dsh-qoder-connect 0.1.0 → 0.1.2

package/README.en.md

@@ -1,147 +1,147 @@
-# DSH Qoder Connect
-
-**English** | [简体中文](./README.md)
-
-A [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (DSH) plugin that brings your **Qoder subscription** models into DSH through a Personal Access Token (PAT). One plugin serves both Qoder product lines — each with its own settings card, provider id, credential file and saved catalog, never mixed:
-
-| Variant | Provider id | Card title | Where the PAT is minted |
-|---|---|---|---|
-| China (国内版) | `qoder` | Qoder | qoder.com.cn |
-| International (国际版) | `qoder-global` | Qoder Global | qoder.com |
-
-Configure only what you use: a variant with no saved PAT shows no model group and never interferes with the other one. Streaming, reasoning content and tool calls ride the plugin's built-in Qoder transport; the conversation loop, compaction and permissions stay Harness-owned.
-
-## Features
-
-- **PAT: save it and it works** — paste a PAT into the card and press *Save*; the token is validated live against that variant's region before anything is written, and the model group appears immediately — no DSH restart. Once signed in, *Replace PAT* (the new token overwrites only after it validates, so a mistyped paste can never strand a working credential) and *Clear PAT* are one click away.
-- **Two independent variants** — `qoder` (china) and `qoder-global` (global) keep separate credential files, routes and saved catalogs: a token minted on qoder.com does not work against the China deployment and vice versa.
-- **Three-tier model catalog (live → saved → fallback)** — the card states where the list on screen came from: *“Model list updated …”* (fetched now), *“Showing the saved model list from …”* (this account's last successful fetch, restored after a restart or a failed fetch), or *“Showing the built-in model list (not yet updated from Qoder)”* (the roster compiled into the plugin). The reason of the most recent failed fetch is shown too, and a *Refresh model list* button sits right there.
-- **One-toggle context window** — each variant card's *Context window* tab lists every model's capacity (the default and the largest declared window) and carries its own *“Use the largest declared context window”* preference (on by default): on, requests declare the maximum (e.g. Qwen3.8-Max at 1M); off, the default (200K). The two variants keep independent toggle state.
-- **Sidebar quota card + credit details** — the *“Qoder sidebar display”* card toggles a per-variant sidebar quota widget (off by default; each toggle needs its variant's PAT saved) with one shared refresh interval (default 5 min, minimum 1 min). Clicking the sidebar widget opens the *Qoder quota* panel: one row per credit package — *“Remaining / Total + bar | Expires”* — plus the cycle share and reset time. Click the same widget again to close; click the other to switch variants.
-- **Rate display `x<priceFactor>`** — each model name is suffixed with the upstream-reported price multiplier (e.g. `Some Model · x0.79`, free is `x0`), spelled `x<n>` from the catalog's `price_factor`. Display only — it never changes the request; models whose rate the upstream did not report simply show no suffix.
-
-## Screenshots
-
-### Sidebar quota widgets & credit details
-
-Once enabled on the *“Qoder sidebar display”* card, a per-variant quota widget sits at the sidebar's foot; clicking it opens the *Qoder quota* panel with one row per credit package, switchable between the two variants at any time.
-
-**China (after clicking the sidebar widget):**
-
-![China sidebar quota details](assets/1.png)
-
-**International (after clicking the sidebar widget):**
-
-![International sidebar quota details](assets/2.png)
-
-### Sidebar toggles
-
-The *“Qoder sidebar display”* card controls both widgets' visibility and the shared refresh interval:
-
-![Sidebar display toggles](assets/3.png)
-
-### Picking a model in a session
-
-Once a PAT is saved, the model picker gains a Qoder group with per-model rate multipliers (`x0.5`, `x0`, …):
-
-![Model picker in a session](assets/4.png)
-
-### Context-window settings
-
-Each variant card's *Context window* tab lists capacities per model under the *“Use the largest declared context window”* preference:
-
-**China:**
-
-![China context-window settings](assets/5.png)
-
-**International:**
-
-![International context-window settings](assets/6.png)
-
-## Install
-
-Prerequisites:
-
-- DSH core `0.1.5-rc.1` or newer (this plugin peers on the `@deepseek-ai/*` `^0.1.5-rc.1` line);
-- Node.js `^22.19.0 || >=24.0.0` (per `package.json` engines);
-- your own Qoder account and at least one Personal Access Token.
-
-```sh
-# From GitHub (recommended)
-dsh plugin --profile web add github:masknull/dsh-qoder-connect
-# Or from npm, once published
-dsh plugin --profile web add dsh-qoder-connect
-```
-
-Swap the `--profile` value for the profile you use (`web` / `desktop` / `tui`, e.g. `dsh plugin --profile desktop add dsh-qoder-connect`) — data stays inside that profile, so web / desktop / tui never collide. On a terminal-only profile (TUI) there is no browser card: manage the PAT and check status through the bundled CLI instead; the settings card and sidebar widgets require Web or Desktop.
-
-## Configuration
-
-### Mint a PAT
-
-- **Qoder (China)**: sign in at qoder.com.cn → account settings → Personal Access Token.
-- **Qoder Global**: sign in at qoder.com → account settings → Personal Access Token.
-
-(The card repeats the same guidance: *“Generate a PAT in your qoder.com account settings (Account → Personal Access Token), then paste it here.”*)
-
-### Save it on the card
-
-DSH → Settings → Plugins → the variant's card: paste the PAT into the password field and press *Save* (*“Validating and saving…”* while it runs). The token is validated against that variant's region first — a refusal saves nothing and the card says *“That PAT was rejected — generate a new one in your account settings and try again.”*. Do this on both cards to run both groups side by side.
-
-### Environment-variable fallback
-
-For headless setups, the plugin reads an environment fallback **only when no credential file exists**:
-
-| Variant | Environment variable |
-|---|---|
-| `qoder` (china) | `QODER_CN_PERSONAL_ACCESS_TOKEN` |
-| `qoder-global` | `QODER_PERSONAL_ACCESS_TOKEN` |
-
-The precedence is **file > env**: as soon as a valid credential file is saved, a stray environment token stops mattering (the saved token always wins). Env-sourced credentials show as *source: environment variable* on the card, with no saved-at time.
-
-## Data & privacy
-
-### File layout
-
-Everything the plugin owns lives in one data directory: `<profile>/.dsh-qoder-connect/` — credentials at the root, rebuildable caches under `state/` (so “clear the cache” can never touch a credential):
-
-```text
-<profile>/.dsh-qoder-connect/
-├── .qoder-auth.json              # China PAT ({version:2, pat, region, savedAt})
-├── .qoder-global-auth.json       # Global PAT
-└── state/
-    ├── .qoder-catalog.json       # China per-account saved catalog
-    ├── .qoder-global-catalog.json
-    ├── .qoder-probe.json         # China reasoning-effort probe records
-    ├── .qoder-global-probe.json
-    ├── .qoder-host-heartbeat.json    # host heartbeat (doctor uses it)
-    └── .qoder-machine-id         # transport machine-id seed (never written to ~/.qoder)
-```
-
-The directory follows the profile that declares this plugin (found under `$DSH_HOME/profiles/`), falling back to the Harness home when none can be determined; `DSH_QODER_DATA_DIR` overrides it explicitly.
-
-## Development
-
-```sh
-pnpm install
-pnpm run build      # tsdown → lib/ (host bundle + client bundle)
-pnpm test           # vitest run (tests/**/*.spec.ts)
-pnpm run test:qoder # node --test (tests/qoder/*.test.ts, the Qoder transport suite)
-pnpm run typecheck  # tsc across the host and client tsconfigs
-pnpm run check      # typecheck + test + test:qoder + build in one gate
-```
-
-The upstream `node:test` suite for the Qoder transport layer now lives in `tests/qoder/` (run it with `pnpm run test:qoder`; the pristine `reference-qoder-tests/` copy has been removed) — `package.json` scripts are the source of truth.
-
-## Provenance & license
-
-- Derived from [masknull/dsh-workbuddy-connect](https://github.com/masknull/dsh-workbuddy-connect) (MIT) — the connect-plugin skeleton this project was refactored from.
-- Qoder transport layer ported from [mo-n/dsh-provider-qoder](https://github.com/mo-n/dsh-provider-qoder) (MIT).
-
-Released under the [MIT](./LICENSE) license; see [NOTICE](./NOTICE) for the upstream attributions. This is a community adapter — not affiliated with, authorized by, or endorsed by Qoder or DeepSeek, and not an official implementation.
-
-## Disclaimer
-
-- Qoder's endpoints come from the upstream repositories: upstream may change, rate-limit or block them at any time, breaking part or all of this plugin with no compatibility window to promise.
-- For personal learning and research only; this tool drives **your own** Qoder account. Do not use it commercially or beyond reasonable personal use. You are responsible for complying with Qoder's terms of service and for any consequence — account restriction, quota loss, service interruption — of using this project.
-- The authors are not liable for any direct or indirect loss arising from use or misuse of this project. The names Qoder, DeepSeek and related marks belong to their respective owners and appear here only to describe compatibility.
+# DSH Qoder Connect
+
