@toddzheng024/dscode-desktop 0.7.33 → 0.7.34

package/README.md

@@ -3,7 +3,7 @@
 DSCODE adds a coding preset, browser workflows, cross-session collaboration,
 memory and task management to the official DeepSeek Harness Desktop application.
 
-**Version:** 0.7.33 · **Harness runtime:** 0.2.0-rc.2
+**Version:** 0.7.34 · **Harness runtime:** 0.2.0-rc.2
 
 Preview release candidate; publication is a separate step.
 
@@ -47,7 +47,7 @@ public release; a candidate build alone does not publish a package.
 ## Install a published version
 
 After this version is available on npm, enter
-`@toddzheng024/dscode-desktop@0.7.33` in **Plugins → Add plugin**,
+`@toddzheng024/dscode-desktop@0.7.34` in **Plugins → Add plugin**,
 review the installation, install, then choose **Enable now**. Using the exact
 version keeps the installation tied to these instructions and compatibility
 requirements. The `preview` tag tracks the current Desktop preview release.

package/docs/CHANGELOG.md

@@ -8,6 +8,14 @@ Per-release notes live in [`docs/releases/`](releases/); the entries below summa
 
 ## [Unreleased]
 
+## [0.7.34] - 2026-10-08
+
+- Fix Desktop activation without an exported `DSH_HOME`: workspace discovery, email, scheduling and automatic review now resolve the native Harness home, including the default `~/.dsh`, blank overrides and supported tilde paths.
+- Keep browser state, memory, session communication/cards, delegation, review baselines, provider caches, diagnostics and usage records under that same resolved home. The terminal launcher continues to map its `DSCODE_HOME` into `DSH_HOME`; explicit memory and audit directories remain supported. Credentials and mail retain their existing account-store locations. This change does not move previously misplaced state automatically.
+- Public Desktop installation qualification now runs with `DSH_HOME` absent and requires all four affected components to activate. The native Host and signed macOS lifecycle verifiers also support this default-home scenario.
+- The demo guide separates DSCODE's workflow from the Hub's discovery contribution and adds a Desktop walkthrough draft with setup, reset and qualification boundaries. The existing terminal recording instructions remain available. Release-note links also work when read on GitHub Releases or as downloaded Markdown.
+- Desktop Hub publication retries the npm propagation window where the exact version is visible but the Hub still reports `package_not_found` or an older index. Retries are bounded; policy/credential failures and integrity mismatches still stop publication.
+
 ## [0.7.33] - 2026-10-08
 
 - The formal Desktop plugin is `@toddzheng024/dscode-desktop`, with an icon, localized identity, exact Harness compatibility and package-specific instructions. Public release candidates target Harness 0.2.0-rc.2 on macOS Apple Silicon; standalone applications and an automatic Desktop updater remain outside this delivery.

package/docs/browser-use.md

@@ -52,8 +52,9 @@ running. A new start gets fresh page IDs; interrupted actions are never replayed
 | `/browser use extension` | Experimental: share selected existing Chrome tabs through the DSCODE extension, without enabling a browser-wide remote-debugging port. |
 
 Stop all session browsers before changing defaults. These settings persist in
-`browser/config.json` under `DSH_HOME` (or `DSCODE_HOME`, falling back to
-`~/.dscode`). They apply to future starts. The agent cannot change browser mode
+`browser/config.json` under the native Harness home: a nonblank `DSH_HOME`,
+otherwise `~/.dsh`. The terminal launcher maps `DSCODE_HOME` into `DSH_HOME`.
+They apply to future starts. The agent cannot change browser mode
 through a tool. Dedicated profiles are separate from personal Chrome profiles;
 log in directly in the visible window when needed. The agent should keep that
 tab and hand control to you for login or 2FA, then inspect the same page again.
@@ -623,8 +624,8 @@ The source checkout can also package the DSCODE agent preset, custom-model
 and account settings, browser preview, durable session communication, cross-session
 memory and opt-in task scheduling together. Ordinary builds remain private;
 the separate [release process](hub-distribution.md#desktop-release-candidate-and-publication)
-qualifies a public candidate for 0.2.0-rc.2. Public npm distribution is still
-pending. The package does
+qualifies a public candidate for 0.2.0-rc.2. The Desktop preview is published on npm as
+`@toddzheng024/dscode-desktop@0.7.34`. The package does
 not yet include all DSCODE Host services. Its experimental
 [native Computer Use adapter](computer-use.md) has passed helper and lifecycle
 checks; window observation, screenshots and input await qualification with
@@ -632,7 +633,7 @@ macOS Accessibility permission.
 Choose this package or the browser-only bundle; enabling both duplicates their
 browser services.
 
-The current candidate's package name is `@toddzheng024/dscode-desktop`. It also
+The Desktop plugin's package name is `@toddzheng024/dscode-desktop`. It also
 includes [Plugin Hub](plugin-hub.md) for community discovery and installation
 through the official manager. The earlier private
 `@toddzheng024/dscode-desktop-preset-probe` must be removed before installing

