mslxdff 0.1.200 → 0.1.203

package/src/providers/qoder/checkin.js

@@ -1,160 +1,160 @@
-// qoder 签到/额度（移植 qoder2api checkin.go，修两处硬伤）：
-//   ① 域名按区域选（Go 硬编码 openapi.qoder.com.cn → 国际号必然 401 TOKEN_EXPIRE）；
-//   ② 活动类型放宽（Go 只认 CLAIM_BENEFIT，国际站活动是 VIEW_DETAILS 会被漏掉）。
-// 认证只需 Bearer deviceToken + cosy-clienttype:10，无 COSY 签名、claim 空 body。
-// 主流程：cn 走 daily-check-in（GET status → POST claim，409=今日已领）；
-//         404/非 200 → 回落 campaigns（GET /sash/api/v1/me/campaigns → POST .../{id}/claim）。
-// Note: 域名必须按每号 region 选（两站账号不通用），默认只领 CLAIM_BENEFIT — 见 .agents/notes/implemented/feature/2026-09-21-qoder-checkin-region-endpoints.md
-import { EP_CAMPAIGNS, EP_CHECKIN_STATUS, EP_CHECKIN_CLAIM, EP_QUOTA, openapiBase, normalizeRegion } from "./constants.js";
-import { compatFetch, timeoutSignal } from "../../compat.js";
-
-export function checkinHeaders(deviceToken) {
-  return {
-    authorization: "Bearer " + String(deviceToken || ""),
-    accept: "application/json",
-    "accept-language": "zh-CN",
-    "user-agent": "Qoder",
-    "cosy-clienttype": "10",
-  };
-}
-
-async function call(fetchImpl, region, path, { method = "GET", deviceToken, body, timeoutMs = 20000 } = {}) {
-  const base = openapiBase(region);
-  const headers = checkinHeaders(deviceToken);
-  const init = { method, headers, signal: timeoutSignal(timeoutMs) };
-  if (method !== "GET") {
-    headers.origin = base;
-    if (body !== undefined) init.body = JSON.stringify(body);
-  }
-  let res;
-  try {
-    res = await fetchImpl(base + path, init);
-  } catch (e) {
-    return { status: 0, json: null, text: "", error: String(e?.message || e).slice(0, 200) };
-  }
-  const text = await res.text().catch(() => "");
-  let json = null;
-  if (text) { try { json = JSON.parse(text); } catch {} }
-  return { status: res.status, json, text };
-}
-
-export function listCampaigns({ deviceToken, region, fetchImpl = compatFetch, timeoutMs } = {}) {
-  return call(fetchImpl, region, EP_CAMPAIGNS, { deviceToken, timeoutMs });
-}
-
-export function claimCampaign({ deviceToken, region, campaignId, fetchImpl = compatFetch, timeoutMs } = {}) {
-  return call(fetchImpl, region, `${EP_CAMPAIGNS}/${campaignId}/claim`, { method: "POST", deviceToken, timeoutMs });
-}
-
-export function dailyCheckinStatus({ deviceToken, region, fetchImpl = compatFetch, timeoutMs } = {}) {
-  return call(fetchImpl, region, EP_CHECKIN_STATUS, { deviceToken, timeoutMs });
-}
-
-export function dailyCheckinClaim({ deviceToken, region, fetchImpl = compatFetch, timeoutMs } = {}) {
-  return call(fetchImpl, region, EP_CHECKIN_CLAIM, { method: "POST", deviceToken, body: {}, timeoutMs });
-}
-
-// 余额：/api/v2/quota/usage → userQuota{total,used,remaining,unit} + isQuotaExceeded
-export async function fetchQuota({ deviceToken, region, fetchImpl = compatFetch, timeoutMs } = {}) {
-  const r = await call(fetchImpl, region, EP_QUOTA, { deviceToken, timeoutMs });
-  if (r.status !== 200) return { ok: false, status: r.status, error: r.error || r.text.slice(0, 160) };
-  const q = r.json?.userQuota || {};
