dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/host/pi-omp-logout.js

@@ -0,0 +1,152 @@
+import { lstat, mkdir, mkdtemp, realpath, rm, symlink, writeFile } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { readPiOmpLogoutSources, safePiOmpAncestors } from "./pi-omp-native.js";
+import { projectDirectory } from "./process.js";
+import { ompConfigurationEnvironment } from './pi-omp-environment.mjs';
+/** No snapshot, migration or credential deletion here: only native user-operated menus. */
+export async function preparePiOmpLogout(input) {
+    const { cli, signal } = input;
+    signal?.throwIfAborted();
+    projectDirectory(input.project);
+    const sources = await readPiOmpLogoutSources(cli, input.stateDirectory, signal ?? new AbortController().signal, { nativeHome: input.nativeHome });
+    const source = input.source
+        ? sources.find((item) => item.id === input.source)
+        : sources.length === 1
+            ? sources[0]
+            : undefined;
+    if (!source)
+        throw new Error(sources.length > 1 && !input.source ? '请选择要退出的账号来源' : '账号来源已变化，请刷新后重试');
+    const directory = await realpath(source.directory);
+    await safePiOmpAncestors(directory);
+    signal?.throwIfAborted();
+    const parent = join(resolve(input.stateDirectory), 'account-runtime');
+    await safePiOmpAncestors(parent);
+    await mkdir(parent, { recursive: true, mode: 0o700 });
+    const parentIdentity = await lstat(parent);
+    const runtime = await mkdtemp(join(parent, `${cli}-logout-`));
+    const identity = await lstat(runtime);
+    let removed = false;
+    const cleanup = async () => {
+        if (removed)
+            return;
+        const currentParent = await lstat(parent);
+        if (currentParent.isSymbolicLink() ||
+            currentParent.dev !== parentIdentity.dev ||
+            currentParent.ino !== parentIdentity.ino)
+            throw new Error('Account runtime parent changed before cleanup');
+        try {
+            const current = await lstat(runtime);
+            if (current.isSymbolicLink() || current.dev !== identity.dev || current.ino !== identity.ino)
+                throw new Error('Account runtime changed before cleanup');
+            await rm(runtime, { recursive: true, force: true });
+            removed = true;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                removed = true;
+            else
+                throw error;
+        }
+    };
+    try {
+        const agent = join(runtime, 'agent'), temporary = join(runtime, 'tmp');
+        for (const path of [agent, temporary, join(runtime, 'sessions'), join(runtime, 'logs')])
+            await mkdir(path, { mode: 0o700 });
+        const env = {
+            ...source.env,
+            PI_CODING_AGENT_DIR: agent,
+            TMPDIR: temporary,
+            TMP: temporary,
+            TEMP: temporary,
+            ELECTRON_RUN_AS_NODE: '1',
+            OMP_AUTH_BROKER_URL: '',
+            OMP_AUTH_BROKER_TOKEN: '',
+            OMP_PROFILE: '',
+            PI_PROFILE: '',
+        };
+        let native;
+        if (cli === 'pi') {
+            const auth = source.stored ? join(directory, 'auth.json') : join(agent, 'auth.json');
+            if (!source.stored)
+                await writeFile(auth, '{}', { flag: 'wx', mode: 0o600 });
+            native = [
+                process.execPath,
+                fileURLToPath(new URL('./pi-login.mjs', import.meta.url)),
+                input.executable,
+                'logout',
+                auth,
+            ];
+            env.PI_OFFLINE = '1';
+            env.PI_TELEMETRY = '0';
+        }
+        else {
+            // Operate on the selected real DB, never a copied DB/WAL. Windows uses the
+            // native agent root directly without requiring symlink privileges.
