ds-harness-remote 0.5.4 → 0.5.7

package/dist/index.js

@@ -4185,7 +4185,8 @@ var rpcMethods = [
   "acp.session.prompt",
   "acp.session.respond_permission",
   "acp.session.cancel",
-  "acp.session.set_mode"
+  "acp.session.set_mode",
+  "plugin.route.call"
 ];
 var errorCodes = [
   // Protocol / Version
@@ -6549,6 +6550,7 @@ var RtcDataChannelTransport = class {
   bytesReceived = 0;
   selected;
   selectedMode;
+  selectedRelayUrlValue;
   selectedPathTelemetry;
   localCandidateTelemetry = emptyCandidateTelemetry();
   remoteCandidateTelemetry = emptyCandidateTelemetry();
@@ -6646,6 +6648,9 @@ var RtcDataChannelTransport = class {
   selectedTransport() {
     return this.selected;
   }
+  selectedRelayUrl() {
+    return this.selectedRelayUrlValue;
+  }
   selectedPathMode() {
     return this.selectedMode;
   }
@@ -6856,6 +6861,7 @@ var RtcDataChannelTransport = class {
       }
       this.selected = selected?.transport;
       this.selectedMode = selected?.mode;
+      this.selectedRelayUrlValue = selected?.relayUrl;
       this.selectedPathTelemetry = selectedPathTelemetry(selected);
       this.emitDiagnostic({
         type: "selected-path",
@@ -7022,6 +7028,7 @@ function inspectSelectedPath(stats) {
     let selected;
     if (localType === "relay" || remoteType === "relay")
       selected = { transport: "turn", mode: "TURN" };
+    const relayUrl = localType === "relay" ? stringStat(local, "url") : void 0;
     if (local === void 0 && remote === void 0)
       continue;
     const lan = isLanCandidatePair(localType, remoteType, localAddressScope, remoteAddressScope);
@@ -7029,6 +7036,7 @@ function inspectSelectedPath(stats) {
     const currentRoundTripTime = numberStat(pair, "currentRoundTripTime");
     return {
       ...selected,
+      ...relayUrl === void 0 ? {} : { relayUrl },
       localCandidateType: stringStat(local, "candidateType"),
       remoteCandidateType: stringStat(remote, "candidateType"),
       localAddressScope,
@@ -7181,6 +7189,7 @@ function selectedPathTelemetry(details) {
   return {
     ...details.transport === void 0 ? {} : { transport: details.transport },
     ...details.mode === void 0 ? {} : { mode: details.mode },
+    ...details.relayUrl === void 0 ? {} : { relayUrl: details.relayUrl },
     ...details.localCandidateType === void 0 ? {} : { localCandidateType: details.localCandidateType },
     ...details.remoteCandidateType === void 0 ? {} : { remoteCandidateType: details.remoteCandidateType },
     ...details.localAddressScope === void 0 ? {} : { localAddressScope: details.localAddressScope },
@@ -7460,7 +7469,7 @@ var AdaptiveTransport = class extends BaseTransport {
     this.lastRtcDiagnostics = void 0;
     if (wantWebRtc) {
       try {
-        const rtcSelected = await this.tryWebRtc();
+        const rtcSelected = (await this.tryWebRtc()).transport;
         const wireSelected = rtcSelected === "lan" && !preferred.includes("lan") && preferred.includes("p2p") ? "p2p" : rtcSelected;
         if (!preferred.includes(wireSelected)) {
           await this.rtc?.close();
@@ -7494,10 +7503,12 @@ var AdaptiveTransport = class extends BaseTransport {
       selected = "relay";
     }
     this.selected = selected;
+    const turnNode = selected === "turn" ? this.rtc?.selectedRelayUrl() : void 0;
     this.sendControl("transport.selected", {
       connectionId: this.connectionId,
       targetDeviceId: this.options.targetDeviceId,
-      transport: selected
+      transport: selected,
+      ...turnNode === void 0 ? {} : { turnNode }
     });
     this.finishConnection();
   }
@@ -7558,7 +7569,7 @@ var AdaptiveTransport = class extends BaseTransport {
       throw error;
     }
     this.lastRtcDiagnostics = rtc.diagnostics();
-    return rtc.selectedTransport() ?? "p2p";
+    return { transport: rtc.selectedTransport() ?? "p2p", relayUrl: rtc.selectedRelayUrl() };
   }
   sendRtcSignal(signal) {
     if (this.connectionId === void 0)
@@ -15090,6 +15101,97 @@ async function readHarnessDistributionVersion(entrypoint = process.argv[1]) {
   }
 }
 
+// src/plugin-route-bridge.ts
+var PLUGIN_ROUTE_ALLOWLIST = ["api/bot"];
+var BOT_REMOTE_OPERATIONS = [
+  "state",
+  "models",
+  "efforts",
+  "exchange",
+  "earlier",
+  "usage",
+  "room-progress",
+  "schedules",
+  "create-bot",
+  "duplicate-bot",
+  "update-bot",
+  "delete-bot",
+  "set-main",
+  "set-flags",
+  "create-room",
+  "update-room",
+  "delete-room",
+  "add-agent",
+  "agent-session",
+  "agent-adopt",
+  "agent-archive",
+  "agent-rename",
+  "remove-agent",
+  "send",
+  "answer-question",
+  "dismiss-question",
+  "approval-answer",
+  "stop-member-work"
+];
+function isAllowedPluginRoute(route) {
+  return PLUGIN_ROUTE_ALLOWLIST.some((allowed) => allowed === route);
+}
+var callSchema = external_exports.object({
+  route: external_exports.enum(PLUGIN_ROUTE_ALLOWLIST),
+  body: external_exports.object({
+    endpoint: external_exports.enum(BOT_REMOTE_OPERATIONS),
+    payload: external_exports.record(external_exports.string(), external_exports.unknown()).nullable().optional()
+  }).strict().superRefine((body, ctx) => {
+    if (body.endpoint === "approval-answer" && body.payload?.choice !== "allow" && body.payload?.choice !== "reject") {
+      ctx.addIssue({ code: external_exports.ZodIssueCode.custom, message: "Only one-time approval or rejection is supported." });
+    }
+  })
+}).strict();
+var PLUGIN_ROUTE_TIMEOUT_MS = 3e4;
+var PluginRouteBridge = class {
+  constructor(dispatch, logger) {
+    this.dispatch = dispatch;
+    this.logger = logger;
+  }
