@goodandready/dsh-subscriptions 0.6.84 → 0.6.85

package/lib/client.js

@@ -873,6 +873,7 @@ window.__ModuleLoader__.load({
       const [modelsCatalog, setModelsCatalog] = React.useState([])
       const [paste, setPaste] = React.useState({})
       const [device, setDevice] = React.useState({})  // #90 key -> {state,userCode,authUrl,intervalMs,status}
+      const [loginLinks, setLoginLinks] = React.useState({})  // #595 provider:index -> fallback auth URL when a popup is blocked
       const [proxyRes, setProxyRes] = React.useState({})  // #88 key -> {ok,latencyMs,error}
       const [diag, setDiag] = React.useState('')
       const [sessionAnalysis, setSessionAnalysis] = React.useState(null)
@@ -1324,13 +1325,31 @@ window.__ModuleLoader__.load({
           setErr(t('missingClientIdAntigravity'))
           return
         }
-        const res = await fetch('/dsh-subscriptions/oauth/start?provider=' + encodeURIComponent(provider) + '&index=' + encodeURIComponent(index), { cache: 'no-store' })
-        const data = await res.json().catch(() => ({}))
-        if (!res.ok) throw new Error((data.error && data.error.message) || ('HTTP ' + res.status))
-        const key = provider + ':' + index
-        if (data.headless) setHeadlessInfo((m) => Object.assign({}, m, { [key]: data.headless }))
-        const authTarget = safeExternalUrl(data.url)
-        if (authTarget) window.open(authTarget, '_blank', 'noopener')
+        // #595: open the popup synchronously, before the first await, so the
+        // click gesture is still valid in Chrome and Firefox.
+        let popup = null
+        try { popup = window.open('', '_blank') } catch { popup = null }
+        try {
+          const res = await fetch('/dsh-subscriptions/oauth/start?provider=' + encodeURIComponent(provider) + '&index=' + encodeURIComponent(index), { cache: 'no-store' })
+          const data = await res.json().catch(() => ({}))
+          if (!res.ok) throw new Error((data.error && data.error.message) || ('HTTP ' + res.status))
+          const key = provider + ':' + index
+          if (data.headless) setHeadlessInfo((m) => Object.assign({}, m, { [key]: data.headless }))
+          const authTarget = safeExternalUrl(data.url)
+          if (authTarget) {
+            if (popup && !popup.closed) {
+              popup.location.href = authTarget
+              try { popup.opener = null } catch { /* cross-origin */ }
+            } else {
+              setLoginLinks((m) => Object.assign({}, m, { [key]: authTarget }))
+            }
+          } else if (popup && !popup.closed) {
+            popup.close()
+          }
+        } catch (e) {
+          if (popup && !popup.closed) popup.close()
+          throw e
+        }
       }
 
       // #90: device-code login (headless). Server mints user_code; we show it,
@@ -2753,6 +2772,9 @@ window.__ModuleLoader__.load({
                   }, '🔄 ' + t('reconnectNow'))
                 ) : null,
                 (function(){ var r=checkRes[key]; if(!r) return null; var txt=r.ok ? ('ok ' + (r.email||'')) : ('fail ' + (r.error && r.error.message || '')); var cls=r.ok ? 'dsub-ok' : 'dsub-bad'; var q=r.quota; if(q && q.remaining!=null) txt += ' quota:'+q.remaining+(q.limit!=null?'/'+q.limit:''); return h('div', {className: cls}, txt) })(),
+                loginLinks[key] ? h('div', { className: 'dsub-verify' },
+                  h('a', { href: loginLinks[key], target: '_blank', rel: 'noopener noreferrer' }, t('verifyLink'))
+                ) : null,
                 safeExternalUrl(account.validationUrl) ? h('div', { className: 'dsub-verify' },
                   t('verifyPrefix'),
                   h('a', { href: safeExternalUrl(account.validationUrl) || undefined, target: '_blank', rel: 'noopener noreferrer' }, t('verifyLink')),
@@ -3659,7 +3681,12 @@ window.__ModuleLoader__.load({
           fetch('/dsh-subscriptions/oauth/start?provider=' + encodeURIComponent(prov) + '&index=1', { cache: 'no-store' })
             .then((r) => r.json()).then((data) => {
               const target = data && safeExternalUrl(data.url)
-              if (target) window.open(target, '_blank', 'noopener')
+              if (target) {
+                const popup = window.open(target, '_blank', 'noopener')
+                if (!popup) {
+                  try { navigator.clipboard.writeText(target) } catch { /* clipboard blocked */ }
+                }
+              }
             }).catch(() => {})
         }
         const line = (line) => line.trim()