-  return {
-    ok: true,
-    total: Number(q.total) || 0,
-    used: Number(q.used) || 0,
-    remaining: Number(q.remaining) || 0,
-    unit: String(q.unit || "credits"),
-    exhausted: Boolean(r.json?.isQuotaExceeded),
-  };
-}
-
-// 选活动：优先 CLAIM_BENEFIT（真积分），allowPromo 时也认 VIEW_DETAILS 等促销条目。
-export function pickCampaign(campaigns, { allowPromo = false } = {}) {
-  const list = Array.isArray(campaigns) ? campaigns : [];
-  let benefit = null;
-  let promo = null;
-  let claimed = false;
-  for (const c of list) {
-    if (c?.claimStatus === "CLAIMED") claimed = true;
-    if (c?.claimStatus !== "CLAIMABLE") continue;
-    if (c?.actionType === "CLAIM_BENEFIT") benefit = benefit || c;
-    else if (allowPromo) promo = promo || c;
-  }
-  return { target: benefit || promo, claimed };
-}
-
-// 单账号签到：返回 { ok, status: claimed|already|no_campaign|error, amount, streak, ... }
-export async function runCheckin({ deviceToken, region, fetchImpl = compatFetch, allowPromo = false, probeOnly = false, timeoutMs } = {}) {
-  const reg = normalizeRegion(region);
-  const r = {
-    region: reg, ok: false, status: "error", message: "", amount: 0,
-    streak: 0, totalDays: 0, totalCredits: 0, reward: 0,
-  };
-  if (!deviceToken) { r.message = "无 device token（先 mslxdff -provider qoder login）"; return r; }
-
-  const st = await dailyCheckinStatus({ deviceToken, region: reg, fetchImpl, timeoutMs });
-  if (st.status === 200 && st.json?.status) {
-    r.streak = Number(st.json.currentStreakDays) || 0;
-    r.totalDays = Number(st.json.totalClaimDays) || 0;
-    r.totalCredits = Number(st.json.totalRewardCredits) || 0;
-    r.reward = Number(st.json.rewardCredits) || 0;
-  }
-  if (st.status === 401) { r.message = `device token 失效（HTTP 401）：请重新 mslxdff -provider qoder login`; return r; }
-
-  // 干跑：只报状态，不发任何 claim 请求
-  if (probeOnly && st.status === 200 && st.json?.status) {
-    r.ok = true;
-    r.status = st.json.status === "CLAIMED" ? "already" : "claimable";
-    r.message = `干跑：status=${st.json.status} 每日奖励 ${r.reward}`;
-    return r;
-  }
-  // 主流程：daily-check-in（国内站）
-  if (st.status === 200 && st.json?.status) {
-    const claim = await dailyCheckinClaim({ deviceToken, region: reg, fetchImpl, timeoutMs });
-    if (claim.status === 409) { r.ok = true; r.status = "already"; r.message = "今日已领取"; return r; }
-    if (claim.status === 200) {
-      r.ok = true; r.status = "claimed";
-      r.amount = Number(claim.json?.rewardCredits) || r.reward || 0;
-      r.streak += 1; r.totalDays += 1; r.totalCredits += r.amount;
-      r.message = `签到成功 +${r.amount}`;
-      return r;
-    }
-    // 其它错误 → 保留统计，回落 campaigns
-  }
-
-  const list = await listCampaigns({ deviceToken, region: reg, fetchImpl, timeoutMs });
-  if (list.status === 401) { r.message = "device token 失效（HTTP 401）：请重新 mslxdff -provider qoder login"; return r; }
-  if (list.status !== 200) {
-    r.message = `查询活动失败 HTTP ${list.status || "-"}: ${String(list.error || list.text).slice(0, 160)}`;
-    return r;
-  }
