dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/host/grok-models.js

@@ -0,0 +1,320 @@
+import { constants } from 'node:fs';
+import { lstat, open, realpath } from 'node:fs/promises';
+import { createHash } from 'node:crypto';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { accountEmail, localTokenExpired } from "./account-identity.js";
+import { EFFORTS } from "../shared/types.js";
+export const GROK_MODELS_URL = 'https://cli-chat-proxy.grok.com/v1/models';
+export const GROK_SETTINGS_URL = 'https://cli-chat-proxy.grok.com/v1/settings';
+const object = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+const text = (v) => typeof v === 'string' && !!v && v.length <= 32768 && !/[\x00-\x20\x7f]/.test(v);
+export class GrokModelsError extends Error {
+}
+/** This adapter supports the fixed first-party route, not ambient provider overrides. */
+export function assertGrokNativeEnvironment(home = homedir()) {
+    if (process.env.GROK_HOME?.trim() && resolve(process.env.GROK_HOME) !== resolve(home, '.grok'))
+        throw new GrokModelsError('当前 Grok 认证配置不受支持');
+    if ([
+        'GROK_AUTH_PROVIDER_COMMAND',
+        'GROK_OIDC_ISSUER',
+        'GROK_OIDC_CLIENT_ID',
+        'GROK_CLI_CHAT_PROXY_BASE_URL',
+        'GROK_MODELS_BASE_URL',
+        'GROK_MODELS_LIST_URL',
+        'GROK_XAI_API_BASE_URL',
+        'GROK_DEPLOYMENT_KEY',
+        'GROK_AUTH_PATH',
+        'GROK_CONFIG_PATH',
+    ].some((key) => process.env[key]?.trim()))
+        throw new GrokModelsError('当前 Grok 认证配置不受支持');
+}
+/** Official native OIDC slot and its own identity, not arbitrary configured keys. */
+export function selectGrokOwnAccount(raw, now = Date.now()) {
+    if (!object(raw))
+        return undefined;
+    const entries = Object.entries(raw).filter(([slot, value]) => slot.startsWith('https://auth.x.ai::') && object(value) && value.auth_mode === 'oidc');
+    if (entries.length !== 1)
+        return undefined;
+    const [slot, value] = entries[0];
+    if (!object(value) ||
+        value.oidc_issuer !== 'https://auth.x.ai' ||
+        !text(value.oidc_client_id) ||
+        slot !== `https://auth.x.ai::${value.oidc_client_id}` ||
+        !text(value.user_id))
+        return undefined;
+    if (!text(value.key))
+        return undefined;
+    const access = value.key;
+    const created = typeof value.create_time === 'string' ? Date.parse(value.create_time) : NaN;
+    const expires = typeof value.expires_at === 'string' ? Date.parse(value.expires_at) : created + 30 * 86400_000;
+    return {
+        access,
+        expires,
+        refresh: text(value.refresh_token),
+        userId: value.user_id,
+        clientId: value.oidc_client_id,
+        active: !!access && Number.isFinite(expires) && expires > now && !localTokenExpired(access, now),
+        ...(accountEmail(value.email) ? { email: accountEmail(value.email) } : {}),
+    };
+}
+export async function readGrokOwnAccount(options = {}) {
+    options.signal?.throwIfAborted();
+    assertGrokNativeEnvironment(options.home);
+    const buffer = Buffer.alloc(65537);
+    let file;
+    try {
+        const root = join(await realpath(options.home ?? homedir()), '.grok');
+        const directory = await lstat(root);
+        if (!directory.isDirectory() || directory.isSymbolicLink() || (await realpath(root)) !== root)
+            throw new Error();
+        const path = join(root, 'auth.json');
+        const location = await lstat(path);
+        if (location.isSymbolicLink() || !location.isFile())
+            throw new Error();
+        file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        const stat = await file.stat();
+        if (!stat.isFile() || stat.dev !== location.dev || stat.ino !== location.ino || stat.nlink !== 1 || stat.size > 65536)
+            throw new Error();
+        let size = 0;
+        while (size < buffer.length) {
+            options.signal?.throwIfAborted();
+            const { bytesRead } = await file.read(buffer, size, buffer.length - size, null);
+            if (!bytesRead)
+                break;
+            size += bytesRead;
+        }
+        if (!size || size > 65536)
+            throw new Error();
+        const current = await lstat(path);
+        const after = await file.stat();
+        if (current.isSymbolicLink() || current.dev !== stat.dev || current.ino !== stat.ino || after.size !== stat.size || after.mtimeMs !== stat.mtimeMs)
+            throw new Error();
+        const bytes = buffer.subarray(0, size);
+        const account = selectGrokOwnAccount(JSON.parse(bytes.toString('utf8')));
+        if (!account || (!account.active && !account.refresh))
+            throw new Error();
+        options.signal?.throwIfAborted();
+        const currentDirectory = await lstat(root);
+        if (currentDirectory.isSymbolicLink() ||
+            currentDirectory.dev !== directory.dev ||
+            currentDirectory.ino !== directory.ino)
+            throw new Error();
+        return { ...account, fingerprint: createHash('sha256').update(bytes).digest('hex') };
+    }
+    catch {
+        options.signal?.throwIfAborted();
+        throw new GrokModelsError('请先登录 Grok');
+    }
+    finally {
+        buffer.fill(0);
+        await file?.close();
+    }
+}
+/** Only metadata IDs pass out; a successful empty list differs from a failed query. */
+export function grokAccountModels(payload, forbidden = []) {
+    if (!object(payload) || !Array.isArray(payload.data))
+        throw new GrokModelsError('模型目录格式无效');
+    const result = new Map();
+    for (const value of payload.data) {
+        if (!object(value))
+            throw new GrokModelsError('模型目录格式无效');
+        const meta = object(value._meta) ? value._meta : {};
+        // supported_in_api=false denotes a session-only model; this is a session request.
