@deepseek-harness-tui/dsh-tui 0.11.1 → 0.12.0

package/node_modules/@deepseek-harness-tui/dsh-auth/README.md

@@ -1,143 +0,0 @@
-# @deepseek-harness-tui/dsh-auth
-
-> Subscription OAuth sign-in for [dsh-TUI](https://github.com/ccch1mneyyy/dsh-TUI) and
-> [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)
-
-Use your **ChatGPT (Plus/Pro)**, **Claude (Pro/Max)** and **SuperGrok / X Premium**
-subscriptions as model providers — sign in with the official account, no API
-keys, and **no dsh source patch**. This plugin is developed alongside (and
-bundled into) [dsh-TUI](https://github.com/ccch1mneyyy/dsh-TUI), the
-Claude Code style terminal front door for DeepSeek Harness; it also installs
-standalone into any dsh profile.
-
-```
-dsh-tui → /provider → 订阅账号登录（OAuth）→ sign in   ← the TUI integration
-          /auth login openai-codex                     ← the plugin command
-          /model → OpenAI Codex → gpt-5.6-sol          ← routes & models
-```
-
-**Status: experimental (M1).** The OAuth flows themselves are
-[pi-ai](https://www.npmjs.com/package/@earendil-works/pi-ai)'s shipped
-implementations (device-code and loopback callback included); this plugin
-adds the hosting: credential storage, automatic token refresh, adapter
-registration, and a login surface over the `userQuestions` seam that works in
-the TUI, the web client, and refuses cleanly on headless hosts.
-
-## Install
-
-**With dsh-TUI** — nothing to do: dsh-auth ships inside the dsh-tui package
-(bundled dependency). Update dsh-tui and the `/provider` wizard gains its
-subscription sign-in branch automatically.
-
-**Standalone, into any dsh profile:**
-
-```sh
-dsh plugin --profile <name> add @deepseek-harness-tui/dsh-auth
-```
-
-Then restart the host; `/` lists `auth`, and every model picker gains the
-signed-in providers' catalogs (credential-gated — see below).
-
-## What it does
-
-- Mounts the pi-ai catalog providers that ship OAuth flows as `llm` registry
-  routes: `openai-codex`, `anthropic`, `xai`. **Models appear in a picker
-  only after that provider is signed in** (credential-gated listing) — sign
-  in and the catalog appears, sign out and it disappears; model ids already
-  saved in sessions stay resolvable either way.
-- Loads those Provider objects from the exact pi-ai dependency owned by the
-  installed `dsh-llm-pi-ai`. rc and alpha hosts therefore keep their supported
-  pi-ai versions without passing Provider objects across package instances.
-- `/auth login [provider]` runs the provider's OAuth flow interactively. The
-  waiting panel behaves the way pi's host does: the authorization URL is
-  **opened in your browser automatically** (never hand-copied — the URL is
-  hundreds of characters and wrap artifacts corrupt its `redirect_uri`),
-  and the panel offers *Copy authorization link* / *Open browser again* /
-  *Cancel sign-in*. Device-code flows open the verification page and make
-  the short code the copy target. OpenAI Codex also offers a device-code
-  login method — the most robust path on headless or locked-down machines
-  (no localhost:1455 callback needed).
-- Stored access tokens refresh automatically before each request, serialized
-  per provider under the credential store's lock — concurrent requests never
-  double-refresh a rotated token.
-- `/auth status` / `/auth logout <provider>`; the `ctx.dshAuth` service
-  exposes the same api for UIs (the dsh-tui `/provider` wizard and `/login`
-  ride it).
-
-## Usage
-
-```
-/auth                          # status: which providers are signed in
-/auth login                    # pick a provider interactively
-/auth login openai-codex       # ChatGPT (Plus/Pro)
-/auth login anthropic          # Claude (Pro/Max)
-/auth login xai                # SuperGrok / X Premium
-/auth logout anthropic
-```
-
-Model requests against a provider you have not signed in to fail loudly with
-the `/auth login <provider>` hint — never silently.
-
-## Configuration
-
-```yaml
-- id: dsh-auth
-  name: '@deepseek-harness-tui/dsh-auth'
-  config:
-    providers: [openai-codex, anthropic, xai]   # any non-empty subset
-    # credentialsFile: /secure/path/credentials.json
-```
-
-- `credentialsFile` defaults to `$DSH_HOME/dsh-auth/credentials.json`
-  (`~/.dsh/dsh-auth/credentials.json`), overridable with the
-  `DSH_AUTH_CREDENTIALS` environment variable. The directory is created
-  `0700`, the file `0600` (best-effort on Windows), and every write is
-  atomic (temp file + rename).
-- A route another adapter family already owns — an `llm-pi-ai` settings
-  profile naming the same provider — is refused by the registry; the plugin
-  logs the refusal and mounts the remaining routes. Keep one provider on one
-  adapter.
-
-## Security notes
-
-- The credential file holds **long-lived refresh tokens**. It is never
-  logged, never echoed through status surfaces (`/auth status` shows expiry
-  metadata only), and a corrupt file fails loudly instead of being
-  overwritten.
-- Secret prompts warn that terminal input is not masked on this surface.
-- Login refuses to run where no interactive surface is registered (no
-  browser/GUI assumptions — remote and headless hosts get a clear error,
-  per the ecosystem spec's remote-determinism rule, TUI-RUN-001).
-- Subscription authentication and API-key access are different products:
-  this plugin uses each provider's subscription backend only (ChatGPT Codex
-  backend for OpenAI, Claude Pro/Max for Anthropic) and does not turn a
-  subscription into a general-purpose API credential.
-
-## Development
-
-```sh
-pnpm install
-pnpm verify     # build + headless smoke (credential store, refresh
-                # serialization, prompt bridging, gating, service api)
-```
-
-The smoke suite runs without cordis or a harness: the pure modules are
-exercised directly. Real end-to-end login needs an interactive host
-(dsh-tui) and is verified manually per release. The plugin is developed in
-the [dsh-TUI repository](https://github.com/ccch1mneyyy/dsh-TUI) as the
-`dsh-auth/` submodule and mirrors to this repository.
-
-## Roadmap
-
-- **M2** *(landed)* — dsh-tui integration: `/provider` OAuth branch, `/login`
-  account section, two-level `/model` picker with a pinned recently-used
-  group.
-- **M3** — `dsh-ecosystem-spec` conformance (manifest validation, admission
-  fixtures) plus the remaining pi-ai OAuth providers (GitHub Copilot,
-  OpenRouter, Kimi); community list entry.
-- **M4** — Gemini: a custom Google device-code flow (pi-ai ships none; this
-  is the one wheel this project plans to build itself).
-
-## License
-
-MIT

