opencode-cmd-provider 1.3.0 → 1.5.0

package/CHANGELOG.md

@@ -1,5 +1,58 @@
 # Changelog
 
+## 1.5.0 - 2026-08-23
+
+Feature: the `[CMD] ` display-name prefix for auto-registered models is now
+configurable via `provider.commandcode.options.display_prefix`.
+
+### Features
+
+- **Configurable display-name prefix** (issue #60): a string value replaces the
+  default `[CMD] ` prefix, and an empty string disables it entirely. The option
+  is read-only at resolution time — nothing is persisted into the user's config
+  (unlike `npm`/`name`/`env`/`options.baseURL`, which are filled when unset).
+- Non-string values fall back to the default `[CMD] ` prefix.
+- Declared model entries are never renamed — the prefix applies only to models
+  auto-registered from the bundled snapshot.
+
+### Chores
+
+- New `tests/plugin-models.test.ts` cases: `resolveDisplayPrefix` fallback,
+  prefix override (`"CC/"`), empty string disabling the prefix (with non-name
+  metadata unaffected), and declared models keeping their names regardless of
+  the setting.
+
+## 1.4.0 - 2026-08-23
+
+Feature: after a successful `/connect`, the credential is mirrored under
+`command-code` in OpenCode's auth store and to `~/.commandcode/auth.json`
+(official CLI layout), so ecosystem consumers such as OpenChamber's Usage
+page find the key without manual setup.
+
+### Features
+
+- **Credential mirroring** (issue #64): `/connect` now writes the credential
+  under `command-code` in OpenCode's auth store — refreshed on every
+  successful re-auth so the mirror stays in sync — and to
+  `~/.commandcode/auth.json` in the official CLI layout, which is only
+  written when it does not already hold a different credential, so an
+  official CLI login is never clobbered. Writes are atomic; new auth files
+  get owner-only permissions and existing file modes are preserved.
+- Mirroring is best-effort: failures are swallowed and never fail `/connect`
+  itself, and `mirror: false` opts out (used by the oauth tests). Users who
+  authenticate via `COMMANDCODE_API_KEY` alone are unaffected.
+- Existing users re-run `/connect` once (or copy the entry manually) to pick
+  the mirror up.
+
+### Chores
+
+- New `tests/auth-mirror.test.ts` suite: preserves unrelated auth-store
+  entries, owner-only permissions on create, stale-entry refresh on re-auth,
+  no-clobber of a differing CLI credential, idempotent no-op, blank-key
+  guard, and the end-to-end `/connect` flow including `mirror: false` —
+  wired into `test:unit`.
+- Docs: README notes the mirror locations and that mirroring is best-effort.
+
 ## 1.3.0 - 2026-08-23
 
 Feature: dual-transport Provider API — non-Go plans now use the documented

package/README.md

@@ -49,6 +49,8 @@ Select **Command Code**, complete the browser flow, and pick a model with `/mode
 
 Run `/connect` in OpenCode and select **Command Code**. The browser flow stores the returned credential in OpenCode's auth store.
 
+The credential is also mirrored under `command-code` in OpenCode's auth store and to `~/.commandcode/auth.json` (official CLI layout, only written when that file does not already hold a different credential). Ecosystem consumers such as OpenChamber's Usage page read those locations. Mirroring is best-effort; if it fails, `/connect` still succeeds.
+
 If automatic transfer from the browser fails, copy the API key shown by Command Code and export it as `COMMANDCODE_API_KEY` (see below).
 
 ### Environment variable
@@ -131,6 +133,24 @@ can still declare your own `provider.commandcode` entry; your declarations
 always win and the snapshot fills in only what's missing (`whitelist`/
 `blacklist` on a declared entry filter the auto-registered models too).
 
