dsh-opendesign-corouter 0.1.5 → 0.1.6

package/README.md

@@ -32,7 +32,7 @@ dsh plugin --profile web add dsh-opendesign-corouter
 也可打开 [Actions → CI](https://github.com/KouzakiUmi/dsh-opendesign-corouter/actions/workflows/ci.yml)，从成功构建下载 **`dsh-opendesign-corouter-build`** artifact。登录 GitHub 后解压 ZIP，取得 `.tgz` 与 `.sha256`，再安装本地包：
 
 ```console
-dsh plugin --profile web add /absolute/path/to/dsh-opendesign-corouter-0.1.5.tgz
+dsh plugin --profile web add /absolute/path/to/dsh-opendesign-corouter-0.1.6.tgz
 ```
 
 `web` 只是示例，请替换为目标 Profile。Desktop 使用桌面安装器提供的 `dsh` 入口；独立公共 CLI 不能代管保留的 `desktop` Profile。安装后的启用与重载按目标 DSH 的管理流程进行。
@@ -40,7 +40,7 @@ dsh plugin --profile web add /absolute/path/to/dsh-opendesign-corouter-0.1.5.tgz
 ### 2. 配置连接
 
 1. 打开 **设置 → OpenDesign CoRouter → 连接与登录**。
-2. 点击 **开始设备授权**，再用 **在新窗口打开授权页** 显示官方页面，核对授权码并确认；也可复制链接到你自己的常用浏览器，或单独配置工作空间 API Key / 沿用 `COROUTER_API_KEY`。
+2. 点击 **开始设备授权**，取得授权码后自动打开临时 Chrome 官方授权页，核对并确认；打开失败可用 **在新窗口打开授权页** 重试，也可复制链接到常用浏览器，或单独配置工作空间 API Key / 沿用 `COROUTER_API_KEY`。
 3. 返回设置页等待保存成功。额度默认优先读取桌面登录态；要明确使用设备授权的账号，可关闭桌面优先。
 4. 回到模型选择器，选择 **OpenDesign CoRouter · 套餐赠送** 或 **OpenDesign CoRouter · 付费模型**。
 
@@ -52,8 +52,8 @@ dsh plugin --profile web add /absolute/path/to/dsh-opendesign-corouter-0.1.5.tgz
 
 | Provider | 模型数 | 用途 |
 | --- | ---: | --- |
-| `opendesign-corouter-plan` | 12 | 官网 Design Plan 套餐赠送模型 |
-| `opendesign-corouter-paid` | 21 | 其余公开对话模型 |
+| `opendesign-corouter-plan` | 13 | Core / Design Plan 附赠通道，含预检确认覆盖的 MiniMax M3.1 Flash |
+| `opendesign-corouter-paid` | 25 | Plan 套餐模型及其他钱包付费模型 |
 
 上表为内置目录。模型页可从 OpenAI `/models` 端口刷新，逐个启用或停用模型，并配置温度、top-p、默认输出上限、上下文预算及思考深度。停用同时影响模型选择器和直接调用；参数会保存并应用到实际请求。媒体生成接口不在对话目录中，未知能力不按名称猜测。
 