package/lib/http.js

@@ -72,9 +72,9 @@ export function isLoopback(value) {
     return false
   }
   const address = String(value || '').toLowerCase().replace(/^\[|\]$/g, '')
-  return address === 'localhost' || address === 'localhost.' || address === '::1'
-    || address.startsWith('127.')
-    || address.startsWith('::ffff:127.')
+  if (address === 'localhost' || address === 'localhost.' || address === '::1') return true
+  if (address.startsWith('::ffff:')) return isLoopbackIPv4(address.slice('::ffff:'.length))
+  return isLoopbackIPv4(address)
 }
 
 

package/lib/routes/accounts.js

@@ -603,7 +603,13 @@ export function registerAccountsRoutes(ctx, state) {
         return
       }
       try {
-        const ref = oauthRef(payload.provider, payload.index)
+        const provider = String(payload.provider || '')
+        const index = Number(payload.index)
+        if (!isProvider(provider) || !Number.isInteger(index) || index < 1 || index > 99) {
+          writeJson(res, 400, { ok: false, error: { code: 'bad_request', message: 'invalid provider or index' } })
+          return
+        }
+        const ref = oauthRef(provider, index)
         await store.clearRef(ref)
         await syncAdapter()
         refreshModels().catch(() => {})

package/lib/routes/status.js

@@ -431,11 +431,6 @@ export function registerStatusRoutes(ctx, state) {
         writeJson(res, 403, { ok: false, error: { code: 'forbidden', message: 'same-origin only' } })
         return
       }
-      const host = (req.headers.host || '').split(':')[0]
-      if (host !== 'localhost' && host !== '127.0.0.1') {
-        writeJson(res, 403, { ok: false, error: { code: 'forbidden', message: 'localhost only' } })
-        return
-      }
       const limit = Math.max(1, Math.min(Number(queryOf(req).get('limit') || '10'), 100))
       writeJson(res, 200, { ok: true, total: history.size(), items: history.recent(limit) })
     }),

package/lib/sse.js

@@ -1,17 +1,24 @@
 /**
  * @param {any} body
- * @param {{ idleTimeoutMs?: number, signal?: AbortSignal }} [options]
+ * @param {{ idleTimeoutMs?: number, totalTimeoutMs?: number, maxBufferBytes?: number, signal?: AbortSignal }} [options]
  * @returns {AsyncGenerator<string, void, unknown>}
  */
-export async function* iterateSse(body, { idleTimeoutMs = 60000, signal } = {}) {
+export async function* iterateSse(body, { idleTimeoutMs = 60000, totalTimeoutMs = 600000, maxBufferBytes = 8 * 1024 * 1024, signal } = {}) {
   const reader = body && typeof body.getReader === 'function' ? body.getReader() : null
   const decoder = new TextDecoder()
   let buffer = ''
   let terminated = false
+  const deadline = totalTimeoutMs > 0 ? Date.now() + totalTimeoutMs : 0
 
   async function* fromText(chunk) {
     if (terminated) return
+    if (chunk.length > maxBufferBytes) {
+      throw new Error('SSE buffer limit exceeded (' + maxBufferBytes + ' chars)')
+    }
     buffer += chunk
+    if (buffer.length > maxBufferBytes) {
+      throw new Error('SSE buffer limit exceeded (' + maxBufferBytes + ' chars)')
+    }
     let sep
     while ((sep = buffer.search(/\r?\n\r?\n/)) >= 0) {
       const raw = buffer.slice(0, sep)
@@ -32,7 +39,7 @@ export async function* iterateSse(body, { idleTimeoutMs = 60000, signal } = {})
     }
   }
 
-  async function readWithTimeout(r) {
+  async function readWithTimeout(r, timeoutMs) {
     if (signal && signal.aborted) {
       if (typeof r.cancel === 'function') await r.cancel().catch(() => {})
       const err = new Error('stream aborted by client')
@@ -41,12 +48,15 @@ export async function* iterateSse(body, { idleTimeoutMs = 60000, signal } = {})
     }
     let timer
     const timeoutPromise = new Promise((_, reject) => {
-      if (!idleTimeoutMs || idleTimeoutMs <= 0) return
+      if (!timeoutMs || timeoutMs <= 0) return
       timer = setTimeout(() => {
-        const err = /** @type {Error & { code?: string }} */ (new Error(`stream idle timeout: no data received for ${Math.round(idleTimeoutMs / 1000)}s`))
+        const message = timeoutMs === idleTimeoutMs
+          ? `stream idle timeout: no data received for ${Math.round(timeoutMs / 1000)}s`
+          : 'SSE stream deadline exceeded'
+        const err = /** @type {Error & { code?: string }} */ (new Error(message))
         err.code = 'TIMEOUT'
         reject(err)
-      }, idleTimeoutMs)
+      }, timeoutMs)
     })
 
