dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/host/claude-native-oauth.js

@@ -0,0 +1,272 @@
+import { StringDecoder } from 'node:string_decoder';
+import { EFFORTS } from "../shared/types.js";
+import { accountEmail } from "./account-identity.js";
+import { ProcessCleanupUnconfirmedError } from "./process.js";
+const record = (value) => !!value && typeof value === 'object' && !Array.isArray(value);
+const id = (value) => typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9._:/-]*$/.test(value);
+const text = (value) => typeof value === 'string' && !!value.trim() && value.length <= 512 && !/[\x00-\x1f\x7f]/.test(value);
+export class ClaudeNativeOAuthError extends Error {
+    code = 'CLAUDE_NATIVE_OAUTH_UNAVAILABLE';
+    constructor(message = 'Claude 原生账号模型或额度暂无法确认，请在账号终端检查后刷新') {
+        super(message);
+        this.name = 'ClaudeNativeOAuthError';
+    }
+}
+/** Native initialize is capability metadata: even an unauthenticated CLI returns models. */
+function ownAccount(value) {
+    const email = record(value) ? accountEmail(value.email) : undefined;
+    if (!record(value) ||
+        value.apiProvider !== 'firstParty' ||
+        value.tokenSource !== 'claude.ai' ||
+        (value.apiKeySource !== undefined && value.apiKeySource !== 'none') ||
+        !email)
+        throw new ClaudeNativeOAuthError('Claude 尚未通过原生账号登录，请打开账号终端登录');
+    if (value.organization !== undefined && !text(value.organization))
+        throw new ClaudeNativeOAuthError();
+    return { email, ...(value.organization !== undefined && { organization: value.organization }) };
+}
+/**
+ * Claude 2.1.296's get_usage can fall back to stale persisted/header observations after a
+ * failed endpoint read. That fallback removes `limits`; never authorize from it. A native
+ * successful read can still use the CLI's own account-bound snapshot younger than 60s. We add
+ * no cache and make no claim of a separate live model entitlement API.
+ */
+function remainingQuota(value, now) {
+    const unknown = () => new ClaudeNativeOAuthError('Claude 原生账号剩余额度暂无法确认，请检查登录与订阅后刷新');
+    if (!record(value) ||
+        value.rate_limits_available !== true ||
+        !['pro', 'max', 'team', 'enterprise'].includes(value.subscription_type) ||
+        !record(value.rate_limits) ||
+        !Array.isArray(value.rate_limits.limits))
+        throw unknown();
+    const limits = value.rate_limits;
+    const windows = ['five_hour', 'seven_day', 'seven_day_oauth_apps', 'seven_day_opus', 'seven_day_sonnet']
+        .filter((key) => limits[key] != null)
+        .map((key) => limits[key]);
+    // A billing balance or extra-usage wallet is not authorization to spend beyond a plan.
+    if (limits.five_hour == null || limits.seven_day == null)
+        throw unknown();
+    const percentages = [];
+    const window = (entry) => {
+        if (!record(entry) ||
+            typeof entry.utilization !== 'number' ||
+            !Number.isFinite(entry.utilization) ||
+            entry.utilization < 0 ||
+            (entry.resets_at !== null &&
+                (typeof entry.resets_at !== 'string' ||
+                    !Number.isFinite(Date.parse(entry.resets_at)) ||
+                    Date.parse(entry.resets_at) <= now)))
+            throw unknown();
+        percentages.push(entry.utilization);
+    };
+    windows.forEach(window);
+    if (limits.model_scoped !== undefined) {
+        if (!Array.isArray(limits.model_scoped))
+            throw unknown();
+        limits.model_scoped.forEach(window);
+    }
+    for (const entry of limits.limits) {
+        if (!record(entry) ||
+            typeof entry.percent !== 'number' ||
+            !Number.isFinite(entry.percent) ||
+            entry.percent < 0 ||
+            typeof entry.is_active !== 'boolean')
+            throw unknown();
+        if (entry.is_active)
+            percentages.push(entry.percent);
+    }
+    // Conservative across all returned plan windows; do not infer that a model bypasses a limit.
+    if (percentages.some((percent) => percent >= 100))
+        throw new ClaudeNativeOAuthError('Claude 当前账号存在已用尽的限额，请等待重置或检查订阅');
+}
+export function parseClaudeNativeOAuthCatalog(initialize, usage, now = Date.now()) {
+    if (!record(initialize))
+        throw new ClaudeNativeOAuthError();
+    const account = ownAccount(initialize.account);
+    remainingQuota(usage, now);
+    if (!Array.isArray(initialize.models))
+        throw new ClaudeNativeOAuthError();
+    const models = new Map();
+    for (const model of initialize.models) {
+        if (!record(model) ||
+            !id(model.value) ||
+            !id(model.resolvedModel) ||
+            model.disabled === true ||
+            model.hidden === true ||
+            model.entitled === false ||
+            model.available === false ||
+            model.allowed === false)
+            continue;
+        const efforts = model.supportsEffort === true && Array.isArray(model.supportedEffortLevels)
+            ? EFFORTS.filter((effort) => ['low', 'medium', 'high', 'xhigh', 'max'].includes(effort) &&
+                model.supportedEffortLevels.includes(effort))
+            : [];
+        // Default leaves the native CLI's own effort policy untouched.
