qwenproxy-cli 1.4.7 → 1.5.0

package/dist/index.js

@@ -1608,6 +1608,7 @@ function runMigrations(db2) {
     "sec_ch_ua_mobile TEXT",
     "sec_ch_ua_platform TEXT",
     "version TEXT",
+    "refresh_token TEXT",
     "captured_at INTEGER DEFAULT 0"
   ];
   for (const col of authSessionCols) {
@@ -1686,11 +1687,11 @@ function saveAuthSession(accountId, session) {
     INSERT OR REPLACE INTO qwen_auth_sessions (
       account_id, cookie, user_agent, bx_v, bx_ua, bx_umidtoken,
       sec_ch_ua, sec_ch_ua_mobile, sec_ch_ua_platform, version,
-      user_id, token_expires_at, captured_at, updated_at
+      user_id, token_expires_at, refresh_token, captured_at, updated_at
     ) VALUES (
       ?, ?, ?, ?, ?, ?,
       ?, ?, ?, ?,
-      ?, ?, ?, datetime('now')
+      ?, ?, ?, ?, datetime('now')
     )
   `);
   stmt.run(
@@ -1706,6 +1707,7 @@ function saveAuthSession(accountId, session) {
     session.version || null,
     session.userId || null,
     session.tokenExpiresAt || null,
+    session.refreshToken || null,
     session.capturedAt ?? Date.now()
   );
 }
@@ -1714,7 +1716,7 @@ function getValidAuthSession(accountId, maxAgeMs = 30 * 24 * 60 * 60 * 1e3) {
   const row = database.prepare(
     `SELECT account_id, cookie, user_agent, bx_v, bx_ua, bx_umidtoken,
               sec_ch_ua, sec_ch_ua_mobile, sec_ch_ua_platform, version,
-              user_id, token_expires_at, captured_at
+              user_id, token_expires_at, refresh_token, captured_at
        FROM qwen_auth_sessions WHERE account_id = ?`
   ).get(accountId);
   if (!row) return null;
@@ -1722,7 +1724,7 @@ function getValidAuthSession(accountId, maxAgeMs = 30 * 24 * 60 * 60 * 1e3) {
   if (capturedAt <= 0 || Date.now() - capturedAt > maxAgeMs) {
     return null;
   }
-  if (row.token_expires_at) {
+  if (!row.refresh_token && row.token_expires_at) {
     const tokenExpMs = Number(row.token_expires_at) * 1e3;
     if (tokenExpMs <= Date.now() + 5 * 60 * 1e3) {
       return null;
@@ -1744,6 +1746,7 @@ function getValidAuthSession(accountId, maxAgeMs = 30 * 24 * 60 * 60 * 1e3) {
     version: row.version || void 0,
     userId: row.user_id || void 0,
     tokenExpiresAt: row.token_expires_at ? Number(row.token_expires_at) : void 0,
+    refreshToken: row.refresh_token || void 0,
     capturedAt
   };
 }
@@ -2983,7 +2986,15 @@ function defaultCooldownDurationMs() {
   return computeQuotaCooldownMs(Date.now());
 }
 function markAccountRateLimited(accountId, cooldownMs, reason, options = {}) {
+  if (cooldownMs !== void 0 && cooldownMs <= 0) {
+    clearAccountCooldown(accountId);
+    return;
+  }
   const duration = cooldownMs ?? defaultCooldownDurationMs();
+  if (duration <= 0) {
+    clearAccountCooldown(accountId);
+    return;
+  }
   const until = Date.now() + duration;
   const cooldownReason = reason ?? "RateLimited";
   cooldowns.set(accountId, {
@@ -3983,7 +3994,8 @@ function buildQwenRequestHeaders(opts) {
     "bx-v": opts.bxV || "2.5.37",
     source: "web",
     version: opts.version || getQwenWebVersion(),
-    timezone: opts.extra?.timezone || (/* @__PURE__ */ new Date()).toString().split(" (")[0],
+    timezone: opts.extra?.timezone || opts.extra?.Timezone || (/* @__PURE__ */ new Date()).toString().split(" (")[0],
+    Timezone: opts.extra?.Timezone || opts.extra?.timezone || (/* @__PURE__ */ new Date()).toString().split(" (")[0],
     // Use the real browser client-hints when captured (anti-hardcoded); fall
     // back to the static fingerprint otherwise.
