@deepseek-ai/dsh-experimental-computer-use-cua-driver-native 0.1.6-alpha.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.i18n.yaml

@@ -0,0 +1,6 @@
+# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
+# side as of the last confirmed-consistent state. Both languages carry equal authority;
+# after editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write packages/experimental/computer-use-cua-driver-native/README.md
+README.md: 28e47f17020297ef7e1c2fa6656c8fda0b808a8f
+README.zh.md: ce25309e77fcd05836b4fccddd2482ecf2f1ad17

package/README.md

@@ -0,0 +1,145 @@
+---
+description: "Run Cua Driver computer-use tools from its native npm SDK, with durable screenshots and explicit host desktop permissions."
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-experimental-computer-use-cua-driver-native
+
+English | [中文](README.zh.md)
+
+## Summary
+
+Use Cua Driver to inspect and operate desktop windows without installing its separate CLI or application. The native npm dependency runs inside the DSH host and exposes Cua Driver's own tools. Screenshots reach image-capable models through durable attachments. This published experimental package requires the launching host's desktop permissions and remains an explicit composition choice.
+
+## Table of Contents
+
+- [Use this package](#use-this-package)
+- [Understand the implementation](#understand-the-implementation)
+- [Further Exploration](#further-exploration)
+- [Model Experience](#model-experience)
+- [Known Limitations and Deferred Work](#known-limitations-and-deferred-work)
+- [Dev Note](#dev-note)
+
+-----
+
+<a id="use-this-package"></a>
+## Use this package
+
+Mount the provider in a composition that already supplies the tool registry and system prompt.
+
+### Minimal configuration
+
+```yaml
+- name: '@deepseek-ai/dsh-computer-use'
+- name: '@deepseek-ai/dsh-experimental-computer-use-cua-driver-native'
+```
+
+The provider has no configuration fields. It loads the exact Cua Driver npm version declared in [package.json](package.json) and uses its same-process defaults. Native import, runtime initialization, malformed catalog, duplicate tool name, or occupied computer-use registration failures reject activation and roll back owned resources. The registered provider name is `cua-driver-native`.
+
+Use an attachment store and a model route that explicitly declares image input to receive screenshots. The [MCP result adapter](../../mcp/mcp-client/README.md) owns image admission and diagnostic behavior; programmatic callers retain the canonical raw result when a model cannot receive its images. Calls use Cua Driver's upstream tool parameters and results.
+
+### Host requirements
+
+The native dependency supplies platform binaries through npm optional dependencies. Keep optional dependencies enabled. Grant desktop permissions to the application that launches DSH; this provider neither installs a permission-owning app nor changes OS grants. The native runtime shares the host process, so native crashes can terminate that process. Use the [installed MCP provider](../computer-use-cua-driver-mcp/README.md) when the separate Cua Driver application should own permissions and execution.
+
+### Verify the installed SDK
+
+From the repository root, run this opt-in check against the installed native dependency. It discovers tools, reads permission status with `prompt: false`, and verifies teardown; it captures no screenshots, sends no input, and requests no OS permissions. Clearing `NODE_USE_ENV_PROXY` prevents Node from installing the launching shell's proxy before test setup.
+
+```sh
+env -u NODE_USE_ENV_PROXY DSH_COMPUTER_USE_NATIVE_E2E=1 node node_modules/vitest/vitest.mjs run --config vitest.e2e.config.ts packages/experimental/computer-use-cua-driver-native/tests/native.e2e.ts
+```
+
+-----
+
+<a id="understand-the-implementation"></a>
+## Understand the implementation
+
+<details>
+<summary>Implementation internals — click to expand</summary>
+
+The provider reserves the shared computer-use registration before loading native code. A child plugin owns discovery, model tools, guidance, and the native runtime. The parent retains the registration until child teardown has removed tools, interrupted native calls and image-capability admission, awaited settlement, and completed native shutdown. Cancellation does not undo input already delivered to an application.
