dsh-cliworker-now 0.7.6 → 0.7.8

package/lib/types/host/claude-native-oauth.js

@@ -0,0 +1,274 @@
+import { StringDecoder } from 'node:string_decoder';
+import { EFFORTS } from "../shared/types.js";
+import { accountEmail } from "./account-identity.js";
+import { ProcessCleanupUnconfirmedError } from "./process.js";
+import { claudeLaunchEnvironment } from "./claude-own-route.js";
+const record = (value) => !!value && typeof value === 'object' && !Array.isArray(value);
+const id = (value) => typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9._:/-]*$/.test(value);
+const text = (value) => typeof value === 'string' && !!value.trim() && value.length <= 512 && !/[\x00-\x1f\x7f]/.test(value);
+export class ClaudeNativeOAuthError extends Error {
+    code = 'CLAUDE_NATIVE_OAUTH_UNAVAILABLE';
+    constructor(message = 'Claude 原生账号模型或额度暂无法确认，请在账号终端检查后刷新') {
+        super(message);
+        this.name = 'ClaudeNativeOAuthError';
+    }
+}
+/** Native initialize is capability metadata: even an unauthenticated CLI returns models. */
+function ownAccount(value) {
+    const email = record(value) ? accountEmail(value.email) : undefined;
+    if (!record(value) ||
+        value.apiProvider !== 'firstParty' ||
+        value.tokenSource !== 'claude.ai' ||
+        (value.apiKeySource !== undefined && value.apiKeySource !== 'none') ||
+        !email)
+        throw new ClaudeNativeOAuthError('Claude 尚未通过原生账号登录，请打开账号终端登录');
+    if (value.organization !== undefined && !text(value.organization))
+        throw new ClaudeNativeOAuthError();
+    return { email, ...(value.organization !== undefined && { organization: value.organization }) };
+}
+/**
+ * Claude 2.1.296's get_usage can fall back to stale persisted/header observations after a
+ * failed endpoint read. That fallback removes `limits`; never authorize from it. A native
+ * successful read can still use the CLI's own account-bound snapshot younger than 60s. We add
+ * no cache and make no claim of a separate live model entitlement API.
+ */
+function remainingQuota(value, now) {
+    const unknown = () => new ClaudeNativeOAuthError('Claude 原生账号剩余额度暂无法确认，请检查登录与订阅后刷新');
+    if (!record(value) ||
+        value.rate_limits_available !== true ||
+        !['pro', 'max', 'team', 'enterprise'].includes(value.subscription_type) ||
+        !record(value.rate_limits) ||
+        !Array.isArray(value.rate_limits.limits))
+        throw unknown();
+    const limits = value.rate_limits;
+    const windows = ['five_hour', 'seven_day', 'seven_day_oauth_apps', 'seven_day_opus', 'seven_day_sonnet']
+        .filter((key) => limits[key] != null)
+        .map((key) => limits[key]);
+    // A billing balance or extra-usage wallet is not authorization to spend beyond a plan.
+    if (limits.five_hour == null || limits.seven_day == null)
+        throw unknown();
+    const percentages = [];
+    const window = (entry) => {
+        if (!record(entry) ||
+            typeof entry.utilization !== 'number' ||
+            !Number.isFinite(entry.utilization) ||
+            entry.utilization < 0 ||
+            (entry.resets_at !== null &&
+                (typeof entry.resets_at !== 'string' ||
+                    !Number.isFinite(Date.parse(entry.resets_at)) ||
+                    Date.parse(entry.resets_at) <= now)))
+            throw unknown();
+        percentages.push(entry.utilization);
+    };
+    windows.forEach(window);
+    if (limits.model_scoped !== undefined) {
+        if (!Array.isArray(limits.model_scoped))
+            throw unknown();
+        limits.model_scoped.forEach(window);
+    }
+    for (const entry of limits.limits) {
+        if (!record(entry) ||
+            typeof entry.percent !== 'number' ||
+            !Number.isFinite(entry.percent) ||
+            entry.percent < 0 ||
+            typeof entry.is_active !== 'boolean')
+            throw unknown();
+        if (entry.is_active)
+            percentages.push(entry.percent);
+    }
+    // Conservative across all returned plan windows; do not infer that a model bypasses a limit.
