dsh-cliworker-now 0.0.0-stage → 0.7.6

package/lib/types/host/telemetry.js

@@ -0,0 +1,158 @@
+import { closeSync, openSync, readSync, statSync } from 'node:fs';
+import { hermesTokenUsage } from "./hermes-adapter.js";
+const obj = (v) => v && typeof v === 'object' && !Array.isArray(v) ? v : {};
+const count = (v) => typeof v === 'number' && Number.isSafeInteger(v) && v >= 0 ? v : undefined;
+function usage(v, scope, cacheSeparate = false) {
+    const u = obj(v), input = count(u.input_tokens), output = count(u.output_tokens);
+    const cacheRead = count(u.cache_read_tokens ?? u.cache_read_input_tokens ?? u.cached_input_tokens);
+    const creation = count(u.cache_creation_input_tokens);
+    const total = count(u.total_tokens) ??
+        (input !== undefined && output !== undefined
+            ? input + output + (cacheSeparate ? (cacheRead ?? 0) + (creation ?? 0) : 0)
+            : undefined);
+    return total === undefined || !Number.isSafeInteger(total)
+        ? undefined
+        : { total, input, output, cacheRead, scope };
+}
+/** Only public, observed CLI envelopes; no model-name capacity guesses. */
+export function extractTelemetry(cli, records) {
+    const result = { replies: {} };
+    const mimoSteps = new Map();
+    for (const record of records) {
+        const v = obj(record);
+        if (cli === 'antigravity') {
+            const step = obj(v.step_update);
+            if (v.event === 'step_update' &&
+                step.step_type === 'agent_response' &&
+                Number.isInteger(step.step_index)) {
+                const u = usage(step.usage, 'response');
+                if (u)
+                    result.replies[String(step.step_index)] = u;
+            }
+            if (v.event === 'result')
+                result.usage = usage(obj(v.result).usage, 'session') ?? result.usage;
+        }
+        else if (cli === 'codex' && v.type === 'turn.completed') {
+            // CLI's receipt does not reliably distinguish resumed-thread vs turn counters.
+            result.usage = usage(v.usage, 'reported') ?? result.usage;
+            result.finalReply = result.usage;
+        }
+        else if (cli === 'hermes' && v.type === 'result') {
+            result.usage = hermesTokenUsage(v.tokens) ?? result.usage;
+            result.finalReply = result.usage;
+        }
+        else if (cli === 'claude' && v.type === 'result') {
+            result.usage = usage(v.usage, 'run', true) ?? result.usage;
+            result.finalReply = result.usage;
+            const models = Object.values(obj(v.modelUsage));
+            if (models.length === 1)
+                result.contextCapacity = count(obj(models[0]).contextWindow) || undefined;
+        }
+        else if (cli === 'mimo' && v.type === 'step_finish') {
+            const part = obj(v.part), t = obj(part.tokens);
+            const u = usage({
+                total_tokens: t.total,
+                input_tokens: t.input,
+                output_tokens: t.output,
+                cache_read_tokens: obj(t.cache).read,
+            }, 'response');
+            if (u && typeof part.id === 'string')
+                mimoSteps.set(part.id, u);
+        }
+        // Only explicit occupancy fields count as context, never cumulative input/total usage.
+        const context = obj(v.context_usage);
+        const used = count(context.used_tokens), capacity = count(context.max_tokens);
+        if (used !== undefined)
+            result.contextUsed = used;
+        if (capacity !== undefined && capacity > 0)
+            result.contextCapacity = capacity;
+    }
+    if (mimoSteps.size) {
+        result.usage = { total: [...mimoSteps.values()].reduce((n, u) => n + u.total, 0), scope: 'run' };
+        result.finalReply = result.usage;
+    }
+    return result;
+}
+/** Read-only projection also recovers telemetry from pre-feature private raw logs.
+ * Incremental byte reads keep live polling O(new bytes), with bounded cache/line memory.
+ * Malformed/torn records affect telemetry only, never conversation restoration.
