dsh-qoder-connect 0.1.9 → 0.2.0

package/assets/icon.svg

@@ -0,0 +1,6 @@
+<svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <rect x="1" y="1" width="34" height="34" rx="8" fill="url(#g)" />
+  <path d="M19.6 7.5 11 20h5.6l-1.4 8.5L24.5 16h-5.6l.7-8.5Z" fill="#FFFFFF"/>
+  <circle cx="25.5" cy="25.5" r="3.2" fill="#45D9E7"/>
+  <defs><linearGradient id="g" x1="18" y1="1" x2="18" y2="35" gradientUnits="userSpaceOnUse"><stop stop-color="#7CB7FF"/><stop offset="1" stop-color="#145AF3"/></linearGradient></defs>
+</svg>

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { D as FALLBACK_QODER_MODELS, E as qoderCatalogPath, T as QoderCatalogStore, V as qoderCredentialIdentity, b as createQoderTransport, f as QODER_CONNECT_VERSION, i as variantFor, l as qoderHostHeartbeatPath, m as QoderUpstreamClient, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, y as validateApiKey, z as QoderCredentialStore } from "./variants-C8ezztjV.js";
+import { D as FALLBACK_QODER_MODELS, E as qoderCatalogPath, T as QoderCatalogStore, V as qoderCredentialIdentity, b as createQoderTransport, f as QODER_CONNECT_VERSION, i as variantFor, l as qoderHostHeartbeatPath, m as QoderUpstreamClient, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, y as validateApiKey, z as QoderCredentialStore } from "./variants-DuEgaUad.js";
 import { readFile } from "node:fs/promises";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";

package/lib/index.d.ts

@@ -834,6 +834,12 @@ declare function classifyUpstreamError(status: number, body: string): UpstreamEr
  * The transport's taxonomy (`src/qoder/errors.ts`) codes an HTTP 402 as
  * `INVALID_REQUEST`, so the status gets the last say for the quota and auth
  * families before the code-based defaults apply.
+ *
+ * `RATE_LIMIT` is tested before the auth family because the upstream's queue
+ * answer keeps its 401/403 status: a saturated qfmodel queue reads
+ * `code: RATE_LIMIT, status: 403` (body carries 10605/isQueued/
+ * retryAfterSeconds), and letting the status arm claim it reported a dead
+ * credential — which the host never retries — instead of a throttle it would.
  */
 declare function kindFromQoderFailure(failure: {
   code: string;

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as QODER_GLOBAL_AUTH_PATH, B as patTail, C as probeModel, D as FALLBACK_QODER_MODELS, E as qoderCatalogPath, F as QODER_STATUS_PATH, G as qoderMachineIdPath, H as qoderOwnAuthPath, I as QODER_AUTH_FILENAME, K as qoderPluginDataDir, L as QODER_PAT_ENV_CN, M as QODER_GLOBAL_STATUS_PATH, N as QODER_PROBE_PATH, O as QoderCatalog, P as QODER_SETTINGS_FACE_PATH, R as QODER_PAT_ENV_GLOBAL, S as PROBE_EFFORT_CANDIDATES, T as QoderCatalogStore, U as QODER_DATA_DIR_ENV, V as qoderCredentialIdentity, W as QODER_DATA_DIR_NAME, _ as modelInfoOf, a as QODER_HOST_HEARTBEAT_FILENAME, b as createQoderTransport, c as processStartTimeMs, d as writeHostHeartbeat, f as QODER_CONNECT_VERSION, g as kindFromQoderFailure, h as classifyUpstreamError, i as variantFor, j as QODER_GLOBAL_PROBE_PATH, k as QODER_AUTH_PATH, l as qoderHostHeartbeatPath, m as QoderUpstreamClient, n as GLOBAL_VARIANT, o as clearHostHeartbeat, p as KIND_STATUS, q as qoderStateDir, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, v as normalizeCredits, w as randomSentinel, x as getMachineId, y as validateApiKey, z as QoderCredentialStore } from "./variants-C8ezztjV.js";
