelsService({ id, fetchImpl });
-
-  // 失败冷却：401/403/429/5xx 冷却当前号（cooldownMs，默认 30s），坏号不再参与轮换。
-  // 对齐 workbuddy/chat.js 的 onError 语义——此前 qoder 只 next() 不 onError，坏号恒在轮换池里。
-  // 网络异常（fetch throw）同样冷却。业务错（4xx 内容类）不冷却。
-  async function chat(body, opts) {
-    // scope=reqId：同一次客户端请求的多次上游调用（空转重试）粘同一个号
-    const picked = pickSession(opts?.reqId ? `req:${opts.reqId}` : null);
-    if (!picked) {
-      return new Response(JSON.stringify({ error: { message: "qoder: 无可用账号 — 先跑 mslxdff -provider qoder login", type: "auth_error" } }), { status: 401, headers: { "Content-Type": "application/json" } });
-    }
-    const pickedKey = picked.key || "";
-    const stripped = { ...body };
-    if (typeof stripped.model === "string" && stripped.model.startsWith("qoder/")) stripped.model = stripped.model.slice(6);
-    let res;
-    try {
-      res = await chatSvc.runChat(stripped, picked.sess, picked.region, picked.pick);
-    } catch (e) {
-      try { ring.onError(pickedKey); } catch {}
-      throw e;
-    }
-    const badAuth = (n) => n === 401 || n === 403 || n === 429 || n >= 500;
-    const st = res?.status ?? 0;
-    // 流式路径把上游非 200 整形成 200 + 流内 error（对外契约），真实状态码只能从回显头取；
-    // 否则坏号（401/403/429/5xx）永不冷却，粘号还会把重试继续粘在这个坏号上。
-    const ust = Number(res?.headers?.get?.("x-mslxdff-qoder-upstream-status")) || 0;
-    const bad = badAuth(st) ? st : (badAuth(ust) ? ust : 0);
-    if (bad) {
-      try { ring.onError(pickedKey); } catch {}
-      // 冷却是个决定：钉在响应上，管线写进模型日志（cooled=<status>）
-      try { res.headers?.set?.("x-mslxdff-qoder-cooldown", String(bad)); } catch {}
-    }
-    return res;
-  }
-
-   // 全号聚合：双号分属 cn/global 两区，模型表各不同（cn 14 个/global 15 个）；
-   // 只取单号会漏另一区（如轮询到 global 就看不到 cn 独有的 q37fmodel/gm51model）。
-   // 按 id 并集去重，只返回 enable=true 的可调用模型（过滤已下沉到 models.js）。
-   function eachCred() {
-     const out = [];
-     const seen = new Set();
-     const push = (blob, auth) => {
-       if (!blob?.deviceToken || seen.has(blob.deviceToken)) return;
-       seen.add(blob.deviceToken);
-       out.push({ blob, auth: auth || {} });
-     };
-     for (const k of keys) {
-       const blob = accountFromBlob(k);
-       if (!blob?.deviceToken) continue;
-       const auth = authList.find((a) => String(a?.refreshToken || "") === String(blob.refreshToken || "")) || authList[0] || {};
-       push(blob, auth);
-     }
-     if (!out.length) {
-       // keys 为空但 auth 目录有号（如 state 被外部改写）：从落盘 doc 合成凭据，目录不断即可出列表
-       try {
-         for (const { uid, doc } of listAccountDocs()) {
-           const a = doc?.auth || {};
-           if (!a.deviceToken) continue;
-           push({ deviceToken: a.deviceToken, refreshToken: a.refreshToken || "" },
-             { uid, name: doc?.account?.name || "", region: a.region || "global", refreshToken: a.refreshToken || "" });
-         }
-       } catch {}
-     }
-     return out;
-   }
- 
-   async function listModels() {
-     const creds = eachCred();
-     if (!creds.length) return [];
-     const seen = new Set();
-     const out = [];
-     for (const { blob, auth } of creds) {
-       const region = normalizeRegion(region0 || auth.region || "global");
-       const sess = buildSessionFor({ ...blob, uid: auth.uid, name: auth.name, region });