+**English** | [简体中文](./README.md)
+
+A [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) (DSH) plugin that brings your **Qoder subscription** models into DSH through a Personal Access Token (PAT). One plugin serves both Qoder product lines — each with its own settings card, provider id, credential file and saved catalog, never mixed:
+
+| Variant | Provider id | Card title | Where the PAT is minted |
+|---|---|---|---|
+| China (国内版) | `qoder` | Qoder | qoder.com.cn |
+| International (国际版) | `qoder-global` | Qoder Global | qoder.com |
+
+Configure only what you use: a variant with no saved PAT shows no model group and never interferes with the other one. Streaming, reasoning content and tool calls ride the plugin's built-in Qoder transport; the conversation loop, compaction and permissions stay Harness-owned.
+
+## Features
+
+- **PAT: save it and it works** — paste a PAT into the card and press *Save*; the token is validated live against that variant's region before anything is written, and the model group appears immediately — no DSH restart. Once signed in, *Replace PAT* (the new token overwrites only after it validates, so a mistyped paste can never strand a working credential) and *Clear PAT* are one click away.
+- **Two independent variants** — `qoder` (china) and `qoder-global` (global) keep separate credential files, routes and saved catalogs: a token minted on qoder.com does not work against the China deployment and vice versa.
+- **Three-tier model catalog (live → saved → fallback)** — the card states where the list on screen came from: *“Model list updated …”* (fetched now), *“Showing the saved model list from …”* (this account's last successful fetch, restored after a restart or a failed fetch), or *“Showing the built-in model list (not yet updated from Qoder)”* (the roster compiled into the plugin). The reason of the most recent failed fetch is shown too, and a *Refresh model list* button sits right there.
+- **One-toggle context window** — each variant card's *Context window* tab lists every model's capacity (the default and the largest declared window) and carries its own *“Use the largest declared context window”* preference (on by default): on, requests declare the maximum (e.g. Qwen3.8-Max at 1M); off, the default (200K). The two variants keep independent toggle state.
+- **Sidebar quota card + credit details** — the *“Qoder sidebar display”* card toggles a per-variant sidebar quota widget (off by default; each toggle needs its variant's PAT saved) with one shared refresh interval (default 5 min, minimum 1 min). Clicking the sidebar widget opens the *Qoder quota* panel: one row per credit package — *“Remaining / Total + bar | Expires”* — plus the cycle share and reset time. Click the same widget again to close; click the other to switch variants.
+- **Rate display `x<priceFactor>`** — each model name is suffixed with the upstream-reported price multiplier (e.g. `Some Model · x0.79`, free is `x0`), spelled `x<n>` from the catalog's `price_factor`. Display only — it never changes the request; models whose rate the upstream did not report simply show no suffix.
+
+## Screenshots
+
+### Sidebar quota widgets & credit details
+
+Once enabled on the *“Qoder sidebar display”* card, a per-variant quota widget sits at the sidebar's foot; clicking it opens the *Qoder quota* panel with one row per credit package, switchable between the two variants at any time.
+
+**China (after clicking the sidebar widget):**
+
+![China sidebar quota details](assets/1.png)
+
+**International (after clicking the sidebar widget):**
+
+![International sidebar quota details](assets/2.png)
+
+### Sidebar toggles
+
+The *“Qoder sidebar display”* card controls both widgets' visibility and the shared refresh interval:
+
+![Sidebar display toggles](assets/3.png)
+
+### Picking a model in a session
+
+Once a PAT is saved, the model picker gains a Qoder group with per-model rate multipliers (`x0.5`, `x0`, …):
+
+![Model picker in a session](assets/4.png)
+
+### Context-window settings
+
+Each variant card's *Context window* tab lists capacities per model under the *“Use the largest declared context window”* preference:
+
+**China:**
+
+![China context-window settings](assets/5.png)
+
+**International:**
+
+![International context-window settings](assets/6.png)
+
+## Install
+
+Prerequisites:
+
+- DSH core `0.1.5-rc.1` or newer (this plugin peers on the `@deepseek-ai/*` `^0.1.5-rc.1` line);
+- Node.js `^22.19.0 || >=24.0.0` (per `package.json` engines);
+- your own Qoder account and at least one Personal Access Token.
+
+```sh
+# From GitHub (recommended)
+dsh plugin --profile web add github:masknull/dsh-qoder-connect
+# Or from npm, once published
+dsh plugin --profile web add dsh-qoder-connect
+```
+
+Swap the `--profile` value for the profile you use (`web` / `desktop` / `tui`, e.g. `dsh plugin --profile desktop add dsh-qoder-connect`) — data stays inside that profile, so web / desktop / tui never collide. On a terminal-only profile (TUI) there is no browser card: manage the PAT and check status through the bundled CLI instead; the settings card and sidebar widgets require Web or Desktop.
+
+## Configuration
+
+### Mint a PAT
+
+- **Qoder (China)**: sign in at qoder.com.cn → account settings → Personal Access Token, then copy it. [Open the page](https://qoder.cn/account/integrations)
+- **Qoder Global**: sign in at qoder.com → account settings → Personal Access Token, then copy it. [Open the page](https://qoder.com/account/integrations)
+
+(The card repeats the same guidance: *“Generate a PAT in your qoder.com account settings (Account → Personal Access Token), then paste it here.”*)
+
+### Save it on the card
+
+DSH → Settings → Plugins → the variant's card: paste the PAT into the password field and press *Save* (*“Validating and saving…”* while it runs). The token is validated against that variant's region first — a refusal saves nothing and the card says *“That PAT was rejected — generate a new one in your account settings and try again.”*. Do this on both cards to run both groups side by side.
+
+### Environment-variable fallback
+
+For headless setups, the plugin reads an environment fallback **only when no credential file exists**:
+
+| Variant | Environment variable |
+|---|---|
+| `qoder` (china) | `QODER_CN_PERSONAL_ACCESS_TOKEN` |
+| `qoder-global` | `QODER_PERSONAL_ACCESS_TOKEN` |
+
+The precedence is **file > env**: as soon as a valid credential file is saved, a stray environment token stops mattering (the saved token always wins). Env-sourced credentials show as *source: environment variable* on the card, with no saved-at time.
+
+## Data & privacy
+
+### File layout
+
+Everything the plugin owns lives in one data directory: `<profile>/.dsh-qoder-connect/` — credentials at the root, rebuildable caches under `state/` (so “clear the cache” can never touch a credential):
+
+```text
+<profile>/.dsh-qoder-connect/
+├── .qoder-auth.json              # China PAT ({version:2, pat, region, savedAt})
+├── .qoder-global-auth.json       # Global PAT
+└── state/
+    ├── .qoder-catalog.json       # China per-account saved catalog
+    ├── .qoder-global-catalog.json
+    ├── .qoder-probe.json         # China reasoning-effort probe records
+    ├── .qoder-global-probe.json
+    ├── .qoder-host-heartbeat.json    # host heartbeat (doctor uses it)
+    └── .qoder-machine-id         # transport machine-id seed (never written to ~/.qoder)
+```
+
+The directory follows the profile that declares this plugin (found under `$DSH_HOME/profiles/`), falling back to the Harness home when none can be determined; `DSH_QODER_DATA_DIR` overrides it explicitly.
+
+## Development
+
+```sh
+pnpm install
+pnpm run build      # tsdown → lib/ (host bundle + client bundle)
+pnpm test           # vitest run (tests/**/*.spec.ts)
+pnpm run test:qoder # node --test (tests/qoder/*.test.ts, the Qoder transport suite)
+pnpm run typecheck  # tsc across the host and client tsconfigs
+pnpm run check      # typecheck + test + test:qoder + build in one gate
+```
+
+The upstream `node:test` suite for the Qoder transport layer now lives in `tests/qoder/` (run it with `pnpm run test:qoder`; the pristine `reference-qoder-tests/` copy has been removed) — `package.json` scripts are the source of truth.
+
+## Provenance & license
+
+- Derived from [masknull/dsh-workbuddy-connect](https://github.com/masknull/dsh-workbuddy-connect) (MIT) — the connect-plugin skeleton this project was refactored from.
+- Qoder transport layer ported from [mo-n/dsh-provider-qoder](https://github.com/mo-n/dsh-provider-qoder) (MIT).
+
+Released under the [MIT](./LICENSE) license; see [NOTICE](./NOTICE) for the upstream attributions. This is a community adapter — not affiliated with, authorized by, or endorsed by Qoder or DeepSeek, and not an official implementation.
+
+## Disclaimer
+
+- Qoder's endpoints come from the upstream repositories: upstream may change, rate-limit or block them at any time, breaking part or all of this plugin with no compatibility window to promise.
+- For personal learning and research only; this tool drives **your own** Qoder account. Do not use it commercially or beyond reasonable personal use. You are responsible for complying with Qoder's terms of service and for any consequence — account restriction, quota loss, service interruption — of using this project.
+- The authors are not liable for any direct or indirect loss arising from use or misuse of this project. The names Qoder, DeepSeek and related marks belong to their respective owners and appear here only to describe compatibility.