     "sec-ch-ua": opts.secChUa || `"Google Chrome";v="${getChromeMajor()}", "Chromium";v="${getChromeMajor()}", "Not.A/Brand";v="99"`,
@@ -4269,6 +4281,7 @@ __export(playwright_exports, {
   parseCookiesForBrowser: () => parseCookiesForBrowser,
   pruneAllPlaywrightProfiles: () => pruneAllPlaywrightProfiles,
   prunePlaywrightProfileCaches: () => prunePlaywrightProfileCaches,
+  refreshAccountToken: () => refreshAccountToken,
   refreshHeaders: () => refreshHeaders,
   refreshHeadersWithProfileReset: () => refreshHeadersWithProfileReset,
   registerPlaywrightAccountForTests: () => registerPlaywrightAccountForTests,
@@ -5904,6 +5917,7 @@ async function loginToQwen(accountId, email, password) {
             secChUaPlatform: cache3.headers["sec-ch-ua-platform"] || void 0,
             version: cache3.headers["version"] || void 0,
             tokenExpiresAt: exp || void 0,
+            refreshToken: apiResult.refreshToken,
             capturedAt: Date.now()
           });
         }
@@ -5937,6 +5951,13 @@ async function loginToQwen(accountId, email, password) {
           markAccountHeadersReady(accountId);
           const { saveAuthSession: saveAuthSession2 } = await Promise.resolve().then(() => (init_database(), database_exports));
           const exp = parseJwtExpiry(tokenCookie.value);
+          let rTok = uiResult.refreshToken;
+          if (!rTok) {
+            try {
+              rTok = await page.evaluate(() => localStorage.getItem("refresh_token") || "") || void 0;
+            } catch {
+            }
+          }
           saveAuthSession2(accountId, {
             cookie: cookieStr,
             userAgent: cache3.headers["user-agent"] || "",
@@ -5948,6 +5969,7 @@ async function loginToQwen(accountId, email, password) {
             secChUaPlatform: cache3.headers["sec-ch-ua-platform"] || void 0,
             version: cache3.headers["version"] || void 0,
             tokenExpiresAt: exp || void 0,
+            refreshToken: rTok,
             capturedAt: Date.now()
           });
         }
@@ -6126,7 +6148,7 @@ async function loginViaApi(page, email, password) {
         });
         await page.reload({ waitUntil: "domcontentloaded" }).catch(() => {
         });
-        return { success: true };
+        return { success: true, token, refreshToken };
       }
     }
     return {
@@ -6369,6 +6391,137 @@ async function loginViaUi(page, email, password) {
     return { success: false, reason: err?.message || String(err) };
   }
 }
+async function refreshAccountToken(accountId) {
+  const page = accountPages.get(accountId);
+  if (!page || page.isClosed()) {
+    return { success: false, error: "Account page not active" };
+  }
+  const { getValidAuthSession: getValidAuthSession2, saveAuthSession: saveAuthSession2 } = await Promise.resolve().then(() => (init_database(), database_exports));
+  const session = getValidAuthSession2(accountId);
+  let refreshToken = session?.refreshToken;
+  if (!refreshToken) {
+    try {
+      refreshToken = await page.evaluate(() => localStorage.getItem("refresh_token") || "") || void 0;
+    } catch {
+    }
+  }
+  if (refreshToken) {
+    try {
+      const refreshResult = await page.evaluate(
+        async ({ rTok }) => {
+          try {
+            const response = await fetch("https://auth.qwen.ai/api/v2/auths/refresh", {
+              method: "GET",
+              credentials: "include",
+              headers: {
+                accept: "application/json, text/plain, */*",
+                source: "web",
+                version: "0.3.11",
+                "x-request-origin": "https://chat.qwen.ai",
+                timezone: (/* @__PURE__ */ new Date()).toString().split(" (")[0],
+                authorization: `Bearer ${rTok}`
+              }
+            });
+            const json2 = await response.json().catch(() => null);
+            return { ok: response.ok, status: response.status, data: json2 };
+          } catch (e) {
+            return { ok: false, error: e.message };
+          }
+        },
+        { rTok: refreshToken }
+      );
+      const json = refreshResult?.data;
+      if (json && json.success === true && json.data) {
+        const newAccessToken = json.data.access_token || json.data.token;
+        const newRefreshToken = json.data.refresh_token || refreshToken;
+        if (newAccessToken) {
+          await page.context().addCookies([
+            {
