mslxdff 0.1.231 → 0.1.232

package/src/providers/qwenwork/constants.js

@@ -1,67 +1,67 @@
-// qwenwork（千问办公 gateway.qwenwork.cn）上游技术常量。
-// 转译自 qwenwork2api-makers 的 edge-functions/_shared/config.js —— **禁止凭记忆改值**；
-// 要改先现网复测（客户端一升级这些快照就可能 403）。
-// Note: 为何独立 provider 而非 qoder 的新 region — 见 docs/adr/0037-qwenwork-independent-provider.md
-export const BASE = "https://gateway.qwenwork.cn";
-
-// OAuth 设备授权。client_id 与 qoder 恰好同值，但**不得 import qoder 常量**：
-// 同 client_id 不代表同租户（RSA 模数/模型池/额度池均不同，实测见 ADR-0037）。
-export const CLIENT_ID = "e883ade2-e6e3-4d6d-adf7-f92ceff5fdcb";
-export const REDIRECT_URI = "qwenwork-cn://";
-
-export const DEVICE_AUTH_URL = `${BASE}/device/selectAccounts`;
-export const POLL_URL = `${BASE}/api/v1/deviceToken/poll`;
-export const REFRESH_URL = `${BASE}/api/v1/deviceToken/refresh`;
-export const USERINFO_URL = `${BASE}/api/v1/userinfo`;
-// 额度/套餐：data.{user,plan,quota}，quota.remaining 即积分余量（实测新免费号 2099.277）
-export const ACCOUNT_CONTEXT_URL = `${BASE}/api/v1/adapter/user/account-context?include=user,plan,quota`;
-// 无 `Encode=1`：请求体走**纯 JSON**，不像 qoder 那样过自定义 base64 字母表
-export const CHAT_URL = `${BASE}/algo/api/v2/service/pro/sse/agent_chat_generation?FetchKeys=llm_model_result&AgentId=agent_common`;
-export const MODELS_URL = `${BASE}/algo/api/v2/model/list`;
-
-export function envStr(name, fallback) {
-  const v = process.env[name];
-  return typeof v === "string" && v.trim() ? v.trim() : fallback;
-}
-
-/** env 可覆盖，排障不必改代码（改后必须现网复测）。 */
-export const UA = envStr("MSLXDFF_QWENWORK_UA", "qoderwork/1.0.5");
-export const COSY_VERSION = envStr("MSLXDFF_QWENWORK_COSY_VERSION", "1.1.18");
-export const IDE_VERSION = envStr("MSLXDFF_QWENWORK_IDE_VERSION", "1.0.5");
-export const RELEASE_VERSION = envStr("MSLXDFF_QWENWORK_RELEASE_VERSION", "1.0.5-26090901");
-export const BUILD = envStr("MSLXDFF_QWENWORK_BUILD", "26090901");
-export const CLIENT_TYPE = "6";
-export const BUSINESS_PRODUCT = "qoder_work";
-export const BUSINESS_TYPE = "agent";
-export const SCENE = "qwork";
-export const MACHINE_OS = "x86_64_win32";
-
-// 上游 model/list 返回 11 个根切片，实测**只有 `qwork` 非空**（其余 n=0）：
-// chat/developer/assistant/inline/quest/nap/experts/qwake 全 0 —— 与 qoder 的 `chat` 切片零交集。
-export const MODEL_SLICE = "qwork";
-export const DEFAULT_MODEL = "flash";
-export const CONTEXT_LENGTH = 180000;
-export const MAX_TOKENS_DEFAULT = 32000;
-
-// 实测模型池（2026-09-29 真号取证）：flash price_factor=0.1 / pro=1 / qwen3.8-max-preview=1.8，
-// 三者均 is_reasoning=true、is_vl=true、context_config 1M(默认)/200K/400K。
-// 仅作取数失败时的兜底展示，真实目录以 /model/list 为准。
-export const KNOWN_MODELS = [
-  { key: "flash", name: "标准", priceFactor: 0.1 },
-  { key: "pro", name: "高级", priceFactor: 1 },
-  { key: "qwen3.8-max-preview", name: "Qwen3.8-Max", priceFactor: 1.8 },
-];
-
-// RSA-1024 模数（逐字符转译 _shared/crypto.js 的 RSA_N，勿改）
-export const RSA_MODULUS_HEX =
-  "c0f22307e5cd362e296bb04470f6de8fbf935ce24e8fcf511a0e2701329769c4" +