+The `[CMD] ` display-name prefix is configurable through the declared
+provider entry's options:
+
+```jsonc
+{
+  "provider": {
+    "commandcode": {
+      "options": {
+        "display_prefix": "", // default "[CMD] "; empty string disables
+      },
+    },
+  },
+}
+```
+
+Declared model entries are never renamed; the prefix applies to
+auto-registered models only.
+
 - Snapshot — `src/catalog/snapshot.ts` (model ids, names, context lengths) plus
   `src/catalog/facts.ts` (reasoning efforts, per-1M-token rates, input
   modalities). Regenerated from the live catalog via `npm run refresh:snapshot`.

package/dist/src/catalog/facts.d.ts

@@ -1,7 +1,7 @@
 export declare const FACTS_SOURCE_URL = "https://unpkg.com/command-code@1.32.1/dist/bundled/command-code-knowledge/reference/models.md";
 export declare const MODALITIES_SOURCE_URL = "https://unpkg.com/command-code@1.32.1/dist/cli.mjs";
 export declare const FACTS_PACKAGE_VERSION = "1.32.1";
-export declare const FACTS_LAST_REFRESHED = "2026-08-22";
+export declare const FACTS_LAST_REFRESHED = "2026-08-23";
 export declare const MODEL_EFFORTS: Readonly<Record<string, readonly string[]>>;
 export declare const MODEL_COSTS: Readonly<Record<string, {
     input: number;

package/dist/src/catalog/facts.js

@@ -7,7 +7,7 @@
 export const FACTS_SOURCE_URL = "https://unpkg.com/command-code@1.32.1/dist/bundled/command-code-knowledge/reference/models.md";
 export const MODALITIES_SOURCE_URL = "https://unpkg.com/command-code@1.32.1/dist/cli.mjs";
 export const FACTS_PACKAGE_VERSION = "1.32.1";
-export const FACTS_LAST_REFRESHED = "2026-08-22";
+export const FACTS_LAST_REFRESHED = "2026-08-23";
 export const MODEL_EFFORTS = {
     "deepseek/deepseek-v4-pro": ["high", "max"],
     "deepseek/deepseek-v4-flash": ["high", "max"],

package/dist/src/deals/catalog.d.ts

@@ -51,5 +51,5 @@ export interface ModelDeals {
 export declare const MODEL_DEALS: Readonly<Record<string, ModelDeals>>;
 export declare const PLAN_CATALOG: Readonly<Record<PlanId, PlanInfo>>;
 export declare const DEAL_SOURCE_URL = "https://commandcode.ai/docs/resources/pricing-limits";
-export declare const DEAL_LAST_REFRESHED = "2026-08-22";
+export declare const DEAL_LAST_REFRESHED = "2026-08-23";
 export declare const DEAL_PACKAGE_VERSION = "docs";

package/dist/src/deals/catalog.js

@@ -74,5 +74,5 @@ export const PLAN_CATALOG = {
     provider: { price: 15, credits: 0, window5h: 0, windowWeek: 0, display: "Provider" },
 };
 export const DEAL_SOURCE_URL = "https://commandcode.ai/docs/resources/pricing-limits";
-export const DEAL_LAST_REFRESHED = "2026-08-22";
+export const DEAL_LAST_REFRESHED = "2026-08-23";
 export const DEAL_PACKAGE_VERSION = "docs";

package/dist/src/plugin/auth-mirror.d.ts

@@ -0,0 +1,11 @@
+export interface MirrorOptions {
+    opencodeAuthFile?: string;
+    legacyAuthFile?: string;
+}
+export interface MirrorResult {
+    opencodeAuthUpdated: boolean;
+    legacyAuthUpdated: boolean;
+}
+export declare function defaultOpencodeAuthFile(): string;
+export declare function defaultLegacyAuthFile(): string;
+export declare function mirrorCredential(key: string, options?: MirrorOptions): MirrorResult;

