qwenproxy-cli 1.3.6 → 1.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qwenproxy-cli",
-  "version": "1.3.6",
+  "version": "1.4.0",
   "description": "High-performance OpenAI & Anthropic compatible API gateway for Qwen with multi-account rotation, interactive TUI, and resilient tool calling.",
   "main": "src/index.ts",
   "bin": {
@@ -8,6 +8,7 @@
   },
   "files": [
     "bin",
+    "dist",
     "src",
     "!src/tests",
     "!src/benchmarks",
@@ -15,6 +16,8 @@
     "LICENSE"
   ],
   "scripts": {
+    "build": "esbuild src/index.ts src/sync-clients.ts src/clean-cache.ts src/reset-cooldowns.ts src/delete-chats.ts src/login.ts --bundle --platform=node --format=esm --target=node22 --packages=external --outdir=dist",
+    "prepack": "npm run build",
     "start": "tsx src/index.ts",
     "tui": "npx tsx src/tui/index.ts",
     "login": "npx tsx src/login.ts",
@@ -26,8 +29,8 @@
     "reset": "npx tsx src/reset-cooldowns.ts",
     "purge": "npx tsx src/delete-chats.ts",
     "test": "npm run test:mock && npm run test:live",
-    "test:mock": "tsx --test --test-concurrency=1 --env-file=.env.test src/tests/account-concurrency.test.ts src/tests/concurrency-latest-wins.test.ts src/tests/mutex.test.ts src/tests/context-truncation.test.ts src/tests/streaming-thinking-summary.test.ts src/tests/tool-call-guard.test.ts src/tests/utils-logger-full.test.ts src/tests/logger-toolcall-errors.test.ts src/tests/logger-toolcall-disabled.test.ts src/tests/utils-json-full.test.ts src/tests/utils-session-guard-full.test.ts src/tests/core-logic-full.test.ts src/tests/core-logic-accounts.test.ts src/tests/chat-validation-full.test.ts src/tests/chat-logic-full.test.ts src/tests/account-stickiness.test.ts src/tests/accounts-security.test.ts src/tests/advanced.test.ts src/tests/auth-playwright.test.ts src/tests/captcha-solver.test.ts src/tests/cache-scan-regex.test.ts src/tests/chat-cleanup.test.ts src/tests/chat-cleanup-auto.test.ts src/tests/chromium-args.test.ts src/tests/config-current.test.ts src/tests/context-meter.test.ts src/tests/concurrency.test.ts src/tests/delta.test.ts src/tests/fingerprint.test.ts src/tests/human-behavior.test.ts src/tests/index.test.ts src/tests/json-recovery.test.ts src/tests/jsonFix.test.ts src/tests/memory-cache.test.ts src/tests/model-alias.test.ts src/tests/model-registry-thinking.test.ts src/tests/models-endpoint.test.ts src/tests/multimodal.test.ts src/tests/oss-upload.test.ts src/tests/parser.test.ts src/tests/personalization-flow.test.ts src/tests/personalization-required.test.ts src/tests/retry-policy.test.ts src/tests/rotation.test.ts src/tests/server-lifecycle.test.ts src/tests/session-keeper.test.ts src/tests/session-state.test.ts src/tests/single-account-mode.test.ts src/tests/stream-retry.test.ts src/tests/tool-calls-endpoint.test.ts src/tests/tool-instructions-cache.test.ts src/tests/session-id.test.ts src/tests/watchdog-ram.test.ts src/tests/tool-recovery-t1t2.test.ts src/tests/abort-silent-t4.test.ts src/tests/t3-close-tag-escape.test.ts src/tests/t5-tool-cap.test.ts src/tests/logger-redaction.test.ts src/tests/stall-timeout-retryable.test.ts src/tests/t6-missing-quote-array-close.test.ts src/tests/watchdog-rss.test.ts src/tests/logical-thread-batch.test.ts src/tests/chat-pool-style.test.ts src/tests/queue-wait-cap.test.ts src/tests/context-eviction-order.test.ts src/tests/chat-in-progress-settle.test.ts src/tests/stream-lock-leak.test.ts src/tests/stream-semaphore.test.ts src/tests/waf-isolation.test.ts src/tests/legacy-completions.test.ts src/tests/response-format.test.ts src/tests/cors-headers.test.ts