@herbertgao/pi-extensions 2026.10.3 → 2026.10.4

package/README.md

@@ -21,6 +21,7 @@ When migrating from `pi-mcp-adapter`, remove any standalone adapter install as w
 The package bundles 5 active `@herbertgao/*` child packages—`pi-agency`, `pi-bark`, `pi-cc-extensions`, `pi-subagents`, and `sol-pi`—plus the following upstream packages under their original names:
 
 - `pi-antigravity@0.10.0`
+- `pi-provider-qoder@0.5.0`
 - `@dietrichgebert/ponytail@5.1.0`
 - `@juicesharp/rpiv-ask-user-question@2.12.0`
 - `@narumitw/pi-btw@0.61.1`
@@ -59,7 +60,7 @@ The locally customized CC and SoL-Pi packages now follow complete upstream basel
 
 `pi-jev-auto-mode@0.5.0` adds fail-closed Jev safety gates for shell commands and file changes. `pi-typesafe@0.9.1` provides `/typesafe` and `typesafe_evaluate` for explicit structured decisions; `/typesafe enable` or `PI_TYPESAFE_ENABLED=1` is still required for agent tool calls. The Pi extension continues to use the TypeSafe API, not Liquid. The package's programmatic client additionally supports Liquid with its own API key and free or paid models; existing usage accounting now merges writes under a short-lived file lock (up to 200ms synchronous wait under contention).
 
-`resume-from@0.4.1` continues sessions across Pi, Claude Code, and Codex; it keeps a Claude Code session matched to its start directory when the active transcript later moves into a nested cwd. `@herbertgao/sol-pi` adds opt-in Action Fusion, ObservationPack, Evidence-Preserving Reducer, and Online Context Compact; see its [configuration guide](../sol-pi/docs/configuration.md). `pi-lens@4.4.1` publishes a public LSP config schema, reads user-level custom rule directories (project before user before built-in), normalizes argv-style server entries, downgrades `throw-new-error` to a warning, and counts Docker, JSON, and Jedi servers in idle eviction; language routing and the retained multi-root diagnostic facts are unchanged. `pi-web-access@0.38.0` provides configurable web search and fetch tools; its `toolActivation` defaults to `auto`, choosing eager or dynamic tool activation per model. It adds structured search/fetch data for codemode and an optional, manually started `pi-web-access-mcp` stdio CLI; installing the aggregate does not start that server. Degoog, Keenable, and the new Ceramic provider are explicit-only, excluded from automatic and `all` selection. OpenAI search now defaults to `gpt-6-luna`, results and clone cleanup are scoped per extension instance, and the promoted `@modelcontextprotocol/sdk@^1.32.1` moves the bundle off GHSA-6qxp-vccf-f47h. Perplexity search now uses the Search API's ranked pages and snippets rather than a Sonar-generated answer; requests requiring prose still use Sonar. `pi-antigravity@0.10.0` reads Pi 0.86+ transcript system messages, so Antigravity requests carry Pi's system prompt and tools; it also registers `google_search` and `generate_image` tools that use the signed-in Antigravity account. Preferred Thinking 1.0.2 preserves an explicit subagent `--thinking` choice. Deprecated `@tifan/pi-titlebar-spinner` is no longer bundled; Rename remains the single owner of Herdr tab naming.
+`resume-from@0.4.1` continues sessions across Pi, Claude Code, and Codex; it keeps a Claude Code session matched to its start directory when the active transcript later moves into a nested cwd. `@herbertgao/sol-pi` adds opt-in Action Fusion, ObservationPack, Evidence-Preserving Reducer, and Online Context Compact; see its [configuration guide](../sol-pi/docs/configuration.md). `pi-lens@4.4.1` publishes a public LSP config schema, reads user-level custom rule directories (project before user before built-in), normalizes argv-style server entries, downgrades `throw-new-error` to a warning, and counts Docker, JSON, and Jedi servers in idle eviction; language routing and the retained multi-root diagnostic facts are unchanged. `pi-web-access@0.38.0` provides configurable web search and fetch tools; its `toolActivation` defaults to `auto`, choosing eager or dynamic tool activation per model. It adds structured search/fetch data for codemode and an optional, manually started `pi-web-access-mcp` stdio CLI; installing the aggregate does not start that server. Degoog, Keenable, and the new Ceramic provider are explicit-only, excluded from automatic and `all` selection. OpenAI search now defaults to `gpt-6-luna`, results and clone cleanup are scoped per extension instance, and the promoted `@modelcontextprotocol/sdk@^1.32.1` moves the bundle off GHSA-6qxp-vccf-f47h. Perplexity search now uses the Search API's ranked pages and snippets rather than a Sonar-generated answer; requests requiring prose still use Sonar. `pi-antigravity@0.10.0` reads Pi 0.86+ transcript system messages, so Antigravity requests carry Pi's system prompt and tools; it also registers `google_search` and `generate_image` tools that use the signed-in Antigravity account. `pi-provider-qoder@0.5.0` registers the `qoder` and `qoder-cn` model providers. Sign in with `/login qoder` (browser or a personal access token from [qoder.com/account/integrations](https://qoder.com/account/integrations)) or `/login qoder-cn` (token from [qoder.com.cn/account/integrations](https://qoder.com.cn/account/integrations)). `QODER_PERSONAL_ACCESS_TOKEN` and `QODERCN_PERSONAL_ACCESS_TOKEN` log those providers in at startup. `/qoder-usage footer on` replaces the status-bar footer for that session, so leave it off while the pi-cc footer is in use. Preferred Thinking 1.0.2 preserves an explicit subagent `--thinking` choice. Deprecated `@tifan/pi-titlebar-spinner` is no longer bundled; Rename remains the single owner of Herdr tab naming.
 
