@ai-workbench/connect 0.0.0-stage → 0.7.5

package/NOTICE.md

@@ -0,0 +1,18 @@
+# 依赖与参考
+
+| 名称 | 固定版本 | 协议 | 来源 | 用途 |
+|---|---|---|---|---|
+| DeepSeek Harness | 0.2.0-rc.2 / 639ed015 | MIT | https://github.com/deepseek-ai/deepseek-harness | 只读研究 Cordis 与 bundle；未复制/修改核心 |
+| @deepseek-ai/cordis | 4.0.4 | MIT | 同上 vendor/cordis | DSH 服务/事件，peer；测试用真实 Context |
+| @deepseek-ai/schemastery | 3.18.4 | MIT | 同上 vendor/schemastery | DSH 配置 schema，peer |
+| Electron | 44.0.0 / Chromium152.0.7977.54 | MIT | https://github.com/electron/electron | 独立内存登录窗口；mini真实组件已下载并校验官方ZIP，未捆入L包 |
+| yauzl | 3.4.0 | MIT | https://github.com/thejoshwolfe/yauzl | ZIP 结构与条目读取，安全提取/链接延后创建 |
+| TypeScript | 5.9.3 | Apache-2.0 | https://github.com/microsoft/TypeScript | 类型检查/构建 |
+| @types/node | 24.0.0 | MIT | https://github.com/DefinitelyTyped/DefinitelyTyped | Node 类型 |
+| @types/yauzl | 2.10.3 | MIT | 同上 | ZIP 类型 |
+
+Electron API 依据：https://www.electronjs.org/docs/latest/api/session 、https://www.electronjs.org/docs/latest/api/app 。
+extract-zip 2.0.1 因公开 symlink 路径穿越漏洞被移除，未进入最终依赖；yauzl 选用修复 off-by-one 的 3.4.0。最终 npm audit 另存证据。
+未采用 ws：本轮助手用匿名管道，不新增无用途依赖。
+
+续轮只读研究官方 @anthropic-ai/claude-code 2.1.20/2.1.304（Anthropic 专有，https://registry.npmjs.org/@anthropic-ai/claude-code ）以核实复制码协议；未复制其实现、未作为本包依赖。版本/摘要见续轮 claude-research.json。

package/README.md

@@ -1,3 +1,25 @@
-# Temporary Holding Version
+安装：在 DSH「插件 → 添加插件」填写 `@ai-workbench/connect@0.7.5`，或运行 `dsh plugin --profile desktop add @ai-workbench/connect@0.7.5`。
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# 远程主机连接插件（L）
+
+员工照常使用官方 DSH 默认界面、数据目录与profile。本插件只提供“设置 → 远程主机连接”一节，管理本项目自己的连接资料、工作区映射与Claude/Codex登录；不限制、拦截或记录其他模型，不改变默认布局或服务。
+
+本轮只做中文，已有英文名称保留。A已冻结，Claude/Codex由X的ACP插件承载；L的消费方为X和N。
+
+当前合同为[connect-api draft.4](contracts/connect-api.md)。0.7.0已移除旧draft.3的自动sync/registry.create/本机空引用：员工通过DSH原生“添加工作区”和系统目录窗口选择/创建本地文件夹，首次实际远程用户轮才在主机建立或绑定精确同名Git目录。本地文件不会自动上传。持久创建意图防止结果未知时重放；名称冲突、会话换绑和连接代次变化均拒绝。
+
+首次说明在L设置节与X普通回复各一次，使用独立持久回执。设置说明按每条实际可视区确认，并在当次打开期间保留；X已确认官方Session落盘核对后以message.id回执，真实组合GUI仍须验证。N消费端已按提供方公开的activate/getActivationState/onActivationState签名实施：L先持久登记及不可变交接，N唯一消费/清理key，无key重开须得到N完整持久身份证明。
+
+D13已通过[PR15](https://github.com/yzsnstotz/ai-workbench-connect/pull/15)合推main7915df5，移除前为909eabb；五项被拒产物及清单引用已撤除。不再生成新的聚合整包或验收ZIP，交付物为插件本身。
+
+**插件版本0.7.5，API保持0.7.0/native-local-v1。** N0.4.0已接，配套X0.7.1。L导入动作固定使用官方系统目录窗口：自动能力为native时直接消费其pick；SSH等启动上下文提供browse时，明确调用同一官方原生包的公开pickNativeDirectory，不修改全局选择器。失败原因与临时登录路径只在本节技术详情准确投影。js-yaml/yauzl及其传递运行依赖随tgz打包，官方宿主peer由已安装官方程序提供，员工不另装npm依赖。真实中文GUI/授权及leo E门分别留证。旧140测试/46图只属于前任draft.3；本轮证据独立记录于[第2轮证据](docs/evidence/2026-10-21-L-round2-draft4/)。不得拿旧0.6.3 tgz当native-local-v1的输入。
+
+开发使用Node24.13.1，依赖/缓存/构建和临时HOME放自有外接APFS。工程检查为`npm test`、`npm run check`、`npm run build`；它们不替代真实产品路径。安装走官方插件管理，本包自身只声明一个官方bundle条目，不使用wrapper或员工启动器。工人GUI按[SELFTEST](docs/SELFTEST.md)的PID和三项获准偏离执行，不操作owner实例。
+
+员工路径见[首次设置](docs/CONNECT-SETUP.md)，设置与后果见[SETTINGS-OWNER](docs/SETTINGS-OWNER.md)，冻结门见[本轮计划](docs/plans/2026-10-21-L-round2-implementation.md)。
+
+L0.7.4按owner最新纠正分开供给和授权：Electron组件从自身官方地址直接下载，设置显示实际字节/校验/解压；固定版本与SHA不变。供给完成后才启动远端登录与N代理，OAuth页面和回调继续主机出口。系统WebKit探针回环绕过代理，故本轮保留既有Electron内存窗口；不通过重试或多流掩盖隧道慢。
+
+官方Electron内置Node会把.asar视作虚拟目录；组件缓存/解压专用physical-fs在Electron中使用original-fs核验物理归档，不修改全局process.noAsar。真实官方运行时新建及跨Node复用缓存均有回归。
+
+0.7.5仅调整公开 npm 发布元数据和包内容：运行依赖继续随包，合同、源码、测试与证据不进包；无安装脚本。源码与合同见[项目仓库](https://github.com/yzsnstotz/ai-workbench-connect)。发布前可用官方插件页或上述命令安装已核验的tgz绝对路径。本轮只做发布准备，尚未发布到npm。