package/docs/demo.md

@@ -1,15 +1,97 @@
-# The 90-second demo
+# Demo guide
 
-Most coding agents work alone. This script shows the three things DSCODE does
-instead — sessions that can see each other, an independent reviewer for code and
-for approvals, and side questions that never disturb the main conversation — in
-an order a stranger can follow.
+## Desktop feature summary
+
+The 0.7.34 Desktop preview installs into official Harness Desktop. Its qualified
+target is macOS Apple Silicon with Harness runtime **0.2.0-rc.2**. Present the
+DSCODE workflow and the Plugin Hub contribution separately:
+
+| Area | What the user gains | Boundary |
+| --- | --- | --- |
+| DSCODE coding workflow | A DSCODE preset with custom model/account settings, session communication, memory, usage and delegation views | Terminal-only panels retain their terminal UI; model behavior depends on the configured provider. |
+| DSCODE browser workflow | Browser tools, per-site access, a screenshot preview and point annotations in the conversation | Chrome is required. An image-capable model is needed to interpret screenshots; captures expire and must be refreshed after navigation. |
+| DSCODE optional services | Email inbox integration and scheduled work | Account configuration and explicit opt-in are required. Desktop must stay open for scheduled delivery. |
+| Our Plugin Hub integration | Search and categories across our community catalog, package details, compatibility and reported scan information, plus read-only discovery tools for the agent | Catalog coverage defines the search scope. Reported scans do not establish that a plugin is safe. |
+| Hub installation handoff | Review an exact npm version, confirm its installation and open official management | Official Harness inspects and installs it. New plugins remain disabled; official controls own enabling, configuration and removal. |
+
+The Hub story is **find → understand → review → install → manage**. Its value is
+community discovery and the information needed to choose a plugin. Do not count
+DSCODE's browser, memory or coding features as Hub features, or claim that Hub
+replaces official lifecycle management. This demo makes no claim that every
+official Desktop version lacks search.
+
+## Five-minute Desktop walkthrough draft
+
+This draft is for existing DSH Desktop users. Choose the final emphasis and
+recording length with the presenter; allow separate time for downloads and
+account setup. The installation and UI paths have verification records, but
+this complete timed walkthrough has not been rehearsed with a live model.
+
+### Prepare
+
+1. Use a disposable Desktop profile and a scratch workspace. Install
+   `@toddzheng024/dscode-desktop@0.7.34` through **Plugins → Add plugin**, then
+   choose **Enable now**. Select the **DSCODE** preset. Follow the
+   [installation guide](browser-use.md#install-the-experimental-combined-desktop-package)
+   if migrating from the old probe package.
+2. Configure a model in private, confirm one short response and install Chrome.
+   For the annotation segment, choose a model whose configuration accepts images.
+   Do not record API keys, account login or personal workspace contents.
+3. Open **Settings → Plugin Hub**, search for `dsh-theme-plugin`, and check the
+   current details and compatibility. The recorded installation check used
+   **0.3.3**; the live catalog may offer a newer exact version. Rehearse that
+   version before using it in a recording. An incompatible or unavailable entry
+   is a reason to show discovery only, without claiming installation succeeded.
+4. Keep the [0.7.34 release page](https://github.com/qiz029/dscode/releases/tag/v0.7.34)
+   ready for the installation and distribution closing shot. The public npm
+   package and GitHub archive carry the same qualified bytes.
+
+### Walkthrough
+
+| Approximate time | Action | Point to explain |
+| --- | --- | --- |
+| 0:00–0:30 | Show the enabled DSCODE plugin and a DSCODE session in official Desktop. | Existing DSH Desktop users can add DSCODE through a plugin. |
+| 0:30–1:30 | Open Plugin Hub, search, choose a category and open details. | Our Hub brings community discovery, descriptions and compatibility information into the application. |
+| 1:30–2:30 | Choose **Review installation**, show the exact package/version, then **Confirm installation**. Wait for its actual outcome. | The user reviews the package; official Harness performs installation. Download time is additional. |
+| 2:30–3:00 | Choose **Manage installed plugin**, show its disabled state and official controls. | Enabling, configuration and removal stay in official management. Enabling the example theme is optional. |
+| 3:00–4:30 | In the DSCODE session, ask: “Use the browser to open https://example.com and inspect the page.” Grant that origin if requested. In **Browser preview**, refresh the image, select a point, type “Summarize the text at this point” and choose **Send annotation**. | This is DSCODE's browser workflow. The screenshot, page reference and selected point enter the conversation; show the real response only after it arrives. |
+| 4:30–5:00 | Show the exact npm install specification and GitHub release assets/notes. | Users can install the released plugin today; releases include compatibility, changes and verification limits. |
+
+For a Hub-only cut, keep the first four rows and the release closing shot. No
+model account is needed to browse and install through the Hub UI. For a longer
+DSCODE cut, add a scratch-project coding task and demonstrate the relevant
+usage/delegation view after rehearsing it with the selected model.
+
+### Rehearsal and reset
+
+- Confirm the selected package is absent before the install shot. Remove a
+  previous demo installation through official **Plugins** in the disposable
+  profile, then reopen Hub. Do not remove plugins from a personal profile to
+  prepare the demonstration.
+- Show success, cancellation, refusal or restart-required exactly as reported.
+  After a Host restart, inspect official **Plugins** before attempting another
+  installation; Hub operation history does not survive the restart.
+- If the Hub/network is unavailable, use a clearly identified earlier recording
+  or continue with the DSCODE segment. Do not label cached footage as a live
+  successful install.
+- Refresh the browser screenshot and select a new point if the capture expires
+  or navigation occurs. Text-only delivery must be described as text-only.
+- Keep standalone DMG delivery, coordinated update/changelog UI, Profile
+  rollback and native Computer Use permission qualification out of this demo's
+  claims. See [Plugin Hub](plugin-hub.md), [Browser use](browser-use.md) and the
+  [release notes](releases/0.7.34.md) for the shipped behavior and limits.
+
+## The 90-second terminal demo
+
+The terminal script shows sessions that can see each other, an independent
+reviewer for code and approvals, and side questions that leave the main
+conversation's context unchanged.
 
 The recording lands in `assets/demo.gif`; put that image directly under the
-README tagline. Every command below is real, so the demo is reproducible: the
-only unpredictable part is the model's own wording.
+README tagline. Rehearse the commands below with the selected model before
+recording: response quality and timing are not established by this script.
 
