dsh-cliworker-now 0.7.6 → 0.7.7

package/lib/native-launch.mjs

@@ -1,9 +1,12 @@
 // Inspect fixed launcher data; never ask a shell to interpret CLI arguments.
 import { openSync, readSync, fstatSync, closeSync, realpathSync, statSync, existsSync } from 'node:fs'
-import { dirname, extname, isAbsolute, resolve, sep, delimiter, join } from 'node:path'
+import { basename, dirname, extname, isAbsolute, relative, resolve, sep, delimiter, join } from 'node:path'
 import { homedir, userInfo } from 'node:os'
 
-const invalid = () => new Error('CLI 启动入口无法确认，请配置原生程序或固定 Node/Bun 入口')
+const invalid = () => Object.assign(
+  new Error('CLI 启动入口无法确认，请配置原生程序或固定 Node/Bun 入口'),
+  { code: 'CLI_LAUNCHER_UNSUPPORTED' },
+)
 const batch = (value) => /\.(?:cmd|bat)$/i.test(value)
 function text(path, limit = 128 * 1024) {
   const descriptor = openSync(path, 'r')
@@ -73,6 +76,45 @@ function runtimeProgram(runtime, platform, launcherDirectory) {
   if (!candidate) throw new Error('未找到 Bun，请安装该 CLI 所需的 Bun 运行时')
   return file(candidate)
 }
+/** npm's native bin shim is data, not a batch program to execute. */
+function nativePackageBin(shim, suffix) {
+  const parts = suffix.replace(/\\/g, '/').split('/')
+  if (parts[0] !== 'node_modules' || parts.some((part) => !part || part === '.' || part === '..'))
+    throw invalid()
+  const scoped = parts[1]?.startsWith('@')
+  const name = parts.slice(1, scoped ? 3 : 2).join('/')
+  if (!/^(?:@[a-z0-9._-]+\/)?[a-z0-9._-]+$/.test(name)) throw invalid()
+  const root = fileDirectory(resolve(dirname(shim), ...parts.slice(0, scoped ? 3 : 2)))
+  const entry = file(resolve(dirname(shim), ...parts))
+  const inside = relative(root, entry)
+  if (!inside || inside === '..' || inside.startsWith('..' + sep) || isAbsolute(inside)) throw invalid()
+  const manifest = JSON.parse(text(join(root, 'package.json')))
+  const command = basename(shim, extname(shim))
+  const declared = typeof manifest.bin === 'string'
+    ? name.split('/').at(-1) === command ? manifest.bin : undefined
+    : manifest.bin?.[command]
+  if (manifest.name !== name || typeof declared !== 'string' || isAbsolute(declared) ||
+    declared.replace(/\\/g, '/').split('/').includes('..') || file(resolve(root, declared)) !== entry)
+    throw invalid()
+  const descriptor = openSync(entry, 'r')
+  try {
+    const header = Buffer.alloc(64), signature = Buffer.alloc(4)
+    const size = fstatSync(descriptor).size
+    if (readSync(descriptor, header, 0, 64, 0) !== 64 || header.toString('ascii', 0, 2) !== 'MZ')
+      throw invalid()
+    const offset = header.readUInt32LE(0x3c)
+    if (offset < 64 || offset + 4 > size || readSync(descriptor, signature, 0, 4, offset) !== 4 ||
+      signature.toString('hex') !== '50450000') throw invalid()
+  } finally {
+    closeSync(descriptor)
+  }
+  return entry
+}
+function fileDirectory(path) {
+  const canonical = realpathSync(path)
+  if (!statSync(canonical).isDirectory()) throw invalid()
+  return canonical
+}
 function inspectBatch(executable, platform) {
   const source = text(file(executable)).trim().replace(/\r\n/g, '\n')
