@songtonyli/dsh-cli 0.1.9 → 0.1.11

package/README.md

@@ -26,7 +26,7 @@ workspace and no build step. Native packages that ship one build per platform
 ripgrep, the PTY backend's addons, sharp, koffi, and the Landlock launcher — are
 ordinary optional dependencies, so npm resolves the right one for your machine.
 
-Requires Node `^22.19.0 || >=24.0.0`. Version 0.1.9; `dsh --version`
+Requires Node `^22.19.0 || >=24.0.0`. Version 0.1.11; `dsh --version`
 also reports the harness build the package was assembled from.
 
 ## License

package/bin/dsh.mjs

@@ -18,7 +18,7 @@ const argv = process.argv.slice(2)
 // version this package publishes. Reporting only one of the two would make an
 // ordinary `npm install @songtonyli/dsh-cli@x` look like it installed something else.
 if (argv.length === 1 && (argv[0] === '--version' || argv[0] === '-V')) {
-  console.log('@songtonyli/dsh-cli 0.1.9 (deepseek-harness 0.1.6-alpha.1)')
+  console.log('@songtonyli/dsh-cli 0.1.11 (deepseek-harness 0.1.6-alpha.1)')
   process.exit(0)
 }
 

package/node_modules/@deepseek-ai/dsh-api-authorization-controller/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/api/authorization-controller/README.md
-README.md: bdf227b45a0f31adc8ceb7c0d2cf8e5002c487a6
-README.zh.md: b65b8ce1840395b89b5feb36083b96650cb122da
+README.md: 6020b15cee27504168035a1c35876fe41be09771
+README.zh.md: 54ef3a48613ca189e6809f83303fdc946dfd7fd1

package/node_modules/@deepseek-ai/dsh-api-authorization-controller/README.md

@@ -50,7 +50,7 @@ This package takes no configuration.
 
 ### Running one attempt
 
-`begin(request, signal)` is a stream. Each item is one frame: a `notice` carrying what the human must do and any page or code it refers to, a `prompt` carrying a question and the id an answer names, a `prompt-withdrawn` for a question the flow retired, and a final `settled` frame carrying `authorized` or `cancelled`. The attempt starts when the carrier pulls the first frame and ends when the stream does; closing the stream withdraws it. `cancel(key)` withdraws it from a call that no longer holds the stream, which is what a Cancel button on a re-rendered page uses.
+`begin(request, signal)` is a stream. Each item is one frame: a `notice` carrying what the human must do, any page or code it refers to, and whether a desktop surface should hand that page to the default browser, a `prompt` carrying a question and the id an answer names, a `prompt-withdrawn` for a question the flow retired, and a final `settled` frame carrying `authorized` or `cancelled`. The attempt starts when the carrier pulls the first frame and ends when the stream does; closing the stream withdraws it. `cancel(key)` withdraws it from a call that no longer holds the stream, which is what a Cancel button on a re-rendered page uses.
 
 A question is answered by a second call naming the frame's `promptId`: `answer(key, promptId, value)` with the typed text or the chosen option's id, or `decline(key, promptId)` when the human says no, which settles the attempt as `cancelled`. Only the attempt's own prompts can be answered, so a stale id is refused rather than silently applied to a newer attempt.
 

package/node_modules/@deepseek-ai/dsh-api-authorization-controller/README.zh.md

@@ -50,7 +50,7 @@ kind: "package-reference"
 
