dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/host/managed-agent.js

@@ -0,0 +1,127 @@
+import { PassThrough } from 'node:stream';
+import { fileURLToPath } from 'node:url';
+/** Preserve pipes while using Harness's stronger terminal descendant ownership. */
+export async function spawnManagedAgent(backend, spec) {
+    // Unit-test backends can implement only pipe spawning. The production Host
+    // always provides the native terminal primitive.
+    // On Windows ordinary spawning owns a native Job. ConPTY does not have that
+    // owner in the pinned Host, so a terminal bridge would weaken descendant cleanup.
+    if (process.platform === 'win32' || !backend.spawnTerminal)
+        return backend.spawn(spec);
+    spec.signal?.throwIfAborted();
+    const terminal = await backend.spawnTerminal({
+        argv: [process.execPath, fileURLToPath(new URL('./terminal-bridge.mjs', import.meta.url)), ...spec.argv],
+        cwd: spec.cwd,
+        env: { ...spec.env, ELECTRON_RUN_AS_NODE: '1' },
+        rows: 24,
+        cols: 240,
+        terminalType: 'dumb',
+        graceMs: spec.graceMs ?? 5000,
+        signal: spec.signal,
+    });
+    const stdout = new PassThrough(), stderr = new PassThrough();
+    let resolve, reject;
+    const done = new Promise((yes, no) => {
+        resolve = yes;
+        reject = no;
+    });
+    void done.catch(() => undefined);
+    let cleanup, exited = false, pending = '';
+    const terminate = () => {
+        if (!cleanup) {
+            clearInterval(observe);
+            cleanup = terminal.terminate();
+            void cleanup.catch((error) => reject(error));
+        }
+    };
+    // Retain PID + start identities before agy can detach a background child.
+    let inspecting = false;
+    const observe = setInterval(() => {
+        if (inspecting || cleanup)
+            return;
+        inspecting = true;
+        void terminal
+            .inspectForeground()
+            .catch((error) => {
+            reject(error);
+            terminate();
+        })
+            .finally(() => {
+            inspecting = false;
+        });
+    }, 200);
+    const abort = () => terminate();
+    spec.signal?.addEventListener('abort', abort, { once: true });
+    if (spec.signal?.aborted)
+        terminate();
+    void (async () => {
+        try {
+            for await (const chunk of terminal.output) {
+                pending += String(chunk);
+                let end;
+                while ((end = pending.indexOf('\n')) >= 0) {
+                    const text = pending.slice(0, end).trim();
+                    pending = pending.slice(end + 1);
+                    if (!text)
+                        continue;
+                    const frame = JSON.parse(text);
+                    if (frame.channel === 'stdout' || frame.channel === 'stderr') {
+                        if (typeof frame.bytes !== 'string')
+                            throw new Error('Invalid CLI bridge bytes');
+                        (frame.channel === 'stdout' ? stdout : stderr).write(Buffer.from(frame.bytes, 'base64'));
+                    }
+                    else if (frame.channel === 'exit') {
+                        exited = true;
+                        stdout.end();
+                        stderr.end();
+                        resolve({ exitCode: frame.exitCode, signal: frame.signal });
+                    }
+                    else if (frame.channel === 'error')
+                        throw new Error(frame.message);
+                    else
+                        throw new Error('Invalid CLI bridge frame');
+                }
+                if (pending.length > 2_097_152)
+                    throw new Error('CLI bridge frame too large');
+            }
+            if (!exited) {
+                stdout.end();
+                stderr.end();
+                reject(new Error('CLI bridge ended before exit receipt'));
+            }
+        }
+        catch (error) {
+            stdout.destroy(error);
+            stderr.destroy(error);
+            reject(error);
+            terminate();
+        }
+    })();
+    void terminal.done.catch((error) => {
+        stdout.destroy(error);
+        stderr.destroy(error);
+        reject(error);
+    });
+    return {
+        stdin: undefined,
+        stdout,
+        stderr,
+        control: undefined,
+        collected: {},
+        done,
+        terminate,
