dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/host/native-capability-cache.js

@@ -0,0 +1,94 @@
+import { createHash } from 'node:crypto';
+import { constants } from 'node:fs';
+import { lstat, open } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { safePiOmpAncestors } from "./pi-omp-native.js";
+/** Hash current bounded own files without retaining file content or following links. */
+export async function metadataFileFingerprint(path, signal) {
+    let file;
+    let bytes;
+    try {
+        signal.throwIfAborted();
+        await safePiOmpAncestors(dirname(path));
+        const before = await lstat(path);
+        if (before.isSymbolicLink() || !before.isFile() || before.nlink !== 1 || before.size > 1_048_576)
+            return;
+        file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        const opened = await file.stat();
+        if (!opened.isFile() ||
+            opened.dev !== before.dev ||
+            opened.ino !== before.ino ||
+            opened.nlink !== 1 ||
+            opened.size !== before.size ||
+            opened.size > 1_048_576 ||
+            opened.mtimeMs !== before.mtimeMs)
+            return;
+        bytes = Buffer.alloc(opened.size + 1);
+        let offset = 0;
+        while (offset < bytes.length) {
+            signal.throwIfAborted();
+            const read = await file.read(bytes, offset, bytes.length - offset, offset);
+            if (!read.bytesRead)
+                break;
+            offset += read.bytesRead;
+        }
+        const after = await file.stat(), current = await lstat(path);
+        signal.throwIfAborted();
+        if (current.isSymbolicLink() ||
+            current.dev !== opened.dev ||
+            current.ino !== opened.ino ||
+            current.nlink !== 1 ||
+            offset !== opened.size ||
+            after.size !== opened.size ||
+            current.size !== opened.size ||
+            after.mtimeMs !== opened.mtimeMs ||
+            current.mtimeMs !== opened.mtimeMs ||
+            after.ctimeMs !== opened.ctimeMs ||
+            current.ctimeMs !== opened.ctimeMs)
+            return;
+        return createHash('sha256').update(bytes.subarray(0, offset)).digest('hex');
+    }
+    catch (error) {
+        signal.throwIfAborted();
+        return error.code === 'ENOENT' ? 'missing' : undefined;
+    }
+    finally {
+        bytes?.fill(0);
+        await file?.close();
+    }
+}
+/** Callers admit only validated public capabilities, never account status or raw CLI output. */
+export class NativeCapabilityCache {
+    ttlMs;
+    limit;
+    entries = new Map();
+    constructor(ttlMs = 30_000, limit = 16) {
+        this.ttlMs = ttlMs;
+        this.limit = limit;
+    }
+    get(key) {
+        if (!key)
+            return;
+        const entry = this.entries.get(key), now = Date.now();
+        if (!entry)
+            return;
+        if (now < entry.created || now - entry.created >= this.ttlMs) {
+            this.entries.delete(key);
+            return;
+        }
+        return structuredClone(entry.value);
+    }
+    set(key, value) {
+        if (!key)
+            return;
+        const now = Date.now();
+        for (const [id, entry] of this.entries)
+            if (now < entry.created || now - entry.created >= this.ttlMs)
+                this.entries.delete(id);
+        this.entries.delete(key);
+        this.entries.set(key, { created: now, value: structuredClone(value) });
+        while (this.entries.size > this.limit)
+            this.entries.delete(this.entries.keys().next().value);
+    }
+}
+//# sourceMappingURL=native-capability-cache.js.map