package/node_modules/@deepseek-harness-tui/dsh-auth/cordis.patch.yml

@@ -1,11 +0,0 @@
-# @deepseek-harness-tui/dsh-auth bundle patch: mounts the subscription OAuth
-# provider routes and the /auth command as a profile layer
-# (`dsh plugin --profile <name> add @deepseek-harness-tui/dsh-auth`).
-#
-# Entry-level inject — never a code-level one (see the plugin module's
-# `inject` export): a stale patch must not deadlock a composition whose
-# llm/commands services arrive later or are absent entirely.
-- insert:
-    - id: dsh-auth
-      name: '@deepseek-harness-tui/dsh-auth'
-      inject: [llm, commands]

package/node_modules/@deepseek-harness-tui/dsh-auth/dsh-plugin.json

@@ -1,44 +0,0 @@
-{
-  "$schema": "https://dsh.community/schemas/dsh-plugin-0.15.json",
-  "id": "com.dsh-tui.dsh-auth",
-  "name": "dsh-auth",
-  "version": "0.1.0",
-  "manifestVersion": "0.15",
-  "description": "Subscription OAuth sign-in (ChatGPT/Codex, Claude Pro/Max, SuperGrok) as LLM provider routes for DeepSeek Harness. Registers llm adapter routes through the cordis llm registry; interactive login runs over the user-questions seam and degrades to a clear refusal when no interactive surface is present.",
-  "facets": {
-    "host": {
-      "entry": "lib/index.js",
-      "apiVersion": "v1alpha1"
-    }
-  },
-  "requires": {
-    "contracts": [
-      {
-        "apiVersion": "commands.dsh/v1alpha1",
-        "kind": "Command"
-      },
-      {
-        "apiVersion": "user-questions.dsh/v1alpha1",
-        "kind": "UserQuestions",
-        "optional": true,
-        "fallback": "login refuses with guidance instead of assuming a browser or GUI is present (TUI-RUN-001)"
-      }
-    ]
-  },
-  "contributes": {
-    "commands": [
-      {
-        "id": "dsh.auth",
-        "title": "Sign in with a provider subscription (OAuth)"
-      }
-    ]
-  },
-  "permissions": [
-    {
-      "name": "commands.invoke",
-      "scope": "dsh.auth",
-      "reason": "run /auth status|login|logout from any composed command surface"
-    }
-  ],
-  "license": "MIT"
-}

