@songsid/agend 2.2.1 → 2.2.5

package/dist/backend-availability.d.ts

@@ -0,0 +1,120 @@
+export type AvailabilityState = "usable" | "not_installed" | "not_signed_in" | "too_old" | "unknown";
+/** A login's state: `not_required` — the CLI talks to a provider of its own (codex's custom provider), no login of ours. */
+export type AuthState = "valid" | "invalid" | "unknown" | "not_required";
+export interface BackendAvailability {
+    backend: string;
+    state: AvailabilityState;
+    /** The executable the launch would run (null: not found or not probed). */
+    path: string | null;
+    version: string | null;
+    auth: AuthState;
+    /** The oldest version AgEnD supports, when the state is too_old. */
+    minVersion: string | null;
+    /** When it was last probed (monotonic ms), or null: never. */
+    checkedAt: number | null;
+}
+/** The oldest CLI version each backend supports. Only gates there is evidence for; others have none. */
+export declare const MIN_SUPPORTED_VERSION: Readonly<Record<string, string>>;
+/** How old a snapshot may be before a read asks for a refresh (it is still served). */
+export declare const AVAILABILITY_STALE_MS: number;
+/** "2.30.1" from "kiro-cli 2.30.1 (abc)"; null when there is no version in it. */
+export declare function parseVersion(text: string | null | undefined): string | null;
+/** a < b, for dotted numeric versions. */
+export declare function versionBelow(a: string, b: string): boolean;
+/** The state for what the probes answered. Pure. */
+export declare function availabilityState(a: {
+    installed: boolean | null;
+    version: string | null;
+    auth: AuthState;
+    minVersion: string | null;
+}): AvailabilityState;
+/** What the store needs from the host; tests pass fakes (no CLI, no account, no network). */
+export interface AvailabilityProbes {
+    /** The executable's path, null when it is not installed, undefined when there was no answer in time. */
+    resolve(backend: string): Promise<string | null | undefined>;
+    /** `<path> --version`, parsed; null when there is no answer. */
+    version(backend: string, path: string): Promise<string | null>;
+    /** The backend's default login, read offline (credential files, API-key variables). */
+    auth(backend: string): Promise<AuthState>;
+    /** What changes when the binary or its login changes (mtimes and sizes); null when it cannot be read. */
+    signature(backend: string, path: string): Promise<string | null>;
+}
+export declare class BackendAvailabilityStore {
+    private readonly backends;
+    private readonly probes;
+    private rows;
+    private queue;
+    private pending;
+    private readonly now;
+    private readonly onChange;
+    constructor(backends: readonly string[], probes: AvailabilityProbes, opts?: {
+        now?: () => number;
+        onChange?: () => void;
+    });
+    /**
+     * The published rows, in the catalog's order. Never probes, not even in the background (a handler must not fork):
+     * the owner refreshes at launch, on its timer and after an install or sign-in.
+     */
+    snapshot(): BackendAvailability[];
+    get(backend: string): BackendAvailability | null;
+    /** Whether any row is older than AVAILABILITY_STALE_MS (or never probed). */
+    stale(): boolean;
+    private view;
+    private isStale;
+    /**
+     * Probe these backends (all by default), ONE AT A TIME across every caller; resolves when they are published.
+     * `force`: probe even when nothing changed (Refresh, a /login install or sign-in).
+     */
+    refresh(backends?: readonly string[], opts?: {
+        force?: boolean;
+    }): Promise<void>;
+    private probeOne;
+}
+/** Found the way the launch finds it (resolveBinary): on PATH, else in a known install directory. */
+export declare function resolveBackendBinary(backend: string): Promise<string | null | undefined>;
+/** The cap a `--version` run gets: no CLI started for a probe can take the fleet's memory (one OOM took a fleet down). */
+export declare const VERSION_PROBE_MEMORY = "512M";
+/** Each CLI's own "do not update" switches, set for a `--version` run (belt and braces: there is no network anyway). */
+export declare const NO_UPDATE_ENV: Readonly<Record<string, string>>;
+/** A backend whose version is read from a file next to its launcher: starting it at all can update it (#2078 review). */
+export declare const STATIC_VERSION_FILES: Readonly<Record<string, (path: string) => string>>;
+/**
+ * The version from what is on disk, starting nothing: a launcher's own version file (muse), else a version segment
+ * the package.json of the npm package that owns the binary (under node_modules), else a version segment of the real
+ * path in a layout we know (claude's `…/versions/2.1.302`, codex's `…/releases/0.162.1-<target>/`). Null when none says.
+ */
+export declare function staticBackendVersion(backend: string, path: string): Promise<string | null>;
+/**
+ * The version, without letting any CLI change anything or reach the network (the leader's rule, #2078):
+ * 1. what is on disk (staticBackendVersion) — every OS, every backend;
+ * 2. else, on Linux where an unprivileged network namespace can be made, `<path> --version` inside it (no network),
+ *    with the CLIs' no-update switches, a deadline and (where systemd can) a memory cap; muse never (STATIC_VERSION_FILES);
+ * 3. else unknown — never a networked `--version`. No version is no "too old" claim: the backend stays selectable.