+              name: "token",
+              value: newAccessToken,
+              domain: ".qwen.ai",
+              path: "/",
+              expires: Math.floor(Date.now() / 1e3) + 31536e3,
+              httpOnly: false,
+              secure: true,
+              sameSite: "Lax"
+            }
+          ]);
+          await page.evaluate(
+            ({ tok, rTok }) => {
+              try {
+                localStorage.removeItem("qwen_token_logged_out_marker");
+                localStorage.setItem("token", tok);
+                localStorage.setItem("access_token", tok);
+                if (rTok) localStorage.setItem("refresh_token", rTok);
+                document.cookie = `token=${encodeURIComponent(tok)}; path=/; domain=.qwen.ai; max-age=31536000`;
+              } catch {
+              }
+            },
+            { tok: newAccessToken, rTok: newRefreshToken }
+          ).catch(() => {
+          });
+          const liveCookies = await page.context().cookies();
+          const cookieStr = liveCookies.map((c) => `${c.name}=${c.value}`).join("; ");
+          const cache3 = getHeaderCache(accountId);
+          cache3.headers.cookie = cookieStr;
+          cache3.lastRefresh = Date.now();
+          markAccountHeadersReady(accountId);
+          saveAuthSession2(accountId, {
+            cookie: cookieStr,
+            userAgent: cache3.headers["user-agent"] || session?.userAgent || "",
+            bxV: cache3.headers["bx-v"] || session?.bxV || "2.5.37",
+            bxUa: cache3.headers["bx-ua"] || session?.bxUa || "",
+            bxUmidtoken: cache3.headers["bx-umidtoken"] || session?.bxUmidtoken || "",
+            secChUa: cache3.headers["sec-ch-ua"] || session?.secChUa,
+            secChUaMobile: cache3.headers["sec-ch-ua-mobile"] || session?.secChUaMobile,
+            secChUaPlatform: cache3.headers["sec-ch-ua-platform"] || session?.secChUaPlatform,
+            version: cache3.headers["version"] || session?.version,
+            userId: session?.userId,
+            tokenExpiresAt: parseJwtExpiry(newAccessToken) || void 0,
+            refreshToken: newRefreshToken,
+            capturedAt: Date.now()
+          });
+          return { success: true, token: newAccessToken };
+        }
+      }
+    } catch {
+    }
+  }
+  const { getAccountCredentials: getAccountCredentials2 } = await Promise.resolve().then(() => (init_accounts(), accounts_exports));
+  const creds = getAccountCredentials2(accountId);
+  if (creds && creds.email && creds.password) {
+    const apiResult = await loginViaApi(page, creds.email, creds.password);
+    if (apiResult.success) {
+      const liveCookies = await page.context().cookies();
+      const tokenCookie = liveCookies.find((c) => c.name === "token");
+      if (tokenCookie) {
+        const cookieStr = liveCookies.map((c) => `${c.name}=${c.value}`).join("; ");
+        const cache3 = getHeaderCache(accountId);
+        cache3.headers.cookie = cookieStr;
+        cache3.lastRefresh = Date.now();
+        markAccountHeadersReady(accountId);
+        saveAuthSession2(accountId, {
+          cookie: cookieStr,
+          userAgent: cache3.headers["user-agent"] || session?.userAgent || "",
+          bxV: cache3.headers["bx-v"] || session?.bxV || "2.5.37",
+          bxUa: cache3.headers["bx-ua"] || session?.bxUa || "",
+          bxUmidtoken: cache3.headers["bx-umidtoken"] || session?.bxUmidtoken || "",
+          secChUa: cache3.headers["sec-ch-ua"] || session?.secChUa,
+          secChUaMobile: cache3.headers["sec-ch-ua-mobile"] || session?.secChUaMobile,
+          secChUaPlatform: cache3.headers["sec-ch-ua-platform"] || session?.secChUaPlatform,
+          version: cache3.headers["version"] || session?.version,
+          userId: session?.userId,
+          tokenExpiresAt: parseJwtExpiry(tokenCookie.value) || void 0,
+          refreshToken: apiResult.refreshToken,
+          capturedAt: Date.now()
+        });
+        return { success: true, token: tokenCookie.value };
+      }
+    }
+  }
+  return { success: false, error: "Could not refresh or re-authenticate token" };
+}
 async function captureQwenHeaders(accountId, pageOverride, timeoutMs = config.timeouts.headers, triggerGraceMs = HEADER_CAPTURE_TRIGGER_GRACE_MS) {
   const page = pageOverride ?? accountPages.get(accountId);
   if (!page || page.isClosed()) {
