qwenproxy-cli 1.5.3 → 1.6.0

package/dist/clean-cache.js

@@ -296,7 +296,26 @@ function runMigrations(db2) {
       instruction_hash TEXT NOT NULL,
       updated_at TEXT NOT NULL DEFAULT (datetime('now'))
     );
+
+    CREATE TABLE IF NOT EXISTS account_daily_usage (
+      account_id TEXT NOT NULL,
+      date_utc TEXT NOT NULL,
+      prompt_tokens INTEGER NOT NULL DEFAULT 0,
+      completion_tokens INTEGER NOT NULL DEFAULT 0,
+      weighted_tokens REAL NOT NULL DEFAULT 0,
+      total_tokens INTEGER NOT NULL DEFAULT 0,
+      turns_count INTEGER NOT NULL DEFAULT 0,
+      updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+      PRIMARY KEY (account_id, date_utc)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_daily_usage_date ON account_daily_usage(date_utc);
   `);
+  try {
+    db2.exec(`ALTER TABLE account_daily_usage ADD COLUMN weighted_tokens REAL DEFAULT 0;`);
+  } catch (err) {
+    if (!isDuplicateColumnError(err)) throw err;
+  }
   try {
     db2.exec(
       `ALTER TABLE accounts ADD COLUMN cooldown_until INTEGER DEFAULT 0;`
@@ -397,7 +416,11 @@ function saveAuthSession(accountId, session) {
     ) VALUES (
       ?, ?, ?, ?, ?, ?,
       ?, ?, ?, ?,
-      ?, ?, ?, ?, datetime('now')
+      COALESCE(?, (SELECT user_id FROM qwen_auth_sessions WHERE account_id = ?)),
+      ?,
+      COALESCE(?, (SELECT refresh_token FROM qwen_auth_sessions WHERE account_id = ?)),
+      ?,
+      datetime('now')
     )
   `);
   stmt.run(
@@ -412,8 +435,10 @@ function saveAuthSession(accountId, session) {
     session.secChUaPlatform || null,
     session.version || null,
     session.userId || null,
+    accountId,
     session.tokenExpiresAt || null,
     session.refreshToken || null,
+    accountId,
     session.capturedAt ?? Date.now()
   );
 }
@@ -4306,6 +4331,137 @@ async function loginViaUi(page, email, password) {
     return { success: false, reason: err?.message || String(err) };
   }
 }
+async function refreshAccountToken(accountId) {
+  const page = accountPages.get(accountId);
+  if (!page || page.isClosed()) {
+    return { success: false, error: "Account page not active" };
+  }
+  const { getValidAuthSession: getValidAuthSession2, saveAuthSession: saveAuthSession2 } = await Promise.resolve().then(() => (init_database(), database_exports));
+  const session = getValidAuthSession2(accountId);
+  let refreshToken = session?.refreshToken;
+  if (!refreshToken) {
+    try {
+      refreshToken = await page.evaluate(() => localStorage.getItem("refresh_token") || "") || void 0;
+    } catch {
+    }
+  }
+  if (refreshToken) {
+    try {
+      const refreshResult = await page.evaluate(
+        async ({ rTok }) => {
+          try {
+            const response = await fetch("https://auth.qwen.ai/api/v2/auths/refresh", {
+              method: "GET",
+              credentials: "include",
+              headers: {
+                accept: "application/json, text/plain, */*",
+                source: "web",
+                version: "0.3.11",
+                "x-request-origin": "https://chat.qwen.ai",
+                timezone: (/* @__PURE__ */ new Date()).toString().split(" (")[0],
+                authorization: `Bearer ${rTok}`
+              }
+            });
+            const json2 = await response.json().catch(() => null);
+            return { ok: response.ok, status: response.status, data: json2 };
+          } catch (e) {
+            return { ok: false, error: e.message };
+          }
+        },
+        { rTok: refreshToken }
+      );
+      const json = refreshResult?.data;
+      if (json && json.success === true && json.data) {
+        const newAccessToken = json.data.access_token || json.data.token;
+        const newRefreshToken = json.data.refresh_token || refreshToken;
+        if (newAccessToken) {
+          await page.context().addCookies([
+            {
+              name: "token",
+              value: newAccessToken,
+              domain: ".qwen.ai",
+              path: "/",
+              expires: Math.floor(Date.now() / 1e3) + 31536e3,
+              httpOnly: false,
+              secure: true,
+              sameSite: "Lax"
+            }
+          ]);
+          await page.evaluate(
+            ({ tok, rTok }) => {
+              try {