-## Record it
+### Record it
 
 ```sh
 brew install asciinema agg
@@ -39,12 +121,12 @@ Before you hit record:
   or full home paths). Any interface language works; the captions below are
   English.
 
-## Shot list
+### Shot list
 
 | Time | Screen | Do this | Say this (captions) |
 |---|---|---|---|
 | 0:00–0:06 | Shell in the scratch repo | `dscode` | "A coding agent in your terminal — macOS, local, one pinned harness." |
-| 0:06–0:22 | TUI, main session | Type `Add a bounds check to parse() in parser.ts and run the tests.` | "It reads the file, edits it, runs the tests." |
+| 0:06–0:22 | TUI, main session | Type `Trim whitespace and ignore empty fields in parse() in parser.ts. Add and run tests.` | "It reads the file, edits it, runs the tests." |
 | 0:22–0:36 | Same terminal | `/btw why would the first turn have a cold cache?` — leave the main turn running | "A side question runs in its own read-only child session. The answer never enters the main conversation." |
 | 0:36–0:56 | Second terminal | `dscode sessions` then `dscode send <the other session id> --steer "review the change in parser.ts and reply with what you would change"` | "Two sessions on one machine can find each other, hand work over and answer." |
 | 0:56–1:06 | Back in the first terminal | Show the reply arriving (`/mailbox`, or the agent's `read_session`/`send_session` tools if you asked it to hand the review over itself) | "The answer comes back as a message, not as a new task." |
@@ -60,7 +142,7 @@ Two beats worth keeping if you have the seconds:
 - `/agents` at the end: the `/btw` child session is a real, read-only session,
   not a hidden prompt.
 
-## Reproduce it without recording
+### Reproduce it without recording
 
 ```sh
 npm i -g @toddzheng024/dscode

package/docs/hub-distribution.md

@@ -33,6 +33,23 @@ The default state directory is `~/.local/share/dscode-hub`, overridable with `DS
 
 A user who already has dsh-hub installed can apply directly, but must use pnpm 10.15.1, set a dedicated `DSH_HOME` and `DSH_AGENTS_HOME`, and set `npm_config_ignore_scripts=true` on the install command. The launcher is recommended because it unifies those conditions.
 
+### Desktop users
+
+Install the official Harness Desktop application with embedded runtime
+0.2.0-rc.2. In **Plugins → Add plugin**, enter
+`@toddzheng024/dscode-desktop@0.7.34`, review and install, then choose
+**Enable now**. Select the DSCODE preset and configure your model account.
+The Desktop preview is qualified on macOS Apple Silicon. See
+[Desktop installation](browser-use.md#install-the-experimental-combined-desktop-package)
+for archive checksums, migration and removal, and [Plugin Hub](plugin-hub.md)
+for discovering community plugins after installation.
+
+Version 0.7.34 fixes the 0.7.33 activation error “4 entries did not activate”
+when Desktop starts without `DSH_HOME`. Update to the exact 0.7.34 package and
+enable it again; exporting a shell variable is unnecessary. Default Desktop
+state uses `~/.dsh`, as resolved by Harness. Publication now verifies installation
+and the affected components with that default environment.
+
 ## Release checklist
 
 Cutting a release from this repository, in order. The rule that matters most: **the git tag must equal `v<package.json version>`, and that version must not already be on npm from a different build.**
@@ -142,7 +159,12 @@ npm run publish:desktop -- verify
 Each phase checks the archive and receipt again. The npm phase publishes with
 `--tag preview`; an existing version is reusable only with identical integrity.
 The Hub phase syncs the package and requires the exact version, integrity and
-Desktop compatibility to resolve. The final phase downloads public bytes,
+Desktop compatibility to resolve. A newly published package can appear on
+the npm version endpoint before the Hub can fetch its package index. In this
+post-publication phase, `package_not_found` and an index missing the exact
+version retry up to 40 times, 15 seconds apart. Other rejections and credential
+errors stop immediately; the final integrity and compatibility checks still
+apply. The final phase downloads public bytes,
 checks their SHA-256, and installs the exact npm version into a new native
 Harness profile before booting it and checking the preset and Hub RPC. The
 result is saved as `artifacts/local/desktop-public-install.json`. No model

package/docs/memory.md

@@ -59,7 +59,7 @@ renderer interaction with the slash commands.
 
 A SQLite lease coordinates multiple processes and the background holds a heartbeat; a source session under recovery, an expired lease and a clear operation all stop an old result from committing. The consolidation model has no shell, MCP, file-write or delegation tools, and file paths are determined by the plugin.
 