src/tests/local-auth.test.ts src/tests/safe-remote-url.test.ts src/tests/stream-lock-terminal-cancel.test.ts src/tests/parser-truncated-tool-call.test.ts src/tests/metrics-prometheus.test.ts src/tests/context-death-cleanup.test.ts src/tests/personalization-direct-fetch.test.ts src/tests/completion-headers-parity.test.ts src/tests/parallel-escape-repro.test.ts src/tests/chat-in-progress-scale-cost.test.ts src/tests/temp-chat-mode.test.ts src/tests/profile-reset.test.ts src/tests/error-classification.test.ts src/tests/quota-cooldown.test.ts src/tests/account-ready-gate.test.ts src/tests/tool-cap-notice.test.ts src/tests/interaction-flows.test.ts src/tests/headers-gate-cooldown-fallback.test.ts src/tests/unwrapped-tool-calls.test.ts src/tests/anthropic.test.ts src/tests/sync-clients.test.ts src/tests/sync-top10-clients.test.ts src/tests/cli.test.ts src/tests/paths.test.ts src/tests/tool-manifest.test.ts src/tests/tui.test.ts src/tests/tui-settings.test.ts src/tests/personalization-deadline.test.ts src/tests/update-cli.test.ts src/tests/batch-accounts.test.ts src/tests/shared-browser.test.ts src/tests/auth-credential-classification.test.ts src/tests/responses-api.test.ts src/tests/media-generation.test.ts src/tests/infer-tool-name.test.ts src/tests/native-session-headers.test.ts src/tests/omni-thinking.test.ts src/tests/protect-stuck-mutex.test.ts src/tests/stream-error-notice.test.ts src/tests/parser-deep-coverage.test.ts src/tests/tui-logs-copy.test.ts src/tests/auth-jwt-and-validation.test.ts src/tests/tui-port-and-key-modal.test.ts",
-    "test:mock:fast": "tsx --test --test-concurrency=2 --env-file=.env.test src/tests/account-concurrency.test.ts src/tests/concurrency-latest-wins.test.ts src/tests/mutex.test.ts src/tests/context-truncation.test.ts src/tests/streaming-thinking-summary.test.ts src/tests/tool-call-guard.test.ts src/tests/utils-logger-full.test.ts src/tests/logger-toolcall-errors.test.ts src/tests/logger-toolcall-disabled.test.ts src/tests/utils-json-full.test.ts src/tests/utils-session-guard-full.test.ts src/tests/core-logic-full.test.ts src/tests/core-logic-accounts.test.ts src/tests/chat-validation-full.test.ts src/tests/chat-logic-full.test.ts src/tests/account-stickiness.test.ts src/tests/accounts-security.test.ts src/tests/advanced.test.ts src/tests/auth-playwright.test.ts src/tests/captcha-solver.test.ts src/tests/cache-scan-regex.test.ts src/tests/chat-cleanup.test.ts src/tests/chat-cleanup-auto.test.ts src/tests/chromium-args.test.ts src/tests/config-current.test.ts src/tests/context-meter.test.ts src/tests/concurrency.test.ts src/tests/delta.test.ts src/tests/fingerprint.test.ts src/tests/human-behavior.test.ts src/tests/index.test.ts src/tests/json-recovery.test.ts src/tests/jsonFix.test.ts src/tests/memory-cache.test.ts src/tests/model-alias.test.ts src/tests/model-registry-thinking.test.ts src/tests/models-endpoint.test.ts src/tests/multimodal.test.ts src/tests/oss-upload.test.ts src/tests/parser.test.ts src/tests/personalization-flow.test.ts src/tests/personalization-required.test.ts src/tests/retry-policy.test.ts src/tests/rotation.test.ts src/tests/server-lifecycle.test.ts src/tests/session-keeper.test.ts src/tests/session-state.test.ts src/tests/single-account-mode.test.ts src/tests/stream-retry.test.ts src/tests/tool-calls-endpoint.test.ts src/tests/tool-instructions-cache.test.ts src/tests/session-id.test.ts src/tests/watchdog-ram.test.ts src/tests/tool-recovery-t1t2.test.ts src/tests/abort-silent-t4.test.ts src/tests/t3-close-tag-escape.test.ts src/tests/t5-tool-cap.test.ts src/tests/logger-redaction.test.ts