dsh-qoder-connect 0.2.1 → 0.2.3-alpha.1

package/lib/index.d.ts

@@ -773,8 +773,15 @@ interface QoderTransport {
  */
 type QoderEffort = 'low' | 'medium' | 'high' | 'xhigh' | 'max';
 /** How the shim should present an upstream failure to its OpenAI client. */
-type UpstreamErrorKind = 'missing_credential' | 'auth' | 'soft_rate' | 'quota_exceeded' | 'server' | 'client';
-/** HTTP status the shim answers each failure kind with. */
+type UpstreamErrorKind = 'missing_credential' | 'auth' | 'soft_rate' | 'quota_exceeded' | 'timeout' | 'server' | 'client';
+/**
+ * HTTP status the shim answers each failure kind with.
+ *
+ * `timeout` is 408 and deliberately not 504: the harness's pi-ai classifier tests
+ * `/\b5\d\d\b/` *before* its `timeout` test, so a 5xx status would be read as
+ * SERVER no matter what the message says. 408 is also the honest answer for a
+ * request the upstream never completed.
+ */
 declare const KIND_STATUS: Readonly<Record<UpstreamErrorKind, number>>;
 /** The chat-completions answer: a streaming `Response`, or a classified failure. */
 type QoderChatResult = {
@@ -840,6 +847,12 @@ declare function classifyUpstreamError(status: number, body: string): UpstreamEr
  * `code: RATE_LIMIT, status: 403` (body carries 10605/isQueued/
  * retryAfterSeconds), and letting the status arm claim it reported a dead
  * credential — which the host never retries — instead of a throttle it would.
+ *
+ * `QUOTA` and the request family are tested before the auth family for the same
+ * reason: both keep the upstream's 401/403 (see `qoderHttpError`), and the status
+ * arm would call a spent daily window or a refused request a credential
+ * rejection. `status === 402` is tested before the request arm so that a 402 the
+ * transport coded `INVALID_REQUEST` (its 4xx fallback) still reads as a quota.
  */
 declare function kindFromQoderFailure(failure: {
   code: string;

package/lib/index.js

@@ -1,4 +1,4 @@
-import { A as QODER_GLOBAL_AUTH_PATH, B as patTail, C as probeModel, D as FALLBACK_QODER_MODELS, E as qoderCatalogPath, F as QODER_STATUS_PATH, G as qoderMachineIdPath, H as qoderOwnAuthPath, I as QODER_AUTH_FILENAME, K as qoderPluginDataDir, L as QODER_PAT_ENV_CN, M as QODER_GLOBAL_STATUS_PATH, N as QODER_PROBE_PATH, O as QoderCatalog, P as QODER_SETTINGS_FACE_PATH, R as QODER_PAT_ENV_GLOBAL, S as PROBE_EFFORT_CANDIDATES, T as QoderCatalogStore, U as QODER_DATA_DIR_ENV, V as qoderCredentialIdentity, W as QODER_DATA_DIR_NAME, _ as modelInfoOf, a as QODER_HOST_HEARTBEAT_FILENAME, b as createQoderTransport, c as processStartTimeMs, d as writeHostHeartbeat, f as QODER_CONNECT_VERSION, g as kindFromQoderFailure, h as classifyUpstreamError, i as variantFor, j as QODER_GLOBAL_PROBE_PATH, k as QODER_AUTH_PATH, l as qoderHostHeartbeatPath, m as QoderUpstreamClient, n as GLOBAL_VARIANT, o as clearHostHeartbeat, p as KIND_STATUS, q as qoderStateDir, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, v as normalizeCredits, w as randomSentinel, x as getMachineId, y as validateApiKey, z as QoderCredentialStore } from "./variants-CjWW4lVI.js";
+import { A as QODER_GLOBAL_AUTH_PATH, B as patTail, C as probeModel, D as FALLBACK_QODER_MODELS, E as qoderCatalogPath, F as QODER_STATUS_PATH, G as qoderMachineIdPath, H as qoderOwnAuthPath, I as QODER_AUTH_FILENAME, K as qoderPluginDataDir, L as QODER_PAT_ENV_CN, M as QODER_GLOBAL_STATUS_PATH, N as QODER_PROBE_PATH, O as QoderCatalog, P as QODER_SETTINGS_FACE_PATH, R as QODER_PAT_ENV_GLOBAL, S as PROBE_EFFORT_CANDIDATES, T as QoderCatalogStore, U as QODER_DATA_DIR_ENV, V as qoderCredentialIdentity, W as QODER_DATA_DIR_NAME, _ as modelInfoOf, a as QODER_HOST_HEARTBEAT_FILENAME, b as createQoderTransport, c as processStartTimeMs, d as writeHostHeartbeat, f as QODER_CONNECT_VERSION, g as kindFromQoderFailure, h as classifyUpstreamError, i as variantFor, j as QODER_GLOBAL_PROBE_PATH, k as QODER_AUTH_PATH, l as qoderHostHeartbeatPath, m as QoderUpstreamClient, n as GLOBAL_VARIANT, o as clearHostHeartbeat, p as KIND_STATUS, q as qoderStateDir, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, v as normalizeCredits, w as randomSentinel, x as getMachineId, y as validateApiKey, z as QoderCredentialStore } from "./variants-CU8HDUwi.js";