package/node_modules/@deepseek-harness-tui/dsh-auth/lib/interaction.js

@@ -1,193 +0,0 @@
-/**
- * The `AuthInteraction` bridge: pi-ai OAuth flows speak prompts and events;
- * every interactive surface in this ecosystem speaks `ctx.userQuestions`.
- *
- * `prompt()` maps one pi-ai prompt onto one question — `select` prompts carry
- * their options, text/secret/manual-code prompts expect the custom-answer
- * input row.
- *
- * `notify()` restores the host contract pi-ai's browser flows assume: the
- * `auth_url` / `device_code` events expect the *host* to open the browser
- * (their authorize URLs run hundreds of characters — wrapped across panel
- * lines they are unclickable, and hand-copying picks up wrap artifacts that
- * corrupt the encoded `redirect_uri`, which the provider then rejects). So
- * the bridge opens the URL itself, then shows one waiting panel carrying
- * copy / reopen / cancel actions until the flow settles. The device-code
- * path gets the same treatment: its short code is the thing to copy, and
- * the verification page is auto-opened too.
- *
- * One `AbortController` owns the whole run: pi-ai reads `interaction.signal`
- * to abort the flow, every ask request carries it so surfaces close their
- * panels, and the waiting panel's cancel action fires it.
- *
- * Nothing here assumes a browser or GUI *exists* (TUI-RUN-001): when no
- * opener or clipboard helper is available the panel degrades to showing the
- * URL / code verbatim with a clear note, and where no question provider is
- * registered at all, `ask` rejects and the login command turns that into a
- * clear refusal.
- *
- * @module dsh-auth/interaction
- */
-import { copyToClipboard, openInBrowser } from './opener.js';
-/** Human-readable copy for one notify event. */
-export function describeEvent(event) {
-    switch (event.type) {
-        case 'auth_url':
-            return `Open this URL to authorize (a local callback completes sign-in):\n${event.url}`;
-        case 'device_code':
-            return `Visit ${event.verificationUri} and enter this code:\n  ${event.userCode}`;
-        case 'info':
-        case 'progress':
-            return event.message;
-    }
-}
-const CANCEL = 'Cancel sign-in';
-const OPEN_AGAIN = 'Open browser again';
-const COPY_LINK = 'Copy authorization link';
-const COPY_CODE = 'Copy code';
-/** One answer row, or a thrown error when the surface returned nothing usable. */
-function singleAnswer(answer) {
-    const row = answer.answers[0];
-    if (row === undefined)
-        throw new Error('dsh-auth: the question surface returned no answer');
-    return { selected: row.selected[0], custom: row.custom };
-}
-function authUrlView(url, instructions, opened) {
-    const lead = opened
-        ? 'Authorization page opened in your browser — complete the sign-in there.\n'
-            + 'If it did not open, copy the link below and open it by hand.'
-        : `Open this URL to authorize${instructions === undefined ? '' : ` — ${instructions}`}\n`
-            + 'Copy the link below (it is too long to select reliably once wrapped):';
-    return { body: `${lead}\n${url}`, copyLabel: COPY_LINK, copyText: url, reopenUrl: url };
-}
-function deviceCodeView(userCode, verificationUri, opened) {
-    const lead = opened
-        ? `Enter this code on the page opened in your browser (${verificationUri}):`
-        : `Visit ${verificationUri} and enter this code:`;
-    return { body: `${lead}\n  ${userCode}`, copyLabel: COPY_CODE, copyText: userCode, reopenUrl: verificationUri };
-}
-/**
- * The bridge for one login run. At most one waiting panel exists at a time;
- * `settle()` retires it when the flow ends (any outcome), so a completed or
- * failed login never leaves an interactive dead end on screen.
- */
-export class QuestionBridge {
-    ask;
-    runAbort;
-    signal;
-    openUrl;
-    copy;
-    waiting;
-    waitingClosed = false;
-    constructor(ask, runAbort, helpers = {}) {
-        this.ask = ask;
-        this.runAbort = runAbort;
-        this.signal = runAbort.signal;
-        this.openUrl = helpers.openUrl ?? openInBrowser;
-        this.copy = helpers.copyText ?? copyToClipboard;
-    }
-    async prompt(prompt) {
-        const secretNote = prompt.type === 'secret' ? ' (input is not masked on this surface — mind your screen)' : '';
-        const question = prompt.type === 'select'
-            ? {
-                id: 'dsh-auth-prompt',
-                header: 'dsh-auth',