     let abortPromise
@@ -77,7 +87,13 @@ export async function* iterateSse(body, { idleTimeoutMs = 60000, signal } = {})
   if (reader) {
     try {
       while (!terminated) {
-        const { done, value } = await readWithTimeout(reader)
+        let wait = idleTimeoutMs
+        if (deadline) {
+          const remaining = deadline - Date.now()
+          if (remaining <= 0) throw new Error('SSE stream deadline exceeded')
+          wait = idleTimeoutMs > 0 ? Math.min(idleTimeoutMs, remaining) : remaining
+        }
+        const { done, value } = await readWithTimeout(reader, wait)
         if (done) break
         yield* fromText(decoder.decode(value, { stream: true }))
         if (terminated) break
@@ -92,6 +108,7 @@ export async function* iterateSse(body, { idleTimeoutMs = 60000, signal } = {})
   }
   if (body && typeof body[Symbol.asyncIterator] === 'function') {
     for await (const chunk of body) {
+      if (deadline && Date.now() >= deadline) throw new Error('SSE stream deadline exceeded')
       if (signal && signal.aborted) {
         const err = new Error('stream aborted by client')
         err.name = 'AbortError'
@@ -108,6 +125,7 @@ export async function* iterateSse(body, { idleTimeoutMs = 60000, signal } = {})
     return
   }
   const text = typeof body === 'string' ? body : await new Response(body).text()
+  if (text.length > maxBufferBytes) throw new Error('SSE buffer limit exceeded (' + maxBufferBytes + ' chars)')
   yield* fromText(text)
 }
 

package/lib/subscriptions.js

@@ -1,3 +1,4 @@
+import { readErrorBody } from './wire.js'
 import { isProvider } from "./refs.js"
 import { pickAccountWithTrace, markCooldown, isSwitchableError, modelFamily } from "./rotate.js"
 import { quotaSnapshot } from "./ratelimit.js"
@@ -262,7 +263,7 @@ export function createSubscriptionsService(deps) {
             } catch { /* ignore subscriptions error */ }
           }
           if (!res.ok) {
-            const txt = await res.text().catch(() => "")
+            const txt = await readErrorBody(res)
             const err = new Error("vendor http " + res.status + (txt ? ": " + txt.slice(0, 200) : ""))
             err.status = res.status
             if (res.status === 429) err.code = "RATE_LIMIT"

package/lib/updater.js

@@ -16,11 +16,19 @@ function header(request, name) {
   return Array.isArray(value) ? value[0] : value
 }
 
+function isLoopbackIPv4(address) {
+  if (!address || !address.startsWith('127.')) return false
+  const parts = address.split('.')
+  if (parts.length !== 4) return false
+  return parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255)
+}
+
 export function isLoopback(value) {
   const address = value?.toLowerCase().replace(/^\[|\]$/g, '')
-  return address === 'localhost' || address === 'localhost.' || address === '::1'
-    || address?.startsWith('127.') === true
-    || address?.startsWith('::ffff:127.') === true
+  if (!address) return false
+  if (address === 'localhost' || address === 'localhost.' || address === '::1') return true
+  const ipv4 = address.startsWith('::ffff:') ? address.slice('::ffff:'.length) : address
+  return isLoopbackIPv4(ipv4)
 }
 
 export function isTrustedUpdateRequest(request, targetCtx) {

package/lib/vendor-factory.js

@@ -10,7 +10,7 @@ import { fetchWithTimeout } from "./http.js"
 
 import { buildAuthorizeUrl } from "./oauth.js"
 import { codexResponsesBody, modelCatalog } from "./messages.js"
-import { formTokenRequest, jsonTokenRequest, codexResponsesStream, readJson, tokenBlobFromOAuth, httpError } from "./wire.js"
+import { formTokenRequest, jsonTokenRequest, codexResponsesStream, readJson, tokenBlobFromOAuth, httpError , readErrorBody } from "./wire.js"
 import { emailFromToken } from "./jwt.js"
 
