dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/host/account-identity.js

@@ -0,0 +1,126 @@
+import { lstat, open } from 'node:fs/promises';
+import { constants } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { safePiOmpAncestors } from "./pi-omp-native.js";
+const LIMIT = 64 * 1024;
+const record = (value) => !!value && typeof value === 'object' && !Array.isArray(value);
+const credentialPresent = (value) => typeof value === 'string' && value.trim().length > 0;
+/** Only email is allowlisted. Reject controls/markup/credential-shaped strings outright. */
+export function accountEmail(value) {
+    if (typeof value !== 'string' || value.length > 254)
+        return undefined;
+    if (/\p{C}|[<>]|\b(?:Bearer|sk-|sk_|ghp_|ya29\.)/iu.test(value))
+        return undefined;
+    const email = value.trim();
+    return /^[^\s@]+@[^\s@]+\.[^\s@]+$/u.test(email) ? email : undefined;
+}
+function idTokenClaims(value) {
+    if (typeof value !== 'string' || value.length > 32 * 1024)
+        return undefined;
+    const pieces = value.split('.');
+    if (pieces.length !== 3 || !pieces.every((piece) => /^[A-Za-z0-9_-]+$/.test(piece)))
+        return undefined;
+    try {
+        const claims = JSON.parse(Buffer.from(pieces[1], 'base64url').toString('utf8'));
+        return record(claims) ? claims : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Local expiry is negative evidence only; an unsigned claim never proves login. */
+export function localTokenExpired(value, now = Date.now()) {
+    const expiry = idTokenClaims(value)?.exp;
+    return typeof expiry === 'number' && Number.isFinite(expiry) && expiry * 1000 <= now;
+}
+/**
+ * This format/path is verified from the installed AGY CLI. Reading is
+ * bounded and ephemeral. No credential leaves this function; ID tokens are decoded
+ * only for a display email, never treated as a remotely verified assertion.
+ */
+export function localAccountIdentity(options = {}) {
+    return async (cli, signal) => {
+        if (cli !== 'antigravity')
+            return undefined;
+        const home = options.home ?? homedir();
+        const path = join(home, '.gemini', 'jetski-standalone-oauth-token');
+        let handle;
+        let buffer;
+        try {
+            signal.throwIfAborted();
+            await safePiOmpAncestors(dirname(path));
+            const entry = await lstat(path);
+            if (entry.isSymbolicLink() || !entry.isFile() || entry.nlink !== 1)
+                throw new Error('Invalid account metadata');
+            handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+            const stat = await handle.stat();
+            if (!stat.isFile() ||
+                stat.nlink !== 1 ||
+                stat.dev !== entry.dev ||
+                stat.ino !== entry.ino ||
+                stat.size > LIMIT)
+                throw new Error('Invalid account metadata');
+            buffer = Buffer.alloc(LIMIT + 1);
+            let offset = 0;
+            while (offset <= LIMIT) {
+                signal.throwIfAborted();
+                const { bytesRead } = await handle.read(buffer, offset, buffer.length - offset, null);
+                if (!bytesRead)
+                    break;
+                offset += bytesRead;
+            }
+            if (offset > LIMIT)
+                throw new Error('Invalid account metadata');
+            const after = await handle.stat();
+            const current = await lstat(path);
+            if (current.isSymbolicLink() ||
+                current.dev !== stat.dev ||
+                current.ino !== stat.ino ||
+                current.nlink !== 1 ||
+                offset !== stat.size ||
+                after.size !== stat.size ||
+                after.mtimeMs !== stat.mtimeMs ||
+                current.size !== after.size ||
+                current.mtimeMs !== after.mtimeMs)
+                throw new Error('Account metadata changed during read');
+            const value = JSON.parse(buffer.subarray(0, offset).toString('utf8'));
+            signal.throwIfAborted();
+            if (!record(value))
+                throw new Error('Invalid account metadata');
+            if (value.auth_method !== 'consumer' || !record(value.token))
+                return {
+                    state: 'unknown',
+                    verification: 'local',
+                    summary: '登录格式未知，请打开账号终端',
+                };
