qwenproxy-cli 1.6.1 → 1.6.2

package/dist/clean-cache.js

@@ -781,7 +781,7 @@ function addAccountsBatch(entries) {
   }
   return { added, skipped, invalid };
 }
-function addAccount(email, password, id) {
+function addAccount(email, password = "", id) {
   if (!email || typeof email !== "string" || email.trim().length === 0) {
     throw new Error("Email is required");
   }
@@ -2963,6 +2963,10 @@ async function clearVisibleChallenge(page) {
       "button[aria-label*='Close' i]",
       "button[aria-label*='Fechar' i]",
       ".index-module__whats-new-modal-close",
+      ".age-confirmation-modal button",
+      ".age-confirmation-modal .qwen-chat-v2-btn-black",
+      "button:has-text('Continuar')",
+      "button:has-text('Continue')",
       "button:has-text('Cancel')",
       "button:has-text('Cancelar')",
       "button:has-text('I understand')",
@@ -5322,8 +5326,8 @@ var init_playwright = __esm({
     PLAYWRIGHT_MUTEX_WAIT_MS = 6e4;
     ACCOUNT_PAGE_OPERATION_TIMEOUT_MS = config.timeouts.page;
     SESSION_PROBE_NAVIGATION_TIMEOUT_MS = 15e3;
-    HEADER_CAPTURE_TRIGGER_GRACE_MS = 15e3;
-    FIRST_TRIGGER_GRACE_MS = 8e3;
+    HEADER_CAPTURE_TRIGGER_GRACE_MS = 2e4;
+    FIRST_TRIGGER_GRACE_MS = 12e3;
     HEADER_CAPTURE_TRIGGER_ATTEMPTS = 3;
     CHAT_INPUT_APPEAR_TIMEOUT_MS = 15e3;
     CHAT_INPUT_ACTION_TIMEOUT_MS = 1e4;

package/dist/delete-chats.js

@@ -819,7 +819,7 @@ function addAccountsBatch(entries) {
   }
   return { added, skipped, invalid };
 }
-function addAccount(email, password, id) {
+function addAccount(email, password = "", id) {
   if (!email || typeof email !== "string" || email.trim().length === 0) {
     throw new Error("Email is required");
   }
@@ -3160,6 +3160,7 @@ var playwright_exports = {};
 __export(playwright_exports, {
   assertAntiBotHeaders: () => assertAntiBotHeaders,
   buildChromiumLaunchArgs: () => buildChromiumLaunchArgs,
+  cancelEmailOtpLogin: () => cancelEmailOtpLogin,
   captureQwenHeaders: () => captureQwenHeaders,
   classifyQwenAuthError: () => classifyQwenAuthError,
   cleanupOrphanProfiles: () => cleanupOrphanProfiles,
@@ -3200,8 +3201,10 @@ __export(playwright_exports, {
   removePlaywrightProfile: () => removePlaywrightProfile,
   saveStorageState: () => saveStorageState,
   schedulePlaywrightProfileReset: () => schedulePlaywrightProfileReset,
+  startEmailOtpLogin: () => startEmailOtpLogin,
   unregisterPlaywrightAccountForTests: () => unregisterPlaywrightAccountForTests,
   validateAccountLogin: () => validateAccountLogin,
+  verifyEmailOtpLogin: () => verifyEmailOtpLogin,
   withAccountPage: () => withAccountPage
 });
 import { chromium as chromium2 } from "patchright";
@@ -3543,6 +3546,10 @@ async function clearVisibleChallenge(page) {
       "button[aria-label*='Close' i]",
       "button[aria-label*='Fechar' i]",
       ".index-module__whats-new-modal-close",
+      ".age-confirmation-modal button",
+      ".age-confirmation-modal .qwen-chat-v2-btn-black",
+      "button:has-text('Continuar')",
+      "button:has-text('Continue')",
       "button:has-text('Cancel')",
       "button:has-text('Cancelar')",
       "button:has-text('I understand')",
@@ -4737,6 +4744,292 @@ async function validateAccountLogin(rawAccount, headless = true, browserType = "
     release();
   }
 }
+async function startEmailOtpLogin(email, options = {}) {
+  const normalizedEmail = email.trim().toLowerCase();
+  if (!normalizedEmail || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(normalizedEmail)) {