+import { A as QODER_GLOBAL_AUTH_PATH, B as patTail, C as probeModel, D as FALLBACK_QODER_MODELS, E as qoderCatalogPath, F as QODER_STATUS_PATH, G as qoderMachineIdPath, H as qoderOwnAuthPath, I as QODER_AUTH_FILENAME, K as qoderPluginDataDir, L as QODER_PAT_ENV_CN, M as QODER_GLOBAL_STATUS_PATH, N as QODER_PROBE_PATH, O as QoderCatalog, P as QODER_SETTINGS_FACE_PATH, R as QODER_PAT_ENV_GLOBAL, S as PROBE_EFFORT_CANDIDATES, T as QoderCatalogStore, U as QODER_DATA_DIR_ENV, V as qoderCredentialIdentity, W as QODER_DATA_DIR_NAME, _ as modelInfoOf, a as QODER_HOST_HEARTBEAT_FILENAME, b as createQoderTransport, c as processStartTimeMs, d as writeHostHeartbeat, f as QODER_CONNECT_VERSION, g as kindFromQoderFailure, h as classifyUpstreamError, i as variantFor, j as QODER_GLOBAL_PROBE_PATH, k as QODER_AUTH_PATH, l as qoderHostHeartbeatPath, m as QoderUpstreamClient, n as GLOBAL_VARIANT, o as clearHostHeartbeat, p as KIND_STATUS, q as qoderStateDir, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, v as normalizeCredits, w as randomSentinel, x as getMachineId, y as validateApiKey, z as QoderCredentialStore } from "./variants-DuEgaUad.js";
 import z from "@deepseek-ai/schemastery";
 import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
 import { dirname, join, resolve } from "node:path";
@@ -628,7 +628,7 @@ function createQoderShim(options) {
 		req.on("close", () => controller.abort());
 		const result = await client.chatStream(raw, controller.signal);
 		if (!result.ok) {
-			writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, `${providerId} upstream ${result.kind} (http ${result.status}): ${result.message.slice(0, 400)}`);
+			writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, `${providerId} upstream ${result.kind} (http ${KIND_STATUS[result.kind]}): ${result.message.slice(0, 400)}`);
 			return;
 		}
 		res.writeHead(200, {
@@ -2113,9 +2113,16 @@ function jobTokenHintText(at) {
 * fresh token is not necessarily an authorization problem at all, and the real
 * reason travels in the failure message itself (see the SSE envelope body).
 * Claiming "quota" or "revoked" here would be a guess presented as a finding.
+*
+* It also must not point the reader at "the error above": the failed heal does
+* not always belong to a chat whose failure renders a card in this
+* conversation. A heal inside the session-title request — same transport,
+* same shared notice state — fails silently there, so the row used to send
+* users looking for an error card that does not exist. The row states only
+* what is known: the retry ran, it did not recover, the request failed.
 */
 function jobTokenRefreshFailedHintText(at) {
-	return `jobToken 已重换但仍被上游拒绝（${new Date(at).toLocaleTimeString("zh-CN", { hour12: false })}）— 自愈未恢复，请查看上方错误详情`;
+	return `jobToken 已重换但仍被上游拒绝（${new Date(at).toLocaleTimeString("zh-CN", { hour12: false })}）— 自愈未恢复，该请求已失败`;
 }
 /** Build one variant's stores, transport, and probe state. */
 function createVariantRuntime(ctx, config, variant, current, identityOf) {

package/lib/{variants-C8ezztjV.js → variants-DuEgaUad.js}

@@ -853,6 +853,125 @@ async function probeModel(options) {
 	};
 }
 //#endregion
+//#region src/qoder/errors.ts
+/**
+* DSH-compatible LLM error representation.
+*
+* @module dsh-provider-qoder/qoder/errors
+*/
+var QoderLlmError = class extends LlmError {
+	constructor(message, code = "UNKNOWN_ERROR", options) {
+		super(message, code, options);
+	}
+};
+/** The queue/limit markers Qoder puts in a rejection body (observed 2026-09-26). */
+const QUEUE_BODY_MARKERS = [
+	/"code"\s*:\s*"?10605"?/u,
+	/"isQueued"\s*:\s*true/u,
+	/"queueCount"/u,
+	/"serviceAvailable"\s*:\s*false/u
+];
+/**
+* Whether an upstream rejection body is Qoder's **queue/limit** answer rather
+* than an authorization failure.