package/client/index.cjs

@@ -0,0 +1,123 @@
+window.__ModuleLoader__.load({id:'@ai-workbench/connect',factory:(require)=>{
+ const React=require('react'),h=React.createElement;
+ const NS='ai-workbench-connect';
+ const dictionaries={
+  "en": {
+    "title": "Remote host connection",
+    "import": "Import connection files",
+    "importing": "Selecting and checking connection files…",
+    "enrollmentKeyMissing": "These connection files are missing setup credentials. Ask your administrator to complete them.",
+    "imported": "Connection files imported. Network readiness must still be confirmed.",
+    "importHelp": "Ask your administrator for your private connection files folder, then choose it here.",
+    "enrollmentUnknown": "The previous setup result is unknown. Contact your administrator; connection files will not be submitted again.",
+    "enrollmentRejected": "The device setup is no longer valid. Contact your administrator; submission has stopped.",
+    "importInvalid": "These connection files could not be verified. Ask your administrator for a valid folder.",
+    "workspaceBlocked": "Remote workspaces could not be loaded. Contact your administrator.",
+    "workspaceSyncing": "Updating remote workspaces…",
+    "workspaceLimit": "Remote workspaces appear in the normal workspace selector after connection. Local files and attachments are not automatically transferred to the remote host.",
+    "unknown": "The remote host connection status could not be confirmed. Contact your administrator.",
+    "checking": "Checking the remote host connection…",
+    "details": "Technical details",
+    "signIn": "Sign in to {brand}",
+    "later": "Later",
+    "recheck": "Check again",
+    "provider": "{brand} (remote host)",
+    "statusChecking": "Checking",
+    "statusUnknown": "Unable to confirm",
+    "statusSignedIn": "Signed in",
+    "statusSignIn": "Sign in required",
+    "loginRequired": "Sign in required. Go to Settings → Remote host connection and choose Sign in.",
+    "authorizing": "Complete your sign-in in the authorization window.",
+    "complete": "Remote host connection check complete.",
+    "loginUnknown": "The sign-in status could not be confirmed. Contact your administrator.",
+    "notReady": "The remote host connection is not ready. Contact your administrator.",
+    "enrollment": "Connection setup is required. Ask your administrator for the setup files.",
+    "settings": "The remote host connection has not been configured. Contact your administrator.",
+    "loginFailed": "Sign-in was not completed. You can request sign-in again or try later.",
+    "denied": "This account is currently unavailable. Contact your company account administrator.",
+    "unavailable": "The remote host is currently unavailable. Contact your administrator.",
+    "stale": "This sign-in request has changed. Use the current prompt.",
+    "actionFailed": "The action could not be completed. Contact your administrator."
+  },
+  "zh": {
+    "title": "远程主机连接",
+    "import": "导入连接资料",
+    "importing": "正在选择并检查连接资料…",
+    "enrollmentKeyMissing": "这份连接资料缺少开通凭据，请联系管理员补齐。",
+    "imported": "连接资料已导入，仍需确认网络是否就绪。",
+    "importHelp": "请向管理员领取你的私密连接资料文件夹，然后选择该文件夹。",
+    "enrollmentUnknown": "上次开通结果无法确认，请联系管理员核实。已停止再次提交资料。",
+    "enrollmentRejected": "开通资料已失效，请联系管理员处理。已停止再次提交。",
+    "importInvalid": "这份连接资料无法通过检查，请向管理员领取有效的文件夹。",
+    "workspaceBlocked": "远程工作区暂时无法载入，请联系管理员。",
+    "workspaceSyncing": "正在更新远程工作区…",
+    "workspaceLimit": "通过默认添加工作区选择本地文件夹，首次使用远程模型时才关联同名远程工作区。本地文件不会自动上传。",
+    "unknown": "远程主机连接状态无法确认，请联系管理员。",
+    "checking": "正在检查远程主机连接…",
+    "details": "技术详情",
+    "signIn": "登录 {brand}",
+    "later": "稍后",
+    "recheck": "重新检查",
+    "provider": "{brand}（远程主机）",
+    "statusChecking": "检查中",
+    "statusUnknown": "无法确认",
+    "statusSignedIn": "已登录",
+    "statusSignIn": "需要登录",
+    "loginRequired": "需要登录，请到设置 → 远程主机连接 点登录",
+    "authorizing": "请在授权窗口完成本人登录。",
+    "complete": "远程主机连接检查完成。",
+    "loginUnknown": "登录状态无法确认，请联系管理员。",
+    "notReady": "远程主机连接尚未准备好，请联系管理员。",
+    "enrollment": "我需要连接资料，请联系管理员发放。",
+    "settings": "远程主机连接还没有设置好，请联系管理员。",
+    "loginFailed": "登录没有完成。你可以再次请求登录，或稍后再试。",
+    "denied": "这个账号暂时不能使用，请联系公司账号管理员。",
+    "unavailable": "远程主机暂时连不上，请联系管理员。",
+    "stale": "这个登录询问已经更新，请使用当前提示。",
+    "actionFailed": "操作未能完成，请联系管理员。"
+  }
+};
+ const needKey=code=>code==='ENROLLMENT_RESULT_UNKNOWN'?'enrollmentUnknown':code==='ENROLLMENT_REJECTED'?'enrollmentRejected':code==='CONNECTION_UNKNOWN'?'unknown':code==='ENROLLMENT_INVALID'?'importInvalid':code==='DEPENDENCY_REQUIRED'?'notReady':['ENROLLMENT_REQUIRED','NETWORK_KEY_INVALID'].includes(code)?'enrollment':code==='SETTINGS_REQUIRED'?'settings':code==='LOGIN_FAILED'?'loginFailed':code==='POLICY_DENIED'?'denied':code==='LOGIN_PROMPT_INVALID'?'stale':code==='ACTION_FAILED'?'actionFailed':'unavailable';
+ function messageKey(s){if(!s||s.phase==='checking')return 'checking';if(s.phase==='blocked'||s.phase==='disposed')return needKey(s.technicalDetails?.code);if(s.phase==='login-required')return 'loginRequired';if(s.phase==='authorizing')return 'authorizing';return Object.keys(s.providerNeeds??{}).length?'loginUnknown':'complete';}
+ function createWorkbenchController(call,subscribe){
+  let state={value:undefined,error:''},disposed=false,started=false,off,revision=-1,instance,eventVersion=0;let download;const retiredDownloads=new Set(),retired=new Set(),listeners=new Set();
+  const publish=next=>{state=next;for(const fn of listeners)fn();};
+  const accept=(value,source='event')=>{if(disposed)return;const next=value?.startup?.revision,id=value?.startup?.instanceId;if(typeof id!=='string'||!id||!Number.isSafeInteger(next)||next<0){publish({value:undefined,error:'CONNECTION_UNKNOWN'});return;}if(id!==instance){if(instance&&(source==='http'||retired.has(id)))return;if(instance)retired.add(instance);instance=id;revision=-1;}if(next<revision)return;revision=next;const incoming=value.loginComponent?.download;if(incoming){if(typeof incoming.instanceId!=='string'||!Number.isSafeInteger(incoming.revision)||incoming.revision<0||retiredDownloads.has(incoming.instanceId)||(download&&incoming.instanceId===download.instanceId&&incoming.revision<download.revision)||(download&&incoming.instanceId!==download.instanceId&&source==='http')){value={...value,loginComponent:{...value.loginComponent,download}};}else{if(download&&incoming.instanceId!==download.instanceId)retiredDownloads.add(download.instanceId);download=incoming;}}publish({value,error:value.actionErrorCode||value.enrollment?.need?.code||(value.actionError?'ACTION_FAILED':'')});};
+  const failure=()=>{if(!disposed)publish({value:undefined,error:'CONNECTION_UNKNOWN'});};
+  return {getSnapshot:()=>state,subscribe:fn=>{listeners.add(fn);return()=>listeners.delete(fn);},async action(path='/check',body){const at=eventVersion;try{const value=await call(path,'POST',body);if(at===eventVersion)accept(value,'http');}catch{if(at===eventVersion)failure();}},start(){if(disposed||started)return;started=true;off=subscribe(value=>{eventVersion++;accept(value);},()=>{eventVersion++;failure();});const at=eventVersion;void call('/status','GET').then(value=>{if(at===eventVersion)accept(value,'http');},()=>{if(at===eventVersion)failure();});},dispose(){disposed=true;off?.();listeners.clear();}};