+ */
+export class TelemetryReader {
+    cache = new Map();
+    read(path, cli) {
+        let stat;
+        try {
+            stat = statSync(path);
+        }
+        catch {
+            return { replies: {} };
+        }
+        let entry = this.cache.get(path);
+        if (entry && entry.size === stat.size && entry.mtime === stat.mtimeMs)
+            return entry.result;
+        if (!entry || stat.size < entry.size || (stat.size === entry.size && stat.mtimeMs !== entry.mtime))
+            entry = { size: 0, mtime: 0, records: [], pending: '', result: { replies: {} } };
+        // Bound unexpected raw output. A missing meter must never break a conversation.
+        if (stat.size > 64 * 1024 * 1024)
+            return { replies: {} };
+        let fd;
+        try {
+            fd = openSync(path, 'r');
+            const buf = Buffer.alloc(stat.size - entry.size);
+            const n = readSync(fd, buf, 0, buf.length, entry.size);
+            const lines = (entry.pending + buf.subarray(0, n).toString('utf8')).split('\n');
+            entry.pending = lines.pop() ?? '';
+            for (const line of lines) {
+                try {
+                    const v = JSON.parse(line), step = obj(v.step_update);
+                    // Retain only metric envelopes, not conversation text/tool output.
+                    if (v.event === 'step_update' && step.usage)
+                        entry.records.push({
+                            event: v.event,
+                            step_update: { step_type: step.step_type, step_index: step.step_index, usage: step.usage },
+                        });
+                    else if (v.event === 'result')
+                        entry.records.push({ event: v.event, result: { usage: obj(v.result).usage } });
+                    else if (v.type === 'result' || v.type === 'turn.completed')
+                        entry.records.push({ type: v.type, usage: v.usage, modelUsage: v.modelUsage, tokens: v.tokens });
+                    else if (v.type === 'step_finish')
+                        entry.records.push({ type: v.type, part: v.part });
+                    if (v.context_usage)
+                        entry.records.push({ context_usage: v.context_usage });
+                }
+                catch {
+                    /* Ignore diagnostics and incomplete JSON. */
+                }
+            }
+            if (entry.records.length > 10000)
+                return { replies: {} };
+            entry.size += n;
+            entry.mtime = stat.mtimeMs;
+            entry.result = extractTelemetry(cli, entry.records);
+            this.cache.delete(path);
+            this.cache.set(path, entry);
+            if (this.cache.size > 128)
+                this.cache.delete(this.cache.keys().next().value);
+            return entry.result;
+        }
+        catch {
+            return { replies: {} };
+        }
+        finally {
+            if (fd !== undefined)
+                closeSync(fd);
+        }
+    }
+}
+export function attachTelemetry(rows, runId, telemetry) {
+    const replies = rows.filter((row) => row.kind === 'assistant' && row.id.startsWith(`${runId}:`));
+    for (const row of replies) {
+        const step = row.id.split(':')[1] === 'assistant' ? row.id.split(':')[2] : undefined;
+        if (step !== undefined && telemetry.replies[step])
+            row.usage = telemetry.replies[step];
+    }
+    const last = replies.at(-1);
+    if (last && !last.usage)
+        last.usage = telemetry.finalReply;
+}
+//# sourceMappingURL=telemetry.js.map

package/lib/types/host/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../../src/host/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAItD,MAAM,GAAG,GAAG,CAAC,CAAU,EAAuB,EAAE,CAC9C,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAyB,CAAC,CAAC,CAAC,EAAE,CAAA;AACnF,MAAM,KAAK,GAAG,CAAC,CAAU,EAAsB,EAAE,CAC/C,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5E,SAAS,KAAK,CAAC,CAAU,EAAE,KAA0B,EAAE,aAAa,GAAG,KAAK;IAC1E,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EACd,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAC7B,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,uBAAuB,IAAI,CAAC,CAAC,mBAAmB,CAAC,CAAA;IAClG,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAA;IACrD,MAAM,KAAK,GACT,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;QACrB,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAC1C,CAAC,CAAC,KAAK,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3E,CAAC,CAAC,SAAS,CAAC,CAAA;IAChB,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QACxD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;AAChD,CAAC;AAKD,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,GAAU,EAAE,OAA2B;IACtE,MAAM,MAAM,GAAiB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;QACrB,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;YAC/B,IACE,CAAC,CAAC,KAAK,KAAK,aAAa;gBACzB,IAAI,CAAC,SAAS,KAAK,gBAAgB;gBACnC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EACjC,CAAC;gBACD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;gBACvC,IAAI,CAAC;oBAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAA;YACpD,CAAC;YACD,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;gBAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,CAAA