dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/host/agy-context.js

@@ -0,0 +1,122 @@
+import { DatabaseSync } from 'node:sqlite';
+import { statSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+// Verified against Antigravity CLI 1.2.16's embedded protobuf descriptors:
+// CortexStepGeneratorMetadata.chat_model(1) -> ChatModelMetadata.chat_start_metadata(9)
+// -> ChatStartMetadata.context_window_metadata(10) -> estimated_tokens_used(1), max_context_tokens(4).
+// This is a version-specific, optional local adapter, never a guessed model capacity.
+function fields(bytes) {
+    let offset = 0;
+    const result = new Map();
+    const integer = (allowUnsafe = false) => {
+        let value = 0n;
+        for (let shift = 0n; shift < 70n; shift += 7n) {
+            if (offset >= bytes.length)
+                throw new Error('Truncated protobuf');
+            const byte = bytes[offset++];
+            value |= BigInt(byte & 127) << shift;
+            if (byte < 128) {
+                if (!allowUnsafe && value > BigInt(Number.MAX_SAFE_INTEGER))
+                    throw new Error('Unsafe integer');
+                return Number(value);
+            }
+        }
+        throw new Error('Invalid varint');
+    };
+    while (offset < bytes.length) {
+        const tag = integer(), field = Math.floor(tag / 8), wire = tag & 7;
+        if (!field)
+            throw new Error('Invalid field');
+        if (wire === 0)
+            result.set(field, integer(true));
+        else {
+            const length = wire === 2 ? integer() : wire === 1 ? 8 : wire === 5 ? 4 : -1;
+            if (length < 0 || offset + length > bytes.length)
+                throw new Error('Invalid field length');
+            if (wire === 2)
+                result.set(field, bytes.subarray(offset, offset + length));
+            offset += length;
+        }
+    }
+    return result;
+}
+export function decodeAgyContext(data) {
+    try {
+        let value = data;
+        for (const key of [1, 9, 10]) {
+            const nested = fields(value).get(key);
+            if (!(nested instanceof Uint8Array))
+                return;
+            value = nested;
+        }
+        const context = fields(value), used = context.get(1), capacity = context.get(4);
+        if (typeof used !== 'number' ||
+            typeof capacity !== 'number' ||
+            !Number.isSafeInteger(used) ||
+            !Number.isSafeInteger(capacity) ||
+            used < 0 ||
+            capacity <= 0)
+            return;
+        return {
+            contextUsed: used,
+            contextCapacity: capacity,
+            contextEstimated: true,
+            contextSource: 'Antigravity 最近一次请求的本地上下文估算',
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
+export class AgyContextReader {
+    directory;
+    cache = new Map();
+    constructor(directory = join(homedir(), '.gemini', 'antigravity-cli', 'conversations')) {
+        this.directory = directory;
+    }
+    read(conversationId) {
+        if (!conversationId || !/^[a-f0-9]{8}-(?:[a-f0-9]{4}-){3}[a-f0-9]{12}$/i.test(conversationId))
+            return;
+        const path = join(this.directory, `${conversationId}.db`);
+        const stamp = [path, `${path}-wal`]
+            .map((file) => {
+            try {
+                const s = statSync(file);
+                return `${s.size}:${s.mtimeMs}`;
+            }
+            catch {
+                return '';
+            }
+        })
+            .join('|');
+        if (stamp === '|')
+            return;
+        const cached = this.cache.get(conversationId);
+        if (cached?.stamp === stamp)
+            return cached.value;
+        let db, value;
+        try {
+            db = new DatabaseSync(path, { readOnly: true });
+            // Verify ownership before reading only this plugin-managed conversation's metadata.
+            if (!db.prepare('SELECT 1 FROM trajectory_meta WHERE cascade_id = ? LIMIT 1').get(conversationId))
+                return;
+            const row = db
+                .prepare('SELECT CASE WHEN length(data) <= 8388608 THEN data END AS data FROM gen_metadata ORDER BY idx DESC LIMIT 1')
+                .get();
+            if (row?.data instanceof Uint8Array)
+                value = decodeAgyContext(row.data);
+            this.cache.set(conversationId, { stamp, value });
+            if (this.cache.size > 128)
+                this.cache.delete(this.cache.keys().next().value);
+            return value;
+        }
+        catch {
+            return undefined;
+        }
+        finally {
+            db?.close();
+        }
+    }
+}
+//# sourceMappingURL=agy-context.js.map