+ */
+export declare function probeBackendVersion(backend: string, path: string): Promise<string | null>;
+/**
+ * Whether codex's own config runs it on a provider other than OpenAI (no login of ours): "yes", "no", or "unknown".
+ * Its default is the top level's `model_provider`, or the provider of the profile the top level selects
+ * (`profile = "x"` → `[profiles.x]`). A selected profile that cannot be read is unknown, never "no" (#2078 review).
+ */
+export declare function codexUsesOwnProvider(env?: NodeJS.ProcessEnv): Promise<"yes" | "no" | "unknown">;
+interface OfflineLogin {
+    /** Any of these files present (non-empty) means a login is stored. */
+    files: (env: NodeJS.ProcessEnv, home: string) => string[];
+    /** Any of these variables set means the CLI authenticates without a stored login. */
+    keys?: string[];
+    /** No file and no key: "invalid" when that is proof, "unknown" when the CLI has other ways we cannot see offline. */
+    absent: (platform: NodeJS.Platform) => "invalid" | "unknown";
+}
+/**
+ * Where each CLI keeps its login (the same paths usage/providers.ts reads). Presence is all that is checked offline:
+ * a stored login that has since expired still reads as signed in until the CLI says otherwise.
+ */
+export declare const OFFLINE_LOGINS: Readonly<Record<string, OfflineLogin>>;
+/** The default login's state, from files and variables only. */
+export declare function probeOfflineAuth(backend: string, env?: NodeJS.ProcessEnv, home?: string): Promise<AuthState>;
+/** mtime and size of the binary and the login files: the probe runs a CLI again only when this changes. */
+export declare function availabilitySignature(backend: string, path: string, env?: NodeJS.ProcessEnv, home?: string): Promise<string | null>;
+/** The host's probes. */
+export declare const hostAvailabilityProbes: AvailabilityProbes;
+export {};

package/dist/backend-availability.js

@@ -0,0 +1,396 @@
+/**
+ * #2072: which backends actually work on this host — installed, signed in, new enough — as one published snapshot.
+ *
+ * Pickers (`/backend` on the web, Discord and Telegram; `/ui/backends`; ClassicBot's `/start`; the setup wizard) used to
+ * ask "is it installed?" each in their own way, three of them with a synchronous `which` on the fleet's event loop, and
+ * none of them asked whether the CLI was signed in or new enough. Here the questions are answered by bounded
+ * asynchronous probes (child processes with deadlines, never an fs walk on the loop) and published; a handler only
+ * reads the snapshot (#tool-handlers-never-fork) and never asks for a probe — the fleet refreshes it at launch, every
+ * AVAILABILITY_STALE_MS, and after a /login install or sign-in.
+ *
+ * Unknown is never "unusable": a backend not probed yet, or whose probe gave no answer, stays selectable and is checked
+ * again when it is applied. Only a definite answer disables it: not installed, not signed in (for a login that needs
+ * one), or older than the minimum AgEnD supports. A probe that fails keeps the last definite answer (fail open).
+ *
+ * Cost and safety (the leader's rules, #2072):
+ * - Sign-in is read OFFLINE from credential files and API-key variables — never a model or API request, never the
+ *   CLI's own status command (`grok models` and `agy models` call the vendor; grok's also always exits 0, #1792).
+ *   Where a login cannot be judged offline the answer is unknown, not "signed in".
+ * - Probes run one backend at a time. The only CLI ever started is `<binary> --version`, and only when the binary or
+ *   its credential files changed since the last probe: inside a memory-capped scope where systemd can make one, and in
+ *   a network namespace with no network (`unshare -rn`) so no CLI can update itself or reach a vendor (#2078 review:
+ *   `muse --version` updated its own launcher). Before that, the version is read from disk wherever it is written there
+ *   (a version file, a versioned install path, an npm package.json), which starts nothing; muse is never started at
+ *   all. Without a network namespace (macOS, or a host that forbids one) no `--version` runs: unknown.
+ * - Each pass still asks whether each binary is there (`which`, and one `sh` test of the install directories, both
+ *   bounded children) — never a CLI.
