cartethyia 2.8.0 → 2.8.1

package/src/providers/integrations/qoder/qoder-cosy.ts

@@ -7,14 +7,22 @@
  * Header values mirror live captures of the real client (v1.1.83,
  * 2026-11-05): `User-Agent: Bun/1.4.2`, machine identity headers from the
  * UMID (`cosy-machineid/token/type/code/os/hostname`), business headers,
- * and the static `signature` md5 chain.
+ * and the static `signature` md5 chain. The business/scene/clienttype values
+ * were updated to the desktop-worker capture (2026-11-11, v0.5.7 /
+ * 1.1.79-hotfix.19): `cosy-clienttype: 10`, `cosy-business-product: app`,
+ * `cosy-scene: app`, plus `traceparent`, `sec-fetch-mode: cors`, and
+ * `accept-language: *`. The `profile` switch selects the identity: `app`
+ * (default, desktop worker) or `cli` (qodercli).
  */
-import { constants, createCipheriv, createHash, publicEncrypt, randomUUID } from "node:crypto";
+import { constants, createCipheriv, createHash, publicEncrypt, randomBytes, randomUUID } from "node:crypto";
 import { getQoderVersion } from "../../operations/client-versions";
 import { qoderMachineHostname, qoderMachineOs } from "../../operations/cli-platform";
-import { QODER_UA_CLI } from "./qoder-realm";
+import { QODER_UA_APP, QODER_UA_CLI } from "./qoder-realm";
 import type { QoderAuth } from "./qoder-types";
 
+/** Which Qoder client identity a COSY request presents. */
+export type QoderCosyProfile = "app" | "cli";
+
 const QODER_APPCODE = "cosy";
 const QODER_SIG_SECRET = "d2FyLCB3YXIgbmV2ZXIgY2hhbmdlcw==";
 const QODER_STANDARD_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
@@ -83,6 +91,7 @@ export function qoderBuildCosyHeaders(
   url: string,
   auth: QoderAuth,
   version = getQoderVersion(),
+  profile: QoderCosyProfile = "app",
 ): Record<string, string> {
   const key = randomUUID().replaceAll("-", "").slice(0, 16);
   const identity = qoderJsonSortedCompact({
@@ -104,12 +113,17 @@ export function qoderBuildCosyHeaders(
   ).toString("base64");
   const date = String(Math.floor(Date.now() / 1000));
   const signature = qoderMd5(`${payload}\n${cosyKey}\n${date}\n${Buffer.from(body).toString("latin1")}\n${qoderPathSignature(url)}`);
+  const traceId = randomBytes(16).toString("hex");
+  const spanId = randomBytes(8).toString("hex");
+  const app = profile === "app";
   return {
     authorization: `Bearer COSY.${payload}.${signature}`,
     "cosy-data-policy": "agree",
     "cosy-machinetype": auth.machineType ?? "5",
     "cosy-machineos": qoderMachineOs(),
-    "cosy-clienttype": "5",
+    // Desktop-worker capture (2026-11-11): `cosy-clienttype: 10` identifies
+    // the app/worker client; the CLI used `5`.
+    "cosy-clienttype": app ? "10" : "5",
     "cosy-date": date,
     "cosy-user": auth.userId,
     "cosy-key": cosyKey,
@@ -123,19 +137,32 @@ export function qoderBuildCosyHeaders(
     "cosy-organization-id": "",
     "cosy-organization-tags": "",
     "x-request-id": randomUUID(),
-    "cosy-business-product": "cli",
+    ...(auth.httpDnsIp !== undefined && auth.httpDnsIp.length > 0
+      ? { "X-Qoder-HTTPDNS-IP": auth.httpDnsIp }
+      : {}),
+    // Desktop-worker capture (2026-11-11): `cosy-business-product: app` and
+    // `cosy-scene: app` mirror the app/worker surface; the CLI used
+    // `cli`/`assistant`.
+    "cosy-business-product": app ? "app" : "cli",
     "cosy-business-type": "agent",
     "cosy-business-version": version,
-    "cosy-scene": "assistant",
+    "cosy-scene": app ? "app" : "assistant",
     "cosy-version": version,
     "login-version": "v2",
     appcode: QODER_APPCODE,
     accept: "application/json",
-    "accept-encoding": "identity",
+    // Desktop-worker capture (2026-11-11): `br, gzip, deflate`. The CLI
+    // sends `identity`.
+    "accept-encoding": app ? "br, gzip, deflate" : "identity",
+    "accept-language": app ? "*" : "",
+    "sec-fetch-mode": app ? "cors" : "",
+    // W3C trace context, as the worker's undici fetch emits it (capture
+    // 2026-11-11): `00-<traceid>-<spanid>-01`.
+    ...(app ? { traceparent: `00-${traceId}-${spanId}-01` } : {}),
     date: new Date().toUTCString(),
     signature: qoderMd5(`${QODER_APPCODE}&${QODER_SIG_SECRET}&${new Date().toUTCString()}`),
     "content-type": "application/json",
-    "user-agent": QODER_UA_CLI,
+    "user-agent": app ? QODER_UA_APP : QODER_UA_CLI,
   };
 }
 