+        waitForExit: async () => {
+            terminate();
+            try {
+                await cleanup;
+                await terminal.done;
+                return true;
+            }
+            finally {
+                spec.signal?.removeEventListener('abort', abort);
+                clearInterval(observe);
+            }
+        },
+    };
+}
+//# sourceMappingURL=managed-agent.js.map

package/lib/types/host/managed-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-agent.js","sourceRoot":"","sources":["../../../src/host/managed-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAIxC,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAuB,EACvB,IAAyB;IAEzB,2EAA2E;IAC3E,iDAAiD;IACjD,4EAA4E;IAC5E,kFAAkF;IAClF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACtF,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAC7B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACxG,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE;QAC/C,IAAI,EAAE,EAAE;QACR,IAAI,EAAE,GAAG;QACT,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,EAC9B,MAAM,GAAG,IAAI,WAAW,EAAE,CAAA;IAC5B,IAAI,OAA8C,EAAE,MAAkC,CAAA;IACtF,MAAM,IAAI,GAAG,IAAI,OAAO,CAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE;QACtD,OAAO,GAAG,GAAG,CAAA;QACb,MAAM,GAAG,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;IACF,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAChC,IAAI,OAAkC,EACpC,MAAM,GAAG,KAAK,EACd,OAAO,GAAG,EAAE,CAAA;IACd,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,aAAa,CAAC,OAAO,CAAC,CAAA;YACtB,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAA;YAC9B,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC,CAAA;IACD,0EAA0E;IAC1E,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;QAC/B,IAAI,UAAU,IAAI,OAAO;YAAE,OAAM;QACjC,UAAU,GAAG,IAAI,CAAA;QACjB,KAAK,QAAQ;aACV,iBAAiB,EAAE;aACnB,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,MAAM,CAAC,KAAK,CAAC,CAAA;YACb,SAAS,EAAE,CAAA;QACb,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,UAAU,GAAG,KAAK,CAAA;QACpB,CAAC,CAAC,CAAA;IACN,CAAC,EAAE,GAAG,CAAC,CAAA;IACP,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,SAAS,EAAE,CAAA;IAC/B,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;QAAE,SAAS,EAAE,CAAA;IACrC,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC1C,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAA;gBACxB,IAAI,GAAW,CAAA;gBACf,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;oBACzC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;oBAChC,IAAI,CAAC,IAAI;wBAAE,SAAQ;oBACnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;oBAC9B,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;wBAC7D,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;4BAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAC/E;wBAAA,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;oBAC3F,CAAC;yBAAM,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;wBACpC,MAAM,GAAG,IAAI,CAAA;wBACb,MAAM,CAAC,GAAG,EAAE,CAAA;wBACZ,MAAM,CAAC,GAAG,EAAE,CAAA;wBACZ,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;oBAC7D,CAAC;yBAAM,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;;wBAC/D,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;gBAClD,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;YAC/E,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,GAAG,EAAE,CAAA;gBACZ,MAAM,CAAC,GAAG,EAAE,CAAA;gBACZ,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAA;YAC3D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,KAAc,CAAC,CAAA;YAC9B,MAAM,CAAC,OAAO,CAAC,KAAc,CAAC,CAAA;YAC9B,MAAM,CAAC,KAAK,CAAC,CAAA;YACb,SAAS,EAAE,CAAA;QACb,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IACJ,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACrB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACrB,MAAM,CAAC,KAAK,CAAC,CAAA;IACf,CAAC,CAAC,CAAA;IACF,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,MAAM;QACN,MAAM;QACN,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,EAAE;QACb,IAAI;QACJ,SAAS;QACT,WAAW,EAAE,KAAK,IAAI,EAAE;YACtB,SAAS,EAAE,CAAA;YACX,IAAI,CAAC;gBACH,MAAM,OAAO,CAAA;gBACb,MAAM,QAAQ,CAAC,IAAI,CAAA;gBACnB,OAAO,IAAI,CAAA;YACb,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;gBAChD,aAAa,CAAC,OAAO,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/lib/types/host/mimo-configuration.d.ts

@@ -0,0 +1,22 @@
+import type { AccountIdentity } from './account-identity.ts';
+export declare class MimoConfigurationError extends Error {
+    constructor(message: string);
+}