+ */
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { readFile, readdir, realpath, stat } from "node:fs/promises";
+import { binaryProbe, spawnProbeCommand, PROBE_DEADLINE_MS } from "./binary-probe.js";
+import { BACKEND_INSTALLATION_INFO } from "./instance-lifecycle.js";
+import { KIRO_SUPPORTED_MIN } from "./backend/kiro.js";
+/** The oldest CLI version each backend supports. Only gates there is evidence for; others have none. */
+export const MIN_SUPPORTED_VERSION = { "kiro-cli": KIRO_SUPPORTED_MIN };
+/** How old a snapshot may be before a read asks for a refresh (it is still served). */
+export const AVAILABILITY_STALE_MS = 10 * 60_000;
+/** "2.30.1" from "kiro-cli 2.30.1 (abc)"; null when there is no version in it. */
+export function parseVersion(text) {
+    const m = /(\d+)\.(\d+)(?:\.(\d+))?/.exec(text ?? "");
+    return m ? `${m[1]}.${m[2]}.${m[3] ?? "0"}` : null;
+}
+/** a < b, for dotted numeric versions. */
+export function versionBelow(a, b) {
+    const pa = a.split(".").map(Number), pb = b.split(".").map(Number);
+    for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+        const x = pa[i] ?? 0, y = pb[i] ?? 0;
+        if (x !== y)
+            return x < y;
+    }
+    return false;
+}
+/** The state for what the probes answered. Pure. */
+export function availabilityState(a) {
+    if (a.installed === false)
+        return "not_installed";
+    if (a.installed === null)
+        return "unknown";
+    if (a.minVersion && a.version && versionBelow(a.version, a.minVersion))
+        return "too_old";
+    if (a.auth === "invalid")
+        return "not_signed_in";
+    return a.version === null && a.auth === "unknown" ? "unknown" : "usable";
+}
+export class BackendAvailabilityStore {
+    backends;
+    probes;
+    rows = new Map();
+    queue = Promise.resolve();
+    pending = new Set();
+    now;
+    onChange;
+    constructor(backends, probes, opts = {}) {
+        this.backends = backends;
+        this.probes = probes;
+        this.now = opts.now ?? (() => performance.now());
+        this.onChange = opts.onChange ?? (() => { });
+        for (const backend of backends)
+            this.rows.set(backend, { backend, state: "unknown", path: null, version: null, auth: "unknown", minVersion: null, checkedAt: null, signature: null });
+    }
+    /**
+     * The published rows, in the catalog's order. Never probes, not even in the background (a handler must not fork):
+     * the owner refreshes at launch, on its timer and after an install or sign-in.
+     */
+    snapshot() {
+        return this.backends.map(b => this.view(b));
+    }
+    get(backend) {
+        return this.rows.has(backend) ? this.view(backend) : null;
+    }
+    /** Whether any row is older than AVAILABILITY_STALE_MS (or never probed). */
+    stale() { return this.backends.some(b => this.isStale(b)); }
+    view(backend) {
+        const row = this.rows.get(backend);
+        if (!row)
+            return null;
+        const { signature: _s, ...shown } = row;
+        return shown;
+    }
+    isStale(backend) {
+        const at = this.rows.get(backend)?.checkedAt;
+        return at === null || at === undefined || this.now() - at > AVAILABILITY_STALE_MS;
+    }
+    /**
+     * Probe these backends (all by default), ONE AT A TIME across every caller; resolves when they are published.
+     * `force`: probe even when nothing changed (Refresh, a /login install or sign-in).
+     */
+    refresh(backends = this.backends, opts = {}) {
+        const wanted = backends.filter(b => this.rows.has(b) && (opts.force || !this.pending.has(b)));
+        for (const b of wanted)
+            this.pending.add(b);
+        const run = this.queue.then(async () => {
+            for (const b of wanted) {
+                try {
+                    await this.probeOne(b, !!opts.force);
+                }
+                catch { /* a failed probe keeps the last answer */ }
+                this.pending.delete(b);
+            }
+        });
+        this.queue = run.catch(() => { });
+        return run;
+    }
+    async probeOne(backend, force) {
+        const previous = this.rows.get(backend);
+        let path;
+        try {
+            path = await this.probes.resolve(backend);
+        }
+        catch {
+            path = undefined;
+        }
+        // No answer: keep what was known (fail open — never turn a usable backend into "unknown" or worse on a timeout).
+        if (path === undefined) {
+            this.rows.set(backend, { ...previous, checkedAt: previous.checkedAt === null ? null : this.now() });
+            return;
+        }
+        const signature = path ? await this.probes.signature(backend, path).catch(() => null) : "absent";
+        // Nothing changed since the last full probe: no CLI is started (the leader's cost rule).
+        if (!force && signature !== null && signature === previous.signature && previous.checkedAt !== null) {
+            this.rows.set(backend, { ...previous, checkedAt: this.now() });
+            return;
+        }
+        let version = null, auth = "unknown";
+        if (path) {
+            version = await this.probes.version(backend, path).catch(() => null);
+            auth = await this.probes.auth(backend).catch(() => "unknown");
+        }
+        // A version probe that failed keeps the version we knew for the same binary.
