dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/host/pi-omp-accounts.d.ts

@@ -0,0 +1,28 @@
+import type { AccountAction, AccountSource } from '../shared/accounts.ts';
+import type { PiOmpCli } from './pi-omp-adapter.ts';
+import { type RuntimeConfig } from './process.ts';
+export interface PiOmpAccountTerminalInput {
+    cli: PiOmpCli;
+    action?: AccountAction;
+    source?: AccountSource;
+    executable: string;
+    project: string;
+    stateDirectory: string;
+    /** Read-only native source override for isolated integrations/tests. */
+    nativeHome?: string;
+    config: RuntimeConfig;
+    signal?: AbortSignal;
+}
+export interface PiOmpAccountTerminalLaunch {
+    argv: string[];
+    cwd: string;
+    env: Record<string, string>;
+    instruction: string;
+    /** Call only after the complete terminal process range has exited. */
+    cleanup: () => Promise<void>;
+}
+/**
+ * User-operated native account UI. No task prompt or automatic login is sent;
+ * original global sources remain unchanged and this plugin keeps its own account store.
+ */
+export declare function preparePiOmpAccountTerminal(input: PiOmpAccountTerminalInput): Promise<PiOmpAccountTerminalLaunch>;

package/lib/types/host/pi-omp-accounts.js

@@ -0,0 +1,175 @@
+import { constants } from 'node:fs';
+import { chmod, lstat, mkdir, mkdtemp, open, realpath, rename, rm, writeFile, readFile } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { snapshotPiOmpNative, safePiOmpAncestors } from "./pi-omp-native.js";
+import { preparePiOmpLogout } from "./pi-omp-logout.js";
+import { ompConfigurationEnvironment } from './pi-omp-environment.mjs';
+import { projectDirectory } from "./process.js";
+async function privateDirectory(path) {
+    await safePiOmpAncestors(path);
+    await mkdir(path, { recursive: true, mode: 0o700 });
+    const before = await lstat(path);
+    if (before.isSymbolicLink() || !before.isDirectory())
+        throw new Error('Unsafe account directory symlink');
+    if (process.platform === 'win32') {
+        const canonical = await realpath(path);
+        await chmod(path, 0o700);
+        const after = await lstat(path);
+        if (after.isSymbolicLink() ||
+            !after.isDirectory() ||
+            before.dev !== after.dev ||
+            before.ino !== after.ino ||
+            (await realpath(path)) !== canonical)
+            throw new Error('Account directory changed while opening');
+        return canonical;
+    }
+    const handle = await open(path, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+    try {
+        const opened = await handle.stat();
+        if (opened.dev !== before.dev || opened.ino !== before.ino)
+            throw new Error('Account directory changed while opening');
+        await handle.chmod(0o700);
+    }
+    finally {
+        await handle.close();
+    }
+    return realpath(path);
+}
+async function writePrivateJSON(path, value) {
+    const temporary = `${path}.tmp`;
+    try {
+        await writeFile(temporary, JSON.stringify(value), { flag: 'wx', mode: 0o600 });
+        await rename(temporary, path);
+    }
+    finally {
+        await rm(temporary, { force: true });
+    }
+}
+/**
+ * User-operated native account UI. No task prompt or automatic login is sent;
+ * original global sources remain unchanged and this plugin keeps its own account store.
+ */
+export async function preparePiOmpAccountTerminal(input) {
+    const { cli, signal } = input;
+    if (cli !== 'pi' && cli !== 'omp')
+        throw new Error('Unsupported Pi/OMP account terminal');
+    if (input.action === 'logout')
+        return preparePiOmpLogout(input);
+    signal?.throwIfAborted();
+    projectDirectory(input.project);
+    const root = await privateDirectory(resolve(input.stateDirectory));
+    const accountRoot = await privateDirectory(join(root, 'account-runtime'));
+    const runtime = await mkdtemp(join(accountRoot, `${cli}-`));
+    const identity = await lstat(runtime);
+    let removed = false;
+    const cleanup = async () => {
+        if (removed)
+            return;
+        let current;
+        try {
+            current = await lstat(runtime);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                removed = true;
+                return;
+            }
+            throw error;
+        }
+        if (current.isSymbolicLink() || current.dev !== identity.dev || current.ino !== identity.ino)
+            throw new Error('Account runtime changed before cleanup');
+        await rm(runtime, { recursive: true, force: true });
+        removed = true;
+    };
+    try {
+        signal?.throwIfAborted();
+        const accounts = await privateDirectory(join(root, 'accounts'));
+        const account = await privateDirectory(join(accounts, cli));
+        const agent = await privateDirectory(join(account, 'agent'));
+        const native = await snapshotPiOmpNative(cli, agent, { accountRoot: root, nativeHome: input.nativeHome });
+        const temporary = await privateDirectory(join(runtime, 'tmp'));
+        const nativeArgs = ['--no-session', '--no-tools', '--no-extensions', '--no-skills'];
+        const env = {
+            ...native.env,
+            PI_CODING_AGENT_DIR: agent,
+            TMPDIR: temporary,
+            TMP: temporary,
+            TEMP: temporary,
+            ELECTRON_RUN_AS_NODE: '1',
+            // Do not let a caller's active profile redirect this disposable TUI to
+            // another credential store. Harness already scrubs ambient secret names.
+            OMP_AUTH_BROKER_URL: '',
+            OMP_AUTH_BROKER_TOKEN: '',
+            OMP_PROFILE: '',
+            PI_PROFILE: '',
+        };
+        if (cli === 'pi') {
+            nativeArgs.push('--no-prompt-templates', '--no-themes', '--no-context-files', '--no-approve', '--offline');
+            env.PI_OFFLINE = '1';
+            env.PI_TELEMETRY = '0';
+        }
+        else {
+            const nativeAuth = JSON.parse(await readFile(join(agent, 'native-auth.json'), 'utf8'));
+            await writePrivateJSON(join(agent, 'config.yml'), {
+                ...nativeAuth,
+                // Native OMP 16.4.4 setup scene selection reads startup.setupWizard.
+                // Account login is an explicit action; manage does not start onboarding.
+                startup: { setupWizard: false, showSplash: false, checkUpdate: false },
+                // OMP 16.4.4 has no --no-mcp. Its native discovery registry filters these
+                // provider IDs before reading global/project MCP files or spawning servers.
+                // Account terminals must not import other applications' tools or hooks.
+                disabledProviders: [
+                    'native',
+                    'claude',
+                    'claude-plugins',
+                    'codex',
+                    'cursor',
+                    'gemini',
+                    'opencode',
+                    'mcp-json',
+                    'vscode',
+                    'windsurf',
+                    'omp-plugins',
+                ],
+                mcp: { enableProjectConfig: false },
+                retry: { modelFallback: false },
+                memory: { backend: 'off' },
+                tools: { approvalMode: 'always-ask' },
+            });
+            Object.assign(env, ompConfigurationEnvironment(account));
+            nativeArgs.push('--no-rules', '--no-title', '--no-lsp', '--no-pty', '--approval-mode', 'always-ask', '--config', join(agent, 'config.yml'));
+        }
+        signal?.throwIfAborted();
+        let nativeArgv = /\.[cm]?js$/.test(input.executable)
+            ? [process.execPath, input.executable, ...nativeArgs]
+            : [input.executable, ...nativeArgs];
+        if (input.action === 'login') {
+            // No prompt injection: OMP's native onboarding, or Pi's native UI API.
+            nativeArgv =
+                cli === 'omp'
+                    ? [input.executable, 'setup']
+                    : [process.execPath, fileURLToPath(new URL('./pi-login.mjs', import.meta.url)), input.executable];
+        }
+        const argv = [process.execPath, fileURLToPath(new URL('./private-launch.mjs', import.meta.url)), ...nativeArgv];
+        if (cli === 'omp') {
+            // OMP's native logger uses configRoot/logs, beside its agent directory.
+            await privateDirectory(join(account, 'logs'));
+        }
+        return {
+            argv,
+            // Avoid loading project files while operating account controls.
+            cwd: runtime,
+            env,
+            instruction: input.action === 'login'
+                ? '选择提供商并完成登录。'
+                : '输入 /login 或 /logout 管理终端账号；现有任务保留已选择的模型与凭据。',
+            cleanup,
+        };
+    }
+    catch (error) {
+        await cleanup();
+        throw error;
+    }
+}
+//# sourceMappingURL=pi-omp-accounts.js.map

