@asframe/opencode-iflow-auth 1.0.0

package/README.md

@@ -0,0 +1,278 @@
+# OpenCode iFlow Auth Plugin
+
+[![npm version](https://img.shields.io/npm/v/@asframe/opencode-iflow-auth)](https://www.npmjs.com/package/@asframe/opencode-iflow-auth)
+[![npm downloads](https://img.shields.io/npm/dm/@asframe/opencode-iflow-auth)](https://www.npmjs.com/package/@asframe/opencode-iflow-auth)
+[![license](https://img.shields.io/npm/l/@asframe/opencode-iflow-auth)](https://www.npmjs.com/package/@asframe/opencode-iflow-auth)
+[![GitHub](https://img.shields.io/badge/GitHub-asframe%2Fopencode--iflow--auth-blue)](https://github.com/asframe/opencode-iflow-auth)
+
+OpenCode plugin for iFlow.cn providing access to Qwen, DeepSeek, Kimi, GLM, and iFlow ROME models with dual authentication and CLI Proxy support.
+
+## Features
+
+- **Dual authentication**: OAuth 2.0 (PKCE) and API Key support.
+- **CLI Proxy mode**: Support GLM-5 through iflow CLI with automatic proxy server.
+- **Multi-account rotation**: Sticky and round-robin strategies.
+- **Automated token refresh**: Rate limit handling with exponential backoff.
+- **Native thinking mode**: Support for GLM-4.x, GLM-5 and DeepSeek R1 models.
+- **Configurable timeout**: Request timeout and iteration limits to prevent hangs.
+- **Automatic port selection**: OAuth callback server port conflict avoidance.
+
+## Two Plugin Modes
+
+This package exports two plugins:
+
+### 1. `IFlowPlugin` - Direct API Mode
+
+Direct API calls to iFlow.cn for standard models.
+
+| Property | Value |
+|----------|-------|
+| Provider | `iflow` |
+| baseURL | `https://apis.iflow.cn/v1` |
+| Models | deepseek-v3.2, glm-4.6, kimi-k2.5, qwen3-coder-plus, etc. |
+
+### 2. `IFlowProxyPlugin` - CLI Proxy Mode
+
+Routes requests through iflow CLI for GLM-5 support. The proxy server starts automatically when OpenCode loads the plugin.
+
+| Property | Value |
+|----------|-------|
+| Provider | `iflow-proxy` |
+| Proxy Port | `127.0.0.1:19998` |
+| Models | glm-5, glm-5-free, glm-5-thinking |
+
+**How it works:**
+1. Plugin detects if model requires CLI (glm-5, glm-5-free, glm-5-thinking)
+2. Starts a local proxy server on port 19998
+3. Routes CLI-required models through `iflow` CLI via stdin
+4. Routes other models directly to iFlow API
+
+## Installation
+
+Add the plugin to your `opencode.json` or `opencode.jsonc`:
+
+```json
+{
+  "plugin": ["@asframe/opencode-iflow-auth"],
+  "provider": {
+    "iflow": {
+      "npm": "@ai-sdk/openai-compatible",
+      "options": {
+        "baseURL": "https://apis.iflow.cn/v1"
+      },
+      "models": {
+        "deepseek-v3.2": {
+          "name": "DeepSeek V3.2",
+          "limit": { "context": 128000, "output": 64000 },
+          "modalities": { "input": ["text"], "output": ["text"] }
+        },
+        "glm-4.6": {
+          "name": "GLM-4.6",
+          "limit": { "context": 128000, "output": 64000 },
+          "modalities": { "input": ["text"], "output": ["text"] }
+        },
+        "kimi-k2.5": {
+          "name": "Kimi K2.5",
+          "limit": { "context": 256000, "output": 64000 },
+          "modalities": { "input": ["text"], "output": ["text"] }
+        },
+        "qwen3-coder-plus": {
+          "name": "Qwen3 Coder Plus",
+          "limit": { "context": 1000000, "output": 64000 },
+          "modalities": { "input": ["text"], "output": ["text"] }
+        }
+      }
+    },
+    "iflow-proxy": {
+      "npm": "@ai-sdk/openai-compatible",
+      "options": {
+        "baseURL": "http://127.0.0.1:19998/v1"
+      },
+      "models": {
+        "glm-5": {
+          "name": "GLM-5 (via CLI Proxy)",
+          "limit": { "context": 202000, "output": 64000 },
+          "modalities": { "input": ["text"], "output": ["text"] }
+        },
+        "glm-5-free": {
+          "name": "GLM-5 Free (via CLI Proxy)",
+          "limit": { "context": 202000, "output": 64000 },
+          "modalities": { "input": ["text"], "output": ["text"] }
+        },
+        "glm-5-thinking": {
+          "name": "GLM-5 Thinking (via CLI Proxy)",
+          "limit": { "context": 202000, "output": 64000 },
+          "modalities": { "input": ["text"], "output": ["text"] }
+        }
+      }
+    }
+  }
+}
+```
+
+## Setup
+
+### Direct API Mode
+
+1. Run `opencode auth login`.
+2. Select `Other`, type `iflow`, and press enter.
+3. Choose authentication method:
+   - **OAuth 2.0**: Follow browser flow for secure token-based authentication.
+   - **API Key**: Enter your iFlow API key (starts with `sk-`).