+        if (path && version === null && previous.path === path)
+            version = previous.version;
+        const minVersion = MIN_SUPPORTED_VERSION[backend] ?? null;
+        const state = availabilityState({ installed: path !== null, version, auth, minVersion });
+        const row = { backend, state, path, version, auth, minVersion: state === "too_old" ? minVersion : null, checkedAt: this.now(), signature };
+        this.rows.set(backend, row);
+        if (previous.state !== row.state || previous.path !== row.path || previous.version !== row.version || previous.auth !== row.auth)
+            this.onChange();
+    }
+}
+// ── The host's probes: child processes with deadlines (binary-probe.ts's rules), never a synchronous spawn ──
+/** Run one probe child and read its first output line within the deadline; undefined when there is no answer. */
+async function answer(child, deadlineMs = PROBE_DEADLINE_MS) {
+    let timer;
+    try {
+        return await Promise.race([child.answer, new Promise(r => { timer = setTimeout(() => { child.kill(); r(undefined); }, deadlineMs); })]);
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+/** `npm prefix -g`, asked once per process (an answer only; no answer is asked again next time). */
+let npmPrefixAnswer;
+async function npmPrefix() {
+    if (npmPrefixAnswer !== undefined)
+        return npmPrefixAnswer;
+    const got = await answer(spawnProbeCommand("npm", ["prefix", "-g"]), 3000);
+    if (got !== undefined)
+        npmPrefixAnswer = got;
+    return got ?? null;
+}
+/** The directories resolveBinary searches after PATH, without its synchronous `npm prefix -g` and readdir. */
+async function fallbackDirs(backend) {
+    const home = homedir();
+    const dirs = [...(BACKEND_INSTALLATION_INFO[backend]?.binDirs?.(process.env, home) ?? []), dirname(process.execPath),
+        join(home, ".local", "bin"), join(home, ".npm-global", "bin"), "/usr/local/bin", "/usr/bin", "/bin"];
+    try {
+        for (const v of (await readdir(join(home, ".nvm", "versions", "node"))).sort().reverse())
+            dirs.push(join(home, ".nvm", "versions", "node", v, "bin"));
+    }
+    catch { /* optional */ }
+    const prefix = await npmPrefix();
+    if (prefix)
+        dirs.push(join(prefix, "bin"));
+    return [...new Set(dirs)];
+}
+/** Found the way the launch finds it (resolveBinary): on PATH, else in a known install directory. */
+export async function resolveBackendBinary(backend) {
+    const binary = BACKEND_INSTALLATION_INFO[backend]?.binary;
+    if (!binary)
+        return null;
+    const onPath = await binaryProbe.probe(binary);
+    if (onPath.known && onPath.path)
+        return onPath.path;
+    const dirs = await fallbackDirs(backend);
+    // One child tests every candidate (an fs check on a dead mount could hang a pool thread forever; a child can be killed).
+    const found = await answer(spawnProbeCommand("sh", ["-c", 'for p; do [ -f "$p" ] && [ -x "$p" ] && { echo "$p"; exit 0; }; done; exit 1', "sh",
+        ...dirs.map(d => join(d, binary))]));
+    if (found)
+        return found;
+    // Not on PATH (a definite answer) and in no install directory: not installed. No answer from either: unknown.
+    return onPath.known && found === null ? null : undefined;
+}
+/** Whether `systemd-run --user --scope` works here (Linux with a user manager); learned once. */
+let scopeWorks = null;
+function canScope() {
+    if (process.platform !== "linux")
+        return Promise.resolve(false);
+    return scopeWorks ??= answer(spawnProbeCommand("systemd-run", ["--user", "--scope", "-q", "-p", "MemoryMax=64M", "--", "echo", "ok"]), 5000).then(a => a === "ok");
+}
+/** The cap a `--version` run gets: no CLI started for a probe can take the fleet's memory (one OOM took a fleet down). */
+export const VERSION_PROBE_MEMORY = "512M";
+/** Whether `unshare -rn` works here (a user and a network namespace, so a CLI runs with no network); learned once. */
+let netlessWorks = null;
+function canRunNetless() {
+    if (process.platform !== "linux")
+        return Promise.resolve(false);
+    return netlessWorks ??= answer(spawnProbeCommand("unshare", ["-rn", "--", "echo", "ok"]), 3000).then(a => a === "ok");
+}
+/** Each CLI's own "do not update" switches, set for a `--version` run (belt and braces: there is no network anyway). */
+export const NO_UPDATE_ENV = {
+    DISABLE_AUTOUPDATER: "1", OPENCODE_DISABLE_AUTOUPDATE: "1", NO_UPDATE_NOTIFIER: "1", CI: "1",
+};
+/** A backend whose version is read from a file next to its launcher: starting it at all can update it (#2078 review). */
+export const STATIC_VERSION_FILES = {
+    muse: (path) => join(dirname(path), ".muse-version"),
+};
+/**
+ * The version from what is on disk, starting nothing: a launcher's own version file (muse), else a version segment
+ * the package.json of the npm package that owns the binary (under node_modules), else a version segment of the real
+ * path in a layout we know (claude's `…/versions/2.1.302`, codex's `…/releases/0.162.1-<target>/`). Null when none says.
