qwenproxy-cli 1.6.11 → 1.6.12

package/src/services/playwright.ts

@@ -78,10 +78,15 @@ import {
   type FingerprintProfile,
 } from "./fingerprint.ts";
 import { subtlePageActivity } from "./human-behavior.ts";
-import { solveBaxiaCaptcha } from "./captcha-solver.ts";
+import { solveVisibleCaptcha } from "./captcha-solver.ts";
 import { qwenOrigin, qwenUrl } from "./qwen-url.ts";
 import { setWafContextResetListener } from "../core/waf-isolation.ts";
-import { updateQwenWebVersion, getQwenWebVersion } from "./qwen-headers.ts";
+import {
+  getQwenBxVersion,
+  getQwenWebVersion,
+  updateQwenBxVersion,
+  updateQwenWebVersion,
+} from "./qwen-headers.ts";
 import { getAccountProfilePath, getProfilesDir } from "../core/paths.ts";
 import { parseJwtExpiry, isTokenExpiringSoon } from "../utils/jwt.ts";
 import { formatAsciiTimezone } from "../utils/timezone.ts";
@@ -598,13 +603,14 @@ const CHAT_INPUT_ACTION_TIMEOUT_MS = 10_000;
  */
 async function clearVisibleChallenge(page: Page): Promise<void> {
   if (page.isClosed()) return;
-  // 1. Solve slider puzzle captcha if present
+  // 1. Solve a slider/jigsaw challenge if present (Baxia NC or Aliyun WAF)
   if (config.captcha.enabled) {
-    await solveBaxiaCaptcha(page, {
+    await solveVisibleCaptcha(page, {
       waitForMs: 0,
       maxAttempts: config.captcha.maxAttempts,
       retryDelayMs: config.captcha.retryDelayMs,
       settleMs: config.captcha.settleMs,
+      sliderTimeoutMs: config.captcha.sliderTimeoutMs,
     }).catch(() => false);
   }
 
@@ -1307,13 +1313,22 @@ export async function getBasicHeaders(accountId: string): Promise<{
               mobile = data.mobile ? "?1" : "?0";
             }
             let bundleVersion: string | null = null;
+            let baxiaVersion: string | null = null;
             try {
               const el = document.querySelector('link[href*="qwen-chat-fe"], script[src*="qwen-chat-fe"], img[src*="qwen-chat-fe"]');
               const src = el ? (el.getAttribute("href") || el.getAttribute("src") || "") : "";
               const match = src.match(/qwen-chat-fe\/(\d+\.\d+\.\d+)/) || document.documentElement.innerHTML.match(/qwen-chat-fe\/(\d+\.\d+\.\d+)/);
               if (match) bundleVersion = match[1];
             } catch {}
-            return { ua, secChUa, platform, mobile, bundleVersion };
+            try {
+              const baxia = (window as unknown as {
+                baxiaCommon?: { version?: unknown };
+              }).baxiaCommon;
+              if (typeof baxia?.version === "string") {
+                baxiaVersion = baxia.version;
+              }
+            } catch {}
+            return { ua, secChUa, platform, mobile, bundleVersion, baxiaVersion };
           }),
           config.timeouts.page,
           `User-agent lookup timed out for ${accountId}`,
@@ -1322,6 +1337,9 @@ export async function getBasicHeaders(accountId: string): Promise<{
         if (nav.bundleVersion) {
           updateQwenWebVersion(nav.bundleVersion);
         }
+        if (nav.baxiaVersion) {
+          updateQwenBxVersion(nav.baxiaVersion);
+        }
         cachedUserAgents.set(accountId, userAgent);
         const hints = getHeaderCache(accountId).headers;
         clientHints = {
@@ -1359,7 +1377,7 @@ export async function getBasicHeaders(accountId: string): Promise<{
       markAccountHeadersReady(accountId);
       const bxUa = cache.headers["bx-ua"];
       const bxUmidtoken = cache.headers["bx-umidtoken"];
-      const bxV = cache.headers["bx-v"] || "2.5.37";
+      const bxV = cache.headers["bx-v"] || getQwenBxVersion();
       const cookie = await getCookies(accountId);
       return { cookie, userAgent, bxV, bxUa, bxUmidtoken, ...clientHints };
     }
@@ -1383,7 +1401,7 @@ export async function getBasicHeaders(accountId: string): Promise<{
         cookieCaches.set(accountId, { cookie, timestamp: Date.now() });
         const bxUa = cache.headers["bx-ua"];
         const bxUmidtoken = cache.headers["bx-umidtoken"];
-        const bxV = cache.headers["bx-v"] || "2.5.37";
+        const bxV = cache.headers["bx-v"] || getQwenBxVersion();
         cache.lastRefresh = Date.now();
         markAccountHeadersReady(accountId);
         console.log(
@@ -1465,6 +1483,9 @@ export async function getBasicHeaders(accountId: string): Promise<{
             if (persisted.version) {
               updateQwenWebVersion(persisted.version);
             }
+            if (persisted.bxV) {
+              updateQwenBxVersion(persisted.bxV);
+            }
             cache.lastRefresh = persisted.capturedAt;
             markAccountHeadersReady(accountId);
           }
@@ -1494,7 +1515,7 @@ export async function getBasicHeaders(accountId: string): Promise<{
     markAccountHeadersReady(accountId);
     const bxUa = cache.headers["bx-ua"];
     const bxUmidtoken = cache.headers["bx-umidtoken"];
-    const bxV = cache.headers["bx-v"] || "2.5.37";
+    const bxV = cache.headers["bx-v"] || getQwenBxVersion();
 
