dsh-codex-style-computer-use 1.2.0 → 1.2.3

package/README.md

@@ -1,13 +1,23 @@
-# Computer Use · Codex-style desktop control
+# dsh-codex-style-computer-use · Codex-style desktop control
+
+**Give DeepSeek eyes and hands for Windows.**
+
+Ask your agent to work with desktop apps: see the screen, find controls, click and type. Take over with your own mouse or keyboard whenever needed; the agent waits before continuing. Approval prompts remain enabled by default.
 
 Windows desktop computer use for **DeepSeek Harness**: 18 desktop tools plus an Agent activation entry that observe and drive
 native Windows applications through prebuilt C# workers included in the package. No PowerShell 7,
-SDK, terminal commands or install-time builds are needed.
+SDK or install-time builds are needed.
 
 English | [中文](README.zh.md)
 
 Windows only (`os: win32`). Requires Node.js ≥ 22 and the .NET Framework 4.x that Windows ships with.
 
+**1.2.3 automatic fix:** normal installation/update now installs the approval-attribution correction for computer-use calls on affected DSH hosts. No manual host patch is required for those calls. Host approvals and audit remain authoritative; follow the host's restart indication after updating an already loaded plugin. See [1.2.3](docs/RELEASE-1.2.3.md).
+
+**1.2.1 attention fix:** fixes a missing crypto import that prevented 1.2.0's native `probe` and `raise` requests from reaching the helper. Updating from 1.2.0 is required for this runtime fix; reinstalling 1.2.0 does not fix it. New releases are staged on npm's `next` tag before promotion to `latest`; the market's normal update follows `latest`. See [1.2.1 validation and release status](docs/RELEASE-1.2.1.md).
+
+**1.2.2 GitHub pre-release:** includes a separately deployed DSH host approval-attribution patch and 14 regression cases. Plugin input and approval behavior is retained from 1.2.1. See [release contents and deployment scope](docs/RELEASE-1.2.2.md); GitHub publication does not update npm or the market automatically.
+
 ## What it does
 
 - **Observe** — window list, screenshots (region / JPEG / PNG / downscaled), a Set-of-Marks map of
@@ -27,12 +37,35 @@ under `$DSH_HOME/data/computer-use/`.
 
 ## Install and update in dsh-market
 
-Search **computer-use** and select **dsh-codex-style-computer-use**, by **ltmroberthk915** (npm maintainer: **ltmroberthk**). Click **Install**. Later, click **Update** or **Update all** in the market. The package includes both native helpers; no PowerShell 7 or build permission is needed.
+Once the catalog submission is merged and synced, search **computer-use** and select **dsh-codex-style-computer-use**, by **ltmroberthk915** (npm maintainer: **ltmroberthk**). Click **Install**. Later, use **Update** or **Update all** for versions admitted by the host's release policy. The package includes both native helpers; no PowerShell 7 or build permission is needed.
+
+Before catalog sync, use **Settings → Plugins → Add plugin**. The corrected version is **`dsh-codex-style-computer-use@1.2.1`**; the unversioned name still resolves to 1.2.0 until promotion. Do not paste the GitHub repository URL: that selects the source-download path instead of the small prebuilt npm package. The default non-strict pnpm 11.7.0 configuration can install 1.2.1 immediately; an explicitly strict host policy can require waiting as described below. A newly added bundle can load live on the official Desktop host; check that its tools and skill appear. Restart from the tray when replacing an already loaded version, when the client remains stale, or when DSH reports **restart-required**.
+
+### Releases less than 24 hours old
+
+The default non-strict pnpm 11.7.0 configuration automatically records a single-version exception and installs. A successful install on one machine does not establish that another machine permits fresh versions.
+
+With `minimumReleaseAgeStrict: true` (or a host policy that enables strict release-age checks), and no applicable exception, a version below the configured age is rejected before plugin code runs. The bare name, an exact `@1.2.0` pin, and the npm tarball URL were all verified to fail with `ERR_PNPM_NO_MATURE_MATCHING_VERSION` under that policy. Explicitly setting `minimumReleaseAge: 1440` also enables strict behavior in pnpm 11.7.0 unless `minimumReleaseAgeStrict` is separately set to false. Restarting DSH, installing PowerShell, or retrying the same command does not fix a strict-policy refusal. The official desktop bridge does not accept extra pnpm flags.
+
+If a strict policy blocks installation, wait until the version meets the configured age to install without changing policy. Version 1.2.0 was published at `2026-10-03T03:50:11.586Z`; it meets a 24-hour cutoff after **2026-10-04 03:50:12 UTC** (11:50:12 in China). A longer custom cutoff or a lagging registry mirror can delay availability further. Default non-strict users do not need to wait or edit configuration for this package.
+
+If you explicitly choose to install earlier, merge this single-version exception into the target profile's existing `pnpm-workspace.yaml`, then retry the market install. Preserve other entries; do not disable the global age policy:
+
+```yaml
+minimumReleaseAgeExclude:
+  - dsh-codex-style-computer-use@1.2.0
+```
 