+    if (percentages.some((percent) => percent >= 100))
+        throw new ClaudeNativeOAuthError('Claude 当前账号存在已用尽的限额，请等待重置或检查订阅');
+}
+export function parseClaudeNativeOAuthCatalog(initialize, usage, now = Date.now()) {
+    if (!record(initialize))
+        throw new ClaudeNativeOAuthError();
+    const account = ownAccount(initialize.account);
+    remainingQuota(usage, now);
+    if (!Array.isArray(initialize.models))
+        throw new ClaudeNativeOAuthError();
+    const models = new Map();
+    for (const model of initialize.models) {
+        if (!record(model) ||
+            !id(model.value) ||
+            !id(model.resolvedModel) ||
+            model.disabled === true ||
+            model.hidden === true ||
+            model.entitled === false ||
+            model.available === false ||
+            model.allowed === false)
+            continue;
+        const efforts = model.supportsEffort === true && Array.isArray(model.supportedEffortLevels)
+            ? EFFORTS.filter((effort) => ['low', 'medium', 'high', 'xhigh', 'max'].includes(effort) &&
+                model.supportedEffortLevels.includes(effort))
+            : [];
+        // Default leaves the native CLI's own effort policy untouched.
+        const choice = {
+            id: model.value,
+            label: text(model.displayName) ? model.displayName : model.value,
+            efforts: ['default', ...efforts],
+        };
+        if (models.has(choice.id))
+            throw new ClaudeNativeOAuthError('Claude 原生模型目录存在重复选项，请刷新');
+        models.set(choice.id, choice);
+    }
+    if (!models.size)
+        throw new ClaudeNativeOAuthError('Claude 原生账号暂未返回可确认的模型，请刷新');
+    return { account, models: [...models.values()] };
+}
+/** Only initialize/get_usage controls are sent. No user message, token read, login or model request. */
+export async function discoverClaudeNativeOAuth(backend, config, executable, cwd, signal, prefixArgs) {
+    signal.throwIfAborted();
+    // The caller supplies the same native-route overlay used for actual worker execution.
+    if (prefixArgs.length !== 2 || prefixArgs[0] !== '--settings')
+        throw new ClaudeNativeOAuthError();
+    let overlay;
+    try {
+        overlay = JSON.parse(prefixArgs[1]);
+    }
+    catch {
+        throw new ClaudeNativeOAuthError();
+    }
+    if (!record(overlay))
+        throw new ClaudeNativeOAuthError();
+    const control = AbortSignal.any([signal, AbortSignal.timeout(15_000)]);
+    const child = backend.spawn({
+        argv: [
+            executable,
+            '--settings',
+            JSON.stringify({ ...overlay, disableAllHooks: true, promptSuggestionEnabled: false }),
+            '--strict-mcp-config',
+            '--mcp-config',
+            '{"mcpServers":{}}',
+            '--print',
+            '--input-format',
+            'stream-json',
+            '--output-format',
+            'stream-json',
+            '--verbose',
+            '--no-session-persistence',
+        ],
+        cwd,
+        env: {
+            ...claudeLaunchEnvironment(),
+            CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: '1',
+            DISABLE_TELEMETRY: '1',
+            DISABLE_ERROR_REPORTING: '1',
+            DISABLE_AUTOUPDATER: '1',
+            CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION: 'false',
+        },
+        stdio: { stdin: 'pipe', stdout: 'pipe', stderr: 'pipe' },
+        graceMs: config.graceMs,
+        signal: control,
+    });
+    void child.done.catch(() => undefined);
+    const inputError = () => undefined;
+    child.stdin?.on('error', inputError);
+    const write = (request_id, request) => new Promise((resolve, reject) => {
+        if (!child.stdin || child.stdin.destroyed)
+            return reject(new ClaudeNativeOAuthError());
+        child.stdin.write(JSON.stringify({ type: 'control_request', request_id, request }) + '\n', (error) => error ? reject(new ClaudeNativeOAuthError()) : resolve());
+    });
+    let bytes = 0;
+    const count = (chunk) => {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk));
+        bytes += buffer.length;
+        if (bytes > Math.min(config.maxRunBytes, 2_097_152))
+            throw new ClaudeNativeOAuthError('Claude 账号目录响应过大');
+        return buffer;
+    };
+    const errors = (async () => {
+        if (child.stderr)
+            for await (const chunk of child.stderr)
+                count(chunk);
+    })();
+    void errors.catch(() => undefined);
+    const output = (async () => {
+        if (!child.stdout)
+            throw new ClaudeNativeOAuthError();
+        const decoder = new StringDecoder('utf8');
+        let pending = '', expected = 'native-initialize', initialize;
+        for await (const chunk of child.stdout) {
+            pending += decoder.write(count(chunk));
+            let newline;
+            while ((newline = pending.indexOf('\n')) >= 0) {
+                const line = pending.slice(0, newline);
+                pending = pending.slice(newline + 1);
+                let message;
+                try {