-       try {
-         const list = await modelsSvc.listModels(sess, region);
-         for (const m of list) {
-           if (!m?.id || seen.has(m.id)) continue;
-           seen.add(m.id);
-           out.push(m);
-         }
-       } catch {}
-     }
-     return out;
-   }
- 
-   async function preheat() {
-     try {
-       const list = await listModels();
-       return list.length ? { ok: true } : { ok: false, error: "no account" };
-     } catch (e) { return { ok: false, error: String(e?.message || e).slice(0, 120) }; }
-   }
-
-  async function close() {}
-  async function chatWithKeys(body, keysOverride, opts) {
-    const tmp = createQoderProvider({ id, apiKeys: keysOverride, file, fetchImpl, cooldownMs, connectTimeoutMs });
-    return tmp.chat(body, opts);
-  }
-
-  return { id, chat, chatWithKeys, listModels, preheat, close, keyRing: ring, baseUrl: "qoder://native", region: normalizeRegion(region || authList[0]?.region) };
+// qoder provider 门面（原生直连，零桥依赖）：
+// 多号 = keys[] 里每条 device_token blob（auths/qoder-<uid>.json 落盘由 login 维护）；
+// 选号 → 建会话 → COSY 签名直调上游；恒 local-only 不借 key。
+// Note: 同请求粘号（一次客户端请求内复用同一个号，仅 401/403/429/5xx 冷却才换）与流式坏号冷却（真实状态码经内部头带出）— 见 .agents/notes/implemented/feature/2026-09-27-qoder-per-request-sticky-account.md
+import { loadProviderKeys, loadProviderConfig } from "../../state.js";
+import { listAccountDocs } from "./account-store.js";
+import { defaultStateFile } from "../../state/store.js";
+import { createKeyRing } from "../keyring.js";
+import { envInt } from "../base.js";
+import { accountFromBlob } from "./account-store.js";
+import { normalizeRegion } from "./constants.js";
+import { fingerprintSeed, deriveMachineId, deriveMachineToken, deriveMachineType } from "./fingerprint.js";
+import { newSession } from "./session.js";
+import { createChatService } from "./chat.js";
+import { createStickyPicker } from "./sticky.js";
+import { createModelsService } from "./models.js";
+import { compatFetch } from "../../compat.js";
+
+function buildSessionFor(cred) {
+  const uid = cred.uid || cred.deviceToken.slice(0, 8);
+  const seed = fingerprintSeed(uid, cred.deviceToken);
+  const identity = {
+    name: cred.name || "", aid: uid, uid, yxUid: "",
+    organizationId: cred.organizationId || "", organizationName: cred.organizationName || "",
+    userType: cred.userType || "personal_standard",
+    securityOauthToken: cred.deviceToken, refreshToken: cred.refreshToken || "",
+  };
+  return newSession(identity, deriveMachineId(seed), deriveMachineToken(seed), deriveMachineType(seed));
+}
+
+export function createQoderProvider({
+  id = "qoder",
+  apiKeys,
+  file,
+  region,
+  fetchImpl,
+  cooldownMs = envInt("MSLXDFF_QODER_COOLDOWN_MS", 30_000),
+  // 额度耗尽（code 110）按天重置：短冷却等于反复撞死号，故单独配长冷却（默认 1h）
+  quotaCooldownMs = envInt("MSLXDFF_QODER_QUOTA_COOLDOWN_MS", 3600_000),
+  connectTimeoutMs = Number(process.env.MSLXDFF_QODER_TIMEOUT_MS) || 120_000,
+} = {}) {
+  const keys = (() => {
+    if (Array.isArray(apiKeys) && apiKeys.length) return [...new Set(apiKeys.map((k) => String(k).trim()).filter(Boolean))];
+    try { return loadProviderKeys(id, file ? { file } : {}); } catch { return []; }
+  })();
+  let authList = [];