+            const refreshable = credentialPresent(value.token.refresh_token);
+            const expiry = typeof value.token.expiry === 'string' ? Date.parse(value.token.expiry) : NaN;
+            const active = credentialPresent(value.token.access_token) && Number.isFinite(expiry) && expiry > Date.now();
+            if (!refreshable && !active)
+                return { state: 'unauthenticated', verification: 'local', summary: '本地登录已过期，请重新登录' };
+            return {
+                state: 'authenticated',
+                authMethod: 'oauth',
+                verification: 'local',
+                accountLabel: accountEmail(idTokenClaims(value.id_token)?.email),
+                summary: '已登录 Antigravity',
+            };
+        }
+        catch (error) {
+            signal.throwIfAborted();
+            if (error?.code === 'ENOENT')
+                return { state: 'unconfigured', verification: 'local', summary: '尚未登录 Antigravity' };
+            return {
+                state: 'unavailable',
+                verification: 'local',
+                summary: '登录状态读取失败，请重试',
+            };
+        }
+        finally {
+            buffer?.fill(0);
+            await handle?.close().catch(() => undefined);
+        }
+    };
+}
+//# sourceMappingURL=account-identity.js.map

package/lib/types/host/account-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-identity.js","sourceRoot":"","sources":["../../../src/host/account-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAGzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAQvD,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,CAAA;AACvB,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAClE,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC/D,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;AAElG,4FAA4F;AAC5F,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAA;IACrE,IAAI,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACjF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC1B,OAAO,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACtE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI;QAAE,OAAO,SAAS,CAAA;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACrG,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QACzF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAChE,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,GAAG,CAAA;IACxC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,IAAI,IAAI,GAAG,CAAA;AACtF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAEI,EAAE;IAEN,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC3B,IAAI,GAAG,KAAK,aAAa;YAAE,OAAO,SAAS,CAAA;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAA;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,+BAA+B,CAAC,CAAA;QACnE,IAAI,MAAM,CAAA;QACV,IAAI,MAA0B,CAAA;QAC9B,IAAI,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;YACvC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YAC/B,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC7C,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;YAC3F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAChC,IACE,CAAC,IAAI,CAAC,MAAM,EAAE;gBACd,IAAI,CAAC,KAAK,KAAK,CAAC;gBAChB,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;gBACtB,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;gBACtB,IAAI,CAAC,IAAI,GAAG,KAAK;gBAEjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC7C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YAChC,IAAI,MAAM,GAAG,CAAC,CAAA;YACd,OAAO,MAAM,IAAI,KAAK,EAAE,CAAC;gBACvB,MAAM,CAAC,cAAc,EAAE,CAAA;gBACvB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAA;gBACrF,IAAI,CAAC,SAAS;oBAAE,MAAK;gBACrB,MAAM,IAAI,SAAS,CAAA;YACrB,CAAC;YACD,IAAI,MAAM,GAAG,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC/D,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YACjC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YACjC,IACE,OAAO,CAAC,cAAc,EAAE;gBACxB,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;gBACxB,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;gBACxB,OAAO,CAAC,KAAK,KAAK,CAAC;gBACnB,MAAM,KAAK,IAAI,CAAC,IAAI;gBACpB,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;gBACxB,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;gBAC9B,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;gBAC3B,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;gBAEjC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YACzD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YAC9E,