+        if (value.hidden === true ||
+            meta.hidden === true ||
+            value.allowed === false ||
+            value.available === false ||
+            value.entitled === false ||
+            value.enabled === false ||
+            value.disabled === true ||
+            value.upgrade_required === true)
+            continue;
+        const id = value.model ?? value.modelId ?? value.id ?? meta.model ?? meta.modelId;
+        if (typeof id !== 'string' ||
+            !/^[A-Za-z0-9][A-Za-z0-9._:/-]{0,255}$/.test(id) ||
+            forbidden.some((secret) => secret && id.includes(secret)))
+            throw new GrokModelsError('模型目录格式无效');
+        if (result.has(id))
+            throw new GrokModelsError('模型目录格式无效');
+        const supports = value.supportsReasoningEffort ?? value.supports_reasoning_effort ?? meta.supportsReasoningEffort;
+        const rawEfforts = value.reasoningEfforts ?? value.reasoning_efforts ?? meta.reasoningEfforts;
+        let efforts;
+        if (supports === false)
+            efforts = ['default'];
+        else if (rawEfforts !== undefined) {
+            if (!Array.isArray(rawEfforts))
+                throw new GrokModelsError('模型目录格式无效');
+            efforts = [
+                ...new Set(rawEfforts.flatMap((item) => {
+                    const id = object(item) ? item.id : item;
+                    return typeof id === 'string' && EFFORTS.includes(id) ? [id] : [];
+                })),
+            ];
+        }
+        result.set(id, efforts);
+    }
+    return result;
+}
+export function grokAccountModelIds(payload, forbidden = []) {
+    return new Set(grokAccountModels(payload, forbidden).keys());
+}
+/** Installed grok 1.0.0 (3cd0d0cbcebe) consumes these dynamic /models fields.
+ * Verified against its actual ACP response using an isolated loopback fixture;
+ * the built-in grok-4.5 fallback is not a limit on dynamic model IDs or xhigh.
+ */
+export function grokDynamicNativeModels(payload, forbidden = []) {
+    const scoped = grokAccountModels(payload, forbidden);
+    if (!object(payload) || !Array.isArray(payload.data))
+        return [];
+    return payload.data.flatMap((value) => {
+        if (!object(value))
+            return [];
+        const meta = object(value._meta) ? value._meta : {};
+        const id = value.model ?? value.modelId ?? value.id ?? meta.model ?? meta.modelId;
+        if (typeof id !== 'string' || !scoped.has(id))
+            return [];
+        // Never import a remote BYOK route or credential into this session adapter.
