dsh-cliworker-now 0.7.6 → 0.7.8

package/lib/types/host/kimi-oauth-models.js

@@ -0,0 +1,246 @@
+import { homedir } from 'node:os';
+import { isAbsolute, join } from 'node:path';
+import { readKimiOwnToken } from "./kimi-accounts.js";
+const record = (value) => !!value && typeof value === 'object' && !Array.isArray(value);
+const id = (value) => typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9._:/-]*$/.test(value);
+const BASES = new Set(['https://api.kimi.com/coding/v1', 'https://api.kimi.ai/coding/v1']);
+const PROVIDER = 'managed:kimi-code';
+const nearExpiry = (expires, now) => typeof expires !== 'number' || !Number.isFinite(expires) || expires <= now + 30_000;
+export class KimiOAuthModelError extends Error {
+    code = 'KIMI_OAUTH_UNAVAILABLE';
+    constructor(message) {
+        super(message);
+        this.name = 'KimiOAuthModelError';
+    }
+}
+const unavailable = () => new KimiOAuthModelError('Kimi OAuth 配置来源暂无法核验，请检查该 CLI 配置');
+const expired = () => new KimiOAuthModelError('Kimi 登录凭据已过期或即将过期，请打开账号终端完成原生续期或重新登录');
+/** JWT fields label the stable account only. The server must independently accept this token. */
+function ownPrincipal(access) {
+    const parts = access.split('.');
+    if (parts.length !== 3 ||
+        parts[1].length > 16 * 1024 ||
+        !parts.every((part) => /^[A-Za-z0-9_-]+$/.test(part)))
+        return;
+    const bytes = Buffer.from(parts[1], 'base64url');
+    try {
+        if (bytes.toString('base64url') !== parts[1])
+            return;
+        const claims = JSON.parse(bytes.toString('utf8'));
+        if (!record(claims) || claims.iss !== 'kimi-auth')
+            return;
+        const subject = claims.sub ?? claims.user_id;
+        if (typeof subject !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9_-]{6,127}$/.test(subject))
+            return;
+        if (claims.sub !== undefined && claims.user_id !== undefined && claims.sub !== claims.user_id)
+            return;
+        return subject;
+    }
+    catch {
+        return;
+    }
+    finally {
+        bytes.fill(0);
+    }
+}
+/** This is host-only credential material. Do not return it through Gateway or persist it. */
+export async function readKimiOAuthModelSources(raw, sourceId, signal, options = {}) {
+    signal.throwIfAborted();
+    if (!record(raw) || !record(raw.providers) || !record(raw.models))
+        return [];
+    const provider = raw.providers[PROVIDER];
+    if (!record(provider) || provider.oauth === undefined)
+        return [];
+    const baseUrl = typeof provider.baseUrl === 'string' ? provider.baseUrl.replace(/\/+$/, '') : '';
+    if (provider.type !== 'kimi' ||
+        !BASES.has(baseUrl) ||
+        !record(provider.oauth) ||
+        provider.oauth.storage !== 'file' ||
+        !['oauth/kimi-code', 'kimi-code'].includes(provider.oauth.key) ||
+        (provider.oauth.oauthHost !== undefined && provider.oauth.oauthHost !== 'https://auth.kimi.com') ||
+        provider.apiKey ||
+        provider.apiKeyEnv ||
+        provider.env ||
+        provider.customHeaders ||
+        ['KIMI_CODE_BASE_URL', 'KIMI_CODE_OAUTH_HOST', 'KIMI_OAUTH_HOST', 'KIMI_CODE_CUSTOM_HEADERS'].some((key) => process.env[key]))
+        throw unavailable();
+    const home = options.home ?? process.env.KIMI_CODE_HOME ?? join(homedir(), '.kimi-code');
+    if (!isAbsolute(home))
+        throw unavailable();
+    let token;
+    try {
+        token = await readKimiOwnToken(join(home, 'credentials'), 'kimi-code', signal);
+    }
+    catch {
+        signal.throwIfAborted();
+        throw unavailable();
+    }
+    if (!token || typeof token.access_token !== 'string' || !token.access_token.trim())
+        throw new KimiOAuthModelError('Kimi OAuth 尚未登录或已退出，请打开账号终端登录');
+    const expires = typeof token.expires_at === 'number' ? token.expires_at * 1000 : undefined;
+    if (nearExpiry(expires, options.now ?? Date.now()))
+        throw expired();
+    const accountId = ownPrincipal(token.access_token);
+    if (!accountId || (token.token_type !== undefined && String(token.token_type).toLowerCase() !== 'bearer'))
+        throw unavailable();
+    const nativeModels = [];
+    for (const [alias, model] of Object.entries(raw.models)) {
+        if (!record(model) ||
+            model.provider !== PROVIDER ||
+            !id(model.model) ||
+            alias !== `kimi-code/${model.model}`)
+            continue;
+        if (model.oauth || model.providerId || model.apiKey || model.baseUrl || model.customHeaders)
+            continue;
+        if (model.protocol !== undefined &&
+            !['kimi', 'openai', 'openai_responses', 'anthropic'].includes(model.protocol))
+            continue;
+        nativeModels.push({
+            remoteId: model.model,
+            choice: {
+                id: alias,
+                label: typeof model.displayName === 'string' ? model.displayName : alias,
+                efforts: ['default'],
+            },
+        });
+    }
+    signal.throwIfAborted();
+    return nativeModels.length
+        ? [
+            {
+                provider: PROVIDER,
+                credential: { type: 'oauth', access: token.access_token, expires, accountId },
+                baseUrl,
+                apiType: 'kimi-managed-oauth',
+                sourceIds: [sourceId, join(home, 'credentials/kimi-code.json'), 'native:kimi-managed-oauth'],