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC/D,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC1D,OAAO;oBACL,KAAK,EAAE,SAAS;oBAChB,YAAY,EAAE,OAAO;oBACrB,OAAO,EAAE,gBAAgB;iBAC1B,CAAA;YACH,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;YAChE,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;YAC5F,MAAM,MAAM,GACV,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC/F,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM;gBACzB,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAA;YACtF,OAAO;gBACL,KAAK,EAAE,eAAe;gBACtB,UAAU,EAAE,OAAO;gBACnB,YAAY,EAAE,OAAO;gBACrB,YAAY,EAAE,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;gBAChE,OAAO,EAAE,iBAAiB;aAC3B,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,IAAK,KAA+B,EAAE,IAAI,KAAK,QAAQ;gBACrD,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAA;YACtF,OAAO;gBACL,KAAK,EAAE,aAAa;gBACpB,YAAY,EAAE,OAAO;gBACrB,OAAO,EAAE,cAAc;aACxB,CAAA;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;YACf,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}

package/lib/types/host/account-login.d.ts

@@ -0,0 +1,10 @@
+import type { AccountLogin } from '../shared/accounts.ts';
+import type { AccountIdentity } from './account-identity.ts';
+/** Display metadata only; the caller must establish current own credential evidence. */
+export declare function providerLogin(provider: string, authMethod: AccountLogin['authMethod'], details?: {
+    baseUrl?: unknown;
+    name?: unknown;
+}): AccountLogin;
+/** Explicit native API values, excluding placeholders and unevaluated references. */
+export declare function usableNativeApiKey(value: unknown): value is string;
+export declare function authenticatedAccountLogins(input: AccountLogin[]): AccountIdentity;

package/lib/types/host/account-login.js

@@ -0,0 +1,126 @@
+const providerNames = {
+    openai: 'OpenAI',
+    'openai-codex': 'OpenAI',
+    'openai-codex-responses': 'OpenAI',
+    anthropic: 'Anthropic',
+    google: 'Google',
+    'google-gemini-cli': 'Google',
+    'google-antigravity': 'Google',
+    'github-copilot': 'GitHub Copilot',
+    xai: 'xAI',
+    groq: 'Groq',
+    openrouter: 'OpenRouter',
+    mistral: 'Mistral',
+    cerebras: 'Cerebras',
+    deepseek: 'DeepSeek',
+    zai: 'Z.AI',
+    'zai-coding-plan': 'Z.AI',
+    zhipu: '智谱',
+    zhipuai: '智谱',
+    'zai-coding-cn': 'zai.cn',
+    'zhipu-coding-plan': 'zai.cn',
+    'zhipuai-coding-plan': 'zai.cn',
+    minimax: 'MiniMax',
+    'minimax-cn': 'MiniMax',
+    'minimax-coding-plan': 'MiniMax',
+    'minimax-cn-coding-plan': 'MiniMax',
+    kimi: 'Kimi',
+    'kimi-code': 'Kimi',
+    'kimi-coding': 'Kimi',
+    moonshot: 'Moonshot',
+    nous: 'Nous',
+    'nous-research': 'Nous',
+    opencode: 'OpenCode Zen',
+    'opencode-go': 'OpenCode Go',
+    qwen: 'Qwen',
+    'qwen-portal': 'Qwen',
+};
+const credentialShape = /\b(?:Bearer|sk[-_]|gh[pousr]_|ya29\.|eyJ)|(?:api[-_ ]?key|secret|token)/iu;
+function safeName(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const name = value.trim();
+    if (!name ||
+        name.length > 48 ||
+        credentialShape.test(name) ||
+        !/^[\p{L}\p{N}][\p{L}\p{N} ._-]*$/u.test(name) ||
+        /[A-Za-z0-9_]{25,}/u.test(name))
+        return undefined;
+    return name;
+}
+function endpoint(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    try {
+        const url = new URL(value);
+        return ['http:', 'https:'].includes(url.protocol) ? url : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function endpointName(url) {
+    if (!url)
+        return undefined;
+    const names = {
+        'api.openai.com': 'OpenAI',
+        'api.anthropic.com': 'Anthropic',
+        'generativelanguage.googleapis.com': 'Google',
+        'api.x.ai': 'xAI',
+        'api.z.ai': 'Z.AI',
+        'openrouter.ai': 'OpenRouter',
+        'api.deepseek.com': 'DeepSeek',
+        'api.minimax.io': 'MiniMax',
+        'api.minimaxi.com': 'MiniMax',
+        'api.moonshot.ai': 'Moonshot',
+        'api.moonshot.cn': 'Moonshot',
+    };
+    if (url.protocol === 'https:' && !url.port && !url.username && !url.password) {
+        if (url.hostname === 'open.bigmodel.cn')
+            return url.pathname.startsWith('/api/coding/') ? 'zai.cn' : '智谱';
+        if (Object.hasOwn(names, url.hostname))
+            return names[url.hostname];
+    }
+    // Only the host is displayable: never userinfo, port, path, query or fragment.