-  const { target, claimed } = pickCampaign(list.json?.campaigns, { allowPromo });
-  if (probeOnly) {
-    r.ok = true; r.status = target ? "claimable" : "no_campaign";
-    r.message = target
-      ? `干跑：可领 ${target.actionType} ${target.campaignKey || ""}`.trim()
-      : (claimed ? "干跑：今日已领取" : "干跑：无可用签到活动");
-    return r;
-  }
-  if (!target) {
-    r.ok = true; r.status = "no_campaign";
-    r.message = claimed ? "今日已领取" : "无可用签到活动";
-    return r;
-  }
-  const claim = await claimCampaign({ deviceToken, region: reg, campaignId: target.campaignId, fetchImpl, timeoutMs });
-  if (claim.status !== 200 || claim.json?.status !== "CLAIMED") {
-    r.message = `领取失败 HTTP ${claim.status || "-"}: ${String(claim.error || claim.text).slice(0, 160)}`;
-    return r;
-  }
-  r.ok = true;
-  r.amount = Number(claim.json?.benefit?.amount) || 0;
-  r.expiresAt = String(claim.json?.expiresAt || "");
-  r.campaignKey = String(target.campaignKey || "");
-  if (claim.json?.replayed) { r.status = "already"; r.message = "今日已领取（幂等返回）"; }
-  else {
-    r.status = "claimed";
-    r.message = r.amount > 0 ? `领取成功 +${r.amount} ${r.campaignKey}`.trim() : `领取成功 ${r.campaignKey}`.trim();
-  }
-  return r;
-}
+// qoder 签到/额度（移植 qoder2api checkin.go，修两处硬伤）：
+//   ① 域名按区域选（Go 硬编码 openapi.qoder.com.cn → 国际号必然 401 TOKEN_EXPIRE）；
+//   ② 活动类型放宽（Go 只认 CLAIM_BENEFIT，国际站活动是 VIEW_DETAILS 会被漏掉）。
+// 认证只需 Bearer deviceToken + cosy-clienttype:10，无 COSY 签名、claim 空 body。
+// 主流程：cn 走 daily-check-in（GET status → POST claim，409=今日已领）；
+//         404/非 200 → 回落 campaigns（GET /sash/api/v1/me/campaigns → POST .../{id}/claim）。
+// Note: 域名必须按每号 region 选（两站账号不通用），默认只领 CLAIM_BENEFIT — 见 .agents/notes/implemented/feature/2026-09-21-qoder-checkin-region-endpoints.md
+import { EP_CAMPAIGNS, EP_CHECKIN_STATUS, EP_CHECKIN_CLAIM, EP_QUOTA, openapiBase, normalizeRegion } from "./constants.js";
+import { compatFetch, timeoutSignal } from "../../compat.js";
+
+export function checkinHeaders(deviceToken) {
+  return {
+    authorization: "Bearer " + String(deviceToken || ""),
+    accept: "application/json",
+    "accept-language": "zh-CN",
+    "user-agent": "Qoder",
+    "cosy-clienttype": "10",
+  };
+}
+
+async function call(fetchImpl, region, path, { method = "GET", deviceToken, body, timeoutMs = 20000 } = {}) {
+  const base = openapiBase(region);
+  const headers = checkinHeaders(deviceToken);
+  const init = { method, headers, signal: timeoutSignal(timeoutMs) };
+  if (method !== "GET") {
+    headers.origin = base;
+    if (body !== undefined) init.body = JSON.stringify(body);
+  }
+  let res;
+  try {
+    res = await fetchImpl(base + path, init);
+  } catch (e) {
+    return { status: 0, json: null, text: "", error: String(e?.message || e).slice(0, 200) };
+  }
+  const text = await res.text().catch(() => "");
+  let json = null;
+  if (text) { try { json = JSON.parse(text); } catch {} }
+  return { status: res.status, json, text };
+}
+
+export function listCampaigns({ deviceToken, region, fetchImpl = compatFetch, timeoutMs } = {}) {
+  return call(fetchImpl, region, EP_CAMPAIGNS, { deviceToken, timeoutMs });
