dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/host/windows-account-terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-account-terminal.js","sourceRoot":"","sources":["../../../src/host/windows-account-terminal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAE1D,OAAO,EAAE,8BAA8B,EAAuB,MAAM,cAAc,CAAA;AAElF,0EAA0E;AAC1E,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD;QACE,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAC/C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAuB,EACvB,IAAiC,EACjC,UAKI,EAAE;IAEN,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,aAAc,CAAC,IAAI,CAAC,CAAA;IAC3F,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,CAAA;IACvD,IAAI,QAA8C,CAAA;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;QAC9B,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,KAAK,CAAC;gBACnB,IAAI,EAAE;oBACJ,IAAI,CAAC,OAAO,EAAE,gDAAgD,CAAC;oBAC/D,SAAS;oBACT,YAAY;oBACZ,iBAAiB;oBACjB,OAAO;oBACP,aAAa,CAAC,IAAI,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACtE,gBAAgB;oBAChB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;oBACnB,YAAY;oBACZ,SAAS;iBACV;gBACD,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;gBAC1D,OAAO,EAAE,IAAI;aACd,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACrD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IACJ,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACtC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;IACtB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;IACtB,IAAI,OAAkC,CAAA;IACtC,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,CAAA;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC,CAAA;IACD,MAAM,SAAS,GAAG,GAAkB,EAAE,CACpC,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;QACvB,IAAI,KAAK,GAAG,SAAS,CAAA;QACrB,IAAI,CAAC;YACH,uEAAuE;YACvE,wEAAwE;YACxE,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACrE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAA;YAC7D,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAChC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,YAAY;oBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAA;gBAC1E,MAAM,KAAK,CAAC,EAAE,CAAC,CAAA;YACjB,CAAC;YACD,qEAAqE;YACrE,yEAAyE;YACzE,sEAAsE;YACtE,MAAM,QAAQ,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC,IAAI,CACzC,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAA;YACD,IAAI,QAAQ;gBAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;YACnF,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAA;YACzD,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAA;gBACtE,MAAM,KAAK,CAAC,EAAE,CAAC,CAAA;YACjB,CAAC;YACD,sEAAsE;YACtE,KAAK,GAAG,UAAU,CAAA;YAClB,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7F,MAAM,IAAI,8BAA8B,EAAE,CAAA;YAC5C,KAAK,GAAG,OAAO,CAAA;YACf,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;gBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAA;YAC5E,MAAM,KAAK,CAAC,IAAI,CAAA;YAChB,KAAK,GAAG,WAAW,CAAA;YACnB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,SAAS,CAAA;YACnB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,8BAA8B,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACtE,CAAC;IACH,CAAC,CAAC,EAAE,CAAC,CAAA;IACP,IAAI,CAAC;QACH,2EAA2E;QAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,CAAA;QAC/D,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;YAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;YAC1F,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,KAAK,CAAC,EAAE,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;gBAChD,CAAC,CAAC;aACH,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAC7B,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAc,CAAC;YACtC,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE;gBACJ,IAAI,CAAC,OAAO,EAAE,gDAAgD,CAAC;gBAC/D,SAAS;gBACT,YAAY;gBACZ,iBAAiB;gBACjB,OAAO;gBACP,aAAa,CAAC,IAAI,GAAG,CAAC,iCAAiC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1E,YAAY;gBACZ,SAAS;gBACT,cAAc;gBACd,OAAO,CAAC,QAAQ;gBAChB,aAAa;gBACb,aAAa,CAAC,IAAI,GAAG,CAAC,8BAA8B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvE,kBAAkB;gBAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAClE;YACD,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE;SAChD,CAAC,CAAA;QACF,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,CAAA;QAC1D,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;YAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;YACxF,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,KAAK,CAAC,EAAE,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;gBAChD,CAAC,CAAC;aACH,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAA;QACxB,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;YACvB,SAAS,CAAC;gBACR,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;oBAC3E,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;wBAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;gBAC7F,CAAC;gBAAC,MAAM,CAAC;oBACP,uDAAuD;gBACzD,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;gBACxE,IAAI,OAAO;oBAAE,OAAO,OAAO,CAAA;YAC7B,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAChC,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI;YACJ,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YACpC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;YAClD,iBAAiB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE;YACpD,eAAe,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE;YAChD,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAC9D,SAAS;SACV,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,EAAE,CAAC;YACb,sEAAsE;YACtE,uEAAuE;YACvE,mEAAmE;YACnE,IAAI,CAAC;gBACH,MAAM,SAAS,EAAE,CAAA;YACnB,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,KAAK,CAAC,SAAS,EAAE,CAAA;gBACjB,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACjD,MAAM,OAAO,CAAA;YACf,CAAC;QACH,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACjE,KAAK,CAAC,SAAS,EAAE,CAAA;YACjB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;gBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAA;YAC5E,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,KAAK,CAAA;QACrC,MAAM,IAAI,2BAA2B,EAAE,CAAA;IACzC,CAAC;AACH,CAAC"}