package/lib/types/host/agy-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agy-context.js","sourceRoot":"","sources":["../../../src/host/agy-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAGhC,2EAA2E;AAC3E,wFAAwF;AACxF,uGAAuG;AACvG,sFAAsF;AACtF,SAAS,MAAM,CAAC,KAAiB;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAA;IACrD,MAAM,OAAO,GAAG,CAAC,WAAW,GAAG,KAAK,EAAE,EAAE;QACtC,IAAI,KAAK,GAAG,EAAE,CAAA;QACd,KAAK,IAAI,KAAK,GAAG,EAAE,EAAE,KAAK,GAAG,GAAG,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;YACjE,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAE,CAAA;YAC7B,KAAK,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,CAAA;YACpC,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;gBAC9F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;YACtB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACnC,CAAC,CAAA;IACD,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,OAAO,EAAE,EACnB,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAC3B,IAAI,GAAG,GAAG,GAAG,CAAC,CAAA;QAChB,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QAC5C,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;aAC3C,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5E,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;YACzF,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAA;YAC1E,MAAM,IAAI,MAAM,CAAA;QAClB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,IAAgB;IAC/C,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,IAAI,CAAA;QAChB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACrC,IAAI,CAAC,CAAC,MAAM,YAAY,UAAU,CAAC;gBAAE,OAAM;YAC3C,KAAK,GAAG,MAAM,CAAA;QAChB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAC3B,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EACrB,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC3B,IACE,OAAO,IAAI,KAAK,QAAQ;YACxB,OAAO,QAAQ,KAAK,QAAQ;YAC5B,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;YAC3B,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;YAC/B,IAAI,GAAG,CAAC;YACR,QAAQ,IAAI,CAAC;YAEb,OAAM;QACR,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,QAAQ;YACzB,gBAAgB,EAAE,IAAI;YACtB,aAAa,EAAE,4BAA4B;SAC5C,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AACD,MAAM,OAAO,gBAAgB;IAEP;IADZ,KAAK,GAAG,IAAI,GAAG,EAAgD,CAAA;IACvE,YAAoB,YAAY,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe,CAAC;QAA1E,cAAS,GAAT,SAAS,CAAiE;IAAG,CAAC;IAClG,IAAI,CAAC,cAAuB;QAC1B,IAAI,CAAC,cAAc,IAAI,CAAC,gDAAgD,CAAC,IAAI,CAAC,cAAc,CAAC;YAAE,OAAM;QACrG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,cAAc,KAAK,CAAC,CAAA;QACzD,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,CAAC;aAChC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;gBACxB,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAA;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC,CAAC;aACD,IAAI,CAAC,GAAG,CAAC,CAAA;QACZ,IAAI,KAAK,KAAK,GAAG;YAAE,OAAM;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QAC7C,IAAI,MAAM,EAAE,KAAK,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QAChD,IAAI,EAA4B,EAAE,KAA4B,CAAA;QAC9D,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/C,oFAAoF;YACpF,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;gBAC/F,OAAM;YACR,MAAM,GAAG,GAAG,EAAE;iBACX,OAAO,CACN,4GAA4G,CAC7G;iBACA,GAAG,EAAE,CAAA;YACR,IAAI,GAAG,EAAE,IAAI,YAAY,UAAU;gBAAE,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACvE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;YAChD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAA;YAC7E,OAAO,KAAK,CAAA;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAA;QAClB,CAAC;gBAAS,CAAC;YACT,EAAE,EAAE,KAAK,EAAE,CAAA;QACb,CAAC;IACH,CAAC;CACF"}

package/lib/types/host/agy-models.d.ts

@@ -0,0 +1,5 @@
+import { type AccountIdentitySource } from './account-identity.ts';
+import type { ModelChoice } from '../shared/types.ts';
+/** The native consumer directory is account-scoped, not a public model cache. */
+export declare function assertAgyNativeAccountRoute(signal: AbortSignal, home?: string): Promise<void>;
+export declare function discoverAgyAccountModels(capture: () => Promise<string>, signal: AbortSignal, home?: string, identitySource?: AccountIdentitySource): Promise<ModelChoice[]>;