+ }
+ function useWorkbench(workbench){const snapshot=React.useSyncExternalStore(workbench.subscribe,workbench.getSnapshot);return {state:snapshot.value,error:snapshot.error,action:workbench.action};}
+ function isLoginQuestion(state){const s=state?.startup;return s?.phase==='login-required'&&s.requestId&&s.provider&&s.logins?.[s.provider]===false&&!s.checkingProviders?.includes(s.provider)&&!s.providerNeeds?.[s.provider];}
+ function Details({state,error,t}){return h('details',null,h('summary',null,t('details')),h('pre',null,JSON.stringify({actionErrorCode:error||state?.actionErrorCode,enrollment:state?.enrollment,actionError:state?.actionError,inventory:state?.inventory,network:state?.network,connect:state?.connect,workspaces:state?.workspaces,checks:state?.startup?.technicalDetails,providerNeeds:state?.startup?.providerNeeds,checkingProviders:state?.startup?.checkingProviders,loginComponent:state?.loginComponent},null,2)));}
+ function Choices({state,action,t}){if(!isLoginQuestion(state))return null;const brand=state.startup.provider==='claude'?'Claude':'Codex';return h('div',null,h('button',{type:'button',onClick:()=>void action('/respond/'+state.startup.requestId+'/authorize')},t('signIn',{brand})),h('button',{type:'button',onClick:()=>void action('/respond/'+state.startup.requestId+'/defer')},t('later')));}
+ function Enrollment({state,action,t}){const value=state?.enrollment;if(!value)return null;return h('div',null,h('p',null,t('importHelp')),value.phase==='imported'?h('p',null,t('imported')):h('button',{type:'button',disabled:value.phase==='importing'||['ENROLLMENT_RESULT_UNKNOWN','ENROLLMENT_REJECTED'].includes(value.need?.code),onClick:()=>void action('/enrollment/import')},t(value.phase==='importing'?'importing':'import')));}
+ function observeNotice(node,notify){
+  if(!node||typeof IntersectionObserver==='undefined'||typeof document==='undefined')return ()=>{};
+  let shown=false,intersecting=false;const check=visible=>{if(!shown&&visible&&document.visibilityState==='visible'&&node.isConnected&&node.getClientRects().length){shown=true;notify();}};
+  const observer=new IntersectionObserver(rows=>{for(const row of rows)if(row.target===node){intersecting=row.isIntersecting&&row.intersectionRatio>0;check(intersecting);}});observer.observe(node);
+  const visible=()=>check(intersecting);document.addEventListener('visibilitychange',visible);
+  return()=>{observer.disconnect();document.removeEventListener('visibilitychange',visible);};
+ }
+ function WorkspaceNoticeRow({item,onVisible}){
+  const ref=React.useRef(null);
+  React.useEffect(()=>observeNotice(ref.current,()=>onVisible(item)),[item.notice.noticeId]);
+  return h('p',{ref},'此工作区对应远程主机上的 '+item.workspaceName+'；本地文件不会自动上传。');
+ }
+ function WorkspaceNotices({state,action}){
+  const [retained,setRetained]=React.useState([]),sent=React.useRef(new Set());
+  const pending=(state?.workspaceBindings?.items??[]).filter(item=>item.notice.settings==='pending'&&['ready','unavailable'].includes(item.status));
+  const items=[...retained,...pending.filter(item=>!retained.some(old=>old.notice.noticeId===item.notice.noticeId))];
+  // Retain each sentence during this opening after its independent durable ACK.
+  React.useEffect(()=>{if(pending.length)setRetained(old=>[...old,...pending.filter(item=>!old.some(prior=>prior.notice.noticeId===item.notice.noticeId))]);},[pending.map(item=>item.notice.noticeId).join(',')]);
+  const visible=item=>{if(!sent.current.has(item.notice.noticeId)){sent.current.add(item.notice.noticeId);void action('/workspace-notice/'+item.notice.noticeId+'/displayed');}};
+  return h('div',null,...items.map(item=>h(WorkspaceNoticeRow,{key:item.notice.noticeId,item,onVisible:visible})));
+ }
+ function DownloadProgress({state}){const d=state?.loginComponent?.download;if(!d)return null;const text=d.phase==='downloading'?'正在从官方地址下载登录组件：已下载 '+d.receivedBytes+' 字节'+(d.totalBytes===null?'（总大小未知）':'，共 '+d.totalBytes+' 字节')+'。登录页面仍经远程主机连接。':d.phase==='verifying'?'正在校验登录组件…':d.phase==='unpacking'?'正在解压登录组件…':d.phase==='failed'?'登录组件准备失败，请查看技术详情。':d.phase==='cancelled'?'登录组件下载已取消。':null;return text?h('p',{role:'status'},text):null;}
+ function Panel({workbench,t}){const {state,error,action}=useWorkbench(workbench),message=messageKey(state?.startup),errorKey=error==='ENROLLMENT_REQUIRED'&&state?.enrollment?.phase==='blocked'?'enrollmentKeyMissing':error?needKey(error):undefined,bodyVisible=!['downloading','verifying','unpacking'].includes(state?.loginComponent?.download?.phase)&&(!error||!!state?.startup)&&!(state?.enrollment?.phase==='blocked'&&state.enrollment.need);return h('section',{'aria-label':t('title')},h('h2',null,t('title')),h(DownloadProgress,{state}),h(Enrollment,{state,action,t}),bodyVisible?h('p',{role:errorKey===message?'alert':undefined},t(message)):null,errorKey&&(!bodyVisible||errorKey!==message)?h('p',{role:'alert'},t(errorKey)):null,state?h(React.Fragment,null,...['codex','claude'].map(provider=>{const brand=provider==='claude'?'Claude':'Codex',checking=state.startup?.checkingProviders?.includes(provider),unknown=state.startup?.providerNeeds?.[provider]||state.startup?.logins?.[provider]===undefined;return h('div',{key:provider},h('p',null,t('provider',{brand})+': '+t(checking?'statusChecking':unknown?'statusUnknown':state.startup.logins[provider]?'statusSignedIn':'statusSignIn')),state.startup?.logins?.[provider]===false&&!checking&&!unknown&&(!isLoginQuestion(state)||state.startup.provider!==provider)?h('button',{type:'button',disabled:state.startup.phase==='authorizing',onClick:()=>void action('/start-login/'+provider+'/'+state.startup.instanceId+'/'+state.startup.revision)},t('signIn',{brand})):null);}),h(Choices,{state,action,t}),h(WorkspaceNotices,{state,action}),h('p',null,t('workspaceLimit'))):null,h(Details,{state,error,t}),h('button',{type:'button',onClick:()=>void action()},t('recheck')));}
+ return {name:'ai-workbench-connect-client',inject:['slots','locale'],createWorkbenchController,Panel,dictionaries,observeNotice,apply(ctx){
+  ctx.effect(()=>ctx.locale.register(NS,dictionaries));const t=ctx.locale.bind(NS);
+  const workbench=createWorkbenchController(async(path,method,body)=>{const response=await fetch('/ai-workbench-connect'+path,{method,...body===undefined?{}:{headers:{'Content-Type':'application/json'},body:JSON.stringify(body)}});const value=await response.json();if(!response.ok&&!value?.startup)throw Error('connection-unavailable');return value;},(accept,failure)=>{const source=new EventSource('/ai-workbench-connect/events');source.onmessage=event=>{try{accept(JSON.parse(event.data));}catch{failure();}};source.onerror=failure;return()=>source.close();});
+  ctx.effect(()=>{workbench.start();return()=>workbench.dispose();});
+  ctx.slots.inject('settings.section',()=>ctx.slots.register({name:'settings.section',id:'ai-workbench-connect',label:()=>t('title'),locale:NS,inject:()=>({workbench})},Panel));
+ }};
+}});