package/lib/types/host/native-capability-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-capability-cache.js","sourceRoot":"","sources":["../../../src/host/native-capability-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAEvD,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAY,EACZ,MAAmB;IAEnB,IAAI,IAAkD,CAAA;IACtD,IAAI,KAAyB,CAAA;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACvC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,SAAS;YAAE,OAAM;QACxG,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAChC,IACE,CAAC,MAAM,CAAC,MAAM,EAAE;YAChB,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YACzB,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YACzB,MAAM,CAAC,KAAK,KAAK,CAAC;YAClB,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC3B,MAAM,CAAC,IAAI,GAAG,SAAS;YACvB,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAEjC,OAAM;QACR,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;QACrC,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAA;YAC1E,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,MAAK;YAC1B,MAAM,IAAI,IAAI,CAAC,SAAS,CAAA;QAC1B,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,EAC7B,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IACE,OAAO,CAAC,cAAc,EAAE;YACxB,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAC1B,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAC1B,OAAO,CAAC,KAAK,KAAK,CAAC;YACnB,MAAM,KAAK,MAAM,CAAC,IAAI;YACtB,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC1B,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC5B,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAChC,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAClC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAChC,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAElC,OAAM;QACR,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IACnF,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,IAAI,EAAE,KAAK,EAAE,CAAA;IACrB,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,OAAO,qBAAqB;IAGb;IACA;IAHF,OAAO,GAAG,IAAI,GAAG,EAAyC,CAAA;IAC3E,YACmB,QAAQ,MAAM,EACd,QAAQ,EAAE;QADV,UAAK,GAAL,KAAK,CAAS;QACd,UAAK,GAAL,KAAK,CAAK;IAC1B,CAAC;IACJ,GAAG,CAAC,GAAuB;QACzB,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EACjC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAClB,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACxB,OAAM;QACR,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC;IACD,GAAG,CAAC,GAAuB,EAAE,KAAQ;QACnC,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO;YACpC,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACvF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACxB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACtE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAA;IAC/F,CAAC;CACF"}

package/lib/types/host/native-launch.d.mts

@@ -0,0 +1,2 @@
+export function resolveNativeEntry(executable: string, platform?: NodeJS.Platform): string
+export function nativeLaunchArgv(argv: readonly string[], platform?: NodeJS.Platform): string[]

