opencode-codebuddy-external-auth 1.0.17 → 1.0.19

package/README.md

@@ -18,8 +18,12 @@ npm install opencode-codebuddy-external-auth
   "plugin": ["opencode-codebuddy-external-auth"],
   "provider": {
     "codebuddy-external": {
-      "npm": "@ai-sdk/anthropic",
+      "npm": "@ai-sdk/openai-compatible",
       "name": "CodeBuddy External (IOA)",
+      "options": {
+        "compatibility": "compatible",
+        "baseURL": "https://copilot.tencent.com"
+      },
       "models": {
         "claude-4.5": { "name": "Claude Sonnet 4.5 (x2.20)", "contextLength": 176000 },
         "claude-opus-4.5": { "name": "Claude Opus 4.5 (x3.33)", "contextLength": 176000 },
@@ -41,7 +45,7 @@ npm install opencode-codebuddy-external-auth
       }
     }
   },
-  "model": "codebuddy-external/claude-4.5"
+  "model": "codebuddy-external/glm-4.7-ioa"
 }
 ```
 
@@ -53,6 +57,9 @@ npm install opencode-codebuddy-external-auth
 4. 在浏览器中完成 IOA 登录
 5. 返回终端开始使用
 
+> 日志会输出实际发送的模型：`[codebuddy-external] 使用模型: <model>`
+> 如模型不在可用列表，直接报错并提示更换（不再自动回退）
+
 ## 支持的模型
 
 根据 CodeBuddy IOA 版本配置（2026-01-24）：
@@ -96,10 +103,13 @@ npm install opencode-codebuddy-external-auth
 
 ## 认证流程
 
-1. 插件请求 `/plugin/auth/state` 获取认证状态和 URL
+1. 插件请求 `/v2/plugin/auth/state` 获取认证状态和 URL
 2. 用户在浏览器中打开 URL 完成 IOA 登录
-3. 插件轮询 `/plugin/auth/token` 获取访问令牌
-4. Token 到期前自动通过 `/plugin/auth/token/refresh` 刷新
+3. 插件轮询 `/v2/plugin/auth/token` 获取访问令牌
+4. Token 到期前自动通过 `/v2/plugin/auth/token/refresh` 刷新
+
+> 插件会自动解析 access token 获取 tenant/user/enterprise；
+> enterprise 缺失时会请求 `/console/enterprises/{tenantId}/config/models` 兜底
 
 ## License
 

package/dist/plugin.js

@@ -59,6 +59,16 @@ function extractTenantIdFromIss(iss) {
     const match = iss.match(/realms\/sso-([^/]+)$/);
     return match?.[1] || "";
 }
+function extractTenantIdFromRoles(roles) {
+    if (!roles || roles.length === 0)
+        return "";
+    for (const role of roles) {
+        const match = role.match(/ent-(?:member|plugin-enabled|group):([A-Za-z0-9_-]+)/);
+        if (match?.[1])
+            return match[1];
+    }
+    return "";
+}
 let warnedTenantId = false;
 let warnedEnterpriseId = false;
 let warnedUserId = false;
@@ -66,8 +76,10 @@ function resolveTenantId(accessToken) {
     if (CONFIG.tenantId)
         return CONFIG.tenantId;
     const payload = decodeJwtPayload(accessToken);
+    const roles = payload?.realm_access?.roles || payload?.resource_access?.account?.roles;
     return (payload?.tenant_id ||
         payload?.tenantId ||
+        extractTenantIdFromRoles(roles) ||
         extractTenantIdFromIss(payload?.iss));
 }
 function resolveEnterpriseId(accessToken) {
@@ -94,9 +106,53 @@ function resolveModel(inputModel) {
 let cachedTenantId = "";
 let cachedEnterpriseId = "";
 let cachedUserId = "";
-async function fetchEnterpriseId(accessToken, tenantId) {
+let cachedModelIds = [];
+let warnedModelFallback = false;
+let warnedIdSummary = false;
+function extractModelIds(payload) {
+    const results = [];
+    const collect = (list) => {
+        if (!Array.isArray(list))
+            return;
+        for (const item of list) {
+            if (!item)
+                continue;
+            if (typeof item === "string") {
+                results.push(item);
+                continue;
+            }
+            if (typeof item === "object") {
+                const id = item.id ||
+                    item.model ||
+                    item.modelId ||
+                    item.model_id ||
+                    item.code ||
+                    item.name;
+                if (typeof id === "string")
+                    results.push(id);
+                if (Array.isArray(item.models))
+                    collect(item.models);
+            }
+        }
+    };
+    const candidates = [
+        payload?.data?.models,
+        payload?.data?.modelList,
+        payload?.data?.availableModels,
+        payload?.models,
+        payload?.modelList,
+        payload?.availableModels,