package/lib/types/host/pi-omp-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-omp-accounts.js","sourceRoot":"","sources":["../../../src/host/pi-omp-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAChH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAE5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAA;AAEtE,OAAO,EAAE,gBAAgB,EAAsB,MAAM,cAAc,CAAA;AAuBnE,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACzG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACxB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,IACE,KAAK,CAAC,cAAc,EAAE;YACtB,CAAC,KAAK,CAAC,WAAW,EAAE;YACpB,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YACxB,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YACxB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS;YAEpC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC5D,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IAClG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAClC,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC5D,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAc;IAC1D,MAAM,SAAS,GAAG,GAAG,IAAI,MAAM,CAAA;IAC/B,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9E,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACtC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAgC;IAEhC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IAC7B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACzF,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAC/D,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAA;IAClE,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAA;IACzE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC,CAAA;IAC3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,OAAO;YAAE,OAAM;QACnB,IAAI,OAAO,CAAA;QACX,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,GAAG,IAAI,CAAA;gBACd,OAAM;YACR,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QACD,IAAI,OAAO,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;YAC1F,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC3D,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACnD,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC,CAAA;IACD,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAA;QAC/D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAA;QAC3D,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QAC5D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;QACzG,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QAC9D,MAAM,UAAU,GAAG,CAAC,cAAc,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAA;QACnF,MAAM,GAAG,GAA2B;YAClC,GAAG,MAAM,CAAC,GAAG;YACb,mBAAmB,EAAE,KAAK;YAC1B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,SAAS;YACf,oBAAoB,EAAE,GAAG;YACzB,uEAAuE;YACvE,yEAAyE;YACzE,mBAAmB,EAAE,EAAE;YACvB,qBAAqB,EAAE,EAAE;YACzB,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;SACf,CAAA;QACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,UAAU,CAAC,IAAI,CACb,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,cAAc,EACd,WAAW,CACZ,CAAA;YACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;YACpB,GAAG,CAAC,YAAY,GAAG,GAAG,CAAA;QACxB,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;YACtF,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE;gBAChD,GAAG,UAAU;gBACb,qEAAqE;gBACrE,yEAAyE;gBACzE,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE;gBACtE,0EAA0E;gBAC1E,4EAA4E;gBAC5E,wEAAwE;gBACxE,iBAAiB,EAAE;oBACjB,QAAQ;oBACR,QAAQ;oBACR,gBAAgB;oBAChB,OAAO;oBACP,QAAQ;oBACR,QAAQ;oBACR,UAAU;oBACV,UAAU;oBACV,QAAQ;oBACR,UAAU;oBACV,aAAa;iBACd;gBACD,GAAG,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE;gBACnC,KAAK,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;gBAC/B,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC1B,KAAK,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACtC,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAA;YACxD,UAAU,CAAC,IAAI,CACb,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAC1B,CAAA;QACH,CAAC;QACD,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,IAAI,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAClD,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,UAAU,CAAC;YACrD,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,UAAU,CAAC,CAAA;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC7B,uEAAuE;YACvE,UAAU;gBACR,GAAG,KAAK,KAAK;oBACX,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC;oBAC7B,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;QACvG,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,CAAA;QAC/G,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YAClB,wEAAwE;YACxE,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;QAC/C,CAAC;QACD,OAAO;YACL,IAAI;YACJ,gEAAgE;YAChE,GAAG,EAAE,OAAO;YACZ,GAAG;YACH,WAAW,EACT,KAAK,CAAC,MAAM,KAAK,OAAO;gBACtB,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,6CAA6C;YACnD,OAAO;SACR,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,EAAE,CAAA;QACf,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/types/host/pi-omp-adapter.d.ts

@@ -0,0 +1,32 @@
+import { type ModelChoice, type TaskMode } from '../shared/types.ts';
+import { type PiOmpNativeOptions } from './pi-omp-native.ts';
+export type PiOmpCli = 'pi' | 'omp';
+export type PiOmpMetadataPhase = 'native-candidates' | 'account-scope';
+export type PiOmpMetadataCapture = (argv: string[], env?: Record<string, string>, phase?: PiOmpMetadataPhase, scope?: {
+    leaseDirectory?: string;
+}) => Promise<string>;
+export interface PiOmpInput extends PiOmpNativeOptions {
+    managedCredentials?: boolean;
+    cli: PiOmpCli;
+    executable: string;
+    project: string;
+    preference: {
+        model: string;
+        effort: string;
+    };
+    mode: TaskMode;
+    prompt: string;
+    conversationId?: string;
+    stateDirectory: string;
+}
+/** The bridge validates exact native model capabilities before sending any prompt. */
+export declare function preparePiOmp(input: PiOmpInput, capture?: PiOmpMetadataCapture): Promise<{
+    argv: string[];
+    env?: Record<string, string>;
+    leaseDirectory?: string;
+    activate: () => Promise<void>;
+    cleanup: () => Promise<void>;
+}>;
+export declare function discoverPiOmp(cli: PiOmpCli, executable: string, capture: PiOmpMetadataCapture, stateDirectory: string, options?: PiOmpNativeOptions & {
+    managedCredentials?: boolean;
+}): Promise<ModelChoice[]>;