-                question: prompt.message,
-                options: prompt.options.map(option => ({
-                    label: option.label,
-                    ...(option.description === undefined ? {} : { description: option.description }),
-                })),
-            }
-            : {
-                id: 'dsh-auth-prompt',
-                header: 'dsh-auth',
-                question: prompt.message,
-                ...(prompt.placeholder === undefined
-                    ? (secretNote === '' ? {} : { detail: secretNote.slice(1) })
-                    : { detail: `${prompt.placeholder}${secretNote}` }),
-            };
-        const answer = singleAnswer(await this.ask({ questions: [question], signal: prompt.signal ?? this.signal }));
-        if (prompt.type === 'select') {
-            const label = answer.selected;
-            const option = label === undefined ? undefined : prompt.options.find(candidate => candidate.label === label);
-            if (option === undefined) {
-                if (answer.custom !== undefined && answer.custom !== '')
-                    return answer.custom;
-                throw new Error('dsh-auth: the selection answer did not match an offered option');
-            }
-            return option.id;
-        }
-        const custom = answer.custom?.trim();
-        if (custom === undefined || custom === '')
-            throw new Error('dsh-auth: the text answer was empty');
-        return custom;
-    }
-    notify(event) {
-        if (event.type === 'auth_url') {
-            if (this.waiting !== undefined)
-                return;
-            const opened = this.openUrl(event.url);
-            void this.runWaitingPanel(authUrlView(event.url, event.instructions, opened));
-            return;
-        }
-        if (event.type === 'device_code') {
-            if (this.waiting !== undefined)
-                return;
-            const opened = this.openUrl(event.verificationUri);
-            void this.runWaitingPanel(deviceCodeView(event.userCode, event.verificationUri, opened));
-        }
-        // info / progress lines are transient; the waiting panel already tells
-        // the user what to do, and the flow's next prompt carries its own copy.
-    }
-    /** Close the waiting panel (if any) and stop answering for this run. */
-    async settle() {
-        this.waitingClosed = true;
-        this.waiting?.controller.abort();
-        await this.waiting?.answer;
-        this.waiting = undefined;
-    }
-    /**
-     * Show the waiting panel until the flow settles or the user cancels,
-     * re-asking after a copy/reopen action with a one-line status prefix.
-     */
-    async runWaitingPanel(view) {
-        let body = view.body;
-        while (!this.waitingClosed) {
-            const controller = new AbortController();
-            const answer = this.ask({
-                questions: [{
-                        id: 'dsh-auth-waiting',
-                        header: 'dsh-auth',
-                        question: 'Waiting for authorization…',
-                        detail: body,
-                        options: [
-                            { label: view.copyLabel },
-                            ...(view.reopenUrl === undefined ? [] : [{ label: OPEN_AGAIN }]),
-                            { label: CANCEL },
-                        ],
-                    }],
-                signal: controller.signal,
-            })
-                .then(response => singleAnswer(response).selected)
-                .catch(() => undefined);
-            this.waiting = { controller, answer };
-            const picked = await answer;
-            this.waiting = undefined;
-            if (picked === undefined || this.waitingClosed)
-                return;
-            if (picked === CANCEL) {
-                this.runAbort.abort('user cancelled sign-in');
-                return;
-            }
-            if (picked === view.copyLabel) {
-                const copied = await this.copy(view.copyText);
-                body = `${copied ? 'Copied — paste it where you need it.' : 'Copy failed — no clipboard helper answered; select the text manually.'}\n${view.body}`;
-                continue;
-            }
-            if (picked === OPEN_AGAIN && view.reopenUrl !== undefined) {
-                this.openUrl(view.reopenUrl);
-                body = `Reopened in your browser.\n${view.body}`;
-            }
-        }
-    }
-}