+        payload?.data?.modelGroups,
+        payload?.modelGroups,
+    ];
+    for (const list of candidates) {
+        collect(list);
+    }
+    return Array.from(new Set(results)).filter(Boolean);
+}
+async function fetchConfigModels(accessToken, tenantId) {
     if (!tenantId)
-        return "";
+        return { enterpriseId: "", models: [] };
     try {
         const url = `${CONFIG.serverUrl}/console/enterprises/${tenantId}/config/models`;
         const response = await fetch(url, {
@@ -108,21 +164,44 @@ async function fetchEnterpriseId(accessToken, tenantId) {
             },
         });
         if (!response.ok) {
-            return "";
+            return { enterpriseId: "", models: [] };
         }
         const data = await response.json();
-        return data?.data?.enterpriseId || data?.enterpriseId || "";
+        const enterpriseId = data?.data?.enterpriseId || data?.enterpriseId || "";
+        const models = extractModelIds(data);
+        return { enterpriseId, models };
     }
     catch {
-        return "";
+        return { enterpriseId: "", models: [] };
+    }
+}
+async function getSupportedModels(accessToken, tenantId) {
+    if (cachedModelIds.length > 0)
+        return cachedModelIds;
+    const config = await fetchConfigModels(accessToken, tenantId);
+    if (config.enterpriseId && !cachedEnterpriseId) {
+        cachedEnterpriseId = config.enterpriseId;
+    }
+    if (config.models.length) {
+        cachedModelIds = config.models;
     }
+    return cachedModelIds;
+}
+function pickFallbackModel(models) {
+    if (models.includes("glm-4.7-ioa"))
+        return "glm-4.7-ioa";
+    return models[0] || "";
 }
 async function buildAuthHeaders(accessToken) {
     const tenantId = cachedTenantId || resolveTenantId(accessToken);
     let enterpriseId = cachedEnterpriseId || resolveEnterpriseId(accessToken);
     const userId = cachedUserId || resolveUserId(accessToken);
     if (!enterpriseId) {
-        enterpriseId = await fetchEnterpriseId(accessToken, tenantId);
+        const config = await fetchConfigModels(accessToken, tenantId);
+        enterpriseId = config.enterpriseId || enterpriseId;
+        if (config.models.length) {
+            cachedModelIds = config.models;
+        }
     }
     if (tenantId)
         cachedTenantId = tenantId;
@@ -130,6 +209,10 @@ async function buildAuthHeaders(accessToken) {
         cachedEnterpriseId = enterpriseId;
     if (userId)
         cachedUserId = userId;
+    if (!warnedIdSummary) {
+        warnedIdSummary = true;
+        console.log(`[codebuddy-external] IDs: tenant=${tenantId ? "ok" : "empty"}, enterprise=${enterpriseId ? "ok" : "empty"}, user=${userId ? "ok" : "empty"}`);
+    }
     if (!tenantId && !warnedTenantId) {
         warnedTenantId = true;
         console.warn("[codebuddy-external] 未获取到 X-Tenant-Id，请设置 CODEBUDDY_TENANT_ID");
@@ -378,10 +461,16 @@ async function executeViaAuthApi(openaiRequest, auth) {
         throw new Error("缺少 access token，无法调用 CodeBuddy API");
     }
     let accessToken = auth.access;
+    const tenantId = resolveTenantId(accessToken);
     const resolvedModel = resolveModel(openaiRequest.model);
+    const supportedModels = await getSupportedModels(accessToken, tenantId);
     if (!resolvedModel) {
-        throw new Error("未设置模型，请设置 CODEBUDDY_DEFAULT_MODEL 或在 OpenCode 选择模型");
+        throw new Error("未设置模型，请在 OpenCode 选择模型");
+    }
+    if (supportedModels.length && !supportedModels.includes(resolvedModel)) {
+        throw new Error(`[codebuddy-external] 模型 ${resolvedModel} 不在可用列表，请更换模型`);
     }
+    console.log(`[codebuddy-external] 使用模型: ${resolvedModel}`);
     const requestBody = {
         ...openaiRequest,
         model: resolvedModel,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-codebuddy-external-auth",
-  "version": "1.0.17",
+  "version": "1.0.19",
   "description": "OpenCode plugin for CodeBuddy External (IOA) authentication",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",