package/lib/types/host/windows-agy-account.ps1

@@ -0,0 +1,81 @@
+# Read only Antigravity's own native Windows credential. Never emit its blob.
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = [System.Text.UTF8Encoding]::new($false)
+try {
+  Add-Type @'
+using System;
+using System.Runtime.InteropServices;
+using System.Text;
+public static class CwnAgyCredential {
+  [StructLayout(LayoutKind.Sequential, CharSet=CharSet.Unicode)] struct Credential {
+    public uint Flags, Type;
+    public string TargetName, Comment;
+    public System.Runtime.InteropServices.ComTypes.FILETIME LastWritten;
+    public uint CredentialBlobSize;
+    public IntPtr CredentialBlob;
+    public uint Persist, AttributeCount;
+    public IntPtr Attributes;
+    public string TargetAlias, UserName;
+  }
+  [DllImport("advapi32.dll", CharSet=CharSet.Unicode, SetLastError=true)]
+  static extern bool CredRead(string target, uint type, uint flags, out IntPtr value);
+  [DllImport("advapi32.dll")] static extern void CredFree(IntPtr value);
+  public static string Read() {
+    IntPtr value;
+    if (!CredRead("gemini:antigravity", 1, 0, out value)) {
+      if (Marshal.GetLastWin32Error() == 1168) return null;
+      throw new Exception("Credential store unavailable");
+    }
+    byte[] bytes = null;
+    try {
+      var credential = (Credential)Marshal.PtrToStructure(value, typeof(Credential));
+      if (credential.CredentialBlobSize > 65536) throw new Exception("Invalid credential");
+      bytes = new byte[credential.CredentialBlobSize];
+      Marshal.Copy(credential.CredentialBlob, bytes, 0, bytes.Length);
+      return bytes.Length > 1 && bytes[1] == 0
+        ? new UnicodeEncoding(false, false, true).GetString(bytes)
+        : new UTF8Encoding(false, true).GetString(bytes);
+    } finally {
+      if (bytes != null) Array.Clear(bytes, 0, bytes.Length);
+      CredFree(value);
+    }
+  }
+}
+'@
+  $raw = [CwnAgyCredential]::Read()
+  if ($null -eq $raw) { @{ state = 'unconfigured' } | ConvertTo-Json -Compress; exit 0 }
+  $account = $raw | ConvertFrom-Json
+  $raw = $null
+  if ($account.auth_method -ne 'consumer' -or -not $account.token) {
+    @{ state = 'unknown' } | ConvertTo-Json -Compress; exit 0
+  }
+  $active = $false
+  if ($account.token.access_token -is [string] -and $account.token.access_token.Trim()) {
+    try { $active = [DateTimeOffset]::Parse($account.token.expiry) -gt [DateTimeOffset]::UtcNow } catch {}
+  }
+  $refreshable = $account.token.refresh_token -is [string] -and $account.token.refresh_token.Trim().Length -gt 0
+  if (-not $active -and -not $refreshable) {
+    @{ state = 'unauthenticated' } | ConvertTo-Json -Compress; exit 0
+  }
+  $result = @{ state = 'authenticated' }
+  if ($account.id_token -is [string] -and $account.id_token.Length -le 32768 -and $account.id_token -match '^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$') {
+    $encoded = $account.id_token.Split('.')[1].Replace('-','+').Replace('_','/')
+    $encoded = $encoded.PadRight($encoded.Length + ((4 - $encoded.Length % 4) % 4), '=')
+    $bytes = [Convert]::FromBase64String($encoded)
+    try { $claims = [Text.Encoding]::UTF8.GetString($bytes) | ConvertFrom-Json }
+    finally { [Array]::Clear($bytes, 0, $bytes.Length) }
+    if ($claims.iss -in @('accounts.google.com', 'https://accounts.google.com') -and $claims.sub -is [string] -and $claims.sub -match '^[A-Za-z0-9_-]{6,128}$') {
+      $hash = [Security.Cryptography.SHA256]::Create()
+      $principal = [Text.Encoding]::UTF8.GetBytes('google:' + $claims.sub)
+      try { $result.principalHash = ([BitConverter]::ToString($hash.ComputeHash($principal))).Replace('-','').ToLowerInvariant() }
+      finally { [Array]::Clear($principal, 0, $principal.Length); $hash.Dispose() }
+      if ($claims.email -is [string] -and $claims.email.Length -le 254 -and $claims.email -match '^[^\s<>@]+@[^\s<>@]+\.[^\s<>@]+$') { $result.email = $claims.email }
+    }
+  }
+  $account = $null; $claims = $null
+  $result | ConvertTo-Json -Compress
+} catch {
+  # Neither exception strings nor credential fragments cross the process boundary.
+  @{ state = 'unavailable' } | ConvertTo-Json -Compress
+  exit 1
+}

package/lib/types/host/windows-cli-installation.d.ts

@@ -0,0 +1,31 @@
+export declare class WindowsCliInstallationError extends Error {
+    readonly installed: boolean;
+    readonly code = "CLI_INSTALLATION_UNAVAILABLE";
+    constructor(message: string, installed?: boolean);
+}
+type WindowsEnvironment = {
+    home?: string;
+    env?: NodeJS.ProcessEnv;
+};
+/** Fixed installer locations only; never scan arbitrary drives or select a venv by recency. */
+export declare function windowsCliCandidates(cli: 'codex' | 'hermes', options?: WindowsEnvironment): string[];
+/** A residue is not a runnable installation and is not evidence of an account. */
+export declare function hasWindowsHermesInstallDirectory(options?: WindowsEnvironment): boolean;
+/** Validate an automatically discovered npm shim against Codex's own package, not just its name. */
+export declare function validateWindowsCodexNpmEntry(path: string): string;
+export declare function presentWindowsCliCandidate(cli: 'codex' | 'hermes', options?: WindowsEnvironment): string | undefined;
+/** Query current-user registered packages, never guess the newest WindowsApps directory. */
+export declare const CODEX_APPX_QUERY = "$ErrorActionPreference='Stop'; [Console]::OutputEncoding=[Text.UTF8Encoding]::new($false); $p=@(Get-AppxPackage -Name 'OpenAI.Codex'); if($p.Count -eq 0){'null';exit 0}; if($p.Count -ne 1){throw 'Ambiguous Codex package'}; $v=$p[0]; [ordered]@{name=$v.Name;family=$v.PackageFamilyName;fullName=$v.PackageFullName;publisher=$v.Publisher;signature=[string]$v.SignatureKind;status=[string]$v.Status;location=$v.InstallLocation}|ConvertTo-Json -Compress";
+export interface CodexAppxRecord {
+    name: string;
+    family: string;
+    fullName: string;
+    publisher: string;
+    signature: string;
+    status: string;
+    location: string;
+}
+/** Exported separately for synthetic identity/relocation tests; no process or account access. */
+export declare function codexAppxExecutable(raw: string, validateFile?: (path: string) => string): string | undefined;
+export declare function findWindowsCodexAppx(capture: (argv: string[], cwd: string) => Promise<string>, signal: AbortSignal, env?: NodeJS.ProcessEnv): Promise<string | undefined>;
+export {};