+                localStorage.removeItem("qwen_token_logged_out_marker");
+                localStorage.setItem("token", tok);
+                localStorage.setItem("access_token", tok);
+                if (rTok) localStorage.setItem("refresh_token", rTok);
+                document.cookie = `token=${encodeURIComponent(tok)}; path=/; domain=.qwen.ai; max-age=31536000`;
+              } catch {
+              }
+            },
+            { tok: newAccessToken, rTok: newRefreshToken }
+          ).catch(() => {
+          });
+          const liveCookies = await page.context().cookies();
+          const cookieStr = liveCookies.map((c) => `${c.name}=${c.value}`).join("; ");
+          const cache = getHeaderCache(accountId);
+          cache.headers.cookie = cookieStr;
+          cache.lastRefresh = Date.now();
+          markAccountHeadersReady(accountId);
+          saveAuthSession2(accountId, {
+            cookie: cookieStr,
+            userAgent: cache.headers["user-agent"] || session?.userAgent || "",
+            bxV: cache.headers["bx-v"] || session?.bxV || "2.5.37",
+            bxUa: cache.headers["bx-ua"] || session?.bxUa || "",
+            bxUmidtoken: cache.headers["bx-umidtoken"] || session?.bxUmidtoken || "",
+            secChUa: cache.headers["sec-ch-ua"] || session?.secChUa,
+            secChUaMobile: cache.headers["sec-ch-ua-mobile"] || session?.secChUaMobile,
+            secChUaPlatform: cache.headers["sec-ch-ua-platform"] || session?.secChUaPlatform,
+            version: cache.headers["version"] || session?.version,
+            userId: session?.userId,
+            tokenExpiresAt: parseJwtExpiry(newAccessToken) || void 0,
+            refreshToken: newRefreshToken,
+            capturedAt: Date.now()
+          });
+          return { success: true, token: newAccessToken };
+        }
+      }
+    } catch {
+    }
+  }
+  const { getAccountCredentials: getAccountCredentials2 } = await Promise.resolve().then(() => (init_accounts(), accounts_exports));
+  const creds = getAccountCredentials2(accountId);
+  if (creds && creds.email && creds.password) {
+    const apiResult = await loginViaApi(page, creds.email, creds.password);
+    if (apiResult.success) {
+      const liveCookies = await page.context().cookies();
+      const tokenCookie = liveCookies.find((c) => c.name === "token");
+      if (tokenCookie) {
+        const cookieStr = liveCookies.map((c) => `${c.name}=${c.value}`).join("; ");
+        const cache = getHeaderCache(accountId);
+        cache.headers.cookie = cookieStr;
+        cache.lastRefresh = Date.now();
+        markAccountHeadersReady(accountId);
+        saveAuthSession2(accountId, {
+          cookie: cookieStr,
+          userAgent: cache.headers["user-agent"] || session?.userAgent || "",
+          bxV: cache.headers["bx-v"] || session?.bxV || "2.5.37",
+          bxUa: cache.headers["bx-ua"] || session?.bxUa || "",
+          bxUmidtoken: cache.headers["bx-umidtoken"] || session?.bxUmidtoken || "",
+          secChUa: cache.headers["sec-ch-ua"] || session?.secChUa,
+          secChUaMobile: cache.headers["sec-ch-ua-mobile"] || session?.secChUaMobile,
+          secChUaPlatform: cache.headers["sec-ch-ua-platform"] || session?.secChUaPlatform,
+          version: cache.headers["version"] || session?.version,
+          userId: session?.userId,
+          tokenExpiresAt: parseJwtExpiry(tokenCookie.value) || void 0,
+          refreshToken: apiResult.refreshToken,
+          capturedAt: Date.now()
+        });
+        return { success: true, token: tokenCookie.value };
+      }
+    }
+  }
+  return { success: false, error: "Could not refresh or re-authenticate token" };
+}
 async function captureQwenHeaders(accountId, pageOverride, timeoutMs = config.timeouts.headers, triggerGraceMs = HEADER_CAPTURE_TRIGGER_GRACE_MS) {
   const page = pageOverride ?? accountPages.get(accountId);
   if (!page || page.isClosed()) {
@@ -4459,6 +4615,11 @@ async function captureQwenHeaders(accountId, pageOverride, timeoutMs = config.ti
           const { saveAuthSession: saveAuthSession2 } = await Promise.resolve().then(() => (init_database(), database_exports));
           const { parseJwtExpiry: parseJwtExpiry2 } = await Promise.resolve().then(() => (init_jwt(), jwt_exports));
