feat(provider): add Qoder CN OAuth provider and streaming adapter

src/adapters/registry.ts

@@ -1,3 +1,4 @@
+import { createQoderCnAdapter } from "./qodercn";
 import { createAnthropicAdapter } from "./anthropic";
 import { createAzureAdapter } from "./azure";
 import type { ProviderAdapter } from "./base";
@@ -27,7 +28,8 @@ export type AdapterWire =
   | "openai-responses"
   | "google"
   | "kiro"
-  | "cursor";
+  | "cursor"
+  | "qodercn";
 
 export type AdapterMutationContract =
   | "codex-owned"
@@ -99,6 +101,11 @@ export const ADAPTER_REGISTRY = {
     contractParent: "openai-responses",
     create: (provider: OcxProviderConfig, _context: AdapterFactoryContext) => createAzureAdapter(provider),
   },
+  qodercn: {
+    wire: "qodercn",
+    mutation: "codex-owned",
+    create: (provider: OcxProviderConfig, _context: AdapterFactoryContext) => createQoderCnAdapter(provider),
+  },
   cursor: {
     wire: "cursor",
     mutation: "codex-owned-with-gated-native-fallback",

src/config.ts

@@ -502,6 +502,7 @@ const providerConfigSchema = z.object({
   baseUrl: z.string().min(1),
   alias: z.string().optional(),
   modelAliases: z.record(z.string(), z.string()).optional(),
+  modelMap: z.record(z.string(), z.string()).optional(),
   defaultAliases: z.boolean().optional(),
   requestPacing: requestPacingSchema.optional().catch(undefined),
   mcpMaxTools: z.number().int().positive().optional(),

src/oauth/index.ts

@@ -1,3 +1,4 @@
+import { loginQoderCn, refreshQoderCnToken } from "./qodercn";
 import type { KiroOAuthMetadata, OAuthController, OAuthCredentials } from "./types";
 import { parseCallbackInput } from "./callback-server";
 import type { OcxConfig, OcxProviderConfig, RefreshPolicy } from "../types";
@@ -245,6 +246,12 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderDef> = {
     // Unofficial Copilot bridge — keep proactive traffic lazy-only (no background guardian spam).
     defaultRefreshPolicy: "lazy-only",
   },
+  qodercn: {
+    login: (ctrl) => loginQoderCn(ctrl),
+    refresh: (rt, signal) => refreshQoderCnToken(rt, signal),
+    providerConfig: oauthConfig("qodercn"),
+    defaultModel: oauthDefaultModel("qodercn"),
+  },
   chatgpt: {
     login: loginChatGPT,
     refresh: (rt) => refreshChatGPTToken(rt),