src/tests/stall-timeout-retryable.test.ts src/tests/t6-missing-quote-array-close.test.ts src/tests/watchdog-rss.test.ts src/tests/logical-thread-batch.test.ts src/tests/chat-pool-style.test.ts src/tests/queue-wait-cap.test.ts src/tests/context-eviction-order.test.ts src/tests/chat-in-progress-settle.test.ts src/tests/stream-lock-leak.test.ts src/tests/stream-semaphore.test.ts src/tests/waf-isolation.test.ts src/tests/legacy-completions.test.ts src/tests/response-format.test.ts src/tests/cors-headers.test.ts src/tests/local-auth.test.ts src/tests/safe-remote-url.test.ts src/tests/stream-lock-terminal-cancel.test.ts src/tests/parser-truncated-tool-call.test.ts src/tests/metrics-prometheus.test.ts src/tests/context-death-cleanup.test.ts src/tests/personalization-direct-fetch.test.ts src/tests/completion-headers-parity.test.ts src/tests/parallel-escape-repro.test.ts src/tests/chat-in-progress-scale-cost.test.ts src/tests/temp-chat-mode.test.ts src/tests/profile-reset.test.ts src/tests/error-classification.test.ts src/tests/quota-cooldown.test.ts src/tests/account-ready-gate.test.ts src/tests/tool-cap-notice.test.ts src/tests/interaction-flows.test.ts src/tests/headers-gate-cooldown-fallback.test.ts src/tests/unwrapped-tool-calls.test.ts src/tests/anthropic.test.ts src/tests/sync-clients.test.ts src/tests/sync-top10-clients.test.ts src/tests/cli.test.ts src/tests/paths.test.ts src/tests/tool-manifest.test.ts src/tests/tui.test.ts src/tests/tui-settings.test.ts src/tests/personalization-deadline.test.ts src/tests/update-cli.test.ts src/tests/batch-accounts.test.ts src/tests/shared-browser.test.ts src/tests/auth-credential-classification.test.ts src/tests/responses-api.test.ts src/tests/media-generation.test.ts src/tests/infer-tool-name.test.ts src/tests/native-session-headers.test.ts src/tests/omni-thinking.test.ts src/tests/protect-stuck-mutex.test.ts src/tests/stream-error-notice.test.ts src/tests/parser-deep-coverage.test.ts src/tests/tui-logs-copy.test.ts src/tests/auth-jwt-and-validation.test.ts src/tests/tui-port-and-key-modal.test.ts",
+    "test:mock": "tsx --test --test-concurrency=1 --env-file=.env.test src/tests/account-concurrency.test.ts src/tests/concurrency-latest-wins.test.ts src/tests/mutex.test.ts src/tests/context-truncation.test.ts src/tests/streaming-thinking-summary.test.ts src/tests/tool-call-guard.test.ts src/tests/utils-logger-full.test.ts src/tests/logger-toolcall-errors.test.ts src/tests/logger-toolcall-disabled.test.ts src/tests/utils-json-full.test.ts src/tests/utils-session-guard-full.test.ts src/tests/core-logic-full.test.ts src/tests/core-logic-accounts.test.ts src/tests/chat-validation-full.test.ts src/tests/chat-logic-full.test.ts src/tests/account-stickiness.test.ts src/tests/accounts-security.test.ts src/tests/advanced.test.ts src/tests/auth-playwright.test.ts src/tests/auth-session-persistence.test.ts src/tests/captcha-solver.test.ts src/tests/cache-scan-regex.test.ts src/tests/chat-cleanup.test.ts src/tests/chat-cleanup-auto.test.ts src/tests/chromium-args.test.ts src/tests/config-current.test.ts src/tests/context-meter.test.ts src/tests/concurrency.test.ts src/tests/delta.test.ts src/tests/fingerprint.test.ts src/tests/human-behavior.test.ts src/tests/index.test.ts src/tests/json-recovery.test.ts src/tests/jsonFix.test.ts src/tests/memory-cache.test.ts src/tests/model-alias.test.ts src/tests/model-registry-thinking.test.ts src/tests/models-endpoint.test.ts src/tests/multimodal.test.ts src/tests/oss-upload.test.ts src/tests/parser.test.ts src/tests/personalization-flow.test.ts