;QAChG,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC1D,+EAA+E;YAC/E,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,KAAK,CAAA;YACzD,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,CAAA;QAClC,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,CAAC,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAA;YACzD,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,CAAA;QAClC,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAA;YAC1D,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,CAAA;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;YAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,SAAS,CAAA;QACpG,CAAC;aAAM,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EACtB,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACtB,MAAM,CAAC,GAAG,KAAK,CACb;gBACE,YAAY,EAAE,CAAC,CAAC,KAAK;gBACrB,YAAY,EAAE,CAAC,CAAC,KAAK;gBACrB,aAAa,EAAE,CAAC,CAAC,MAAM;gBACvB,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI;aACrC,EACD,UAAU,CACX,CAAA;YACD,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;gBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACjE,CAAC;QACD,uFAAuF;QACvF,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EACrC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACtC,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAA;QACjD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,CAAC;YAAE,MAAM,CAAC,eAAe,GAAG,QAAQ,CAAA;IAC/E,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;QAChG,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,CAAA;IAClC,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,eAAe;IAClB,KAAK,GAAG,IAAI,GAAG,EAGpB,CAAA;IACH,IAAI,CAAC,IAAY,EAAE,GAAU;QAC3B,IAAI,IAAI,CAAA;QACR,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QACxB,CAAC;QACD,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC,MAAM,CAAA;QAC1F,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,CAAC;YAChG,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAA;QAClF,gFAAgF;QAChF,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QACxD,IAAI,EAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YACxB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;YAChD,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YACtD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC/E,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;YACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EACxB,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;oBAC3B,mEAAmE;oBACnE,IAAI,CAAC,CAAC,KAAK,KAAK,aAAa,IAAI,IAAI,CAAC,KAAK;wBACzC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;4BACjB,KAAK,EAAE,CAAC,CAAC,KAAK;4BACd,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;yBAC3F,CAAC,CAAA;yBACC,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;wBAC3B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;yBAC3E,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB;wBACzD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;yBAC7F,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa;wBAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;oBACrF,IAAI,CAAC,CAAC,aAAa;wBAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAA;gBAC7E,CAAC;gBAAC,MAAM,CAAC;oBACP,6CAA6C;gBAC/C,CAAC;YACH,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK;gBAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;YACxD,KAAK,CAAC,IAAI,IAAI,CAAC,CAAA;YACf,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAA;YAC1B,KAAK,CAAC,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YACnD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAA;YAC7E,OAAO,KAAK,CAAC,MAAM,CAAA;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QACxB,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,KAAK,SAAS;gBAAE,SAAS,CAAC,EAAE,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;CACF;AACD,MAAM,UAAU,eAAe,CAAC,IAAoB,EAAE,KAAa,EAAE,SAAuB;IAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAA;IAChG,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACpF,IAAI,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACxF,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,UAAU,CAAA;AAC5D,CAAC"}

package/lib/types/host/zcode-account-models.d.ts

@@ -0,0 +1,16 @@
+/** Native standalone-account-provider-runtime.js identity binding (ZCode 0.16.9).
+ * Keys remain in the Host and are used only for the corresponding native route.
+ * OAuth access/refresh tokens and old identities are deliberately not fallbacks.
+ */
+export declare function readZCodeAccountBindings(authDirectory: string, providerIds: string[], options?: {
+    signal?: AbortSignal;
+    credentialSecret?: string;
+}): Promise<Map<string, {
+    identity: string;
+    key: string;
+}>>;
+/** Key-only view retained for account-scoped metadata queries. */
+export declare function readZCodeAccountApiKeys(authDirectory: string, providerIds: string[], options?: {
+    signal?: AbortSignal;
+    credentialSecret?: string;
+}): Promise<Map<string, string>>;

package/lib/types/host/zcode-account-models.js

@@ -0,0 +1,114 @@
+import { constants } from 'node:fs';
+import { lstat, open } from 'node:fs/promises';
+import { createHash, createDecipheriv } from 'node:crypto';
+import { homedir, platform, userInfo } from 'node:os';
+import { join } from 'node:path';
+/** Native standalone-account-provider-runtime.js identity binding (ZCode 0.16.9).