+    return safeName(url.hostname);
+}
+/** Display metadata only; the caller must establish current own credential evidence. */
+export function providerLogin(provider, authMethod, details = {}) {
+    const url = endpoint(details.baseUrl);
+    const known = Object.hasOwn(providerNames, provider) ? providerNames[provider] : undefined;
+    const providerLabel = (authMethod === 'api'
+        ? endpointName(url) || known || safeName(details.name) || safeName(provider)
+        : known || safeName(details.name) || safeName(provider) || endpointName(url)) || '自定义服务商';
+    return { providerLabel, authMethod };
+}
+/** Explicit native API values, excluding placeholders and unevaluated references. */
+export function usableNativeApiKey(value) {
+    if (typeof value !== 'string' || !value.trim())
+        return false;
+    const key = value.trim();
+    return (!/[\s\p{C}<>]/u.test(key) &&
+        !key.startsWith('!') &&
+        !/\$\{|\{(?:env|file):|^\$[A-Z_]|^(?:your(?:[-_].*)?|replace[-_]?me|change[-_]?me|placeholder|example[-_]?key|sk[-_](?:x{3,}|\.\.\.))$/iu.test(key));
+}
+export function authenticatedAccountLogins(input) {
+    const seen = new Set();
+    const logins = input.filter((login) => {
+        const key = JSON.stringify([login.providerLabel, login.authMethod, login.accountLabel]);
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    });
+    if (!logins.length)
+        throw new Error('Missing native account login evidence');
+    const methods = new Set(logins.map((login) => login.authMethod));
+    const authMethod = methods.size === 1 ? logins[0].authMethod : undefined;
+    return {
+        state: 'authenticated',
+        verification: 'local',
+        logins,
+        ...(authMethod ? { authMethod } : {}),
+        summary: authMethod === 'api' ? 'API 登录' : '已登录',
+    };
+}
+//# sourceMappingURL=account-login.js.map

package/lib/types/host/account-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-login.js","sourceRoot":"","sources":["../../../src/host/account-login.ts"],"names":[],"mappings":"AAGA,MAAM,aAAa,GAA2B;IAC5C,MAAM,EAAE,QAAQ;IAChB,cAAc,EAAE,QAAQ;IACxB,wBAAwB,EAAE,QAAQ;IAClC,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,mBAAmB,EAAE,QAAQ;IAC7B,oBAAoB,EAAE,QAAQ;IAC9B,gBAAgB,EAAE,gBAAgB;IAClC,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,MAAM;IACX,iBAAiB,EAAE,MAAM;IACzB,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,IAAI;IACb,eAAe,EAAE,QAAQ;IACzB,mBAAmB,EAAE,QAAQ;IAC7B,qBAAqB,EAAE,QAAQ;IAC/B,OAAO,EAAE,SAAS;IAClB,YAAY,EAAE,SAAS;IACvB,qBAAqB,EAAE,SAAS;IAChC,wBAAwB,EAAE,SAAS;IACnC,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,MAAM;IACnB,aAAa,EAAE,MAAM;IACrB,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,eAAe,EAAE,MAAM;IACvB,QAAQ,EAAE,cAAc;IACxB,aAAa,EAAE,aAAa;IAC5B,IAAI,EAAE,MAAM;IACZ,aAAa,EAAE,MAAM;CACtB,CAAA;AACD,MAAM,eAAe,GAAG,2EAA2E,CAAA;AACnG,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IACzB,IACE,CAAC,IAAI;QACL,IAAI,CAAC,MAAM,GAAG,EAAE;QAChB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9C,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAE/B,OAAO,SAAS,CAAA;IAClB,OAAO,IAAI,CAAA;AACb,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1B,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AACD,SAAS,YAAY,CAAC,GAAoB;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,KAAK,GAA2B;QACpC,gBAAgB,EAAE,QAAQ;QAC1B,mBAAmB,EAAE,WAAW;QAChC,mCAAmC,EAAE,QAAQ;QAC7C,UAAU,EAAE,KAAK;QACjB,UAAU,EAAE,MAAM;QAClB,eAAe,EAAE,YAAY;QAC7B,kBAAkB,EAAE,UAAU;QAC9B,gBAAgB,EAAE,SAAS;QAC3B,kBAAkB,EAAE,SAAS;QAC7B,iBAAiB,EAAE,UAAU;QAC7B,iBAAiB,EAAE,UAAU;KAC9B,CAAA;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC7E,IAAI,GAAG,CAAC,QAAQ,KAAK,kBAAkB;YACrC,OAAO,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;QAClE,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACpE,CAAC;IACD,+EAA+E;IAC/E,OAAO,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;AAC/B,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,UAAsC,EACtC,UAAiD,EAAE;IAEnD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1F,MAAM,aAAa,GACjB,CAAC,UAAU,KAAK,KAAK;QACnB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC;QAC5E,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAA;IAC7F,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAA;AACtC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAA;IAC5D,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IACxB,OAAO,CACL,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QACzB,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,CAAC,wIAAwI,CAAC,IAAI,CAC5I,GAAG,CACJ,CACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAqB;IAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QACvF,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC5E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IACzE,OAAO;QACL,KAAK,EAAE,eAAe;QACtB,YAAY,EAAE,OAAO;QACrB,MAAM;QACN,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;KACjD,CAAA;AACH,CAAC"}

package/lib/types/host/account-models.d.mts

@@ -0,0 +1,21 @@
+export interface AccountModelScope {
+  state: 'supported' | 'denied' | 'unknown'
+  source: 'account-models' | 'configured-custom' | 'verified-route' | 'unknown'
+  /** Safe metadata classification; absent when the server did not establish a specific cause. */
+  denialReason?: 'authentication' | 'quota'
+  models: { id: string; name?: string; cost: 'free' | 'paid' | 'unknown' }[]
+}
+export interface AccountModelInput {
+  provider: string
+  credential: { type: 'api' | 'oauth'; key?: string; access?: string; expires?: number; accountId?: string }
+  baseUrl?: string
+  apiType?: string
+  /** Mirror a native route that explicitly sends both Anthropic auth headers. */
+  anthropicAuth?: 'api-key-and-bearer' | 'bearer'
+  customModelIds?: string[]
+  verifiedModelIds?: string[]
+}
+export function probeAccountModels(
+  input: AccountModelInput,
+  options?: { signal?: AbortSignal; fetch?: typeof fetch; timeoutMs?: number },
+): Promise<AccountModelScope>

package/lib/types/host/account-models.mjs

@@ -0,0 +1,262 @@
+// Read-only account metadata. Never refresh OAuth, submit prompts, or return
+// credentials, account IDs, headers, endpoint URLs, or raw exception messages.