+  async call(input2) {
+    let params;
+    try {
+      params = callSchema.parse(input2);
+    } catch (error) {
+      if (error instanceof external_exports.ZodError) {
+        throw new RpcError("INVALID_MESSAGE", "The plugin route call is invalid for the remote channel.");
+      }
+      throw error;
+    }
+    if (serializedBytes(params) > MAX_SECURE_MESSAGE_BYTES) {
+      throw new RpcError("INVALID_MESSAGE", `The plugin route call exceeds the ${MAX_SECURE_MESSAGE_BYTES}-byte remote limit.`);
+    }
+    const startedAt = performance.now();
+    let result;
+    try {
+      result = await this.dispatch(params.route, params.body, AbortSignal.timeout(PLUGIN_ROUTE_TIMEOUT_MS));
+    } catch (error) {
+      this.logger?.warn("plugin route call failed", {
+        route: params.route,
+        durationMs: Math.round(performance.now() - startedAt)
+      });
+      throw error;
+    }
+    if (serializedBytes(result) > MAX_SECURE_MESSAGE_BYTES) {
+      throw new RpcError("RESPONSE_TOO_LARGE", "The plugin route response exceeds the bounded remote limit.");
+    }
+    this.logger?.debug("plugin route call ok", {
+      route: params.route,
+      status: result.status,
+      durationMs: Math.round(performance.now() - startedAt)
+    });
+    return { status: result.status, json: result.json };
+  }
+};
+function serializedBytes(value) {
+  return new TextEncoder().encode(JSON.stringify(value)).byteLength;
+}
+
 // src/remote-api-proxy.ts
 var DIRECT_API_CALL_BYTES = 2 * 1024 * 1024;
 var AGENT_PRESET_SETTINGS_NS = "agent-presets";
@@ -20243,7 +20345,7 @@ function normalizeServerUrl(value) {
 }
 
 // src/version.ts
-var PLUGIN_VERSION = "0.5.4";
+var PLUGIN_VERSION = "0.5.7";
 
 // src/server-api.ts
 var TERMINAL_CONTROL_CHARACTERS = /[\u0000-\u001f\u007f-\u009f]/u;
@@ -20324,13 +20426,54 @@ var HostServerApi = class {
       isAdmin: login2.isAdmin
     };
   }
+  async oauthProviders() {
+    let body;
+    try {
+      body = await this.publicRequest("/api/v1/auth/oauth/providers", { method: "GET" });
+    } catch (error) {
+      if (!(error instanceof ServerApiError) || error.status !== 404) throw error;
+      const legacy = [
+        { id: "zhihu", displayName: "Zhihu", startUrl: "/api/v1/auth/oauth/start", statusUrl: "/api/v1/auth/oauth/status" },
+        { id: "github", displayName: "GitHub", startUrl: "/api/v1/auth/oauth/github/start", statusUrl: "/api/v1/auth/oauth/github/status" }
+      ];
+      const items = await Promise.all(legacy.map(async ({ statusUrl, ...provider }) => {
+        try {
+          const status2 = requireRecord(await this.publicRequest(statusUrl, { method: "GET" }), "OAuth status");
+          if (typeof status2.configured !== "boolean") throw invalidOAuthProviders();
+          return status2.configured ? [{ ...provider, qrStartUrl: `/api/v1/auth/oauth/qr/start?provider=${provider.id}` }] : [];
+        } catch (reason) {
+          if (reason instanceof ServerApiError && reason.status === 404) return [];
+          throw reason;
+        }
+      }));
+      return items.flat();
+    }
+    const value = requireRecord(body, "OAuth providers");
+    if (!Array.isArray(value.items)) throw invalidOAuthProviders();
+    const ids = /* @__PURE__ */ new Set();
+    return value.items.map((item) => {
+      const provider = requireRecord(item, "OAuth provider");
+      if (typeof provider.id !== "string" || !/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$/.test(provider.id) || ids.has(provider.id) || typeof provider.displayName !== "string" || !provider.displayName.trim() || provider.displayName.length > 128 || TERMINAL_CONTROL_CHARACTERS.test(provider.displayName) || !isOAuthEntryPath(provider.startUrl) || provider.qrStartUrl != null && !isOAuthEntryPath(provider.qrStartUrl)) throw invalidOAuthProviders();
+      ids.add(provider.id);
+      return {
+        id: provider.id,
+        displayName: provider.displayName,
+        startUrl: provider.startUrl,
+        ...typeof provider.qrStartUrl === "string" ? { qrStartUrl: provider.qrStartUrl } : {}
+      };
+    });
+  }
   async startOAuthQrLogin(provider = "zhihu") {
-    const value = requireRecord(await this.publicRequest(`/api/v1/auth/oauth/qr/start?provider=${provider}`, {
+    const entry = (await this.oauthProviders()).find((item) => item.id === provider);
+    if (entry?.qrStartUrl == null) {
+      throw new ServerApiError("OAUTH_PROVIDER_UNAVAILABLE", "This OAuth provider is unavailable for QR login.", false);
+    }
+    const value = requireRecord(await this.publicRequest(entry.qrStartUrl, {
       method: "POST",
       body: "{}"
     }), "QR login");
     const scanUrl = normalizeOAuthScanUrl(value.scanUrl, this.baseUrl);
-    if (typeof value.qrId !== "string" || value.qrId.length < 20 || scanUrl === void 0 || !Number.isSafeInteger(value.expiresIn) || provider === "github" && value.provider !== "github" || value.provider !== void 0 && value.provider !== provider) {
+    if (typeof value.qrId !== "string" || value.qrId.length < 20 || scanUrl === void 0 || !Number.isSafeInteger(value.expiresIn) || provider !== "zhihu" && value.provider !== provider || value.provider !== void 0 && value.provider !== provider) {
       throw new ServerApiError("INVALID_MESSAGE", "The Server returned an invalid QR login session.", false);
     }
     return { qrId: value.qrId, scanUrl, expiresIn: value.expiresIn };
@@ -20566,6 +20709,12 @@ var HostServerApi = class {
     return this.identity;
   }
 };
+function isOAuthEntryPath(value) {