package/README.md

@@ -79,8 +79,8 @@ dsh plugin --profile web add dsh-qoder-connect
 
 ### 生成 PAT
 
-- **Qoder（中国版）**：登录 qoder.com.cn → 账号设置 → 个人访问令牌，生成后复制。
-- **Qoder Global（国际版）**：登录 qoder.com → 账号设置 → 个人访问令牌，生成后复制。
+- **Qoder（国内版）**：登录 qoder.com.cn → 账号设置 → 个人访问令牌，生成后复制。[直达获取](https://qoder.cn/account/integrations)
+- **Qoder Global（国际版）**：登录 qoder.com → 账号设置 → 个人访问令牌，生成后复制。[直达获取](https://qoder.com/account/integrations)
 
 （卡片内也有同样指引：「请先在 qoder.com.cn 的账号设置（账号 → 个人访问令牌）中生成 PAT，再粘贴到下方输入框。」）
 

package/cordis.patch.yml

@@ -1,6 +1,6 @@
-# Register the Qoder provider without changing the profile's current
-# default model. Credentials are Personal Access Tokens (PATs) the user
-# pastes into the plugin's card; no OAuth or device flow is started.
-- insert:
-    - id: llm-qoder
-      name: dsh-qoder-connect
+# Register the Qoder provider without changing the profile's current
+# default model. Credentials are Personal Access Tokens (PATs) the user
+# pastes into the plugin's card; no OAuth or device flow is started.
+- insert:
+    - id: llm-qoder
+      name: dsh-qoder-connect

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { B as qoderCredentialIdentity, D as FALLBACK_QODER_MODELS, E as qoderCatalogPath, R as QoderCredentialStore, T as QoderCatalogStore, b as createQoderTransport, f as QODER_CONNECT_VERSION, i as variantFor, l as qoderHostHeartbeatPath, m as QoderUpstreamClient, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, y as validateApiKey } from "./variants-jbFhMKO8.js";
+import { B as qoderCredentialIdentity, D as FALLBACK_QODER_MODELS, E as qoderCatalogPath, R as QoderCredentialStore, T as QoderCatalogStore, b as createQoderTransport, f as QODER_CONNECT_VERSION, i as variantFor, l as qoderHostHeartbeatPath, m as QoderUpstreamClient, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, y as validateApiKey } from "./variants-C0iZD8AD.js";
 import { readFile } from "node:fs/promises";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";

package/lib/client.js

@@ -1107,6 +1107,10 @@ window.__ModuleLoader__.load({
 						status?.status === "signed-in" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
 							status.pat === void 0 ? null : patSummaryLine(status.pat),
 							replacing ? patEntry() : null,
+							status.jobTokenRefreshedAt === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								style: bodyStyle,
+								children: t("jobTokenRefreshed", { time: formatTime(status.jobTokenRefreshedAt) })
+							}),
 							status.catalog === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								style: rowStyle$1,
 								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
@@ -3022,6 +3026,7 @@ window.__ModuleLoader__.load({
 			refreshing: "Refreshing…",
 			refreshModels: "Refresh model list",
 			refreshingModels: "Refreshing models…",
+			jobTokenRefreshed: "Job token was auto-refreshed at {time} (upstream rejected the old one; the message recovered).",
 			catalogLive: "Model list updated {time}",
 			catalogSaved: "Showing the saved model list from {time}",
 			catalogFallback: "Showing the built-in model list (not yet updated from Qoder)",
@@ -3150,6 +3155,7 @@ window.__ModuleLoader__.load({
 			refresh: "刷新",
 			refreshing: "正在刷新…",
 			refreshModels: "刷新模型列表",
+			jobTokenRefreshed: "jobToken 已于 {time} 自动刷新（上游拒绝了旧令牌，消息已自动恢复）。",
 			refreshingModels: "正在刷新模型…",
 			catalogLive: "模型列表更新于 {time}",
 			catalogSaved: "当前显示已保存的模型列表，更新于 {time}",

