@magpie-community/opencode-qoder-auth 0.2.0 → 0.2.3

package/README.md

@@ -26,10 +26,21 @@ What is kept: the job token, its refresh token and expiry, the uid, the
 device token and a machine id made for this sign-in. OpenCode keeps them in
 `auth.json`; magpie keeps them in `plugin-auth.json`.
 
-The job token is refreshed 5 minutes before it runs out. Qoder spends a
-refresh token once, so the new pair is saved straight away, and refreshes
-never run at the same time. When Qoder refuses a refresh (401 or 403), the
-request says to sign in again.
+Refreshing:
+- Qoder spends a refresh token once, so the plugin never sends one twice.
+- magpie renews the job token 10 minutes before it runs out, through the
+  plugin's `auth.refresh`, once for the account and before its requests,
+  models and usage need it; magpie saves the new pair. OpenCode doesn't
+  call that hook: there the job token is refreshed 5 minutes before it runs
+  out, before a request, and the new pair is saved straight away.
+- Only one refresh runs at a time. A request that reads the sign-in before
+  magpie saved a renewal uses the renewed pair, and a renewal handed a pair
+  a request already spent gives what that request got.
+- The device token, which reads usage, has no end on record: it is rotated
+  when Qoder refuses it. On a [Qoder CN](#qoder-cn) device-token account it
+  is the chat token too, and is renewed as above.
+- When Qoder refuses a refresh (401 or 403), the account needs signing in
+  again. Any other failure is tried again later.
 
 ## Requests
 

package/index.mjs

@@ -32,7 +32,9 @@ const CHAT_PATH = "/algo/api/v2/service/pro/sse/agent_chat_generation?FetchKeys=
 const MODELS_PATH = "/algo/api/v2/model/list?Encode=1"
 const COSY_VERSION = "1.1.49"
 const SIGN_IN_TIMEOUT = 15 * 60 * 1000
-const REFRESH_LEAD = 5 * 60 * 1000
+const REFRESH_LEAD = 5 * 60 * 1000 // a chat token this close to its end is refreshed before a request
+const RENEW_LEAD = 10 * 60 * 1000 // and this close, magpie renews it ahead of time (auth.refresh)
+const KEEP_SPENT_MS = 60 * 60 * 1000 // how long what a spent refresh token gave is remembered
 const DAY = 24 * 60 * 60 * 1000
 const CHAT = "@ai-sdk/openai-compatible"
 
@@ -291,13 +293,51 @@ const CN_MODELS = [
   { id: "lite", name: "Lite" },
 ]
 
-// freeOf reads whether the listing marks a model free, as Qoder's client
-// reads it (internal/qoder/models.go): is_free true, or a price_factor (the
-// credits a request costs, as a multiple) of 0, either in snake or camel case.
+// freeOf reads whether a model costs the plan no credits: a price_factor
+// (the credits a request costs, as a multiple; priceFactor in camel case)
+// of 0, the price Qoder's own client shows ("0×"). is_free is no word on
+// that: Qoder's listing has it true on Qwen3.8-Max at 0.5×, an off-peak
+// discount (错峰 4 折) on it, and Qoder's client shows the price, not it.
+// It is taken only from a listing with no price at all. A price of 0 for
+// the while an active promotion lasts, with a price before it, is a
+// discount, not a free model; a limited-time free model (Qwen3.8-Flash:
+// 0×, its original_price_factor 0.1 struck through) is free while it is.
 function freeOf(raw) {
-  const is = raw.is_free ?? raw.isFree
   const price = raw.price_factor ?? raw.priceFactor
-  return is === true || (typeof price === "number" && price === 0)
+  if (typeof price === "number" && Number.isFinite(price)) {
+    if (price !== 0) return false
+    const p = raw.promotion ?? raw.prommotion
+    const before = p?.before_promotion_price_factor ?? p?.beforePromotionPriceFactor
+    return !(p?.active === true && typeof before === "number" && before > 0)
+  }
+  return (raw.is_free ?? raw.isFree) === true
+}
+
+// rateOf reads a model's price as Qoder's client shows it beside the model
+// (magpie shows it in its lists, so the cheap ones can be picked without
+// opening Qoder): rate, the price_factor (0.5×), and rateWas, the price
+// struck through beside it while a discount runs: an active promotion's
+// before_promotion_price_factor, else an original_price_factor above the
+// price (Qwen3.8-Flash: 0×, 0.1× struck through). A promotion's 0 that
+// isn't free is its price before times its discount_factor. A listing with
+// no price gives none (0). The same rule as magpie's built-in
+// (internal/qoder/models.go, ModelInfo.free).
+function rateOf(raw) {
+  const price = raw.price_factor ?? raw.priceFactor
+  if (typeof price !== "number" || !Number.isFinite(price)) return { rate: 0, rateWas: 0 }
+  const num = (v) => (typeof v === "number" && Number.isFinite(v) ? v : 0)
+  const p = raw.promotion ?? raw.prommotion
+  const before = p?.before_promotion_price_factor ?? p?.beforePromotionPriceFactor
+  const discount = num(p?.discount_factor) || num(p?.discountFactor)
+  const discounted = p?.active === true && typeof before === "number" && before > 0
+  let rate = Math.max(price, 0)
+  let rateWas = Math.max(num(raw.original_price_factor), num(raw.originalPriceFactor))
+  if (discounted) {
+    rateWas = before
+    if (rate === 0) rate = before * discount
+  }
+  if (rateWas <= rate) rateWas = 0
+  return { rate, rateWas }
 }
 
