opencode-qwencode-auth 1.1.0 → 1.2.1

package/README.md

@@ -8,7 +8,7 @@
   <img src="assets/screenshot.png" alt="OpenCode with Qwen Code" width="800">
 </p>
 
-**Authenticate OpenCode CLI with your qwen.ai account.** This plugin enables you to use Qwen3-Coder models with **2,000 free requests per day** - no API key or credit card required!
+**Authenticate OpenCode CLI with your qwen.ai account.** This plugin enables you to use Qwen models (Coder, Max, Plus and more) with **2,000 free requests per day** - no API key or credit card required!
 
 [🇧🇷 Leia em Português](./README.pt-BR.md)
 
@@ -69,22 +69,35 @@ Select **"Qwen Code (qwen.ai OAuth)"**
 
 ## 🎯 Available Models
 
+### Coding Models
+
 | Model | Context | Max Output | Best For |
 |-------|---------|------------|----------|
 | `qwen3-coder-plus` | 1M tokens | 64K tokens | Complex coding tasks |
-| `qwen3-coder-flash` | 1M tokens | 64K tokens | Fast responses |
+| `qwen3-coder-flash` | 1M tokens | 64K tokens | Fast coding responses |
+
+### General Purpose Models
+
+| Model | Context | Max Output | Reasoning | Best For |
+|-------|---------|------------|-----------|----------|
+| `qwen3-max` | 256K tokens | 64K tokens | No | Flagship model, complex reasoning and tool use |
+| `qwen-plus-latest` | 128K tokens | 16K tokens | Yes | Balanced quality-speed with thinking mode |
+| `qwen3-235b-a22b` | 128K tokens | 32K tokens | Yes | Largest open-weight MoE with thinking mode |
+| `qwen-flash` | 1M tokens | 8K tokens | No | Ultra-fast, low-cost simple tasks |
 
 ### Using a specific model
 
 ```bash
 opencode --provider qwen-code --model qwen3-coder-plus
+opencode --provider qwen-code --model qwen3-max
+opencode --provider qwen-code --model qwen-plus-latest
 ```
 
 ## ⚙️ How It Works
 
 ```
 ┌─────────────────┐     ┌──────────────────┐     ┌─────────────────┐
-│   OpenCode CLI  │────▶│  qwen.ai OAuth   │────▶│  Qwen3-Coder    │
+│   OpenCode CLI  │────▶│  qwen.ai OAuth   │────▶│  Qwen Models    │
 │                 │◀────│  (Device Flow)   │◀────│  API            │
 └─────────────────┘     └──────────────────┘     └─────────────────┘
 ```

package/README.pt-BR.md

@@ -8,7 +8,7 @@
   <img src="assets/screenshot.png" alt="OpenCode com Qwen Code" width="800">
 </p>
 
-**Autentique o OpenCode CLI com sua conta qwen.ai.** Este plugin permite usar modelos Qwen3-Coder com **2.000 requisições gratuitas por dia** - sem API key ou cartão de crédito!
+**Autentique o OpenCode CLI com sua conta qwen.ai.** Este plugin permite usar modelos Qwen (Coder, Max, Plus e mais) com **2.000 requisições gratuitas por dia** - sem API key ou cartão de crédito!
 
 [🇺🇸 Read in English](./README.md)
 
@@ -69,22 +69,35 @@ Selecione **"Qwen Code (qwen.ai OAuth)"**
 
 ## 🎯 Modelos Disponíveis
 
+### Modelos de Código
+
 | Modelo | Contexto | Max Output | Melhor Para |
 |--------|----------|------------|-------------|
 | `qwen3-coder-plus` | 1M tokens | 64K tokens | Tarefas complexas de código |
-| `qwen3-coder-flash` | 1M tokens | 64K tokens | Respostas rápidas |
+| `qwen3-coder-flash` | 1M tokens | 64K tokens | Respostas rápidas de código |
+
+### Modelos de Propósito Geral
+
+| Modelo | Contexto | Max Output | Reasoning | Melhor Para |
+|--------|----------|------------|-----------|-------------|
+| `qwen3-max` | 256K tokens | 64K tokens | Não | Modelo flagship, raciocínio complexo e tool use |
+| `qwen-plus-latest` | 128K tokens | 16K tokens | Sim | Equilíbrio qualidade-velocidade com thinking mode |
+| `qwen3-235b-a22b` | 128K tokens | 32K tokens | Sim | Maior modelo open-weight MoE com thinking mode |
+| `qwen-flash` | 1M tokens | 8K tokens | Não | Ultra-rápido, baixo custo para tarefas simples |
 
 ### Usando um modelo específico
 
 ```bash
 opencode --provider qwen-code --model qwen3-coder-plus
+opencode --provider qwen-code --model qwen3-max
+opencode --provider qwen-code --model qwen-plus-latest
 ```
 