+  try { authList = loadProviderConfig(id, file ? { file } : {})?.auths || []; } catch {}
+  // auths 行的 region 会被 state.normalizeAuths 剥掉：每号真实 region 从 auths/qoder-<uid>.json 读（单一源）
+  try {
+    const docs = listAccountDocs();
+    for (const d of docs) {
+      const row = authList.find((a) => String(a?.uid) === String(d.uid));
+      if (row) row.region = d.doc?.auth?.region || "global";
+      else authList.push({ uid: d.uid, refreshToken: d.doc?.auth?.refreshToken || "", region: d.doc?.auth?.region || "global", name: d.doc?.account?.name || "" });
+    }
+  } catch {}
+  const ring = createKeyRing(keys, { cooldownMs });
+  // 额度耗尽号集合（本次进程内）：全号在此集合 → 无可用号时回额度提示而非"无账号"401
+  const exhaustedByQuota = new Set();
+  if (!fetchImpl) fetchImpl = compatFetch;
+
+
+
+  // 选号：同一客户端请求内粘住（重试不换号），只有该号被冷却（401/403/429/5xx）才换下一个；
+  // 无 scope（拿不到 reqId，如独立的 models 探活）时退回原 round-robin。
+  const pickKey = createStickyPicker({
+    pick: () => ring.next() || keys[0] || "",
+    isCooling: (k) => ring.isCooling(k),
+    ttlMs: envInt("MSLXDFF_QODER_STICKY_MS", 600_000),
+  });
+
+  // 凭据 → 会话（会话含 RSA/AES 临时密钥，进程内可复用；此处按请求轻建，成本低）
+  function pickSession(scope) {
+    let decision = "new";
+    const key = pickKey(scope, (d) => { decision = d; });
+    // 全部号都在冷却时 pick() 只能兜底取 keys[0]：这是"被迫选择"，必须与正常轮转区分开
+    if (ring.available() === 0) decision = "forced";
+    const blob = accountFromBlob(key);
+    if (!blob?.deviceToken) return null;
+    const auth = authList.find((a) => String(a?.refreshToken || "") === String(blob.refreshToken || "")) || authList[0] || {};
+    const region = normalizeRegion(region0 || auth.region || "global");
+    const sess = buildSessionFor({ ...blob, uid: auth.uid, name: auth.name, region });
+    // key/pick 带出：onError(key) 要冷却"刚用过的这个号"；pick 让日志能写"这次为什么是它"
+    return { sess, region, key, pick: decision };
+  }
+  const region0 = region; // 构造参数优先
+
+  const chatSvc = createChatService({ id, fetchImpl, timeoutMs: connectTimeoutMs });
+  // models 服务按号选区：构造时无固定 region，listModels(sess, region) 动态传
+  const modelsSvc = createModelsService({ id, fetchImpl });
+
+  // 失败冷却：401/403/429/5xx 冷却当前号（cooldownMs，默认 30s），坏号不再参与轮换。
+  // 额度耗尽（quota）走长冷却（quotaCooldownMs，默认 1h）——额度按天重置，短冷却等于反复撞死号。
+  // 额度错在 provider 内直接换号重发（不依赖外层空转重试链路：那条链路在非流式路径不触发）。
+  // 收口只认「每个号都被上游明确判过额度」；排队/限流等非额度冷却不得谎称没额度
+  // Note: 判定收紧（全号才报 quota_exhausted，其余如实返回/报冷却中）— 见 .agents/notes/implemented/bug-fix/2026-09-28-qoder-quota-cooldown-switch.md
+  async function chat(body, opts) {
+    // scope=reqId：同一次客户端请求的多次上游调用（空转重试）粘同一个号
+    const scope = opts?.reqId ? `req:${opts.reqId}` : null;
+    const stripped = { ...body };
+    if (typeof stripped.model === "string" && stripped.model.startsWith("qoder/")) stripped.model = stripped.model.slice(6);
+    const badAuth = (n) => n === 401 || n === 403 || n === 429 || n >= 500;
+    const total = ring.keys.length;
+    // 换号上限：每次 continue 必然冷却掉一个号，故最多 total 轮；超出即退出（收敛保证）
+    let lastRes = null;
+    for (let hop = 0; hop <= total; hop++) {
+      const picked = pickSession(scope);
+      if (!picked) break;
+      const pickedKey = picked.key || "";
+      // 该号额度已耗尽且仍在冷却 → 不再打上游（打也是同一堵墙）。另有可用号时继续换，不轻易断言全灭。
+      if (exhaustedByQuota.has(pickedKey)) {
+        if (ring.isCooling(pickedKey)) {