 ### 运行一次尝试
 
-`begin(request, signal)` 是一条流。每一项都是一个帧：`notice` 携带人需要做的事以及它涉及的页面或验证码，`prompt` 携带一个提问以及回答时要指明的 id，`prompt-withdrawn` 对应 flow 撤回的提问，最后的 `settled` 帧携带 `authorized` 或 `cancelled`。尝试在载体拉取第一帧时开始，随流结束而结束；关闭该流即撤回它。`cancel(key)` 用于已不再持有该流的调用撤回它，这正是重新渲染后的页面上「取消」按钮所用的方式。
+`begin(request, signal)` 是一条流。每一项都是一个帧：`notice` 携带人需要做的事、它涉及的页面或验证码，以及桌面界面是否应把该页面交给默认浏览器，`prompt` 携带一个提问以及回答时要指明的 id，`prompt-withdrawn` 对应 flow 撤回的提问，最后的 `settled` 帧携带 `authorized` 或 `cancelled`。尝试在载体拉取第一帧时开始，随流结束而结束；关闭该流即撤回它。`cancel(key)` 用于已不再持有该流的调用撤回它，这正是重新渲染后的页面上「取消」按钮所用的方式。
 
 回答提问要用第二次调用并指明该帧的 `promptId`：`answer(key, promptId, value)` 传入输入的文本或所选项的 id，或在人拒绝时用 `decline(key, promptId)`，后者会让尝试以 `cancelled` 结算。只有该尝试自己的提问可以被回答，因此过期的 id 会被拒绝，而不会被悄悄用在更新的尝试上。
 

package/node_modules/@deepseek-ai/dsh-api-authorization-controller/lib/index.js

@@ -398,6 +398,7 @@ let AuthorizationController = (() => {
 							type: "notice",
 							message: notice.message,
 							...notice.url === void 0 ? {} : { url: notice.url },
+							...notice.openInBrowser === void 0 ? {} : { openInBrowser: notice.openInBrowser },
 							...notice.code === void 0 ? {} : { code: notice.code }
 						});
 					},

package/node_modules/@deepseek-ai/dsh-api-authorization-controller/lib/typert.host.js

@@ -19,6 +19,7 @@ const _deepseek_ai_dsh_api_authorization_controller_authorization_begin_result$s
   'type': z.literal("notice").readonly(),
   'message': z.string().readonly(),
   'url': z.string().readonly().optional(),
+  'openInBrowser': z.literal(true).readonly().optional(),
   'code': z.string().readonly().optional(),
 }), z.object({
   'type': z.literal("prompt").readonly(),
@@ -318,7 +319,7 @@ export const TYPERT = {
           },
           {
             "name": "AuthorizationNoticeFrame",
-            "declaration": "export interface AuthorizationNoticeFrame {\n    readonly type: 'notice';\n    readonly message: string;\n    readonly url?: string;\n    readonly code?: string;\n}"
+            "declaration": "export interface AuthorizationNoticeFrame {\n    readonly type: 'notice';\n    readonly message: string;\n    readonly url?: string;\n    readonly openInBrowser?: true;\n    readonly code?: string;\n}"
           },
           {
             "name": "AuthorizationPromptFrame",

package/node_modules/@deepseek-ai/dsh-api-authorization-controller/lib/typert.remote-client.js

@@ -19,6 +19,7 @@ const _deepseek_ai_dsh_api_authorization_controller_authorization_begin_result$s
   'type': z.literal("notice").readonly(),
   'message': z.string().readonly(),
   'url': z.string().readonly().optional(),
+  'openInBrowser': z.literal(true).readonly().optional(),
   'code': z.string().readonly().optional(),
 }), z.object({
   'type': z.literal("prompt").readonly(),

package/node_modules/@deepseek-ai/dsh-api-authorization-controller/lib/types/index.js

@@ -315,6 +315,7 @@ let AuthorizationController = (() => {
                             type: 'notice',
                             message: notice.message,
                             ...notice.url === undefined ? {} : { url: notice.url },
+                            ...notice.openInBrowser === undefined ? {} : { openInBrowser: notice.openInBrowser },
                             ...notice.code === undefined ? {} : { code: notice.code },
                         });
                     },

package/node_modules/@deepseek-ai/dsh-api-remotes/lib/client.js

@@ -4540,6 +4540,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"type": literal("notice").readonly(),
 				"message": string().readonly(),
 				"url": string().readonly().optional(),
+				"openInBrowser": literal(true).readonly().optional(),
 				"code": string().readonly().optional()
 			}),
 			object({

package/node_modules/@deepseek-ai/dsh-authorization/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/credentials/authorization/README.md
-README.md: 9b4f4e895bc94c0a34a1cee2d6bf28d7663decea
-README.zh.md: 44c354fef1cb2bd9261483cb4048858a7f70bd31
+README.md: 6368d6c0e8abe14b4166250bef82a06ce2ddf425
+README.zh.md: f1b4d92c9eb6519323d95778bd2e4e53249c1e9c

package/node_modules/@deepseek-ai/dsh-authorization/README.md

@@ -107,7 +107,7 @@ One attempt per key at a time. `begin()` validates the key and method, refuses a
 
