mslxdff 0.1.231 → 0.1.233

package/src/providers/globalqwenwork/stream.js

@@ -1,132 +1,132 @@
-// vendor 自 src/providers/qwenwork/sse.js 的 transform（真流式：上游 SSE → OpenAI chunk，边收边吐）。
-// 唯一一处**有意偏离**原作者实现：把 chunk 里的 `model` 回写成客户端请求的模型名。
-// 上游实际返回的是池名（实测 `qwork-openai-chat-mode-pool`），直接透传会让客户端按模型名匹配失败，
-// 违反本仓契约 1「model 原样透传」。原作者的非流式路径同样做了 `completion.model = wantModel`。
-import { handleLine } from "./sse.js";
-
-function rewriteModel(frameText, model) {
-  if (!model) return frameText;
-  const body = frameText.slice(6, -2);
-  let obj;
-  try {
-    obj = JSON.parse(body);
-  } catch {
-    return frameText;
-  }
-  if (!obj || typeof obj !== "object") return frameText;
-  obj.model = model;
-  return `data: ${JSON.stringify(obj)}\n\n`;
-}
-
-export function transformStream(upstreamBody, model, onUsage, { heartbeatMs = 15000 } = {}) {
-  const reader = upstreamBody.getReader();
-  const decoder = new TextDecoder();
-  const encoder = new TextEncoder();
-  let buffer = "";
-  let notified = false;
-  let heartbeat = null;
-  const state = { usage: null, error: null };
-
-  const notify = () => {
-    if (notified) return;
-    notified = true;
-    if (onUsage) onUsage(state.usage);
-  };
-
-  const emitError = (controller, message) => {
-    try {
-      controller.enqueue(encoder.encode(`data: ${JSON.stringify({ error: { message, type: "upstream_error" } })}\n\n`));
-      controller.enqueue(encoder.encode("data: [DONE]\n\n"));
-      controller.close();
-    } catch {
-      /* 客户端已断开 */
-    }
-  };
-
-  const stopHeartbeat = () => {
-    if (heartbeat) {
-      clearInterval(heartbeat);
-      heartbeat = null;
-    }
-  };
-
-  const finish = () => {
-    stopHeartbeat();
-    notify();
-  };
-
-  return new ReadableStream({
-    start(controller) {
-      if (heartbeatMs > 0) {
-        heartbeat = setInterval(() => {
-          try {
-            controller.enqueue(encoder.encode(": ping\n\n"));
-          } catch {
-            /* 已关闭 */
-          }
-        }, heartbeatMs);
-        if (heartbeat.unref) heartbeat.unref();
-      }
-    },
-    async pull(controller) {
-      try {
-        for (;;) {
-          let read;
-          try {
-            read = await reader.read();
-          } catch (err) {
-            const message = `upstream stream read error: ${err && err.message ? err.message : err}`;
-            stopHeartbeat();
-            emitError(controller, message);
-            notify();
-            return;
-          }
-          if (read.done) {
-            stopHeartbeat();
-            if (buffer) {
-              const out = handleLine(buffer, state);
-              if (out) controller.enqueue(encoder.encode(rewriteModel(out, model)));
-              buffer = "";
-            }
-            if (state.error) emitError(controller, state.error);
-            else {
-              try {
-                controller.enqueue(encoder.encode("data: [DONE]\n\n"));
-                controller.close();
-              } catch {
-                /* 客户端已断开 */
-              }
-            }
-            finish();
-            return;
-          }
-          buffer += decoder.decode(read.value, { stream: true });
-          const lines = buffer.split("\n");
-          buffer = lines.pop() || "";
-          let out = "";
-          for (const line of lines) {