+                nativeModels,
+            },
+        ]
+        : [];
+}
+async function responseJson(response, signal) {
+    if (!response.body)
+        throw new KimiOAuthModelError('Kimi 模型或额度响应格式无法确认，请稍后刷新');
+    const reader = response.body.getReader(), chunks = [];
+    let bytes = 0;
+    try {
+        while (true) {
+            signal.throwIfAborted();
+            const item = await reader.read();
+            if (item.done)
+                break;
+            bytes += item.value.byteLength;
+            if (bytes > 1_048_576)
+                throw new KimiOAuthModelError('Kimi 模型或额度响应过大，请稍后刷新');
+            chunks.push(item.value);
+        }
+        const buffer = Buffer.concat(chunks);
+        try {
+            return JSON.parse(buffer.toString('utf8'));
+        }
+        finally {
+            buffer.fill(0);
+        }
+    }
+    finally {
+        await reader.cancel().catch(() => undefined);
+        reader.releaseLock();
+        for (const chunk of chunks)
+            chunk.fill(0);
+    }
+}
+/** Current native subscription quota is required; a public models list is never sufficient. */
+export function kimiQuotaRemaining(raw) {
+    if (!record(raw) || !record(raw.usages))
+        return 'unknown';
+    const entries = ['limit_5h', 'limit_7d', 'limit_month_total', 'limit_month_code']
+        .filter((key) => raw.usages[key] !== undefined)
+        .map((key) => raw.usages[key]);
+    if (!entries.length)
+        return 'unknown';
+    const ratios = entries.map((entry) => {
+        if (!record(entry) || (typeof entry.used_ratio !== 'number' && typeof entry.used_ratio !== 'string'))
+            return NaN;
+        if (typeof entry.used_ratio === 'string' && !entry.used_ratio.trim())
+            return NaN;
+        return Number(entry.used_ratio);
+    });
+    if (ratios.some((ratio) => !Number.isFinite(ratio) || ratio < 0))
+        return 'unknown';
+    return ratios.some((ratio) => ratio >= 1) ? 'exhausted' : 'available';
+}
+export async function probeKimiOAuthModels(source, options = {}) {
+    const signal = options.signal ?? new AbortController().signal;
+    signal.throwIfAborted();
+    if (source.provider !== PROVIDER ||
+        source.apiType !== 'kimi-managed-oauth' ||
+        !BASES.has(source.baseUrl || '') ||
+        source.credential.type !== 'oauth' ||
+        typeof source.credential.access !== 'string' ||
+        !source.credential.accountId ||
+        ownPrincipal(source.credential.access) !== source.credential.accountId)
+        throw unavailable();
+    if (nearExpiry(source.credential.expires, Date.now()))
+        throw expired();
+    const cancel = new AbortController();
+    const control = AbortSignal.any([signal, cancel.signal, AbortSignal.timeout(options.timeoutMs ?? 8_000)]);
+    const request = async (name) => {
+        try {
+            const response = await (options.fetch ?? fetch)(`${source.baseUrl}/${name}`, {
+                headers: { Authorization: `Bearer ${source.credential.access}`, Accept: 'application/json' },
+                redirect: 'error',
+                signal: control,
+            });
+            if (!response.ok) {
+                await response.body?.cancel();
+                if ([401, 403].includes(response.status))
+                    throw new KimiOAuthModelError('Kimi 登录或订阅授权未通过，请打开账号终端检查登录与额度');
+                throw new KimiOAuthModelError('Kimi 模型或额度查询暂不可用，请稍后刷新');
+            }
+            return await responseJson(response, control);
+        }
+        catch (error) {
+            signal.throwIfAborted();
+            if (error instanceof KimiOAuthModelError)
+                throw error;
+            throw new KimiOAuthModelError('Kimi 模型或额度查询失败，请检查网络后刷新');
+        }
+    };
+    const requests = [request('models'), request('usages')];
+    try {
+        const [models, usages] = await Promise.all(requests);
+        signal.throwIfAborted();
+        if (nearExpiry(source.credential.expires, Date.now()))
+            throw expired();
+        const quota = kimiQuotaRemaining(usages);
+        if (quota === 'exhausted')
+            throw new KimiOAuthModelError('Kimi 当前账号额度已用尽，请等待重置或检查订阅');
+        if (quota !== 'available')
+            throw new KimiOAuthModelError('Kimi 当前账号剩余额度暂无法确认，请在账号终端检查后刷新');
+        if (!record(models) || !Array.isArray(models.data))
+            throw new KimiOAuthModelError('Kimi 模型目录格式无法确认，请稍后刷新');
+        return {
+            state: 'supported',
+            source: 'account-models',
+            models: models.data
+                .filter((model) => record(model) &&
+                id(model.id) &&
+                Number.isInteger(Number(model.context_length)) &&
+                Number(model.context_length) > 0 &&
+                model.available !== false &&
+                model.allowed !== false &&
+                model.disabled !== true &&
+                model.entitled !== false)
+                .map((model) => ({
+                id: model.id,
+                name: typeof model.display_name === 'string' ? model.display_name : undefined,
+                cost: 'unknown',
+            })),
+        };
+    }
+    finally {
+        cancel.abort();
+        await Promise.allSettled(requests);
+    }
+}
+//# sourceMappingURL=kimi-oauth-models.js.map