 import z from "@deepseek-ai/schemastery";
 import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
 import { dirname, join, resolve } from "node:path";

package/lib/{variants-CjWW4lVI.js → variants-CU8HDUwi.js}

@@ -855,6 +855,94 @@ async function probeModel(options) {
 	};
 }
 //#endregion
+//#region src/qoder/codes.ts
+const table = (family, rows) => rows.map(([code, name]) => ({
+	code,
+	name,
+	family
+}));
+/**
+* The documented code table.
+*
+* Source: Qoder's *Errors and error codes* reference
+* (https://docs.qoder.com/cli/sdk/errors), "Result error codes" — the same
+* reference also states the rule this module exists to serve: "Authentication,
+* quota, policy, input, and configuration errors require a change before
+* retrying."
+*
+* Scope note on evidence. That page documents the Agent SDK / qodercli surface,
+* not the loopback HTTP endpoint this plugin talks to. Two of its codes are
+* confirmed on our own path, with matching semantics:
+*
+* - `10605` — observed verbatim: `{"code":"10605","message":"{\"isQueued\":true,
+*   ...\"retryAfterSeconds\":30}"}` (see `qoderQueueSignal`).
+* - `110` — reported in dsh-qoder-connect#10 and reproduced by injecting the
+*   reported body through this transport: `{"code":"110","message":"Billing
+*   daily count exceeded"}`.
+*
+* The rest are carried as the upstream's documented vocabulary. They are read
+* only to identify the family; an undocumented code is never guessed at, so a
+* body this table does not recognize keeps whatever routing the HTTP status
+* already gives it.
+*/
+const QODER_RESULT_CODES = Object.freeze([
+	...table("auth", [["105", "Login or access token expired"]]),
+	...table("quota", [
+		["110", "Daily usage limit reached"],
+		["113", "Usage quota exhausted"],
+		["114", "Free-trial account limit reached"],
+		["115", "Free-user quota reached"],
+		["116", "Team administrator Credits exhausted"],
+		["117", "Team member Credits exhausted"],
+		["118", "Personal Credits exhausted"],
+		["119", "Free usage limit for the selected model reached"],
+		["122", "Billing-group Credits limit reached"]
+	]),
+	...table("request", [
+		["406", "Request blocked because of sensitive content or model refusal"],
+		["416", "Requested range or request shape is not satisfiable"],
+		["430", "Requested capability is not supported"],
+		["47902", "Maximum Agent turns reached"],
+		["48716", "A Hook blocked Agent execution"],
+		["80411", "Input content is too long"],
+		["80412", "Too many images or documents"]
+	]),
+	...table("runtime", [
+		["500", "Request or network failure"],
+		["10408", "Request timed out"],
+		["10500", "Model service internal error"],
+		["10605", "Model request is queued"]
+	])
+]);
+const byCode = new Map(QODER_RESULT_CODES.map((entry) => [entry.code, entry]));
+/**
+* The documented result code a rejection body names, if it names one.
+*
+* Qoder nests: a queue answer arrives as `{"code":"10605","message":"{\"isQueued\":
+* true,...}"}`, so the inner payload is escaped JSON and a marker can sit at any
+* depth. Dropping the ASCII backslashes keeps every layer readable at once — the
+* same trick `qoderQueueSignal` uses, and for the same reason; no marker this
+* module looks for depends on a backslash.
