dsh-grok-provider 0.1.4 → 0.1.6

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.1.6 - 2026-08-28
+
+- Accept schema-valid provider-neutral user and system history containing private reasoning blocks, omit that reasoning from the Grok wire, and preserve adjacent visible text and ordered image input; malformed or oversized omitted blocks still fail closed before attachment I/O.
+- Keep encrypted reasoning replay restricted to valid same-provider assistant history and retain the one-level tool-result text/image boundary with stable generic-error classification for unsupported tool-result blocks.
+- Give executable resolution, read-only verification, `--version`, `login --help`, and the final official CLI action independent deadlines so Windows cold starts cannot consume the browser-login budget before `login --oauth` launches; process-tree teardown is independently bounded and late caller cancellation cannot be reported as success.
+- Make executable metadata verification and direct-process completion observe cancellation; bound whole-tree teardown separately, and quarantine the authentication driver after cleanup failure until the Host restarts or the subprocess driver is replaced. Login start, logout, and credential refresh share controller-owned single-flight, cancellation, shutdown, and driver-generation guards so stale operations cannot dispatch or report success after replacement, without changing the fixed official path, fixed argv, scrubbed environment, output bounds, no-shell policy, or post-login credential validation.
+- Keep Web/X Search, image generation, new server-tool events, arbitrary URL downloads, API-key mode, and custom endpoints out of this maintenance release; the proposed Search slice moves to `0.1.7`.
+
+## 0.1.5 - 2026-08-28
+
+- Bind Trusted Publisher runs to the exact stable tag ref and peeled commit, require one non-draft/non-prerelease GitHub Release asset with the exact package filename, and pin the publishing runtime to Node.js `24.19.0`.
+- Project model input modalities into the account dashboard so exact `grok-4.6` visibly advertises image input while text-only models do not.
+- Make provider installation transactional: partial authentication and adapter registrations are rolled back when a later installation step fails, while successful disposal remains idempotent and best-effort.
+- Correct release-state and streaming-deadline documentation without changing authentication, endpoints, image compilation, or Responses wire behavior.
+- Keep Web/X Search, image generation, URL downloads, API-key mode, and new SSE event handling outside this maintenance release.
+
 ## 0.1.4 - 2026-08-28
 
 - Add an asynchronous Responses request compiler for bounded jpeg/png image input from the optional Harness attachment store.

package/README.en.md

@@ -4,7 +4,7 @@
 
 Use an already authenticated official Grok Build account from DeepSeek Harness, with dynamic model discovery, streaming reasoning, tool calls, and an account quota/model capability dashboard.
 
-> Unofficial community project; not affiliated with xAI or DeepSeek Harness. The current source version is `0.1.4`; the published stable version is whatever the npm Registry currently assigns to `latest`. The project no longer publishes prereleases; stable defects are fixed in a new incremented stable version.
+> Unofficial community project; not affiliated with xAI or DeepSeek Harness. The current source version is `0.1.6`; published stable versions are identified by the npm Registry `latest` tag. The project no longer publishes prereleases; stable defects are fixed in a new incremented stable version.
 
 ## What it provides
 
@@ -39,10 +39,10 @@ The official CLI opens a browser on first use. The provider supports only the of
 
 ### 2. Install the provider
 
-After `0.1.4` is published, install that exact version from npm:
+After `0.1.6` is published, install that exact version from npm:
 
 ```sh
-dsh plugin --profile web add dsh-grok-provider@0.1.4
+dsh plugin --profile web add dsh-grok-provider@0.1.6
 dsh web
 ```
 
@@ -63,7 +63,7 @@ The Web settings page shows:
 
 - login state and sign-in, cancel, and logout actions;
 - used/remaining quota and the real billing-period reset time;
-- account-visible models, context windows, reasoning efforts, streaming and tool capabilities.
+- account-visible models, context windows, reasoning efforts, and image-input, streaming, and tool capabilities.
 
 When protobuf-backed billing includes a complete weekly/monthly period but omits a zero-valued percentage, the page restores “0% used / 100% remaining.” Other incomplete responses remain unknown.
 
