@deepseek-ai/dsh-api-account-controller 0.1.7-alpha.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.i18n.yaml

@@ -0,0 +1,6 @@
+# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
+# side as of the last confirmed-consistent state. Both languages carry equal authority;
+# after editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write packages/api/account-controller/README.md
+README.md: eb6ef47f91d372a5a7ff895f343ff4a3dcfceb8d
+README.zh.md: 3ab666d576e8c1d10b7f439f818a45d8a4ae23b6

package/README.md

@@ -0,0 +1,53 @@
+---
+description: "Account screens use authenticated Remote commands and a snapshot stream. The controller exposes login state without returning tokens or PKCE secrets."
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-api-account-controller
+
+English | [中文](README.zh.md)
+
+## Summary
+
+Account screens use authenticated Remote commands and a snapshot stream. The controller exposes login state without returning tokens or PKCE secrets.
+
+## Table of Contents
+
+- [Use this package](#use-this-package)
+- [Model Experience](#model-experience)
+- [Known Limitations and Deferred Work](#known-limitations-and-deferred-work)
+
+<a id="use-this-package"></a>
+## Use this package
+
+The account namespace exposes getState, getProfile / getBalance, startSignIn, cancelSignIn, signOut, and watch. watch emits an initial complete state and subsequent complete states; disconnecting stops observation, not the login attempt. Cancellation names the attempt ID so a stale screen cannot cancel a newer login.
+
+<a id="understand-the-implementation"></a>
+## Understand the implementation
+
+The controller forwards operations to the account service and maintains no independent account state; no invariant companion is published.
+
+<a id="further-exploration"></a>
+## Further Exploration
+
+The [credentials subsystem](../../../docs/subsystems/credentials.md) owns storage APIs; the [architecture](../../../docs/architecture.md) explains application composition.
+
+<a id="model-experience"></a>
+## Model Experience
+
+None, as account credentials affect HTTP authentication and never enter model prompts, Session logs, or tool results.
+
+#### KV Cache effect
+
+No model request prefix changes.
+
+## Known Limitations and Deferred Work
+
+<a id="known-limitations-and-deferred-work"></a>
+
+- A disconnected UI can recover account state through watch, but cannot resume an attempt after the Host exits. Credentials and request-token resolution are not Remote operations.
+
+<a id="dev-note"></a>
+### Dev Note
+
+The [desktop login decision](../../../.agents/notes/implemented/architecture/2026-09-14-deepseek-account-login.md) records cancellation and storage ownership.

package/README.zh.md

@@ -0,0 +1,53 @@
+---
+description: "账号页面使用经过认证的 Remote 操作和快照流。控制器提供登录状态，不返回 token 或 PKCE 私密数据。"
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-api-account-controller
+
+[English](README.md) | 中文
+
+## 概述
+
+账号页面使用经过认证的 Remote 操作和快照流。控制器提供登录状态，不返回 token 或 PKCE 私密数据。
+
+## 目录
+
+- [使用此包](#use-this-package)
+- [模型体验](#model-experience)
+- [已知限制与后续工作](#known-limitations-and-deferred-work)
+
+<a id="use-this-package"></a>
+## 使用此包
+
+account 命名空间提供 getState、getProfile / getBalance、startSignIn、cancelSignIn、signOut 和 watch。watch 先发送完整初始状态，随后发送完整状态变化；断开连接只停止观察，不取消登录。取消操作必须指定尝试 ID，防止旧页面取消新登录。
+
+<a id="understand-the-implementation"></a>
+## 理解实现
+
+控制器向账号服务转发操作，不维护独立的账号状态，因此不发布 invariant。
+
+<a id="further-exploration"></a>
+## 深入探索
+
+[凭证子系统](../../../docs/subsystems/credentials.zh.md)定义存储接口；[架构](../../../docs/architecture.zh.md)说明应用组合。
+
+<a id="model-experience"></a>
+## 模型体验
+
+无，因为账号凭证只影响 HTTP 认证，不进入模型提示、Session 日志或工具结果。
+
+#### KV Cache effect
+
+不改变模型请求前缀。
+
+## 已知限制与后续工作
+
+<a id="known-limitations-and-deferred-work"></a>
+
+- UI 断线后可通过 watch 恢复状态，但不能在 Host 退出后恢复登录尝试。凭证和请求 token 解析不对 Remote 暴露。
+
+<a id="dev-note"></a>
+### 开发备注
+
+[桌面登录决策](../../../.agents/notes/implemented/architecture/2026-09-14-deepseek-account-login.zh.md)记录取消和存储的职责。