   // Nous' official fallback contains just a fixed interpreter and its encoded
@@ -101,8 +143,14 @@ function inspectBatch(executable, platform) {
     // npm cmd-shim's standard final control prefix is launcher boilerplate;
     // it is discarded, and nothing from it is executed by this module.
     line = line.replace(/^endLocal & goto #_undefined_# 2>NUL \|\| title [^&\n]+ & /i, '')
+    const native = /^@?"%(?:~dp0[\\/]?|dp0%[\\/])([^"\n%]+\.exe)"\s+%\*$/i.exec(line)
+    if (native) {
+      entries.add(nativePackageBin(executable, native[1]))
+      runtimes.add('native')
+      continue
+    }
     const command =
-      /^@?(?:(node|bun)|"%_prog%"|"%(?:~dp0|dp0%)[\\/](node|bun)\.exe")\s+"%(?:~dp0|dp0%)[\\/]([^"\n%]+)"\s+%\*$/i.exec(
+      /^@?(?:(node|bun)|"%_prog%"|"%(?:~dp0[\\/]?|dp0%[\\/])(node|bun)\.exe")\s+"%(?:~dp0[\\/]?|dp0%[\\/])([^"\n%]+)"\s+%\*$/i.exec(
         line,
       )
     if (command) {
@@ -112,7 +160,7 @@ function inspectBatch(executable, platform) {
       if (command[1] || command[2]) runtimes.add((command[1] || command[2]).toLowerCase())
       continue
     }
-    const program = /^@?set "?_prog=(?:%(?:~dp0|dp0%)[\\/])?(node|bun)(?:\.exe)?"?$/i.exec(line)
+    const program = /^@?set "?_prog=(?:%(?:~dp0[\\/]?|dp0%[\\/]))?(node|bun)(?:\.exe)?"?$/i.exec(line)
     if (program) {
       runtimes.add(program[1].toLowerCase())
       continue
@@ -121,7 +169,7 @@ function inspectBatch(executable, platform) {
       /^@?(?:goto start|:find_dp0|:start|set dp0=%~dp0|exit \/b|setlocal|endlocal|call :find_dp0)$/i.test(
         line,
       ) ||
-      /^@?if (?:not )?exist "%(?:~dp0|dp0%)[\\/](?:node|bun)\.exe" \($/i.test(line) ||
+      /^@?if (?:not )?exist "%(?:~dp0[\\/]?|dp0%[\\/])(?:node|bun)\.exe" \($/i.test(line) ||
       /^\)(?: else \()?$/i.test(line) ||
       /^@?set pathext=%pathext:;\.js;=;%$/i.test(line) ||
       /^@?if (?:not )?defined node_path \($/i.test(line) ||
@@ -133,6 +181,7 @@ function inspectBatch(executable, platform) {
   if (entries.size !== 1 || runtimes.size !== 1) throw invalid()
   const entry = [...entries][0],
     runtime = [...runtimes][0]
+  if (runtime === 'native') return { kind: 'native', argv: [entry] }
   if (scriptRuntime(entry) !== runtime) throw invalid()
   return { kind: runtime, argv: [runtimeProgram(runtime, platform, dirname(executable)), entry] }
 }
@@ -151,10 +200,16 @@ export function resolveNativeEntry(executable, platform = process.platform) {
     if (candidate) executable = candidate
   }
   if (!batch(executable)) return executable
-  const inspected = inspectBatch(executable, platform)
+  let inspected
+  try {
+    inspected = inspectBatch(executable, platform)
+  } catch {
+    // A present but invalid shim is not an absent CLI. Never forward raw paths or script text.
+    throw invalid()
+  }
   // Keep Bun's fixed shim identity: it may pin a bundled bun.exe beside the
   // shim which cannot be recovered from only the package's JS path.
-  return inspected.kind === 'node' ? inspected.argv[1] : executable
+  return inspected.kind === 'node' ? inspected.argv[1] : inspected.kind === 'native' ? inspected.argv[0] : executable
 }
 
