deepseek-computer-use 0.1.0 → 0.1.1

package/README.md

@@ -1,5 +1,7 @@
 # deepseek-computer-use
 
+[![npm](https://img.shields.io/npm/v/deepseek-computer-use.svg)](https://www.npmjs.com/package/deepseek-computer-use)
+
 > 社区插件，**非 DeepSeek 官方出品**。官方包在 `@deepseek-ai/*` scope 下。
 
 给 DeepSeek Harness 的 **Windows 桌面控制（Computer Use）** 插件。
@@ -19,13 +21,11 @@ Windows 原生三件套：**UI Automation 观测 + SendInput 注入 + Windows.Gr
 UI Automation、WGC）。
 
 ```bash
-# 发布到 npm 之后
-npm install --save deepseek-computer-use
-
-# 现在还只能用 GitHub 源
-npm install --save github:STARDUSTLC666/deepseek-computer-use
+npm install deepseek-computer-use
 ```
 
+[npmjs.com/package/deepseek-computer-use](https://www.npmjs.com/package/deepseek-computer-use)
+
 然后在本机 profile 的 `cordis.patch.yml` 里启用（详见本文件末尾的配置示例）：
 
 ```yaml
@@ -111,7 +111,17 @@ Codex 用两层覆盖层告诉用户"AI 正在动你的电脑"，这里做的是
 **Cursor Overlay — 虚拟光标 + 系统光标抑制**
 - 覆盖层存在期间常驻一个带描边和投影的白色指针，启动时落在真实指针位置，
   之后 0.35 缓动滑向每个动作点；背后一层极淡的强调色光晕
-- 默认抑制真实系统光标，退出/Esc/超时用 `SPI_SETCURSORS` 恢复；
+- 默认抑制真实系统光标（`SetSystemCursor` 换成透明图标），五层恢复保障：
+  1. 正常退出 / Esc / 超时 → 退出钩子里 `SPI_SETCURSORS`
+  2. **独立守卫进程**（`--cursor-guard <ownerPid>`）盯着覆盖层，覆盖层被强杀后
+     它负责还原——和 Codex 的 `system-cursor-manager` 同一思路
+  3. helper 的 **500ms 看门狗**：标记里的 PID 失效就还原，不需要任何请求
+  4. helper **启动即自检**：上次会话残留的标记会被清掉
+  5. 插件 dispose 时发 `restore_cursor` RPC
+- 抑制期间 `%LOCALAPPDATA%\dsh-computer-use\cursor-hidden.flag` 记录自己的 PID，
+  守卫只清理属于自己 owner 的标记，不会误伤新一代覆盖层
+- Windows 在休眠恢复 / 换分辨率后会重置光标，覆盖层每约 1.8 秒**重新抑制**一次
+- 完全不想抑制：`DSH_CU_KEEP_CURSOR=1`
   helper 强杀覆盖层时也会兜底恢复一次
 
 **DPI 关键点**：覆盖层进程必须 Per-Monitor-V2 感知，否则在 150% 缩放屏上
@@ -238,7 +248,7 @@ node test/integration.mjs
 
 固定装置是一个独立的 WinForms 可执行文件（`test/bin/dsh-cu-fixture.exe`，一个文本框 +
 一个名为 "Delete all" 的按钮；特意不用 shell 托管——shell 窗口本身被硬拒绝）。覆盖：
-14 个工具注册、截图数组与 origin/zIndex、`accessibility:null` 语义、`set_value`、
+16 个工具注册、截图数组与 origin/zIndex、`accessibility:null` 语义、`set_value`、
 `type_text`、危险按钮触发审批、`dryRun` 不落地、`denyApps` 拒绝、Win 键硬拒绝、
 `scroll` 契约。
 
@@ -252,7 +262,7 @@ MIT。第三方商用前请自行做安全评审：这个插件能让模型操
 | 文件 | 用途 | 大小 |
 |---|---|---|
 | `dsh-computer-use-helper.exe` | UIA / SendInput / 抓屏调度 / 音频调度 | ~50KB |
-| `dsh-cu-overlay.exe` | 鲸鱼娘 + 虚拟光标覆盖层 | ~30KB |
+| `dsh-cu-overlay.exe` | 呼吸光边 + 虚拟光标覆盖层 | ~30KB |
 | `capture/` | WGC 抓屏（.NET Framework 4.8 + SharpDX） | 0.68MB |
 | `audio/` | WASAPI 环回录音（NAudio） | 0.60MB |
 | **合计** | | **~1.4MB** |
@@ -289,6 +299,9 @@ marker 文件按 **会话 + turn** 命名，避免旧会话的 Esc 标记误伤
         audio: false            # 开启 WASAPI 环回录音（start/stop_audio_recording）
         redactApps: []          # 这些应用的截图永不出机器，例如 ["1password", "银行"]
         defaultIncludeScreenshot: true
+        timeoutMs: 10000        # 单次 RPC 超时（launch_app 用 launchTimeoutMs）
+        helperPath: null        # 覆盖 helper 路径（仅信任场景）
+        riskyPattern: ''        # 自定义「危险动作」正则，命中走审批
         toolPrefix: ''          # 例如 cu_ 可避免和其他插件的 click 重名
 ```
 