src/tests/personalization-required.test.ts src/tests/retry-policy.test.ts src/tests/rotation.test.ts src/tests/server-lifecycle.test.ts src/tests/session-keeper.test.ts src/tests/session-state.test.ts src/tests/single-account-mode.test.ts src/tests/stream-retry.test.ts src/tests/tool-calls-endpoint.test.ts src/tests/tool-instructions-cache.test.ts src/tests/session-id.test.ts src/tests/watchdog-ram.test.ts src/tests/tool-recovery-t1t2.test.ts src/tests/abort-silent-t4.test.ts src/tests/t3-close-tag-escape.test.ts src/tests/t5-tool-cap.test.ts src/tests/logger-redaction.test.ts src/tests/stall-timeout-retryable.test.ts src/tests/t6-missing-quote-array-close.test.ts src/tests/watchdog-rss.test.ts src/tests/logical-thread-batch.test.ts src/tests/chat-pool-style.test.ts src/tests/queue-wait-cap.test.ts src/tests/context-eviction-order.test.ts src/tests/chat-in-progress-settle.test.ts src/tests/stream-lock-leak.test.ts src/tests/stream-semaphore.test.ts src/tests/waf-isolation.test.ts src/tests/legacy-completions.test.ts src/tests/response-format.test.ts src/tests/cors-headers.test.ts src/tests/local-auth.test.ts src/tests/safe-remote-url.test.ts src/tests/stream-lock-terminal-cancel.test.ts src/tests/parser-truncated-tool-call.test.ts src/tests/metrics-prometheus.test.ts src/tests/context-death-cleanup.test.ts src/tests/personalization-direct-fetch.test.ts src/tests/completion-headers-parity.test.ts src/tests/parallel-escape-repro.test.ts src/tests/chat-in-progress-scale-cost.test.ts src/tests/temp-chat-mode.test.ts src/tests/profile-reset.test.ts src/tests/error-classification.test.ts src/tests/quota-cooldown.test.ts src/tests/account-ready-gate.test.ts src/tests/tool-cap-notice.test.ts src/tests/interaction-flows.test.ts src/tests/headers-gate-cooldown-fallback.test.ts src/tests/unwrapped-tool-calls.test.ts src/tests/anthropic.test.ts src/tests/sync-clients.test.ts src/tests/sync-top10-clients.test.ts src/tests/cli.test.ts src/tests/paths.test.ts src/tests/tool-manifest.test.ts src/tests/tui.test.ts src/tests/tui-settings.test.ts src/tests/personalization-deadline.test.ts src/tests/update-cli.test.ts src/tests/batch-accounts.test.ts src/tests/shared-browser.test.ts src/tests/auth-credential-classification.test.ts src/tests/responses-api.test.ts src/tests/media-generation.test.ts src/tests/infer-tool-name.test.ts src/tests/native-session-headers.test.ts src/tests/omni-thinking.test.ts src/tests/protect-stuck-mutex.test.ts src/tests/stream-error-notice.test.ts src/tests/parser-deep-coverage.test.ts src/tests/tui-logs-copy.test.ts src/tests/auth-jwt-and-validation.test.ts src/tests/tui-port-and-key-modal.test.ts",
+    "test:mock:fast": "tsx --test --test-concurrency=2 --env-file=.env.test src/tests/account-concurrency.test.ts src/tests/concurrency-latest-wins.test.ts src/tests/mutex.test.ts src/tests/context-truncation.test.ts src/tests/streaming-thinking-summary.test.ts src/tests/tool-call-guard.test.ts src/tests/utils-logger-full.test.ts src/tests/logger-toolcall-errors.test.ts src/tests/logger-toolcall-disabled.test.ts src/tests/utils-json-full.test.ts src/tests/utils-session-guard-full.test.ts src/tests/core-logic-full.test.ts src/tests/core-logic-accounts.test.ts src/tests/chat-validation-full.test.ts src/tests/chat-logic-full.test.ts src/tests/account-stickiness.test.ts src/tests/accounts-security.test.ts src/tests/advanced.test.ts src/tests/auth-playwright.test.ts src/tests/auth-session-persistence.test.ts src/tests/captcha-solver.test.ts src/tests/cache-scan-regex.test.ts src/tests/chat-cleanup.test.ts src/tests/chat-cleanup-auto.test.ts