@@ -6885,16 +7038,9 @@ async function refreshHeadersInternal(accountId, timeoutMs = config.timeouts.hea
         }
       };
       if (forceReauth) {
-        const alreadyIn = await isPageLoggedIn(page, 2e3).catch(() => false);
-        if (alreadyIn) {
-          const liveCookies = await page.context().cookies();
-          if (liveCookies.some((c) => c.name === "token")) {
-            const cookieStr = liveCookies.map((c) => `${c.name}=${c.value}`).join("; ");
-            cache3.headers.cookie = cookieStr;
-            cache3.lastRefresh = Date.now();
-            markAccountHeadersReady(accountId);
-            return;
-          }
+        const refreshed = await refreshAccountToken(accountId);
+        if (refreshed.success) {
+          return;
         }
         await executeReauth();
       } else {
@@ -7330,50 +7476,15 @@ async function keepAlivePlaywrightAccount(accountId) {
     const now = Date.now();
     const currentUrl = page.url();
     const cookie = await getCookies(accountId);
-    if (cookie && isTokenExpiringSoon(cookie, 2)) {
-      try {
-        await page.evaluate(async () => {
-          await fetch("https://auth.qwen.ai/api/v2/auths/refresh", {
-            method: "GET",
-            credentials: "include"
-          }).catch(() => {
-          });
-          await fetch("/api/v1/auths/", {
-            method: "GET",
-            credentials: "include"
-          }).catch(() => {
-          });
-        }).catch(() => {
-        });
-        const liveCookies = await page.context().cookies();
-        const tokenCookie = liveCookies.find((c) => c.name === "token");
-        if (tokenCookie) {
-          const cookieStr = liveCookies.map((c) => `${c.name}=${c.value}`).join("; ");
-          const cache3 = getHeaderCache(accountId);
-          cache3.headers.cookie = cookieStr;
-          cache3.lastRefresh = Date.now();
-          markAccountHeadersReady(accountId);
-          lastKeepAliveNavigation.set(accountId, now);
-          touchAccountActivity(accountId);
-          return true;
-        }
-      } catch {
-      }
-      const loggedIn = await isPageLoggedIn(page, 2e3).catch(() => false);
-      if (!loggedIn) {
-        console.log(
-          `\u{1F493} [SessionKeeper] Account ${accountId} session expired; renewing session...`
-        );
-        try {
-          await refreshHeadersInternal(accountId, config.timeouts.headers, true);
-          lastKeepAliveNavigation.set(accountId, now);
-          touchAccountActivity(accountId);
-          return true;
-        } catch (err) {
-          console.warn(
-            `[SessionKeeper] Proactive session renewal failed for ${accountId}: ${getErrorMessage(err)}`
-          );
-        }
+    if (cookie && isTokenExpiringSoon(cookie, 5)) {
+      console.log(
+        `\u{1F493} [SessionKeeper] Account ${accountId} access token expiring soon (<5m); silently refreshing...`
+      );
+      const res = await refreshAccountToken(accountId);
+      if (res.success) {
+        lastKeepAliveNavigation.set(accountId, now);
+        touchAccountActivity(accountId);
+        return true;
       }
     }
     const lastNavigation = lastKeepAliveNavigation.get(accountId) ?? 0;
@@ -8985,8 +9096,11 @@ ${thought}`);
   }
   return sections.join("\n\n");
 }
+function isAnswerPhase(phase) {
+  return typeof phase === "string" && ANSWER_PHASES.has(phase);
+}
 function isThinkingPhase(phase) {
-  return phase === "think" || phase === "thinking_summary";
+  return typeof phase === "string" && THINKING_PHASES.has(phase);
 }
 function extractThinkingContent(delta) {
   if (Array.isArray(delta?.extra?.summary_title?.content) || Array.isArray(delta?.extra?.summary_thought?.content)) {
@@ -9077,9 +9191,25 @@ function buildUsage(accumulator) {
   }
   return usage;
 }
+var ANSWER_PHASES, THINKING_PHASES;
 var init_helpers = __esm({
   "src/routes/chat/helpers.ts"() {
     "use strict";
+    ANSWER_PHASES = /* @__PURE__ */ new Set([
+      "answer",
+      "deep_research_answer",
+      "ReportGeneration",
+      "PdfMdGen",
+      "image",
+      "image_generation",
+      "image_gen",
+      "t2i"
+    ]);
+    THINKING_PHASES = /* @__PURE__ */ new Set([
+      "think",
+      "thinking_summary",
+      "DeepThinking"
+    ]);
   }
 });
 
@@ -9253,18 +9383,18 @@ function classifyRetryAction(err, options) {
       switchAccount: true,
       forceNewChat: true,
       retryAfterMs: baseDelayMs,
