@deepseek-ai/dsh-deepseek-account 0.1.7-alpha.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.i18n.yaml

@@ -0,0 +1,6 @@
+# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
+# side as of the last confirmed-consistent state. Both languages carry equal authority;
+# after editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write packages/credentials/deepseek-account/README.md
+README.md: 72b42ee996b809992e48ea4c124f0793d756526a
+README.zh.md: b30813e24adc2afc9e8245b839432dd195093c63

package/README.md

@@ -0,0 +1,63 @@
+---
+description: "Account consumers read stored login state, start or cancel a browser login, and sign out without editing API keys. Host model consumers resolve account credentials only for the provider-configured inference origin."
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-deepseek-account
+
+English | [中文](README.zh.md)
+
+getPlatformSession returns a Host-only origin/token snapshot for native Platform embedding, or null when signed out. It is absent from account-controller RPC and Client state. Consumers destroy documents holding a snapshot when the account changes.
+
+`desktopClientHeaders` maps the native `darwin` and `win32` platforms to the shared Desktop account and update-policy request header; `null` adds no header.
+
+## Summary
+
+Account consumers read stored login state, start or cancel a browser login, and sign out without editing API keys. Host model consumers resolve account credentials only for the provider-configured inference origin.
+
+## Table of Contents
+
+- [Use this package](#use-this-package)
+- [Model Experience](#model-experience)
+- [Known Limitations and Deferred Work](#known-limitations-and-deferred-work)
+
+<a id="use-this-package"></a>
+## Use this package
+
+`AccountProfile.avatarUrl` is an optional profile image URL; null or absence means no avatar.
+
+The service defines account operations and reconnectable state snapshots. The platform provider owns the protocol and stored grant. Credentials are Host-only; the API controller exports state and commands without resolveToken.
+
+<a id="understand-the-implementation"></a>
+## Understand the implementation
+
+The service defines account operations without maintaining a second credential index; no invariant companion is published. The provider owns persistence and login lifecycle checks.
+
+<a id="further-exploration"></a>
+## Further Exploration
+
+The [credentials subsystem](../../../docs/subsystems/credentials.md) owns storage APIs; the [architecture](../../../docs/architecture.md) explains application composition.
+
+A ready AccountDetails.balance keeps recharge wallets in value and bonus wallets in bonusWallets; both arrays preserve decimal strings and currency. Query failure supplies neither amount.
+
+<a id="model-experience"></a>
+## Model Experience
+
+None, as account credentials affect HTTP authentication and never enter model prompts, Session logs, or tool results.
+
+#### KV Cache effect
+
+No model request prefix changes.
+
+## Known Limitations and Deferred Work
+
+<a id="known-limitations-and-deferred-work"></a>
+
+- Account tokens have no expiry or refresh flow. Sign-out removes the local grant before background provider revocation; remote logout failures never restore local login. Profile and balance query failures retain the stored grant. getProfile / getBalance reports profile and balance query outcomes independently.
+
+<a id="dev-note"></a>
+### Dev Note
+
+The [desktop login decision](../../../.agents/notes/implemented/architecture/2026-09-14-deepseek-account-login.md) records cancellation and storage ownership.
+
+PlatformSession may carry private deployment requestHeaders from Host to Electron main. Consumers must exclude those headers from renderer bootstrap and restrict them to the configured origin. mergePlatformCookies preserves unrelated cookie pairs while replacing matching names.