@@ -297,6 +310,8 @@ marker 文件按 **会话 + turn** 命名，避免旧会话的 Esc 标记误伤
 - 只支持 Windows；驱动层是接口（`IPlatformDriver`），macOS / Linux 可照着补。
 - Codex window2 没有的接口（`paste` / `clipboard_*` / `key_down` / `move`）这里也没有。
 - `App.useCount` 没有数据来源，按可选字段留空，不伪造。
+- `redactApps` 在**插件层**执行：直接调用 helper 的 RPC 不受它约束，别把 helper 单独暴露给非受信调用方。
+- 抢焦点类工具（如 ProcessLasso）会让 `type_text` 返回 `focus_failed`，这是设计行为——宁可不输入，也不打到别的窗口。
 
 ## License
 

package/lib/index.js

@@ -143,6 +143,9 @@ export function apply(ctx, rawConfig = {}) {
 
   if (typeof ctx.on === 'function') {
     ctx.on('dispose', () => {
+      // The overlay hides the system cursor while it is up; make sure teardown puts it
+      // back even if the overlay process was killed instead of exiting cleanly.
+      try { bridge?.request('restore_cursor', {}, { timeoutMs: 2000, skipTurnTransition: false }); } catch { /* best effort */ }
       try { bridge?.dispose(); } catch { /* already gone */ }
       bridge = null;
       for (const dispose of disposers) {

package/native/Driver.cs

@@ -19,6 +19,8 @@ public interface IPlatformDriver : IDisposable
     string PlatformName { get; }
     Dictionary<string, object> Ping(Dictionary<string, object> p);
     Dictionary<string, object> Hello(Dictionary<string, object> p);
+    Dictionary<string, object> RestoreCursor(Dictionary<string, object> p);
+    void Maintenance();
     Dictionary<string, object> Close(Dictionary<string, object> p);
     Dictionary<string, object> ListWindows(Dictionary<string, object> p);
     Dictionary<string, object> ListApps(Dictionary<string, object> p);
@@ -182,14 +184,12 @@ public class WindowsDriver : IPlatformDriver
     // border and a virtual cursor; this is the DSH equivalent, and Esc is the kill
     // switch: the overlay drops a cancel file that every input path checks first.
     Process _overlay;
+    System.Threading.Timer _cursorWatchdog;
     DateTime _overlayUntil = DateTime.MinValue;
     string _overlayCancelFile;
-    string _overlayImage = "";
-    string _overlayCrop = "";
     string _overlayText = "DSH 正在使用您的电脑";
     string _overlayHint = "Esc 取消";
     string _overlayAccent = "#3f7fd8";
-    string _overlayCorner = "br";
     string _cursorFile;      // the overlay polls this to draw the virtual cursor
     /// Turn token that the user interrupted with Esc. Codex persists the same
     /// fact as a marker file per conversation+turn; here the token travels with
@@ -213,6 +213,7 @@ public class WindowsDriver : IPlatformDriver
 
     public WindowsDriver()
     {
+        Maintenance(); // startup repair: a previous session may have died with cursors hidden
         try { SetThreadDpiAwarenessContext(new IntPtr(-4)); } catch { }
         try { SetProcessDPIAware(); } catch { }
     }
@@ -340,18 +341,12 @@ public class WindowsDriver : IPlatformDriver
 