package/lib/types/host/native-launch.mjs

@@ -0,0 +1,234 @@
+// Inspect fixed launcher data; never ask a shell to interpret CLI arguments.
+import { openSync, readSync, fstatSync, closeSync, realpathSync, statSync, existsSync } from 'node:fs'
+import { basename, dirname, extname, isAbsolute, relative, resolve, sep, delimiter, join } from 'node:path'
+import { homedir, userInfo } from 'node:os'
+
+const invalid = () => Object.assign(
+  new Error('CLI 启动入口无法确认，请配置原生程序或固定 Node/Bun 入口'),
+  { code: 'CLI_LAUNCHER_UNSUPPORTED' },
+)
+const batch = (value) => /\.(?:cmd|bat)$/i.test(value)
+function text(path, limit = 128 * 1024) {
+  const descriptor = openSync(path, 'r')
+  try {
+    const info = fstatSync(descriptor)
+    if (!info.isFile() || info.size > limit) throw invalid()
+    const bytes = Buffer.alloc(info.size + 1)
+    const read = readSync(descriptor, bytes, 0, bytes.length, 0)
+    const after = fstatSync(descriptor)
+    if (read !== info.size || info.size !== after.size || info.mtimeMs !== after.mtimeMs) throw invalid()
+    return bytes
+      .subarray(0, read)
+      .toString('utf8')
+      .replace(/^\uFEFF/, '')
+  } finally {
+    closeSync(descriptor)
+  }
+}
+function file(path) {
+  const canonical = realpathSync(path)
+  if (!statSync(canonical).isFile()) throw invalid()
+  return canonical
+}
+function scriptRuntime(path) {
+  const descriptor = openSync(path, 'r')
+  try {
+    const bytes = Buffer.alloc(256)
+    const length = readSync(descriptor, bytes, 0, bytes.length, 0)
+    const header = bytes.subarray(0, length).toString('utf8').split('\n')[0].trim()
+    if (header.startsWith('#!')) {
+      const match = /^#!\s*(?:\/usr\/bin\/env\s+(?:-S\s+)?)?(?:[^\s]*\/)?(node|bun)\s*$/.exec(header)
+      if (!match) throw invalid()
+      return match[1]
+    }
+    // A fixed npm bin entry can declare its runtime in the package manifest.
+    for (let directory = dirname(path), depth = 0; depth < 5; depth++, directory = dirname(directory)) {
+      const manifestPath = join(directory, 'package.json')
+      if (!existsSync(manifestPath)) continue
+      const manifest = JSON.parse(text(manifestPath))
+      const bins = typeof manifest.bin === 'string' ? [manifest.bin] : Object.values(manifest.bin ?? {})
+      if (bins.some((entry) => typeof entry === 'string' && resolve(directory, entry) === path)) {
+        if (manifest.engines?.bun && !manifest.engines?.node) return 'bun'
+        return 'node'
+      }
+      break
+    }
+    return /\.[cm]?js$/i.test(path) ? 'node' : undefined
+  } finally {
+    closeSync(descriptor)
+  }
+}
+function runtimeProgram(runtime, platform, launcherDirectory) {
+  if (runtime === 'node') return process.execPath
+  if (runtime !== 'bun') throw invalid()
+  const name = platform === 'win32' ? 'bun.exe' : 'bun'
+  const candidates = [
+    ...(launcherDirectory ? [join(launcherDirectory, name)] : []),
+    ...(process.env.PATH ?? '')
+      .split(delimiter)
+      .map((directory) => directory.replace(/^"|"$/g, ''))
+      .filter(isAbsolute)
+      .map((directory) => join(directory, name)),
+    ...(process.env.BUN_INSTALL ? [join(process.env.BUN_INSTALL, 'bin', name)] : []),
+    ...[homedir(), userInfo().homedir].map((home) => join(home, '.bun', 'bin', name)),
+  ]
+  const candidate = candidates.find((path) => existsSync(path) && statSync(path).isFile())
+  if (!candidate) throw new Error('未找到 Bun，请安装该 CLI 所需的 Bun 运行时')
+  return file(candidate)
+}
+/** npm's native bin shim is data, not a batch program to execute. */
+function nativePackageBin(shim, suffix) {
+  const parts = suffix.replace(/\\/g, '/').split('/')
+  if (parts[0] !== 'node_modules' || parts.some((part) => !part || part === '.' || part === '..'))
+    throw invalid()
+  const scoped = parts[1]?.startsWith('@')
+  const name = parts.slice(1, scoped ? 3 : 2).join('/')
+  if (!/^(?:@[a-z0-9._-]+\/)?[a-z0-9._-]+$/.test(name)) throw invalid()
+  const root = fileDirectory(resolve(dirname(shim), ...parts.slice(0, scoped ? 3 : 2)))
+  const entry = file(resolve(dirname(shim), ...parts))
+  const inside = relative(root, entry)
+  if (!inside || inside === '..' || inside.startsWith('..' + sep) || isAbsolute(inside)) throw invalid()
+  const manifest = JSON.parse(text(join(root, 'package.json')))
+  const command = basename(shim, extname(shim))
+  const declared = typeof manifest.bin === 'string'
+    ? name.split('/').at(-1) === command ? manifest.bin : undefined
+    : manifest.bin?.[command]
+  if (manifest.name !== name || typeof declared !== 'string' || isAbsolute(declared) ||
+    declared.replace(/\\/g, '/').split('/').includes('..') || file(resolve(root, declared)) !== entry)
+    throw invalid()
+  const descriptor = openSync(entry, 'r')
+  try {
+    const header = Buffer.alloc(64), signature = Buffer.alloc(4)
+    const size = fstatSync(descriptor).size
+    if (readSync(descriptor, header, 0, 64, 0) !== 64 || header.toString('ascii', 0, 2) !== 'MZ')
+      throw invalid()
+    const offset = header.readUInt32LE(0x3c)
+    if (offset < 64 || offset + 4 > size || readSync(descriptor, signature, 0, 4, offset) !== 4 ||
+      signature.toString('hex') !== '50450000') throw invalid()
+  } finally {
+    closeSync(descriptor)
+  }
+  return entry
+}
+function fileDirectory(path) {
+  const canonical = realpathSync(path)
+  if (!statSync(canonical).isDirectory()) throw invalid()