package/README.zh.md

@@ -0,0 +1,63 @@
+---
+description: "账号使用方可读取本地登录状态、发起或取消浏览器登录，并在保留 API Key 的情况下退出。Host 模型使用方仅能为提供者配置的推理来源解析账号凭证。"
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-deepseek-account
+
+[English](README.md) | 中文
+
+getPlatformSession 为原生 Platform 内嵌提供仅限 Host 的 origin/token 快照，退登时返回 null。账号控制器 RPC 和 Client 状态不包含此方法及快照。账号变化时，使用方销毁持有旧快照的文档。
+
+`desktopClientHeaders` 将原生平台 `darwin` 和 `win32` 映射为 Desktop 账号与更新策略请求共用的请求头；`null` 不添加请求头。
+
+## 概述
+
+账号使用方可读取本地登录状态、发起或取消浏览器登录，并在保留 API Key 的情况下退出。Host 模型使用方仅能为提供者配置的推理来源解析账号凭证。
+
+## 目录
+
+- [使用此包](#use-this-package)
+- [模型体验](#model-experience)
+- [已知限制与后续工作](#known-limitations-and-deferred-work)
+
+<a id="use-this-package"></a>
+## 使用此包
+
+`AccountProfile.avatarUrl` 是可选的账号头像 URL；为空或缺失时表示没有头像。
+
+该服务定义账号操作和可重连的状态快照。平台提供者负责协议和授权记录。凭证仅限 Host；API 控制器只导出状态与操作，不导出 resolveToken。
+
+<a id="understand-the-implementation"></a>
+## 理解实现
+
+服务只定义账号操作，不维护第二份凭证索引，因此不发布 invariant。提供者负责持久化和登录生命周期检查。
+
+<a id="further-exploration"></a>
+## 深入探索
+
+[凭证子系统](../../../docs/subsystems/credentials.zh.md)定义存储接口；[架构](../../../docs/architecture.zh.md)说明应用组合。
+
+AccountDetails.balance 就绪时，value 保存充值钱包，bonusWallets 保存赠送钱包；两个数组均保留十进制金额字符串和币种。查询失败不提供金额。
+
+<a id="model-experience"></a>
+## 模型体验
+
+无，因为账号凭证只影响 HTTP 认证，不进入模型提示、Session 日志或工具结果。
+
+#### KV Cache effect
+
+不改变模型请求前缀。
+
+## 已知限制与后续工作
+
+<a id="known-limitations-and-deferred-work"></a>
+
+- 账号 token 没有过期或刷新流程。退出时先移除本地授权，再由提供者在后台撤销；远程退登失败不会恢复本地登录态。资料和余额查询失败保留已存储授权。getProfile / getBalance 分别报告资料和余额的查询结果。
+
+<a id="dev-note"></a>
+### 开发备注
+
+[桌面登录决策](../../../.agents/notes/implemented/architecture/2026-09-14-deepseek-account-login.zh.md)记录取消和存储的职责。
+
+PlatformSession 可将私有部署 requestHeaders 从 Host 传至 Electron 主进程。消费者必须从渲染层 bootstrap 排除这些请求头，并将其限定于配置来源。mergePlatformCookies 替换同名 Cookie，同时保留其他 Cookie。

package/lib/index.js

@@ -0,0 +1,35 @@
+import { Service } from "@deepseek-ai/cordis";
+//#region lib/types/index.js
+/** Account Service Definition shared by platform, API, and model consumers. */
+/** Account operations; only Host consumers can obtain a request credential. */
+var DeepSeekAccount = class extends Service {
+	/** @param ctx - context owning this account implementation. */
+	constructor(ctx) {
+		super(ctx, "deepseekAccount");
+	}
+};
+/** Merge Cookie header pairs by case-sensitive name, retaining unrelated cookies.
+* @param base - existing request cookies.
+* @param override - deployment cookies whose values take precedence.
+* @returns one Cookie header with at most one pair per name.
+*/
+function mergePlatformCookies(base, override) {
+	const cookies = /* @__PURE__ */ new Map();
+	for (const header of [base, override]) for (const pair of header.split(";")) {
+		const separator = pair.indexOf("=");
+		if (separator < 1) continue;
+		cookies.set(pair.slice(0, separator).trim(), pair.slice(separator + 1).trim());
+	}
+	return [...cookies].map(([name, value]) => `${name}=${value}`).join("; ");
+}
+/**
+* Identify native desktop API requests; null leaves non-desktop requests unchanged.
+* @param platform - Operating system supplied by the desktop composition.
+* @returns Platform request headers shared by account and update-policy clients.
+*/
+function desktopClientHeaders(platform) {
+	if (platform === null) return {};
+	return { "x-client-platform": platform === "win32" ? "desktop-win" : "desktop-mac" };
+}
+//#endregion
+export { DeepSeekAccount, DeepSeekAccount as default, desktopClientHeaders, mergePlatformCookies };