+        const choice = {
+            id: model.value,
+            label: text(model.displayName) ? model.displayName : model.value,
+            efforts: ['default', ...efforts],
+        };
+        if (models.has(choice.id))
+            throw new ClaudeNativeOAuthError('Claude 原生模型目录存在重复选项，请刷新');
+        models.set(choice.id, choice);
+    }
+    if (!models.size)
+        throw new ClaudeNativeOAuthError('Claude 原生账号暂未返回可确认的模型，请刷新');
+    return { account, models: [...models.values()] };
+}
+/** Only initialize/get_usage controls are sent. No user message, token read, login or model request. */
+export async function discoverClaudeNativeOAuth(backend, config, executable, cwd, signal, prefixArgs) {
+    signal.throwIfAborted();
+    // The caller supplies the same native-route overlay used for actual worker execution.
+    if (prefixArgs.length !== 2 || prefixArgs[0] !== '--settings')
+        throw new ClaudeNativeOAuthError();
+    let overlay;
+    try {
+        overlay = JSON.parse(prefixArgs[1]);
+    }
+    catch {
+        throw new ClaudeNativeOAuthError();
+    }
+    if (!record(overlay))
+        throw new ClaudeNativeOAuthError();
+    const control = AbortSignal.any([signal, AbortSignal.timeout(15_000)]);
+    const child = backend.spawn({
+        argv: [
+            executable,
+            '--settings',
+            JSON.stringify({ ...overlay, disableAllHooks: true, promptSuggestionEnabled: false }),
+            '--strict-mcp-config',
+            '--mcp-config',
+            '{"mcpServers":{}}',
+            '--print',
+            '--input-format',
+            'stream-json',
+            '--output-format',
+            'stream-json',
+            '--verbose',
+            '--no-session-persistence',
+        ],
+        cwd,
+        env: {
+            CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: '1',
+            DISABLE_TELEMETRY: '1',
+            DISABLE_ERROR_REPORTING: '1',
+            DISABLE_AUTOUPDATER: '1',
+            CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION: 'false',
+        },
+        stdio: { stdin: 'pipe', stdout: 'pipe', stderr: 'pipe' },
+        graceMs: config.graceMs,
+        signal: control,
+    });
+    void child.done.catch(() => undefined);
+    const inputError = () => undefined;
+    child.stdin?.on('error', inputError);
+    const write = (request_id, request) => new Promise((resolve, reject) => {
+        if (!child.stdin || child.stdin.destroyed)
+            return reject(new ClaudeNativeOAuthError());
+        child.stdin.write(JSON.stringify({ type: 'control_request', request_id, request }) + '\n', (error) => error ? reject(new ClaudeNativeOAuthError()) : resolve());
+    });
+    let bytes = 0;
+    const count = (chunk) => {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk));
+        bytes += buffer.length;
+        if (bytes > Math.min(config.maxRunBytes, 2_097_152))
+            throw new ClaudeNativeOAuthError('Claude 账号目录响应过大');
+        return buffer;
+    };
+    const errors = (async () => {
+        if (child.stderr)
+            for await (const chunk of child.stderr)
+                count(chunk);
+    })();
+    void errors.catch(() => undefined);
+    const output = (async () => {
+        if (!child.stdout)
+            throw new ClaudeNativeOAuthError();
+        const decoder = new StringDecoder('utf8');
+        let pending = '', expected = 'native-initialize', initialize;
+        for await (const chunk of child.stdout) {
+            pending += decoder.write(count(chunk));
+            let newline;
+            while ((newline = pending.indexOf('\n')) >= 0) {
+                const line = pending.slice(0, newline);
+                pending = pending.slice(newline + 1);
+                let message;
+                try {
+                    message = JSON.parse(line);
+                }
+                catch {
+                    throw new ClaudeNativeOAuthError();
+                }
+                if (!record(message))
+                    throw new ClaudeNativeOAuthError();
+                if (['assistant', 'user', 'stream_event', 'result', 'control_request'].includes(message.type))
+                    throw new ClaudeNativeOAuthError('Claude 账号查询返回了非元数据事件，已停止查询');
+                if (message.type !== 'control_response')
+                    continue;
+                const response = message.response;
+                if (!record(response) || response.request_id !== expected)
+                    throw new ClaudeNativeOAuthError();
+                if (response.subtype !== 'success' || !record(response.response))
+                    throw new ClaudeNativeOAuthError();
+                if (expected === 'native-initialize') {
+                    initialize = response.response;
+                    ownAccount(response.response.account);
+                    expected = 'native-usage';
+                    await write(expected, { subtype: 'get_usage', skip_behaviors: true });
+                }
+                else
+                    return parseClaudeNativeOAuthCatalog(initialize, response.response);
+            }
+        }
+        throw new ClaudeNativeOAuthError('Claude 账号查询提前结束，请刷新');
+    })();
+    void output.catch(() => undefined);
+    let abort = () => { };
+    const cancelled = new Promise((_, reject) => {
+        abort = () => reject(new ClaudeNativeOAuthError(signal.aborted ? 'Claude 账号查询已取消' : 'Claude 账号查询超时，请刷新'));
+        control.addEventListener('abort', abort, { once: true });