package/lib/types/host/pi-omp-adapter.js

@@ -0,0 +1,190 @@
+import { mkdir, mkdtemp, realpath, writeFile, lstat, open, rename, rm, chmod } from 'node:fs/promises';
+import { constants, existsSync } from 'node:fs';
+import { createHash, randomUUID } from 'node:crypto';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { EFFORTS } from "../shared/types.js";
+import { ProcessCleanupUnconfirmedError } from "./process.js";
+import { snapshotPiOmpNative, safePiOmpAncestors } from "./pi-omp-native.js";
+import { finishPiOmpRefresh } from './pi-omp-refresh.mjs';
+import { acquireOwnAccountLease } from './own-account-lease.mjs';
+import { assertPiOmpRefreshSources, assertPiOmpRefreshCache } from './pi-omp-refresh.mjs';
+const bridgePath = () => {
+    const here = dirname(fileURLToPath(import.meta.url));
+    for (const candidate of [join(here, 'pi-omp-bridge.mjs'), resolve(here, '../../pi-omp-bridge.mjs')])
+        if (existsSync(candidate))
+            return candidate;
+    throw new Error('Pi/OMP bridge 未安装，请重新构建插件');
+};
+async function privateDirectory(path) {
+    await safePiOmpAncestors(path);
+    await mkdir(path, { recursive: true, mode: 0o700 });
+    const info = await lstat(path);
+    if (info.isSymbolicLink() || !info.isDirectory())
+        throw new Error('Unsafe Pi/OMP state directory symlink');
+    if (process.platform === 'win32') {
+        // Node's POSIX directory descriptor/chmod path is not supported on Windows.
+        // Match account preparation: pin the path and inode around the path-based operation.
+        const canonical = await realpath(path);
+        await chmod(path, 0o700);
+        const current = await lstat(path);
+        if (current.isSymbolicLink() ||
+            !current.isDirectory() ||
+            info.dev !== current.dev ||
+            info.ino !== current.ino ||
+            (await realpath(path)) !== canonical)
+            throw new Error('Pi/OMP state directory changed while opening');
+        return canonical;
+    }
+    const handle = await open(path, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+    try {
+        const opened = await handle.stat();
+        if (info.dev !== opened.dev || info.ino !== opened.ino)
+            throw new Error('Pi/OMP state directory changed while opening');
+        await handle.chmod(0o700);
+    }
+    finally {
+        await handle.close();
+    }
+    return realpath(path);
+}
+async function contextFor(input) {
+    const stateDirectory = resolve(input.stateDirectory);
+    const root = await privateDirectory(stateDirectory);
+    const identity = 'discover' in input
+        ? 'catalog'
+        : createHash('sha256')
+            .update(await realpath(input.project))
+            .digest('hex');
+    const cliDirectory = await privateDirectory(join(root, input.cli));
+    const isolated = await privateDirectory(join(cliDirectory, identity));
+    const agent = await privateDirectory(join(isolated, 'agent'));
+    // Rebuild from this CLI's current sources, including on continuation.
+    const native = await snapshotPiOmpNative(input.cli, agent, {
+        accountRoot: input.accountRoot ?? stateDirectory,
+        nativeHome: input.nativeHome,
+        signal: input.signal,
+        sharedOAuth: true,
+    });
+    const request = async (extra = {}) => {
+        const leaseNonce = randomUUID();
+        const requestDirectory = await mkdtemp(join(isolated, 'request-'));
+        const requestPath = join(requestDirectory, 'request.json');
+        const temporary = join(requestDirectory, `.request-${randomUUID()}.tmp`);
+        try {
+            await writeFile(temporary, JSON.stringify({
+                ...input,
+                ...extra,
+                stateDirectory: isolated,
+                nativeRoot: native.directory,
+                ...(native.leaseDirectory
+                    ? { leaseDirectory: native.leaseDirectory, leaseNonce, refreshReceipt: native.receipt }
+                    : {}),
+                ...('project' in input ? { project: await realpath(input.project) } : {}),
+            }), { flag: 'wx', mode: 0o600 });
+            await rename(temporary, requestPath);
+        }
+        finally {
+            await rm(temporary, { force: true });
+        }
+        return {
+            argv: [process.execPath, bridgePath(), requestPath],