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: ai-workbench-connect
+      name: '@ai-workbench/connect'

package/helper/auth-status.cjs

@@ -0,0 +1,18 @@
+// Only official CLI status. No credential files, OAuth, network call or output-text guessing.
+const {spawn}=require('node:child_process');const {StringDecoder}=require('node:string_decoder');const decoder=new StringDecoder('utf8');
+const [provider,budgetText]=process.argv.slice(1),budget=Number(budgetText);
+if(!['codex','claude'].includes(provider)||!Number.isSafeInteger(budget)||budget<1)process.exit(2);
+let stdout='',size=0,invalid=false,finished=false;
+const child=spawn(provider,provider==='codex'?['login','status']:['auth','status'],{stdio:['ignore','pipe','pipe']});
+const stop=()=>{invalid=true;child.kill('SIGKILL');};
+process.on('SIGHUP',stop);process.on('SIGTERM',stop);process.stdout.on('error',stop);child.once('error',()=>{invalid=true;});
+for(const [stream,collect] of [[child.stdout,provider==='claude'],[child.stderr,false]])stream.on('data',b=>{size+=b.length;if(size>budget){stop();return;}if(collect)stdout+=decoder.write(b);});
+function finish(exitCode){
+ if(finished)return;finished=true;
+ stdout+=decoder.end();let loggedIn=null;
+ if(!invalid&&provider==='codex'&&(exitCode===0||exitCode===1))loggedIn=exitCode===0;
+ if(!invalid&&provider==='claude')try{const v=JSON.parse(stdout);if(v&&typeof v==='object'&&!Array.isArray(v)&&typeof v.loggedIn==='boolean')loggedIn=v.loggedIn;}catch(error){process.stderr.write("AUTH_STATUS_JSON_INVALID:"+(error instanceof SyntaxError?"SyntaxError":"ParseError")+"\n");}
+ const code=Number.isInteger(exitCode)&&exitCode>=0&&exitCode<=255?exitCode:1;
+ process.stdout.write(JSON.stringify({protocolVersion:1,provider,exitCode,loggedIn})+'\n',()=>process.exit(code));
+}
+child.once('exit',code=>{if(invalid)finish(code);});child.once('close',finish);