+  return typeof value === "string" && /^\/api\/v1\/auth\/[^\s\\#]*$/.test(value) && !TERMINAL_CONTROL_CHARACTERS.test(value) && !value.split("?")[0]?.split("/").some((segment) => segment === "." || segment === ".." || /%/u.test(segment));
+}
+function invalidOAuthProviders() {
+  return new ServerApiError("INVALID_MESSAGE", "The Server returned an invalid OAuth provider list.", false);
+}
 function normalizeOAuthScanUrl(value, baseUrl) {
   if (typeof value !== "string" || TERMINAL_CONTROL_CHARACTERS.test(value)) return void 0;
   try {
@@ -20750,7 +20899,10 @@ var TypertGatewaySwitch = class {
       this.runtime.stream = (request) => this.remoteTarget === void 0 || isLocalOnlyEndpoint(endpointOf(request)) ? this.localStream(request) : this.remoteTarget.open(endpointOf(request), { args: request.args }, request.signal ?? new AbortController().signal);
     }
     if (this.originalDispatch !== void 0) {
-      this.runtime.dispatchRpc = (endpoint, payload, signal) => this.remoteTarget === void 0 || isLocalOnlyEndpoint(endpoint) ? this.localDispatch(endpoint, payload, signal) : this.remoteTarget.dispatch(endpoint, payload, signal);
+      this.runtime.dispatchRpc = (endpoint, payload, signal) => this.remoteTarget === void 0 || isLocalOnlyEndpoint(endpoint) ? this.localDispatch(endpoint, payload, signal) : this.remoteTarget.dispatch(endpoint, payload, signal).then(
+        (result) => workspaceConnectionResult(endpoint, result),
+        (error) => ({ ok: false, error: this.failure(error) })
+      );
     }
     if (this.originalOpen !== void 0) {
       const open = this.originalOpen;
@@ -20826,6 +20978,18 @@ var TypertGatewaySwitch = class {
     return { code, message: source.message, details };
   }
 };
+function workspaceConnectionResult(endpoint, result) {
+  if (endpoint !== "workspaceFiles/readBytes" && endpoint !== "officeToPdf/render") return result;
+  if (!result.ok || !isRecord9(result.value) || !(result.value.data instanceof Uint8Array)) return result;
+  return {
+    ...result,
+    value: { ...result.value, data: null },
+    attachments: [
+      ...(result.attachments ?? []).filter((attachment) => attachment.path.length !== 1 || attachment.path[0] !== "data"),
+      { path: ["data"], bytes: result.value.data }
+    ]
+  };
+}
 function usesRc1Arity(open) {
   return open.length >= 5;
 }
@@ -22414,6 +22578,16 @@ var ClientModeRuntime = class {
     }
     return remote.client.rpc("fileviewer.call", { endpoint, payload }, signal);
   }
+  async pluginRoute(route, body, signal) {
+    const remote = this.connected;
+    if (remote === void 0 || this.status().mode !== "remote") {
+      throw new ClientModeError("REMOTE_NOT_CONNECTED", "No Remote Host is selected.", true);
+    }
+    if (!remote.features.pluginRoute) {
+      throw new ClientModeError("FEATURE_NOT_SUPPORTED", "The connected Host cannot forward plugin routes.");
+    }
+    return remote.client.rpc("plugin.route.call", { route, body }, signal);
+  }
   activeRemote() {
     return this.connected;
   }
@@ -22793,6 +22967,7 @@ var ClientModeRuntime = class {
     try {
       if (endpoint === "status") return ok2(await this.detailedStatus());
       if (endpoint === "devices") return ok2(await this.devices());
+      if (endpoint === "client.account.providers") return ok2(await this.server.oauthProviders());
       if (endpoint === "client.account.login") {
         const value = record5(payload);
         if (typeof value.email !== "string" || typeof value.password !== "string") {
@@ -22803,8 +22978,8 @@ var ClientModeRuntime = class {
       if (endpoint === "client.account.qr.start") {
         const value = record5(payload);
         const provider = value.provider ?? "zhihu";
-        if (provider !== "zhihu" && provider !== "github") {
-          throw new ClientModeError("INVALID_MESSAGE", "A supported OAuth provider is required.");
+        if (typeof provider !== "string" || !/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$/.test(provider)) {
+          throw new ClientModeError("INVALID_MESSAGE", "An OAuth provider ID is required.");
         }
         return ok2(await this.startClientOAuthQrLogin(provider));
       }
@@ -22946,6 +23121,14 @@ var ClientModeRuntime = class {
         const host = this.requireLocalCodex();
         return ok2(await host.codexRespond(value, signal));
       }
+      if (endpoint === "plugin.route") {
+        const value = record5(payload);
+        if (typeof value.route !== "string" || !isAllowedPluginRoute(value.route)) {
+          throw new ClientModeError("INVALID_MESSAGE", "A valid plugin route is required.");
+        }
+        if (!isRecord10(value.body)) throw new ClientModeError("INVALID_MESSAGE", "A plugin route body object is required.");
+        return ok2(await this.pluginRoute(value.route, value.body, signal));
+      }
       if (endpoint === "codex.stream.open") return ok2(await this.openCodexStream(payload, signal));
       if (endpoint === "codex.stream.next") return ok2(await this.nextCodexFrames(payload, signal));
       if (endpoint === "codex.stream.close") return ok2(await this.closeCodexStream(payload));
@@ -23128,7 +23311,8 @@ function remoteHostFeatures(clientVersion) {
     remoteGateway: false,
     codex: false,
     cursor: false,
-    antigravity: false
+    antigravity: false,
+    pluginRoute: false
   };
 }
 async function probeRemoteHostFeatures(client, clientVersion) {
@@ -23172,7 +23356,8 @@ async function probeRemoteHostFeatures(client, clientVersion) {
     cursor: cursor2,
     antigravity,
     ...capabilities.has("agent.acp.antigravity.model-load.v1") ? { acpModelLoadsSession: true } : {},