+        if (control.aborted)
+            abort();
+    });
+    const failed = new Promise((_, reject) => {
+        void errors.catch(reject);
+        void child.done.catch(() => reject(new ClaudeNativeOAuthError()));
+    });
+    try {
+        await Promise.race([
+            write('native-initialize', {
+                subtype: 'initialize',
+                hooks: {},
+                sdkMcpServers: [],
+                promptSuggestions: false,
+                agentProgressSummaries: false,
+            }),
+            cancelled,
+        ]);
+        const result = await Promise.race([output, cancelled, failed]);
+        control.throwIfAborted();
+        return result;
+    }
+    catch (error) {
+        if (error instanceof ClaudeNativeOAuthError)
+            throw error;
+        signal.throwIfAborted();
+        throw new ClaudeNativeOAuthError();
+    }
+    finally {
+        control.removeEventListener('abort', abort);
+        try {
+            child.terminate();
+            if (!(await child.waitForExit()))
+                throw new ProcessCleanupUnconfirmedError();
+        }
+        catch {
+            throw new ProcessCleanupUnconfirmedError();
+        }
+        await Promise.allSettled([output, errors, child.done]);
+        child.stdin?.removeListener('error', inputError);
+    }
+}
+//# sourceMappingURL=claude-native-oauth.js.map

package/lib/types/host/claude-native-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-native-oauth.js","sourceRoot":"","sources":["../../../src/host/claude-native-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAoB,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,8BAA8B,EAA2C,MAAM,cAAc,CAAA;AAEtG,MAAM,MAAM,GAAG,CAAC,KAAc,EAAgC,EAAE,CAC9D,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC/D,MAAM,EAAE,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC7C,OAAO,KAAK,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC3E,MAAM,IAAI,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC/C,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAEtG,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,GAAG,iCAAiC,CAAA;IACjD,YAAY,OAAO,GAAG,mCAAmC;QACvD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACtC,CAAC;CACF;AAQD,4FAA4F;AAC5F,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACnE,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;QACd,KAAK,CAAC,WAAW,KAAK,YAAY;QAClC,KAAK,CAAC,WAAW,KAAK,WAAW;QACjC,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC;QACnE,CAAC,KAAK;QAEN,MAAM,IAAI,sBAAsB,CAAC,6BAA6B,CAAC,CAAA;IACjE,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACrG,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,EAAE,CAAA;AACjG,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAc,EAAE,GAAW;IACjD,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,IAAI,sBAAsB,CAAC,kCAAkC,CAAC,CAAA;IAChE,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;QACd,KAAK,CAAC,qBAAqB,KAAK,IAAI;QACpC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACvE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;QAExC,MAAM,OAAO,EAAE,CAAA;IACjB,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAA;IAChC,MAAM,OAAO,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,kBAAkB,CAAC;SACrG,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;SACpC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC5B,uFAAuF;IACvF,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI;QAAE,MAAM,OAAO,EAAE,CAAA;IACzE,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE;QAChC,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;YACd,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YACrC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;YACnC,KAAK,CAAC,WAAW,GAAG,CAAC;YACrB,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI;gBACvB,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;oBAClC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBAC7C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC;YAExC,MAAM,OAAO,EAAE,CAAA;QACjB,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC,CAAA;IACD,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACvB,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;YAAE,MAAM,OAAO,EAAE,CAAA;QACxD,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACrC,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;YACd,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;YAC/B,KAAK,CAAC,OAAO,GAAG,CAAC;YACjB,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS;YAEpC,MAAM,OAAO,EAAE,CAAA;QACjB,IAAI,KAAK,CAAC,SAAS;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACtD,CAAC;IACD,6FAA6F;IAC7F,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,GAAG,CAAC;QAC/C,MAAM,IAAI,sBAAsB,CAAC,gCAAgC,CAAC,CAAA;AACtE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,UAAmB,EACnB,KAAc,EACd,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;IAC3D,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAC9C,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC7C,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;YACd,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;YAChB,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;YACxB,KAAK,CAAC,QAAQ,KAAK,IAAI;YACvB,KAAK,CAAC,MAAM,KAAK,IAAI;YACrB,KAAK,CAAC,QAAQ,KAAK,KAAK;YACxB,KAAK,CAAC,SAAS,KAAK,KAAK;YACzB,KAAK,CAAC,OAAO,KAAK,KAAK;YAEvB,SAAQ;QACV,MAAM,OAAO,GACX,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC;YACzE,CAAC,CAAC,OAAO,CAAC,MAAM,CACZ,CAAC,MAAM,EAAE,EAAE,CACT,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC1D,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC/C;YACH,CAAC,CAAC,EAAE,CAAA;QACR,+DAA+D;QAC/D,MAAM,MAAM,GAAgB;YAC1B,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;YAChE,OAAO,EAAE,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC;SACjC,CAAA;QACD,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,sBAAsB,CAAC,yBAAyB,CAAC,CAAA;QACtF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,sBAAsB,CAAC,2BAA2B,CAAC,CAAA;IAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAA;AAClD,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAuB,EACvB,MAAqB,EACrB,UAAkB,EAClB,GAAW,EACX,MAAmB,EACnB,UAAoB;IAEpB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,sFAAsF;IACtF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,YAAY;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACjG,IAAI,OAAgB,CAAA;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACxD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE;YACJ,UAAU;YACV,YAAY;YACZ,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;YACrF,qBAAqB;YACrB,cAAc;YACd,mBAAmB;YACnB,SAAS;YACT,gBAAgB;YAChB,aAAa;YACb,iBAAiB;YACjB,aAAa;YACb,WAAW;YACX,0BAA0B;SAC3B;QACD,GAAG;QACH,GAAG,EAAE;YACH,wCAAwC,EAAE,GAAG;YAC7C,iBAAiB,EAAE,GAAG;YACtB,uBAAuB,EAAE,GAAG;YAC5B,mBAAmB,EAAE,GAAG;YACxB,oCAAoC,EAAE,OAAO;SAC9C;QACD,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;QACxD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,OAAO;KAChB,CAAC,CAAA;IACF,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,SAAS,CAAA;IAClC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IACpC,MAAM,KAAK,GAAG,CAAC,UAAkB,EAAE,OAAgB,EAAE,EAAE,CACrD,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;QACtF,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACnG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CACzD,CAAA;IACH,CAAC,CAAC,CAAA;IACJ,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1E,KAAK,IAAI,MAAM,CAAC,MAAM,CAAA;QACtB,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC;YACjD,MAAM,IAAI,sBAAsB,CAAC,iBAAiB,CAAC,CAAA;QACrD,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;QACzB,IAAI,KAAK,CAAC,MAAM;YAAE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM;gBAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IACxE,CAAC,CAAC,EAAE,CAAA;IACJ,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;QACrD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,OAAO,GAAG,EAAE,EACd,QAAQ,GAAG,mBAAmB,EAC9B,UAAmB,CAAA;QACrB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;YACtC,IAAI,OAAe,CAAA;YACnB,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;gBACtC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;gBACpC,IAAI,OAAgB,CAAA;gBACpB,IAAI,CAAC;oBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,sBAAsB,EAAE,CAAA;gBACpC,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;oBAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;gBACxD,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC3F,MAAM,IAAI,sBAAsB,CAAC,4BAA4B,CAAC,CAAA;gBAChE,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB;oBAAE,SAAQ;gBACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;gBACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ;oBAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;gBAC7F,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;gBACpG,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;oBACrC,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAA;oBAC9B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;oBACrC,QAAQ,GAAG,cAAc,CAAA;oBACzB,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;gBACvE,CAAC;;oBAAM,OAAO,6BAA6B,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;YAC5E,CAAC;QACH,CAAC;QACD,MAAM,IAAI,sBAAsB,CAAC,qBAAqB,CAAC,CAAA;IACzD,CAAC,CAAC,EAAE,CAAA;IACJ,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAClC,IAAI,KAAK,GAAG,GAAG,EAAE,GAAE,CAAC,CAAA;IACpB,MAAM,SAAS,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QACjD,KAAK,GAAG,GAAG,EAAE,CACX,MAAM,CACJ,IAAI,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CACpF,CAAA;QACH,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,IAAI,OAAO,CAAC,OAAO;YAAE,KAAK,EAAE,CAAA;IAC9B,CAAC,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC9C,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACzB,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IACF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,KAAK,CAAC,mBAAmB,EAAE;gBACzB,OAAO,EAAE,YAAY;gBACrB,KAAK,EAAE,EAAE;gBACT,aAAa,EAAE,EAAE;gBACjB,iBAAiB,EAAE,KAAK;gBACxB,sBAAsB,EAAE,KAAK;aAC9B,CAAC;YACF,SAAS;SACV,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;QAC9D,OAAO,CAAC,cAAc,EAAE,CAAA;QACxB,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB;YAAE,MAAM,KAAK,CAAA;QACxD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC3C,IAAI,CAAC;YACH,KAAK,CAAC,SAAS,EAAE,CAAA;YACjB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;gBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAA;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAA8B,EAAE,CAAA;QAC5C,CAAC;QACD,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QACtD,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAClD,CAAC;AACH,CAAC"}

package/lib/types/host/claude-own-route.d.ts

@@ -0,0 +1,33 @@
+import { type AccountIdentity } from './account-identity.ts';
+import { type FirstPartyModelSource } from './first-party-models.ts';
+/** Public errors never interpolate native configuration or credentials. */
+export declare class ClaudeOwnRouteError extends Error {
+    readonly code = "CLI_OWN_ACCOUNT_REQUIRED";
+    constructor(message?: string);
+}
+export interface ClaudeOwnRoute {
+    kind: 'native' | 'proxy' | 'api';