           const tokenExpiry = parseJwtExpiry2(capturedHeaders.cookie);
+          let rTok;
+          try {
+            rTok = (await page.evaluate(() => localStorage.getItem("refresh_token") || "")).trim() || void 0;
+          } catch {
+          }
           saveAuthSession2(accountId, {
             cookie: capturedHeaders.cookie,
             userAgent: capturedHeaders["user-agent"],
@@ -4470,6 +4631,7 @@ async function captureQwenHeaders(accountId, pageOverride, timeoutMs = config.ti
             secChUaPlatform: capturedHeaders["sec-ch-ua-platform"],
             version: capturedHeaders["version"],
             tokenExpiresAt: tokenExpiry || void 0,
+            refreshToken: rTok,
             capturedAt: Date.now()
           });
         } catch {
@@ -4501,38 +4663,57 @@ async function captureQwenHeaders(accountId, pageOverride, timeoutMs = config.ti
         const isAuthUrl = currentUrl.includes("/auth") || currentUrl.includes("/login");
         const isSuspectedGuest = isAuthUrl || attempt >= 2 && !await isPageLoggedIn(page, 5e3);
         if (isSuspectedGuest) {
-          const { getAccountCredentials: getAccountCredentials2 } = await Promise.resolve().then(() => (init_accounts(), accounts_exports));
-          const creds = getAccountCredentials2(accountId);
-          if (creds && creds.email && creds.password) {
-            console.warn(
-              `\u26A0\uFE0F  [Playwright] Session expired or guest state detected during header capture for ${accountId}; re-authenticating...`
+          const silentRefresh = await refreshAccountToken(accountId);
+          if (silentRefresh.success) {
+            console.log(
+              `\u26A1 [Playwright] Token refreshed silently during header capture for ${accountId}`
             );
-            armOverallDeadline();
-            const ok = await loginToQwen(accountId, creds.email, creds.password);
-            if (ok) {
+            if (isAuthUrl) {
               await page.goto(qwenUrl("/"), {
                 waitUntil: "domcontentloaded",
                 timeout: Math.min(config.timeouts.navigation, timeoutMs)
               });
-              await sleep2(2e3);
+              await sleep2(1500);
+            }
+            if (await isPageLoggedIn(page, 5e3)) {
+              armOverallDeadline();
             }
-            if (!ok || !await isPageLoggedIn(page, 6e3)) {
+          }
+          const stillSuspected = !silentRefresh.success || !await isPageLoggedIn(page, 2e3);
+          if (stillSuspected) {
+            const { getAccountCredentials: getAccountCredentials2 } = await Promise.resolve().then(() => (init_accounts(), accounts_exports));
+            const creds = getAccountCredentials2(accountId);
+            if (creds && creds.email && creds.password) {
+              console.warn(
+                `\u26A0\uFE0F  [Playwright] Session expired or guest state detected during header capture for ${accountId}; re-authenticating...`
+              );
+              armOverallDeadline();
+              const ok = await loginToQwen(accountId, creds.email, creds.password);
+              if (ok) {
+                await page.goto(qwenUrl("/"), {
+                  waitUntil: "domcontentloaded",
+                  timeout: Math.min(config.timeouts.navigation, timeoutMs)
+                });
+                await sleep2(2e3);
+              }
+              if (!ok || !await isPageLoggedIn(page, 6e3)) {
+                settle(
+                  new Error(
+                    `Header capture failed for ${accountId}: re-login after session expiry did not succeed`
+                  )
+                );
+                return;
+              }
+              armOverallDeadline();
+              if (settled || page.isClosed()) return;
+            } else {
               settle(
                 new Error(
-                  `Header capture failed for ${accountId}: re-login after session expiry did not succeed`
+                  `Header capture failed for ${accountId}: session expired and no credentials available for re-login (run 'qpx login')`
                 )
               );
               return;
             }
-            armOverallDeadline();
-            if (settled || page.isClosed()) return;
-          } else {
