add origin_power_ai plugin v0.0.5

[Ikki6666]

Plugin Submission

Plugin information

• Author: ikki6666
• Plugin name: origin_power_ai
• Version: 0.0.5
• Source repository: https://github.com/Ikki6666/origin-power-ai
• Contact: huangyihui@holiai.com

Submission type

• New plugin
• Version update

What changed

Adds the Origin Power AI model provider plugin. Origin Power AI is a unified OpenAI-compatible gateway that aggregates GLM, MiniMax and other mainstream models behind a single API key.

• 5 predefined models (glm-5.3-flash / glm-5-turbo / glm-4.7 / glm-5.3 / glm-5.2) with CNY pricing, context size, vision and tool-call capabilities
• Customizable-model support so users can add any model served by their OpenAI-compatible endpoint
• Streaming, tool calling, reasoning-content wrapping and usage-based token accounting (based on the official openai_api_compatible plugin, Apache-2.0)
• PRIVACY.md bundled; manifest repo, contact and meta.minimum_dify_version fields set

Risk level

• Low risk
• Medium risk
• High risk

The plugin forwards user prompts and conversation context to the API endpoint configured by the workspace administrator (an arbitrary user-supplied URL) via plain HTTP requests. No other external calls; nothing is sent to the plugin author.

Local validation

• Packaged with the Dify Plugin CLI (v0.6.10) and verified the package contents (.git excluded, all bundled YAMLs parse, _position.yaml matches the predefined model set).
• Installed and ran the plugin against a self-hosted Dify 1.17.0 instance through the plugin daemon remote-debug channel: provider credentials were validated with GET /v1/models, and a real end-to-end chat invocation (streaming) passed.
• The sandbox runtime smoke test in this repository also passed (Plugin test result: success).

Security and privacy notes

The plugin makes network requests only to the model gateway endpoint configured by the workspace administrator when setting up the provider. This is the arbitrary-URL capability detected by the scanner: requests.get in provider/origin_power_ai.py (credential validation via GET /models) and requests.post in models/llm/llm.py (OpenAI-compatible /chat/completions calls). Requests carry only the conversation data required to call the LLM API and are authenticated with the API key entered by the administrator. The plugin does not call any other service, does not send data to the plugin author, and does not persist data locally.

Required checks

• I have read and followed the Marketplace submission requirements.

[Ikki6666]

Friendly ping 🙏 This PR adds the origin_power_ai model provider plugin (v0.0.5, reported as ready for review: manifest repo/contact fields set, risk level declared as Medium). The pre-check workflow is currently awaiting maintainer approval to run.

Would appreciate a review from the team when there is bandwidth — happy to address any feedback. Thank you!

[crazywoola]

Closing this PR because the current Pre Check Plugin / pre-check-plugin CI run failed.

CI summary:

• PR description is missing the Local validation section.
• PR title/body validation rejected non-English primary content (6 CJK characters detected).
• Security and privacy notes are missing; CI detected network request capabilities requiring disclosure.

Failed CI job

Please address the reported failures (or rerun CI if the failure was transient) before requesting reopening or resubmitting.

[Ikki6666]

All three reported failures have been addressed in the meantime (the CI run predates these fixes):

1. Local validation section — added to the PR description, describing the packaging, YAML consistency checks and the end-to-end streaming chat invocation we ran on a self-hosted instance (source commit).
2. Non-English content — the PR description is now English-only; the CJK brand name was removed.
3. Security and privacy notes section — added, explicitly disclosing the two detected network-request sites (requests.get in provider/origin_power_ai.py, requests.post in models/llm/llm.py) and what data they carry.

A follow-up commit (17a5315 updating the README) is also on the PR branch, so a re-run of pre-check-plugin will validate the current head.

Could you please reopen the PR? Happy to iterate on any further feedback. Thank you! 🙏

[Ikki6666]

Resubmitted as #3035 (this PR cannot be reopened after maintainer close), with all the reported template fixes included and an updated PR description. Please review #3035.