+}
+
+export function claimCampaign({ deviceToken, region, campaignId, fetchImpl = compatFetch, timeoutMs } = {}) {
+  return call(fetchImpl, region, `${EP_CAMPAIGNS}/${campaignId}/claim`, { method: "POST", deviceToken, timeoutMs });
+}
+
+export function dailyCheckinStatus({ deviceToken, region, fetchImpl = compatFetch, timeoutMs } = {}) {
+  return call(fetchImpl, region, EP_CHECKIN_STATUS, { deviceToken, timeoutMs });
+}
+
+export function dailyCheckinClaim({ deviceToken, region, fetchImpl = compatFetch, timeoutMs } = {}) {
+  return call(fetchImpl, region, EP_CHECKIN_CLAIM, { method: "POST", deviceToken, body: {}, timeoutMs });
+}
+
+// 余额：/api/v2/quota/usage → userQuota{total,used,remaining,unit} + isQuotaExceeded
+export async function fetchQuota({ deviceToken, region, fetchImpl = compatFetch, timeoutMs } = {}) {
+  const r = await call(fetchImpl, region, EP_QUOTA, { deviceToken, timeoutMs });
+  if (r.status !== 200) return { ok: false, status: r.status, error: r.error || r.text.slice(0, 160) };
+  const q = r.json?.userQuota || {};
+  return {
+    ok: true,
+    total: Number(q.total) || 0,
+    used: Number(q.used) || 0,
+    remaining: Number(q.remaining) || 0,
+    unit: String(q.unit || "credits"),
+    exhausted: Boolean(r.json?.isQuotaExceeded),
+  };
+}
+
+// 选活动：优先 CLAIM_BENEFIT（真积分），allowPromo 时也认 VIEW_DETAILS 等促销条目。
+export function pickCampaign(campaigns, { allowPromo = false } = {}) {
+  const list = Array.isArray(campaigns) ? campaigns : [];
+  let benefit = null;
+  let promo = null;
+  let claimed = false;
+  for (const c of list) {
+    if (c?.claimStatus === "CLAIMED") claimed = true;
+    if (c?.claimStatus !== "CLAIMABLE") continue;
+    if (c?.actionType === "CLAIM_BENEFIT") benefit = benefit || c;
+    else if (allowPromo) promo = promo || c;
+  }
+  return { target: benefit || promo, claimed };
+}
+
+// 单账号签到：返回 { ok, status: claimed|already|no_campaign|error, amount, streak, ... }
+export async function runCheckin({ deviceToken, region, fetchImpl = compatFetch, allowPromo = false, probeOnly = false, timeoutMs } = {}) {
+  const reg = normalizeRegion(region);
+  const r = {
+    region: reg, ok: false, status: "error", message: "", amount: 0,
+    streak: 0, totalDays: 0, totalCredits: 0, reward: 0,
+  };
+  if (!deviceToken) { r.message = "无 device token（先 mslxdff -provider qoder login）"; return r; }
+
+  const st = await dailyCheckinStatus({ deviceToken, region: reg, fetchImpl, timeoutMs });
+  if (st.status === 200 && st.json?.status) {
+    r.streak = Number(st.json.currentStreakDays) || 0;
+    r.totalDays = Number(st.json.totalClaimDays) || 0;
+    r.totalCredits = Number(st.json.totalRewardCredits) || 0;
+    r.reward = Number(st.json.rewardCredits) || 0;
+  }
+  if (st.status === 401) { r.message = `device token 失效（HTTP 401）：请重新 mslxdff -provider qoder login`; return r; }
+
+  // 干跑：只报状态，不发任何 claim 请求
+  if (probeOnly && st.status === 200 && st.json?.status) {
+    r.ok = true;
+    r.status = st.json.status === "CLAIMED" ? "already" : "claimable";