package/lib/index.js

@@ -0,0 +1,209 @@
+import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
+//#region lib/types/index.js
+var __runInitializers = function(thisArg, initializers, value) {
+	var useValue = arguments.length > 2;
+	for (var i = 0; i < initializers.length; i++) value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+	return useValue ? value : void 0;
+};
+var __esDecorate = function(ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+	function accept(f) {
+		if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected");
+		return f;
+	}
+	var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+	var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+	var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+	var _, done = false;
+	for (var i = decorators.length - 1; i >= 0; i--) {
+		var context = {};
+		for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+		for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+		context.addInitializer = function(f) {
+			if (done) throw new TypeError("Cannot add initializers after decoration has completed");
+			extraInitializers.push(accept(f || null));
+		};
+		var result = (0, decorators[i])(kind === "accessor" ? {
+			get: descriptor.get,
+			set: descriptor.set
+		} : descriptor[key], context);
+		if (kind === "accessor") {
+			if (result === void 0) continue;
+			if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+			if (_ = accept(result.get)) descriptor.get = _;
+			if (_ = accept(result.set)) descriptor.set = _;
+			if (_ = accept(result.init)) initializers.unshift(_);
+		} else if (_ = accept(result)) if (kind === "field") initializers.unshift(_);
+		else descriptor[key] = _;
+	}
+	if (target) Object.defineProperty(target, contextIn.name, descriptor);
+	done = true;
+};
+/** Account commands and reconnect-safe state stream. */
+let AccountController = (() => {
+	let _classSuper = TypertRemoteService;
+	let _instanceExtraInitializers = [];
+	let _getState_decorators;
+	let _getProfile_decorators;
+	let _getBalance_decorators;
+	let _startSignIn_decorators;
+	let _cancelSignIn_decorators;
+	let _signOut_decorators;
+	let _watch_decorators;
+	return class AccountController extends _classSuper {
+		static {
+			const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+			_getState_decorators = [Remote];
+			_getProfile_decorators = [Remote];
+			_getBalance_decorators = [Remote];
+			_startSignIn_decorators = [Remote];
+			_cancelSignIn_decorators = [Remote];
+			_signOut_decorators = [Remote];
+			_watch_decorators = [Remote({ mode: "stream" })];
+			__esDecorate(this, null, _getState_decorators, {
+				kind: "method",
+				name: "getState",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "getState" in obj,
+					get: (obj) => obj.getState
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _getProfile_decorators, {
+				kind: "method",
+				name: "getProfile",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "getProfile" in obj,
+					get: (obj) => obj.getProfile
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _getBalance_decorators, {
+				kind: "method",
+				name: "getBalance",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "getBalance" in obj,
+					get: (obj) => obj.getBalance
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _startSignIn_decorators, {
+				kind: "method",
+				name: "startSignIn",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "startSignIn" in obj,
+					get: (obj) => obj.startSignIn
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _cancelSignIn_decorators, {
+				kind: "method",
+				name: "cancelSignIn",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "cancelSignIn" in obj,
+					get: (obj) => obj.cancelSignIn
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _signOut_decorators, {
+				kind: "method",
+				name: "signOut",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "signOut" in obj,
+					get: (obj) => obj.signOut
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _watch_decorators, {
+				kind: "method",
+				name: "watch",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "watch" in obj,
+					get: (obj) => obj.watch
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			if (_metadata) Object.defineProperty(this, Symbol.metadata, {
+				enumerable: true,
+				configurable: true,
+				writable: true,
+				value: _metadata
+			});
+		}
+		static inject = ["deepseekAccount"];
+		/** @param ctx - Host with the account provider mounted. */
+		constructor(ctx) {
+			super(ctx, "accountController", { namespace: "account" });
+			__runInitializers(this, _instanceExtraInitializers);
+		}
+		/**
+		* Read the safe account projection.
+		* @returns current account and attempt state.
+		*/
+		getState() {
+			return this.ctx.deepseekAccount.getState();
+		}
+		/**
+		* Query display-safe Platform profile data.
+		* @returns profile outcome, or null when the account grant is absent or changed.
+		*/
+		getProfile() {
+			return this.ctx.deepseekAccount.getProfile();
+		}
+		/**
+		* Query Platform recharge-wallet balances.
+		* @returns balance outcome, or null when the account grant is absent or changed.
+		*/
+		getBalance() {
+			return this.ctx.deepseekAccount.getBalance();
+		}
+		/**
+		* Begin browser sign-in.
+		* @param locale - active UI language for a new attempt.
+		* @param callbackOrigin - browser-accessible loopback HTTP origin.
+		* @param loginSource - initiating UI, used to return from a failed exchange.
+		* @returns a new or already-active login attempt.
+		*/
+		startSignIn(locale, callbackOrigin, loginSource) {
+			return this.ctx.deepseekAccount.startSignIn(locale, callbackOrigin, loginSource);
+		}
+		/**
+		* Cancel the named local attempt.
+		* @param attemptId - attempt to cancel.
+		* @returns settled cancellation or commit state.
+		*/
+		cancelSignIn(attemptId) {
+			return this.ctx.deepseekAccount.cancelSignIn(attemptId);
+		}
+		/**
+		* Remove the local account grant and revoke it through Platform in the background, without deleting API keys.
+		* @returns state after removing the local account grant.
+		*/
+		signOut() {
+			return this.ctx.deepseekAccount.signOut();
+		}
+		/**
+		* Stream the safe account projection.
+		* @param signal - stream lifetime.
+		* @returns initial snapshot and subsequent changes.
+		*/
+		watch(signal) {
+			return this.ctx.deepseekAccount.watch(signal);
+		}
+	};
+})();
+//#endregion
+export { AccountController, AccountController as default };

