@thestreamcode/dsh-muse-code 0.1.1 → 0.2.0

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Muse Code",
+    "description": "Declares the shipped Meta provider route for the Muse Code subscription and adds the /muse-login sign-in command."
+  }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@thestreamcode/dsh-muse-code",
-  "version": "0.1.1",
-  "description": "Muse Code subscription model provider and credential login for DeepSeek Harness.",
+  "version": "0.2.0",
+  "description": "Unofficial DeepSeek Harness integration for Meta's Muse Code subscription: declares the shipped Meta provider route and adds its sign-in command. Use at your own risk.",
   "license": "MIT",
   "author": {
     "name": "Michael Gasperini",
@@ -16,10 +16,14 @@
   "main": "./lib/index.js",
   "exports": {
     ".": "./lib/index.js",
-    "./package.json": "./package.json"
+    "./client": "./client/client.js",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json"
   },
   "files": [
     "lib",
+    "client/client.js",
+    "locale/*.json",
     "cordis.patch.yml",
     "README.md",
     "DISCLAIMER.md",
@@ -29,6 +33,13 @@
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true,
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-settings-models"
+      ]
     }
   },
   "engines": {

package/lib/auth.d.ts

@@ -1,22 +0,0 @@
-export declare const CLIENT_ID = "1031625952748946";
-export declare const DEVICE_URL = "https://auth.meta.com/oidc/device/authorization/";
-export declare const TOKEN_URL = "https://auth.meta.com/oidc/device/token/";
-export declare const KEY_URL = "https://api.meta.ai/muse-code/key";
-export declare const API_VERSION = "1.0.0";
-export declare const AUTH_CONTRACT_VERSION = 1;
-export interface DeviceAuthorization {
-    device_code: string;
-    user_code: string;
-    verification_uri: string;
-    verification_uri_complete?: string;
-    interval: number;
-    expires_in: number;
-}
-export interface MintedCredential {
-    apiKey: string;
-    accountId: string;
-    email?: string;
-}
-export declare function deviceAuthorize(signal?: AbortSignal): Promise<DeviceAuthorization>;
-export declare function pollToken(deviceCode: string, intervalS: number, expiresInS: number, signal?: AbortSignal): Promise<string>;
-export declare function mintKey(accessToken: string, signal?: AbortSignal): Promise<MintedCredential>;

