dsh-click 0.3.26 → 0.3.27

package/CHANGELOG.md

@@ -1,16 +1,18 @@
 # Changelog
 
-## [0.3.26] - 2026-10-27
+## [0.3.27] - 2026-11-05
 
-### Fixed
-
-- **Element-targeted actions now verify the target instead of the whole window (issue #29).** `screen_read` stores a per-element hash; `click`/`type`/`scroll` re-read the tree and allow the action when the addressed element is unchanged, even if an unrelated clock, cursor, spinner, or memory label moved the whole-tree hash. `staleCheckTree` gains `target` and becomes the default; `strict` preserves the old whole-window refusal, and `off` remains the explicit escape hatch. Screenshot-only observations and `key` fall back to the strict whole-tree check. Added unchanged-target and changed-target regression tests.
+### Changed
 
-## [0.3.25] - 2026-10-26
+- **Host 0.2.2 line support.** devDependencies move from `0.2.1-rc.2` to `0.2.2-rc.1`, `@deepseek-ai/cordis` to `^4.1.0`, the include/loader plugins to `^1.1.0`, and schemastery to `~3.19.0` so one copy resolves against `@deepseek-ai/dsh-llm` 0.2.2. Add `@deepseek-ai/dsh-tool-executor-native` and `@deepseek-ai/dsh-session-projection` (both 0.2.2-rc.1) plus `@deepseek-ai/dsh-package-manifest`, which dsh-llm 0.2.2 types import without declaring. `engines.dsh` appends `>=0.2.2-0 <0.3.0` (append-only) and `engines.node` becomes `^22.19.0 || >=24.9.0`.
 
-### Added
+### Fixed
 
-- **`staleCheckTree: "strict" | "off"` (default `strict`) — an explicit escape hatch for windows with a ticking clock, cursor, spinner, or live memory label (issue #29).** `strict` preserves the existing whole-window tree-hash refusal; `off` skips only the tree hash, while identity, observation age, and (unless `staleCheckPixels: false`) pixel checks still apply. This makes dynamic windows operable today; per-element scoped verification remains the planned default replacement.
+- **Batch tool dispatch in the suites and the Loader runner.** 0.2.2 replaced the single-call `tools.execute({ callId, name, arguments })` with `ToolBatchInput` → `ToolBatchResult`; every call site now builds a one-call batch (`calls: [{ type: 'tool-call', id, name, arguments: JSON.stringify(...) }]`) and projects `results[0].result`, so the assertions keep their flat result shape.
+- **Raw execution is behind a pluggable executor.** The test harness mounts `@deepseek-ai/dsh-tool-executor-native` right after `ToolRuntime`, and the Loader composition profile carries its row; without them `ctx.tools.execute()` has no provider.
+- **Loader failures surface again.** `cordis` 4.1.0 settles a failed row's error on that row's fiber instead of rejecting `loader.await()`, so `scripts/loader-runner.mjs` now awaits every row fiber after `loader.await()`; the invalid-config and default-export negations fail on the real reason instead of a downstream missing-tool symptom. The row-state scan remains as a fallback.
+- **Approval service mounting in the harness.** `ApprovalService` 0.2.2 statically injects `sessionProjections`, so the harness constructs `SessionProjectionRegistry` on the root context before mounting it, and the `systemPrompt` stub gains `context` / `getContextOrder` because the service registers an approval-policy context section.
+- **Invalid-config composition case timeout.** Its three sequential child boots now import the full 0.2.2 host graph and can exceed the 5 s vitest default on a drvfs/Windows mount; the case gets an explicit 30 s budget inside the runner's own 120 s spawn timeout.
 