package/helper/claude-callback.cjs

@@ -0,0 +1,29 @@
+const {timingSafeEqual}=require('node:crypto');
+const callbackUri='https://platform.claude.com/oauth/code/callback';
+function parse(value){try{return value instanceof URL?value:new URL(value);}catch{return null;}}
+function isClaudeAuthorizeUrl(value){const u=parse(value);return !!u&&!u.username&&!u.password&&!u.hash&&['https://claude.com/cai/oauth/authorize','https://claude.ai/oauth/authorize','https://platform.claude.com/oauth/authorize'].includes(u.origin+u.pathname);}
+function isCallback(value){const u=parse(value);return !!u&&u.origin+u.pathname===callbackUri;}
+function opaque(value){return typeof value==='string'&&value.length>0&&!/[#\x00-\x20\x7f]/.test(value);}
+function single(url,key){const values=url.searchParams.getAll(key);return values.length===1?values[0]:null;}
+function context(authorize){
+ const u=parse(authorize);if(!isClaudeAuthorizeUrl(u))throw new Error('CLAUDE_AUTH_CONTEXT_INVALID');
+ const state=single(u,'state');
+ if(!opaque(state)||single(u,'response_type')!=='code'||single(u,'redirect_uri')!==callbackUri||single(u,'code_challenge_method')!=='S256'||!opaque(single(u,'code_challenge')))throw new Error('CLAUDE_AUTH_CONTEXT_INVALID');
+ return {state};
+}
+function same(a,b){const x=Buffer.from(a),y=Buffer.from(b);return x.length===y.length&&timingSafeEqual(x,y);}
+function validateClaudePaste(authorize,pasted){
+ try{const {state}=context(authorize);if(typeof pasted!=='string')return false;const fields=pasted.split('#');return fields.length===2&&opaque(fields[0])&&opaque(fields[1])&&same(fields[1],state);}catch{return false;}
+}
+function createClaudeCapture(authorize){
+ const {state}=context(authorize);let done=false;
+ return {capture(value){
+  const u=parse(value);if(!isCallback(u))return {kind:'unrelated'};
+  if(done)return {kind:'duplicate'};done=true;
+  const code=single(u,'code'),received=single(u,'state');
+  if(u.username||u.password||u.hash||u.searchParams.has('error')||!opaque(code)||!opaque(received))return {kind:'error',error:'CLAUDE_CALLBACK_INVALID'};
+  if(!same(received,state))return {kind:'error',error:'CLAUDE_STATE_MISMATCH'};
+  return {kind:'code',code:code+'#'+received};
+ }};
+}
+module.exports={isClaudeAuthorizeUrl,isCallback,createClaudeCapture,validateClaudePaste};

package/helper/main.cjs

@@ -0,0 +1,19 @@
+const {app}=require('electron');
+const {createInterface}=require('node:readline');
+const {openWindow}=require('./window.cjs');
+const input=createInterface({input:process.stdin});let active,started=false;
+const send=event=>{process.stdout.write(JSON.stringify(event)+'\n');if(event.type==='closed')app.quit();};
+input.on('line',async line=>{
+ try{
+  const message=JSON.parse(line);
+  if(started){if(message.type==='close'){await active?.close();app.quit();}return;}
+  started=true;
+  // Parent creates this private disposable directory; OAuth data remains in a memory session.
+  app.setPath('userData',message.userDataDir);app.setPath('sessionData',message.userDataDir);
+  app.commandLine.appendSwitch('disable-background-networking');
+  app.commandLine.appendSwitch('disable-component-update');
+  await app.whenReady();active=await openWindow(require('electron'),message,send);
+ }catch{send({type:'error',code:'HELPER_FAILED'});await active?.close();app.quit();}
+});
+input.on('close',async()=>{await active?.close();app.quit();});
+app.on('window-all-closed',()=>{});

package/helper/projects.cjs

@@ -0,0 +1,57 @@
+const fs=require('node:fs/promises');
+const path=require('node:path');
+const {spawnSync}=require('node:child_process');
+function validName(name){return typeof name==='string'&&name!==''&&name!=='.'&&name!=='..'&&!/[\\/\x00-\x1f\x7f]/.test(name);}
+// Repository selection must come solely from trusted root, never the remote shell's Git overrides.
+const gitEnvironment=()=>Object.fromEntries(Object.entries(process.env).filter(([key])=>!key.startsWith('GIT_')));
+const outputPath=text=>text.endsWith('\n')?text.slice(0,-1):text;
+const error=code=>({protocolVersion:1,ok:false,error:{code}});
+async function execute(request){
+ if(request?.protocolVersion!==1||!['list','create'].includes(request.operation))return error('PROJECT_PROTOCOL_INVALID');
+ if(request.operation==='create'&&!validName(request.name))return error('PROJECT_NAME_INVALID');
+ const root=request.root;
+ try{
+  if(typeof root!=='string'||!path.isAbsolute(root))return error('PROJECT_ROOT_INVALID');
+  const st=await fs.lstat(root);
+  if(!st.isDirectory()||st.isSymbolicLink()||st.uid!==process.getuid()||(st.mode&0o077)!==0||await fs.realpath(root)!==root)return error('PROJECT_ROOT_INVALID');
+ }catch{return error('PROJECT_ROOT_INVALID');}
+ if(request.operation==='create'){
+  const destination=path.join(root,request.name);let created=false;
+  try{
+   await fs.mkdir(destination,{mode:0o700});created=true;
+   const result=spawnSync('git',['-c','init.templateDir=','init','--quiet','--',destination],{encoding:'utf8',stdio:['ignore','pipe','pipe'],env:gitEnvironment()});
+   if(result.status!==0)return error('PROJECT_INIT_FAILED');
+   const verified=spawnSync('git',['-C',destination,'rev-parse','--show-toplevel'],{encoding:'utf8',stdio:['ignore','pipe','pipe'],env:gitEnvironment()});
+   if(verified.status!==0||outputPath(verified.stdout)!==destination)return error('PROJECT_INIT_FAILED');
+   return {protocolVersion:1,ok:true,value:{name:request.name,path:destination}};
+  }catch(e){return error(!created&&e.code==='EEXIST'?'PROJECT_EXISTS':'PROJECT_CREATE_FAILED');}
+ }
+ try{
+  const projects=[],unavailable=[];
+  for(const name of (await fs.readdir(root)).sort()){
+   const directory=path.join(root,name),st=await fs.lstat(directory);let reason;
+   if(!validName(name))reason='invalid-name';
+   else if(st.isSymbolicLink())reason='symlink';
+   else if(!st.isDirectory())reason='not-directory';
+   else if(st.uid!==process.getuid()||(st.mode&0o077)!==0)reason='permissions';
+   else{
+    let metadata=false;try{await fs.lstat(path.join(directory,'.git'));metadata=true;}catch(e){if(e.code!=='ENOENT')throw e;}
+    if(!metadata)reason='not-git';
+    else{
+     const git=spawnSync('git',['-C',directory,'rev-parse','--show-toplevel'],{encoding:'utf8',stdio:['ignore','pipe','pipe'],env:gitEnvironment()});
+     if(git.status!==0)reason='invalid-git';
+     else if(outputPath(git.stdout)!==directory)reason='outside-root';
+    }
+   }
+   if(reason)unavailable.push({name,reason});else projects.push({name,path:directory});
+  }
+  return {protocolVersion:1,ok:true,value:{projects,unavailable}};
+ }catch{return error('PROJECT_LIST_FAILED');}
+}
+async function main(){
+ let input='';for await(const chunk of process.stdin)input+=chunk;
+ let result;try{result=await execute(JSON.parse(input));}catch{result=error('PROJECT_PROTOCOL_INVALID');}
+ process.stdout.write(JSON.stringify(result)+'\n');
+}
+module.exports={execute,validName};
+if(require.main===module)void main();