+ * Keys remain in the Host and are used only for the corresponding native route.
+ * OAuth access/refresh tokens and old identities are deliberately not fallbacks.
+ */
+export async function readZCodeAccountBindings(authDirectory, providerIds, options = {}) {
+    const result = new Map();
+    if (!providerIds.length)
+        return result;
+    options.signal?.throwIfAborted();
+    let file;
+    const buffer = Buffer.alloc(64 * 1024 + 1);
+    let key;
+    try {
+        for (const directory of [
+            authDirectory,
+            join(authDirectory, '.zcode'),
+            join(authDirectory, '.zcode/v2'),
+        ]) {
+            const info = await lstat(directory);
+            if (!info.isDirectory() || info.isSymbolicLink())
+                throw new Error('Unsafe ZCode credential directory');
+        }
+        file = await open(join(authDirectory, '.zcode/v2/credentials.json'), constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        const info = await file.stat();
+        if (!info.isFile() || info.nlink !== 1 || info.size > 64 * 1024 || !info.size)
+            throw new Error('Unsafe ZCode credential file');
+        let length = 0;
+        while (length < buffer.length) {
+            options.signal?.throwIfAborted();
+            const { bytesRead } = await file.read(buffer, length, buffer.length - length, null);
+            if (!bytesRead)
+                break;
+            length += bytesRead;
+        }
+        const after = await file.stat();
+        if (length > 64 * 1024 ||
+            length !== info.size ||
+            info.size !== after.size ||
+            info.mtimeMs !== after.mtimeMs)
+            throw new Error('ZCode credentials changed during read');
+        const raw = JSON.parse(buffer.subarray(0, length).toString('utf8'));
+        if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+            throw new Error('Invalid ZCode credentials');
+        const values = raw;
+        let username = 'unknown';
+        try {
+            username = userInfo().username;
+        }
+        catch {
+            /* native fallback */
+        }
+        const secret = (options.credentialSecret ?? process.env.ZCODE_CREDENTIAL_SECRET?.trim()) ||
+            `zcode-credential-fallback:${platform()}:${homedir()}:${username}`;
+        key = createHash('sha256').update(secret).digest();
+        const decode = (id) => {
+            const value = values[id];
+            if (value == null)
+                return;
+            if (typeof value !== 'string')
+                throw new Error('Invalid ZCode credential value');
+            if (!value.startsWith('enc:v1:'))
+                return value.trim() || undefined;
+            const parts = value.slice(7).split('.');
+            if (parts.length !== 3 || parts.some((part) => !/^[A-Za-z0-9_-]+$/.test(part)))
+                throw new Error('Invalid ZCode cipher');
+            const [iv, tag, body] = parts.map((part) => Buffer.from(part, 'base64url'));
+            if (iv.length !== 12 || tag.length !== 16)
+                throw new Error('Invalid ZCode cipher');
+            const cipher = createDecipheriv('aes-256-gcm', key, iv);
+            cipher.setAuthTag(tag);
+            const plain = Buffer.concat([cipher.update(body), cipher.final()]);
+            try {
+                return plain.toString('utf8').trim() || undefined;
+            }
+            finally {
+                plain.fill(0);
+            }
+        };
+        for (const providerId of new Set(providerIds)) {
+            options.signal?.throwIfAborted();
+            const identity = decode(`account-provider:${providerId}:identity`);
+            if (!identity)
+                continue;
+            const apiKey = decode(`account-provider:coding-plan:${providerId}:account:${encodeURIComponent(identity)}:api-key`);
+            if (apiKey)
+                result.set(providerId, { identity, key: apiKey });
+        }
+        return result;
+    }
+    catch (error) {
+        options.signal?.throwIfAborted();
+        if (error.code === 'ENOENT')
+            return result;
+        throw new Error('无法安全读取 ZCode 当前账号的 Worker 凭据，请在原生登录设置中检查');
+    }
+    finally {
+        key?.fill(0);