 ## [0.3.24] - 2026-10-19
 

package/README.md

@@ -275,10 +275,10 @@ This project is part of the DeepSeek Harness plugin family from [PerryLink](http
 | **[dsh-aqua-input-check](https://github.com/PerryLink/dsh-aqua-input-check)** |  |
 | **[dsh-archive-check](https://github.com/PerryLink/dsh-archive-check)** |  |
 | **[dsh-auto-review](https://github.com/PerryLink/dsh-auto-review)** |  |
-| **[dsh-autotier](https://github.com/PerryLink/dsh-autotier)** |  |
+| **[dsh-autotier](https://github.com/PerryLink/dsh-autotier)** | 🧊 FROZEN — see the repo README |
 | **[dsh-bid-ca-precheck](https://github.com/PerryLink/dsh-bid-ca-precheck)** |  |
 | **[dsh-bid-qual-check](https://github.com/PerryLink/dsh-bid-qual-check)** |  |
-| **[dsh-cert-mcp](https://github.com/PerryLink/dsh-cert-mcp)** |  |
+| **[dsh-cert-mcp](https://github.com/PerryLink/dsh-cert-mcp)** | 🧊 FROZEN — see the repo README |
 | **[dsh-checkpoint-rewind](https://github.com/PerryLink/dsh-checkpoint-rewind)** |  |
 | **[dsh-click](https://github.com/PerryLink/dsh-click)** |  |
 | **[dsh-composer-history](https://github.com/PerryLink/dsh-composer-history)** |  |