+        for (const key of ['baseUrl', 'base_url', 'apiBaseUrl', 'api_base_url']) {
+            const route = value[key];
+            if (route !== undefined && route !== 'https://cli-chat-proxy.grok.com/v1')
+                throw new GrokModelsError('模型目录地址不受支持');
+        }
+        if (['api_key', 'apiKey', 'env_key', 'envKey', 'auth_provider', 'authProvider'].some((key) => value[key] !== undefined))
+            throw new GrokModelsError('模型认证配置不受支持');
+        const supports = value.supportsReasoningEffort ?? value.supports_reasoning_effort ?? meta.supportsReasoningEffort;
+        const efforts = supports === false
+            ? ['default']
+            : supports === true
+                ? scoped.get(id)?.filter((effort) => ['low', 'medium', 'high', 'xhigh'].includes(effort))
+                : [];
+        if (!efforts?.length)
+            return [];
+        const label = typeof value.name === 'string' &&
+            value.name.length <= 256 &&
+            !/\p{C}/u.test(value.name) &&
+            !forbidden.some((secret) => secret && value.name.toString().includes(secret))
+            ? value.name
+            : id;
+        return [{ id, label, efforts }];
+    });
+}
+async function readPayload(response, signal) {
+    const reader = response.body?.getReader();
+    if (!reader)
+        throw new GrokModelsError('模型目录格式无效');
+    let length = 0;
+    const chunks = [];
+    const abort = () => {
+        void reader.cancel().catch(() => undefined);
+    };
+    signal.addEventListener('abort', abort, { once: true });
+    try {
+        while (true) {
+            signal.throwIfAborted();
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            length += value.length;
+            if (length > 2097152)
+                throw new GrokModelsError('模型目录过大');
+            chunks.push(value);
+        }
+        return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    }
+    finally {
+        signal.removeEventListener('abort', abort);
+        await reader.cancel().catch(() => undefined);
+        reader.releaseLock();
+    }
+}
+/** Fixed official Build endpoint; no redirect, OAuth refresh, fallback, or generation. */
+export async function discoverGrokAccountModels(native, options = {}) {
+    options.signal?.throwIfAborted();
+    const source = await readGrokOwnAccount(options);
+    if (!source.active || source.expires <= Date.now() + 30000)
+        throw new GrokModelsError('登录需要续期，请打开 Grok');
+    const controller = new AbortController();
+    const signal = options.signal ? AbortSignal.any([options.signal, controller.signal]) : controller.signal;
+    const timer = setTimeout(() => controller.abort(), Math.max(50, Math.min(options.timeoutMs ?? 8000, 10000)));
+    try {
+        // Native 1.0.0-era remote/client.rs:715-787, xai-grok-http/src/lib.rs:247-261.
+        const request = async (target) => {
+            const response = await (options.fetch ?? fetch)(target, {
+                method: 'GET',
+                redirect: 'error',
+                signal,
+                headers: {
+                    accept: 'application/json',
+                    Authorization: `Bearer ${source.access}`,
+                    'X-XAI-Token-Auth': 'xai-grok-cli',
+                    'x-userid': source.userId,
+                    'x-grok-client-version': '1.0.0',
+                    'x-grok-client-mode': 'headless',
+                    ...(source.email ? { 'x-email': source.email } : {}),
+                },
+            });
+            if (response.redirected || (response.url && response.url !== target)) {
+                await response.body?.cancel();
+                throw new GrokModelsError('模型目录地址不受支持');
+            }
+            if (!response.ok) {
+                await response.body?.cancel();
+                throw new GrokModelsError(response.status === 401
+                    ? '登录已失效，请重新登录'
+                    : response.status === 403
+                        ? '模型目录访问被拒绝'
+                        : '模型目录查询失败，请刷新');
+            }
+            return readPayload(response, signal);
+        };
+        const unchanged = async () => {
+            signal.throwIfAborted();
+            const current = await readGrokOwnAccount(options);
+            if (source.fingerprint !== current.fingerprint)
+                throw new GrokModelsError('账号已改变，请刷新');
+            signal.throwIfAborted();
+        };
+        // The Build access gate permits free allowlisted accounts too. A model list
+        // or a paid-tier claim alone is not the native access decision.
+        const settings = await request(GROK_SETTINGS_URL);
+        await unchanged();
+        if (!object(settings) || typeof settings.allow_access !== 'boolean')
+            throw new GrokModelsError('模型使用权限尚未确认');
+        if (!settings.allow_access)
+            throw new GrokModelsError('当前账号未获 Grok Build 使用权限');
+        const payload = await request(GROK_MODELS_URL);
+        const models = grokAccountModels(payload, [source.access, source.userId]);
+        signal.throwIfAborted();
+        await unchanged();