     // Read cookie AFTER all refreshes (re-login may have updated it)
     cookieCaches.delete(accountId);
@@ -1786,6 +1807,9 @@ export async function initPlaywrightForAccount(
               if (persisted.version) {
                 updateQwenWebVersion(persisted.version);
               }
+              if (persisted.bxV) {
+                updateQwenBxVersion(persisted.bxV);
+              }
               cache.lastRefresh = persisted.capturedAt;
               markAccountHeadersReady(account.id);
               restoredFromDb = true;
@@ -2239,7 +2263,7 @@ export async function startEmailOtpLogin(
       {
         email: normalizedEmail,
         requestId,
-        version: getQwenWebVersion() || "0.3.26",
+        version: getQwenWebVersion(),
         timezone: formatAsciiTimezone(),
       },
     ).catch((err: any) => ({ ok: false, error: err?.message || String(err) }));
@@ -2351,7 +2375,7 @@ export async function verifyEmailOtpLogin(
       email: session.email,
       code: cleanCode,
       requestId,
-      version: getQwenWebVersion() || "0.3.26",
+      version: getQwenWebVersion(),
       timezone: formatAsciiTimezone(),
     },
   ).catch((err: any) => ({ ok: false, error: err?.message || String(err) }));
@@ -2408,8 +2432,8 @@ export async function verifyEmailOtpLogin(
     saveAuthSession(session.accountId, {
       cookie: `token=${accessToken}`,
       userAgent: session.fingerprint.userAgent,
-      bxV: "2.5.37",
-      version: getQwenWebVersion() || "0.3.26",
+      bxV: getQwenBxVersion(),
+      version: getQwenWebVersion(),
       userId: userId || undefined,
       tokenExpiresAt: exp || undefined,
       refreshToken: refreshToken || undefined,
@@ -2565,7 +2589,7 @@ async function loginToQwen(
           saveAuthSession(accountId, {
             cookie: cookieStr,
             userAgent: cache.headers["user-agent"] || "",
-            bxV: cache.headers["bx-v"] || "2.5.37",
+            bxV: cache.headers["bx-v"] || getQwenBxVersion(),
             bxUa: cache.headers["bx-ua"] || "",
             bxUmidtoken: cache.headers["bx-umidtoken"] || "",
             secChUa: cache.headers["sec-ch-ua"] || undefined,
@@ -2641,7 +2665,7 @@ async function loginToQwen(
           saveAuthSession(accountId, {
             cookie: cookieStr,
             userAgent: cache.headers["user-agent"] || "",
-            bxV: cache.headers["bx-v"] || "2.5.37",
+            bxV: cache.headers["bx-v"] || getQwenBxVersion(),
             bxUa: cache.headers["bx-ua"] || "",
             bxUmidtoken: cache.headers["bx-umidtoken"] || "",
             secChUa: cache.headers["sec-ch-ua"] || undefined,
@@ -2726,7 +2750,7 @@ async function loginViaApi(
 
     const signinUrl = "https://auth.qwen.ai/api/v2/auths/signin";
     const requestId = crypto.randomUUID();
-    const webVersion = getQwenWebVersion() || "0.3.26";
+    const webVersion = getQwenWebVersion();
 
     const evalRes = await page
       .evaluate(
@@ -2935,6 +2959,18 @@ async function loginViaUi(
       return { success: true };
     }
 