+          if (ring.available() > 0) continue;
+          break;
+        }
+        exhaustedByQuota.delete(pickedKey);
+      }
+      let res;
+      try {
+        res = await chatSvc.runChat(stripped, picked.sess, picked.region, picked.pick);
+      } catch (e) {
+        try { ring.onError(pickedKey); } catch {}
+        throw e;
+      }
+      const st = res?.status ?? 0;
+      // 流式路径把上游非 200 整形成 200 + 流内 error（对外契约），真实状态码只能从回显头取；
+      // 否则坏号（401/403/429/5xx）永不冷却，粘号还会把重试继续粘在这个坏号上。
+      const ust = Number(res?.headers?.get?.("x-mslxdff-qoder-upstream-status")) || 0;
+      const isQuota = res?.headers?.get?.("x-mslxdff-qoder-quota") === "1";
+      const bad = badAuth(st) ? st : (badAuth(ust) ? ust : 0);
+      if (bad) {
+        try { ring.onError(pickedKey, isQuota ? quotaCooldownMs : cooldownMs); } catch {}
+        if (isQuota) exhaustedByQuota.add(pickedKey);
+        // 冷却是个决定：钉在响应上，管线写进模型日志（cooled=<status>）
+        try { res.headers?.set?.("x-mslxdff-qoder-cooldown", String(bad)); } catch {}
+      }
+      // 额度耗尽：本号已废（长冷却），若还有别的号就立刻换号重发，别把空流递给客户端
+      if (isQuota) {
+        lastRes = res;
+        if (ring.available() > 0) continue;
+        break;
+      }
+      return res;
+    }
+    // 收口按「真实全景」分档，不得把「非额度冷却」误报成没额度：
+    // 仅当每一个号都被上游明确判过额度，才是真的全号额度耗尽。
+    if (total > 0 && ring.keys.every((k) => exhaustedByQuota.has(k))) return quotaExhaustedResponse();
+    if (lastRes) return lastRes;               // 有上游响应 → 如实透出（含上游真错）
+    if (!ring.available()) return allCoolingResponse(); // 全在冷却但非额度 → 冷却中提示
+    return new Response(JSON.stringify({ error: { message: "qoder: 无可用账号 — 先跑 mslxdff -provider qoder login", type: "auth_error" } }), { status: 401, headers: { "Content-Type": "application/json" } });
+  }
+
+  // 额度耗尽提示（每一个号都被上游明确判过额度）：继续等只会更糟，让调用方立刻知道要换号/等明天
+  function quotaExhaustedResponse() {
+    return new Response(JSON.stringify({
+      error: { message: "qoder: 所有账号额度已用完（Billing daily count exceeded），请更换账号或明日再试", type: "quota_exhausted" },
+    }), { status: 429, headers: { "Content-Type": "application/json", "x-mslxdff-qoder-quota-exhausted": "1" } });
+  }
+
+  // 冷却中（非额度原因）：如实说"暂不可用"，不得声称额度耗尽
+  function allCoolingResponse() {
+    return new Response(JSON.stringify({
+      error: { message: "qoder: 账号暂不可用（上游限流/排队冷却中），请稍后重试", type: "all_cooling" },
+    }), { status: 429, headers: { "Content-Type": "application/json", "x-mslxdff-qoder-all-cooling": "1" } });
+  }
+   // 全号聚合：双号分属 cn/global 两区，模型表各不同（cn 14 个/global 15 个）；
+   // 只取单号会漏另一区（如轮询到 global 就看不到 cn 独有的 q37fmodel/gm51model）。
+   // 按 id 并集去重，只返回 enable=true 的可调用模型（过滤已下沉到 models.js）。
+   function eachCred() {
+     const out = [];
+     const seen = new Set();
+     const push = (blob, auth) => {
+       if (!blob?.deviceToken || seen.has(blob.deviceToken)) return;
+       seen.add(blob.deviceToken);
+       out.push({ blob, auth: auth || {} });
+     };
+     for (const k of keys) {
+       const blob = accountFromBlob(k);
+       if (!blob?.deviceToken) continue;
+       const auth = authList.find((a) => String(a?.refreshToken || "") === String(blob.refreshToken || "")) || authList[0] || {};
+       push(blob, auth);
+     }
+     if (!out.length) {