+    r.message = `干跑：status=${st.json.status} 每日奖励 ${r.reward}`;
+    return r;
+  }
+  // 主流程：daily-check-in（国内站）
+  if (st.status === 200 && st.json?.status) {
+    const claim = await dailyCheckinClaim({ deviceToken, region: reg, fetchImpl, timeoutMs });
+    if (claim.status === 409) { r.ok = true; r.status = "already"; r.message = "今日已领取"; return r; }
+    if (claim.status === 200) {
+      r.ok = true; r.status = "claimed";
+      r.amount = Number(claim.json?.rewardCredits) || r.reward || 0;
+      r.streak += 1; r.totalDays += 1; r.totalCredits += r.amount;
+      r.message = `签到成功 +${r.amount}`;
+      return r;
+    }
+    // 其它错误 → 保留统计，回落 campaigns
+  }
+
+  const list = await listCampaigns({ deviceToken, region: reg, fetchImpl, timeoutMs });
+  if (list.status === 401) { r.message = "device token 失效（HTTP 401）：请重新 mslxdff -provider qoder login"; return r; }
+  if (list.status !== 200) {
+    r.message = `查询活动失败 HTTP ${list.status || "-"}: ${String(list.error || list.text).slice(0, 160)}`;
+    return r;
+  }
+  const { target, claimed } = pickCampaign(list.json?.campaigns, { allowPromo });
+  if (probeOnly) {
+    r.ok = true; r.status = target ? "claimable" : "no_campaign";
+    r.message = target
+      ? `干跑：可领 ${target.actionType} ${target.campaignKey || ""}`.trim()
+      : (claimed ? "干跑：今日已领取" : "干跑：无可用签到活动");
+    return r;
+  }
+  if (!target) {
+    r.ok = true; r.status = "no_campaign";
+    r.message = claimed ? "今日已领取" : "无可用签到活动";
+    return r;
+  }
+  const claim = await claimCampaign({ deviceToken, region: reg, campaignId: target.campaignId, fetchImpl, timeoutMs });
+  if (claim.status !== 200 || claim.json?.status !== "CLAIMED") {
+    r.message = `领取失败 HTTP ${claim.status || "-"}: ${String(claim.error || claim.text).slice(0, 160)}`;
+    return r;
+  }
+  r.ok = true;
+  r.amount = Number(claim.json?.benefit?.amount) || 0;
+  r.expiresAt = String(claim.json?.expiresAt || "");
+  r.campaignKey = String(target.campaignKey || "");
+  if (claim.json?.replayed) { r.status = "already"; r.message = "今日已领取（幂等返回）"; }
+  else {
+    r.status = "claimed";
+    r.message = r.amount > 0 ? `领取成功 +${r.amount} ${r.campaignKey}`.trim() : `领取成功 ${r.campaignKey}`.trim();
+  }
+  return r;
+}

package/src/providers/qoder/constants.js

@@ -1,45 +1,45 @@
-// qoder 上游技术常量（转译 qoder2api account/region.go，禁止改值）
-export const OAUTH_CLIENT_ID = "e883ade2-e6e3-4d6d-adf7-f92ceff5fdcb";
-
-// Region → 端点（global=国际站 *.qoder.sh / cn=国内站 *.qoder.com.cn）
-export const ENDPOINTS = {
-  global: {
-    deviceLoginBase: "https://qoder.com/device/selectAccounts",
-    pollEndpoint: "https://openapi.qoder.sh/api/v1/deviceToken/poll",
-    userinfoBase: "https://openapi.qoder.sh/api/v1/userinfo",
-    chatStreamURL: "https://api1.qoder.sh/algo/api/v2/service/pro/sse/agent_chat_generation?FetchKeys=llm_model_result&AgentId=agent_common&Encode=1",
-    modelListURL: "https://api2.qoder.sh/algo/api/v2/model/list?Encode=1",
-    jobTokenURL: "https://center.qoder.sh/algo/api/v3/user/jobToken?Encode=1",