+/** Mirrors native Global.Path; arbitrary config/content/DB selectors are cleared in the child. */
+export declare function mimoConfigurationPaths(options?: {
+    env?: NodeJS.ProcessEnv;
+    osHome?: string;
+    paths?: Pick<typeof import('node:path'), 'join' | 'isAbsolute'>;
+}): {
+    home: string;
+    config: string;
+    data: string;
+};
+export declare function mimoConfigurationFiles(project: string): Promise<string[]>;
+/** Auth.Service reads this file independently of model/project configuration. */
+export declare function readMimoOwnAuth(signal: AbortSignal): Promise<Record<string, any>>;
+export declare function readMimoAccount(signal: AbortSignal): Promise<AccountIdentity>;
+/** Only unavoidable external inputs remain relevant in an isolated account terminal. */
+export declare function assertMimoAccountConfiguration(signal: AbortSignal): Promise<void>;
+/** Native Config.Service expands references before returning metadata, so inspect before spawning it. */
+export declare function assertMimoConfiguration(project: string, signal: AbortSignal): Promise<void>;

package/lib/types/host/mimo-configuration.js

@@ -0,0 +1,258 @@
+import { constants } from 'node:fs';
+import { lstat, open, readdir, realpath } from 'node:fs/promises';
+import { homedir, userInfo } from 'node:os';
+import { basename, dirname, isAbsolute, join, resolve } from 'node:path';
+import { safePiOmpAncestors } from "./pi-omp-native.js";
+export class MimoConfigurationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'MimoConfigurationError';
+    }
+}
+const unavailable = () => new MimoConfigurationError('MiMo 配置来源无法确认，请检查配置');
+const interpolation = () => new MimoConfigurationError('MiMo 配置含外部引用，请改为本 CLI 配置');
+const remote = () => new MimoConfigurationError('MiMo 远程配置无法核验，请使用本地配置');
+/** Mirrors native Global.Path; arbitrary config/content/DB selectors are cleared in the child. */
+export function mimoConfigurationPaths(options = {}) {
+    const env = options.env ?? process.env;
+    const osHome = options.osHome ?? homedir();
+    const paths = options.paths ?? { join, isAbsolute };
+    const home = env.HOME || env.USERPROFILE || osHome;
+    const root = env.MIMOCODE_HOME;
+    const config = root
+        ? paths.join(root, 'config')
+        : paths.join(env.XDG_CONFIG_HOME || paths.join(osHome, '.config'), 'mimocode');
+    const data = root
+        ? paths.join(root, 'data')
+        : paths.join(env.XDG_DATA_HOME || paths.join(osHome, '.local/share'), 'mimocode');
+    if (![home, config, data, ...(root ? [root] : [])].every(paths.isAbsolute))
+        throw unavailable();
+    return { home, config, data };
+}
+export async function mimoConfigurationFiles(project) {
+    if (!isAbsolute(project))
+        throw unavailable();
+    const { home, config } = mimoConfigurationPaths();
+    const files = new Set([join(config, 'config.json')]);
+    const add = (directory) => {
+        files.add(join(directory, 'mimocode.json'));
+        files.add(join(directory, 'mimocode.jsonc'));
+    };
+    add(config);
+    add(join(home, '.mimocode'));
+    // Native stops at the worktree; checking every ancestor also covers unversioned projects.
+    let physical;
+    try {
+        physical = await realpath(project);
+    }
+    catch {
+        throw unavailable();
+    }
+    for (const start of new Set([resolve(project), physical])) {
+        for (let directory = start;; directory = dirname(directory)) {
+            add(directory);
+            add(join(directory, '.mimocode'));
+            if (dirname(directory) === directory)
+                break;
+        }
+    }
+    return [...files];
+}
+async function exists(path) {
+    try {
+        await lstat(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT' || error.code === 'ENOTDIR')
+            return false;
+        throw unavailable();
+    }
+}
+async function ownDirectory(path) {
+    try {
+        const stat = await lstat(path);
+        if (!stat.isDirectory() || stat.isSymbolicLink())
+            throw unavailable();
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT' && error.code !== 'ENOTDIR')
+            throw unavailable();
+    }
+}
+async function readConfiguration(path, signal) {
+    signal.throwIfAborted();
+    let file, bytes;
+    try {
+        // A selected project may be an alias; check its physical ancestor chain and
+        // keep the named file identity stable instead of rejecting the project itself.