+const unknown = () => ({ state: 'unknown', source: 'unknown', models: [] })
+const denied = (denialReason) => ({
+  state: 'denied',
+  source: 'unknown',
+  models: [],
+  ...(denialReason ? { denialReason } : {}),
+})
+const validId = (id) => typeof id === 'string' && !!id && id.length <= 1024 && !/[\s\x00-\x1f]/.test(id)
+const object = (value) => value && typeof value === 'object' && !Array.isArray(value)
+const unavailable = (model) =>
+  model.supported_in_api === false ||
+  model.allowed === false ||
+  model.available === false ||
+  model.entitled === false ||
+  model.enabled === false ||
+  model.disabled === true ||
+  model.upgrade_required === true ||
+  model.visibility === 'hidden' ||
+  model.visibility === 'none'
+const numericRate = (value) =>
+  typeof value === 'number'
+    ? value
+    : typeof value === 'string' &&
+        value.trim() &&
+        /^(?:\d+(?:\.\d*)?|\.\d+)(?:[eE][+-]?\d+)?$/.test(value.trim())
+      ? Number(value)
+      : NaN
+const costFor = (model, oauth) => {
+  if (oauth) return 'unknown'
+  const rates = model.pricing
+  if (object(rates)) {
+    const input = numericRate(Object.hasOwn(rates, 'input') ? rates.input : rates.prompt),
+      output = numericRate(Object.hasOwn(rates, 'output') ? rates.output : rates.completion)
+    if (Number.isFinite(input) && Number.isFinite(output) && input >= 0 && output >= 0) {
+      const additional = Object.entries(rates)
+        .filter(([key]) => !['input', 'output', 'prompt', 'completion', 'free'].includes(key))
+        .map(([, value]) => numericRate(value))
+      if (input > 0 || output > 0 || additional.some((value) => value > 0)) return 'paid'
+      if (additional.some((value) => !Number.isFinite(value) || value < 0)) return 'unknown'
+      return 'free'
+    }
+    // Explicit invalid rates cannot be overridden by a contradictory free flag.
+    if ('input' in rates || 'prompt' in rates || 'output' in rates || 'completion' in rates) return 'unknown'
+  }
+  return model.free === true || model.is_free === true || model.pricing?.free === true ? 'free' : 'unknown'
+}
+function entries(payload) {
+  if (Array.isArray(payload)) return payload
+  if (!object(payload)) return undefined
+  return Array.isArray(payload.models)
+    ? payload.models
+    : Array.isArray(payload.data)
+      ? payload.data
+      : undefined
+}
+function normalize(payload, oauth, token) {
+  const list = entries(payload)
+  if (!list) return undefined
+  const result = new Map()
+  for (const model of list) {
+    if (!object(model) || unavailable(model)) continue
+    const id = model.slug ?? model.id
+    if (
+      !validId(id) ||
+      id === token ||
+      (token.length >= 12 && id.includes(token)) ||
+      (oauth && model.supported_in_api !== true)
+    )
+      continue
+    const name = model.display_name ?? model.name
+    result.set(id, {
+      id,
+      ...(typeof name === 'string' &&
+      name.trim() &&
+      name.length <= 4096 &&
+      name !== token &&
+      !(token.length >= 12 && name.includes(token))
+        ? { name }
+        : {}),
+      cost: costFor(model, oauth),
+    })
+  }
+  return [...result.values()]
+}
+function metadataBase(input, codex) {
+  const url = new URL(codex ? 'https://chatgpt.com/backend-api' : input.baseUrl)
+  if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password || url.search || url.hash)
+    throw new Error('Unsafe metadata endpoint')
+  const base = url.toString().replace(/\/+$/, '')
+  return input.apiType === 'anthropic-messages' && !/\/v1$/.test(url.pathname.replace(/\/+$/, ''))
+    ? `${base}/v1`
+    : base
+}
+async function readResponse(response) {
+  if (!response.body) return undefined
+  const reader = response.body.getReader()
+  let length = 0
+  const chunks = []
+  try {
+    while (true) {
+      const { done, value } = await reader.read()
+      if (done) break
+      length += value.length
+      if (length > 2 * 1024 * 1024) {
+        await reader.cancel()
+        return undefined
+      }
+      chunks.push(value)
+    }
+    const bytes = new Uint8Array(length)
+    let offset = 0
+    for (const chunk of chunks) {
+      bytes.set(chunk, offset)
+      offset += chunk.length
+    }
+    return JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(bytes))
+  } finally {
+    reader.releaseLock()
+  }
+}
+/** Exact current-account model scope, or a narrowly declared API fallback. */
+export async function probeAccountModels(input, options = {}) {
+  const credential = input.credential
+  if (!credential || !['api', 'oauth'].includes(credential.type)) return unknown()
+  const oauth = credential.type === 'oauth'
+  const token = oauth ? credential.access : credential.key
+  if (typeof token !== 'string' || !token.trim() || token.trimStart().startsWith('!')) return unknown()
+  // Near-expiry credentials cannot reliably finish the query. Do not renew them.