+        buffer.fill(0);
+        await file?.close();
+    }
+}
+/** Key-only view retained for account-scoped metadata queries. */
+export async function readZCodeAccountApiKeys(authDirectory, providerIds, options = {}) {
+    return new Map([...(await readZCodeAccountBindings(authDirectory, providerIds, options))].map(([provider, value]) => [
+        provider,
+        value.key,
+    ]));
+}
+//# sourceMappingURL=zcode-account-models.js.map

package/lib/types/host/zcode-account-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zcode-account-models.js","sourceRoot":"","sources":["../../../src/host/zcode-account-models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,aAAqB,EACrB,WAAqB,EACrB,UAA+D,EAAE;IAEjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6C,CAAA;IACnE,IAAI,CAAC,WAAW,CAAC,MAAM;QAAE,OAAO,MAAM,CAAA;IACtC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,IAAI,IAAkD,CAAA;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAA;IAC1C,IAAI,GAAuB,CAAA;IAC3B,IAAI,CAAC;QACH,KAAK,MAAM,SAAS,IAAI;YACtB,aAAa;YACb,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC;YAC7B,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC;SACjC,EAAE,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QACxG,CAAC;QACD,IAAI,GAAG,MAAM,IAAI,CACf,IAAI,CAAC,aAAa,EAAE,4BAA4B,CAAC,EACjD,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CACjE,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI;YAC3E,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACjD,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;YAChC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAA;YACnF,IAAI,CAAC,SAAS;gBAAE,MAAK;YACrB,MAAM,IAAI,SAAS,CAAA;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC/B,IACE,MAAM,GAAG,EAAE,GAAG,IAAI;YAClB,MAAM,KAAK,IAAI,CAAC,IAAI;YACpB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YACxB,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAE9B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAC1D,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QACvG,MAAM,MAAM,GAAG,GAA8B,CAAA;QAC7C,IAAI,QAAQ,GAAG,SAAS,CAAA;QACxB,IAAI,CAAC;YACH,QAAQ,GAAG,QAAQ,EAAE,CAAC,QAAQ,CAAA;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;QACD,MAAM,MAAM,GACV,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;YACzE,6BAA6B,QAAQ,EAAE,IAAI,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAA;QACpE,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAA;QAClD,MAAM,MAAM,GAAG,CAAC,EAAU,EAAsB,EAAE;YAChD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAA;YACxB,IAAI,KAAK,IAAI,IAAI;gBAAE,OAAM;YACzB,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;YAChF,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,SAAS,CAAA;YAClE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5E,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;YACzC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAA;YAC3E,IAAI,EAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAI,CAAC,MAAM,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;YACpF,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAI,EAAE,EAAG,CAAC,CAAA;YACzD,MAAM,CAAC,UAAU,CAAC,GAAI,CAAC,CAAA;YACvB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAK,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YACnE,IAAI,CAAC;gBACH,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAA;YACnD,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACf,CAAC;QACH,CAAC,CAAA;QACD,KAAK,MAAM,UAAU,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,UAAU,WAAW,CAAC,CAAA;YAClE,IAAI,CAAC,QAAQ;gBAAE,SAAQ;YACvB,MAAM,MAAM,GAAG,MAAM,CACnB,gCAAgC,UAAU,YAAY,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAC7F,CAAA;YACD,IAAI,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAChC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAA;QACrE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;YAAS,CAAC;QACT,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACZ,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,IAAI,EAAE,KAAK,EAAE,CAAA;IACrB,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAAqB,EACrB,WAAqB,EACrB,UAA+D,EAAE;IAEjE,OAAO,IAAI,GAAG,CACZ,CAAC,GAAG,CAAC,MAAM,wBAAwB,CAAC,aAAa,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACpG,QAAQ;QACR,KAAK,CAAC,GAAG;KACV,CAAC,CACH,CAAA;AACH,CAAC"}

package/lib/types/host/zcode-adapter.d.ts