package/lib/types/host/kimi-oauth-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kimi-oauth-models.js","sourceRoot":"","sources":["../../../src/host/kimi-oauth-models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAIrD,MAAM,MAAM,GAAG,CAAC,KAAc,EAAgC,EAAE,CAC9D,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC/D,MAAM,EAAE,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC7C,OAAO,KAAK,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC3E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,gCAAgC,EAAE,+BAA+B,CAAC,CAAC,CAAA;AAC1F,MAAM,QAAQ,GAAG,mBAAmB,CAAA;AACpC,MAAM,UAAU,GAAG,CAAC,OAAgB,EAAE,GAAW,EAAW,EAAE,CAC5D,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,GAAG,GAAG,MAAM,CAAA;AAErF,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,GAAG,wBAAwB,CAAA;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AACD,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,mBAAmB,CAAC,kCAAkC,CAAC,CAAA;AACrF,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,IAAI,mBAAmB,CAAC,sCAAsC,CAAC,CAAA;AAEjE,iGAAiG;AACjG,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/B,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI;QAC5B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErD,OAAM;IACR,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAA;IACjD,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;YAAE,OAAM;QACpD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,WAAW;YAAE,OAAM;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAA;QAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAM;QAC7F,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO;YAAE,OAAM;QACrG,OAAO,OAAO,CAAA;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAM;IACR,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACf,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAY,EACZ,QAAgB,EAChB,MAAmB,EACnB,UAA2C,EAAE;IAE7C,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAA;IAC5E,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAChE,MAAM,OAAO,GAAG,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAChG,IACE,QAAQ,CAAC,IAAI,KAAK,MAAM;QACxB,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;QACnB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvB,QAAQ,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM;QACjC,CAAC,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;QAC9D,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,KAAK,uBAAuB,CAAC;QAChG,QAAQ,CAAC,MAAM;QACf,QAAQ,CAAC,SAAS;QAClB,QAAQ,CAAC,GAAG;QACZ,QAAQ,CAAC,aAAa;QACtB,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,0BAA0B,CAAC,CAAC,IAAI,CAChG,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAC1B;QAED,MAAM,WAAW,EAAE,CAAA;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAA;IACxF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,WAAW,EAAE,CAAA;IAC1C,IAAI,KAAsC,CAAA;IAC1C,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,WAAW,EAAE,CAAA;IACrB,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE;QAChF,MAAM,IAAI,mBAAmB,CAAC,+BAA+B,CAAC,CAAA;IAChE,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1F,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAAE,MAAM,OAAO,EAAE,CAAA;IACnE,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAClD,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC;QACvG,MAAM,WAAW,EAAE,CAAA;IACrB,MAAM,YAAY,GAA0C,EAAE,CAAA;IAC9D,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;YACd,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAC3B,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;YAChB,KAAK,KAAK,aAAa,KAAK,CAAC,KAAK,EAAE;YAEpC,SAAQ;QACV,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,aAAa;YAAE,SAAQ;QACrG,IACE,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC5B,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YAE7E,SAAQ;QACV,YAAY,CAAC,IAAI,CAAC;YAChB,QAAQ,EAAE,KAAK,CAAC,KAAK;YACrB,MAAM,EAAE;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK;gBACxE,OAAO,EAAE,CAAC,SAAS,CAAC;aACrB;SACF,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,OAAO,YAAY,CAAC,MAAM;QACxB,CAAC,CAAC;YACE;gBACE,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE;gBAC7E,OAAO;gBACP,OAAO,EAAE,oBAAoB;gBAC7B,SAAS,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,4BAA4B,CAAC,EAAE,2BAA2B,CAAC;gBAC5F,YAAY;aACb;SACF;QACH,CAAC,CAAC,EAAE,CAAA;AACR,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAkB,EAAE,MAAmB;IACjE,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,IAAI,mBAAmB,CAAC,0BAA0B,CAAC,CAAA;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EACtC,MAAM,GAAiB,EAAE,CAAA;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAChC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAK;YACpB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAA;YAC9B,IAAI,KAAK,GAAG,SAAS;gBAAE,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,CAAC,CAAA;YAC5E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACpC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5C,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC5C,MAAM,CAAC,WAAW,EAAE,CAAA;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC3C,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IACzD,MAAM,OAAO,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,mBAAmB,EAAE,kBAAkB,CAAC;SAC9E,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;SAC9C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAChC,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC;YAClG,OAAO,GAAG,CAAA;QACZ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE;YAAE,OAAO,GAAG,CAAA;QAChF,OAAO,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAClF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAA;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA6B,EAC7B,UAAoD,EAAE;IAEtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,CAAA;IAC7D,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IACE,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAC5B,MAAM,CAAC,OAAO,KAAK,oBAAoB;QACvC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAChC,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO;QAClC,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ;QAC5C,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS;QAC5B,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,SAAS;QAEtE,MAAM,WAAW,EAAE,CAAA;IACrB,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAAE,MAAM,OAAO,EAAE,CAAA;IACtE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;IACpC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,CAAA;IACzG,MAAM,OAAO,GAAG,KAAK,EAAE,IAAyB,EAAE,EAAE;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,EAAE;gBAC3E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBAC5F,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,OAAO;aAChB,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;gBAC7B,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACtC,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;gBACjE,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,CAAC,CAAA;YACzD,CAAC;YACD,OAAO,MAAM,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,IAAI,KAAK,YAAY,mBAAmB;gBAAE,MAAM,KAAK,CAAA;YACrD,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;IACvD,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACpD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YAAE,MAAM,OAAO,EAAE,CAAA;QACtE,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;QACxC,IAAI,KAAK,KAAK,WAAW;YAAE,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,CAAC,CAAA;QACrF,IAAI,KAAK,KAAK,WAAW;YACvB,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,CAAC,CAAA;QACjE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAChD,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAA;QACxD,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,MAAM,CAAC,IAAI;iBAChB,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,MAAM,CAAC,KAAK,CAAC;gBACb,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC9C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC;gBAChC,KAAK,CAAC,SAAS,KAAK,KAAK;gBACzB,KAAK,CAAC,OAAO,KAAK,KAAK;gBACvB,KAAK,CAAC,QAAQ,KAAK,IAAI;gBACvB,KAAK,CAAC,QAAQ,KAAK,KAAK,CAC3B;iBACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACf,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,IAAI,EAAE,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;gBAC7E,IAAI,EAAE,SAAkB;aACzB,CAAC,CAAC;SACN,CAAA;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACpC,CAAC;AACH,CAAC"}