-            settle(
-              new Error(
-                `Header capture failed for ${accountId}: session expired and no credentials available for re-login (run 'qpx login')`
-              )
-            );
-            return;
           }
         }
         if (settled || page.isClosed()) return;
@@ -5022,6 +5203,7 @@ function cleanupPlaywrightAccountState(accountId) {
   cookieCaches.delete(accountId);
   lastAccountActivity.delete(accountId);
   lastKeepAliveNavigation.delete(accountId);
+  lastProactiveTokenRefresh.delete(accountId);
   clearFingerprintCache(accountId);
   unmarkAccountHeadersReady(accountId);
 }
@@ -5096,7 +5278,7 @@ async function closePlaywrightForAccount(accountId) {
     release();
   }
 }
-var requireLocal, contextInitHooks, ACCOUNT_MUTEX_MAX_HOLD_MS, accountMutexes, accountContexts, accountPages, inFlightAccountInits, headerCaches, HEADER_CACHE_TTL, COOKIE_CACHE_TTL, cookieCaches, lastAccountActivity, lastKeepAliveNavigation, profileResetQueue, profileResetChain, closingAllPlaywright, sleep2, HEADER_CAPTURE_SETTLE_MS, PLAYWRIGHT_MUTEX_WAIT_MS, ACCOUNT_PAGE_OPERATION_TIMEOUT_MS, SESSION_PROBE_NAVIGATION_TIMEOUT_MS, HEADER_CAPTURE_TRIGGER_GRACE_MS, FIRST_TRIGGER_GRACE_MS, HEADER_CAPTURE_TRIGGER_ATTEMPTS, CHAT_INPUT_APPEAR_TIMEOUT_MS, CHAT_INPUT_ACTION_TIMEOUT_MS, PROFILE_RESET_TIMEOUT_MS;
+var requireLocal, contextInitHooks, ACCOUNT_MUTEX_MAX_HOLD_MS, accountMutexes, accountContexts, accountPages, inFlightAccountInits, headerCaches, HEADER_CACHE_TTL, COOKIE_CACHE_TTL, cookieCaches, lastAccountActivity, lastKeepAliveNavigation, lastProactiveTokenRefresh, profileResetQueue, profileResetChain, closingAllPlaywright, sleep2, HEADER_CAPTURE_SETTLE_MS, PLAYWRIGHT_MUTEX_WAIT_MS, ACCOUNT_PAGE_OPERATION_TIMEOUT_MS, SESSION_PROBE_NAVIGATION_TIMEOUT_MS, HEADER_CAPTURE_TRIGGER_GRACE_MS, FIRST_TRIGGER_GRACE_MS, HEADER_CAPTURE_TRIGGER_ATTEMPTS, CHAT_INPUT_APPEAR_TIMEOUT_MS, CHAT_INPUT_ACTION_TIMEOUT_MS, PROFILE_RESET_TIMEOUT_MS;
 var init_playwright = __esm({
   "src/services/playwright.ts"() {
     "use strict";
@@ -5128,6 +5310,7 @@ var init_playwright = __esm({
     cookieCaches = /* @__PURE__ */ new Map();
     lastAccountActivity = /* @__PURE__ */ new Map();
     lastKeepAliveNavigation = /* @__PURE__ */ new Map();
+    lastProactiveTokenRefresh = /* @__PURE__ */ new Map();
     profileResetQueue = /* @__PURE__ */ new Map();
     profileResetChain = Promise.resolve();
     closingAllPlaywright = false;

package/dist/delete-chats.js

@@ -296,7 +296,26 @@ function runMigrations(db2) {
       instruction_hash TEXT NOT NULL,
       updated_at TEXT NOT NULL DEFAULT (datetime('now'))
     );
+
+    CREATE TABLE IF NOT EXISTS account_daily_usage (
+      account_id TEXT NOT NULL,
+      date_utc TEXT NOT NULL,
+      prompt_tokens INTEGER NOT NULL DEFAULT 0,
+      completion_tokens INTEGER NOT NULL DEFAULT 0,
+      weighted_tokens REAL NOT NULL DEFAULT 0,
+      total_tokens INTEGER NOT NULL DEFAULT 0,
+      turns_count INTEGER NOT NULL DEFAULT 0,
+      updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+      PRIMARY KEY (account_id, date_utc)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_daily_usage_date ON account_daily_usage(date_utc);
   `);
+  try {
+    db2.exec(`ALTER TABLE account_daily_usage ADD COLUMN weighted_tokens REAL DEFAULT 0;`);
+  } catch (err) {
+    if (!isDuplicateColumnError(err)) throw err;
+  }
   try {
     db2.exec(
       `ALTER TABLE accounts ADD COLUMN cooldown_until INTEGER DEFAULT 0;`
@@ -397,7 +416,11 @@ function saveAuthSession(accountId, session) {
     ) VALUES (
       ?, ?, ?, ?, ?, ?,
       ?, ?, ?, ?,
-      ?, ?, ?, ?, datetime('now')
+      COALESCE(?, (SELECT user_id FROM qwen_auth_sessions WHERE account_id = ?)),
+      ?,
+      COALESCE(?, (SELECT refresh_token FROM qwen_auth_sessions WHERE account_id = ?)),
+      ?,
+      datetime('now')
     )
   `);
   stmt.run(
@@ -412,8 +435,10 @@ function saveAuthSession(accountId, session) {
     session.secChUaPlatform || null,
     session.version || null,
     session.userId || null,
+    accountId,
     session.tokenExpiresAt || null,
     session.refreshToken || null,
+    accountId,
     session.capturedAt ?? Date.now()
   );
 }
@@ -4039,6 +4064,11 @@ async function getBasicHeaders(accountId) {