+
+| File | Role |
+|---|---|
+| [src/index.ts](src/index.ts) | Native runtime ownership, catalog validation, tool registration, and provider guidance |
+| — | No runtime invariant companion is published; resource ownership has no independently observed state to compare. |
+
+Tool definitions reuse the existing MCP result adapter. Cua Driver's JSON catalog determines the schemas; its raw result supplies canonical text, structured output, and image bytes. The computer-use service carries only the provider name and exclusive registration.
+
+</details>
+
+-----
+
+<a id="further-exploration"></a>
+## Further Exploration
+
+- [Computer-use service](../../computer-use/computer-use/README.md) — exclusive named registration.
+- [MCP client](../../mcp/mcp-client/README.md) — shared result and image projection.
+- [Cua Driver SDK](https://cua.ai/docs/reference/cua-driver/sdk-reference) — upstream runtime API and host facilities.
+
+-----
+
+<a id="model-experience"></a>
+## Model Experience
+
+### System prompt
+
+#### What the model sees
+
+The provider contributes the following computer-use guidance while its native tools are mounted.
+
+##### Native Cua Driver guidance
+
+```markdown
+Cua Driver native computer-use tools operate the host desktop. Discover the exact app and window, then get a fresh window snapshot before acting. Use element_token from that snapshot, or coordinates from its screenshot. A new snapshot of that window invalidates its earlier element tokens. Select either target or the legacy pid/window_id fields; do not combine them.
+
+Prefer background delivery. A refusal does not authorize a foreground retry. Verify the requested outcome from fresh state after an action; a delivered click alone does not prove the outcome. After cancellation, inspect current state before retrying because completed input is not rolled back. Other sessions and applications may change the same desktop.
+
+On macOS, cursor-overlay operations may return facility_unavailable even when screenshots and input work.
+```
+
+#### Token effect
+
+This fixed guidance adds system-prompt tokens while the provider is mounted. Upstream guidance resources are not automatically loaded.
+
+#### KV Cache effect
+
+The unchanged guidance preserves its repeated prompt prefix. Mounting, removing, or editing it changes that prefix and can reduce cache reuse.
+
+### Discovered Cua Driver tools and results
+
+#### What the model sees
+
+Tools use the `cua_driver_native__` prefix followed by the upstream name and retain the upstream descriptions and input schemas. Upstream tool refusals become tool errors. Supported screenshots appear as durable image references beside result text; the canonical raw result remains available to programmatic callers.
+
+#### Token effect
+
+The discovered catalog adds tool definitions to each request. Accessibility trees, result text, and admitted screenshots add per-call context. Raw base64 remains in execution-local canonical values and is not copied into model history.
+
+#### KV Cache effect
+
+An unchanged catalog preserves its tool-definition prefix. Tool results append to Session history. Replacing the provider or its catalog changes the model-visible tools and can reduce prefix reuse.
+
+## Known Limitations and Deferred Work
+
+<a id="known-limitations-and-deferred-work"></a>
+
+The package preserves the upstream driver's platform and application limits.
+
+- **Host permissions and graphics session** — npm installation does not grant desktop access or create a graphical session.
+- **Native cursor overlay** — a headless macOS Node host can receive `facility_unavailable` for overlay operations while screenshots and background input remain usable.
+- **Shared desktop** — the provider does not reserve windows or complete workflows for a Session. Other callers and applications can change the same desktop between calls.
+- **Cancellation** — an aborted call can have delivered input already; inspect fresh state before retrying. The provider waits for SDK shutdown during unload but does not promise native action rollback.
+- **Failed shutdown** — if native shutdown fails, the registration remains occupied. Restart the host before mounting another computer-use provider.
+- **Experimental release** — tool schemas follow the pinned upstream SDK and have no DSH stability promise.
+
+<a id="dev-note"></a>
+### Dev Note
+
+<details>
+<summary>Working context for maintainers — click to expand</summary>
+
+None.