package/lib/types/host/windows-cli-installation.js

@@ -0,0 +1,157 @@
+import { closeSync, existsSync, fstatSync, lstatSync, openSync, readFileSync, readSync, realpathSync, statSync, } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, isAbsolute, join, resolve, win32 } from 'node:path';
+import { resolveNativeEntry } from './native-launch.mjs';
+export class WindowsCliInstallationError extends Error {
+    installed;
+    code = 'CLI_INSTALLATION_UNAVAILABLE';
+    constructor(message, installed = false) {
+        super(message);
+        this.installed = installed;
+        this.name = 'WindowsCliInstallationError';
+    }
+}
+const unavailableCodex = () => new WindowsCliInstallationError('Codex Windows 应用包入口无法确认，请检查安装', true);
+function directory(env, name, fallback) {
+    const value = env[name]?.trim() || fallback;
+    if (!isAbsolute(value))
+        throw new WindowsCliInstallationError('Windows CLI 安装目录配置无效');
+    return value;
+}
+/** Fixed installer locations only; never scan arbitrary drives or select a venv by recency. */
+export function windowsCliCandidates(cli, options = {}) {
+    const env = options.env ?? process.env, home = options.home ?? homedir();
+    if (cli === 'codex') {
+        const npm = join(directory(env, 'APPDATA', join(home, 'AppData', 'Roaming')), 'npm');
+        return [join(npm, 'codex.cmd')];
+    }
+    const root = join(directory(env, 'LOCALAPPDATA', join(home, 'AppData', 'Local')), 'hermes');
+    return [
+        join(root, 'bin', 'hermes.exe'),
+        join(root, 'bin', 'hermes.cmd'),
+        join(root, 'hermes-agent', 'venv', 'Scripts', 'hermes.exe'),
+    ];
+}
+/** A residue is not a runnable installation and is not evidence of an account. */
+export function hasWindowsHermesInstallDirectory(options = {}) {
+    const env = options.env ?? process.env, home = options.home ?? homedir();
+    return existsSync(join(directory(env, 'LOCALAPPDATA', join(home, 'AppData', 'Local')), 'hermes'));
+}
+function nativePe(path) {
+    const canonical = realpathSync(path), fd = openSync(canonical, 'r');
+    try {
+        const info = fstatSync(fd), head = Buffer.alloc(64), signature = Buffer.alloc(4);
+        if (!info.isFile() || readSync(fd, head, 0, 64, 0) !== 64 || head.toString('ascii', 0, 2) !== 'MZ')
+            throw new Error('Not a native PE file');
+        const offset = head.readUInt32LE(0x3c);
+        if (offset < 64 ||
+            offset + 4 > info.size ||
+            readSync(fd, signature, 0, 4, offset) !== 4 ||
+            signature.toString('hex') !== '50450000')
+            throw new Error('Invalid PE signature');
+        return canonical;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Validate an automatically discovered npm shim against Codex's own package, not just its name. */
+export function validateWindowsCodexNpmEntry(path) {
+    try {
+        const root = join(dirname(path), 'node_modules', '@openai', 'codex');
+        const manifestPath = join(root, 'package.json');
+        if (statSync(manifestPath).size > 128 * 1024)
+            throw new Error('Oversized package metadata');
+        const data = JSON.parse(readFileSync(manifestPath, 'utf8'));
+        const bin = typeof data.bin === 'string' ? data.bin : data.bin?.codex;
+        if (data.name !== '@openai/codex' ||
+            typeof bin !== 'string' ||
+            isAbsolute(bin) ||
+            bin.split(/[\\/]/).includes('..'))
+            throw new Error('Mismatched package identity');
+        const entry = resolveNativeEntry(path, 'win32');
+        if (realpathSync(entry) !== realpathSync(resolve(root, bin)))
+            throw new Error('Mismatched package entry');
+        return path;
+    }
+    catch {
+        throw new WindowsCliInstallationError('Codex npm 安装入口无法确认，请检查安装', true);
+    }
+}
+export function presentWindowsCliCandidate(cli, options = {}) {
+    for (const path of windowsCliCandidates(cli, options)) {
+        try {
+            lstatSync(path);
+        }
+        catch (error) {
+            if (['ENOENT', 'ENOTDIR'].includes(error.code ?? ''))
+                continue;
+            throw new WindowsCliInstallationError('Windows CLI 安装入口无法读取，请检查安装', true);
+        }
+        if (cli === 'codex')
+            return validateWindowsCodexNpmEntry(path);
+        try {
+            const entry = resolveNativeEntry(path, 'win32');
+            if (/\.exe$/i.test(entry))
+                nativePe(entry);
+            else if (entry !== path || !/\.cmd$/i.test(entry))
+                throw new Error('Unsupported Hermes entry');
+            // Fixed Python cmd launchers are statically checked by resolveNativeEntry;
+            // the existing Hermes verifier preserves the installer's own interpreter.
+            return path;
+        }
+        catch {
+            throw new WindowsCliInstallationError('Hermes Windows 安装入口无法确认，请检查安装', true);
+        }
+    }
+    return undefined;
+}
+const codexFamily = 'OpenAI.Codex_2p2nqsd0c76g0';
+const codexPublisher = 'CN=50BDFD77-8903-4850-9FFE-6E8522F64D5B';
+/** Query current-user registered packages, never guess the newest WindowsApps directory. */
+export const CODEX_APPX_QUERY = `$ErrorActionPreference='Stop'; [Console]::OutputEncoding=[Text.UTF8Encoding]::new($false); $p=@(Get-AppxPackage -Name 'OpenAI.Codex'); if($p.Count -eq 0){'null';exit 0}; if($p.Count -ne 1){throw 'Ambiguous Codex package'}; $v=$p[0]; [ordered]@{name=$v.Name;family=$v.PackageFamilyName;fullName=$v.PackageFullName;publisher=$v.Publisher;signature=[string]$v.SignatureKind;status=[string]$v.Status;location=$v.InstallLocation}|ConvertTo-Json -Compress`;
+/** Exported separately for synthetic identity/relocation tests; no process or account access. */
+export function codexAppxExecutable(raw, validateFile = nativePe) {
+    try {
+        const value = JSON.parse(raw.trim());
+        if (value === null)
+            return undefined;
+        if (!value || typeof value !== 'object' || Array.isArray(value))
+            throw new Error('Invalid package record');
+        const p = value;
+        if (p.name !== 'OpenAI.Codex' ||
+            p.family !== codexFamily ||
+            p.publisher !== codexPublisher ||
+            p.signature !== 'Store' ||
+            p.status !== 'Ok' ||
+            typeof p.fullName !== 'string' ||
+            !/^OpenAI\.Codex_\d+(?:\.\d+){3}_(?:x64|arm64|x86)__2p2nqsd0c76g0$/.test(p.fullName) ||
+            typeof p.location !== 'string' ||
+            !win32.isAbsolute(p.location) ||
+            p.location.includes('\0') ||
+            p.location.startsWith('\\\\') ||
+            win32.basename(p.location).toLowerCase() !== p.fullName.toLowerCase())
+            throw new Error('Unverified package identity');
+        const candidate = win32.join(p.location, 'app', 'resources', 'codex.exe');
+        const canonical = validateFile(candidate);
+        // A registered package's CLI must stay in that package; never follow a swapped link elsewhere.
+        if (win32.normalize(canonical).toLowerCase() !== win32.normalize(candidate).toLowerCase())
+            throw new Error('Redirected package entry');
+        return canonical;
+    }
+    catch {
+        throw unavailableCodex();
+    }
+}
+export async function findWindowsCodexAppx(capture, signal, env = process.env) {
+    signal.throwIfAborted();
+    const windows = env.SystemRoot || env.WINDIR || 'C:\\Windows';
+    if (!win32.isAbsolute(windows))
+        throw new WindowsCliInstallationError('Windows 系统目录配置无效');
+    const command = win32.join(windows, 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
+    const encoded = Buffer.from(CODEX_APPX_QUERY, 'utf16le').toString('base64');
+    const raw = await capture([command, '-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', encoded], homedir());
+    signal.throwIfAborted();
+    return codexAppxExecutable(raw);
+}
+//# sourceMappingURL=windows-cli-installation.js.map

