@goodandready/dsh-opencode-provider 0.5.28 → 0.5.29

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.5.29 — release 6: catalog refresh and Free-lane decision
+
+- **#77 — catalog refresh**: `catalogRefreshMinutes` (1–10,080, default 10) controls the live `/models` cache; explicit `/models/refresh` still bypasses it. Exposed in Settings.
+- **#76 — Free-lane decision**: re-probed keyless `big-pickle` on 2026-11-05; HTTP 429 `FreeUsageLimitError`. No keyless route or header-spoofing lane is added; the keyed Console/Zen path remains supported. Evidence recorded in DESIGN/README.
+- 137 tests.
+
 ## 0.5.28 — release 5: image policy and preparation timeout
 
 - **#73 — image policy**: `maxImages`, `maxRequestImageBytes`, `requestImagePixelBudget` and `requestImageMaxBytes` are configurable in Settings; defaults preserve the previous 50 images / 24 MiB / 1568px / 1 MiB behavior. Count and pixel policies are covered by tests.

package/README.md

@@ -132,12 +132,12 @@ npm pack
 Install the **packed tarball** into a profile:
 
 ```bash
-dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.28.tgz
+dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.29.tgz
 # DSH Desktop:
-dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.28.tgz
+dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.29.tgz
 
 # Or install the published package:
-dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.28
+dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.29
 ```
 
 Restart dsh (or DSH Desktop), then pick **OpenCode (plugin)** or **OpenCode Go (plugin)** in the model picker.
@@ -310,7 +310,7 @@ GitHub Actions runs `npm run check` and `npm pack` on push/PR (`.github/workflow
 - Subscription request counts are OpenCode's published estimates, not enforced quotas. They can change when OpenCode updates the Go pricing table; the gateway is the final authority.
 - Usage-by-model aggregates the local projection cache and attributes a whole session to its last-used model; a session that switched models is therefore approximate. It never reads prompt text or titles.
 - `opencode-direct` (Console) billing shows no per-model allowance; the Go route is the primary target.
-- The anonymous free lane (`Bearer public` + CLI impersonation) is not implemented.
+- The anonymous free lane (`Bearer public` + CLI impersonation) is not implemented. A keyless `big-pickle` probe on 2026-11-05 returned HTTP 429 `FreeUsageLimitError`; use the keyed Console/Zen route for free models.
 - The UI requires a web profile (the Host needs `ctx.webServer`); the TUI keeps the `/opencode` command and the model routes.
 - Write routes are loopback-only; a web profile exposed to a LAN can read state but cannot save configuration or keys until the host auth token is integrated.
 

package/README.ru.md

@@ -131,12 +131,12 @@ npm pack
 Установка из **упакованного tarball**:
 
 ```bash
-dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.28.tgz
+dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.29.tgz
 # DSH Desktop:
-dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.28.tgz
+dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.29.tgz
 
 # Либо установка опубликованного пакета из npm:
-dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.28
+dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.29
 ```
 
 После установки перезапустите dsh (или DSH Desktop) и выберите **OpenCode (plugin)** или **OpenCode Go (plugin)** в списке моделей.

package/README.zh.md

@@ -126,12 +126,12 @@ npm pack
 通过**打包文件 (.tgz)**安装：
 
 ```bash
-dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.28.tgz
+dsh plugin --profile web add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.29.tgz
 # DSH 桌面端：
-dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.28.tgz
+dsh plugin --profile desktop add /absolute/path/to/goodandready-dsh-opencode-provider-0.5.29.tgz
 
 # 或从 npm 安装已发布版本：
-dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.28
+dsh plugin --profile web add @goodandready/dsh-opencode-provider@0.5.29
 ```
 
 安装完成后重启 dsh 或 DSH 桌面端，在模型选择器中选择 **OpenCode (plugin)** 或 **OpenCode Go (plugin)** 即可。