+  if (oauth && (typeof credential.expires !== 'number' || credential.expires <= Date.now() + 30000))
+    return denied('authentication')
+  const codex = oauth && ['openai', 'openai-codex'].includes(input.provider)
+  // xAI/other subscription catalogs do not expose a verified per-account scope
+  // contract here. Do not turn an OAuth login into their whole public catalog.
+  if (oauth && !codex) return unknown()
+  const parent = options.signal
+  if (parent?.aborted) return unknown()
+  const controller = new AbortController()
+  const signal = parent ? AbortSignal.any([parent, controller.signal]) : controller.signal
+  const timer = setTimeout(() => controller.abort(), Math.max(50, Math.min(options.timeoutMs ?? 8000, 10000)))
+  try {
+    if (codex && input.baseUrl && input.baseUrl.replace(/\/+$/, '') !== 'https://chatgpt.com/backend-api')
+      return unknown()
+    const base = metadataBase(input, codex)
+    const headers = { accept: 'application/json', Authorization: `Bearer ${token}` }
+    if (input.apiType === 'anthropic-messages' && !oauth) {
+      // ZCode's native Anthropic factory sends both headers. Other callers keep
+      // the ordinary x-api-key contract unless they explicitly mirror that route.
+      if (!['api-key-and-bearer', 'bearer'].includes(input.anthropicAuth)) delete headers.Authorization
+      if (input.anthropicAuth !== 'bearer') headers['x-api-key'] = token
+      headers['anthropic-version'] = '2023-06-01'
+    }
+    if (codex) {
+      let accountId = credential.accountId
+      if (!accountId) {
+        try {
+          accountId = JSON.parse(Buffer.from(token.split('.')[1] ?? '', 'base64url').toString('utf8'))?.[
+            'https://api.openai.com/auth'
+          ]?.chatgpt_account_id
+        } catch {}
+      }
+      if (typeof accountId === 'string' && accountId) headers['chatgpt-account-id'] = accountId
+      headers['OpenAI-Beta'] = 'responses=experimental'
+      headers.originator = 'pi'
+      headers.version = '0.144.1'
+    }
+    const fetcher = options.fetch ?? globalThis.fetch
+    const request = async (path) => {
+      const target = `${base}${path}${codex && path !== '/wham/usage' ? '?client_version=0.144.1' : ''}`
+      const response = await fetcher(target, { method: 'GET', headers, signal, redirect: 'error' })
+      if (!response.ok) {
+        await response.body?.cancel()
+        return { status: response.status, payload: undefined }
+      }
+      return { status: response.status, payload: await readResponse(response) }
+    }
+    let modelResponse
+    for (const path of codex
+      ? ['/codex/models', '/models']
+      : [
+          input.provider === 'openrouter' || new URL(base).hostname === 'openrouter.ai'
+            ? '/models/user'
+            : '/models',
+        ]) {
+      modelResponse = await request(path)
+      if (modelResponse.status === 401 || modelResponse.status === 403) return denied('authentication')
+      if (modelResponse.status >= 200 && modelResponse.status < 300) break
+      if (![404, 405].includes(modelResponse.status)) return unknown()
+    }
+    if (modelResponse?.status >= 200 && modelResponse.status < 300) {
+      const envelope = modelResponse.payload
+      if (envelope?.allowed === false || envelope?.authenticated === false) return denied()
+      if (envelope?.success === false || envelope?.error) {
+        const code = envelope?.error?.code
+        return ['invalid_api_key', 'authentication_failed', 'unauthorized', 'forbidden', 401, 403].includes(
+          code,
+        )
+          ? denied('authentication')
+          : unknown()
+      }
+      const models = normalize(envelope, oauth, token)
+      if (models === undefined) return unknown()
+      if (codex) {
+        const usage = await request('/wham/usage')
+        const rate = usage.payload?.rate_limit
+        if (usage.status === 401 || usage.status === 403) return denied('authentication')
+        // Only the authenticated usage response establishes exhausted quota.
+        // Keep an unclassified denial distinct from expiry/401/403 and network failure.