package/lib/typert.host.d.ts

@@ -0,0 +1,3 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from FaceModel — do not edit. */
+
+export declare const TYPERT: unknown

package/lib/typert.host.js

@@ -0,0 +1,273 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from FaceModel — do not edit. */
+import { z } from 'zod'
+
+let _deepseek_ai_dsh_api_account_controller_account_cancelSignIn_parameter_0$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_cancelSignIn_parameter_0$schema = () => (_deepseek_ai_dsh_api_account_controller_account_cancelSignIn_parameter_0$schema$value ??= z.intersection(z.string(), z.unknown()))
+let _deepseek_ai_dsh_api_account_controller_account_cancelSignIn_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_cancelSignIn_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_cancelSignIn_result$schema$value ??= z.object({
+  'status': z.union([z.literal("signed-out"), z.literal("credential-stored")]).readonly(),
+  'links': z.object({
+  'usageUrl': z.string().readonly(),
+  'topUpUrl': z.string().readonly(),
+}).readonly(),
+  'attempt': z.union([z.literal(null), z.object({
+  'id': z.intersection(z.string(), z.unknown()).readonly(),
+  'phase': z.union([z.literal("initializing"), z.literal("waiting-browser"), z.literal("exchanging"), z.literal("committing"), z.literal("succeeded"), z.literal("cancelled"), z.literal("expired"), z.literal("failed")]).readonly(),
+  'authorizeUrl': z.string().readonly().optional(),
+  'expiresAt': z.number().readonly().optional(),
+  'errorCode': z.union([z.literal("expired"), z.literal("network"), z.literal("protocol"), z.literal("storage")]).readonly().optional(),
+})]).readonly(),
+}))
+let _deepseek_ai_dsh_api_account_controller_account_getBalance_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_getBalance_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_getBalance_result$schema$value ??= z.union([z.literal(null), z.object({
+  'status': z.literal("ready").readonly(),
+  'value': z.array(z.object({
+  'currency': z.union([z.literal("CNY"), z.literal("USD")]).readonly(),
+  'balance': z.string().readonly(),
+})).readonly(),
+  'bonusWallets': z.array(z.object({
+  'currency': z.union([z.literal("CNY"), z.literal("USD")]).readonly(),
+  'balance': z.string().readonly(),
+})).readonly(),
+}), z.object({
+  'status': z.literal("failed").readonly(),
+})]))
+let _deepseek_ai_dsh_api_account_controller_account_getProfile_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_getProfile_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_getProfile_result$schema$value ??= z.union([z.literal(null), z.object({
+  'status': z.literal("ready").readonly(),
+  'value': z.object({
+  'id': z.union([z.literal(null), z.intersection(z.string(), z.unknown())]).readonly(),
+  'name': z.union([z.literal(null), z.string()]).readonly(),
+  'contact': z.union([z.literal(null), z.string()]).readonly(),
+  'avatarUrl': z.union([z.literal(null), z.string()]).readonly().optional(),
+}).readonly(),
+}), z.object({
+  'status': z.literal("failed").readonly(),
+})]))
+let _deepseek_ai_dsh_api_account_controller_account_getState_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_getState_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_getState_result$schema$value ??= z.object({
+  'status': z.union([z.literal("signed-out"), z.literal("credential-stored")]).readonly(),
+  'links': z.object({
+  'usageUrl': z.string().readonly(),
+  'topUpUrl': z.string().readonly(),
+}).readonly(),
+  'attempt': z.union([z.literal(null), z.object({
+  'id': z.intersection(z.string(), z.unknown()).readonly(),
+  'phase': z.union([z.literal("initializing"), z.literal("waiting-browser"), z.literal("exchanging"), z.literal("committing"), z.literal("succeeded"), z.literal("cancelled"), z.literal("expired"), z.literal("failed")]).readonly(),
+  'authorizeUrl': z.string().readonly().optional(),
+  'expiresAt': z.number().readonly().optional(),
+  'errorCode': z.union([z.literal("expired"), z.literal("network"), z.literal("protocol"), z.literal("storage")]).readonly().optional(),
+})]).readonly(),
+}))
+let _deepseek_ai_dsh_api_account_controller_account_signOut_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_signOut_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_signOut_result$schema$value ??= z.object({
+  'status': z.union([z.literal("signed-out"), z.literal("credential-stored")]).readonly(),
+  'links': z.object({
+  'usageUrl': z.string().readonly(),
+  'topUpUrl': z.string().readonly(),
+}).readonly(),
+  'attempt': z.union([z.literal(null), z.object({
+  'id': z.intersection(z.string(), z.unknown()).readonly(),
+  'phase': z.union([z.literal("initializing"), z.literal("waiting-browser"), z.literal("exchanging"), z.literal("committing"), z.literal("succeeded"), z.literal("cancelled"), z.literal("expired"), z.literal("failed")]).readonly(),
+  'authorizeUrl': z.string().readonly().optional(),
+  'expiresAt': z.number().readonly().optional(),
+  'errorCode': z.union([z.literal("expired"), z.literal("network"), z.literal("protocol"), z.literal("storage")]).readonly().optional(),
+})]).readonly(),
+}))
+let _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_0$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_0$schema = () => (_deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_0$schema$value ??= z.string())
+let _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_1$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_1$schema = () => (_deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_1$schema$value ??= z.string())
+let _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_2$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_2$schema = () => (_deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_2$schema$value ??= z.union([z.literal("web"), z.literal("desktop")]))
+let _deepseek_ai_dsh_api_account_controller_account_startSignIn_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_startSignIn_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_startSignIn_result$schema$value ??= z.object({
+  'status': z.union([z.literal("signed-out"), z.literal("credential-stored")]).readonly(),
+  'links': z.object({
+  'usageUrl': z.string().readonly(),
+  'topUpUrl': z.string().readonly(),
+}).readonly(),
+  'attempt': z.union([z.literal(null), z.object({
+  'id': z.intersection(z.string(), z.unknown()).readonly(),
+  'phase': z.union([z.literal("initializing"), z.literal("waiting-browser"), z.literal("exchanging"), z.literal("committing"), z.literal("succeeded"), z.literal("cancelled"), z.literal("expired"), z.literal("failed")]).readonly(),
+  'authorizeUrl': z.string().readonly().optional(),
+  'expiresAt': z.number().readonly().optional(),
+  'errorCode': z.union([z.literal("expired"), z.literal("network"), z.literal("protocol"), z.literal("storage")]).readonly().optional(),
+})]).readonly(),
+}))
+let _deepseek_ai_dsh_api_account_controller_account_watch_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_watch_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_watch_result$schema$value ??= z.object({
+  'status': z.union([z.literal("signed-out"), z.literal("credential-stored")]).readonly(),
+  'links': z.object({
+  'usageUrl': z.string().readonly(),
+  'topUpUrl': z.string().readonly(),
+}).readonly(),
+  'attempt': z.union([z.literal(null), z.object({
+  'id': z.intersection(z.string(), z.unknown()).readonly(),
+  'phase': z.union([z.literal("initializing"), z.literal("waiting-browser"), z.literal("exchanging"), z.literal("committing"), z.literal("succeeded"), z.literal("cancelled"), z.literal("expired"), z.literal("failed")]).readonly(),
+  'authorizeUrl': z.string().readonly().optional(),
+  'expiresAt': z.number().readonly().optional(),
+  'errorCode': z.union([z.literal("expired"), z.literal("network"), z.literal("protocol"), z.literal("storage")]).readonly().optional(),
+})]).readonly(),
+}))
+
+export const TYPERT = {
+  package: '@deepseek-ai/dsh-api-account-controller',
+  face: 'host',
+  schemas: [
+  ],
+  invocations: [
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/cancelSignIn',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'cancelSignIn',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'attemptId',
+          wire: 'attemptId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-deepseek-account/types#SignInAttemptId',
+            create: _deepseek_ai_dsh_api_account_controller_account_cancelSignIn_parameter_0$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-deepseek-account/types#AccountView',
+        create: _deepseek_ai_dsh_api_account_controller_account_cancelSignIn_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":46,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/getBalance',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'getBalance',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-api-account-controller#account/getBalance:result',
+        create: _deepseek_ai_dsh_api_account_controller_account_getBalance_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":30,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/getProfile',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'getProfile',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-api-account-controller#account/getProfile:result',
+        create: _deepseek_ai_dsh_api_account_controller_account_getProfile_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":24,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/getState',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'getState',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-deepseek-account/types#AccountView',
+        create: _deepseek_ai_dsh_api_account_controller_account_getState_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":18,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/signOut',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'signOut',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-deepseek-account/types#AccountView',
+        create: _deepseek_ai_dsh_api_account_controller_account_signOut_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":52,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/startSignIn',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'startSignIn',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'locale',
+          wire: 'locale',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-api-account-controller#account/startSignIn:locale',
+            create: _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_0$schema,
+          },
+        },
+        {
+          name: 'callbackOrigin',
+          wire: 'callbackOrigin',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-api-account-controller#account/startSignIn:callbackOrigin',
+            create: _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_1$schema,
+          },
+        },
+        {
+          name: 'loginSource',
+          wire: 'loginSource',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-api-account-controller#account/startSignIn:loginSource',
+            create: _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_2$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-deepseek-account/types#AccountView',
+        create: _deepseek_ai_dsh_api_account_controller_account_startSignIn_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":39,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/watch',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'watch',
+      mode: 'stream',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      cancellation: { parameter: 'signal' },
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-deepseek-account/types#AccountView',
+        create: _deepseek_ai_dsh_api_account_controller_account_watch_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":59,"column":3},
+    },
+  ],
+  model: {
+    "services": [],
+    "events": [],
+    "objects": []
+  },
+}