package/lib/types/host/agy-models.js

@@ -0,0 +1,37 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { localAccountIdentity } from "./account-identity.js";
+import { readFirstPartyJson } from "./first-party-models.js";
+import { groupAgyModels } from "../shared/models.js";
+/** The native consumer directory is account-scoped, not a public model cache. */
+export async function assertAgyNativeAccountRoute(signal, home = homedir()) {
+    signal.throwIfAborted();
+    const settings = await readFirstPartyJson(join(home, '.gemini/antigravity-cli/settings.json'));
+    signal.throwIfAborted();
+    const configured = (value) => value !== undefined &&
+        value !== null &&
+        value !== '' &&
+        !(Array.isArray(value) && !value.length) &&
+        !(typeof value === 'object' && !Object.keys(value).length);
+    if (configured(settings.modelProvider) ||
+        configured(settings.customModels) ||
+        configured(settings.customModelsConfig))
+        throw new Error('Antigravity 当前自定义模型来源尚未支持，请使用原生账号模型');
+}
+export async function discoverAgyAccountModels(capture, signal, home = homedir(), identitySource = localAccountIdentity({ home })) {
+    await assertAgyNativeAccountRoute(signal, home);
+    const identity = await identitySource('antigravity', signal);
+    if (identity?.state !== 'authenticated')
+        throw new Error('请先登录 Antigravity');
+    const output = await capture();
+    signal.throwIfAborted();
+    const rows = output.split(/\r?\n/).flatMap((line) => {
+        const [id, ...labels] = line.split('\t');
+        const label = labels.join(' ').trim();
+        return id && label && /^[A-Za-z0-9_.:/-]+$/.test(id) ? [{ id, label }] : [];
+    });
+    if (!rows.length)
+        throw new Error('Antigravity 当前账号暂无可用模型，请刷新');
+    return groupAgyModels(rows);
+}
+//# sourceMappingURL=agy-models.js.map

package/lib/types/host/agy-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agy-models.js","sourceRoot":"","sources":["../../../src/host/agy-models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,oBAAoB,EAA8B,MAAM,uBAAuB,CAAA;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAGpD,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,MAAmB,EAAE,IAAI,GAAG,OAAO,EAAE;IACrF,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC,CAAA;IAC9F,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,UAAU,GAAG,CAAC,KAAc,EAAE,EAAE,CACpC,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,IAAI;QACd,KAAK,KAAK,EAAE;QACZ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACxC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAA;IAC5D,IACE,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;QAClC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAEvC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAA8B,EAC9B,MAAmB,EACnB,IAAI,GAAG,OAAO,EAAE,EAChB,iBAAwC,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC;IAEtE,MAAM,2BAA2B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IAC5D,IAAI,QAAQ,EAAE,KAAK,KAAK,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;IAC5E,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAA;IAC9B,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAClD,MAAM,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;QACrC,OAAO,EAAE,IAAI,KAAK,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7E,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC/D,OAAO,cAAc,CAAC,IAAI,CAAC,CAAA;AAC7B,CAAC"}

package/lib/types/host/agy-windows-account.d.ts

@@ -0,0 +1,14 @@
+import { type AccountIdentity, type AccountIdentitySource } from './account-identity.ts';
+import type { ProcessBackend, RuntimeConfig } from './process.ts';
+type WindowsAgyAccount = {
+    identity: AccountIdentity;
+    principalHash?: string;
+};
+/** Only the initial binding and model precheck may share a native projection.
+ * The final binding must be read after this operation has exited its scope. */
+export declare function withWindowsAgyAccountSnapshot<T>(backend: ProcessBackend, config: RuntimeConfig, signal: AbortSignal, operation: () => Promise<T>): Promise<T>;
+/** Secret-free projection of the exact native Windows credential target. */
+export declare function projectWindowsAgyAccount(raw: string): WindowsAgyAccount;
+export declare function readWindowsAgyAccount(backend: ProcessBackend, config: RuntimeConfig, signal: AbortSignal): Promise<WindowsAgyAccount>;
+export declare function nativeAgyAccountIdentity(backend: ProcessBackend, config: RuntimeConfig, platform?: NodeJS.Platform): AccountIdentitySource;
+export {};