package/dist/src/plugin/auth-mirror.js

@@ -0,0 +1,74 @@
+// src/plugin/auth-mirror.ts — mirror /connect credentials for ecosystem consumers
+//
+// OpenChamber's command-code quota provider reads the API key from OpenCode's
+// auth store under the key "command-code" (the provider id its own archived
+// plugin used). OpenCode stores this plugin's credential under "commandcode",
+// so after a successful /connect we mirror it under "command-code" as well.
+// We also mirror to ~/.commandcode/auth.json in the official CLI layout,
+// which resolveApiKey already reads as a legacy fallback.
+import { existsSync, mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { basename, join } from "node:path";
+function dataHome() {
+    return process.env.XDG_DATA_HOME ?? join(homedir(), ".local", "share");
+}
+export function defaultOpencodeAuthFile() {
+    return join(dataHome(), "opencode", "auth.json");
+}
+export function defaultLegacyAuthFile() {
+    return join(homedir(), ".commandcode", "auth.json");
+}
+function readJsonObject(path) {
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf-8"));
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+            return parsed;
+        }
+    }
+    catch {
+        // Missing or malformed file: start from an empty document.
+    }
+    return {};
+}
+function writeJsonAtomic(path, value) {
+    const dir = join(path, "..");
+    mkdirSync(dir, { recursive: true });
+    const existingMode = existsSync(path) ? statSync(path).mode & 0o777 : 0o600;
+    const tmp = join(dir, `.${basename(path)}.${process.pid}.tmp`);
+    writeFileSync(tmp, `${JSON.stringify(value, null, 2)}\n`, { mode: existingMode });
+    renameSync(tmp, path);
+}
+function isCredentialRecord(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+// OpenCode's auth store is owned by this plugin's ecosystem entry point, so a
+// stale mirror there is refreshed on every successful /connect. The legacy
+// file belongs to the official Command Code CLI; if it already holds a
+// different credential we leave it alone rather than clobber another tool's
+// login.
+export function mirrorCredential(key, options = {}) {
+    const trimmed = key.trim();
+    if (!trimmed)
+        return { opencodeAuthUpdated: false, legacyAuthUpdated: false };
+    const entry = { type: "api", key: trimmed };
+    const opencodeAuthFile = options.opencodeAuthFile ?? defaultOpencodeAuthFile();
+    const opencodeDoc = readJsonObject(opencodeAuthFile);
+    const currentOpencode = opencodeDoc["command-code"];
+    let opencodeAuthUpdated = false;
+    if (!isCredentialRecord(currentOpencode) ||
+        currentOpencode.type !== "api" ||
+        currentOpencode.key !== trimmed) {
+        opencodeDoc["command-code"] = entry;
+        writeJsonAtomic(opencodeAuthFile, opencodeDoc);
+        opencodeAuthUpdated = true;
+    }
+    const legacyAuthFile = options.legacyAuthFile ?? defaultLegacyAuthFile();
+    const legacyDoc = readJsonObject(legacyAuthFile);
+    let legacyAuthUpdated = false;
+    if (!isCredentialRecord(legacyDoc["command-code"])) {
+        legacyDoc["command-code"] = entry;
+        writeJsonAtomic(legacyAuthFile, legacyDoc);
+        legacyAuthUpdated = true;
+    }
+    return { opencodeAuthUpdated, legacyAuthUpdated };
+}

package/dist/src/plugin/auth.d.ts

@@ -1,6 +1,9 @@
+import { type MirrorOptions } from "./auth-mirror.js";
 import type { AuthOAuthResult } from "@opencode-ai/plugin";
 export interface RunAuthFlowOptions {
     startPort?: number;
     timeoutMs?: number;
+    /** Credential mirroring targets; pass `false` to disable mirroring. */
+    mirror?: MirrorOptions | false;
 }
 export declare function runAuthFlow(options?: RunAuthFlowOptions): Promise<AuthOAuthResult>;

package/dist/src/plugin/auth.js

@@ -3,8 +3,12 @@
 // Wraps the local callback server in the opencode AuthOAuthResult shape:
 // the studio URL is opened in the browser, the studio POSTs the API key to
 // the local /callback endpoint, and callback() resolves with the key.
+// On success the credential is also mirrored under "command-code" (see
+// auth-mirror.ts) so ecosystem consumers such as OpenChamber's quota
+// provider can find it.
 import { randomBytes } from "node:crypto";
 import { startAuthServer } from "./auth-server.js";
+import { mirrorCredential } from "./auth-mirror.js";
 const STUDIO_BASE_URL = "https://commandcode.ai";
 const DEFAULT_AUTH_TIMEOUT_MS = 15_000;
 function generateStateToken() {
@@ -27,6 +31,14 @@ export async function runAuthFlow(options = {}) {
                 authServer.server.close();
                 if (callback.state !== stateToken)
                     return { type: "failed" };
+                if (options.mirror !== false) {
+                    try {
+                        mirrorCredential(callback.apiKey, options.mirror ?? {});
+                    }
+                    catch {
+                        // Mirroring is best-effort; it must never fail the login itself.
+                    }
+                }
                 return { type: "success", key: callback.apiKey };
             }
             catch {

