@magpie-community/opencode-workbuddy-auth 0.1.12 → 0.1.14

package/README.md

@@ -43,6 +43,14 @@ included, doesn't mark the account, as the built-in never did; magpie
 tries again later, and the old token is used meanwhile.
 OpenCode doesn't call `auth.refresh`; the check before each request stays.
 
+An enterprise (team) account is asked for as the enterprise. A browser
+sign-in keeps the enterprise id WorkBuddy names for the account (from
+`/login/account`, else its account list), and desktop's is read from the
+app's file. Every request then carries `X-Enterprise-Id` and `X-Tenant-Id`,
+as WorkBuddy's own client sends them; without them WorkBuddy answers as the
+personal account, with the personal plan's models. A browser sign-in made
+before 0.1.13 has no enterprise id kept: sign in again.
+
 Desktop's sign-in is refreshed only when the app hasn't refreshed it
 itself, and the new token is kept in memory, never written back, as magpie's
 built-in WorkBuddy does.
@@ -111,6 +119,15 @@ is used.
 
 A model's reasoning levels are its variants (`reasoningEffort`).
 
+## Credits in magpie
+
+magpie's usage card shows the account's credits from the resource summary.
+It also says when the soonest credits left run out (`runsOutAt`, and how
+many: `runsOut`), from the paid and free package lists WorkBuddy's own
+client reads. The daily Free Plan slice isn't counted: it ends at the same
+midnight on every account. magpie's smart routing spends the account whose
+credits run out first.
+
 ## Not here
 
 magpie's built-in WorkBuddy does more than this package:

package/index.mjs

@@ -172,6 +172,7 @@ function renew(site, a, save) {
         "X-Refresh-Token": a.refresh,
         "X-Auth-Refresh-Source": "plugin",
         "X-Domain": domainOf(site, a),
+        ...enterpriseHeaders(a),
       }, {})
       if (!got?.accessToken) throw Object.assign(new Error("WorkBuddy gave no refreshed token"), { bare: true })
       const next = merge(a, got)
@@ -259,10 +260,48 @@ function sign(site, a, headers) {
   headers.set("X-Agent-Purpose", "conversation")
   headers.set("X-IDE-Name", "WorkBuddy")
   headers.set("X-IDE-Version", UA_VERSION)
+  for (const [k, v] of Object.entries(enterpriseHeaders(a))) headers.set(k, v)
   if (!site.ai) return
   headers.set("X-Agent-Type", "main")
 }
 
+// enterpriseHeaders names the enterprise (team) an account signed in as, as
+// WorkBuddy's own client does on every request it makes for that account
+// (its auth interceptor: X-Enterprise-Id and X-Tenant-Id, both the
+// account's enterpriseId). Without them WorkBuddy answers as the personal
+// account: /v3/config lists the personal plan's models and not the
+// enterprise's (#75). A personal account has none and sends none.
+function enterpriseHeaders(a) {
+  const id = typeof a?.enterpriseId === "string" ? a.enterpriseId.trim() : ""
+  return id ? { "X-Enterprise-Id": id, "X-Tenant-Id": id } : {}
+}
+
+// enterpriseOf is the enterprise the account a sign-in gave belongs to:
+// the one /login/account names, else, for an account that isn't personal,
+// the one WorkBuddy's account list has for it — the same choice WorkBuddy's
+// own client makes (mergeCurrentAccountDetails): the uid's only entry of that
+// type, or the only one it last signed in to. None found is personal.
+async function enterpriseOf(site, a, who) {
+  const own = typeof who?.enterpriseId === "string" ? who.enterpriseId.trim() : ""
+  if (own) return own
+  const type = String(who?.type ?? "").trim().toLowerCase()
+  if (!type || type === "personal") return ""
+  let list
+  try {
+    list = await call(site, "GET", "/v2/plugin/accounts", {
+      Authorization: "Bearer " + a.access,
+      "X-Domain": domainOf(site, a),
+    })
+  } catch {
+    return ""
+  }
+  const mine = (list?.accounts ?? []).filter((x) => x?.uid === who.uid && typeof x.enterpriseId === "string" && x.enterpriseId.trim())
+  const same = mine.filter((x) => String(x.type ?? "").trim().toLowerCase() === type)
+  const last = mine.filter((x) => x.lastLogin)
+  const pick = same.length === 1 ? same[0] : last.length === 1 ? last[0] : mine.length === 1 ? mine[0] : undefined
+  return pick ? pick.enterpriseId.trim() : ""
+}
+
 // WorkBuddy's own client names each chat to its gateway four ways: the
 // conversation it belongs to, the user send (turn) it answers, the message
 // itself, and the request that carried it. Its backend counts a user send as
@@ -759,6 +798,7 @@ async function browserSignIn(site) {
           "X-No-Enterprise-Id": "true",
         }, [12151], deadline)
         a.uid = who.uid ?? ""
+        a.enterpriseId = await enterpriseOf(site, a, who)
         return success(site, a, who.nickname || who.phoneNumber || who.uid)
       } catch (e) {
         return { type: "failed", error: e.message }
@@ -776,6 +816,7 @@ function success(site, a, name) {
     accountId: name || site.name,
     uid: a.uid ?? "",
     domain: a.domain ?? "",
+    ...(a.enterpriseId ? { enterpriseId: a.enterpriseId } : {}),
     ...(a.refreshExpiresAt ? { refreshExpiresAt: a.refreshExpiresAt } : {}),
     ...(a.tokenType ? { tokenType: a.tokenType } : {}),
   }
@@ -808,6 +849,7 @@ function readDesktop(site) {
       domain: typeof t.domain === "string" ? t.domain : "",
       tokenType: typeof t.tokenType === "string" ? t.tokenType : "",
       uid: acct.uid,
+      ...(typeof acct.enterpriseId === "string" && acct.enterpriseId.trim() ? { enterpriseId: acct.enterpriseId.trim() } : {}),
       name: acct.nickname || acct.phoneNumber || acct.uid,
     }
   } catch {
@@ -875,13 +917,13 @@ const statusText = (n) => STATUS_TEXT[n] || `HTTP ${n}`
 
