merge: pull mhiqrambg/9router-mibp-version into master

Merge the MIBP fork (v1.0.14, synced to decolua v0.5.81) into our master
(0.5.86) at merge-base a8c9d380. Keep HEAD's infra policy (untracked
lockfile, mirror-configurable Dockerfile, decolua GHCR/DockerHub, README)
while absorbing the fork's engine features:

- feat(providers): freebuff provider + executor + OAuth + usage tracking
- feat(providers): cline free-tier models, Freebuff catalog sync
- feat(proxy-pools): pool egress geo probe, proxy-pool fitness + retry
- fix(usage): hide noAuth providers (devin-cli, mimo-free) from usage list
- test(harness): DATA_DIR isolation so tests never write the real DB
- fix(codebuddy-intl): probe token in connection test, OAuth by identity
- chore(guards): durable markers so fixes aren't silently dropped

Resolutions:
- registry/index.js regenerated deterministically (122 providers, alpha
  order). trae/windsurf/devin-cli stay hidden per HEAD security posture
  (no tool-calling / local-agent shell access) — not re-enabled.
- nonStreamingHandler: drop the generic unconditional unwrapDataEnvelope
  call; envelope unwrap stays scoped to clineEnvelope-quirk providers
  (unwrapClineEnvelope), fixing a latent mibp bug where non-opted-in
  providers ({success,data} bodies) were stripped.
- Drop fork-local Docker lockfile policy (package-lock.json, AGENTS.md,
  .npmrc verify scripts): this repo keeps package-lock untracked (nix
  build deploy). .npmrc (audit=false/fund=false) kept.
- Keep gitbook-pages workflow enabled (ours); mibp disabled it.
- Restore 13 upstream tests mibp deleted (they cover features we keep).