-            const frame = handleLine(line, state);
-            if (frame) out += rewriteModel(frame, model);
-          }
-          if (out) {
-            controller.enqueue(encoder.encode(out));
-            return;
-          }
-        }
-      } catch (err) {
-        finish();
-        try {
-          emitError(controller, `stream error: ${err && err.message ? err.message : err}`);
-        } catch {
-          /* 已关闭 */
-        }
-      }
-    },
-    cancel(reason) {
-      finish();
-      if (reader.cancel) reader.cancel(reason);
-    },
-  });
-}
+// vendor 自 src/providers/qwenwork/sse.js 的 transform（真流式：上游 SSE → OpenAI chunk，边收边吐）。
+// 唯一一处**有意偏离**原作者实现：把 chunk 里的 `model` 回写成客户端请求的模型名。
+// 上游实际返回的是池名（实测 `qwork-openai-chat-mode-pool`），直接透传会让客户端按模型名匹配失败，
+// 违反本仓契约 1「model 原样透传」。原作者的非流式路径同样做了 `completion.model = wantModel`。
+import { handleLine } from "./sse.js";
+
+function rewriteModel(frameText, model) {
+  if (!model) return frameText;
+  const body = frameText.slice(6, -2);
+  let obj;
+  try {
+    obj = JSON.parse(body);
+  } catch {
+    return frameText;
+  }
+  if (!obj || typeof obj !== "object") return frameText;
+  obj.model = model;
+  return `data: ${JSON.stringify(obj)}\n\n`;
+}
+
+export function transformStream(upstreamBody, model, onUsage, { heartbeatMs = 15000 } = {}) {
+  const reader = upstreamBody.getReader();
+  const decoder = new TextDecoder();
+  const encoder = new TextEncoder();
+  let buffer = "";
+  let notified = false;
+  let heartbeat = null;
+  const state = { usage: null, error: null };
+
+  const notify = () => {
+    if (notified) return;
+    notified = true;
+    if (onUsage) onUsage(state.usage);
+  };
+
+  const emitError = (controller, message) => {
+    try {
+      controller.enqueue(encoder.encode(`data: ${JSON.stringify({ error: { message, type: "upstream_error" } })}\n\n`));
+      controller.enqueue(encoder.encode("data: [DONE]\n\n"));
+      controller.close();
+    } catch {
+      /* 客户端已断开 */
+    }
+  };
+
+  const stopHeartbeat = () => {
+    if (heartbeat) {
+      clearInterval(heartbeat);
+      heartbeat = null;
+    }
+  };
+
+  const finish = () => {
+    stopHeartbeat();
+    notify();
+  };
+
+  return new ReadableStream({
+    start(controller) {
+      if (heartbeatMs > 0) {
+        heartbeat = setInterval(() => {
+          try {
+            controller.enqueue(encoder.encode(": ping\n\n"));
+          } catch {
+            /* 已关闭 */
+          }
+        }, heartbeatMs);
+        if (heartbeat.unref) heartbeat.unref();
+      }
+    },
+    async pull(controller) {
+      try {
+        for (;;) {
+          let read;
+          try {
+            read = await reader.read();
+          } catch (err) {
+            const message = `upstream stream read error: ${err && err.message ? err.message : err}`;
+            stopHeartbeat();
+            emitError(controller, message);
+            notify();
+            return;
+          }
+          if (read.done) {
+            stopHeartbeat();
+            if (buffer) {
+              const out = handleLine(buffer, state);
+              if (out) controller.enqueue(encoder.encode(rewriteModel(out, model)));
+              buffer = "";
+            }
+            if (state.error) emitError(controller, state.error);
+            else {
+              try {