package/node_modules/@deepseek-harness-tui/dsh-auth/package.json

@@ -1,69 +0,0 @@
-{
-  "name": "@deepseek-harness-tui/dsh-auth",
-  "version": "0.1.0",
-  "description": "Subscription OAuth sign-in (ChatGPT/Codex, Claude Pro/Max, SuperGrok) as LLM provider routes for DeepSeek Harness — no dsh source patch, bundled with dsh-tui",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/ccch1mneyyy/dsh-auth.git"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "type": "module",
-  "main": "lib/index.js",
-  "types": "lib/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./lib/index.d.ts",
-      "default": "./lib/index.js"
-    },
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "lib",
-    "dsh-plugin.json",
-    "cordis.patch.yml",
-    "README.md",
-    "LICENSE"
-  ],
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    }
-  },
-  "engines": {
-    "node": "^22.19 || >=24"
-  },
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "clean": "node -e \"require('node:fs').rmSync('lib', { recursive: true, force: true })\"",
-    "smoke": "node scripts/smoke.mjs",
-    "verify": "npm run build && npm run smoke"
-  },
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-attachment": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1",
-    "@deepseek-ai/dsh-user-questions": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1",
-    "@deepseek-ai/schemastery": "^3.18.1"
-  },
-  "peerDependenciesMeta": {
-    "@deepseek-ai/dsh-attachment": {
-      "optional": true
-    }
-  },
-  "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-attachment": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1",
-    "@deepseek-ai/dsh-user-questions": "^0.1.0-rc.6 || ^0.1.1-rc.1 || 0.1.2-alpha.3 || 0.1.2-alpha.4 || 0.1.2-alpha.5 || 0.1.2-rc.1 || 0.1.3-alpha.2 || 0.1.5-alpha.1 || 0.1.5-alpha.2 || 0.1.5-rc.1 || 0.1.7-rc.1",
-    "@deepseek-ai/schemastery": "^3.18.1",
-    "@types/node": "^22.0.0",
-    "typescript": "^6.0.3"
-  }
-}