package/lib/types/index.d.ts

@@ -0,0 +1,88 @@
+/** Account Service Definition shared by platform, API, and model consumers. */
+import { Context, Service } from '@deepseek-ai/cordis';
+import type { AccountDetails, AccountView, SignInAttemptId } from './types.ts';
+export type { AccountDetails, AccountProfile, AccountWallet, AccountLinks, AccountView, SignInAttemptId, SignInAttemptView, SignInErrorCode } from './types.ts';
+declare module '@deepseek-ai/cordis' {
+    interface Context {
+        deepseekAccount: DeepSeekAccount;
+    }
+}
+/** Host-only credentials for an embedded Platform document; never expose through account RPC. */
+export interface PlatformSession {
+    readonly origin: string;
+    readonly token: string;
+    /** Optional dist query value selecting the embedded frontend deployment. */
+    readonly embeddedPageDist?: string;
+    /** Private deployment headers for native requests; excluded from renderer bootstrap. */
+    readonly requestHeaders?: Readonly<Record<string, string>>;
+}
+/** Account operations; only Host consumers can obtain a request credential. */
+export declare abstract class DeepSeekAccount extends Service {
+    /** @param ctx - context owning this account implementation. */
+    constructor(ctx: Context);
+    /**
+     * Read stored-account presence and the latest login attempt.
+     * @returns a snapshot without credentials or PKCE secrets.
+     */
+    abstract getState(): Promise<AccountView>;
+    /**
+     * Query Platform profile independently of wallet balances.
+     * @returns profile outcome, or null if signed out or the grant changed during the query.
+     */
+    abstract getProfile(): Promise<AccountDetails['profile'] | null>;
+    /**
+     * Query Platform recharge and bonus wallet balances independently of profile data.
+     * @returns balance outcome, or null if signed out or the grant changed during the query.
+     */
+    abstract getBalance(): Promise<AccountDetails['balance'] | null>;
+    /**
+     * Join an active attempt or start browser authorization.
+     * @param locale - active UI language for a new attempt; joining retains its original language.
+     * @param callbackOrigin - browser-accessible loopback HTTP origin, including any SSH local port.
+     * @param loginSource - initiating UI, used to return from a failed exchange.
+     * @returns the initial snapshot without waiting for browser approval.
+     */
+    abstract startSignIn(locale: string, callbackOrigin: string, loginSource: 'web' | 'desktop'): Promise<AccountView>;
+    /**
+     * Cancel only the named attempt; committing attempts settle before returning.
+     * @param id - attempt identity from this Host.
+     * @returns state after cancellation or an already-started commit.
+     */
+    abstract cancelSignIn(id: SignInAttemptId): Promise<AccountView>;
+    /**
+     * Remove the local grant while retaining API keys and tasks; the provider revokes it in the background.
+     * @returns the signed-out state after local removal; remote failures never restore the grant.
+     */
+    abstract signOut(): Promise<AccountView>;
+    /**
+     * Subscribe to snapshots including a complete initial state.
+     * @param signal - subscription lifetime; ending it never cancels login.
+     * @returns complete snapshots as account state changes.
+     */
+    abstract watch(signal: AbortSignal): AsyncIterable<AccountView>;
+    /**
+     * Resolve a credential only for the inference origin allowed by the provider.
+     * @param url - actual request destination or API base URL.
+     * @returns stored token, or undefined for other origins or a signed-out account.
+     */
+    abstract resolveToken(url: string): Promise<string | undefined>;
+    /**
+     * Read credentials for the configured Platform origin, bound to their issuing environment.
+     * @returns a Host-only snapshot, or null while signed out.
+     */
+    abstract getPlatformSession(): Promise<PlatformSession | null>;
+}
+export default DeepSeekAccount;
+/** Merge Cookie header pairs by case-sensitive name, retaining unrelated cookies.
+ * @param base - existing request cookies.
+ * @param override - deployment cookies whose values take precedence.
+ * @returns one Cookie header with at most one pair per name.
+ */
+export declare function mergePlatformCookies(base: string, override: string): string;
+/**
+ * Identify native desktop API requests; null leaves non-desktop requests unchanged.
+ * @param platform - Operating system supplied by the desktop composition.
+ * @returns Platform request headers shared by account and update-policy clients.
+ */
+export declare function desktopClientHeaders(platform: 'darwin' | 'win32' | null): Record<string, string>;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/index.js