   if (!page) {
     throw new Error(`Playwright not initialized for account: ${accountId}`);
   }
+  const inFlightInit = inFlightAccountInits.get(accountId);
+  if (inFlightInit) {
+    await inFlightInit.catch(() => {
+    });
+  }
   const release = await acquireAccountMutex(
     accountId,
     `headers:${accountId.substring(0, 12)}`
@@ -5513,6 +5543,11 @@ async function captureQwenHeaders(accountId, pageOverride, timeoutMs = config.ti
           const { saveAuthSession: saveAuthSession2 } = await Promise.resolve().then(() => (init_database(), database_exports));
           const { parseJwtExpiry: parseJwtExpiry2 } = await Promise.resolve().then(() => (init_jwt(), jwt_exports));
           const tokenExpiry = parseJwtExpiry2(capturedHeaders.cookie);
+          let rTok;
+          try {
+            rTok = (await page.evaluate(() => localStorage.getItem("refresh_token") || "")).trim() || void 0;
+          } catch {
+          }
           saveAuthSession2(accountId, {
             cookie: capturedHeaders.cookie,
             userAgent: capturedHeaders["user-agent"],
@@ -5524,6 +5559,7 @@ async function captureQwenHeaders(accountId, pageOverride, timeoutMs = config.ti
             secChUaPlatform: capturedHeaders["sec-ch-ua-platform"],
             version: capturedHeaders["version"],
             tokenExpiresAt: tokenExpiry || void 0,
+            refreshToken: rTok,
             capturedAt: Date.now()
           });
         } catch {
@@ -5555,38 +5591,57 @@ async function captureQwenHeaders(accountId, pageOverride, timeoutMs = config.ti
         const isAuthUrl = currentUrl.includes("/auth") || currentUrl.includes("/login");
         const isSuspectedGuest = isAuthUrl || attempt >= 2 && !await isPageLoggedIn(page, 5e3);
         if (isSuspectedGuest) {
-          const { getAccountCredentials: getAccountCredentials2 } = await Promise.resolve().then(() => (init_accounts(), accounts_exports));
-          const creds = getAccountCredentials2(accountId);
-          if (creds && creds.email && creds.password) {
-            console.warn(
-              `\u26A0\uFE0F  [Playwright] Session expired or guest state detected during header capture for ${accountId}; re-authenticating...`
+          const silentRefresh = await refreshAccountToken(accountId);
+          if (silentRefresh.success) {
+            console.log(
+              `\u26A1 [Playwright] Token refreshed silently during header capture for ${accountId}`
             );
-            armOverallDeadline();
-            const ok = await loginToQwen(accountId, creds.email, creds.password);
-            if (ok) {
+            if (isAuthUrl) {
               await page.goto(qwenUrl("/"), {
                 waitUntil: "domcontentloaded",
                 timeout: Math.min(config.timeouts.navigation, timeoutMs)
               });
-              await sleep2(2e3);
+              await sleep2(1500);
             }
-            if (!ok || !await isPageLoggedIn(page, 6e3)) {
+            if (await isPageLoggedIn(page, 5e3)) {
+              armOverallDeadline();
+            }
+          }
+          const stillSuspected = !silentRefresh.success || !await isPageLoggedIn(page, 2e3);
+          if (stillSuspected) {
+            const { getAccountCredentials: getAccountCredentials2 } = await Promise.resolve().then(() => (init_accounts(), accounts_exports));
+            const creds = getAccountCredentials2(accountId);
+            if (creds && creds.email && creds.password) {
+              console.warn(
+                `\u26A0\uFE0F  [Playwright] Session expired or guest state detected during header capture for ${accountId}; re-authenticating...`
+              );
+              armOverallDeadline();
+              const ok = await loginToQwen(accountId, creds.email, creds.password);
+              if (ok) {
+                await page.goto(qwenUrl("/"), {
+                  waitUntil: "domcontentloaded",
+                  timeout: Math.min(config.timeouts.navigation, timeoutMs)
+                });
+                await sleep2(2e3);
+              }
+              if (!ok || !await isPageLoggedIn(page, 6e3)) {
+                settle(
+                  new Error(
+                    `Header capture failed for ${accountId}: re-login after session expiry did not succeed`
