mslxdff 0.1.203 → 0.1.207

package/src/providers/codearts/auth-pool.js

@@ -1,148 +1,148 @@
-// 账号池：keyring 的 key = 凭证 blob JSON 字符串（一华为账号一 blob，多账号=多 key 自动轮转）。
-// 职责：blob 解析；STS 凭证临期（默认提前 30min）单飞刷新；轮转写回（saveFn，原位换 key）；
-// 死号（终态失效）标记。瞬时失败保留旧凭证继续用，绝不清已存凭证（对齐 cline isInvalidGrant 纪律）。
-import { refreshStsCredential } from "./sts.js";
-import { REFRESH_SKEW_MS_DEFAULT } from "./const.js";
-
-/** 校验并解析 blob 字符串 → 账号运行时对象；非 blob（如 Bearer key）返回 null。 */
-export function accountFromBlob(raw) {
-  if (typeof raw !== "string" || !raw.trim().startsWith("{")) return null;
-  let j;
-  try { j = JSON.parse(raw); } catch { return null; }
-  if (!j || typeof j !== "object" || !j.refreshToken || !j.codeVerifier || !j.dpopJwk) return null;
-  const expMs = j.expiration ? Date.parse(j.expiration) : NaN;
-  return {
-    blob: raw,
-    userId: String(j.userId || j.user_id || ""),
-    userName: String(j.userName || j.user_name || ""),
-    domainId: String(j.domainId || j.domain_id || ""),
-    refreshToken: String(j.refreshToken || ""),
-    clientId: String(j.clientId || "codearts-agent"),
-    codeVerifier: String(j.codeVerifier || ""),
-    dpopJwk: j.dpopJwk || null,
-    accessKeyId: String(j.accessKeyId || ""),
-    secretAccessKey: String(j.secretAccessKey || ""),
-    securityToken: String(j.securityToken || ""),
-    expiration: String(j.expiration || ""),
-    expiresAtMs: Number.isFinite(expMs) ? expMs : 0,
-    dead: false,
-    lastError: "",
-    refreshInflight: null,
-  };
-}
-
-/** 账号对象 → 可持久化 blob（JSON 字符串；AK/SK/securityToken 是 STS 临时凭证快照）。 */
-export function blobFromAccount(acc) {
-  return JSON.stringify({
-    userId: acc.userId,
-    userName: acc.userName,
-    domainId: acc.domainId,
-    refreshToken: acc.refreshToken,
-    clientId: acc.clientId,
-    codeVerifier: acc.codeVerifier,
-    dpopJwk: acc.dpopJwk,
-    accessKeyId: acc.accessKeyId,
-    secretAccessKey: acc.secretAccessKey,
-    securityToken: acc.securityToken,
-    expiration: acc.expiration,
-  });
-}
-
-export function createAuthPool({
-  keys = [],
-  fetchImpl,
-  stsHost,
-  skewMs = REFRESH_SKEW_MS_DEFAULT,
-  clock = () => Date.now(),
-  saveFn,
-} = {}) {
-  const accounts = new Map(); // blob → account
-  for (const k of keys) {
-    const acc = accountFromBlob(k);
-    if (acc) accounts.set(k, acc);
-  }
-
-  function findByBlob(blob) { return accounts.get(blob) || null; }
-  function aliveAccounts() { return [...accounts.values()].filter((a) => !a.dead); }
-  function pickPrimary() { return aliveAccounts()[0] || null; }
-
-  async function doRefresh(acc) {
-    const r = await refreshStsCredential(
-      { refreshToken: acc.refreshToken, codeVerifier: acc.codeVerifier, dpopJwk: acc.dpopJwk, clientId: acc.clientId },
-      { fetchImpl, stsHost },
-    );
-    if (r.relogin) {
-      acc.dead = true;
-      acc.lastError = r.error || "re-login required";
-      return;
-    }
-    if (r.error) { acc.lastError = r.error; return; } // 瞬时失败：旧凭证还能用就继续用
-    // 成功：STS 字段更新（refreshToken 可能轮转），原位换 blob 写回
-    acc.accessKeyId = r.account.accessKeyId;
-    acc.secretAccessKey = r.account.secretAccessKey;
-    acc.securityToken = r.account.securityToken;