-      accountCooldownMs: config.concurrency.initFailureCooldownMs,
+      accountCooldownMs: 0,
       accountCooldownReason: "PersonalizationFailed"
     });
   }
-  if (code === "createchatinvalidresponse" || code === "createchatfailed" || code === "unauthorized" || message.includes("401 n\xE3o autorizado") || message.includes("n\xE3o tem permiss\xE3o para acessar") || message.includes("401 unauthorized") || message.includes('"code":"unauthorized"') || message.includes('"code": "unauthorized"')) {
+  if (code === "createchatinvalidresponse" || code === "createchatfailed" || code === "unauthorized" || message.includes("401 n\xE3o autorizado") || message.includes("n\xE3o tem permiss\xE3o para acessar") || message.includes("401 unauthorized") || message.includes('"code":"unauthorized"') || message.includes('"code": "unauthorized"') || message.includes("token has expired")) {
     return makeRetryAction("account_initialization_failed", {
       switchAccount: true,
       forceNewChat: true,
       retryWithFullPrompt: true,
       retryAfterMs: Math.min(baseDelayMs, 1e3),
-      accountCooldownMs: config.concurrency.initFailureCooldownMs,
-      accountCooldownReason: "AuthInitFailed"
+      accountCooldownMs: 0,
+      accountCooldownReason: "AuthExpired"
     });
   }
   if (isCorruptedChatHistoryError(err)) {
@@ -9681,8 +9811,8 @@ async function requestCompletionsInBrowser(params) {
                     const choice = chunk?.choices?.[0];
                     const delta = choice?.delta;
                     const phase = delta?.phase;
-                    const isAnswerPhase = !phase || phase === "answer";
-                    if (choice?.finish_reason || delta?.status === "finished" && isAnswerPhase) {
+                    const isAnswerPhase2 = !phase || phase === "answer";
+                    if (choice?.finish_reason || delta?.status === "finished" && isAnswerPhase2) {
                       finished = true;
                       break;
                     }
@@ -10733,7 +10863,19 @@ async function createQwenChatSession(headers, model, accountId, chatMode = "thre
       } catch {
       }
     }
-    if (json?.data?.code === "Unauthorized" || json?.code === "Unauthorized" || rawLower.includes("unauthorized") || rawLower.includes("permission to access")) {
+    const isUnauthorized = json?.data?.code?.toLowerCase() === "unauthorized" || json?.code?.toLowerCase() === "unauthorized" || rawLower.includes("unauthorized") || rawLower.includes("permission to access") || rawLower.includes("token has expired") || rawLower.includes("401");
+    if (isUnauthorized) {
+      if (accountId) {
+        try {
+          const { refreshAccountToken: refreshAccountToken2 } = await Promise.resolve().then(() => (init_playwright(), playwright_exports));
+          const refreshed = await refreshAccountToken2(accountId);
+          if (refreshed.success) {
+            const { headers: freshHeaders } = await getQwenHeaders(false, accountId);
+            return createQwenChatSession(freshHeaders, model, accountId, chatMode);
+          }
+        } catch {
+        }
+      }
       throw new QwenUpstreamError(
         `Qwen create chat unauthorized: ${raw.substring(0, 300)}`,
         "Unauthorized",
@@ -11429,16 +11571,28 @@ async function requestQwenTextInBrowser(accountId, method, path21, headers, body
         });
         if (response2.status === 401) {
           try {
-            const refreshRes = await fetch("https://auth.qwen.ai/api/v2/auths/refresh", {
-              method: "GET",
-              credentials: "include",
-              signal: AbortSignal.timeout(3e3)
-            });
-            if (refreshRes.status === 200) {
+            const rTok = localStorage.getItem("refresh_token");
+            if (rTok) {
+              const refreshRes = await fetch("https://auth.qwen.ai/api/v2/auths/refresh", {
+                method: "GET",
+                credentials: "include",
+                headers: {
+                  accept: "application/json, text/plain, */*",
+                  source: "web",
+                  version: "0.3.11",
+                  "x-request-origin": "https://chat.qwen.ai",
+                  timezone: (/* @__PURE__ */ new Date()).toString().split(" (")[0],
+                  authorization: `Bearer ${rTok}`
+                },
+                signal: AbortSignal.timeout(5e3)
+              });