+
+### CLI Proxy Mode (for GLM-5)
+
+1. Install iflow CLI: `npm install -g iflow-cli`
+2. Login to iflow CLI: `iflow login`
+3. The proxy server will start automatically when using `iflow-proxy` provider.
+
+**Auto-install CLI:**
+
+If iflow CLI is not installed, the plugin can automatically install it for you. Enable this feature by setting the environment variable:
+
+```bash
+# PowerShell
+$env:IFLOW_AUTO_INSTALL_CLI = "true"
+
+# Bash
+export IFLOW_AUTO_INSTALL_CLI=true
+```
+
+**Requirements for CLI Proxy:**
+- Node.js 18+
+- iflow CLI installed and logged in (or set `IFLOW_AUTO_INSTALL_CLI=true` to auto-install)
+- Port 19998 available (or will use existing proxy if already running)
+
+## Usage
+
+```bash
+# Direct API mode
+opencode run "你好" --model iflow/deepseek-v3.2
+opencode run "你好" --model iflow/glm-4.6
+opencode run "你好" --model iflow/kimi-k2.5
+
+# CLI Proxy mode (GLM-5)
+opencode run "你好" --model iflow-proxy/glm-5
+opencode run "你好" --model iflow-proxy/glm-5-thinking
+```
+
+## Configuration
+
+Edit `~/.config/opencode/iflow.json`:
+
+```json
+{
+  "default_auth_method": "oauth",
+  "account_selection_strategy": "round-robin",
+  "auth_server_port_start": 8087,
+  "auth_server_port_range": 10,
+  "max_request_iterations": 50,
+  "request_timeout_ms": 300000,
+  "enable_log_api_request": false
+}
+```
+
+### Configuration Options
+
+- `default_auth_method`: Default authentication method (`oauth`, `apikey`)
+- `account_selection_strategy`: Account rotation strategy (`sticky`, `round-robin`)
+- `auth_server_port_start`: Starting port for OAuth callback server (1024-65535)
+- `auth_server_port_range`: Number of ports to try (1-100)
+- `max_request_iterations`: Maximum loop iterations to prevent hangs (10-1000)
+- `request_timeout_ms`: Request timeout in milliseconds (60000-600000ms)
+- `enable_log_api_request`: Enable API request/response logging (errors always logged)
+
+### Environment Variables
+
+- `IFLOW_AUTH_DEBUG`: Enable debug logging for auth plugin (`true`/`false`)
+- `IFLOW_PROXY_DEBUG`: Enable debug logging for proxy plugin (`true`/`false`)
+- `IFLOW_AUTO_INSTALL_CLI`: Auto-install iflow CLI if not installed (`true`/`false`)
+- `IFLOW_DEFAULT_AUTH_METHOD`
+- `IFLOW_ACCOUNT_SELECTION_STRATEGY`
+- `IFLOW_AUTH_SERVER_PORT_START`
+- `IFLOW_AUTH_SERVER_PORT_RANGE`
+- `IFLOW_MAX_REQUEST_ITERATIONS`
+- `IFLOW_REQUEST_TIMEOUT_MS`
+- `IFLOW_ENABLE_LOG_API_REQUEST`
+
+## Storage
+
+**Linux/macOS:**
+- Credentials: `~/.config/opencode/iflow-accounts.json`
+- Plugin Config: `~/.config/opencode/iflow.json`
+
+**Windows:**
+- Credentials: `%APPDATA%\opencode\iflow-accounts.json`
+- Plugin Config: `%APPDATA%\opencode\iflow.json`
+
+## Thinking Models
+
+iFlow supports thinking models with customizable thinking budgets via variants:
+
+### GLM-4.6, GLM-5 & DeepSeek R1
+
+```json
+{
+  "variants": {
+    "low": { "thinkingConfig": { "thinkingBudget": 1024 } },
+    "medium": { "thinkingConfig": { "thinkingBudget": 8192 } },
+    "max": { "thinkingConfig": { "thinkingBudget": 32768 } }
+  }
+}
+```
+
+## Troubleshooting
+
+### CLI Proxy Issues
+
+If you encounter issues with the CLI proxy:
+
+1. **Check if iflow CLI is installed:**
+   ```bash
+   iflow --version
+   ```
+
+2. **Check if you're logged in:**
+   ```bash
+   iflow login
+   ```
+
+3. **Test iflow CLI directly:**
+   ```bash
+   echo "你好" | iflow -m glm-5
+   ```
+
+4. **Enable debug logging:**
+   ```bash
+   $env:IFLOW_PROXY_DEBUG = "true"
+   opencode run "你好" --model iflow-proxy/glm-5
+   ```
+
+### Port Already in Use
+
+If port 19998 is already in use, the plugin will detect it and use the existing proxy. If you need to restart the proxy:
+
+```bash
+# Kill existing process on port 19998
+# Windows
+Get-Process -Id (Get-NetTCPConnection -LocalPort 19998).OwningProcess | Stop-Process -Force
+
+# Linux/macOS
+lsof -i :19998 | grep LISTEN | awk '{print $2}' | xargs kill -9
+```
+
+## License
+
+MIT License - see [LICENSE](LICENSE) for details.
+
+## Disclaimer
+
+This plugin is provided strictly for learning and educational purposes. It is an independent implementation and is not affiliated with, endorsed by, or supported by iFlow.cn. Use of this plugin is at your own risk.
+
+Feel free to open a PR to optimize this plugin further.
+
+## Links
+
+- [GitHub Repository](https://github.com/asframe/opencode-iflow-auth)
+- [npm Package](https://www.npmjs.com/package/@asframe/opencode-iflow-auth)
+- [iFlow.cn](https://iflow.cn)