+    // A WAF jigsaw can render before the form is usable. Clear it first so the
+    // email/password fields are not covered and the submit is not rejected.
+    if (config.captcha.enabled) {
+      await solveVisibleCaptcha(page, {
+        waitForMs: 1_500,
+        maxAttempts: config.captcha.maxAttempts,
+        retryDelayMs: config.captcha.retryDelayMs,
+        settleMs: config.captcha.settleMs,
+        sliderTimeoutMs: config.captcha.sliderTimeoutMs,
+      }).catch(() => false);
+    }
+
     // Wait for email input
     const emailSelector = [
       'input[type="email"]',
@@ -3129,12 +3165,13 @@ async function loginViaUi(
     while (Date.now() < postSubmitDeadline) {
       if (page.isClosed()) break;
 
-      // If a slider puzzle captcha appeared after submit, solve it automatically
+      // If a slider/jigsaw challenge appeared after submit, solve it automatically
       if (config.captcha.enabled) {
-        await solveBaxiaCaptcha(page, {
+        await solveVisibleCaptcha(page, {
           waitForMs: 1500,
           maxAttempts: config.captcha.maxAttempts,
           retryDelayMs: config.captcha.retryDelayMs,
+          sliderTimeoutMs: config.captcha.sliderTimeoutMs,
         }).catch(() => {});
       }
 
@@ -3281,7 +3318,7 @@ export async function refreshAccountToken(
   // 2. If we have a refresh token, invoke the working refresh endpoint in-page
   if (refreshToken) {
     try {
-      const webVersion = getQwenWebVersion() || "0.3.26";
+      const webVersion = getQwenWebVersion();
       const refreshResult = await page.evaluate(
         async ({ rTok, tz, version }) => {
           try {
@@ -3354,7 +3391,7 @@ export async function refreshAccountToken(
           saveAuthSession(accountId, {
             cookie: cookieStr,
             userAgent: cache.headers["user-agent"] || session?.userAgent || "",
-            bxV: cache.headers["bx-v"] || session?.bxV || "2.5.37",
+            bxV: cache.headers["bx-v"] || session?.bxV || getQwenBxVersion(),
             bxUa: cache.headers["bx-ua"] || session?.bxUa || "",
             bxUmidtoken: cache.headers["bx-umidtoken"] || session?.bxUmidtoken || "",
             secChUa: cache.headers["sec-ch-ua"] || session?.secChUa,
@@ -3391,7 +3428,7 @@ export async function refreshAccountToken(
         saveAuthSession(accountId, {
           cookie: cookieStr,
           userAgent: cache.headers["user-agent"] || session?.userAgent || "",
-          bxV: cache.headers["bx-v"] || session?.bxV || "2.5.37",
+          bxV: cache.headers["bx-v"] || session?.bxV || getQwenBxVersion(),
           bxUa: cache.headers["bx-ua"] || session?.bxUa || "",
           bxUmidtoken: cache.headers["bx-umidtoken"] || session?.bxUmidtoken || "",
           secChUa: cache.headers["sec-ch-ua"] || session?.secChUa,
@@ -3594,7 +3631,7 @@ export async function captureQwenHeaders(
         cookie: reqHeaders["cookie"] || "",
         "bx-ua": reqHeaders["bx-ua"] || "",
         "bx-umidtoken": reqHeaders["bx-umidtoken"] || "",
-        "bx-v": reqHeaders["bx-v"] || "2.5.37",
+        "bx-v": reqHeaders["bx-v"] || getQwenBxVersion(),
         "user-agent": reqHeaders["user-agent"] || "",
         "x-request-id": reqHeaders["x-request-id"] || "",
         "version": reqHeaders["version"] || "",
@@ -3638,6 +3675,9 @@ export async function captureQwenHeaders(
       if (capturedHeaders["version"]) {
         updateQwenWebVersion(capturedHeaders["version"]);
       }
+      if (capturedHeaders["bx-v"]) {
+        updateQwenBxVersion(capturedHeaders["bx-v"]);
+      }
       markAccountHeadersReady(accountId);
       cache.lastRefresh = Date.now();
       // Header interception can set challenge/session cookies, so do not reuse
@@ -4250,7 +4290,7 @@ async function refreshHeadersInternal(
             saveAuthSession(accountId, {
               cookie: cookieStr,
               userAgent: cache.headers["user-agent"] || "",
-              bxV: cache.headers["bx-v"] || "2.5.37",
+              bxV: cache.headers["bx-v"] || getQwenBxVersion(),
               bxUa: cache.headers["bx-ua"] || "",
               bxUmidtoken: cache.headers["bx-umidtoken"] || "",
               secChUa: cache.headers["sec-ch-ua"] || undefined,

