添加 captcha fallback

.local/state/gh/device-id

@@ -0,0 +1 @@
+a11513e8-7e98-4930-b381-793073bbab61

README.md

@@ -24,6 +24,7 @@ Required runtime secrets:
 - `BACKUP_TOKEN`: Z.AI JWT token copied from `chat.z.ai` localStorage
 
 The container sets `CAPTCHA_PROVIDER_URL=http://127.0.0.1:9876` so the proxy can fetch captcha tokens from the internal provider.
+If the internal provider cannot get an Aliyun token from the current Space egress IP, set `FALLBACK_CAPTCHA_PROVIDER_URL` to another compatible captcha token service.
 
 > 将 [Z.AI](https://chat.z.ai) 转换为 OpenAI 兼容 API 的代理服务。
 >

captcha-provider/server.js

@@ -17,7 +17,9 @@ const BROWSER_BACKEND = process.env.BROWSER_BACKEND || 'cloak';
 // Token 预取池配置
 const POOL_SIZE = Number(process.env.POOL_SIZE || 5);       // 池中保持的 token 数量
 const TOKEN_TTL = Number(process.env.TOKEN_TTL || 240000);  // token 有效期 4 分钟
-const REFILL_INTERVAL = Number(process.env.REFILL_INTERVAL || 3000); // 补充间隔 3s
+const REFILL_INTERVAL = Number(process.env.REFILL_INTERVAL || 3000); // 补充间隔 3s
+const FALLBACK_CAPTCHA_PROVIDER_URL = process.env.FALLBACK_CAPTCHA_PROVIDER_URL || '';
+const FALLBACK_CAPTCHA_TIMEOUT = Number(process.env.FALLBACK_CAPTCHA_TIMEOUT || 60000);
 
 // ─── State ───
 let browser = null;
@@ -104,7 +106,7 @@ async function launchBrowser() {
 //
 // BROWSER_BACKEND=cloak: 使用 CloakBrowser（C++ 源码级 stealth patch chromium，更难被反爬识别）
 // BROWSER_BACKEND=playwright: 使用普通 chromium + JS stealth 补丁（fallback）
-async function acquireToken() {
+async function acquireToken() {
   let localBrowser;
 
   if (BROWSER_BACKEND === 'cloak') {
@@ -208,7 +210,41 @@ async function acquireToken() {
   } finally {
     try { await localBrowser.close(); } catch {}
   }
-}
+}
+
+async function acquireFallbackToken() {
+  if (!FALLBACK_CAPTCHA_PROVIDER_URL) return null;
+  if (!process.env.BACKUP_TOKEN) {
+    throw new Error('fallback captcha requires BACKUP_TOKEN');
+  }
+
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), FALLBACK_CAPTCHA_TIMEOUT);
+  try {
+    const url = FALLBACK_CAPTCHA_PROVIDER_URL.replace(/\/+$/, '') + '/token';
+    const resp = await fetch(url, {
+      method: 'POST',
+      headers: {
+        'Accept': 'application/json',
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify({ jwt_token: process.env.BACKUP_TOKEN }),
+      signal: controller.signal,
+    });
+    const text = await resp.text();
+    if (!resp.ok) {
+      throw new Error(`fallback status ${resp.status}: ${text.slice(0, 200)}`);
+    }
+    const data = JSON.parse(text);
+    const token = data.captcha_verify_param || data.captchaVerifyParam || data.token;
+    if (!token) {
+      throw new Error('fallback response missing captcha token');
+    }
+    return token;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
 
 // ─── Token pool management ───
 
@@ -284,15 +320,32 @@ const server = http.createServer(async (req, res) => {
     }
 
     // 先从池里取
-    const cached = getValidToken();
-    if (cached) {
-      stats.served++;
-      console.log(`[provider] Served cached token (pool: ${tokenPool.length})`);
-      return sendJson(res, 200, { ok: true, token: cached, cached: true });
-    }
-
-    // 池空了，实时获取
-    try {
+    const cached = getValidToken();
+    if (cached) {
+      stats.served++;
+      console.log(`[provider] Served cached token (pool: ${tokenPool.length})`);
+      return sendJson(res, 200, { ok: true, token: cached, cached: true });
+    }
+
+    if (FALLBACK_CAPTCHA_PROVIDER_URL) {
+      try {
+        const started = Date.now();
+        const token = await acquireFallbackToken();
+        if (token) {
+          const elapsed = Date.now() - started;
+          stats.served++;
+          console.log(`[provider] Served fallback token in ${elapsed}ms`);
+          return sendJson(res, 200, { ok: true, token, cached: false, fallback: true, elapsed_ms: elapsed });
+        }
+      } catch (err) {
+        lastError = err.message;
+        stats.errors++;
+        console.error(`[provider] Fallback token error: ${err.message}`);
+      }
+    }
+
+    // 池空了，实时获取
+    try {
       const started = Date.now();
       const token = await acquireToken();
       const elapsed = Date.now() - started;