+                controller.enqueue(encoder.encode("data: [DONE]\n\n"));
+                controller.close();
+              } catch {
+                /* 客户端已断开 */
+              }
+            }
+            finish();
+            return;
+          }
+          buffer += decoder.decode(read.value, { stream: true });
+          const lines = buffer.split("\n");
+          buffer = lines.pop() || "";
+          let out = "";
+          for (const line of lines) {
+            const frame = handleLine(line, state);
+            if (frame) out += rewriteModel(frame, model);
+          }
+          if (out) {
+            controller.enqueue(encoder.encode(out));
+            return;
+          }
+        }
+      } catch (err) {
+        finish();
+        try {
+          emitError(controller, `stream error: ${err && err.message ? err.message : err}`);
+        } catch {
+          /* 已关闭 */
+        }
+      }
+    },
+    cancel(reason) {
+      finish();
+      if (reader.cancel) reader.cancel(reason);
+    },
+  });
+}
 
 // globalqwenwork 变体：国际站 gateway.qwenwork.ai，协议与 cn 逐字同构（2026-10-01 现网取证），仅命名空间与常量不同 — 见 docs/adr/0041-globalqwenwork-international-provider.md

package/src/providers/globalqwenwork/upstream.js

@@ -1,122 +1,122 @@
-// upstream.js（签名请求装配 + OAuth 设备流）— vendor 自 src/providers/qwenwork/upstream.js 逐字搬；
-// URL 全部来自本目录 constants.js（BASE=.ai），client_id/redirect_uri 自动取国际站值。
-import { compatFetch } from "../../compat.js";
-import { uuid, b64url, utf8 } from "./crypto.js";
-import { signHeaders } from "./cosy.js";
-import {
-  UA, CLIENT_ID, REDIRECT_URI, DEVICE_AUTH_URL, CHAT_URL, MODELS_URL,
-  USERINFO_URL, ACCOUNT_CONTEXT_URL, POLL_URL, REFRESH_URL, MODEL_SLICE,
-} from "./constants.js";
-
-function plainHeaders() {
-  return {
-    accept: "application/json, text/plain, */*",
-    "content-type": "application/json",
-    "user-agent": UA,
-  };
-}
-
-export function chatRequest(account, modelKey, bodyStr, signal, fetchImpl = compatFetch) {
-  const headers = signHeaders(account, bodyStr, CHAT_URL, modelKey, "text/event-stream");
-  return fetchImpl(CHAT_URL, { method: "POST", headers, body: bodyStr, signal });
-}
-
-export async function modelList(account, fetchImpl = compatFetch) {
-  const headers = signHeaders(account, "", MODELS_URL, "", "application/json");
-  const res = await fetchImpl(MODELS_URL, { headers });
-  if (!res.ok) throw new Error(`models http ${res.status}`);
-  const data = await res.json();
-  // 实测 11 个根切片只有 `qwork` 非空（其余 n=0）；切片名见 constants.MODEL_SLICE
-  const list = Array.isArray(data && data[MODEL_SLICE]) ? data[MODEL_SLICE] : [];
-  return list
-    .filter((m) => m && m.enable !== false && m.key)
-    .map((m) => ({
-      key: m.key,
-      name: m.display_name || m.key,
-      isReasoning: !!m.is_reasoning,
-      isVL: !!m.is_vl,
-      maxInputTokens: m.max_input_tokens || 0,
-      maxOutputTokens: m.max_output_tokens || 0,
-      priceFactor: typeof m.price_factor === "number" ? m.price_factor : 0,
-      description: typeof m.description === "string" ? m.description : "",
-    }));
-}
-
-export async function userInfo(accessToken, fetchImpl = compatFetch) {
-  const res = await fetchImpl(USERINFO_URL, {
-    headers: { ...plainHeaders(), authorization: `Bearer ${accessToken}` },
-  });
-  if (!res.ok) throw new Error(`userinfo http ${res.status}`);
-  return res.json();