package/lib/types/host/agy-windows-account.js

@@ -0,0 +1,104 @@
+import { homedir } from 'node:os';
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { win32 } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { captureCatalogMetadata } from "./adapters.js";
+import { accountEmail, localAccountIdentity, } from "./account-identity.js";
+const accountSnapshots = new AsyncLocalStorage();
+/** Only the initial binding and model precheck may share a native projection.
+ * The final binding must be read after this operation has exited its scope. */
+export async function withWindowsAgyAccountSnapshot(backend, config, signal, operation) {
+    signal.throwIfAborted();
+    const scope = { backend, config, signal, active: true };
+    return accountSnapshots.run(scope, async () => {
+        try {
+            return await operation();
+        }
+        finally {
+            // Async descendants can retain the ALS store; they must not reuse a
+            // projection after the originating operation has completed or failed.
+            scope.active = false;
+            scope.reading = undefined;
+        }
+    });
+}
+/** Secret-free projection of the exact native Windows credential target. */
+export function projectWindowsAgyAccount(raw) {
+    try {
+        if (raw.length > 4096)
+            throw new Error('Invalid native account projection');
+        const value = JSON.parse(raw);
+        if (!value || typeof value !== 'object' || Array.isArray(value))
+            throw new Error('Invalid projection');
+        if (value.state === 'authenticated')
+            return {
+                identity: {
+                    state: 'authenticated',
+                    authMethod: 'oauth',
+                    verification: 'local',
+                    summary: '已登录 Antigravity',
+                    accountLabel: accountEmail(value.email),
+                },
+                ...(typeof value.principalHash === 'string' && /^[a-f0-9]{64}$/.test(value.principalHash)
+                    ? { principalHash: value.principalHash }
+                    : {}),
+            };
+        if (value.state === 'unconfigured')
+            return { identity: { state: 'unconfigured', verification: 'local', summary: '尚未登录 Antigravity' } };
+        if (value.state === 'unauthenticated')
+            return {
+                identity: { state: 'unauthenticated', verification: 'local', summary: '本地登录已过期，请重新登录' },
+            };
+        if (value.state === 'unknown')
+            return {
+                identity: { state: 'unknown', verification: 'local', summary: '登录格式未知，请打开账号终端' },
+            };
+    }
+    catch {
+        /* Fixed safe diagnosis below. */
+    }
+    return {
+        identity: {
+            state: 'unavailable',
+            verification: 'local',
+            summary: '无法读取 Windows 原生账号，请在登录的桌面会话中重试',
+        },
+    };
+}
+export async function readWindowsAgyAccount(backend, config, signal) {
+    signal.throwIfAborted();
+    const scope = accountSnapshots.getStore();
+    if (!scope?.active || scope.backend !== backend || scope.config !== config || scope.signal !== signal)
+        return readNativeWindowsAgyAccount(backend, config, signal);
+    const reading = (scope.reading ??= readNativeWindowsAgyAccount(backend, config, signal));
+    try {
+        const account = await reading;
+        signal.throwIfAborted();
+        // A consumer cannot mutate another precheck's safe projection.
+        return { ...account, identity: { ...account.identity } };
+    }
+    catch (error) {
+        if (scope.reading === reading)
+            scope.reading = undefined;
+        throw error;
+    }
+}
+async function readNativeWindowsAgyAccount(backend, config, signal) {
+    signal.throwIfAborted();
+    const raw = await captureCatalogMetadata(backend, config, [
+        win32.join(process.env.SystemRoot ?? 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe'),
+        '-NoLogo',
+        '-NoProfile',
+        '-NonInteractive',
+        '-File',
+        fileURLToPath(new URL('./windows-agy-account.ps1', import.meta.url)),
+    ], homedir(), signal, undefined, [0, 1]);
+    signal.throwIfAborted();
+    return projectWindowsAgyAccount(raw);
+}
+export function nativeAgyAccountIdentity(backend, config, platform = process.platform) {
+    if (platform !== 'win32')
+        return localAccountIdentity();
+    return async (cli, signal) => cli === 'antigravity' ? (await readWindowsAgyAccount(backend, config, signal)).identity : undefined;
+}
+//# sourceMappingURL=agy-windows-account.js.map