+        if (usage.status === 200 && rate?.limit_reached === true) return denied('quota')
+        if (rate?.allowed === false || rate?.limit_reached === true) return denied()
+        // A catalog/menu is not evidence that the account has an executable quota.
+        if (usage.status !== 200 || rate?.allowed !== true || rate?.limit_reached !== false) return unknown()
+        const plan =
+          typeof usage.payload?.plan_type === 'string'
+            ? usage.payload.plan_type
+                .trim()
+                .toLowerCase()
+                .replace(/^chatgpt_/, '')
+            : ''
+        const cost =
+          plan === 'free'
+            ? 'free'
+            : ['plus', 'pro', 'team', 'business', 'enterprise', 'edu', 'pro_lite', 'prolite'].includes(plan)
+              ? 'paid'
+              : 'unknown'
+        for (const model of models) model.cost = cost
+      }
+      if (
+        !oauth &&
+        ([
+          'zai-coding-cn',
+          'cliworker-zai-cn',
+          'zhipu-coding-plan',
+          'zhipuai-coding-plan',
+          'kimi-coding',
+        ].includes(input.provider) ||
+          /open\.bigmodel\.cn\/api\/coding\//.test(base))
+      ) {
+        for (const model of models) if (model.cost === 'free') model.cost = 'unknown'
+      }
+      return { state: 'supported', source: 'account-models', models }
+    }
+    if (!oauth && [404, 405].includes(modelResponse?.status)) {
+      // Declaring a custom model is not an account entitlement proof.
+      const verified = [...new Set(input.verifiedModelIds ?? [])].filter(
+        (id) => validId(id) && id !== token && !(token.length >= 12 && id.includes(token)),
+      )
+      if (verified.length)
+        return {
+          state: 'supported',
+          source: 'verified-route',
+          models: verified.map((id) => ({ id, cost: 'unknown' })),
+        }
+    }
+    return unknown()
+  } catch {
+    return unknown()
+  } finally {
+    clearTimeout(timer)
+  }
+}

package/lib/types/host/accounts.d.ts

@@ -0,0 +1,42 @@
+import { type ProcessBackend, type RuntimeConfig } from './process.ts';
+import { type CliId } from '../shared/types.ts';
+import type { AccountAction, AccountFrame, AccountSource, AccountStatus, ZCodeLoginProvider } from '../shared/accounts.ts';
+import { type AccountIdentitySource } from './account-identity.ts';
+/** User-only auth processes. Only allowlisted identity metadata leaves the Host. */
+export declare class AccountManager {
+    private backend;
+    private config;
+    private identity;
+    private readonly sessions;
+    private readonly reserved;
+    private readonly unsafeQueries;
+    private readonly unsafeTerminals;
+    private readonly statusQueries;
+    private readonly pending;
+    private readonly parents;
+    private readonly parentClosings;
+    private readonly controller;
+    private closing?;
+    constructor(backend: ProcessBackend, config: RuntimeConfig, identity?: AccountIdentitySource);
+    isBusy(cli: CliId): boolean;
+    status(cli: CliId, cwd: string, signal: AbortSignal): Promise<AccountStatus>;
+    private readStatus;
+    private hasCustomExecutable;
+    start(parent: string, cli: CliId, action: AccountAction, cwd: string, signal: AbortSignal, source?: AccountSource, provider?: ZCodeLoginProvider): Promise<{
+        id: string;
+        instruction: string;
+    }>;
+    private startSession;
+    private readTerminal;
+    private emit;
+    private owned;
+    watch(parent: string, id: string, signal: AbortSignal): AsyncIterable<AccountFrame>;
+    write(parent: string, id: string, data: string): Promise<void>;
+    resize(parent: string, id: string, cols: number, rows: number): Promise<void>;
+    stop(parent: string, id: string): Promise<void>;
+    /** Close one Agent lifetime, including startup; a later Agent with the same ID gets a fresh scope. */
+    closeParent(parent: string): Promise<void>;
+    private finish;
+    private track;
+    close(): Promise<void>;
+}