src/tests/chromium-args.test.ts src/tests/config-current.test.ts src/tests/context-meter.test.ts src/tests/concurrency.test.ts src/tests/delta.test.ts src/tests/fingerprint.test.ts src/tests/human-behavior.test.ts src/tests/index.test.ts src/tests/json-recovery.test.ts src/tests/jsonFix.test.ts src/tests/memory-cache.test.ts src/tests/model-alias.test.ts src/tests/model-registry-thinking.test.ts src/tests/models-endpoint.test.ts src/tests/multimodal.test.ts src/tests/oss-upload.test.ts src/tests/parser.test.ts src/tests/personalization-flow.test.ts src/tests/personalization-required.test.ts src/tests/retry-policy.test.ts src/tests/rotation.test.ts src/tests/server-lifecycle.test.ts src/tests/session-keeper.test.ts src/tests/session-state.test.ts src/tests/single-account-mode.test.ts src/tests/stream-retry.test.ts src/tests/tool-calls-endpoint.test.ts src/tests/tool-instructions-cache.test.ts src/tests/session-id.test.ts src/tests/watchdog-ram.test.ts src/tests/tool-recovery-t1t2.test.ts src/tests/abort-silent-t4.test.ts src/tests/t3-close-tag-escape.test.ts src/tests/t5-tool-cap.test.ts src/tests/logger-redaction.test.ts src/tests/stall-timeout-retryable.test.ts src/tests/t6-missing-quote-array-close.test.ts src/tests/watchdog-rss.test.ts src/tests/logical-thread-batch.test.ts src/tests/chat-pool-style.test.ts src/tests/queue-wait-cap.test.ts src/tests/context-eviction-order.test.ts src/tests/chat-in-progress-settle.test.ts src/tests/stream-lock-leak.test.ts src/tests/stream-semaphore.test.ts src/tests/waf-isolation.test.ts src/tests/legacy-completions.test.ts src/tests/response-format.test.ts src/tests/cors-headers.test.ts src/tests/local-auth.test.ts src/tests/safe-remote-url.test.ts src/tests/stream-lock-terminal-cancel.test.ts src/tests/parser-truncated-tool-call.test.ts src/tests/metrics-prometheus.test.ts src/tests/context-death-cleanup.test.ts src/tests/personalization-direct-fetch.test.ts src/tests/completion-headers-parity.test.ts src/tests/parallel-escape-repro.test.ts src/tests/chat-in-progress-scale-cost.test.ts src/tests/temp-chat-mode.test.ts src/tests/profile-reset.test.ts src/tests/error-classification.test.ts src/tests/quota-cooldown.test.ts src/tests/account-ready-gate.test.ts src/tests/tool-cap-notice.test.ts src/tests/interaction-flows.test.ts src/tests/headers-gate-cooldown-fallback.test.ts src/tests/unwrapped-tool-calls.test.ts src/tests/anthropic.test.ts src/tests/sync-clients.test.ts src/tests/sync-top10-clients.test.ts src/tests/cli.test.ts src/tests/paths.test.ts src/tests/tool-manifest.test.ts src/tests/tui.test.ts src/tests/tui-settings.test.ts src/tests/personalization-deadline.test.ts src/tests/update-cli.test.ts src/tests/batch-accounts.test.ts src/tests/shared-browser.test.ts src/tests/auth-credential-classification.test.ts src/tests/responses-api.test.ts src/tests/media-generation.test.ts src/tests/infer-tool-name.test.ts src/tests/native-session-headers.test.ts src/tests/omni-thinking.test.ts src/tests/protect-stuck-mutex.test.ts src/tests/stream-error-notice.test.ts src/tests/parser-deep-coverage.test.ts src/tests/tui-logs-copy.test.ts src/tests/auth-jwt-and-validation.test.ts src/tests/tui-port-and-key-modal.test.ts",
     "test:live": "tsx --test src/tests/concurrentChat.test.ts src/tests/agenticStress.test.ts",
     "benchmark:proxy": "npx tsx src/benchmarks/proxy-baseline.ts",
     "typecheck": "tsc --noEmit"
@@ -69,6 +72,7 @@
   "devDependencies": {
     "@types/better-sqlite3": "^9.6.0",
     "@types/node": "^26.4.1",
+    "esbuild": "^0.28.2",
     "typescript": "^7.0.2"
   },
   "type": "module",