package/lib/types/host/mimo-metadata-cache.d.ts

@@ -0,0 +1,22 @@
+import type { FirstPartyModelSource } from './first-party-models.ts';
+export interface MimoOwnSnapshot {
+    authPath: string;
+    auth: Record<string, any>;
+    configurations: {
+        path: string;
+        value: Record<string, any>;
+    }[];
+}
+/** No raw environment, configuration or account material is retained in the cache key. */
+export declare function nativeMetadataKey(executable: string, project: string, snapshot: unknown, signal: AbortSignal): Promise<string | undefined>;
+export declare const mimoMetadataKey: typeof nativeMetadataKey;
+/** Only native capabilities are reused. Remote entitlement discovery must still run on every call. */
+export declare class MimoMetadataCache {
+    private readonly ttlMs;
+    private readonly limit;
+    private readonly entries;
+    constructor(ttlMs?: number, limit?: number);
+    get(key: string | undefined, own: MimoOwnSnapshot): FirstPartyModelSource[] | undefined;
+    set(key: string | undefined, sources: FirstPartyModelSource[], own: MimoOwnSnapshot): void;
+}
+export declare const mimoMetadataCache: MimoMetadataCache;

package/lib/types/host/mimo-metadata-cache.js

@@ -0,0 +1,121 @@
+import { createHash } from 'node:crypto';
+import { realpath, stat } from 'node:fs/promises';
+import { isAbsolute } from 'node:path';
+import { nativeLaunchArgv } from './native-launch.mjs';
+const digest = (value) => createHash('sha256').update(JSON.stringify(value)).digest('hex');
+/** No raw environment, configuration or account material is retained in the cache key. */
+export async function nativeMetadataKey(executable, project, snapshot, signal) {
+    signal.throwIfAborted();
+    try {
+        // Use the same static launch plan as the process boundary. A fixed Bun shim
+        // can stay unchanged while its actual runtime or script is upgraded.
+        const launch = nativeLaunchArgv([executable]);
+        const identities = [];
+        for (const path of new Set([executable, ...launch.filter(isAbsolute)])) {
+            const entry = await realpath(path), identity = await stat(entry);
+            signal.throwIfAborted();
+            if (!identity.isFile())
+                return;
+            identities.push([entry, identity.dev, identity.ino, identity.size, identity.mtimeMs, identity.ctimeMs]);
+        }
+        const physicalProject = await realpath(project);
+        signal.throwIfAborted();
+        return digest({
+            launch,
+            project,
+            physicalProject,
+            identities,
+            environment: Object.entries(process.env).sort(([a], [b]) => a.localeCompare(b)),
+            snapshot,
+        });
+    }
+    catch {
+        signal.throwIfAborted();
+        // An unverifiable executable still follows the uncached native validation path.
+        return;
+    }
+}
+export const mimoMetadataKey = nativeMetadataKey;
+function currentCredential(source, own) {
+    for (const path of source.sourceIds) {
+        const value = path === own.authPath
+            ? own.auth[source.provider]
+            : {
+                type: 'api',
+                key: own.configurations.find((item) => item.path === path)?.value.provider?.[source.provider]
+                    ?.options?.apiKey,
+            };
+        if (value?.type !== 'api' || typeof value.key !== 'string' || !value.key)
+            continue;
+        const credential = { type: 'api', key: value.key };
+        if (digest(credential) === source.credentialHash)
+            return credential;
+    }
+}
+/** Only native capabilities are reused. Remote entitlement discovery must still run on every call. */
+export class MimoMetadataCache {
+    ttlMs;
+    limit;
+    entries = new Map();
+    constructor(ttlMs = 30_000, limit = 16) {
+        this.ttlMs = ttlMs;
+        this.limit = limit;
+    }
+    get(key, own) {
+        if (!key)
+            return;
+        const entry = this.entries.get(key), now = Date.now();
+        if (!entry)
+            return;
+        if (now < entry.created || now - entry.created >= this.ttlMs) {
+            this.entries.delete(key);
+            return;
+        }
+        const sources = [];
+        for (const metadata of entry.sources) {
+            const credential = currentCredential(metadata, own);
+            if (!credential) {
+                this.entries.delete(key);
+                return;
+            }
+            const { credentialHash: _, ...source } = metadata;
+            sources.push({ ...structuredClone(source), credential });
+        }
+        return sources;
+    }
+    set(key, sources, own) {
+        if (!key || !sources.length)
+            return;
+        const metadata = [];
+        for (const source of sources) {
+            if (source.credential.type !== 'api')
+                return;