-  "a76e499bb938036a52af1eaf818cf79a2600620e3ce87e371d2ca6d85803606a" +
-  "1b3fa5e874643c9ed2db7e85673ef7227fca56e2e7c08f0927609bb896a9f24b" +
-  "e1782099a66016a5bfdc3f1ff756bfc9e88d7b5dc5be30bf45a0223a00ebcecf";
-export const RSA_EXPONENT = 65537;
-
-export const LOGIN_TTL_MS = 10 * 60 * 1000;
-export const COOLDOWN_MS = 30_000;
-export const QUOTA_COOLDOWN_MS = 60 * 60 * 1000;
-export const REFRESH_MARGIN_MS = 30 * 60 * 1000;
-export const MODELS_CACHE_MS = 10 * 60 * 1000;
+// qwenwork（千问办公 gateway.qwenwork.cn）上游技术常量。
+// 转译自 qwenwork2api-makers 的 edge-functions/_shared/config.js —— **禁止凭记忆改值**；
+// 要改先现网复测（客户端一升级这些快照就可能 403）。
+// Note: 为何独立 provider 而非 qoder 的新 region — 见 docs/adr/0037-qwenwork-independent-provider.md
+export const BASE = "https://gateway.qwenwork.cn";
+
+// OAuth 设备授权。client_id 与 qoder 恰好同值，但**不得 import qoder 常量**：
+// 同 client_id 不代表同租户（RSA 模数/模型池/额度池均不同，实测见 ADR-0037）。
+export const CLIENT_ID = "e883ade2-e6e3-4d6d-adf7-f92ceff5fdcb";
+export const REDIRECT_URI = "qwenwork-cn://";
+
+export const DEVICE_AUTH_URL = `${BASE}/device/selectAccounts`;
+export const POLL_URL = `${BASE}/api/v1/deviceToken/poll`;
+export const REFRESH_URL = `${BASE}/api/v1/deviceToken/refresh`;
+export const USERINFO_URL = `${BASE}/api/v1/userinfo`;
+// 额度/套餐：data.{user,plan,quota}，quota.remaining 即积分余量（实测新免费号 2099.277）
+export const ACCOUNT_CONTEXT_URL = `${BASE}/api/v1/adapter/user/account-context?include=user,plan,quota`;
+// 无 `Encode=1`：请求体走**纯 JSON**，不像 qoder 那样过自定义 base64 字母表
+export const CHAT_URL = `${BASE}/algo/api/v2/service/pro/sse/agent_chat_generation?FetchKeys=llm_model_result&AgentId=agent_common`;
+export const MODELS_URL = `${BASE}/algo/api/v2/model/list`;
+
+export function envStr(name, fallback) {
+  const v = process.env[name];
+  return typeof v === "string" && v.trim() ? v.trim() : fallback;
+}
+
+/** env 可覆盖，排障不必改代码（改后必须现网复测）。 */
+export const UA = envStr("MSLXDFF_QWENWORK_UA", "qoderwork/1.0.5");
+export const COSY_VERSION = envStr("MSLXDFF_QWENWORK_COSY_VERSION", "1.1.18");
+export const IDE_VERSION = envStr("MSLXDFF_QWENWORK_IDE_VERSION", "1.0.5");
+export const RELEASE_VERSION = envStr("MSLXDFF_QWENWORK_RELEASE_VERSION", "1.0.5-26090901");
+export const BUILD = envStr("MSLXDFF_QWENWORK_BUILD", "26090901");
+export const CLIENT_TYPE = "6";
+export const BUSINESS_PRODUCT = "qoder_work";
+export const BUSINESS_TYPE = "agent";
+export const SCENE = "qwork";
+export const MACHINE_OS = "x86_64_win32";
+
+// 上游 model/list 返回 11 个根切片，实测**只有 `qwork` 非空**（其余 n=0）：
+// chat/developer/assistant/inline/quest/nap/experts/qwake 全 0 —— 与 qoder 的 `chat` 切片零交集。
+export const MODEL_SLICE = "qwork";
+export const DEFAULT_MODEL = "flash";
+export const CONTEXT_LENGTH = 180000;
+export const MAX_TOKENS_DEFAULT = 32000;
+
+// 实测模型池（2026-09-29 真号取证）：flash price_factor=0.1 / pro=1 / qwen3.8-max-preview=1.8，
+// 三者均 is_reasoning=true、is_vl=true、context_config 1M(默认)/200K/400K。
+// 仅作取数失败时的兜底展示，真实目录以 /model/list 为准。