package/lib/index.d.ts

@@ -246,6 +246,13 @@ type QoderWebStatus = {
   probe?: QoderWebProbeSection;
   /** Card preference selecting larger declared context windows. */
   useMaximumContextWindow?: boolean;
+  /**
+   * The last automatic job-token refresh the self-heal performed, epoch ms.
+   * Absent when no refresh has happened in this process. The card renders
+   * this as a visible "token auto-refreshed" notice, so an otherwise
+   * invisible recovery is observable.
+   */
+  jobTokenRefreshedAt?: number;
   /**
    * In-process key authorizing probe control writes. Handed to the card with
    * the status document (the card is same-origin and already had to pass the

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as QODER_GLOBAL_AUTH_PATH, B as qoderCredentialIdentity, C as probeModel, D as FALLBACK_QODER_MODELS, E as qoderCatalogPath, F as QODER_AUTH_FILENAME, G as qoderPluginDataDir, H as QODER_DATA_DIR_ENV, I as QODER_PAT_ENV_CN, K as qoderStateDir, L as QODER_PAT_ENV_GLOBAL, M as QODER_GLOBAL_STATUS_PATH, N as QODER_PROBE_PATH, O as QoderCatalog, P as QODER_STATUS_PATH, R as QoderCredentialStore, S as PROBE_EFFORT_CANDIDATES, T as QoderCatalogStore, U as QODER_DATA_DIR_NAME, V as qoderOwnAuthPath, W as qoderMachineIdPath, _ as modelInfoOf, a as QODER_HOST_HEARTBEAT_FILENAME, b as createQoderTransport, c as processStartTimeMs, d as writeHostHeartbeat, f as QODER_CONNECT_VERSION, g as kindFromQoderFailure, h as classifyUpstreamError, i as variantFor, j as QODER_GLOBAL_PROBE_PATH, k as QODER_AUTH_PATH, l as qoderHostHeartbeatPath, m as QoderUpstreamClient, n as GLOBAL_VARIANT, o as clearHostHeartbeat, p as KIND_STATUS, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, v as normalizeCredits, w as randomSentinel, x as getMachineId, y as validateApiKey, z as patTail } from "./variants-jbFhMKO8.js";
+import { A as QODER_GLOBAL_AUTH_PATH, B as qoderCredentialIdentity, C as probeModel, D as FALLBACK_QODER_MODELS, E as qoderCatalogPath, F as QODER_AUTH_FILENAME, G as qoderPluginDataDir, H as QODER_DATA_DIR_ENV, I as QODER_PAT_ENV_CN, K as qoderStateDir, L as QODER_PAT_ENV_GLOBAL, M as QODER_GLOBAL_STATUS_PATH, N as QODER_PROBE_PATH, O as QoderCatalog, P as QODER_STATUS_PATH, R as QoderCredentialStore, S as PROBE_EFFORT_CANDIDATES, T as QoderCatalogStore, U as QODER_DATA_DIR_NAME, V as qoderOwnAuthPath, W as qoderMachineIdPath, _ as modelInfoOf, a as QODER_HOST_HEARTBEAT_FILENAME, b as createQoderTransport, c as processStartTimeMs, d as writeHostHeartbeat, f as QODER_CONNECT_VERSION, g as kindFromQoderFailure, h as classifyUpstreamError, i as variantFor, j as QODER_GLOBAL_PROBE_PATH, k as QODER_AUTH_PATH, l as qoderHostHeartbeatPath, m as QoderUpstreamClient, n as GLOBAL_VARIANT, o as clearHostHeartbeat, p as KIND_STATUS, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, v as normalizeCredits, w as randomSentinel, x as getMachineId, y as validateApiKey, z as patTail } from "./variants-C0iZD8AD.js";
 import z from "@deepseek-ai/schemastery";
 import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
 import { dirname, join, resolve } from "node:path";
@@ -539,7 +539,13 @@ function createQoderShim(options) {
 		return timingSafeEqual(a, b);
 	}
 	const server = createServer((req, res) => {
-		handle(req, res);
+		handle(req, res).catch((error) => {
+			logger?.warn("dsh-qoder-connect: loopback request failed", error);
+			try {
+				if (!res.headersSent) writeOpenAIError(res, 500, "internal", "loopback request failed");
+				else res.end();
+			} catch {}
+		});
 	});
 	const ready = new Promise((resolve, reject) => {
 		server.once("listening", () => resolve());
@@ -1045,15 +1051,20 @@ async function qoderWebStatus(deps) {
 		...deps.probeKey === void 0 ? {} : { probeKey: deps.probeKey },
 		...deps.useMaximumContextWindow === void 0 ? {} : { useMaximumContextWindow: deps.useMaximumContextWindow() }
 	};
+	const refreshedAt = deps.jobTokenRefreshedAt?.();
+	const withRefreshNotice = refreshedAt === void 0 ? probed : {
+		...probed,
+		jobTokenRefreshedAt: refreshedAt
+	};
 	try {
 		const credits = await deps.client.fetchCredits();
 		return {
-			...probed,
+			...withRefreshNotice,
 			credits
 		};
 	} catch (error) {
 		return {
-			...probed,
+			...withRefreshNotice,
 			creditsError: safeMessage(error)
 		};
 	}
@@ -1243,6 +1254,57 @@ function registerQoderProbeRoute(ctx, deps, key) {
 	}, "dsh-qoder-connect: probe control route");
 }
 //#endregion
+//#region src/job-token-hint.ts
+/** The name recorded on the hint row (and therefore its displayed title). */
+const JOB_TOKEN_HINT_NAME = "qoder";
+/** Refresh time per agent id, so a later read can name when it happened. */
+const lastRefreshAt = /* @__PURE__ */ new Map();
+/** The most recent agent observed entering a running turn. */
+let lastRunningAgent;
+/** Monotonic suffix keeping appended ids unique within this process. */
+let hintSeq = 0;
+/**
+* Start tracking which agent is running.
+*
+* `agent/status` is a plain `emit` event: a listener that returns nothing
+* cannot disturb the emitting path (unlike a waterfall event, where a listener
+* owes the chain its `next()` call). The self-heal fires inside that agent's
+* request, so the most recently running agent is the conversation to print
+* into.
+*/
+function installJobTokenHint(ctx) {
+	ctx.on("agent/status", ((payload) => {
+		if (payload.status === "running" && payload.agent !== void 0) lastRunningAgent = payload.agent;
+	}));
+}
+/**
+* Print the refresh row into the conversation whose request triggered it.
+*
+* Best effort by design: a missing agent, an absent session, or a projection
+* that rejects the append must never affect the chat that just recovered.
+*
+* @param at - When the job token was rotated.
+* @param text - The row's summary line.
+*/
+function emitJobTokenHint(at, text) {
+	const agent = lastRunningAgent;
+	if (agent?.session === void 0) return;
+	lastRefreshAt.set(String(agent.id), at);
+	const commandId = `cmd-qoder-hint-${Date.now().toString(36)}-${++hintSeq}`;
+	try {
+		agent.session.append("command/run", {
+			commandId,
+			name: JOB_TOKEN_HINT_NAME,
+			source: { kind: "user" }
+		});
+		agent.session.append("command/done", {
+			commandId,
+			kind: "success",
+			text
+		});
+	} catch {}
+}
+//#endregion
 //#region src/index.ts
 /** Stable Cordis plugin name. */
 const name = "llm-qoder";
@@ -1403,16 +1465,32 @@ function settingsNamespaceFor(variant) {
 function fallbackFor(_variant) {
 	return FALLBACK_QODER_MODELS;
 }
+/**
+* The hint row's summary line: what happened, and when.
+*
+* Named here rather than in the hint module because the text is this plugin's
+* user-facing wording, and the transport callback that produces it runs before
+* the plugin's own scope exists.
+*/
+function jobTokenHintText(at) {
+	return `jobToken 已自动刷新（${new Date(at).toLocaleTimeString("zh-CN", { hour12: false })}）— 旧令牌被上游拒绝，已自动重换并恢复`;
+}
 /** Build one variant's stores, transport, and probe state. */
 function createVariantRuntime(ctx, config, variant, current, identityOf) {
 	const store = new QoderCredentialStore({
 		variant,
 		logger: ctx.logger
 	});
+	let jobTokenRefreshedAt;
 	const transport = createQoderTransport({
 		region: variant.region,
 		resolvePat: () => store.patPromise(),
-		resolveMachineId: () => getMachineId([qoderMachineIdPath()])
+		resolveMachineId: () => getMachineId([qoderMachineIdPath()]),