 // meter asks the billing API as magpie's built-in did, its errors said
 // the same: WorkBuddy's message, else its code, else the HTTP status.
-async function meter(site, a, path) {
+async function meter(site, a, path, body = {}) {
   const res = await fetch(site.endpoint + path, {
     method: "POST",
     headers: { "Content-Type": "application/json", Accept: "application/json", "User-Agent": "WorkBuddy/" + UA_VERSION,
       Authorization: "Bearer " + a.access, "X-User-Id": a.uid ?? "", "X-Domain": domainOf(site, a), "X-Product": "SaaS",
-      "X-IDE-Type": "WorkBuddy" },
-    body: "{}",
+      "X-IDE-Type": "WorkBuddy", ...enterpriseHeaders(a) },
+    body: JSON.stringify(body),
     signal: AbortSignal.timeout(20000),
   })
   let env = {}
@@ -927,6 +969,76 @@ function usageOf(sum, plan) {
   return out
 }
 
+// The packages' codes, as WorkBuddy's own client lists them when it asks
+// for each package's credits (its COMMODITY_CODES): the API refuses a
+// detail list without them (10001 "PackageCodes required").
+const CODE = (n, s) => `TCACA_code_${n}_${s}`
+const PAID_CODES = [CODE("002", "AkiJS3ZHF5"), CODE("005", "maRGyrHhw1"), CODE("003", "FAnt7lcmRT"), CODE("023", "4xbGhMrE6q"),
+  CODE("026", "BaESVICNoi"), CODE("027", "0FCGVA6vSa"), CODE("009", "0XmEQc2xOf"), CODE("038", "OhvqZtiPKr"), CODE("036", "lupO5WgNdG")]
+const DAILY_CODE = CODE("001", "PqouKr6QWV")
+const FREE_CODES = [DAILY_CODE, CODE("008", "cfWoLwvjU4"), CODE("035", "ArVxJcGDsm"), CODE("006", "DbXS0lrypC"), CODE("039", "KRcQj7wUat"),
+  CODE("040", "mi9rCYg46x"), CODE("007", "nzdH5h4Nl0"), CODE("028", "NtpWi0jzXs"), CODE("037", "WxOD3MpI2o"), CODE("029", "6wCGEWquYy"),
+  CODE("030", "BjSt89qTvr")]
+// a slice package (CapacityType 4) is refreshed each day: its credits are
+// lost at the same midnight on every account, so they tell none apart
+const SLICE = "4"
+
+// beijing is WorkBuddy's own time ("2026-10-13 00:39:27" is UTC+8, as its
+// DeductionEndTime for the same package says).
+const beijing = (ms) => new Date(ms + 8 * 3600_000).toISOString().slice(0, 19).replace("T", " ")
+
+// packagesOf is every package of the account with credits, paid and free,
+// as WorkBuddy's client asks for them: active and used-up (Status 0, 3),
+// up to 10 pages of 200.
+async function packagesOf(site, a, now = Date.now()) {
+  const day = beijing(now).slice(0, 10)
+  const lists = [
+    ["/billing/meter/get-user-resource-paid-packages", { PackageCodes: PAID_CODES, NeedRenewInfo: true }],
+    ["/billing/meter/get-user-resource-free-packages", { PackageCodes: FREE_CODES, SlicePeriodStartTime: day + " 00:00:00", SlicePeriodEndTime: day + " 23:59:59" }],
+  ]
+  const out = []
+  for (const [path, extra] of lists) {
+    for (let page = 1; page <= 10; page++) {
+      const d = await meter(site, a, path, { PageNumber: page, PageSize: 200, Status: [0, 3], ...extra })
+      const got = d?.Accounts ?? []
+      out.push(...got)
+      if (got.length < 200 || out.length >= (d?.TotalCount ?? 0)) break
+    }
+  }
+  return out
+}
+
+// endOf is when a package's credits are lost: its DeductionEndTime, else
+// ExpiredTime, else the cycle's end (UTC+8), as WorkBuddy's client reads it.
+function endOf(p) {
+  const ms = Number(p?.DeductionEndTime)
+  if (ms > 0) return ms
+  for (const v of [p?.ExpiredTime, p?.CycleEndTime]) {
+    if (typeof v !== "string" || !v.trim()) continue