     public Dictionary<string, object> OverlayShow(Dictionary<string, object> p)
     {
-        string image = Json.GetString(p, "image");
-        if (!string.IsNullOrEmpty(image)) _overlayImage = image;
-        string crop = Json.GetString(p, "crop");
-        if (!string.IsNullOrEmpty(crop)) _overlayCrop = crop;
         string text = Json.GetString(p, "text");
         if (!string.IsNullOrEmpty(text)) _overlayText = text;
         string hint = Json.GetString(p, "hint");
         if (!string.IsNullOrEmpty(hint)) _overlayHint = hint;
         string accent = Json.GetString(p, "accent");
         if (!string.IsNullOrEmpty(accent)) _overlayAccent = accent;
-        string corner = Json.GetString(p, "corner");
-        if (!string.IsNullOrEmpty(corner)) _overlayCorner = corner;
         EnsureOverlay(Json.GetLong(p, "ttlMs", 20000));
         Dictionary<string, object> r = new Dictionary<string, object>();
         r["visible"] = true;
@@ -391,15 +386,22 @@ public class WindowsDriver : IPlatformDriver
         args.Append(" --text \"").Append(_overlayText).Append('"');
         args.Append(" --hint \"").Append(_overlayHint).Append('"');
         args.Append(" --accent \"").Append(_overlayAccent).Append('"');
-        args.Append(" --corner ").Append(_overlayCorner);
         if (_cursorFile != null) args.Append(" --cursor-file \"").Append(_cursorFile).Append('"');
-        if (Environment.GetEnvironmentVariable("DSH_CU_SUPPRESS_CURSOR") == "1") args.Append(" --suppress-cursor");
+        // Suppression is the default (the virtual cursor stands in for the real one);
+        // DSH_CU_KEEP_CURSOR=1 keeps the real pointer visible instead.
+        if (Environment.GetEnvironmentVariable("DSH_CU_KEEP_CURSOR") == "1") args.Append(" --no-suppress-cursor");
         try
         {
             ProcessStartInfo psi = new ProcessStartInfo(exe, args.ToString());
             psi.UseShellExecute = false;
             _overlay = Process.Start(psi);
             _overlayUntil = DateTime.UtcNow.AddMilliseconds(ttlMs);
+            // Codex runs a dedicated system-cursor-manager process that restores the
+            // pointer the moment its parent dies. This timer gives the same guarantee
+            // without a second exe: if the overlay vanishes with cursors hidden, the
+            // pointer comes back within half a second, with no request needed.
+            if (_cursorWatchdog == null)
+                _cursorWatchdog = new System.Threading.Timer(delegate { try { Maintenance(); } catch { } }, null, 500, 500);
         }
         catch { _overlay = null; }
     }
@@ -410,7 +412,8 @@ public class WindowsDriver : IPlatformDriver
         // Kill() skips the overlay's exit handlers, which is where it would restore the
         // system cursors. Restore them from here so a terminated overlay can never leave
         // the user without a pointer.
-        try { SystemParametersInfo(0x0057, 0, IntPtr.Zero, 0); } catch { }
+        RestoreCursors();
+        try { File.Delete(OverlayCursorFlagPath()); } catch { }
         try { if (_overlayCancelFile != null && File.Exists(_overlayCancelFile)) File.Delete(_overlayCancelFile); } catch { }
         _overlay = null;
         _overlayUntil = DateTime.MinValue;
@@ -609,6 +612,43 @@ public class WindowsDriver : IPlatformDriver
         return d;
     }
 