+ */
+export async function staticBackendVersion(backend, path) {
+    const file = STATIC_VERSION_FILES[backend];
+    if (file) {
+        try {
+            return parseVersion(await readFile(file(path), "utf8"));
+        }
+        catch {
+            return null;
+        }
+    }
+    let real;
+    try {
+        real = await realpath(path);
+    }
+    catch {
+        return null;
+    }
+    const parts = real.split("/");
+    // An npm-installed CLI: the package that owns the binary (…/node_modules/<pkg> or …/node_modules/@scope/<pkg>). Read
+    // first: an nvm prefix puts Node's own version in the path (…/nvm/versions/node/v22.22.2/…, #2078 review).
+    const nm = parts.lastIndexOf("node_modules");
+    if (nm >= 0 && parts[nm + 1]) {
+        const pkgDir = parts.slice(0, nm + (parts[nm + 1].startsWith("@") ? 3 : 2)).join("/");
+        try {
+            const pkg = JSON.parse(await readFile(join(pkgDir, "package.json"), "utf8"));
+            if (typeof pkg.version === "string")
+                return parseVersion(pkg.version);
+        }
+        catch { /* no package.json there */ }
+        return null;
+    }
+    // The versioned layouts we know: claude's …/versions/<v>, codex's …/releases/<v>-<target>/…. Only a segment whose
+    // parent is one of those names — never any version-looking directory on the way.
+    for (let i = parts.length - 1; i > 0; i--) {
+        if ((parts[i - 1] === "versions" || parts[i - 1] === "releases") && /^v?\d+\.\d+\.\d+(?:[-+.][\w.-]*)?$/.test(parts[i]))
+            return parseVersion(parts[i]);
+    }
+    return null;
+}
+/**
+ * The version, without letting any CLI change anything or reach the network (the leader's rule, #2078):
+ * 1. what is on disk (staticBackendVersion) — every OS, every backend;
+ * 2. else, on Linux where an unprivileged network namespace can be made, `<path> --version` inside it (no network),
+ *    with the CLIs' no-update switches, a deadline and (where systemd can) a memory cap; muse never (STATIC_VERSION_FILES);
+ * 3. else unknown — never a networked `--version`. No version is no "too old" claim: the backend stays selectable.
+ */
+export async function probeBackendVersion(backend, path) {
+    const known = await staticBackendVersion(backend, path);
+    if (known || STATIC_VERSION_FILES[backend])
+        return known;
+    if (!(await canRunNetless()))
+        return null;
+    const argv = ["unshare", "-rn", "--", "env", ...Object.entries(NO_UPDATE_ENV).map(([k, v]) => `${k}=${v}`), path, "--version"];
+    const child = (await canScope())
+        ? spawnProbeCommand("systemd-run", ["--user", "--scope", "-q", "-p", `MemoryMax=${VERSION_PROBE_MEMORY}`, "--", ...argv])
+        : spawnProbeCommand(argv[0], argv.slice(1));
+    return parseVersion(await answer(child, 5000));
+}
+/**
+ * Whether codex's own config runs it on a provider other than OpenAI (no login of ours): "yes", "no", or "unknown".
+ * Its default is the top level's `model_provider`, or the provider of the profile the top level selects
+ * (`profile = "x"` → `[profiles.x]`). A selected profile that cannot be read is unknown, never "no" (#2078 review).
+ */
+export async function codexUsesOwnProvider(env = process.env) {
+    let text;
+    try {
+        text = await readFile(join(env.CODEX_HOME || join(homedir(), ".codex"), "config.toml"), "utf8");
+    }
+    catch {
+        return "no";
+    }
+    const top = text.split(/^\s*\[/m)[0] ?? "";
+    const provider = (body) => /^\s*model_provider\s*=\s*"([^"]+)"/m.exec(body)?.[1] ?? null;
+    const own = (p) => (p ? (p !== "openai" ? "yes" : "no") : null);
+    const selected = /^\s*profile\s*=\s*"([^"]+)"/m.exec(top)?.[1];
+    if (selected) {
+        const name = selected.replace(/[.*+?^$()|[\]\\{}]/g, "\\$&");
+        const at = text.search(new RegExp(`^\\s*\\[profiles\\.(?:"${name}"|${name})\\]\\s*$`, "m"));
+        if (at < 0)
+            return "unknown";
+        const body = text.slice(at).split(/^\s*\[/m)[1] ?? "";
+        return own(provider(body)) ?? own(provider(top)) ?? "no";
+    }
+    return own(provider(top)) ?? "no";
+}
+/**
+ * Where each CLI keeps its login (the same paths usage/providers.ts reads). Presence is all that is checked offline:
+ * a stored login that has since expired still reads as signed in until the CLI says otherwise.
+ */
+export const OFFLINE_LOGINS = {
+    // macOS keeps Claude's login in the Keychain, which we do not open: there, no file is not proof.