+		onJobTokenRefreshed: (info) => {
+			jobTokenRefreshedAt = info.at;
+			ctx.logger.warn(`dsh-qoder-connect: ${variant.displayName} job token was auto-refreshed after an upstream rejection`);
+			emitJobTokenHint(info.at, jobTokenHintText(info.at));
+		}
 	});
 	const client = new QoderUpstreamClient({
 		region: variant.region,
@@ -1442,6 +1520,7 @@ function createVariantRuntime(ctx, config, variant, current, identityOf) {
 		variant,
 		store,
 		client,
+		transport,
 		catalog,
 		probeStore,
 		probeService: new QoderProbeService({
@@ -1461,7 +1540,8 @@ function createVariantRuntime(ctx, config, variant, current, identityOf) {
 		catalogGeneration: 0,
 		inflightFetch: void 0,
 		invalidate: () => {},
-		registered: false
+		registered: false,
+		jobTokenRefreshedAt: () => jobTokenRefreshedAt
 	};
 }
 /** The catalog provenance the card displays. */
@@ -1508,6 +1588,21 @@ function probeSection(runtime, consent) {
 	};
 }
 /**
+* Run a detached promise without letting its failure kill the host.
+*
+* Node terminates the whole process on an unhandled rejection (exit code 1),
+* which the desktop shell reports as the backend having "exited unexpectedly"
+* — so a failing heartbeat write, loopback close, or background sweep in this
+* plugin would take the entire Harness down with it. Every fire-and-forget
+* call therefore carries a handler; a failure is a diagnostic, never a reason
+* for the host to die.
+*/
+function detach(ctx, work, what) {
+	work.catch((error) => {
+		ctx.logger.warn(`dsh-qoder-connect: ${what} failed`, error);
+	});
+}
+/**
 * Start one variant: its loopback endpoint, provider registration, and
 * configuration-card wiring.
 *
@@ -1567,18 +1662,18 @@ async function startVariant(ctx, runtime) {
 			ctx.effect(() => () => {
 				releaseAdapter?.();
 				releaseDirectory?.();
-				shim.close();
+				detach(ctx, shim.close(), "loopback endpoint close");
 			});
 		} catch {
 			releaseAdapter?.();
 			releaseDirectory?.();
-			shim.close();
+			detach(ctx, shim.close(), "loopback endpoint close");
 		}
 		runtime.registered = true;
 		return true;
 	} catch (error) {
 		ctx.logger.error(`dsh-qoder-connect: ${variant.displayName} provider registration failed`, error);
-		shim.close();
+		detach(ctx, shim.close(), "loopback endpoint close");
 		return false;
 	}
 }
@@ -1604,6 +1699,7 @@ function apply(ctx, config) {
 	*/
 	const lastIdentities = /* @__PURE__ */ new Map();
 	const runtimes = QODER_VARIANTS.map((variant) => createVariantRuntime(ctx, config, variant, () => current(), (id) => lastIdentities.get(id)));
+	installJobTokenHint(ctx);
 	const probeKey = createProbeKey();
 	/**
 	* The in-process key authorizing PAT writes, minted separately from the
@@ -1685,7 +1781,8 @@ function apply(ctx, config) {
 				probe: () => probeSection(runtime, current().probeConsent === true),
 				probeKey,
 				authKey,
-				...runtime.variant.id === CHINA_VARIANT.id ? { useMaximumContextWindow: () => current().useMaximumContextWindowCN === true } : { useMaximumContextWindow: () => current().useMaximumContextWindow === true }
+				...runtime.variant.id === CHINA_VARIANT.id ? { useMaximumContextWindow: () => current().useMaximumContextWindowCN === true } : { useMaximumContextWindow: () => current().useMaximumContextWindow === true },
+				jobTokenRefreshedAt: runtime.jobTokenRefreshedAt
 			});
 			registerQoderAuthRoute(webCtx, {
 				path: runtime.variant.authPath,
@@ -1697,7 +1794,7 @@ function apply(ctx, config) {
 					const credential = await runtime.store.save(pat);
 					const identity = credentialIdentity(credential);
 					adoptIdentity(runtime, identity);
-					fetchCatalog(runtime, identity);
+					await fetchCatalog(runtime, identity);
 					return {
 						ok: true,
 						status: await runtime.store.status()
@@ -1830,7 +1927,7 @@ function apply(ctx, config) {
 		stopped = true;
 		for (const timer of timers) clearInterval(timer);
 		timers.length = 0;
-		clearHostHeartbeat();
+		detach(ctx, clearHostHeartbeat(), "host heartbeat cleanup");
 	});
 	/**
 	* Fetch one variant's catalog for the current credential.
@@ -1891,11 +1988,15 @@ function apply(ctx, config) {
 			runtime.catalogSource = "live";
 			runtime.catalogFetchedAtMs = runtime.client.lastCatalog?.fetchedAtMs ?? Date.now();
 			runtime.catalogError = void 0;
-			if (lastIdentities.get(runtime.variant.id) === identity) runtime.savedCatalogs.set(identity, {
-				source: runtime.client.lastCatalog?.source ?? "unknown",
-				fetchedAtMs: runtime.client.lastCatalog?.fetchedAtMs ?? Date.now(),
-				models: [...models]
-			});
+			if (lastIdentities.get(runtime.variant.id) === identity) try {
+				runtime.savedCatalogs.set(identity, {
+					source: runtime.client.lastCatalog?.source ?? "unknown",
+					fetchedAtMs: runtime.client.lastCatalog?.fetchedAtMs ?? Date.now(),
+					models: [...models]
+				});
+			} catch (error) {
+				ctx.logger.warn(`dsh-qoder-connect: ${runtime.variant.displayName} catalog could not be saved for this account`, error);
+			}
 			runtime.invalidate();
 		})().finally(() => {
 			if (runtime.inflightFetch?.promise === run) runtime.inflightFetch = void 0;
@@ -1946,16 +2047,23 @@ function apply(ctx, config) {
 	const syncAll = async () => {
 		for (const runtime of runtimes) await syncVariant(runtime);
 	};
-	Promise.all(runtimes.map(async (runtime) => startVariant(ctx, runtime))).then(() => {
+	/**
+	* Start both variants, then begin the credential sweep.
+	*
+	* The chain carries its own failure handler: without one, a rejection here
+	* would be an unhandled rejection — which Node turns into process
+	* termination, taking the whole Harness down over one plugin's startup.
+	*/
+	detach(ctx, Promise.all(runtimes.map(async (runtime) => startVariant(ctx, runtime))).then(() => {
 		if (stopped) return;
-		if (runtimes.some((runtime) => runtime.registered)) writeHostHeartbeat();
-		syncAll();
+		if (runtimes.some((runtime) => runtime.registered)) detach(ctx, writeHostHeartbeat(), "host heartbeat write");
+		detach(ctx, syncAll(), "credential sweep");
 		const timer = setInterval(() => {
-			syncAll();
+			detach(ctx, syncAll(), "credential sweep");
 		}, credentialPollMs());
 		timer.unref?.();
 		timers.push(timer);
-	});
+	}), "variant startup");
 }
 //#endregion
 export { CHINA_VARIANT, Config, FALLBACK_QODER_MODELS, GLOBAL_VARIANT, KIND_STATUS, PROBE_EFFORT_CANDIDATES, QODER_AUTH_FILENAME, QODER_AUTH_PATH, QODER_DATA_DIR_ENV, QODER_DATA_DIR_NAME, QODER_GLOBAL_AUTH_PATH, QODER_GLOBAL_PROBE_PATH, QODER_GLOBAL_SETTINGS_NS, QODER_GLOBAL_STATUS_PATH, QODER_HOST_HEARTBEAT_FILENAME, QODER_PAT_ENV_CN, QODER_PAT_ENV_GLOBAL, QODER_PROBE_FILENAME, QODER_PROBE_PATH, QODER_PROVIDER, QODER_QUOTA_SETTINGS_NS, QODER_SETTINGS_NS, QODER_STATUS_PATH, QODER_STREAM_IDLE_TIMEOUT_MS, QODER_VARIANTS, QUOTA_POLL_DEFAULT_MS, QUOTA_POLL_MIN_MS, QoderCatalog, QoderCatalogStore, QoderCredentialStore, QoderProbeService, QoderProbeStore, QoderUpstreamClient, apply, classifyUpstreamError, clearHostHeartbeat, createAuthKey, createQoderAdapter, createQoderShim, fingerprintModel, inject, isHeartbeatProcessAlive, kindFromQoderFailure, modelInfoOf, name, normalizeCredits, patTail, probeModel, processStartTimeMs, qoderAuthHandler, qoderCatalogPath, qoderCredentialIdentity, qoderHostHeartbeatPath, qoderOwnAuthPath, qoderPluginDataDir, qoderProbePath, randomSentinel, readHostHeartbeat, registerQoderAuthRoute, variantFor };