-    ...workspaceTypes === void 0 ? {} : { workspaceTypes }
+    ...workspaceTypes === void 0 ? {} : { workspaceTypes },
+    pluginRoute: capabilities.has("plugin.route.v1")
   };
 }
 async function waitForCodexFrames(stream, signal) {
@@ -23794,6 +23979,7 @@ function safeUpstreamError(value) {
   if (!isRecord11(value) || typeof value.message !== "string") return "Codex App Server rejected the request.";
   const message = value.message.toLowerCase();
   if (message.includes("active writer")) return "Codex thread already has an active writer.";
+  if (message.includes("no rollout found")) return "Codex thread state is not persisted yet.";
   return message.includes("not initialized") ? "Codex App Server is not initialized." : "Codex App Server rejected the request.";
 }
 function isRecord11(value) {
@@ -24634,13 +24820,23 @@ var CodexRemoteDomain = class {
     try {
       await this.callUpstream("thread/settings/update", { threadId, ...settings });
       result = { thread: allowed.thread, ...settings, sandbox: settings.sandboxPolicy };
-    } catch {
-      result = await this.callUpstream("thread/resume", {
-        ...permission.params,
-        ...allowed.cwd === void 0 ? {} : { cwd: allowed.cwd },
-        ...codexThreadPermissionParams(permission),
-        excludeTurns: true
-      });
+    } catch (error) {
+      if (isUnpersistedThreadError(error)) {
+        return { thread: allowed.thread, ...settings, sandbox: settings.sandboxPolicy };
+      }
+      try {
+        result = await this.callUpstream("thread/resume", {
+          ...permission.params,
+          ...allowed.cwd === void 0 ? {} : { cwd: allowed.cwd },
+          ...codexThreadPermissionParams(permission),
+          excludeTurns: true
+        });
+      } catch (resumeError) {
+        if (isUnpersistedThreadError(resumeError)) {
+          return { thread: allowed.thread, ...settings, sandbox: settings.sandboxPolicy };
+        }
+        throw resumeError;
+      }
       await this.assertResultThreadAllowed(result);
       if (codexPermissionPresetFromResponse(result) !== params.permissionPreset) {
         await this.callUpstream("thread/settings/update", { threadId, ...settings });
@@ -25324,6 +25520,9 @@ function maskId(value) {
 function isActiveWriterMessage(message) {
   return message.toLowerCase().includes("active writer");
 }
+function isUnpersistedThreadError(error) {
+  return error instanceof RpcError && error.code === "CODEX_UPSTREAM_ERROR" && error.message.toLowerCase().includes("not persisted yet");
+}
 
 // src/workspace-bridge.ts
 import { spawn as spawn3 } from "node:child_process";
@@ -29345,7 +29544,8 @@ var apiMethods = /* @__PURE__ */ new Set([
   "agent.acp.transfer.chunk",
   "agent.acp.transfer.commit",
   "agent.acp.transfer.read",
-  "agent.acp.transfer.close"
+  "agent.acp.transfer.close",
+  "plugin.route.call"
 ]);
 var HOST_CAPABILITIES = [
   "harness.api.v1",
@@ -29359,7 +29559,7 @@ var HOST_CAPABILITIES = [
   "agent.acp.transfer.v1"
 ];
 var RpcRouter = class {
-  constructor(harnessApi, maxPending = 128, logger, fileViewer, harnessRemote, capabilities = () => HOST_CAPABILITIES, codex, acp, loopback, workspaceTypes) {
+  constructor(harnessApi, maxPending = 128, logger, fileViewer, harnessRemote, capabilities = () => HOST_CAPABILITIES, codex, acp, loopback, workspaceTypes, pluginRoute) {
     this.harnessApi = harnessApi;
     this.maxPending = maxPending;
     this.logger = logger;
@@ -29370,6 +29570,7 @@ var RpcRouter = class {
     this.acp = acp;
     this.loopback = loopback;
     this.workspaceTypes = workspaceTypes;
+    this.pluginRoute = pluginRoute;
   }
   active = 0;
   async closePeerStreams() {
@@ -29518,6 +29719,8 @@ var RpcRouter = class {
         return this.requireAcp().readTransfer(params);
       case "agent.acp.transfer.close":
         return this.requireAcp().closeTransfer(params);
+      case "plugin.route.call":
+        return this.requirePluginRoute().call(params);
       default:
         throw new RpcError("METHOD_NOT_FOUND", "The requested method does not exist.");
     }
@@ -29546,6 +29749,12 @@ var RpcRouter = class {
     }
     return this.acp;
   }
+  requirePluginRoute() {
+    if (this.pluginRoute === void 0) {
+      throw new RpcError("FEATURE_NOT_SUPPORTED", "This Host cannot forward local plugin routes.");
+    }
+    return this.pluginRoute;
+  }
 };
 function errorResponse2(requestId, error) {
   const code = safeErrorCode(error);
@@ -29564,7 +29773,7 @@ var MAX_REMOTE_DIRECTORY_ENTRIES = 1e3;
 
 // src/file-viewer-bridge.ts
 var locatorSchema = external_exports.string().min(1).max(MAX_REMOTE_FILE_LOCATOR_CHARS);
-var callSchema = external_exports.discriminatedUnion("endpoint", [
+var callSchema2 = external_exports.discriminatedUnion("endpoint", [
   external_exports.object({
     endpoint: external_exports.literal("stat"),
     payload: external_exports.object({ path: locatorSchema }).strict()
@@ -29615,7 +29824,7 @@ var RemoteFileViewerBridge = class {
     this.logger = logger;
   }
   async call(input2) {
-    const params = callSchema.parse(input2);
+    const params = callSchema2.parse(input2);
     const service = this.service();
     if (service === void 0) {
       throw new RpcError("FILE_VIEWER_UNAVAILABLE", "The Remote Host does not have DSH File Viewer available.");
@@ -30685,7 +30894,7 @@ function historyRequestPayload(payload, maxMessages) {
 }
 
 // src/harness-api-bridge.ts
-var callSchema2 = external_exports.object({
+var callSchema3 = external_exports.object({