package/src/services/qwen-chat-pool.ts

@@ -4,8 +4,10 @@ import { config, type ChatMode, isLocalChatMode, isStatelessChatMode } from "../
 import { logger, isToolcallDebugEnabled } from "../core/logger.ts";
 import {
   computeQuotaCooldownMs,
+  getAccountCooldownInfo,
   markAccountRateLimited,
 } from "../core/account-manager.ts";
+import { recordWafHardBlock } from "../core/waf-isolation.ts";
 import { mapClientModelToQwen } from "../core/model-alias.ts";
 import { qwenUrl } from "./qwen-url.ts";
 import { QwenUpstreamError } from "./qwen-errors.ts";
@@ -23,6 +25,7 @@ async function createQwenChatSession(
   model: string,
   accountId?: string,
   chatMode: ChatMode = "thread",
+  captchaRecoveryAttempts = 1,
 ): Promise<string> {
   if (isAuthMockEnabled()) {
     return process.env.TEST_SESSION_ID || "mock-session";
@@ -60,15 +63,32 @@ async function createQwenChatSession(
   if (!chatId || typeof chatId !== "string") {
     const rawLower = raw.toLowerCase();
     if (looksLikeAntiBotChallengeText(raw)) {
-      try {
-        const { recoverBaxiaCaptcha } = await import("./captcha-coordinator.ts");
-        const solved = await recoverBaxiaCaptcha(accountId, "createQwenChatSession", {
-          challengeBody: raw,
-        });
-        if (solved) {
-          return createQwenChatSession(headers, model, accountId, chatMode);
-        }
-      } catch {}
+      if (captchaRecoveryAttempts > 0) {
+        try {
+          const { recoverBaxiaCaptcha } = await import("./captcha-coordinator.ts");
+          const solved = await recoverBaxiaCaptcha(accountId, "createQwenChatSession", {
+            challengeBody: raw,
+          });
+          if (solved) {
+            return createQwenChatSession(
+              headers,
+              model,
+              accountId,
+              chatMode,
+              captchaRecoveryAttempts - 1,
+            );
+          }
+        } catch {}
+      }
+
+      // Surface the WAF category to the caller so the warm pool can quarantine
+      // the account instead of treating this as a generic invalid payload
+      // (which would retry the same flagged device identity forever).
+      throw new QwenUpstreamError(
+        `Qwen create chat blocked by WAF challenge: ${raw.substring(0, 300)}`,
+        "FAIL_SYS_USER_VALIDATE",
+        403,
+      );
     }
 
     const isUnauthorized =
@@ -346,6 +366,29 @@ async function refillQwenChatPool(
         console.warn(
           `[WarmPool] Account ${accountId || "global"} rate-limited during chat creation. Marked for cooldown.`,
         );
+      } else if (
+        accountId &&
+        (err.upstreamCode === "FAIL_SYS_USER_VALIDATE" ||
+          err.upstreamCode === "RGV587_ERROR" ||
+          /_____tmd_____|rgv587_error|fail_sys_user_validate/i.test(
+            err.message,
+          ))
+      ) {
+        // A background warm-up that hits an unsolvable challenge must park the
+        // account: otherwise the next refill repeats the same flagged request
+        // and spreads the WAF block. Guarded so an already-quarantined account
+        // is not escalated twice by concurrent refills.
+        const existing = getAccountCooldownInfo(accountId);
+        if (existing?.reason === "WafChallenge") {
+          console.warn(
+            `[WarmPool] Account ${accountId} still on WAF quarantine (${Math.ceil(existing.remainingMs / 1000)}s left); skipping re-escalation.`,
+          );
+        } else {
+          const block = recordWafHardBlock(accountId);
+          console.warn(
+            `[WarmPool] Unsolved WAF challenge on ${accountId} during chat creation; quarantined ${Math.ceil(block.cooldownMs / 1000)}s and rotated the fingerprint.`,
+          );
+        }
       }
     }
     if (isToolcallDebugEnabled()) {