 ### The interaction vocabulary
 
-A notice is one-way and never carries a secret: a message, optionally the page the human must open and the code they must enter there. A prompt is a question the flow cannot answer for itself — `text`, `secret`, or `select` — where `secret` differs from `text` only in presentation. A prompt carries its own signal so a flow that races a typed code against a browser callback can withdraw the losing question while the attempt continues; the request's signal withdraws the whole attempt instead. The vocabulary is deliberately smaller than any one provider's: it describes what a surface must render, so a surface that renders one flow renders all of them.
+A notice is one-way and never carries a secret: a message, optionally the page the human must open and the code they must enter there, and whether a desktop surface should hand that page to the default browser (`openInBrowser`, set for an authorization destination rather than an informational link; the printed URL always remains the fallback). A prompt is a question the flow cannot answer for itself — `text`, `secret`, or `select` — where `secret` differs from `text` only in presentation. A prompt carries its own signal so a flow that races a typed code against a browser callback can withdraw the losing question while the attempt continues; the request's signal withdraws the whole attempt instead. The vocabulary is deliberately smaller than any one provider's: it describes what a surface must render, so a surface that renders one flow renders all of them.
 
 ### Commit confirmation
 

package/node_modules/@deepseek-ai/dsh-authorization/README.zh.md

@@ -107,7 +107,7 @@ flow 声明它写入的凭据记录、面向用户的标签以及它提供的登
 
 ### 交互词汇
 
-notice 是单向的，且从不携带机密：一条消息，以及可选的「人需要打开的页面」与「需要在该页面输入的码」。prompt 是 flow 无法自行回答的问题——`text`、`secret` 或 `select`——其中 `secret` 与 `text` 的差别仅在呈现方式。prompt 自带 signal，使得让手输码与浏览器回调赛跑的 flow 可以在尝试继续的同时撤下落败的那个问题；撤销整次尝试则用请求的 signal。这套词汇刻意小于任何单个提供方的词汇：它描述的是界面必须渲染什么，因此能渲染一个 flow 的界面就能渲染全部 flow。
+notice 是单向的，且从不携带机密：一条消息，可选的「人需要打开的页面」与「需要在该页面输入的码」，以及桌面界面是否应把该页面交给默认浏览器（`openInBrowser`，仅为授权目标页设置而非信息链接；打印出的 URL 始终保留为后备）。prompt 是 flow 无法自行回答的问题——`text`、`secret` 或 `select`——其中 `secret` 与 `text` 的差别仅在呈现方式。prompt 自带 signal，使得让手输码与浏览器回调赛跑的 flow 可以在尝试继续的同时撤下落败的那个问题；撤销整次尝试则用请求的 signal。这套词汇刻意小于任何单个提供方的词汇：它描述的是界面必须渲染什么，因此能渲染一个 flow 的界面就能渲染全部 flow。
 