 ## ⚙️ Como Funciona
 
 ```
 ┌─────────────────┐     ┌──────────────────┐     ┌─────────────────┐
-│   OpenCode CLI  │────▶│  qwen.ai OAuth   │────▶│  Qwen3-Coder    │
+│   OpenCode CLI  │────▶│  qwen.ai OAuth   │────▶│  Qwen Models    │
 │                 │◀────│  (Device Flow)   │◀────│  API            │
 └─────────────────┘     └──────────────────┘     └─────────────────┘
 ```

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "opencode-qwencode-auth",
-  "version": "1.1.0",
-  "description": "Qwen OAuth authentication plugin for OpenCode - Access Qwen3-Coder models with your qwen.ai account",
+  "version": "1.2.1",
+  "description": "Qwen OAuth authentication plugin for OpenCode - Access Qwen AI models (Coder, Vision) with your qwen.ai account",
   "module": "index.ts",
   "type": "module",
   "scripts": {
@@ -14,6 +14,8 @@
     "qwen",
     "qwen-code",
     "qwen3-coder",
+    "qwen3-vl-plus",
+    "vision-model",
     "oauth",
     "authentication",
     "ai",

package/src/constants.ts

@@ -3,7 +3,7 @@
  * Based on qwen-code implementation
  */
 
-// Provider ID - cria provider separado para OAuth
+// Provider ID
 export const QWEN_PROVIDER_ID = 'qwen-code';
 
 // OAuth Device Flow Endpoints (descobertos do qwen-code)
@@ -34,15 +34,17 @@ export const QWEN_API_CONFIG = {
 // OAuth callback port (para futuro Device Flow no plugin)
 export const CALLBACK_PORT = 14561;
 
-// Available Qwen models through OAuth
-// Baseado nos modelos disponíveis no qwen-code
+// Available Qwen models through OAuth (portal.qwen.ai)
+// Testados e confirmados funcionando via token OAuth
 export const QWEN_MODELS = {
+  // --- Coding Models ---
   'qwen3-coder-plus': {
     id: 'qwen3-coder-plus',
     name: 'Qwen3 Coder Plus',
     contextWindow: 1048576, // 1M tokens
     maxOutput: 65536, // 64K tokens
     description: 'Most capable Qwen coding model with 1M context window',
+    reasoning: false,
     cost: { input: 0, output: 0 }, // Free via OAuth
   },
   'qwen3-coder-flash': {
@@ -51,6 +53,27 @@ export const QWEN_MODELS = {
     contextWindow: 1048576,
     maxOutput: 65536,
     description: 'Faster Qwen coding model for quick responses',
+    reasoning: false,
+    cost: { input: 0, output: 0 },
+  },
+  // --- Alias Models (portal mapeia internamente) ---
+  'coder-model': {
+    id: 'coder-model',
+    name: 'Qwen Coder (auto)',
+    contextWindow: 1048576,
+    maxOutput: 65536,
+    description: 'Auto-routed coding model (maps to qwen3-coder-plus)',
+    reasoning: false,
+    cost: { input: 0, output: 0 },
+  },
+  // --- Vision Model ---
+  'vision-model': {
+    id: 'vision-model',
+    name: 'Qwen VL Plus (vision)',
+    contextWindow: 131072, // 128K tokens
+    maxOutput: 32768, // 32K tokens
+    description: 'Vision-language model (maps to qwen3-vl-plus), supports image input',
+    reasoning: false,
     cost: { input: 0, output: 0 },
   },
 } as const;

package/src/index.ts

@@ -3,6 +3,9 @@
  *
  * Plugin de autenticação OAuth para Qwen, baseado no qwen-code.
  * Implementa Device Flow (RFC 8628) para autenticação.
+ *
+ * Provider único: qwen-code → portal.qwen.ai/v1
+ * Modelos confirmados: qwen3-coder-plus, qwen3-coder-flash, coder-model, vision-model
  */
 
 import { existsSync } from 'node:fs';
@@ -31,14 +34,6 @@ export type { AuthErrorKind } from './errors.js';
 // Helpers
 // ============================================
 
-function getBaseUrl(resourceUrl?: string): string {
-  if (!resourceUrl) return QWEN_API_CONFIG.baseUrl;
-  if (resourceUrl.startsWith('http')) {
-    return resourceUrl.endsWith('/v1') ? resourceUrl : `${resourceUrl}/v1`;
-  }
-  return `https://${resourceUrl}/v1`;
-}
-
 function openBrowser(url: string): void {
   try {
     const platform = process.platform;
@@ -51,6 +46,7 @@ function openBrowser(url: string): void {
   }
 }
 
+/** Verifica se existem credenciais válidas em ~/.qwen/oauth_creds.json */
 export function checkExistingCredentials(): QwenCredentials | null {
   const credPath = getCredentialsPath();
   if (existsSync(credPath)) {
@@ -62,6 +58,50 @@ export function checkExistingCredentials(): QwenCredentials | null {
   return null;
 }
 