   method: external_exports.string().min(1).max(80),
   rpcId: external_exports.string().min(1).max(128),
   payload: external_exports.unknown()
@@ -30876,7 +31085,7 @@ var HarnessApiBridge = class {
   host;
   answer;
   async call(input2) {
-    const params = callSchema2.parse(input2);
+    const params = callSchema3.parse(input2);
     const signal = AbortSignal.timeout(NATIVE_CALL_TIMEOUT_MS);
     const method = this.methods.get(params.method);
     if (method === void 0) {
@@ -31010,7 +31219,7 @@ var HarnessApiBridge = class {
     } catch {
       throw new RpcError("INVALID_MESSAGE", "The Harness API transfer does not contain a valid request.");
     }
-    const nativeRequest = callSchema2.parse(request);
+    const nativeRequest = callSchema3.parse(request);
     const response = await this.call(nativeRequest);
     const responseBytes = new TextEncoder().encode(JSON.stringify(response));
     if (responseBytes.byteLength <= INLINE_TRANSFER_RESPONSE_BYTES3) {
@@ -31120,7 +31329,11 @@ var HarnessApiBridge = class {
           continue;
         }
         this.trackRespondable(frame);
-        await this.publish("harness.api.frame", { streamId, frame });
+        const data2 = { streamId, frame };
+        if (encodeMessage(createEvent("harness.api.frame", data2)).byteLength > MAX_SECURE_MESSAGE_BYTES) {
+          throw new Error("Oversized Harness API frame");
+        }
+        await this.publish("harness.api.frame", data2);
       }
       if (signal.aborted) reason = "cancelled";
     } catch {
@@ -31452,7 +31665,7 @@ function concatChunks3(chunks, totalBytes) {
 
 // src/harness-remote-bridge.ts
 var endpointSchema = external_exports.string().min(1).max(128).regex(/^(?:\$events(?:\/result)?|[A-Za-z0-9_$.-]+\/[A-Za-z0-9_$.-]+)$/);
-var callSchema3 = external_exports.object({ endpoint: endpointSchema, payload: external_exports.unknown() }).strict();
+var callSchema4 = external_exports.object({ endpoint: endpointSchema, payload: external_exports.unknown() }).strict();
 var streamOpenSchema4 = external_exports.object({
   streamId: external_exports.string().min(1).max(128),
   endpoint: endpointSchema,
@@ -31527,6 +31740,8 @@ var HARNESS_REMOTE_ALLOWLIST = [
   "messageFeedback/put",
   "pluginInventory/list",
   "permissionPresets/catalog",
+  "schedule/list",
+  "schedule/catalog",
   "session/attachment",
   "session/cancel",
   "session/canOpenWorkspacePath",
@@ -31593,7 +31808,7 @@ var HarnessRemoteBridge = class {
   incomingTransfers = /* @__PURE__ */ new Map();
   outgoingTransfers = /* @__PURE__ */ new Map();
   async call(input2) {
-    const params = callSchema3.parse(input2);
+    const params = callSchema4.parse(input2);
     this.assertAllowed(params.endpoint);
     if (TERMINAL_STREAMS.has(params.endpoint)) throw new RpcError("METHOD_NOT_ALLOWED", "Use a stream for this terminal endpoint.");
     if (["settings/update", "settings/replace", "settings/mutate"].includes(params.endpoint)) {
@@ -31713,7 +31928,7 @@ var HarnessRemoteBridge = class {
     } catch {
       throw new RpcError("INVALID_MESSAGE", "The Harness Remote transfer does not contain a valid request.");
     }
-    const response = await this.call(callSchema3.parse(request));
+    const response = await this.call(callSchema4.parse(request));
     const responseBytes = new TextEncoder().encode(JSON.stringify(response));
     if (responseBytes.byteLength <= INLINE_TRANSFER_RESPONSE_BYTES4) return { kind: "inline", response };
     if (responseBytes.byteLength > MAX_HARNESS_API_TRANSFER_BYTES) {
@@ -31810,11 +32025,15 @@ var HarnessRemoteBridge = class {
     try {
       for await (const value of source) {
         if (signal.aborted) break;
-        await this.publish("harness.remote.frame", {
+        const frame = {
           streamId,
           hasValue: true,
           ...value === void 0 ? {} : { value }
-        });
+        };
+        if (encodeMessage(createEvent("harness.remote.frame", frame)).byteLength > MAX_SECURE_MESSAGE_BYTES) {
+          throw new Error("Oversized Harness Remote frame");
+        }
+        await this.publish("harness.remote.frame", frame);
       }
       if (signal.aborted) reason = "cancelled";
     } catch (error) {
@@ -31971,7 +32190,7 @@ var CodexWorkspaceBridge = class extends WorkspaceBridge {
 
 // src/service.ts
 var HostPluginRuntime = class {
-  constructor(config, identities, apiProxy, logger, localGateway, fileViewerHost, terminalSpawner) {
+  constructor(config, identities, apiProxy, logger, localGateway, fileViewerHost, terminalSpawner, pluginRoutes) {
     this.config = config;
     this.identities = identities;
     this.apiProxy = apiProxy;
@@ -31979,6 +32198,7 @@ var HostPluginRuntime = class {
     this.localGateway = localGateway;
     this.fileViewerHost = fileViewerHost;
     this.terminalSpawner = terminalSpawner;
+    this.pluginRoutes = pluginRoutes;
     this.terminalEnabled = config.terminal.enabled;
     this.loopbackPorts = [...config.loopback.ports];
     this.codex = new CodexRemoteDomain(config.codex, logger);
@@ -32017,6 +32237,8 @@ var HostPluginRuntime = class {
         context,
         (event, data2) => send(createEvent(event, data2))
       );
+      const dispatcher = this.pluginRoutes?.();
+      const pluginRoute = dispatcher === void 0 ? void 0 : new PluginRouteBridge(dispatcher, this.logger);
       return new RpcRouter(
         harnessApi,
         void 0,
@@ -32028,7 +32250,8 @@ var HostPluginRuntime = class {
         cursor2,
         // Handles and their lifetime belong to this connection; only policy is shared.
