fix: 根据代码审查意见修复两处问题

- qwen-ai.ts: 将 auto_search 恢复为 false（默认禁用联网搜索），
  避免所有普通对话请求无条件触发网络搜索，导致响应变慢
  和结果非预期包含联网内容。如需启用，请在模型名加 -search
  后缀或通过 web_search 参数显式指定。

- manager.ts: 登录成功后的日志改为只打印凭据字段名
  （Object.keys），不再将 Cookie 等敏感凭据明文输出到日志，
  防止可复用的会话 Cookie 泄露到日志文件。

Author: 29486

src/main/oauth/manager.ts

@@ -52,27 +52,27 @@ export class OAuthManager extends EventEmitter {
    */
   private getAdapter(providerId: string, providerType: ProviderType): BaseOAuthAdapter {
     const key = `${providerId}_${providerType}`
-    
+
     if (!this.adapters.has(key)) {
       const adapter = createAdapter(providerType, {
         providerId,
         providerType,
         authMethods: [],
         callbackPort: DEFAULT_CALLBACK_PORT,
       })
-      
+
       if (this.mainWindow) {
         adapter.setMainWindow(this.mainWindow)
       }
-      
+
       adapter.setProgressCallback((event) => {
         this.emit('progress', event)
         this.sendProgressToRenderer(event)
       })
-      
+
       this.adapters.set(key, adapter)
     }
-    
+
     return this.adapters.get(key)!
   }
 
@@ -100,7 +100,7 @@ export class OAuthManager extends EventEmitter {
 
     return new Promise((resolve, reject) => {
       const adapter = this.getAdapter(options.providerId, options.providerType)
-      
+
       const timeout = setTimeout(() => {
         this.cancelLogin()
         const result: OAuthResult = {
@@ -146,11 +146,11 @@ export class OAuthManager extends EventEmitter {
     mimoPhToken?: string
   ): Promise<OAuthResult> {
     const adapter = this.getAdapter(providerId, providerType)
-    
+
     if ('loginWithToken' in adapter && typeof (adapter as any).loginWithToken === 'function') {
       return await (adapter as any).loginWithToken(providerId, token, realUserID, mimoUserId, mimoPhToken)
     }
-    
+
     // For Mimo, validate with all three tokens
     if (providerType === 'mimo') {
       if (!mimoUserId || !mimoPhToken) {
@@ -166,7 +166,7 @@ export class OAuthManager extends EventEmitter {
         user_id: mimoUserId,
         ph_token: mimoPhToken,
       })
-      
+
       if (!validation.valid) {
         return {
           success: false,
@@ -175,7 +175,7 @@ export class OAuthManager extends EventEmitter {
           error: validation.error || 'Token validation failed',
         }
       }
-      
+
       return {
         success: true,
         providerId,
@@ -188,9 +188,9 @@ export class OAuthManager extends EventEmitter {
         accountInfo: validation.accountInfo,
       }
     }
-    
+
     const validation = await adapter.validateToken({ token })
-    
+
     if (!validation.valid) {
       return {
         success: false,
@@ -199,7 +199,7 @@ export class OAuthManager extends EventEmitter {
         error: validation.error || 'Token validation failed',
       }
     }
-    
+
     return {
       success: true,
       providerId,
@@ -345,13 +345,13 @@ export class OAuthManager extends EventEmitter {
 
         // Store the token
         collectedTokens[event.key] = event.value
-        
+
         // Store all cookies if provided (needed for Cloudflare-protected requests)
         if (event.allCookies) {
           collectedTokens['cookies'] = event.allCookies as any
           console.log('[OAuthManager] Stored all cookies:', Object.keys(event.allCookies).length, 'cookies')
         }
-        
+
         console.log('[OAuthManager] Collected tokens:', Object.keys(collectedTokens))
 
         // For MiniMax, we need both token and realUserID before validating
@@ -401,7 +401,7 @@ export class OAuthManager extends EventEmitter {
               hasUserId: !!hasUserId,
               hasPhToken: !!hasPhToken,
             })
-            
+
             // Clear any existing timeout
             if (validationTimeout) {
               clearTimeout(validationTimeout)
@@ -555,7 +555,7 @@ export class OAuthManager extends EventEmitter {
           console.log('[OAuthManager] Validation result:', validation)
 
           if (validation.valid) {
-            console.log('[OAuthManager] Token is valid, completing login with credentials:', JSON.stringify(finalCredentials, null, 2))
+            console.log('[OAuthManager] Token is valid, completing login with credentials keys:', Object.keys(finalCredentials).join(', '))
             inAppLoginManager.completeWithSuccess(finalCredentials)
           } else {
             console.log('[OAuthManager] Token validation failed:', validation.error)