package/lib/types/host/agy-windows-account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agy-windows-account.js","sourceRoot":"","sources":["../../../src/host/agy-windows-account.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EACL,YAAY,EACZ,oBAAoB,GAGrB,MAAM,uBAAuB,CAAA;AAW9B,MAAM,gBAAgB,GAAG,IAAI,iBAAiB,EAAwB,CAAA;AAEtE;+EAC+E;AAC/E,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAuB,EACvB,MAAqB,EACrB,MAAmB,EACnB,SAA2B;IAE3B,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,KAAK,GAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC7E,OAAO,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QAC5C,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAA;QAC1B,CAAC;gBAAS,CAAC;YACT,oEAAoE;YACpE,sEAAsE;YACtE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAA;YACpB,KAAK,CAAC,OAAO,GAAG,SAAS,CAAA;QAC3B,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC7B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;QACtG,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe;YACjC,OAAO;gBACL,QAAQ,EAAE;oBACR,KAAK,EAAE,eAAe;oBACtB,UAAU,EAAE,OAAO;oBACnB,YAAY,EAAE,OAAO;oBACrB,OAAO,EAAE,iBAAiB;oBAC1B,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC;iBACxC;gBACD,GAAG,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;oBACvF,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACR,CAAA;QACH,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc;YAChC,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,CAAA;QACpG,IAAI,KAAK,CAAC,KAAK,KAAK,iBAAiB;YACnC,OAAO;gBACL,QAAQ,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE;aACxF,CAAA;QACH,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAC3B,OAAO;gBACL,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE;aACjF,CAAA;IACL,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IACD,OAAO;QACL,QAAQ,EAAE;YACR,KAAK,EAAE,aAAa;YACpB,YAAY,EAAE,OAAO;YACrB,OAAO,EAAE,gCAAgC;SAC1C;KACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAuB,EACvB,MAAqB,EACrB,MAAmB;IAEnB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAA;IACzC,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QACnG,OAAO,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7D,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACxF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAA;QAC7B,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,+DAA+D;QAC/D,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAA;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO;YAAE,KAAK,CAAC,OAAO,GAAG,SAAS,CAAA;QACxD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,OAAuB,EACvB,MAAqB,EACrB,MAAmB;IAEnB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,GAAG,GAAG,MAAM,sBAAsB,CACtC,OAAO,EACP,MAAM,EACN;QACE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,EAAE,gDAAgD,CAAC;QACrG,SAAS;QACT,YAAY;QACZ,iBAAiB;QACjB,OAAO;QACP,aAAa,CAAC,IAAI,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KACrE,EACD,OAAO,EAAE,EACT,MAAM,EACN,SAAS,EACT,CAAC,CAAC,EAAE,CAAC,CAAC,CACP,CAAA;IACD,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,OAAO,wBAAwB,CAAC,GAAG,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAuB,EACvB,MAAqB,EACrB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,oBAAoB,EAAE,CAAA;IACvD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC3B,GAAG,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;AACvG,CAAC"}

package/lib/types/host/authorized-catalog.d.ts

@@ -0,0 +1,14 @@
+import { type Catalog } from './adapters.ts';
+import { type CliId, type Preference } from '../shared/types.ts';
+import type { ProcessBackend, RuntimeConfig } from './process.ts';
+export declare const ACCOUNT_CHANGED = "\u8D26\u53F7\u5DF2\u53D8\u66F4\uFF0C\u8BF7\u91CD\u65B0\u9009\u62E9\u6216\u65B0\u5EFA\u4EFB\u52A1";
+/** Private authorization state: never spread this object into a Remote response. */
+export declare function authorizedCatalog(cli: CliId, backend: ProcessBackend, config: RuntimeConfig, project: string, signal: AbortSignal, expected?: string): Promise<{
+    catalog: Catalog;
+    binding: string;
+}>;
+export declare function authorizeSelection(preference: Preference, backend: ProcessBackend, config: RuntimeConfig, project: string, signal: AbortSignal, expected?: string): Promise<{
+    preference: Preference;
+    catalog: Catalog;
+    binding: string;
+}>;