+*
+* Only a *quoted* `code` key counts. Qoder also mirrors raw HTTP statuses into a
+* `code` field (`"code":"429"`, `"code":403`), and a message that merely mentions
+* a code in prose must not be read as one; both stay unrecognized because neither
+* names a documented result code.
+*
+* @param body - the upstream error body, or the formatted message when the body
+*   was only embedded in it.
+* @returns the matching table entry, or `undefined` when the body names no
+*   documented code — never a guess.
+*/
+function qoderResultCode(body) {
+	if (body === void 0 || body === "") return void 0;
+	const text = body.replace(/\\/gu, "");
+	for (const match of text.matchAll(/"(?:error_)?code"\s*:\s*"?(\d+)"?/gu)) {
+		const entry = byCode.get(match[1]);
+		if (entry !== void 0) return entry;
+	}
+}
+//#endregion
 //#region src/qoder/errors.ts
 /**
 * DSH-compatible LLM error representation.
@@ -902,18 +990,25 @@ function qoderQueueSignal(body) {
 }
 /**
 * Replace status digits that read as authorization failure with a neutral
-* word, for messages the upstream used to announce a queue.
+* word, for messages the upstream used to announce something other than a dead
+* credential.
 *
 * `dsh-llm-pi-ai`'s error classifier is a text matcher whose first test is
-* `/\b(?:401|403)\b/` — ahead of its 429/rate-limit test — so any message
-* carrying those digits classifies AUTH no matter the structured code
-* travelling beside it. A queue answer quoting the upstream's 403 (in the
-* message prefix, the envelope status, or the body's `"code":"403"`) must not
-* reach that matcher as-is, or the user sees "API 密钥无效" for a throttle
-* (observed verbatim on 2026-09-26 23:30 and again at 23:40).
+* `/\b(?:401|403)\b/` — ahead of its 429/rate-limit test and ahead of every
+* quota test — so any message carrying those digits classifies AUTH no matter
+* the structured code travelling beside it. An answer that is really a
+* throttle or an exhausted quota must not reach that matcher as-is, or the user
+* sees "API 密钥无效" for a limit that clears on its own (observed verbatim on
+* 2026-09-26 23:30 and again at 23:40 for the queue; reproduced 2026-10-08 for
+* the daily counter reported in #10).
+*
+* @param message - the message to neutralize.
+* @param replacement - the neutral word substituted for the digits. `throttled`
+*   for the queue answer, whose wording users and tests already know; `limited`
+*   for a quota answer, which is not a throttle.
 */
-function deauthorizeDigits(message) {
-	return message.replace(/\b(?:401|403)\b/gu, "throttled");
+function deauthorizeDigits(message, replacement = "throttled") {
+	return message.replace(/\b(?:401|403)\b/gu, replacement);
 }
 function qoderHttpError(message, response, body) {
 	const { status } = response;
@@ -928,6 +1023,15 @@ function qoderHttpError(message, response, body) {
 			...requestId === void 0 ? {} : { requestId }
 		});
 	}
+	const documented = qoderResultCode(body ?? message);
+	if (documented?.family === "quota") return new QoderLlmError(deauthorizeDigits(message, "limited"), "QUOTA", {
+		status,
+		...requestId === void 0 ? {} : { requestId }
+	});
+	if (documented?.family === "request" && (status === 401 || status === 403)) return new QoderLlmError(deauthorizeDigits(message, "rejected"), "INVALID_REQUEST", {
+		status,
+		...requestId === void 0 ? {} : { requestId }
+	});
 	return new QoderLlmError(message, status === 401 || status === 403 ? "AUTH" : status === 408 ? "TIMEOUT" : status === 429 ? "RATE_LIMIT" : status >= 500 && status <= 599 ? "SERVER" : status >= 400 && status <= 499 ? "INVALID_REQUEST" : "PROVIDER_ERROR", {
 		status,
 		...headerRetryAfterMs === void 0 ? {} : { providerRetryAfterMs: headerRetryAfterMs },
@@ -939,6 +1043,24 @@ function qoderRequestId(headers) {
 	return normalized ? ProviderRequestId(normalized) : void 0;
 }
 /**
+* Codes that keep the upstream's 401/403 status without being credential
+* rejections, so the status arm of {@link isQoderAuthRejection} must not claim
+* them.