+
+</details>

package/README.zh.md

@@ -0,0 +1,145 @@
+---
+description: "通过原生 npm SDK 运行 Cua Driver 的电脑操作工具，持久化截图，并明确主机桌面权限要求。"
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-experimental-computer-use-cua-driver-native
+
+[English](README.md) | 中文
+
+## 概述
+
+使用 Cua Driver 检查和操作桌面窗口，无需安装其独立 CLI 或应用。原生 npm 依赖在 DSH 主机进程内运行，提供 Cua Driver 自己的工具。截图通过持久化附件传给支持图像的模型。此实验性软件包会发布到 npm，需要启动主机的桌面权限，并且必须在组合配置中显式启用。
+
+## 目录
+
+- [使用本包](#use-this-package)
+- [理解实现](#understand-the-implementation)
+- [进一步探索](#further-exploration)
+- [模型体验](#model-experience)
+- [已知限制与延后工作](#known-limitations-and-deferred-work)
+- [开发备注](#dev-note)
+
+-----
+
+<a id="use-this-package"></a>
+## 使用本包
+
+在已经提供工具注册表和系统提示词的组合中挂载此提供者。
+
+### 最小配置
+
+```yaml
+- name: '@deepseek-ai/dsh-computer-use'
+- name: '@deepseek-ai/dsh-experimental-computer-use-cua-driver-native'
+```
+
+此提供者没有配置字段。它加载 [package.json](package.json) 声明的确切 Cua Driver npm 版本，并采用其进程内默认配置。原生模块导入、运行时初始化、目录格式、工具重名或电脑操作注册冲突会使激活失败，并回滚所拥有的资源。注册的提供者名称为 `cua-driver-native`。
+
+挂载附件存储并使用明确声明支持图像输入的模型路由，才能接收截图。[MCP 结果适配器](../../mcp/mcp-client/README.zh.md) 负责图像接纳和诊断行为；模型无法接收图像时，程序调用方仍保留规范原始结果。调用采用 Cua Driver 上游的工具参数和结果。
+
+### 主机要求
+
+原生依赖通过 npm 可选依赖提供各平台二进制文件，因此必须保留可选依赖安装。请向启动 DSH 的应用授予桌面权限；此提供者既不安装独立持有权限的应用，也不更改操作系统授权。原生运行时与主机共享进程，因此原生崩溃可能终止该进程。如果需要由独立的 Cua Driver 应用持有权限并执行操作，请使用[已安装的 MCP 提供者](../computer-use-cua-driver-mcp/README.zh.md)。
+
+### 验证已安装的 SDK
+
+在仓库根目录运行这项显式启用的检查，验证已安装的原生依赖。它发现工具、通过 `prompt: false` 读取权限状态，并验证卸载；它不截图、不发送输入，也不请求操作系统权限。清除 `NODE_USE_ENV_PROXY` 可防止 Node 在测试初始化之前采用启动 shell 的代理设置。
+
+```sh
+env -u NODE_USE_ENV_PROXY DSH_COMPUTER_USE_NATIVE_E2E=1 node node_modules/vitest/vitest.mjs run --config vitest.e2e.config.ts packages/experimental/computer-use-cua-driver-native/tests/native.e2e.ts
+```
+
+-----
+
+<a id="understand-the-implementation"></a>
+## 理解实现
+
+<details>
+<summary>实现内部——点击展开</summary>
+
+此提供者在加载原生代码前占用共享电脑操作注册名额。子插件拥有目录发现、模型工具、指导文本和原生运行时。父插件保留注册名额，直到子插件卸载完成工具移除、中断原生调用和图像能力准入、等待调用结束及原生关闭。取消不会撤销已经传给应用的输入。
+
+| 文件 | 职责 |
+|---|---|
+| [src/index.ts](src/index.ts) | 原生运行时所有权、目录校验、工具注册和提供者指导文本 |
+| — | 不发布运行时不变量伴随模块；资源所有权没有可独立观测并比较的状态。 |
+
+工具定义复用现有 MCP 结果适配器。Cua Driver 的 JSON 目录决定 schema，其原始结果提供规范文本、结构化输出和图像字节。电脑操作服务只保存提供者名称并保证独占注册。
+
+</details>
+
+-----
+
+<a id="further-exploration"></a>
+## 进一步探索
+
+- [电脑操作服务](../../computer-use/computer-use/README.zh.md)——独占的具名注册。
+- [MCP 客户端](../../mcp/mcp-client/README.zh.md)——共享结果与图像投影。
