dsh-account-authorization 0.1.0

package/lib/types/generated/remote.d.ts

@@ -0,0 +1,231 @@
+import { z } from 'zod';
+export declare const TYPERT_REMOTE: {
+    package: string;
+    descriptors: ({
+        id: string;
+        service: string;
+        namespace: string;
+        method: string;
+        invocation: {
+            kind: string;
+        };
+        parameters: {
+            name: string;
+            wire: string;
+            source: string;
+            codec: {
+                mode: string;
+                typeSymbol: string;
+                schema: z.ZodObject<{
+                    requestId: z.ZodReadonly<z.ZodString>;
+                    attemptId: z.ZodReadonly<z.ZodString>;
+                }, z.core.$strip>;
+            };
+        }[];
+        result: {
+            mode: string;
+            typeSymbol: string;
+            schema: z.ZodObject<{
+                id: z.ZodReadonly<z.ZodString>;
+                connectionId: z.ZodReadonly<z.ZodString>;
+                revision: z.ZodReadonly<z.ZodNumber>;
+                notice: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodObject<{
+                    kind: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"browser">, z.ZodLiteral<"device">, z.ZodLiteral<"waiting">]>>;
+                    url: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodString]>>>;
+                    code: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodString]>>>;
+                }, z.core.$strip>]>>>;
+                prompt: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodObject<{
+                    id: z.ZodReadonly<z.ZodString>;
+                    choices: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+                        id: z.ZodReadonly<z.ZodString>;
+                        label: z.ZodReadonly<z.ZodString>;
+                        kind: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"browser">, z.ZodLiteral<"device">, z.ZodLiteral<"other">]>>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>]>>>;
+                terminal: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodObject<{
+                    status: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"authorized">, z.ZodLiteral<"cancelled">]>>;
+                }, z.core.$strip>, z.ZodObject<{
+                    status: z.ZodReadonly<z.ZodLiteral<"failed">>;
+                    code: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"unavailable">, z.ZodLiteral<"unknown-method">, z.ZodLiteral<"in-flight">, z.ZodLiteral<"input-required">, z.ZodLiteral<"not-committed">, z.ZodLiteral<"flow-failed">]>>;
+                }, z.core.$strip>]>>>;
+            }, z.core.$strip>;
+        };
+        sourceLocation: {
+            file: string;
+            line: number;
+            column: number;
+        };
+    } | {
+        id: string;
+        service: string;
+        namespace: string;
+        method: string;
+        invocation: {
+            kind: string;
+        };
+        parameters: never[];
+        result: {
+            mode: string;
+            typeSymbol: string;
+            schema: z.ZodObject<{
+                connections: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+                    id: z.ZodReadonly<z.ZodString>;
+                    label: z.ZodReadonly<z.ZodString>;
+                    configured: z.ZodReadonly<z.ZodBoolean>;
+                    inFlight: z.ZodReadonly<z.ZodBoolean>;
+                    methods: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+                        id: z.ZodReadonly<z.ZodString>;
+                        label: z.ZodReadonly<z.ZodString>;
+                        kind: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"browser">, z.ZodLiteral<"device">, z.ZodLiteral<"other">]>>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>;
+        };
+        sourceLocation: {
+            file: string;
+            line: number;
+            column: number;
+        };
+    } | {
+        id: string;
+        service: string;
+        namespace: string;
+        method: string;
+        invocation: {
+            kind: string;
+        };
+        parameters: {
+            name: string;
+            wire: string;
+            source: string;
+            codec: {
+                mode: string;
+                typeSymbol: string;
+                schema: z.ZodObject<{
+                    requestId: z.ZodReadonly<z.ZodString>;
+                    connectionId: z.ZodReadonly<z.ZodString>;
+                }, z.core.$strip>;
+            };
+        }[];
+        result: {
+            mode: string;
+            typeSymbol: string;
+            schema: z.ZodObject<{
+                disconnected: z.ZodLiteral<true>;
+            }, z.core.$strip>;
+        };
+        sourceLocation: {
+            file: string;
+            line: number;
+            column: number;
+        };
+    } | {
+        id: string;
+        service: string;
+        namespace: string;
+        method: string;
+        invocation: {
+            kind: string;
+        };
+        parameters: {