-Directory resolution order: plugin `root` → `DSCODE_MEMORY_HOME` → `$DSCODE_HOME/memories` → `$DSH_HOME/memories` → `~/.local/share/dscode-hub/memories`. A source launch normally uses the project's `.runtime/memories`, and an npm launch uses the launcher's state directory. To share memory between installations, set the same `DSCODE_MEMORY_HOME` explicitly.
+Directory resolution order: plugin `root` → `DSCODE_MEMORY_HOME` → the native Harness home plus `memories`. Harness resolves a nonblank `DSH_HOME` (including supported tilde paths), otherwise `~/.dsh`. A source launch normally sets the project's `.runtime` as that home; the npm launcher maps its `DSCODE_HOME` into `DSH_HOME`. To share memory between installations, set the same `DSCODE_MEMORY_HOME` explicitly. Version 0.7.34 does not automatically move memory left in an earlier fallback directory.
 
 ```text
 memories/

package/docs/plugin-hub.md

@@ -1,6 +1,6 @@
 # Plugin Hub in Harness Desktop
 
-The DSCODE Desktop candidate includes **Settings → Plugin Hub**, backed by
+The DSCODE Desktop plugin includes **Settings → Plugin Hub**, backed by
 [DSH Plugin Hub](https://dshpluginhub.ai). It uses the same public catalog as
 the Hub website and CLI. No Hub login is required to browse.
 
@@ -59,10 +59,10 @@ retrying; the Hub's operation history is not persisted.
 - Search queries and package lookups go to `api.dshpluginhub.ai`. Provider keys,
   conversation text, workspace files and local credentials are not sent by this
   catalog client. The agent may include task terms in a query you ask it to make.
-- This guide describes the source candidate. Public Desktop npm distribution is still
-  being qualified. Official Add plugin installation, Hub installation with
+- The Desktop plugin is published as `@toddzheng024/dscode-desktop@0.7.34`
+  on npm, with the `preview` tag. Official Add plugin installation, Hub installation with
   handoff to official management, and migration from the legacy probe name
   have passed on macOS Desktop 0.2.0-rc.2.
 
-See [Desktop candidate installation](browser-use.md#install-the-experimental-combined-desktop-package)
+See [Desktop installation](browser-use.md#install-the-experimental-combined-desktop-package)
 and [distribution](hub-distribution.md) for package setup and release status.

package/docs/releases/0.7.33.md

@@ -1,12 +1,12 @@
 # DSCODE 0.7.33
 
-This release candidate packages DSCODE for official Harness Desktop, adds community plugin discovery through our Plugin Hub, and establishes a separate Desktop publication path alongside the terminal release.
+This release packages DSCODE for official Harness Desktop, adds community plugin discovery through our Plugin Hub, and establishes a separate Desktop publication path alongside the terminal release.
 
 - **Formal Desktop plugin:** `@toddzheng024/dscode-desktop` has an icon, English/Chinese display metadata, package-specific instructions and an exact Harness peer version. It adds coding, browser preview, collaboration, memory, email and opt-in scheduling to the official application. The qualified target is macOS Apple Silicon with Harness runtime `0.2.0-rc.2`. Other runtime candidates remain private. A standalone application, DMG and automatic Desktop updates are deferred.
 - **Plugin Hub:** native Settings and read-only conversation tools share the Hub API and schema. Search, categories, numbered pagination and details expose compatibility and reported security information. Installation requires an exact npm version, official inspection and explicit confirmation. New plugins remain disabled, and the UI opens official management for enabling, configuration and removal. Git-only entries remain visible without installation; Hub Profile application and rollback are outside this integration. A reported scan result is not a guarantee about plugin behavior.
 - **Installation and migration:** official Add plugin accepts the archive, followed by Enable now. Users of the earlier private probe remove its old package name before installing the formal package, because both register the same components. The migration check verifies preserved sessions, credentials, configuration and user patches; keep a backup for your own state. Ordinary same-name replacement, incompatible-update refusal, removal and reinstallation have separate lifecycle checks.
 - **Reproducible distribution steps:** an independent Desktop runtime builds a public candidate, then the exact archive is unpacked and exercised through native Host startup/restart and browser probes. Publication verifies its checksums, version, compatibility and qualification receipt, publishes with the npm `preview` tag, synchronizes the Hub and checks the served public bytes. GitHub assets include the archive, checksum, installation README and release notes. Public availability is established by successful publication and registry verification, not by a local build.
-- **Browser and model workflows:** this version includes the browser and custom-provider work accumulated since 0.7.32. Browser access uses site and Developer grants, document-bound WebMCP discovery, explicit handoff and retained tabs. Desktop previews keep annotation drafts across navigation and permission changes while rejecting expired or replaced documents. Custom services support Chat Completions, Responses and Anthropic Messages, optional images, manual model limits and cancellable discovery/tests. The detailed fixes and boundaries are recorded in the [changelog](../CHANGELOG.md).
+- **Browser and model workflows:** this version includes the browser and custom-provider work accumulated since 0.7.32. Browser access uses site and Developer grants, document-bound WebMCP discovery, explicit handoff and retained tabs. Desktop previews keep annotation drafts across navigation and permission changes while rejecting expired or replaced documents. Custom services support Chat Completions, Responses and Anthropic Messages, optional images, manual model limits and cancellable discovery/tests. The detailed fixes and boundaries are recorded in the [changelog](https://github.com/qiz029/dscode/blob/main/docs/CHANGELOG.md).
 