+- [Cua Driver SDK](https://cua.ai/docs/reference/cua-driver/sdk-reference)——上游运行时 API 和主机能力。
+
+-----
+
+<a id="model-experience"></a>
+## 模型体验
+
+### 系统提示词
+
+#### 模型看到什么
+
+在原生工具挂载期间，此提供者加入以下电脑操作指导文本。
+
+##### 原生 Cua Driver 指导文本
+
+```markdown
+Cua Driver native computer-use tools operate the host desktop. Discover the exact app and window, then get a fresh window snapshot before acting. Use element_token from that snapshot, or coordinates from its screenshot. A new snapshot of that window invalidates its earlier element tokens. Select either target or the legacy pid/window_id fields; do not combine them.
+
+Prefer background delivery. A refusal does not authorize a foreground retry. Verify the requested outcome from fresh state after an action; a delivered click alone does not prove the outcome. After cancellation, inspect current state before retrying because completed input is not rolled back. Other sessions and applications may change the same desktop.
+
+On macOS, cursor-overlay operations may return facility_unavailable even when screenshots and input work.
+```
+
+#### Token 影响
+
+提供者挂载期间，这段固定指导文本增加系统提示词 token。上游指导资源不会自动加载。
+
+#### KV Cache 影响
+
+指导文本不变时，其重复提示词前缀保持稳定。挂载、移除或编辑它会改变此前缀，并可能减少缓存复用。
+
+### 发现的 Cua Driver 工具与结果
+
+#### 模型看到什么
+
+工具名称使用 `cua_driver_native__` 前缀并附加上游名称，保留上游描述和输入 schema。上游工具拒绝转为工具错误。支持的截图作为持久化图像引用出现在结果文本旁；程序调用方仍可读取规范原始结果。
+
+#### Token 影响
+
+发现的目录为每个请求加入工具定义。无障碍树、结果文本和获准接纳的截图增加每次调用的上下文。原始 base64 保留在执行期间的规范值中，不复制到模型历史。
+
+#### KV Cache 影响
+
+目录不变时，工具定义前缀保持稳定。工具结果追加到 Session 历史。替换提供者或其目录会改变模型可见工具，并可能减少前缀复用。
+
+## 已知限制与延后工作
+
+<a id="known-limitations-and-deferred-work"></a>
+
+此软件包保留上游驱动的平台和应用限制。
+
+- **主机权限与图形会话**——npm 安装不会授予桌面访问权限或创建图形会话。
+- **原生光标覆盖层**——无界面的 macOS Node 主机可能对覆盖层操作返回 `facility_unavailable`，同时截图和后台输入仍可用。
+- **共享桌面**——此提供者不为某个 Session 预留窗口或完整工作流。其他调用方和应用可以在两次调用之间更改同一桌面。
+- **取消**——被取消的调用可能已经传入输入；重试前必须检查新状态。卸载时提供者等待 SDK 关闭，但不承诺回滚原生操作。
+- **关闭失败**——如果原生关闭失败，注册名额保持占用。挂载其他电脑操作提供者之前必须重启主机。
+- **实验性发布**——工具 schema 跟随锁定的上游 SDK，不作 DSH 稳定性承诺。
+
+<a id="dev-note"></a>
+### 开发备注
+
+<details>
+<summary>维护者工作上下文——点击展开</summary>
+
+无。
+
+</details>

package/lib/index.js

@@ -0,0 +1,123 @@
+import Schema from "@deepseek-ai/schemastery";
+import { ComputerUseProviderName } from "@deepseek-ai/dsh-computer-use/brand";
+import { createMcpToolDefinition } from "@deepseek-ai/dsh-mcp-client";
+import { z } from "zod";
+//#region lib/types/index.js
+/**
+* Computer use through the in-process Cua Driver native SDK and its own tools.