+            env: native.env,
+            leaseDirectory: native.leaseDirectory,
+            activate: async () => {
+                if (native.leaseDirectory) {
+                    await acquireOwnAccountLease(native.leaseDirectory, leaseNonce);
+                    await assertPiOmpRefreshSources(native.leaseDirectory, native.receipt);
+                    await assertPiOmpRefreshCache(native.leaseDirectory, native.receipt);
+                }
+            },
+            cleanup: async () => {
+                if (native.leaseDirectory)
+                    await finishPiOmpRefresh(native.leaseDirectory, leaseNonce, input.executable, native.receipt);
+            },
+        };
+    };
+    return { request };
+}
+async function confirmedCatalog(context, capture) {
+    for (const phase of ['native-candidates', 'account-scope']) {
+        const launch = await context.request({ metadataPhase: phase });
+        let raw;
+        let cleanupUnconfirmed = false;
+        try {
+            await launch.activate();
+            raw = JSON.parse(await capture(launch.argv, launch.env, phase, { leaseDirectory: launch.leaseDirectory }));
+        }
+        catch (error) {
+            if (error instanceof ProcessCleanupUnconfirmedError) {
+                cleanupUnconfirmed = true;
+                throw error;
+            }
+            throw new Error('无法读取 Pi/OMP 原生模型目录，请检查本机配置');
+        }
+        finally {
+            if (!cleanupUnconfirmed)
+                await launch.cleanup();
+        }
+        if (phase === 'account-scope')
+            return parseCatalog(raw);
+        if (!raw ||
+            typeof raw !== 'object' ||
+            raw.phase !== phase ||
+            !Number.isSafeInteger(raw.count) ||
+            raw.count < 0)
+            throw new Error('Invalid Pi/OMP candidate phase result');
+    }
+    throw new Error('Missing Pi/OMP account scope');
+}
+/** The bridge validates exact native model capabilities before sending any prompt. */
+export async function preparePiOmp(input, capture) {
+    if (input.cli !== 'pi' && input.cli !== 'omp')
+        throw new Error('Unsupported Pi/OMP CLI');
+    if (!/^[A-Za-z0-9_.:-]+\/[^\s\x00-\x1f]+$/.test(input.preference.model))
+        throw new Error('Pi/OMP 需要原生 provider/model 选型');
+    if (!EFFORTS.includes(input.preference.effort))
+        throw new Error('Unsupported native model effort');
+    if (!['plan', 'accept-edits'].includes(input.mode))
+        throw new Error('Unsupported task mode');
+    if (!input.prompt.trim())
+        throw new Error('Prompt must not be empty');
+    const context = await contextFor(input);
+    // Preparing a request is reversible. Execution requires the Host's two
+    // captures on this exact snapshot; an unconfirmed request cannot send prompts.
+    const catalog = capture ? await confirmedCatalog(context, capture) : undefined;
+    return context.request(catalog ? { confirmedCatalog: catalog } : {});
+}
+export async function discoverPiOmp(cli, executable, capture, stateDirectory, options = {}) {
+    if (cli !== 'pi' && cli !== 'omp')
+        throw new Error('Unsupported Pi/OMP CLI');
+    const context = await contextFor({ cli, executable, stateDirectory, discover: true, ...options });
+    return confirmedCatalog(context, capture);
+}
+function parseCatalog(raw) {
+    if (!Array.isArray(raw))
+        throw new Error('Invalid Pi/OMP model catalog');
+    const ids = new Set();
+    return raw.map((model) => {
+        if (!model ||
+            typeof model !== 'object' ||
+            typeof model.id !== 'string' ||
+            !/^[A-Za-z0-9_.:-]+\/[^\s\x00-\x1f]+$/.test(model.id) ||
+            typeof model.label !== 'string' ||
+            !Array.isArray(model.efforts) ||
+            !model.efforts.length ||
+            model.efforts.some((effort) => !EFFORTS.includes(effort)) ||
+            ids.has(model.id))
+            throw new Error('Invalid Pi/OMP native model entry');
+        ids.add(model.id);
+        return {
+            id: model.id,
+            label: model.label,
+            efforts: [...new Set(model.efforts)],
+            ...(model.cost === 'free' || model.cost === 'paid' || model.cost === 'unknown'
+                ? { cost: model.cost }
+                : {}),
+        };
+    });
+}
+//# sourceMappingURL=pi-omp-adapter.js.map