+                  )
+                );
+                return;
+              }
+              armOverallDeadline();
+              if (settled || page.isClosed()) return;
+            } else {
               settle(
                 new Error(
-                  `Header capture failed for ${accountId}: re-login after session expiry did not succeed`
+                  `Header capture failed for ${accountId}: session expired and no credentials available for re-login (run 'qpx login')`
                 )
               );
               return;
             }
-            armOverallDeadline();
-            if (settled || page.isClosed()) return;
-          } else {
-            settle(
-              new Error(
-                `Header capture failed for ${accountId}: session expired and no credentials available for re-login (run 'qpx login')`
-              )
-            );
-            return;
           }
         }
         if (settled || page.isClosed()) return;
@@ -5902,7 +5957,13 @@ async function refreshHeadersInternal(accountId, timeoutMs = config.timeouts.hea
             `[Playwright] Navigation check failed during refresh for ${accountId}:`,
             navErr.message
           );
-          await executeReauth();
+          if (await isPageLoggedIn(page, 3e3)) {
+          } else {
+            const refreshed = await refreshAccountToken(accountId);
+            if (!refreshed.success) {
+              await executeReauth();
+            }
+          }
         }
       }
       if (hasRequiredQwenHeaders(cache.headers)) {
@@ -5916,6 +5977,11 @@ async function refreshHeadersInternal(accountId, timeoutMs = config.timeouts.hea
             const { saveAuthSession: saveAuthSession2 } = await Promise.resolve().then(() => (init_database(), database_exports));
             const tokenCookie = liveCookies.find((c) => c.name === "token");
             const exp = tokenCookie ? parseJwtExpiry(tokenCookie.value) : void 0;
+            let rTok;
+            try {
+              rTok = (await page.evaluate(() => localStorage.getItem("refresh_token") || "")).trim() || void 0;
+            } catch {
+            }
             saveAuthSession2(accountId, {
               cookie: cookieStr,
               userAgent: cache.headers["user-agent"] || "",
@@ -5927,6 +5993,7 @@ async function refreshHeadersInternal(accountId, timeoutMs = config.timeouts.hea
               secChUaPlatform: cache.headers["sec-ch-ua-platform"] || void 0,
               version: cache.headers["version"] || void 0,
               tokenExpiresAt: exp || void 0,
+              refreshToken: rTok,
               capturedAt: Date.now()
             });
           } catch {
@@ -6313,8 +6380,10 @@ async function keepAlivePlaywrightAccount(accountId) {
     if (!page || page.isClosed()) return false;
     const now = Date.now();
     const currentUrl = page.url();
+    const lastRefreshAttempt = lastProactiveTokenRefresh.get(accountId) ?? 0;
     const cookie = await getCookies(accountId);
-    if (cookie && isTokenExpiringSoon(cookie, 5)) {
+    if (cookie && isTokenExpiringSoon(cookie, 5) && now - lastRefreshAttempt > 6e4) {
+      lastProactiveTokenRefresh.set(accountId, now);
       console.log(
         `\u{1F493} [SessionKeeper] Account ${accountId} access token expiring soon (<5m); silently refreshing...`
       );
@@ -6358,6 +6427,7 @@ function cleanupPlaywrightAccountState(accountId) {
   cookieCaches.delete(accountId);
   lastAccountActivity.delete(accountId);
   lastKeepAliveNavigation.delete(accountId);
+  lastProactiveTokenRefresh.delete(accountId);
   clearFingerprintCache(accountId);
   unmarkAccountHeadersReady(accountId);
 }
@@ -6541,7 +6611,7 @@ async function getTokenDiagnostics(accountId) {
     }
   };
 }
-var requireLocal, contextInitHooks, ACCOUNT_MUTEX_MAX_HOLD_MS, accountMutexes, accountContexts, accountPages, cachedUserAgents, inFlightAccountInits, sharedBrowser, sharedBrowserPromise, headerCaches, HEADER_CACHE_TTL, HEADER_REFRESH_THRESHOLD, COOKIE_CACHE_TTL, cookieCaches, lastAccountActivity, lastKeepAliveNavigation, profileResetQueue, profileResetChain, closingAllPlaywright, sleep2, HEADER_CAPTURE_SETTLE_MS, PLAYWRIGHT_MUTEX_WAIT_MS, ACCOUNT_PAGE_OPERATION_TIMEOUT_MS, SESSION_PROBE_NAVIGATION_TIMEOUT_MS, HEADER_CAPTURE_TRIGGER_GRACE_MS, FIRST_TRIGGER_GRACE_MS, HEADER_CAPTURE_TRIGGER_ATTEMPTS, CHAT_INPUT_APPEAR_TIMEOUT_MS, CHAT_INPUT_ACTION_TIMEOUT_MS, PROFILE_RESET_TIMEOUT_MS;
