@magpie-community/opencode-qoder-auth 0.2.17 → 0.2.19

package/README.md

@@ -247,6 +247,39 @@ International campaign discovery was checked with a real account on
 omitting either header hid them. This verification only queried the
 activity; a live claim was not performed.
 
+## Credits available, but a request is refused
+
+A positive credit balance does not guarantee a queue slot or access to
+every model. Use the model ids listed for that particular account and
+region. Do not infer another account's permission from its balance.
+
+Qoder code **10605**, including `RESOURCE_LIMIT`, `serviceAvailable` or
+`isQueued` details, is a resource/queue answer. Keep its suggested retry
+delay; repeatedly signing in does not free that queue. Since **0.2.18**
+([#185](https://github.com/magpie-community/plugins/pull/185)), a 10605 led
+by a BOM or wrapped in an outer message is read as busy too; see
+[#167](https://github.com/magpie-community/plugins/issues/167) for the broader report.
+That parser fix does not remove the provider's limit or prove that every
+live 401 had the same cause. A timeout likewise does not establish an
+empty wallet or an expired login.
+
+For a bounded offline reproduction, run `packages/qoder/busy.test.mjs`
+from #185 in an isolated temporary HOME. It compares plain queue JSON,
+BOM-prefixed JSON and known message wrappers, keeping explicit login and
+credit failures distinct. Extracting a JSON body from a translated log
+cannot recover the original wire bytes; synthetic wrappers demonstrate
+parser behavior, not which wrapper a historical request actually used.
+After selecting a local fix with magpie's `plugin use`, confirm which spec
+serves `qoder` in `plugin list`; a patched checkout alone does not change
+the running provider.
+
+
+For native check-in, an existing `CLAIMED` result is not a new credit grant.
+The host's recheck/cache behavior is tracked in
+[magpie#2696](https://github.com/yetone/magpie/issues/2696). Verify a new
+claim against the vendor record; a successful activity query alone is not
+proof that credits arrived.
+
 ## Not here
 
 - Qoder's usage and quota display.

package/index.mjs

@@ -799,16 +799,26 @@ function failure(status, text) {
   let code = ""
   let queue
   try {
-    const j = JSON.parse(text)
+    let j = JSON.parse(msg)
+    // #167: an HTTP/message wrapper can hold the actual 10605 body.
+    // Unwrap only that known queue code; a real auth/credit/request code
+    // on the outer body remains authoritative.
+    const outerCode = j?.code == null ? "" : String(j.code)
+    if (["", "401", "403"].includes(outerCode) && typeof j?.message === "string") {
+      try {
+        const inner = JSON.parse(j.message.trim())
+        if (inner && !Array.isArray(inner) && String(inner.code) === QUEUED) j = inner
+      } catch {}
+    }
     code = j?.code == null ? "" : String(j.code)
     if (j?.message) msg = String(j.message)
     // details is a JSON string, or the object itself (gjson reads either)
-    const d = typeof j?.details === "string" ? JSON.parse(j.details) : j?.details
+    const d = typeof j?.details === "string" ? JSON.parse(j.details.trim()) : j?.details
     if (d?.error?.message) msg += ": " + d.error.message
     // the queue's state: the message itself, as a JSON string, or a field
     queue = j?.queue && typeof j.queue === "object" ? j.queue : undefined
     if (!queue && typeof j?.message === "string" && j.message.trim().startsWith("{")) {
-      const q = JSON.parse(j.message)
+      const q = JSON.parse(j.message.trim())
       if (q && typeof q === "object" && ("isQueued" in q || "serviceAvailable" in q || "retryAfterSeconds" in q)) queue = q
     }
   } catch {}
@@ -1029,7 +1039,7 @@ async function* events(body) {
     if (inner.trim() === "[DONE]") break
     let chunk
     try {
-      chunk = JSON.parse(inner)
+      chunk = JSON.parse(inner.trim())
     } catch {
       continue
     }
@@ -1698,9 +1708,8 @@ const makePlugin = (site) => async ({ client }) => {
     try {
       m = (await models(cred)).find((x) => x.key === chat.model) ?? (await models(cred, true)).find((x) => x.key === chat.model)
     } catch (e) {
-      // the built-in answered any failure to read the list 400
-      // (QoderModelOf), a refused one included, marking nothing
-      return errorResponse({ status: 400, message: e.message })
+      if (e instanceof SignInGone || e?.expired) return signedInError(e)
+      return errorResponse({ status: 502, message: e?.message ?? String(e) })
     }
     if (!m) return errorResponse({ status: 400, message: `unknown or disabled model "${chat.model}"` })
     const CHAT_URL = siteOf(site, cred).api + CHAT_PATH

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@magpie-community/opencode-qoder-auth",
-  "version": "0.2.17",
+  "version": "0.2.19",
   "description": "Qoder subscriptions in OpenCode and magpie: Qoder (qoder.com) and Qoder CN (qoder.cn)",
   "type": "module",
   "main": "./index.mjs",