+        signal.throwIfAborted();
+        if (!models.size)
+            throw new GrokModelsError('账号目录未返回模型');
+        const capabilities = options.nativeDynamicSchema
+            ? grokDynamicNativeModels(payload, [source.access, source.userId])
+            : native;
+        const result = capabilities.flatMap((model) => {
+            if (!models.has(model.id))
+                return [];
+            const allowed = models.get(model.id);
+            const efforts = allowed
+                ? (model.efforts ?? []).filter((effort) => allowed.includes(effort))
+                : (model.efforts ?? []);
+            return efforts.length ? [{ ...model, efforts }] : [];
+        });
+        if (!result.length)
+            throw new GrokModelsError('当前 CLI 未支持账号模型');
+        return result;
+    }
+    catch (error) {
+        options.signal?.throwIfAborted();
+        if (error instanceof GrokModelsError)
+            throw error;
+        throw new GrokModelsError(controller.signal.aborted ? '模型目录查询超时' : '模型目录查询失败，请刷新');
+    }
+    finally {
+        clearTimeout(timer);
+        controller.abort();
+    }
+}
+//# sourceMappingURL=grok-models.js.map

package/lib/types/host/grok-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-models.js","sourceRoot":"","sources":["../../../src/host/grok-models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACvE,OAAO,EAAE,OAAO,EAAiC,MAAM,oBAAoB,CAAA;AAE3E,MAAM,CAAC,MAAM,eAAe,GAAG,2CAA2C,CAAA;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,6CAA6C,CAAA;AAC9E,MAAM,MAAM,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AAC9G,MAAM,IAAI,GAAG,CAAC,CAAU,EAAe,EAAE,CACvC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjF,MAAM,OAAO,eAAgB,SAAQ,KAAK;CAAG;AAC7C,yFAAyF;AACzF,MAAM,UAAU,2BAA2B,CAAC,IAAI,GAAG,OAAO,EAAE;IAC1D,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;QAC5F,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAA;IAC/C,IACE;QACE,4BAA4B;QAC5B,kBAAkB;QAClB,qBAAqB;QACrB,8BAA8B;QAC9B,sBAAsB;QACtB,sBAAsB;QACtB,uBAAuB;QACvB,qBAAqB;QACrB,gBAAgB;QAChB,kBAAkB;KACnB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QAEzC,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAA;AACjD,CAAC;AAUD,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACjE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CACxC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,CACzG,CAAA;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC1C,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;IACjC,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;QACd,KAAK,CAAC,WAAW,KAAK,mBAAmB;QACzC,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QAC3B,IAAI,KAAK,sBAAsB,KAAK,CAAC,cAAc,EAAE;QACrD,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAEpB,OAAO,SAAS,CAAA;IAClB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAA;IACxB,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAC3F,MAAM,OAAO,GACX,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,GAAG,SAAS,CAAA;IAChG,OAAO;QACL,MAAM;QACN,OAAO;QACP,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;QAClC,MAAM,EAAE,KAAK,CAAC,OAAO;QACrB,QAAQ,EAAE,KAAK,CAAC,cAAc;QAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC;QAChG,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAA;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAmD,EAAE;IAC5F,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,IAAI,CAAA;IACR,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QACrE,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;YAC3F,MAAM,IAAI,KAAK,EAAE,CAAA;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,EAAE,CAAA;QACtE,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACzF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,EAAE,CAAA;QACxI,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,OAAO,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;YAChC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAA;YAC/E,IAAI,CAAC,SAAS;gBAAE,MAAK;YACrB,IAAI,IAAI,SAAS,CAAA;QACnB,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,EAAE,CAAA;QAC5C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC/B,IAAI,OAAO,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;YAChJ,MAAM,IAAI,KAAK,EAAE,CAAA;QACnB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;QACtC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACxE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAA;QACxE,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAChC,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC1C,IACE,gBAAgB,CAAC,cAAc,EAAE;YACjC,gBAAgB,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG;YACtC,gBAAgB,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG;YAEtC,MAAM,IAAI,KAAK,EAAE,CAAA;QACnB,OAAO,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAChC,MAAM,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;IACxC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,IAAI,EAAE,KAAK,EAAE,CAAA;IACrB,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAC/B,OAAgB,EAChB,YAAsB,EAAE;IAExB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,CAAC,CAAA;IAC3F,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAA;IACtD