Verified: 2841 tests, 2687 pass, fail set byte-identical to HEAD (zero
new regressions); providers/alias/oauth baselines regenerated to merged
code and all green.
This commit is contained in:
asepharyana
2026-09-23 11:44:58 +07:00
96 changed files with 7709 additions and 1787 deletions
+201
View File
@@ -0,0 +1,201 @@
/**
* Freebuff usage handler
*
* Freebuff has no separate billing/quota API — the daily free/premium session
* quota lives on the session endpoint itself. Reading it MUST use
* GET /api/v1/freebuff/session (the CLI's status poll): POST would CLAIM a
* session and burn 1.0 unit of the daily quota, which a quota tracker must
* never do.
*
* The GET response carries the shared session quota as `rateLimitsByModel`,
* keyed by model id, on the pre-join (`none`), `active`, and `ended` states:
* { limit, recentCount, resetAt, period: 'pacific_day'|'pacific_week',
* resetTimeZone, entitlementBreakdown? }
* `recentCount` is fractional — a long agent run can consume 1.3 units — and
* includes the active session's own 1.0-unit reservation. `limit` can be
* raised by referral/streak rewards (entitlementBreakdown.base + referral +
* streak).
*
* Freebucks-metered accounts (2026-09-02+) get NO pool rows: the server sends
* a `freebucks` block instead — { balance, daily:{limit,spent,remaining,resetAt},
* wallet:{balance,...}, monthly?:{limitUsd,spentUsd,remainingUsd,resetAt},
* planId, prices:{model→Freebucks/hr}, priceNotices?, priceChanges? }. The
* daily pool replaces rateLimitsByModel, so the tracker folds it in by
* replicating the pool snapshot under every priced model id, exactly as the
* official picker does.
*
* Pricing is SERVER-AUTHORITATIVE and nothing here hardcodes a number: each
* row carries the live `prices[model]` (plus its `priceNotices` tagline), and
* `applyFreebucksPriceChanges` folds the server's announced `priceChanges`
* schedule into the map — a promo (e.g. Solar Pro 4's Labor Day 0-Freebucks
* offer) expires and reverts on the server's timeline with no client release,
* mirroring upstream common/src/util/freebuff-price-changes.ts. A compact
* account summary (`freebucks`) rides the response for the card header.
*/
import REGISTRY from "../../providers/registry/index.js";
import { U, fetchWithTimeout } from "./shared.js";
// Friendly labels from the registry model list (mirrors the CLI picker).
const freebuffRegistry = REGISTRY.find((r) => r.id === "freebuff") || {};
const MODEL_LABELS = Object.fromEntries(
(freebuffRegistry.models || []).map((m) => [m.id, m.name]),
);
// Fold the server's announced price schedule into the live price map —
// mirrors upstream applyFreebucksPriceChanges: due changes override the price
// AND its picker tagline, and drop off the pending list.
function applyFreebucksPriceChanges(info) {
const now = Date.now();
const due = (info?.priceChanges || []).filter((c) => Date.parse(c.at) <= now);
if (due.length === 0) return info;
const prices = { ...(info.prices || {}) };
const priceNotices = { ...(info.priceNotices || {}) };
for (const change of due.sort((a, b) => Date.parse(a.at) - Date.parse(b.at))) {
if (prices[change.modelId] === undefined) continue;
prices[change.modelId] = change.price;
priceNotices[change.modelId] = change.tagline;
}
return {
...info,
prices,
priceNotices,
priceChanges: (info.priceChanges || []).filter((c) => Date.parse(c.at) > now),
};
}
function sessionUrl() {
return U("freebuff").url;
}
export async function getFreebuffUsage(accessToken, providerSpecificData, proxyOptions = null) {
if (!accessToken) {
return { message: "Freebuff credential not available — connect a Freebuff login first." };
}
try {
const response = await fetchWithTimeout(
sessionUrl(),
{
method: "GET",
headers: {
Authorization: `Bearer ${accessToken}`,
"User-Agent": "codebuff-cli/0.0.138",
Accept: "application/json",
},
},
15000,
proxyOptions,
);
if (response.status === 401) {
return { message: "Freebuff credential invalid or expired — re-login in the dashboard." };
}
if (response.status === 403) {
// A 403 from the session endpoint is usually a server-side gate status
// (country_blocked / banned), not a credential problem — telling the
// user to re-login would be misleading (mirrors the CLI's
// callFreebuffSession 403 branch).
const body = await response.json().catch(() => ({}));
if (body?.status === "country_blocked") {
return { message: "Freebuff is not available in your region." };
}
if (body?.status === "banned") {
return { message: "Your Freebuff account has been banned." };
}
return {
message: `Freebuff quota access denied (403)${body?.message ? `: ${body.message}` : ""}.`,
};
}
// 404 = no session row at all → pre-join state, no quota to report.
if (response.status === 404) {
return { plan: "Freebuff", message: "Freebuff connected. No session quota to report right now." };
}
if (!response.ok) {
return { message: `Freebuff quota API error (${response.status}).` };
}
const data = await response.json().catch(() => ({}));
const rateLimits = { ...(data.rateLimitsByModel || {}) };
// An active session carries its own `rateLimit` row — fold it in when the
// shared map omits the model (older servers).
if (data.status === "active" && data.rateLimit && !rateLimits[data.model]) {
rateLimits[data.model] = data.rateLimit;
}
const quotas = {};
for (const [model, rl] of Object.entries(rateLimits)) {
if (!rl || typeof rl !== "object") continue;
const used = Number(rl.recentCount);
const total = Number(rl.limit);
quotas[model] = {
used: Number.isFinite(used) ? used : 0,
total: Number.isFinite(total) ? total : 0,
resetAt: rl.resetAt || null,
unlimited: false,
// Daily/weekly Pacific session allowance replenishes at resetAt — the
// UI must say "Resets in", not "Expires in".
recurring: true,
...(MODEL_LABELS[model] ? { displayName: MODEL_LABELS[model] } : {}),
};
}
// Freebucks meter: the daily Freebucks pool is the quota for metered
// accounts, replicated under each priced model like the picker's rings.
// Prices come off the wire (prices + priceChanges folded in); each row
// carries its own price/tagline, and a compact summary rides the response
// for the account header in the UI.
let freebucksSummary = null;
const rawFreebucks = data.freebucks;
if (rawFreebucks && rawFreebucks.daily && typeof rawFreebucks.daily === "object") {
const freebucks = applyFreebucksPriceChanges(rawFreebucks);
const spent = Number(freebucks.daily.spent);
const limit = Number(freebucks.daily.limit);
for (const [model, price] of Object.entries(freebucks.prices || {})) {
quotas[model] = {
used: Number.isFinite(spent) ? spent : 0,
total: Number.isFinite(limit) ? limit : 0,
resetAt: freebucks.daily.resetAt || null,
unlimited: false,
recurring: true,
price: Number.isFinite(Number(price)) ? Number(price) : undefined,
...(freebucks.priceNotices?.[model] ? { priceNote: freebucks.priceNotices[model] } : {}),
...(MODEL_LABELS[model] ? { displayName: MODEL_LABELS[model] } : {}),
};
}
freebucksSummary = {
balance: Number.isFinite(Number(freebucks.balance)) ? Number(freebucks.balance) : null,
daily: {
limit: Number.isFinite(limit) ? limit : 0,
spent: Number.isFinite(spent) ? spent : 0,
remaining: Number.isFinite(Number(freebucks.daily.remaining)) ? Number(freebucks.daily.remaining) : 0,
resetAt: freebucks.daily.resetAt || null,
},
wallet: {
balance: Number.isFinite(Number(freebucks.wallet?.balance)) ? Number(freebucks.wallet.balance) : 0,
},
...(freebucks.monthly && Number.isFinite(Number(freebucks.monthly.remainingUsd))
? {
monthly: {
remainingUsd: Number(freebucks.monthly.remainingUsd),
limitUsd: Number.isFinite(Number(freebucks.monthly.limitUsd)) ? Number(freebucks.monthly.limitUsd) : null,
resetAt: freebucks.monthly.resetAt || null,
},
}
: {}),
};
}
const plan = data.accessTier === "limited" ? "Freebuff (Limited)" : "Freebuff";
if (Object.keys(quotas).length === 0) {
return { plan, message: "Freebuff connected. No session quota to report right now." };
}
const out = { plan, quotas };
if (freebucksSummary) out.freebucks = freebucksSummary;
return out;
} catch (error) {
return { message: `Freebuff usage error: ${error.message}` };
}
}
export default getFreebuffUsage;