package/lib/index.js

@@ -7,7 +7,7 @@ import { fileURLToPath } from "node:url";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import { mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
-// src/events.ts
+//#region src/events.ts
 /** The observation audit event type. */
 const OBSERVED_EVENT = "dsh-click/observed";
 /** The action audit event type. */
@@ -36,7 +36,8 @@ function appendAuditEvent(session, type, data) {
 	else session.append(type, data);
 	return "appended";
 }
-// src/sanitize.ts
+//#endregion
+//#region src/sanitize.ts
 /**
 * Pure display/audit redaction for everything dsh-click shows to the model or
 * writes to a session log: window titles, executable paths, and free text that
@@ -103,7 +104,8 @@ function redactSensitive(text) {
 function sanitizeVisible(text, maxLength) {
 	return sanitizeText(redactSensitive(text), maxLength);
 }
-// src/platform/types.ts
+//#endregion
+//#region src/platform/types.ts
 /** Error with a stable machine-routing code, model-readable message included. */
 var DshClickError = class extends Error {
 	code;
@@ -144,7 +146,8 @@ function expectProcessFacts(value, op) {
 		executablePath
 	};
 }
-// src/actions.ts
+//#endregion
+//#region src/actions.ts
 /** Approval failure detail, model-readable. */
 const APPROVAL_DETAIL = {
 	rejected: "rejected by the approval answerer",
@@ -340,7 +343,8 @@ var ActionExecutor = class {
 		}
 	}
 };
-// src/config.ts
+//#endregion
+//#region src/config.ts
 /**
 * Plugin configuration and its explicit resolve step. `resolveConfig` re-judges
 * every default and bound so programmatic construction that bypasses
@@ -477,7 +481,8 @@ function resolveConfig(config) {
 		})
 	});
 }
-// src/observe.ts
+//#endregion
+//#region src/observe.ts
 /**
 * Observation cache and the staleness boundary. Every observation stores the
 * window's identity facts plus content hashes; before any action the executor
@@ -607,7 +612,8 @@ var ObservationStore = class {
 		return { ok: true };
 	}
 };
-// src/version.ts
+//#endregion
+//#region src/version.ts
 /**
 * The plugin version, hardcoded on purpose: it rides the helper-process
 * protocol handshake, so it must track `package.json` or released helpers
@@ -617,10 +623,11 @@ var ObservationStore = class {
 * @module dsh-click/version
 */
 /** Plugin version advertised in the helper-protocol handshake. */
-const VERSION = "0.3.26";
+const VERSION = "0.3.27";
 /** The helper protocol revision; bump only on incompatible wire changes. */
 const HELPER_PROTOCOL_VERSION = 1;
-// src/platform/runner.ts
+//#endregion
+//#region src/platform/runner.ts
 /**
 * The Windows backend: every operation spawns the native PowerShell helper
 * (`native/win32/dsh-click-helper.ps1`) through the harness's `ctx.subprocess`
@@ -904,7 +911,8 @@ var HelperBackend = class {
 		};
 	}
 };
-// src/platform/selection.ts
+//#endregion
+//#region src/platform/selection.ts
 /** A backend that cannot act: every operation fails closed with the given reason. */
 var UnavailableBackend = class {
 	platform;
@@ -975,7 +983,8 @@ function createBackend(ctx, config) {
 	}
 	return new UnavailableBackend(process.platform, RESERVED_BACKENDS[process.platform] ?? "unsupported platform");
 }
-// src/vision.ts
+//#endregion
+//#region src/vision.ts
 /**
 * Resolve whether the calling agent's current model declares image input.
 *
@@ -997,7 +1006,8 @@ async function sessionAcceptsImages(agent, ctx, signal) {
 		return false;
 	}
 }
-// src/vision/ocr.ts
+//#endregion
+//#region src/vision/ocr.ts
 /**
 * Optical character recognition seam for windows without a UIA tree. OCR is
 * optional and probed at mount: the `tesseract` provider is used only when the
@@ -1142,7 +1152,8 @@ async function probeTesseract(subprocess, command, language) {
 		return new UnavailableOcrProvider("tesseract", `tesseract (${command}) is not installed`);
 	}
 }
-// src/vision/grounding.ts
+//#endregion
+//#region src/vision/grounding.ts
 /**
 * Visual grounding seam: turning a screenshot plus a natural-language prompt
 * into labeled bounding boxes. Kept as an independent provider so a vision
@@ -1170,7 +1181,8 @@ var UnavailableGroundingProvider = class {
 		return Promise.reject(new DshClickError(`visual grounding unavailable: ${this.reason}`, "GROUNDING_UNAVAILABLE"));
 	}
 };
-// src/vision/index.ts
+//#endregion
+//#region src/vision/index.ts
 /**
 * Map one screenshot box (possibly downscaled by `maxScreenshotSide`) to its
 * screen-space box, centering on the window's screen rect origin.
@@ -1197,7 +1209,8 @@ function centerOf(box) {
 		y: Math.round(box.y + box.height / 2)
 	};
 }
-// src/tools.ts
+//#endregion
+//#region src/tools.ts
 /** Sanitize one snapshot into the model-visible window value. */
 function observedWindow(snapshot, maxTextLength) {
 	return {
@@ -2233,7 +2246,8 @@ function allTools(services) {
 		appLaunchTool(services)
 	];
 }
-// src/index.ts
+//#endregion
+//#region src/index.ts
 const name = "dsh-click";
 /** Hard services: the tool registry every contribution lands in, plus the subprocess runtime the Windows helper spawns through. */
 const inject = ["tools", "subprocess"];
@@ -2268,4 +2282,5 @@ async function apply(ctx, config) {
 	};
 	for (const tool of allTools(services)) ctx.effect(() => ctx.tools.register(tool), `dsh-click: ${tool.name} tool`);
 }
+//#endregion
 export { ACTION_EVENT, ActionExecutor, Config, DshClickError, HELPER_PROTOCOL_VERSION, HelperBackend, OBSERVED_EVENT, ObservationStore, TesseractOcrProvider, UnavailableBackend, UnavailableGroundingProvider, UnavailableOcrProvider, VERSION, allTools, apply, centerOf, createBackend, inject, name, observationIdOf, parseTesseractTsv, probeTesseract, redactSensitive, resolveConfig, sanitizePath, sanitizeText, sanitizeVisible, screenBoxFor, tesseractArgv };