-    openapiBase: "https://openapi.qoder.sh",
-  },
-  cn: {
-    deviceLoginBase: "https://qoder.com.cn/device/selectAccounts",
-    pollEndpoint: "https://openapi.qoder.com.cn/api/v1/deviceToken/poll",
-    userinfoBase: "https://openapi.qoder.com.cn/api/v1/userinfo",
-    chatStreamURL: "https://gateway.qoder.com.cn/algo/api/v2/service/pro/sse/agent_chat_generation?FetchKeys=llm_model_result&AgentId=agent_common&Encode=1",
-    modelListURL: "https://gateway.qoder.com.cn/algo/api/v2/model/list?Encode=1",
-    jobTokenURL: "https://gateway.qoder.com.cn/algo/api/v3/user/jobToken?Encode=1",
-    openapiBase: "https://openapi.qoder.com.cn",
-  },
-};
-
-export function normalizeRegion(s) {
-  const v = String(s || "").trim().toLowerCase();
-  return v === "cn" ? "cn" : "global";
-}
-
-export function getEndpoints(region) {
-  return ENDPOINTS[normalizeRegion(region)];
-}
-
-// 签到/额度路径（同 base 换域名）：global=openapi.qoder.sh（有 campaigns，daily-check-in 404）；
-// cn=openapi.qoder.com.cn（两者皆有；Go 版签到硬编码该域，故只服务国内号）。
-export const EP_CAMPAIGNS = "/sash/api/v1/me/campaigns";
-export const EP_CHECKIN_STATUS = "/sash/api/v1/me/daily-check-in/status";
-export const EP_CHECKIN_CLAIM = "/sash/api/v1/me/daily-check-in/claim";
-export const EP_PLAN = "/api/v2/user/plan";
-export const EP_QUOTA = "/api/v2/quota/usage";
-
-export function openapiBase(region) {
-  return getEndpoints(region).openapiBase;
+// qoder 上游技术常量（转译 qoder2api account/region.go，禁止改值）
+export const OAUTH_CLIENT_ID = "e883ade2-e6e3-4d6d-adf7-f92ceff5fdcb";
+
+// Region → 端点（global=国际站 *.qoder.sh / cn=国内站 *.qoder.com.cn）
+export const ENDPOINTS = {
+  global: {
+    deviceLoginBase: "https://qoder.com/device/selectAccounts",
+    pollEndpoint: "https://openapi.qoder.sh/api/v1/deviceToken/poll",
+    userinfoBase: "https://openapi.qoder.sh/api/v1/userinfo",
+    chatStreamURL: "https://api1.qoder.sh/algo/api/v2/service/pro/sse/agent_chat_generation?FetchKeys=llm_model_result&AgentId=agent_common&Encode=1",
+    modelListURL: "https://api2.qoder.sh/algo/api/v2/model/list?Encode=1",
+    jobTokenURL: "https://center.qoder.sh/algo/api/v3/user/jobToken?Encode=1",
+    openapiBase: "https://openapi.qoder.sh",
+  },
+  cn: {
+    deviceLoginBase: "https://qoder.com.cn/device/selectAccounts",
+    pollEndpoint: "https://openapi.qoder.com.cn/api/v1/deviceToken/poll",
+    userinfoBase: "https://openapi.qoder.com.cn/api/v1/userinfo",
+    chatStreamURL: "https://gateway.qoder.com.cn/algo/api/v2/service/pro/sse/agent_chat_generation?FetchKeys=llm_model_result&AgentId=agent_common&Encode=1",
+    modelListURL: "https://gateway.qoder.com.cn/algo/api/v2/model/list?Encode=1",
+    jobTokenURL: "https://gateway.qoder.com.cn/algo/api/v3/user/jobToken?Encode=1",
+    openapiBase: "https://openapi.qoder.com.cn",
+  },
+};
+
+export function normalizeRegion(s) {
+  const v = String(s || "").trim().toLowerCase();
+  return v === "cn" ? "cn" : "global";
+}
+
+export function getEndpoints(region) {
+  return ENDPOINTS[normalizeRegion(region)];
+}
+