+        await safePiOmpAncestors(await realpath(dirname(path)));
+        const entry = await lstat(path);
+        if (entry.isSymbolicLink() || !entry.isFile() || entry.nlink !== 1)
+            throw unavailable();
+        file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        const before = await file.stat();
+        if (!before.isFile() ||
+            before.nlink !== 1 ||
+            before.dev !== entry.dev ||
+            before.ino !== entry.ino ||
+            before.size > 1_048_576)
+            throw unavailable();
+        bytes = Buffer.alloc(before.size + 1);
+        let offset = 0;
+        while (offset < bytes.length) {
+            signal.throwIfAborted();
+            const { bytesRead } = await file.read(bytes, offset, bytes.length - offset, offset);
+            if (!bytesRead)
+                break;
+            offset += bytesRead;
+        }
+        const after = await file.stat();
+        const current = await lstat(path);
+        if (current.isSymbolicLink() ||
+            current.dev !== before.dev ||
+            current.ino !== before.ino ||
+            current.nlink !== 1 ||
+            offset !== before.size ||
+            after.size !== before.size ||
+            after.mtimeMs !== before.mtimeMs ||
+            current.size !== after.size ||
+            current.mtimeMs !== after.mtimeMs)
+            throw unavailable();
+        return bytes.subarray(0, before.size).toString('utf8');
+    }
+    catch (error) {
+        signal.throwIfAborted();
+        if (error.code === 'ENOENT' || error.code === 'ENOTDIR')
+            return undefined;
+        throw unavailable();
+    }
+    finally {
+        bytes?.fill(0);
+        await file?.close();
+    }
+}
+/** Auth.Service reads this file independently of model/project configuration. */
+export async function readMimoOwnAuth(signal) {
+    const { data } = mimoConfigurationPaths();
+    await safePiOmpAncestors(data);
+    for (const directory of [process.env.MIMOCODE_HOME, data])
+        if (directory)
+            await ownDirectory(directory);
+    const text = await readConfiguration(join(data, 'auth.json'), signal);
+    if (!text)
+        return {};
+    try {
+        const auth = JSON.parse(text);
+        if (!auth || typeof auth !== 'object' || Array.isArray(auth))
+            throw unavailable();
+        return auth;
+    }
+    catch {
+        throw unavailable();
+    }
+}
+export async function readMimoAccount(signal) {
+    const auth = (await readMimoOwnAuth(signal)).xiaomi;
+    signal.throwIfAborted();
+    if (!auth)
+        return { state: 'unconfigured', summary: '尚未登录 MiMo', verification: 'local' };
+    // The built-in browser login persists ApiAuth, including optional uid/base_url metadata.
+    if (auth.type === 'api' && typeof auth.key === 'string' && auth.key.trim())
+        return { state: 'authenticated', summary: 'MiMo 登录', authMethod: 'api', verification: 'local' };
+    return { state: 'configured', summary: '已配置 MiMo 账号，请检查登录', verification: 'local' };
+}
+/** Only unavoidable external inputs remain relevant in an isolated account terminal. */
+export async function assertMimoAccountConfiguration(signal) {
+    if (Object.values(await readMimoOwnAuth(signal)).some((value) => value?.type === 'wellknown'))
+        throw remote();
+    if (process.platform === 'darwin')
+        for (const path of [
+            join('/Library/Managed Preferences', userInfo().username, 'ai.opencode.managed.plist'),
+            '/Library/Managed Preferences/ai.opencode.managed.plist',
+        ])
+            if (await exists(path))
+                throw unavailable();
+    signal.throwIfAborted();
+}
+/** Native Config.Service expands references before returning metadata, so inspect before spawning it. */
+export async function assertMimoConfiguration(project, signal) {
+    signal.throwIfAborted();
+    const { home, config, data } = mimoConfigurationPaths();
+    for (const directory of [process.env.MIMOCODE_HOME, config, data, join(home, '.mimocode')])
+        if (directory)
+            await ownDirectory(directory);
+    for (const path of await mimoConfigurationFiles(project)) {
+        if (basename(dirname(path)) === '.mimocode')
+            await ownDirectory(dirname(path));
+        const text = await readConfiguration(path, signal);
+        // Native substitution happens on raw JSON/JSONC before parsing, including non-auth fields.
+        if (text && /\{(?:file|env):/.test(text))
+            throw interpolation();
+    }
+    // Legacy TOML is imported by native code; managed OpenCode sources do not belong to this CLI.