@@ -112,8 +112,8 @@ Uninstalling the provider does not remove the official Grok CLI or directly modi
 
 ## Sources and discovery
 
-- npm `0.1.4` page (available after publication): [dsh-grok-provider@0.1.4](https://www.npmjs.com/package/dsh-grok-provider/v/0.1.4)
-- GitHub `0.1.4` release and integrity values (available after publication): [v0.1.4](https://github.com/yoshino-xiao7/dsh-grok-provider/releases/tag/v0.1.4)
+- npm `0.1.6` page (available after publication): [dsh-grok-provider@0.1.6](https://www.npmjs.com/package/dsh-grok-provider/v/0.1.6)
+- GitHub `0.1.6` release and integrity values (available after publication): [v0.1.6](https://github.com/yoshino-xiao7/dsh-grok-provider/releases/tag/v0.1.6)
 - GitHub community discovery: the repository carries the DeepSeek Harness-recommended `dsh-plugin` and `dsh` topics
 - YukiRyou managed source: [deepseek-yukiryou-plugin-catalog](https://github.com/yoshino-xiao7/deepseek-yukiryou-plugin-catalog), still pinned to the real-device-accepted `dsh-grok-provider@0.1.0` and marking only `darwin-arm64`
 
@@ -121,17 +121,17 @@ Directory inclusion is not an endorsement by xAI or DeepSeek Harness. [Listing P
 
 ## Compatibility and scope
 
-| Item | `0.1.4` status |
+| Item | `0.1.6` status |
 | --- | --- |
 | DeepSeek Harness | Exact support for `0.1.1-rc.2` |
 | Node.js | `>=24.19.0` |
 | macOS arm64 | Real-network and isolated Harness acceptance completed |
-| Windows x64 | Code and Windows CI supported; no independent real-device acceptance completed for this release |
+| Windows x64 | Code, slow-fake, and Windows CI supported; by owner decision, real browser launch is checked against the exact Registry version after publication |
 | macOS x64 / Linux | Unsupported |
 | Grok CLI | No full-version lock; official path, `login --oauth` capability, and production OIDC credential contract are enforced |
 | Models | Every account catalog model whose backend has a strict codec in this release |
 
-`0.1.4` enables image input only for exact `grok-4.6`; `grok-4.5` and every other dynamically discovered model remain text-only. Images must be verified JPEG/PNG projections from the Harness attachment service. Ordinary user content and images nested one level inside a tool result are supported, with `detail:"high"` fixed to the official xAI Responses image example; URLs, filesystem paths, file IDs, and caller-supplied data URLs are rejected.
+`0.1.6` preserves the `0.1.4` image boundary: image input is enabled only for exact `grok-4.6`, while `grok-4.5` and every other dynamically discovered model remain text-only. The account dashboard projects capability badges from that same catalog, so only image-capable models show “Image input.” Images must be verified JPEG/PNG projections from the Harness attachment service. Ordinary user content and images nested one level inside a tool result are supported, with `detail:"high"` fixed to the official xAI Responses image example; URLs, filesystem paths, file IDs, and caller-supplied data URLs are rejected. Private reasoning in ordinary user/system history is omitted while adjacent visible text remains ordered, so `subagent-settled` history and same-message reasoning no longer block image requests.
 
 Each projected image is limited to 4 MiB, 16,777,216 pixels, and 8192px per side. A request retains at most eight images and 8 MiB of projected image bytes. When a limit is exceeded, the globally oldest images are offloaded to Harness text placeholders; the final JSON remains capped at 16 MiB. Web/X Search, image generation, arbitrary downloads, API-key mode, multiple accounts, enterprise OIDC, ACP, and Headless agent wrapping remain out of scope; see the [capability roadmap](docs/11-capability-roadmap.md).
 
@@ -219,8 +219,10 @@ Read the [contributing guide](CONTRIBUTING.md) before filing an issue or PR. Cha
 - [x] Publish the `0.1.1` documentation and release-process correction
 - [x] Publish the `0.1.2` Windows CLI compatibility correction
 - [x] Publish the `0.1.3` cross-provider tool-history compatibility correction
-- [x] `0.1.4`: image input only for exact `grok-4.6`; red/blue user and tool-result Proxy gates plus final Harness attachment revalidation pass, while `grok-4.5` fails closed as text-only
-- [ ] Later independent slice: opt-in, default-off Web Search / X Search
+- [x] Publish `0.1.4`: image input only for exact `grok-4.6`; red/blue user/tool-result Proxy gates and final Harness attachment revalidation passed, while `grok-4.5` fails closed as text-only
+- [x] Publish `0.1.5`: maintenance for release binding, dashboard capability badges, and transactional Provider Runtime installation; the unique artifact, dual-platform CI, signatures, and SLSA provenance are verified
+- [ ] Publish `0.1.6`: image-history reasoning compatibility and per-stage official-CLI deadline repair for Windows
+- [ ] Independent `0.1.7` slice: opt-in, default-off Web Search / X Search
 - [ ] A subsequent slice: opt-in image generation (inline results only, committed through Harness attachments)
 - [ ] Complete independent Windows x64 acceptance and publish a later stable fix if needed
 

package/README.md

@@ -4,7 +4,7 @@
 
 让 DeepSeek Harness 使用你已登录的官方 Grok Build 账号：动态模型发现、流式推理、工具调用，以及账号额度与模型能力面板。
 
-> 非官方社区项目，与 xAI 或 DeepSeek Harness 官方无隶属关系。当前源码版本为 `0.1.4`；npm 已发布稳定版本以 Registry 的 `latest` 标签为准。项目不再发行预发行版；正式版缺陷通过新的递增稳定版本修复。
+> 非官方社区项目，与 xAI 或 DeepSeek Harness 官方无隶属关系。当前源码版本为 `0.1.6`；npm 已发布稳定版本以 Registry 的 `latest` 标签为准。项目不再发行预发行版；正式版缺陷通过新的递增稳定版本修复。
 