 `pi-stash` is no longer bundled: `/btw` already preserves the main editor draft while handling side questions outside the main conversation. Prior `@herbertgao/pi-stash` releases remain available but are no longer maintained here.
 

package/THIRD_PARTY_NOTICES.md

@@ -238,3 +238,7 @@ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.
+
+## `pi-provider-qoder`
+
+The aggregate bundles [`pi-provider-qoder`](https://github.com/simonsmh/pi-provider-qoder) version 0.5.0 under its original package name. npm metadata and the repository README declare the MIT license. The published tarball does not include a LICENSE file. The published package corresponds to git commit [`2e29cbbda03862e20f216c5ecbb6c6042a6cabd7`](https://github.com/simonsmh/pi-provider-qoder/commit/2e29cbbda03862e20f216c5ecbb6c6042a6cabd7).

package/node_modules/pi-provider-qoder/README.md

@@ -0,0 +1,140 @@
+# pi-provider-qoder
+
+A [pi](https://shittycodingagent.ai/) extension that connects pi to Qoder.
+
+```bash
+pi install npm:pi-provider-qoder
+# or: omp install npm:pi-provider-qoder
+```
+
+```bash
+pi --provider qoder --model Lite
+pi --provider qoder-cn --model Qwen3.7-Plus
+```
+
+Inside pi:
+
+```text
+/login qoder
+/model Qwen3.8-Max
+```
+
+## Providers
+
+Both providers register together.
+
+### `qoder` (global)
+
+- `https://api3.qoder.sh/`
+- Login: `/login qoder` (browser OAuth or PAT)
+- PAT page: https://qoder.com/account/integrations
+- Env (first match): `QODER_API_KEY`, `QODER_PERSONAL_ACCESS_TOKEN`, `QODER_PAT`
+
+### `qoder-cn` (China)
+
+- `https://gateway.qoder.com.cn/`
+- Login: `/login qoder-cn` (PAT only)
+- PAT page: https://qoder.com.cn/account/integrations
+- Env (first match): `QODERCN_API_KEY`, `QODERCN_PERSONAL_ACCESS_TOKEN`, `QODERCN_PAT`
+
+A PAT (`pt-...`) is exchanged for a job token. Setting any of those env vars logs the provider in at startup.
+
+## Models
+
+Model IDs are the catalog `display_name` with whitespace stripped. After login, `/model` lists what that region offers.
+
+Examples: `Lite`, `Qwen3.8-Max`, `Qwen3.7-Plus`, `Qwen3.8-Flash`.
+
+Context uses the largest live catalog option (often 1M). Output is 128K.
+
+## Endpoints
+
+| | Global (`qoder`) | China (`qoder-cn`) |
+| --- | --- | --- |
+| PAT exchange | `https://openapi.qoder.sh/api/v1/jobToken/exchange` | `https://openapi.qoder.com.cn/api/v1/jobToken/exchange` |
+| User info | `https://openapi.qoder.sh/api/v1/userinfo` | `https://openapi.qoder.com.cn/api/v1/userinfo` |
+| Usage | `https://openapi.qoder.sh/api/v2/quota/usage` | `https://openapi.qoder.com.cn/api/v2/quota/usage` |
+| Chat gateway | `https://api3.qoder.sh/` | `https://gateway.qoder.com.cn/` |
+
+## Request and account Credits
+
+The footer shows **actual session deductions in Credits**, accumulated from Qoder's
+request-level `usage.credits` and `usage.billable` response fields. Tokens are shown
+separately and are not used to estimate Credits. A non-billable request contributes zero
+to actual deductions even when its reported nominal Credits are positive. Missing
+billing metadata is counted as `unknown`, so an incomplete session total is visible.
+Global and CN session totals are separate and are rebuilt from stored session entries,
+including attributed compaction, summary and tool usage entries.
+
+Account quota is an **account-wide period balance**, including other Qoder clients.
+Personal, add-on and organization quota are displayed separately. Account balances may
+be rounded or updated later; they do not determine per-request cost.
+
+Assistant `usage` preserves Qoder's `credits`, `original_credits`, and `billable`, and
+adds `qoder_provider`, `charged_credits`, and `usd_equivalent`. `charged_credits` is zero