package/lib/catalog.d.ts

@@ -16,16 +16,17 @@
  * 分组语义（重要）：`plan`/`paid` 是**本插件本地目录分类**，用于把“套餐赠送通道”与
  * “其余付费通道”拆成两个 Provider，不是上游强制计费契约。最终可用性、扣哪个额度池、
  * 是否先扣 Design Plan 额度再用套餐模型/钱包额度，全部由服务端按账号套餐决定。
- * `paid` 21 款里只有 8 款出现在官网套餐可抵扣名单，其余 13 款同样可经钱包/按量付费调用，
- * 因此 `paid` 收录 21 款而不是 13 款。
+ * 2026-10-27 官方 GET /v1/models 实测补齐五个 ID，现为 plan 13 + paid 25。
+ * 同日桌面 Vela 按模型 billing preflight：M3.1 Flash 的 modelCovered=true /
+ * funding=coding_plan，新增于附赠通道；其余四项为 false / wallet，归付费通道。
+ * 此分类以当次工作区证据为依据，不保证其他账号或未来套餐权益。
+ * 新增项证据及名称来源见 docs/client-evidence.md；不从型号名推断能力。
  *
- * 未收录（证据不足，不猜测）：
- * - 套餐模型组中尚未公开精确 ID 的 `Muse Spark 1.3`、`Gemini 4 Argon`：
- *   前者详情页没有 `data-model`/模型 ID，后者在模型目录里没有详情页。
+ * 未收录：
  * - 媒体模型 `GPT Image 2`、`Nano Banana 2`、`Seedream 5 Lite / Pro`：
  *   走 `/api/v1/media/*`，不应出现在对话模型列表里，避免选中后 chat 请求必败。
  *
- * `paid` 21 款的能力字段一律缺省：既没有官网数值，也没有可信默认表，
+ * `paid` 25 款及新增 M3.1 Flash 的能力字段一律缺省：没有可核实的能力数值，
  * 不按名称推断图像能力，也不给未知项填 `['text']` 谎称不支持图像。
  */
 export interface CatalogModel {
@@ -38,8 +39,8 @@ export interface CatalogModel {
     reasoningEfforts?: readonly string[];
 }
 /**
- * 顺序按供应商分组（与官网模型目录导航一致）；`plan` 为 Design Plan 额度覆盖的 12 款，
- * 其余 21 款公开对话模型归 `paid`。
+ * `plan` 为官网 12 款 Core / Design Plan 模型，加预检确认覆盖的 M3.1 Flash；
+ * 其余 25 项归 `paid`（Plan / 钱包付费通道）。
  */
 export declare const MODELS: readonly CatalogModel[];
 export declare function modelsFor(group: 'plan' | 'paid'): readonly CatalogModel[];

package/lib/client.js

@@ -19927,22 +19927,29 @@ function record2(value) {
 }
 
 // src/device-auth.ts
-function validateActivationUrl(value, userCode) {
+function validateActivationUrl(value, userCode, deviceId) {
   if (typeof value !== "string" || value.length > 512 || !/^https:\/\/open-design\.ai\/cloud\/cli\/activate(?:\?[^#]*)?$/u.test(value) || /[\s\\]/u.test(value)) return null;
   try {
     const url2 = new URL(value);
     if (url2.origin !== "https://open-design.ai" || url2.pathname !== "/cloud/cli/activate" || url2.username || url2.password || url2.hash) return null;
     const entries = [...url2.searchParams];
-    if (entries.length > 1) return null;
-    if (entries.length) {
+    if (entries.length === 2) {
+      if (entries.some(([key]) => key !== "deviceId" && key !== "userCode")) return null;
+      const id = url2.searchParams.get("deviceId");
+      const code = url2.searchParams.get("userCode");
+      if (!validDeviceId(id) || !validUserCode(code) || deviceId !== void 0 && id !== deviceId || userCode !== void 0 && code !== userCode) return null;
+    } else if (entries.length === 1) {
       const entry = entries[0];
       if (!["code", "user_code"].includes(entry[0]) || !validUserCode(entry[1]) || userCode !== void 0 && entry[1] !== userCode) return null;
-    }
+    } else if (entries.length > 2) return null;
     return url2.href;
   } catch {
     return null;
   }
 }
+function validDeviceId(value) {
+  return typeof value === "string" && /^[a-z0-9_-]{1,200}$/iu.test(value);
+}
 function validUserCode(value) {
   return typeof value === "string" && /^[a-z0-9][a-z0-9-]{3,31}$/iu.test(value);
 }
@@ -21154,6 +21161,7 @@ function Connection({ status, formSnapshot, setFormField, pendingField, caller,
   const [activationNotice, setActivationNotice] = React.useState(null);
   const activationJob = React.useRef(null);
   const activationToken = React.useRef(0);
+  const autoOpenPending = React.useRef(false);
   React.useEffect(() => () => {
     actionVersion.current += 1;
   }, []);
@@ -21172,6 +21180,7 @@ function Connection({ status, formSnapshot, setFormField, pendingField, caller,
     if (status === void 0 || busy || keyBusy) return;
     const version2 = ++actionVersion.current;
     setBusy(true);
+    autoOpenPending.current = true;
     setNotice({ kind: "status", text: "\u6B63\u5728\u7533\u8BF7\u8BBE\u5907\u6388\u6743\u2026" });
     try {
       const next = await caller("startLogin", { expectedRevision: status.revision });
@@ -21180,6 +21189,7 @@ function Connection({ status, formSnapshot, setFormField, pendingField, caller,
       setActivationNotice(null);
       await (next.state === "success" ? refreshAfterLogin() : loadStatus());
     } catch {
+      autoOpenPending.current = false;
       if (mounted.current && version2 === actionVersion.current) setNotice({ kind: "error", text: "\u65E0\u6CD5\u542F\u52A8\u767B\u5F55\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002" });
     } finally {
       if (mounted.current && version2 === actionVersion.current) setBusy(false);
@@ -21240,6 +21250,15 @@ function Connection({ status, formSnapshot, setFormField, pendingField, caller,
       if (mounted.current && activationToken.current === token) setOpening(false);
     }
   };
+  React.useEffect(() => {
+    if (!autoOpenPending.current || busy || keyBusy) return;
+    if (state === "waiting") {
+      autoOpenPending.current = false;
+      void openActivation();
+    } else if (state === "error" || state === "cancelled" || state === "success") {
+      autoOpenPending.current = false;
+    }
+  }, [state, login?.jobId, busy, keyBusy]);
   const desktopChecked = formSnapshot.value?.useDesktopCredential ?? status?.config.useDesktopCredential ?? true;
   return h(
     React.Fragment,