+*
+* Qoder answers a saturated per-model queue (and a region whose service is not
+* available) with an HTTP 401/403 — or a 200 SSE envelope carrying
+* `statusCodeValue: 403` — whose body says `code: 10605`, `isQueued: true`,
+* `queueCount`, `retryAfterSeconds` and sometimes `serviceAvailable: false`.
+* Observed verbatim on 2026-09-26:
+*
+*     {"code":"10605","message":"{\"isQueued\":true,\"modelKey\":\"qfmodel\",
+*      \"queueCount\":8887,\"queueType\":\"p3\",\"retryAfterSeconds\":30,
+*      \"serviceAvailable\":true,\"waitTime\":274}"}
+*
+* Reading that status as AUTH made the self-heal exchange fresh job tokens
+* against a queue no token can jump, and — because the host retries
+* `RATE_LIMIT` but deliberately not `AUTH` — it also suppressed the automatic
+* retry that would have sailed through the 30-second window. The body is the
+* only place the distinction is visible, so it gets the last say over status.
+*/
+function qoderQueueSignal(body) {
+	if (body === void 0 || body === "") return void 0;
+	const text = body.replace(/\\/gu, "");
+	if (!QUEUE_BODY_MARKERS.some((marker) => marker.test(text))) return void 0;
+	const match = /"retryAfterSeconds"\s*:\s*(\d+)/u.exec(text);
+	return match === null ? {} : { retryAfterMs: Number(match[1]) * 1e3 };
+}
+/**
+* Replace status digits that read as authorization failure with a neutral
+* word, for messages the upstream used to announce a queue.
+*
+* `dsh-llm-pi-ai`'s error classifier is a text matcher whose first test is
+* `/\b(?:401|403)\b/` — ahead of its 429/rate-limit test — so any message
+* carrying those digits classifies AUTH no matter the structured code
+* travelling beside it. A queue answer quoting the upstream's 403 (in the
+* message prefix, the envelope status, or the body's `"code":"403"`) must not
+* reach that matcher as-is, or the user sees "API 密钥无效" for a throttle
+* (observed verbatim on 2026-09-26 23:30 and again at 23:40).
+*/
+function deauthorizeDigits(message) {
+	return message.replace(/\b(?:401|403)\b/gu, "throttled");
+}
+function qoderHttpError(message, response, body) {
+	const { status } = response;
+	const headerRetryAfterMs = retryAfterMs(response.headers?.get("retry-after") ?? null);
+	const requestId = qoderRequestId(response.headers);
+	const queue = status === 401 || status === 403 || status === 429 ? qoderQueueSignal(body ?? message) : void 0;
+	if (queue !== void 0) {
+		const retryAfterMs = queue.retryAfterMs ?? headerRetryAfterMs;
+		return new QoderLlmError(deauthorizeDigits(message), "RATE_LIMIT", {
+			status,
+			...retryAfterMs === void 0 ? {} : { providerRetryAfterMs: retryAfterMs },
+			...requestId === void 0 ? {} : { requestId }
+		});
+	}
+	return new QoderLlmError(message, status === 401 || status === 403 ? "AUTH" : status === 408 ? "TIMEOUT" : status === 429 ? "RATE_LIMIT" : status >= 500 && status <= 599 ? "SERVER" : status >= 400 && status <= 499 ? "INVALID_REQUEST" : "PROVIDER_ERROR", {
+		status,
+		...headerRetryAfterMs === void 0 ? {} : { providerRetryAfterMs: headerRetryAfterMs },
+		...requestId === void 0 ? {} : { requestId }
+	});
+}
+function qoderRequestId(headers) {
+	const normalized = (headers?.get("x-request-id") ?? headers?.get("request-id") ?? headers?.get("x-amzn-requestid"))?.trim();
+	return normalized ? ProviderRequestId(normalized) : void 0;
+}
+/**
+* Whether this failure is an upstream authorization rejection worth one
+* re-auth retry.