+    sourceIds: string[];
+    configDirectory?: string;
+    /** Host-only; never project this material to Gateway. */
+    source?: FirstPartyModelSource;
+}
+/** Verified on native 2.1.296: empty settings.env unsets provider selectors for this process. */
+export declare function claudeNativeSettingsArguments(configDirectory?: string): string[];
+/** TCP only: a listening proxy remains selected even if its HTTP authentication fails. */
+export declare function claudeLoopbackAvailable(url: URL, signal: AbortSignal): Promise<boolean>;
+export declare function readClaudeOwnRoute(project: string, signal: AbortSignal, options?: {
+    available?: typeof claudeLoopbackAvailable;
+}): Promise<ClaudeOwnRoute>;
+export declare function claudeRouteStatusArguments(executable: string, route: ClaudeOwnRoute): string[];
+export declare function claudeRouteIdentity(route: ClaudeOwnRoute, raw: string, exitCode: number | null): AccountIdentity;
+/** Pin one route before spawning; secrets are in a private temporary file, never argv. */
+export declare function prepareClaudeWorkerLaunch(route: ClaudeOwnRoute, argv: string[], stateDirectory: string, signal: AbortSignal): Promise<{
+    argv: string[];
+    env: {};
+    cleanup?: undefined;
+} | {
+    argv: string[];
+    env: {};
+    cleanup: () => Promise<void>;
+}>;

package/lib/types/host/claude-own-route.js

@@ -0,0 +1,250 @@
+import { createConnection } from 'node:net';
+import { homedir } from 'node:os';
+import { join, isAbsolute, resolve } from 'node:path';
+import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';
+import { safePiOmpAncestors } from "./pi-omp-native.js";
+import { accountEmail } from "./account-identity.js";
+import { readFirstPartyJson, claudeManagedSettingsPath, } from "./first-party-models.js";
+const record = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+const literal = (v) => typeof v === 'string' && !!v.trim() && !/[\s\x00-\x1f{}$]/.test(v) && !v.startsWith('!');
+const authOption = /ANTHROPIC|CLAUDE_CODE_(?:OAUTH|USE_|API)|AWS_|GOOGLE_|CLOUD_ML|API_KEY|BEARER_TOKEN/;
+const allowed = new Set(['ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_BASE_URL']);
+const modelOption = /^ANTHROPIC_(?:MODEL|SMALL_FAST_MODEL|DEFAULT_(?:HAIKU|SONNET|OPUS)_MODEL(?:_NAME)?)$/;
+const officialBase = 'https://api.anthropic.com';
+const homeOption = /^(?:CLAUDE_CONFIG_DIR|HOME|USERPROFILE|XDG_CONFIG_HOME)$/;
+/** Public errors never interpolate native configuration or credentials. */
+export class ClaudeOwnRouteError extends Error {
+    code = 'CLI_OWN_ACCOUNT_REQUIRED';
+    constructor(message = 'Claude 账号来源无法确认，请检查该 CLI 的配置') {
+        super(message);
+        this.name = 'ClaudeOwnRouteError';
+    }
+}
+/** Verified on native 2.1.296: empty settings.env unsets provider selectors for this process. */
+export function claudeNativeSettingsArguments(configDirectory) {
+    return [
+        '--settings',
+        JSON.stringify({
+            apiKeyHelper: '',
+            env: {
+                ...(configDirectory ? { CLAUDE_CONFIG_DIR: configDirectory } : {}),
+                CLAUDE_CODE_USE_BEDROCK: '',
+                CLAUDE_CODE_USE_VERTEX: '',
+                CLAUDE_CODE_USE_FOUNDRY: '',
+                ANTHROPIC_AUTH_TOKEN: '',
+                ANTHROPIC_API_KEY: '',
+                CLAUDE_CODE_OAUTH_TOKEN: '',
+                ANTHROPIC_BASE_URL: officialBase,
+                ANTHROPIC_MODEL: '',
+                ANTHROPIC_SMALL_FAST_MODEL: '',
+                ANTHROPIC_DEFAULT_HAIKU_MODEL: '',
+                ANTHROPIC_DEFAULT_HAIKU_MODEL_NAME: '',
+                ANTHROPIC_DEFAULT_SONNET_MODEL: '',
+                ANTHROPIC_DEFAULT_SONNET_MODEL_NAME: '',
+                ANTHROPIC_DEFAULT_OPUS_MODEL: '',
+                ANTHROPIC_DEFAULT_OPUS_MODEL_NAME: '',
+            },
+        }),
+    ];
+}
+/** TCP only: a listening proxy remains selected even if its HTTP authentication fails. */
+export async function claudeLoopbackAvailable(url, signal) {
+    signal.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const socket = createConnection({
+            host: url.hostname.replace(/^\[|\]$/g, ''),
+            port: Number(url.port || (url.protocol === 'https:' ? 443 : 80)),
+        });
+        let settled = false;
+        const done = (value, error) => {
+            if (settled)
+                return;
+            settled = true;
+            signal.removeEventListener('abort', abort);
+            socket.destroy();
+            error !== undefined ? reject(error) : resolve(value);
+        };
+        const abort = () => done(undefined, signal.reason ?? new Error('查询已取消'));
+        signal.addEventListener('abort', abort, { once: true });
+        socket.once('connect', () => done(true));
+        socket.setTimeout(1200, () => done(false));
+        socket.once('error', (error) => {
+            if (['ECONNREFUSED', 'ETIMEDOUT', 'EHOSTUNREACH', 'ENETUNREACH'].includes(error.code ?? ''))
+                done(false);
+            else
+                done(undefined, new ClaudeOwnRouteError('Claude 本地代理连接状态无法确认，请检查代理'));
+        });
+        if (signal.aborted)
+            abort();
+    });
+}
+export async function readClaudeOwnRoute(project, signal, options = {}) {
+    signal.throwIfAborted();
+    const root = process.env.CLAUDE_CONFIG_DIR?.trim() || join(homedir(), '.claude');
+    if (!isAbsolute(root))
+        throw new ClaudeOwnRouteError('Claude 账号目录必须使用绝对路径');
+    const paths = [