package/dist/src/plugin/models.d.ts

@@ -1,5 +1,13 @@
-import type { Config } from "@opencode-ai/sdk/v2";
+import type { Config, ProviderConfig } from "@opencode-ai/sdk/v2";
 import type { CatalogModel } from "../catalog/snapshot.js";
+export declare const DEFAULT_DISPLAY_PREFIX = "[CMD] ";
+/**
+ * Resolves the auto-registration display-name prefix from the user-declared
+ * `provider.commandcode.options.display_prefix` key. A string value is used
+ * verbatim (empty string disables the prefix); anything else falls back to
+ * `[CMD] `. Read-only: never persisted into the user's config.
+ */
+export declare function resolveDisplayPrefix(entry: ProviderConfig | undefined): string;
 export interface AutoRegisterOptions {
     npm: string;
     name: string;
@@ -24,6 +32,9 @@ export interface AutoRegisterOptions {
  *   config key or by the entry's `id`);
  * - declared models are never modified, and declared models that left the
  *   catalog stay usable.
+ * - `options.display_prefix` (string) overrides the default `[CMD] `
+ *   display-name prefix for auto-registered models; an empty string disables
+ *   the prefix.
  */
 export declare function autoRegister(config: Config, snapshot: readonly CatalogModel[], options: AutoRegisterOptions): Config;
 /**