 ## 它解决什么问题
 
@@ -39,10 +39,10 @@ grok models
 
 ### 2. 安装 Provider
 
-`0.1.4` 发布后，从 npm 安装该精确版本：
+`0.1.6` 发布后，从 npm 安装该精确版本：
 
 ```sh
-dsh plugin --profile web add dsh-grok-provider@0.1.4
+dsh plugin --profile web add dsh-grok-provider@0.1.6
 dsh web
 ```
 
@@ -63,7 +63,7 @@ Web 设置页展示：
 
 - 当前登录状态及登录、取消、退出操作；
 - 已使用/剩余额度和真实周期重置时间；
-- 当前账号可见模型、上下文窗口、reasoning 档位、streaming 与 tool capability。
+- 当前账号可见模型、上下文窗口、reasoning 档位，以及图片输入、streaming 与 tool capability。
 
 当 protobuf-backed billing 返回完整的 weekly/monthly 周期但省略零值百分比时，页面会恢复为“已使用 0% / 剩余 100%”；其他不完整响应保持未知，不伪造额度。
 
@@ -112,8 +112,8 @@ dsh web
 
 ## 项目来源与发现
 
-- npm `0.1.4` 页面（发布后可用）：[dsh-grok-provider@0.1.4](https://www.npmjs.com/package/dsh-grok-provider/v/0.1.4)
-- GitHub `0.1.4` 发行版与校验值（发布后可用）：[v0.1.4](https://github.com/yoshino-xiao7/dsh-grok-provider/releases/tag/v0.1.4)
+- npm `0.1.6` 页面（发布后可用）：[dsh-grok-provider@0.1.6](https://www.npmjs.com/package/dsh-grok-provider/v/0.1.6)
+- GitHub `0.1.6` 发行版与校验值（发布后可用）：[v0.1.6](https://github.com/yoshino-xiao7/dsh-grok-provider/releases/tag/v0.1.6)
 - GitHub 社区发现：仓库已添加 DeepSeek Harness 官方推荐的 `dsh-plugin` 与 `dsh` Topics
 - YukiRyou 受管来源：[deepseek-yukiryou-plugin-catalog](https://github.com/yoshino-xiao7/deepseek-yukiryou-plugin-catalog)，当前仍锁定已完成真机验收的 `dsh-grok-provider@0.1.0`，且只标记 `darwin-arm64`
 
@@ -121,17 +121,17 @@ dsh web
 
 ## 兼容性与范围
 
-| 项目 | `0.1.4` 状态 |
+| 项目 | `0.1.6` 状态 |
 | --- | --- |
 | DeepSeek Harness | 精确支持 `0.1.1-rc.2` |
 | Node.js | `>=24.19.0` |
 | macOS arm64 | 已完成真实网络与隔离 Harness 验收 |
-| Windows x64 | 代码与 Windows CI 支持；本次正式发布未完成独立真机验收 |
+| Windows x64 | 代码、slow-fake 与 Windows CI 支持；按仓库所有者决定，发布 Registry 精确版本后验证真实浏览器弹出 |
 | macOS x64 / Linux | 不支持 |
 | Grok CLI | 不锁完整版本；严格校验官方路径、`login --oauth` 能力与生产 OIDC 凭据契约 |
 | 模型 | 当前账号目录中 backend 已被严格 codec 支持的全部模型 |
 
-`0.1.4` 只为精确的 `grok-4.6` 开启图片输入；`grok-4.5` 与其他动态发现的模型继续按 text-only 处理。图片只能来自 Harness attachment service 的已验证 JPEG/PNG 投影，支持普通用户内容和一层工具结果中的图片，并按 xAI 官方 Responses 图片示例固定使用 `detail:"high"`；不接受 URL、文件路径、file ID 或调用方预制的 data URL。
+`0.1.6` 沿用 `0.1.4` 的图片边界：只为精确的 `grok-4.6` 开启图片输入；`grok-4.5` 与其他动态发现的模型继续按 text-only 处理。账户面板从同一模型目录投影能力标签，因此只有图片模型显示“图片输入”。图片只能来自 Harness attachment service 的已验证 JPEG/PNG 投影，支持普通用户内容和一层工具结果中的图片，并按 xAI 官方 Responses 图片示例固定使用 `detail:"high"`；不接受 URL、文件路径、file ID 或调用方预制的 data URL。普通 user/system 历史中的私有 reasoning 会被省略并保留相邻可见文本，因此 `subagent-settled` 历史和同消息 reasoning 不再阻断图片请求。
 