-    acc.expiration = r.account.expiration;
-    acc.expiresAtMs = r.account.expiresAtMs;
-    if (r.account.refreshToken) acc.refreshToken = r.account.refreshToken;
-    if (r.account.userId) acc.userId = r.account.userId;
-    if (r.account.userName) acc.userName = r.account.userName;
-    if (r.account.domainId) acc.domainId = r.account.domainId;
-    acc.lastError = "";
-    acc.dead = false;
-    const newBlob = blobFromAccount(acc);
-    if (newBlob !== acc.blob) {
-      const oldBlob = acc.blob;
-      accounts.delete(oldBlob);
-      acc.blob = newBlob;
-      accounts.set(newBlob, acc);
-      if (saveFn) { try { await saveFn({ oldBlob, newBlob, account: acc }); } catch {} }
-    }
-  }
-
-  /**
-   * 取某账号的有效 STS 凭证（临期自动单飞刷新）。
-   * @throws {Error} blob 不在池内 / 死号（message 带 re-login 提示）
-   */
-  async function getCredential(blob) {
-    const acc = findByBlob(blob);
-    if (!acc) throw new Error("codearts: credential not in pool — restart daemon or re-login");
-    if (acc.dead) throw new Error(`codearts account ${acc.userId || "?"} dead: ${acc.lastError || "re-login required"} — run: mslxdff -provider codearts login`);
-    const now = clock();
-    const needRefresh = !acc.securityToken || !acc.accessKeyId
-      || (acc.expiresAtMs > 0 && now >= acc.expiresAtMs - skewMs);
-    if (needRefresh && !acc.refreshInflight) {
-      acc.refreshInflight = doRefresh(acc).finally(() => { acc.refreshInflight = null; });
-    }
-    if (acc.refreshInflight) await acc.refreshInflight;
-    if (acc.dead) throw new Error(`codearts account ${acc.userId || "?"} dead: ${acc.lastError || "re-login required"} — run: mslxdff -provider codearts login`);
-    return acc;
-  }
-
-  /** 强制下次刷新（401 后调用；清掉缓存的 STS 临时凭证）。 */
-  function invalidate(blob) {
-    const acc = findByBlob(blob);
-    if (!acc) return;
-    acc.securityToken = "";
-    acc.accessKeyId = "";
-    acc.secretAccessKey = "";
-    acc.expiresAtMs = 0;
-  }
-
-  function markDead(blob, reason) {
-    const acc = findByBlob(blob);
-    if (!acc) return;
-    acc.dead = true;
-    acc.lastError = reason || acc.lastError;
-  }
-
-  /** ring 轮转写回后的重排（saveFn 成功后由 index 调用；saveFn 已处理则幂等）。 */
-  function replace(oldBlob, newBlob) {
-    const acc = accounts.get(oldBlob);
-    if (!acc || oldBlob === newBlob) return;
-    accounts.delete(oldBlob);
-    acc.blob = newBlob;
-    accounts.set(newBlob, acc);
-  }
-
-  return { findByBlob, aliveAccounts, pickPrimary, getCredential, invalidate, markDead, replace, accounts: () => [...accounts.values()] };
-}
+// 账号池：keyring 的 key = 凭证 blob JSON 字符串（一华为账号一 blob，多账号=多 key 自动轮转）。
+// 职责：blob 解析；STS 凭证临期（默认提前 30min）单飞刷新；轮转写回（saveFn，原位换 key）；
+// 死号（终态失效）标记。瞬时失败保留旧凭证继续用，绝不清已存凭证（对齐 cline isInvalidGrant 纪律）。
+import { refreshStsCredential } from "./sts.js";
+import { REFRESH_SKEW_MS_DEFAULT } from "./const.js";
+
+/** 校验并解析 blob 字符串 → 账号运行时对象；非 blob（如 Bearer key）返回 null。 */
+export function accountFromBlob(raw) {
+  if (typeof raw !== "string" || !raw.trim().startsWith("{")) return null;
+  let j;
+  try { j = JSON.parse(raw); } catch { return null; }
+  if (!j || typeof j !== "object" || !j.refreshToken || !j.codeVerifier || !j.dpopJwk) return null;