+            name: string;
+            wire: string;
+            source: string;
+            codec: {
+                mode: string;
+                typeSymbol: string;
+                schema: z.ZodString;
+            };
+        }[];
+        result: {
+            mode: string;
+            typeSymbol: string;
+            schema: z.ZodObject<{
+                id: z.ZodReadonly<z.ZodString>;
+                connectionId: z.ZodReadonly<z.ZodString>;
+                revision: z.ZodReadonly<z.ZodNumber>;
+                notice: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodObject<{
+                    kind: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"browser">, z.ZodLiteral<"device">, z.ZodLiteral<"waiting">]>>;
+                    url: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodString]>>>;
+                    code: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodString]>>>;
+                }, z.core.$strip>]>>>;
+                prompt: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodObject<{
+                    id: z.ZodReadonly<z.ZodString>;
+                    choices: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+                        id: z.ZodReadonly<z.ZodString>;
+                        label: z.ZodReadonly<z.ZodString>;
+                        kind: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"browser">, z.ZodLiteral<"device">, z.ZodLiteral<"other">]>>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>]>>>;
+                terminal: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodObject<{
+                    status: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"authorized">, z.ZodLiteral<"cancelled">]>>;
+                }, z.core.$strip>, z.ZodObject<{
+                    status: z.ZodReadonly<z.ZodLiteral<"failed">>;
+                    code: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"unavailable">, z.ZodLiteral<"unknown-method">, z.ZodLiteral<"in-flight">, z.ZodLiteral<"input-required">, z.ZodLiteral<"not-committed">, z.ZodLiteral<"flow-failed">]>>;
+                }, z.core.$strip>]>>>;
+            }, z.core.$strip>;
+        };
+        sourceLocation: {
+            file: string;
+            line: number;
+            column: number;
+        };
+    } | {
+        id: string;
+        service: string;
+        namespace: string;
+        method: string;
+        invocation: {
+            kind: string;
+        };
+        parameters: {
+            name: string;
+            wire: string;
+            source: string;
+            codec: {
+                mode: string;
+                typeSymbol: string;
+                schema: z.ZodObject<{
+                    requestId: z.ZodReadonly<z.ZodString>;
+                    connectionId: z.ZodReadonly<z.ZodString>;
+                    method: z.ZodReadonly<z.ZodString>;
+                }, z.core.$strip>;
+            };
+        }[];
+        result: {
+            mode: string;
+            typeSymbol: string;
+            schema: z.ZodObject<{
+                id: z.ZodReadonly<z.ZodString>;
+                connectionId: z.ZodReadonly<z.ZodString>;
+                revision: z.ZodReadonly<z.ZodNumber>;
+                notice: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodObject<{
+                    kind: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"browser">, z.ZodLiteral<"device">, z.ZodLiteral<"waiting">]>>;
+                    url: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodString]>>>;
+                    code: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodString]>>>;
+                }, z.core.$strip>]>>>;
+                prompt: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodObject<{
+                    id: z.ZodReadonly<z.ZodString>;
+                    choices: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+                        id: z.ZodReadonly<z.ZodString>;
+                        label: z.ZodReadonly<z.ZodString>;
+                        kind: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"browser">, z.ZodLiteral<"device">, z.ZodLiteral<"other">]>>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>]>>>;
+                terminal: z.ZodOptional<z.ZodReadonly<z.ZodUnion<readonly [z.ZodUndefined, z.ZodObject<{
+                    status: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"authorized">, z.ZodLiteral<"cancelled">]>>;
+                }, z.core.$strip>, z.ZodObject<{
+                    status: z.ZodReadonly<z.ZodLiteral<"failed">>;
+                    code: z.ZodReadonly<z.ZodUnion<readonly [z.ZodLiteral<"unavailable">, z.ZodLiteral<"unknown-method">, z.ZodLiteral<"in-flight">, z.ZodLiteral<"input-required">, z.ZodLiteral<"not-committed">, z.ZodLiteral<"flow-failed">]>>;
+                }, z.core.$strip>]>>>;
+            }, z.core.$strip>;
+        };
+        sourceLocation: {
+            file: string;
+            line: number;
+            column: number;
+        };
+    })[];
+};
+export default TYPERT_REMOTE;
+//# sourceMappingURL=remote.d.ts.map