 每张投影图片最多 4 MiB、16,777,216 像素且任一边不超过 8192px；每次请求最多保留 8 张、投影字节合计最多 8 MiB。超限时按全局最旧优先移除图片并保留 Harness 的文本占位，最终 JSON 仍受 16 MiB 上限约束。Web/X Search、图片生成、任意文件下载、API Key 模式、多账号、企业 OIDC、ACP 与 Headless agent 封装仍不在本版本范围内；后续切片见[能力路线图](docs/11-capability-roadmap.md)。
 
@@ -219,8 +219,10 @@ npm run pack:check
 - [x] 发布 `0.1.1` 文档与发布流程修正版
 - [x] 发布 `0.1.2` Windows CLI 兼容性修正版
 - [x] 发布 `0.1.3` 跨 Provider 工具调用历史兼容性修正版
-- [x] `0.1.4`：仅精确 `grok-4.6` 图片输入；user/tool-result 红蓝语义 Proxy 门禁与最终 Harness attachment 复验均已通过，`grok-4.5` 已按失败关闭保持 text-only
-- [ ] 后续独立切片：默认关闭、用户分别开启的 Web Search / X Search
+- [x] 发布 `0.1.4`：仅精确 `grok-4.6` 图片输入；user/tool-result 红蓝语义 Proxy 门禁与最终 Harness attachment 复验通过，`grok-4.5` 失败关闭为 text-only
+- [x] 发布 `0.1.5`：发布链路、账户面板能力标签与 Provider Runtime 安装回滚维护版；唯一制品、双平台 CI、签名与 SLSA provenance 均已验证
+- [ ] 发布 `0.1.6`：图片历史 reasoning 兼容与 Windows 官方 CLI 分阶段 deadline 修复版
+- [ ] `0.1.7` 独立切片：默认关闭、用户分别开启的 Web Search / X Search
 - [ ] 再后续独立切片：默认关闭的图片生成（只收内联结果，提交 Harness attachment）
 - [ ] 完成 Windows x64 独立真机验收并按需发布后续稳定修复版
 

package/SECURITY.md

@@ -4,7 +4,11 @@
 
 ## 支持范围
 
-本安全策略对应源码版本 `0.1.4`；当前已发布稳定版本以 npm Registry 的 `latest` 标签为准。DeepSeek Harness、Node.js 与操作系统按发布线明确维护；Grok CLI 不使用完整版本字符串作为信任门禁，而是严格校验官方默认路径、命令能力、生产 OIDC 凭据契约和固定服务端协议。macOS arm64 已完成真实验收；Windows x64 有代码与 CI 覆盖。`0.1.4` 只为精确 `grok-4.6` 增加有界图片输入；`grok-4.5` 与所有其他模型保持 text-only，不改动认证、凭据、CLI subprocess 或 endpoint 边界。图片只能来自 Harness attachment service 的已验证 JPEG/PNG 投影，以 `detail:"high"` 发送，并受单图字节、像素、边长、数量、总字节与最终 JSON 上限约束；URL、路径、file ID 和调用方预制 data URL 都会被拒绝。项目不再发行预发行版，安全或兼容性缺陷使用新的递增稳定版本修复。
+本安全策略对应源码版本 `0.1.6`；当前已发布稳定版本以 npm Registry 的 `latest` 标签为准。DeepSeek Harness、Node.js 与操作系统按发布线明确维护；Grok CLI 不使用完整版本字符串作为信任门禁，而是严格校验官方默认路径、命令能力、生产 OIDC 凭据契约和固定服务端协议。macOS arm64 已完成真实验收；Windows x64 有代码、slow-fake 与 CI 覆盖，外部浏览器弹出由仓库所有者在 Registry 精确 `0.1.6` 发布后验证。
+
+`0.1.6` 沿用 `0.1.4` 的图片边界：只为精确 `grok-4.6` 提供有界图片输入；`grok-4.5` 与所有其他模型保持 text-only。普通 user/system 历史中的私有 reasoning 会被省略并保留相邻可见 text/image；只有有效的同 Provider assistant 历史可进入加密 reasoning replay，一层 tool-result 仍只接受公开 text/image。图片只能来自 Harness attachment service 的已验证 JPEG/PNG 投影，以 `detail:"high"` 发送，并受单图字节、像素、边长、数量、总字节与最终 JSON 上限约束；URL、路径、file ID 和调用方预制 data URL 都会被拒绝。
+
+CLI executable 解析、只读验证、`--version`、`login --help` 与最终 action 各自拥有 deadline；direct-process completion 观察同一取消，whole-tree teardown 另有有界 wait。登录 starting、confirmed logout 与 credential refresh 共享 controller-owned single-flight、shutdown fence 和 driver-generation 门禁；清理失败会隔离当前认证 driver 直到 Host 重启或 subprocess driver replacement，旧代际操作不能迟发 CLI 动作或报告成功。固定路径/argv、最小环境、无 shell、输出上限、取消和登录后凭据重验边界不变；本版不新增认证模式、Search、生成或 endpoint。项目不再发行预发行版，安全或兼容性缺陷使用新的递增稳定版本修复。
 
