@magpie-community/opencode-zcode-auth 0.1.17 → 0.1.19

package/README.md

@@ -24,7 +24,12 @@ over Anthropic's Messages API. Provider id: `zcode`.
     ZCode's does: ZCode's headers, ZCode's system prompt ahead of the
     agent's, the day in a `<system-reminder>` turn before the agent's
     turns, and the sign-in's device id in `metadata.user_id`. GLM Coding
-    Plan and team requests go as the agent sent them.
+    Plan and team requests go as the agent sent them. One it still turns
+    away (a 405, the block page or code 3012) comes back with what to do
+    about it, as magpie's built-in said: "ZCode's Start Plan still turned
+    this request away, though magpie sends it as the ZCode app does; …
+    Use an account with a GLM Coding Plan, or add another provider to this
+    group".
   - The Start Plan's token can't be refreshed. When it runs out, sign in
     again.
 - **ZCode app's sign-in**
@@ -96,6 +101,15 @@ behind an error, so a gift hiccup must not black out a working Coding
 Plan. A gift that goes out of date while requests use it simply stops
 showing.
 
+**Resets.** A GLM Coding Plan of the account's own, and a team seat,
+show the resets the vendor's usage page lists
+(`/api/biz/customer-package-reset/list`, `targetType=PERSONAL` with the
+plan's key, `TEAM` with the team's sign-in): how many of the five hours
+and of the week are still available, and when each runs out, soonest
+first. A team's are marked a team's. They are only read; a reset is
+spent on the vendor's own page. A list that can't be read, or has none
+left, shows no count.
+
 **Gift plans ZCode holds but has not granted.** ZCode hands out one-off
 trust-build / gift plans (a day's ZCode Trust Build, say) that are not
 on the account until the ZCode app claims them. The plugin reads the

package/index.mjs

@@ -436,9 +436,12 @@ async function codingUsage(s) {
   const level = typeof d.level === "string" ? d.level : ""
   if (level) out.plan = "GLM Coding " + level[0].toUpperCase() + level.slice(1)
   out.windows = limitWindows(d)
+  const resets = personalResets(root, s.key)
   try {
     Object.assign(out, termOf(await call("GET", root + "/api/biz/subscription/list", { auth: s.key })))
   } catch {}
+  const r = await resets
+  if (r) out.resets = r
   return out
 }
 
@@ -708,31 +711,56 @@ async function teamUsage(s, key) {
 }
 
 // teamResets is how many resets a team member may spend, of the five hours
-// and of the week: those of customer-package-reset/list still available.
-// null when it can't be told or there are none.
+// and of the week, marked a team's (team: true), as the built-in's
+// zhipuTeamResets did. null when it can't be told or there are none.
 async function teamResets(root, auth, headers) {
+  const r = await resetsOf(root + "/api/biz/customer-package-reset/list?targetType=TEAM", auth, headers)
+  if (r) r.team = true
+  return r
+}
+
+// personalResets is how many resets a GLM Coding Plan of a person's own
+// holds, as bigmodel.cn's usage page lists them, asked with the plan's
+// key (the built-in's zhipuPersonalResets). Only read: a reset is spent
+// on the vendor's own page, never from here.
+async function personalResets(root, key) {
+  return resetsOf(root + "/api/biz/customer-package-reset/list?targetType=PERSONAL", key)
+}
+
+// resetsOf reads customer-package-reset/list: the resets of the five
+// hours and of the week, of which only those still available count (one
+// run out stays listed a week, available false), each with its own end
+// (each, soonest first, one with no end last) and the soonest as until.
+// null when the list can't be read, so no count is shown rather than 0,
+// and when it holds none.
+async function resetsOf(url, auth, headers) {
   let d
   try {
-    d = (await call("GET", root + "/api/biz/customer-package-reset/list?targetType=TEAM", { auth, headers })) ?? {}
+    d = (await call("GET", url, { auth, headers })) ?? {}
   } catch {
     return null
   }
   let until = 0
-  const count = (rs) => {
+  const each = []
+  const count = (rs, window) => {
     let n = 0
     for (const x of Array.isArray(rs) ? rs : []) {
       if (x?.available !== true) continue
       n++
       const t = when(x.expireTime)
       if (t && (!until || t < until)) until = t
+      each.push(t ? { until: new Date(t).toISOString(), window } : { window })
     }
     return n
   }
-  const fiveHour = count(d.fiveHourResets)
-  const weekly = count(d.weekResets)
+  const fiveHour = count(d.fiveHourResets, "fiveHour")
+  const weekly = count(d.weekResets, "weekly")
   if (fiveHour + weekly === 0) return null
+  const end = (c) => (c.until ? Date.parse(c.until) : Infinity)
+  each.sort((a, b) => (end(a) === end(b) ? 0 : end(a) < end(b) ? -1 : 1))
   const r = { count: fiveHour + weekly, byWindow: true, fiveHour, weekly }
   if (until) r.until = new Date(until).toISOString()
+  r.each = each
   return r
 }
 