package/src/services/qwen-headers.ts

@@ -21,6 +21,7 @@ export function getDefaultQwenUserAgent(major = getChromeMajor()): string {
 }
 
 let dynamicWebVersion: string | null = null;
+let dynamicBxVersion: string | null = null;
 
 export function updateQwenWebVersion(version?: string | null): void {
   if (version && typeof version === "string" && /^\d+\.\d+\.\d+/.test(version)) {
@@ -32,6 +33,22 @@ export function getQwenWebVersion(): string {
   return dynamicWebVersion || config.qwen.webVersion;
 }
 
+/**
+ * Aliyun Baxia publishes its SDK version at `window.baxiaCommon.version` and
+ * also sends it as the `bx-v` header. Detecting it at runtime keeps the
+ * anti-bot fingerprint aligned when Alibaba ships a new SDK; the static
+ * QWEN_BX_V value remains as a last-resort fallback.
+ */
+export function updateQwenBxVersion(version?: string | null): void {
+  if (version && typeof version === "string" && /^\d+\.\d+\.\d+/.test(version)) {
+    dynamicBxVersion = version.trim();
+  }
+}
+
+export function getQwenBxVersion(): string {
+  return dynamicBxVersion || config.auth.bxV;
+}
+
 export const QWEN_WEB_VERSION = config.qwen.webVersion;
 export const DEFAULT_QWEN_USER_AGENT = getDefaultQwenUserAgent(151);
 const QWEN_TIMEZONE_HEADER = new Date().toString().split(" (")[0];
@@ -77,7 +94,7 @@ export function buildQwenRequestHeaders(
     Connection: "keep-alive",
     "User-Agent": opts.userAgent || getDefaultQwenUserAgent(),
     "X-Request-Id": uuidv4(),
-    "bx-v": opts.bxV || "2.5.37",
+    "bx-v": opts.bxV || getQwenBxVersion(),
     source: "web",
     version: opts.version || getQwenWebVersion(),
     timezone: opts.extra?.timezone || opts.extra?.Timezone || formatAsciiTimezone(),

package/src/services/qwen.ts

@@ -1006,7 +1006,7 @@ export async function requestQwenTextInBrowser(
 
   const evaluateRequest = (page: Page) =>
     page.evaluate(
-      async ({ url, method, headers, body, referrer, timeoutMs, tz }: {
+      async ({ url, method, headers, body, referrer, timeoutMs, tz, version }: {
         url: string;
         method: "GET" | "POST" | "DELETE";
         headers: Record<string, string>;
@@ -1014,6 +1014,7 @@ export async function requestQwenTextInBrowser(
         referrer?: string;
         timeoutMs: number;
         tz: string;
+        version: string;
       }): Promise<BrowserTextResponse> => {
         const controller = new AbortController();
         const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
@@ -1038,7 +1039,7 @@ export async function requestQwenTextInBrowser(
                   headers: {
                     accept: "application/json, text/plain, */*",
                     source: "web",
-                    version: "0.3.11",
+                    version,
                     "x-request-origin": "https://chat.qwen.ai",
                     timezone: tz,
                     authorization: `Bearer ${rTok}`,
@@ -1087,6 +1088,7 @@ export async function requestQwenTextInBrowser(
         referrer: options.referrer,
         timeoutMs: options.timeoutMs ?? Math.min(config.timeouts.page, 20_000),
         tz: formatAsciiTimezone(),
+        version: getQwenWebVersion(),
       },
     );
   const recoverOnTimeout = !options.noMutexRecovery;
@@ -2395,7 +2397,7 @@ export async function deleteSingleQwenChat(
 
   const requestHeaders: Record<string, string> = {
     source: "web",
-    version: getQwenWebVersion() || "0.3.26",
+    version: getQwenWebVersion(),
     timezone: formatAsciiTimezone(),
     "x-request-id": crypto.randomUUID(),
     Referer: qwenUrl(`/c/${encodeURIComponent(chatId)}`),
@@ -2448,7 +2450,7 @@ export async function fetchRemoteQwenChats(
   }
 
   const requestHeaders: Record<string, string> = {
-    version: getQwenWebVersion() || "0.3.26",
+    version: getQwenWebVersion(),
     timezone: formatAsciiTimezone(),
     "x-request-id": crypto.randomUUID(),
     Referer: qwenUrl("/settings/chats"),

package/src/services/session-keeper.ts

@@ -13,6 +13,55 @@ let running = false;
 let intervalId: ReturnType<typeof setInterval> | null = null;
 let cycleInProgress = false;
 