+            // A user-defined URL may itself carry a credential; such sources stay uncached.
+            try {
+                const url = new URL(source.baseUrl || '');
+                if (url.username || url.password || url.search || url.hash)
+                    return;
+            }
+            catch {
+                return;
+            }
+            const { credential, ...capabilities } = source;
+            if (credential.key && JSON.stringify(capabilities).includes(credential.key))
+                return;
+            const entry = { ...structuredClone(capabilities), credentialHash: digest(credential) };
+            if (!currentCredential(entry, own))
+                return;
+            metadata.push(entry);
+        }
+        const now = Date.now();
+        for (const [id, entry] of this.entries)
+            if (now < entry.created || now - entry.created >= this.ttlMs)
+                this.entries.delete(id);
+        this.entries.delete(key);
+        this.entries.set(key, { created: now, sources: metadata });
+        while (this.entries.size > this.limit)
+            this.entries.delete(this.entries.keys().next().value);
+    }
+}
+export const mimoMetadataCache = new MimoMetadataCache();
+//# sourceMappingURL=mimo-metadata-cache.js.map

package/lib/types/host/mimo-metadata-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mimo-metadata-cache.js","sourceRoot":"","sources":["../../../src/host/mimo-metadata-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAQtD,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAEnG,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,OAAe,EACf,QAAiB,EACjB,MAAmB;IAEnB,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,IAAI,CAAC;QACH,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;QAC7C,MAAM,UAAU,GAAG,EAAE,CAAA;QACrB,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,EAChC,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAA;YAC9B,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAAE,OAAM;YAC9B,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QACzG,CAAC;QACD,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC/C,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAO,MAAM,CAAC;YACZ,MAAM;YACN,OAAO;YACP,eAAe;YACf,UAAU;YACV,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC/E,QAAQ;SACT,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,gFAAgF;QAChF,OAAM;IACR,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAA;AAEhD,SAAS,iBAAiB,CACxB,MAAmE,EACnE,GAAoB;IAEpB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,KAAK,GACT,IAAI,KAAK,GAAG,CAAC,QAAQ;YACnB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC3B,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK;gBACX,GAAG,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;oBAC3F,EAAE,OAAO,EAAE,MAAM;aACpB,CAAA;QACP,IAAI,KAAK,EAAE,IAAI,KAAK,KAAK,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG;YAAE,SAAQ;QAClF,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAA;QAC3D,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,cAAc;YAAE,OAAO,UAAU,CAAA;IACrE,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,OAAO,iBAAiB;IAGT;IACA;IAHF,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;IACtF,YACmB,QAAQ,MAAM,EACd,QAAQ,EAAE;QADV,UAAK,GAAL,KAAK,CAAS;QACd,UAAK,GAAL,KAAK,CAAK;IAC1B,CAAC;IAEJ,GAAG,CAAC,GAAuB,EAAE,GAAoB;QAC/C,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EACjC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAClB,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACxB,OAAM;QACR,CAAC;QACD,MAAM,OAAO,GAA4B,EAAE,CAAA;QAC3C,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;YACnD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACxB,OAAM;YACR,CAAC;YACD,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAA;YACjD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;QAC1D,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,GAAG,CAAC,GAAuB,EAAE,OAAgC,EAAE,GAAoB;QACjF,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAM;QACnC,MAAM,QAAQ,GAAe,EAAE,CAAA;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAM;YAC5C,gFAAgF;YAChF,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;gBACzC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;oBAAE,OAAM;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAM;YACR,CAAC;YACD,MAAM,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAA;YAC9C,IAAI,UAAU,CAAC,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAM;YACnF,MAAM,KAAK,GAAG,EAAE,GAAG,eAAe,CAAC,YAAY,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAA;YACtF,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC;gBAAE,OAAM;YAC1C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO;YACpC,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACvF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACxB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAA;IAC/F,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAA"}