+       // keys 为空但 auth 目录有号（如 state 被外部改写）：从落盘 doc 合成凭据，目录不断即可出列表
+       try {
+         for (const { uid, doc } of listAccountDocs()) {
+           const a = doc?.auth || {};
+           if (!a.deviceToken) continue;
+           push({ deviceToken: a.deviceToken, refreshToken: a.refreshToken || "" },
+             { uid, name: doc?.account?.name || "", region: a.region || "global", refreshToken: a.refreshToken || "" });
+         }
+       } catch {}
+     }
+     return out;
+   }
+ 
+   async function listModels() {
+     const creds = eachCred();
+     if (!creds.length) return [];
+     const seen = new Set();
+     const out = [];
+     for (const { blob, auth } of creds) {
+       const region = normalizeRegion(region0 || auth.region || "global");
+       const sess = buildSessionFor({ ...blob, uid: auth.uid, name: auth.name, region });
+       try {
+         const list = await modelsSvc.listModels(sess, region);
+         for (const m of list) {
+           if (!m?.id || seen.has(m.id)) continue;
+           seen.add(m.id);
+           out.push(m);
+         }
+       } catch {}
+     }
+     return out;
+   }
+ 
+   async function preheat() {
+     try {
+       const list = await listModels();
+       return list.length ? { ok: true } : { ok: false, error: "no account" };
+     } catch (e) { return { ok: false, error: String(e?.message || e).slice(0, 120) }; }
+   }
+
+  async function close() {}
+  async function chatWithKeys(body, keysOverride, opts) {
+    const tmp = createQoderProvider({ id, apiKeys: keysOverride, file, fetchImpl, cooldownMs, connectTimeoutMs });
+    return tmp.chat(body, opts);
+  }
+
+  return { id, chat, chatWithKeys, listModels, preheat, close, keyRing: ring, baseUrl: "qoder://native", region: normalizeRegion(region || authList[0]?.region) };
 }

package/src/providers/qoder/sse.js

@@ -1,46 +1,103 @@
-// qoder 上游 SSE 信封解析（转译 qoder2api bridge.go ExtractDelta）
-// 帧形态：data:{"headers":{},"body":"<内层JSON>","statusCodeValue":200}
-// 信封 statusCodeValue!=200 = 瞬时上游错；内层 code!=0 = 业务错；usage 同帧合并
-export function extractDelta(dataLine) {
-  let wrapper;
-  try { wrapper = JSON.parse(dataLine); } catch { return {}; }
-  if (wrapper.statusCodeValue !== undefined && Number(wrapper.statusCodeValue) !== 200) {
-    const detail = typeof wrapper.body === "string" && wrapper.body ? wrapper.body : JSON.stringify(wrapper).slice(0, 400);
-    return { err: { kind: "upstream", status: Number(wrapper.statusCodeValue) || 502, detail } };
-  }
-  const inner = wrapper.body;
-  if (!inner || typeof inner !== "string") return {};
-  let j;
-  try { j = JSON.parse(inner); } catch { return {}; }
-  let usageIn = 0, usageOut = 0;
-  if (j.usage && typeof j.usage === "object") {
-    usageIn = Math.trunc(Number(j.usage.prompt_tokens) || 0);
-    usageOut = Math.trunc(Number(j.usage.completion_tokens) || 0);
-  }
-  const choices = Array.isArray(j.choices) ? j.choices : [];
-  for (const ch of choices) {
-    const delta = ch?.delta;
-    if (!delta) continue;
-    const role = typeof delta.role === "string" ? delta.role : "";
-    const content = typeof delta.content === "string" ? delta.content : "";
-    const reasoning = typeof delta.reasoning_content === "string" ? delta.reasoning_content : "";