+    const unsupported = [join(config, 'config')];
+    const managed = process.platform === 'darwin'
+        ? '/Library/Application Support/opencode'
+        : process.platform === 'win32'
+            ? join(process.env.ProgramData || 'C:\\ProgramData', 'opencode')
+            : '/etc/opencode';
+    unsupported.push(join(managed, 'mimocode.json'), join(managed, 'mimocode.jsonc'));
+    if (process.platform === 'darwin')
+        unsupported.push(join('/Library/Managed Preferences', userInfo().username, 'ai.opencode.managed.plist'), '/Library/Managed Preferences/ai.opencode.managed.plist');
+    for (const path of unsupported)
+        if (await exists(path))
+            throw unavailable();
+    const authText = await readConfiguration(join(data, 'auth.json'), signal);
+    if (authText) {
+        let auth;
+        try {
+            auth = JSON.parse(authText);
+        }
+        catch {
+            throw unavailable();
+        }
+        if (!auth || typeof auth !== 'object' || Array.isArray(auth))
+            throw unavailable();
+        if (Object.values(auth).some((value) => value?.type === 'wellknown'))
+            throw remote();
+    }
+    // An active console org supplies remote JSON that native then interpolates. Only inspect its
+    // presence; no tokens, account details, or remote config are read or requested here.
+    let names;
+    try {
+        names = await readdir(data);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw unavailable();
+        names = [];
+    }
+    for (const name of names.filter((name) => /^mimocode(?:-[A-Za-z0-9._-]+)?\.db$/.test(name))) {
+        signal.throwIfAborted();
+        const path = join(data, name);
+        const stat = await lstat(path);
+        if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1)
+            throw unavailable();
+        const { DatabaseSync } = await import('node:sqlite');
+        signal.throwIfAborted();
+        let db;
+        let active = false;
+        try {
+            db = new DatabaseSync(path, { readOnly: true, allowExtension: false });
+            db.exec('PRAGMA query_only = ON; PRAGMA trusted_schema = OFF');
+            if (db.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'account_state'").get())
+                active = !!db.prepare('SELECT 1 FROM account_state WHERE active_org_id IS NOT NULL LIMIT 1').get();
+        }
+        catch {
+            throw unavailable();
+        }
+        finally {
+            db?.close();
+        }
+        if (active)
+            throw remote();
+    }
+    signal.throwIfAborted();
+}
+//# sourceMappingURL=mimo-configuration.js.map

package/lib/types/host/mimo-configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mimo-configuration.js","sourceRoot":"","sources":["../../../src/host/mimo-configuration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAExE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAEvD,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACtC,CAAC;CACF;AACD,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,sBAAsB,CAAC,qBAAqB,CAAC,CAAA;AAC3E,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,CAAA;AAClF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,sBAAsB,CAAC,uBAAuB,CAAC,CAAA;AAExE,kGAAkG;AAClG,MAAM,UAAU,sBAAsB,CACpC,UAII,EAAE;IAEN,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,EAAE,CAAA;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;IACnD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,MAAM,CAAA;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAA;IAC9B,MAAM,MAAM,GAAG,IAAI;QACjB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC5B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,UAAU,CAAC,CAAA;IAChF,MAAM,IAAI,GAAG,IAAI;QACf,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QAC1B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,UAAU,CAAC,CAAA;IACnF,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,WAAW,EAAE,CAAA;IAC/F,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAe;IAC1D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,WAAW,EAAE,CAAA;IAC7C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,sBAAsB,EAAE,CAAA;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IACpD,MAAM,GAAG,GAAG,CAAC,SAAiB,EAAE,EAAE;QAChC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAA;QAC3C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAA;IAC9C,CAAC,CAAA;IACD,GAAG,CAAC,MAAM,CAAC,CAAA;IACX,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAA;IAC5B,0FAA0F;IAC1F,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,WAAW,EAAE,CAAA;IACrB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC1D,KAAK,IAAI,SAAS,GAAG,KAAK,GAAI,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,SAAS,CAAC,CAAA;YACd,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;YACjC,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS;gBAAE,MAAK;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;AACnB,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QACjB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACrE,MAAM,WAAW,EAAE,CAAA;IACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,WAAW,EAAE,CAAA;IACvE,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,WAAW,EAAE,CAAA;IAC9E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAmB;IAChE,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,IAAI,EAAE,KAAyB,CAAA;IACnC,IAAI,CAAC;QACH,4EAA4E;QAC5E,+EAA+E;QAC/E,MAAM,kBAAkB,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACvD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;YAAE,MAAM,WAAW,EAAE,CAAA;QACvF,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAChC,IACE,CAAC,MAAM,CAAC,MAAM,EAAE;YAChB,MAAM,CAAC,KAAK,KAAK,CAAC;YAClB,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YACxB,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YACxB,MAAM,CAAC,IAAI,GAAG,SAAS;YAEvB,MAAM,WAAW,EAAE,CAAA;QACrB,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;QACrC,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAA;YACnF,IAAI,CAAC,SAAS;gBAAE,MAAK;YACrB,MAAM,IAAI,SAAS,CAAA;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC/B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QACjC,IACE,OAAO,CAAC,cAAc,EAAE;YACxB,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAC1B,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAC1B,OAAO,CAAC,KAAK,KAAK,CAAC;YACnB,MAAM,KAAK,MAAM,CAAC,IAAI;YACtB,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC1B,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAChC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YAC3B,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAEjC,MAAM,WAAW,EAAE,CAAA;QACrB,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACxD,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACzE,MAAM,WAAW,EAAE,CAAA;IACrB,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,IAAI,EAAE,KAAK,EAAE,CAAA;IACrB,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAmB;IACvD,MAAM,EAAE,IAAI,EAAE,GAAG,sBAAsB,EAAE,CAAA;IACzC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAA;IAC9B,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC;QAAE,IAAI,SAAS;YAAE,MAAM,YAAY,CAAC,SAAS,CAAC,CAAA;IACvG,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAA;IACrE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,WAAW,EAAE,CAAA;QACjF,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,WAAW,EAAE,CAAA;IACrB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAmB;IACvD,MAAM,IAAI,GAAG,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IACnD,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;IACxF,yFAAyF;IACzF,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QACxE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;IACjG,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;AACrF,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,MAAmB;IACtE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,KAAK,WAAW,CAAC;QAC3F,MAAM,MAAM,EAAE,CAAA;IAChB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC/B,KAAK,MAAM,IAAI,IAAI;YACjB,IAAI,CAAC,8BAA8B,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,2BAA2B,CAAC;YACtF,wDAAwD;SACzD;YACC,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,WAAW,EAAE,CAAA;IAC/C,MAAM,CAAC,cAAc,EAAE,CAAA;AACzB,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe,EAAE,MAAmB;IAChF,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,sBAAsB,EAAE,CAAA;IACvD,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACxF,IAAI,SAAS;YAAE,MAAM,YAAY,CAAC,SAAS,CAAC,CAAA;IAC9C,KAAK,MAAM,IAAI,IAAI,MAAM,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,WAAW;YAAE,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9E,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAClD,2FAA2F;QAC3F,IAAI,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,aAAa,EAAE,CAAA;IACjE,CAAC;IACD,8FAA8F;IAC9F,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC5C,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,uCAAuC;QACzC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,iBAAiB,EAAE,UAAU,CAAC;YAChE,CAAC,CAAC,eAAe,CAAA;IACvB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAA;IACjF,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC/B,WAAW,CAAC,IAAI,CACd,IAAI,CAAC,8BAA8B,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,2BAA2B,CAAC,EACtF,wDAAwD,CACzD,CAAA;IACH,KAAK,MAAM,IAAI,IAAI,WAAW;QAAE,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,WAAW,EAAE,CAAA;IAC3E,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAA;IACzE,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,WAAW,EAAE,CAAA;QACrB,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,WAAW,EAAE,CAAA;QACjF,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,KAAK,WAAW,CAAC;YAAE,MAAM,MAAM,EAAE,CAAA;IACtF,CAAC;IACD,6FAA6F;IAC7F,qFAAqF;IACrF,IAAI,KAAe,CAAA;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,WAAW,EAAE,CAAA;QAChD,KAAK,GAAG,EAAE,CAAA;IACZ,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC7B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;YAAE,MAAM,WAAW,EAAE,CAAA;QACpF,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;QACpD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,EAAiD,CAAA;QACrD,IAAI,MAAM,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAA;YACtE,EAAE,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAA;YAC9D,IAAI,EAAE,CAAC,OAAO,CAAC,6EAA6E,CAAC,CAAC,GAAG,EAAE;gBACjG,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,EAAE,CAAA;QACtG,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,WAAW,EAAE,CAAA;QACrB,CAAC;gBAAS,CAAC;YACT,EAAE,EAAE,KAAK,EAAE,CAAA;QACb,CAAC;QACD,IAAI,MAAM;YAAE,MAAM,MAAM,EAAE,CAAA;IAC5B,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,CAAA;AACzB,CAAC"}