package/dist/constants.d.ts

@@ -0,0 +1,33 @@
+export type IFlowAuthMethod = 'oauth' | 'apikey';
+export declare function isValidAuthMethod(method: string): method is IFlowAuthMethod;
+export declare const IFLOW_CONSTANTS: {
+    BASE_URL: string;
+    OAUTH_TOKEN_URL: string;
+    OAUTH_AUTHORIZE_URL: string;
+    USER_INFO_URL: string;
+    SUCCESS_REDIRECT: string;
+    CLIENT_ID: string;
+    CLIENT_SECRET: string;
+    AXIOS_TIMEOUT: number;
+    USER_AGENT: string;
+    CALLBACK_PORT_START: number;
+    CALLBACK_PORT_RANGE: number;
+};
+export declare const THINKING_MODELS: string[];
+export declare function isThinkingModel(model: string): boolean;
+export declare function applyThinkingConfig(body: any, model: string): any;
+export interface IFlowModelConfig {
+    id: string;
+    name: string;
+    context: number;
+    output: number;
+    inputModalities: ('text' | 'image' | 'audio' | 'video' | 'pdf')[];
+    outputModalities: ('text' | 'image' | 'audio' | 'video' | 'pdf')[];
+    reasoning?: boolean;
+    toolcall?: boolean;
+    temperature?: boolean;
+    family?: string;
+    variants?: Record<string, Record<string, any>>;
+}
+export declare const IFLOW_MODELS: IFlowModelConfig[];
+export declare function registerIFlowModels(provider: any): void;