-}
-
-/** 额度/套餐：data.{user,plan,quota}；quota.remaining 即积分余量。 */
-export async function accountContext(accessToken, fetchImpl = compatFetch) {
-  const res = await fetchImpl(ACCOUNT_CONTEXT_URL, {
-    headers: { ...plainHeaders(), authorization: `Bearer ${accessToken}` },
-  });
-  if (!res.ok) throw new Error(`account-context http ${res.status}`);
-  const body = await res.json();
-  if (!body || (body.code && body.code !== "ok")) throw new Error(`account-context code=${body && body.code}`);
-  return (body && body.data) || {};
-}
-
-export async function refreshDeviceToken(refreshToken, fetchImpl = compatFetch) {
-  const res = await fetchImpl(REFRESH_URL, {
-    method: "POST",
-    headers: plainHeaders(),
-    body: JSON.stringify({ refresh_token: refreshToken }),
-  });
-  if (!res.ok) throw new Error(`refresh http ${res.status}`);
-  const data = await res.json();
-  const access = data && (data.token || data.device_token);
-  if (!access || !data.refresh_token) throw new Error("refresh: incomplete token pair");
-  return data;
-}
-
-export async function pollGrant(nonce, verifier, fetchImpl = compatFetch) {
-  const q = new URLSearchParams({ nonce, verifier, challenge_method: "S256" });
-  const res = await fetchImpl(`${POLL_URL}?${q.toString()}`, {
-    headers: { accept: "application/json", "user-agent": UA },
-  });
-  if (res.status === 404 || res.status === 202) return { pending: true };
-  if (!res.ok) throw new Error(`poll http ${res.status}`);
-  const data = await res.json();
-  if (!data || !(data.token || data.device_token)) return { pending: true };
-  return { pending: false, grant: data };
-}
-
-export async function newDeviceFlow() {
-  const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~";
-  const raw = new Uint8Array(64);
-  crypto.getRandomValues(raw);
-  let verifier = "";
-  for (let i = 0; i < raw.length; i++) verifier += alphabet[raw[i] % alphabet.length];
-  const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", utf8(verifier)));
-  const challenge = b64url(digest);
-  const nonce = uuid();
-  const machineID = uuid();
-  const q = new URLSearchParams({
-    challenge,
-    challenge_method: "S256",
-    nonce,
-    machine_id: machineID,
-    client_id: CLIENT_ID,
-    redirect_uri: REDIRECT_URI,
-  });
-  return { verifier, nonce, url: `${DEVICE_AUTH_URL}?${q.toString()}` };
-}
-
-export function expiryUnix(grant) {
-  if (grant && grant.expires_at) {
-    const t = Date.parse(grant.expires_at);
-    if (!Number.isNaN(t)) return Math.floor(t / 1000);
-  }
-  if (grant && grant.expires_in > 0) {
-    const ms = grant.expires_in > 10000000 ? grant.expires_in : grant.expires_in * 1000;
-    return Math.floor((Date.now() + ms) / 1000);
-  }
-  return Math.floor((Date.now() + 30 * 24 * 3600 * 1000) / 1000);
-}
-
-// globalqwenwork 变体（国际站 gateway.qwenwork.ai）：协议与 cn 逐字同构，2026-10-01 现网实测签名/请求 200 — 见 docs/adr/0041-globalqwenwork-international-provider.md
+// upstream.js（签名请求装配 + OAuth 设备流）— vendor 自 src/providers/qwenwork/upstream.js 逐字搬；
+// URL 全部来自本目录 constants.js（BASE=.ai），client_id/redirect_uri 自动取国际站值。
+import { compatFetch } from "../../compat.js";
+import { uuid, b64url, utf8 } from "./crypto.js";
+import { signHeaders } from "./cosy.js";
+import {
+  UA, CLIENT_ID, REDIRECT_URI, DEVICE_AUTH_URL, CHAT_URL, MODELS_URL,