+    return { success: false, error: "Formato de e-mail inv\xE1lido" };
+  }
+  const { listAccounts: listAccounts2 } = await Promise.resolve().then(() => (init_accounts(), accounts_exports));
+  if (listAccounts2().some((a) => a.email.toLowerCase() === normalizedEmail)) {
+    return {
+      success: false,
+      error: `Uma conta com o e-mail "${normalizedEmail}" j\xE1 est\xE1 cadastrada.`
+    };
+  }
+  if (process.env.TEST_MOCK_QWEN_AUTH === "true" && process.env.NODE_ENV !== "production") {
+    const mockSessionId = "mock-otp-" + Date.now();
+    mockOtpSessions.set(mockSessionId, normalizedEmail);
+    return { success: true, sessionId: mockSessionId };
+  }
+  const accountId = crypto3.randomUUID();
+  const sessionId = accountId;
+  const profilePath = getAccountProfilePath(accountId);
+  const fingerprint = getFingerprintProfile(accountId);
+  const browserType = options.browserType ?? config.playwright.browser;
+  const { engine, channel } = resolveBrowserEngine(browserType);
+  const headless = options.headless ?? config.playwright.headless;
+  const launchOptions = {
+    headless,
+    channel,
+    userAgent: fingerprint.userAgent,
+    locale: fingerprint.locale,
+    timezoneId: fingerprint.timezoneId,
+    viewport: fingerprint.viewport,
+    screen: fingerprint.viewport,
+    deviceScaleFactor: 1,
+    isMobile: false,
+    hasTouch: false,
+    colorScheme: "light",
+    extraHTTPHeaders: {
+      "sec-ch-ua": fingerprint.secChUa,
+      "sec-ch-ua-mobile": "?0",
+      "sec-ch-ua-platform": '"Windows"'
+    },
+    ignoreDefaultArgs: ["--enable-automation", "--enable-blink-features"],
+    args: buildChromiumLaunchArgs(fingerprint.viewport)
+  };
+  let acctContext;
+  try {
+    acctContext = await withTimeout(
+      engine.launchPersistentContext(profilePath, launchOptions),
+      3e4,
+      `O navegador n\xE3o iniciou em 30s para a conta ${maskEmail(normalizedEmail)}.`
+    );
+  } catch (launchErr) {
+    if (launchErr?.message?.includes("Executable doesn't exist")) {
+      autoInstallPlaywrightChromium();
+      acctContext = await withTimeout(
+        engine.launchPersistentContext(profilePath, launchOptions),
+        3e4,
+        `O navegador n\xE3o iniciou em 30s para a conta ${maskEmail(normalizedEmail)}.`
+      );
+    } else {
+      return { success: false, error: launchErr?.message || String(launchErr) };
+    }
+  }
+  try {
+    await acctContext.addInitScript(getStealthScript(fingerprint));
+    const existingPages = acctContext.pages().filter((p) => !p.isClosed());
+    const acctPage = existingPages.find((p) => p.url().startsWith(qwenOrigin())) ?? existingPages[0] ?? await acctContext.newPage();
+    await acctPage.goto(qwenUrl("/auth?mode=register"), {
+      waitUntil: "domcontentloaded",
+      timeout: Math.min(config.timeouts.navigation, 2e4)
+    }).catch(() => {
+    });
+    await sleep2(1e3);
+    await clearVisibleChallenge(acctPage);
+    const requestId = crypto3.randomUUID();
+    const evalRes = await acctPage.evaluate(
+      async ({ email: email2, requestId: requestId2, version, timezone }) => {
+        try {
+          const response = await fetch("https://auth.qwen.ai/api/v2/auths/otp/email/request", {
+            method: "POST",
+            credentials: "include",
+            headers: {
+              accept: "application/json, text/plain, */*",
+              "content-type": "application/json",
+              source: "web",
+              version,
+              "x-request-origin": "https://chat.qwen.ai",
+              timezone,
