@openma/deepseek-harness-acp 0.4.4 → 0.4.5

package/dist/bridge.js

@@ -1482,13 +1482,24 @@ async function apply(ctx, config = {}) {
             mcpCapabilities: { http: true, sse: false },
             ...hasPersistence ? { sessionCapabilities: { list: {} } } : {}
           },
-          authMethods: []
+          authMethods: [
+            // ACP Terminal Auth (see the registry's AUTHENTICATION.md):
+            // the client runs `dsh-acp login` in an interactive
+            // terminal; the key lands in the shared harness
+            // credential store (~/.dsh/.credentials.yaml).
+            {
+              id: "terminal-login",
+              name: "Log in with a DeepSeek API key",
+              description: "Interactive terminal setup \u2014 saves the key to the harness credential store shared with the dsh Web UI",
+              _meta: { "terminal-auth": { args: ["login"], env: {} } }
+            }
+          ]
         });
       },
       async authenticate(_params) {
         if (!await credentialPresent()) {
           throw authRequired(
-            "no DeepSeek credential found: save one in the dsh Web UI (Settings \u2192 Models) or set DEEPSEEK_API_KEY"
+            "no DeepSeek credential found: run `dsh-acp login`, save one in the dsh Web UI (Settings \u2192 Models), or set DEEPSEEK_API_KEY"
           );
         }
       },

package/dist/index.js

@@ -1507,13 +1507,24 @@ async function apply(ctx, config = {}) {
             mcpCapabilities: { http: true, sse: false },
             ...hasPersistence ? { sessionCapabilities: { list: {} } } : {}
           },
-          authMethods: []
+          authMethods: [
+            // ACP Terminal Auth (see the registry's AUTHENTICATION.md):
+            // the client runs `dsh-acp login` in an interactive
+            // terminal; the key lands in the shared harness
+            // credential store (~/.dsh/.credentials.yaml).
+            {
+              id: "terminal-login",
+              name: "Log in with a DeepSeek API key",
+              description: "Interactive terminal setup \u2014 saves the key to the harness credential store shared with the dsh Web UI",
+              _meta: { "terminal-auth": { args: ["login"], env: {} } }
+            }
+          ]
         });
       },
       async authenticate(_params) {
         if (!await credentialPresent()) {
           throw authRequired(
-            "no DeepSeek credential found: save one in the dsh Web UI (Settings \u2192 Models) or set DEEPSEEK_API_KEY"
+            "no DeepSeek credential found: run `dsh-acp login`, save one in the dsh Web UI (Settings \u2192 Models), or set DEEPSEEK_API_KEY"
           );
         }
       },
@@ -2356,6 +2367,9 @@ async function bootAcpProfile(host, overrides) {
     overlays.push({ id: "session-telemetry-otel", disabled: true });
   }
   const bridgeRow = rows.get("acp-bridge");
+  if (overrides?.serve === false && bridgeRow !== void 0) {
+    overlays.push({ id: "acp-bridge", disabled: true });
+  }
   if (overrides !== void 0 && bridgeRow !== void 0) {
     const patch = {};
     if (overrides.provider !== void 0) patch["provider"] = overrides.provider;
@@ -2392,9 +2406,93 @@ async function bootAcpProfile(host, overrides) {
   return ctx;
 }
 