package/lib/client.js

@@ -186,6 +186,7 @@ window.__ModuleLoader__.load({
 				maxRequestImageBytes: "Request image budget (bytes)",
 				requestImagePixelBudget: "Image pixel budget",
 				requestImageMaxBytes: "Per-image max bytes",
+				catalogRefreshMinutes: "Catalog refresh (minutes)",
 				proxyUrl: "Proxy URL",
 				proxyUrlHint: "HTTP, HTTPS or SOCKS5 proxy for inference, catalog and usage. Empty disables it. Credentials are not supported.",
 				maxOutputTokens: "Output limit (empty = model default, 0 = omit)",
@@ -419,6 +420,7 @@ window.__ModuleLoader__.load({
 				maxRequestImageBytes: "请求图片预算（字节）",
 				requestImagePixelBudget: "图片像素预算",
 				requestImageMaxBytes: "单图最大字节数",
+				catalogRefreshMinutes: "目录刷新间隔（分钟）",
 				proxyUrl: "代理地址",
 				proxyUrlHint: "用于推理、目录和用量的 HTTP、HTTPS 或 SOCKS5 代理。留空则禁用。不支持代理认证。",
 				maxOutputTokens: "输出上限（空 = 模型默认，0 = 省略）",
@@ -1712,6 +1714,7 @@ window.__ModuleLoader__.load({
 				requestImagePixelBudget: String(state.config.requestImagePixelBudget),
 				requestImageMaxBytes: String(state.config.requestImageMaxBytes),
 				proxyUrl: state.config.proxyUrl,
+				catalogRefreshMinutes: String(state.config.catalogRefreshMinutes),
 				maxOutputTokens: state.config.maxOutputTokens === null ? "" : String(state.config.maxOutputTokens),
 				contextWindow: state.config.contextWindow === null ? "" : String(state.config.contextWindow),
 				contextWindowOverrides: Object.fromEntries(Object.entries(state.config.contextWindowOverrides).map(([id, value]) => [id, String(value)])),
@@ -1764,6 +1767,7 @@ window.__ModuleLoader__.load({
 				requestImagePixelBudget: numberOrNull(draft.requestImagePixelBudget) ?? 2458624,
 				requestImageMaxBytes: numberOrNull(draft.requestImageMaxBytes) ?? 1048576,
 				proxyUrl: draft.proxyUrl.trim(),
+				catalogRefreshMinutes: numberOrNull(draft.catalogRefreshMinutes) ?? 10,
 				maxOutputTokens: numberOrNull(draft.maxOutputTokens),
 				contextWindow: numberOrNull(draft.contextWindow),
 				contextWindowOverrides: numberRecordOrNull(draft.contextWindowOverrides),
@@ -3198,6 +3202,12 @@ window.__ModuleLoader__.load({
 									value: draft.requestImageMaxBytes,
 									onChange: (value) => update({ requestImageMaxBytes: value })
 								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Field, {
+									label: t("catalogRefreshMinutes"),
+									type: "number",
+									value: draft.catalogRefreshMinutes,
+									onChange: (value) => update({ catalogRefreshMinutes: value })
+								}),
 								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Field, {
 									label: t("proxyUrl"),
 									hint: t("proxyUrlHint"),

package/lib/index.d.ts

@@ -49,6 +49,8 @@ interface Config {
   requestImageMaxBytes?: number;
   /** HTTP/HTTPS/SOCKS5 proxy for inference, catalog and usage requests. */
   proxyUrl?: string;
+  /** Live catalog cache lifetime in minutes; defaults to 10. */
+  catalogRefreshMinutes?: number;
   /** Visible-model allowlist; an empty list means "show everything". */
   visibleModels?: string[];
   /** Per-model visibility overrides; wins over `visibleModels`. */
@@ -101,6 +103,7 @@ interface ResolvedConfig {
   requestImagePixelBudget: number;
   requestImageMaxBytes: number;
   proxyUrl: string;
+  catalogRefreshMinutes: number;
   visibleModels: readonly string[];
   modelVisibility: Readonly<Record<string, boolean>>;
   filterModelsByPlan: boolean;