package/lib/{variants-jbFhMKO8.js → variants-C0iZD8AD.js}

@@ -903,6 +903,20 @@ function qoderRequestId(headers) {
 	const normalized = (headers?.get("x-request-id") ?? headers?.get("request-id") ?? headers?.get("x-amzn-requestid"))?.trim();
 	return normalized ? ProviderRequestId(normalized) : void 0;
 }
+/**
+* Whether this failure is an upstream authorization rejection worth one
+* re-auth retry.
+*
+* The job token the transport signs requests with is cached in memory; an
+* upstream that invalidates it mid-lifetime (gateway rotation or a fault
+* window) answers HTTP 401/403 before any payload is produced. That state is
+* distinguishable from a genuinely revoked PAT only by trying a fresh
+* exchange, so callers clear their credential cache and retry once before
+* reporting `AUTH` to the user.
+*/
+function isQoderAuthRejection(error) {
+	return error instanceof LlmError && (error.code === "AUTH" || error.failure.status === 401 || error.failure.status === 403);
+}
 function retryAfterMs(value, nowMs = Date.now()) {
 	const normalized = value?.trim();
 	if (!normalized) return void 0;
@@ -1296,6 +1310,17 @@ var QoderAuthService = class {
 		if (pat) this.cache.delete(`${this.region}:${opaqueCredentialKey(pat)}`);
 		else this.cache.clear();
 	}
+	/**
+	* Exchange a fresh job token OUTSIDE the single-flight, for the self-heal
+	* retry. The shared flight can be aborted by a departing concurrent waiter
+	* (the quota poll, the catalog sweep), and a retry that joins it would then
+	* be cancelled by a path that has nothing to do with the chat. The result
+	* replaces the cache entry.
+	*/
+	async exchangeFresh(pat, signal) {
+		this.clear(pat);
+		return await this.exchangeAndResolve(pat, signal ?? AbortSignal.timeout(this.timeoutMs));
+	}
 	async getCredentials(pat, signal) {
 		if (!pat || typeof pat !== "string") throw new QoderLlmError("Qoder Personal Access Token is missing or invalid. Configure Qoder in the Qoder settings page.", "MISSING_CREDENTIAL");
 		if (signal?.aborted) throw abortedError();
@@ -2283,6 +2308,16 @@ var QoderUsageReader = class {
 		return this.flights.run(cacheKey, options?.signal, (sharedSignal) => this.loadAccount(pat, sharedSignal, cacheKey), () => new QoderLlmError("Qoder account request was aborted.", "ABORTED"));
 	}
 	async loadAccount(pat, signal, cacheKey) {
+		try {
+			return await this.loadAccountWith(pat, signal, cacheKey);
+		} catch (error) {
+			if (!isQoderAuthRejection(error) || signal.aborted) throw error;
+			this.logger?.warn?.("[Qoder Account] Usage read rejected as unauthorized; exchanging a fresh job token and retrying once");
+		}
+		this.authService.clear(pat);
+		return this.loadAccountWith(pat, signal, cacheKey);
+	}
+	async loadAccountWith(pat, signal, cacheKey) {
 		const creds = await this.authService.getCredentials(pat, signal);
 		const profile = {
 			id: creds.userID,
@@ -2380,27 +2415,38 @@ var QoderUsageReader = class {
 * Re-arranges standard Base64 chunks and translates characters against
 * a custom alphabet to satisfy Qoder upstream WAF requirements.
 *
+* The translation runs through a byte table applied to a Buffer instead of a
+* per-character string loop. The loop form (`out += char` plus
+* `alphabet.indexOf(char)`) costs ~800 ms on a 1 MB body and runs on the main
+* thread once per model request, which saturated the Harness event loop as
+* soon as a few large-context sessions were in flight. The table form is
+* byte-for-byte identical (the input is always Base64, i.e. ASCII) and about
+* 24x faster.
+*
 * @module dsh-provider-qoder/qoder/transport/wire/encoding
 */
 const qoderCustomAlphabet = "_doRTgHZBKcGVjlvpC,@aFSx#DPuNJme&i*MzLOEn)sUrthbf%Y^w.(kIQyXqWA!";
 const qoderStdAlphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+/**
+* Byte translation table: every byte maps to itself unless it is a Base64
+* alphabet character (→ the custom alphabet) or the `=` pad (→ `$`).
+*/
+const encodeTable = (() => {
+	const table = /* @__PURE__ */ new Uint8Array(256);
+	for (let index = 0; index < 256; index++) table[index] = index;
+	for (let index = 0; index < 64; index++) table[qoderStdAlphabet.charCodeAt(index)] = qoderCustomAlphabet.charCodeAt(index);
+	table["=".charCodeAt(0)] = "$".charCodeAt(0);
+	return table;
+})();
 function qoderEncodeBody(plaintext) {
 	const std = Buffer.isBuffer(plaintext) ? plaintext.toString("base64") : Buffer.from(plaintext).toString("base64");
 	const n = std.length;
 	const a = Math.floor(n / 3);
 	const rearranged = std.slice(n - a) + std.slice(a, n - a) + std.slice(0, a);
-	let out = "";
-	for (let i = 0; i < n; i++) {
-		const c = rearranged[i];
-		if (c === void 0) continue;
-		if (c === "=") out += "$";
-		else {
-			const idx = qoderStdAlphabet.indexOf(c);
-			if (idx >= 0) out += qoderCustomAlphabet[idx];
-			else out += c;
-		}
-	}
-	return out;
+	const source = Buffer.from(rearranged, "latin1");
+	const target = Buffer.allocUnsafe(n);
+	for (let index = 0; index < n; index++) target[index] = encodeTable[source[index] ?? 0] ?? 0;
+	return target.toString("latin1");
 }
 //#endregion
 //#region src/qoder/transport/wire/thinking.ts
@@ -3001,6 +3047,15 @@ var DefaultQoderTransport = class {
 	attachments;
 	imageUploader;
 	preserveThinking;
+	onJobTokenRefreshed;
+	/**
+	* Set when the self-heal exchanged a fresh job token, cleared when a chat
+	* afterwards succeeds. The notice reports "the token was rotated because the