+*
+* `RATE_LIMIT` is the queue answer (code 10605 / isQueued / retryAfterSeconds)
+* and `QUOTA`/`ACCOUNT_QUOTA` is a spent usage window (#10, e.g. code 110 with
+* `Billing daily count exceeded`). Both arrive as 401/403 and neither is fixed
+* by a fresh job token — the queue cannot be jumped and a quota cannot be
+* exchanged away — so healing either one spends an exchange and suppresses the
+* retry that would actually help (the queue) or reports a failure notice for a
+* condition that clears on its own (the quota).
+*/
+const NON_AUTH_STATUS_CODES = [
+	"RATE_LIMIT",
+	"QUOTA",
+	"ACCOUNT_QUOTA"
+];
+/**
 * Whether this failure is an upstream authorization rejection worth one
 * re-auth retry.
 *
@@ -949,16 +1071,16 @@ function qoderRequestId(headers) {
 * exchange, so callers clear their credential cache and retry once before
 * reporting `AUTH` to the user.
 *
-* A `RATE_LIMIT` code is never a re-auth candidate, **even when its status is
-* 401/403**: that is the upstream's queue answer (code 10605 / isQueued /
-* retryAfterSeconds in the body), which keeps the status but says the
-* credential was not the problem. Healing it exchanged job tokens against a
-* queue no token can jump (observed 2026-09-26) and, by consuming the retry,
-* suppressed the rate-limit retry that would have ridden out the window.
+* A code in {@link NON_AUTH_STATUS_CODES} is never a re-auth candidate, **even
+* when its status is 401/403**: those answers keep the status while saying the
+* credential was not the problem. Healing one exchanged job tokens against a
+* condition no token can change (observed 2026-09-26 for the queue, and again
+* 2026-10-08 for the daily counter), and by consuming the retry it suppressed
+* the rate-limit retry that would have ridden out the window.
 */
 function isQoderAuthRejection(error) {
 	if (!(error instanceof LlmError)) return false;
-	if (error.code === "RATE_LIMIT") return false;
+	if (NON_AUTH_STATUS_CODES.includes(error.code)) return false;
 	return error.code === "AUTH" || error.failure.status === 401 || error.failure.status === 403;
 }
 function retryAfterMs(value, nowMs = Date.now()) {
@@ -3650,12 +3772,20 @@ function createQoderTransport(options) {
 *
 * @module dsh-qoder-connect/upstream
 */
-/** HTTP status the shim answers each failure kind with. */
+/**
+* HTTP status the shim answers each failure kind with.
+*
+* `timeout` is 408 and deliberately not 504: the harness's pi-ai classifier tests
+* `/\b5\d\d\b/` *before* its `timeout` test, so a 5xx status would be read as
+* SERVER no matter what the message says. 408 is also the honest answer for a
+* request the upstream never completed.
+*/
 const KIND_STATUS = {
 	missing_credential: 401,
 	auth: 401,
 	soft_rate: 429,
 	quota_exceeded: 402,
+	timeout: 408,
 	server: 502,
 	client: 400
 };
@@ -3681,6 +3811,9 @@ function normalizeCredits(credits) {
 function classifyUpstreamError(status, body) {
 	const lower = body.toLowerCase();
 	if (qoderQueueSignal(body) !== void 0) return "soft_rate";
+	const documented = qoderResultCode(body);
+	if (documented?.family === "quota") return "quota_exceeded";
+	if (documented?.family === "request") return "client";
 	if (status === 402) return "quota_exceeded";
 	if (status === 429) return "soft_rate";
 	if (status === 401 || status === 403) return "auth";
@@ -3705,6 +3838,7 @@ function classifyUpstreamError(status, body) {
 		"forbidden",
 		"not authenticated"
 	]) if (lower.includes(marker)) return "auth";
+	if (status === 408) return "timeout";
 	if (status === 0 || status >= 500) return "server";
 	return "client";
 }
@@ -3720,14 +3854,22 @@ function classifyUpstreamError(status, body) {
 * `code: RATE_LIMIT, status: 403` (body carries 10605/isQueued/
 * retryAfterSeconds), and letting the status arm claim it reported a dead
 * credential — which the host never retries — instead of a throttle it would.