package/lib/types/version.d.ts

@@ -7,7 +7,7 @@
  * @module dsh-click/version
  */
 /** Plugin version advertised in the helper-protocol handshake. */
-export declare const VERSION = "0.3.26";
+export declare const VERSION = "0.3.27";
 /** The helper protocol revision; bump only on incompatible wire changes. */
 export declare const HELPER_PROTOCOL_VERSION = 1;
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-click",
-  "version": "0.3.26",
+  "version": "0.3.27",
   "description": "Cross-platform native desktop control tools for DeepSeek Harness (Windows first): screen_shot, screen_read (accessibility tree + pixel description for text-only models), click/type/scroll/key, and app_list/app_launch — every mutating action gated by approval, never stealing foreground focus, with stale-observation rejection and process-identity checks",
   "repository": {
     "type": "git",
@@ -102,43 +102,46 @@
     "screen-reader"
   ],
   "engines": {
-    "node": "^22.19.0 || >=24.0.0",
-    "dsh": ">=0.2.1-0 <0.3.0"
+    "node": "^22.19.0 || >=24.9.0",
+    "dsh": ">=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0"
   },
   "packageManager": "pnpm@11.7.0",
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.5-alpha.1",
-    "@deepseek-ai/dsh-agent": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/dsh-attachment": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/dsh-llm": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/dsh-session": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/dsh-subprocess": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/dsh-tools": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/dsh-user-approval": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0",
-    "@deepseek-ai/schemastery": "^3.18.5"
+    "@deepseek-ai/dsh-agent": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
+    "@deepseek-ai/dsh-attachment": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
+    "@deepseek-ai/dsh-llm": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
+    "@deepseek-ai/dsh-session": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
+    "@deepseek-ai/dsh-subprocess": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
+    "@deepseek-ai/dsh-tools": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
+    "@deepseek-ai/dsh-user-approval": ">=0.1.2-rc.1 <0.2.0 || >=0.1.5-alpha.1 <0.2.0 || >=0.1.6-0 <0.2.0 || >=0.1.7-0 <0.2.0 || >=0.2.0-0 <0.3.0 || >=0.2.1-0 <0.3.0 || >=0.2.2-0 <0.3.0",
+    "@deepseek-ai/schemastery": "^3.18.5-alpha.1"
   },
   "dependencies": {},
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.5-alpha.1",
-    "@deepseek-ai/cordis-plugin-include": "^1.0.10-alpha.1",
-    "@deepseek-ai/cordis-plugin-loader": "^1.0.6-alpha.1",
-    "@deepseek-ai/dsh-agent": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-attachment": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-llm": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-subprocess": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-subprocess-local": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.2.1-rc.2",
-    "@deepseek-ai/dsh-user-approval": "0.2.1-rc.2",
-    "@deepseek-ai/schemastery": "^3.18.5",
-    "@types/node": "^22.20.5",
-    "@vitest/coverage-v8": "3.2.7",
+    "@deepseek-ai/cordis": "^4.1.0",
+    "@deepseek-ai/cordis-plugin-include": "^1.1.0",
+    "@deepseek-ai/cordis-plugin-loader": "^1.1.0",
+    "@deepseek-ai/dsh-agent": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-attachment": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-llm": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-session": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-session-projection": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-subprocess": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-subprocess-local": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-tool-executor-native": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-tools": "0.2.2-rc.1",
+    "@deepseek-ai/dsh-user-approval": "0.2.2-rc.1",
+    "@deepseek-ai/schemastery": "~3.19.0",
+    "@types/node": "^22.19.0",
+    "@vitest/coverage-v8": "3.2.0",
     "oxlint": "0.18.1",
     "vitest": "^3.2.0",
-    "@deepseek-ai/dsh-working-directory": "0.2.1-rc.2",
-    "tsdown": "^0.23.2",
-    "typescript": "^5.9.0"
+    "@deepseek-ai/dsh-working-directory": "0.2.2-rc.1",
+    "tsdown": "^0.22.14",
+    "typescript": "^5.9.0",
+    "@deepseek-ai/dsh-package-manifest": "0.2.2-rc.1"
   },
   "scripts": {
     "build": "node scripts/prepare.mjs",