+/**
+ * A keep-alive failure (navigation timeout, transient WAF, closed context
+ * that is not yet reported as closed) must not retry on every cycle: it would
+ * hammer the same broken page and bury the logs. Back off per account with the
+ * usual exponential schedule, capped at five minutes.
+ */
+const KEEP_ALIVE_BACKOFF_BASE_MS = 2_000;
+const KEEP_ALIVE_BACKOFF_MAX_MS = 5 * 60_000;
+
+interface KeepAliveRetryState {
+  failures: number;
+  nextAttemptAt: number;
+}
+
+const keepAliveRetries = new Map<string, KeepAliveRetryState>();
+
+export function computeSessionKeeperBackoffMs(failures: number): number {
+  const exponent = Math.max(0, Math.min(failures - 1, 8));
+  return Math.min(
+    KEEP_ALIVE_BACKOFF_MAX_MS,
+    KEEP_ALIVE_BACKOFF_BASE_MS * 2 ** exponent,
+  );
+}
+
+function isKeepAliveBackedOff(accountId: string): boolean {
+  const state = keepAliveRetries.get(accountId);
+  return Boolean(state && Date.now() < state.nextAttemptAt);
+}
+
+function recordKeepAliveFailure(accountId: string): number {
+  const state = keepAliveRetries.get(accountId) ?? {
+    failures: 0,
+    nextAttemptAt: 0,
+  };
+  state.failures += 1;
+  const backoffMs = computeSessionKeeperBackoffMs(state.failures);
+  state.nextAttemptAt = Date.now() + backoffMs;
+  keepAliveRetries.set(accountId, state);
+  return backoffMs;
+}
+
+export function resetSessionKeeperRetryStateForTests(): void {
+  keepAliveRetries.clear();
+}
+
+export function isSessionKeeperAccountBackedOff(accountId: string): boolean {
+  return isKeepAliveBackedOff(accountId);
+}
+
 export function isSessionKeeperRunning(): boolean {
   return running;
 }
@@ -24,19 +73,31 @@ async function runKeepAliveCycle(): Promise<void> {
     if (config.sessionKeeper.enabled) {
       const accountIds = getActivePlaywrightAccountIds();
       for (const accountId of accountIds) {
-        await keepAlivePlaywrightAccount(accountId).catch((error) => {
+        if (isKeepAliveBackedOff(accountId)) {
+          continue;
+        }
+        try {
+          const keptAlive = await keepAlivePlaywrightAccount(accountId);
+          if (keptAlive) {
+            keepAliveRetries.delete(accountId);
+          }
+        } catch (error) {
           // Shutdown/eviction closes contexts while a cycle is in flight; the
           // resulting "already closed" rejection is benign. The old substring
           // filter ("Target closed"/"Page is closed") missed Playwright's real
           // message ("Target page, context or browser has been closed") and
           // leaked a warning on every Ctrl+C.
-          if (isPlaywrightAlreadyClosedError(error)) return;
-          const message =
-            error instanceof Error ? error.message : String(error);
-          console.warn(
-            `[SessionKeeper] Keep-alive failed for ${accountId}: ${message}`,
-          );
-        });
+          if (isPlaywrightAlreadyClosedError(error)) {
+            keepAliveRetries.delete(accountId);
+          } else {
+            const message =
+              error instanceof Error ? error.message : String(error);
+            const backoffMs = recordKeepAliveFailure(accountId);
+            console.warn(
+              `[SessionKeeper] Keep-alive failed for ${accountId}: ${message} (retry in ${Math.round(backoffMs / 1000)}s)`,
+            );
+          }
+        }
         await sleep(humanDelay(250, 900));
       }
     }
@@ -81,6 +142,7 @@ export function stopSessionKeeper(): void {
     intervalId = null;
   }
   cycleInProgress = false;
+  keepAliveRetries.clear();
 }
 
 export async function runSessionKeeperOnceForTesting(): Promise<void> {