 Verification: `npm run check` passed on the release implementation (1,067
 unit/component cases, 79.99% full-source line coverage, both TypeScript checks,
@@ -23,8 +23,15 @@ The official macOS application separately installed and enabled the private
 formal archive, and its Hub installed `dsh-theme-plugin@0.3.3` disabled and
 opened official management. A native lifecycle check migrated the old probe
 name and preserved state. Those rendered GUI/migration observations used the
-private 0.7.32 candidate. Public npm publication and the post-publication
-installation check remain pending; the retained local receipts do not prove
-that users can already download this version from the registry.
+private 0.7.32 candidate. The launcher, terminal bundle and Desktop plugin were subsequently published
+to npm at 0.7.33, and the Hub lists both the terminal profile and Desktop plugin.
+The final release run passed 1,068 unit/component cases at 79.98% coverage and
+all other maintained gates. Public Desktop installation, the installed Host
+and Hub RPC passed in CI. A separate fresh public terminal installation passed
+startup configuration, terminal imports and Hub doctor. The GitHub Desktop
+archive and checksum match the qualified npm bytes. The first two publication
+attempts encountered npm propagation delay; rerunning the same verified
+artifacts completed publication without changing versions or bytes. Detailed
+receipts and boundaries are recorded in [Verification](https://github.com/qiz029/dscode/blob/main/docs/verification.md).
 
 Unverified paths: real-model task quality, native Computer Use screenshot/input with macOS Accessibility permission, other OS/architecture/runtime combinations, and third-party plugin behavior after enabling. General remote HTTP MCP retains separate runtime compatibility/security work. Scripted model fixtures and browser probes do not establish live model quality. Demo preparation is deferred until distribution is ready.

package/docs/releases/0.7.34.md

@@ -0,0 +1,24 @@
+# DSCODE 0.7.34
+
+This release fixes Desktop plugin activation during a normal application launch without an exported `DSH_HOME`.
+
+- **Default Desktop home:** workspace discovery, email, scheduling and automatic permission review previously refused to activate unless `DSH_HOME` was explicitly set. They now use the same native home resolver as Harness: a nonblank override, including supported tilde paths, or `~/.dsh`. Users seeing “4 entries did not activate” in 0.7.33 can install `@toddzheng024/dscode-desktop@0.7.34` and enable it again. No shell environment setup is required.
+- **Consistent local state:** browser permissions/configuration, memory, session cards and messaging, delegation, review baselines, provider caches, diagnostics and usage resolve that same home. Explicit memory/audit directories remain supported, and the terminal launcher still translates `DSCODE_HOME` into its native Harness home. Shared account credentials and mail keep their existing locations. Old fallback data is not migrated automatically.
+- **Installation qualification:** public installation now deliberately omits `DSH_HOME` and checks workspace, email, scheduling and automatic-review activation. A package cannot pass the publication gate using only an explicitly configured home. Native Host and signed macOS lifecycle verifiers also accept a default-home scenario. The earlier 0.7.33 checks set `DSH_HOME`, which concealed this activation failure.
+- **Distribution maintenance:** this release includes bounded retries for npm-to-Hub propagation and the Desktop/Hub demo guide added after 0.7.33. Versioned release notes, checksums, compatibility and installation instructions continue to ship with the package.
+
+Verification: the default-home native Host reproduced the original activation
+failure before the fix and passed startup/restart after it. The signed macOS
+application passed installation, upgrade, incompatible-update refusal, removal
+and reinstallation with `DSH_HOME` absent, including state preservation and
+browser checks. `npm run check` passed 1,073 unit/component cases at 80.17%
+full-source line coverage, both TypeScript checks, native integration, package
+checks and 63 eval cases. Eight focused home-resolution/release-gate tests also
+passed. The exact Desktop candidate passed native Host startup/restart and
+browser qualification. Installation receipts and public release status are
+recorded in the [verification record](https://github.com/qiz029/dscode/blob/main/docs/verification.md).
+
+The Desktop target remains macOS Apple Silicon with Harness runtime 0.2.0-rc.2.
+Live-model task quality, native Computer Use Accessibility qualification and
+other platform/runtime combinations are not established by these checks. This
+release does not provide a standalone DMG or migrate old fallback data.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@toddzheng024/dscode-desktop",
-  "version": "0.7.33",
+  "version": "0.7.34",
   "private": false,
   "description": "DSCODE for Harness Desktop: coding collaboration, session memory, browser workflows and task management.",
   "license": "MIT",

package/plugins/auto-review/index.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import z from '@deepseek-ai/schemastery';
 import { BlockAssembler, createSystemMessage, createUserMessage } from '@deepseek-ai/dsh-llm';
 import { REVIEW_POLICY, escalationDiagnosticGrant, needsMcpApproval, redact, fingerprint, contextFor, parseDecision } from './policy.mjs';
@@ -22,8 +23,7 @@ export const Config = z.object({
 
 export function apply(ctx, config) {
   if (Boolean(config.provider) !== Boolean(config.model)) throw new Error('Auto review requires both provider and model, or neither');
-  if (!config.auditDirectory && !process.env.DSH_HOME) throw new Error('Auto review requires DSH_HOME or auditDirectory');
-  const audit = auditStore(config.auditDirectory ?? join(process.env.DSH_HOME, 'auto-review'));
+  const audit = auditStore(config.auditDirectory ?? join(resolveDshHome(), 'auto-review'));