package/lib/types/host/index.d.ts

@@ -0,0 +1,29 @@
+/** Provider-neutral projection of Harness-owned authorization flows. */
+import { Context } from '@deepseek-ai/cordis';
+import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
+import type { AccountConnectionsView, AuthorizationAttemptView, CancelAuthorizationRequest, ChooseAuthorizationRequest, DisconnectAccountRequest, StartAuthorizationRequest } from '../types.ts';
+/** Host service. Harness remains the only owner of flows, attempts, credentials, Providers, and models. */
+export declare class AccountAuthorizationService extends TypertRemoteService {
+    static inject: string[];
+    private readonly attempts;
+    private readonly startRequests;
+    private readonly disconnectRequests;
+    private readonly disconnectingConnections;
+    constructor(ctx: Context);
+    private flowByConnection;
+    private snapshot;
+    private changed;
+    private rememberCommand;
+    private trimAttempts;
+    private trimRequests;
+    connections(): Promise<AccountConnectionsView>;
+    start(request: StartAuthorizationRequest): AuthorizationAttemptView;
+    observe(attemptId: string): AuthorizationAttemptView;
+    choose(request: ChooseAuthorizationRequest): AuthorizationAttemptView;
+    cancel(request: CancelAuthorizationRequest): AuthorizationAttemptView;
+    disconnect(request: DisconnectAccountRequest): Promise<{
+        disconnected: true;
+    }>;
+}
+export default AccountAuthorizationService;
+//# sourceMappingURL=index.d.ts.map

package/lib/types/index.d.ts

@@ -0,0 +1,9 @@
+import { Context } from '@deepseek-ai/cordis';
+import TargetPreservingAuthorizationService from './authorization-compat.ts';
+import AccountAuthorizationService from './host/index.ts';
+/** Mount one authorization owner, then the model-account Host projection. */
+export declare function apply(ctx: Context): Promise<void>;
+export default apply;
+export { AccountAuthorizationService, TargetPreservingAuthorizationService };
+export type * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/lib/types/types.d.ts

@@ -0,0 +1,65 @@
+/** Browser-safe account authorization vocabulary. Credential keys and values never cross this boundary. */
+export type AuthorizationMethodKind = 'browser' | 'device' | 'other';
+export interface AuthorizationMethodView {
+    readonly id: string;
+    readonly label: string;
+    readonly kind: AuthorizationMethodKind;
+}
+export interface AccountConnectionView {
+    readonly id: string;
+    readonly label: string;
+    readonly configured: boolean;
+    readonly inFlight: boolean;
+    readonly methods: readonly AuthorizationMethodView[];
+}
+export interface AccountConnectionsView {
+    readonly connections: readonly AccountConnectionView[];
+}
+export interface AuthorizationNoticeView {
+    readonly kind: 'browser' | 'device' | 'waiting';
+    readonly url?: string;
+    readonly code?: string;
+}
+export interface AuthorizationChoiceView {
+    readonly id: string;
+    readonly label: string;
+    readonly kind: AuthorizationMethodKind;
+}
+export interface AuthorizationPromptView {
+    readonly id: string;
+    readonly choices: readonly AuthorizationChoiceView[];
+}
+export type AuthorizationTerminalView = {
+    readonly status: 'authorized' | 'cancelled';
+} | {
+    readonly status: 'failed';
+    readonly code: 'unavailable' | 'unknown-method' | 'in-flight' | 'input-required' | 'not-committed' | 'flow-failed';
+};
+export interface AuthorizationAttemptView {
+    readonly id: string;
+    readonly connectionId: string;
+    readonly revision: number;
+    readonly notice?: AuthorizationNoticeView;
+    readonly prompt?: AuthorizationPromptView;
+    readonly terminal?: AuthorizationTerminalView;
+}
+export interface StartAuthorizationRequest {
+    readonly requestId: string;
+    readonly connectionId: string;
+    readonly method: string;
+}
+export interface ChooseAuthorizationRequest {
+    readonly requestId: string;
+    readonly attemptId: string;
+    readonly promptId: string;
+    readonly choice: string;
+}
+export interface CancelAuthorizationRequest {
+    readonly requestId: string;
+    readonly attemptId: string;
+}
+export interface DisconnectAccountRequest {
+    readonly requestId: string;
+    readonly connectionId: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/types/types.js