+/** Obtém um access token válido (com refresh se necessário) */
+async function getValidAccessToken(
+  getAuth: () => Promise<{ type: string; access?: string; refresh?: string; expires?: number }>,
+): Promise<string | null> {
+  const auth = await getAuth();
+
+  // Se não é OAuth, tentar carregar credenciais locais do qwen-code
+  if (!auth || auth.type !== 'oauth') {
+    const creds = checkExistingCredentials();
+    return creds?.accessToken ?? null;
+  }
+
+  let accessToken = auth.access;
+
+  // Refresh se expirado (com margem de 30s)
+  if (accessToken && auth.expires && Date.now() > auth.expires - 30000 && auth.refresh) {
+    try {
+      const refreshed = await refreshAccessToken(auth.refresh);
+      accessToken = refreshed.accessToken;
+      saveCredentials(refreshed);
+    } catch (e) {
+      const detail = e instanceof Error ? e.message : String(e);
+      logTechnicalDetail(`Token refresh falhou: ${detail}`);
+      accessToken = undefined;
+    }
+  }
+
+  // Fallback para credenciais locais do qwen-code
+  if (!accessToken) {
+    const creds = checkExistingCredentials();
+    if (creds) {
+      accessToken = creds.accessToken;
+    } else {
+      console.warn(
+        '[Qwen] Token expirado e sem credenciais alternativas. ' +
+        'Execute "npx opencode-qwencode-auth" ou "qwen-code auth login" para re-autenticar.'
+      );
+      return null;
+    }
+  }
+
+  return accessToken ?? null;
+}
+
 // ============================================
 // Plugin Principal
 // ============================================
@@ -73,22 +113,8 @@ export const QwenAuthPlugin = async (_input: unknown) => {
 
       loader: async (
         getAuth: () => Promise<{ type: string; access?: string; refresh?: string; expires?: number }>,
-        provider: { models?: Record<string, { cost?: { input: number; output: number } }> }
+        provider: { models?: Record<string, { cost?: { input: number; output: number } }> },
       ) => {
-        const auth = await getAuth();
-
-        // Se não é OAuth, tentar carregar credenciais do qwen-code
-        if (!auth || auth.type !== 'oauth') {
-          const creds = checkExistingCredentials();
-          if (creds) {
-            return {
-              apiKey: creds.accessToken,
-              baseURL: getBaseUrl(creds.resourceUrl),
-            };
-          }
-          return null;
-        }
-
         // Zerar custo dos modelos (gratuito via OAuth)
         if (provider?.models) {
           for (const model of Object.values(provider.models)) {
@@ -96,48 +122,18 @@ export const QwenAuthPlugin = async (_input: unknown) => {
           }
         }
 
-        let accessToken = auth.access;
-
-        // Refresh se expirado
-        if (accessToken && auth.expires && Date.now() > auth.expires - 30000 && auth.refresh) {
-          try {
-            const refreshed = await refreshAccessToken(auth.refresh);
-            accessToken = refreshed.accessToken;
-            saveCredentials(refreshed);
-          } catch (e) {
-            const detail = e instanceof Error ? e.message : String(e);
-            logTechnicalDetail(`Token refresh falhou: ${detail}`);
-            // Não continuar com token expirado - tentar fallback
-            accessToken = undefined;
-          }
-        }
-
-        // Fallback para credenciais do qwen-code
-        if (!accessToken) {
-          const creds = checkExistingCredentials();
-          if (creds) {
-            accessToken = creds.accessToken;
-          } else {
-            console.warn(
-              '[Qwen] Token expirado e sem credenciais alternativas. ' +
-              'Execute "npx opencode-qwencode-auth" ou "qwen-code auth login" para re-autenticar.'
-            );
-            return null;
-          }
-        }
-
+        const accessToken = await getValidAccessToken(getAuth);
         if (!accessToken) return null;
 
-        const creds = loadCredentials();
         return {
           apiKey: accessToken,
-          baseURL: getBaseUrl(creds?.resourceUrl),
+          baseURL: QWEN_API_CONFIG.baseUrl,
         };
       },
 
       methods: [
         {
-          type: 'oauth',
+          type: 'oauth' as const,
           label: 'Qwen Code (qwen.ai OAuth)',
           authorize: async () => {
             const { verifier, challenge } = generatePKCE();
@@ -214,7 +210,7 @@ export const QwenAuthPlugin = async (_input: unknown) => {
             {
               id: m.id,
               name: m.name,
-              reasoning: false,
+              reasoning: m.reasoning,
               limit: { context: m.contextWindow, output: m.maxOutput },
               cost: m.cost,
               modalities: { input: ['text'], output: ['text'] },

package/src/plugin/client.ts

@@ -30,7 +30,6 @@ export class QwenClient {
    */
   private getBaseUrl(): string {
     if (this.credentials?.resourceUrl) {
-      // resourceUrl from qwen-code is just the host, need to add protocol and path
       const resourceUrl = this.credentials.resourceUrl;
       if (resourceUrl.startsWith('http')) {
         return resourceUrl.endsWith('/v1') ? resourceUrl : `${resourceUrl}/v1`;