+    /// Run cheaply before every request: if a previous overlay died while it was hiding
+    /// the system cursors, put them back. A blank desktop cursor is worse than a stray
+    /// visible one, so this never assumes the overlay cleaned up after itself.
+    public void Maintenance()
+    {
+        try
+        {
+            string flag = OverlayCursorFlagPath();
+            if (!File.Exists(flag)) return;
+            int pid;
+            if (!int.TryParse(File.ReadAllText(flag).Trim(), out pid)) { RestoreCursors(); return; }
+            bool alive;
+            try { Process.GetProcessById(pid); alive = true; } catch { alive = false; }
+            if (!alive) { RestoreCursors(); try { File.Delete(flag); } catch { } }
+        }
+        catch { }
+    }
+
+    static string OverlayCursorFlagPath()
+    {
+        return Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData), "dsh-computer-use", "cursor-hidden.flag");
+    }
+
+    static void RestoreCursors()
+    {
+        try { SystemParametersInfo(0x0057, 0, IntPtr.Zero, 0); } catch { }
+    }
+
+    public Dictionary<string, object> RestoreCursor(Dictionary<string, object> p)
+    {
+        RestoreCursors();
+        try { File.Delete(OverlayCursorFlagPath()); } catch { }
+        Dictionary<string, object> r = new Dictionary<string, object>();
+        r["restored"] = true;
+        return r;
+    }
+
     public Dictionary<string, object> Hello(Dictionary<string, object> p)
     {
         Dictionary<string, object> d = new Dictionary<string, object>();
@@ -811,8 +851,13 @@ public class WindowsDriver : IPlatformDriver
             for (int i = 0; i < args.Count; i++)
             {
                 if (i > 0) argLine.Append(' ');
-                string a = Convert.ToString(args[i], System.Globalization.CultureInfo.InvariantCulture);
-                if (a.IndexOf(' ') >= 0) argLine.Append('"').Append(a).Append('"');
+                string a = Convert.ToString(args[i], System.Globalization.CultureInfo.InvariantCulture) ?? "";
+                // A quote or newline would let a caller smuggle extra arguments past the
+                // single quoting rule below, so refuse instead of guessing.
+                if (a.IndexOf('"') >= 0 || a.IndexOf('\n') >= 0 || a.IndexOf('\r') >= 0)
+                    throw new ToolError("bad_request", "launch_app argument " + i + " contains a quote or newline; pass a single plain argument");
+                if (a.Length == 0 || a.IndexOf(' ') >= 0 || a.IndexOf('\t') >= 0)
+                    argLine.Append('"').Append(a).Append('"');
                 else argLine.Append(a);
             }
             psi.Arguments = argLine.ToString();
@@ -1642,13 +1687,16 @@ public class WindowsDriver : IPlatformDriver
         EnsureOverlay(8000);
         IntPtr h = ResolveWindow(p);
         AssertAppApproved(h);
-        Activate(h);
+        // Validation first: an invalid call must not activate a window or move the pointer.
         double scrollY = Json.GetDouble(p, "scrollY", 0);
         double scrollX = Json.GetDouble(p, "scrollX", 0);
         double x = Json.GetDouble(p, "x", double.NaN);
         double y = Json.GetDouble(p, "y", double.NaN);
         if (double.IsNaN(x) || double.IsNaN(y))
             throw new ToolError("bad_request", "scroll requires finite 'x' and 'y' (the point to scroll from, in window/screenshot coordinates); click a pane first if it needs focus");
+        if (Math.Abs(scrollX) < 0.0001 && Math.Abs(scrollY) < 0.0001)
+            throw new ToolError("bad_request", "scroll requires a non-zero scrollX or scrollY");
+        Activate(h);
         int sx, sy;
         string scrollShot = Json.GetString(p, "screenshotId");
         int originLeft, originTop;
@@ -1685,6 +1733,12 @@ public class WindowsDriver : IPlatformDriver
         EnsureOverlay(8000);
         IntPtr h = ResolveWindow(p);
         AssertAppApproved(h);
+        double fromX = Json.GetDouble(p, "from_x", double.NaN);
+        double fromY = Json.GetDouble(p, "from_y", double.NaN);
+        double toX = Json.GetDouble(p, "to_x", double.NaN);
+        double toY = Json.GetDouble(p, "to_y", double.NaN);
+        if (double.IsNaN(fromX) || double.IsNaN(fromY) || double.IsNaN(toX) || double.IsNaN(toY))
+            throw new ToolError("bad_request", "drag requires finite from_x/from_y/to_x/to_y (window-relative pixels)");
         Activate(h);
         int originX, originY;
         double dragScaleX = 1.0, dragScaleY = 1.0;
@@ -1692,8 +1746,8 @@ public class WindowsDriver : IPlatformDriver
         if (!string.IsNullOrEmpty(dragShot))
         {
             ShotRegion region = ResolveShot(h, dragShot);
-            AssertPointInsideShot(Json.GetDouble(p, "from_x", double.NaN), Json.GetDouble(p, "from_y", double.NaN), region, dragShot, "drag start");
-            AssertPointInsideShot(Json.GetDouble(p, "to_x", double.NaN), Json.GetDouble(p, "to_y", double.NaN), region, dragShot, "drag end");
+            AssertPointInsideShot(fromX, fromY, region, dragShot, "drag start");
+            AssertPointInsideShot(toX, toY, region, dragShot, "drag end");
             originX = region.OriginX; originY = region.OriginY;
             dragScaleX = region.ScaleX; dragScaleY = region.ScaleY;
         }
@@ -1702,10 +1756,10 @@ public class WindowsDriver : IPlatformDriver
             RECT b = BoundsOf(h);
             originX = b.Left; originY = b.Top;
         }
-        int fx = originX + (int)Math.Round(Json.GetDouble(p, "from_x", 0) * dragScaleX);
-        int fy = originY + (int)Math.Round(Json.GetDouble(p, "from_y", 0) * dragScaleY);
-        int tx = originX + (int)Math.Round(Json.GetDouble(p, "to_x", 0) * dragScaleX);
-        int ty = originY + (int)Math.Round(Json.GetDouble(p, "to_y", 0) * dragScaleY);
+        int fx = originX + (int)Math.Round(fromX * dragScaleX);
+        int fy = originY + (int)Math.Round(fromY * dragScaleY);
+        int tx = originX + (int)Math.Round(toX * dragScaleX);
+        int ty = originY + (int)Math.Round(toY * dragScaleY);
 