 /** Windows CreateProcess accepts real programs, not npm command files. */

package/lib/native-spawn.mjs

@@ -0,0 +1,32 @@
+import { spawn } from 'node:child_process'
+
+/** Native CLI descendants keep their pipes/ConPTY and the enclosing Host Job.
+ * Window presentation is per child: hiding a wrapper does not hide its children.
+ * Node ignores windowsHide on POSIX, so both platforms use this one boundary.
+ */
+export function spawnNativeProcess(executable, argv, options) {
+  return spawn(executable, argv, { ...options, windowsHide: true })
+}
+
+/** Relay ordinary background pipes as bytes with Node's stream backpressure.
+ * Numeric/inherited descriptors make libuv omit CREATE_NO_WINDOW on Windows.
+ * This must never be used for a ConPTY: its console handles stay inherited. */
+export function forwardNativeStdio(child) {
+  const stopInput = () => {
+    process.stdin.unpipe(child.stdin)
+    process.stdin.destroy()
+  }
+  const fail = () => { child.kill('SIGTERM'); process.exitCode = 1 }
+  child.stdin.on('error', error => { stopInput(); if (error.code !== 'EPIPE') fail() })
+  child.stdin.once('close', stopInput)
+  child.once('exit', stopInput)
+  child.once('error', stopInput)
+  process.stdin.on('error', fail)
+  process.stdout.on('error', fail)
+  process.stderr.on('error', fail)
+  child.stdout.on('error', fail)
+  child.stderr.on('error', fail)
+  process.stdin.pipe(child.stdin)
+  child.stdout.pipe(process.stdout, { end: false })
+  child.stderr.pipe(process.stderr, { end: false })
+}

package/lib/pi-installation.mjs

@@ -1,13 +1,14 @@
 // One verified Pi package for the Host, account UI, native catalog and RPC entry.
 // Resolve installation metadata only; never execute an arbitrary shell launcher.
 import { readFileSync, realpathSync, statSync } from 'node:fs'
-import { basename, dirname, join } from 'node:path'
+import { createHash } from 'node:crypto'
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path'
 import { resolveNativeEntry } from './native-launch.mjs'
 
-const versions = new Set(['1.0.2', '1.0.4'])
+const versions = new Set(['1.0.2', '1.0.4', '1.1.0'])
 const failure = () =>
   Object.assign(
-    new Error('Pi 安装身份或原生接口不匹配；需要 Pi Coding Agent 1.0.2 或 1.0.4，不能使用 OMP 入口'),
+    new Error('Pi 安装身份或原生接口不匹配；需要 Pi Coding Agent 1.0.2、1.0.4 或 1.1.0，不能使用 OMP 入口'),
     { code: 'CLI_IDENTITY_MISMATCH' },
   )
 function metadata(path) {
@@ -15,6 +16,27 @@ function metadata(path) {
   if (!info.isFile() || info.size > 128 * 1024) throw failure()
   return readFileSync(path, 'utf8')
 }
+// Exact official Windows managed launcher inspected from Pi 1.1.0. It is read as
+// installation metadata, never evaluated. Unknown bootstrap code fails closed.
+const managedWindowsLauncherSHA256 = '3d8b27bb3f5c07543303b0ee774ce215e4d6ae2b0ae43311c4acf51f517ffd13'
+function windowsManagedEntry(launcher) {
+  const source = metadata(launcher).trim().replace(/\r\n/g, '\n')
+  if (createHash('sha256').update(source).digest('hex') !== managedWindowsLauncherSHA256) throw failure()
+  const install = join(dirname(dirname(launcher)), 'install')
+  const version = metadata(join(install, 'current-version')).trim()
+  if (!versions.has(version)) throw failure()
+  const directory = resolve(install, 'releases', version, 'node_modules/@earendil-works/pi-coding-agent')
+  // A version pointer/package symlink must not select code outside this release.
+  if (realpathSync(directory) !== directory) throw failure()
+  const manifest = JSON.parse(metadata(join(directory, 'package.json')))
+  const bin = typeof manifest.bin === 'string' ? manifest.bin : manifest.bin?.pi
+  if (manifest.name !== '@earendil-works/pi-coding-agent' || manifest.version !== version ||
+    !['dist/cli.js', 'dist/bundle/cli.js'].includes(bin)) throw failure()
+  const entry = realpathSync(resolve(directory, bin))
+  const inside = relative(directory, entry)
+  if (!inside || inside === '..' || inside.startsWith('..' + sep) || isAbsolute(inside)) throw failure()
+  return entry
+}
 