@@ -150,9 +177,10 @@ export function qoderBuildCosyHeaders(
 export function qoderSignerFor(
   auth: QoderAuth,
   version = getQoderVersion(),
+  profile: QoderCosyProfile = "app",
 ): (url: string, body: string) => Record<string, string> {
   return (url: string, body: string): Record<string, string> =>
-    qoderBuildCosyHeaders(Buffer.from(body, "latin1"), url, auth, version);
+    qoderBuildCosyHeaders(Buffer.from(body, "latin1"), url, auth, version, profile);
 }
 
 /** Qoder's own base64 alphabet transform, for a request body. */

package/src/providers/integrations/qoder/qoder-oauth.ts

@@ -146,6 +146,12 @@ const EXPIRY_FALLBACK_MS = 30 * 24 * 60 * 60 * 1000;
 export interface QoderOAuthState {
   readonly userId: string;
   readonly machineId: string;
+  /**
+   * Resolved egress IP for the HTTPDNS-managed route, when the login stored
+   * it. Mirrors the worker's `networkMode=httpdns` state; the request then
+   * carries `X-Qoder-HTTPDNS-IP`.
+   */
+  readonly httpDnsIp?: string;
 }
 
 /** Reads the persisted Qoder identity; `undefined` when the account predates it. */
@@ -166,7 +172,8 @@ export function parseQoderOAuthState(value: unknown): QoderOAuthState | undefine
   const userId = nonEmptyTrimmedString(root.userId);
   const machineId = nonEmptyTrimmedString(root.machineId);
   if (userId === undefined || machineId === undefined) return undefined;
-  return { userId, machineId };
+  const httpDnsIp = nonEmptyTrimmedString(root.httpDnsIp);
+  return httpDnsIp === undefined ? { userId, machineId } : { userId, machineId, httpDnsIp };
 }
 
 
@@ -382,7 +389,7 @@ export class QoderOAuthClient extends OAuthDeviceFlow {
       `&verifier=${encodeURIComponent(state.verifier)}&challenge_method=S256`;
     let response: Response;
     try {
-      response = await this.fetchFn(url, {
+      response = await this.fetchFor(context)(url, {
         method: "GET",
         headers: { accept: "application/json", "user-agent": QODER_UA_CLI },
         signal: AbortSignal.timeout(POLL_TIMEOUT_MS),

package/src/providers/integrations/qoder/qoder-realm.ts

@@ -53,48 +53,23 @@ export interface QoderRealmConfig {
  * - CLI / legacy COSY chat + device flow: `Bun/1.4.2` (flow 218/030, v1.1.83)
  * - IDE surface `/model/v1`: `Bun/1.4.4` (flow 219)
  * - job-token exchange: `qoder/<version>` (capture, e.g. `qoder/1.1.83`)
+ *
+ * The desktop app (0.5.7) hosts an Electron Node worker
+ * (`qoder-worker-runtime.obf.mjs --sdk`) whose fetch stack is undici; its
+ * chat/worker requests carry `User-Agent: undici` (capture 2026-11-11).
+ * The gateway mirrors the app wire on the COSY chat surface, so chat uses
+ * `QODER_UA_APP`; the CLI/device-flow surfaces keep `QODER_UA_CLI`.
  */
 export const QODER_UA_CLI = "Bun/1.4.2";
 export const QODER_UA_IDE = "Bun/1.4.4";
+export const QODER_UA_APP = "undici";
 