+  const expMs = j.expiration ? Date.parse(j.expiration) : NaN;
+  return {
+    blob: raw,
+    userId: String(j.userId || j.user_id || ""),
+    userName: String(j.userName || j.user_name || ""),
+    domainId: String(j.domainId || j.domain_id || ""),
+    refreshToken: String(j.refreshToken || ""),
+    clientId: String(j.clientId || "codearts-agent"),
+    codeVerifier: String(j.codeVerifier || ""),
+    dpopJwk: j.dpopJwk || null,
+    accessKeyId: String(j.accessKeyId || ""),
+    secretAccessKey: String(j.secretAccessKey || ""),
+    securityToken: String(j.securityToken || ""),
+    expiration: String(j.expiration || ""),
+    expiresAtMs: Number.isFinite(expMs) ? expMs : 0,
+    dead: false,
+    lastError: "",
+    refreshInflight: null,
+  };
+}
+
+/** 账号对象 → 可持久化 blob（JSON 字符串；AK/SK/securityToken 是 STS 临时凭证快照）。 */
+export function blobFromAccount(acc) {
+  return JSON.stringify({
+    userId: acc.userId,
+    userName: acc.userName,
+    domainId: acc.domainId,
+    refreshToken: acc.refreshToken,
+    clientId: acc.clientId,
+    codeVerifier: acc.codeVerifier,
+    dpopJwk: acc.dpopJwk,
+    accessKeyId: acc.accessKeyId,
+    secretAccessKey: acc.secretAccessKey,
+    securityToken: acc.securityToken,
+    expiration: acc.expiration,
+  });
+}
+
+export function createAuthPool({
+  keys = [],
+  fetchImpl,
+  stsHost,
+  skewMs = REFRESH_SKEW_MS_DEFAULT,
+  clock = () => Date.now(),
+  saveFn,
+} = {}) {
+  const accounts = new Map(); // blob → account
+  for (const k of keys) {
+    const acc = accountFromBlob(k);
+    if (acc) accounts.set(k, acc);
+  }
+
+  function findByBlob(blob) { return accounts.get(blob) || null; }
+  function aliveAccounts() { return [...accounts.values()].filter((a) => !a.dead); }
+  function pickPrimary() { return aliveAccounts()[0] || null; }
+
+  async function doRefresh(acc) {
+    const r = await refreshStsCredential(
+      { refreshToken: acc.refreshToken, codeVerifier: acc.codeVerifier, dpopJwk: acc.dpopJwk, clientId: acc.clientId },
+      { fetchImpl, stsHost },
+    );
+    if (r.relogin) {
+      acc.dead = true;
+      acc.lastError = r.error || "re-login required";
+      return;
+    }
+    if (r.error) { acc.lastError = r.error; return; } // 瞬时失败：旧凭证还能用就继续用
+    // 成功：STS 字段更新（refreshToken 可能轮转），原位换 blob 写回
+    acc.accessKeyId = r.account.accessKeyId;
+    acc.secretAccessKey = r.account.secretAccessKey;
+    acc.securityToken = r.account.securityToken;
+    acc.expiration = r.account.expiration;
+    acc.expiresAtMs = r.account.expiresAtMs;
+    if (r.account.refreshToken) acc.refreshToken = r.account.refreshToken;
+    if (r.account.userId) acc.userId = r.account.userId;
+    if (r.account.userName) acc.userName = r.account.userName;
+    if (r.account.domainId) acc.domainId = r.account.domainId;
+    acc.lastError = "";
+    acc.dead = false;
+    const newBlob = blobFromAccount(acc);
+    if (newBlob !== acc.blob) {
+      const oldBlob = acc.blob;
+      accounts.delete(oldBlob);
+      acc.blob = newBlob;
+      accounts.set(newBlob, acc);
+      if (saveFn) { try { await saveFn({ oldBlob, newBlob, account: acc }); } catch {} }
+    }
+  }
+
+  /**
+   * 取某账号的有效 STS 凭证（临期自动单飞刷新）。