package/src/api/server.ts

@@ -498,6 +498,7 @@ async function warmConfiguredChatPools(
   ) => Promise<void>,
   accountId?: string,
 ): Promise<void> {
+  if (config.qwen.chatPoolSize <= 0) return;
   await Promise.all(
     config.qwen.chatPoolModels.map((model) =>
       warmQwenChatPool(accountId, model).catch(() => {}),
@@ -763,6 +764,12 @@ export async function startServer(options?: {
   }
 
   startPromise = (async () => {
+    const { getAppVersion } = await import("../core/version.ts");
+    const appVersion = getAppVersion();
+    if (options?.showBanner !== false && !isAuthMockEnabled()) {
+      console.log(`🚀 [Server] Iniciando QwenProxy ${appVersion} na porta ${config.server.port}...`);
+    }
+
     cache = new MemoryCache();
     await cache.connect();
 
@@ -805,13 +812,19 @@ export async function startServer(options?: {
     if (accounts.length > 0) {
       const totalAccounts = accounts.length;
 
-      // Warm accounts in priority order (recently successful accounts first),
+      // Warm accounts in priority order, giving top precedence to accounts
+      // that already have valid, non-expired sessions in SQLite (restores in ~0.5s),
       // skipping accounts still on cooldown. Warm the primary account first so
-      // the server binds the port and goes online immediately (~15-20s).
+      // the server binds the port and goes online immediately (~5-10s).
       // Reserve account(s) and standby validations run seamlessly in background.
-      const warmOrder = getAccountsByPriority(accounts).filter(
-        (account) => !getAccountCooldownInfo(account.id),
-      );
+      const { getValidAuthSession } = await import("../core/database.ts");
+      const warmOrder = getAccountsByPriority(accounts)
+        .filter((account) => !getAccountCooldownInfo(account.id))
+        .sort((a, b) => {
+          const aHasSession = getValidAuthSession(a.id) !== null ? 1 : 0;
+          const bHasSession = getValidAuthSession(b.id) !== null ? 1 : 0;
+          return bHasSession - aHasSession;
+        });
       const readyAccountIds = new Set<string>();
 
       for (let i = 0; i < warmOrder.length; i++) {
@@ -831,9 +844,13 @@ export async function startServer(options?: {
         }
       }
 
-      const remainingAccounts = accounts.filter(
-        (account) => !readyAccountIds.has(account.id),
-      );
+      const remainingAccounts = accounts
+        .filter((account) => !readyAccountIds.has(account.id))
+        .sort((a, b) => {
+          const aHasSession = getValidAuthSession(a.id) !== null ? 1 : 0;
+          const bHasSession = getValidAuthSession(b.id) !== null ? 1 : 0;
+          return bHasSession - aHasSession;
+        });
       if (readyAccountIds.size === 0) {
         console.warn(
           `⚠️  [Server] No account ready during startup; continuing in background`,
@@ -1024,11 +1041,11 @@ export async function startServer(options?: {
 
     const endpoint = `${started.url}/v1`;
 
-    if (options?.showBanner !== false) {
+    if (options?.showBanner !== false && !isAuthMockEnabled()) {
       console.log(`
 +${"-".repeat(W)}+
 |${blank()}|
-|${center("QwenProxy")}|
+|${center(`QwenProxy ${appVersion}`)}|
 |${center("OpenAI & Anthropic Compatible API")}|
 |${blank()}|
 +${"-".repeat(W)}+

package/src/core/accounts.ts

@@ -2,7 +2,7 @@ import "dotenv/config";
 import crypto from "crypto";
 import fs from "node:fs";
 import path from "node:path";
-import { getDatabase } from "./database.ts";
+import { getDatabase, deleteAuthSession } from "./database.ts";
 import { decrypt, encrypt } from "./crypto-utils.ts";
 import { getAccountProfilePath, getProfilesDir, isRunningUnderNodeTest } from "./paths.ts";
 import { updateEnvVariable } from "./local-auth.ts";
@@ -430,6 +430,7 @@ export function removeAccount(id: string): boolean {
   const result = db.prepare("DELETE FROM accounts WHERE id = ?").run(id);
   if (result.changes > 0) {
     wipeAccountSessionFiles(id);
+    deleteAuthSession(id);
     if (account?.email) {
       removeAccountFromEnv(account.email);
     }

package/src/core/config.ts

@@ -160,7 +160,7 @@ const envSchema = z
 
 
     QWEN_BASE_URL: z.string().default("https://chat.qwen.ai"),
-    QWEN_CHAT_POOL_SIZE: z.string().default("1"),
+    QWEN_CHAT_POOL_SIZE: z.string().default("0"),
     QWEN_CHAT_POOL_MODELS: z.string().default("qwen3.7-plus"),
     QWEN_PERSONALIZATION_FROM_REQUEST: z.string().default("true"),
     QWEN_PERSONALIZATION_VERIFY_GET: z.string().default("true"),

package/src/core/database.ts

@@ -141,8 +141,13 @@ function runMigrations(db: Database.Database): void {
       bx_v TEXT,
       bx_ua TEXT,
       bx_umidtoken TEXT,
+      sec_ch_ua TEXT,
+      sec_ch_ua_mobile TEXT,
+      sec_ch_ua_platform TEXT,
+      version TEXT,
       user_id TEXT,
       token_expires_at INTEGER,
+      captured_at INTEGER DEFAULT 0,
       updated_at TEXT NOT NULL DEFAULT (datetime('now'))
     );
 