 ### 提交确认
 

package/node_modules/@deepseek-ai/dsh-client-ui-settings-signin/lib/client.js

@@ -228,6 +228,7 @@ window.__ModuleLoader__.load({
 								directions: [...attempt.directions, {
 									message: frame.message,
 									...frame.url === void 0 ? {} : { url: frame.url },
+									...frame.openInBrowser === void 0 ? {} : { openInBrowser: frame.openInBrowser },
 									...frame.code === void 0 ? {} : { code: frame.code }
 								}]
 							};

package/node_modules/@deepseek-ai/dsh-client-ui-sidebar/lib/client.js

@@ -100,7 +100,7 @@ window.__ModuleLoader__.load({
 		const SCROLLBAR_LINGER_MS = 2e3;
 		/** Format complete-build metadata for the local brand badge. */
 		function localBuildVersion() {
-			return `0.1.6-alpha.1-03fee86-dirty`;
+			return `0.1.6-alpha.1-9ed61dc-dirty`;
 		}
 		/** Each panel row subscribes only to its own selection state. */
 		function PanelRow({ id, label, wide, usePanelInfo, selectPanel, renderSlot }) {

package/node_modules/@deepseek-ai/dsh-llm-pi-ai/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/llm/llm-pi-ai/README.md
-README.md: a49281b5ddc63c1fe4ce628857ff6f267dc498cd
-README.zh.md: 78aed7db98e217691351f49f3f8ee41e74177e17
+README.md: e8b9b1e7aea345a70aaeb7667572ead879d7fcb6
+README.zh.md: 3ad4572a7a0ea57f9bffbb4fce3a5136ab7eecc8

package/node_modules/@deepseek-ai/dsh-llm-pi-ai/README.md

@@ -90,7 +90,7 @@ The generated [configuration catalog](../../../docs/config-catalog.md#deepseek-a
 
 ### Sign in to a provider
 
-A provider pi-ai ships a login for can be signed into through the harness authorization seam: the flow offers OAuth or an interactive key prompt (a key is typed into pi-ai's own login prompt, not into the settings form), and the resulting credential is stored in the harness credential store at `llm-pi-ai/<provider id>`. The stored sign-in authenticates its route beneath any `apiKeyEnv` override and refreshes itself under the store's cross-process lock; signing out deletes the stored record. A hand-declared route key outside the record grammar — a lowercase hyphenated identifier — cannot be signed into, because a record write for it refuses with `LlmError('UNSTORABLE_PROVIDER_ID')`; such a route authenticates through `apiKeyEnv` or ambient provider settings instead.
+A provider pi-ai ships a login for can be signed into through the harness authorization seam: the flow offers OAuth or an interactive key prompt (a key is typed into pi-ai's own login prompt, not into the settings form), and the resulting credential is stored in the harness credential store at `llm-pi-ai/<provider id>`. Signing in never activates a route: a dormant catalog provider still needs its profile under `providers.<id>` (an empty `{}` takes the installed defaults), and each surface owns how an authorization page reaches the browser — the Web Models page renders the link, while the terminal hands marked pages to the default browser. The stored sign-in authenticates its route beneath any `apiKeyEnv` override and refreshes itself under the store's cross-process lock; signing out deletes the stored record. A hand-declared route key outside the record grammar — a lowercase hyphenated identifier — cannot be signed into, because a record write for it refuses with `LlmError('UNSTORABLE_PROVIDER_ID')`; such a route authenticates through `apiKeyEnv` or ambient provider settings instead.
 
 ### Resolve the model catalog
 

package/node_modules/@deepseek-ai/dsh-llm-pi-ai/README.zh.md

@@ -90,7 +90,7 @@ kind: "package-reference"
 