+   * @throws {Error} blob 不在池内 / 死号（message 带 re-login 提示）
+   */
+  async function getCredential(blob) {
+    const acc = findByBlob(blob);
+    if (!acc) throw new Error("codearts: credential not in pool — restart daemon or re-login");
+    if (acc.dead) throw new Error(`codearts account ${acc.userId || "?"} dead: ${acc.lastError || "re-login required"} — run: mslxdff -provider codearts login`);
+    const now = clock();
+    const needRefresh = !acc.securityToken || !acc.accessKeyId
+      || (acc.expiresAtMs > 0 && now >= acc.expiresAtMs - skewMs);
+    if (needRefresh && !acc.refreshInflight) {
+      acc.refreshInflight = doRefresh(acc).finally(() => { acc.refreshInflight = null; });
+    }
+    if (acc.refreshInflight) await acc.refreshInflight;
+    if (acc.dead) throw new Error(`codearts account ${acc.userId || "?"} dead: ${acc.lastError || "re-login required"} — run: mslxdff -provider codearts login`);
+    return acc;
+  }
+
+  /** 强制下次刷新（401 后调用；清掉缓存的 STS 临时凭证）。 */
+  function invalidate(blob) {
+    const acc = findByBlob(blob);
+    if (!acc) return;
+    acc.securityToken = "";
+    acc.accessKeyId = "";
+    acc.secretAccessKey = "";
+    acc.expiresAtMs = 0;
+  }
+
+  function markDead(blob, reason) {
+    const acc = findByBlob(blob);
+    if (!acc) return;
+    acc.dead = true;
+    acc.lastError = reason || acc.lastError;
+  }
+
+  /** ring 轮转写回后的重排（saveFn 成功后由 index 调用；saveFn 已处理则幂等）。 */
+  function replace(oldBlob, newBlob) {
+    const acc = accounts.get(oldBlob);
+    if (!acc || oldBlob === newBlob) return;
+    accounts.delete(oldBlob);
+    acc.blob = newBlob;
+    accounts.set(newBlob, acc);
+  }
+
+  return { findByBlob, aliveAccounts, pickPrimary, getCredential, invalidate, markDead, replace, accounts: () => [...accounts.values()] };
+}

package/src/providers/codearts/concurrency.js

@@ -1,34 +1,34 @@
-// codearts 上游硬限并发：FIFO 排队闸，超限请求等前面的让出额度再发（该上游对并发极敏感）。
-export function createGate({ limit = 3 } = {}) {
-  const cap = Number.isFinite(limit) && limit > 0 ? Math.floor(limit) : Infinity;
-  let active = 0;
-  const waiters = [];
-
-  function release() {
-    active--;
-    const w = waiters.shift();
-    if (w) w();
-  }
-
-  async function run(fn, onWait) {
-    if (active >= cap) {
-      const t0 = Date.now();
-      const queued = waiters.length + 1;
-      await new Promise((resolve) => waiters.push(resolve));
-      if (onWait) { try { onWait({ waitedMs: Date.now() - t0, queued, limit: cap }); } catch {} }
-    }
-    active++;
-    try {
-      return await fn();
-    } finally {
-      release();
-    }
-  }
-
-  return {
-    run,
-    stats: () => ({ active, queued: waiters.length, limit: cap }),
-    get active() { return active; },
-    get queued() { return waiters.length; },
-  };
-}
+// codearts 上游硬限并发：FIFO 排队闸，超限请求等前面的让出额度再发（该上游对并发极敏感）。
+export function createGate({ limit = 3 } = {}) {
+  const cap = Number.isFinite(limit) && limit > 0 ? Math.floor(limit) : Infinity;
+  let active = 0;
+  const waiters = [];
+
+  function release() {
+    active--;
+    const w = waiters.shift();
+    if (w) w();
+  }
+
+  async function run(fn, onWait) {
+    if (active >= cap) {