package/helper/remote-command.cjs

@@ -0,0 +1,15 @@
+// Public transport adapter. SSH status describes this protocol, not the child command.
+const {spawn}=require('node:child_process');
+let request='',child,broken=false;
+const stop=()=>{broken=true;if(child?.pid)try{process.kill(-child.pid,'SIGKILL');}catch{}};
+process.stdout.on('error',stop);process.on('SIGHUP',stop);process.on('SIGTERM',stop);
+process.stdin.setEncoding('utf8');process.stdin.on('data',b=>request+=b);
+process.stdin.on('end',()=>{
+ if(broken){process.exitCode=2;return;}let r;try{r=JSON.parse(request);if(r.protocolVersion!==1||typeof r.nonce!=='string'||!/^[a-f0-9-]{36}$/.test(r.nonce)||typeof r.command!=='string'||(r.input!==undefined&&typeof r.input!=='string'))throw Error();}catch{process.exitCode=2;return;}request='';
+ const emit=(type,fields={})=>process.stdout.write(JSON.stringify({protocolVersion:1,nonce:r.nonce,type,...fields})+'\n');
+ emit('start');child=spawn('/bin/sh',['-c',r.command],{detached:true,stdio:['pipe','pipe','pipe']});
+ child.once('error',stop);child.stdin.on('error',stop);child.stdin.end(r.input);
+ for(const [stream,type] of [[child.stdout,'stdout'],[child.stderr,'stderr']])stream.on('data',b=>{if(broken)return;if(!emit(type,{data:b.toString('base64')})){stream.pause();process.stdout.once('drain',()=>stream.resume());}});
+ child.once('exit',()=>{try{process.kill(-child.pid,'SIGKILL');}catch{}});
+ child.once('close',(exitCode,signal)=>{if(!broken)emit('end',{exitCode,signal});});
+});

package/helper/remote-login.cjs

@@ -0,0 +1,25 @@
+// Public source transported as a fixed node -e program; OAuth values use stdin/stdout only.
+const {spawn}=require('node:child_process');
+const {createInterface}=require('node:readline');
+const {mkdtempSync,mkdirSync,rmSync}=require('node:fs');
+const {homedir}=require('node:os');const {join}=require('node:path');
+const [provider,graceText,mode]=process.argv.slice(1);const grace=Number(graceText);
+if(!['claude','codex'].includes(provider)||!Number.isSafeInteger(grace)||grace<0||grace>2147483647||(mode!==undefined&&mode!=='--probe-isolate'))process.exit(2);
+let temp,child,stopping=false,killTimer,codeSent=false,finished=false;
+const env={...process.env,BROWSER:'true'};
+if(mode==='--probe-isolate'){
+ temp=mkdtempSync(join(homedir(),'.aw-l-login-probe-'));
+ for(const dir of ['claude','codex','xdg'])mkdirSync(join(temp,dir),{mode:0o700});
+ env.CLAUDE_CONFIG_DIR=join(temp,'claude');env.CODEX_HOME=join(temp,'codex');env.XDG_CONFIG_HOME=join(temp,'xdg');
+}
+const input=createInterface({input:process.stdin});
+function signalGroup(signal){if(child?.pid)try{process.kill(-child.pid,signal);}catch(e){if(e.code!=='ESRCH')process.exitCode=1;}}
+function stop(){if(stopping||finished)return;stopping=true;signalGroup('SIGTERM');if(grace===0)signalGroup('SIGKILL');else killTimer=setTimeout(()=>signalGroup('SIGKILL'),grace);}
+function finish(code){if(finished)return;finished=true;clearTimeout(killTimer);signalGroup('SIGKILL');input.close();if(temp)rmSync(temp,{recursive:true});process.stdout.write('\nAW_LOGIN_RESULT '+JSON.stringify({protocolVersion:1,provider,exitCode:Number.isInteger(code)&&code>=0&&code<=255?code:null,stopping})+'\n');process.exitCode=code===0&&!stopping?0:1;process.stdin.destroy();}
+process.on('SIGTERM',stop);process.on('SIGHUP',stop);process.on('SIGINT',stop);process.stdout.on('error',stop);process.stderr.on('error',stop);
+child=spawn(provider,provider==='claude'?['auth','login','--claudeai']:['login'],{env,detached:true,stdio:['pipe','pipe','pipe']});
+child.stdin.on('error',stop);child.on('error',()=>finish(1));
+child.on('spawn',()=>{process.stdout.write('AW_LOGIN_PROCESS '+JSON.stringify({pid:child.pid,group:child.pid,provider})+'\n');});
+child.stdout.pipe(process.stdout,{end:false});child.stderr.pipe(process.stderr,{end:false});child.on('close',finish);
+input.on('line',line=>{try{const message=JSON.parse(line);if(message.type==='close'){stop();return;}if(message.type!=='code'||provider!=='claude'||codeSent||typeof message.value!=='string'||!message.value||/[\x00-\x20\x7f]/.test(message.value))throw Error();codeSent=true;child.stdin.end(message.value+'\n');}catch{stop();}});
+input.on('close',stop);