+  return canonical
+}
+function inspectBatch(executable, platform) {
+  const source = text(file(executable)).trim().replace(/\r\n/g, '\n')
+  // Nous' official fallback contains just a fixed interpreter and its encoded
+  // launcher. Preserve its own bootstrap; do not guess a virtualenv interpreter.
+  const hermes =
+    /^@echo off\n"([^"\n%]+)" -I -c "(import base64; exec\(base64\.b64decode\('([A-Za-z0-9+/]+={0,2})'\)\))" %\*$/i.exec(
+      source,
+    )
+  if (hermes) {
+    const decoded = Buffer.from(hermes[3], 'base64')
+    if (
+      !isAbsolute(hermes[1]) ||
+      decoded.toString('base64') !== hermes[3] ||
+      !decoded.toString('utf8').startsWith('import os, re, sys\n') ||
+      !decoded.toString('utf8').includes('import hermes_bootstrap') ||
+      !decoded.toString('utf8').includes('from hermes_cli.main import main')
+    )
+      throw invalid()
+    return { kind: 'python', argv: [file(hermes[1]), '-I', '-c', hermes[2]] }
+  }
+  const entries = new Set()
+  const runtimes = new Set()
+  for (const original of source.split('\n')) {
+    let line = original.trim()
+    if (!line || /^@?(?:echo off|rem\b.*)$/i.test(line)) continue
+    // npm cmd-shim's standard final control prefix is launcher boilerplate;
+    // it is discarded, and nothing from it is executed by this module.
+    line = line.replace(/^endLocal & goto #_undefined_# 2>NUL \|\| title [^&\n]+ & /i, '')
+    const native = /^@?"%(?:~dp0[\\/]?|dp0%[\\/])([^"\n%]+\.exe)"\s+%\*$/i.exec(line)
+    if (native) {
+      entries.add(nativePackageBin(executable, native[1]))
+      runtimes.add('native')
+      continue
+    }
+    const command =
+      /^@?(?:(node|bun)|"%_prog%"|"%(?:~dp0[\\/]?|dp0%[\\/])(node|bun)\.exe")\s+"%(?:~dp0[\\/]?|dp0%[\\/])([^"\n%]+)"\s+%\*$/i.exec(
+        line,
+      )
+    if (command) {
+      const path = file(resolve(dirname(executable), command[3].replace(/[\\/]/g, sep)))
+      if (!scriptRuntime(path)) throw invalid()
+      entries.add(path)
+      if (command[1] || command[2]) runtimes.add((command[1] || command[2]).toLowerCase())
+      continue
+    }
+    const program = /^@?set "?_prog=(?:%(?:~dp0[\\/]?|dp0%[\\/]))?(node|bun)(?:\.exe)?"?$/i.exec(line)
+    if (program) {
+      runtimes.add(program[1].toLowerCase())
+      continue
+    }
+    if (
+      /^@?(?:goto start|:find_dp0|:start|set dp0=%~dp0|exit \/b|setlocal|endlocal|call :find_dp0)$/i.test(
+        line,
+      ) ||
+      /^@?if (?:not )?exist "%(?:~dp0[\\/]?|dp0%[\\/])(?:node|bun)\.exe" \($/i.test(line) ||
+      /^\)(?: else \()?$/i.test(line) ||
+      /^@?set pathext=%pathext:;\.js;=;%$/i.test(line) ||
+      /^@?if (?:not )?defined node_path \($/i.test(line) ||
+      /^@?set "node_path=[^"\n&|<>]+"$/i.test(line)
+    )
+      continue
+    throw invalid()
+  }
+  if (entries.size !== 1 || runtimes.size !== 1) throw invalid()
+  const entry = [...entries][0],
+    runtime = [...runtimes][0]
+  if (runtime === 'native') return { kind: 'native', argv: [entry] }
+  if (scriptRuntime(entry) !== runtime) throw invalid()
+  return { kind: runtime, argv: [runtimeProgram(runtime, platform, dirname(executable)), entry] }
+}
+
+/** Canonical npm entry for installation identity checks; Python launchers keep their identity. */
+export function resolveNativeEntry(executable, platform = process.platform) {
+  if (platform !== 'win32') return executable
+  if (isAbsolute(executable) && !extname(executable) && !existsSync(executable)) {
+    const extensions = (process.env.PATHEXT || '.EXE;.COM;.CMD;.BAT')
+      .split(';')
+      .map((extension) => extension.toLowerCase())
+      .filter((extension) => /^\.(?:exe|com|cmd|bat)$/.test(extension))
+    const candidate = [...new Set(extensions)]
+      .map((extension) => executable + extension)
+      .find((path) => existsSync(path) && statSync(path).isFile())
+    if (candidate) executable = candidate
+  }
+  if (!batch(executable)) return executable
+  let inspected
+  try {
+    inspected = inspectBatch(executable, platform)
+  } catch {
+    // A present but invalid shim is not an absent CLI. Never forward raw paths or script text.
+    throw invalid()
+  }
+  // Keep Bun's fixed shim identity: it may pin a bundled bun.exe beside the
+  // shim which cannot be recovered from only the package's JS path.
+  return inspected.kind === 'node' ? inspected.argv[1] : inspected.kind === 'native' ? inspected.argv[0] : executable
+}
+
+/** Windows CreateProcess accepts real programs, not npm command files. */
+export function nativeLaunchArgv(argv, platform = process.platform) {
+  if (
+    !Array.isArray(argv) ||
+    !argv.length ||
+    argv.some((value) => typeof value !== 'string' || value.includes('\0'))
+  )
+    throw invalid()
+  if (platform !== 'win32') {
+    if (!/\.[cm]?js$/i.test(argv[0])) return [...argv]
+    const entry = file(argv[0])
+    return [runtimeProgram(scriptRuntime(entry), platform), entry, ...argv.slice(1)]
+  }
+  const executable = resolveNativeEntry(argv[0], platform),
+    arguments_ = argv.slice(1)
+  if (batch(executable)) return [...inspectBatch(executable, platform).argv, ...arguments_]
+  if (/\.[cm]?js$/i.test(executable) || (extname(executable) === '' && scriptRuntime(executable)))
+    return [runtimeProgram(scriptRuntime(executable), platform), file(executable), ...arguments_]
+  return [executable, ...arguments_]
+}