package/lib/types/host/native-capability-cache.d.ts

@@ -0,0 +1,11 @@
+/** Hash current bounded own files without retaining file content or following links. */
+export declare function metadataFileFingerprint(path: string, signal: AbortSignal): Promise<string | undefined>;
+/** Callers admit only validated public capabilities, never account status or raw CLI output. */
+export declare class NativeCapabilityCache<T> {
+    private readonly ttlMs;
+    private readonly limit;
+    private readonly entries;
+    constructor(ttlMs?: number, limit?: number);
+    get(key: string | undefined): T | undefined;
+    set(key: string | undefined, value: T): void;
+}

package/lib/types/host/native-capability-cache.js

@@ -0,0 +1,94 @@
+import { createHash } from 'node:crypto';
+import { constants } from 'node:fs';
+import { lstat, open } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { safePiOmpAncestors } from "./pi-omp-native.js";
+/** Hash current bounded own files without retaining file content or following links. */
+export async function metadataFileFingerprint(path, signal) {
+    let file;
+    let bytes;
+    try {
+        signal.throwIfAborted();
+        await safePiOmpAncestors(dirname(path));
+        const before = await lstat(path);
+        if (before.isSymbolicLink() || !before.isFile() || before.nlink !== 1 || before.size > 1_048_576)
+            return;
+        file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        const opened = await file.stat();
+        if (!opened.isFile() ||
+            opened.dev !== before.dev ||
+            opened.ino !== before.ino ||
+            opened.nlink !== 1 ||
+            opened.size !== before.size ||
+            opened.size > 1_048_576 ||
+            opened.mtimeMs !== before.mtimeMs)
+            return;
+        bytes = Buffer.alloc(opened.size + 1);
+        let offset = 0;
+        while (offset < bytes.length) {
+            signal.throwIfAborted();
+            const read = await file.read(bytes, offset, bytes.length - offset, offset);
+            if (!read.bytesRead)
+                break;
+            offset += read.bytesRead;
+        }
+        const after = await file.stat(), current = await lstat(path);
+        signal.throwIfAborted();
+        if (current.isSymbolicLink() ||
+            current.dev !== opened.dev ||
+            current.ino !== opened.ino ||
+            current.nlink !== 1 ||
+            offset !== opened.size ||
+            after.size !== opened.size ||
+            current.size !== opened.size ||
+            after.mtimeMs !== opened.mtimeMs ||
+            current.mtimeMs !== opened.mtimeMs ||
+            after.ctimeMs !== opened.ctimeMs ||
+            current.ctimeMs !== opened.ctimeMs)
+            return;
+        return createHash('sha256').update(bytes.subarray(0, offset)).digest('hex');
+    }
+    catch (error) {
+        signal.throwIfAborted();
+        return error.code === 'ENOENT' ? 'missing' : undefined;
+    }
+    finally {
+        bytes?.fill(0);
+        await file?.close();
+    }
+}
+/** Callers admit only validated public capabilities, never account status or raw CLI output. */
+export class NativeCapabilityCache {
+    ttlMs;
+    limit;
+    entries = new Map();
+    constructor(ttlMs = 30_000, limit = 16) {
+        this.ttlMs = ttlMs;
+        this.limit = limit;
+    }
+    get(key) {
+        if (!key)
+            return;
+        const entry = this.entries.get(key), now = Date.now();
+        if (!entry)
+            return;
+        if (now < entry.created || now - entry.created >= this.ttlMs) {
+            this.entries.delete(key);
+            return;
+        }
+        return structuredClone(entry.value);
+    }
+    set(key, value) {
+        if (!key)
+            return;
+        const now = Date.now();
+        for (const [id, entry] of this.entries)
+            if (now < entry.created || now - entry.created >= this.ttlMs)
+                this.entries.delete(id);
+        this.entries.delete(key);
+        this.entries.set(key, { created: now, value: structuredClone(value) });
+        while (this.entries.size > this.limit)
+            this.entries.delete(this.entries.keys().next().value);
+    }
+}
+//# sourceMappingURL=native-capability-cache.js.map