+export const KNOWN_MODELS = [
+  { key: "flash", name: "标准", priceFactor: 0.1 },
+  { key: "pro", name: "高级", priceFactor: 1 },
+  { key: "qwen3.8-max-preview", name: "Qwen3.8-Max", priceFactor: 1.8 },
+];
+
+// RSA-1024 模数（逐字符转译 _shared/crypto.js 的 RSA_N，勿改）
+export const RSA_MODULUS_HEX =
+  "c0f22307e5cd362e296bb04470f6de8fbf935ce24e8fcf511a0e2701329769c4" +
+  "a76e499bb938036a52af1eaf818cf79a2600620e3ce87e371d2ca6d85803606a" +
+  "1b3fa5e874643c9ed2db7e85673ef7227fca56e2e7c08f0927609bb896a9f24b" +
+  "e1782099a66016a5bfdc3f1ff756bfc9e88d7b5dc5be30bf45a0223a00ebcecf";
+export const RSA_EXPONENT = 65537;
+
+export const LOGIN_TTL_MS = 10 * 60 * 1000;
+export const COOLDOWN_MS = 30_000;
+export const QUOTA_COOLDOWN_MS = 60 * 60 * 1000;
+export const REFRESH_MARGIN_MS = 30 * 60 * 1000;
+export const MODELS_CACHE_MS = 10 * 60 * 1000;

package/src/providers/qwenwork/cosy.js

@@ -1,120 +1,120 @@
-// vendor 自 _shared/cosy.js（COSY 会话 + 签名头），逐字搬，仅把常量来源改指 constants.js。
-// 关键不变式（改动即 403）：
-//  · identity/payload 都必须 key 升序紧凑 JSON（sortedCompact）
-//  · 签名 = md5(payloadB64 \n cosyKey \n date \n body \n pathSig)，pathSig 去 /algo 前缀、不含 query
-//  · authorization = `Bearer COSY.${payloadB64}.${sig}`；payloadB64 是**标准 base64（带 padding）**
-//  · 同一 requestId 重放会被上游判 `code 103 Duplicate request`
-import { uuid, b64, b64url, utf8, aesCbcEncrypt, md5 } from "./crypto.js";
-import { rsaPkcs1Encrypt } from "./rsa.js";
-import {
-  COSY_VERSION, IDE_VERSION, RELEASE_VERSION, BUILD, CLIENT_TYPE,
-  BUSINESS_PRODUCT, BUSINESS_TYPE, SCENE, MACHINE_OS, UA,
-} from "./constants.js";
-
-const cache = new Map();
-
-function sortedCompact(obj) {
-  const keys = Object.keys(obj).sort();
-  let out = "{";
-  for (let i = 0; i < keys.length; i++) {
-    if (i > 0) out += ",";
-    out += JSON.stringify(keys[i]) + ":" + JSON.stringify(obj[keys[i]]);
-  }
-  return out + "}";
-}
-
-function newSession(account) {
-  const machineID = uuid();
-  const seed = (uuid() + uuid()).slice(0, 50);
-  const machineToken = b64url(utf8(seed));
-  const machineType = uuid().replace(/-/g, "").slice(0, 18);
-  const tempKey = uuid().replace(/-/g, "").slice(0, 16);
-
-  const identity = sortedCompact({
-    uid: account.uid || "",
-    aid: account.uid || "",
-    name: account.nickname || "",
-    email: account.email || "",
-    security_oauth_token: account.accessToken,
-  });
-
-  return {
-    machineID,
-    machineToken,
-    machineType,
-    tempKey,
-    cosyKey: rsaPkcs1Encrypt(utf8(tempKey)),
-    info: b64(aesCbcEncrypt(utf8(identity), utf8(tempKey))),
-    accessToken: account.accessToken,
-  };
-}
-
-export function sessionFor(account) {
-  if (!account || !account.accessToken) throw new Error("cosy: empty access token");
-  const key = account.id || account.uid || account.accessToken.slice(0, 16);
-  const hit = cache.get(key);
-  if (hit && hit.accessToken === account.accessToken) return hit;