 ## 私下报告漏洞
 
@@ -32,4 +36,4 @@
 
 ---
 
-English summary: GitHub Private vulnerability reporting is enabled and is the preferred reporting channel. Version `0.1.4` enables bounded JPEG/PNG attachment projections with `detail:"high"` only for exact `grok-4.6`; `grok-4.5` and all other models remain text-only. It accepts no URL, path, file ID, or caller-supplied data URL and does not change authentication or endpoints. If private reporting is unavailable, open only a detail-free contact issue. Never publish or send real credentials, identity data, prompts, tool arguments, cookies, source/projected image bytes, or unreviewed diagnostic archives. Include exact versions, platform, minimal reproduction conditions, impact, and redacted evidence.
+English summary: GitHub Private vulnerability reporting is enabled and is the preferred reporting channel. Version `0.1.6` preserves bounded JPEG/PNG attachment input with `detail:"high"` only for exact `grok-4.6`; `grok-4.5` and all other models remain text-only. It omits schema-valid private reasoning from ordinary user/system history while preserving visible text/images, gives each official-CLI preparation/action stage an independent deadline, and bounds direct-process/tree settlement. Login start, confirmed logout, and credential refresh share controller-owned single-flight, a shutdown fence, and driver-generation guards. Cleanup failure quarantines the current authentication driver until Host restart or subprocess-driver replacement, and stale operations cannot dispatch or report success. Fixed path/argv, no-shell, credential, origin, and URL-rejection boundaries remain unchanged; no Search, generation, new auth mode, or custom endpoint is added. Never send credentials, identity data, prompts, tool arguments, cookies, image bytes, or unreviewed diagnostics.

package/dist/client/client.js

@@ -21,7 +21,7 @@ window.__ModuleLoader__.load({
         usageUnknown: "上游未提供使用比例", quotaUnavailable: "暂时无法读取 Grok Build 额度。",
         modelsTitle: "当前账号可用的模型", modelsDescription: "模型来自 Grok Build 动态目录；Harness 模型选择器会显示这里列出的全部模型。",
         modelsUnavailable: "暂时无法读取模型目录。", noModels: "当前账号没有返回可用模型。",
-        context: "上下文", reasoning: "推理档位", defaultEffort: "默认", text: "文本输入", streaming: "流式输出", tools: "工具调用",
+        context: "上下文", reasoning: "推理档位", defaultEffort: "默认", text: "文本输入", image: "图片输入", streaming: "流式输出", tools: "工具调用",
         lastUpdated: "数据更新时间",
       },
       en: {
@@ -38,7 +38,7 @@ window.__ModuleLoader__.load({
         usageUnknown: "Usage percentage was not provided", quotaUnavailable: "Grok Build quota is temporarily unavailable.",
         modelsTitle: "Models available to this account", modelsDescription: "Models come from the live Grok Build catalog; every model listed here remains visible in the Harness model selector.",
         modelsUnavailable: "The model catalog is temporarily unavailable.", noModels: "This account returned no available models.",
-        context: "Context", reasoning: "Reasoning", defaultEffort: "default", text: "Text input", streaming: "Streaming", tools: "Tool calling",
+        context: "Context", reasoning: "Reasoning", defaultEffort: "default", text: "Text input", image: "Image input", streaming: "Streaming", tools: "Tool calling",
         lastUpdated: "Updated",
       },
     }
@@ -158,6 +158,7 @@ window.__ModuleLoader__.load({
           React.createElement("div", { className: "dsh-grok-badges" },
             React.createElement("span", { className: "dsh-grok-badge", "data-accent": true }, `${t("context")} ${formatContext(model.contextWindow)}`),
             model.capabilities?.textInput && React.createElement("span", { className: "dsh-grok-badge" }, t("text")),
+            model.capabilities?.imageInput && React.createElement("span", { className: "dsh-grok-badge" }, t("image")),
             model.capabilities?.streaming && React.createElement("span", { className: "dsh-grok-badge" }, t("streaming")),
             model.capabilities?.functionTools && React.createElement("span", { className: "dsh-grok-badge" }, t("tools"))),
           effortText && React.createElement("div", { className: "dsh-grok-efforts" }, `${t("reasoning")}：${effortText}`))