package/lib/types/host/native-capability-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-capability-cache.js","sourceRoot":"","sources":["../../../src/host/native-capability-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAEvD,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAY,EACZ,MAAmB;IAEnB,IAAI,IAAkD,CAAA;IACtD,IAAI,KAAyB,CAAA;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACvC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,SAAS;YAAE,OAAM;QACxG,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAChC,IACE,CAAC,MAAM,CAAC,MAAM,EAAE;YAChB,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YACzB,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YACzB,MAAM,CAAC,KAAK,KAAK,CAAC;YAClB,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC3B,MAAM,CAAC,IAAI,GAAG,SAAS;YACvB,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAEjC,OAAM;QACR,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;QACrC,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,cAAc,EAAE,CAAA;YACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAA;YAC1E,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,MAAK;YAC1B,MAAM,IAAI,IAAI,CAAC,SAAS,CAAA;QAC1B,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,EAC7B,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IACE,OAAO,CAAC,cAAc,EAAE;YACxB,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAC1B,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAC1B,OAAO,CAAC,KAAK,KAAK,CAAC;YACnB,MAAM,KAAK,MAAM,CAAC,IAAI;YACtB,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC1B,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC5B,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAChC,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAClC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAChC,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAElC,OAAM;QACR,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IACnF,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,IAAI,EAAE,KAAK,EAAE,CAAA;IACrB,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,OAAO,qBAAqB;IAGb;IACA;IAHF,OAAO,GAAG,IAAI,GAAG,EAAyC,CAAA;IAC3E,YACmB,QAAQ,MAAM,EACd,QAAQ,EAAE;QADV,UAAK,GAAL,KAAK,CAAS;QACd,UAAK,GAAL,KAAK,CAAK;IAC1B,CAAC;IACJ,GAAG,CAAC,GAAuB;QACzB,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EACjC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAClB,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACxB,OAAM;QACR,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC;IACD,GAAG,CAAC,GAAuB,EAAE,KAAQ;QACnC,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO;YACpC,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACvF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACxB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACtE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAA;IAC/F,CAAC;CACF"}

package/lib/types/host/native-launch.mjs

@@ -1,9 +1,12 @@
 // Inspect fixed launcher data; never ask a shell to interpret CLI arguments.
 import { openSync, readSync, fstatSync, closeSync, realpathSync, statSync, existsSync } from 'node:fs'
-import { dirname, extname, isAbsolute, resolve, sep, delimiter, join } from 'node:path'
+import { basename, dirname, extname, isAbsolute, relative, resolve, sep, delimiter, join } from 'node:path'
 import { homedir, userInfo } from 'node:os'
 