 export function inspectPiInstallation(entry) {
   try {
@@ -34,6 +56,8 @@ export function inspectPiInstallation(entry) {
       }
     }
     executable = realpathSync(resolveNativeEntry(executable))
+    if (basename(executable).toLowerCase() === 'pi-launcher.js' && basename(dirname(executable)) === 'bin')
+      executable = windowsManagedEntry(executable)
     let directory = dirname(executable)
     for (let depth = 0; depth < 5; depth++, directory = dirname(directory)) {
       let manifest

package/lib/pi-native-catalog.mjs

@@ -1,7 +1,7 @@
 // Native metadata only. No prompts, API keys, OAuth objects, headers or raw errors leave this boundary.
 import { join } from 'node:path'
 import { pathToFileURL } from 'node:url'
-import { spawn } from 'node:child_process'
+import { spawnNativeProcess } from './native-spawn.mjs'
 import { inspectPiInstallation } from './pi-installation.mjs'
 import { nativeLaunchArgv } from './native-launch.mjs'
 
@@ -144,7 +144,7 @@ async function nativeCandidates(
   }
   const args = ['models', '--json', '--no-extensions', '--config', join(directory, 'config.yml')]
   const nativeArgs = nativeLaunchArgv([executable, ...args])
-  const child = spawn(nativeArgs[0], nativeArgs.slice(1), {
+  const child = spawnNativeProcess(nativeArgs[0], nativeArgs.slice(1), {
     cwd: directory,
     env,
     stdio: ['ignore', 'pipe', 'pipe'],

package/lib/pi-omp-bridge.mjs

@@ -1,6 +1,6 @@
 // Subprocess protocol bridge. The Host owns the external sandbox, credentials,
 // deadlines, directory/session locks, and descendant cleanup. No shell is used.
-import { spawn } from 'node:child_process'
+import { spawnNativeProcess } from './native-spawn.mjs'
 import { createHash, randomBytes } from 'node:crypto'
 import { mkdir, writeFile, rename, realpath, unlink, rmdir, lstat, open, rm } from 'node:fs/promises'
 import { constants } from 'node:fs'
@@ -360,7 +360,7 @@ try {
     ]
     const launch = nativeLaunchArgv([config.executable, ...nativeArgs])
     if (stopped) throw new Error('任务已停止')
-    child = spawn(launch[0], launch.slice(1), {
+    child = spawnNativeProcess(launch[0], launch.slice(1), {
       cwd: config.project,
       env,
       detached: false,

package/lib/private-launch.mjs

@@ -1,9 +1,13 @@
 // Set a private file-creation mask without mutating the shared Harness process.
-import { spawn } from 'node:child_process'
+import { forwardNativeStdio, spawnNativeProcess } from './native-spawn.mjs'
 import { nativeLaunchArgv } from './native-launch.mjs'
 process.umask(0o077)
 const [executable, ...argv] = nativeLaunchArgv(process.argv.slice(2))
-const child = spawn(executable, argv, { env: process.env, stdio: 'inherit' })
+// This helper is also used under POSIX PTYs, whose original handles must stay.
+// Windows ConPTY account launch unwraps it in windows-account-launch.mjs.
+const backgroundPipes = process.platform === 'win32'
+const child = spawnNativeProcess(executable, argv, { env: process.env, stdio: backgroundPipes ? ['pipe', 'pipe', 'pipe'] : 'inherit' })
+if (backgroundPipes) forwardNativeStdio(child)
 let stopped = false
 for (const signal of ['SIGTERM', 'SIGINT'])
   process.on(signal, () => {