   const calls = new WeakMap();
   const budgets = new WeakMap();
   const mode = agent => ctx.permissionPresets.current(agent.session);

package/plugins/browser/config.mjs

@@ -1,9 +1,9 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { createHash, randomUUID } from 'node:crypto';
 import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
-import { homedir } from 'node:os';
 import path, { join } from 'node:path';
 
-export const browserHome = () => join(process.env.DSH_HOME ?? process.env.DSCODE_HOME ?? join(homedir(), '.dscode'), 'browser');
+export const browserHome = () => join(resolveDshHome(), 'browser');
 export const DEFAULT_CONFIG = Object.freeze({ mode: 'persistent', headless: false });
 
 export function validateConfig(input, paths = path) {

package/plugins/code-review/baseline.mjs

@@ -1,7 +1,7 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { execFile } from 'node:child_process';
 import { createHash, randomUUID } from 'node:crypto';
 import { lstat, mkdir, readdir, realpath, rm, writeFile } from 'node:fs/promises';
-import { homedir } from 'node:os';
 import { isAbsolute, join, relative, sep } from 'node:path';
 import { promisify } from 'node:util';
 import { reviewSpec } from './git.mjs';
@@ -17,7 +17,7 @@ const SENSITIVE_PATTERNS = ['.env', '.env.*', '.npmrc', '.pypirc', 'id_rsa', 'id
 const IDENTITY = { GIT_AUTHOR_NAME: 'dscode', GIT_AUTHOR_EMAIL: 'review@dscode.invalid', GIT_COMMITTER_NAME: 'dscode', GIT_COMMITTER_EMAIL: 'review@dscode.invalid' };
 export const snapshotLimits = { files: 20000, bytes: 256 * 1024 * 1024, fileBytes: 4 * 1024 * 1024 };
 
-const defaultRoot = () => join(process.env.DSH_HOME ?? process.env.DSCODE_HOME ?? join(homedir(), '.local/share/dscode-hub'), 'review-baselines');
+const defaultRoot = () => join(resolveDshHome(), 'review-baselines');
 const anchored = path => `/${path.replace(/[\\*?[\]!#]/g, '\\$&').replace(/ $/, '\\ ')}`;
 const refPart = value => String(value).replace(/[^A-Za-z0-9_-]/g, '_');
 const refsFor = task => {

package/plugins/compaction/threshold.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { cacheReadRatio } from '../session-metrics/pricing.mjs';
 import { ensureOpenRouterModels } from '../openrouter/models.mjs';
 
@@ -70,7 +71,7 @@ export function fitsInWindow(totalTokens, modelInfo) {
 
 /** The route's threshold ratio, waiting for the OpenRouter listing when it has not loaded yet. */
 export async function pricedThresholdRatio(provider, model, now = Date.now()) {
-  if (provider === 'openrouter') await ensureOpenRouterModels({ home: process.env.DSH_HOME, now });
+  if (provider === 'openrouter') await ensureOpenRouterModels({ home: resolveDshHome(), now });
   return thresholdForCacheRatio(cacheReadRatio(provider, model, now));
 }
 

package/plugins/desktop-workspace/index.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { createHash } from 'node:crypto';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
@@ -13,8 +14,7 @@ export const inject = ['agents', 'agentPresets', 'skills', 'sessionProjections',
 
 /** Session-owned discovery; Desktop's process cwd is not a workspace identity. */
 export function apply(ctx) {
-  const stateDir = process.env.DSH_HOME;
-  if (!stateDir) throw Error('Desktop workspace discovery requires DSH_HOME');
+  const stateDir = resolveDshHome();
   mkdirSync(join(stateDir, 'config'), { recursive: true });
   const installationHooks = join(stateDir, 'config/hooks.local.json');
   if (!existsSync(installationHooks)) writeFileSync(installationHooks, '{"hooks":{}}\n', { mode: 0o600, flag: 'wx' });

package/plugins/dscode/index.mjs

@@ -1,5 +1,5 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { existsSync } from 'node:fs';
-import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { AsyncLocalStorage } from 'node:async_hooks';
@@ -108,7 +108,7 @@ export function apply(ctx, config = {}) {
     return { ...assembled, tools: assembled.tools.filter(tool => !hidden.has(tool.name)), sections: assembled.sections.filter(section => !hidden.has(section.name.replace(/^tool:/, ''))) };
   });
   const runningChildren = id => ctx.agents.list().filter(a => a.session.header.origin === 'subagent' && a.session.header.parentSession === id && a.status === 'running').length;
-  const home = process.env.DSH_HOME ?? process.env.DSCODE_HOME ?? join(homedir(), '.local/share/dscode-hub');
+  const home = resolveDshHome();
   const board = new DelegateBoard({ root: join(home, 'delegate-boards'), childName: CHILD_NAME });
   const boardView = sessionId => board.view(sessionId, childId => ctx.agents.get(childId)?.status);
   ctx.effect(() => setBoardSource(sessionId => {

package/plugins/email/desktop-host.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { clientRequestSchema } from '@deepseek-ai/dsh-client-connection';
 import { DesktopEmail } from './desktop-service.mjs';
 import { createEmailContacts } from './contacts.mjs';
@@ -6,8 +7,7 @@ import { registerEmailTools } from '../email-tools/index.mjs';
 
 export const inject = ['agents', 'agentPresets', 'sessions'];
 export async function apply(ctx) {
-  if (!process.env.DSH_HOME) throw Error('Desktop email requires DSH_HOME.');
-  const service = new DesktopEmail({ home: process.env.DSH_HOME });
+  const service = new DesktopEmail({ home: resolveDshHome() });
   const contacts = createEmailContacts({ directory: service.inbox.directory });
   const sender = createEmailSender({ directory: service.inbox.directory,
     configurationHint: 'Open Email inbox → Mailbox connection and connect Gmail IMAP with an application password before sending. Gmail OAuth supports receiving only.' });

package/plugins/grok/billing.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 
@@ -136,7 +137,7 @@ export function setGrokSubscription(next, at = Date.now()) {
  * instead of falling back to a bare tier name. One file read per refresh window keeps the
  * render path off the disk.
  */
-export function grokSubscriptionNow(home = process.env.DSH_HOME) {
+export function grokSubscriptionNow(home = resolveDshHome()) {