+    // The config dir claude itself reads (claudeConfigDirFor): CLAUDE_CONFIG_DIR, else ~/.claude (#2078 review).
+    "claude-code": { files: (env, home) => [join(env.CLAUDE_CONFIG_DIR?.trim() || join(home, ".claude"), ".credentials.json")], keys: ["ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"],
+        absent: (platform) => platform === "darwin" ? "unknown" : "invalid" },
+    codex: { files: (env, home) => [join(env.CODEX_HOME || join(home, ".codex"), "auth.json")], keys: ["OPENAI_API_KEY"], absent: () => "invalid" },
+    // #1792: `grok models` exits 0 signed out, and calls xAI — the file is the only offline truth.
+    grok: { files: (env, home) => [join(env.GROK_HOME || join(home, ".grok"), "auth.json")], keys: ["XAI_API_KEY", "GROK_API_KEY"], absent: () => "invalid" },
+    antigravity: { files: (env, home) => [join(env.GEMINI_HOME || join(home, ".gemini"), "antigravity-cli", "antigravity-oauth-token")], absent: () => "invalid" },
+    // kiro keeps data.sqlite3 after a sign-out, so its presence proves only that kiro was used here, not a live login:
+    // it can read "signed in" for a signed-out kiro (fail open — never the other way).
+    "kiro-cli": { files: (env, home) => [join(env.KIRO_CLI_HOME || join(home, ".local", "share", "kiro-cli"), "data.sqlite3")], absent: () => "invalid" },
+    // OpenCode reads many providers' keys from the environment: no file is not proof.
+    opencode: { files: (env, home) => [join(env.XDG_DATA_HOME || join(home, ".local", "share"), "opencode", "auth.json")], absent: () => "unknown" },
+};
+/** The default login's state, from files and variables only. */
+export async function probeOfflineAuth(backend, env = process.env, home = homedir()) {
+    if (backend === "codex") {
+        const own = await codexUsesOwnProvider(env);
+        if (own === "yes")
+            return "not_required";
+        if (own === "unknown")
+            return "unknown";
+    }
+    const login = OFFLINE_LOGINS[backend];
+    if (!login)
+        return "unknown";
+    if (login.keys?.some(k => (env[k] ?? "").trim()))
+        return "valid";
+    for (const file of login.files(env, home)) {
+        try {
+            if ((await stat(file)).size > 0)
+                return "valid";
+        }
+        catch { /* next */ }
+    }
+    return login.absent(process.platform);
+}
+/** mtime and size of the binary and the login files: the probe runs a CLI again only when this changes. */
+export async function availabilitySignature(backend, path, env = process.env, home = homedir()) {
+    const parts = [];
+    for (const file of [path, ...(OFFLINE_LOGINS[backend]?.files(env, home) ?? [])]) {
+        try {
+            const st = await stat(file);
+            parts.push(`${file}:${st.mtimeMs}:${st.size}`);
+        }
+        catch {
+            parts.push(`${file}:-`);
+        }
+    }
+    for (const k of OFFLINE_LOGINS[backend]?.keys ?? [])
+        parts.push(`${k}:${env[k] ? 1 : 0}`);
+    return parts.join("|");
+}
+/** The host's probes. */
+export const hostAvailabilityProbes = {
+    resolve: resolveBackendBinary,
+    version: probeBackendVersion,
+    auth: (backend) => probeOfflineAuth(backend),
+    signature: (backend, path) => availabilitySignature(backend, path),
+};
+//# sourceMappingURL=backend-availability.js.map

package/dist/backend-availability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-availability.js","sourceRoot":"","sources":["../src/backend-availability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAmB,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAmBvD,wGAAwG;AACxG,MAAM,CAAC,MAAM,qBAAqB,GAAqC,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;AAE1G,uFAAuF;AACvF,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,MAAM,CAAC;AAEjD,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,IAA+B;IAC1D,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,YAAY,CAAC,CAAS,EAAE,CAAS;IAC/C,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,iBAAiB,CAAC,CAAoG;IACpI,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO,eAAe,CAAC;IAClD,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACzF,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IACjD,OAAO,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC3E,CAAC;AAcD,MAAM,OAAO,wBAAwB;IAON;IAA8C;IANnE,IAAI,GAAG,IAAI,GAAG,EAA8D,CAAC;IAC7E,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IACzC,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IACnB,GAAG,CAAe;IAClB,QAAQ,CAAa;IAEtC,YAA6B,QAA2B,EAAmB,MAA0B,EACnG,OAAsD,EAAE;QAD7B,aAAQ,GAAR,QAAQ,CAAmB;QAAmB,WAAM,GAAN,MAAM,CAAoB;QAEnG,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxL,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IAC/C,CAAC;IACD,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,6EAA6E;IAC7E,KAAK,KAAc,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,OAAe;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,GAAG,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACO,OAAO,CAAC,OAAe;QAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC;QAC7C,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,qBAAqB,CAAC;IACpF,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,WAA8B,IAAI,CAAC,QAAQ,EAAE,OAA4B,EAAE;QACjF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACrC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC;oBAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;gBAClG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjC,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,KAAc;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;QACzC,IAAI,IAA+B,CAAC;QACpC,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,GAAG,SAAS,CAAC;QAAC,CAAC;QAC9E,iHAAiH;QACjH,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACxI,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjG,yFAAyF;QACzF,IAAI,CAAC,KAAK,