src/main/proxy/adapters/qwen-ai.ts

@@ -148,31 +148,31 @@ export class QwenAiAdapter {
   mapModel(openaiModel: string): string {
     let model = openaiModel
     let forceThinking: boolean | undefined
-    
+
     if (model.endsWith('-thinking')) {
       forceThinking = true
       model = model.slice(0, -9)
     } else if (model.endsWith('-fast')) {
       forceThinking = false
       model = model.slice(0, -5)
     }
-    
-    ;(this as any)._forceThinking = forceThinking
-    
+
+    ; (this as any)._forceThinking = forceThinking
+
     const lowerModel = model.toLowerCase()
-    
+
     if (MODEL_ALIASES[lowerModel]) {
       return MODEL_ALIASES[lowerModel]
     }
-    
+
     if (this.provider.modelMappings) {
       for (const [key, value] of Object.entries(this.provider.modelMappings)) {
         if (key.toLowerCase() === lowerModel) {
           return value
         }
       }
     }
-    
+
     return model
   }
 
@@ -236,7 +236,7 @@ export class QwenAiAdapter {
 
     try {
       console.log('[QwenAI] Deleting all chats for account')
-      
+
       const response = await this.axiosInstance.delete(url, {
         headers: this.getHeaders(),
       })
@@ -265,7 +265,7 @@ export class QwenAiAdapter {
     }
 
     const modelId = this.mapModel(request.model)
-    
+
     // Get forced thinking mode setting from originalModel (preserves user's intent before mapping)
     // If originalModel exists, use it for thinking detection; otherwise fall back to request.model
     const modelForThinking = request.originalModel || request.model
@@ -289,11 +289,11 @@ export class QwenAiAdapter {
     console.log('[QwenAI] Created new chat:', chatId)
 
     const messages = request.messages
-    
+
     // Extract system message and user message
     let systemContent = ''
     let userContent = ''
-    
+
     // Single-turn mode: extract all messages
     for (const msg of messages) {
       if (msg.role === 'system') {
@@ -302,7 +302,7 @@ export class QwenAiAdapter {
         userContent = msg.content
       }
     }
-    
+
     // If system prompt exists, prepend it to user content
     if (systemContent) {
       userContent = `${systemContent}\n\nUser: ${userContent}`
@@ -317,17 +317,17 @@ export class QwenAiAdapter {
     // 1. Model name suffix: -thinking (force thinking), -fast (force fast mode)
     // 2. enable_thinking parameter for explicit control
     // 3. If neither is specified, thinking mode is disabled by default (fast mode)
-    const shouldEnableThinking = forceThinking !== undefined 
-      ? forceThinking 
+    const shouldEnableThinking = forceThinking !== undefined
+      ? forceThinking
       : request.enable_thinking === true
-    
+
     const featureConfig: Record<string, any> = {
       thinking_enabled: shouldEnableThinking,
       output_schema: 'phase',
       research_mode: 'normal',
       auto_thinking: false,
       thinking_mode: shouldEnableThinking ? 'Thinking' : 'Fast',
-      auto_search: true,
+      auto_search: false, // Default to disable auto search
     }
 
     if (shouldEnableThinking) {
@@ -419,11 +419,11 @@ export class QwenAiStreamHandler {
 
   private sendToolCalls(transStream: PassThrough): void {
     if (this.toolCallsSent) return
-    
+
     const toolCalls = parseToolUse(this.content)
     if (toolCalls && toolCalls.length > 0) {
       this.toolCallsSent = true
-      
+
       // Send tool_calls delta
       for (let i = 0; i < toolCalls.length; i++) {
         const tc = toolCalls[i]
@@ -451,7 +451,7 @@ export class QwenAiStreamHandler {
           })}\n\n`
         )
       }
-      
+
       // Send finish with tool_calls
       transStream.write(
         `data: ${JSON.stringify({
@@ -499,7 +499,7 @@ export class QwenAiStreamHandler {
       onEvent: (event: any) => {
         try {
           console.log('[QwenAI] Parsed event:', event.event, 'data:', event.data?.substring(0, 200))
-          
+
           if (event.data === '[DONE]') {
             console.log('[QwenAI] Received [DONE] signal')
             return
@@ -592,10 +592,10 @@ export class QwenAiStreamHandler {
                 sendInitialChunk()
               }
               console.log('[QwenAI] Entering answer branch, content:', content)
-              
+
               // Accumulate content for tool call detection
               this.content += content
-              
+
               if (content) {
                 console.log('[QwenAI] Sending content chunk:', content)
                 const chunk = {
@@ -614,7 +614,7 @@ export class QwenAiStreamHandler {
               }
               // Accumulate content for tool call detection
               this.content += content
-              
+
               const chunk = {
                 id: this.responseId || this.chatId,
                 model: this.model,
@@ -632,7 +632,7 @@ export class QwenAiStreamHandler {
                 this.sendToolCalls(transStream)
                 return
               }
-              
+
               const finishReason = delta.finish_reason || 'stop'
               const finalChunk = {
                 id: this.responseId || this.chatId,