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,UAAU,CAAC,CAAA;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QACnD,kFAAkF;QAClF,IACE,KAAK,CAAC,MAAM,KAAK,IAAI;YACrB,IAAI,CAAC,MAAM,KAAK,IAAI;YACpB,KAAK,CAAC,OAAO,KAAK,KAAK;YACvB,KAAK,CAAC,SAAS,KAAK,KAAK;YACzB,KAAK,CAAC,QAAQ,KAAK,KAAK;YACxB,KAAK,CAAC,OAAO,KAAK,KAAK;YACvB,KAAK,CAAC,QAAQ,KAAK,IAAI;YACvB,KAAK,CAAC,gBAAgB,KAAK,IAAI;YAE/B,SAAQ;QACV,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAA;QACjF,IACE,OAAO,EAAE,KAAK,QAAQ;YACtB,CAAC,sCAAsC,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAEzD,MAAM,IAAI,eAAe,CAAC,UAAU,CAAC,CAAA;QACvC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,UAAU,CAAC,CAAA;QACzD,MAAM,QAAQ,GACZ,KAAK,CAAC,uBAAuB,IAAI,KAAK,CAAC,yBAAyB,IAAI,IAAI,CAAC,uBAAuB,CAAA;QAClG,MAAM,UAAU,GAAG,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAC,gBAAgB,CAAA;QAC7F,IAAI,OAA6B,CAAA;QACjC,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC,CAAA;aACxC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,UAAU,CAAC,CAAA;YACrE,OAAO,GAAG;gBACR,GAAG,IAAI,GAAG,CACR,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;oBAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;oBACxC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;gBACvF,CAAC,CAAC,CACH;aACF,CAAA;QACH,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACzB,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,YAAsB,EAAE;IAC5E,OAAO,IAAI,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;AAC9D,CAAC;AACD;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAgB,EAAE,YAAsB,EAAE;IAChF,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/D,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QACnD,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAA;QACjF,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAA;QACxD,4EAA4E;QAC5E,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;YACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,oCAAoC;gBACvE,MAAM,IAAI,eAAe,CAAC,YAAY,CAAC,CAAA;QAC3C,CAAC;QACD,IACE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,IAAI,CAC9E,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,CAClC;YAED,MAAM,IAAI,eAAe,CAAC,YAAY,CAAC,CAAA;QACzC,MAAM,QAAQ,GACZ,KAAK,CAAC,uBAAuB,IAAI,KAAK,CAAC,yBAAyB,IAAI,IAAI,CAAC,uBAAuB,CAAA;QAClG,MAAM,OAAO,GACX,QAAQ,KAAK,KAAK;YAChB,CAAC,CAAC,CAAC,SAAkB,CAAC;YACtB,CAAC,CAAC,QAAQ,KAAK,IAAI;gBACjB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACzF,CAAC,CAAC,EAAE,CAAA;QACV,IAAI,CAAC,OAAO,EAAE,MAAM;YAAE,OAAO,EAAE,CAAA;QAC/B,MAAM,KAAK,GACT,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG;YACxB,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,IAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5E,CAAC,CAAC,KAAK,CAAC,IAAI;YACZ,CAAC,CAAC,EAAE,CAAA;QACR,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;AACJ,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,QAAkB,EAAE,MAAmB;IAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAA;IACzC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,CAAC,CAAA;IAClD,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC7C,CAAC,CAAA;IACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAC3C,IAAI,IAAI;gBAAE,MAAK;YACf,MAAM,IAAI,KAAK,CAAC,MAAM,CAAA;YACtB,IAAI,MAAM,GAAG,OAAO;gBAAE,MAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAA;YACzD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3D,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC1C,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC5C,MAAM,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC;AACH,CAAC;AACD,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAqB,EACrB,UAMI,EAAE;IAEN,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAChD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;QACxD,MAAM,IAAI,eAAe,CAAC,iBAAiB,CAAC,CAAA;IAC9C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAA;IACxG,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IAC5G,IAAI,CAAC;QACH,+EAA+E;QAC/E,MAAM,OAAO,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;YACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE;gBACtD,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,OAAO;gBACjB,MAAM;gBACN,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;oBACxC,kBAAkB,EAAE,cAAc;oBAClC,UAAU,EAAE,MAAM,CAAC,MAAM;oBACzB,uBAAuB,EAAE,OAAO;oBAChC,oBAAoB,EAAE,UAAU;oBAChC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrD;aACF,CAAC,CAAA;YACF,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC;gBACrE,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;gBAC7B,MAAM,IAAI,eAAe,CAAC,YAAY,CAAC,CAAA;YACzC,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;gBAC7B,MAAM,IAAI,eAAe,CACvB,QAAQ,CAAC,MAAM,KAAK,GAAG;oBACrB,CAAC,CAAC,aAAa;oBACf,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;wBACvB,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,cAAc,CACrB,CAAA;YACH,CAAC;YACD,OAAO,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACtC,CAAC,CAAA;QACD,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;YAC3B,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAA;YACjD,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;gBAAE,MAAM,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;YACtF,MAAM,CAAC,cAAc,EAAE,CAAA;QACzB,CAAC,CAAA;QACD,4EAA4E;QAC5E,gEAAgE;QAChE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACjD,MAAM,SAAS,EAAE,CAAA;QACjB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,SAAS;YACjE,MAAM,IAAI,eAAe,CAAC,YAAY,CAAC,CAAA;QACzC,IAAI,CAAC,QAAQ,CAAC,YAAY;YAAE,MAAM,IAAI,eAAe,CAAC,wBAAwB,CAAC,CAAA;QAC/E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QACzE,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,SAAS,EAAE,CAAA;QACjB,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,MAAM,IAAI,eAAe,CAAC,WAAW,CAAC,CAAA;QACxD,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB;YAC9C,CAAC,CAAC,uBAAuB,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAClE,CAAC,CAAC,MAAM,CAAA;QACV,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YAC5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,OAAO,EAAE,CAAA;YACpC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACpC,MAAM,OAAO,GAAG,OAAO;gBACrB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;YACzB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACtD,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAA;QAC/D,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAChC,IAAI,KAAK,YAAY,eAAe;YAAE,MAAM,KAAK,CAAA;QACjD,MAAM,IAAI,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAA;IACpF,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACnB,UAAU,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;AACH,CAAC"}

package/lib/types/host/harness-opencode-accounts.d.ts

@@ -0,0 +1,17 @@
+import type { AccountAction } from '../shared/accounts.ts';
+import type { AccountIdentity } from './account-identity.ts';
+import type { RuntimeConfig } from './process.ts';
+import { type OpenCodeNativeOptions } from './opencode-native.ts';
+export declare function readPiOmpAccount(cli: 'pi' | 'omp', config: RuntimeConfig, signal: AbortSignal, options?: {
+    nativeHome?: string;
+}): Promise<AccountIdentity>;
+/** Project only capability metadata, never keys, arbitrary provider metadata or token claims. */
+export declare function readOpenCodeAccount(config: RuntimeConfig, signal: AbortSignal, options?: OpenCodeNativeOptions): Promise<AccountIdentity>;
+/** User-operated native terminal. No task prompt, slash command, login or logout is injected. */
+export declare function prepareOpenCodeAccount(executable: string, action: AccountAction, config: RuntimeConfig, signal: AbortSignal): Promise<{
+    argv: string[];
+    env: Record<string, string>;
+    cwd: string;
+    cleanup: () => void;
+    instruction: string;
+}>;

package/lib/types/host/harness-opencode-accounts.js

@@ -0,0 +1,80 @@
+import { lstatSync, rmSync } from 'node:fs';
+import { mkdtemp } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { openCodeAuthDirectory, openCodeEnvironment } from "./opencode-adapter.js";
+import { privateDirectory } from "./extended-adapters.js";
+import { inspectPiOmpNativeAccount } from "./pi-omp-native.js";
+import { assertOpenCodeManagedAuth, inspectOpenCodeProfile, } from "./opencode-native.js";
+export async function readPiOmpAccount(cli, config, signal, options = {}) {
+    const native = await inspectPiOmpNativeAccount(cli, config.stateDirectory, signal, options);
+    return native;
+}
+/** Project only capability metadata, never keys, arbitrary provider metadata or token claims. */
+export async function readOpenCodeAccount(config, signal, options = {}) {
+    signal.throwIfAborted();
+    const native = await inspectOpenCodeProfile(openCodeAuthDirectory(config.stateDirectory), {
+        ...options,
+        signal,
+    });
+    return native;
+}
+/** User-operated native terminal. No task prompt, slash command, login or logout is injected. */
+export async function prepareOpenCodeAccount(executable, action, config, signal) {
+    signal.throwIfAborted();
+    if (!['login', 'logout', 'manage'].includes(action))
+        throw new Error('不支持的 OpenCode 账号操作');
+    const data = openCodeAuthDirectory(config.stateDirectory);
+    const accountRoot = privateDirectory(dirname(data));
+    const terminals = privateDirectory(join(accountRoot, 'terminals'));
+    const state = privateDirectory(await mkdtemp(join(terminals, 'terminal-')));
+    const identity = lstatSync(state);
+    const parentIdentity = lstatSync(terminals);
+    let removed = false;
+    const cleanup = () => {
+        if (removed)
+            return;
+        const parent = lstatSync(terminals);
+        if (parent.isSymbolicLink() || parent.dev !== parentIdentity.dev || parent.ino !== parentIdentity.ino)
+            throw new Error('OpenCode account runtime parent changed before cleanup');
+        let current;
+        try {
+            current = lstatSync(state);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                removed = true;
+                return;
+            }
+            throw error;
+        }
+        if (current.isSymbolicLink() || current.dev !== identity.dev || current.ino !== identity.ino)
+            throw new Error('OpenCode account runtime changed before cleanup');
+        // rm does not follow nested links. Never seal/chmod or remove the shared auth tree.