package/lib/types/host/native-process.d.ts

@@ -0,0 +1,5 @@
+import type { ProcessBackend } from './process.ts';
+/** One normalization boundary for tasks, metadata and interactive account menus. */
+export declare function nativeProcessBackend(backend: ProcessBackend, platform?: NodeJS.Platform, options?: {
+    electron?: boolean;
+}): ProcessBackend;

package/lib/types/host/native-process.js

@@ -0,0 +1,41 @@
+import { nativeLaunchArgv, resolveNativeEntry } from './native-launch.mjs';
+import { win32 } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { isCurrentWindowsRuntime, needsWindowsHiddenLaunch, spawnWindowsHidden } from "./windows-hidden-process.js";
+const privateLauncher = fileURLToPath(new URL('./private-launch.mjs', import.meta.url));
+/** One normalization boundary for tasks, metadata and interactive account menus. */
+export function nativeProcessBackend(backend, platform = process.platform, options = {}) {
+    const normalize = (spec) => {
+        const argv = nativeLaunchArgv(spec.argv, platform);
+        return {
+            ...spec,
+            argv,
+            ...(argv[0] === process.execPath || (platform === 'win32' && isCurrentWindowsRuntime(argv[0]))
+                ? { env: { ...spec.env, ELECTRON_RUN_AS_NODE: '1' } } : {}),
+        };
+    };
+    return {
+        async resolveExecutable(name) {
+            return resolveNativeEntry(await backend.resolveExecutable(resolveNativeEntry(name, platform)), platform);
+        },
+        spawn(spec) {
+            const normalized = normalize(spec);
+            const electron = options.electron ?? !!process.versions.electron;
+            // Fold only our exact private-umask helper into the background relay.
+            // Leaving another pipe relay beneath it would delay the native exit
+            // receipt until all descendants released their inherited output pipes.
+            if (platform === 'win32' && electron && isCurrentWindowsRuntime(normalized.argv[0]) &&
+                normalized.argv.length > 2 && win32.normalize(normalized.argv[1]).toLowerCase() === win32.normalize(privateLauncher).toLowerCase())
+                return spawnWindowsHidden(backend, { ...normalized, argv: nativeLaunchArgv(normalized.argv.slice(2), platform) }, { privateUmask: true });
+            return needsWindowsHiddenLaunch(normalized.argv, platform, electron)
+                ? spawnWindowsHidden(backend, normalized)
+                : backend.spawn(normalized);
+        },
+        ...(backend.spawnTerminal
+            ? {
+                spawnTerminal: (spec) => backend.spawnTerminal(normalize(spec)),
+            }
+            : {}),
+    };
+}
+//# sourceMappingURL=native-process.js.map