+var requireLocal, contextInitHooks, ACCOUNT_MUTEX_MAX_HOLD_MS, accountMutexes, accountContexts, accountPages, cachedUserAgents, inFlightAccountInits, sharedBrowser, sharedBrowserPromise, headerCaches, HEADER_CACHE_TTL, HEADER_REFRESH_THRESHOLD, COOKIE_CACHE_TTL, cookieCaches, lastAccountActivity, lastKeepAliveNavigation, lastProactiveTokenRefresh, profileResetQueue, profileResetChain, closingAllPlaywright, sleep2, HEADER_CAPTURE_SETTLE_MS, PLAYWRIGHT_MUTEX_WAIT_MS, ACCOUNT_PAGE_OPERATION_TIMEOUT_MS, SESSION_PROBE_NAVIGATION_TIMEOUT_MS, HEADER_CAPTURE_TRIGGER_GRACE_MS, FIRST_TRIGGER_GRACE_MS, HEADER_CAPTURE_TRIGGER_ATTEMPTS, CHAT_INPUT_APPEAR_TIMEOUT_MS, CHAT_INPUT_ACTION_TIMEOUT_MS, PROFILE_RESET_TIMEOUT_MS;
 var init_playwright = __esm({
   "src/services/playwright.ts"() {
     "use strict";
@@ -6577,6 +6647,7 @@ var init_playwright = __esm({
     cookieCaches = /* @__PURE__ */ new Map();
     lastAccountActivity = /* @__PURE__ */ new Map();
     lastKeepAliveNavigation = /* @__PURE__ */ new Map();
+    lastProactiveTokenRefresh = /* @__PURE__ */ new Map();
     profileResetQueue = /* @__PURE__ */ new Map();
     profileResetChain = Promise.resolve();
     closingAllPlaywright = false;
@@ -7112,9 +7183,13 @@ var init_model_registry = __esm({
 // src/services/captcha-coordinator.ts
 var captcha_coordinator_exports = {};
 __export(captcha_coordinator_exports, {
+  isCaptchaRecoveryActive: () => isCaptchaRecoveryActive,
   recoverBaxiaCaptcha: () => recoverBaxiaCaptcha,
   solveChallengeOnPage: () => solveChallengeOnPage
 });
+function isCaptchaRecoveryActive(accountId) {
+  return activeCaptchaRecoveries.has(accountId);
+}
 async function gotoBestEffort(page, url) {
   await page.goto(url, {
     waitUntil: "domcontentloaded",
@@ -7157,11 +7232,12 @@ async function recoverBaxiaCaptcha(accountId, label, options = {}) {
     return false;
   }
   metrics.increment("captcha.challenges.detected", 1, { solver });
-  const challengeUrl = options.challengeBody ? extractBaxiaChallengeUrl(options.challengeBody, config.qwen.baseUrl) : null;
   const solverOperationTimeoutMs = Math.max(
     15e3,
     config.captcha.timeoutMs + config.captcha.maxAttempts * (3e3 + config.captcha.retryDelayMs + config.captcha.settleMs) + 2 * CHALLENGE_NAVIGATION_TIMEOUT_MS
   );
+  const challengeUrl = options.challengeBody ? extractBaxiaChallengeUrl(options.challengeBody, config.qwen.baseUrl) : null;
+  activeCaptchaRecoveries.add(accountId);
   try {
     const solved = await withAccountPage(
       accountId,
@@ -7194,9 +7270,11 @@ async function recoverBaxiaCaptcha(accountId, label, options = {}) {
       detail
     });
     return false;
+  } finally {
+    activeCaptchaRecoveries.delete(accountId);
   }
 }
-var CHALLENGE_NAVIGATION_TIMEOUT_MS, CHALLENGE_PATH_MARKER, FAILED_RECOVERY_BACKOFF_MS, lastFailedRecoveryAt;
+var CHALLENGE_NAVIGATION_TIMEOUT_MS, CHALLENGE_PATH_MARKER, FAILED_RECOVERY_BACKOFF_MS, lastFailedRecoveryAt, activeCaptchaRecoveries;
 var init_captcha_coordinator = __esm({
   "src/services/captcha-coordinator.ts"() {
     "use strict";
@@ -7209,6 +7287,7 @@ var init_captcha_coordinator = __esm({
     CHALLENGE_PATH_MARKER = "_____tmd_____";
     FAILED_RECOVERY_BACKOFF_MS = 3e4;
     lastFailedRecoveryAt = /* @__PURE__ */ new Map();
+    activeCaptchaRecoveries = /* @__PURE__ */ new Set();
   }
 });
 
@@ -7941,6 +8020,7 @@ __export(qwen_exports, {
   fetchRemoteQwenChats: () => fetchRemoteQwenChats,
   flushLogicalThreadState: () => flushLogicalThreadState,
   getAnyCachedQwenModels: () => getAnyCachedQwenModels,
+  getInFlightPersonalizationCount: () => getInFlightPersonalizationCount,
   getLogicalThreadState: () => getLogicalThreadState,
   getQwenErrorCode: () => getQwenErrorCode,
   getSessionParent: () => getSessionParent,
@@ -8873,12 +8953,51 @@ async function createQwenBrowserResponse(accountId, url, method, headers, body,
     captchaWatcher?.stop();
   }
 }
+function getInFlightPersonalizationCount() {
+  return inFlightPersonalizationSyncs.size;
+}
 async function syncQwenRequestPersonalization(instruction, accountId, metadata = {}) {