+*
+* The job token the transport signs requests with is cached in memory; an
+* upstream that invalidates it mid-lifetime (gateway rotation or a fault
+* window) answers HTTP 401/403 before any payload is produced. That state is
+* distinguishable from a genuinely revoked PAT only by trying a fresh
+* exchange, so callers clear their credential cache and retry once before
+* reporting `AUTH` to the user.
+*
+* A `RATE_LIMIT` code is never a re-auth candidate, **even when its status is
+* 401/403**: that is the upstream's queue answer (code 10605 / isQueued /
+* retryAfterSeconds in the body), which keeps the status but says the
+* credential was not the problem. Healing it exchanged job tokens against a
+* queue no token can jump (observed 2026-09-26) and, by consuming the retry,
+* suppressed the rate-limit retry that would have ridden out the window.
+*/
+function isQoderAuthRejection(error) {
+	if (!(error instanceof LlmError)) return false;
+	if (error.code === "RATE_LIMIT") return false;
+	return error.code === "AUTH" || error.failure.status === 401 || error.failure.status === 403;
+}
+function retryAfterMs(value, nowMs = Date.now()) {
+	const normalized = value?.trim();
+	if (!normalized) return void 0;
+	if (/^\d+$/u.test(normalized)) {
+		const delayMs = Number(normalized) * 1e3;
+		return Number.isFinite(delayMs) && delayMs > 0 ? delayMs : void 0;
+	}
+	const retryAt = Date.parse(normalized);
+	if (Number.isNaN(retryAt)) return void 0;
+	const delayMs = retryAt - nowMs;
+	return delayMs > 0 ? delayMs : void 0;
+}
+//#endregion
 //#region src/qoder/transport/endpoints.ts
 const qoderRegionEndpoints = {
 	global: {
@@ -915,59 +1034,6 @@ function getQoderClaimCampaignUrl(region = "global", campaignId) {
 	return `${openApiUrl}/sash/api/v1/me/campaigns/${encodeURIComponent(campaignId)}/claim`;
 }
 //#endregion
-//#region src/qoder/errors.ts
-/**
-* DSH-compatible LLM error representation.
-*
-* @module dsh-provider-qoder/qoder/errors
-*/
-var QoderLlmError = class extends LlmError {
-	constructor(message, code = "UNKNOWN_ERROR", options) {
-		super(message, code, options);
-	}
-};
-function qoderHttpError(message, response) {
-	const { status } = response;
-	const code = status === 401 || status === 403 ? "AUTH" : status === 408 ? "TIMEOUT" : status === 429 ? "RATE_LIMIT" : status >= 500 && status <= 599 ? "SERVER" : status >= 400 && status <= 499 ? "INVALID_REQUEST" : "PROVIDER_ERROR";
-	const providerRetryAfterMs = retryAfterMs(response.headers?.get("retry-after") ?? null);
-	const requestId = qoderRequestId(response.headers);
-	return new QoderLlmError(message, code, {
-		status,
-		...providerRetryAfterMs === void 0 ? {} : { providerRetryAfterMs },
-		...requestId === void 0 ? {} : { requestId }
-	});
-}
-function qoderRequestId(headers) {
-	const normalized = (headers?.get("x-request-id") ?? headers?.get("request-id") ?? headers?.get("x-amzn-requestid"))?.trim();
-	return normalized ? ProviderRequestId(normalized) : void 0;
-}
-/**
-* Whether this failure is an upstream authorization rejection worth one
-* re-auth retry.
-*
-* The job token the transport signs requests with is cached in memory; an
-* upstream that invalidates it mid-lifetime (gateway rotation or a fault
-* window) answers HTTP 401/403 before any payload is produced. That state is
-* distinguishable from a genuinely revoked PAT only by trying a fresh
-* exchange, so callers clear their credential cache and retry once before
-* reporting `AUTH` to the user.