+	* old one was rejected", which is true from that exchange on — so it must
+	* not be tied to the heal's OWN retry, which can still lose a race with a
+	* transient upstream timeout and be rescued by a later attempt.
+	*/
+	pendingRefreshAt;
 	constructor(options) {
 		this.region = options.region;
 		this.resolvePat = options.resolvePat;
@@ -3011,6 +3066,7 @@ var DefaultQoderTransport = class {
 		this.metadataTimeoutMs = options.metadataTimeoutMs;
 		this.attachments = options.attachments;
 		this.preserveThinking = options.preserveThinking;
+		this.onJobTokenRefreshed = options.onJobTokenRefreshed;
 		this.auth = new QoderAuthService({
 			fetch: this.fetchImpl,
 			logger: this.logger,
@@ -3040,6 +3096,23 @@ var DefaultQoderTransport = class {
 	stream(options, model) {
 		return this.generate(options, model);
 	}
+	/**
+	* Report the pending self-heal once a chat is accepted, then clear it.
+	*
+	* The notice means "the stale token was rejected, so it was rotated, and the
+	* chat works again" — all three are true by the time a chat is accepted
+	* after the refresh, no matter which attempt delivered it.
+	*/
+	flushPendingRefreshNotice() {
+		if (this.pendingRefreshAt === void 0) return;
+		const at = this.pendingRefreshAt;
+		this.pendingRefreshAt = void 0;
+		this.logger?.warn?.("[Qoder Stream] Job token was auto-refreshed after an upstream rejection; the chat has recovered");
+		this.onJobTokenRefreshed?.({
+			region: this.region,
+			at
+		});
+	}
 	async discoverModels(signal) {
 		const pat = await this.requirePat(signal);
 		const key = opaqueCredentialKey(pat);
@@ -3068,6 +3141,30 @@ var DefaultQoderTransport = class {
 		if (signal?.aborted) throw aborted("Qoder request was aborted.");
 		return pat;
 	}
+	/**
+	* Stream one chat, reporting acceptance as soon as the FIRST chunk arrives.
+	*
+	* `streamQoderChat` throws before yielding anything when the upstream rejects
+	* the request, so a first chunk means the credential was accepted. Reporting
+	* at that moment — rather than after the whole stream drains — matters
+	* because the consumer may close the stream early, and code after a
+	* completed `yield*` would then never run.
+	*
+	* @param onAccepted - Called once, before the first chunk is forwarded.
+	*/
+	async *streamChat(options, model, credentials, messages, onAccepted) {
+		const stream = streamQoderChat(options, model, credentials, messages, {
+			fetch: this.fetchImpl,
+			logger: this.logger,
+			region: this.region,
+			responseHeaderTimeoutMs: this.responseHeaderTimeoutMs,
+			streamIdleTimeoutMs: this.streamIdleTimeoutMs
+		});
+		const first = await stream.next();
+		onAccepted();
+		if (!first.done) yield first.value;
+		yield* stream;
+	}
 	async *generate(options, model) {
 		if (options.signal?.aborted) throw aborted("Request was aborted prior to generation.");
 		validateQoderRequestShape(options, model);
@@ -3078,13 +3175,44 @@ var DefaultQoderTransport = class {
 			credentials,
 			preserveThinking: this.preserveThinking
 		});
-		yield* streamQoderChat(options, model, await this.auth.getCredentials(pat, options.signal), messages, {
-			fetch: this.fetchImpl,
-			logger: this.logger,
-			region: this.region,
-			responseHeaderTimeoutMs: this.responseHeaderTimeoutMs,
-			streamIdleTimeoutMs: this.streamIdleTimeoutMs
-		});
+		const chatCredentials = await this.auth.getCredentials(pat, options.signal);
+		try {
+			yield* this.streamChat(options, model, chatCredentials, messages, () => {
+				this.flushPendingRefreshNotice();
+			});
+			return;
+		} catch (error) {
+			if (!isQoderAuthRejection(error) || options.signal?.aborted) throw error;
+			this.logger?.warn?.("[Qoder Stream] Chat rejected as unauthorized; exchanging a fresh job token and retrying once", { status: error.failure.status });
+		}
+		let lastRejection;
+		for (let round = 0; round < 2; round++) {
+			const refreshed = await this.auth.exchangeFresh(pat, options.signal);
+			this.pendingRefreshAt = Date.now();
+			try {
+				yield* this.streamChat(options, model, refreshed, messages, () => {
+					this.flushPendingRefreshNotice();
+				});
+				return;
+			} catch (error) {
+				if (!isQoderAuthRejection(error) || options.signal?.aborted) throw error;
+				lastRejection = error;
+				if (round + 1 < 2) {
+					this.logger?.warn?.("[Qoder Stream] Fresh job token also rejected; waiting 2s and retrying once more", {
+						status: error.failure.status,
+						round: round + 1
+					});
+					await new Promise((resolve, reject) => {
+						const timer = setTimeout(resolve, 2e3);
+						options.signal?.addEventListener("abort", () => {
+							clearTimeout(timer);
+							reject(aborted("Request was aborted during the re-auth backoff."));
+						}, { once: true });
+					});
+				}
+			}
+		}
+		throw lastRejection;
 	}
 };
 //#endregion
@@ -3167,6 +3295,9 @@ function classifyUpstreamError(status, body) {
 	for (const marker of [
 		"invalid token",
 		"invalid pat",
+		"invalid job token",
+		"token expired",
+		"token has expired",
 		"unauthorized",
 		"forbidden",
 		"not authenticated"
@@ -3882,7 +4013,7 @@ const DEFAULT_MAX_TOKENS = 32768;
 const DEFAULT_CONTEXT_WINDOW = 18e4;
 //#endregion
 //#region src/version.ts
-const QODER_CONNECT_VERSION = "0.1.0";
+const QODER_CONNECT_VERSION = "0.1.2";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/package.json