package/lib/types/host/pi-omp-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-omp-adapter.js","sourceRoot":"","sources":["../../../src/host/pi-omp-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtG,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,OAAO,EAAmC,MAAM,oBAAoB,CAAA;AAC7E,OAAO,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAA;AAE7D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAA2B,MAAM,oBAAoB,CAAA;AACrG,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAChE,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAqBzF,MAAM,UAAU,GAAG,GAAG,EAAE;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACpD,KAAK,MAAM,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;QACjG,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IAC7C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;AAC9C,CAAC,CAAA;AACD,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC1G,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,4EAA4E;QAC5E,qFAAqF;QACrF,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACxB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QACjC,IACE,OAAO,CAAC,cAAc,EAAE;YACxB,CAAC,OAAO,CAAC,WAAW,EAAE;YACtB,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;YACxB,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;YACxB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS;YAEpC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IAClG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAClC,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YACpD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC;AACD,KAAK,UAAU,UAAU,CACvB,KAEwG;IAExG,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IACpD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,cAAc,CAAC,CAAA;IACnD,MAAM,QAAQ,GACZ,UAAU,IAAI,KAAK;QACjB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;aACjB,MAAM,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;aACrC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtB,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAA;IACrE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;IAC7D,sEAAsE;IACtE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE;QACzD,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,cAAc;QAChD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,IAAI;KAClB,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,KAAK,EAAE,QAAiC,EAAE,EAAE,EAAE;QAC5D,MAAM,UAAU,GAAG,UAAU,EAAE,CAAA;QAC/B,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAA;QAClE,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAA;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,YAAY,UAAU,EAAE,MAAM,CAAC,CAAA;QACxE,IAAI,CAAC;YACH,MAAM,SAAS,CACb,SAAS,EACT,IAAI,CAAC,SAAS,CAAC;gBACb,GAAG,KAAK;gBACR,GAAG,KAAK;gBACR,cAAc,EAAE,QAAQ;gBACxB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,GAAG,CAAC,MAAM,CAAC,cAAc;oBACvB,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE;oBACvF,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1E,CAAC,EACF,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAC5B,CAAA;YACD,MAAM,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QACtC,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,WAAW,CAAC;YACnD,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,QAAQ,EAAE,KAAK,IAAI,EAAE;gBACnB,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC1B,MAAM,sBAAsB,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAA;oBAC/D,MAAM,yBAAyB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;oBACtE,MAAM,uBAAuB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;gBACtE,CAAC;YACH,CAAC;YACD,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,MAAM,CAAC,cAAc;oBACvB,MAAM,kBAAkB,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;YACjG,CAAC;SACF,CAAA;IACH,CAAC,CAAA;IACD,OAAO,EAAE,OAAO,EAAE,CAAA;AACpB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAA+C,EAC/C,OAA6B;IAE7B,KAAK,MAAM,KAAK,IAAI,CAAC,mBAAmB,EAAE,eAAe,CAAU,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9D,IAAI,GAAY,CAAA;QAChB,IAAI,kBAAkB,GAAG,KAAK,CAAA;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;YACvB,GAAG,GAAG,IAAI,CAAC,KAAK,CACd,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CACzF,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;gBACpD,kBAAkB,GAAG,IAAI,CAAA;gBACzB,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC/C,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,kBAAkB;gBAAE,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;QACjD,CAAC;QACD,IAAI,KAAK,KAAK,eAAe;YAAE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;QACvD,IACE,CAAC,GAAG;YACJ,OAAO,GAAG,KAAK,QAAQ;YACtB,GAAW,CAAC,KAAK,KAAK,KAAK;YAC5B,CAAC,MAAM,CAAC,aAAa,CAAE,GAAW,CAAC,KAAK,CAAC;YACxC,GAAW,CAAC,KAAK,GAAG,CAAC;YAEtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;AACjD,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAiB,EACjB,OAA8B;IAQ9B,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IACxF,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,IAAI,CAAE,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC5F,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAA;IACvC,uEAAuE;IACvE,+EAA+E;IAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9E,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AACtE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAa,EACb,UAAkB,EAClB,OAA6B,EAC7B,cAAsB,EACtB,UAAiE,EAAE;IAEnE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAC5E,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;IACjG,OAAO,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AAC3C,CAAC;AACD,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IACxE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAe,EAAE;QACpC,IACE,CAAC,KAAK;YACN,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;YAC5B,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC7B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM;YACrB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAe,EAAE,EAAE,CAAC,CAAE,OAA8B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1F,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAEjB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QACtD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACjB,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAA2B;YAC9D,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAC5E,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;gBACtB,CAAC,CAAC,EAAE,CAAC;SACR,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/lib/types/host/pi-omp-environment.d.mts