package/lib/types/host/mimo-metadata-cache.d.ts

@@ -0,0 +1,22 @@
+import type { FirstPartyModelSource } from './first-party-models.ts';
+export interface MimoOwnSnapshot {
+    authPath: string;
+    auth: Record<string, any>;
+    configurations: {
+        path: string;
+        value: Record<string, any>;
+    }[];
+}
+/** No raw environment, configuration or account material is retained in the cache key. */
+export declare function nativeMetadataKey(executable: string, project: string, snapshot: unknown, signal: AbortSignal): Promise<string | undefined>;
+export declare const mimoMetadataKey: typeof nativeMetadataKey;
+/** Only native capabilities are reused. Remote entitlement discovery must still run on every call. */
+export declare class MimoMetadataCache {
+    private readonly ttlMs;
+    private readonly limit;
+    private readonly entries;
+    constructor(ttlMs?: number, limit?: number);
+    get(key: string | undefined, own: MimoOwnSnapshot): FirstPartyModelSource[] | undefined;
+    set(key: string | undefined, sources: FirstPartyModelSource[], own: MimoOwnSnapshot): void;
+}
+export declare const mimoMetadataCache: MimoMetadataCache;

package/lib/types/host/mimo-metadata-cache.js

@@ -0,0 +1,121 @@
+import { createHash } from 'node:crypto';
+import { realpath, stat } from 'node:fs/promises';
+import { isAbsolute } from 'node:path';
+import { nativeLaunchArgv } from './native-launch.mjs';
+const digest = (value) => createHash('sha256').update(JSON.stringify(value)).digest('hex');
+/** No raw environment, configuration or account material is retained in the cache key. */
+export async function nativeMetadataKey(executable, project, snapshot, signal) {
+    signal.throwIfAborted();
+    try {
+        // Use the same static launch plan as the process boundary. A fixed Bun shim
+        // can stay unchanged while its actual runtime or script is upgraded.
+        const launch = nativeLaunchArgv([executable]);
+        const identities = [];
+        for (const path of new Set([executable, ...launch.filter(isAbsolute)])) {
+            const entry = await realpath(path), identity = await stat(entry);
+            signal.throwIfAborted();
+            if (!identity.isFile())
+                return;
+            identities.push([entry, identity.dev, identity.ino, identity.size, identity.mtimeMs, identity.ctimeMs]);
+        }
+        const physicalProject = await realpath(project);
+        signal.throwIfAborted();
+        return digest({
+            launch,
+            project,
+            physicalProject,
+            identities,
+            environment: Object.entries(process.env).sort(([a], [b]) => a.localeCompare(b)),
+            snapshot,
+        });
+    }
+    catch {
+        signal.throwIfAborted();
+        // An unverifiable executable still follows the uncached native validation path.
+        return;
+    }
+}
+export const mimoMetadataKey = nativeMetadataKey;
+function currentCredential(source, own) {
+    for (const path of source.sourceIds) {
+        const value = path === own.authPath
+            ? own.auth[source.provider]
+            : {
+                type: 'api',
+                key: own.configurations.find((item) => item.path === path)?.value.provider?.[source.provider]
+                    ?.options?.apiKey,
+            };
+        if (value?.type !== 'api' || typeof value.key !== 'string' || !value.key)
+            continue;
+        const credential = { type: 'api', key: value.key };
+        if (digest(credential) === source.credentialHash)
+            return credential;
+    }
+}
+/** Only native capabilities are reused. Remote entitlement discovery must still run on every call. */
+export class MimoMetadataCache {
+    ttlMs;
+    limit;
+    entries = new Map();
+    constructor(ttlMs = 30_000, limit = 16) {
+        this.ttlMs = ttlMs;
+        this.limit = limit;
+    }
+    get(key, own) {
+        if (!key)
+            return;
+        const entry = this.entries.get(key), now = Date.now();
+        if (!entry)
+            return;
+        if (now < entry.created || now - entry.created >= this.ttlMs) {
+            this.entries.delete(key);
+            return;
+        }
+        const sources = [];
+        for (const metadata of entry.sources) {
+            const credential = currentCredential(metadata, own);
+            if (!credential) {
+                this.entries.delete(key);
+                return;
+            }
+            const { credentialHash: _, ...source } = metadata;
+            sources.push({ ...structuredClone(source), credential });
+        }
+        return sources;
+    }
+    set(key, sources, own) {
+        if (!key || !sources.length)
+            return;
+        const metadata = [];
+        for (const source of sources) {
+            if (source.credential.type !== 'api')
+                return;
+            // A user-defined URL may itself carry a credential; such sources stay uncached.