         MarkCursor(fx, fy);
         SetCursorPos(fx, fy);

package/native/Overlay.cs

@@ -52,9 +52,6 @@ public static class Native
     public const int ULW_ALPHA = 2;
     public const uint SPI_SETCURSORS = 0x0057;
 
-    public static bool LastLayerOk = true;
-    public static int LastLayerError = 0;
-
     public static void ApplyLayered(Form form, Bitmap surface)
     {
         IntPtr screenDc = GetDC(IntPtr.Zero);
@@ -67,8 +64,7 @@ public static class Native
             POINT src = new POINT { X = 0, Y = 0 };
             SIZE size = new SIZE { CX = surface.Width, CY = surface.Height };
             BLENDFUNCTION blend = new BLENDFUNCTION { BlendOp = 0, BlendFlags = 0, SourceConstantAlpha = 255, AlphaFormat = 1 };
-            LastLayerOk = UpdateLayeredWindow(form.Handle, screenDc, ref dst, ref size, memDc, ref src, 0, ref blend, ULW_ALPHA);
-            LastLayerError = LastLayerOk ? 0 : Marshal.GetLastWin32Error();
+            UpdateLayeredWindow(form.Handle, screenDc, ref dst, ref size, memDc, ref src, 0, ref blend, ULW_ALPHA);
         }
         finally
         {
@@ -84,19 +80,48 @@ public static class Native
         try { SetWindowPos(form.Handle, HWND_TOPMOST, 0, 0, 0, 0, SWP_NOMOVE | SWP_NOSIZE | SWP_NOACTIVATE | SWP_SHOWWINDOW); } catch { }
     }
 