-*/
-function isQoderAuthRejection(error) {
-	return error instanceof LlmError && (error.code === "AUTH" || error.failure.status === 401 || error.failure.status === 403);
-}
-function retryAfterMs(value, nowMs = Date.now()) {
-	const normalized = value?.trim();
-	if (!normalized) return void 0;
-	if (/^\d+$/u.test(normalized)) {
-		const delayMs = Number(normalized) * 1e3;
-		return Number.isFinite(delayMs) && delayMs > 0 ? delayMs : void 0;
-	}
-	const retryAt = Date.parse(normalized);
-	if (Number.isNaN(retryAt)) return void 0;
-	const delayMs = retryAt - nowMs;
-	return delayMs > 0 ? delayMs : void 0;
-}
-//#endregion
 //#region src/qoder/transport/machine-id.ts
 function defaultMachineIdPaths() {
 	return [join(homedir(), ".qoder", ".auth", "machine_id"), join(homedir(), ".dsh", "qoder", "machine_id")];
@@ -1294,7 +1360,7 @@ async function openApiJsonRequest(fetchImpl, options) {
 		const text = await readLimitedText(response, response.ok ? defaultMaxJsonBytes : defaultMaxErrorBytes, `Qoder ${options.operation} response`);
 		if (!response.ok) {
 			options.logger?.error?.(`[Qoder ${options.operation}] Request failed`, redactLogPayload(text));
-			throw qoderHttpError(`Failed to execute Qoder ${options.operation} with status ${response.status}.`, response);
+			throw qoderHttpError(`Failed to execute Qoder ${options.operation} with status ${response.status}.`, response, text);
 		}
 		let data;
 		try {
@@ -1332,6 +1398,14 @@ async function waitForFlight(promise, signal) {
 var QoderAuthService = class {
 	cache = /* @__PURE__ */ new Map();
 	inFlight = /* @__PURE__ */ new Map();
+	/**
+	* Self-heal exchanges in flight, keyed like the cache. Deliberately separate
+	* from {@link inFlight}: that flight may be aborted by a departing
+	* concurrent waiter (a quota poll, a catalog sweep) whose abort has nothing
+	* to do with the heal, so healers must not share its controller. Concurrent
+	* heals instead share this flight — see {@link exchangeFresh}.
+	*/
+	healFlights = /* @__PURE__ */ new Map();
 	fetchImpl;
 	timeoutMs;
 	resolveMachineId;
@@ -1354,10 +1428,31 @@ var QoderAuthService = class {
 	* (the quota poll, the catalog sweep), and a retry that joins it would then
 	* be cancelled by a path that has nothing to do with the chat. The result
 	* replaces the cache entry.
+	*
+	* Two heals for the same credential that overlap share one exchange instead
+	* of racing: each racer's `clear` deleted what the previous one had just
+	* cached, and its own `cache.set` overwrote the other's — so the cache could
+	* end up naming a token the losing request was no longer using, and with an
+	* upstream that retires the previous job token on a new exchange the racers
+	* also invalidated each other's credentials (one chat recovering while a
+	* concurrent one failed, exactly the 2026-09-26 22:36 observation). The
+	* shared exchange runs on its own timeout signal, so one healer's abort —
+	* its chat request went away — cannot cancel an exchange other healers, and
+	* the future `getCredentials` callers about to read the refreshed cache, are
+	* waiting on.