 ### 登录提供方
 
-pi-ai 提供登录的提供方可以通过 harness 授权 seam 登录：流程提供 OAuth 或交互式密钥提示（密钥键入 pi-ai 自己的登录提示，而非设置表单），得到的凭据存储在 harness 凭据存储的 `llm-pi-ai/<provider id>` 记录中。存储的登录在其路由的 `apiKeyEnv` 覆盖之下完成认证，并在存储的跨进程锁下自行刷新；退出登录即删除存储记录。落在记录文法之外——小写连字符标识符——的手工声明路由键无法登录，因为对它的记录写入会以 `LlmError('UNSTORABLE_PROVIDER_ID')` 拒绝；这类路由改用 `apiKeyEnv` 或提供方 ambient 设置认证。
+pi-ai 提供登录的提供方可以通过 harness 授权 seam 登录：流程提供 OAuth 或交互式密钥提示（密钥键入 pi-ai 自己的登录提示，而非设置表单），得到的凭据存储在 harness 凭据存储的 `llm-pi-ai/<provider id>` 记录中。登录不会激活路由：休眠的 catalog 提供方仍需要 `providers.<id>` 下的 profile（空的 `{}` 取已安装默认值），且各界面自行决定授权页面如何到达浏览器——Web 的 Models 页面渲染链接，终端则把被标记的页面交给默认浏览器。存储的登录在其路由的 `apiKeyEnv` 覆盖之下完成认证，并在存储的跨进程锁下自行刷新；退出登录即删除存储记录。落在记录文法之外——小写连字符标识符——的手工声明路由键无法登录，因为对它的记录写入会以 `LlmError('UNSTORABLE_PROVIDER_ID')` 拒绝；这类路由改用 `apiKeyEnv` 或提供方 ambient 设置认证。
 
 ### 解析模型目录
 

package/node_modules/@deepseek-ai/dsh-llm-pi-ai/lib/index.js

@@ -2379,13 +2379,15 @@ function relay(event, session) {
 		case "auth_url":
 			session.notify({
 				message: event.instructions ?? "Open this page to continue signing in.",
-				url: event.url
+				url: event.url,
+				openInBrowser: true
 			});
 			return;
 		case "device_code":
 			session.notify({
 				message: "Enter this code on the verification page to finish signing in.",
 				url: event.verificationUri,
+				openInBrowser: true,
 				code: event.userCode
 			});
 			return;

package/node_modules/@deepseek-ai/dsh-native-command/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/util/native-command/README.md
-README.md: 10b60266403f6a479a286cccd369ee2e52dd3aa6
-README.zh.md: e8f2adda57ee257983a06bb2798c852cab20bf6a
+README.md: 9dae51fc0c605e9c0ac6d04a0c768897ce04fc9f
+README.zh.md: 92a1885e51dc12c51ef3a6d127bf0e7d3dc3391c

package/node_modules/@deepseek-ai/dsh-native-command/README.md

@@ -1,5 +1,5 @@
 ---
-description: "Host-native command and path-opening utilities with shell-free execution, cancellation, desktop detection, and WSL path handoff."
+description: "Host-native command, path-opening, and default-browser URL handoff utilities with shell-free execution, cancellation, desktop detection, and credential scrubbing."
 kind: "package-library"
 ---
 
@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-`dsh-native-command` runs host executables without a shell and opens Host filesystem paths through the desktop. The command runner captures utf8 output, propagates cancellation, and hides transient Windows consoles. The path opener supports default-application and text-editor intents, browser-renderable documents, WSL translation, and desktop availability checks. It is a library, not a plugin: no `ctx`, no state, no events.
+`dsh-native-command` runs host executables without a shell, opens Host filesystem paths through the desktop, and hands HTTP(S) URLs to the default browser. The command runner captures utf8 output, propagates cancellation, and hides transient Windows consoles. The path opener supports default-application and text-editor intents, browser-renderable documents, WSL translation, and desktop availability checks. The URL opener keeps Harness credentials out of the browser's environment. It is a library, not a plugin: no `ctx`, no state, no events.
 
 ## Table of Contents
 
@@ -49,6 +49,10 @@ The `NativeCommandRunner` type is the injectable command boundary for host integ
 
 `revealNativePath(path, signal)` selects the file in Finder or Explorer, including WSL path translation, and opens its parent directory through `xdg-open` on desktop Linux. `nativeFileManager()` identifies that action for Host-derived UI labels; desktop availability remains a separate `canOpenNativePath()` check. Callers must authorize the absolute file path before invoking either operation. Platform dispatch is covered by injected-runner tests; native desktop verification belongs to the corresponding platform. Explorer receives an encoded file URI as a separate argument. Its exit code 1 is accepted as a delegated handoff; cancellation, missing executables, and other exit codes still reject. This acknowledgement does not prove that a desktop window selected the file.
 