@@ -181,6 +186,22 @@ function runMigrations(db: Database.Database): void {
   } catch (err) {
     if (!isDuplicateColumnError(err)) throw err;
   }
+
+  // qwen_auth_sessions columns migration
+  const authSessionCols = [
+    "sec_ch_ua TEXT",
+    "sec_ch_ua_mobile TEXT",
+    "sec_ch_ua_platform TEXT",
+    "version TEXT",
+    "captured_at INTEGER DEFAULT 0",
+  ];
+  for (const col of authSessionCols) {
+    try {
+      db.exec(`ALTER TABLE qwen_auth_sessions ADD COLUMN ${col};`);
+    } catch (err) {
+      if (!isDuplicateColumnError(err)) throw err;
+    }
+  }
 }
 
 function isDuplicateColumnError(err: unknown): boolean {
@@ -274,3 +295,121 @@ export function closeDatabase(): void {
     db = null;
   }
 }
+
+export interface PersistedAuthSession {
+  accountId: string;
+  cookie: string;
+  userAgent: string;
+  bxV: string;
+  bxUa: string;
+  bxUmidtoken: string;
+  secChUa?: string;
+  secChUaMobile?: string;
+  secChUaPlatform?: string;
+  version?: string;
+  userId?: string;
+  tokenExpiresAt?: number;
+  capturedAt: number;
+}
+
+export function saveAuthSession(
+  accountId: string,
+  session: {
+    cookie: string;
+    userAgent: string;
+    bxV?: string;
+    bxUa?: string;
+    bxUmidtoken?: string;
+    secChUa?: string;
+    secChUaMobile?: string;
+    secChUaPlatform?: string;
+    version?: string;
+    userId?: string;
+    tokenExpiresAt?: number;
+    capturedAt?: number;
+  },
+): void {
+  const database = getDatabase();
+  const stmt = database.prepare(`
+    INSERT OR REPLACE INTO qwen_auth_sessions (
+      account_id, cookie, user_agent, bx_v, bx_ua, bx_umidtoken,
+      sec_ch_ua, sec_ch_ua_mobile, sec_ch_ua_platform, version,
+      user_id, token_expires_at, captured_at, updated_at
+    ) VALUES (
+      ?, ?, ?, ?, ?, ?,
+      ?, ?, ?, ?,
+      ?, ?, ?, datetime('now')
+    )
+  `);
+  stmt.run(
+    accountId,
+    session.cookie,
+    session.userAgent,
+    session.bxV || "2.5.37",
+    session.bxUa || "",
+    session.bxUmidtoken || "",
+    session.secChUa || null,
+    session.secChUaMobile || null,
+    session.secChUaPlatform || null,
+    session.version || null,
+    session.userId || null,
+    session.tokenExpiresAt || null,
+    session.capturedAt ?? Date.now(),
+  );
+}
+
+export function getValidAuthSession(
+  accountId: string,
+  maxAgeMs = 30 * 24 * 60 * 60 * 1000,
+): PersistedAuthSession | null {
+  const database = getDatabase();
+  const row = database
+    .prepare(
+      `SELECT account_id, cookie, user_agent, bx_v, bx_ua, bx_umidtoken,
+              sec_ch_ua, sec_ch_ua_mobile, sec_ch_ua_platform, version,
+              user_id, token_expires_at, captured_at
+       FROM qwen_auth_sessions WHERE account_id = ?`,
+    )
+    .get(accountId) as any;
+
+  if (!row) return null;
+
+  const capturedAt = Number(row.captured_at) || 0;
+  if (capturedAt <= 0 || Date.now() - capturedAt > maxAgeMs) {
+    return null;
+  }
+
+  if (row.token_expires_at) {
+    const tokenExpMs = Number(row.token_expires_at) * 1000;
+    // Safety margin of 5 minutes before token expires
+    if (tokenExpMs <= Date.now() + 5 * 60 * 1000) {
+      return null;
+    }
+  }
+
+  // Ensure critical fields are non-empty
+  if (!row.cookie || !row.user_agent || !row.bx_v || !row.bx_ua || !row.bx_umidtoken) {
+    return null;
+  }
+
+  return {
+    accountId: row.account_id,
+    cookie: row.cookie,
+    userAgent: row.user_agent,
+    bxV: row.bx_v,
+    bxUa: row.bx_ua,
+    bxUmidtoken: row.bx_umidtoken,
+    secChUa: row.sec_ch_ua || undefined,
+    secChUaMobile: row.sec_ch_ua_mobile || undefined,
+    secChUaPlatform: row.sec_ch_ua_platform || undefined,
+    version: row.version || undefined,
+    userId: row.user_id || undefined,
+    tokenExpiresAt: row.token_expires_at ? Number(row.token_expires_at) : undefined,
+    capturedAt,
+  };
+}
+
+export function deleteAuthSession(accountId: string): void {
+  const database = getDatabase();
+  database.prepare("DELETE FROM qwen_auth_sessions WHERE account_id = ?").run(accountId);
+}