+  USERINFO_URL, ACCOUNT_CONTEXT_URL, POLL_URL, REFRESH_URL, MODEL_SLICE,
+} from "./constants.js";
+
+function plainHeaders() {
+  return {
+    accept: "application/json, text/plain, */*",
+    "content-type": "application/json",
+    "user-agent": UA,
+  };
+}
+
+export function chatRequest(account, modelKey, bodyStr, signal, fetchImpl = compatFetch) {
+  const headers = signHeaders(account, bodyStr, CHAT_URL, modelKey, "text/event-stream");
+  return fetchImpl(CHAT_URL, { method: "POST", headers, body: bodyStr, signal });
+}
+
+export async function modelList(account, fetchImpl = compatFetch) {
+  const headers = signHeaders(account, "", MODELS_URL, "", "application/json");
+  const res = await fetchImpl(MODELS_URL, { headers });
+  if (!res.ok) throw new Error(`models http ${res.status}`);
+  const data = await res.json();
+  // 实测 11 个根切片只有 `qwork` 非空（其余 n=0）；切片名见 constants.MODEL_SLICE
+  const list = Array.isArray(data && data[MODEL_SLICE]) ? data[MODEL_SLICE] : [];
+  return list
+    .filter((m) => m && m.enable !== false && m.key)
+    .map((m) => ({
+      key: m.key,
+      name: m.display_name || m.key,
+      isReasoning: !!m.is_reasoning,
+      isVL: !!m.is_vl,
+      maxInputTokens: m.max_input_tokens || 0,
+      maxOutputTokens: m.max_output_tokens || 0,
+      priceFactor: typeof m.price_factor === "number" ? m.price_factor : 0,
+      description: typeof m.description === "string" ? m.description : "",
+    }));
+}
+
+export async function userInfo(accessToken, fetchImpl = compatFetch) {
+  const res = await fetchImpl(USERINFO_URL, {
+    headers: { ...plainHeaders(), authorization: `Bearer ${accessToken}` },
+  });
+  if (!res.ok) throw new Error(`userinfo http ${res.status}`);
+  return res.json();
+}
+
+/** 额度/套餐：data.{user,plan,quota}；quota.remaining 即积分余量。 */
+export async function accountContext(accessToken, fetchImpl = compatFetch) {
+  const res = await fetchImpl(ACCOUNT_CONTEXT_URL, {
+    headers: { ...plainHeaders(), authorization: `Bearer ${accessToken}` },
+  });
+  if (!res.ok) throw new Error(`account-context http ${res.status}`);
+  const body = await res.json();
+  if (!body || (body.code && body.code !== "ok")) throw new Error(`account-context code=${body && body.code}`);
+  return (body && body.data) || {};
+}
+
+export async function refreshDeviceToken(refreshToken, fetchImpl = compatFetch) {
+  const res = await fetchImpl(REFRESH_URL, {
+    method: "POST",
+    headers: plainHeaders(),
+    body: JSON.stringify({ refresh_token: refreshToken }),
+  });
+  if (!res.ok) throw new Error(`refresh http ${res.status}`);
+  const data = await res.json();
+  const access = data && (data.token || data.device_token);
+  if (!access || !data.refresh_token) throw new Error("refresh: incomplete token pair");
+  return data;
+}
+
+export async function pollGrant(nonce, verifier, fetchImpl = compatFetch) {
+  const q = new URLSearchParams({ nonce, verifier, challenge_method: "S256" });
+  const res = await fetchImpl(`${POLL_URL}?${q.toString()}`, {
+    headers: { accept: "application/json", "user-agent": UA },
+  });
+  if (res.status === 404 || res.status === 202) return { pending: true };
+  if (!res.ok) throw new Error(`poll http ${res.status}`);
+  const data = await res.json();
+  if (!data || !(data.token || data.device_token)) return { pending: true };
+  return { pending: false, grant: data };