package/lib/types/host/windows-cli-installation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-cli-installation.js","sourceRoot":"","sources":["../../../src/host/windows-cli-installation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,QAAQ,GACT,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAExD,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAIzC;IAHF,IAAI,GAAG,8BAA8B,CAAA;IAC9C,YACE,OAAe,EACN,YAAY,KAAK;QAE1B,KAAK,CAAC,OAAO,CAAC,CAAA;QAFL,cAAS,GAAT,SAAS,CAAQ;QAG1B,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAA;IAC3C,CAAC;CACF;AAGD,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAC5B,IAAI,2BAA2B,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;AAExE,SAAS,SAAS,CAAC,GAAsB,EAAE,IAAY,EAAE,QAAgB;IACvE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAA;IAC3C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,2BAA2B,CAAC,sBAAsB,CAAC,CAAA;IACrF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,GAAuB,EAAE,UAA8B,EAAE;IAC5F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EACpC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAA;IAClC,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpF,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAA;IACjC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC3F,OAAO;QACL,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC;KAC5D,CAAA;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gCAAgC,CAAC,UAA8B,EAAE;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EACpC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAA;IAClC,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,EAClC,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,EACxB,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EACvB,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI;YAChG,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QACtC,IACE,MAAM,GAAG,EAAE;YACX,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI;YACtB,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;YAC3C,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,UAAU;YAExC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;QACzC,OAAO,SAAS,CAAA;IAClB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAA;IACf,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;QACpE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;QAC/C,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC3F,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;QAC3D,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAA;QACrE,IACE,IAAI,CAAC,IAAI,KAAK,eAAe;YAC7B,OAAO,GAAG,KAAK,QAAQ;YACvB,UAAU,CAAC,GAAG,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAEjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAChD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC/C,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QACzG,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAA2B,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAA;IACzE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,GAAuB,EACvB,UAA8B,EAAE;IAEhC,KAAK,MAAM,IAAI,IAAI,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,CAAA;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,SAAQ;YACzF,MAAM,IAAI,2BAA2B,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,GAAG,KAAK,OAAO;YAAE,OAAO,4BAA4B,CAAC,IAAI,CAAC,CAAA;QAC9D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YAC/C,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;iBACrC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC9F,2EAA2E;YAC3E,0EAA0E;YAC1E,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,2BAA2B,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,WAAW,GAAG,4BAA4B,CAAA;AAChD,MAAM,cAAc,GAAG,yCAAyC,CAAA;AAEhE,4FAA4F;AAC5F,MAAM,CAAC,MAAM,gBAAgB,GAAG,mcAAmc,CAAA;AAYne,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,eAAyC,QAAQ;IAEjD,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;QAC7C,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC1G,MAAM,CAAC,GAAG,KAAwB,CAAA;QAClC,IACE,CAAC,CAAC,IAAI,KAAK,cAAc;YACzB,CAAC,CAAC,MAAM,KAAK,WAAW;YACxB,CAAC,CAAC,SAAS,KAAK,cAAc;YAC9B,CAAC,CAAC,SAAS,KAAK,OAAO;YACvB,CAAC,CAAC,MAAM,KAAK,IAAI;YACjB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAC9B,CAAC,kEAAkE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YACpF,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAC9B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC7B,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAC7B,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE;YAErE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAChD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;QACzE,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;QACzC,+FAA+F;QAC/F,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YACvF,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC7C,OAAO,SAAS,CAAA;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,gBAAgB,EAAE,CAAA;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAyD,EACzD,MAAmB,EACnB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,IAAI,aAAa,CAAA;IAC7D,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,2BAA2B,CAAC,kBAAkB,CAAC,CAAA;IACzF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAA;IAC9F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC3E,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,CAAC,EACjF,OAAO,EAAE,CACV,CAAA;IACD,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAA;AACjC,CAAC"}