+    /// Path of the "cursors are hidden" flag. It carries our PID so a long-lived
+    /// supervisor can tell "the overlay is still hiding them" from "the overlay died
+    /// and left the desktop without a pointer".
+    public static string CursorFlagPath()
+    {
+        string dir = Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData), "dsh-computer-use");
+        return Path.Combine(dir, "cursor-hidden.flag");
+    }
+
+    static IntPtr _blankCursor;
+
     public static void SuppressSystemCursors(bool suppress)
     {
         try
         {
-            if (!suppress) { SystemParametersInfo(SPI_SETCURSORS, 0, IntPtr.Zero, 0); return; }
-            byte[] andMask = new byte[128];
-            byte[] xorMask = new byte[128];
-            for (int i = 0; i < andMask.Length; i++) andMask[i] = 0xFF;
-            IntPtr blank = CreateCursor(IntPtr.Zero, 0, 0, 32, 32, andMask, xorMask);
+            if (!suppress)
+            {
+                SystemParametersInfo(SPI_SETCURSORS, 0, IntPtr.Zero, 0);
+                try { File.Delete(CursorFlagPath()); } catch { }
+                if (_blankCursor != IntPtr.Zero) { try { DestroyCursor(_blankCursor); } catch { } _blankCursor = IntPtr.Zero; }
+                return;
+            }
+            // Cache the blank cursor: Windows resets the cursors on resume, display
+            // change and some logins, so the controller calls this again periodically
+            // (Codex calls the same "system cursor re-suppression").
+            if (_blankCursor == IntPtr.Zero)
+            {
+                byte[] andMask = new byte[128];
+                byte[] xorMask = new byte[128];
+                for (int i = 0; i < andMask.Length; i++) andMask[i] = 0xFF;
+                _blankCursor = CreateCursor(IntPtr.Zero, 0, 0, 32, 32, andMask, xorMask);
+            }
+            IntPtr blank = _blankCursor;
             if (blank == IntPtr.Zero) return;
             uint[] ids = new uint[] { 32512, 32513, 32514, 32515, 32516, 32631, 32640, 32641, 32642, 32643, 32644, 32645, 32646, 32648, 32649, 32650, 32651, 32671 };
             foreach (uint id in ids) SetSystemCursor(CopyIcon(blank), id);
-            DestroyCursor(blank);
+            try
+            {
+                Directory.CreateDirectory(Path.GetDirectoryName(CursorFlagPath()));
+                File.WriteAllText(CursorFlagPath(), System.Diagnostics.Process.GetCurrentProcess().Id.ToString());
+            }
+            catch { }
         }
         catch { }
     }
@@ -204,19 +229,6 @@ public sealed class CursorForm : Form
                     g.DrawPolygon(outline, arrow);
                 }
             }
-            string dump = Environment.GetEnvironmentVariable("DSH_CU_DUMP");
-            if (!string.IsNullOrEmpty(dump))
-            {
-                try
-                {
-                    surface.Save(dump, ImageFormat.Png);
-                    System.IO.File.AppendAllText(dump + ".log",
-                        DateTime.Now.ToString("HH:mm:ss.fff") + " visible=" + Visible + " handle=" + Handle.ToInt64() +
-                        " bounds=" + Left + "," + Top + " " + Width + "x" + Height +
-                        " layerOk=" + Native.LastLayerOk + " err=" + Native.LastLayerError + "\n");
-                }
-                catch { }
-            }
             if (!Visible) Show();
             Native.ApplyLayered(this, surface);
         }
@@ -391,7 +403,7 @@ public sealed class StripForm : Form
                 // halo: widest + faintest first, then tighten
                 for (int i = 3; i >= 1; i--)
                 {
-                    float width = i * 2.6f;
+                    float width = i * 3.2f;
                     int alpha = Math.Max(6, glowAlpha / (i + 1));
                     using (Pen halo = new Pen(Color.FromArgb(alpha, accent), width))
                     {
@@ -410,7 +422,7 @@ public sealed class StripForm : Form
                 }
 
                 // core hairline
-                using (Pen core = new Pen(Color.FromArgb(coreAlpha, accent), 1.4f))
+                using (Pen core = new Pen(Color.FromArgb(coreAlpha, accent), 2f))
                 {
                     core.Alignment = PenAlignment.Center;
                     if (vertical)
@@ -514,7 +526,7 @@ internal sealed class Controller : ApplicationContext
     delegate IntPtr LowLevelKeyboardProc(int nCode, IntPtr wParam, IntPtr lParam);
 
     const int Radius = 18;   // corner radius
-    const int Glow = 12;     // band the halo fades inside
+    const int Glow = 16;     // band the halo fades inside
 
     public Controller(int ttlMs)
     {
@@ -550,8 +562,8 @@ internal sealed class Controller : ApplicationContext
         Rectangle screen = SystemInformation.VirtualScreen;
         // slow 3.2s breath: the frame gets a little brighter and a touch wider
         double phase = (Math.Sin(_tick / 26.0 - 1.57) + 1.0) / 2.0;
-        int coreAlpha = 170 + (int)Math.Round(70 * phase);
-        int glowAlpha = 26 + (int)Math.Round(20 * phase);
+        int coreAlpha = 200 + (int)Math.Round(55 * phase);   // clearly visible, still a hairline
+        int glowAlpha = 42 + (int)Math.Round(26 * phase);
         int thickness = Glow;
 
         int x0 = screen.Left, y0 = screen.Top, w = screen.Width, h = screen.Height;
@@ -602,6 +614,10 @@ internal sealed class Controller : ApplicationContext
         }
         catch { }
 