 /** Chat + model-list paths, identical across realms. */
 export const QODER_CHAT_PATH =
   "/algo/api/v2/service/pro/sse/agent_chat_generation?FetchKeys=llm_model_result&AgentId=agent_common&Encode=1";
 export const QODER_MODELS_PATH = "/algo/api/v2/model/list?Encode=1";
 
-/**
- * The modern model-server surface used by the IDE / QoderWake (OpenAI-shaped
- * chunks, plain bearer auth). This surface streams immediately and echoes the
- * real model key — the legacy `/algo` chat endpoint answers
- * `10605 isQueued` (parking requests in a server-side queue) and echoes a
- * fixed `"auto"` model. Dispatch tries this surface first, and falls back to
- * legacy COSY only when it refuses the account on entitlement grounds (HTTP
- * 402 / `{"code":116}`) AND the dispatched model is a free-tier row — for a
- * billed model the same code is genuine quota exhaustion and must surface.
- */
-export const QODER_IDE_CHAT_PATH = "/model/v1/chat/completions";
-
 /** The model-server host for one realm (intl: `api1`, cn: gateway). */
-export function qoderIdeChatUrl(realm: QoderRealm): string {
-  return realm === "cn"
-    ? `https://gateway.qoder.com.cn${QODER_IDE_CHAT_PATH}`
-    : `https://api1.qoder.sh${QODER_IDE_CHAT_PATH}`;
-}
-
-/**
- * The gRPC model-server host for one realm.
- *
- * Intl default is `api1.qoder.sh` (first host from `qoderInferenceCandidates`;
- * the old `api2-v2.qoder.sh` has been NXDOMAIN since 2026-11-07 — see
- * `documentation/research/qoder/live/
- * 2026-11-07-qoder-host-inference-fallback.md`). The gRPC service is no
- * longer verified alive on any host that resolves (UNIMPLEMENTED); this host
- * is kept as the target so probes/gRPC still have an address.
- */
-export function qoderGrpcHost(realm: QoderRealm): string {
-  return realm === "cn" ? "gateway.qoder.com.cn" : "api1.qoder.sh";
-}
-
 /**
  * Realm → deployment.
  *
@@ -142,8 +117,9 @@ export function qoderGatewayCandidates(realm: QoderRealm): readonly string[] {
  * Inference hosts for one realm, ordered by token kind — mirrors the donor's
  * `qoderInferenceBase` (donor hub): job tokens (`jt-...`) are served by `api2`
  * and get rejected by `api3` with "Login expired" (403), while device tokens
- * (`dt-...`) and everything else use the ordinary gateway set. CN has a
- * single gateway and serves every token kind.
+ * (`dt-...`) and everything else use the ordinary gateway set. The job-token
+ * set therefore excludes `api3` entirely; CN has a single gateway and serves
+ * every token kind.
  */
 export function qoderInferenceCandidates(
   realm: QoderRealm,
@@ -152,8 +128,9 @@ export function qoderInferenceCandidates(
   const config = QODER_REALMS[realm];
   if (realm === "cn") return [config.gateway];
   if (token !== undefined && token.startsWith("jt-")) {
-    const fallbacks = config.gatewayFallbacks.filter((h) => h !== "https://api2.qoder.sh");
-    return ["https://api2.qoder.sh", config.gateway, ...fallbacks];
+    // api3 rejects job tokens (Login expired, 403); only api2 and api1 can
+    // serve them.
+    return ["https://api2.qoder.sh", config.gateway];
   }
   return [config.gateway, ...config.gatewayFallbacks];
 }