package/lib/typert.remote-client.d.ts

@@ -0,0 +1,35 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from the Host FaceModel — do not edit. */
+import type {
+  RemoteResult,
+  RemoteStreamHandle,
+  TypertRemoteContribution,
+} from '@deepseek-ai/dsh-typert-protocol'
+import type { AccountDetails, AccountView, SignInAttemptId } from '@deepseek-ai/dsh-deepseek-account/types'
+
+declare module '@deepseek-ai/dsh-typert-protocol' {
+  interface TypertRemoteNamespace$6163636f756e74 {
+    cancelSignIn: (attemptId: SignInAttemptId) => Promise<RemoteResult<AccountView>>
+    getBalance: () => Promise<RemoteResult<AccountDetails['balance'] | null>>
+    getProfile: () => Promise<RemoteResult<AccountDetails['profile'] | null>>
+    getState: () => Promise<RemoteResult<AccountView>>
+    signOut: () => Promise<RemoteResult<AccountView>>
+    startSignIn: (locale: string, callbackOrigin: string, loginSource: 'web' | 'desktop') => Promise<RemoteResult<AccountView>>
+    watch: (signal?: AbortSignal) => RemoteStreamHandle<AccountView, never>
+  }
+  interface TypertRemoteMap {
+    'account/cancelSignIn': (attemptId: SignInAttemptId) => Promise<RemoteResult<AccountView>>
+    'account/getBalance': () => Promise<RemoteResult<AccountDetails['balance'] | null>>
+    'account/getProfile': () => Promise<RemoteResult<AccountDetails['profile'] | null>>
+    'account/getState': () => Promise<RemoteResult<AccountView>>
+    'account/signOut': () => Promise<RemoteResult<AccountView>>
+    'account/startSignIn': (locale: string, callbackOrigin: string, loginSource: 'web' | 'desktop') => Promise<RemoteResult<AccountView>>
+    'account/watch': (signal?: AbortSignal) => RemoteStreamHandle<AccountView, never>
+  }
+  interface TypertRemoteNamespaceMap {
+    'account': TypertRemoteNamespace$6163636f756e74
+  }
+}
+
+export declare const TYPERT_REMOTE: TypertRemoteContribution
+export default TYPERT_REMOTE
+//# sourceMappingURL=typert.remote-client.d.ts.map