package/lib/terminal-bridge.mjs

@@ -1,12 +1,12 @@
 // The native terminal owner tracks descendants across their own process groups.
 // Keep this root alive until the Host acknowledges cleanup; never merge stderr
 // into the CLI JSON protocol. Envelopes are transport only, not agent events.
-import { spawn } from 'node:child_process'
+import { spawnNativeProcess } from './native-spawn.mjs'
 import { nativeLaunchArgv } from './native-launch.mjs'
 const [executable, ...args] = nativeLaunchArgv(process.argv.slice(2))
 const send = (channel, fields) => process.stdout.write(JSON.stringify({ channel, ...fields }) + '\n')
 const keepAlive = setInterval(() => {}, 60000)
-const child = spawn(executable, args, { stdio: ['ignore', 'pipe', 'pipe'] })
+const child = spawnNativeProcess(executable, args, { stdio: ['ignore', 'pipe', 'pipe'] })
 child.stdout.on('data', (bytes) => send('stdout', { bytes: bytes.toString('base64') }))
 child.stderr.on('data', (bytes) => send('stderr', { bytes: bytes.toString('base64') }))
 child.on('error', (error) => send('error', { message: error.message }))

package/lib/typert.host.js

@@ -19,6 +19,16 @@ let dsh_cliworker_now_cliworker_accountStart_parameter_2$schema$value
 const dsh_cliworker_now_cliworker_accountStart_parameter_2$schema = () => (dsh_cliworker_now_cliworker_accountStart_parameter_2$schema$value ??= z.string())
 let dsh_cliworker_now_cliworker_accountStart_result$schema$value
 const dsh_cliworker_now_cliworker_accountStart_result$schema = () => (dsh_cliworker_now_cliworker_accountStart_result$schema$value ??= z.string())
+let dsh_cliworker_now_cliworker_accountStartForProvider_parameter_0$schema$value
+const dsh_cliworker_now_cliworker_accountStartForProvider_parameter_0$schema = () => (dsh_cliworker_now_cliworker_accountStartForProvider_parameter_0$schema$value ??= z.string())
+let dsh_cliworker_now_cliworker_accountStartForProvider_parameter_1$schema$value
+const dsh_cliworker_now_cliworker_accountStartForProvider_parameter_1$schema = () => (dsh_cliworker_now_cliworker_accountStartForProvider_parameter_1$schema$value ??= z.string())
+let dsh_cliworker_now_cliworker_accountStartForProvider_parameter_2$schema$value
+const dsh_cliworker_now_cliworker_accountStartForProvider_parameter_2$schema = () => (dsh_cliworker_now_cliworker_accountStartForProvider_parameter_2$schema$value ??= z.string())
+let dsh_cliworker_now_cliworker_accountStartForProvider_parameter_3$schema$value
+const dsh_cliworker_now_cliworker_accountStartForProvider_parameter_3$schema = () => (dsh_cliworker_now_cliworker_accountStartForProvider_parameter_3$schema$value ??= z.string())
+let dsh_cliworker_now_cliworker_accountStartForProvider_result$schema$value
+const dsh_cliworker_now_cliworker_accountStartForProvider_result$schema = () => (dsh_cliworker_now_cliworker_accountStartForProvider_result$schema$value ??= z.string())
 let dsh_cliworker_now_cliworker_accountStartForSource_parameter_0$schema$value
 const dsh_cliworker_now_cliworker_accountStartForSource_parameter_0$schema = () => (dsh_cliworker_now_cliworker_accountStartForSource_parameter_0$schema$value ??= z.string())
 let dsh_cliworker_now_cliworker_accountStartForSource_parameter_1$schema$value
@@ -233,7 +243,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-cliworker-now#cliworker/accountResize:result',
         create: dsh_cliworker_now_cliworker_accountResize_result$schema,
       },
-      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":923,"column":9},
+      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":942,"column":9},
     },
     {
       id: 'dsh-cliworker-now#cliworker/accountStart',
@@ -281,6 +291,62 @@ export const TYPERT = {
       },
       sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":838,"column":9},
     },
+    {
+      id: 'dsh-cliworker-now#cliworker/accountStartForProvider',
+      service: 'cliworker',
+      namespace: 'cliworker',
+      method: 'accountStartForProvider',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'parentSessionId',
+          wire: 'parentSessionId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: 'dsh-cliworker-now#cliworker/accountStartForProvider:parentSessionId',
+            create: dsh_cliworker_now_cliworker_accountStartForProvider_parameter_0$schema,
+          },
+        },
+        {
+          name: 'cli',
+          wire: 'cli',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: 'dsh-cliworker-now#cliworker/accountStartForProvider:cli',
+            create: dsh_cliworker_now_cliworker_accountStartForProvider_parameter_1$schema,
+          },
+        },
+        {
+          name: 'action',
+          wire: 'action',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: 'dsh-cliworker-now#cliworker/accountStartForProvider:action',
+            create: dsh_cliworker_now_cliworker_accountStartForProvider_parameter_2$schema,
+          },
+        },
+        {
+          name: 'provider',
+          wire: 'provider',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: 'dsh-cliworker-now#cliworker/accountStartForProvider:provider',
+            create: dsh_cliworker_now_cliworker_accountStartForProvider_parameter_3$schema,
+          },
+        },
+      ],
+      cancellation: { parameter: 'signal' },
+      result: {
+        mode: 'strict',
+        typeSymbol: 'dsh-cliworker-now#cliworker/accountStartForProvider:result',