+### Opening a URL in the default browser
+
+`openNativeUrl(url)` hands one HTTP(S) URL to the operating system's default browser and rejects every other protocol before spawning. The URL travels through a short-lived Node helper running the maintained `open` package with a scrubbed environment, so Harness credentials such as API keys and the Harness home never reach a newly launched browser process; on Windows the helper stays alive until PowerShell has accepted the handoff. The returned promise settles when the operating-system launcher exits, not when the browser window closes; a launch failure rejects with the helper's first stderr line, so the caller can fall back to showing the URL. This is the URL counterpart of the filesystem path opener — do not pass a URL to `openNativePath`, which treats its argument as a filesystem path.
+
 -----
 
 <a id="understand-the-implementation"></a>
@@ -66,6 +70,7 @@ The command runner is a thin wrapper over Node's `execFile`. The path opener sel
 | [`src/index.ts`](src/index.ts) | Public command-runner and path-opener exports |
 | [`src/runner.ts`](src/runner.ts) | Shell-free `execFile` adapter |
 | [`src/path-opener.ts`](src/path-opener.ts) | Desktop detection, open intents, browser preference, and WSL translation |
+| [`src/url-opener.ts`](src/url-opener.ts) | Credential-scrubbed default-browser handoff for HTTP(S) URLs |
 | — | No runtime invariant companion is published; each run is one stateless child-process round trip with no owned event stream or mutable runtime data; behavior is enforced by unit tests. |
 
 ### What execFile gives the runner

package/node_modules/@deepseek-ai/dsh-native-command/README.zh.md

@@ -1,5 +1,5 @@
 ---
-description: "宿主原生命令与路径打开工具，提供无 shell 执行、取消、桌面探测与 WSL 路径交接。"
+description: "宿主原生命令、路径打开与默认浏览器 URL 交接工具，提供无 shell 执行、取消、桌面探测与凭据擦除。"
 kind: "package-library"
 ---
 
@@ -9,7 +9,7 @@ kind: "package-library"
 
 ## 概述
 
-`dsh-native-command` 无需 shell 即可运行 Host 可执行文件，并通过桌面打开 Host 文件系统路径。命令运行器捕获 utf8 输出、传播取消，并隐藏 Windows 瞬时控制台。路径打开器支持默认应用与文本编辑器意图、浏览器可渲染文档、WSL 转换与桌面可用性检查。它是库而非插件：没有 `ctx`、无状态、不发事件。
+`dsh-native-command` 无需 shell 即可运行 Host 可执行文件、通过桌面打开 Host 文件系统路径，并把 HTTP(S) URL 交给默认浏览器。命令运行器捕获 utf8 输出、传播取消，并隐藏 Windows 瞬时控制台。路径打开器支持默认应用与文本编辑器意图、浏览器可渲染文档、WSL 转换与桌面可用性检查。URL 打开器让 Harness 凭据不进入浏览器的环境。它是库而非插件：没有 `ctx`、无状态、不发事件。
 
 ## 目录
 
@@ -49,6 +49,10 @@ const { stdout, stderr } = await runNativeCommand('osascript', ['-e', script], s
 
 `revealNativePath(path, signal)` 在 Finder 或文件资源管理器中选中文件，包含 WSL 路径转换；在桌面 Linux 上通过 `xdg-open` 打开上层目录。`nativeFileManager()` 标识该操作，供 UI 根据 Host 选择文案；桌面是否可用仍由独立的 `canOpenNativePath()` 检查决定。调用方必须先授权绝对文件路径，再执行操作。平台分派由注入运行器的测试覆盖；原生桌面验证由对应平台负责。 Explorer 接收独立参数中的编码文件 URI。退出码 1 按已转交请求处理；取消、找不到可执行文件和其他退出码仍然报错。该确认不能证明桌面窗口已选中文件。
 