package/lib/types/host/windows-hidden-launch.mjs

@@ -0,0 +1,49 @@
+// A GUI-subsystem Electron root avoids Windows Terminal's console delegation.
+// The enclosing Harness Job still owns this root and every native descendant.
+import { Socket } from 'node:net'
+import { forwardNativeStdio, spawnNativeProcess } from './native-spawn.mjs'
+
+// Pinned Harness 0.2.0-rc.2 public control contract. This helper must remain
+// self-contained: an ordinary child does not use the Host's SDK module loader.
+const marker = process.env.DSH_SUBPROCESS_CONTROL
+delete process.env.DSH_SUBPROCESS_CONTROL
+if (marker !== 'pipe') throw new Error('Windows background control channel is unavailable')
+const control = new Socket({ fd: 7, readable: true, writable: true, allowHalfOpen: true })
+let child, sent = false
+function receipt(value) {
+  if (sent) return
+  sent = true
+  control.end(JSON.stringify(value) + '\n', () => control.destroy())
+}
+control.on('error', () => {
+  child?.kill('SIGTERM')
+  process.exitCode = 1
+})
+try {
+  const [encoded, executable, ...argv] = process.argv.slice(2)
+  const restore = JSON.parse(encoded)
+  if (!restore || !Object.hasOwn(restore, 'nodeEnv') ||
+      (restore.nodeEnv !== null && typeof restore.nodeEnv !== 'string') || !executable)
+    throw new Error('Invalid fixed bootstrap arguments')
+  if (restore.privateUmask === true) process.umask(0o077)
+  // ELECTRON_RUN_AS_NODE belongs only to this GUI bootstrap. Preserve the
+  // original target environment, including an explicit deletion of that value.
+  const env = { ...process.env }
+  for (const key of Object.keys(env))
+    if (key.toUpperCase() === 'ELECTRON_RUN_AS_NODE') delete env[key]
+  if (restore.nodeEnv !== null) env.ELECTRON_RUN_AS_NODE = restore.nodeEnv
+  child = spawnNativeProcess(executable, argv, { env, stdio: ['pipe', 'pipe', 'pipe'], detached: false })
+  forwardNativeStdio(child)
+  child.once('error', error => receipt({
+    kind: 'spawn-error',
+    code: ['ENOENT', 'EACCES', 'ENOEXEC', 'EINVAL'].includes(error.code) ? error.code : 'UNKNOWN',
+  }))
+  // A descendant may keep these pipes open after the native parent exits.
+  // Report its actual exit now; keep forwarding bytes until the pipes close.
+  // The Host's original Job remains responsible for the entire process range.
+  child.once('exit', (exitCode, signal) => receipt({ kind: 'exit', exitCode, signal }))
+  for (const signal of ['SIGTERM', 'SIGINT'])
+    process.on(signal, () => child.kill(signal))
+} catch {
+  receipt({ kind: 'spawn-error', code: 'UNKNOWN' })
+}

package/lib/types/host/windows-hidden-process.d.ts

@@ -0,0 +1,12 @@
+import type { SubprocessHandle, SubprocessSpawnSpec } from '@deepseek-ai/dsh-subprocess';
+import type { ProcessBackend } from './process.ts';
+export declare const isCurrentWindowsRuntime: (value: string) => boolean;
+/** Only console-subsystem targets need a GUI bootstrap. Existing Node helpers
+ * already use Electron's GUI executable; terminal allocation stays untouched. */
+export declare function needsWindowsHiddenLaunch(argv: readonly string[], platform: NodeJS.Platform, electron: boolean): boolean;
+/** Window presentation only: all byte streams, collection and process-range
+ * ownership remain the SDK's. Native exit facts travel over a private channel,
+ * never stdout/stderr and never the native CLI's credential/session protocol. */
+export declare function spawnWindowsHidden(backend: ProcessBackend, spec: SubprocessSpawnSpec, options?: {
+    privateUmask?: true;
+}): SubprocessHandle;