+        create: dsh_cliworker_now_cliworker_accountStartForProvider_result$schema,
+      },
+      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":866,"column":9},
+    },
     {
       id: 'dsh-cliworker-now#cliworker/accountStartForSource',
       service: 'cliworker',
@@ -406,7 +472,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-cliworker-now#cliworker/accountStop:result',
         create: dsh_cliworker_now_cliworker_accountStop_result$schema,
       },
-      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":939,"column":9},
+      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":958,"column":9},
     },
     {
       id: 'dsh-cliworker-now#cliworker/accountWatch',
@@ -443,7 +509,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-cliworker-now#cliworker/accountWatch:result',
         create: dsh_cliworker_now_cliworker_accountWatch_result$schema,
       },
-      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":897,"column":10},
+      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":916,"column":10},
     },
     {
       id: 'dsh-cliworker-now#cliworker/accountWrite',
@@ -488,7 +554,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-cliworker-now#cliworker/accountWrite:result',
         create: dsh_cliworker_now_cliworker_accountWrite_result$schema,
       },
-      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":912,"column":9},
+      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":931,"column":9},
     },
     {
       id: 'dsh-cliworker-now#cliworker/catalog',
@@ -514,7 +580,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-cliworker-now#cliworker/catalog:result',
         create: dsh_cliworker_now_cliworker_catalog_result$schema,
       },
-      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":949,"column":9},
+      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":968,"column":9},
     },
     {
       id: 'dsh-cliworker-now#cliworker/catalogForCli',
@@ -550,7 +616,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-cliworker-now#cliworker/catalogForCli:result',
         create: dsh_cliworker_now_cliworker_catalogForCli_result$schema,
       },
-      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":954,"column":9},
+      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":973,"column":9},
     },
     {
       id: 'dsh-cliworker-now#cliworker/cliSettings',
@@ -612,7 +678,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-cliworker-now#cliworker/configure:result',
         create: dsh_cliworker_now_cliworker_configure_result$schema,
       },
-      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":972,"column":9},
+      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":991,"column":9},
     },
     {
       id: 'dsh-cliworker-now#cliworker/configureWorker',
@@ -658,7 +724,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-cliworker-now#cliworker/configureWorker:result',
         create: dsh_cliworker_now_cliworker_configureWorker_result$schema,
       },
-      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":999,"column":9},
+      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":1018,"column":9},
     },
     {
       id: 'dsh-cliworker-now#cliworker/deleteRolePreset',
@@ -776,7 +842,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-cliworker-now#cliworker/followup:result',
         create: dsh_cliworker_now_cliworker_followup_result$schema,
       },
-      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":1033,"column":9},
+      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":1052,"column":9},
     },
     {
       id: 'dsh-cliworker-now#cliworker/history',
@@ -969,7 +1035,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-cliworker-now#cliworker/restartWorker:result',
         create: dsh_cliworker_now_cliworker_restartWorker_result$schema,
       },
-      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":1061,"column":9},
+      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":1080,"column":9},
     },
     {
       id: 'dsh-cliworker-now#cliworker/restoreWorker',
@@ -1148,7 +1214,7 @@ export const TYPERT = {
         typeSymbol: 'dsh-cliworker-now#cliworker/stop:result',
         create: dsh_cliworker_now_cliworker_stop_result$schema,
       },
-      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":1090,"column":9},
+      sourceLocation: {"file":"packages/cliworker/src/host/index.ts","line":1109,"column":9},
     },
     {
       id: 'dsh-cliworker-now#cliworker/watch',
@@ -1282,6 +1348,12 @@ export const TYPERT = {
             "signature": "@Remote('accountStartForSource') async accountStartForSource( parentSessionId: string, cli: string, action: string, source: string, signal: AbortSignal, ): Promise<string>",
             "jsDoc": "/** @param source - One current CLI-native source, never a filesystem path. */"
           },
+          {
+            "kind": "method",
+            "name": "accountStartForProvider",
+            "signature": "@Remote('accountStartForProvider') async accountStartForProvider( parentSessionId: string, cli: string, action: string, provider: string, signal: AbortSignal, ): Promise<string>",
+            "jsDoc": "/** @param provider - Explicit ZCode native login provider, never a URL or logout source. */"
+          },
           {
             "kind": "method",
             "name": "accountWatch",