package/lib/index.js

@@ -81,7 +81,7 @@ const DEFAULT_GO_API_BASE = "https://opencode.ai/inference/go";
 const DEFAULT_GO_ZEN_BASE = "https://opencode.ai/zen/go/v1";
 const DEFAULT_USAGE_URL = "https://opencode.ai/zen/go/v1/usage";
 const DEFAULT_AUTH_ENTRY = "opencode-go";
-const DEFAULT_USER_AGENT = "dsh-opencode-provider/0.5.28";
+const DEFAULT_USER_AGENT = "dsh-opencode-provider/0.5.29";
 const DEFAULT_CONTEXT_WINDOW = 262144;
 const DEFAULT_MAX_TOKENS = 32768;
 const DEFAULT_GENERATE_MAX_TOKENS = 65536;
@@ -109,6 +109,7 @@ const Config = z.object({
 	requestImagePixelBudget: markVolatile(z.number().min(1).max(1e8).step(1).default(DEFAULT_REQUEST_IMAGE_PIXEL_BUDGET)),
 	requestImageMaxBytes: markVolatile(z.number().min(1).max(1e8).step(1).default(DEFAULT_REQUEST_IMAGE_MAX_BYTES)),
 	proxyUrl: markVolatile(z.string().default("")),
+	catalogRefreshMinutes: markVolatile(z.number().min(1).max(10080).step(1).default(10)),
 	visibleModels: markVolatile(z.array(z.string()).default([])),
 	modelVisibility: markVolatile(z.dict(z.boolean()).default({})),
 	filterModelsByPlan: markVolatile(z.boolean().default(true)),
@@ -227,6 +228,7 @@ function resolveConfig(config) {
 		requestImagePixelBudget: positiveInt(config.requestImagePixelBudget, DEFAULT_REQUEST_IMAGE_PIXEL_BUDGET),
 		requestImageMaxBytes: positiveInt(config.requestImageMaxBytes, DEFAULT_REQUEST_IMAGE_MAX_BYTES),
 		proxyUrl: normalizeProxyUrl(config.proxyUrl),
+		catalogRefreshMinutes: positiveInt(config.catalogRefreshMinutes, 10),
 		visibleModels: Array.isArray(config.visibleModels) ? config.visibleModels.filter((id) => typeof id === "string" && id !== "") : [],
 		modelVisibility: booleanRecord(config.modelVisibility),
 		filterModelsByPlan: config.filterModelsByPlan !== false,
@@ -1066,7 +1068,6 @@ function describeLimitsShort(limits) {
 	return `Go ${formatRequests(limits.go.fiveHour)}/5h · ${formatRequests(limits.go.weekly)}/wk`;
 }
 // src/catalog.ts
-const CATALOG_TTL_MS = 6e5;
 const CATALOG_TIMEOUT_MS = 15e3;
 const catalogCache = /* @__PURE__ */ new Map();
 const FALLBACK_META = {
@@ -1144,7 +1145,7 @@ async function fetchLiveIds(provider, config, apiKey, fetchImpl) {
 	const url = modelsUrlFor(provider, config);
 	const cacheKey = `${provider}|${url}`;
 	const cached = catalogCache.get(cacheKey);
-	if (cached !== void 0 && Date.now() - cached.at < CATALOG_TTL_MS) return cached.ids;
+	if (cached !== void 0 && Date.now() - cached.at < config.catalogRefreshMinutes * 6e4) return cached.ids;
 	const headers = {
 		accept: "application/json",
 		"user-agent": config.userAgent,
@@ -4794,6 +4795,7 @@ function publicConfig(config) {
 		requestImagePixelBudget: config.requestImagePixelBudget,
 		requestImageMaxBytes: config.requestImageMaxBytes,
 		proxyUrl: config.proxyUrl,
+		catalogRefreshMinutes: config.catalogRefreshMinutes,
 		visibleModels: config.visibleModels,
 		modelVisibility: config.modelVisibility,
 		filterModelsByPlan: config.filterModelsByPlan,
@@ -4995,6 +4997,7 @@ function configOps(patch) {
 	if ("requestImagePixelBudget" in patch) set("requestImagePixelBudget", patch.requestImagePixelBudget);
 	if ("requestImageMaxBytes" in patch) set("requestImageMaxBytes", patch.requestImageMaxBytes);
 	if ("proxyUrl" in patch) set("proxyUrl", normalizeProxyUrl(typeof patch.proxyUrl === "string" ? patch.proxyUrl : ""));
+	if ("catalogRefreshMinutes" in patch) set("catalogRefreshMinutes", patch.catalogRefreshMinutes);
 	if ("visibleModels" in patch) set("visibleModels", cleanStringArray(patch.visibleModels));
 	if ("modelVisibility" in patch) set("modelVisibility", cleanBooleanRecord(patch.modelVisibility));
 	if ("filterModelsByPlan" in patch) set("filterModelsByPlan", patch.filterModelsByPlan === true);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-opencode-provider",
-  "version": "0.5.28",
+  "version": "0.5.29",
   "description": "OpenCode / OpenCode Go LLM provider plugin for DeepSeek Harness (dsh).",
   "license": "MIT",
   "type": "module",