+        join(root, 'settings.json'),
+        join(project, '.claude/settings.json'),
+        join(project, '.claude/settings.local.json'),
+    ];
+    const configured = Object.create(null), env = Object.create(null);
+    for (const path of paths) {
+        const settings = await readFirstPartyJson(path);
+        signal.throwIfAborted();
+        Object.assign(configured, settings);
+        if (record(settings.env))
+            Object.assign(env, settings.env);
+    }
+    const managed = await readFirstPartyJson(claudeManagedSettingsPath());
+    signal.throwIfAborted();
+    if (Object.entries(process.env).some(([key, value]) => value && authOption.test(key) && !modelOption.test(key)))
+        throw new ClaudeOwnRouteError('Claude 检测到环境账号覆盖，请先在该 CLI 自身设置中明确账号来源');
+    if (configured.apiKeyHelper ||
+        managed.apiKeyHelper ||
+        (record(managed.env) &&
+            Object.entries(managed.env).some(([key, value]) => value && (authOption.test(key) || homeOption.test(key)))))
+        throw new ClaudeOwnRouteError();
+    if (Object.entries(env).some(([key, value]) => value &&
+        (homeOption.test(key) || (authOption.test(key) && !allowed.has(key) && !modelOption.test(key)))))
+        throw new ClaudeOwnRouteError();
+    const key = env.ANTHROPIC_API_KEY, bearer = env.ANTHROPIC_AUTH_TOKEN;
+    if (key && bearer)
+        throw new ClaudeOwnRouteError('Claude 同时配置两种令牌，请先明确一种登录来源');
+    if ((key && !literal(key)) || (bearer && !literal(bearer)))
+        throw new ClaudeOwnRouteError();
+    let url;
+    try {
+        url = new URL(env.ANTHROPIC_BASE_URL || officialBase);
+        if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password || url.search || url.hash)
+            throw new Error();
+    }
+    catch {
+        throw new ClaudeOwnRouteError('Claude 服务地址无效，请检查该 CLI 的配置');
+    }
+    const loopback = ['localhost', '127.0.0.1', '[::1]', '::1'].includes(url.hostname.toLowerCase());
+    if (loopback && !(await (options.available ?? claudeLoopbackAvailable)(url, signal))) {
+        signal.throwIfAborted();
+        return { kind: 'native', configDirectory: root, sourceIds: [root, 'native:claude-official-login'] };
+    }
+    signal.throwIfAborted();
+    if (!key && !bearer) {
+        if (loopback || url.href.replace(/\/$/, '') !== officialBase)
+            throw new ClaudeOwnRouteError('Claude 服务已配置，但无法确认该服务的自身凭据');
+        return { kind: 'native', configDirectory: root, sourceIds: [root, 'native:claude-official-login'] };
+    }
+    return {
+        kind: loopback ? 'proxy' : 'api',
+        configDirectory: root,
+        sourceIds: paths,
+        source: {
+            provider: 'anthropic',
+            credential: { type: 'api', key: bearer || key },
+            baseUrl: url.href.replace(/\/$/, ''),
+            apiType: 'anthropic-messages',
+            ...(bearer ? { anthropicAuth: 'bearer' } : {}),
+            sourceIds: paths,
+            nativeModels: [],
+            nativeFullModelIds: true,
+            claudeRoute: loopback ? 'proxy' : 'api',
+        },
+    };
+}
+export function claudeRouteStatusArguments(executable, route) {
+    return [
+        executable,
+        ...(route.kind === 'native' ? claudeNativeSettingsArguments(route.configDirectory) : []),
+        'auth',
+        'status',
+        '--json',
+    ];
+}
+export function claudeRouteIdentity(route, raw, exitCode) {
+    let status;
+    try {
+        status = JSON.parse(raw);
+    }
+    catch {
+        throw new ClaudeOwnRouteError('Claude 登录状态响应无法确认，请刷新');
+    }
+    if (!record(status))
+        throw new ClaudeOwnRouteError('Claude 登录状态响应无法确认，请刷新');
+    if (status.apiProvider !== undefined && status.apiProvider !== 'firstParty')
+        throw new ClaudeOwnRouteError();
+    if (route.configDirectory && status.configDirectory !== undefined) {
+        const normalized = (path) => process.platform === 'win32' ? resolve(path).toLowerCase() : resolve(path);
+        if (typeof status.configDirectory !== 'string' ||
+            !isAbsolute(status.configDirectory) ||
+            normalized(status.configDirectory) !== normalized(route.configDirectory))
+            throw new ClaudeOwnRouteError('Claude 原生账号目录与选定来源不一致');
+    }
+    if (route.kind === 'native') {
+        if ([0, 1].includes(exitCode ?? -1) && status.loggedIn === false)
+            return { state: 'unconfigured', summary: 'Claude 官方账号未登录', verification: 'cli' };
+        if (exitCode !== 0 || status.loggedIn !== true || status.authMethod !== 'claude.ai')
+            throw new ClaudeOwnRouteError('Claude 官方登录来源无法确认，请使用原生登录');
+        const email = accountEmail(status.email);
+        return {
+            state: 'authenticated',
+            summary: 'Claude 官方账号登录',
+            authMethod: 'oauth',
+            accountLabel: email,
+            logins: [{ providerLabel: 'Claude 官方', authMethod: 'oauth', accountLabel: email }],
+            verification: 'cli',
+        };
+    }
+    const expected = route.source?.anthropicAuth === 'bearer' ? 'oauth_token' : 'api_key';
+    if (exitCode !== 0 || status.loggedIn !== true || status.authMethod !== expected)
+        throw new ClaudeOwnRouteError();
+    const label = route.kind === 'proxy' ? 'Claude 本地代理' : 'Claude 自身配置';
+    return {
+        state: 'authenticated',
+        summary: `${label} API 登录`,
+        authMethod: 'api',
+        logins: [{ providerLabel: label, authMethod: 'api' }],
+        verification: 'cli',
+    };
+}