package/lib/typert.remote-client.js

@@ -0,0 +1,267 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from the Host FaceModel — do not edit. */
+import { z } from 'zod'
+
+let _deepseek_ai_dsh_api_account_controller_account_cancelSignIn_parameter_0$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_cancelSignIn_parameter_0$schema = () => (_deepseek_ai_dsh_api_account_controller_account_cancelSignIn_parameter_0$schema$value ??= z.intersection(z.string(), z.unknown()))
+let _deepseek_ai_dsh_api_account_controller_account_cancelSignIn_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_cancelSignIn_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_cancelSignIn_result$schema$value ??= z.object({
+  'status': z.union([z.literal("signed-out"), z.literal("credential-stored")]).readonly(),
+  'links': z.object({
+  'usageUrl': z.string().readonly(),
+  'topUpUrl': z.string().readonly(),
+}).readonly(),
+  'attempt': z.union([z.literal(null), z.object({
+  'id': z.intersection(z.string(), z.unknown()).readonly(),
+  'phase': z.union([z.literal("initializing"), z.literal("waiting-browser"), z.literal("exchanging"), z.literal("committing"), z.literal("succeeded"), z.literal("cancelled"), z.literal("expired"), z.literal("failed")]).readonly(),
+  'authorizeUrl': z.string().readonly().optional(),
+  'expiresAt': z.number().readonly().optional(),
+  'errorCode': z.union([z.literal("expired"), z.literal("network"), z.literal("protocol"), z.literal("storage")]).readonly().optional(),
+})]).readonly(),
+}))
+let _deepseek_ai_dsh_api_account_controller_account_getBalance_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_getBalance_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_getBalance_result$schema$value ??= z.union([z.literal(null), z.object({
+  'status': z.literal("ready").readonly(),
+  'value': z.array(z.object({
+  'currency': z.union([z.literal("CNY"), z.literal("USD")]).readonly(),
+  'balance': z.string().readonly(),
+})).readonly(),
+  'bonusWallets': z.array(z.object({
+  'currency': z.union([z.literal("CNY"), z.literal("USD")]).readonly(),
+  'balance': z.string().readonly(),
+})).readonly(),
+}), z.object({
+  'status': z.literal("failed").readonly(),
+})]))
+let _deepseek_ai_dsh_api_account_controller_account_getProfile_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_getProfile_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_getProfile_result$schema$value ??= z.union([z.literal(null), z.object({
+  'status': z.literal("ready").readonly(),
+  'value': z.object({
+  'id': z.union([z.literal(null), z.intersection(z.string(), z.unknown())]).readonly(),
+  'name': z.union([z.literal(null), z.string()]).readonly(),
+  'contact': z.union([z.literal(null), z.string()]).readonly(),
+  'avatarUrl': z.union([z.literal(null), z.string()]).readonly().optional(),
+}).readonly(),
+}), z.object({
+  'status': z.literal("failed").readonly(),
+})]))
+let _deepseek_ai_dsh_api_account_controller_account_getState_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_getState_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_getState_result$schema$value ??= z.object({
+  'status': z.union([z.literal("signed-out"), z.literal("credential-stored")]).readonly(),
+  'links': z.object({
+  'usageUrl': z.string().readonly(),
+  'topUpUrl': z.string().readonly(),
+}).readonly(),
+  'attempt': z.union([z.literal(null), z.object({
+  'id': z.intersection(z.string(), z.unknown()).readonly(),
+  'phase': z.union([z.literal("initializing"), z.literal("waiting-browser"), z.literal("exchanging"), z.literal("committing"), z.literal("succeeded"), z.literal("cancelled"), z.literal("expired"), z.literal("failed")]).readonly(),
+  'authorizeUrl': z.string().readonly().optional(),
+  'expiresAt': z.number().readonly().optional(),
+  'errorCode': z.union([z.literal("expired"), z.literal("network"), z.literal("protocol"), z.literal("storage")]).readonly().optional(),
+})]).readonly(),
+}))
+let _deepseek_ai_dsh_api_account_controller_account_signOut_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_signOut_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_signOut_result$schema$value ??= z.object({
+  'status': z.union([z.literal("signed-out"), z.literal("credential-stored")]).readonly(),
+  'links': z.object({
+  'usageUrl': z.string().readonly(),
+  'topUpUrl': z.string().readonly(),
+}).readonly(),
+  'attempt': z.union([z.literal(null), z.object({
+  'id': z.intersection(z.string(), z.unknown()).readonly(),
+  'phase': z.union([z.literal("initializing"), z.literal("waiting-browser"), z.literal("exchanging"), z.literal("committing"), z.literal("succeeded"), z.literal("cancelled"), z.literal("expired"), z.literal("failed")]).readonly(),
+  'authorizeUrl': z.string().readonly().optional(),
+  'expiresAt': z.number().readonly().optional(),
+  'errorCode': z.union([z.literal("expired"), z.literal("network"), z.literal("protocol"), z.literal("storage")]).readonly().optional(),
+})]).readonly(),
+}))
+let _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_0$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_0$schema = () => (_deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_0$schema$value ??= z.string())
+let _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_1$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_1$schema = () => (_deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_1$schema$value ??= z.string())
+let _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_2$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_2$schema = () => (_deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_2$schema$value ??= z.union([z.literal("web"), z.literal("desktop")]))
+let _deepseek_ai_dsh_api_account_controller_account_startSignIn_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_startSignIn_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_startSignIn_result$schema$value ??= z.object({