+        rmSync(state, { recursive: true, force: true });
+        removed = true;
+    };
+    try {
+        signal.throwIfAborted();
+        await assertOpenCodeManagedAuth(data, signal);
+        const env = await openCodeEnvironment(state, {
+            permission: { '*': 'deny' },
+        }, data, false);
+        signal.throwIfAborted();
+        const argv = [executable, ...(action === 'manage' ? [] : ['auth', action])];
+        return {
+            argv: [process.execPath, fileURLToPath(new URL('./private-launch.mjs', import.meta.url)), ...argv],
+            env: { ...env, ELECTRON_RUN_AS_NODE: '1' },
+            cwd: state,
+            cleanup,
+            instruction: action === 'manage'
+                ? '在 OpenCode 原生终端使用 /connect 管理登录；凭据与插件任务共用，工作数据保持独立。'
+                : '按 OpenCode 原生账号流程操作；凭据与插件任务共用，关闭终端不会撤销已完成的账号操作。',
+        };
+    }
+    catch (error) {
+        cleanup();
+        throw error;
+    }
+}
+//# sourceMappingURL=harness-opencode-accounts.js.map

package/lib/types/host/harness-opencode-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-opencode-accounts.js","sourceRoot":"","sources":["../../../src/host/harness-opencode-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAIxC,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EACL,yBAAyB,EACzB,sBAAsB,GAEvB,MAAM,sBAAsB,CAAA;AAE7B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAiB,EACjB,MAAqB,EACrB,MAAmB,EACnB,UAAmC,EAAE;IAErC,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3F,OAAO,MAAM,CAAA;AACf,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAqB,EACrB,MAAmB,EACnB,UAAiC,EAAE;IAEnC,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,qBAAqB,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE;QACxF,GAAG,OAAO;QACV,MAAM;KACP,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAkB,EAClB,MAAqB,EACrB,MAAqB,EACrB,MAAmB;IAQnB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAC1F,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IACzD,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;IAClE,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;IAC3E,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;IACjC,MAAM,cAAc,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;IAC3C,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,OAAO;YAAE,OAAM;QACnB,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;QACnC,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,cAAc,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,cAAc,CAAC,GAAG;YACnG,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC3E,IAAI,OAAO,CAAA;QACX,IAAI,CAAC;YACH,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,GAAG,IAAI,CAAA;gBACd,OAAM;YACR,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QACD,IAAI,OAAO,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;YAC1F,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;QACpE,oFAAoF;QACpF,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC,CAAA;IACD,IAAI,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC7C,MAAM,GAAG,GAAG,MAAM,mBAAmB,CACnC,KAAK,EACL;YACE,UAAU,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;SAC5B,EACD,IAAI,EACJ,KAAK,CACN,CAAA;QACD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QAC3E,OAAO;YACL,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;YAClG,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE;YAC1C,GAAG,EAAE,KAAK;YACV,OAAO;YACP,WAAW,EACT,MAAM,KAAK,QAAQ;gBACjB,CAAC,CAAC,qDAAqD;gBACvD,CAAC,CAAC,iDAAiD;SACxD,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,CAAA;QACT,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/types/host/hermes-account-context.d.ts

@@ -0,0 +1,8 @@
+import type { RuntimeConfig } from './process.ts';
+/** Once explicitly selected, this home remains authoritative even after logout/deletion.
+ * The marker is outside native writable account storage and contains no credentials. */
+export declare function effectiveHermesHome(config: Pick<RuntimeConfig, 'stateDirectory' | 'hermesHome'>): string;
+/** Only an explicit account action establishes this source. Never copy global auth/config. */
+export declare function prepareHermesAccountHome(config: Pick<RuntimeConfig, 'stateDirectory' | 'hermesHome'>): string;
+/** Native account selectors must not inherit a Host-managed overlay or secret helper. */
+export declare function hermesAccountEnvironment(home: string): Record<string, string>;

package/lib/types/host/hermes-account-context.js

@@ -0,0 +1,99 @@
+import { chmodSync, closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, writeFileSync, } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { hermesHomeDirectory, validateHermesHomeDirectory } from "./hermes-adapter.js";
+const markerText = '{"version":1,"source":"plugin-native"}\n';
+function paths(config) {
+    const root = validateHermesHomeDirectory(resolve(config.stateDirectory ?? join(process.env.DSH_HOME ?? join(homedir(), '.dsh'), 'cliworker-now')));
+    return {
+        root,
+        parent: join(root, 'accounts'),
+        home: join(root, 'accounts', 'hermes'),
+        marker: join(root, 'accounts', 'hermes-source.json'),
+    };
+}
+function selected(marker) {
+    let fd;
+    try {
+        fd = openSync(marker, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        const info = fstatSync(fd);
+        if (!info.isFile() || info.nlink !== 1 || info.size > 256 || readFileSync(fd, 'utf8') !== markerText)
+            throw new Error('Hermes 账号来源记录无效，请检查插件目录');
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+    }
+}
+/** Once explicitly selected, this home remains authoritative even after logout/deletion.
+ * The marker is outside native writable account storage and contains no credentials. */
+export function effectiveHermesHome(config) {
+    const own = paths(config);
+    for (const path of [own.parent, own.home]) {
+        try {
+            if (lstatSync(path).isSymbolicLink())
+                throw new Error('Unsafe Hermes account directory');
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+    }
+    return selected(own.marker) ? validateHermesHomeDirectory(own.home) : hermesHomeDirectory(config.hermesHome);
+}
+/** Only an explicit account action establishes this source. Never copy global auth/config. */
+export function prepareHermesAccountHome(config) {
+    // Validate the previous source as well; a misconfigured root must not widen a sandbox grant.