+* @module @deepseek-ai/dsh-experimental-computer-use-cua-driver-native
+*/
+/** Cordis plugin identity for the native Cua Driver provider. */
+const name = "experimental-computer-use-cua-driver-native";
+/** Services required before the native runtime can publish tools. */
+const inject = [
+	"computerUse",
+	"tools",
+	"systemPrompt"
+];
+/** The native provider uses the installed SDK's same-process defaults. */
+const Config = Schema.object({});
+const ToolCatalog = z.object({ tools: z.array(z.object({
+	name: z.string().min(1),
+	description: z.string().optional(),
+	inputSchema: z.record(z.string(), z.unknown()),
+	outputSchema: z.unknown().optional()
+})) });
+/** DeepSeek's function-name alphabet and maximum length are protocol constants. */
+const TOOL_NAME = /^[A-Za-z0-9_-]{1,64}$/u;
+const GUIDANCE = `Cua Driver native computer-use tools operate the host desktop. Discover the exact app and window, then get a fresh window snapshot before acting. Use element_token from that snapshot, or coordinates from its screenshot. A new snapshot of that window invalidates its earlier element tokens. Select either target or the legacy pid/window_id fields; do not combine them.
+
+Prefer background delivery. A refusal does not authorize a foreground retry. Verify the requested outcome from fresh state after an action; a delivered click alone does not prove the outcome. After cancellation, inspect current state before retrying because completed input is not rolled back. Other sessions and applications may change the same desktop.
+
+On macOS, cursor-overlay operations may return facility_unavailable even when screenshots and input work.`;
+/**
+* Own one native runtime and expose its catalog through the MCP result adapter.
+* Startup failures roll back every registration. Unload removes tools, aborts
+* calls and image admission, awaits settlement and SDK shutdown, then releases computer use.
+* @param ctx - context providing the exclusive registration and tool services.
+* @returns after native import, runtime creation, and tool discovery complete.
+*/
+async function apply(ctx) {
+	const lifetime = new AbortController();
+	const pending = /* @__PURE__ */ new Set();
+	let driver;
+	ctx.on("internal/plugin", (fiber) => {
+		if (fiber === ctx.fiber && fiber.uid === null) lifetime.abort();
+	}, { global: true });
+	let ready = Promise.resolve();
+	const dispose = ctx.effect(function* () {
+		yield ctx.computerUse.register(ComputerUseProviderName("cua-driver-native"));
+		yield async () => {
+			lifetime.abort();
+			await ready.catch(() => {});
+			await Promise.allSettled(pending);
+			if (driver !== void 0) {
+				await driver.shutdown();
+				driver.uniffiDestroy();
+			}
+		};
+		const child = ctx.plugin({
+			name: "computer-use-cua-driver-native-runtime",
+			inject: ["tools", "systemPrompt"],
+			apply: mountRuntime
+		});
+		yield child.dispose;
+		ready = Promise.resolve(child).then(() => {});
+	}, "computer-use-cua-driver-native.runtime");
+	try {
+		await ready;
+	} catch (error) {
+		await dispose();
+		throw error;
+	}
+	/** The child owns tool registrations; the outer effect owns native teardown. */
+	async function mountRuntime(inner) {
+		const { CuaDriver } = await import("@trycua/cua-driver");
+		lifetime.signal.throwIfAborted();
+		const activeDriver = driver = CuaDriver.create(void 0);
+		const catalog = ToolCatalog.parse(JSON.parse(await activeDriver.listToolsJson({ signal: lifetime.signal })));
+		lifetime.signal.throwIfAborted();
+		const names = /* @__PURE__ */ new Set();
+		for (const tool of catalog.tools) {
+			const publicName = `cua_driver_native__${tool.name}`;
+			if (!TOOL_NAME.test(publicName)) throw new Error(`Cua Driver tool "${tool.name}" exceeds the supported function-name format`);
+			if (names.has(publicName)) throw new Error(`Cua Driver listed tool "${tool.name}" more than once`);
+			names.add(publicName);
+			const definition = createMcpToolDefinition(inner, {
+				name: publicName,