+            if (source.stored) {
+                if (process.platform === 'win32') {
+                    if (source.brokerConfigured)
+                        throw new Error('请先在 OMP 自身配置中停用账号代理，再退出该来源');
+                    env.PI_CODING_AGENT_DIR = directory;
+                }
+                else {
+                    await symlink(join(directory, 'agent.db'), join(agent, 'agent.db'));
+                }
+            }
+            await writeFile(join(agent, 'config.yml'), JSON.stringify({
+                ...source.config,
+                auth: { ...(source.config.auth ?? {}), broker: undefined },
+                startup: { setupWizard: false, showSplash: false, checkUpdate: false },
+                disabledProviders: [
+                    'native',
+                    'claude',
+                    'claude-plugins',
+                    'codex',
+                    'cursor',
+                    'gemini',
+                    'opencode',
+                    'mcp-json',
+                    'vscode',
+                    'windsurf',
+                    'omp-plugins',
+                ],
+                mcp: { enableProjectConfig: false },
+                retry: { modelFallback: false },
+                memory: { backend: 'off' },
+                tools: { approvalMode: 'always-ask' },
+            }), { mode: 0o600 });
+            Object.assign(env, ompConfigurationEnvironment(runtime));
+            native = [
+                input.executable,
+                '--no-session',
+                '--no-tools',
+                '--no-extensions',
+                '--no-skills',
+                '--no-rules',
+                '--no-title',
+                '--no-lsp',
+                '--no-pty',
+                '--approval-mode',
+                'always-ask',
+                '--session-dir',
+                join(runtime, 'sessions'),
+                '--config',
+                join(agent, 'config.yml'),
+            ];
+        }
+        signal?.throwIfAborted();
+        const argv = [process.execPath, fileURLToPath(new URL('./private-launch.mjs', import.meta.url)), ...native];
+        return {
+            argv,
+            cwd: runtime,
+            env,
+            cleanup,
+            instruction: `${source.label}：${cli === 'pi' ? '选择要退出的服务商。' : '输入 /logout，选择服务商和凭据。'}其他来源保留；.env 或模型配置中的 API 请在原配置中管理。`,
+        };
+    }
+    catch (error) {
+        await cleanup();
+        throw error;
+    }
+}
+//# sourceMappingURL=pi-omp-logout.js.map

package/lib/types/host/pi-omp-logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-omp-logout.js","sourceRoot":"","sources":["../../../src/host/pi-omp-logout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC1F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAA;AAGtE,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAgC;IAEhC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IAC7B,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC/B,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAC1C,GAAG,EACH,KAAK,CAAC,cAAc,EACpB,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,EACtC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CACjC,CAAA;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM;QACzB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,CAAC;QAClD,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACZ,CAAC,CAAC,SAAS,CAAA;IACf,IAAI,CAAC,MAAM;QACT,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CACvE,CAAA;IACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAClD,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAA;IACnC,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,iBAAiB,CAAC,CAAA;IACrE,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAChC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC,CAAA;IAC7D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,OAAO;YAAE,OAAM;QACnB,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;QACzC,IACE,aAAa,CAAC,cAAc,EAAE;YAC9B,aAAa,CAAC,GAAG,KAAK,cAAc,CAAC,GAAG;YACxC,aAAa,CAAC,GAAG,KAAK,cAAc,CAAC,GAAG;YAExC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QAClE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;YACpC,IAAI,OAAO,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;gBAC1F,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YAC3D,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACnD,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,GAAG,IAAI,CAAA;;gBACtC,MAAM,KAAK,CAAA;QAClB,CAAC;IACH,CAAC,CAAA;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAClC,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAClC,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrF,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACpC,MAAM,GAAG,GAA2B;YAClC,GAAG,MAAM,CAAC,GAAG;YACb,mBAAmB,EAAE,KAAK;YAC1B,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,SAAS;YACf,oBAAoB,EAAE,GAAG;YACzB,mBAAmB,EAAE,EAAE;YACvB,qBAAqB,EAAE,EAAE;YACzB,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;SACf,CAAA;QACD,IAAI,MAAgB,CAAA;QACpB,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;YACpF,