+  'status': z.union([z.literal("signed-out"), z.literal("credential-stored")]).readonly(),
+  'links': z.object({
+  'usageUrl': z.string().readonly(),
+  'topUpUrl': z.string().readonly(),
+}).readonly(),
+  'attempt': z.union([z.literal(null), z.object({
+  'id': z.intersection(z.string(), z.unknown()).readonly(),
+  'phase': z.union([z.literal("initializing"), z.literal("waiting-browser"), z.literal("exchanging"), z.literal("committing"), z.literal("succeeded"), z.literal("cancelled"), z.literal("expired"), z.literal("failed")]).readonly(),
+  'authorizeUrl': z.string().readonly().optional(),
+  'expiresAt': z.number().readonly().optional(),
+  'errorCode': z.union([z.literal("expired"), z.literal("network"), z.literal("protocol"), z.literal("storage")]).readonly().optional(),
+})]).readonly(),
+}))
+let _deepseek_ai_dsh_api_account_controller_account_watch_result$schema$value
+const _deepseek_ai_dsh_api_account_controller_account_watch_result$schema = () => (_deepseek_ai_dsh_api_account_controller_account_watch_result$schema$value ??= z.object({
+  'status': z.union([z.literal("signed-out"), z.literal("credential-stored")]).readonly(),
+  'links': z.object({
+  'usageUrl': z.string().readonly(),
+  'topUpUrl': z.string().readonly(),
+}).readonly(),
+  'attempt': z.union([z.literal(null), z.object({
+  'id': z.intersection(z.string(), z.unknown()).readonly(),
+  'phase': z.union([z.literal("initializing"), z.literal("waiting-browser"), z.literal("exchanging"), z.literal("committing"), z.literal("succeeded"), z.literal("cancelled"), z.literal("expired"), z.literal("failed")]).readonly(),
+  'authorizeUrl': z.string().readonly().optional(),
+  'expiresAt': z.number().readonly().optional(),
+  'errorCode': z.union([z.literal("expired"), z.literal("network"), z.literal("protocol"), z.literal("storage")]).readonly().optional(),
+})]).readonly(),
+}))
+
+export const TYPERT_REMOTE = {
+  package: '@deepseek-ai/dsh-api-account-controller',
+  descriptors: [
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/cancelSignIn',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'cancelSignIn',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'attemptId',
+          wire: 'attemptId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-deepseek-account/types#SignInAttemptId',
+            create: _deepseek_ai_dsh_api_account_controller_account_cancelSignIn_parameter_0$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-deepseek-account/types#AccountView',
+        create: _deepseek_ai_dsh_api_account_controller_account_cancelSignIn_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":46,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/getBalance',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'getBalance',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-api-account-controller#account/getBalance:result',
+        create: _deepseek_ai_dsh_api_account_controller_account_getBalance_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":30,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/getProfile',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'getProfile',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-api-account-controller#account/getProfile:result',
+        create: _deepseek_ai_dsh_api_account_controller_account_getProfile_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":24,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/getState',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'getState',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-deepseek-account/types#AccountView',
+        create: _deepseek_ai_dsh_api_account_controller_account_getState_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":18,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/signOut',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'signOut',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-deepseek-account/types#AccountView',
+        create: _deepseek_ai_dsh_api_account_controller_account_signOut_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":52,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/startSignIn',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'startSignIn',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'locale',
+          wire: 'locale',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-api-account-controller#account/startSignIn:locale',
+            create: _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_0$schema,
+          },
+        },
+        {
+          name: 'callbackOrigin',
+          wire: 'callbackOrigin',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-api-account-controller#account/startSignIn:callbackOrigin',
+            create: _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_1$schema,
+          },
+        },
+        {
+          name: 'loginSource',
+          wire: 'loginSource',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-api-account-controller#account/startSignIn:loginSource',
+            create: _deepseek_ai_dsh_api_account_controller_account_startSignIn_parameter_2$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-deepseek-account/types#AccountView',
+        create: _deepseek_ai_dsh_api_account_controller_account_startSignIn_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":39,"column":3},
+    },
+    {
+      id: '@deepseek-ai/dsh-api-account-controller#account/watch',
+      service: 'accountController',
+      namespace: 'account',
+      method: 'watch',
+      mode: 'stream',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      cancellation: { parameter: 'signal' },
+      result: {
+        mode: 'strict',
+        typeSymbol: '@deepseek-ai/dsh-deepseek-account/types#AccountView',
+        create: _deepseek_ai_dsh_api_account_controller_account_watch_result$schema,
+      },
+      sourceLocation: {"file":"packages/api/account-controller/src/index.ts","line":59,"column":3},
+    },
+  ],
+}
+
+export default TYPERT_REMOTE