@@ -1,116 +1,116 @@
-{
-  "name": "dsh-qoder-connect",
-  "displayName": "DSH Qoder Connect",
-  "description": "将 Qoder（中国版/国际版）的模型接入 DeepSeek Harness — bring Qoder models into DeepSeek Harness.",
-  "version": "0.1.0",
-  "author": "corrinehu",
-  "keywords": [
-    "dsh-plugin",
-    "deepseek-harness",
-    "deepseek",
-    "qoder",
-    "model-provider"
-  ],
-  "type": "module",
-  "engines": {
-    "node": "^22.19.0 || >=24.0.0"
-  },
-  "main": "lib/index.js",
-  "types": "lib/index.d.ts",
-  "bin": {
-    "dsh-qoder-connect": "lib/bin.js"
-  },
-  "scripts": {
-    "prepack": "npm run build",
-    "build": "tsdown",
-    "test": "vitest run",
-    "test:qoder": "node --test --test-isolation=none --experimental-strip-types tests/qoder/*.test.ts",
-    "typecheck": "tsc -p tsconfig.json && tsc -p tsconfig.client.json",
-    "check": "pnpm run typecheck && pnpm run test && pnpm run test:qoder && pnpm run build"
-  },
-  "exports": {
-    ".": {
-      "types": "./lib/index.d.ts",
-      "default": "./lib/index.js"
-    },
-    "./client": "./lib/client.js",
-    "./cordis.patch.yml": "./cordis.patch.yml",
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "lib",
-    "assets",
-    "cordis.patch.yml",
-    "README.md",
-    "README.en.md",
-    "LICENSE"
-  ],
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/masknull/dsh-qoder-connect.git"
-  },
-  "homepage": "https://github.com/masknull/dsh-qoder-connect#readme",
-  "bugs": "https://github.com/masknull/dsh-qoder-connect/issues",
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "inject": [
-        "@deepseek-ai/dsh-api-remotes",
-        "@deepseek-ai/dsh-api-session-controller",
-        "@deepseek-ai/dsh-client-ui-renderer",
-        "@deepseek-ai/dsh-client-ui-settings-plugins",
-        "@deepseek-ai/dsh-client-ui-settings",
-        "@deepseek-ai/dsh-client-ui-conversation",
-        "@deepseek-ai/dsh-client-ui-model-selection",
-        "@deepseek-ai/dsh-client-ui-sidebar",
-        "@deepseek-ai/dsh-client-locale"
-      ],
-      "platform": "web"
-    }
-  },
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-atomic-write": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-home-paths": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
-    "@deepseek-ai/schemastery": "^3.18.2",
-    "@earendil-works/pi-ai": "^0.85.1",
-    "react": "^18.2.0"
-  },
-  "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-atomic-write": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-model-selection": "0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-sidebar": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-credentials": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-home-paths": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
-    "@deepseek-ai/schemastery": "^3.18.2",
-    "@earendil-works/pi-ai": "^0.85.1",
-    "@types/node": "^22.20.0",
-    "@types/react": "~18.3.1",
-    "@types/react-test-renderer": "^18.3.1",
-    "react": "^18.2.0",
-    "react-test-renderer": "18.3.1",
-    "tsdown": "^0.22.2",
-    "typescript": "^5.9.3",
-    "vitest": "^4.1.8"
-  }
-}
+{
+  "name": "dsh-qoder-connect",
+  "displayName": "DSH Qoder Connect",
+  "description": "将 Qoder（国内版 / 国际版）的模型接入 DeepSeek Harness — bring Qoder (CN & international) models into DeepSeek Harness.",
+  "version": "0.1.2",
+  "author": "corrinehu",
+  "keywords": [
+    "dsh-plugin",
+    "deepseek-harness",
+    "deepseek",
+    "qoder",
+    "model-provider"
+  ],
+  "type": "module",
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "bin": {
+    "dsh-qoder-connect": "lib/bin.js"
+  },
+  "scripts": {
+    "prepack": "npm run build",
+    "build": "tsdown",
+    "test": "vitest run",
+    "test:qoder": "node --test --test-isolation=none --experimental-strip-types tests/qoder/*.test.ts",
+    "typecheck": "tsc -p tsconfig.json && tsc -p tsconfig.client.json",
+    "check": "pnpm run typecheck && pnpm run test && pnpm run test:qoder && pnpm run build"
+  },
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": "./lib/client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "assets",
+    "cordis.patch.yml",
+    "README.md",
+    "README.en.md",
+    "LICENSE"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/masknull/dsh-qoder-connect.git"
+  },
+  "homepage": "https://github.com/masknull/dsh-qoder-connect#readme",
+  "bugs": "https://github.com/masknull/dsh-qoder-connect/issues",
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-api-remotes",
+        "@deepseek-ai/dsh-api-session-controller",
+        "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-client-ui-settings-plugins",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-conversation",
+        "@deepseek-ai/dsh-client-ui-model-selection",
+        "@deepseek-ai/dsh-client-ui-sidebar",
+        "@deepseek-ai/dsh-client-locale"
+      ],
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-atomic-write": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-home-paths": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@earendil-works/pi-ai": "^0.85.1",
+    "react": "^18.2.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-atomic-write": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-model-selection": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-sidebar": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-credentials": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-home-paths": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@earendil-works/pi-ai": "^0.85.1",
+    "@types/node": "^22.20.0",
+    "@types/react": "~18.3.1",
+    "@types/react-test-renderer": "^18.3.1",
+    "react": "^18.2.0",
+    "react-test-renderer": "18.3.1",
+    "tsdown": "^0.22.2",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.8"
+  }
+}