+              "x-request-id": requestId2
+            },
+            body: JSON.stringify({
+              identifier: email2,
+              accept_terms: true,
+              language: "pt-BR"
+            })
+          });
+          const json = await response.json().catch(() => null);
+          return { ok: response.ok, status: response.status, data: json };
+        } catch (e) {
+          return { ok: false, error: e.message };
+        }
+      },
+      {
+        email: normalizedEmail,
+        requestId,
+        version: getQwenWebVersion() || "0.3.12",
+        timezone: (/* @__PURE__ */ new Date()).toString().split(" (")[0]
+      }
+    ).catch((err) => ({ ok: false, error: err?.message || String(err) }));
+    if (!evalRes.ok || evalRes.data?.success !== true) {
+      const errorMsg = evalRes.data?.data?.details || evalRes.data?.data?.message || evalRes.data?.message || evalRes.error || "Falha ao solicitar c\xF3digo de verifica\xE7\xE3o";
+      await closePlaywrightContextBestEffort(accountId, acctContext).catch(() => {
+      });
+      cleanupPlaywrightAccountState(accountId);
+      return { success: false, error: errorMsg };
+    }
+    const timer = setTimeout(async () => {
+      activeOtpSessions.delete(sessionId);
+      await closePlaywrightContextBestEffort(accountId, acctContext).catch(() => {
+      });
+      cleanupPlaywrightAccountState(accountId);
+    }, 5 * 60 * 1e3);
+    timer.unref?.();
+    activeOtpSessions.set(sessionId, {
+      sessionId,
+      accountId,
+      email: normalizedEmail,
+      context: acctContext,
+      page: acctPage,
+      fingerprint,
+      createdAt: Date.now(),
+      timer
+    });
+    return { success: true, sessionId };
+  } catch (err) {
+    await closePlaywrightContextBestEffort(accountId, acctContext).catch(() => {
+    });
+    cleanupPlaywrightAccountState(accountId);
+    return { success: false, error: err?.message || String(err) };
+  }
+}
+async function verifyEmailOtpLogin(sessionId, code) {
+  const cleanCode = code.trim();
+  if (!cleanCode) {
+    return { success: false, error: "C\xF3digo de verifica\xE7\xE3o \xE9 obrigat\xF3rio" };
+  }
+  if (process.env.TEST_MOCK_QWEN_AUTH === "true" && process.env.NODE_ENV !== "production") {
+    const mockEmail = mockOtpSessions.get(sessionId);
+    if (!mockEmail) {
+      return { success: false, error: "Sess\xE3o OTP inv\xE1lida ou expirada" };
+    }
+    if (cleanCode === "000000") {
+      return { success: false, error: "C\xF3digo de verifica\xE7\xE3o incorreto ou expirado" };
+    }
+    const { addAccount: addAccount2 } = await Promise.resolve().then(() => (init_accounts(), accounts_exports));
+    const mockAccId = "mock-otp-acc-" + Date.now();
+    const newAccount = addAccount2(mockEmail, "", mockAccId);
+    mockOtpSessions.delete(sessionId);
+    return { success: true, account: newAccount };
+  }
+  const session = activeOtpSessions.get(sessionId);
+  if (!session) {
+    return { success: false, error: "Sess\xE3o OTP expirada ou n\xE3o encontrada. Solicite um novo c\xF3digo." };
+  }
+  if (session.page.isClosed()) {
+    activeOtpSessions.delete(sessionId);
+    return { success: false, error: "Navegador foi fechado. Solicite um novo c\xF3digo." };
+  }
+  const requestId = crypto3.randomUUID();
+  const evalRes = await session.page.evaluate(
+    async ({ email, code: code2, requestId: requestId2, version, timezone }) => {
+      try {
+        const response = await fetch("https://auth.qwen.ai/api/v2/auths/otp/email/verify", {