   if (state !== undefined) return state;
   if (home === undefined) return undefined;
   if (disk !== undefined && disk.home === home && Date.now() - disk.at < GROK_SUBSCRIPTION_TTL_MS) return disk.value;

package/plugins/grok/index.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import z from "@deepseek-ai/schemastery";
 import { RetryPolicySchema, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
@@ -72,7 +73,7 @@ export function apply(ctx, config = {}) {
     }
   };
   options();
-  const home = process.env.DSH_HOME;
+  const home = resolveDshHome();
   /** The credential the route calls with, or undefined: the catalog must load without a login. */
   const resolveTokenSafe = async () => {
     const ref = options().apiKeyEnv;

package/plugins/grok/status.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { grokAuthState, minutesLeft } from "./auth.mjs";
 import { grokSubscriptionNow, readGrokSubscription } from "./billing.mjs";
 
@@ -10,7 +11,7 @@ import { grokSubscriptionNow, readGrokSubscription } from "./billing.mjs";
  * @returns `{ status: { kind, expiresIn? }, subscription? }`; `kind` is the local login state
  *   (`ready`, `expired`, `missing`, `malformed`) and `expiresIn` is minutes on a ready login.
  */
-export function grokStatusSnapshot({ home = process.env.DSH_HOME, now = Date.now() } = {}) {
+export function grokStatusSnapshot({ home = resolveDshHome(), now = Date.now() } = {}) {
   const auth = grokAuthState({ now });
   const stored = grokSubscriptionNow() ?? (home === undefined ? undefined : readGrokSubscription(home));
   return {

package/plugins/jev/index.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import z from '@deepseek-ai/schemastery';
 import { credentialRef } from '@deepseek-ai/dsh-credentials';
 import { launchEnvironmentOf } from '@deepseek-ai/dsh-launch-environment';
@@ -60,7 +61,7 @@ export function apply(ctx, config = {}) {
       const apiKey = await resolveKey();
       if (!apiKey || signal?.aborted) return undefined;
       const started = Date.now();
-      const home = process.env.DSH_HOME, id = randomUUID();
+      const home = resolveDshHome(), id = randomUUID();
       const recipients = sessionId && home ? metricRecipients(ctx.get('agents'), sessionId) : [];
       const save = entry => {
         for (const recipient of recipients) {

package/plugins/memory/index.mjs

@@ -1,4 +1,4 @@
-import { homedir } from 'node:os';
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { resolve, join } from 'node:path';
 import { randomUUID } from 'node:crypto';
 import { BlockAssembler, createUserMessage } from '@deepseek-ai/dsh-llm';
@@ -37,7 +37,7 @@ export function applyDesktop(ctx, options = {}) {
 
 function install(ctx, options, desktop = false) {
   const config = resolveConfig(options);
-  const root = resolve(config.root ?? process.env.DSCODE_MEMORY_HOME ?? join(process.env.DSCODE_HOME ?? process.env.DSH_HOME ?? join(homedir(), '.local/share/dscode-hub'), 'memories'));
+  const root = resolve(config.root ?? process.env.DSCODE_MEMORY_HOME ?? join(resolveDshHome(), 'memories'));
   const store = new MemoryStore(root);
   const controller = new AbortController(), owner = randomUUID(), live = new Set(), started = new Set();
   let running, lastRoute, lastResult, lastSession;

package/plugins/opencode-go/index.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import z from '@deepseek-ai/schemastery';
 import { LlmError, RetryPolicySchema, resolveImageAttachmentAccess, resolveRetryPolicy } from '@deepseek-ai/dsh-llm';
 import { credentialRef } from '@deepseek-ai/dsh-credentials';
@@ -65,7 +66,7 @@ export function apply(ctx, config = {}) {
     }
   };
   options();
-  const home = process.env.DSH_HOME;
+  const home = resolveDshHome();
   // The login lives in the shared credential store beside the provider keys.
   const grants = {
     read: async () => (await ctx.get('credentials')?.resolve(GRANT_REF))?.value || undefined,

package/plugins/opencode-go/usage.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 
@@ -81,7 +82,7 @@ export async function currentGoUsage({ home, resolveAuth, fetch, now = Date.now(
 }
 
 /** The snapshot the status line renders: this process's own, else the file another process wrote. */
-export function goUsageNow(home = process.env.DSH_HOME, now = Date.now()) {
+export function goUsageNow(home = resolveDshHome(), now = Date.now()) {
   if (state !== undefined) return state;
   if (home === undefined) return undefined;
   if (disk !== undefined && disk.home === home && now - disk.at < GO_USAGE_TTL_MS) return disk.value;

package/plugins/openrouter/index.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import z from '@deepseek-ai/schemastery';
 import { LlmError, RetryPolicySchema, assertUsableApiKey, resolveImageAttachmentAccess, resolveRetryPolicy } from '@deepseek-ai/dsh-llm';
 import { credentialRef } from '@deepseek-ai/dsh-credentials';
@@ -73,7 +74,7 @@ export function apply(ctx, config = {}) {
     if (credentials !== undefined) return (await credentials.resolve(ref))?.value || undefined;
     return launchEnvironmentOf(ctx).get(ref)?.value || undefined;
   };
-  const home = process.env.DSH_HOME;
+  const home = resolveDshHome();
   const ensureModels = () => ensureOpenRouterModels({ home });
   const adapter = new OpenRouterAdapter({
     displayName,

package/plugins/session-bridge/index.mjs

@@ -1,5 +1,4 @@
-import { homedir } from 'node:os';
-import { join } from 'node:path';
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { communicationPanel, createCommunicationFeed, foldCommunication } from './tasks.mjs';
 import { SessionBridge } from './server.mjs';
 import { CommunicationService } from './communication.mjs';
@@ -8,7 +7,7 @@ import { discover, request } from './client.mjs';
 export const name = 'dscode-session-bridge';
 export const inject = ['agents', 'sessions', 'sessionTitle', 'sessionCards', 'commands', 'systemPrompt', 'tools'];
 export async function apply(ctx) {
-  const home = process.env.DSH_HOME ?? process.env.DSCODE_HOME ?? join(homedir(), '.local/share/dscode-hub');
+  const home = resolveDshHome();