+/** Pin one route before spawning; secrets are in a private temporary file, never argv. */
+export async function prepareClaudeWorkerLaunch(route, argv, stateDirectory, signal) {
+    signal.throwIfAborted();
+    if (route.kind === 'native')
+        return {
+            argv: [argv[0], ...claudeNativeSettingsArguments(route.configDirectory), ...argv.slice(1)],
+            env: {},
+        };
+    if (!route.source)
+        throw new ClaudeOwnRouteError();
+    const parent = join(stateDirectory, 'claude-route');
+    await safePiOmpAncestors(parent);
+    await mkdir(parent, { recursive: true, mode: 0o700 });
+    await safePiOmpAncestors(parent);
+    const directory = await mkdtemp(join(parent, 'run-'));
+    try {
+        const path = join(directory, 'settings.json');
+        await writeFile(path, JSON.stringify({
+            apiKeyHelper: '',
+            env: {
+                ...(route.configDirectory ? { CLAUDE_CONFIG_DIR: route.configDirectory } : {}),
+                CLAUDE_CODE_USE_BEDROCK: '',
+                CLAUDE_CODE_USE_VERTEX: '',
+                CLAUDE_CODE_USE_FOUNDRY: '',
+                ANTHROPIC_BASE_URL: route.source.baseUrl,
+                ANTHROPIC_AUTH_TOKEN: route.source.anthropicAuth === 'bearer' ? route.source.credential.key : '',
+                ANTHROPIC_API_KEY: route.source.anthropicAuth === 'bearer' ? '' : route.source.credential.key,
+                CLAUDE_CODE_OAUTH_TOKEN: '',
+            },
+        }), { mode: 0o600, flag: 'wx' });
+        signal.throwIfAborted();
+        return {
+            argv: [argv[0], '--settings', path, ...argv.slice(1)],
+            env: {},
+            cleanup: () => rm(directory, { recursive: true, force: true }),
+        };
+    }
+    catch (error) {
+        await rm(directory, { recursive: true, force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=claude-own-route.js.map

package/lib/types/host/claude-own-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-own-route.js","sourceRoot":"","sources":["../../../src/host/claude-own-route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAwB,MAAM,uBAAuB,CAAA;AAC1E,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAE1B,MAAM,yBAAyB,CAAA;AAEhC,MAAM,MAAM,GAAG,CAAC,CAAU,EAA4B,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AAC1G,MAAM,OAAO,GAAG,CAAC,CAAU,EAAe,EAAE,CAC1C,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;AAC1F,MAAM,UAAU,GAAG,qFAAqF,CAAA;AACxG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,CAAC,CAAA;AAC5F,MAAM,WAAW,GAAG,sFAAsF,CAAA;AAC1G,MAAM,YAAY,GAAG,2BAA2B,CAAA;AAChD,MAAM,UAAU,GAAG,0DAA0D,CAAA;AAE7E,2EAA2E;AAC3E,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,GAAG,0BAA0B,CAAA;IAC1C,YAAY,OAAO,GAAG,8BAA8B;QAClD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AASD,iGAAiG;AACjG,MAAM,UAAU,6BAA6B,CAAC,eAAwB;IACpE,OAAO;QACL,YAAY;QACZ,IAAI,CAAC,SAAS,CAAC;YACb,YAAY,EAAE,EAAE;YAChB,GAAG,EAAE;gBACH,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,uBAAuB,EAAE,EAAE;gBAC3B,sBAAsB,EAAE,EAAE;gBAC1B,uBAAuB,EAAE,EAAE;gBAC3B,oBAAoB,EAAE,EAAE;gBACxB,iBAAiB,EAAE,EAAE;gBACrB,uBAAuB,EAAE,EAAE;gBAC3B,kBAAkB,EAAE,YAAY;gBAChC,eAAe,EAAE,EAAE;gBACnB,0BAA0B,EAAE,EAAE;gBAC9B,6BAA6B,EAAE,EAAE;gBACjC,kCAAkC,EAAE,EAAE;gBACtC,8BAA8B,EAAE,EAAE;gBAClC,mCAAmC,EAAE,EAAE;gBACvC,4BAA4B,EAAE,EAAE;gBAChC,iCAAiC,EAAE,EAAE;aACtC;SACF,CAAC;KACH,CAAA;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAQ,EAAE,MAAmB;IACzE,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC;YAC9B,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YAC1C,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACjE,CAAC,CAAA;QACF,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,KAAe,EAAE,EAAE;YAChD,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YAC1C,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAM,CAAC,CAAA;QACvD,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACxE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YACpD,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,CAAA;;gBACnG,IAAI,CAAC,SAAS,EAAE,IAAI,mBAAmB,CAAC,2BAA2B,CAAC,CAAC,CAAA;QAC5E,CAAC,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,EAAE,CAAA;IAC7B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,MAAmB,EACnB,UAA0D,EAAE;IAE5D,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAA;IAChF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,CAAC,CAAA;IAC3E,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QAC3B,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC;KAC7C,CAAA;IACD,MAAM,UAAU,GAAwB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EACzD,GAAG,GAAwB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,yBAAyB,EAAE,CAAC,CAAA;IACrE,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IACE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAC1E;QAED,MAAM,IAAI,mBAAmB,CAAC,uCAAuC,CAAC,CAAA;IACxE,IACE,UAAU,CAAC,YAAY;QACvB,OAAO,CAAC,YAAY;QACpB,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAClB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAC1E,CAAC;QAEJ,MAAM,IAAI,mBAAmB,EAAE,CAAA;IACjC,IACE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CACtB,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACf,KAAK;QACL,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAClG;QAED,MAAM,IAAI,mBAAmB,EAAE,CAAA;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,EAC/B,MAAM,GAAG,GAAG,CAAC,oBAAoB,CAAA;IACnC,IAAI,GAAG,IAAI,MAAM;QAAE,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,CAAC,CAAA;IAC9E,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,IAAI,mBAAmB,EAAE,CAAA;IAC3F,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