package/lib/typert.remote-client.d.ts

@@ -9,6 +9,7 @@ declare module '@deepseek-ai/dsh-typert-protocol' {
   interface TypertRemoteNamespace$636c69776f726b6572 {
     accountResize: (parentSessionId: string, accountId: string, cols: number, rows: number) => Promise<RemoteResult<boolean>>
     accountStart: (parentSessionId: string, cli: string, action: string, signal?: AbortSignal) => Promise<RemoteResult<string>>
+    accountStartForProvider: (parentSessionId: string, cli: string, action: string, provider: string, signal?: AbortSignal) => Promise<RemoteResult<string>>
     accountStartForSource: (parentSessionId: string, cli: string, action: string, source: string, signal?: AbortSignal) => Promise<RemoteResult<string>>
     accountStatus: (parentSessionId: string, cli: string, signal?: AbortSignal) => Promise<RemoteResult<string>>
     accountStop: (parentSessionId: string, accountId: string) => Promise<RemoteResult<boolean>>
@@ -36,6 +37,7 @@ declare module '@deepseek-ai/dsh-typert-protocol' {
   interface TypertRemoteMap {
     'cliworker/accountResize': (parentSessionId: string, accountId: string, cols: number, rows: number) => Promise<RemoteResult<boolean>>
     'cliworker/accountStart': (parentSessionId: string, cli: string, action: string, signal?: AbortSignal) => Promise<RemoteResult<string>>
+    'cliworker/accountStartForProvider': (parentSessionId: string, cli: string, action: string, provider: string, signal?: AbortSignal) => Promise<RemoteResult<string>>
     'cliworker/accountStartForSource': (parentSessionId: string, cli: string, action: string, source: string, signal?: AbortSignal) => Promise<RemoteResult<string>>
     'cliworker/accountStatus': (parentSessionId: string, cli: string, signal?: AbortSignal) => Promise<RemoteResult<string>>
     'cliworker/accountStop': (parentSessionId: string, accountId: string) => Promise<RemoteResult<boolean>>