 // modelInfo reads one entry of the listing's "chat" array: its efforts and
@@ -314,6 +354,7 @@ function modelInfo(raw) {
     efforts: Array.isArray(raw.reasoning_efforts) ? [...raw.reasoning_efforts] : [],
     defaultEffort: "",
     free: freeOf(raw),
+    ...rateOf(raw),
     config: raw,
   }
   const tc = raw.thinking_config
@@ -383,6 +424,10 @@ function runtimeModel(site, m) {
     variants: Object.fromEntries((m.efforts ?? []).map((e) => [e, { reasoningEffort: e }])),
     // magpie's own: served at no cost to the plan's credits
     free: !!m.free,
+    // magpie's own: the credits a request costs, as a multiple, and the
+    // price before a discount running now (0: none)
+    rate: m.rate ?? 0,
+    rateWas: m.rateWas ?? 0,
   }
 }
 
@@ -799,6 +844,13 @@ function signed(res, renewed) {
   return new Response(res.body, { status: res.status, statusText: res.statusText, headers })
 }
 
+// changed is the fields of b that differ from a's: what auth.refresh gives.
+function changed(a, b) {
+  const out = {}
+  for (const k of ["access", "refresh", "expires", "deviceToken", "deviceRefresh"]) if (b[k] !== a[k]) out[k] = b[k]
+  return out
+}
+
 // ---- usage --------------------------------------------------------------------
 //
 // The account's allowance as magpie's built-in Qoder account shows it
@@ -952,6 +1004,38 @@ const makePlugin = (site) => async ({ client }) => {
     lock = run.catch(() => {})
     return run
   }
+  // spent is what each refresh token this process spent gave, by that
+  // token: the chat pair it renewed. magpie saves what auth.refresh gives
+  // only once the hook has returned, and a request may read the account in
+  // between, or the hook be handed the account as it was before a request
+  // renewed it: either follows spent rather than spending the token again.
+  const spent = new Map()
+  const latest = (a) => {
+    for (let i = 0; i < 16 && a?.refresh; i++) {
+      const s = spent.get(a.refresh)
+      if (!s) break
+      a = { ...a, ...s.got }
+    }
+    return a
+  }
+  const spend = (refresh, got) => {
+    const now = Date.now()
+    for (const [k, v] of spent) if (now - v.at > KEEP_SPENT_MS) spent.delete(k)
+    spent.set(refresh, { got, at: now })
+    return got
+  }
+  // renew spends a's chat refresh token, under the lock: the fields it
+  // changes, recorded in spent.
+  const renew = async (a) => {
+    if (a.deviceChat) {
+      // the device token is the chat token: renewed as a device token,
+      // both pairs being the one pair
+      const dt = await refreshDevice(site, a.refresh, true)
+      return spend(a.refresh, { access: dt.token, refresh: dt.refresh, expires: dt.expires, deviceToken: dt.token, deviceRefresh: dt.refresh })
+    }
+    const jt = await refreshJob(site, a.refresh, a.accountId || a.email || a.uid)
+    return spend(a.refresh, { access: jt.token, refresh: jt.refresh_token, expires: expiresAt(jt) })
+  }
   // each account's listing, the model configs a request carries
   const listings = new Map()
   // the accounts fresh renewed: the built-in took the lapse mark off on a
@@ -970,19 +1054,12 @@ const makePlugin = (site) => async ({ client }) => {
   // its end.
   const fresh = (getAuth) =>
     locked(async () => {
-      const a = await getAuth()
-      if (a?.type !== "oauth" || !a.access || !a.uid) throw new SignInGone(`${site.name}: not signed in`)
+      const stored = await getAuth()
+      if (stored?.type !== "oauth" || !stored.access || !stored.uid) throw new SignInGone(`${site.name}: not signed in`)
+      // renewed already (by magpie's auth.refresh), the store not yet saying so
+      const a = latest(stored)
       if (a.expires - Date.now() > REFRESH_LEAD) return a
-      let next
-      if (a.deviceChat) {
-        // the device token is the chat token: renewed as a device token,
-        // both pairs being the one pair
-        const dt = await refreshDevice(site, a.refresh, true)
-        next = { ...a, access: dt.token, refresh: dt.refresh, expires: dt.expires, deviceToken: dt.token, deviceRefresh: dt.refresh }