+          method: "POST",
+          credentials: "include",
+          headers: {
+            accept: "application/json, text/plain, */*",
+            "content-type": "application/json",
+            source: "web",
+            version,
+            "x-request-origin": "https://chat.qwen.ai",
+            timezone,
+            "x-request-id": requestId2
+          },
+          body: JSON.stringify({
+            identifier: email,
+            code: code2,
+            name: null
+          })
+        });
+        const json = await response.json().catch(() => null);
+        return { ok: response.ok, status: response.status, data: json };
+      } catch (e) {
+        return { ok: false, error: e.message };
+      }
+    },
+    {
+      email: session.email,
+      code: cleanCode,
+      requestId,
+      version: getQwenWebVersion() || "0.3.12",
+      timezone: (/* @__PURE__ */ new Date()).toString().split(" (")[0]
+    }
+  ).catch((err) => ({ ok: false, error: err?.message || String(err) }));
+  if (!evalRes.ok || evalRes.data?.success !== true || !evalRes.data?.data) {
+    const errorMsg = evalRes.data?.data?.details || evalRes.data?.data?.message || evalRes.data?.message || evalRes.error || "C\xF3digo de verifica\xE7\xE3o incorreto ou expirado";
+    return { success: false, error: errorMsg };
+  }
+  const resData = evalRes.data.data;
+  const accessToken = resData.access_token || resData.token;
+  const refreshToken = resData.refresh_token;
+  const userId = resData.id;
+  try {
+    await session.page.evaluate(({ token, rTok }) => {
+      try {
+        localStorage.setItem("token", token);
+        localStorage.setItem("access_token", token);
+        if (rTok) localStorage.setItem("refresh_token", rTok);
+        document.cookie = `token=${encodeURIComponent(token)}; path=/; domain=.qwen.ai; max-age=31536000`;
+      } catch {
+      }
+    }, { token: accessToken, rTok: refreshToken });
+    await session.context.addCookies([
+      {
+        name: "token",
+        value: accessToken,
+        domain: ".qwen.ai",
+        path: "/",
+        expires: Math.floor(Date.now() / 1e3) + 31536e3,
+        httpOnly: false,
+        secure: true,
+        sameSite: "Lax"
+      }
+    ]);
+    await session.page.goto(qwenUrl("/"), {
+      waitUntil: "domcontentloaded",
+      timeout: Math.min(config.timeouts.navigation, 15e3)
+    }).catch(() => {
+    });
+    await sleep2(1e3);
+    await saveStorageState(session.context, session.accountId);
+    const { saveAuthSession: saveAuthSession2 } = await Promise.resolve().then(() => (init_database(), database_exports));
+    const { parseJwtExpiry: parseJwtExpiry2 } = await Promise.resolve().then(() => (init_jwt(), jwt_exports));
+    const exp = parseJwtExpiry2(accessToken);
+    saveAuthSession2(session.accountId, {
+      cookie: `token=${accessToken}`,
+      userAgent: session.fingerprint.userAgent,
+      bxV: "2.5.37",
+      version: getQwenWebVersion() || "0.3.12",
+      userId: userId || void 0,
+      tokenExpiresAt: exp || void 0,
+      refreshToken: refreshToken || void 0,
+      capturedAt: Date.now()
+    });
+    const { addAccount: addAccount2 } = await Promise.resolve().then(() => (init_accounts(), accounts_exports));
+    const newAccount = addAccount2(session.email, "", session.accountId);
+    clearTimeout(session.timer);
+    activeOtpSessions.delete(sessionId);
+    await closePlaywrightContextBestEffort(session.accountId, session.context).catch(() => {
+    });