+for non-billable calls, or the returned discounted Credits for billable calls; it remains
+absent when actual deductions cannot be determined. `usd_equivalent` is a reference
+conversion at **$20 / 1,500 Credits**, not a dollar charge. Credits never enter pi's
+dollar-denominated `usage.cost` fields. See the [Qoder usage field definitions](https://docs.qoder.com/cli/sdk/cost-usage).
+
+For example, a CN response with `credits: 0.000613272` and `billable: true` contributes
+`0.000613272` Credits, while a Global response with `credits: 0.005221428571428571` and
+`billable: false` contributes zero. The UI keeps up to eight decimal places; serialized
+usage preserves the full returned precision.
+
+A compact session-Credits and account-quota status is shown for the selected Qoder provider.
+`/qoder-usage` also shows the session deductions and account quota. For the full
+credit footer, opt in for the current pi session:
+
+```text
+/qoder-usage footer on
+/qoder-usage
+/qoder-usage footer off
+```
+
+Or start pi with `--qoder-credit-footer`. The custom footer replaces the misleading
+`$0.000 (sub)` with labelled session Credits and account-quota rows. Input/output,
+cache totals/hit rate, context, model/thinking level, directory, branch, session name,
+and other extension statuses remain visible. Existing nonzero dollar charges in mixed
+sessions are retained as `session $…` and are not relabelled as Qoder credits.
+Narrow terminals wrap quota and put the model on its own line.
+
+pi exposes one custom-footer slot. Enabling this option replaces another custom footer;
+leave it off when using a separate footer extension. If another extension takes the slot
+later, Qoder stops trying to reclaim it. Disabling restores pi's built-in footer only
+while Qoder still owns the slot. The public API does not expose the current auto-compaction
+setting, so the custom footer does not add the built-in `(auto)` hint. Alternate hosts without
+pi's TUI footer API keep the status/command where supported.
+
+Quota refreshes asynchronously at session start, model selection, before a new agent run,
+and after an agent run. The in-memory cache lasts 30 seconds and coalesces simultaneous
+requests; agent completion and `/qoder-usage` force a refresh. A local timer marks expired snapshots `[stale]`
+without polling. Missing data shows `?`/unavailable, not zero; failed refreshes retain only
+the last snapshot for the same account. Personal, add-on and organization quota are separate,
+with the API's own units. The command also shows the allowance and expiry when provided.
+Credential lookup and quota requests are each bounded to 10 seconds.
+
+There is no dedicated host login/logout event. After changing authentication for an
+already-selected model, run `/qoder-usage`; otherwise the next supported lifecycle event
+rechecks identity. No account quota is written to disk. Per-request Credits are stored
+with the assistant usage in the host's session log.
+
+### Offline visual preview
+
+```bash
+npm ci
+npm run demo:credits
+```
+
+The demo runs the same footer renderer inside pi-tui with **sample data only**. It makes
+no account or model requests. Press `f` (fresh), `s` (stale), `u` (unavailable), `0` (zero
+quota), or `q` (quit). It shows both standard and 54-column layouts. Global and CN
+quota queries and request-level billing fields have been verified with live calls.
+
+Sanitized billing samples in `src/__fixtures__/billing/usage.json` cover free Global
+calls, paid Global/CN calls, and two Kimi-K3 calls totaling 1.03185159 Credits.
+Session accounting regression tests use these samples without making live requests.
+
+## License
+
+MIT