package/lib/types/host/windows-hidden-process.js

@@ -0,0 +1,116 @@
+import { win32 } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const failure = () => new Error('Windows 后台 CLI 启动回执异常');
+const bootstrap = fileURLToPath(new URL('./windows-hidden-launch.mjs', import.meta.url));
+export const isCurrentWindowsRuntime = (value) => win32.normalize(value).toLowerCase() === win32.normalize(process.execPath).toLowerCase();
+/** Only console-subsystem targets need a GUI bootstrap. Existing Node helpers
+ * already use Electron's GUI executable; terminal allocation stays untouched. */
+export function needsWindowsHiddenLaunch(argv, platform, electron) {
+    return platform === 'win32' && electron && !isCurrentWindowsRuntime(argv[0]);
+}
+function nodeEnvironment(env) {
+    let value;
+    for (const [key, entry] of Object.entries(process.env))
+        if (key.toUpperCase() === 'ELECTRON_RUN_AS_NODE')
+            value = entry;
+    for (const [key, entry] of Object.entries(env ?? {}))
+        if (key.toUpperCase() === 'ELECTRON_RUN_AS_NODE')
+            value = entry;
+    return value ?? null;
+}
+/** Window presentation only: all byte streams, collection and process-range
+ * ownership remain the SDK's. Native exit facts travel over a private channel,
+ * never stdout/stderr and never the native CLI's credential/session protocol. */
+export function spawnWindowsHidden(backend, spec, options = {}) {
+    // Current plugin calls do not use this channel. Never silently take a future
+    // consumer's control protocol or downgrade to an unhidden spawn.
+    if (spec.stdio.control)
+        throw new Error('Windows 后台 CLI 启动不能复用已占用的控制通道');
+    const inner = backend.spawn({
+        ...spec,
+        argv: [process.execPath, bootstrap, JSON.stringify({ nodeEnv: nodeEnvironment(spec.env), ...options }), ...spec.argv],
+        env: { ...spec.env, ELECTRON_RUN_AS_NODE: '1' },
+        stdio: { ...spec.stdio, control: 'pipe' },
+    });
+    let cancelled = false, bytes = 0, raw = '', invalid = false;
+    const channel = inner.control;
+    if (!channel)
+        inner.terminate();
+    // Attach readers immediately so a fast metadata process cannot fill a pipe.
+    const reading = channel ? new Promise((resolve) => {
+        channel.on('data', (chunk) => {
+            bytes += Buffer.byteLength(chunk);
+            if (bytes > 1024) {
+                invalid = true;
+                channel.destroy();
+                inner.terminate();
+            }
+            else
+                raw += String(chunk);
+        });
+        channel.once('error', () => { invalid = true; inner.terminate(); resolve(); });
+        channel.once('end', resolve);
+        channel.once('close', resolve);
+    }) : Promise.resolve();
+    // A native parent can exit while its descendants retain stdout/stderr. The
+    // GUI relay must remain alive to forward those bytes, so its exit cannot be
+    // used as the native process's completion signal. Keep range exit on the SDK.
+    const outerDone = inner.done.then(async (outer) => {
+        let timer;
+        try {
+            await Promise.race([reading, new Promise((_, reject) => {
+                    timer = setTimeout(() => reject(failure()), 1000);
+                })]);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        return outer;
+    });
+    void outerDone.catch(() => inner.terminate());
+    const done = (async () => {
+        try {
+            if (!channel) {
+                await inner.done;
+                throw failure();
+            }
+            const outer = await Promise.race([reading.then(() => undefined), outerDone]);
+            if (cancelled || spec.signal?.aborted)
+                return await inner.done;
+            if (invalid || (outer && (outer.exitCode !== 0 || outer.signal)))
+                throw failure();
+            const value = JSON.parse(raw);
+            if (!value || typeof value !== 'object' || Array.isArray(value))
+                throw failure();
+            if (value.kind === 'spawn-error' && ['ENOENT', 'EACCES', 'ENOEXEC', 'EINVAL', 'UNKNOWN'].includes(value.code))
+                throw Object.assign(new Error('Windows 后台 CLI 无法启动'), { code: value.code });
+            if (value.kind !== 'exit' ||
+                !(value.exitCode === null || (Number.isInteger(value.exitCode) && value.exitCode >= -2147483648 && value.exitCode <= 4294967295)) ||
+                !(value.signal === null || (typeof value.signal === 'string' && /^SIG[A-Z0-9]+$/.test(value.signal))) ||
+                (value.exitCode === null) === (value.signal === null))
+                throw failure();
+            return { exitCode: value.exitCode, signal: value.signal };
+        }
+        catch (error) {
+            inner.terminate();
+            if (error instanceof SyntaxError)
+                throw failure();
+            throw error;
+        }
+        finally {
+            channel?.destroy();
+        }
+    })();
+    void done.catch(() => undefined);
+    return {
+        stdin: inner.stdin,
+        stdout: inner.stdout,
+        stderr: inner.stderr,
+        collected: inner.collected,
+        control: undefined,
+        done,
+        terminate: () => { cancelled = true; channel?.destroy(); inner.terminate(); },
+        waitForExit: (signal) => inner.waitForExit(signal),
+    };
+}
+//# sourceMappingURL=windows-hidden-process.js.map