+    cleanupPlaywrightAccountState(session.accountId);
+    return { success: true, account: newAccount };
+  } catch (err) {
+    clearTimeout(session.timer);
+    activeOtpSessions.delete(sessionId);
+    await closePlaywrightContextBestEffort(session.accountId, session.context).catch(() => {
+    });
+    cleanupPlaywrightAccountState(session.accountId);
+    return { success: false, error: err?.message || String(err) };
+  }
+}
+async function cancelEmailOtpLogin(sessionId) {
+  if (process.env.TEST_MOCK_QWEN_AUTH === "true" && process.env.NODE_ENV !== "production") {
+    mockOtpSessions.delete(sessionId);
+    return;
+  }
+  const session = activeOtpSessions.get(sessionId);
+  if (!session) return;
+  clearTimeout(session.timer);
+  activeOtpSessions.delete(sessionId);
+  await closePlaywrightContextBestEffort(session.accountId, session.context).catch(() => {
+  });
+  cleanupPlaywrightAccountState(session.accountId);
+  const { wipeAccountSessionFiles: wipeAccountSessionFiles2 } = await Promise.resolve().then(() => (init_accounts(), accounts_exports));
+  wipeAccountSessionFiles2(session.accountId);
+}
 function classifyQwenAuthError(code, details) {
   const c = (code || "").trim().toLowerCase();
   const d = (details || "").trim().toLowerCase();
@@ -6105,7 +6398,7 @@ async function withAccountPage(accountId, fn, timeoutMs = ACCOUNT_PAGE_OPERATION
       return result;
     } catch (error) {
       const message = getErrorMessage(error);
-      if (recoverOnTimeout && message.includes("Playwright page operation timed out")) {
+      if (recoverOnTimeout && message.includes("Playwright page operation timed out") && (!page || page.isClosed())) {
         console.warn(
           `\u23F1\uFE0F  [Playwright] Resetting account context after a stuck page operation: ${accountId}`
         );
@@ -6654,7 +6947,7 @@ async function getTokenDiagnostics(accountId) {
     }
   };
 }
-var requireLocal, contextInitHooks, ACCOUNT_MUTEX_MAX_HOLD_MS, accountMutexes, accountContexts, accountPages, cachedUserAgents, inFlightAccountInits, sharedBrowser, sharedBrowserPromise, headerCaches, HEADER_CACHE_TTL, HEADER_REFRESH_THRESHOLD, COOKIE_CACHE_TTL, cookieCaches, lastAccountActivity, lastKeepAliveNavigation, lastProactiveTokenRefresh, profileResetQueue, profileResetChain, closingAllPlaywright, sleep2, HEADER_CAPTURE_SETTLE_MS, PLAYWRIGHT_MUTEX_WAIT_MS, ACCOUNT_PAGE_OPERATION_TIMEOUT_MS, SESSION_PROBE_NAVIGATION_TIMEOUT_MS, HEADER_CAPTURE_TRIGGER_GRACE_MS, FIRST_TRIGGER_GRACE_MS, HEADER_CAPTURE_TRIGGER_ATTEMPTS, CHAT_INPUT_APPEAR_TIMEOUT_MS, CHAT_INPUT_ACTION_TIMEOUT_MS, PROFILE_RESET_TIMEOUT_MS;
+var requireLocal, contextInitHooks, ACCOUNT_MUTEX_MAX_HOLD_MS, accountMutexes, accountContexts, accountPages, cachedUserAgents, inFlightAccountInits, sharedBrowser, sharedBrowserPromise, headerCaches, HEADER_CACHE_TTL, HEADER_REFRESH_THRESHOLD, COOKIE_CACHE_TTL, cookieCaches, lastAccountActivity, lastKeepAliveNavigation, lastProactiveTokenRefresh, profileResetQueue, profileResetChain, closingAllPlaywright, sleep2, HEADER_CAPTURE_SETTLE_MS, PLAYWRIGHT_MUTEX_WAIT_MS, ACCOUNT_PAGE_OPERATION_TIMEOUT_MS, SESSION_PROBE_NAVIGATION_TIMEOUT_MS, HEADER_CAPTURE_TRIGGER_GRACE_MS, FIRST_TRIGGER_GRACE_MS, HEADER_CAPTURE_TRIGGER_ATTEMPTS, CHAT_INPUT_APPEAR_TIMEOUT_MS, CHAT_INPUT_ACTION_TIMEOUT_MS, activeOtpSessions, mockOtpSessions, PROFILE_RESET_TIMEOUT_MS;
 var init_playwright = __esm({
   "src/services/playwright.ts"() {
     "use strict";
@@ -6699,11 +6992,13 @@ var init_playwright = __esm({