package/lib/types/host/native-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-process.js","sourceRoot":"","sources":["../../../src/host/native-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AACnH,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAEvF,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAClC,OAAuB,EACvB,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAC3B,UAAkC,EAAE;IAEpC,MAAM,SAAS,GAAG,CAAiE,IAAO,EAAE,EAAE;QAC5F,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAClD,OAAO;YACL,GAAG,IAAI;YACP,IAAI;YACJ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,QAAQ,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAC7F,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAA;IACH,CAAC,CAAA;IACD,OAAO;QACL,KAAK,CAAC,iBAAiB,CAAC,IAAI;YAC1B,OAAO,kBAAkB,CAAC,MAAM,OAAO,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC1G,CAAC;QACD,KAAK,CAAC,IAAI;YACR,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;YAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAA;YAChE,sEAAsE;YACtE,oEAAoE;YACpE,uEAAuE;YACvE,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,IAAI,uBAAuB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;gBAChF,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE;gBACrI,OAAO,kBAAkB,CAAC,OAAO,EAAE,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3I,OAAO,wBAAwB,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC;gBAClE,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC;gBACzC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QAC/B,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,aAAa;YACvB,CAAC,CAAC;gBACE,aAAa,EAAE,CAAC,IAAiE,EAAE,EAAE,CACnF,OAAO,CAAC,aAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;aAC1C;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;AACH,CAAC"}

package/lib/types/host/native-spawn.mjs

@@ -0,0 +1,32 @@
+import { spawn } from 'node:child_process'
+
+/** Native CLI descendants keep their pipes/ConPTY and the enclosing Host Job.
+ * Window presentation is per child: hiding a wrapper does not hide its children.
+ * Node ignores windowsHide on POSIX, so both platforms use this one boundary.
+ */
+export function spawnNativeProcess(executable, argv, options) {
+  return spawn(executable, argv, { ...options, windowsHide: true })
+}
+
+/** Relay ordinary background pipes as bytes with Node's stream backpressure.
+ * Numeric/inherited descriptors make libuv omit CREATE_NO_WINDOW on Windows.
+ * This must never be used for a ConPTY: its console handles stay inherited. */
+export function forwardNativeStdio(child) {
+  const stopInput = () => {
+    process.stdin.unpipe(child.stdin)
+    process.stdin.destroy()
+  }
+  const fail = () => { child.kill('SIGTERM'); process.exitCode = 1 }
+  child.stdin.on('error', error => { stopInput(); if (error.code !== 'EPIPE') fail() })
+  child.stdin.once('close', stopInput)
+  child.once('exit', stopInput)
+  child.once('error', stopInput)
+  process.stdin.on('error', fail)
+  process.stdout.on('error', fail)
+  process.stderr.on('error', fail)
+  child.stdout.on('error', fail)
+  child.stderr.on('error', fail)
+  process.stdin.pipe(child.stdin)
+  child.stdout.pipe(process.stdout, { end: false })
+  child.stderr.pipe(process.stderr, { end: false })
+}