-  if (cache.size > 128) cache.clear();
-  const sess = newSession(account);
-  cache.set(key, sess);
-  return sess;
-}
-
-export function invalidateSession(account) {
-  const key = account && (account.id || account.uid);
-  if (key) cache.delete(key);
-}
-
-function pathSig(rawURL) {
-  const u = new URL(rawURL);
-  let p = u.pathname;
-  if (p.startsWith("/algo")) p = p.slice("/algo".length);
-  return p;
-}
-
-export function signHeaders(account, body, rawURL, modelKey, accept) {
-  const sess = sessionFor(account);
-  const payload = sortedCompact({
-    cosyVersion: COSY_VERSION,
-    ideVersion: IDE_VERSION,
-    info: sess.info,
-    requestId: uuid(),
-    version: "v1",
-  });
-  const payloadB64 = b64(utf8(payload));
-  const date = Math.floor(Date.now() / 1000).toString();
-  const sig = md5(`${payloadB64}\n${sess.cosyKey}\n${date}\n${body}\n${pathSig(rawURL)}`);
-
-  const headers = {
-    accept: accept || "text/event-stream",
-    "content-type": "application/json",
-    "user-agent": UA,
-    "x-request-id": uuid(),
-    "x-qwenwork-version": IDE_VERSION,
-    "x-qwenwork-release-version": RELEASE_VERSION,
-    "x-qwenwork-build": BUILD,
-    "x-qwenwork-platform": "win32",
-    "x-qwenwork-arch": "x64",
-    "x-qwenwork-channel": "stable",
-    "cosy-version": COSY_VERSION,
-    "cosy-clienttype": CLIENT_TYPE,
-    "cosy-business-product": BUSINESS_PRODUCT,
-    "cosy-business-type": BUSINESS_TYPE,
-    "cosy-scene": SCENE,
-    "cosy-machineos": MACHINE_OS,
-    "login-version": "v2",
-    authorization: `Bearer COSY.${payloadB64}.${sig}`,
-    "cosy-key": sess.cosyKey,
-    "cosy-user": account.uid || "",
-    "cosy-date": date,
-    "cosy-machineid": sess.machineID,
-    "accept-encoding": "identity",
-    connection: "keep-alive",
-    "cache-control": "no-cache",
-  };
-  if (modelKey) {
-    headers["x-model-key"] = modelKey;
-    headers["x-model-source"] = "system";
-  }
-  return headers;
-}
+// vendor 自 _shared/cosy.js（COSY 会话 + 签名头），逐字搬，仅把常量来源改指 constants.js。
+// 关键不变式（改动即 403）：
+//  · identity/payload 都必须 key 升序紧凑 JSON（sortedCompact）
+//  · 签名 = md5(payloadB64 \n cosyKey \n date \n body \n pathSig)，pathSig 去 /algo 前缀、不含 query
+//  · authorization = `Bearer COSY.${payloadB64}.${sig}`；payloadB64 是**标准 base64（带 padding）**
+//  · 同一 requestId 重放会被上游判 `code 103 Duplicate request`
+import { uuid, b64, b64url, utf8, aesCbcEncrypt, md5 } from "./crypto.js";
+import { rsaPkcs1Encrypt } from "./rsa.js";
+import {
+  COSY_VERSION, IDE_VERSION, RELEASE_VERSION, BUILD, CLIENT_TYPE,
+  BUSINESS_PRODUCT, BUSINESS_TYPE, SCENE, MACHINE_OS, UA,
+} from "./constants.js";
+
+const cache = new Map();
+
+function sortedCompact(obj) {
+  const keys = Object.keys(obj).sort();
+  let out = "{";
+  for (let i = 0; i < keys.length; i++) {
+    if (i > 0) out += ",";
+    out += JSON.stringify(keys[i]) + ":" + JSON.stringify(obj[keys[i]]);
+  }
+  return out + "}";
+}
+
+function newSession(account) {