 function defaultModels(providerId, models) {
@@ -92,6 +92,7 @@ export function createVendorFromProfile(profile) {
         const res = await fetchWithTimeout(fetchImpl || fetch, `${base}${profile.modelsPath}`, {
           headers: identityHeaders(blob, { Accept: "application/json" }),
         }, { timeoutMs: 15000 })
+        if (!res.ok) throw httpError(res.status, await readErrorBody(res))
         const json = await readJson(res)
         const rows = []
         for (const entry of json.data || json.models || []) {
@@ -101,7 +102,9 @@ export function createVendorFromProfile(profile) {
         }
         if (!rows.length) throw new Error("empty catalog")
         return modelCatalog(id, rows)
-      } catch {
+      } catch (err) {
+        const status = Number(err && (err.status || err.statusCode) || 0)
+        if (status === 401 || status === 403 || (err && err.code === 'AUTH')) throw err
         return catalog
       }
     },
@@ -125,7 +128,7 @@ export function createVendorFromProfile(profile) {
         body: JSON.stringify(body),
         signal,
       }, { timeoutMs: 60000, stream: true })
-      if (!res.ok) throw httpError(res.status, await res.text())
+      if (!res.ok) throw httpError(res.status, await readErrorBody(res))
       yield* codexResponsesStream(res.body)
     },
   }

package/lib/vendors/antigravity.js

@@ -1,7 +1,7 @@
 import { randomUUID } from 'node:crypto'
 import { buildAuthorizeUrl } from '../oauth.js'
 import { googleContents } from '../messages.js'
-import { formTokenRequest, googleStream, throwHttpError, tokenBlobFromOAuth } from '../wire.js'
+import { formTokenRequest, googleStream, throwHttpError, tokenBlobFromOAuth , readErrorBody } from '../wire.js'
 import { fetchWithTimeout } from '../http.js'
 import { emailFromToken, avatarFromToken, scopesFromToken } from '../jwt.js'
 import {
@@ -239,7 +239,7 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, signal, s
         body: JSON.stringify(envelope),
         signal,
       }, { timeoutMs: RESPONSE_TIMEOUT_MS })
-      if (!res.ok) throwHttpError(res.status, await res.text())
+      if (!res.ok) throwHttpError(res.status, await readErrorBody(res))
       if (saveBlob && sessionId && sessionId !== ready.sessionId) {
         await saveBlob({ ...ready, sessionId })
       }

package/lib/vendors/claude.js

@@ -1,7 +1,8 @@
+import { createHash } from 'node:crypto'
 import { fetchWithTimeout } from '../http.js'
 import { buildAuthorizeUrl } from '../oauth.js'
 import { anthropicPayload, modelCatalog } from '../messages.js'
-import { jsonTokenRequest, anthropicStream, httpError, tokenBlobFromOAuth, readJson } from '../wire.js'
+import { jsonTokenRequest, anthropicStream, httpError, tokenBlobFromOAuth, readJson , readErrorBody } from '../wire.js'
 import { emailFromToken, planFromToken, avatarFromToken, scopesFromToken } from '../jwt.js'
 import { asUsageSnapshot, usageWindows, deepestUsedPercent } from '../usage.js'
 
@@ -253,7 +254,7 @@ function applyClaudeThinking(payload, options) {
 export async function check(blob, _cfg, fetchImpl) {
   const impl = fetchImpl || fetch
   const res = await impl(PROFILE, { headers: oauthHeaders(blob.accessToken) })
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   const json = await readJson(res)
   return { ok: true, raw: json }
 }
@@ -273,7 +274,7 @@ export async function usage(blob, _cfg, fetchImpl) {
 const billingAccountState = new Map()
 const MAX_BILLING_ACCOUNTS = 256
 
-function resolveAccountKey(cfg, context) {
+export function resolveAccountKey(cfg, context) {
   const explicit = (context && context.accountId) || (cfg && cfg.accountId)
   if (typeof explicit === 'string' && explicit.trim()) return explicit.trim()
   const blob = (context && context.blob) || (cfg && cfg.blob)
@@ -281,7 +282,7 @@ function resolveAccountKey(cfg, context) {
     const id = blob.accountId || blob.id || blob.email
     if (typeof id === 'string' && id.trim()) return id.trim()
     if (typeof blob.accessToken === 'string' && blob.accessToken.length >= 8) {
-      return `token:${blob.accessToken.slice(-12)}`
+      return 'token:' + createHash('sha256').update(String(blob.accessToken)).digest('hex').slice(0, 16)
     }
   }
   return 'default'
@@ -357,6 +358,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     body: JSON.stringify(payload),
     signal,
   })
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* anthropicStream(res.body)
 }

