threadwire 0.1.9 → 0.1.11

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 ## Unreleased
 
+## 0.1.10 - 2026-07-28
+
+- Accept official slash-qualified Kimi model aliases through workspace-free
+  OAuth verification, model-only provider selection, exact runtime/broker
+  allowlisting, and fresh/resume execution without weakening argument or grant
+  boundaries.
+
 ## 0.1.9 - 2026-07-28
 
 - Add native Kimi Code subscription support through official OAuth, a distinct

package/docs/isolated-provider-runtime.md

@@ -182,9 +182,16 @@ Kimi runtime and broker admin tokens of at least 32 characters, the Kimi image d
 such as:
 
 ```sh
-export THREADWIRE_ALLOWED_KIMI_MODELS='{"default":{"model":"<verified-account-model>","protocol":"kimi"}}'
+export THREADWIRE_ALLOWED_KIMI_MODELS='{"default":{"model":"kimi-for-coding","protocol":"kimi"},"kimi-code/kimi-for-coding":{"model":"kimi-for-coding","protocol":"kimi"}}'
 ```
 
+`default` is the server-owned selection for no-argument and Telegram jobs.
+`kimi-code/kimi-for-coding` is the exact official provider-qualified alias for
+explicit callers. Each key is an opaque allowlisted value, not a path, and
+Threadwire never normalizes or strips its prefix. The `model` field is the
+independently verified wire request model; do not derive it by splitting the
+alias.
+
 OAuth writes only the named `threadwire-kimi-oauth` volume at the official
 `credentials/kimi-code.json` location. Stop the broker during interactive auth
 so the CLI and broker cannot race a refresh, then run the opt-in, workspace-free
@@ -193,7 +200,7 @@ auth service:
 ```sh
 docker compose -f compose.yaml -f compose.relay-write.yaml stop kimi-isolated-runtime kimi-model-broker
 docker compose -f compose.yaml -f compose.relay-write.yaml --profile kimi-auth run --rm kimi-auth login
-docker compose -f compose.yaml -f compose.relay-write.yaml --profile kimi-auth run --rm kimi-auth verify '<verified-account-model>'
+docker compose -f compose.yaml -f compose.relay-write.yaml --profile kimi-auth run --rm kimi-auth verify 'kimi-code/kimi-for-coding'
 docker compose -f compose.yaml -f compose.relay-write.yaml --profile kimi up --detach --wait
 ```
 
@@ -201,9 +208,20 @@ Complete the official device flow directly in the operator terminal. Do not
 copy device codes into tickets, chat, logs, environment files, or Threadwire.
 The auth service has no workspace, ingress network, Docker socket, Threadwire
 control token, or Telegram credential and uses Docker logging driver `none`.
-`verify <account-model>` discards native output and prints only a fixed
-success/failure; use it to confirm each exact account model value before mapping
-that value to a server-approved Threadwire alias.
+`verify <provider-qualified-alias>` discards native output and prints only a
+fixed success/failure; use it to confirm each exact official alias before
+adding that alias and its independently verified wire model to the server
+allowlist. An explicit CLI job selects the exact key as one argv value:
+
+```sh
+node bin/threadwire.js run \
+  --provider kimi \
+  --target telegram:-1001234567890:42 \
+  --workspace-profile container-runtime \
+  --prompt 'Inspect the project.' \
+  -- --model 'kimi-code/kimi-for-coding'
+```
+
 API keys, Moonshot platform mode, custom base URLs, discovery by ordinary jobs,
 and arbitrary aliases are unsupported.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "threadwire",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "Stream Codex, Claude, Kimi Code, and OpenCode worker progress to an explicit Telegram destination",
   "keywords": [
     "ai-agent",

package/scripts/verify-package.js

@@ -59,6 +59,7 @@ const EXPECTED_FILES = [
   "src/notice-queue.js",
   "src/notifiers/fetch-transport.js",
   "src/notifiers/telegram.js",
+  "src/path-safety.js",
   "src/providers/claude.js",
   "src/providers/codex.js",
   "src/providers/executable.js",

package/src/kimi-model-broker-policy.js

@@ -5,7 +5,7 @@ import {randomBytes} from "node:crypto"
 const TOKEN_PATTERN = /^[A-Za-z0-9_-]{32,128}$/u
 const ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$/u
 const MODEL_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,255}$/u
-const ALIAS_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u
+const ALIAS_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._/-]{0,63}$/u
 const TASK_PATTERN = /^[0-9a-f]{64}$/u
 const SESSION_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,511}$/u
 
@@ -16,7 +16,9 @@ const ALLOWED_HEADERS = new Set([
   "accept-language", "sec-fetch-mode", "user-agent",
   "x-stainless-arch", "x-stainless-lang", "x-stainless-os",
   "x-stainless-package-version", "x-stainless-runtime", "x-stainless-runtime-version",
-  "x-stainless-retry-count", "x-stainless-timeout", "x-stainless-async"
+  "x-stainless-retry-count", "x-stainless-timeout", "x-stainless-async",
+  "x-msh-device-id", "x-msh-device-model", "x-msh-device-name", "x-msh-os-version",
+  "x-msh-platform", "x-msh-version"
 ])
 const BODY_KEYS = new Set([
   "model", "messages", "stream", "stream_options", "tools", "thinking",

package/src/path-safety.js

@@ -0,0 +1,8 @@
+// @ts-check
+
+import {isAbsolute} from "node:path"
+
+/** @param {string} path */
+export function escapesDirectory(path) {
+  return path === ".." || path.startsWith("../") || isAbsolute(path)
+}

package/src/providers/kimi.js

@@ -1,7 +1,7 @@
 // @ts-check
 
 const EXECUTABLE = "/usr/local/bin/kimi"
-const ALIAS_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u
+const ALIAS_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._/-]{0,63}$/u
 const SESSION_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,511}$/u
 const TOOL_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/u
 const TOOL_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_.:-]{0,127}$/u