+        // Windows restores the real cursors on resume / display change; put the blank
+        // ones back while the indicator is up (Codex: "schedule system cursor re-suppression").
+        if (Config.SuppressCursor && _tick % 40 == 0) Native.SuppressSystemCursors(true);
+
         if (!_cursor.Live)
         {
             PointNative p;
@@ -641,6 +657,36 @@ internal static class Program
         try { SetProcessDpiAwarenessContext(new IntPtr(-4)); } catch { }
         try { SetProcessDPIAware(); } catch { }
 
+        // Guard mode: wait for the owner, then restore the cursors. This must run before
+        // anything else - a guard that reached the suppression block would hide the
+        // cursors again and spawn another guard, and the chain would never stop.
+        int guardIndex = Array.IndexOf(args, "--cursor-guard");
+        if (guardIndex >= 0 && args.Length > guardIndex + 1)
+        {
+            int ownerPid;
+            if (int.TryParse(args[guardIndex + 1], out ownerPid) && ownerPid != System.Diagnostics.Process.GetCurrentProcess().Id)
+            {
+                try
+                {
+                    System.Diagnostics.Process owner = System.Diagnostics.Process.GetProcessById(ownerPid);
+                    owner.WaitForExit(600000); // hard cap: a guard never lives forever
+                }
+                catch { /* owner already gone */ }
+                // Only clean up our own owner's suppression: a newer overlay may have
+                // taken over the cursors in the meantime, and restoring them here would
+                // make the real pointer reappear under a live indicator.
+                bool ours = false;
+                try
+                {
+                    string flagPath = Native.CursorFlagPath();
+                    ours = File.Exists(flagPath) && File.ReadAllText(flagPath).Trim() == ownerPid.ToString();
+                }
+                catch { }
+                if (ours) Native.SuppressSystemCursors(false);
+            }
+            return;
+        }
+
         int ttlMs = 20000;
         for (int i = 0; i < args.Length - 1; i++)
         {
@@ -660,6 +706,16 @@ internal static class Program
         {
             Native.SuppressSystemCursors(true);
             AppDomain.CurrentDomain.ProcessExit += (s, e) => Native.SuppressSystemCursors(false);
+            try
+            {
+                System.Diagnostics.ProcessStartInfo guard = new System.Diagnostics.ProcessStartInfo(
+                    System.Reflection.Assembly.GetExecutingAssembly().Location,
+                    "--cursor-guard " + System.Diagnostics.Process.GetCurrentProcess().Id);
+                guard.UseShellExecute = false;
+                guard.CreateNoWindow = true;
+                System.Diagnostics.Process.Start(guard);
+            }
+            catch { /* the helper watchdog still covers us */ }
         }
 
         Application.EnableVisualStyles();

package/native/Program.cs

@@ -89,6 +89,7 @@ public static class Program
             // Codex ships the budget with every call (x-oai-cua-request-budget-ms) and the
             // helper honours it; here it bounds capture waits and marks overruns.
             Budget.Begin(Json.GetLong(p, "__budgetMs", 0));
+            try { if (_driver != null) _driver.Maintenance(); } catch { }
             object result = Dispatch(method, p);
             return Ok(id, result);
         }
@@ -109,6 +110,7 @@ public static class Program
         {
             case "ping": return _driver.Ping(p);
             case "hello": return _driver.Hello(p);
+            case "restore_cursor": return _driver.RestoreCursor(p);
             case "close": return _driver.Close(p);
             case "list_windows": return _driver.ListWindows(p);
             case "list_apps": return _driver.ListApps(p);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepseek-computer-use",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Windows Computer Use for DeepSeek Harness: UIA observation, SendInput actions, Windows.Graphics.Capture — modeled on Codex's window2 API. Community plugin, not an official DeepSeek package.",
   "type": "module",
   "main": "lib/index.js",