+*
+* `QUOTA` and the request family are tested before the auth family for the same
+* reason: both keep the upstream's 401/403 (see `qoderHttpError`), and the status
+* arm would call a spent daily window or a refused request a credential
+* rejection. `status === 402` is tested before the request arm so that a 402 the
+* transport coded `INVALID_REQUEST` (its 4xx fallback) still reads as a quota.
 */
 function kindFromQoderFailure(failure) {
 	if (failure.code === "MISSING_CREDENTIAL") return "missing_credential";
 	if (failure.code === "RATE_LIMIT") return "soft_rate";
+	if (failure.code === "QUOTA" || failure.code === "ACCOUNT_QUOTA") return "quota_exceeded";
+	if (failure.status === 402) return "quota_exceeded";
+	if (failure.code.startsWith("INVALID_") || failure.code.startsWith("UNSUPPORTED_") || failure.code === "ATTACHMENT") return "client";
 	if (failure.code === "AUTH" || failure.status === 401 || failure.status === 403) return "auth";
 	if (failure.status === 429) return "soft_rate";
-	if (failure.code === "QUOTA" || failure.status === 402) return "quota_exceeded";
-	if (failure.code.startsWith("INVALID_") || failure.code.startsWith("UNSUPPORTED_") || failure.code === "ATTACHMENT") return "client";
+	if (failure.code === "TIMEOUT") return "timeout";
 	return "server";
 }
 /** Whether a Personal Access Token works against one region's endpoints. */
@@ -4445,7 +4587,7 @@ const DEFAULT_MAX_TOKENS = 32768;
 const DEFAULT_CONTEXT_WINDOW = 18e4;
 //#endregion
 //#region src/version.ts
-const QODER_CONNECT_VERSION = "0.2.1";
+const QODER_CONNECT_VERSION = "0.2.3-alpha.1";
 //#endregion
 //#region src/host-heartbeat.ts
 /**

package/package.json

@@ -1,120 +1,120 @@
-{
-  "name": "dsh-qoder-connect",
-  "displayName": "DSH Qoder Connect",
-  "description": "将 Qoder（国内版 / 国际版）的模型接入 DeepSeek Harness — bring Qoder (CN & international) models into DeepSeek Harness.",
-  "version": "0.2.1",
-  "author": "corrinehu",
-  "keywords": [
-    "dsh-plugin",
-    "deepseek-harness",
-    "deepseek",
-    "qoder",
-    "model-provider"
-  ],
-  "type": "module",
-  "engines": {
-    "dsh": ">=0.1.7-rc.1",
-    "node": "^22.19.0 || >=24.0.0"
-  },
-  "main": "lib/index.js",
-  "types": "lib/index.d.ts",
-  "bin": {
-    "dsh-qoder-connect": "lib/bin.js"
-  },
-  "scripts": {
-    "prepack": "npm run build",
-    "build": "tsdown",
-    "test": "node -r ./tests/sandbox-shim.cjs ./node_modules/vitest/vitest.mjs run",
-    "test:qoder": "node --test --test-isolation=none --experimental-strip-types tests/qoder/*.test.ts",
-    "typecheck": "tsc -p tsconfig.json && tsc -p tsconfig.client.json",
-    "check": "pnpm run typecheck && pnpm run test && pnpm run test:qoder && pnpm run build"
-  },
-  "exports": {
-    ".": {
-      "types": "./lib/index.d.ts",
-      "default": "./lib/index.js"
-    },
-    "./client": "./lib/client.js",
-    "./cordis.patch.yml": "./cordis.patch.yml",
-    "./package.json": "./package.json",
-    "./locale/*.json": "./locale/*.json"
-  },
-  "files": [
-    "lib",
-    "assets",
-    "cordis.patch.yml",
-    "README.md",
-    "README.en.md",
-    "LICENSE",
-    "locale/*.json"
-  ],
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/masknull/dsh-qoder-connect.git"
-  },
-  "homepage": "https://github.com/masknull/dsh-qoder-connect#readme",
-  "bugs": "https://github.com/masknull/dsh-qoder-connect/issues",
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "inject": [
-        "@deepseek-ai/dsh-api-remotes",
-        "@deepseek-ai/dsh-api-session-controller",
-        "@deepseek-ai/dsh-client-ui-renderer",
-        "@deepseek-ai/dsh-client-ui-settings-plugins",
-        "@deepseek-ai/dsh-client-ui-settings",
-        "@deepseek-ai/dsh-client-ui-conversation",
-        "@deepseek-ai/dsh-client-ui-model-selection",
-        "@deepseek-ai/dsh-client-ui-sidebar",
-        "@deepseek-ai/dsh-client-locale"
-      ],
-      "platform": "web"
-    }
-  },
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-atomic-write": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-attachment": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-home-paths": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-llm": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-llm-pi-ai": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-settings": ">=0.1.7-rc.1",
-    "@deepseek-ai/schemastery": "^3.18.2",
-    "@earendil-works/pi-ai": "^0.85.1",
-    "react": "^18.2.0"
-  },