package/dist/host/index.mjs

@@ -83,19 +83,19 @@ export function apply(ctx) {
       homeDir,
       verifyExecutable: verifyOfficialCliExecutable,
     })
-    const refresh = async () => {
-      const outcome = await officialAuth.refresh()
-      if (outcome.kind !== "succeeded") throw new UnsupportedCredentialError()
-    }
-    refreshOfficialCredential = refresh
     const removeDriver = authController.installDriver(createOfficialAuthDriver({
       officialAuth,
       credentialSource: officialSource,
     }))
+    const refresh = async () => {
+      const outcome = await authController.refresh()
+      if (outcome.kind !== "succeeded") throw new UnsupportedCredentialError()
+    }
+    refreshOfficialCredential = refresh
     return async () => {
-      await authController.shutdown()
       if (refreshOfficialCredential === refresh) refreshOfficialCredential = undefined
       removeDriver()
+      await authController.shutdown()
     }
   })
 

package/dist/internal/account-dashboard.mjs

@@ -40,10 +40,36 @@ function projectModel(model) {
     ...(typeof model.description === "string" ? { description: model.description } : {}),
     contextWindow: model.context.contextWindow,
     ...(model.reasoning === undefined ? {} : { reasoning: projectReasoning(model.reasoning) }),
-    capabilities: Object.freeze({ textInput: true, streaming: true, functionTools: true }),
+    capabilities: projectCapabilities(model.inputModalities),
   })
 }
 
+function projectCapabilities(inputModalities) {
+  if (
+    !Array.isArray(inputModalities) ||
+    Object.getPrototypeOf(inputModalities) !== Array.prototype
+  ) throw new TypeError("Invalid Grok dashboard input modalities")
+  const length = inputModalities.length
+  if (
+    length === 0 ||
+    length > 2 ||
+    Reflect.ownKeys(inputModalities).length !== length + 1
+  ) throw new TypeError("Invalid Grok dashboard input modalities")
+
+  let textInput = false
+  let imageInput = false
+  for (let index = 0; index < length; index += 1) {
+    const descriptor = Object.getOwnPropertyDescriptor(inputModalities, String(index))
+    if (descriptor === undefined || !("value" in descriptor)) {
+      throw new TypeError("Invalid Grok dashboard input modalities")
+    }
+    if (descriptor.value === "text" && !textInput) textInput = true
+    else if (descriptor.value === "image" && !imageInput) imageInput = true
+    else throw new TypeError("Invalid Grok dashboard input modalities")
+  }
+  return Object.freeze({ textInput, imageInput, streaming: true, functionTools: true })
+}
+
 function projectReasoning(reasoning) {
   if (!isPlainObject(reasoning) || !Array.isArray(reasoning.efforts)) {
     throw new TypeError("Invalid Grok dashboard reasoning capability")

package/dist/internal/auth-controller.mjs

@@ -1,4 +1,4 @@
-const OUTCOMES = new Set(["succeeded", "cancelled", "failed"])
+const OUTCOMES = new Set(["succeeded", "cancelled", "failed", "cleanup-failed"])
 
 export class AuthLoginBusyError extends Error {
   constructor() {
@@ -25,9 +25,12 @@ export function createAuthController({ registry, randomUUID, now = () => new Dat
 
   let installed
   let active
+  let refreshing
+  let shutdownWait
   let state
   let confirmation
-  let closing = false
+  let closing
+  let quarantined = false
   if (driver !== undefined) install(driver)
 
   function install(nextDriver) {
@@ -36,8 +39,14 @@ export function createAuthController({ registry, randomUUID, now = () => new Dat
     }
     const token = Object.freeze({})
     installed = { driver: nextDriver, token }
+    quarantined = false
+    confirmation = undefined
     return () => {
-      if (installed?.token === token) installed = undefined
+      if (installed?.token === token) {
+        installed = undefined
+        quarantined = false
+        confirmation = undefined
+      }
     }
   }
 
@@ -47,42 +56,51 @@ export function createAuthController({ registry, randomUUID, now = () => new Dat
     async status() {
       return Object.freeze({
         ...await registry.status(),
-        driver: installed !== undefined,
+        driver: installed !== undefined && !quarantined,
         ...(state === undefined ? {} : { session: Object.freeze({ ...state }) }),
       })
     },
 
     async beginLogin() {
-      if (active !== undefined || closing) throw new AuthLoginBusyError()
-      if (installed === undefined) throw new AuthDriverUnavailableError()
+      if (active !== undefined || refreshing !== undefined || closing || shutdownWait !== undefined) {
+        throw new AuthLoginBusyError()
+      }
+      if (installed === undefined || quarantined) throw new AuthDriverUnavailableError()
 