package/lib/vendors/codex.js

@@ -3,7 +3,7 @@ import { randomUUID, createHash } from 'node:crypto'
 import { buildAuthorizeUrl } from '../oauth.js'
 import { codexResponsesBody, modelCatalog } from '../messages.js'
 import { chatgptAccountId, emailFromToken, planFromToken, avatarFromToken, scopesFromToken, organizationsFromToken } from '../jwt.js'
-import { formTokenRequest, codexResponsesStream, readJson, tokenBlobFromOAuth, httpError } from '../wire.js'
+import { formTokenRequest, codexResponsesStream, readJson, tokenBlobFromOAuth, httpError , readErrorBody } from '../wire.js'
 import { asUsageSnapshot, usageWindows, deepestUsedPercent } from '../usage.js'
 
 export const id = 'codex'
@@ -129,7 +129,7 @@ export async function deviceStart(cfg, fetchImpl) {
     headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
     body: JSON.stringify({ client_id: cfg.clientId }),
   })
-  if (!res.ok) throw httpError(res.status, await res.text().catch(() => ''), 'DEVICE')
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res), 'DEVICE')
   const json = await readJson(res)
   if (!json || typeof json.user_code !== 'string' || typeof json.device_auth_id !== 'string') {
     throw httpError(502, 'device auth response is incomplete', 'DEVICE')
@@ -151,7 +151,7 @@ export async function devicePoll(cfg, session, fetchImpl) {
   })
   // 403/404 = not confirmed yet (matches reference implementations)
   if (res.status === 403 || res.status === 404) return { status: 'pending' }
-  if (!res.ok) throw httpError(res.status, await res.text().catch(() => ''), 'DEVICE')
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res), 'DEVICE')
   const json = await readJson(res)
   if (!json || typeof json.authorization_code !== 'string' || typeof json.code_verifier !== 'string') {
     throw httpError(502, 'device auth token response is incomplete', 'DEVICE')
@@ -218,7 +218,7 @@ export async function check(blob, cfg, fetchImpl) {
   const res = await fetchWithTimeout(impl, base + "/models?client_version=" + encodeURIComponent(version), {
     headers: identityHeaders(blob, cfg, { Accept: "application/json" }),
   }, { timeoutMs: 15000 })
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   const json = await readJson(res)
   // quota headers may contain limits
   return { ok: true, raw: json }
@@ -272,7 +272,7 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     body: JSON.stringify(body),
     signal,
   })
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* codexResponsesStream(res.body)
 }
 export function deriveSessionId(options) {

package/lib/vendors/cody.js

@@ -1,6 +1,6 @@
 import { LlmError } from '@deepseek-ai/dsh-llm'
 import { openaiMessages } from '../messages.js'
-import { openaiChatStream, httpError } from '../wire.js'
+import { openaiChatStream, httpError , readErrorBody } from '../wire.js'
 
 export const id = 'cody'
 const CODY_API_BASE = 'https://sourcegraph.com/.api'
@@ -75,6 +75,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     signal
   })
 
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* openaiChatStream(res.body)
 }

package/lib/vendors/copilot-cli.js

@@ -297,9 +297,17 @@ export async function* streamCopilotCli({ binaryPath, options, blob, config: _co
     throw new LlmError(`Failed to spawn Copilot CLI: ${err && err.message ? err.message : err}`, 'INTERNAL_ERROR')
   }
 
+  let abortHandler = null
+  let killTimer = null
   if (signal) {
-    const abortHandler = () => {
+    abortHandler = () => {
       try { child.kill('SIGTERM') } catch { /* best-effort */ }
+      killTimer = setTimeout(() => {
+        if (!processEnded && !child.killed) {
+          try { child.kill('SIGKILL') } catch { /* best-effort */ }
+        }
+      }, 2000)
+      if (killTimer && typeof killTimer.unref === 'function') killTimer.unref()
     }
     signal.addEventListener('abort', abortHandler, { once: true })
   }
@@ -373,6 +381,7 @@ export async function* streamCopilotCli({ binaryPath, options, blob, config: _co
     }
   })
 