+                    message = JSON.parse(line);
+                }
+                catch {
+                    throw new ClaudeNativeOAuthError();
+                }
+                if (!record(message))
+                    throw new ClaudeNativeOAuthError();
+                if (['assistant', 'user', 'stream_event', 'result', 'control_request'].includes(message.type))
+                    throw new ClaudeNativeOAuthError('Claude 账号查询返回了非元数据事件，已停止查询');
+                if (message.type !== 'control_response')
+                    continue;
+                const response = message.response;
+                if (!record(response) || response.request_id !== expected)
+                    throw new ClaudeNativeOAuthError();
+                if (response.subtype !== 'success' || !record(response.response))
+                    throw new ClaudeNativeOAuthError();
+                if (expected === 'native-initialize') {
+                    initialize = response.response;
+                    ownAccount(response.response.account);
+                    expected = 'native-usage';
+                    await write(expected, { subtype: 'get_usage', skip_behaviors: true });
+                }
+                else
+                    return parseClaudeNativeOAuthCatalog(initialize, response.response);
+            }
+        }
+        throw new ClaudeNativeOAuthError('Claude 账号查询提前结束，请刷新');
+    })();
+    void output.catch(() => undefined);
+    let abort = () => { };
+    const cancelled = new Promise((_, reject) => {
+        abort = () => reject(new ClaudeNativeOAuthError(signal.aborted ? 'Claude 账号查询已取消' : 'Claude 账号查询超时，请刷新'));
+        control.addEventListener('abort', abort, { once: true });
+        if (control.aborted)
+            abort();
+    });
+    const failed = new Promise((_, reject) => {
+        void errors.catch(reject);
+        void child.done.catch(() => reject(new ClaudeNativeOAuthError()));
+    });
+    try {
+        await Promise.race([
+            write('native-initialize', {
+                subtype: 'initialize',
+                hooks: {},
+                sdkMcpServers: [],
+                promptSuggestions: false,
+                agentProgressSummaries: false,
+            }),
+            cancelled,
+        ]);
+        const result = await Promise.race([output, cancelled, failed]);
+        control.throwIfAborted();
+        return result;
+    }
+    catch (error) {
+        if (error instanceof ClaudeNativeOAuthError)
+            throw error;
+        signal.throwIfAborted();
+        throw new ClaudeNativeOAuthError();
+    }
+    finally {
+        control.removeEventListener('abort', abort);
+        try {
+            child.terminate();
+            if (!(await child.waitForExit()))
+                throw new ProcessCleanupUnconfirmedError();
+        }
+        catch {
+            throw new ProcessCleanupUnconfirmedError();
+        }
+        await Promise.allSettled([output, errors, child.done]);
+        child.stdin?.removeListener('error', inputError);
+    }
+}
+//# sourceMappingURL=claude-native-oauth.js.map

package/lib/types/host/claude-native-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-native-oauth.js","sourceRoot":"","sources":["../../../src/host/claude-native-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAoB,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,8BAA8B,EAA2C,MAAM,cAAc,CAAA;AACtG,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,MAAM,MAAM,GAAG,CAAC,KAAc,EAAgC,EAAE,CAC9D,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC/D,MAAM,EAAE,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC7C,OAAO,KAAK,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC3E,MAAM,IAAI,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC/C,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAEtG,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,GAAG,iCAAiC,CAAA;IACjD,YAAY,OAAO,GAAG,mCAAmC;QACvD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACtC,CAAC;CACF;AAQD,4FAA4F;AAC5F,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACnE,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;QACd,KAAK,CAAC,WAAW,KAAK,YAAY;QAClC,KAAK,CAAC,WAAW,KAAK,WAAW;QACjC,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC;QACnE,CAAC,KAAK;QAEN,MAAM,IAAI,sBAAsB,CAAC,6BAA6B,CAAC,CAAA;IACjE,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACrG,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,EAAE,CAAA;AACjG,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAc,EAAE,GAAW;IACjD,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,IAAI,sBAAsB,CAAC,kCAAkC,CAAC,CAAA;IAChE,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;QACd,KAAK,CAAC,qBAAqB,KAAK,IAAI;QACpC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACvE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;QAExC,MAAM,OAAO,EAAE,CAAA;IACjB,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAA;IAChC,MAAM,OAAO,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,kBAAkB,CAAC;SACrG,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;SACpC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC5B,uFAAuF;IACvF,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI;QAAE,MAAM,OAAO,EAAE,CAAA;IACzE,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE;QAChC,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;YACd,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YACrC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;YACnC,KAAK,CAAC,WAAW,GAAG,CAAC;YACrB,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI;gBACvB,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;oBAClC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBAC7C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC;YAExC,MAAM,OAAO,EAAE,CAAA;QACjB,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC,CAAA;IACD,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACvB,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;YAAE,MAAM,OAAO,EAAE,CAAA;QACxD,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACrC,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;YACd,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;YAC/B,KAAK,CAAC,OAAO,GAAG,CAAC;YACjB,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS;YAEpC,MAAM,OAAO,EAAE,CAAA;QACjB,IAAI,KAAK,CAAC,SAAS;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACtD,CAAC;IACD,6FAA6F;IAC7F,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,GAAG,CAAC;QAC/C,MAAM,IAAI,sBAAsB,CAAC,gCAAgC,CAAC,CAAA;AACtE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,UAAmB,EACnB,KAAc,EACd,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;IAC3D,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAC9C,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC7C,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;YACd,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;YAChB,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;YACxB,KAAK,CAAC,QAAQ,KAAK,IAAI;YACvB,KAAK,CAAC,MAAM,KAAK,IAAI;YACrB,KAAK,CAAC,QAAQ,KAAK,KAAK;YACxB,KAAK,CAAC,SAAS,KAAK,KAAK;YACzB,KAAK,CAAC,OAAO,KAAK,KAAK;YAEvB,SAAQ;QACV,MAAM,OAAO,GACX,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC;YACzE,CAAC,CAAC,OAAO,CAAC,MAAM,CACZ,CAAC,MAAM,EAAE,EAAE,CACT,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC1D,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC/C;YACH,CAAC,CAAC,EAAE,CAAA;QACR,+DAA+D;QAC/D,MAAM,MAAM,GAAgB;YAC1B,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;YAChE,OAAO,EAAE,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC;SACjC,CAAA;QACD,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,sBAAsB,CAAC,yBAAyB,CAAC,CAAA;QACtF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,sBAAsB,CAAC,2BAA2B,CAAC,CAAA;IAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAA;AAClD,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAuB,EACvB,MAAqB,EACrB,UAAkB,EAClB,GAAW,EACX,MAAmB,EACnB,UAAoB;IAEpB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,sFAAsF;IACtF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,YAAY;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACjG,IAAI,OAAgB,CAAA;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACxD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE;YACJ,UAAU;YACV,YAAY;YACZ,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;YACrF,qBAAqB;YACrB,cAAc;YACd,mBAAmB;YACnB,SAAS;YACT,gBAAgB;YAChB,aAAa;YACb,iBAAiB;YACjB,aAAa;YACb,WAAW;YACX,0BAA0B;SAC3B;QACD,GAAG;QACH,GAAG,EAAE;YACH,GAAG,uBAAuB,EAAE;YAC5B,wCAAwC,EAAE,GAAG;YAC7C,iBAAiB,EAAE,GAAG;YACtB,uBAAuB,EAAE,GAAG;YAC5B,mBAAmB,EAAE,GAAG;YACxB,oCAAoC,EAAE,OAAO;SAC9C;QACD,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;QACxD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,OAAO;KAChB,CAAC,CAAA;IACF,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,SAAS,CAAA;IAClC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IACpC,MAAM,KAAK,GAAG,CAAC,UAAkB,EAAE,OAAgB,EAAE,EAAE,CACrD,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;QACtF,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACnG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CACzD,CAAA;IACH,CAAC,CAAC,CAAA;IACJ,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1E,KAAK,IAAI,MAAM,CAAC,MAAM,CAAA;QACtB,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC;YACjD,MAAM,IAAI,sBAAsB,CAAC,iBAAiB,CAAC,CAAA;QACrD,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;QACzB,IAAI,KAAK,CAAC,MAAM;YAAE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM;gBAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IACxE,CAAC,CAAC,EAAE,CAAA;IACJ,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;QACrD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,OAAO,GAAG,EAAE,EACd,QAAQ,GAAG,mBAAmB,EAC9B,UAAmB,CAAA;QACrB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;YACtC,IAAI,OAAe,CAAA;YACnB,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;gBACtC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;gBACpC,IAAI,OAAgB,CAAA;gBACpB,IAAI,CAAC;oBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,sBAAsB,EAAE,CAAA;gBACpC,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;oBAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;gBACxD,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC3F,MAAM,IAAI,sBAAsB,CAAC,4BAA4B,CAAC,CAAA;gBAChE,