package/lib/types/index.d.ts

@@ -0,0 +1,53 @@
+/** Authenticated Remote operations for account UI consumers. */
+import { Context } from '@deepseek-ai/cordis';
+import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
+import type { AccountDetails } from '@deepseek-ai/dsh-deepseek-account/types';
+import type { AccountView, SignInAttemptId } from './types.ts';
+/** Account commands and reconnect-safe state stream. */
+export declare class AccountController extends TypertRemoteService {
+    static inject: string[];
+    /** @param ctx - Host with the account provider mounted. */
+    constructor(ctx: Context);
+    /**
+     * Read the safe account projection.
+     * @returns current account and attempt state.
+     */
+    getState(): Promise<AccountView>;
+    /**
+     * Query display-safe Platform profile data.
+     * @returns profile outcome, or null when the account grant is absent or changed.
+     */
+    getProfile(): Promise<AccountDetails['profile'] | null>;
+    /**
+     * Query Platform recharge-wallet balances.
+     * @returns balance outcome, or null when the account grant is absent or changed.
+     */
+    getBalance(): Promise<AccountDetails['balance'] | null>;
+    /**
+     * Begin browser sign-in.
+     * @param locale - active UI language for a new attempt.
+     * @param callbackOrigin - browser-accessible loopback HTTP origin.
+     * @param loginSource - initiating UI, used to return from a failed exchange.
+     * @returns a new or already-active login attempt.
+     */
+    startSignIn(locale: string, callbackOrigin: string, loginSource: 'web' | 'desktop'): Promise<AccountView>;
+    /**
+     * Cancel the named local attempt.
+     * @param attemptId - attempt to cancel.
+     * @returns settled cancellation or commit state.
+     */
+    cancelSignIn(attemptId: SignInAttemptId): Promise<AccountView>;
+    /**
+     * Remove the local account grant and revoke it through Platform in the background, without deleting API keys.
+     * @returns state after removing the local account grant.
+     */
+    signOut(): Promise<AccountView>;
+    /**
+     * Stream the safe account projection.
+     * @param signal - stream lifetime.
+     * @returns initial snapshot and subsequent changes.
+     */
+    watch(signal: AbortSignal): AsyncIterable<AccountView>;
+}
+export default AccountController;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/index.js