package/dist/constants.js

@@ -0,0 +1,303 @@
+export function isValidAuthMethod(method) {
+    return method === 'oauth' || method === 'apikey';
+}
+export const IFLOW_CONSTANTS = {
+    BASE_URL: 'https://apis.iflow.cn/v1',
+    OAUTH_TOKEN_URL: 'https://iflow.cn/oauth/token',
+    OAUTH_AUTHORIZE_URL: 'https://iflow.cn/oauth',
+    USER_INFO_URL: 'https://iflow.cn/api/oauth/getUserInfo',
+    SUCCESS_REDIRECT: 'https://iflow.cn/oauth/success',
+    CLIENT_ID: '10009311001',
+    CLIENT_SECRET: '4Z3YjXycVsQvyGF1etiNlIBB4RsqSDtW',
+    AXIOS_TIMEOUT: 120000,
+    USER_AGENT: 'OpenCode-iFlow',
+    CALLBACK_PORT_START: 8087,
+    CALLBACK_PORT_RANGE: 10
+};
+export const THINKING_MODELS = ['glm-4.6', 'glm-5', 'qwen3-235b-a22b-thinking-2507', 'deepseek-r1'];
+export function isThinkingModel(model) {
+    return THINKING_MODELS.some((m) => model.startsWith(m));
+}
+export function applyThinkingConfig(body, model) {
+    const thinkingBudget = body.providerOptions?.thinkingConfig?.thinkingBudget;
+    const isThinkingEnabled = body.providerOptions?.thinkingConfig?.enabled !== false;
+    if (model.startsWith('glm-5')) {
+        const result = {
+            ...body,
+            temperature: 1,
+            top_p: 0.95,
+        };
+        if (isThinkingEnabled) {
+            result.chat_template_kwargs = { enable_thinking: true };
+            result.enable_thinking = true;
+            result.thinking = { type: 'enabled' };
+            if (thinkingBudget) {
+                result.thinking_budget = thinkingBudget;
+            }
+        }
+        else {
+            result.chat_template_kwargs = { enable_thinking: false };
+            result.enable_thinking = false;
+            result.thinking = { type: 'disabled' };
+        }
+        return result;
+    }
+    if (model.startsWith('glm-4')) {
+        const result = {
+            ...body,
+            chat_template_kwargs: {
+                enable_thinking: true,
+                clear_thinking: false
+            }
+        };
+        if (thinkingBudget) {
+            result.thinking_budget = thinkingBudget;
+        }
+        return result;
+    }
+    if (model.startsWith('deepseek-r1')) {
+        const result = { ...body };
+        if (thinkingBudget) {
+            result.thinking_budget = thinkingBudget;
+        }
+        return result;
+    }
+    return body;
+}
+export const IFLOW_MODELS = [
+    {
+        id: 'glm-5',
+        name: 'GLM-5',
+        context: 256000,
+        output: 64000,
+        inputModalities: ['text', 'image'],
+        outputModalities: ['text'],
+        reasoning: true,
+        toolcall: true,
+        family: 'glm',
+        variants: {
+            low: { thinkingConfig: { thinkingBudget: 1024 } },
+            medium: { thinkingConfig: { thinkingBudget: 8192 } },
+            max: { thinkingConfig: { thinkingBudget: 32768 } }
+        }
+    },
+    {
+        id: 'glm-4.6',
+        name: 'GLM-4.6 Thinking',
+        context: 200000,
+        output: 128000,
+        inputModalities: ['text', 'image'],
+        outputModalities: ['text'],
+        reasoning: true,
+        toolcall: true,
+        family: 'glm',
+        variants: {
+            low: { thinkingConfig: { thinkingBudget: 1024 } },
+            medium: { thinkingConfig: { thinkingBudget: 8192 } },
+            max: { thinkingConfig: { thinkingBudget: 32768 } }
+        }
+    },
+    {
+        id: 'qwen3-max',
+        name: 'Qwen3 Max',
+        context: 256000,
+        output: 32000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        toolcall: true,
+        family: 'qwen3'
+    },
+    {
+        id: 'qwen3-max-preview',
+        name: 'Qwen3 Max Preview',
+        context: 256000,
+        output: 32000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        toolcall: true,
+        family: 'qwen3'
+    },
+    {
+        id: 'qwen3-coder-plus',
+        name: 'Qwen3 Coder Plus',
+        context: 1000000,
+        output: 64000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        toolcall: true,
+        family: 'qwen3-coder'
+    },
+    {
+        id: 'qwen3-vl-plus',
+        name: 'Qwen3 VL Plus',
+        context: 256000,
+        output: 32000,
+        inputModalities: ['text', 'image'],
+        outputModalities: ['text'],
+        family: 'qwen3-vl'
+    },
+    {
+        id: 'qwen3-32b',
+        name: 'Qwen3 32B',
+        context: 128000,
+        output: 32000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        toolcall: true,
+        family: 'qwen3'
+    },
+    {
+        id: 'qwen3-235b',
+        name: 'Qwen3 235B',
+        context: 256000,
+        output: 64000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        toolcall: true,
+        family: 'qwen3'
+    },
+    {