src/oauth/qodercn.ts

@@ -0,0 +1,179 @@
+/**
+ * Qoder CN OAuth flow (device authorization grant with PKCE).
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { randomUUID } from "node:crypto";
+import { getConfigDir } from "../config";
+import { recordOwnedConfigPath } from "../lib/config-ownership";
+import { generatePKCE } from "./pkce";
+import type { OAuthController, OAuthCredentials } from "./types";
+
+const CLIENT_ID = "e883ade2-e6e3-4d6d-adf7-f92ceff5fdcb";
+const DEFAULT_OPENAPI_HOST = "https://openapi.qoder.com.cn";
+const DEFAULT_AUTH_HOST = "https://qoder.cn";
+const MACHINE_ID_FILENAME = "qodercn-machine-id";
+const POLL_INTERVAL_MS = 1500;
+const POLL_TIMEOUT_MS = 5 * 60 * 1000;
+const OAUTH_EXPIRY_SKEW_MS = 5 * 60 * 1000;
+
+interface QoderDevicePollResponse {
+  token?: string;
+  device_token?: string;
+  refresh_token?: string;
+  expires_at?: string;
+  expires_in?: number;
+  refresh_token_expires_at?: string;
+  refresh_token_expires_in?: number;
+  user_id?: string;
+  user_name?: string;
+  email?: string;
+}
+
+interface QoderTokenRefreshResponse {
+  device_token?: string;
+  token?: string;
+  refresh_token?: string;
+  expires_at?: string;
+  expires_in?: number;
+}
+
+export function getMachineId(): string {
+  const p = join(getConfigDir(), MACHINE_ID_FILENAME);
+  try {
+    if (existsSync(p)) {
+      const id = readFileSync(p, "utf-8").trim();
+      if (id) return id;
+    }
+  } catch (e) {
+    if ((e as { code?: string })?.code !== "ENOENT") throw e;
+  }
+  const id = randomUUID();
+  recordOwnedConfigPath(getConfigDir(), p);
+  if (!existsSync(getConfigDir())) mkdirSync(getConfigDir(), { recursive: true });
+  writeFileSync(p, id + "\n", { mode: 0o600 });
+  return id;
+}
+
+function sleep(ms: number, signal?: AbortSignal): Promise<void> {
+  return new Promise((resolve, reject) => {
+    if (signal?.aborted) return reject(new Error("Login cancelled"));
+    const t = setTimeout(resolve, ms);
+    signal?.addEventListener("abort", () => {
+      clearTimeout(t);
+      reject(new Error("Login cancelled"));
+    }, { once: true });
+  });
+}
+
+async function pollForToken(nonce: string, verifier: string, signal?: AbortSignal): Promise<OAuthCredentials> {
+  const deadline = Date.now() + POLL_TIMEOUT_MS;
+  const search = new URLSearchParams({
+    nonce,
+    verifier,
+    challenge_method: "S256",
+  });
+  const url = `${DEFAULT_OPENAPI_HOST}/api/v1/deviceToken/poll?${search}`;
+
+  while (Date.now() < deadline) {
+    if (signal?.aborted) throw new Error("Login cancelled");
+    const res = await fetch(url, {
+      method: "GET",
+      headers: { Accept: "application/json" },
+      signal,
+    });
+    if (res.status === 404) {
+      await sleep(POLL_INTERVAL_MS, signal);
+      continue;
+    }
+    if (!res.ok) {
+      throw new Error(`Qoder device token poll failed: HTTP ${res.status}`);
+    }
+    const data = (await res.json()) as QoderDevicePollResponse;
+    const token = data.token || data.device_token;
+    if (!token) throw new Error("Qoder poll response missing token");
+
+    let expires = Date.now() + 24 * 3600 * 1000;
+    if (typeof data.expires_at === "string") {