package/lib/device-auth.d.ts

@@ -3,7 +3,7 @@ export interface DeviceTokens {
     runtimeKey: string;
 }
 export declare const DEVICE_AUTH_ENDPOINT = "https://amr-api.open-design.ai/api/v1/cli/device-authorizations";
-export declare const DEVICE_AUTH_PLUGIN_VERSION = "0.1.5";
+export declare const DEVICE_AUTH_PLUGIN_VERSION = "0.1.6";
 export declare const DEVICE_REQUEST_TIMEOUT_MS = 20000;
 /** One bounded launch step of the temporary activation window. */
 export declare const DEVICE_OPEN_TIMEOUT_MS = 30000;
@@ -14,8 +14,8 @@ export declare class DeviceAuthError extends Error {
     readonly code: string;
     constructor(code: string);
 }
-/** Strict public-link allowlist: only an optional, single, non-secret code is allowed. */
-export declare function validateActivationUrl(value: unknown, userCode?: string): string | null;
+/** Strict public-link allowlist: a legacy code or the public deviceId/userCode pair. */
+export declare function validateActivationUrl(value: unknown, userCode?: string, deviceId?: string): string | null;
 export interface DeviceAuthorization {
     deviceId: string;
     deviceSecret: string;

package/lib/generated/typert.host.js

@@ -8,22 +8,29 @@ function record(value) {
 }
 
 // src/device-auth.ts
-function validateActivationUrl(value, userCode) {
+function validateActivationUrl(value, userCode, deviceId) {
   if (typeof value !== "string" || value.length > 512 || !/^https:\/\/open-design\.ai\/cloud\/cli\/activate(?:\?[^#]*)?$/u.test(value) || /[\s\\]/u.test(value)) return null;
   try {
     const url = new URL(value);
     if (url.origin !== "https://open-design.ai" || url.pathname !== "/cloud/cli/activate" || url.username || url.password || url.hash) return null;
     const entries = [...url.searchParams];
-    if (entries.length > 1) return null;
-    if (entries.length) {
+    if (entries.length === 2) {
+      if (entries.some(([key]) => key !== "deviceId" && key !== "userCode")) return null;
+      const id = url.searchParams.get("deviceId");
+      const code = url.searchParams.get("userCode");
+      if (!validDeviceId(id) || !validUserCode(code) || deviceId !== void 0 && id !== deviceId || userCode !== void 0 && code !== userCode) return null;
+    } else if (entries.length === 1) {
       const entry = entries[0];
       if (!["code", "user_code"].includes(entry[0]) || !validUserCode(entry[1]) || userCode !== void 0 && entry[1] !== userCode) return null;
-    }
+    } else if (entries.length > 2) return null;
     return url.href;
   } catch {
     return null;
   }
 }
+function validDeviceId(value) {
+  return typeof value === "string" && /^[a-z0-9_-]{1,200}$/iu.test(value);
+}
 function validUserCode(value) {
   return typeof value === "string" && /^[a-z0-9][a-z0-9-]{3,31}$/iu.test(value);
 }