+    hermesHomeDirectory(config.hermesHome);
+    const own = paths(config);
+    for (const path of [own.root, own.parent, own.home]) {
+        mkdirSync(path, { recursive: true, mode: 0o700 });
+        const info = lstatSync(path);
+        if (!info.isDirectory() || info.isSymbolicLink())
+            throw new Error('Unsafe Hermes account directory');
+        chmodSync(path, 0o700);
+    }
+    // Native setup merges its defaults and writes its own model/account choices later.
+    try {
+        writeFileSync(join(own.home, 'config.yaml'), 'auth:\n  adopt_external_logins: false\n', {
+            flag: 'wx',
+            mode: 0o600,
+        });
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+    }
+    if (!selected(own.marker)) {
+        try {
+            writeFileSync(own.marker, markerText, { flag: 'wx', mode: 0o600 });
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+        }
+    }
+    if (!selected(own.marker))
+        throw new Error('Hermes 账号来源记录无法保存');
+    return validateHermesHomeDirectory(own.home);
+}
+/** Native account selectors must not inherit a Host-managed overlay or secret helper. */
+export function hermesAccountEnvironment(home) {
+    return {
+        HERMES_HOME: home,
+        HERMES_MANAGED_DIR: join(home, '.cliworker-managed'),
+        HERMES_PROFILE: '',
+        HERMES_SAFE_MODE: '1',
+        HERMES_IGNORE_RULES: '1',
+        HERMES_YOLO_MODE: '0',
+        HERMES_ACCEPT_HOOKS: '0',
+        HERMES_DISABLE_LAZY_INSTALLS: '1',
+    };
+}
+//# sourceMappingURL=hermes-account-context.js.map

package/lib/types/host/hermes-account-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes-account-context.js","sourceRoot":"","sources":["../../../src/host/hermes-account-context.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,aAAa,GACd,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AAEtF,MAAM,UAAU,GAAG,0CAA0C,CAAA;AAE7D,SAAS,KAAK,CAAC,MAA6C;IAC1D,MAAM,IAAI,GAAG,2BAA2B,CACtC,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,eAAe,CAAC,CAAC,CACzG,CAAA;IACD,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC;QACtC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,oBAAoB,CAAC;KACrD,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,IAAI,EAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACvF,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,UAAU;YAClG,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;QAC5C,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACpE,MAAM,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAA;IACrC,CAAC;AACH,CAAC;AAED;wFACwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,MAA4D;IAC9F,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;IACzB,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QAC1F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QACrE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;AAC9G,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,wBAAwB,CACtC,MAA4D;IAE5D,6FAA6F;IAC7F,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;IACzB,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;QACpG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACxB,CAAC;IACD,mFAAmF;IACnF,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,yCAAyC,EAAE;YACtF,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,KAAK;SACZ,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IACrE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QACrE,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IAC/D,OAAO,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AAC9C,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,OAAO;QACL,WAAW,EAAE,IAAI;QACjB,kBAAkB,EAAE,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC;QACpD,cAAc,EAAE,EAAE;QAClB,gBAAgB,EAAE,GAAG;QACrB,mBAAmB,EAAE,GAAG;QACxB,gBAAgB,EAAE,GAAG;QACrB,mBAAmB,EAAE,GAAG;QACxB,4BAA4B,EAAE,GAAG;KAClC,CAAA;AACH,CAAC"}

package/lib/types/host/hermes-accounts.d.ts

@@ -0,0 +1,19 @@
+import type { AccountAction, AccountSource } from '../shared/accounts.ts';
+import { type AccountIdentity } from './account-identity.ts';
+import { type RuntimeConfig } from './process.ts';
+/** Native shapes from auth_codex.py/auth_xai.py and NousResearch/hermes-agent@6c80c327 auth_nous.py.
+ * Explicit own credentials project local login; provider declarations and unknown schemas do not.
+ */
+export declare function projectHermesIdentity(raw: unknown): AccountIdentity | undefined;
+export declare function readHermesAccount(config: RuntimeConfig, signal: AbortSignal): Promise<AccountIdentity>;
+export declare function listHermesAccountSources(config: RuntimeConfig, signal: AbortSignal): Promise<{
+    id: AccountSource;
+    label: string;
+}[]>;
+export declare function prepareHermesAccount(action: AccountAction, executable: string, project: string, config: RuntimeConfig, signal: AbortSignal, source?: AccountSource): Promise<{
+    argv: string[];
+    cwd: string;
+    env: Record<string, string>;
+    instruction: string;
+    cleanup: () => Promise<void>;
+}>;