-      } else {
-        const jt = await refreshJob(site, a.refresh, a.accountId || a.email || a.uid)
-        next = { ...a, access: jt.token, refresh: jt.refresh_token, expires: expiresAt(jt) }
-      }
+      const next = { ...a, ...(await renew(a)) }
       await client.auth.set({ path: { id: ID }, body: next })
       renewals.add(next)
       return next
@@ -1001,12 +1078,12 @@ const makePlugin = (site) => async ({ client }) => {
   // the one saved since, else a rotated one, saved.
   const deviceToken = (getAuth, attempted) =>
     locked(async () => {
-      const a = await getAuth()
+      const a = latest(await getAuth())
       if (a?.deviceToken !== attempted) return a?.deviceToken
       const dt = await refreshDevice(site, a.deviceRefresh, !!a.deviceChat)
       const next = { ...a, deviceToken: dt.token, deviceRefresh: dt.refresh }
       // the pair it spent was the chat pair too
-      if (a.deviceChat) Object.assign(next, { access: dt.token, refresh: dt.refresh, expires: dt.expires })
+      if (a.deviceChat) Object.assign(next, spend(a.refresh, { access: dt.token, refresh: dt.refresh, expires: dt.expires, deviceToken: dt.token, deviceRefresh: dt.refresh }))
       await client.auth.set({ path: { id: ID }, body: next })
       return dt.token
     })
@@ -1072,6 +1149,28 @@ const makePlugin = (site) => async ({ client }) => {
   return {
     auth: {
       provider: ID,
+      // magpie renews the chat token RENEW_LEAD before its end, once for
+      // the account, before its requests, models and usage ask for it; the
+      // check before each request (REFRESH_LEAD) stays for OpenCode, which
+      // doesn't call this. The device token of a job-token account has no
+      // end on record: usage rotates it once Qoder refuses it, as before.
+      refreshLead: RENEW_LEAD,
+      async refresh(auth) {
+        if (auth?.type !== "oauth" || !auth.access || !auth.uid || !String(auth.refresh ?? "").trim()) return undefined
+        return locked(async () => {
+          // a request renewed it meanwhile (or magpie hasn't saved this
+          // hook's last answer): what that gave, not a second refresh
+          const a = latest(auth)
+          if (a.access !== auth.access && a.expires - Date.now() > RENEW_LEAD) return changed(auth, a)
+          try {
+            // magpie saves what this gives
+            return changed(auth, { ...a, ...(await renew(a)) })
+          } catch (e) {
+            if (e?.expired) throw Object.assign(new Error(e.message), { signIn: "expired" })
+            throw e
+          }
+        })
+      },
       async loader(getAuth) {
         const a = await getAuth()
         if (a?.type !== "oauth") return {}
@@ -1132,7 +1231,7 @@ const makePlugin = (site) => async ({ client }) => {
           const ms = await models(cred, true)
           if (!ms.length) return provider.models
           return Object.fromEntries(
-            ms.map((m) => [m.key, runtimeModel(site, { id: m.key, name: m.name, context: m.context, images: m.images, efforts: m.thinks ? m.efforts : [], free: m.free })]),
+            ms.map((m) => [m.key, runtimeModel(site, { id: m.key, name: m.name, context: m.context, images: m.images, efforts: m.thinks ? m.efforts : [], free: m.free, rate: m.rate, rateWas: m.rateWas })]),
           )
         } catch {
           return provider.models

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@magpie-community/opencode-qoder-auth",
-  "version": "0.2.0",
+  "version": "0.2.3",
   "description": "Qoder subscriptions in OpenCode and magpie: Qoder (qoder.com) and Qoder CN (qoder.cn)",
   "type": "module",
   "main": "./index.mjs",
   "exports": "./index.mjs",
   "files": ["index.mjs", "README.md", "LICENSE-CLIProxyAPI"],
   "keywords": ["opencode", "opencode-plugin", "magpie", "qoder", "qoder-cn"],
-  "license": "MIT"
+  "license": "MIT",
+  "repository": { "type": "git", "url": "git+https://github.com/magpie-community/plugins.git", "directory": "packages/qoder" }
 }