package/helper/window.cjs

@@ -0,0 +1,52 @@
+const {randomUUID}=require('node:crypto');
+const {isCallback,createClaudeCapture}=require('./claude-callback.cjs');
+async function openWindow({app,BrowserWindow,session},boot,send){
+  const proxy=new URL(boot.proxy.url);
+  if(proxy.protocol!=='http:'||proxy.hostname!=='127.0.0.1'||proxy.username||proxy.password)throw new Error('PROXY_INVALID');
+  const capture=boot.provider==='claude'?createClaudeCapture(boot.url):null;
+  const ses=session.fromPartition('aw-login-'+randomUUID(),{cache:false});
+  await ses.setProxy({proxyRules:proxy.origin,proxyBypassRules:'<-loopback>'});
+  ses.setPermissionRequestHandler((_contents,_permission,callback)=>callback(false));
+  ses.on('will-download',event=>event.preventDefault());
+  const login=(event,contents,_details,authInfo,callback)=>{
+    if(contents?.session!==ses)return;
+    event.preventDefault();
+    if(authInfo.isProxy&&authInfo.host===proxy.hostname&&Number(authInfo.port)===Number(proxy.port))callback(boot.proxy.username,boot.proxy.password);
+    else callback();
+  };
+  app.on('login',login);
+  const win=new BrowserWindow({show:true,webPreferences:{session:ses,nodeIntegration:false,contextIsolation:true,sandbox:true,devTools:false,spellcheck:false}});
+  let closing,capturedCode=false;
+  const close=()=>closing??=(async()=>{
+    app.removeListener('login',login);if(!win.isDestroyed())win.destroy();
+    await ses.closeAllConnections();await ses.clearStorageData();await ses.clearCache();
+    boot.proxy.username='';boot.proxy.password='';send({type:'closed'});
+  })();
+  win.on('closed',()=>{void close().catch(()=>send({type:'error',code:'CLEANUP_FAILED'}));});
+  win.webContents.setWindowOpenHandler(({url})=>{
+    if(url.startsWith('https://'))void win.loadURL(url).catch(()=>send({type:'error',code:'NAVIGATION_FAILED'}));
+    return {action:'deny'};
+  });
+  const captureUrl=(url,main,event)=>{
+    if(!capture||main!==true||typeof url!=='string')return;
+    const result=capture.capture(url);if(result.kind==='unrelated')return;
+    event?.preventDefault?.();
+    if(result.kind==='code'){capturedCode=true;send({type:'claude-code',code:result.code});}
+    else if(result.kind==='error')send({type:'error',code:result.error});
+  };
+  win.webContents.on('will-navigate',(event,legacyUrl)=>{
+    const url=typeof event.url==='string'?event.url:legacyUrl;
+    captureUrl(url,true,event);
+    if(typeof url!=='string'||(!url.startsWith('https://')&&!url.startsWith('http://127.0.0.1:1455/')))event.preventDefault();
+  });
+  win.webContents.on('will-redirect',(event,legacyUrl,_inPlace,legacyMain)=>{
+    captureUrl(typeof event.url==='string'?event.url:legacyUrl,typeof event.isMainFrame==='boolean'?event.isMainFrame:legacyMain,event);
+  });
+  win.webContents.on('did-navigate',(_event,url)=>captureUrl(url,true));
+  try{await win.loadURL(boot.url);}catch(error){
+    if(!(capturedCode&&(error?.code==='ERR_ABORTED'||error?.errno===-3))){await close();throw new Error('NAVIGATION_FAILED');}
+  }
+  send({type:'ready'});
+  return {close};
+}
+module.exports={openWindow,isCallback};