@@ -1026,6 +1054,27 @@ function ownTeam(store, key) {
   return null
 }
 
+// configKey is the coding plan key ZCode's config.json gives its built-in
+// coding plan provider, Z.ai's first, as ZCode lists them; ZCode reads it
+// as it is, and one written encrypted is read too.
+function configKey(key) {
+  const providers = readJSON(join(zcodeDir(), "config.json"))?.provider
+  if (!providers || typeof providers !== "object") return null
+  for (const [ids, base] of [
+    [["builtin:zai-coding-plan", "account:zai-individual-coding-plan"], ZAI_BASE],
+    [["builtin:bigmodel-coding-plan", "account:bigmodel-individual-coding-plan"], BIGMODEL_BASE],
+  ]) {
+    for (const id of ids) {
+      let k = providers[id]?.options?.apiKey
+      if (typeof k !== "string") continue
+      k = k.trim()
+      if (k.startsWith("enc:")) k = first(decrypt(key, k))
+      if (k.includes(".") && !/[\s{$]/.test(k)) return { key: k, base }
+    }
+  }
+  return null
+}
+
 // ownSignIn is what ZCode is signed in to now: the account, its coding
 // plan key, ZCode's session token (the Start Plan's key) and the team plan
 // it is switched to; null when it has none of them.
@@ -1043,6 +1092,9 @@ function ownSignIn() {
     // Z.ai's first, as ZCode lists it
     if (!s.key || (base === ZAI_BASE && s.base !== ZAI_BASE)) s = { key: k, base }
   }
+  // ZCode 3.15 keeps no plan key in its credentials; the one it uses sits
+  // in config.json, the provider's options.apiKey (yetone/magpie#2130)
+  if (!s.key) s = configKey(key) || s
   const jwt = first(first(decrypt(key, store.zcodejwttoken)).replace(/^Bearer /, ""))
   const team = ownTeam(store, key)
   if (team) s = { ...team, jwt }
@@ -1287,6 +1339,36 @@ function model(m, url) {
 // the plan serves (ARNO's "Freeflow", provider zcode-start) sends it: its
 // headers (startHeaders) and its body (dress). The texts are prompt.mjs.
 
+// START_BLOCKED is what the Start Plan still turning a request away means,
+// word for word magpie's provider.ZCodeStartBlockedHint (#425), which
+// magpie's Routing page knows and says in the user's language. It is put
+// in place of the block page, whose words magpie would otherwise read as a
+// network firewall's (provider.BlockedHint).
+const START_BLOCKED = "ZCode's Start Plan still turned this request away, though magpie sends it as the ZCode app does; it can be a network block of this IP, or ZCode checking for something new. Use an account with a GLM Coding Plan, or add another provider to this group"
+const EDGE_BLOCKED = /request has been blocked|errors\.aliyun\.com/i
+const START_REFUSED = /unusual activity|"code"\s*:\s*"?3012\b/i
+
+// startRefused says a Start Plan answer is that refusal, as the built-in's
+// zcodeStartExplain read it: a 405, a block page or code 3012.
+const startRefused = (status, text) => status >= 400 && (status === 405 || EDGE_BLOCKED.test(text) || START_REFUSED.test(text))
+
+// startBlocked is the refusal's answer as the built-in passed it on: what
+// the vendor said (its status for a block page), then START_BLOCKED.
+function startBlocked(res, text) {
+  let said = ""
+  if (!EDGE_BLOCKED.test(text)) {
+    try {
+      const v = JSON.parse(text)
+      said = first(v?.error?.message, typeof v?.error === "string" ? v.error : "", v?.message, v?.msg)
+    } catch {}
+  }
+  said ||= `${res.status} ${STATUS_TEXT[res.status] ?? res.statusText}`.trim()
+  const h = new Headers(res.headers)
+  h.set("content-type", "application/json")
+  const error = { type: "permission_error", message: `${said} — ${START_BLOCKED}` }
+  return new Response(JSON.stringify({ type: "error", error }), { status: res.status, statusText: res.statusText, headers: h })
+}
+
 const osVersion = () => `${process.platform} ${release()} ${arch()}`
 const osCategory = () => (process.platform === "darwin" ? "macos" : process.platform === "win32" ? "windows" : "linux")
 
@@ -1570,6 +1652,13 @@ export async function ZCodeAuthPlugin({ client }) {
               h.set("Authorization", "Bearer " + key)
             }
             let res = await fetch(url, { ...opts, headers: h })
+            // the Start Plan turning the request away says what to do about
+            // it, as the built-in's zcodeStartExplain did
+            if (start && res.status >= 400) {
+              const text = await res.text()
+              if (startRefused(res.status, text)) return kept(startBlocked(res, text))
+              res = new Response(text, { status: res.status, statusText: res.statusText, headers: res.headers })
+            }
             // a trial entry's gift answer that can't serve the request is
             // the agent's answer, not the coding plan's: the user picked the
             // gift, so a spent bucket says 429 (its quota error inside a 200

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@magpie-community/opencode-zcode-auth",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "description": "OpenCode provider plugin: signs in to Z.ai's or BigModel's (智谱) GLM Coding Plan as ZCode does, including team seats and ZCode's Start Plan",
   "type": "module",
   "main": "./index.mjs",