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACpG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAAC,OAAO;QACzE,CAAC;QACD,IAAI,OAAO,GAAkB,IAAI,EAAE,IAAI,GAAc,SAAS,CAAC;QAC/D,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACrE,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAkB,CAAC,CAAC;QACzE,CAAC;QACD,6EAA6E;QAC7E,IAAI,IAAI,IAAI,OAAO,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACnF,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;QAC1D,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,KAAK,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACzF,MAAM,GAAG,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC;QAC3I,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5B,IAAI,QAAQ,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpJ,CAAC;CACF;AAED,+GAA+G;AAE/G,iHAAiH;AACjH,KAAK,UAAU,MAAM,CAAC,KAAiB,EAAE,UAAU,GAAG,iBAAiB;IACrE,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,OAAO,CAAY,CAAC,CAAC,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrJ,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;YACrB,CAAC;QAAC,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;AAC7C,CAAC;AAED,oGAAoG;AACpG,IAAI,eAA0C,CAAC;AAC/C,KAAK,UAAU,SAAS;IACtB,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,IAAI,GAAG,KAAK,SAAS;QAAE,eAAe,GAAG,GAAG,CAAC;IAC7C,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,8GAA8G;AAC9G,KAAK,UAAU,YAAY,CAAC,OAAe;IACzC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QAClH,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACvG,IAAI,CAAC;QAAC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IACvL,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAe;IACxD,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IACzC,yHAAyH;IACzH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,8EAA8E,EAAE,IAAI;QAC5I,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,8GAA8G;IAC9G,OAAO,MAAM,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,iGAAiG;AACjG,IAAI,UAAU,GAA4B,IAAI,CAAC;AAC/C,SAAS,QAAQ;IACf,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChE,OAAO,UAAU,KAAK,MAAM,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACrK,CAAC;AACD,0HAA0H;AAC1H,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C,sHAAsH;AACtH,IAAI,YAAY,GAA4B,IAAI,CAAC;AACjD,SAAS,aAAa;IACpB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChE,OAAO,YAAY,KAAK,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACxH,CAAC;AACD,wHAAwH;AACxH,MAAM,CAAC,MAAM,aAAa,GAAqC;IAC7D,mBAAmB,EAAE,GAAG,EAAE,2BAA2B,EAAE,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG;CAC7F,CAAC;AACF,yHAAyH;AACzH,MAAM,CAAC,MAAM,oBAAoB,GAAuD;IACtF,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC;CACrD,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAe,EAAE,IAAY;IACtE,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,IAAI,EAAE,CAAC;QAAC,IAAI,CAAC;YAAC,OAAO,YAAY,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAAC,CAAC;IACrG,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,qHAAqH;IACrH,2GAA2G;IAC3G,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IAC7C,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA0B,CAAC;YACtG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,kHAAkH;IAClH,iFAAiF;IACjF,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1J,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAe,EAAE,IAAY;IACrE,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,KAAK,IAAI,oBAAoB,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAC/H,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,EAAE,CAAC;QAC9B,CAAC,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QACzH,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,OAAO,YAAY,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7E,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC/H,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACjG,MAAM,GAAG,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,0BAA0B,IAAI,KAAK,IAAI,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5F,IAAI,EAAE,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAC3D,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;AACpC,CAAC;AAYD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAA2C;IACpE,iGAAiG;IACjG,6GAA6G;IAC7G,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,mBAAmB,EAAE,yBAAyB,CAAC;QAChL,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE;IACvE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;IAC/I,+FAA+F;IAC/F,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;IACzJ,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;IAC9J,mHAAmH;IACnH,mFAAmF;IACnF,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;IACrJ,kFAAkF;IAClF,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;CACjJ,CAAC;AAEF,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAe,EAAE,MAAyB,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,EAAE;IAC5G,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,KAAK;YAAE,OAAO,cAAc,CAAC;QACzC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;IAC1C,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,OAAO,CAAC;IACjE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC;YAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,2GAA2G;AAC3G,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAe,EAAE,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,EAAE;IAC/H,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC;YAAC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QAAC,CAAC;IACzH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,IAAI,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,yBAAyB;AACzB,MAAM,CAAC,MAAM,sBAAsB,GAAuB;IACxD,OAAO,EAAE,oBAAoB;IAC7B,OAAO,EAAE,mBAAmB;IAC5B,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC;IAC5C,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC;CACnE,CAAC"}

package/dist/backend-command.d.ts

@@ -12,6 +12,7 @@
  * the web chat only present it (fleet-manager.ts, web-commands.ts).