+        id: 'qwen3-235b-a22b-thinking-2507',
+        name: 'Qwen3 235B Thinking',
+        context: 256000,
+        output: 64000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        reasoning: true,
+        toolcall: true,
+        family: 'qwen3-thinking',
+        variants: {
+            low: { thinkingConfig: { thinkingBudget: 1024 } },
+            medium: { thinkingConfig: { thinkingBudget: 8192 } },
+            max: { thinkingConfig: { thinkingBudget: 32768 } }
+        }
+    },
+    {
+        id: 'qwen3-235b-a22b-instruct',
+        name: 'Qwen3 235B Instruct',
+        context: 256000,
+        output: 64000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        toolcall: true,
+        family: 'qwen3'
+    },
+    {
+        id: 'kimi-k2',
+        name: 'Kimi K2',
+        context: 128000,
+        output: 64000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        toolcall: true,
+        family: 'kimi'
+    },
+    {
+        id: 'kimi-k2-0905',
+        name: 'Kimi K2 0905',
+        context: 256000,
+        output: 64000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        toolcall: true,
+        family: 'kimi'
+    },
+    {
+        id: 'deepseek-v3',
+        name: 'DeepSeek V3',
+        context: 128000,
+        output: 32000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        toolcall: true,
+        family: 'deepseek'
+    },
+    {
+        id: 'deepseek-v3.2',
+        name: 'DeepSeek V3.2',
+        context: 128000,
+        output: 64000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        toolcall: true,
+        family: 'deepseek'
+    },
+    {
+        id: 'deepseek-r1',
+        name: 'DeepSeek R1',
+        context: 128000,
+        output: 32000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        reasoning: true,
+        toolcall: true,
+        family: 'deepseek-r',
+        variants: {
+            low: { thinkingConfig: { thinkingBudget: 1024 } },
+            medium: { thinkingConfig: { thinkingBudget: 8192 } },
+            max: { thinkingConfig: { thinkingBudget: 32768 } }
+        }
+    },
+    {
+        id: 'iflow-rome-30ba3b',
+        name: 'iFlow ROME 30B',
+        context: 256000,
+        output: 64000,
+        inputModalities: ['text'],
+        outputModalities: ['text'],
+        family: 'iflow-rome'
+    }
+];
+export function registerIFlowModels(provider) {
+    for (const modelConfig of IFLOW_MODELS) {
+        const actualApiId = modelConfig.id;
+        if (!provider.models[modelConfig.id]) {
+            provider.models[modelConfig.id] = {
+                id: modelConfig.id,
+                providerID: 'iflow',
+                api: {
+                    id: actualApiId,
+                    url: IFLOW_CONSTANTS.BASE_URL,
+                    npm: '@ai-sdk/openai-compatible'
+                },
+                name: modelConfig.name,
+                family: modelConfig.family || modelConfig.id.split('-')[0],
+                capabilities: {
+                    temperature: modelConfig.temperature ?? true,
+                    reasoning: modelConfig.reasoning ?? false,
+                    attachment: modelConfig.inputModalities.includes('image'),
+                    toolcall: modelConfig.toolcall ?? false,
+                    input: {
+                        text: modelConfig.inputModalities.includes('text'),
+                        audio: modelConfig.inputModalities.includes('audio'),
+                        image: modelConfig.inputModalities.includes('image'),
+                        video: modelConfig.inputModalities.includes('video'),
+                        pdf: modelConfig.inputModalities.includes('pdf')
+                    },
+                    output: {
+                        text: modelConfig.outputModalities.includes('text'),
+                        audio: modelConfig.outputModalities.includes('audio'),
+                        image: modelConfig.outputModalities.includes('image'),
+                        video: modelConfig.outputModalities.includes('video'),
+                        pdf: modelConfig.outputModalities.includes('pdf')
+                    },
+                    interleaved: modelConfig.reasoning ?? false
+                },
+                cost: {
+                    input: 0,
+                    output: 0,
+                    cache: { read: 0, write: 0 }
+                },
+                limit: {
+                    context: modelConfig.context,
+                    output: modelConfig.output
+                },
+                status: 'active',
+                options: {},
+                headers: {},
+                release_date: '2025-01-01',
+                variants: modelConfig.variants || {}
+            };
+        }
+    }
+}