+### 在默认浏览器中打开 URL
+
+`openNativeUrl(url)` 把一个 HTTP(S) URL 交给操作系统的默认浏览器，并在启动任何进程前拒绝其他协议。URL 经由一个短生命周期的 Node 辅助进程传递，该进程运行受维护的 `open` 包且使用擦除后的环境，因此 API 密钥与 Harness 主目录等 Harness 凭据不会进入新启动的浏览器进程；在 Windows 上辅助进程会存活到 PowerShell 接受交接为止。返回的 promise 在操作系统启动器退出时结算，而不是在浏览器窗口关闭时；启动失败会以辅助进程 stderr 的首行拒绝，调用方因此可以回退到展示 URL。这是与文件系统路径打开器对应的 URL 能力——不要把 URL 传给 `openNativePath`，后者把参数当作文件系统路径处理。
+
 -----
 
 <a id="understand-the-implementation"></a>
@@ -66,6 +70,7 @@ const { stdout, stderr } = await runNativeCommand('osascript', ['-e', script], s
 | [`src/index.ts`](src/index.ts) | 命令运行器与路径打开器的公共导出 |
 | [`src/runner.ts`](src/runner.ts) | 无 shell 的 `execFile` 适配器 |
 | [`src/path-opener.ts`](src/path-opener.ts) | 桌面探测、打开意图、浏览器偏好与 WSL 转换 |
+| [`src/url-opener.ts`](src/url-opener.ts) | 面向 HTTP(S) URL 的凭据擦除默认浏览器交接 |
 | — | 不发布运行时不变式伴生入口；每次运行都是一次无状态的子进程往返，不拥有事件流或可变运行时数据；相关行为由单元测试保障。 |
 
 ### execFile 给了运行器什么

package/node_modules/@deepseek-ai/dsh-native-command/lib/index.js

@@ -1,4 +1,5 @@
-import { execFile } from "node:child_process";
+import { execFile, spawn } from "node:child_process";
+import { scrubbedParentEnv } from "@deepseek-ai/dsh-subprocess";
 import { release } from "node:os";
 import { dirname, extname } from "node:path";
 import { pathToFileURL } from "node:url";
@@ -35,6 +36,96 @@ const runNativeCommand = (command, args, signal) => new Promise((resolve, reject
 	});
 });
 //#endregion
+//#region lib/types/url-opener.js
+/**
+* Default-browser handoff for HTTP(S) URLs through a credential-scrubbed helper.
+* @module @deepseek-ai/dsh-native-command/url-opener
+*/
+const BROWSER_OPENER_MODULE = import.meta.resolve("open");
+const BROWSER_OPENER_PROGRAM = `
+try {
+  const { default: open } = await import(${JSON.stringify(BROWSER_OPENER_MODULE)})
+  const launcher = await open(process.argv[1])
+  if (process.platform === 'win32') {
+    // open resolves at PowerShell spawn; keep it referenced until that launcher hands the URL to Windows.
+    const code = launcher.exitCode ?? await new Promise((resolve, reject) => {
+      function onError(error) {
+        launcher.off('close', onClose)
+        reject(error)
+      }
+      function onClose(code) {
+        launcher.off('error', onError)
+        resolve(code)
+      }
+      launcher.ref()
+      launcher.once('error', onError)
+      launcher.once('close', onClose)
+    })
+    if (code !== 0) throw new Error('browser operating-system launcher exited with code ' + String(code))
+  }
+  process.exitCode = 0
+} catch (error) {
+  console.error(error)
+  process.exitCode = 1
+}
+`;
+/** Start the maintained platform opener without forwarding Harness credentials. */
+function spawnBrowserLauncher(url) {
+	return spawn(process.execPath, [
+		"--input-type=module",
+		"--eval",
+		BROWSER_OPENER_PROGRAM,
+		"--",
+		url
+	], {
+		env: scrubbedParentEnv(),
+		stdio: [
+			"ignore",
+			"inherit",
+			"pipe"
+		]
+	});
+}
+/**
+* Hand an HTTP(S) URL to the operating system's default browser.
+*
+* The promise settles after the short-lived operating-system launcher exits,
+* not after the browser window closes. Browser-launch failures reject with the
+* helper's first stderr line when available. The helper receives a scrubbed
+* environment so Harness credentials do not reach the browser process.
+* @param url - absolute HTTP(S) URL to open.
+* @returns once the operating-system launcher has accepted the URL.
+*/
+async function openNativeUrl(url) {
+	const protocol = new URL(url).protocol;
+	if (protocol !== "http:" && protocol !== "https:") throw new Error(`native URL opener supports only HTTP(S), not ${protocol}`);
+	const launcher = spawnBrowserLauncher(url);
+	let launcherStderr = "";
+	launcher.stderr?.setEncoding("utf8");
+	launcher.stderr?.on("data", (chunk) => {
+		launcherStderr += chunk;
+	});
+	await new Promise((resolve, reject) => {
+		function onError(error) {
+			launcher.off("close", onClose);
+			reject(error);
+		}
+		function onClose(code) {
+			launcher.off("error", onError);
+			if (code !== 0) {
+				const firstLine = launcherStderr.trim().split(/\r?\n/u)[0];
+				const reason = firstLine === void 0 || firstLine === "" ? `browser launcher exited with code ${String(code)}` : firstLine.replace(/^(?:[A-Za-z]*Error):\s*/u, "");
+				reject(new Error(reason));
+				return;
+			}
+			if (launcherStderr !== "") process.stderr.write(launcherStderr);
+			resolve();
+		}
+		launcher.once("error", onError);
+		launcher.once("close", onClose);
+	});
+}
+//#endregion
 //#region lib/types/path-opener.js
 /**
 * Cross-platform native path and text-document openers for Host UI
@@ -241,4 +332,4 @@ async function revealNativePath(path, signal, internals = {}) {
 	throw new Error(`native file manager is unsupported on ${platform}`);
 }
 //#endregion
-export { canOpenNativePath, nativeFileManager, openNativePath, openNativeTextFile, revealNativePath, runNativeCommand };
+export { canOpenNativePath, nativeFileManager, openNativePath, openNativeTextFile, openNativeUrl, revealNativePath, runNativeCommand };