+      const t0 = Date.now();
+      const queued = waiters.length + 1;
+      await new Promise((resolve) => waiters.push(resolve));
+      if (onWait) { try { onWait({ waitedMs: Date.now() - t0, queued, limit: cap }); } catch {} }
+    }
+    active++;
+    try {
+      return await fn();
+    } finally {
+      release();
+    }
+  }
+
+  return {
+    run,
+    stats: () => ({ active, queued: waiters.length, limit: cap }),
+    get active() { return active; },
+    get queued() { return waiters.length; },
+  };
+}

package/src/providers/codearts/const.js

@@ -1,65 +1,65 @@
-// CodeArts Agent 云端 API 常量（逆向自 HITZY2002/codearts2api，源自 vscode-codebot 26.7.0）。
-// 端点契约见 docs/adr/0027-codearts-provider.md。
-
-// 盘古引擎/聊天网关（product.json snapEngineDomain，商业版 cn-north-4）。
-export const SNAP_BASE = "https://snap-access.cn-north-4.myhuaweicloud.com";
-// STS 令牌端点（refresh_token 与 client_id + DPoP 公钥 + code_verifier 三重绑定）。
-export const STS_HOST = "https://sts.cn-north-4.myhuaweicloud.com";
-// 限时福利（免费套餐）网关（模型发现 + 领取）。
-export const BENEFIT_HOST = "https://opengw.developer.huaweicloud.com";
-// OAuth authorize 入口（注意带 /portal）。
-export const PORTAL_HOST = "https://codearts.huaweicloud.com/portal";
-
-export const EP_CHAT_V2 = "/api/v2/chat/completions";
-export const EP_MODEL_BUILTIN = "/v1/model/builtin";
-export const EP_AGENT_LIST = "/v1/agent-center/agents/useragents";
-export const EP_AGENT_DETAIL = "/v1/agent-center/agents/detail";
-export const EP_BENEFIT_CONFIG = "/api/v1/gateway/config";
-export const EP_BENEFIT_CLAIM = "/api/v1/benefit/claim";
-export const EP_OAUTH_TOKENS = "/v1/oauth2/tokens";
-export const EP_LOGIN_TICKET = "/v1/login/ticket";
-export const SNAP_MANAGER_PATH = "/snap-manager";
-
-// OAuth client：官方 CodeArts Agent 插件的 uri_scheme；refresh_token 与之绑定。
-export const CLIENT_ID = "codearts-agent";
-// ticket 轮询的插件标识（逆向自 huaweicloud.authentication 扩展）。
-export const PLUGIN_NAME = "snap_AIIDE";
-export const PLUGIN_VERSION = "5.2.0";
-
-// 聊天路由头（官方 AgentKernel 形状；均进入 SDK-HMAC-SHA256 签名）。
-export function chatBaseHeaders(securityToken, traceId) {
-  return {
-    "content-type": "application/json",
-    "accept": "text/event-stream",
-    "x-auth-token": securityToken || "",
-    "x-snap-traceid": traceId,
-    "x-language": "zh-cn",
-    "app-id": "CodeAgent3.0",
-    "is_confidential": "false",
-  };
-}
-
-// 福利路由头：必须在 signRequest 之前设置（计入 SignedHeaders），否则 InferHub.002002009.404。
-export const MAAS_TYPE_HEADER = "maas_type";
-export const MAAS_BENEFIT = "benefit";
-
-// 冷启动种子：福利套餐轮换后新模型在首次发现前也按福利路由（宁多带不少带，少带即 404）。
-// 现网取证 2026-10-16（福利网关 /api/v1/gateway/config，error_code=0000）共 4 位：下列 4 个 id 逐字对齐上游。
-export const SEED_BENEFIT_MODELS = ["deepseek-v4-flash-0731", "deepseek-v4-pro-0813", "deepseek-v4.1-flash", "glm-5.3-flash"];
-// 内置模型种子（仅用于大小写归一，不标福利）。
-export const SEED_KNOWN_MODELS = [
-  "GLM-5.2", "GLM-5.2-ArkTS-SPARK", "GLM-5.1", "GLM-4.7",
-  "OpenPangu-2.0-Pro", "OpenPangu-2.0-Flash",
-  "Qwen3-VL-235B", "Qwen3.5-397B-A17B-VL", "Qwen3.6-27B-VL",
-];
-
-// 目录 TTL：超过则建议重新发现（对齐 codearts2api CatalogTTL）。
-export const CATALOG_TTL_MS = 60 * 60 * 1000;
-// listModels 缓存（与全仓 10min 对齐）。
-export const MODELS_CACHE_TTL_MS = 10 * 60 * 1000;