package/lib/types/host/authorized-catalog.js

@@ -0,0 +1,35 @@
+import { catalogFor, validatePreference } from "./adapters.js";
+import { readCliAccountBinding } from "./cli-account-binding.js";
+import { withWindowsAgyAccountSnapshot } from "./agy-windows-account.js";
+import { resolveModel } from "../shared/models.js";
+import { cliOf } from "../shared/types.js";
+export const ACCOUNT_CHANGED = '账号已变更，请重新选择或新建任务';
+/** Private authorization state: never spread this object into a Remote response. */
+export async function authorizedCatalog(cli, backend, config, project, signal, expected) {
+    const discover = async () => {
+        const binding = await readCliAccountBinding(cli, backend, config, project, signal);
+        if (expected && binding !== expected)
+            throw new Error(ACCOUNT_CHANGED);
+        const catalog = await catalogFor(cli, backend, config, project, signal);
+        return { binding, catalog };
+    };
+    const { binding, catalog } = cli === 'antigravity' && process.platform === 'win32'
+        ? await withWindowsAgyAccountSnapshot(backend, config, signal, discover)
+        : await discover();
+    signal.throwIfAborted();
+    // Deliberately outside the snapshot scope: logout, expiry and account changes
+    // during native model discovery must still invalidate the returned directory.
+    if (binding !== (await readCliAccountBinding(cli, backend, config, project, signal)))
+        throw new Error(ACCOUNT_CHANGED);
+    if (catalog.cli !== cli)
+        throw new Error('CLI 模型目录身份不匹配');
+    if (!catalog.models.length)
+        throw new Error('暂无可确认的可用模型，请登录或刷新');
+    return { catalog, binding };
+}
+export async function authorizeSelection(preference, backend, config, project, signal, expected) {
+    const result = await authorizedCatalog(cliOf(preference), backend, config, project, signal, expected);
+    validatePreference(preference, result.catalog);
+    return { ...result, preference: resolveModel(preference, result.catalog.models) };
+}
+//# sourceMappingURL=authorized-catalog.js.map

package/lib/types/host/authorized-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-catalog.js","sourceRoot":"","sources":["../../../src/host/authorized-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAgB,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAA;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,KAAK,EAA+B,MAAM,oBAAoB,CAAA;AAGvE,MAAM,CAAC,MAAM,eAAe,GAAG,kBAAkB,CAAA;AAEjD,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAU,EACV,OAAuB,EACvB,MAAqB,EACrB,OAAe,EACf,MAAmB,EACnB,QAAiB;IAEjB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAClF,IAAI,QAAQ,IAAI,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QACtE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACvE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;IAC7B,CAAC,CAAA;IACD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GACxB,GAAG,KAAK,aAAa,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QACnD,CAAC,CAAC,MAAM,6BAA6B,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;QACxE,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAA;IACtB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,8EAA8E;IAC9E,8EAA8E;IAC9E,IAAI,OAAO,KAAK,CAAC,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;IAClC,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;IACzD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IAChE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAsB,EACtB,OAAuB,EACvB,MAAqB,EACrB,OAAe,EACf,MAAmB,EACnB,QAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IACrG,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9C,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAA;AACnF,CAAC"}

package/lib/types/host/bridge-protocol.d.ts

@@ -0,0 +1,15 @@
+import type { EventInput, ProtocolResult } from './protocol.ts';
+/** Internal framing for the Pi/OMP RPC bridge; never accepts arbitrary event kinds. */
+export declare class BridgeProtocol {
+    private emit;
+    private identify;
+    private maxLineBytes;
+    private decoder;
+    private pending;
+    conversationId?: string;
+    result?: ProtocolResult;
+    constructor(emit: (event: EventInput) => void, identify: (id: string) => void, maxLineBytes: number);
+    feed(chunk: Buffer | string): void;
+    end(): void;
+    private line;
+}