+  try {
   while (true) {
     if (chunkQueue.length) {
       const line = chunkQueue.shift()
@@ -437,6 +446,10 @@ export async function* streamCopilotCli({ binaryPath, options, blob, config: _co
       if (processError && !chunkQueue.length) throw processError
     }
   }
+  } finally {
+    if (signal && abortHandler) signal.removeEventListener('abort', abortHandler)
+    if (killTimer) clearTimeout(killTimer)
+  }
 
   yield {
     type: 'finish',

package/lib/vendors/copilot.js

@@ -1,7 +1,7 @@
 import { LlmError } from "@deepseek-ai/dsh-llm"
 import { openaiMessages, openaiTools, modelCatalog } from "../messages.js"
 import { fetchWithTimeout } from "../http.js"
-import { openaiChatStream, readJson, httpError } from "../wire.js"
+import { openaiChatStream, readJson, httpError , readErrorBody } from "../wire.js"
 import { findCopilotCli, streamCopilotCli, isCopilotCliAvailable, COPILOT_CLI_BINARIES } from "./copilot-cli.js"
 
 export const id = "copilot"
@@ -148,7 +148,7 @@ export async function requestDeviceCode(fetchImpl) {
       scope: "read:user"
     })
   })
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   return readJson(res)
 }
 
@@ -166,7 +166,7 @@ export async function pollDeviceToken(deviceCode, fetchImpl) {
       grant_type: "urn:ietf:params:oauth:grant-type:device_code"
     })
   })
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   return readJson(res)
 }
 
@@ -259,7 +259,7 @@ async function exchangeCopilotToken(githubToken, fetchImpl) {
       "User-Agent": "GitHubCopilotChat/0.24.0"
     }
   })
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   return readJson(res)
 }
 
@@ -354,6 +354,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     signal
   })
 
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* openaiChatStream(res.body)
 }

package/lib/vendors/cursor.js

@@ -1,6 +1,6 @@
 import { LlmError } from '@deepseek-ai/dsh-llm'
 import { openaiMessages, openaiTools, modelCatalog } from '../messages.js'
-import { openaiChatStream, readJson, httpError } from '../wire.js'
+import { openaiChatStream, readJson, httpError , readErrorBody } from '../wire.js'
 import { asUsageSnapshot } from '../usage.js'
 
 export const id = 'cursor'
@@ -201,6 +201,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     signal,
   })
 
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* openaiChatStream(res.body)
 }

package/lib/vendors/ernie.js

@@ -1,11 +1,17 @@
 import { LlmError } from '@deepseek-ai/dsh-llm'
 import { openaiMessages } from '../messages.js'
-import { openaiChatStream, readJson, httpError } from '../wire.js'
+import { openaiChatStream, readJson, httpError , readErrorBody } from '../wire.js'
 
 export const id = 'ernie'
 export const ERNIE_OAUTH_URL = 'https://aip.baidubce.com/oauth/2.0/token'
 const ERNIE_BASE_URL = 'https://aip.baidubce.com/rpc/2.0/ai_custom/v1/wenxinworkshop/chat'
 
+export function ernieChatUrl(token, endpoint, baseUrl = ERNIE_BASE_URL) {
+  // #636: the v1 Qianfan endpoint requires access_token in the query. Always
+  // encode it so & and # cannot truncate or inject query parameters.
+  return baseUrl + '/' + endpoint + '?access_token=' + encodeURIComponent(token)
+}
+
 const ERNIE_MODELS = [
   {
     id: 'ernie-speed-128k',
@@ -53,7 +59,7 @@ async function refreshErnieToken(apiKey, secretKey, fetchImpl) {
       client_secret: secretKey,
     }),
   })
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   return readJson(res)
 }
 
@@ -74,7 +80,7 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
   if (!token) throw new LlmError('Baidu ERNIE requires access token or API Key + Secret Key', 'AUTH')
 
   const endpoint = options.model === 'ernie-4.0-turbo-8k' ? 'completions_pro' : 'ernie_speed'
-  const url = `${(config && config.apiBase) || ERNIE_BASE_URL}/${endpoint}?access_token=${token}`
+  const url = ernieChatUrl(token, endpoint, (config && config.apiBase) || ERNIE_BASE_URL)
 
   const messages = openaiMessages(options).map((m) => ({
     role: m.role === 'system' ? 'user' : m.role,
@@ -91,6 +97,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     signal
   })
 
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* openaiChatStream(res.body)
 }

package/lib/vendors/glm.js

@@ -1,6 +1,6 @@
 import { LlmError } from '@deepseek-ai/dsh-llm'
 import { openaiMessages, openaiTools, modelCatalog } from '../messages.js'
-import { openaiChatStream, readJson, httpError } from '../wire.js'
+import { openaiChatStream, readJson, httpError , readErrorBody } from '../wire.js'
 import { asUsageSnapshot } from '../usage.js'
 
 export const id = 'glm'
@@ -109,6 +109,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     signal,
   })
 