@@ -0,0 +1 @@
+export function ompConfigurationEnvironment(configRoot: string): Record<string, string>

package/lib/types/host/pi-omp-environment.mjs

@@ -0,0 +1,15 @@
+import { homedir } from 'node:os'
+import { basename, dirname, relative, resolve } from 'node:path'
+
+/** OMP 16 resolves its config root with join(os.homedir(), PI_CONFIG_DIR).
+ * Windows roots on another drive cannot be expressed relative to the real home.
+ * Rebase only this child environment; Host account discovery retains the real home.
+ */
+export function ompConfigurationEnvironment(configRoot) {
+  if (typeof configRoot !== 'string' || !configRoot.trim() || configRoot.includes('\0'))
+    throw new Error('Invalid OMP configuration root')
+  const root = resolve(configRoot)
+  if (process.platform === 'win32')
+    return { HOME: dirname(root), USERPROFILE: dirname(root), PI_CONFIG_DIR: basename(root) }
+  return { PI_CONFIG_DIR: relative(homedir(), root) }
+}

package/lib/types/host/pi-omp-identity.d.ts

@@ -0,0 +1,2 @@
+/** Runs only bounded --help metadata, never login, OAuth refresh or a model prompt. */
+export declare function verifyPiOmpExecutable(cli: 'pi' | 'omp', executable: string, capture: (argv: string[], cwd: string, env: Record<string, string>) => Promise<string>): Promise<string>;