+				rawName: tool.name,
+				description: tool.description ?? "",
+				inputSchema: tool.inputSchema,
+				outputSchema: tool.outputSchema,
+				async call(args, execution) {
+					const combined = AbortSignal.any([execution.signal, lifetime.signal]);
+					combined.throwIfAborted();
+					const result = await activeDriver.callTool(tool.name, JSON.stringify(args), { signal: combined });
+					combined.throwIfAborted();
+					return JSON.parse(result.rawJson);
+				}
+			});
+			inner.tools.register(definition);
+		}
+		inner.on("tools/execute", async (exec, next) => {
+			if (!names.has(exec.name)) return next();
+			const upstream = exec.signal;
+			exec.signal = AbortSignal.any([upstream, lifetime.signal]);
+			const operation = Promise.resolve().then(next);
+			pending.add(operation);
+			try {
+				return await operation;
+			} finally {
+				pending.delete(operation);
+				exec.signal = upstream;
+			}
+		});
+		inner.systemPrompt.section({
+			name: "computer-use:cua-driver-native",
+			order: inner.systemPrompt.getSectionOrder("TOOL_COMPUTER_USE"),
+			text: GUIDANCE
+		});
+	}
+}
+//#endregion
+export { Config, apply, inject, name };

package/lib/types/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Computer use through the in-process Cua Driver native SDK and its own tools.
+ * @module @deepseek-ai/dsh-experimental-computer-use-cua-driver-native
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import Schema from '@deepseek-ai/schemastery';
+/** Cordis plugin identity for the native Cua Driver provider. */
+export declare const name = "experimental-computer-use-cua-driver-native";
+/** Services required before the native runtime can publish tools. */
+export declare const inject: string[];
+/** The native provider uses the installed SDK's same-process defaults. */
+export declare const Config: Schema<Schemastery.ObjectS<{}>, Schemastery.ObjectT<{}>>;
+/**
+ * Own one native runtime and expose its catalog through the MCP result adapter.
+ * Startup failures roll back every registration. Unload removes tools, aborts
+ * calls and image admission, awaits settlement and SDK shutdown, then releases computer use.
+ * @param ctx - context providing the exclusive registration and tool services.
+ * @returns after native import, runtime creation, and tool discovery complete.
+ */
+export declare function apply(ctx: Context): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@deepseek-ai/dsh-experimental-computer-use-cua-driver-native",
+  "description": "Experimental computer-use provider embedding the Cua Driver native npm SDK",
+  "version": "0.1.6-alpha.1",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/deepseek-ai/deepseek-harness.git",
+    "directory": "packages/experimental/computer-use-cua-driver-native"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/types/**/*.d.ts"
+  ],
+  "license": "MIT",
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-computer-use": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-tools": "^0.1.6-alpha.1"
+  },
+  "dependencies": {
+    "@trycua/cua-driver": "0.28.0",
+    "zod": "^4.4.3",
+    "@deepseek-ai/dsh-mcp-client": "^0.1.6-alpha.1",
+    "@deepseek-ai/schemastery": "^3.18.2"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/cordis-plugin-include": "^1.0.7",
+    "@deepseek-ai/dsh-agent": "^0.1.6-alpha.1",
+    "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
+    "@deepseek-ai/dsh-agent-loop-testkit": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-agent-loop": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-attachment": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-attachment-local": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-computer-use": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-llm": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-session": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-tools": "^0.1.6-alpha.1",
+    "@deepseek-ai/dsh-session-projection": "^0.1.6-alpha.1"
+  }
+}