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* openaiChatStream(res.body)
 }

package/lib/vendors/grok.js

@@ -1,7 +1,7 @@
 import { createHash } from 'node:crypto'
 import { buildAuthorizeUrl } from '../oauth.js'
 import { modelCatalog, codexResponsesBody } from '../messages.js'
-import { formTokenRequest, codexResponsesStream, httpError, tokenBlobFromOAuth, readJson } from '../wire.js'
+import { formTokenRequest, codexResponsesStream, httpError, tokenBlobFromOAuth, readJson , readErrorBody } from '../wire.js'
 import { emailFromToken, planFromToken, avatarFromToken, scopesFromToken } from '../jwt.js'
 import { asUsageSnapshot, usageWindows, grokBillingPercent } from '../usage.js'
 
@@ -250,7 +250,7 @@ export async function listModels(blob, cfg, fetchImpl) {
 export async function check(blob, cfg, fetchImpl) {
   const impl = fetchImpl || fetch
   const res = await impl(MODELS, { headers: { Authorization: "Bearer " + blob.accessToken, Accept: "application/json" } })
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   const json = await readJson(res)
   return { ok: true, raw: json }
 }
@@ -308,7 +308,7 @@ export async function deviceStart(cfg, fetchImpl) {
     },
     body: params.toString(),
   })
-  if (!res.ok) throw httpError(res.status, await res.text().catch(() => ''), 'DEVICE')
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res), 'DEVICE')
   const json = await readJson(res)
   if (!json || typeof json.user_code !== 'string' || typeof json.device_code !== 'string') {
     throw httpError(502, 'xAI device authorization response is incomplete', 'DEVICE')
@@ -338,7 +338,7 @@ export async function devicePoll(cfg, session, fetchImpl) {
     body: params.toString(),
   })
   if (res.status === 400 || res.status === 403) {
-    const rawText = await res.text().catch(() => '')
+    const rawText = await readErrorBody(res)
     let errJson = {}
     try {
       errJson = JSON.parse(rawText)
@@ -356,7 +356,7 @@ export async function devicePoll(cfg, session, fetchImpl) {
     }
     throw httpError(res.status, rawText, 'DEVICE')
   }
-  if (!res.ok) throw httpError(res.status, await res.text().catch(() => ''), 'DEVICE')
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res), 'DEVICE')
   const json = await readJson(res)
   if (!json || typeof json.access_token !== 'string') {
     throw httpError(502, 'xAI device token response is incomplete', 'DEVICE')
@@ -391,7 +391,7 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     body: JSON.stringify(body),
     signal,
   })
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* codexResponsesStream(res.body)
 }
 

package/lib/vendors/jetbrains.js

@@ -4,7 +4,7 @@
 import { LlmError } from '@deepseek-ai/dsh-llm'
 import { buildAuthorizeUrl } from '../oauth.js'
 import { openaiMessages, modelCatalog } from '../messages.js'
-import { jsonTokenRequest, tokenBlobFromOAuth, openaiChatStream, httpError, readJson } from '../wire.js'
+import { jsonTokenRequest, tokenBlobFromOAuth, openaiChatStream, httpError, readJson , readErrorBody } from '../wire.js'
 import { emailFromToken, planFromToken, avatarFromToken, scopesFromToken } from '../jwt.js'
 
 export const id = 'jetbrains'
@@ -193,6 +193,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     signal,
   })
 
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* openaiChatStream(res.body)
 }

package/lib/vendors/kimi.js

@@ -1,6 +1,6 @@
 import { LlmError } from '@deepseek-ai/dsh-llm'
 import { openaiMessages, openaiTools, modelCatalog } from '../messages.js'
-import { openaiChatStream, readJson, httpError } from '../wire.js'
+import { openaiChatStream, readJson, httpError , readErrorBody } from '../wire.js'
 import { asUsageSnapshot } from '../usage.js'
 
 export const id = 'kimi'
@@ -116,6 +116,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     signal,
   })
 
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* openaiChatStream(res.body)
 }

package/lib/vendors/kiro.js

@@ -1,6 +1,6 @@
 import { LlmError } from '@deepseek-ai/dsh-llm'
 import { openaiMessages, openaiTools, modelCatalog } from '../messages.js'
-import { openaiChatStream, readJson, httpError } from '../wire.js'
+import { openaiChatStream, readJson, httpError , readErrorBody } from '../wire.js'
 import { asUsageSnapshot } from '../usage.js'
 
 export const id = 'kiro'
@@ -112,6 +112,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     signal,
   })
 