,YAAY,CAAC,CAAA;QACrD,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;YACvG,MAAM,IAAI,KAAK,EAAE,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,CAAC,CAAA;IAC7D,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IAChG,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,8BAA8B,CAAC,EAAE,CAAA;IACrG,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,IAAI,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY;YAC1D,MAAM,IAAI,mBAAmB,CAAC,4BAA4B,CAAC,CAAA;QAC7D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,8BAA8B,CAAC,EAAE,CAAA;IACrG,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;QAChC,eAAe,EAAE,IAAI;QACrB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE;YACN,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,IAAI,GAAG,EAAE;YAC/C,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACpC,OAAO,EAAE,oBAAoB;YAC7B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,EAAE;YAChB,kBAAkB,EAAE,IAAI;YACxB,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;SACxC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,UAAkB,EAAE,KAAqB;IAClF,OAAO;QACL,UAAU;QACV,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM;QACN,QAAQ;QACR,QAAQ;KACT,CAAA;AACH,CAAC;AACD,MAAM,UAAU,mBAAmB,CACjC,KAAqB,EACrB,GAAW,EACX,QAAuB;IAEvB,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;IAC3E,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY;QAAE,MAAM,IAAI,mBAAmB,EAAE,CAAA;IAC5G,IAAI,KAAK,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAClC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5E,IACE,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;YAC1C,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC;YACnC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC;YAExE,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK;YAC9D,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;QAClF,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW;YACjF,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,CAAC,CAAA;QAC5D,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACxC,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,eAAe;YACxB,UAAU,EAAE,OAAO;YACnB,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YAClF,YAAY,EAAE,KAAK;SACpB,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAA;IACrF,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ;QAC9E,MAAM,IAAI,mBAAmB,EAAE,CAAA;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAA;IACpE,OAAO;QACL,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,GAAG,KAAK,SAAS;QAC1B,UAAU,EAAE,KAAK;QACjB,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACrD,YAAY,EAAE,KAAK;KACpB,CAAA;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAqB,EACrB,IAAc,EACd,cAAsB,EACtB,MAAmB;IAEnB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QACzB,OAAO;YACL,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,GAAG,6BAA6B,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3F,GAAG,EAAE,EAAE;SACR,CAAA;IACH,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,mBAAmB,EAAE,CAAA;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAA;IACnD,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAChC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAChC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;QAC7C,MAAM,SAAS,CACb,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC;YACb,YAAY,EAAE,EAAE;YAChB,GAAG,EAAE;gBACH,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9E,uBAAuB,EAAE,EAAE;gBAC3B,sBAAsB,EAAE,EAAE;gBAC1B,uBAAuB,EAAE,EAAE;gBAC3B,kBAAkB,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;gBACxC,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;gBAChG,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG;gBAC7F,uBAAuB,EAAE,EAAE;aAC5B;SACF,CAAC,EACF,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAC5B,CAAA;QACD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAO;YACL,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACtD,GAAG,EAAE,EAAE;YACP,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SAC/D,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACrD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/types/host/cli-account-binding.d.ts

@@ -0,0 +1,33 @@
+import { type ClaudeOwnRoute } from './claude-own-route.ts';
+import { type CliId } from '../shared/types.ts';
+import { type ProcessBackend, type RuntimeConfig } from './process.ts';
+/** Safe public error; neither secrets nor native paths are interpolated. */
+export declare class CliAccountBindingError extends Error {
+    readonly code = "CLI_OWN_ACCOUNT_REQUIRED";
+    constructor(cli: CliId, reason?: string);
+}
+/** File-backed Codex auth only. Native keyring/auto cannot use a stale auth.json for model queries. */
+export declare function readCodexOwnAccountSource(project: string, signal: AbortSignal): Promise<{
+    provider: string;
+    credential: {
+        type: "api";
+        key: string;
+    };
+    sourceIds: string[];
+    baseUrl: string;
+    nativeRouteConfirmed: true;
+} | {
+    provider: string;
+    credential: {
+        access: any;
+        refresh: any;
+        accountId: any;
+        expires: number | undefined;
+        type: "oauth";
+    };
+    sourceIds: string[];
+    baseUrl: string;
+    nativeRouteConfirmed: true;
+}>;
+/** Host-only account epoch. Never return it from a Gateway response or write credentials to storage. */
+export declare function readCliAccountBinding(cli: CliId, backend: ProcessBackend, config: RuntimeConfig, project: string, signal: AbortSignal, selectedClaudeRoute?: ClaudeOwnRoute): Promise<string>;