-    const toolCalls = Array.isArray(delta.tool_calls) && delta.tool_calls.length ? delta.tool_calls : null;
-    if (role || content || reasoning || toolCalls) {
-      return { role, content, reasoning, toolCalls, usageIn, usageOut };
-    }
-  }
-  if (typeof j.code === "string" && j.code && j.code !== "0") {
-    return { err: { kind: /inappropriate|DataInspection|Sensitive|ContentFilter/i.test(String(j.message)) ? "content_policy" : "business", code: j.code, detail: String(j.message || "") } };
-  }
-  if (usageIn > 0 || usageOut > 0) return { usageIn, usageOut };
-  return {};
-}
-
-// 错误四分类 → HTTP 状态（对齐 errors.go ErrorStatus 语义）
-export function errorStatus(err) {
-  if (!err) return 500;
-  if (err.kind === "content_policy") return 400;
-  if (err.kind === "auth") return [401, 403].includes(err.status) ? err.status : 401;
-  if (err.kind === "upstream") return [401, 403, 429].includes(err.status) ? err.status : 502;
-  return 502;
-}
+// qoder 上游 SSE 信封解析（转译 qoder2api bridge.go ExtractDelta）
+// 帧形态：data:{"headers":{},"body":"<内层JSON>","statusCodeValue":200}
+// 信封 statusCodeValue!=200 = 瞬时上游错；内层 code!=0 = 业务错；usage 同帧合并
+// 排障日志（QODER_DEBUG_STREAM=1 开）：静默吞帧的分支必须有痕，否则"内容凭空消失"无从追
+const DBG_SSE = () => process.env.QODER_DEBUG_STREAM === "1";
+const ddbg = (...a) => { if (DBG_SSE()) console.log("[qoder-sse]", ...a); };
+
+export function extractDelta(dataLine) {
+  let wrapper;
+  try { wrapper = JSON.parse(dataLine); } catch (e) {
+    ddbg(`[envelope-parse-fail] ${e.message} line=${dataLine.slice(0, 300)}`);
+    return {};
+  }
+  if (wrapper.statusCodeValue !== undefined && Number(wrapper.statusCodeValue) !== 200) {
+    const detail = typeof wrapper.body === "string" && wrapper.body ? wrapper.body : JSON.stringify(wrapper).slice(0, 400);
+    // 额度耗尽可能裹在非 200 信封里，且实测是**多层嵌套**（外层 statusCodeValue:403 →
+    // code:10605 → 内层 code:"110" / "Billing daily count exceeded"）。只看一层会把额度错
+    // 当普通 403；显式扫各层信号才能可靠命中（排队 10605 无 110 信号，天然不误判）。
+    const quota = findQuotaSignal(wrapper);
+    if (quota) return { err: { kind: "quota", status: 429, detail: quota.slice(0, 300) } };
+    return { err: { kind: "upstream", status: Number(wrapper.statusCodeValue) || 502, detail } };
+  }
+  const inner = wrapper.body;
+  if (!inner || typeof inner !== "string") {
+    ddbg(`[body-not-string] bodyType=${typeof inner} envelopeKeys=${Object.keys(wrapper).join(",")} envelope=${dataLine.slice(0, 300)}`);
+    return {};
+  }
+  let j;
+  try { j = JSON.parse(inner); } catch (e) {
+    ddbg(`[inner-parse-fail] ${e.message} body=${inner.slice(0, 300)}`);
+    return {};
+  }
+  let usageIn = 0, usageOut = 0;
+  if (j.usage && typeof j.usage === "object") {
+    usageIn = Math.trunc(Number(j.usage.prompt_tokens) || 0);
+    usageOut = Math.trunc(Number(j.usage.completion_tokens) || 0);
+  }
+  const choices = Array.isArray(j.choices) ? j.choices : [];
+  for (const ch of choices) {
+    const delta = ch?.delta;
+    if (!delta) continue;
+    const role = typeof delta.role === "string" ? delta.role : "";
+    const content = typeof delta.content === "string" ? delta.content : "";
+    const reasoning = typeof delta.reasoning_content === "string" ? delta.reasoning_content : "";