         this.createLoopbackHost(),
-        () => this.hostWorkspaceTypes()
+        () => this.hostWorkspaceTypes(),
+        pluginRoute
       );
     }, this.logger);
     if (config.serverUrl !== void 0) {
@@ -32142,6 +32365,12 @@ var HostPluginRuntime = class {
     }
     this.serverConnection.reconnect();
   }
+  async hostOAuthProviders() {
+    if (this.serverApi === void 0) {
+      throw new ServerApiError("SERVER_NOT_CONFIGURED", "Remote Host Server is unavailable.", false);
+    }
+    return this.serverApi.oauthProviders();
+  }
   async startHostOAuthQrLogin(provider) {
     if (this.serverApi === void 0) {
       throw new ServerApiError("SERVER_NOT_CONFIGURED", "Remote Host Server is unavailable.", false);
@@ -32348,6 +32577,7 @@ var HostPluginRuntime = class {
       capabilities.push("harness.api.v1", "harness.api.transfer.v1");
     }
     if (this.fileViewerHost?.() !== void 0) capabilities.push("fileviewer.read.v1");
+    if (this.pluginRoutes?.() !== void 0) capabilities.push("plugin.route.v1");
     if (this.codex.isAvailable()) capabilities.push("codex.appserver.v1", "codex.appserver.transfer.v1");
     if (this.acp.enabledBackends().length > 0) {
       capabilities.push("agent.acp.v1", "agent.acp.transfer.v1", "agent.acp.workspace-files.v1");
@@ -32428,6 +32658,61 @@ function isPlainRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// src/plugin-route-dispatcher.ts
+function createPluginRouteDispatcher(readConnection, readPort) {
+  let cookie;
+  return async (route, body, signal) => {
+    signal.throwIfAborted();
+    const connection = readConnection();
+    const handler = connection?.createSharedFetchHandler?.("/api");
+    let response;
+    if (handler !== void 0) {
+      response = await withSignal(handler.fetch(new Request(`http://127.0.0.1/${route}`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(body ?? {}),
+        signal
+      })), signal);
+    } else {
+      const port = readPort();
+      if (connection?.authenticatedUrl === void 0 || typeof port !== "number") {
+        return { status: 503, json: { ok: false, error: { code: "gateway/unavailable", message: "The local plugin route carrier is unavailable." } } };
+      }
+      const origin = `http://127.0.0.1:${port}`;
+      if (cookie === void 0) {
+        const launch = await fetch(connection.authenticatedUrl(`${origin}/`), { redirect: "manual", signal });
+        const setCookie = typeof launch.headers.getSetCookie === "function" ? launch.headers.getSetCookie() : [];
+        cookie = setCookie.map((item) => item.split(";", 1)[0]).join("; ") || void 0;
+      }
+      response = await fetch(`${origin}/${route}`, {
+        method: "POST",
+        headers: { "content-type": "application/json", ...cookie === void 0 ? {} : { cookie } },
+        body: JSON.stringify(body ?? {}),
+        signal
+      });
+      if (response.status === 401) cookie = void 0;
+    }
+    const text = await response.text();
+    let json = null;
+    if (text !== "") {
+      try {
+        json = JSON.parse(text);
+      } catch {
+        json = text;
+      }
+    }
+    return { status: response.status, json };
+  };
+}
+function withSignal(pending, signal) {
+  return new Promise((resolve6, reject) => {
+    const onAbort = () => reject(signal.reason);
+    signal.addEventListener("abort", onAbort, { once: true });
+    if (signal.aborted) onAbort();
+    void pending.then(resolve6, reject).finally(() => signal.removeEventListener("abort", onAbort));
+  });
+}
+
 // src/cli.ts
 import { stat as stat7 } from "node:fs/promises";
 import { hostname as hostname3 } from "node:os";
@@ -32465,16 +32750,20 @@ async function register(args, runtime) {
   return 0;
 }
 async function login(args, runtime) {
-  if (args.length > 1) throw new CliUsageError("Usage: ds-harness-remote login [github|zhihu]");
-  const provider = args[0] ?? "zhihu";
-  if (provider !== "github" && provider !== "zhihu") {
-    throw new CliUsageError("Login provider must be github or zhihu.");
-  }
+  if (args.length > 1) throw new CliUsageError("Usage: ds-harness-remote login [provider|list]");
   const context = await hostContext(runtime);
+  const providers = (await context.api.oauthProviders()).filter((item) => item.qrStartUrl != null);
+  if (args[0] === "list") {
+    write(runtime.stdout, providers.length === 0 ? "No QR sign-in providers are available.\n" : providers.map((item) => `${item.displayName}: ds-harness-remote login ${item.id}
+`).join(""));
+    return 0;
+  }
+  const selected = args[0] === void 0 ? providers.find((item) => item.id === "zhihu") ?? providers[0] : providers.find((item) => item.id === args[0]);
+  if (selected === void 0) throw new CliUsageError('OAuth provider unavailable. Run "ds-harness-remote login list" to see available providers.');
+  const provider = selected.id;
   const session = await context.api.startOAuthQrLogin(provider);
   const qr = await runtime.renderQr(session.scanUrl);
-  const providerName = provider === "github" ? "GitHub" : "Zhihu";
-  write(runtime.stdout, `Using ${providerName} QR login. ${alternativeProviderHint(provider)}
+  write(runtime.stdout, `Using ${selected.displayName} QR login. Run "ds-harness-remote login list" for available providers.