+    const t = /^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$/.test(v.trim()) ? Date.parse(v.trim().replace(" ", "T") + "+08:00") : Date.parse(v)
+    if (t > 0) return t
+  }
+  return 0
+}
+
+// runsOutOf is the soonest moment credits left in one of the account's
+// packages are lost, and how many (cdredfox on X): smart routing spends
+// the account whose credits expire first. Only packages the summary
+// counts, with credits left, and not the daily slice; null when none.
+function runsOutOf(sum, packages, now = Date.now()) {
+  const counted = new Set((sum?.Packages ?? []).map((p) => p?.PackageCode))
+  let at = 0, amount = 0
+  for (const p of packages ?? []) {
+    if (!counted.has(p?.PackageCode) || p?.PackageCode === DAILY_CODE || String(p?.CapacityType) === SLICE) continue
+    const left = capacity(p?.CycleCapacityRemainPrecise ?? p?.CycleCapacityRemain)
+    const end = endOf(p)
+    if (!(left > 0) || end <= now) continue
+    if (!at || end < at) at = end, amount = left
+    else if (end === at) amount += left
+  }
+  return at ? { runsOutAt: new Date(at).toISOString(), runsOut: amount } : null
+}
+
 // ---- models -----------------------------------------------------------------
 
 // variants are the reasoning levels as OpenCode gives them to the AI SDK.
@@ -1124,7 +1236,17 @@ function makePlugin(site) {
         try {
           const a = await current(site, client, auth)
           // the meter has no /v2 prefix, on either site
-          return { ...usageOf(await meter(site, a, "/billing/meter/get-user-resource-summary"), auth.plan), signIn: "kept" }
+          const sum = await meter(site, a, "/billing/meter/get-user-resource-summary")
+          const out = usageOf(sum, auth.plan)
+          // when the credits left run out, for routing to spend them first;
+          // a list that can't be read leaves it unknown, the card stands
+          const credits = out.windows.find((w) => w.name === "Credits")
+          if (credits) {
+            try {
+              Object.assign(credits, runsOutOf(sum, await packagesOf(site, a)) ?? {})
+            } catch {}
+          }
+          return { ...out, signIn: "kept" }
         } catch (e) {
           return { error: e?.message ?? String(e), signIn: "kept" }
         }
@@ -1216,4 +1338,4 @@ export const WorkBuddyAuthPlugin = makePlugin(SITES.workbuddy)
 export const WorkBuddyAIAuthPlugin = makePlugin(SITES["workbuddy-ai"])
 
 // for tests
-export const _internal = { withSystem, fitTools, fitted, renamed, unflagged, usageOf, desktopHeld, explained, REFUSED_HINT, EXHAUSTED_HINT, freeCredits, creditsOf, fresh, SITES, renewing, renewed, SESSION, attend, turnKey, conversationKey, signatureOf }
+export const _internal = { runsOutOf, packagesOf, endOf, enterpriseHeaders, enterpriseOf, liveModels, browserSignIn, withSystem, fitTools, fitted, renamed, unflagged, usageOf, desktopHeld, explained, REFUSED_HINT, EXHAUSTED_HINT, freeCredits, creditsOf, fresh, SITES, renewing, renewed, SESSION, attend, turnKey, conversationKey, signatureOf }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@magpie-community/opencode-workbuddy-auth",
-  "version": "0.1.12",
+  "version": "0.1.14",
   "description": "OpenCode provider plugins for WorkBuddy's plans: WorkBuddy (CodeBuddy, copilot.tencent.com) and WorkBuddy AI (www.workbuddy.ai)",
   "type": "module",
   "main": "./index.mjs",