     PLAYWRIGHT_MUTEX_WAIT_MS = 6e4;
     ACCOUNT_PAGE_OPERATION_TIMEOUT_MS = config.timeouts.page;
     SESSION_PROBE_NAVIGATION_TIMEOUT_MS = 15e3;
-    HEADER_CAPTURE_TRIGGER_GRACE_MS = 15e3;
-    FIRST_TRIGGER_GRACE_MS = 8e3;
+    HEADER_CAPTURE_TRIGGER_GRACE_MS = 2e4;
+    FIRST_TRIGGER_GRACE_MS = 12e3;
     HEADER_CAPTURE_TRIGGER_ATTEMPTS = 3;
     CHAT_INPUT_APPEAR_TIMEOUT_MS = 15e3;
     CHAT_INPUT_ACTION_TIMEOUT_MS = 1e4;
+    activeOtpSessions = /* @__PURE__ */ new Map();
+    mockOtpSessions = /* @__PURE__ */ new Map();
     PROFILE_RESET_TIMEOUT_MS = Math.max(9e4, config.timeouts.headers);
     setWafContextResetListener((accountId) => {
       if (!accountPages.has(accountId)) return;
@@ -7715,6 +8010,15 @@ var init_helpers = __esm({
   }
 });
 
+// src/utils/overload-detector.ts
+var OVERLOAD_COOLDOWN_MS;
+var init_overload_detector = __esm({
+  "src/utils/overload-detector.ts"() {
+    "use strict";
+    OVERLOAD_COOLDOWN_MS = 5 * 60 * 1e3;
+  }
+});
+
 // src/routes/chat/retry-policy.ts
 var init_retry_policy = __esm({
   "src/routes/chat/retry-policy.ts"() {
@@ -7725,6 +8029,7 @@ var init_retry_policy = __esm({
     init_qwen();
     init_errors();
     init_helpers();
+    init_overload_detector();
     init_account_manager();
   }
 });
@@ -8688,7 +8993,8 @@ async function requestQwenPersonalizationInBrowser(accountId, method, path6, hea
     payload === void 0 ? void 0 : JSON.stringify(payload),
     {
       settingsPage: true,
-      referrer: qwenUrl("/settings/personalization")
+      referrer: qwenUrl("/settings/personalization"),
+      noMutexRecovery: true
     }
   );
   const { raw, json } = await readJsonTextResponse(response);
@@ -9189,8 +9495,9 @@ async function syncQwenRequestPersonalizationInternal(instruction, accountId, me
   const returnedInstruction = json?.data?.personalization?.instruction;
   const returned = textSize(returnedInstruction);
   let stored = { chars: null, bytes: null, hash: null };
+  const matchReturned = isEmptyInstruction && (!returnedInstruction || returned.chars === 0) || returned.hash !== null && returned.hash === sent.hash;
   let verifyData = null;
-  if (config.qwen.personalizationVerifyGet) {
+  if (config.qwen.personalizationVerifyGet && !matchReturned) {
     const { json: verifyJson } = await requestQwenPersonalizationInBrowser(
       accountId,
       "GET",
@@ -9200,7 +9507,6 @@ async function syncQwenRequestPersonalizationInternal(instruction, accountId, me
     verifyData = verifyJson?.data?.personalization;
     stored = textSize(verifyData?.instruction);
   }
-  const matchReturned = isEmptyInstruction && (!returnedInstruction || returned.chars === 0) || returned.hash !== null && returned.hash === sent.hash;
   const matchStored = stored.hash === null ? null : isEmptyInstruction && (!verifyData?.instruction || stored.chars === 0) || stored.hash === sent.hash;
   const applied = matchReturned || matchStored === true;
   if (syncHash && applied) {
@@ -9574,6 +9880,17 @@ async function fetchQwenModels(accountId) {
     );
     return cached.models;
   }
+  if (accountId && !isAuthMockEnabled() && !isPlaywrightInitialized(accountId)) {
+    for (const [, entry] of modelsCache.entries()) {
+      if (entry && now - entry.fetchedAt < MODEL_CACHE_TTL_MS * 4) {
+        syncModelMetadata(
+          entry.models,
+          accountId
+        );
+        return entry.models;
+      }
+    }
+  }
   if (accountId && !isAuthMockEnabled() && isAccountBusy(accountId)) {
     try {
       const result = await withAccountPage(