+// 签到/额度路径（同 base 换域名）：global=openapi.qoder.sh（有 campaigns，daily-check-in 404）；
+// cn=openapi.qoder.com.cn（两者皆有；Go 版签到硬编码该域，故只服务国内号）。
+export const EP_CAMPAIGNS = "/sash/api/v1/me/campaigns";
+export const EP_CHECKIN_STATUS = "/sash/api/v1/me/daily-check-in/status";
+export const EP_CHECKIN_CLAIM = "/sash/api/v1/me/daily-check-in/claim";
+export const EP_PLAN = "/api/v2/user/plan";
+export const EP_QUOTA = "/api/v2/quota/usage";
+
+export function openapiBase(region) {
+  return getEndpoints(region).openapiBase;
 }

package/src/providers/qoder/encode.js

@@ -1,42 +1,42 @@
-// qoder COSY 自定义 base64 编解码（转译 qoder2api internal/cosy/encoding.go）
-// 自定义字母表 + 1/3 尾部轮转，`$` 代 `=`
-const CUSTOM = "_doRTgHZBKcGVjlvpC,@aFSx#DPuNJme&i*MzLOEn)sUrthbf%Y^w.(kIQyXqWA!";
-const STD = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-const CUSTOM_PAD = "$";
-
-const c2s = new Array(128).fill(-1);
-const s2c = new Array(128).fill(-1);
-
-for (let i = 0; i < 64; i++) {
-  c2s[CUSTOM.charCodeAt(i)] = STD.charCodeAt(i);
-  s2c[STD.charCodeAt(i)] = CUSTOM.charCodeAt(i);
-}
-c2s[CUSTOM_PAD.charCodeAt(0)] = "=".charCodeAt(0);
-s2c["=".charCodeAt(0)] = CUSTOM_PAD.charCodeAt(0);
-
-export function cosyEncode(plain) {
-  const std = Buffer.from(plain).toString("base64");
-  const n = std.length;
-  const a = Math.floor(n / 3);
-  const rearranged = std.slice(n - a) + std.slice(a, n - a) + std.slice(0, a);
-  const out = new Array(n);
-  for (let i = 0; i < n; i++) {
-    const c = rearranged.charCodeAt(i);
-    if (c >= 128 || s2c[c] < 0) throw new Error("char out of alphabet: " + c);
-    out[i] = String.fromCharCode(s2c[c]);
-  }
-  return out.join("");
-}
-
-export function cosyDecode(encoded) {
-  const n = encoded.length;
-  const mapped = new Array(n);
-  for (let i = 0; i < n; i++) {
-    const c = encoded.charCodeAt(i);
-    if (c >= 128 || c2s[c] < 0) throw new Error("char out of custom alphabet: " + c);
-    mapped[i] = String.fromCharCode(c2s[c]);
-  }
-  const a = Math.floor(n / 3);
-  const std = mapped.slice(n - a).join("") + mapped.slice(a, n - a).join("") + mapped.slice(0, a).join("");
-  return Buffer.from(std, "base64");
+// qoder COSY 自定义 base64 编解码（转译 qoder2api internal/cosy/encoding.go）
+// 自定义字母表 + 1/3 尾部轮转，`$` 代 `=`
+const CUSTOM = "_doRTgHZBKcGVjlvpC,@aFSx#DPuNJme&i*MzLOEn)sUrthbf%Y^w.(kIQyXqWA!";
+const STD = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+const CUSTOM_PAD = "$";
+
+const c2s = new Array(128).fill(-1);
+const s2c = new Array(128).fill(-1);
+
+for (let i = 0; i < 64; i++) {
+  c2s[CUSTOM.charCodeAt(i)] = STD.charCodeAt(i);
+  s2c[STD.charCodeAt(i)] = CUSTOM.charCodeAt(i);
+}
+c2s[CUSTOM_PAD.charCodeAt(0)] = "=".charCodeAt(0);
+s2c["=".charCodeAt(0)] = CUSTOM_PAD.charCodeAt(0);
+
+export function cosyEncode(plain) {
+  const std = Buffer.from(plain).toString("base64");
+  const n = std.length;
+  const a = Math.floor(n / 3);
+  const rearranged = std.slice(n - a) + std.slice(a, n - a) + std.slice(0, a);
+  const out = new Array(n);
+  for (let i = 0; i < n; i++) {
+    const c = rearranged.charCodeAt(i);