@@ -0,0 +1 @@
+export {}

package/package.json

@@ -0,0 +1,146 @@
+{
+  "name": "dsh-account-authorization",
+  "version": "0.1.0",
+  "description": "Provider-neutral account authorization UI for DeepSeek Harness",
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./authorization-compat": {
+      "types": "./lib/types/authorization-compat.d.ts",
+      "default": "./lib/authorization-compat.js"
+    },
+    "./remote": {
+      "types": "./lib/types/generated/remote.d.ts",
+      "default": "./lib/typert.remote-client.js"
+    },
+    "./types": {
+      "types": "./lib/types/types.d.ts",
+      "default": "./lib/types/types.js"
+    },
+    "./typert": {
+      "types": "./lib/types/generated/host.d.ts",
+      "default": "./lib/typert.host.js"
+    },
+    "./client": "./lib/client.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/host.js",
+    "lib/authorization-compat.js",
+    "lib/client.js",
+    "lib/client.js.map",
+    "lib/typert.host.js",
+    "lib/typert.remote-client.js",
+    "lib/types/types.js",
+    "lib/types/**/*.d.ts",
+    "cordis.patch.yml",
+    "README.md",
+    "README.zh-CN.md",
+    "LICENSE",
+    "SECURITY.md",
+    "THIRD_PARTY_NOTICES.md"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "inject": [
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-primitives",
+        "@deepseek-ai/dsh-client-ui-slots",
+        "@deepseek-ai/dsh-client-locale"
+      ]
+    }
+  },
+  "scripts": {
+    "build": "pnpm generate:typert && tsc -p tsconfig.host.json && tsc -p tsconfig.client.json && tsdown --config build/tsdown.config.mjs && node build/normalize-artifacts.mjs",
+    "generate:typert": "node build/generate-typert.mjs",
+    "typecheck": "tsc -p tsconfig.host.json --noEmit && tsc -p tsconfig.client.json --noEmit",
+    "test": "vitest run",
+    "test:reproducible": "node build/check-reproducible.mjs",
+    "prepack": "pnpm build",
+    "pack:check": "pnpm pack --dry-run"
+  },
+  "keywords": [
+    "deepseek-harness",
+    "dsh-plugin",
+    "provider-authorization",
+    "oauth"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lxy271713/dsh-account-authorization.git"
+  },
+  "homepage": "https://github.com/lxy271713/dsh-account-authorization#readme",
+  "bugs": {
+    "url": "https://github.com/lxy271713/dsh-account-authorization/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "zod": "^4.4.3"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "4.0.1",
+    "@deepseek-ai/dsh-authorization": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.1-rc.2",
+    "react": "^18.2.0"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": { "optional": true },
+    "@deepseek-ai/dsh-authorization": { "optional": true },
+    "@deepseek-ai/dsh-credentials": { "optional": true },
+    "@deepseek-ai/dsh-typert-protocol": { "optional": true },
+    "@deepseek-ai/dsh-client-runtime": { "optional": true },
+    "@deepseek-ai/dsh-client-ui-settings": { "optional": true },
+    "@deepseek-ai/dsh-client-ui-primitives": { "optional": true },
+    "@deepseek-ai/dsh-client-ui-slots": { "optional": true },
+    "@deepseek-ai/dsh-client-locale": { "optional": true },
+    "react": { "optional": true }
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "4.0.1",
+    "@deepseek-ai/dsh-authorization": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-typert-generator": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.1-rc.2",
+    "@testing-library/react": "^16.1.0",
+    "@types/node": "^24.0.0",
+    "@types/react": "~18.3.1",
+    "@types/react-dom": "~18.3.1",
+    "happy-dom": "20.11.2",
+    "lightningcss": "^1.30.2",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0",
+    "tsdown": "^0.21.0",
+    "typescript": "^6.0.3",
+    "vitest": "^3.2.4"
+  },
+  "engines": {
+    "node": "^22.19.0 || >=24"
+  },
+  "packageManager": "pnpm@11.19.0"
+}