package/lib/types/host/windows-hidden-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-hidden-process.js","sourceRoot":"","sources":["../../../src/host/windows-hidden-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAIxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;AACxD,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAA;AAElJ;iFACiF;AACjF,MAAM,UAAU,wBAAwB,CAAC,IAAuB,EAAE,QAAyB,EAAE,QAAiB;IAC5G,OAAO,QAAQ,KAAK,OAAO,IAAI,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,eAAe,CAAC,GAAuB;IAC9C,IAAI,KAAyB,CAAA;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QACpD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,sBAAsB;YAAE,KAAK,GAAG,KAAK,CAAA;IACjE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;QAClD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,sBAAsB;YAAE,KAAK,GAAG,KAAK,CAAA;IACjE,OAAO,KAAK,IAAI,IAAI,CAAA;AACtB,CAAC;AAED;;iFAEiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,OAAuB,EAAE,IAAyB,EAAE,UAAmC,EAAE;IAC1H,6EAA6E;IAC7E,iEAAiE;IACjE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACxE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC1B,GAAG,IAAI;QACP,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACrH,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE;QAC/C,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;KAC1C,CAAC,CAAA;IACF,IAAI,SAAS,GAAG,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,OAAO,GAAG,KAAK,CAAA;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAC7B,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,SAAS,EAAE,CAAA;IAC/B,4EAA4E;IAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACtD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAC5C,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;YACjC,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;gBACjB,OAAO,GAAG,IAAI,CAAA;gBACd,OAAO,CAAC,OAAO,EAAE,CAAA;gBACjB,KAAK,CAAC,SAAS,EAAE,CAAA;YACnB,CAAC;;gBAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAA;QAC7B,CAAC,CAAC,CAAA;QACF,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;QAC7E,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAC5B,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAChC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IACtB,2EAA2E;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAChD,IAAI,KAAgD,CAAA;QACpD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC5D,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;gBACnD,CAAC,CAAC,CAAC,CAAC,CAAA;QACN,CAAC;gBAAS,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAAC,CAAC;QACjC,OAAO,KAAK,CAAA;IACd,CAAC,CAAC,CAAA;IACF,KAAK,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;IAC7C,MAAM,IAAI,GAAG,CAAC,KAAK,IAAgC,EAAE;QACnD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAC,IAAI,CAAC;gBAAC,MAAM,OAAO,EAAE,CAAA;YAAC,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;YAC5E,IAAI,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,OAAO,MAAM,KAAK,CAAC,IAAI,CAAA;YAC9D,IAAI,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;gBAAE,MAAM,OAAO,EAAE,CAAA;YACjF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC7B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,OAAO,EAAE,CAAA;YAChF,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC3G,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YAC7E,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBACrB,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC;gBACjI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;gBACrG,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC;gBAAE,MAAM,OAAO,EAAE,CAAA;YAC1E,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,SAAS,EAAE,CAAA;YACjB,IAAI,KAAK,YAAY,WAAW;gBAAE,MAAM,OAAO,EAAE,CAAA;YACjD,MAAM,KAAK,CAAA;QACb,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,OAAO,EAAE,CAAA;QACpB,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IACJ,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAChC,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,SAAS;QAClB,IAAI;QACJ,SAAS,EAAE,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAA,CAAC,CAAC;QAC5E,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;KACnD,CAAA;AACH,CAAC"}

package/lib/types/host/zcode-account-models.d.ts

@@ -0,0 +1,16 @@
+/** Native standalone-account-provider-runtime.js identity binding (ZCode 0.16.9).
+ * Keys remain in the Host and are used only for the corresponding native route.
+ * OAuth access/refresh tokens and old identities are deliberately not fallbacks.
+ */
+export declare function readZCodeAccountBindings(authDirectory: string, providerIds: string[], options?: {
+    signal?: AbortSignal;
+    credentialSecret?: string;
+}): Promise<Map<string, {
+    identity: string;
+    key: string;
+}>>;
+/** Key-only view retained for account-scoped metadata queries. */
+export declare function readZCodeAccountApiKeys(authDirectory: string, providerIds: string[], options?: {
+    signal?: AbortSignal;
+    credentialSecret?: string;
+}): Promise<Map<string, string>>;

package/lib/types/host/zcode-account-models.js

@@ -0,0 +1,114 @@
+import { constants } from 'node:fs';
+import { lstat, open } from 'node:fs/promises';
+import { createHash, createDecipheriv } from 'node:crypto';
+import { homedir, platform, userInfo } from 'node:os';
+import { join } from 'node:path';
+/** Native standalone-account-provider-runtime.js identity binding (ZCode 0.16.9).
+ * Keys remain in the Host and are used only for the corresponding native route.
+ * OAuth access/refresh tokens and old identities are deliberately not fallbacks.
+ */
+export async function readZCodeAccountBindings(authDirectory, providerIds, options = {}) {
+    const result = new Map();
+    if (!providerIds.length)
+        return result;
+    options.signal?.throwIfAborted();
+    let file;
+    const buffer = Buffer.alloc(64 * 1024 + 1);
+    let key;
+    try {
+        for (const directory of [
+            authDirectory,
+            join(authDirectory, '.zcode'),
+            join(authDirectory, '.zcode/v2'),
+        ]) {
+            const info = await lstat(directory);
+            if (!info.isDirectory() || info.isSymbolicLink())
+                throw new Error('Unsafe ZCode credential directory');
+        }
+        file = await open(join(authDirectory, '.zcode/v2/credentials.json'), constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        const info = await file.stat();
+        if (!info.isFile() || info.nlink !== 1 || info.size > 64 * 1024 || !info.size)
+            throw new Error('Unsafe ZCode credential file');
+        let length = 0;
+        while (length < buffer.length) {
+            options.signal?.throwIfAborted();
+            const { bytesRead } = await file.read(buffer, length, buffer.length - length, null);
+            if (!bytesRead)
+                break;
+            length += bytesRead;
+        }
+        const after = await file.stat();
+        if (length > 64 * 1024 ||
+            length !== info.size ||
+            info.size !== after.size ||
+            info.mtimeMs !== after.mtimeMs)
+            throw new Error('ZCode credentials changed during read');
+        const raw = JSON.parse(buffer.subarray(0, length).toString('utf8'));
+        if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+            throw new Error('Invalid ZCode credentials');
+        const values = raw;
+        let username = 'unknown';
+        try {
+            username = userInfo().username;
+        }
+        catch {
+            /* native fallback */
+        }
+        const secret = (options.credentialSecret ?? process.env.ZCODE_CREDENTIAL_SECRET?.trim()) ||
+            `zcode-credential-fallback:${platform()}:${homedir()}:${username}`;
+        key = createHash('sha256').update(secret).digest();
+        const decode = (id) => {
+            const value = values[id];
+            if (value == null)
+                return;
+            if (typeof value !== 'string')
+                throw new Error('Invalid ZCode credential value');
+            if (!value.startsWith('enc:v1:'))
+                return value.trim() || undefined;
+            const parts = value.slice(7).split('.');
+            if (parts.length !== 3 || parts.some((part) => !/^[A-Za-z0-9_-]+$/.test(part)))
+                throw new Error('Invalid ZCode cipher');
+            const [iv, tag, body] = parts.map((part) => Buffer.from(part, 'base64url'));
+            if (iv.length !== 12 || tag.length !== 16)
+                throw new Error('Invalid ZCode cipher');
+            const cipher = createDecipheriv('aes-256-gcm', key, iv);
+            cipher.setAuthTag(tag);
+            const plain = Buffer.concat([cipher.update(body), cipher.final()]);
+            try {
+                return plain.toString('utf8').trim() || undefined;
+            }
+            finally {
+                plain.fill(0);
+            }
+        };
+        for (const providerId of new Set(providerIds)) {
+            options.signal?.throwIfAborted();
+            const identity = decode(`account-provider:${providerId}:identity`);
+            if (!identity)
+                continue;
+            const apiKey = decode(`account-provider:coding-plan:${providerId}:account:${encodeURIComponent(identity)}:api-key`);
+            if (apiKey)
+                result.set(providerId, { identity, key: apiKey });
+        }
+        return result;
+    }
+    catch (error) {
+        options.signal?.throwIfAborted();
+        if (error.code === 'ENOENT')
+            return result;
+        throw new Error('无法安全读取 ZCode 当前账号的 Worker 凭据，请在原生登录设置中检查');
+    }
+    finally {
+        key?.fill(0);
+        buffer.fill(0);
+        await file?.close();
+    }
+}
+/** Key-only view retained for account-scoped metadata queries. */
+export async function readZCodeAccountApiKeys(authDirectory, providerIds, options = {}) {
+    return new Map([...(await readZCodeAccountBindings(authDirectory, providerIds, options))].map(([provider, value]) => [
+        provider,
+        value.key,
+    ]));
+}
+//# sourceMappingURL=zcode-account-models.js.map