package/lib/types/host/pi-omp-identity.js

@@ -0,0 +1,142 @@
+import { mkdir, mkdtemp, rm, open, realpath } from 'node:fs/promises';
+import { constants } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { inspectPiInstallation } from './pi-installation.mjs';
+import { ProcessCleanupUnconfirmedError } from "./process.js";
+import { ompConfigurationEnvironment } from './pi-omp-environment.mjs';
+import { nativeLaunchArgv } from './native-launch.mjs';
+const mismatch = (message) => Object.assign(new Error(message), { code: 'CLI_IDENTITY_MISMATCH' });
+// This is installation capability evidence, never account or model evidence.
+// Only standalone native binaries qualify: script dependencies may change
+// without changing the launcher's own metadata.
+const ompCapabilities = new Map();
+async function binaryRevision(executable) {
+    let handle;
+    try {
+        const path = await realpath(executable);
+        handle = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        const info = await handle.stat({ bigint: true });
+        if (!info.isFile())
+            return undefined;
+        const magic = Buffer.alloc(4);
+        if ((await handle.read(magic, 0, 4, 0)).bytesRead !== 4)
+            return undefined;
+        let portableExecutable = false;
+        if (magic.subarray(0, 2).toString('ascii') === 'MZ' && info.size >= 64n) {
+            const offset = Buffer.alloc(4), signature = Buffer.alloc(4);
+            if ((await handle.read(offset, 0, 4, 0x3c)).bytesRead === 4) {
+                const pe = offset.readUInt32LE();
+                portableExecutable =
+                    pe >= 64 &&
+                        BigInt(pe + 4) <= info.size &&
+                        (await handle.read(signature, 0, 4, pe)).bytesRead === 4 &&
+                        signature.toString('hex') === '50450000';
+            }
+        }
+        if (!portableExecutable &&
+            ![
+                '7f454c46',
+                'cffaedfe',
+                'cefaedfe',
+                'feedfacf',
+                'feedface',
+                'cafebabe',
+                'bebafeca',
+                'cafebabf',
+                'bfbafeca',
+            ].includes(magic.toString('hex')))
+            return undefined;
+        return {
+            path,
+            revision: [info.dev, info.ino, info.size, info.mtimeNs, info.ctimeNs].join(':'),
+        };
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        await handle?.close();
+    }
+}
+/** Runs only bounded --help metadata, never login, OAuth refresh or a model prompt. */
+export async function verifyPiOmpExecutable(cli, executable, capture) {
+    if (cli === 'pi')
+        return inspectPiInstallation(executable).executable;
+    let isPi = false;
+    try {
+        inspectPiInstallation(executable);
+        isPi = true;
+    }
+    catch {
+        // A standalone OMP binary has no Pi manifest; its native help must identify it.
+    }
+    if (isPi)
+        throw mismatch('OMP 入口指向 Pi Coding Agent；二者是独立 CLI，请修正 OMP 程序路径');
+    const before = await binaryRevision(executable);
+    if (before && ompCapabilities.get(before.path) === before.revision)
+        return executable;
+    const root = await mkdtemp(join(tmpdir(), 'cliworker-omp-identity-'));
+    let cleanupConfirmed = true;
+    try {
+        const windowsAgent = join(root, 'config', 'agent');
+        if (process.platform === 'win32')
+            await mkdir(windowsAgent, { recursive: true, mode: 0o700 });
+        const argv = /\.(?:[cm]?js|cmd|bat)$/i.test(executable)
+            ? nativeLaunchArgv([executable, '--help'])
+            : [executable, '--help'];
+        const help = await capture(argv, root, {
+            PI_CODING_AGENT_DIR: root,
+            PI_CONFIG_DIR: root,
+            OMP_PROFILE: '',
+            PI_PROFILE: '',
+            TMPDIR: root,
+            ELECTRON_RUN_AS_NODE: '1',
+            ...(process.platform === 'win32'
+                ? {
+                    ...ompConfigurationEnvironment(join(root, 'config')),
+                    PI_CODING_AGENT_DIR: windowsAgent,
+                    TMP: root,
+                    TEMP: root,
+                }
+                : {}),
+        });
+        if (!/^omp v\d+\.\d+\.\d+\b/m.test(help) ||
+            !/\brpc\b/.test(help) ||
+            !/^\s+setup\s/m.test(help) ||
+            !/^\s+models\s/m.test(help) ||
+            [
+                '--mode',
+                '--config',
+                '--thinking',
+                '--session-dir',
+                '--tools',
+                '--no-rules',
+                '--no-title',
+                '--no-lsp',
+                '--no-pty',
+                '--approval-mode',
+            ].some((flag) => !help.includes(flag)))
+            throw mismatch('OMP 安装身份或原生接口不匹配；需要支持 RPC、models 和 setup 的 Oh My Pi，不能使用 Pi 入口');
+        if (before) {
+            const after = await binaryRevision(executable);
+            if (after?.path === before.path && after.revision === before.revision) {
+                ompCapabilities.delete(before.path);
+                ompCapabilities.set(before.path, before.revision);
+                if (ompCapabilities.size > 64)
+                    ompCapabilities.delete(ompCapabilities.keys().next().value);
+            }
+        }
+        return executable;
+    }
+    catch (error) {
+        if (error instanceof ProcessCleanupUnconfirmedError)
+            cleanupConfirmed = false;
+        throw error;
+    }
+    finally {
+        if (cleanupConfirmed)
+            await rm(root, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=pi-omp-identity.js.map