 	*/
 	async exchangeFresh(pat, signal) {
+		const cacheKey = `${this.region}:${opaqueCredentialKey(pat)}`;
+		const existing = this.healFlights.get(cacheKey);
+		if (existing !== void 0 && !existing.settled) return waitForFlight(existing.promise, signal);
 		this.clear(pat);
-		return await this.exchangeAndResolve(pat, signal ?? AbortSignal.timeout(this.timeoutMs));
+		const created = { settled: false };
+		created.promise = this.exchangeAndResolve(pat, AbortSignal.timeout(this.timeoutMs)).finally(() => {
+			created.settled = true;
+			if (this.healFlights.get(cacheKey) === created) this.healFlights.delete(cacheKey);
+		});
+		this.healFlights.set(cacheKey, created);
+		return waitForFlight(created.promise, signal);
 	}
 	async getCredentials(pat, signal) {
 		if (!pat || typeof pat !== "string") throw new QoderLlmError("Qoder Personal Access Token is missing or invalid. Configure Qoder in the Qoder settings page.", "MISSING_CREDENTIAL");
@@ -2793,7 +2888,7 @@ function parseEnvelope(rawData) {
 	if (envelope.statusCodeValue !== void 0 && (!Number.isInteger(envelope.statusCodeValue) || envelope.statusCodeValue < 100 || envelope.statusCodeValue > 599)) throw malformed("Qoder SSE envelope has an invalid status code.");
 	if (envelope.statusCodeValue !== void 0 && envelope.statusCodeValue !== 200) {
 		const status = envelope.statusCodeValue;
-		throw qoderHttpError(envelope.body ? `Qoder service returned upstream error status ${status}: ${envelope.body}` : `Qoder service returned upstream error status ${status}.`, { status });
+		throw qoderHttpError(envelope.body ? `Qoder service returned upstream error status ${status}: ${envelope.body}` : `Qoder service returned upstream error status ${status}.`, { status }, envelope.body);
 	}
 	if (envelope.body !== void 0 && typeof envelope.body !== "string") throw malformed("Qoder SSE envelope has an invalid model body.");
 	return envelope;
@@ -3128,7 +3223,15 @@ async function* streamQoderChat(options, model, credentials, messages, dependenc
 			...reqId === void 0 ? {} : { requestId: reqId }
 		});
 		resetIdleTimer();
-		if (!response.ok) throw qoderHttpError(`Qoder upstream service returned HTTP ${response.status}.`, response);
+		if (!response.ok) {
+			let errorBody;
+			try {
+				errorBody = await readLimitedText(response, defaultMaxErrorBytes, "Qoder chat error response");
+			} catch {
+				errorBody = void 0;
+			}
+			throw qoderHttpError(`Qoder upstream service returned HTTP ${response.status}.`, response, errorBody);
+		}
 		if (!response.body) throw new QoderLlmError("Qoder response contains no readable body stream.", "EMPTY_RESPONSE");
 		let firstChunkDurationMs;
 		let tokenUsage;
@@ -3416,9 +3519,11 @@ var DefaultQoderTransport = class {
 			this.logger?.warn?.("[Qoder Stream] Chat rejected as unauthorized; exchanging a fresh job token and retrying once", { status: error.failure.status });
 		}
 		let lastRejection;
+		let noticeAt;
 		for (let round = 0; round < 2; round++) {
 			const refreshed = await this.auth.exchangeFresh(pat, options.signal);
 			this.pendingRefreshAt = Date.now();
+			noticeAt = this.pendingRefreshAt;
 			try {
 				yield* this.streamChat(options, model, refreshed, messages, () => {
 					this.onChatAccepted();
@@ -3442,7 +3547,7 @@ var DefaultQoderTransport = class {
 				}
 			}
 		}
-		this.discardPendingRefreshNotice();
+		if (this.pendingRefreshAt === noticeAt) this.discardPendingRefreshNotice();
 		if (!this.refreshFailureAnnounced) {
 			this.refreshFailureAnnounced = true;
 			this.logger?.warn?.("[Qoder Stream] Job token refresh did not recover the chat; the upstream still rejects it", { status: lastRejection instanceof LlmError ? lastRejection.failure.status : void 0 });
@@ -3518,6 +3623,7 @@ function normalizeCredits(credits) {
 */
 function classifyUpstreamError(status, body) {
 	const lower = body.toLowerCase();
+	if (qoderQueueSignal(body) !== void 0) return "soft_rate";
 	if (status === 402) return "quota_exceeded";
 	if (status === 429) return "soft_rate";
 	if (status === 401 || status === 403) return "auth";
@@ -3551,11 +3657,18 @@ function classifyUpstreamError(status, body) {
 * The transport's taxonomy (`src/qoder/errors.ts`) codes an HTTP 402 as
 * `INVALID_REQUEST`, so the status gets the last say for the quota and auth
 * families before the code-based defaults apply.