       const sessionId = createId(randomUUID, "Invalid Grok auth session id")
       const abortController = new AbortController()
-      let started
-      try {
-        started = await installed.driver.begin({ signal: abortController.signal })
-      } catch {
-        state = { state: "failed", sessionId }
-        registry.invalidate()
-        throw new AuthDriverUnavailableError()
-      }
-      if (
-        !isPlainObject(started) ||
-        Object.keys(started).length !== 1 ||
-        !started.completion ||
-        typeof started.completion.then !== "function"
-      ) throw new TypeError("Invalid Grok auth driver session")
-
+      const driverRegistration = installed
       const publicState = Object.freeze({ sessionId, state: "running" })
       state = publicState
-      const settled = Promise.resolve(started.completion).then(
-        (outcome) => normalizeOutcome(outcome),
+      confirmation = undefined
+      let resolveStarted
+      let rejectStarted
+      const startedReady = new Promise((resolve, reject) => {
+        resolveStarted = resolve
+        rejectStarted = reject
+      })
+      const settled = startedReady.then(
+        (started) => Promise.resolve(started.completion).then(
+          (outcome) => normalizeOutcome(outcome),
+          () => Object.freeze({ kind: abortController.signal.aborted ? "cancelled" : "failed" }),
+        ),
         () => Object.freeze({ kind: abortController.signal.aborted ? "cancelled" : "failed" }),
       ).then((outcome) => {
-        state = { state: outcome.kind, sessionId }
-        active = undefined
+        const registrationIsCurrent = installed?.token === driverRegistration.token
+        const cleanupFailed = outcome.kind === "cleanup-failed"
+        if (cleanupFailed && registrationIsCurrent) {
+          quarantined = true
+          confirmation = undefined
+        }
+        const publicOutcome = cleanupFailed || !registrationIsCurrent
+          ? Object.freeze({ kind: "failed" })
+          : abortController.signal.aborted
+            ? Object.freeze({ kind: "cancelled" })
+            : outcome
+        state = { state: publicOutcome.kind, sessionId }
+        if (active === session) active = undefined
         registry.invalidate()
-        return outcome
+        return publicOutcome
       })
 
       const session = Object.freeze({
@@ -106,6 +124,26 @@ export function createAuthController({ registry, randomUUID, now = () => new Dat
         },
       })
       active = session
+
+      let started
+      try {
+        started = await driverRegistration.driver.begin({ signal: abortController.signal })
+      } catch {
+        rejectStarted(new AuthDriverUnavailableError())
+        await settled
+        throw new AuthDriverUnavailableError()
+      }
+      if (
+        !isPlainObject(started) ||
+        Object.keys(started).length !== 1 ||
+        !started.completion ||
+        typeof started.completion.then !== "function"
+      ) {
+        rejectStarted(new TypeError("Invalid Grok auth driver session"))
+        await settled
+        throw new TypeError("Invalid Grok auth driver session")
+      }
+      resolveStarted(started)
       return session
     },
 
@@ -116,25 +154,102 @@ export function createAuthController({ registry, randomUUID, now = () => new Dat
     },
 
     async shutdown() {
-      if (active === undefined) return false
-      active.cancel()
-      await active.wait()
-      return true
+      if (shutdownWait !== undefined) return shutdownWait
+      const operations = [active, refreshing, closing].filter((operation) => operation !== undefined)
+      if (operations.length === 0) return false
+      let resolveShutdown
+      let rejectShutdown
+      const wait = new Promise((resolve, reject) => {
+        resolveShutdown = resolve
+        rejectShutdown = reject
+      })
+      shutdownWait = wait
+      for (const operation of operations) operation.cancel()
+      Promise.all(operations.map((operation) => operation.wait())).then(
+        () => resolveShutdown(true),
+        rejectShutdown,
+      )
+      try {
+        return await wait
+      } finally {
+        if (shutdownWait === wait) shutdownWait = undefined
+      }
+    },
+
+    async refresh({ signal } = {}) {
+      if (active !== undefined || refreshing !== undefined || closing || shutdownWait !== undefined) {
+        throw new AuthLoginBusyError()
+      }
+      if (installed === undefined || quarantined || typeof installed.driver.refresh !== "function") {
+        throw new AuthDriverUnavailableError()
+      }
+
+      const driverRegistration = installed
+      const abortController = new AbortController()
+      const abortFromCaller = () => abortController.abort(signal.reason)
+      if (signal?.aborted) abortFromCaller()
+      else signal?.addEventListener("abort", abortFromCaller, { once: true })
+      confirmation = undefined
+
+      let operation
+      const settled = Promise.resolve().then(() => {
+        if (installed?.token !== driverRegistration.token || quarantined) {
+          throw new AuthDriverUnavailableError()
+        }
+        abortController.signal.throwIfAborted()
+        return driverRegistration.driver.refresh({ signal: abortController.signal })
+      }).then(
+        (outcome) => normalizeOutcome(outcome),
+        () => Object.freeze({ kind: abortController.signal.aborted ? "cancelled" : "failed" }),
+      ).then((outcome) => {
+        const registrationIsCurrent = installed?.token === driverRegistration.token
+        const cleanupFailed = outcome.kind === "cleanup-failed"
+        if (cleanupFailed && registrationIsCurrent) {
+          quarantined = true
+          confirmation = undefined
+        }
+        if (!registrationIsCurrent || quarantined || cleanupFailed) {
+          return Object.freeze({ kind: "failed" })
+        }
+        if (abortController.signal.aborted) return Object.freeze({ kind: "cancelled" })
+        return outcome
+      }).finally(() => {
+        signal?.removeEventListener("abort", abortFromCaller)
+        if (refreshing === operation) refreshing = undefined
+        registry.invalidate()
+      })
+      operation = Object.freeze({
+        driverToken: driverRegistration.token,
+        cancel() {
+          abortController.abort()
+        },
+        wait() {
+          return settled
+        },
+      })
+      refreshing = operation
+      return settled
     },
 