@@ -0,0 +1,36 @@
+/** Account Service Definition shared by platform, API, and model consumers. */
+import { Service } from '@deepseek-ai/cordis';
+/** Account operations; only Host consumers can obtain a request credential. */
+export class DeepSeekAccount extends Service {
+    /** @param ctx - context owning this account implementation. */
+    constructor(ctx) { super(ctx, 'deepseekAccount'); }
+}
+export default DeepSeekAccount;
+/** Merge Cookie header pairs by case-sensitive name, retaining unrelated cookies.
+ * @param base - existing request cookies.
+ * @param override - deployment cookies whose values take precedence.
+ * @returns one Cookie header with at most one pair per name.
+ */
+export function mergePlatformCookies(base, override) {
+    const cookies = new Map();
+    for (const header of [base, override]) {
+        for (const pair of header.split(';')) {
+            const separator = pair.indexOf('=');
+            if (separator < 1)
+                continue;
+            cookies.set(pair.slice(0, separator).trim(), pair.slice(separator + 1).trim());
+        }
+    }
+    return [...cookies].map(([name, value]) => `${name}=${value}`).join('; ');
+}
+/**
+ * Identify native desktop API requests; null leaves non-desktop requests unchanged.
+ * @param platform - Operating system supplied by the desktop composition.
+ * @returns Platform request headers shared by account and update-policy clients.
+ */
+export function desktopClientHeaders(platform) {
+    if (platform === null)
+        return {};
+    return { 'x-client-platform': platform === 'win32' ? 'desktop-win' : 'desktop-mac' };
+}
+//# sourceMappingURL=index.js.map

package/lib/types/types.d.ts

@@ -0,0 +1,57 @@
+/** Client-safe account state; credentials never cross this projection. */
+import type { Branded } from '@deepseek-ai/dsh-brand';
+/** Identity of one local login attempt, unrelated to the platform request ID. */
+export type SignInAttemptId = Branded<'SignInAttemptId'>;
+/** Safe failure codes rendered through the caller's locale dictionary. */
+export type SignInErrorCode = 'network' | 'protocol' | 'expired' | 'storage';
+/** Latest login attempt, including terminal outcomes until the next attempt. */
+export interface SignInAttemptView {
+    readonly id: SignInAttemptId;
+    readonly phase: 'initializing' | 'waiting-browser' | 'exchanging' | 'committing' | 'succeeded' | 'cancelled' | 'expired' | 'failed';
+    readonly authorizeUrl?: string;
+    readonly expiresAt?: number;
+    readonly errorCode?: SignInErrorCode;
+}
+/** Browser destinations derived from the Host's platform configuration; never carry tokens. */
+export interface AccountLinks {
+    readonly usageUrl: string;
+    readonly topUpUrl: string;
+}
+/** Stored-account presence is not a claim that the server has validated its token. */
+export interface AccountView {
+    readonly status: 'signed-out' | 'credential-stored';
+    readonly links: AccountLinks;
+    readonly attempt: SignInAttemptView | null;
+}
+/** Platform account identifier supplied by the current-user endpoint. */
+export type AccountUserId = Branded<'AccountUserId'>;
+/** Display identity and support UID; contacts retain Platform masking. */
+export interface AccountProfile {
+    readonly id: AccountUserId | null;
+    readonly name: string | null;
+    readonly contact: string | null;
+    /** Profile image URL supplied by Platform, absent when no picture is configured. */
+    readonly avatarUrl?: string | null;
+}
+/** Platform recharge or bonus wallet balance; decimal strings retain server precision. */
+export interface AccountWallet {
+    readonly currency: 'CNY' | 'USD';
+    readonly balance: string;
+}
+/** Independent query outcomes allow profile and balance failures to render separately. */
+export interface AccountDetails {
+    readonly profile: {
+        readonly status: 'ready';
+        readonly value: AccountProfile;
+    } | {
+        readonly status: 'failed';
+    };
+    readonly balance: {
+        readonly status: 'ready';
+        readonly value: readonly AccountWallet[];
+        readonly bonusWallets: readonly AccountWallet[];
+    } | {
+        readonly status: 'failed';
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/types/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@deepseek-ai/dsh-deepseek-account",
+  "description": "Read account state and resolve official API credentials",
+  "version": "0.1.7-alpha.1",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/deepseek-ai/deepseek-harness.git",
+    "directory": "packages/credentials/deepseek-account"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./types": {
+      "types": "./lib/types/types.d.ts",
+      "default": "./lib/types/types.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/types/**/*.js",
+    "lib/types/**/*.d.ts"
+  ],
+  "license": "MIT",
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.3",
+    "@deepseek-ai/dsh-brand": "^0.1.7-alpha.1"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.3",
+    "@deepseek-ai/dsh-brand": "^0.1.7-alpha.1"
+  }
+}