package/src/core/paths.ts

@@ -86,12 +86,6 @@ export function resolveDataDir(options?: ResolveDataDirOptions): string {
   // 2. Automated test isolation
   const isTest = options?.isNodeTest ?? isRunningUnderNodeTest();
   if (isTest) {
-    if (options?.localDataExists === false) {
-      return path.resolve("data-test");
-    }
-    if (fs.existsSync(path.resolve("data"))) {
-      return path.resolve("data");
-    }
     return path.resolve("data-test");
   }
   // 3. Local repository checkout (development mode)

package/src/core/version.ts

@@ -0,0 +1,22 @@
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+let cachedVersion = "";
+
+export function getAppVersion(): string {
+  if (cachedVersion) return cachedVersion;
+  try {
+    const currentDir = path.dirname(fileURLToPath(import.meta.url));
+    const pkgPath = path.resolve(currentDir, "../../package.json");
+    if (fs.existsSync(pkgPath)) {
+      const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf-8"));
+      if (pkg.version) {
+        cachedVersion = `v${pkg.version}`;
+        return cachedVersion;
+      }
+    }
+  } catch {}
+  cachedVersion = "v1.4.0";
+  return cachedVersion;
+}

package/src/routes/chat/retry-policy.ts

@@ -479,11 +479,15 @@ export function classifyRetryAction(
   // Agent instructions ride ONLY the account-level personalization. An
   // unconfirmed sync means this account cannot serve the request as-is —
   // rotate to another account (each attempt re-syncs on its own account).
+  // Park the failing account with PersonalizationFailed cooldown so it does
+  // not enter an infinite ping-pong loop when multiple accounts fail.
   if (err instanceof PersonalizationSyncError) {
     return makeRetryAction("personalization_sync_failed", {
       switchAccount: true,
       forceNewChat: true,
       retryAfterMs: baseDelayMs,
+      accountCooldownMs: config.concurrency.initFailureCooldownMs,
+      accountCooldownReason: "PersonalizationFailed",
     });
   }
 

package/src/routes/upload.ts

@@ -356,16 +356,37 @@ async function getSTSToken(
       body: JSON.stringify({ filename, filesize: String(filesize), filetype }),
     });
 
-  let response = await doFetch(headers);
+  let data: any = null;
+  const { loadAccounts } = await import("../core/accounts.ts");
+  const resolvedId = accountId ?? loadAccounts()[0]?.id;
 
-  if (!response.ok) {
-    const errorText = await response.text().catch(() => "");
-    throw new Error(
-      `STS token request failed: ${response.status} ${errorText.substring(0, 200)}`,
-    );
+  if (!isAuthMockEnabled() && resolvedId) {
+    try {
+      const { requestQwenTextInBrowser, buildCapturedQwenHeaders } =
+        await import("../services/qwen.ts");
+      const browserRes = await requestQwenTextInBrowser(
+        resolvedId,
+        "POST",
+        "/api/v2/files/getstsToken",
+        buildCapturedQwenHeaders(headers, { referer: qwenUrl("/") }),
+        JSON.stringify({ filename, filesize: String(filesize), filetype }),
+      );
+      if (browserRes.ok) {
+        data = await browserRes.json().catch(() => null);
+      }
+    } catch {}
   }
 
-  let data = await response.json().catch(() => null);
+  if (!data?.success) {
+    const response = await doFetch(headers);
+    if (!response.ok) {
+      const errorText = await response.text().catch(() => "");
+      throw new Error(
+        `STS token request failed: ${response.status} ${errorText.substring(0, 200)}`,
+      );
+    }
+    data = await response.json().catch(() => null);
+  }
   const is401 =
     data?.success === false &&
     (data?.data?.code === "Unauthorized" ||
@@ -389,9 +410,9 @@ async function getSTSToken(
         headers["bx-v"] = fresh.bxV;
         if (fresh.bxUa) headers["bx-ua"] = fresh.bxUa;
         if (fresh.bxUmidtoken) headers["bx-umidtoken"] = fresh.bxUmidtoken;
-        response = await doFetch(headers);
-        if (response.ok) {
-          data = await response.json().catch(() => null);
+        const retryRes = await doFetch(headers);
+        if (retryRes.ok) {
+          data = await retryRes.json().catch(() => null);
         }
       }
     } catch (refreshErr) {