-const invalid = () => new Error('CLI 启动入口无法确认，请配置原生程序或固定 Node/Bun 入口')
+const invalid = () => Object.assign(
+  new Error('CLI 启动入口无法确认，请配置原生程序或固定 Node/Bun 入口'),
+  { code: 'CLI_LAUNCHER_UNSUPPORTED' },
+)
 const batch = (value) => /\.(?:cmd|bat)$/i.test(value)
 function text(path, limit = 128 * 1024) {
   const descriptor = openSync(path, 'r')
@@ -73,6 +76,45 @@ function runtimeProgram(runtime, platform, launcherDirectory) {
   if (!candidate) throw new Error('未找到 Bun，请安装该 CLI 所需的 Bun 运行时')
   return file(candidate)
 }
+/** npm's native bin shim is data, not a batch program to execute. */
+function nativePackageBin(shim, suffix) {
+  const parts = suffix.replace(/\\/g, '/').split('/')
+  if (parts[0] !== 'node_modules' || parts.some((part) => !part || part === '.' || part === '..'))
+    throw invalid()
+  const scoped = parts[1]?.startsWith('@')
+  const name = parts.slice(1, scoped ? 3 : 2).join('/')
+  if (!/^(?:@[a-z0-9._-]+\/)?[a-z0-9._-]+$/.test(name)) throw invalid()
+  const root = fileDirectory(resolve(dirname(shim), ...parts.slice(0, scoped ? 3 : 2)))
+  const entry = file(resolve(dirname(shim), ...parts))
+  const inside = relative(root, entry)
+  if (!inside || inside === '..' || inside.startsWith('..' + sep) || isAbsolute(inside)) throw invalid()
+  const manifest = JSON.parse(text(join(root, 'package.json')))
+  const command = basename(shim, extname(shim))
+  const declared = typeof manifest.bin === 'string'
+    ? name.split('/').at(-1) === command ? manifest.bin : undefined
+    : manifest.bin?.[command]
+  if (manifest.name !== name || typeof declared !== 'string' || isAbsolute(declared) ||
+    declared.replace(/\\/g, '/').split('/').includes('..') || file(resolve(root, declared)) !== entry)
+    throw invalid()
+  const descriptor = openSync(entry, 'r')
+  try {
+    const header = Buffer.alloc(64), signature = Buffer.alloc(4)
+    const size = fstatSync(descriptor).size
+    if (readSync(descriptor, header, 0, 64, 0) !== 64 || header.toString('ascii', 0, 2) !== 'MZ')
+      throw invalid()
+    const offset = header.readUInt32LE(0x3c)
+    if (offset < 64 || offset + 4 > size || readSync(descriptor, signature, 0, 4, offset) !== 4 ||
+      signature.toString('hex') !== '50450000') throw invalid()
+  } finally {
+    closeSync(descriptor)
+  }
+  return entry
+}
+function fileDirectory(path) {
+  const canonical = realpathSync(path)
+  if (!statSync(canonical).isDirectory()) throw invalid()
+  return canonical
+}
 function inspectBatch(executable, platform) {
   const source = text(file(executable)).trim().replace(/\r\n/g, '\n')
   // Nous' official fallback contains just a fixed interpreter and its encoded
@@ -101,8 +143,14 @@ function inspectBatch(executable, platform) {
     // npm cmd-shim's standard final control prefix is launcher boilerplate;
     // it is discarded, and nothing from it is executed by this module.
     line = line.replace(/^endLocal & goto #_undefined_# 2>NUL \|\| title [^&\n]+ & /i, '')
+    const native = /^@?"%(?:~dp0[\\/]?|dp0%[\\/])([^"\n%]+\.exe)"\s+%\*$/i.exec(line)
+    if (native) {
+      entries.add(nativePackageBin(executable, native[1]))
+      runtimes.add('native')
+      continue
+    }
     const command =
-      /^@?(?:(node|bun)|"%_prog%"|"%(?:~dp0|dp0%)[\\/](node|bun)\.exe")\s+"%(?:~dp0|dp0%)[\\/]([^"\n%]+)"\s+%\*$/i.exec(
+      /^@?(?:(node|bun)|"%_prog%"|"%(?:~dp0[\\/]?|dp0%[\\/])(node|bun)\.exe")\s+"%(?:~dp0[\\/]?|dp0%[\\/])([^"\n%]+)"\s+%\*$/i.exec(
         line,
       )
     if (command) {
@@ -112,7 +160,7 @@ function inspectBatch(executable, platform) {
       if (command[1] || command[2]) runtimes.add((command[1] || command[2]).toLowerCase())
       continue
     }
-    const program = /^@?set "?_prog=(?:%(?:~dp0|dp0%)[\\/])?(node|bun)(?:\.exe)?"?$/i.exec(line)
+    const program = /^@?set "?_prog=(?:%(?:~dp0[\\/]?|dp0%[\\/]))?(node|bun)(?:\.exe)?"?$/i.exec(line)
     if (program) {
       runtimes.add(program[1].toLowerCase())
       continue
@@ -121,7 +169,7 @@ function inspectBatch(executable, platform) {
       /^@?(?:goto start|:find_dp0|:start|set dp0=%~dp0|exit \/b|setlocal|endlocal|call :find_dp0)$/i.test(
         line,
       ) ||
-      /^@?if (?:not )?exist "%(?:~dp0|dp0%)[\\/](?:node|bun)\.exe" \($/i.test(line) ||
+      /^@?if (?:not )?exist "%(?:~dp0[\\/]?|dp0%[\\/])(?:node|bun)\.exe" \($/i.test(line) ||
       /^\)(?: else \()?$/i.test(line) ||
       /^@?set pathext=%pathext:;\.js;=;%$/i.test(line) ||
       /^@?if (?:not )?defined node_path \($/i.test(line) ||
@@ -133,6 +181,7 @@ function inspectBatch(executable, platform) {
   if (entries.size !== 1 || runtimes.size !== 1) throw invalid()
   const entry = [...entries][0],
     runtime = [...runtimes][0]
+  if (runtime === 'native') return { kind: 'native', argv: [entry] }
   if (scriptRuntime(entry) !== runtime) throw invalid()
   return { kind: runtime, argv: [runtimeProgram(runtime, platform, dirname(executable)), entry] }
 }
@@ -151,10 +200,16 @@ export function resolveNativeEntry(executable, platform = process.platform) {
     if (candidate) executable = candidate
   }
   if (!batch(executable)) return executable
-  const inspected = inspectBatch(executable, platform)
+  let inspected
+  try {
+    inspected = inspectBatch(executable, platform)
+  } catch {
+    // A present but invalid shim is not an absent CLI. Never forward raw paths or script text.
+    throw invalid()
+  }
   // Keep Bun's fixed shim identity: it may pin a bundled bun.exe beside the
   // shim which cannot be recovered from only the package's JS path.
-  return inspected.kind === 'node' ? inspected.argv[1] : executable
+  return inspected.kind === 'node' ? inspected.argv[1] : inspected.kind === 'native' ? inspected.argv[0] : executable
 }
 
 /** Windows CreateProcess accepts real programs, not npm command files. */