+*
+* `RATE_LIMIT` is tested before the auth family because the upstream's queue
+* answer keeps its 401/403 status: a saturated qfmodel queue reads
+* `code: RATE_LIMIT, status: 403` (body carries 10605/isQueued/
+* retryAfterSeconds), and letting the status arm claim it reported a dead
+* credential — which the host never retries — instead of a throttle it would.
 */
 function kindFromQoderFailure(failure) {
 	if (failure.code === "MISSING_CREDENTIAL") return "missing_credential";
+	if (failure.code === "RATE_LIMIT") return "soft_rate";
 	if (failure.code === "AUTH" || failure.status === 401 || failure.status === 403) return "auth";
-	if (failure.code === "RATE_LIMIT" || failure.status === 429) return "soft_rate";
+	if (failure.status === 429) return "soft_rate";
 	if (failure.code === "QUOTA" || failure.status === 402) return "quota_exceeded";
 	if (failure.code.startsWith("INVALID_") || failure.code.startsWith("UNSUPPORTED_") || failure.code === "ATTACHMENT") return "client";
 	return "server";
@@ -4275,7 +4388,7 @@ const DEFAULT_MAX_TOKENS = 32768;
 const DEFAULT_CONTEXT_WINDOW = 18e4;
 //#endregion
 //#region src/version.ts
-const QODER_CONNECT_VERSION = "0.1.9";
+const QODER_CONNECT_VERSION = "0.2.0";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Qoder Connector",
+    "description": "Connect Qoder CLI's model service: per-region model toggles, context windows, quota lookup, and daily check-in."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Qoder 连接器",
+    "description": "接入 Qoder CLI 的模型服务：双区域模型开关、上下文窗口、额度查询与每日签到。"
+  }
+}

package/package.json

@@ -1,120 +1,123 @@
-{
-  "name": "dsh-qoder-connect",
-  "displayName": "DSH Qoder Connect",
-  "description": "将 Qoder（国内版 / 国际版）的模型接入 DeepSeek Harness — bring Qoder (CN & international) models into DeepSeek Harness.",
-  "version": "0.1.9",
-  "author": "corrinehu",
-  "keywords": [
-    "dsh-plugin",
-    "deepseek-harness",
-    "deepseek",
-    "qoder",
-    "model-provider"
-  ],
-  "type": "module",
-  "engines": {
-    "dsh": ">=0.1.5-rc.2",
-    "node": "^22.19.0 || >=24.0.0"
-  },
-  "main": "lib/index.js",
-  "types": "lib/index.d.ts",
-  "bin": {
-    "dsh-qoder-connect": "lib/bin.js"
-  },
-  "scripts": {
-    "prepack": "npm run build",
-    "build": "tsdown",
-    "test": "node -r ./tests/sandbox-shim.cjs ./node_modules/vitest/vitest.mjs run",
-    "test:qoder": "node --test --test-isolation=none --experimental-strip-types tests/qoder/*.test.ts",
-    "typecheck": "tsc -p tsconfig.json && tsc -p tsconfig.client.json",
-    "check": "pnpm run typecheck && pnpm run test && pnpm run test:qoder && pnpm run build"
-  },
-  "exports": {
-    ".": {
-      "types": "./lib/index.d.ts",
-      "default": "./lib/index.js"
-    },
-    "./client": "./lib/client.js",
-    "./cordis.patch.yml": "./cordis.patch.yml",
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "lib",
-    "assets",
-    "cordis.patch.yml",
-    "README.md",
-    "README.en.md",
-    "LICENSE"
-  ],
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/masknull/dsh-qoder-connect.git"
-  },
-  "homepage": "https://github.com/masknull/dsh-qoder-connect#readme",
-  "bugs": "https://github.com/masknull/dsh-qoder-connect/issues",
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "inject": [
-        "@deepseek-ai/dsh-api-remotes",
-        "@deepseek-ai/dsh-api-session-controller",
-        "@deepseek-ai/dsh-client-ui-renderer",
-        "@deepseek-ai/dsh-client-ui-settings-plugins",
-        "@deepseek-ai/dsh-client-ui-settings",
-        "@deepseek-ai/dsh-client-ui-conversation",
-        "@deepseek-ai/dsh-client-ui-model-selection",
-        "@deepseek-ai/dsh-client-ui-sidebar",
-        "@deepseek-ai/dsh-client-locale"
-      ],
-      "platform": "web"
-    }
-  },
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-atomic-write": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-home-paths": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
-    "@deepseek-ai/schemastery": "^3.18.2",