package/lib/typert.remote-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"typert.remote-client.d.ts","names":["accountResize","accountStart","accountStartForSource","accountStatus","accountStop","accountWatch","accountWrite","catalog","catalogForCli","cliSettings","configure","configureWorker","deleteRolePreset","deleteWorker","followup","history","renameWorker","renameWorkerTitle","restartWorker","restoreWorker","rolePresets","saveRolePreset","setCliEnabled","stop","watch"],"sources":["../src/host/index.ts"],"sourcesContent":[null],"mappings":";;;;;;;;;IA05BQA,a;IArFAC,Y;IAWAC,qB;IA3BAC,a;IAqHAC,W;IA1CCC,Y;IAeDC,Y;IAqCAC,O;IAKAC,a;IAhQAC,W;IAkRAC,S;IA2BAC,e;IA1QAC,gB;IA4CAC,Y;IAgQAC,Q;IA7VAC,O;IA6DAC,Y;IAgBAC,iB;IA4SAC,a;IAjRAC,a;IA/EAC,W;IAWAC,c;IA+EAC,a;IAmSAC,I;IArbCC,K;;;IA8QDxB,yB;IArFAC,wB;IAWAC,iC;IA3BAC,yB;IAqHAC,uB;IA1CCC,wB;IAeDC,wB;IAqCAC,mB;IAKAC,yB;IAhQAC,uB;IAkRAC,qB;IA2BAC,2B;IA1QAC,4B;IA4CAC,wB;IAgQAC,oB;IA7VAC,mB;IA6DAC,wB;IAgBAC,6B;IA4SAC,yB;IAjRAC,yB;IA/EAC,uB;IAWAC,0B;IA+EAC,yB;IAmSAC,gB;IArbCC,iB","ignoreList":[]}
+{"version":3,"file":"typert.remote-client.d.ts","names":["accountResize","accountStart","accountStartForProvider","accountStartForSource","accountStatus","accountStop","accountWatch","accountWrite","catalog","catalogForCli","cliSettings","configure","configureWorker","deleteRolePreset","deleteWorker","followup","history","renameWorker","renameWorkerTitle","restartWorker","restoreWorker","rolePresets","saveRolePreset","setCliEnabled","stop","watch"],"sources":["../src/host/index.ts"],"sourcesContent":[null],"mappings":";;;;;;;;;IA66BQA,a;IAxGAC,Y;IA4BAC,uB;IAjBAC,qB;IA3BAC,a;IAwIAC,W;IA1CCC,Y;IAeDC,Y;IAqCAC,O;IAKAC,a;IAnRAC,W;IAqSAC,S;IA2BAC,e;IA7RAC,gB;IA4CAC,Y;IAmRAC,Q;IAhXAC,O;IA6DAC,Y;IAgBAC,iB;IA+TAC,a;IApSAC,a;IA/EAC,W;IAWAC,c;IA+EAC,a;IAsTAC,I;IAxcCC,K;;;IAiSDzB,yB;IAxGAC,wB;IA4BAC,mC;IAjBAC,iC;IA3BAC,yB;IAwIAC,uB;IA1CCC,wB;IAeDC,wB;IAqCAC,mB;IAKAC,yB;IAnRAC,uB;IAqSAC,qB;IA2BAC,2B;IA7RAC,4B;IA4CAC,wB;IAmRAC,oB;IAhXAC,mB;IA6DAC,wB;IAgBAC,6B;IA+TAC,yB;IApSAC,yB;IA/EAC,uB;IAWAC,0B;IA+EAC,yB;IAsTAC,gB;IAxcCC,iB","ignoreList":[]}