@@ -0,0 +1,116 @@
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+import { Remote, TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
+/** Account commands and reconnect-safe state stream. */
+let AccountController = (() => {
+    let _classSuper = TypertRemoteService;
+    let _instanceExtraInitializers = [];
+    let _getState_decorators;
+    let _getProfile_decorators;
+    let _getBalance_decorators;
+    let _startSignIn_decorators;
+    let _cancelSignIn_decorators;
+    let _signOut_decorators;
+    let _watch_decorators;
+    return class AccountController extends _classSuper {
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+            _getState_decorators = [Remote];
+            _getProfile_decorators = [Remote];
+            _getBalance_decorators = [Remote];
+            _startSignIn_decorators = [Remote];
+            _cancelSignIn_decorators = [Remote];
+            _signOut_decorators = [Remote];
+            _watch_decorators = [Remote({ mode: 'stream' })];
+            __esDecorate(this, null, _getState_decorators, { kind: "method", name: "getState", static: false, private: false, access: { has: obj => "getState" in obj, get: obj => obj.getState }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _getProfile_decorators, { kind: "method", name: "getProfile", static: false, private: false, access: { has: obj => "getProfile" in obj, get: obj => obj.getProfile }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _getBalance_decorators, { kind: "method", name: "getBalance", static: false, private: false, access: { has: obj => "getBalance" in obj, get: obj => obj.getBalance }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _startSignIn_decorators, { kind: "method", name: "startSignIn", static: false, private: false, access: { has: obj => "startSignIn" in obj, get: obj => obj.startSignIn }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _cancelSignIn_decorators, { kind: "method", name: "cancelSignIn", static: false, private: false, access: { has: obj => "cancelSignIn" in obj, get: obj => obj.cancelSignIn }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _signOut_decorators, { kind: "method", name: "signOut", static: false, private: false, access: { has: obj => "signOut" in obj, get: obj => obj.signOut }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _watch_decorators, { kind: "method", name: "watch", static: false, private: false, access: { has: obj => "watch" in obj, get: obj => obj.watch }, metadata: _metadata }, null, _instanceExtraInitializers);
+            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+        }
+        static inject = ['deepseekAccount'];
+        /** @param ctx - Host with the account provider mounted. */
+        constructor(ctx) {
+            super(ctx, 'accountController', { namespace: 'account' });
+            __runInitializers(this, _instanceExtraInitializers);
+        }
+        /**
+         * Read the safe account projection.
+         * @returns current account and attempt state.
+         */
+        getState() { return this.ctx.deepseekAccount.getState(); }
+        /**
+         * Query display-safe Platform profile data.
+         * @returns profile outcome, or null when the account grant is absent or changed.
+         */
+        getProfile() { return this.ctx.deepseekAccount.getProfile(); }
+        /**
+         * Query Platform recharge-wallet balances.
+         * @returns balance outcome, or null when the account grant is absent or changed.
+         */
+        getBalance() { return this.ctx.deepseekAccount.getBalance(); }
+        /**
+         * Begin browser sign-in.
+         * @param locale - active UI language for a new attempt.
+         * @param callbackOrigin - browser-accessible loopback HTTP origin.
+         * @param loginSource - initiating UI, used to return from a failed exchange.
+         * @returns a new or already-active login attempt.
+         */
+        startSignIn(locale, callbackOrigin, loginSource) { return this.ctx.deepseekAccount.startSignIn(locale, callbackOrigin, loginSource); }
+        /**
+         * Cancel the named local attempt.
+         * @param attemptId - attempt to cancel.
+         * @returns settled cancellation or commit state.
+         */
+        cancelSignIn(attemptId) { return this.ctx.deepseekAccount.cancelSignIn(attemptId); }
+        /**
+         * Remove the local account grant and revoke it through Platform in the background, without deleting API keys.
+         * @returns state after removing the local account grant.
+         */
+        signOut() { return this.ctx.deepseekAccount.signOut(); }
+        /**
+         * Stream the safe account projection.
+         * @param signal - stream lifetime.
+         * @returns initial snapshot and subsequent changes.
+         */
+        watch(signal) { return this.ctx.deepseekAccount.watch(signal); }
+    };
+})();
+export { AccountController };
+export default AccountController;
+//# sourceMappingURL=index.js.map

package/lib/types/types.d.ts

@@ -0,0 +1,3 @@
+/** Account Remote values contain no credential payloads. */
+export type { AccountDetails, AccountView, SignInAttemptId } from '@deepseek-ai/dsh-deepseek-account/types';
+//# sourceMappingURL=types.d.ts.map

package/lib/types/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@deepseek-ai/dsh-api-account-controller",
+  "description": "Expose safe account operations over authenticated Remote",
+  "version": "0.1.7-alpha.1",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/deepseek-ai/deepseek-harness.git",
+    "directory": "packages/api/account-controller"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./types": {
+      "types": "./lib/types/types.d.ts",
+      "default": "./lib/types/types.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json",
+    "./typert": {
+      "types": "./lib/typert.host.d.ts",
+      "default": "./lib/typert.host.js"
+    },
+    "./remote": {
+      "types": "./lib/typert.remote-client.d.ts",
+      "default": "./lib/typert.remote-client.js"
+    }
+  },
+  "files": [
+    "lib/index.js",
+    "lib/types/**/*.js",
+    "lib/types/**/*.d.ts",
+    "lib/typert.host.js",
+    "lib/typert.host.d.ts",
+    "lib/typert.remote-client.js",
+    "lib/typert.remote-client.d.ts"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "zod": "^4.4.3"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.3",
+    "@deepseek-ai/dsh-deepseek-account": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-typert-protocol": "^0.1.7-alpha.1"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.3",
+    "@deepseek-ai/dsh-deepseek-account": "^0.1.7-alpha.1",
+    "@deepseek-ai/dsh-typert-protocol": "^0.1.7-alpha.1"
+  }
+}