package/lib/generated/typert.remote-client.js

@@ -8,22 +8,29 @@ function record(value) {
 }
 
 // src/device-auth.ts
-function validateActivationUrl(value, userCode) {
+function validateActivationUrl(value, userCode, deviceId) {
   if (typeof value !== "string" || value.length > 512 || !/^https:\/\/open-design\.ai\/cloud\/cli\/activate(?:\?[^#]*)?$/u.test(value) || /[\s\\]/u.test(value)) return null;
   try {
     const url = new URL(value);
     if (url.origin !== "https://open-design.ai" || url.pathname !== "/cloud/cli/activate" || url.username || url.password || url.hash) return null;
     const entries = [...url.searchParams];
-    if (entries.length > 1) return null;
-    if (entries.length) {
+    if (entries.length === 2) {
+      if (entries.some(([key]) => key !== "deviceId" && key !== "userCode")) return null;
+      const id = url.searchParams.get("deviceId");
+      const code = url.searchParams.get("userCode");
+      if (!validDeviceId(id) || !validUserCode(code) || deviceId !== void 0 && id !== deviceId || userCode !== void 0 && code !== userCode) return null;
+    } else if (entries.length === 1) {
       const entry = entries[0];
       if (!["code", "user_code"].includes(entry[0]) || !validUserCode(entry[1]) || userCode !== void 0 && entry[1] !== userCode) return null;
-    }
+    } else if (entries.length > 2) return null;
     return url.href;
   } catch {
     return null;
   }
 }
+function validDeviceId(value) {
+  return typeof value === "string" && /^[a-z0-9_-]{1,200}$/iu.test(value);
+}
 function validUserCode(value) {
   return typeof value === "string" && /^[a-z0-9][a-z0-9-]{3,31}$/iu.test(value);
 }

package/lib/index.js

@@ -159,7 +159,7 @@ var MODELS = [
     reasoningEfforts: EFFORTS_LOW_HIGH
   },
   { id: "glm-5.2", name: "GLM-5.2", group: "paid" },
-  // ── Moonshot（2） ───────────────────────────────────────────
+  // ── Moonshot（3） ───────────────────────────────────────────
   {
     id: "kimi-k2.7-code",
     name: "Kimi K2.7 Code",
@@ -170,7 +170,9 @@ var MODELS = [
     reasoningEfforts: EFFORTS_STD
   },
   { id: "kimi-k3", name: "Kimi K3", group: "paid" },
-  // ── Google（2） ─────────────────────────────────────────────
+  { id: "kimi-k3.1-pro", name: "Kimi K3.1 Pro", group: "paid" },
+  // ── Google（3） ─────────────────────────────────────────────
+  { id: "gemini-4-argon", name: "Gemini 4 Argon", group: "paid" },
   { id: "gemini-3.8-flash", name: "Gemini 3.8 Flash", group: "paid" },
   { id: "gemini-3.7-flash", name: "Gemini 3.7 Flash", group: "paid" },
   // ── xAI（3） ────────────────────────────────────────────────
@@ -207,7 +209,11 @@ var MODELS = [
     reasoningEfforts: EFFORTS_STD
   },
   // ── Alibaba（1） ────────────────────────────────────────────
-  { id: "qwen3.7-max", name: "Qwen3.7 Max", group: "paid" }
+  { id: "qwen3.7-max", name: "Qwen3.7 Max", group: "paid" },
+  // Official API additions; display labels for undocumented entries are local formatting.
+  { id: "minimax-m3.1-flash", name: "MiniMax M3.1 Flash", group: "plan" },
+  { id: "muse-spark-1.3", name: "Muse Spark 1.3", group: "paid" },
+  { id: "muse-wonder", name: "Muse Wonder", group: "paid" }
 ];
 var BY_ID = new Map(MODELS.map((model) => [model.id, model]));
 function findModel(id) {
@@ -2194,7 +2200,7 @@ import { randomUUID } from "node:crypto";
 