 `);
   write(runtime.stdout, "Scan this QR code to authorize this Host:\n\n");
   write(runtime.stdout, `${qr.trimEnd()}
@@ -32652,9 +32941,6 @@ async function renderCompactTerminalQr(url) {
 function authorizedMessage(authorization) {
   return authorization.account === void 0 ? "Remote Host login complete." : `Remote Host login complete for ${authorization.account}.`;
 }
-function alternativeProviderHint(provider) {
-  return provider === "zhihu" ? "GitHub is also supported: ds-harness-remote login github" : "Zhihu is also supported: ds-harness-remote login zhihu";
-}
 function authorizationLabel(method) {
   if (method === "host_registration_code") return "Host registration code";
   if (method === "owned_device") return "owned device";
@@ -32671,13 +32957,13 @@ function cliErrorMessage(error) {
 function helpText() {
   return [
     "Usage:",
-    "  ds-harness-remote login [github|zhihu]",
+    "  ds-harness-remote login [provider|list]",
     "  ds-harness-remote register <server-token>",
     "  ds-harness-remote status",
     "  ds-harness-remote logout",
     "",
     "Inside dsh-TUI, use /remote login, /remote status, or /remote logout.",
-    "login defaults to Zhihu and authorizes this computer as a Remote Host with a terminal QR code.",
+    "login uses an available QR provider (preferring Zhihu). Use login list to see available providers.",
     `The Server is ${DEFAULT_REMOTE_SERVER_URL}.`,
     "Host configuration is not exposed by this CLI yet. Restart dsh-tui after login or logout.",
     ""
@@ -32720,7 +33006,7 @@ function installTuiRemoteCommand(ctx, resolveTarget) {
     const definition = {
       name: "remote",
       description: "Manage Remote Host login and connection status",
-      input: { hint: "[status | login [github|zhihu] | logout]" },
+      input: { hint: "[status | login [provider|list] | logout]" },
       recordInput: false,
       handler: async ({ rawInput }) => {
         const args = rawInput.trim().split(/\s+/u).filter(Boolean);
@@ -32730,9 +33016,19 @@ function installTuiRemoteCommand(ctx, resolveTarget) {
           return { kind: "success", text: formatRemoteStatusInline(resolveTarget()) };
         }
         if (command === "login" && args.length <= 2) {
-          const provider = args[1] ?? "zhihu";
-          if (provider !== "github" && provider !== "zhihu") {
-            return { kind: "error", text: "Usage: /remote login [github|zhihu]" };
+          const provider = args[1] ?? "";
+          if (provider === "list") {
+            const target2 = resolveTarget();
+            if (target2 === void 0) return remoteNotReady();
+            try {
+              const providers = await target2.runtime.hostOAuthProviders();
+              return { kind: "success", text: providers.filter((item) => item.qrStartUrl != null).map((item) => `${item.displayName}: /remote login ${item.id}`).join("\n") || "No QR sign-in providers are available." };
+            } catch (error) {
+              return { kind: "error", text: errorCode5(error) };
+            }
+          }
+          if (provider !== "" && !/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$/.test(provider)) {
+            return { kind: "error", text: "Usage: /remote login [provider|list]" };
           }
           if (scenes === void 0) {
             return {
@@ -32776,7 +33072,7 @@ function installTuiRemoteCommand(ctx, resolveTarget) {
         en: "Manage Remote Host login and connection status",
         zh: "\u7BA1\u7406 Remote Host \u767B\u5F55\u548C\u8FDE\u63A5\u72B6\u6001"
       },
-      children: remoteCommandChildren
+      children: (path) => remoteCommandChildren(path, login2.completionProviders())
     }));
     const disposeScene = registerOptional(tuiContext, "login scene", () => scenes?.register({
       id: REMOTE_LOGIN_SCENE_ID,
@@ -32820,7 +33116,7 @@ function registerOptional(ctx, feature, register2) {
     };
   }
 }
-function remoteCommandChildren(canonicalPath) {
+function remoteCommandChildren(canonicalPath, providers) {
   if (canonicalPath.length === 1 && canonicalPath[0] === "remote") {
     return [
       {
@@ -32830,8 +33126,8 @@ function remoteCommandChildren(canonicalPath) {
       },
       {
         name: "login",
-        description: "Authorize this Host with a GitHub or Zhihu QR code",
-        descriptions: { zh: "\u4F7F\u7528 GitHub \u6216\u77E5\u4E4E\u4E8C\u7EF4\u7801\u6388\u6743\u5F53\u524D Host" }
+        description: "Authorize this Host with an available OAuth QR provider",
+        descriptions: { zh: "\u4F7F\u7528\u670D\u52A1\u7AEF\u63D0\u4F9B\u7684 OAuth \u4E8C\u7EF4\u7801\u6388\u6743\u5F53\u524D Host" }
       },
       {
         name: "logout",
@@ -32842,8 +33138,12 @@ function remoteCommandChildren(canonicalPath) {
   }
   if (canonicalPath.length === 2 && canonicalPath[0] === "remote" && canonicalPath[1] === "login") {
     return [
-      { name: "zhihu", description: "Sign in with Zhihu (default)", descriptions: { zh: "\u4F7F\u7528\u77E5\u4E4E\u767B\u5F55\uFF08\u9ED8\u8BA4\uFF09" } },
-      { name: "github", description: "Sign in with GitHub", descriptions: { zh: "\u4F7F\u7528 GitHub \u767B\u5F55" } }
+      { name: "list", description: "List available sign-in providers", descriptions: { zh: "\u5217\u51FA\u53EF\u7528\u767B\u5F55\u65B9\u5F0F" } },
+      ...providers.filter((item) => item.qrStartUrl != null).map((item) => ({
+        name: item.id,
+        description: `Sign in with ${item.displayName}`,