package/lib/types/host/pi-omp-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-omp-identity.js","sourceRoot":"","sources":["../../../src/host/pi-omp-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAEtD,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAA;AAE1G,6EAA6E;AAC7E,0EAA0E;AAC1E,gDAAgD;AAChD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAA;AACjD,KAAK,UAAU,cAAc,CAAC,UAAkB;IAC9C,IAAI,MAAoD,CAAA;IACxD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAA;QACvC,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QAC3F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,SAAS,CAAA;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QACzE,IAAI,kBAAkB,GAAG,KAAK,CAAA;QAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;YACxE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAC5B,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC7B,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;gBAC5D,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,EAAE,CAAA;gBAChC,kBAAkB;oBAChB,EAAE,IAAI,EAAE;wBACR,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI;wBAC3B,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC;wBACxD,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,UAAU,CAAA;YAC5C,CAAC;QACH,CAAC;QACD,IACE,CAAC,kBAAkB;YACnB,CAAC;gBACC,UAAU;gBACV,UAAU;gBACV,UAAU;gBACV,UAAU;gBACV,UAAU;gBACV,UAAU;gBACV,UAAU;gBACV,UAAU;gBACV,UAAU;aACX,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAEjC,OAAO,SAAS,CAAA;QAClB,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SAChF,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAA;IACvB,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAiB,EACjB,UAAkB,EAClB,OAAsF;IAEtF,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,qBAAqB,CAAC,UAAU,CAAC,CAAC,UAAU,CAAA;IACrE,IAAI,IAAI,GAAG,KAAK,CAAA;IAChB,IAAI,CAAC;QACH,qBAAqB,CAAC,UAAU,CAAC,CAAA;QACjC,IAAI,GAAG,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;IAClF,CAAC;IACD,IAAI,IAAI;QAAE,MAAM,QAAQ,CAAC,iDAAiD,CAAC,CAAA;IAC3E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAA;IAC/C,IAAI,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,QAAQ;QAAE,OAAO,UAAU,CAAA;IACrF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAA;IACrE,IAAI,gBAAgB,GAAG,IAAI,CAAA;IAC3B,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;QAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7F,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC;YACrD,CAAC,CAAC,gBAAgB,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QAC1B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE;YACrC,mBAAmB,EAAE,IAAI;YACzB,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,IAAI;YACZ,oBAAoB,EAAE,GAAG;YACzB,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAC9B,CAAC,CAAC;oBACE,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;oBACpD,mBAAmB,EAAE,YAAY;oBACjC,GAAG,EAAE,IAAI;oBACT,IAAI,EAAE,IAAI;iBACX;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAA;QACF,IACE,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YACrB,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3B;gBACE,QAAQ;gBACR,UAAU;gBACV,YAAY;gBACZ,eAAe;gBACf,SAAS;gBACT,YAAY;gBACZ,YAAY;gBACZ,UAAU;gBACV,UAAU;gBACV,iBAAiB;aAClB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAEtC,MAAM,QAAQ,CACZ,gEAAgE,CACjE,CAAA;QACH,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAA;YAC9C,IAAI,KAAK,EAAE,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACtE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBACnC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;gBACjD,IAAI,eAAe,CAAC,IAAI,GAAG,EAAE;oBAAE,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAA;YAC7F,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAA;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,8BAA8B;YAAE,gBAAgB,GAAG,KAAK,CAAA;QAC7E,MAAM,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QACT,IAAI,gBAAgB;YAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACxE,CAAC;AACH,CAAC"}

package/lib/types/host/pi-omp-logout.d.ts

@@ -0,0 +1,3 @@
+import type { PiOmpAccountTerminalInput, PiOmpAccountTerminalLaunch } from './pi-omp-accounts.ts';
+/** No snapshot, migration or credential deletion here: only native user-operated menus. */
+export declare function preparePiOmpLogout(input: PiOmpAccountTerminalInput): Promise<PiOmpAccountTerminalLaunch>;