 // src/device-auth.ts
 var DEVICE_AUTH_ENDPOINT = "https://amr-api.open-design.ai/api/v1/cli/device-authorizations";
-var DEVICE_AUTH_PLUGIN_VERSION = "0.1.5";
+var DEVICE_AUTH_PLUGIN_VERSION = "0.1.6";
 var DEVICE_REQUEST_TIMEOUT_MS = 2e4;
 var DEVICE_RESPONSE_MAX_BYTES = 65536;
 var DEVICE_POLL_MIN_MS = 1e3;
@@ -2206,17 +2212,21 @@ var DeviceAuthError = class extends Error {
   }
   code;
 };
-function validateActivationUrl(value, userCode) {
+function validateActivationUrl(value, userCode, deviceId) {
   if (typeof value !== "string" || value.length > 512 || !/^https:\/\/open-design\.ai\/cloud\/cli\/activate(?:\?[^#]*)?$/u.test(value) || /[\s\\]/u.test(value)) return null;
   try {
     const url = new URL(value);
     if (url.origin !== "https://open-design.ai" || url.pathname !== "/cloud/cli/activate" || url.username || url.password || url.hash) return null;
     const entries = [...url.searchParams];
-    if (entries.length > 1) return null;
-    if (entries.length) {
+    if (entries.length === 2) {
+      if (entries.some(([key]) => key !== "deviceId" && key !== "userCode")) return null;
+      const id = url.searchParams.get("deviceId");
+      const code = url.searchParams.get("userCode");
+      if (!validDeviceId(id) || !validUserCode(code) || deviceId !== void 0 && id !== deviceId || userCode !== void 0 && code !== userCode) return null;
+    } else if (entries.length === 1) {
       const entry = entries[0];
       if (!["code", "user_code"].includes(entry[0]) || !validUserCode(entry[1]) || userCode !== void 0 && entry[1] !== userCode) return null;
-    }
+    } else if (entries.length > 2) return null;
     return url.href;
   } catch {
     return null;
@@ -2225,6 +2235,9 @@ function validateActivationUrl(value, userCode) {
 function object(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
+function validDeviceId(value) {
+  return typeof value === "string" && /^[a-z0-9_-]{1,200}$/iu.test(value);
+}
 function validUserCode(value) {
   return typeof value === "string" && /^[a-z0-9][a-z0-9-]{3,31}$/iu.test(value);
 }
@@ -2232,8 +2245,8 @@ function secret(value) {
   return typeof value === "string" && value.length > 0 && value.length <= 8192 && /^[\x21-\x7e]+$/u.test(value);
 }
 function parseDeviceAuthorization(value) {
-  if (!object(value) || typeof value.deviceId !== "string" || !/^[a-z0-9_-]{1,200}$/iu.test(value.deviceId) || !secret(value.deviceSecret) || !validUserCode(value.userCode)) throw new DeviceAuthError("opendesign/login-response");
-  const activationUrl = validateActivationUrl(value.activationUrl, value.userCode);
+  if (!object(value) || !validDeviceId(value.deviceId) || !secret(value.deviceSecret) || !validUserCode(value.userCode)) throw new DeviceAuthError("opendesign/login-response");
+  const activationUrl = validateActivationUrl(value.activationUrl, value.userCode, value.deviceId);
   if (!activationUrl || value.userCode.toLowerCase().includes(value.deviceSecret.toLowerCase()) || decodeURIComponent(activationUrl).toLowerCase().includes(value.deviceSecret.toLowerCase())) throw new DeviceAuthError("opendesign/login-response");
   const expiresAt = typeof value.expiresAt === "string" && /^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d(?:\.\d{1,3})?(?:Z|[+-]\d\d:\d\d)$/u.test(value.expiresAt) ? Date.parse(value.expiresAt) : NaN;
   if (!Number.isFinite(expiresAt) || typeof value.pollIntervalSeconds !== "number" || !Number.isFinite(value.pollIntervalSeconds) || value.pollIntervalSeconds <= 0) throw new DeviceAuthError("opendesign/login-response");
@@ -2252,6 +2265,7 @@ function parseDevicePoll(value) {
   if (["expired", "cancelled", "canceled", "denied", "rejected", "failed", "error"].includes(state)) throw new DeviceAuthError(state === "expired" ? "opendesign/login-expired" : "opendesign/login-denied");
   if (value.error !== void 0 && value.error !== null && value.error !== "") throw new DeviceAuthError("opendesign/login-response");
   const user = object(value.user) ? value.user : {};
+  if ((state === "pending" || state === "authorization_pending") && [value.controlKey, value.runtimeKey, user.controlKey, user.runtimeKey].every((key) => key === void 0 || key === null)) return { state: "pending" };
   const topPresent = value.controlKey !== void 0 || value.runtimeKey !== void 0;
   const source = topPresent ? value : user;
   if (source.controlKey !== void 0 || source.runtimeKey !== void 0) {