package/lib/auth.js

@@ -1,157 +0,0 @@
-// Meta device-code login and subscription-key minting for Muse Code.
-// The wire contract is shared with the other Muse Code plugins; see
-// AUTH_CONTRACT.md before changing any constant here.
-export const CLIENT_ID = "1031625952748946";
-export const DEVICE_URL = "https://auth.meta.com/oidc/device/authorization/";
-export const TOKEN_URL = "https://auth.meta.com/oidc/device/token/";
-export const KEY_URL = "https://api.meta.ai/muse-code/key";
-export const API_VERSION = "1.0.0";
-export const AUTH_CONTRACT_VERSION = 1;
-const HEADERS = {
-    Accept: "application/json",
-    "x-api-version": API_VERSION,
-};
-const REQUEST_TIMEOUT_MS = 25_000;
-const MIN_INTERVAL_S = 1;
-const SLOW_DOWN_STEP_S = 5;
-function combinedSignal(signal) {
-    const timeout = AbortSignal.timeout(REQUEST_TIMEOUT_MS);
-    return signal ? AbortSignal.any([timeout, signal]) : timeout;
-}
-async function postForm(url, params, signal) {
-    const res = await fetch(url, {
-        method: "POST",
-        headers: { ...HEADERS, "Content-Type": "application/x-www-form-urlencoded" },
-        body: new URLSearchParams(params).toString(),
-        signal: combinedSignal(signal),
-    });
-    const text = await res.text();
-    if (!res.ok)
-        throw new Error(`HTTP ${res.status} ${text.slice(0, 200)}`.trim());
-    return JSON.parse(text);
-}
-function delay(ms, signal) {
-    return new Promise((resolve, reject) => {
-        const timer = setTimeout(resolve, ms);
-        if (!signal)
-            return;
-        if (signal.aborted) {
-            clearTimeout(timer);
-            reject(new Error("authorization cancelled"));
-            return;
-        }
-        signal.addEventListener("abort", () => {
-            clearTimeout(timer);
-            reject(new Error("authorization cancelled"));
-        }, { once: true });
-    });
-}
-export async function deviceAuthorize(signal) {
-    const body = (await postForm(DEVICE_URL, { client_id: CLIENT_ID }, signal));
-    const { device_code, user_code, verification_uri, interval, expires_in } = body;
-    if (typeof device_code !== "string" ||
-        !device_code ||
-        typeof user_code !== "string" ||
-        !user_code ||
-        typeof verification_uri !== "string" ||
-        !verification_uri ||
-        typeof interval !== "number" ||
-        typeof expires_in !== "number") {
-        throw new Error("device authorization response is missing fields");
-    }
-    const complete = body.verification_uri_complete;
-    return {
-        device_code,
-        user_code,
-        verification_uri,
-        ...(typeof complete === "string" && complete ? { verification_uri_complete: complete } : {}),
-        interval,
-        expires_in,
-    };
-}
-export async function pollToken(deviceCode, intervalS, expiresInS, signal) {
-    let interval = Math.max(MIN_INTERVAL_S, Number(intervalS) || 5);
-    const deadline = Date.now() + Number(expiresInS || 600) * 1000;
-    let slowDowns = 0;
-    while (Date.now() < deadline) {
-        if (signal?.aborted)
-            throw new Error("authorization cancelled");
-        // The token endpoint answers pending/slow_down polls with HTTP errors as
-        // part of the normal flow: classify the body instead of throwing.
-        let body = null;
-        try {
-            const res = await fetch(TOKEN_URL, {
-                method: "POST",
-                headers: { ...HEADERS, "Content-Type": "application/x-www-form-urlencoded" },
-                body: new URLSearchParams({
-                    grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-                    client_id: CLIENT_ID,
-                    device_code: deviceCode,
-                }).toString(),
-                signal: combinedSignal(signal),
-            });
-            try {
-                body = (await res.json());
-            }
-            catch {
-                body = null;
-            }
-        }
-        catch (error) {
-            if (signal?.aborted)
-                throw new Error("authorization cancelled");
-            if (error instanceof Error && error.name === "AbortError")
-                throw error;
-            body = null;
-        }
-        if (body && !body.error) {
-            if (typeof body.access_token !== "string" || !body.access_token) {
-                throw new Error("token response has no access_token");
-            }
-            return body.access_token;
-        }
-        if (body?.error === "slow_down") {
-            slowDowns += 1;
-            interval = Math.max(MIN_INTERVAL_S, interval + SLOW_DOWN_STEP_S);
-        }
-        else if (body?.error !== "authorization_pending") {
-            throw new Error(`login failed: ${String(body?.error || "unreadable token response")}`);
-        }
-        const remaining = deadline - Date.now();
-        if (remaining <= 0)
-            break;
-        await delay(Math.min(interval, remaining) * 1000, signal);
-    }
-    throw new Error(slowDowns ? "login timed out after slow_down responses" : "login timed out waiting for approval");
-}
-export async function mintKey(accessToken, signal) {
-    const res = await fetch(KEY_URL, {
-        method: "POST",
-        headers: {
-            ...HEADERS,
-            "Content-Type": "application/json",
-            Authorization: `Bearer ${accessToken}`,
-        },
-        body: JSON.stringify({ onboard: true }),
-        signal: combinedSignal(signal),
-    });
-    const text = await res.text();
-    if (!res.ok)
-        throw new Error(`key exchange failed: HTTP ${res.status} ${text.slice(0, 200)}`.trim());
-    const body = JSON.parse(text);
-    if (body.is_subs_active === false) {
-        throw new Error("Muse Code subscription is inactive for this account");
-    }
-    if (typeof body.api_key !== "string" || !body.api_key.trim()) {
-        const action = String(body.action_url || body.require_payment_action_url || "").trim();
-        if (body.require_payment === true || action) {
-            throw new Error(`Muse Code subscription is required${action ? ": " + action : ""}`);
-        }
-        throw new Error("key response is missing api_key");
-    }
-    const email = String(body.user_email || "").trim().toLowerCase() || undefined;
-    const accountId = String(body.user_id || "").trim() || email;
-    if (!accountId)
-        throw new Error("key response is missing account identity");
-    return { apiKey: body.api_key.trim(), accountId, ...(email ? { email } : {}) };
-}