               const refreshJson = await refreshRes.json().catch(() => null);
-              if (refreshJson && refreshJson.success === true && refreshJson.data?.token) {
-                const freshTok = refreshJson.data.token;
+              const freshTok = refreshJson?.data?.access_token || refreshJson?.data?.token;
+              const nextRTok = refreshJson?.data?.refresh_token;
+              if (refreshJson?.success === true && freshTok) {
                 localStorage.setItem("token", freshTok);
+                localStorage.setItem("access_token", freshTok);
+                if (nextRTok) localStorage.setItem("refresh_token", nextRTok);
                 document.cookie = `token=${encodeURIComponent(freshTok)}; path=/; domain=.qwen.ai; max-age=31536000`;
                 if (headers2["authorization"] || headers2["Authorization"]) {
                   headers2["authorization"] = `Bearer ${freshTok}`;
@@ -11476,13 +11630,29 @@ async function requestQwenTextInBrowser(accountId, method, path21, headers, body
     }
   );
   const recoverOnTimeout = !options.noMutexRecovery;
-  const response = await withQwenBrowserPage(
+  let response = await withQwenBrowserPage(
     accountId,
     evaluateRequest,
     void 0,
     options.timeoutMs,
     recoverOnTimeout
   );
+  if (response.status === 401 && accountId) {
+    try {
+      const { refreshAccountToken: refreshAccountToken2 } = await Promise.resolve().then(() => (init_playwright(), playwright_exports));
+      const refreshed = await refreshAccountToken2(accountId);
+      if (refreshed.success) {
+        response = await withQwenBrowserPage(
+          accountId,
+          evaluateRequest,
+          void 0,
+          options.timeoutMs,
+          recoverOnTimeout
+        );
+      }
+    } catch {
+    }
+  }
   return new Response(response.raw, {
     status: response.status,
     headers: response.contentType ? { "content-type": response.contentType } : void 0
@@ -12005,7 +12175,11 @@ async function syncQwenRequestPersonalization(instruction, accountId, metadata =
     );
     try {
       currentSettings = null;
-      const { headers: freshHeaders } = await getQwenHeaders(true, accountId, true);
+      const { refreshAccountToken: refreshAccountToken2 } = await Promise.resolve().then(() => (init_playwright(), playwright_exports));
+      if (accountId) {
+        await refreshAccountToken2(accountId);
+      }
+      const { headers: freshHeaders } = await getQwenHeaders(false, accountId);
       requestHeaders = buildCapturedQwenHeaders(freshHeaders, {
         referer: qwenUrl("/settings/personalization")
       });
@@ -12691,8 +12865,18 @@ async function createQwenStreamInternal(prompt, enableThinking, modelId, forcedP
       );
     }
   };
+  let forceRefresh = options?.forceNewChat === true;
+  if (!forceRefresh && accountId) {
+    try {
+      const basic = await getBasicHeaders2(accountId);
+      if (isTokenExpiringSoon(basic.cookie, 3)) {
+        forceRefresh = true;
+      }
+    } catch {
+    }
+  }
   const captured = await getQwenHeaders(
-    options?.forceNewChat === true,
+    forceRefresh,
     accountId
   );
   ensureNotAborted();
@@ -12706,7 +12890,7 @@ async function createQwenStreamInternal(prompt, enableThinking, modelId, forcedP
   if (options && "chatSessionId" in options) {
     if (options.chatSessionId === null || options.chatSessionId === "") {
       const acquired = await acquireNewQwenChatSession(
-        headers,
+        activeHeaders,
         model,
         accountId,
         options?.chatMode ?? "thread"
@@ -12714,6 +12898,11 @@ async function createQwenStreamInternal(prompt, enableThinking, modelId, forcedP
       chatSessionId = acquired.chatId;
       leasedWarmChat = acquired.leasedFromPool;
       createdNewChat = true;
+      try {
+        const fresh = await getQwenHeaders(false, accountId);
+        activeHeaders = fresh.headers;
+      } catch {
+      }
     } else {
       chatSessionId = options.chatSessionId;
     }
@@ -12721,7 +12910,7 @@ async function createQwenStreamInternal(prompt, enableThinking, modelId, forcedP
     chatSessionId = captured.chatSessionId;
     if (!chatSessionId) {
       const acquired = await acquireNewQwenChatSession(
-        headers,
+        activeHeaders,
         model,
         accountId,
         options?.chatMode ?? "thread"
@@ -12729,6 +12918,11 @@ async function createQwenStreamInternal(prompt, enableThinking, modelId, forcedP