+// src/login.ts
+import { createRequire as createRequire3 } from "node:module";
+import { join as join3 } from "node:path";
+import { pathToFileURL as pathToFileURL3 } from "node:url";
+async function readSecret(promptText) {
+  const stdin = process.stdin;
+  if (!stdin.isTTY) {
+    const chunks = [];
+    for await (const chunk of stdin) {
+      chunks.push(Buffer.from(chunk));
+      const text = Buffer.concat(chunks).toString("utf8");
+      const newline = text.indexOf("\n");
+      if (newline >= 0) return text.slice(0, newline).trim();
+    }
+    return Buffer.concat(chunks).toString("utf8").trim();
+  }
+  process.stderr.write(promptText);
+  return await new Promise((resolve2) => {
+    stdin.setRawMode(true);
+    stdin.resume();
+    stdin.setEncoding("utf8");
+    let buffer = "";
+    const onData = (chunk) => {
+      for (const char of chunk) {
+        if (char === "\n" || char === "\r" || char === "") {
+          stdin.setRawMode(false);
+          stdin.pause();
+          stdin.off("data", onData);
+          process.stderr.write("\n");
+          resolve2(buffer.trim());
+          return;
+        }
+        if (char === "") {
+          stdin.setRawMode(false);
+          process.stderr.write("^C\n");
+          process.exit(130);
+        }
+        if (char === "\x7F" || char === "\b") {
+          buffer = buffer.slice(0, -1);
+          continue;
+        }
+        buffer += char;
+      }
+    };
+    stdin.on("data", onData);
+  });
+}
+async function runLogin(ctx, hostBase, argv) {
+  const req = createRequire3(join3(hostBase, "noop.js"));
+  let credentialRef2;
+  try {
+    const mod = await import(pathToFileURL3(req.resolve("@deepseek-ai/dsh-credentials")).href);
+    credentialRef2 = mod.credentialRef;
+  } catch {
+    credentialRef2 = void 0;
+  }
+  const store = ctx.get("credentials");
+  if (store === void 0 || credentialRef2 === void 0) {
+    process.stderr.write(
+      "This composition has no writable credential store; export DEEPSEEK_API_KEY instead.\n"
+    );
+    return 1;
+  }
+  const ref = credentialRef2("DEEPSEEK_API_KEY");
+  const before = await store.describe(ref);
+  if (before.configured && before.source !== void 0) {
+    process.stderr.write(`A key is already configured (source: ${before.source}).
+`);
+  }
+  const key = argv[0] ?? await readSecret("DeepSeek API key (input hidden): ");
+  if (key.length === 0) {
+    process.stderr.write("No key entered; nothing saved.\n");
+    return 1;
+  }
+  await store.set(ref, key);
+  const masked = key.length <= 8 ? "\u2026" : `${key.slice(0, 4)}\u2026${key.slice(-4)}`;
+  process.stderr.write(
+    `Saved ${masked} to the harness credential store (~/.dsh/.credentials.yaml, mode 600).
+The dsh Web UI and every dsh surface share this credential.
+`
+  );
+  return 0;
+}
+
 // src/settings.ts
 import { homedir } from "node:os";
-import { join as join3 } from "node:path";
+import { join as join4 } from "node:path";
 var DEFAULT_PERSONA = `You are a coding assistant powered by the {{model}} model, working inside an editor via the Agent Client Protocol. Your working directory is {{cwd}}. Your bash tool runs under a file sandbox \u2014 a \`[sandbox: file access denied \u2026]\` result is policy, not a command bug.
 
 Verify your work by running the code or tests. Keep answers brief and factual.`;
@@ -2487,7 +2585,7 @@ function resolveSettings(argv) {
     models,
     maxTokens,
     permissionMode,
-    sessionRoot: stringFlag(parsed, "session-root") ?? envString("DSH_SESSION_ROOT") ?? join3(homedir(), ".dsh-acp", "sessions"),
+    sessionRoot: stringFlag(parsed, "session-root") ?? envString("DSH_SESSION_ROOT") ?? join4(homedir(), ".dsh-acp", "sessions"),
     persona: stringFlag(parsed, "persona") ?? envString("DSH_SYSTEM_PROMPT") ?? DEFAULT_PERSONA,
     thinking: !parsed.flags.has("no-thinking"),
     reasoningEffort: reasoningRaw,
@@ -2495,6 +2593,8 @@ function resolveSettings(argv) {
   };
 }
 var HELP_TEXT = `Usage: dsh-acp [options]
+       dsh-acp login [api-key]   Save a DeepSeek API key (interactive when omitted)
+       dsh-acp update            Self-update via npm
 
 Agent Client Protocol (ACP) stdio server for DeepSeek Harness. Speak ACP on
 stdin/stdout from an ACP client such as Zed; diagnostics go to stderr.
@@ -2538,6 +2638,32 @@ async function main() {
     console.log(HELP_TEXT.trimEnd());
     return;
   }
+  if (argv[0] === "login") {
+    let booted;
+    let hostBase;
+    try {
+      const host = resolveHost(void 0);
+      hostBase = host.base;
+      booted = await bootAcpProfile(host, { serve: false });
+    } catch (error) {
+      if (error instanceof HarnessNotFoundError) {
+        logError(error.message);
+        process.exitCode = 1;
+        return;
+      }
+      throw error;
+    }
+    try {
+      process.exitCode = await runLogin(
+        booted,
+        hostBase,
+        argv.slice(1)
+      );
+    } finally {
+      await booted.fiber.dispose().catch(() => void 0);
+    }
+    return;
+  }
   if (argv[0] === "update") {
     logInfo(`updating ${NAME} (npm install -g ${NAME}@latest)\u2026`);
     const result = spawnSync("npm", ["install", "-g", `${NAME}@latest`], { stdio: ["ignore", 2, 2] });

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.4.4",
+  "version": "0.4.5",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/openma-ai/deepseek-harness-acp.git"