package/dist/iflow/apikey.d.ts

@@ -0,0 +1,6 @@
+export interface IFlowApiKeyResult {
+    apiKey: string;
+    email: string;
+    authMethod: 'apikey';
+}
+export declare function validateApiKey(apiKey: string): Promise<IFlowApiKeyResult>;

package/dist/iflow/apikey.js

@@ -0,0 +1,17 @@
+import { IFLOW_CONSTANTS } from '../constants.js';
+export async function validateApiKey(apiKey) {
+    const response = await fetch(`${IFLOW_CONSTANTS.BASE_URL}/models`, {
+        headers: {
+            Authorization: `Bearer ${apiKey}`,
+            'User-Agent': IFLOW_CONSTANTS.USER_AGENT
+        }
+    });
+    if (!response.ok) {
+        throw new Error(`API key validation failed: ${response.status}`);
+    }
+    return {
+        apiKey,
+        email: 'api-key-user',
+        authMethod: 'apikey'
+    };
+}

package/dist/iflow/oauth.d.ts

@@ -0,0 +1,20 @@
+export interface IFlowOAuthAuthorization {
+    authUrl: string;
+    state: string;
+    redirectUri: string;
+}
+export interface IFlowOAuthTokenResult {
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: number;
+    apiKey: string;
+    email: string;
+    authMethod: 'oauth';
+}
+export declare function authorizeIFlowOAuth(port: number): Promise<IFlowOAuthAuthorization>;
+export declare function exchangeOAuthCode(code: string, redirectUri: string): Promise<IFlowOAuthTokenResult>;
+export declare function refreshOAuthToken(refreshToken: string): Promise<IFlowOAuthTokenResult>;
+export declare function fetchUserInfo(accessToken: string): Promise<{
+    apiKey: string;
+    email: string;
+}>;