+    const toolCalls = Array.isArray(delta.tool_calls) && delta.tool_calls.length ? delta.tool_calls : null;
+    if (role || content || reasoning || toolCalls) {
+      return { role, content, reasoning, toolCalls, usageIn, usageOut };
+    }
+  }
+  if (typeof j.code === "string" && j.code && j.code !== "0") {
+    const msg = String(j.message || "");
+    // 额度耗尽（实测 code=110 "Billing daily count exceeded"）：按配额错单列，门面据此换号。
+    // 只认 code 110 / Billing 专属措辞 —— 普通 "quota exceeded"（code 115）仍归业务错，不误伤。
+    if (isQuotaError(j.code, msg)) return { err: { kind: "quota", status: 429, code: j.code, detail: msg || `code=${j.code}` } };
+    return { err: { kind: /inappropriate|DataInspection|Sensitive|ContentFilter/i.test(msg) ? "content_policy" : "business", code: j.code, detail: msg } };
+  }
+  if (usageIn > 0 || usageOut > 0) return { usageIn, usageOut };
+  // 走到这里 = 帧既无 content/tool_calls、也无业务错、也无 usage。空轮排查的关键取证点：
+  // 把内层 JSON 的顶层键与 choices 原样打出来，一眼看出上游改了什么字段名。
+  ddbg(`[no-delta] innerKeys=${Object.keys(j).join(",")} choicesLen=${choices.length} inner=${JSON.stringify(j).slice(0, 400)}`);
+  return {};
+}
+
+/** 额度耗尽识别：code 110 白名单 + Billing 专属措辞（收紧：普通 quota exceeded 归业务错） */
+export function isQuotaError(code, message) {
+  if (String(code || "").trim() === "110") return true;
+  return /billing\s*(daily)?\s*(count|limit|quota)?\s*exceed/i.test(String(message || ""));
+}
+
+// 显式额度信号扫描：信封各层里找 code 110 / Billing 明确措辞。
+// 限深 4 层（实测 3 层足够，留一层余量），字符串层自动尝试 JSON.parse 后继续下钻。
+// 排队 10605（isQueued/serviceAvailable）无 110 信号 → 返回 null，天然不误判为额度。
+const MAX_ENVELOPE_DEPTH = 4;
+export function findQuotaSignal(value, depth = 0) {
+  if (value == null || depth > MAX_ENVELOPE_DEPTH) return null;
+  if (typeof value === "string") {
+    const s = value.trim();
+    if (!s) return null;
+    if (isQuotaError("", s)) return s;
+    try {
+      return findQuotaSignal(JSON.parse(s), depth + 1);
+    } catch {
+      return null;
+    }
+  }
+  if (typeof value !== "object") return null;
+  if (isQuotaError(value.code, value.message)) return String(value.message || value.code || "");
+  for (const v of Object.values(value)) {
+    const hit = findQuotaSignal(v, depth + 1);
+    if (hit) return hit;
+  }
+  return null;
+}
+
+// 错误四分类 → HTTP 状态（对齐 errors.go ErrorStatus 语义）
+export function errorStatus(err) {
+  if (!err) return 500;
+  if (err.kind === "content_policy") return 400;
+  if (err.kind === "auth") return [401, 403].includes(err.status) ? err.status : 401;
+  if (err.kind === "upstream") return [401, 403, 429].includes(err.status) ? err.status : 502;
+  if (err.kind === "quota") return 429; // 额度错按限流语义出（门面据此换号/冷却）
+  return 502;
+}

package/src/providers/qoder/sticky.js

@@ -3,6 +3,7 @@
 // 背景：keyring 每次 next() 都前进一格，而 qoder 两个号分属 cn/global 两区（region 决定 URL），
 // 于是「重试」会把同一个请求甩到另一个区——排障时表现为"URL 莫名在切"。粘号把"切号"收回到
 // 唯一正当理由：该号已被冷却。无 scope（拿不到请求标识）时退化为原 round-robin，与旧行为一致。
+// Note: 切号的唯一正当理由是冷却（401/403/429/5xx）——空转等其它失败不换号，故选择器要能问 keyring "上次这个号还在冷却吗" — 见 .agents/notes/implemented/feature/2026-09-27-qoder-per-request-sticky-account.md
 export function createStickyPicker({ pick, isCooling = () => false, now = Date.now, ttlMs = 600_000, maxEntries = 200 } = {}) {
   const seen = new Map(); // scope → { key, at }