package/lib/api.d.ts

@@ -0,0 +1,196 @@
+export type Provider = 'claude' | 'codex';
+export type NeedCode = 'ACTIVATION_CONFLICT' | 'ACTIVATION_CANCELLED' | 'ENROLLMENT_CLEANUP_UNBOUND' | 'ENROLLMENT_CLEANUP_FAILED' | 'ENROLLMENT_MISMATCH' | 'LOCAL_STATE_INVALID' | 'ALREADY_RUNNING' | 'ENROLLMENT_RECEIPT_REQUIRED' | 'CONTROL_PROTOCOL_INVALID' | 'HELPER_HANDOFF_FAILED' | 'HELPER_SHUTDOWN_FORCED' | 'ENROLLMENT_RESULT_UNKNOWN' | 'ENROLLMENT_REJECTED' | 'ENROLLMENT_REQUIRED' | 'ENROLLMENT_INVALID' | 'NETWORK_KEY_INVALID' | 'HOST_OFFLINE' | 'EMPLOYEE_MISSING' | 'SSH_FAILED' | 'LOGIN_REQUIRED' | 'POLICY_DENIED' | 'CONNECTION_LOST' | 'DEPENDENCY_REQUIRED' | 'SETTINGS_REQUIRED' | 'AUTH_STATUS_INVALID' | 'LOGIN_FAILED' | 'LOGIN_PROMPT_INVALID' | 'DISPOSED' | 'HOST_TRUST_REQUIRED' | 'HOST_KEY_MISMATCH' | 'PROJECT_NAME_INVALID' | 'PROJECT_ROOT_INVALID' | 'PROJECT_EXISTS' | 'PROJECT_INIT_FAILED' | 'PROJECT_CREATE_FAILED' | 'PROJECT_LIST_FAILED' | 'PROJECT_PROTOCOL_INVALID' | 'PROJECT_BINDING_REQUIRED' | 'PROJECT_BINDING_INVALID' | 'PROJECT_BINDING_BUSY' | 'PROJECT_CREATE_UNKNOWN' | 'PROJECT_NOTICE_DELIVERY_UNKNOWN';
+export interface ConnectNeed {
+    code: NeedCode;
+    layer: 'enrollment' | 'network' | 'ssh' | 'auth' | 'integration' | 'settings' | 'projects';
+    message: string;
+    requires: string;
+    actor: 'employee' | 'administrator' | 'ai-administrator' | 'plugin';
+    action: {
+        id: string;
+        label: string;
+        available: boolean;
+    };
+    officialReason?: string;
+    lastSeen?: string;
+}
+export type Result<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    error: ConnectNeed;
+};
+export interface SessionTarget {
+    command: string;
+    root: string;
+    settingsPath: string;
+    protocolVersion: 1;
+}
+export interface HostContext {
+    enforcement: 'production' | 'test';
+    checkExitCode: 0 | 1;
+    failedChecks: {
+        id: string;
+        status: string;
+    }[];
+    unverifiedChecks: {
+        id: string;
+        status: string;
+    }[];
+}
+export interface SshTarget {
+    hostContext?: HostContext;
+    host: string;
+    username: string;
+    port: number;
+    proxyCommand: string;
+    projectRoot: string;
+    knownHostsFile: string;
+    session: SessionTarget;
+}
+export interface LoginState {
+    provider: Provider;
+    loggedIn: boolean;
+}
+export type Phase = 'idle' | 'enrolling' | 'network' | 'ssh' | 'connected' | 'checking-login' | 'login' | 'ready' | 'blocked' | 'disposed';
+export interface ConnectState {
+    phase: Phase;
+    target?: SshTarget;
+    provider?: Provider;
+    need?: ConnectNeed;
+}
+export interface Project {
+    name: string;
+    path: string;
+}
+export interface ProjectList {
+    projects: Project[];
+    unavailable: {
+        name: string;
+        reason: 'invalid-name' | 'symlink' | 'not-directory' | 'permissions' | 'not-git' | 'invalid-git' | 'outside-root';
+    }[];
+}
+export interface ConnectionState {
+    instanceId: string;
+    phase: 'connecting' | 'connected' | 'unavailable' | 'disposed';
+    epoch: number;
+    need?: ConnectNeed;
+}
+export interface LoginPromptState {
+    instanceId: string;
+    revision: number;
+    phase: 'checking' | 'blocked' | 'login-required' | 'authorizing' | 'idle' | 'disposed';
+    message: string;
+    requestId?: string;
+    provider?: Provider;
+    logins: Partial<Record<Provider, boolean>>;
+    checkingProviders: Provider[];
+    providerNeeds: Partial<Record<Provider, ConnectNeed>>;
+    technicalDetails: {
+        code?: NeedCode;
+        hostContext?: HostContext;
+    };
+}
+export interface LoginPromptResult {
+    requestId: string;
+    provider: Provider;
+    outcome: 'deferred' | 'logged-in' | 'failed' | 'invalidated';
+    need?: ConnectNeed;
+}
+export interface ContractInfo {
+    apiVersion: '0.7.0';
+    status: 'implemented';
+    workspaceBinding: 'native-local-v1';
+}
+export interface WorkspaceUse {
+    provider: Provider;
+    purpose: 'user-turn';
+}
+export interface WorkspaceNotice {
+    noticeId: string;
+    claimId: string;
+    workspaceName: string;
+    messageKey: 'remote-workspace-binding';
+}
+export interface SessionProjectTarget {
+    instanceId: string;
+    epoch: number;
+    bindingRevision: number;
+    bindingId: string;
+    sessionId: string;
+    workspaceId: string;
+    project: Project;
+    target: SshTarget;
+    notice?: WorkspaceNotice;
+}
+export interface WorkspaceBindingState {
+    instanceId: string;
+    revision: number;
+    items: {
+        bindingId: string;
+        workspaceId: string;
+        workspaceName: string;
+        status: 'ready' | 'unavailable' | 'invalid' | 'pending';
+        notice: {
+            noticeId: string;
+            settings: 'pending' | 'displayed';
+            provider: 'pending' | 'claimed' | 'delivered' | 'unknown';
+        };
+    }[];
+}
+export type WorkspaceNoticeReceipt = {
+    noticeId: string;
+    surface: 'settings';
+    outcome: 'displayed';
+} | {
+    noticeId: string;
+    surface: 'provider';
+    claimId: string;
+    sessionId: string;
+    provider: Provider;
+    outcome: 'delivered';
+    deliveryId: string;
+} | {
+    noticeId: string;
+    surface: 'provider';
+    claimId: string;
+    sessionId: string;
+    provider: Provider;
+    outcome: 'not-delivered' | 'unknown';
+};
+export interface EnrollmentState {
+    instanceId: string;
+    revision: number;
+    phase: 'empty' | 'importing' | 'imported' | 'blocked';
+    need?: ConnectNeed;
+}
+export interface ConnectApi {
+    getContractInfo(): ContractInfo;
+    getEnrollmentState(): EnrollmentState;
+    onEnrollmentState(listener: (state: EnrollmentState) => void): () => void;
+    importEnrollment(): Promise<Result<{
+        outcome: 'imported' | 'cancelled';
+        state: EnrollmentState;
+    }>>;
+    getWorkspaceBindingState(): WorkspaceBindingState;
+    onWorkspaceBindingState(listener: (state: WorkspaceBindingState) => void): () => void;
+    acknowledgeWorkspaceNotice(receipt: WorkspaceNoticeReceipt): Promise<Result<void>>;
+    resolveSessionProject(sessionId: string, use: WorkspaceUse): Promise<Result<SessionProjectTarget>>;
+    getConnectionState(): ConnectionState;
+    onConnectionState(listener: (state: ConnectionState) => void): () => void;
+    getLoginPromptState(): LoginPromptState;
+    onLoginPromptState(listener: (state: LoginPromptState) => void): () => void;
+    requestLoginPrompt(provider: Provider, intent: 'automatic' | 'user'): Promise<Result<LoginPromptState>>;
+    respondLoginPrompt(requestId: string, action: 'authorize' | 'defer'): Promise<Result<LoginPromptState>>;
+    refreshLoginPrompts(): Promise<Result<LoginPromptState>>;
+    listProjects(): Promise<Result<ProjectList>>;
+    createProject(name: string): Promise<Result<Project>>;
+    getState(): ConnectState;
+    connect(): Promise<Result<SshTarget>>;
+    getSshTarget(): Promise<Result<SshTarget>>;
+    checkLogin(provider: Provider): Promise<Result<LoginState>>;
+    login(provider: Provider): Promise<Result<LoginState>>;
+    ensureReady(provider: Provider): Promise<Result<SshTarget>>;
+    dispose(): Promise<void>;
+}

package/lib/api.js

@@ -0,0 +1 @@
+export {};

package/lib/archive.d.ts

@@ -0,0 +1 @@
+export declare function unpackZip(zipPath: string, root: string, maxBytes: number, signal?: AbortSignal): Promise<void>;