-    "@earendil-works/pi-ai": "^0.85.1",
-    "react": "^18.2.0"
-  },
-  "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-atomic-write": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-model-selection": "0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-sidebar": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-credentials": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-home-paths": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.5-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
-    "@deepseek-ai/schemastery": "^3.18.2",
-    "@earendil-works/pi-ai": "^0.85.1",
-    "@types/node": "^22.20.0",
-    "@types/react": "~18.3.1",
-    "@types/react-test-renderer": "^18.3.1",
-    "react": "^18.2.0",
-    "react-test-renderer": "18.3.1",
-    "tsdown": "^0.22.2",
-    "typescript": "^5.9.3",
-    "vitest": "^4.1.8"
-  },
-  "dependencies": {
-    "js-yaml": "^4.1.0"
-  }
-}
+{
+  "name": "dsh-qoder-connect",
+  "displayName": "DSH Qoder Connect",
+  "description": "将 Qoder（国内版 / 国际版）的模型接入 DeepSeek Harness — bring Qoder (CN & international) models into DeepSeek Harness.",
+  "version": "0.2.0",
+  "author": "corrinehu",
+  "keywords": [
+    "dsh-plugin",
+    "deepseek-harness",
+    "deepseek",
+    "qoder",
+    "model-provider"
+  ],
+  "type": "module",
+  "engines": {
+    "dsh": ">=0.1.5-rc.2",
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "bin": {
+    "dsh-qoder-connect": "lib/bin.js"
+  },
+  "scripts": {
+    "prepack": "npm run build",
+    "build": "tsdown",
+    "test": "node -r ./tests/sandbox-shim.cjs ./node_modules/vitest/vitest.mjs run",
+    "test:qoder": "node --test --test-isolation=none --experimental-strip-types tests/qoder/*.test.ts",
+    "typecheck": "tsc -p tsconfig.json && tsc -p tsconfig.client.json",
+    "check": "pnpm run typecheck && pnpm run test && pnpm run test:qoder && pnpm run build"
+  },
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": "./lib/client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
+  },
+  "files": [
+    "lib",
+    "assets",
+    "cordis.patch.yml",
+    "README.md",
+    "README.en.md",
+    "LICENSE",
+    "locale/*.json"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/masknull/dsh-qoder-connect.git"
+  },
+  "homepage": "https://github.com/masknull/dsh-qoder-connect#readme",
+  "bugs": "https://github.com/masknull/dsh-qoder-connect/issues",
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-api-remotes",
+        "@deepseek-ai/dsh-api-session-controller",
+        "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-client-ui-settings-plugins",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-conversation",
+        "@deepseek-ai/dsh-client-ui-model-selection",
+        "@deepseek-ai/dsh-client-ui-sidebar",
+        "@deepseek-ai/dsh-client-locale"
+      ],
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-atomic-write": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-home-paths": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@earendil-works/pi-ai": "^0.85.1",
+    "react": "^18.2.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-atomic-write": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-attachment": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-model-selection": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-sidebar": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-credentials": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-home-paths": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.5-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.5-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@earendil-works/pi-ai": "^0.85.1",
+    "@types/node": "^22.20.0",
+    "@types/react": "~18.3.1",
+    "@types/react-test-renderer": "^18.3.1",
+    "react": "^18.2.0",
+    "react-test-renderer": "18.3.1",
+    "tsdown": "^0.22.2",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.8"
+  },
+  "dependencies": {
+    "js-yaml": "^4.1.0"
+  },
+  "icon": "./assets/icon.svg"
+}