     async logout({ signal } = {}) {
-      if (closing) throw new AuthLoginBusyError()
-      if (installed === undefined || typeof installed.driver.logout !== "function") {
+      if (closing !== undefined || refreshing !== undefined || shutdownWait !== undefined) {
+        throw new AuthLoginBusyError()
+      }
+      if (installed === undefined || quarantined || typeof installed.driver.logout !== "function") {
         throw new AuthDriverUnavailableError()
       }
       const currentTime = now()
       if (!(currentTime instanceof Date) || !Number.isFinite(currentTime.getTime())) {
         throw new TypeError("Invalid Grok auth controller clock")
       }
-      if (confirmation === undefined || confirmation.expiresAt <= currentTime.getTime()) {
+      if (
+        confirmation === undefined ||
+        confirmation.driverToken !== installed.token ||
+        confirmation.expiresAt <= currentTime.getTime()
+      ) {
         const confirmationId = createId(randomUUID, "Invalid Grok logout confirmation id")
         const expiresAt = currentTime.getTime() + 30_000
-        confirmation = { confirmationId, expiresAt }
+        confirmation = { confirmationId, expiresAt, driverToken: installed.token }
         return Object.freeze({
           kind: "confirmation-required",
           confirmationId,
@@ -143,23 +258,59 @@ export function createAuthController({ registry, randomUUID, now = () => new Dat
       }
 
       confirmation = undefined
-      closing = true
-      try {
-        if (active !== undefined) {
-          active.cancel()
-          await active.wait()
+      const driverRegistration = installed
+      const loginOperation = active
+      loginOperation?.cancel()
+      const abortController = new AbortController()
+      const abortFromCaller = () => abortController.abort(signal.reason)
+      if (signal?.aborted) abortFromCaller()
+      else signal?.addEventListener("abort", abortFromCaller, { once: true })
+
+      let operation
+      const settled = Promise.resolve().then(async () => {
+        if (loginOperation !== undefined) {
+          await loginOperation.wait()
+        }
+        if (installed?.token !== driverRegistration.token || quarantined) {
+          return Object.freeze({ kind: "failed" })
         }
         let outcome
         try {
-          outcome = normalizeOutcome(await installed.driver.logout({ signal }))
+          abortController.signal.throwIfAborted()
+          outcome = normalizeOutcome(await driverRegistration.driver.logout({
+            signal: abortController.signal,
+          }))
         } catch {
-          outcome = Object.freeze({ kind: signal?.aborted ? "cancelled" : "failed" })
+          outcome = Object.freeze({ kind: abortController.signal.aborted ? "cancelled" : "failed" })
+        }
+        const registrationIsCurrent = installed?.token === driverRegistration.token
+        const cleanupFailed = outcome.kind === "cleanup-failed"
+        if (cleanupFailed && registrationIsCurrent) {
+          quarantined = true
+          confirmation = undefined
         }
+        const publicOutcome = cleanupFailed || !registrationIsCurrent || quarantined
+          ? Object.freeze({ kind: "failed" })
+          : abortController.signal.aborted
+            ? Object.freeze({ kind: "cancelled" })
+            : outcome
+        return publicOutcome
+      }).finally(() => {
+        signal?.removeEventListener("abort", abortFromCaller)
+        if (closing === operation) closing = undefined
         registry.invalidate()
-        return outcome
-      } finally {
-        closing = false
-      }
+      })
+      operation = Object.freeze({
+        driverToken: driverRegistration.token,
+        cancel() {
+          abortController.abort()
+        },
+        wait() {
+          return settled
+        },
+      })
+      closing = operation
+      return settled
     },
   })
 }