       chatSessionId = acquired.chatId;
       leasedWarmChat = acquired.leasedFromPool;
       createdNewChat = true;
+      try {
+        const fresh = await getQwenHeaders(false, accountId);
+        activeHeaders = fresh.headers;
+      } catch {
+      }
     }
   }
   ensureNotAborted();
@@ -13887,10 +14081,12 @@ async function getSTSToken(filename, filesize, filetype, headers, accountId) {
     }
     data = await response.json().catch(() => null);
   }
-  const is401 = data?.success === false && (data?.data?.code === "Unauthorized" || typeof data?.data?.details === "string" && data.data.details.includes("401"));
+  const codeLower = (data?.data?.code || data?.code || "").toLowerCase();
+  const detailsLower = (typeof data?.data?.details === "string" ? data.data.details : typeof data?.message === "string" ? data.message : "").toLowerCase();
+  const is401 = data?.success === false && (codeLower === "unauthorized" || detailsLower.includes("401") || detailsLower.includes("token has expired") || detailsLower.includes("unauthorized"));
   if (is401) {
     try {
-      const { refreshHeaders: refreshHeaders2 } = await Promise.resolve().then(() => (init_playwright(), playwright_exports));
+      const { refreshAccountToken: refreshAccountToken2 } = await Promise.resolve().then(() => (init_playwright(), playwright_exports));
       const { getBasicHeaders: getBasicHeaders3 } = await Promise.resolve().then(() => (init_auth_playwright(), auth_playwright_exports));
       const { loadAccounts: loadAccounts3 } = await Promise.resolve().then(() => (init_accounts(), accounts_exports));
       const resolvedId2 = accountId ?? loadAccounts3()[0]?.id;
@@ -13898,16 +14094,18 @@ async function getSTSToken(filename, filesize, filetype, headers, accountId) {
         console.warn(
           `[Upload] STS token 401 \u2014 refreshing session with re-auth and retrying...`
         );
-        await refreshHeaders2(resolvedId2, void 0, true);
-        const fresh = await getBasicHeaders3(resolvedId2);
-        headers.cookie = fresh.cookie;
-        headers["user-agent"] = fresh.userAgent;
-        headers["bx-v"] = fresh.bxV;
-        if (fresh.bxUa) headers["bx-ua"] = fresh.bxUa;
-        if (fresh.bxUmidtoken) headers["bx-umidtoken"] = fresh.bxUmidtoken;
-        const retryRes = await doFetch(headers);
-        if (retryRes.ok) {
-          data = await retryRes.json().catch(() => null);
+        const refreshResult = await refreshAccountToken2(resolvedId2);
+        if (refreshResult.success) {
+          const fresh = await getBasicHeaders3(resolvedId2);
+          headers.cookie = fresh.cookie;
+          headers["user-agent"] = fresh.userAgent;
+          headers["bx-v"] = fresh.bxV;
+          if (fresh.bxUa) headers["bx-ua"] = fresh.bxUa;
+          if (fresh.bxUmidtoken) headers["bx-umidtoken"] = fresh.bxUmidtoken;
+          const retryRes = await doFetch(headers);
+          if (retryRes.ok) {
+            data = await retryRes.json().catch(() => null);
+          }
         }
       }
     } catch (refreshErr) {
@@ -17022,15 +17220,26 @@ ${loopReminder}` : truncation.prompt;
       }
     }
     if (policy.reason === "account_initialization_failed") {
-      console.warn(
-        `\u26A0\uFE0F  [Chat] Account initialization failed | ${currentAccountEmail} | cooldown=${Math.round((policy.accountCooldownMs ?? 0) / 1e3)}s`
-      );
-      markAccountFailed(currentAccountId);
-      markAccountRateLimited(
-        currentAccountId,
-        policy.accountCooldownMs,
-        policy.accountCooldownReason
-      );
+      const cooldownMs = policy.accountCooldownMs ?? 0;
+      if (cooldownMs > 0) {
+        console.warn(
+          `\u26A0\uFE0F  [Chat] Account initialization failed | ${currentAccountEmail} | cooldown=${Math.round(cooldownMs / 1e3)}s`
+        );
+        markAccountFailed(currentAccountId);
+        markAccountRateLimited(
+          currentAccountId,
+          cooldownMs,
+          policy.accountCooldownReason
+        );
+      } else {
+        console.warn(
+          `\u26A0\uFE0F  [Chat] Account auth expired/retryable | ${currentAccountEmail} | rotating without cooldown`
+        );
+        if (policy.accountCooldownReason === "AuthExpired") {
+          Promise.resolve().then(() => (init_playwright(), playwright_exports)).then(({ refreshAccountToken: refreshAccountToken2 }) => refreshAccountToken2(currentAccountId)).catch(() => {