package/node_modules/@deepseek-ai/dsh-native-command/package.json

@@ -26,6 +26,10 @@
     "lib/types/**/*.d.ts"
   ],
   "license": "MIT",
+  "dependencies": {
+    "@deepseek-ai/dsh-subprocess": "0.1.6-alpha.1",
+    "open": "^11.0.0"
+  },
   "peerDependencies": {
     "@deepseek-ai/cordis": "4.0.2"
   },

package/node_modules/@deepseek-ai/dsh-tool-cordis/lib/index.js

@@ -6320,11 +6320,11 @@ const TYPE_API = [
 	},
 	{
 		name: "AuthorizationNotice",
-		declaration: "export interface AuthorizationNotice {\n    message: string;\n    url?: string;\n    code?: string;\n}"
+		declaration: "export interface AuthorizationNotice {\n    message: string;\n    url?: string;\n    openInBrowser?: true;\n    code?: string;\n}"
 	},
 	{
 		name: "AuthorizationNoticeFrame",
-		declaration: "export interface AuthorizationNoticeFrame {\n    readonly type: 'notice';\n    readonly message: string;\n    readonly url?: string;\n    readonly code?: string;\n}"
+		declaration: "export interface AuthorizationNoticeFrame {\n    readonly type: 'notice';\n    readonly message: string;\n    readonly url?: string;\n    readonly openInBrowser?: true;\n    readonly code?: string;\n}"
 	},
 	{
 		name: "AuthorizationOutcome",

package/node_modules/@deepseek-ai/dsh-tui-app/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/bundle/tui-app/README.md
-README.md: a74c0b8642192cd2b44abd939c3d8082e935991a
-README.zh.md: 3b9ba69a63d5461e85fab40b80f21502aaf8558a
+README.md: f99f5ebde7ad398611e91f9e80529503423ee7f9
+README.zh.md: 37fdaf5839a39657d560ee5c56c733d13dddd762