+    if (c >= 128 || s2c[c] < 0) throw new Error("char out of alphabet: " + c);
+    out[i] = String.fromCharCode(s2c[c]);
+  }
+  return out.join("");
+}
+
+export function cosyDecode(encoded) {
+  const n = encoded.length;
+  const mapped = new Array(n);
+  for (let i = 0; i < n; i++) {
+    const c = encoded.charCodeAt(i);
+    if (c >= 128 || c2s[c] < 0) throw new Error("char out of custom alphabet: " + c);
+    mapped[i] = String.fromCharCode(c2s[c]);
+  }
+  const a = Math.floor(n / 3);
+  const std = mapped.slice(n - a).join("") + mapped.slice(a, n - a).join("") + mapped.slice(0, a).join("");
+  return Buffer.from(std, "base64");
 }

package/src/providers/qoder/fingerprint.js

@@ -1,39 +1,39 @@
-// qoder 设备指纹派生（转译 qoder2api internal/cosy/fingerprint.go + session.go）
-// fingerprint: 由 seed（uid 优先，无 uid 用 credential）派生 machineId/machineToken/machineType
-import { createHash, randomBytes } from "node:crypto";
-
-export function fingerprintSeed(uid, credential) {
-  if (uid) return uid;
-  return "cred:" + credential;
-}
-
-export function deriveMachineId(seed) {
-  return createHash("md5").update("machine:" + seed).digest("hex");
-}
-
-export function deriveMachineType(seed) {
-  return createHash("md5").update("machinetype:" + seed).digest("hex").slice(0, 18);
-}
-
-export function deriveMachineToken(seed) {
-  const sum = createHash("sha512").update("machinetoken:" + seed).digest();
-  return sum.toString("base64url").slice(0, 43);
-}
-
-export function newUUID() {
-  const b = randomBytes(16);
-  const hex = b.toString("hex");
-  return `${hex.slice(0,8)}-${hex.slice(8,12)}-${hex.slice(12,16)}-${hex.slice(16,20)}-${hex.slice(20,32)}`;
-}
-
-export function newRequestId() {
-  return randomBytes(12).toString("hex");
-}
-
-export function unixSec() {
-  return Math.floor(Date.now() / 1000);
-}
-
-export function unixMs() {
-  return Date.now();
+// qoder 设备指纹派生（转译 qoder2api internal/cosy/fingerprint.go + session.go）
+// fingerprint: 由 seed（uid 优先，无 uid 用 credential）派生 machineId/machineToken/machineType
+import { createHash, randomBytes } from "node:crypto";
+
+export function fingerprintSeed(uid, credential) {
+  if (uid) return uid;
+  return "cred:" + credential;
+}
+
+export function deriveMachineId(seed) {
+  return createHash("md5").update("machine:" + seed).digest("hex");
+}
+
+export function deriveMachineType(seed) {
+  return createHash("md5").update("machinetype:" + seed).digest("hex").slice(0, 18);
+}
+
+export function deriveMachineToken(seed) {
+  const sum = createHash("sha512").update("machinetoken:" + seed).digest();
+  return sum.toString("base64url").slice(0, 43);
+}
+
+export function newUUID() {
+  const b = randomBytes(16);
+  const hex = b.toString("hex");
+  return `${hex.slice(0,8)}-${hex.slice(8,12)}-${hex.slice(12,16)}-${hex.slice(16,20)}-${hex.slice(20,32)}`;
+}
+
+export function newRequestId() {
+  return randomBytes(12).toString("hex");
+}
+
+export function unixSec() {
+  return Math.floor(Date.now() / 1000);
+}
+
+export function unixMs() {
+  return Date.now();
 }