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAC5E,MAAM,GAAG;gBACP,OAAO,CAAC,QAAQ;gBAChB,aAAa,CAAC,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzD,KAAK,CAAC,UAAU;gBAChB,QAAQ;gBACR,IAAI;aACL,CAAA;YACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;YACpB,GAAG,CAAC,YAAY,GAAG,GAAG,CAAA;QACxB,CAAC;aAAM,CAAC;YACN,2EAA2E;YAC3E,mEAAmE;YACnE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACjC,IAAI,MAAM,CAAC,gBAAgB;wBACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;oBAC/C,GAAG,CAAC,mBAAmB,GAAG,SAAS,CAAA;gBACrC,CAAC;qBAAM,CAAC;oBACN,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAA;gBACrE,CAAC;YACH,CAAC;YACD,MAAM,SAAS,CACb,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC;gBACb,GAAG,MAAM,CAAC,MAAM;gBAChB,IAAI,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC1D,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE;gBACtE,iBAAiB,EAAE;oBACjB,QAAQ;oBACR,QAAQ;oBACR,gBAAgB;oBAChB,OAAO;oBACP,QAAQ;oBACR,QAAQ;oBACR,UAAU;oBACV,UAAU;oBACV,QAAQ;oBACR,UAAU;oBACV,aAAa;iBACd;gBACD,GAAG,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE;gBACnC,KAAK,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;gBAC/B,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC1B,KAAK,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACtC,CAAC,EACF,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAA;YACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAA;YACxD,MAAM,GAAG;gBACP,KAAK,CAAC,UAAU;gBAChB,cAAc;gBACd,YAAY;gBACZ,iBAAiB;gBACjB,aAAa;gBACb,YAAY;gBACZ,YAAY;gBACZ,UAAU;gBACV,UAAU;gBACV,iBAAiB;gBACjB,YAAY;gBACZ,eAAe;gBACf,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;gBACzB,UAAU;gBACV,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC;aAC1B,CAAA;QACH,CAAC;QACD,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,CAAA;QAC3G,OAAO;YACL,IAAI;YACJ,GAAG,EAAE,OAAO;YACZ,GAAG;YACH,OAAO;YACP,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,mCAAmC;SACxH,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,EAAE,CAAA;QACf,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/types/host/pi-omp-native.d.ts

@@ -0,0 +1,71 @@
+import type { AccountIdentity } from './account-identity.ts';
+import type { AccountSource } from '../shared/accounts.ts';
+import type { PiOmpCli } from './pi-omp-adapter.ts';
+export interface PiOmpNativeOptions {
+    accountRoot?: string;
+    nativeHome?: string;
+    signal?: AbortSignal;
+    /** Deprecated. Worker copies are never authoritative credential sources. */
+    preserveCredentials?: boolean;
+    /** Internal runtime mode; direct metadata projections never write native accounts. */
+    sharedOAuth?: boolean;
+}
+export declare const piOmpAccountDirectory: (cli: PiOmpCli, root?: string) => string;
+/** Preserve drive and UNC roots instead of treating them as ordinary path components. */
+export declare function nativeAccountAncestors(path: string, paths?: {
+    resolve: (...paths: string[]) => string;
+    parse: (path: string) => import("path").ParsedPath;
+    relative: (from: string, to: string) => string;
+    join: (...paths: string[]) => string;
+    sep: "\\" | "/";
+}): string[];
+export declare function safePiOmpAncestors(path: string): Promise<void>;
+/** Current native roots only. Account actions must never remove a merged worker copy. */
+export declare function readPiOmpLogoutSources(cli: PiOmpCli, stateDirectory: string | undefined, signal: AbortSignal, options?: {
+    nativeHome?: string;
+}): Promise<{
+    id: AccountSource;
+    label: string;
+    directory: string;
+    env: Record<string, string>;
+    config: Record<string, any>;
+    stored: boolean;
+    brokerConfigured: boolean;
+}[]>;
+export declare function listPiOmpAccountSources(cli: PiOmpCli, stateDirectory: string | undefined, signal: AbortSignal, options?: {
+    nativeHome?: string;
+}): Promise<{
+    id: AccountSource;
+    label: string;
+}[]>;
+/** Internal binding material only. Never expose these values through public status. */
+export declare function readPiOmpAccountMaterial(cli: PiOmpCli, options?: PiOmpNativeOptions): Promise<{
+    auth: any;
+    credentials: any[];
+    env: Record<string, string>;
+    models: {
+        providers: any;
+    };
+    configAuth: any;
+    sourceIds: string[];
+}>;
+/** Global native input then plugin account overrides by provider; empty plugin auth never hides global accounts. */
+export declare function snapshotPiOmpNative(cli: PiOmpCli, destination: string, options?: PiOmpNativeOptions): Promise<{
+    leaseDirectory?: string | undefined;
+    receipt?: {
+        version: number;
+        cli: PiOmpCli;
+        revision: string;
+        entries: any[];
+        fixed: any[];
+    } | undefined;
+    configured: boolean;
+    expired: boolean;
+    providers: string[];
+    env: Record<string, string>;
+    directory: string;
+}>;
+export declare function inspectPiOmpNativeAccount(cli: PiOmpCli, stateDirectory: string | undefined, signal: AbortSignal, options?: {
+    nativeHome?: string;
+}): Promise<AccountIdentity>;
+export declare function restorePiOmpEnvironment(directory: string): Promise<Record<string, string>>;