+      const parsed = new Date(data.expires_at).getTime();
+      if (Number.isFinite(parsed) && parsed > 0) expires = parsed - OAUTH_EXPIRY_SKEW_MS;
+    } else if (typeof data.expires_in === "number" && Number.isFinite(data.expires_in)) {
+      expires = Date.now() + data.expires_in * 1000 - OAUTH_EXPIRY_SKEW_MS;
+    }
+
+    const accountId = data.user_id;
+    const email = data.user_name || data.email;
+
+    return {
+      access: token,
+      refresh: data.refresh_token || token,
+      expires,
+      ...(accountId ? { accountId } : {}),
+      ...(email ? { email } : {}),
+      source: "oauth",
+    };
+  }
+  throw new Error("Qoder CN device authorization timed out");
+}
+
+export async function loginQoderCn(ctrl: OAuthController): Promise<OAuthCredentials> {
+  const { verifier, challenge } = generatePKCE();
+  const nonce = randomUUID();
+  const machineId = getMachineId();
+  const authUrl = `${DEFAULT_AUTH_HOST}/device/selectAccounts?challenge=${challenge}&challenge_method=S256&nonce=${nonce}&machine_id=${machineId}&client_id=${CLIENT_ID}`;
+
+  ctrl.onAuth?.({
+    url: authUrl,
+    instructions: "Please complete the login in your browser",
+  });
+
+  return pollForToken(nonce, verifier, ctrl.signal);
+}
+
+export async function refreshQoderCnToken(refreshToken: string, signal?: AbortSignal): Promise<OAuthCredentials> {
+  const res = await fetch(`${DEFAULT_OPENAPI_HOST}/api/v1/deviceToken/refresh`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Accept: "application/json",
+    },
+    body: JSON.stringify({ refresh_token: refreshToken }),
+    signal,
+  });
+  if (!res.ok) {
+    throw new Error(`Qoder token refresh failed: HTTP ${res.status}`);
+  }
+  const data = (await res.json()) as QoderTokenRefreshResponse;
+  const token = data.device_token || data.token;
+  if (!token) throw new Error("Qoder refresh response missing token");
+  let expires = Date.now() + 24 * 3600 * 1000;
+  if (typeof data.expires_at === "string") {
+    const parsed = new Date(data.expires_at).getTime();
+    if (Number.isFinite(parsed) && parsed > 0) expires = parsed - OAUTH_EXPIRY_SKEW_MS;
+  } else if (typeof data.expires_in === "number" && Number.isFinite(data.expires_in)) {
+    expires = Date.now() + data.expires_in * 1000 - OAUTH_EXPIRY_SKEW_MS;
+  }
+  return { access: token, refresh: data.refresh_token || refreshToken, expires, source: "oauth" };
+}
+
+export function resolveQoderAccountContext(token: string): { machineId: string; accountId: string } {
+  const machineId = getMachineId();
+  let accountId = "";
+  try {
+    const authPath = join(getConfigDir(), "auth.json");
+    if (existsSync(authPath)) {
+      const auth = JSON.parse(readFileSync(authPath, "utf-8"));
+      const accounts = auth.qodercn?.accounts || [];
+      const match = accounts.find((a: any) => a.credential?.access === token);
+      if (match?.credential?.accountId) {
+        accountId = match.credential.accountId;
+      } else if (accounts[0]?.credential?.accountId) {
+        accountId = accounts[0].credential.accountId;
+      }
+    }
+  } catch (_e) {
+    void _e;
+  }
+  return { machineId, accountId: accountId || "default-user" };
+}