package/lib/types/host/zcode-account-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zcode-account-models.js","sourceRoot":"","sources":["../../../src/host/zcode-account-models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,aAAqB,EACrB,WAAqB,EACrB,UAA+D,EAAE;IAEjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6C,CAAA;IACnE,IAAI,CAAC,WAAW,CAAC,MAAM;QAAE,OAAO,MAAM,CAAA;IACtC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,IAAI,IAAkD,CAAA;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAA;IAC1C,IAAI,GAAuB,CAAA;IAC3B,IAAI,CAAC;QACH,KAAK,MAAM,SAAS,IAAI;YACtB,aAAa;YACb,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC;YAC7B,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC;SACjC,EAAE,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAA;YACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QACxG,CAAC;QACD,IAAI,GAAG,MAAM,IAAI,CACf,IAAI,CAAC,aAAa,EAAE,4BAA4B,CAAC,EACjD,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CACjE,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI;YAC3E,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACjD,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;YAChC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAA;YACnF,IAAI,CAAC,SAAS;gBAAE,MAAK;YACrB,MAAM,IAAI,SAAS,CAAA;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC/B,IACE,MAAM,GAAG,EAAE,GAAG,IAAI;YAClB,MAAM,KAAK,IAAI,CAAC,IAAI;YACpB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YACxB,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAE9B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAC1D,MAAM,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QACvG,MAAM,MAAM,GAAG,GAA8B,CAAA;QAC7C,IAAI,QAAQ,GAAG,SAAS,CAAA;QACxB,IAAI,CAAC;YACH,QAAQ,GAAG,QAAQ,EAAE,CAAC,QAAQ,CAAA;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;QACD,MAAM,MAAM,GACV,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;YACzE,6BAA6B,QAAQ,EAAE,IAAI,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAA;QACpE,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAA;QAClD,MAAM,MAAM,GAAG,CAAC,EAAU,EAAsB,EAAE;YAChD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAA;YACxB,IAAI,KAAK,IAAI,IAAI;gBAAE,OAAM;YACzB,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;YAChF,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,SAAS,CAAA;YAClE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5E,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;YACzC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAA;YAC3E,IAAI,EAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAI,CAAC,MAAM,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;YACpF,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAI,EAAE,EAAG,CAAC,CAAA;YACzD,MAAM,CAAC,UAAU,CAAC,GAAI,CAAC,CAAA;YACvB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAK,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YACnE,IAAI,CAAC;gBACH,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAA;YACnD,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACf,CAAC;QACH,CAAC,CAAA;QACD,KAAK,MAAM,UAAU,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,UAAU,WAAW,CAAC,CAAA;YAClE,IAAI,CAAC,QAAQ;gBAAE,SAAQ;YACvB,MAAM,MAAM,GAAG,MAAM,CACnB,gCAAgC,UAAU,YAAY,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAC7F,CAAA;YACD,IAAI,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAChC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAA;QACrE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;YAAS,CAAC;QACT,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACZ,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,IAAI,EAAE,KAAK,EAAE,CAAA;IACrB,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAAqB,EACrB,WAAqB,EACrB,UAA+D,EAAE;IAEjE,OAAO,IAAI,GAAG,CACZ,CAAC,GAAG,CAAC,MAAM,wBAAwB,CAAC,aAAa,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACpG,QAAQ;QACR,KAAK,CAAC,GAAG;KACV,CAAC,CACH,CAAA;AACH,CAAC"}