+          });
+        }
+      }
       return { success: false, error: err };
     }
     if (policy.retryable && shouldSwitchAccount && !isSingleAccount && accountSwitches < maxAccountSwitches) {
@@ -17039,7 +17248,7 @@ ${loopReminder}` : truncation.prompt;
         console.warn(
           `\u{1F504} [Chat] Switching account after ${policy.reason} | ${currentAccountEmail} -> ${maskEmail(nextAccount.email)}`
         );
-        if (policy.accountCooldownMs || policy.accountCooldownReason) {
+        if ((policy.accountCooldownMs ?? 0) > 0) {
           markAccountRateLimited(
             currentAccountId,
             policy.accountCooldownMs,
@@ -19922,7 +20131,7 @@ async function processNonStreamingResponse(params) {
                   foundStr = true;
                 }
               }
-            } else if (delta.phase === "answer") {
+            } else if (isAnswerPhase(delta.phase)) {
               isThinkingChunk = false;
               if (delta.content !== void 0) {
                 const newContent = delta.content || "";
@@ -20661,13 +20870,17 @@ async function processStreamingResponse(params) {
           return false;
         }
         const switchAccount = policy.switchAccount && !retryInvalidInputOnSameAccount;
-        if (switchAccount && (policy.accountCooldownMs || policy.accountCooldownReason)) {
+        if (switchAccount && (policy.accountCooldownMs ?? 0) > 0) {
           markAccountRateLimited(
             currentAccountId,
             policy.accountCooldownMs,
             policy.accountCooldownReason || "StreamRetry"
           );
         }
+        if (policy.accountCooldownReason === "AuthExpired") {
+          Promise.resolve().then(() => (init_playwright(), playwright_exports)).then(({ refreshAccountToken: refreshAccountToken2 }) => refreshAccountToken2(currentAccountId)).catch(() => {
+          });
+        }
         retryContext.releaseAccountLease?.();
         retryContext.releaseAccountLease = null;
         await reader.cancel().catch(() => void 0);
@@ -20911,7 +21124,7 @@ async function processStreamingResponse(params) {
                   }
                 );
               }
-              if (delta.phase === "answer" && delta.status === "finished") {
+              if (isAnswerPhase(delta.phase) && delta.status === "finished") {
                 upstreamDone = true;
                 if (!clientDisconnected) flushWrites();
                 break;
@@ -20934,7 +21147,7 @@ async function processStreamingResponse(params) {
                     foundStr = true;
                   }
                 }
-              } else if (delta.phase === "answer") {
+              } else if (isAnswerPhase(delta.phase)) {
                 isThinkingChunk = false;
                 if (delta.content !== void 0) {
                   const newContent = delta.content || "";
@@ -21312,7 +21525,7 @@ Please retry your tool call(s) with correct JSON and valid tool names from the a
               if (!delta) {
                 continue;
               }
-              if (delta.phase === "answer" && delta.status === "finished") {
+              if (isAnswerPhase(delta.phase) && delta.status === "finished") {
                 upstreamDone = true;
                 break retryReadLoop;
               }
@@ -25506,11 +25719,14 @@ function recordServerLog(level, text) {
     }
     line = line.replace(/^(?:\[?(?:INFO|WARN|WARNING|ERROR|ERR|DEBUG)\]?\s+)+/i, "").replace(/([\u{1F300}-\u{1FAFF}\u{2600}-\u{27BF}\u{2300}-\u{23FF}]\uFE0F?)\s{2,}/gu, "$1 ");
     if (!line) continue;
-    const isDuplicate = logHistory.slice(-10).some((entry2) => entry2.time === time && entry2.level === level && entry2.message === line);
+    const now = Date.now();
+    const isDuplicate = logHistory.slice(-10).some(
+      (entry2) => (entry2.time === time || entry2._ts && now - entry2._ts < 1500) && entry2.level === level && entry2.message === line
+    );
     if (isDuplicate) {
       continue;
     }
-    const entry = { time, level, message: line };
+    const entry = { time, level, message: line, _ts: now };
     logHistory.push(entry);
     if (logHistory.length > MAX_LOG_HISTORY) {
       logHistory.shift();
@@ -25673,7 +25889,7 @@ function getAppVersion() {
     }
   } catch {
   }
-  cachedVersion = "v1.4.7";
+  cachedVersion = "v1.5.0";
   return cachedVersion;
 }
 var cachedVersion;