src/providers/derive.ts

@@ -224,6 +224,7 @@ export function providerConfigSeed(entry: ProviderRegistryEntry): OcxProviderCon
     ...(entry.keyOptional !== undefined ? { keyOptional: entry.keyOptional } : {}),
     ...(entry.freeTier !== undefined ? { freeTier: entry.freeTier } : {}),
     ...(entry.modelSuffixBracketStrip !== undefined ? { modelSuffixBracketStrip: entry.modelSuffixBracketStrip } : {}),
+    ...(entry.modelMap ? { modelMap: { ...entry.modelMap } } : {}),
     ...(entry.staticHeaders ? { headers: { ...entry.staticHeaders } } : {}),
     ...(entry.defaultModel ? { defaultModel: entry.defaultModel } : {}),
     ...(entry.models ? { models: [...entry.models] } : {}),

src/providers/registry.ts

@@ -156,6 +156,7 @@ export interface ProviderRegistryEntry {
   /** Static headers merged into every upstream request for this provider. */
   staticHeaders?: Record<string, string>;
   modelSuffixBracketStrip?: boolean;
+  modelMap?: Record<string, string>;
   featured?: boolean;
   dashboardPreset?: boolean;
   note?: string;
@@ -1308,6 +1309,46 @@ export const PROVIDER_REGISTRY: readonly ProviderRegistryEntry[] = [
     modelContextWindows: { ...ANTHROPIC_MODEL_CONTEXT_WINDOWS },
     defaultModel: "claude-sonnet-5",
   },
+  {
+    id: "qodercn",
+    label: "Qoder CN",
+    adapter: "qodercn",
+    baseUrl: "https://gateway.qoder.com.cn",
+    authKind: "oauth",
+    oauthId: "qodercn",
+    featured: false,
+    liveModels: false,
+    note: "Log in with your Qoder CN account",
+    defaultModel: "GLM-5.3-Flash",
+    models: ["GLM-5.3-Flash", "GLM-5.3", "GLM-5.2", "Qwen3.8-Flash", "Qwen3.8-Max", "Qwen3.7-Max", "Qwen3.7-Plus", "Qwen3.5-Plus", "DeepSeek-V4-Flash", "DeepSeek-V4-Pro", "Kimi-K3", "Kimi-K2.7-Code", "MiniMax-M3", "Cantus", "Auto"],
+    modelMap: {
+      "GLM-5.3-Flash": "gfmodel", "GLM-5.3": "gmodel", "GLM-5.2": "gm51model",
+      "Qwen3.8-Flash": "qfmodel", "Qwen3.8-Max": "qmodel_38max", "Qwen3.7-Max": "qmodel_latest", "Qwen3.7-Plus": "qmodel", "Qwen3.5-Plus": "q35model",
+      "DeepSeek-V4-Flash": "dfmodel", "DeepSeek-V4-Pro": "dmodel",
+      "Kimi-K3": "kmodel_latest", "Kimi-K2.7-Code": "kmodel",
+      "MiniMax-M3": "mmodel", "Cantus": "cmodel", "Auto": "auto"
+    },
+    modelContextWindows: { "GLM-5.3-Flash": 1000000, "GLM-5.3": 1000000, "GLM-5.2": 1000000, "Qwen3.8-Flash": 1000000, "Qwen3.8-Max": 1000000, "Qwen3.7-Max": 1000000, "Qwen3.7-Plus": 1000000, "Qwen3.5-Plus": 1000000, "DeepSeek-V4-Flash": 1000000, "DeepSeek-V4-Pro": 1000000, "Kimi-K3": 262144, "Kimi-K2.7-Code": 262144, "MiniMax-M3": 262144, "Cantus": 128000, "Auto": 1000000 },
+    modelInputModalities: {
+      "GLM-5.3-Flash": ["text", "image"],
+      "GLM-5.3": ["text", "image"],
+      "GLM-5.2": ["text", "image"],
+      "Qwen3.8-Flash": ["text", "image"],
+      "Qwen3.8-Max": ["text", "image"],
+      "Qwen3.7-Max": ["text", "image"],
+      "Qwen3.7-Plus": ["text", "image"],
+      "Qwen3.5-Plus": ["text", "image"],
+      "DeepSeek-V4-Flash": ["text", "image"],
+      "DeepSeek-V4-Pro": ["text", "image"],
+      "Kimi-K3": ["text", "image"],
+      "Kimi-K2.7-Code": ["text", "image"],
+      "MiniMax-M3": ["text", "image"],
+      "Auto": ["text", "image"],
+    },
+    preserveReasoningContentModels: ["GLM-5.3-Flash", "GLM-5.3", "GLM-5.2", "Qwen3.8-Flash", "Qwen3.8-Max", "Qwen3.7-Max", "Qwen3.7-Plus", "DeepSeek-V4-Flash", "DeepSeek-V4-Pro", "Kimi-K3"],
+    modelReasoningEfforts: { "GLM-5.3-Flash": ["low", "high", "max"], "GLM-5.3": ["low", "high", "max"], "GLM-5.2": ["low", "medium", "high", "xhigh", "max"], "Qwen3.8-Flash": ["low", "medium", "high", "xhigh", "max"], "Qwen3.8-Max": ["low", "medium", "xhigh"], "Qwen3.7-Max": ["low", "medium", "high", "xhigh", "max"], "Qwen3.7-Plus": ["low", "medium", "high", "xhigh", "max"], "DeepSeek-V4-Flash": ["low", "high", "max"], "DeepSeek-V4-Pro": ["low", "high", "max"], "Kimi-K3": ["low", "high", "max"] },
+    defaultMaxOutputTokens: 64000
+  },
   {
     id: "kimi",
     label: "Kimi",