  */
 import type { ModelOption } from "./backend/types.js";
+import type { AvailabilityState } from "./backend-availability.js";
 /** The word that picks the inherited value of a model or an effort, in the typed form and in the menus. */
 export declare const BACKEND_DEFAULT = "default";
 export interface BackendCommandDeps {
@@ -19,8 +20,15 @@ export interface BackendCommandDeps {
     currentBackend(instance: string): string;
     /** What the instance runs on now, as a reply shows it: "claude-code · opus". */
     currentDisplay(instance: string): string;
-    /** Backends whose CLI is installed on this host, found the way the launch finds it; never removed or test-only ones. */
-    installedBackends(): string[];
+    /**
+     * #2072: every backend of the catalog (never removed or test-only ones) with what this host's published snapshot says
+     * about it — installed, signed in, new enough. Read only; never probes.
+     */
+    availability(): Array<{
+        backend: string;
+        state: AvailabilityState;
+        minVersion?: string | null;
+    }>;
     /** The models `/model` would offer on that backend; empty when none are known. */
     models(backend: string): Promise<ModelOption[]>;
     /** A name the backend accepts beyond its list (claude-code's aliases and account catalog). */
@@ -45,11 +53,21 @@ export interface BackendPlan {
     model: string | null;
     effort: string | null;
 }
-/** One choice of a step. `token` is the argument it adds; `label` what the button says. */
+/**
+ * One choice of a step. `token` is the argument it adds; `label` what the button says. `disabled`: why it cannot be
+ * chosen here (shown, not hidden — a surface that cannot disable an option shows the reason and the step refuses it).
+ */
 export interface BackendChoice {
     token: string;
     label: string;
+    disabled?: string;
 }
+/** Why a backend cannot be chosen, or null when it can (usable, or unknown: checked again when applied). */
+export declare function backendUnusable(t: BackendCommandDeps["t"], row: {
+    backend: string;
+    state: AvailabilityState;
+    minVersion?: string | null;
+}): string | null;
 export type BackendStep = {
     kind: "choose";
     step: "backend" | "model" | "effort";

package/dist/backend-command.js

@@ -2,6 +2,15 @@
 export const BACKEND_DEFAULT = "default";
 /** The most choices one step offers: a Discord select menu's 25, less "default". */
 const MAX_MODEL_CHOICES = 24;
+/** Why a backend cannot be chosen, or null when it can (usable, or unknown: checked again when applied). */
+export function backendUnusable(t, row) {
+    switch (row.state) {
+        case "not_installed": return t("backend.reason_not_installed");
+        case "not_signed_in": return t("backend.reason_not_signed_in");
+        case "too_old": return t("backend.reason_too_old", row.minVersion ?? "?");
+        default: return null;
+    }
+}
 /** A chosen model or effort as a reply says it; `null` is the inherited one, named. */
 function shown(deps, key, value) {
     if (value !== null)
@@ -40,18 +49,28 @@ export async function backendStep(deps, instance, args) {
     if (args.length > 3)
         return { kind: "refuse", text: t("backend.usage") };
     const from = deps.currentBackend(instance);
-    const installed = deps.installedBackends();
+    const rows = deps.availability();
+    // The instance's own backend is never shown as unusable: a failed or stale probe must not disable it (fail open).
+    const why = (row) => (row.backend === from ? null : backendUnusable(t, row));
     if (args.length === 0) {
         return {
             kind: "choose", step: "backend", args: [], current: from,
             text: t("backend.menu", deps.currentDisplay(instance)),
-            choices: installed.map(b => ({ token: b, label: b === from ? `✓ ${b}` : b })),
+            choices: rows.map(row => {
+                const reason = why(row);
+                const label = row.backend === from ? `✓ ${row.backend}` : row.state === "unknown" ? `${row.backend} — ${t("backend.reason_unchecked")}` : row.backend;
+                return reason ? { token: row.backend, label: `${row.backend} — ${reason}`, disabled: reason } : { token: row.backend, label };
+            }),
         };
     }
     const backend = args[0].toLowerCase();
-    if (!installed.includes(backend)) {
-        return { kind: "refuse", text: t("backend.not_installed", args[0], installed.join(", ") || "—") };
+    const row = rows.find(r => r.backend === backend);
+    if (!row) {
+        return { kind: "refuse", text: t("backend.unknown_backend", args[0], rows.map(r => r.backend).join(", ") || "—") };
     }
+    const reason = why(row);
+    if (reason)
+        return { kind: "refuse", text: t("backend.unusable", backend, reason) };
     // The same backend is not a switch: nothing to restart for. A model or effort on it is /model's and /effort's job.
     if (backend === from)
         return { kind: "refuse", text: t("backend.same", instance, backend), noop: true };