-  if (isAuthMockEnabled()) {
-    if (process.env.TEST_PERSONALIZATION_SYNC_FAIL === "true") return false;
-    return true;
-  }
   const cacheKey = accountId || "global";
+  const sent = textSize(instruction);
+  const syncHash = sent.hash ? `${sent.hash}:${QWEN_SAFE_SETTINGS_HASH}` : null;
+  const inFlightKey = `${cacheKey}:${syncHash || "empty"}`;
+  const existingInFlight = inFlightPersonalizationSyncs.get(inFlightKey);
+  if (existingInFlight) {
+    logger.debug("[Qwen] Personalization sync already in flight, sharing promise", {
+      accountId: cacheKey
+    });
+    return existingInFlight;
+  }
+  let syncPromise;
+  syncPromise = (async () => {
+    await Promise.resolve();
+    try {
+      if (isAuthMockEnabled()) {
+        const delay = parseInt(process.env.TEST_PERSONALIZATION_DELAY_MS || "0", 10);
+        if (delay > 0) {
+          await sleep4(delay);
+        }
+        if (process.env.TEST_PERSONALIZATION_SYNC_FAIL === "true") return false;
+        return true;
+      }
+      return await syncQwenRequestPersonalizationInternal(
+        instruction,
+        accountId,
+        metadata,
+        cacheKey,
+        sent,
+        syncHash
+      );
+    } finally {
+      if (inFlightPersonalizationSyncs.get(inFlightKey) === syncPromise) {
+        inFlightPersonalizationSyncs.delete(inFlightKey);
+      }
+    }
+  })();
+  inFlightPersonalizationSyncs.set(inFlightKey, syncPromise);
+  return syncPromise;
+}
+async function syncQwenRequestPersonalizationInternal(instruction, accountId, metadata, cacheKey, sent, syncHash) {
   let forceRefresh = false;
   try {
     const basic = await getBasicHeaders2(accountId);
@@ -8896,8 +9015,6 @@ async function syncQwenRequestPersonalization(instruction, accountId, metadata =
   });
   let currentSettings = null;
   let payload = buildQwenSettingsUpdatePayload(currentSettings, instruction);
-  const sent = textSize(instruction);
-  const syncHash = sent.hash ? `${sent.hash}:${QWEN_SAFE_SETTINGS_HASH}` : null;
   const bypassCache = metadata.forceSync === true;
   const cachedHash = lastSyncedPersonalizationHashes.get(cacheKey);
   if (!bypassCache && syncHash && cachedHash === syncHash) {
@@ -10242,7 +10359,7 @@ async function createQwenStreamInternal(prompt, enableThinking, modelId, forcedP
     clearTimeout(timeoutId);
   }
 }
-var sleep4, BROWSER_STREAM_BINDING, BROWSER_ABORTERS_KEY, BROWSER_STREAM_FLUSH_BYTES, BROWSER_STREAM_FLUSH_MS, METADATA_TIMEOUT_PER_PAYLOAD_MB_MS, POST_CAPTCHA_METADATA_GRACE_MS, browserStreamStates, browserStreamBindingPages, browserStreamBindingContexts, MODEL_CACHE_TTL_MS, modelsCache, nativeToolsDisabled, disablingNativeToolsInProgress, lastSyncedPersonalizationHashes, directSettingsFetchConsecutiveFailures, DIRECT_SETTINGS_FETCH_BLOCK_THRESHOLD, directSettingsFetchBlocked, DIRECT_SETTINGS_FETCH_TIMEOUT_MS, activePersonalizationByAccount, accountStreamMutexes, QWEN_SAFE_SETTINGS_PATCH, QWEN_SAFE_SETTINGS_HASH, DISABLE_TOOLS_MAX_RETRIES, DISABLE_TOOLS_BACKOFF_MS, UPSTREAM_RESPONSE_PREVIEW_BYTES;
+var sleep4, BROWSER_STREAM_BINDING, BROWSER_ABORTERS_KEY, BROWSER_STREAM_FLUSH_BYTES, BROWSER_STREAM_FLUSH_MS, METADATA_TIMEOUT_PER_PAYLOAD_MB_MS, POST_CAPTCHA_METADATA_GRACE_MS, browserStreamStates, browserStreamBindingPages, browserStreamBindingContexts, MODEL_CACHE_TTL_MS, modelsCache, nativeToolsDisabled, disablingNativeToolsInProgress, lastSyncedPersonalizationHashes, directSettingsFetchConsecutiveFailures, DIRECT_SETTINGS_FETCH_BLOCK_THRESHOLD, directSettingsFetchBlocked, DIRECT_SETTINGS_FETCH_TIMEOUT_MS, activePersonalizationByAccount, accountStreamMutexes, QWEN_SAFE_SETTINGS_PATCH, QWEN_SAFE_SETTINGS_HASH, inFlightPersonalizationSyncs, DISABLE_TOOLS_MAX_RETRIES, DISABLE_TOOLS_BACKOFF_MS, UPSTREAM_RESPONSE_PREVIEW_BYTES;
 var init_qwen = __esm({
   "src/services/qwen.ts"() {
     "use strict";
@@ -10329,6 +10446,7 @@ var init_qwen = __esm({
       }
     };
     QWEN_SAFE_SETTINGS_HASH = crypto5.createHash("sha256").update(JSON.stringify(QWEN_SAFE_SETTINGS_PATCH)).digest("hex").slice(0, 12);
+    inFlightPersonalizationSyncs = /* @__PURE__ */ new Map();
     DISABLE_TOOLS_MAX_RETRIES = 3;
     DISABLE_TOOLS_BACKOFF_MS = 2e3;
     UPSTREAM_RESPONSE_PREVIEW_BYTES = 8 * 1024;