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB;oBAAE,SAAQ;gBACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;gBACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ;oBAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;gBAC7F,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,sBAAsB,EAAE,CAAA;gBACpG,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;oBACrC,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAA;oBAC9B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;oBACrC,QAAQ,GAAG,cAAc,CAAA;oBACzB,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;gBACvE,CAAC;;oBAAM,OAAO,6BAA6B,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;YAC5E,CAAC;QACH,CAAC;QACD,MAAM,IAAI,sBAAsB,CAAC,qBAAqB,CAAC,CAAA;IACzD,CAAC,CAAC,EAAE,CAAA;IACJ,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAClC,IAAI,KAAK,GAAG,GAAG,EAAE,GAAE,CAAC,CAAA;IACpB,MAAM,SAAS,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QACjD,KAAK,GAAG,GAAG,EAAE,CACX,MAAM,CACJ,IAAI,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CACpF,CAAA;QACH,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,IAAI,OAAO,CAAC,OAAO;YAAE,KAAK,EAAE,CAAA;IAC9B,CAAC,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC9C,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACzB,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IACF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,KAAK,CAAC,mBAAmB,EAAE;gBACzB,OAAO,EAAE,YAAY;gBACrB,KAAK,EAAE,EAAE;gBACT,aAAa,EAAE,EAAE;gBACjB,iBAAiB,EAAE,KAAK;gBACxB,sBAAsB,EAAE,KAAK;aAC9B,CAAC;YACF,SAAS;SACV,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;QAC9D,OAAO,CAAC,cAAc,EAAE,CAAA;QACxB,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB;YAAE,MAAM,KAAK,CAAA;QACxD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,IAAI,sBAAsB,EAAE,CAAA;IACpC,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC3C,IAAI,CAAC;YACH,KAAK,CAAC,SAAS,EAAE,CAAA;YACjB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;gBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAA;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAA8B,EAAE,CAAA;QAC5C,CAAC;QACD,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QACtD,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAClD,CAAC;AACH,CAAC"}

package/lib/types/host/claude-own-route.d.ts

@@ -0,0 +1,45 @@
+import { type AccountIdentity } from './account-identity.ts';
+import { type FirstPartyModelSource } from './first-party-models.ts';
+/** Only this Claude child is changed; inherited credentials are never account evidence. */
+export declare function claudeLaunchEnvironment(): Record<string, string>;
+export declare function claudeRemoteModelId(value: string): string;
+/** Exact settings IDs only. Labels and capability metadata never invent a model. */
+export declare function claudeConfiguredModels(env: Record<string, unknown>, settingsModel?: unknown): FirstPartyModelSource['nativeModels'];
+/** Public errors never interpolate native configuration or credentials. */
+export declare class ClaudeOwnRouteError extends Error {
+    readonly code = "CLI_OWN_ACCOUNT_REQUIRED";
+    constructor(message?: string);
+}
+export interface ClaudeOwnRoute {
+    kind: 'native' | 'proxy' | 'api';
+    sourceIds: string[];
+    configDirectory?: string;
+    /** Host-only current model configuration; included in admission and launch snapshots. */
+    modelEnvironment?: Record<string, string>;
+    model?: string;
+    /** Field names only, with empty values; native operations suppress own route overrides. */
+    suppressedEnvironment?: Record<string, string>;
+    /** Host-only; never project this material to Gateway. */
+    source?: FirstPartyModelSource;
+}
+/** Verified on native 2.1.296: empty settings.env unsets provider selectors for this process. */
+export declare function claudeNativeSettingsArguments(configDirectory?: string, suppressedEnvironment?: Record<string, string>): string[];
+/** TCP only: a listening proxy remains selected even if its HTTP authentication fails. */
+export declare function claudeLoopbackAvailable(url: URL, signal: AbortSignal): Promise<boolean>;
+/** Official account operations never probe or require an API/proxy route. */
+export declare function readClaudeOfficialAccountRoute(project: string, signal: AbortSignal): Promise<ClaudeOwnRoute>;
+export declare function readClaudeOwnRoute(project: string, signal: AbortSignal, options?: {
+    available?: typeof claudeLoopbackAvailable;
+}): Promise<ClaudeOwnRoute>;
+export declare function claudeRouteStatusArguments(executable: string, route: ClaudeOwnRoute): string[];
+export declare function claudeRouteIdentity(route: ClaudeOwnRoute, raw: string, exitCode: number | null): AccountIdentity;
+/** Pin one route before spawning; secrets are in a private temporary file, never argv. */
+export declare function prepareClaudeWorkerLaunch(route: ClaudeOwnRoute, argv: string[], stateDirectory: string, signal: AbortSignal): Promise<{
+    argv: string[];
+    env: Record<string, string>;
+    cleanup?: undefined;
+} | {
+    argv: string[];
+    env: Record<string, string>;
+    cleanup: () => Promise<void>;
+}>;