@magpie-community/opencode-qoder-auth 0.2.5 → 0.2.7

package/README.md

@@ -151,6 +151,27 @@ Neither magpie's built-in Qoder CN nor this plugin has been checked against
 every kind of qoder.cn account. If a sign-in or a chat fails, please open
 an issue with the error.
 
+## Daily check-in
+
+Qoder gives credits for a daily claim (the Qoder client's campaign
+`CLAIM_BENEFIT`, 100 Credits a day as reported), on both sites. magpie can
+press it once a day for each account when its Qoder check-in switch is on
+(Settings). It asks these pages through this plugin's fetch (since 0.2.7),
+which sends them as the account, on the device token (`Bearer`,
+`Cosy-ClientType: 10`) as usage is read; a refused device token is
+rotated once and the page asked again.
+
+- **List:** `GET <openapi>/sash/api/v1/me/campaigns`: `campaigns[]` with
+  `campaignId`, `actionType`, `claimStatus` (`CLAIMABLE`, `CLAIMED`),
+  `startAt`, `endAt`, `benefit.amount`.
+- **Claim:** `POST <openapi>/sash/api/v1/me/campaigns/{id}/claim`, body
+  `{}`: `status` `CLAIMED` (or under `data`).
+- `<openapi>` is `openapi.qoder.sh` (Qoder) or `openapi.qoder.com.cn`
+  (Qoder CN). Other pages on those hosts are still refused.
+
+Taken from [wallechfox/qoder-checkin](https://github.com/wallechfox/qoder-checkin),
+which a user reports works. Not yet tried here with a real Qoder account.
+
 ## Not here
 
 - Qoder's usage and quota display.

package/index.mjs

@@ -576,11 +576,14 @@ function qoderMessages(msgs) {
 // (Qoder: changing the Context "may change the rate"), so it is asked for
 // only when the conversation needs it. The request's size is counted
 // generously, a token for every 3 bytes of its UTF-8 JSON, so a window is
-// raised a little early rather than late.
-function windowFor(chat, m) {
+// raised a little early rather than late, and the reply's max_tokens is
+// counted in it: a window holds the prompt and the reply, so a
+// conversation of 180K asking 32K for the reply is sent 400K, not the 200K
+// it would overflow while magpie says the model takes 1M (yetone/magpie#700).
+function windowFor(chat, m, reply = 0) {
   const base = m.defaultWindow || (m.config?.max_input_tokens > 0 ? m.config.max_input_tokens : 0) || m.context
   if (!m.windows?.length) return m.context
-  const need = Math.ceil(Buffer.byteLength(JSON.stringify({ m: chat.messages ?? [], t: chat.tools ?? [] })) / 3)
+  const need = Math.ceil(Buffer.byteLength(JSON.stringify({ m: chat.messages ?? [], t: chat.tools ?? [] })) / 3) + Math.max(0, reply)
   if (base > 0 && need <= base) return base
   return m.windows.find((w) => w >= need) ?? m.windows[m.windows.length - 1]
 }
@@ -596,7 +599,7 @@ function qoderBody(chat, m) {
   const [thinking, effort] = effortFor(chat.reasoning_effort, m)
   const params = { enable_thinking: thinking, max_tokens: chat.max_completion_tokens || chat.max_tokens || 32000 }
   if (effort) params.reasoning_effort = effort
-  const window = windowFor(chat, m)
+  const window = windowFor(chat, m, params.max_tokens)
   if (window > 0) params.context_length = window
   const body = {
     parameters: params,
@@ -950,6 +953,33 @@ async function fetchUsage(site, deviceToken) {
   return env
 }
 
+// CAMPAIGNS is where Qoder lists the account's campaigns — the daily
+// credits among them (actionType CLAIM_BENEFIT) — and claims one
+// (POST …/{id}/claim), as Qoder's client does, on the device token.
+const CAMPAIGNS = "/sash/api/v1/me/campaigns"
+
+// campaignPage: url is the site's campaigns page or a claim under it, which
+// the account's fetch sends as the account rather than as a chat.
+function campaignPage(site, url) {
+  try {
+    const u = new URL(url)
+    return u.origin === new URL(site.openapi).origin && (u.pathname === CAMPAIGNS || /^\/sash\/api\/v1\/me\/campaigns\/[^/]+\/claim$/.test(u.pathname))
+  } catch {
+    return false
+  }
+}
+
+// campaignCall is url asked with the device token; Qoder's answer comes back
+// as it is.
+async function campaignCall(url, method, body, deviceToken, signal) {
+  return fetch(url, {
+    method,
+    headers: { Accept: "application/json", "Content-Type": "application/json", Authorization: `Bearer ${deviceToken}`, "Cosy-ClientType": "10", "User-Agent": "Qoder" },
+    body: method === "GET" ? undefined : body || "{}",
+    signal: signal ?? AbortSignal.timeout(20_000),
+  })
+}
+
 // refreshDevice trades the device refresh token for a new pair; it rotates
 // too, so the caller saves it.
 async function refreshDevice(site, refresh, chat = false) {
@@ -1171,6 +1201,27 @@ const makePlugin = (site) => async ({ client }) => {
     }
   }
 
+  // campaign is a campaigns page (the daily check-in) asked as the account:
+  // a refused device token is rotated once, as usage does, and asked again
+  const campaign = async (getAuth, input, url, init) => {
+    const body = await bodyText(input, init)
+    let cred
+    try {
+      cred = await fresh(getAuth)
+    } catch (e) {
+      return signedInError(e)
+    }
+    const method = String(init.method ?? input?.method ?? "GET").toUpperCase()
+    try {
+      let res = await campaignCall(url, method, body, cred.deviceToken, init.signal)
+      if (res.status === 401 || res.status === 403) res = await campaignCall(url, method, body, await deviceToken(getAuth, cred.deviceToken), init.signal)
+      return signed(res, renewed(cred))
+    } catch (e) {
+      if (e?.expired) return signedInError(e)
+      return errorResponse({ status: 502, message: e?.message ?? String(e) })
+    }
+  }
+
   const signedInError = (e) =>
     errorResponse({
       status: e instanceof SignInGone ? 401 : 502,
@@ -1241,6 +1292,7 @@ const makePlugin = (site) => async ({ client }) => {
           // every chat completion written as Qoder's own request
           async fetch(input, init = {}) {
             const url = typeof input === "string" ? input : input instanceof URL ? input.href : input.url
+            if (campaignPage(site, url)) return campaign(getAuth, input, url, init)
             if (!/\/chat\/completions$/.test(new URL(url).pathname))
               return errorResponse({ status: 404, message: "only chat completions are served" })
             let chat
@@ -1306,4 +1358,4 @@ export const QoderAuthPlugin = makePlugin(SITES.qoder)
 export const QoderCNAuthPlugin = makePlugin(SITES["qoder-cn"])
 
 // for tests
-export const _internal = { parseUsage, gfmt, when, failure, modelInfo, qoderBody, SITES, decodeBody, events }
+export const _internal = { campaignPage, parseUsage, gfmt, when, failure, modelInfo, qoderBody, SITES, decodeBody, events }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@magpie-community/opencode-qoder-auth",
-  "version": "0.2.5",
+  "version": "0.2.7",
   "description": "Qoder subscriptions in OpenCode and magpie: Qoder (qoder.com) and Qoder CN (qoder.cn)",
   "type": "module",
   "main": "./index.mjs",