+}
+
+export async function newDeviceFlow() {
+  const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~";
+  const raw = new Uint8Array(64);
+  crypto.getRandomValues(raw);
+  let verifier = "";
+  for (let i = 0; i < raw.length; i++) verifier += alphabet[raw[i] % alphabet.length];
+  const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", utf8(verifier)));
+  const challenge = b64url(digest);
+  const nonce = uuid();
+  const machineID = uuid();
+  const q = new URLSearchParams({
+    challenge,
+    challenge_method: "S256",
+    nonce,
+    machine_id: machineID,
+    client_id: CLIENT_ID,
+    redirect_uri: REDIRECT_URI,
+  });
+  return { verifier, nonce, url: `${DEVICE_AUTH_URL}?${q.toString()}` };
+}
+
+export function expiryUnix(grant) {
+  if (grant && grant.expires_at) {
+    const t = Date.parse(grant.expires_at);
+    if (!Number.isNaN(t)) return Math.floor(t / 1000);
+  }
+  if (grant && grant.expires_in > 0) {
+    const ms = grant.expires_in > 10000000 ? grant.expires_in : grant.expires_in * 1000;
+    return Math.floor((Date.now() + ms) / 1000);
+  }
+  return Math.floor((Date.now() + 30 * 24 * 3600 * 1000) / 1000);
+}
+
+// globalqwenwork 变体（国际站 gateway.qwenwork.ai）：协议与 cn 逐字同构，2026-10-01 现网实测签名/请求 200 — 见 docs/adr/0041-globalqwenwork-international-provider.md

package/src/providers/keyring.js

@@ -1,61 +1,61 @@
-// 多 key 轮转器：round-robin 取键 + 出错冷却隔离。
-// 语义：某个 key 出错后 cooldownMs 内不再使用；全部 key 都在冷却 → next() 返回 null
-// （调用方应视为该供应商暂时失效，直接报错而非降级为单 key）。
-export const DEFAULT_COOLDOWN_MS = 30_000;
-
-export function createKeyRing(keys = [], { cooldownMs = DEFAULT_COOLDOWN_MS, now = Date.now } = {}) {
-  const list = [...new Set(keys.filter((k) => typeof k === "string" && k.trim().length))];
-  const errAt = new Map();
-  let cursor = 0;
-
-  // errAt 存「冷却到期时间戳」：onError(key, durationMs?) 可自定义时长（额度错长冷却用），
-  // 缺省用构造时的 cooldownMs —— 旧的 onError(key) 调用方行为不变。
-  function isCooling(key) {
-    const e = errAt.get(key);
-    return e != null && now() < e;
-  }
-
-  function next() {
-    if (!list.length) return null;
-    for (let i = 0; i < list.length; i++) {
-      const idx = (cursor + i) % list.length;
-      const key = list[idx];
-      if (!isCooling(key)) {
-        cursor = (idx + 1) % list.length;
-        return key;
-      }
-    }
-    return null;
-  }
-
-  function onError(key, durationMs) {
-    if (!list.includes(key)) return;
-    const dur = Number.isFinite(durationMs) && durationMs >= 0 ? durationMs : cooldownMs;
-    errAt.set(key, now() + dur);
-  }
-
-  function replace(oldKey, newKey) {
-    const idx = list.indexOf(oldKey);
-    if (idx < 0) {
-      if (newKey && !list.includes(newKey)) list.push(newKey);
-      return false;
-    }
-    if (newKey && oldKey !== newKey) {
-      list[idx] = newKey;
-      // 迁移冷却状态：旧 key 的冷却移到新 key，避免新 token 立即被误判可用
-      if (errAt.has(oldKey)) {
-        const t = errAt.get(oldKey);
-        errAt.delete(oldKey);
-        // 新 token 刚刷新，不应继承旧冷却，直接清掉
-      }
-    }
-    return true;
-  }
-
-  function available() {
-    return list.filter((k) => !isCooling(k)).length;
-  }
-
-  // isCooling 对外暴露：粘号选择器要判断"上次这个号还在冷却吗"（决定是否必须换号）
-  return { next, onError, replace, available, isCooling, cooldownMs, get size() { return list.length; }, get keys() { return [...list]; } }; // ⚠ size/keys 必须是 getter：replace() 换号后构造期快照会停在已废弃的旧 token