@@ -0,0 +1,93 @@
+import { type Effort, type ModelChoice, type TaskMode } from '../shared/types.ts';
+import type { EventInput, ProtocolResult } from './protocol.ts';
+import type { AccountIdentity } from './account-identity.ts';
+import { probeAccountModels } from './account-models.mjs';
+export declare const ZCODE_DENIED_TOOLS: readonly ["Agent", "Task", "Skill", "TaskOutput", "TaskStop", "SendMessage", "ReadSessionContext", "CreateWorkflow", "AmendWorkflow", "SaveWorkflow", "EvalWorkflowSnippet", "ListWorkflowRuns", "GetWorkflowRun", "ResumeWorkflowRun", "ResolveWorkflowQuestion", "ListSavedWorkflows", "ListModels", "mcp__node_repl__js"];
+export interface ZCodeInput {
+    executable: string;
+    project: string;
+    preference: {
+        model: string;
+        effort: Effort;
+    };
+    mode: TaskMode;
+    prompt: string;
+    conversationId?: string;
+    stateDirectory: string;
+    authDirectory?: string;
+    builtinConfig?: string;
+    nativeHome?: string;
+    personalConfig?: string;
+}
+/** Login and every worker share auth; sessions, logs and model choices stay isolated. */
+export declare function zcodeAuthDirectory(configured?: string, stateDirectory?: string): string;
+/** A complete, version-controlled CLI can be deployed here without relying on /tmp. */
+export declare function managedZCodeEntry(home?: string): string;
+export declare function zcodeEnvironment(executable: string, state: string, auth?: string, builtin?: string): {
+    ZCODE_DATA_BASE_DIR: string;
+    ZCODE_STORAGE_DIR: string;
+    ZCODE_SESSION_DB_PATH: string;
+    ZCODE_LOG_DIR: string;
+    ZCODE_PERSONAL_PROVIDER_CONFIG_FILE: string;
+    ZCODE_BUILTIN_PROVIDER_CONFIG_FILE: string;
+    TMPDIR: string;
+    ZCODE_CREDENTIAL_SECRET?: string | undefined;
+};
+export declare function prepareZCode(input: ZCodeInput): Promise<{
+    argv: string[];
+    env: {
+        ZCODE_DATA_BASE_DIR: string;
+        ZCODE_STORAGE_DIR: string;
+        ZCODE_SESSION_DB_PATH: string;
+        ZCODE_LOG_DIR: string;
+        ZCODE_PERSONAL_PROVIDER_CONFIG_FILE: string;
+        ZCODE_BUILTIN_PROVIDER_CONFIG_FILE: string;
+        TMPDIR: string;
+        ZCODE_CREDENTIAL_SECRET?: string | undefined;
+    };
+}>;
+export interface ZCodeDiscoveryOptions {
+    nativeHome?: string;
+    personalConfig?: string;
+    signal?: AbortSignal;
+    /** Isolated read-only account metadata transport for tests. */
+    probeOptions?: Parameters<typeof probeAccountModels>[1];
+    credentialSecret?: string;
+}
+/** Private Host material, using the exact discovery overlay and current-account key binding. */
+export declare function readZCodeBindingMaterial(executable: string, authDirectory: string, builtinConfig?: string, options?: ZCodeDiscoveryOptions): Promise<{
+    credentials: {
+        provider: string;
+        identity?: string;
+        key: string;
+        baseUrl: string;
+        apiType: string;
+    }[];
+    sourceIds: string[];
+}>;
+/** Account evidence is an explicit native API credential, never a catalog entry. */
+export declare function readZCodePersonalIdentity(authDirectory?: string, options?: ZCodeDiscoveryOptions): AccountIdentity;
+/** Public projection contains only original model/provider identifiers and proven reasoning choices. */
+export declare function parseZCodeBuiltin(value: unknown, personal?: unknown): ModelChoice[];
+export declare function discoverZCode(executable: string, _capture: (argv: string[], env?: Record<string, string>) => Promise<string>, _stateDirectory: string, authDirectory?: string, builtinConfig?: string, options?: ZCodeDiscoveryOptions): Promise<ModelChoice[]>;
+export declare class ZCodeProtocol {
+    private emit;
+    private identify;
+    private maxLineBytes;
+    private expectedModel?;
+    private decoder;
+    private pending;
+    private steps;
+    private open;
+    private toolNames;
+    private failed;
+    private completed;
+    private ended;
+    conversationId?: string;
+    result?: ProtocolResult;
+    constructor(emit: (event: EventInput) => void, identify: (id: string) => void, maxLineBytes: number, expectedModel?: string | undefined);
+    feed(chunk: Buffer | string): void;
+    end(): void;
+    private step;
+    private line;
+}