-// STS 凭证提前刷新量（对齐 codearts2api RefreshSkew 30min）。
-export const REFRESH_SKEW_MS_DEFAULT = 30 * 60 * 1000;
-
-// 上游 max_tokens 真实上限：福利网关自报 131072~393216 是假的 —— 现网实测 65536 通、
-// 98304 即 InferHub.001001005.400（2026-10-16 定位）；此前成功请求均为 64000。
-export const MAX_TOKENS_CEILING = 65536;
+// CodeArts Agent 云端 API 常量（逆向自 HITZY2002/codearts2api，源自 vscode-codebot 26.7.0）。
+// 端点契约见 docs/adr/0027-codearts-provider.md。
+
+// 盘古引擎/聊天网关（product.json snapEngineDomain，商业版 cn-north-4）。
+export const SNAP_BASE = "https://snap-access.cn-north-4.myhuaweicloud.com";
+// STS 令牌端点（refresh_token 与 client_id + DPoP 公钥 + code_verifier 三重绑定）。
+export const STS_HOST = "https://sts.cn-north-4.myhuaweicloud.com";
+// 限时福利（免费套餐）网关（模型发现 + 领取）。
+export const BENEFIT_HOST = "https://opengw.developer.huaweicloud.com";
+// OAuth authorize 入口（注意带 /portal）。
+export const PORTAL_HOST = "https://codearts.huaweicloud.com/portal";
+
+export const EP_CHAT_V2 = "/api/v2/chat/completions";
+export const EP_MODEL_BUILTIN = "/v1/model/builtin";
+export const EP_AGENT_LIST = "/v1/agent-center/agents/useragents";
+export const EP_AGENT_DETAIL = "/v1/agent-center/agents/detail";
+export const EP_BENEFIT_CONFIG = "/api/v1/gateway/config";
+export const EP_BENEFIT_CLAIM = "/api/v1/benefit/claim";
+export const EP_OAUTH_TOKENS = "/v1/oauth2/tokens";
+export const EP_LOGIN_TICKET = "/v1/login/ticket";
+export const SNAP_MANAGER_PATH = "/snap-manager";
+
+// OAuth client：官方 CodeArts Agent 插件的 uri_scheme；refresh_token 与之绑定。
+export const CLIENT_ID = "codearts-agent";
+// ticket 轮询的插件标识（逆向自 huaweicloud.authentication 扩展）。
+export const PLUGIN_NAME = "snap_AIIDE";
+export const PLUGIN_VERSION = "5.2.0";
+
+// 聊天路由头（官方 AgentKernel 形状；均进入 SDK-HMAC-SHA256 签名）。
+export function chatBaseHeaders(securityToken, traceId) {
+  return {
+    "content-type": "application/json",
+    "accept": "text/event-stream",
+    "x-auth-token": securityToken || "",
+    "x-snap-traceid": traceId,
+    "x-language": "zh-cn",
+    "app-id": "CodeAgent3.0",
+    "is_confidential": "false",
+  };
+}
+
+// 福利路由头：必须在 signRequest 之前设置（计入 SignedHeaders），否则 InferHub.002002009.404。
+export const MAAS_TYPE_HEADER = "maas_type";
+export const MAAS_BENEFIT = "benefit";
+
+// 冷启动种子：福利套餐轮换后新模型在首次发现前也按福利路由（宁多带不少带，少带即 404）。
+// 现网取证 2026-10-16（福利网关 /api/v1/gateway/config，error_code=0000）共 4 位：下列 4 个 id 逐字对齐上游。
+export const SEED_BENEFIT_MODELS = ["deepseek-v4-flash-0731", "deepseek-v4-pro-0813", "deepseek-v4.1-flash", "glm-5.3-flash"];
+// 内置模型种子（仅用于大小写归一，不标福利）。
+export const SEED_KNOWN_MODELS = [
+  "GLM-5.2", "GLM-5.2-ArkTS-SPARK", "GLM-5.1", "GLM-4.7",
+  "OpenPangu-2.0-Pro", "OpenPangu-2.0-Flash",
+  "Qwen3-VL-235B", "Qwen3.5-397B-A17B-VL", "Qwen3.6-27B-VL",
+];
+
+// 目录 TTL：超过则建议重新发现（对齐 codearts2api CatalogTTL）。
+export const CATALOG_TTL_MS = 60 * 60 * 1000;
+// listModels 缓存（与全仓 10min 对齐）。
+export const MODELS_CACHE_TTL_MS = 10 * 60 * 1000;
+// STS 凭证提前刷新量（对齐 codearts2api RefreshSkew 30min）。
+export const REFRESH_SKEW_MS_DEFAULT = 30 * 60 * 1000;
+
+// 上游 max_tokens 真实上限：福利网关自报 131072~393216 是假的 —— 现网实测 65536 通、
+// 98304 即 InferHub.001001005.400（2026-10-16 定位）；此前成功请求均为 64000。
+export const MAX_TOKENS_CEILING = 65536;