+// 多 key 轮转器：round-robin 取键 + 出错冷却隔离。
+// 语义：某个 key 出错后 cooldownMs 内不再使用；全部 key 都在冷却 → next() 返回 null
+// （调用方应视为该供应商暂时失效，直接报错而非降级为单 key）。
+export const DEFAULT_COOLDOWN_MS = 30_000;
+
+export function createKeyRing(keys = [], { cooldownMs = DEFAULT_COOLDOWN_MS, now = Date.now } = {}) {
+  const list = [...new Set(keys.filter((k) => typeof k === "string" && k.trim().length))];
+  const errAt = new Map();
+  let cursor = 0;
+
+  // errAt 存「冷却到期时间戳」：onError(key, durationMs?) 可自定义时长（额度错长冷却用），
+  // 缺省用构造时的 cooldownMs —— 旧的 onError(key) 调用方行为不变。
+  function isCooling(key) {
+    const e = errAt.get(key);
+    return e != null && now() < e;
+  }
+
+  function next() {
+    if (!list.length) return null;
+    for (let i = 0; i < list.length; i++) {
+      const idx = (cursor + i) % list.length;
+      const key = list[idx];
+      if (!isCooling(key)) {
+        cursor = (idx + 1) % list.length;
+        return key;
+      }
+    }
+    return null;
+  }
+
+  function onError(key, durationMs) {
+    if (!list.includes(key)) return;
+    const dur = Number.isFinite(durationMs) && durationMs >= 0 ? durationMs : cooldownMs;
+    errAt.set(key, now() + dur);
+  }
+
+  function replace(oldKey, newKey) {
+    const idx = list.indexOf(oldKey);
+    if (idx < 0) {
+      if (newKey && !list.includes(newKey)) list.push(newKey);
+      return false;
+    }
+    if (newKey && oldKey !== newKey) {
+      list[idx] = newKey;
+      // 迁移冷却状态：旧 key 的冷却移到新 key，避免新 token 立即被误判可用
+      if (errAt.has(oldKey)) {
+        const t = errAt.get(oldKey);
+        errAt.delete(oldKey);
+        // 新 token 刚刷新，不应继承旧冷却，直接清掉
+      }
+    }
+    return true;
+  }
+
+  function available() {
+    return list.filter((k) => !isCooling(k)).length;
+  }
+
+  // isCooling 对外暴露：粘号选择器要判断"上次这个号还在冷却吗"（决定是否必须换号）
+  return { next, onError, replace, available, isCooling, cooldownMs, get size() { return list.length; }, get keys() { return [...list]; } }; // ⚠ size/keys 必须是 getter：replace() 换号后构造期快照会停在已废弃的旧 token
 }

package/src/providers/qoder/account-store.js

@@ -96,6 +96,24 @@ export async function saveQoderAccount({ uid, deviceToken, refreshToken = "", re
   return { file: fp, accounts: st.keys.length, updated: st.updated > 0 };
 }
 
+// 刷新成功后按 uid 原位更新令牌对（deviceToken 时效短，105 过期即刷）。
+// auth 文档保留原 region/name；state 行按 uid 覆盖（persistAccounts 命中既有 uid 行即替换）。
+export async function updateQoderAccountTokens({ uid, deviceToken, refreshToken, file } = {}) {
+  if (!uid || !deviceToken) throw new Error("updateQoderAccountTokens: 缺少 uid/deviceToken");
+  const docs = listAccountDocs();
+  const found = docs.find((d) => String(d.uid) === String(uid));
+  const a = found?.doc?.auth || {};
+  const acc = found?.doc?.account || {};
+  writeAccountFile({
+    uid, deviceToken, refreshToken,
+    region: a.region || "global",
+    name: acc.name || "", email: acc.email || "", userType: acc.userType || "personal_standard",
+    organizationId: acc.organizationId || "", organizationName: acc.organizationName || "",
+  });
+  await persistAccounts([{ uid, deviceToken, refreshToken, region: a.region || "global", name: acc.name || "", domain: "qoder.com" }], file);
+  return { updated: Boolean(found) };
+}
+
 // 重建 provider 的行级 auth：由 keys[i] blob + auths[i] 还原 deviceToken。
 export function accountFromBlob(blob) {
   try {