package/lib/types/host/opencode-adapter.d.ts

@@ -0,0 +1,94 @@
+import { type ModelChoice, type TaskMode } from '../shared/types.ts';
+import type { EventInput, ProtocolResult } from './protocol.ts';
+import { type OpenCodeNativeOptions } from './opencode-native.ts';
+import { probeAccountModels } from './account-models.mjs';
+export interface OpenCodeInput {
+    executable: string;
+    project: string;
+    preference: {
+        model: string;
+        effort: string;
+    };
+    mode: TaskMode;
+    prompt: string;
+    conversationId?: string;
+    stateDirectory: string;
+    /** Stable private XDG data root shared with account login, not worker databases. */
+    authDirectory?: string;
+    /** Deprecated compatibility option; ignored. */
+    managedCredentials?: boolean;
+    nativeHome?: string;
+    modelsPath?: string;
+    signal?: AbortSignal;
+}
+type Capture = (argv: string[], env?: Record<string, string>) => Promise<string>;
+export interface OpenCodeCredentialConfig {
+    zaiCredentialRef?: string;
+    resolveCredential?: (ref: string) => Promise<string | undefined>;
+}
+/** Compatibility only: Host credentials are never resolved for OpenCode. */
+export declare function openCodeCredentialEnvironment(_config: OpenCodeCredentialConfig): Promise<Record<string, string>>;
+export declare function openCodeAuthDirectory(stateDirectory?: string): string;
+/** Only the auth data root is shared; each process keeps its own DB/config/cache. */
+export declare function openCodeEnvironment(stateDirectory: string, config: Record<string, unknown>, authDirectory?: string, _managedCredentials?: boolean, modelsPath?: string): Promise<{
+    OPENCODE_MODELS_PATH?: string | undefined;
+    XDG_CONFIG_HOME: string;
+    XDG_DATA_HOME: string;
+    XDG_CACHE_HOME: string;
+    XDG_STATE_HOME: string;
+    TMPDIR: string;
+    OPENCODE_DB: string;
+    OPENCODE_CONFIG: string;
+    OPENCODE_CONFIG_DIR: string;
+    OPENCODE_CONFIG_CONTENT: string;
+    OPENCODE_PERMISSION: string;
+    OPENCODE_AUTO_SHARE: string;
+    OPENCODE_DISABLE_AUTOUPDATE: string;
+    OPENCODE_DISABLE_PRUNE: string;
+    OPENCODE_DISABLE_SHARE: string;
+    OPENCODE_DISABLE_DEFAULT_PLUGINS: string;
+    OPENCODE_AUTH_CONTENT: string;
+    OPENCODE_DISABLE_PROJECT_CONFIG: string;
+    OPENCODE_DISABLE_CLAUDE_CODE: string;
+    OPENCODE_DISABLE_EXTERNAL_SKILLS: string;
+    OPENCODE_DISABLE_LSP_DOWNLOAD: string;
+    OPENCODE_DISABLE_MODELS_FETCH: string;
+    OPENCODE_EXPERIMENTAL_DISABLE_FILEWATCHER: string;
+    OPENCODE_PURE: string;
+}>;
+export declare function prepareOpenCode(input: OpenCodeInput): Promise<{
+    argv: string[];
+    env: Record<string, string>;
+}>;
+/** CLI default zero prices are not affirmative price evidence. */
+export declare function parseOpenCodeModels(output: string): ModelChoice[];
+export interface OpenCodeDiscoveryOptions extends OpenCodeNativeOptions {
+    credentialEnv?: Record<string, string>;
+    probeOptions?: Parameters<typeof probeAccountModels>[1];
+}
+export declare function discoverOpenCode(executable: string, capture: Capture, stateDirectory: string, authDirectory?: string, _managedCredentials?: boolean, options?: OpenCodeDiscoveryOptions): Promise<ModelChoice[]>;
+/** Native OpenCode JSONL; success needs clean EOF after stop, identity and no failed tool. */
+export declare class OpenCodeProtocol {
+    private emit;
+    private identify;
+    private maxLineBytes;
+    private decoder;
+    private pending;
+    private ended;
+    private stopped;
+    private sawStep;
+    private failure?;
+    private response;
+    private steps;
+    private textParts;
+    private openTools;
+    conversationId?: string;
+    result?: ProtocolResult;
+    constructor(emit: (event: EventInput) => void, identify: (id: string) => void, maxLineBytes: number);
+    feed(chunk: Buffer | string): void;
+    end(): void;
+    private step;
+    private id;
+    private line;
+}
+export {};