+        descriptions: { zh: `\u4F7F\u7528 ${item.displayName} \u767B\u5F55` }
+      }))
     ];
   }
   return [];
@@ -32866,13 +33166,13 @@ function remoteStatusLines(target2) {
     `Authorization: ${status2.authorized ? status2.account === void 0 ? "logged in" : `logged in (${status2.account})` : "logged out"}`,
     `Server connection: ${connection}`,
     ...status2.error === void 0 ? [] : [`Connection error: ${status2.error}`],
-    ...status2.error === "CONNECTION_REPLACED" ? ["Another instance is using this Host identity. Stop it or use a separate DSH_HOME before reconnecting."] : status2.error === "SERVER_CREDENTIALS_BUSY" ? ["Credential refresh is locked. Stop all instances before removing an orphaned server-credentials.json.refresh-lock and authorizing again."] : status2.accountRequired ? ["Authorize again with /remote login [github|zhihu]."] : [],
+    ...status2.error === "CONNECTION_REPLACED" ? ["Another instance is using this Host identity. Stop it or use a separate DSH_HOME before reconnecting."] : status2.error === "SERVER_CREDENTIALS_BUSY" ? ["Credential refresh is locked. Stop all instances before removing an orphaned server-credentials.json.refresh-lock and authorizing again."] : status2.accountRequired ? ["Authorize again with /remote login [provider|list]."] : [],
     `Harness Remote API: ${capabilities.has("harness.api.v1") ? "available (ApiProxy)" : capabilities.has("harness.remote.v3") ? "available (Typert Remote Session V3)" : capabilities.has("harness.remote.v1") ? "available (Typert Remote)" : "unavailable"}`,
     `Remote clients: ${diagnostics.activeConnections}`,
     `Codex Remote: ${codex.enabled ? codex.state : "disabled"}`,
     `Agent ACP: ${cursor2.enabled ? cursor2.state : "disabled"}`,
     "",
-    "Commands: /remote login [github|zhihu] \xB7 /remote status \xB7 /remote logout"
+    "Commands: /remote login [provider|list] \xB7 /remote status \xB7 /remote logout"
   ];
 }
 function formatRemoteStatusInline(target2) {
@@ -32883,7 +33183,7 @@ function remoteCommandUsage() {
     "Usage:",
     "  /remote",
     "  /remote status",
-    "  /remote login [github|zhihu]",
+    "  /remote login [provider|list]",
     "  /remote logout"
   ].join("\n");
 }
@@ -32900,7 +33200,29 @@ var RemoteLoginController = class {
   current = { phase: "idle", provider: "zhihu" };
   listeners = /* @__PURE__ */ new Set();
   attempt = 0;
+  providers = [];
+  providersLoading = false;
+  providersCheckedAt = 0;
+  providersServerUrl;
   snapshot = () => this.current;
+  completionProviders() {
+    const target2 = this.resolveTarget();
+    if (!this.providersLoading && target2 !== void 0 && (target2.config.serverUrl !== this.providersServerUrl || Date.now() - this.providersCheckedAt > 3e4)) {
+      this.providersLoading = true;
+      this.providersServerUrl = target2.config.serverUrl;
+      this.providersCheckedAt = Date.now();
+      this.providers = [];
+      void target2.runtime.hostOAuthProviders().then((items) => {
+        this.providers = items;
+      }).catch(() => void 0).finally(() => {
+        this.providersLoading = false;
+      });
+    }
+    return this.providers;
+  }
+  providerName(provider) {
+    return this.providers.find((item) => item.id === provider)?.displayName ?? provider;
+  }
   subscribe = (listener) => {
     this.listeners.add(listener);
     return () => {
@@ -32919,6 +33241,11 @@ var RemoteLoginController = class {
     try {
       const target2 = this.resolveTarget();
       if (target2 === void 0) throw new Error("REMOTE_NOT_READY");
+      this.providers = await target2.runtime.hostOAuthProviders();
+      if (attempt !== this.attempt) return;
+      const available = this.providers.filter((item) => item.qrStartUrl != null);
+      if (provider === "") provider = (available.find((item) => item.id === "zhihu") ?? available[0])?.id ?? "";
+      if (!available.some((item) => item.id === provider)) throw new Error("OAUTH_PROVIDER_UNAVAILABLE");
       const session = await target2.runtime.startHostOAuthQrLogin(provider);
       const [qr, compactQr] = await Promise.all([
         renderTerminalQr(session.scanUrl),
@@ -32972,11 +33299,10 @@ function createRemoteLoginScene(controller) {
         close();
       }
     });
-    const provider = snapshot.provider === "github" ? "GitHub" : "Zhihu";
-    const other = snapshot.provider === "github" ? "/remote login zhihu" : "/remote login github";
+    const provider = controller.providerName(snapshot.provider);
     const children = [
       React.createElement(ui.Text, { key: "title", bold: true, color: "accent" }, "Remote Host login"),
-      React.createElement(ui.Text, { key: "provider" }, `Provider: ${provider} \xB7 You can also use ${other}`)
+      React.createElement(ui.Text, { key: "provider" }, `Provider: ${provider} \xB7 Available providers: /remote login list`)
     ];
     if (snapshot.phase === "loading") {
       children.push(React.createElement(ui.Text, { key: "loading", color: "subtle" }, "Creating authorization QR code\u2026"));
@@ -33271,7 +33597,11 @@ async function activate(ctx, readConfig, entryId, tuiBinding) {
     logger,
     localTypertGateway,
     () => ctx.get("fileViewerHost"),
-    subprocess === void 0 ? void 0 : subprocessTerminalSpawner(subprocess)
+    subprocess === void 0 ? void 0 : subprocessTerminalSpawner(subprocess),
+    () => createPluginRouteDispatcher(
+      () => ctx.get("connection"),
+      () => ctx.get("webServer")?.port
+    )
   );
   let clientRuntime;
   const hostControl = runtime;