+            try {
+                const url = new URL(source.baseUrl || '');
+                if (url.username || url.password || url.search || url.hash)
+                    return;
+            }
+            catch {
+                return;
+            }
+            const { credential, ...capabilities } = source;
+            if (credential.key && JSON.stringify(capabilities).includes(credential.key))
+                return;
+            const entry = { ...structuredClone(capabilities), credentialHash: digest(credential) };
+            if (!currentCredential(entry, own))
+                return;
+            metadata.push(entry);
+        }
+        const now = Date.now();
+        for (const [id, entry] of this.entries)
+            if (now < entry.created || now - entry.created >= this.ttlMs)
+                this.entries.delete(id);
+        this.entries.delete(key);
+        this.entries.set(key, { created: now, sources: metadata });
+        while (this.entries.size > this.limit)
+            this.entries.delete(this.entries.keys().next().value);
+    }
+}
+export const mimoMetadataCache = new MimoMetadataCache();
+//# sourceMappingURL=mimo-metadata-cache.js.map

package/lib/types/host/mimo-metadata-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mimo-metadata-cache.js","sourceRoot":"","sources":["../../../src/host/mimo-metadata-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAQtD,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAEnG,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,OAAe,EACf,QAAiB,EACjB,MAAmB;IAEnB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,CAAC;QACH,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;QAC7C,MAAM,UAAU,GAAG,EAAE,CAAA;QACrB,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,EAChC,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAA;YAC9B,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAAE,OAAM;YAC9B,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QACzG,CAAC;QACD,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC/C,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAO,MAAM,CAAC;YACZ,MAAM;YACN,OAAO;YACP,eAAe;YACf,UAAU;YACV,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC/E,QAAQ;SACT,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,gFAAgF;QAChF,OAAM;IACR,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAA;AAEhD,SAAS,iBAAiB,CACxB,MAAmE,EACnE,GAAoB;IAEpB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,KAAK,GACT,IAAI,KAAK,GAAG,CAAC,QAAQ;YACnB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC3B,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK;gBACX,GAAG,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;oBAC3F,EAAE,OAAO,EAAE,MAAM;aACpB,CAAA;QACP,IAAI,KAAK,EAAE,IAAI,KAAK,KAAK,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG;YAAE,SAAQ;QAClF,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAA;QAC3D,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,cAAc;YAAE,OAAO,UAAU,CAAA;IACrE,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,OAAO,iBAAiB;IAGT;IACA;IAHF,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;IACtF,YACmB,QAAQ,MAAM,EACd,QAAQ,EAAE;QADV,UAAK,GAAL,KAAK,CAAS;QACd,UAAK,GAAL,KAAK,CAAK;IAC1B,CAAC;IAEJ,GAAG,CAAC,GAAuB,EAAE,GAAoB;QAC/C,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EACjC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAClB,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACxB,OAAM;QACR,CAAC;QACD,MAAM,OAAO,GAA4B,EAAE,CAAA;QAC3C,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;YACnD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACxB,OAAM;YACR,CAAC;YACD,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAA;YACjD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;QAC1D,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,GAAG,CAAC,GAAuB,EAAE,OAAgC,EAAE,GAAoB;QACjF,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAM;QACnC,MAAM,QAAQ,GAAe,EAAE,CAAA;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAM;YAC5C,gFAAgF;YAChF,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;gBACzC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;oBAAE,OAAM;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAM;YACR,CAAC;YACD,MAAM,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAA;YAC9C,IAAI,UAAU,CAAC,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAM;YACnF,MAAM,KAAK,GAAG,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAA;YACtF,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC;gBAAE,OAAM;YAC1C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO;YACpC,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACvF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACxB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAA;IAC/F,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAA"}

package/lib/types/host/native-capability-cache.d.ts

@@ -0,0 +1,11 @@
+/** Hash current bounded own files without retaining file content or following links. */
+export declare function metadataFileFingerprint(path: string, signal: AbortSignal): Promise<string | undefined>;
+/** Callers admit only validated public capabilities, never account status or raw CLI output. */
+export declare class NativeCapabilityCache<T> {
+    private readonly ttlMs;
+    private readonly limit;
+    private readonly entries;
+    constructor(ttlMs?: number, limit?: number);
+    get(key: string | undefined): T | undefined;
+    set(key: string | undefined, value: T): void;
+}