-  "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-atomic-write": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-attachment": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-client-locale": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-client-ui-model-selection": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-client-ui-sidebar": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-credentials": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-home-paths": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-llm": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-llm-pi-ai": ">=0.1.7-rc.1",
-    "@deepseek-ai/dsh-settings": ">=0.1.7-rc.1",
-    "@deepseek-ai/schemastery": "^3.18.2",
-    "@earendil-works/pi-ai": "^0.85.1",
-    "@types/node": "^22.20.0",
-    "@types/react": "~18.3.1",
-    "@types/react-test-renderer": "^18.3.1",
-    "react": "^18.2.0",
-    "react-test-renderer": "18.3.1",
-    "tsdown": "^0.22.2",
-    "typescript": "^5.9.3",
-    "vitest": "^4.1.8"
-  },
-  "icon": "./assets/icon.svg"
-}
+{
+  "name": "dsh-qoder-connect",
+  "displayName": "DSH Qoder Connect",
+  "description": "将 Qoder（国内版 / 国际版）的模型接入 DeepSeek Harness — bring Qoder (CN & international) models into DeepSeek Harness.",
+  "version": "0.2.3-alpha.1",
+  "author": "corrinehu",
+  "keywords": [
+    "dsh-plugin",
+    "deepseek-harness",
+    "deepseek",
+    "qoder",
+    "model-provider"
+  ],
+  "type": "module",
+  "engines": {
+    "dsh": ">=0.1.7-rc.1",
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "bin": {
+    "dsh-qoder-connect": "lib/bin.js"
+  },
+  "scripts": {
+    "prepack": "npm run build",
+    "build": "tsdown",
+    "test": "node -r ./tests/sandbox-shim.cjs ./node_modules/vitest/vitest.mjs run",
+    "test:qoder": "node --test --test-isolation=none --experimental-strip-types tests/qoder/*.test.ts",
+    "typecheck": "tsc -p tsconfig.json && tsc -p tsconfig.client.json",
+    "check": "pnpm run typecheck && pnpm run test && pnpm run test:qoder && pnpm run build"
+  },
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": "./lib/client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
+  },
+  "files": [
+    "lib",
+    "assets",
+    "cordis.patch.yml",
+    "README.md",
+    "README.en.md",
+    "LICENSE",
+    "locale/*.json"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/masknull/dsh-qoder-connect.git"
+  },
+  "homepage": "https://github.com/masknull/dsh-qoder-connect#readme",
+  "bugs": "https://github.com/masknull/dsh-qoder-connect/issues",
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-api-remotes",
+        "@deepseek-ai/dsh-api-session-controller",
+        "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-client-ui-settings-plugins",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-conversation",
+        "@deepseek-ai/dsh-client-ui-model-selection",
+        "@deepseek-ai/dsh-client-ui-sidebar",
+        "@deepseek-ai/dsh-client-locale"
+      ],
+      "platform": "web"
+    }
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-atomic-write": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-attachment": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-home-paths": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-llm": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-llm-pi-ai": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-settings": ">=0.1.7-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@earendil-works/pi-ai": ">=0.85.1",
+    "react": "^18.2.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-atomic-write": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-attachment": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-model-selection": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-sidebar": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-credentials": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-home-paths": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-llm": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-llm-pi-ai": ">=0.1.7-rc.1",
+    "@deepseek-ai/dsh-settings": ">=0.1.7-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@earendil-works/pi-ai": ">=0.85.1",
+    "@types/node": "^22.20.0",
+    "@types/react": "~18.3.1",
+    "@types/react-test-renderer": "^18.3.1",
+    "react": "^18.2.0",
+    "react-test-renderer": "18.3.1",
+    "tsdown": "^0.22.2",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.8"
+  },
+  "icon": "./assets/icon.svg"
+}