package/lib/types/host/bridge-protocol.js

@@ -0,0 +1,80 @@
+import { StringDecoder } from 'node:string_decoder';
+/** Internal framing for the Pi/OMP RPC bridge; never accepts arbitrary event kinds. */
+export class BridgeProtocol {
+    emit;
+    identify;
+    maxLineBytes;
+    decoder = new StringDecoder('utf8');
+    pending = '';
+    conversationId;
+    result;
+    constructor(emit, identify, maxLineBytes) {
+        this.emit = emit;
+        this.identify = identify;
+        this.maxLineBytes = maxLineBytes;
+    }
+    feed(chunk) {
+        this.pending += typeof chunk === 'string' ? chunk : this.decoder.write(chunk);
+        let end;
+        while ((end = this.pending.indexOf('\n')) >= 0) {
+            const line = this.pending.slice(0, end).trim();
+            this.pending = this.pending.slice(end + 1);
+            if (line)
+                this.line(line);
+        }
+        if (Buffer.byteLength(this.pending) > this.maxLineBytes)
+            throw new Error('CLI bridge event too large');
+    }
+    end() {
+        this.pending += this.decoder.end();
+        if (this.pending.trim())
+            this.line(this.pending.trim());
+        this.pending = '';
+    }
+    line(line) {
+        if (Buffer.byteLength(line) > this.maxLineBytes)
+            throw new Error('CLI bridge event too large');
+        const v = JSON.parse(line);
+        if (!v || typeof v !== 'object' || this.result)
+            throw new Error('Unexpected CLI bridge frame');
+        if (v.type === 'session') {
+            if (typeof v.id !== 'string' || !v.id || (this.conversationId && this.conversationId !== v.id))
+                throw new Error('CLI session identity changed');
+            this.identify(v.id);
+            this.conversationId = v.id;
+            this.emit({
+                kind: 'status',
+                text: 'CLI 已连接',
+                observedModel: typeof v.model === 'string' ? v.model : undefined,
+            });
+        }
+        else if (v.type === 'event') {
+            const e = v.event;
+            if (!e || !['assistant', 'tool', 'status', 'diagnostic'].includes(e.kind) || typeof e.text !== 'string')
+                throw new Error('Invalid bridge event');
+            this.emit({
+                kind: e.kind,
+                text: e.text,
+                ...(Number.isInteger(e.step) ? { step: e.step } : {}),
+                ...(typeof e.state === 'string' ? { state: e.state } : {}),
+                ...(typeof e.detail === 'string' ? { detail: e.detail } : {}),
+            });
+        }
+        else if (v.type === 'result') {
+            if (!this.conversationId && v.status === 'ERROR' && typeof v.error === 'string')
+                throw new Error(v.error.slice(0, 4096));
+            if (!this.conversationId || !['SUCCESS', 'ERROR'].includes(v.status) || typeof v.response !== 'string')
+                throw new Error('Invalid bridge result');
+            this.result = {
+                conversationId: this.conversationId,
+                status: v.status,
+                response: v.response,
+                error: typeof v.error === 'string' ? v.error : undefined,
+            };
+            this.emit({ kind: 'result', text: v.response, state: v.status });
+        }
+        else
+            throw new Error('Unknown CLI bridge frame');
+    }
+}
+//# sourceMappingURL=bridge-protocol.js.map

package/lib/types/host/bridge-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-protocol.js","sourceRoot":"","sources":["../../../src/host/bridge-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAGnD,uFAAuF;AACvF,MAAM,OAAO,cAAc;IAMf;IACA;IACA;IAPF,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAA;IACnC,OAAO,GAAG,EAAE,CAAA;IACpB,cAAc,CAAS;IACvB,MAAM,CAAiB;IACvB,YACU,IAAiC,EACjC,QAA8B,EAC9B,YAAoB;QAFpB,SAAI,GAAJ,IAAI,CAA6B;QACjC,aAAQ,GAAR,QAAQ,CAAsB;QAC9B,iBAAY,GAAZ,YAAY,CAAQ;IAC3B,CAAC;IACJ,IAAI,CAAC,KAAsB;QACzB,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC7E,IAAI,GAAW,CAAA;QACf,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;YAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;YAC1C,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACxG,CAAC;IACD,GAAG;QACD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA;QAClC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QACvD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAA;IACnB,CAAC;IACO,IAAI,CAAC,IAAY;QACvB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC9F,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC1B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAC9F,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;YACjD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACnB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,EAAE,CAAA;YAC1B,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,SAAS;gBACf,aAAa,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACjE,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAA;YACjB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;gBACrG,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;YACzC,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;YACxH,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBACpG,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;YAC1C,IAAI,CAAC,MAAM,GAAG;gBACZ,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACzD,CAAA;YACD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QAClE,CAAC;;YAAM,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACpD,CAAC;CACF"}

package/lib/types/host/claude-native-oauth.d.ts

@@ -0,0 +1,17 @@
+import { type ModelChoice } from '../shared/types.ts';
+import { type ProcessBackend, type RuntimeConfig } from './process.ts';
+export declare class ClaudeNativeOAuthError extends Error {
+    readonly code = "CLAUDE_NATIVE_OAUTH_UNAVAILABLE";
+    constructor(message?: string);
+}
+export interface ClaudeNativeOAuthCatalog {
+    models: ModelChoice[];
+    /** Host-only identity evidence. Do not persist this object or send it through Gateway. */
+    account: {
+        email: string;
+        organization?: string;
+    };
+}
+export declare function parseClaudeNativeOAuthCatalog(initialize: unknown, usage: unknown, now?: number): ClaudeNativeOAuthCatalog;
+/** Only initialize/get_usage controls are sent. No user message, token read, login or model request. */
+export declare function discoverClaudeNativeOAuth(backend: ProcessBackend, config: RuntimeConfig, executable: string, cwd: string, signal: AbortSignal, prefixArgs: string[]): Promise<ClaudeNativeOAuthCatalog>;