+  const machineID = uuid();
+  const seed = (uuid() + uuid()).slice(0, 50);
+  const machineToken = b64url(utf8(seed));
+  const machineType = uuid().replace(/-/g, "").slice(0, 18);
+  const tempKey = uuid().replace(/-/g, "").slice(0, 16);
+
+  const identity = sortedCompact({
+    uid: account.uid || "",
+    aid: account.uid || "",
+    name: account.nickname || "",
+    email: account.email || "",
+    security_oauth_token: account.accessToken,
+  });
+
+  return {
+    machineID,
+    machineToken,
+    machineType,
+    tempKey,
+    cosyKey: rsaPkcs1Encrypt(utf8(tempKey)),
+    info: b64(aesCbcEncrypt(utf8(identity), utf8(tempKey))),
+    accessToken: account.accessToken,
+  };
+}
+
+export function sessionFor(account) {
+  if (!account || !account.accessToken) throw new Error("cosy: empty access token");
+  const key = account.id || account.uid || account.accessToken.slice(0, 16);
+  const hit = cache.get(key);
+  if (hit && hit.accessToken === account.accessToken) return hit;
+  if (cache.size > 128) cache.clear();
+  const sess = newSession(account);
+  cache.set(key, sess);
+  return sess;
+}
+
+export function invalidateSession(account) {
+  const key = account && (account.id || account.uid);
+  if (key) cache.delete(key);
+}
+
+function pathSig(rawURL) {
+  const u = new URL(rawURL);
+  let p = u.pathname;
+  if (p.startsWith("/algo")) p = p.slice("/algo".length);
+  return p;
+}
+
+export function signHeaders(account, body, rawURL, modelKey, accept) {
+  const sess = sessionFor(account);
+  const payload = sortedCompact({
+    cosyVersion: COSY_VERSION,
+    ideVersion: IDE_VERSION,
+    info: sess.info,
+    requestId: uuid(),
+    version: "v1",
+  });
+  const payloadB64 = b64(utf8(payload));
+  const date = Math.floor(Date.now() / 1000).toString();
+  const sig = md5(`${payloadB64}\n${sess.cosyKey}\n${date}\n${body}\n${pathSig(rawURL)}`);
+
+  const headers = {
+    accept: accept || "text/event-stream",
+    "content-type": "application/json",
+    "user-agent": UA,
+    "x-request-id": uuid(),
+    "x-qwenwork-version": IDE_VERSION,
+    "x-qwenwork-release-version": RELEASE_VERSION,
+    "x-qwenwork-build": BUILD,
+    "x-qwenwork-platform": "win32",
+    "x-qwenwork-arch": "x64",
+    "x-qwenwork-channel": "stable",
+    "cosy-version": COSY_VERSION,
+    "cosy-clienttype": CLIENT_TYPE,
+    "cosy-business-product": BUSINESS_PRODUCT,
+    "cosy-business-type": BUSINESS_TYPE,
+    "cosy-scene": SCENE,
+    "cosy-machineos": MACHINE_OS,
+    "login-version": "v2",
+    authorization: `Bearer COSY.${payloadB64}.${sig}`,
+    "cosy-key": sess.cosyKey,
+    "cosy-user": account.uid || "",
+    "cosy-date": date,
+    "cosy-machineid": sess.machineID,
+    "accept-encoding": "identity",
+    connection: "keep-alive",
+    "cache-control": "no-cache",
+  };
+  if (modelKey) {
+    headers["x-model-key"] = modelKey;
+    headers["x-model-source"] = "system";
+  }
+  return headers;
+}