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* openaiChatStream(res.body)
 }

package/lib/vendors/perplexity.js

@@ -4,7 +4,7 @@
 import { LlmError } from '@deepseek-ai/dsh-llm'
 import { buildAuthorizeUrl } from '../oauth.js'
 import { openaiMessages, modelCatalog } from '../messages.js'
-import { jsonTokenRequest, tokenBlobFromOAuth, openaiChatStream, httpError, readJson } from '../wire.js'
+import { jsonTokenRequest, tokenBlobFromOAuth, openaiChatStream, httpError, readJson , readErrorBody } from '../wire.js'
 import { emailFromToken, planFromToken, avatarFromToken, scopesFromToken } from '../jwt.js'
 
 export const id = 'perplexity'
@@ -205,6 +205,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     signal,
   })
 
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* openaiChatStream(res.body)
 }

package/lib/vendors/qwen.js

@@ -1,6 +1,6 @@
 import { LlmError } from '@deepseek-ai/dsh-llm'
 import { openaiMessages, openaiTools } from '../messages.js'
-import { openaiChatStream, httpError } from '../wire.js'
+import { openaiChatStream, httpError , readErrorBody } from '../wire.js'
 
 export const id = 'qwen'
 const QWEN_API_BASE = 'https://dashscope.aliyuncs.com/compatible-mode/v1'
@@ -81,6 +81,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     signal
   })
 
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* openaiChatStream(res.body)
 }

package/lib/vendors/replit.js

@@ -1,6 +1,6 @@
 import { LlmError } from '@deepseek-ai/dsh-llm'
 import { openaiMessages } from '../messages.js'
-import { openaiChatStream, httpError } from '../wire.js'
+import { openaiChatStream, httpError , readErrorBody } from '../wire.js'
 
 export const id = 'replit'
 const REPLIT_API_BASE = 'https://replit.com/api/v1/ai'
@@ -64,6 +64,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     signal
   })
 
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* openaiChatStream(res.body)
 }

package/lib/vendors/spark.js

@@ -1,6 +1,6 @@
 import { LlmError } from '@deepseek-ai/dsh-llm'
 import { openaiMessages } from '../messages.js'
-import { openaiChatStream, httpError } from '../wire.js'
+import { openaiChatStream, httpError , readErrorBody } from '../wire.js'
 
 export const id = 'spark'
 const SPARK_API_BASE = 'https://spark-api-open.xf-yun.com/v1'
@@ -68,6 +68,6 @@ export async function* streamOnce({ blob, options, fetchImpl, headers, config, s
     signal
   })
 
-  if (!res.ok) throw httpError(res.status, await res.text())
+  if (!res.ok) throw httpError(res.status, await readErrorBody(res))
   yield* openaiChatStream(res.body)
 }

package/lib/wire.js

@@ -432,4 +432,30 @@ export async function jsonTokenRequest(url, body, fetchImpl, headers, { timeoutM
     body: JSON.stringify(body),
   }, { timeoutMs })
   return readJson(res)
-}
+}
+
+export async function readErrorBody(res, maxChars = 4096) {
+  if (!res || typeof res !== 'object') return ''
+  try {
+    if (!res.body || typeof res.body.getReader !== 'function') {
+      const text = await res.text()
+      return String(text || '').slice(0, maxChars)
+    }
+    const reader = res.body.getReader()
+    const decoder = new TextDecoder()
+    let out = ''
+    try {
+      while (out.length < maxChars) {
+        const { done, value } = await reader.read()
+        if (done) break
+        out += decoder.decode(value, { stream: true })
+      }
+      out += decoder.decode()
+    } finally {
+      if (typeof reader.cancel === 'function') await reader.cancel().catch(() => {})
+    }
+    return out.slice(0, maxChars)
+  } catch {
+    return ''
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goodandready/dsh-subscriptions",
-  "version": "0.6.84",
+  "version": "0.6.85",
   "description": "Use ChatGPT Codex, Claude, Grok, Antigravity, Kimi, GLM, Cursor, Kiro, Copilot, Qwen, ERNIE, Spark, JetBrains, Perplexity, Replit, and Cody subscriptions as DeepSeek Harness LLM providers via OAuth.",
   "license": "MIT",
   "type": "module",