   const homeOption = `--home '${home.replaceAll("'", "'\\''")}'`;
   const bridge = new SessionBridge(ctx, home);
   await bridge.start();

package/plugins/session-cards/index.mjs

@@ -1,5 +1,5 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { homedir } from 'node:os';
 import { BlockAssembler, createUserMessage } from '@deepseek-ai/dsh-llm';
 import { SessionCards } from './manager.mjs';
 import { TOPIC_PROMPT } from './content.mjs';
@@ -8,7 +8,7 @@ import { effortFor } from '../providers/effort.mjs';
 export const name = 'dscode-session-cards';
 export const inject = ['sessions', 'llm'];
 export function apply(ctx, config = {}) {
-  const home = process.env.DSH_HOME ?? process.env.DSCODE_HOME ?? join(homedir(), '.local/share/dscode-hub');
+  const home = resolveDshHome();
   const cards = new SessionCards({ root: join(home, 'session-cards'), config, generate: async (input, route, signal, sessionId) => {
     const assembler = new BlockAssembler(); let finished = false, usage;
     // Cards need little reasoning whatever the session runs at: low, or the nearest level the model offers.

package/plugins/session-metrics/index.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { randomUUID } from 'node:crypto';
 import { appendMetric } from './store.mjs';
 import { estimateCost, priceVersionFor } from './pricing.mjs';
@@ -30,7 +31,7 @@ export function apply(ctx) {
     snapshots.set(session, { seq: session.seq, value });
     return { ...value, currentTps: smoothedRate.get(session), requestActive };
   }));
-  const home = process.env.DSH_HOME;
+  const home = resolveDshHome();
   // Remaining balance is best-effort decoration: resolve the key lazily (never
   // inject the credentials service, so a missing one cannot fail startup), keep
   // the request on a five-minute cache, and never let it reach the render path.

package/plugins/session-metrics/view.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { readMetrics } from './store.mjs';
 import { t } from '../i18n/messages.mjs';
 import { estimateCost, peakEmoji } from './pricing.mjs';
@@ -67,7 +68,7 @@ export function summarize(rows, events = [], corrupt = false) {
  * @returns `{ turn, cost, calls, unknown }` per completed or running turn.
  */
 export function turnCostsFor(id, events = []) {
-  const entries = id && process.env.DSH_HOME ? readMetrics(process.env.DSH_HOME, id).rows : [];
+  const entries = id ? readMetrics(resolveDshHome(), id).rows : [];
   return attributeCostByTurn(entries, events).turns;
 }
 /**
@@ -229,7 +230,7 @@ export function formatFooter(metrics, context, columns = 80, rates, locale = 'en
  */
 export function sessionSpend(id) {
   try {
-    const ledger = id && process.env.DSH_HOME ? readMetrics(process.env.DSH_HOME, id) : { rows: [], corrupt: false };
+    const ledger = id ? readMetrics(resolveDshHome(), id) : { rows: [], corrupt: false };
     const data = id ? source?.(id) : undefined;
     const summary = summarize(ledger.rows, data?.events ?? [], ledger.corrupt);
     return { cost: summary.cost, unknown: summary.unknown, pending: summary.pending };
@@ -245,7 +246,7 @@ export function footerFor(id, stats, columns, provider = 'deepseek-official', lo
     // Keep the durable prompt reading visible instead of losing all telemetry.
     let data;
     try { data = id ? source?.(id) : undefined; } catch { /* use the TUI's durable projection */ }
-    const ledger = id && process.env.DSH_HOME ? readMetrics(process.env.DSH_HOME, id) : { rows: [], corrupt: false };
+    const ledger = id ? readMetrics(resolveDshHome(), id) : { rows: [], corrupt: false };
     const events = data?.events ?? [];
     // Identity alone is not enough: a session event list may be appended to in place.
     const hit = events.length > 0 ? footerCache.get(events) : undefined;

package/plugins/triggers/desktop-host.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { clientRequestSchema } from '@deepseek-ai/dsh-client-connection';
 import { DesktopTriggerControl, DesktopTriggerManagement } from './desktop-management.mjs';
 import { registerTriggerTools } from './tools.mjs';
@@ -33,8 +34,7 @@ export async function triggerDesktopRequest(ctx, { control, management }, payloa
 }
 
 export function apply(ctx) {
-  const home = process.env.DSH_HOME;
-  if (!home) throw Error('Desktop scheduling requires DSH_HOME');
+  const home = resolveDshHome();
   const control = new DesktopTriggerControl(ctx, { home });
   const management = new DesktopTriggerManagement({ home, control });
   const service = { control, management };

package/plugins/tui-tools/doctor.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, statSync } from 'node:fs';
 import { join } from 'node:path';
 import { Logger } from '@deepseek-ai/cordis';
@@ -106,7 +107,7 @@ export async function collectDoctorEvidence(ctx, { agent, cwd = agent?.session.h
     } catch (e) { traces.push({ id: item.header.id, error: safe(e.message) }); }
     finally { await handle?.close(); }
   }
-  const home = process.env.DSH_HOME ?? process.env.DSCODE_HOME;
+  const home = resolveDshHome();
   return { cwd: safe(cwd), collectedAt: time(Date.now()),
     logCoverage: home && existsSync(doctorLogPath(home)) ? L('doctor.logs.new') : L('doctor.logs.none'),
     logs: home ? recentRuntimeLogs(home, ctx.logger?.buffer ?? []) : [], traces };

package/plugins/tui-tools/index.mjs

@@ -1,3 +1,4 @@
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { runShell } from './shell.mjs';
 import { VERSION_PATTERN, scheduleUpdate } from './update.mjs';
 import { readLanguage, t } from '../i18n/messages.mjs';
@@ -101,7 +102,7 @@ export function applyDesktop(ctx) {
 }
 
 function install(ctx, desktop) {
-  const diagnosticsHome = process.env.DSH_HOME ?? process.env.DSCODE_HOME;
+  const diagnosticsHome = resolveDshHome();
   // A minimal composition (and the unit fixtures) may mount no logger; diagnostics are best-effort.
   if (diagnosticsHome) ctx.logger?.exporter?.({ levels: { default: 2 }, export: message => recordRuntimeLog(diagnosticsHome, message) });
   const composition = agent => {