@magpie-community/opencode-qoder-auth 0.2.13 → 0.2.14

package/README.md

@@ -83,8 +83,10 @@ itself.
 
 | What Qoder says | What the request returns |
 |---|---|
-| A refused sign-in | 401 |
-| A quota | 429 |
+| A refused sign-in (no code, or code 105) | 401 |
+| A quota (codes 110, 112–119, 122) | 429 |
+| Busy or queued for the model (code 10605) | 503, with `Retry-After` from Qoder's `retryAfterSeconds` (30s when it gives none); the sign-in is untouched |
+| A refusal of the request itself (codes 406, 416, 430, 80411, 80412, 100400–100403) | 400, with Qoder's words |
 | A failure before the answer starts | Qoder's status |
 | A failure after the answer has started | The stream ends with an error |
 

package/index.mjs

@@ -720,19 +720,55 @@ function qoderBody(chat, m) {
   return body
 }
 
-// failure is the status and message for a Qoder failure: a refused sign-in
-// asks for another, a quota is a 429.
+// failure is the status and message for a Qoder failure. Qoder's own code
+// says what it is, read as Qoder's client reads it (QoderErrorCode in the
+// app's qoder-agent-sdk worker): only 105 (loginExpired) is a lapsed
+// sign-in there, so a 401/403 that carries another code isn't one here
+// either (#98: a queued 10605 came as a 403 and read as "sign in again").
+// A refused chat with no code keeps the built-in's 401, and a quota is a
+// 429.
+const QUEUED = "10605"
+// the codes Qoder's client counts as a plan's usage or credits used up
+const QUOTA_CODES = new Set(["110", "112", "113", "114", "115", "116", "117", "118", "119", "122"])
+// refusals of this request, not of the account: sensitive content, not
+// supported, input too long, too many media, a custom model's service
+const REQUEST_CODES = new Set(["406", "416", "430", "80411", "80412", "100400", "100401", "100403"])
+const BUSY_WAIT = 30
+
 function failure(status, text) {
   if (status < 400 || status > 599) status = 502
   let msg = String(text ?? "").trim()
+  let code = ""
+  let queue
   try {
     const j = JSON.parse(text)
-    if (j?.message) msg = j.message
+    code = j?.code == null ? "" : String(j.code)
+    if (j?.message) msg = String(j.message)
     // details is a JSON string, or the object itself (gjson reads either)
     const d = typeof j?.details === "string" ? JSON.parse(j.details) : j?.details
     if (d?.error?.message) msg += ": " + d.error.message
+    // the queue's state: the message itself, as a JSON string, or a field
+    queue = j?.queue && typeof j.queue === "object" ? j.queue : undefined
+    if (!queue && typeof j?.message === "string" && j.message.trim().startsWith("{")) {
+      const q = JSON.parse(j.message)
+      if (q && typeof q === "object" && ("isQueued" in q || "serviceAvailable" in q || "retryAfterSeconds" in q)) queue = q
+    }
   } catch {}
   msg ||= STATUS_CODES[status] ?? `HTTP ${status}`
+  // Qoder's queue for the model: busy for now, with when to ask again. The
+  // sign-in is fine (the same token reads the models and the usage), so it
+  // is a 503 with Retry-After, which magpie asks again after, and never
+  // touches the account's sign-in.
+  if (code === QUEUED || queue?.isQueued === true || queue?.serviceAvailable === false) {
+    const n = Number(queue?.retryAfterSeconds)
+    const wait = Number.isFinite(n) && n > 0 ? Math.ceil(n) : BUSY_WAIT
+    const model = queue?.modelKey ? ` for ${queue.modelKey}` : ""
+    const tier = queue?.queueType ? ` (this plan's queue: ${queue.queueType})` : ""
+    const what = queue?.isQueued === true ? "queued the request" : "is busy"
+    return { status: 503, message: `Qoder ${what}${model}${tier}; try again in ${wait}s`, retryAfter: wait, signIn: "" }
+  }
+  if (QUOTA_CODES.has(code)) return { status: 429, message: "usage limit reached: " + msg, signIn: "" }
+  if (REQUEST_CODES.has(code)) return { status: 400, message: `Qoder refused the request (${code}): ${msg}`, signIn: "" }
   // a refused chat is the built-in's 401, which never marked the account
   // lapsed: only a refused refresh did (errorResponse says kept). Qoder's
   // own words go with it: a 401 right after signing in isn't a lapsed
@@ -747,11 +783,16 @@ function failure(status, text) {
 
 // errorResponse is a failure as OpenAI's API gives it. signIn is what it
 // means for the account (magpie's X-Magpie-Sign-In): a 401 keeps it unless
-// told expired, since the built-in marked only a refused refresh.
-const errorResponse = ({ status, message, signIn = status === 401 ? "kept" : undefined }) =>
+// told expired, since the built-in marked only a refused refresh. retryAfter
+// (seconds) is sent as Retry-After.
+const errorResponse = ({ status, message, signIn = status === 401 ? "kept" : undefined, retryAfter }) =>
   new Response(JSON.stringify({ error: { message, type: "qoder_error", code: status } }), {
     status,
-    headers: { "Content-Type": "application/json", ...(signIn ? { "X-Magpie-Sign-In": signIn } : {}) },
+    headers: {
+      "Content-Type": "application/json",
+      ...(signIn ? { "X-Magpie-Sign-In": signIn } : {}),
+      ...(retryAfter > 0 ? { "Retry-After": String(retryAfter) } : {}),
+    },
   })
 
 // ---- the reply ----------------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@magpie-community/opencode-qoder-auth",
-  "version": "0.2.13",
+  "version": "0.2.14",
   "description": "Qoder subscriptions in OpenCode and magpie: Qoder (qoder.com) and Qoder CN (qoder.cn)",
   "type": "module",
   "main": "./index.mjs",