package/dist/src/plugin/models.js

@@ -2,6 +2,17 @@ import { MODEL_COSTS, ZERO_MODEL_COST } from "../provider/pricing.js";
 import { reasoningVariantsForModel, isReasoningModel } from "../provider/reasoning.js";
 import { inputModalitiesForModel } from "../provider/modalities.js";
 const DEFAULT_MAX_OUTPUT_TOKENS = 65_536;
+export const DEFAULT_DISPLAY_PREFIX = "[CMD] ";
+/**
+ * Resolves the auto-registration display-name prefix from the user-declared
+ * `provider.commandcode.options.display_prefix` key. A string value is used
+ * verbatim (empty string disables the prefix); anything else falls back to
+ * `[CMD] `. Read-only: never persisted into the user's config.
+ */
+export function resolveDisplayPrefix(entry) {
+    const value = entry?.options?.display_prefix;
+    return typeof value === "string" ? value : DEFAULT_DISPLAY_PREFIX;
+}
 /**
  * Registers the `commandcode` provider entry into opencode's config so every
  * snapshot model is available without any user declaration.
@@ -21,6 +32,9 @@ const DEFAULT_MAX_OUTPUT_TOKENS = 65_536;
  *   config key or by the entry's `id`);
  * - declared models are never modified, and declared models that left the
  *   catalog stay usable.
+ * - `options.display_prefix` (string) overrides the default `[CMD] `
+ *   display-name prefix for auto-registered models; an empty string disables
+ *   the prefix.
  */
 export function autoRegister(config, snapshot, options) {
     if (snapshot.length === 0)
@@ -33,13 +47,14 @@ export function autoRegister(config, snapshot, options) {
     entry.options ??= {};
     entry.options.baseURL ??= options.baseURL;
     entry.models ??= {};
+    const prefix = resolveDisplayPrefix(entry);
     const declaredById = new Set(Object.values(entry.models)
         .map((model) => model?.id)
         .filter((id) => typeof id === "string"));
     for (const model of snapshot) {
         if (entry.models[model.id] !== undefined || declaredById.has(model.id))
             continue;
-        entry.models[model.id] = configModelFor(model);
+        entry.models[model.id] = configModelFor(model, prefix);
     }
     return config;
 }
@@ -73,15 +88,15 @@ export function augmentConfigCommandCodeModels(config) {
 }
 /**
  * Config-schema model entry (not the SDK `Model` shape) for a snapshot model:
- * `[CMD]`-prefixed display name, context/output limits with output capped at
+ * prefixed display name, context/output limits with output capped at
  * 65_536, and metadata enriched from the reasoning, modality, and pricing
  * tables.
  */
-function configModelFor(model) {
+function configModelFor(model, prefix = DEFAULT_DISPLAY_PREFIX) {
     const variants = reasoningVariantsForModel(model.id);
     const costs = MODEL_COSTS[model.id] ?? ZERO_MODEL_COST;
     return {
-        name: `[CMD] ${model.name}`,
+        name: `${prefix}${model.name}`,
         limit: {
             context: model.contextLength,
             output: Math.min(model.contextLength, DEFAULT_MAX_OUTPUT_TOKENS),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-cmd-provider",
-  "version": "1.3.0",
+  "version": "1.5.0",
   "description": "Command Code provider + plugin for opencode",
   "type": "module",
   "main": "./dist/index.js",
@@ -22,7 +22,7 @@
     "refresh:deals": "node scripts/refresh-deals.mjs",
     "refresh": "npm run refresh:snapshot && npm run refresh:deals -- --fixtures",
     "test": "npm run typecheck && npm run test:unit && npm run test:integration && npm run test:contract && npm run format:check",
-    "test:unit": "tsx tests/env.test.ts && tsx tests/auth-key.test.ts && tsx tests/converters.test.ts && tsx tests/stream.test.ts && tsx tests/provider-codecs.test.ts && tsx tests/provider-transport.test.ts && tsx tests/provider-parity.test.ts && tsx tests/provider-upgrade-fallback.test.ts && tsx tests/provider-zdr.test.ts && tsx tests/redact.test.ts && tsx tests/cost.test.ts && tsx tests/retry.test.ts && tsx tests/reasoning.test.ts && tsx tests/modalities.test.ts && tsx tests/snapshot.test.ts && tsx tests/refresh-snapshot.test.ts && tsx tests/oauth.test.ts && tsx tests/parse-facts.test.ts && tsx tests/parse-modalities.test.ts && tsx tests/catalog-metadata.test.ts && tsx tests/plugin-models.test.ts && tsx tests/vendor.test.ts && tsx tests/deals-enrichment.test.ts && tsx tests/deals-coverage.test.ts && tsx tests/plan-summary.test.ts && tsx tests/html-tables.test.ts && tsx tests/parse-docs.test.ts && tsx tests/refresh-deals.test.ts && tsx tests/tui-deals-panel.test.ts && tsx tests/plugin-install.test.ts",
+    "test:unit": "tsx tests/env.test.ts && tsx tests/auth-key.test.ts && tsx tests/converters.test.ts && tsx tests/stream.test.ts && tsx tests/provider-codecs.test.ts && tsx tests/provider-transport.test.ts && tsx tests/provider-parity.test.ts && tsx tests/provider-upgrade-fallback.test.ts && tsx tests/provider-zdr.test.ts && tsx tests/redact.test.ts && tsx tests/cost.test.ts && tsx tests/retry.test.ts && tsx tests/reasoning.test.ts && tsx tests/modalities.test.ts && tsx tests/snapshot.test.ts && tsx tests/refresh-snapshot.test.ts && tsx tests/oauth.test.ts && tsx tests/auth-mirror.test.ts && tsx tests/parse-facts.test.ts && tsx tests/parse-modalities.test.ts && tsx tests/catalog-metadata.test.ts && tsx tests/plugin-models.test.ts && tsx tests/vendor.test.ts && tsx tests/deals-enrichment.test.ts && tsx tests/deals-coverage.test.ts && tsx tests/plan-summary.test.ts && tsx tests/html-tables.test.ts && tsx tests/parse-docs.test.ts && tsx tests/refresh-deals.test.ts && tsx tests/tui-deals-panel.test.ts && tsx tests/plugin-install.test.ts",
     "test:integration": "tsx tests/integration-do-stream.test.ts && tsx tests/integration-do-generate.test.ts",
     "test:contract": "tsx tests/contract.test.ts",
     "test:e2e": "node tests/e2e-opencode.mjs",