-If the catalog has not synced yet, use **Settings → Plugins → Add plugin**, enter `dsh-codex-style-computer-use`, and install. This also creates an ordinary registry installation that can be updated from the market. If DSH reports **restart required**, fully exit DSH from its tray menu and reopen it.
+The default desktop path is `%USERPROFILE%\.dsh\profiles\desktop\pnpm-workspace.yaml`; use the actual directory if `DSH_HOME` is customized. Remove this one exception after the version matures if desired.
+
+The earlier documentation and publisher-check corrections did not change the 1.2.0 runtime and needed no reinstall. The native attention fix in **1.2.1** does require an update. Re-adding the same source can produce a host `ambiguous-install` error on some installation paths; reinstalling 1.2.0 will not apply the 1.2.1 fix.
 
 **Migrating an older Git/tarball installation from this repository:** remove the old **dsh-computer-use** entry in the market, then install **dsh-codex-style-computer-use**. The unscoped npm name `dsh-computer-use` belongs to a different repository; do not install it as an upgrade of this plugin. A Git installation cannot switch its dependency identity just by fetching a new commit. After this one-time UI migration, use normal market updates. Existing `computer_*` tool names and the `computer-use` settings namespace are retained.
 
+**Preserve your saved configuration too:** back up the profile's `cordis.patch.yml`, then change only `name: dsh-computer-use` on an override with `id: computer-use` to `name: dsh-codex-style-computer-use`. Keep its entire `config` and `disabled` fields. Retaining the settings namespace alone is insufficient: a name mismatch makes DSH skip even `read-only`, `dryRun`, and disabled-state overrides. Do not replace other plugins or a shared home patch globally. The repository's `scripts/migrate-profile.mjs` previews by default; `--apply` creates a backup and replaces the file atomically, refusing concurrent edits.
+
+Alternatively, download the [configuration migration utility](https://github.com/ltmroberthk915/dsh-computer-use/releases/download/v1.2.0/computer-use-profile-migration.zip), extract it and double-click `migrate-profile.cmd`. It locates the installed official Desktop app and uses Windows PowerShell 5.1 plus DSH's bundled Node to repair the default desktop profile. It stops if the new bundle is absent or the old bundle is still selected. It does not change release-age policy. For another profile, run `migrate-profile.ps1 -ProfileDirectory <absolute-directory>` to preview, then add `-Apply` when ready.
+
 The GitHub Release also includes `dsh-computer-use.tgz` for offline/manual installation; registry installation is the default for market updates.
 
 CLI users (web profile):
@@ -41,6 +74,15 @@ CLI users (web profile):
 dsh plugin --profile web add dsh-codex-style-computer-use
 ```
 
+Desktop diagnostics must use the **CLI bundled with the official Desktop app**:
+
+```powershell
+$CuDshInstall = Join-Path $env:LOCALAPPDATA 'Programs\DeepSeek Harness'
+& "$CuDshInstall\resources\runtime\cli\bin\dsh.cmd" plugin --profile desktop why dsh-codex-style-computer-use
+```
+
+For a custom installation, set `$CuDshInstall` to the directory in the Desktop shortcut's target. An older global npm `dsh` can reject the desktop profile. Do not add `resources/runtime/bin` to the global PATH or install a separate pnpm for this task. Prefer the plugin UI for installation.
+
 ## The bundled skill
 
 The driving tools stay locked until the session produces a receipt phrase that exists only inside
@@ -79,6 +121,8 @@ clicked at the wrong place.
 
 ## Approval modes
 
+For a host that reports a disabled-prompt automatic refusal as “the user rejected tool”, see the [DSH approval attribution patch and regression test](docs/APPROVAL-ATTRIBUTION.md).
+
 `automationMode` is set in the plugin's settings and defaults to `standard`:
 
 | Mode | Observation | Actuation |
@@ -127,6 +171,16 @@ node mcp/src/index.js
 
 ## Development
 
+Publisher release checks use npm's official registry by default. If that origin is unreachable on your network, `CU_REGISTRY` selects an explicit mirror for the read-only `check` command; the JSON result includes `registry` and `authoritative`. Example in PowerShell (this changes only the current shell):
+
+```powershell
+$env:CU_REGISTRY = 'https://registry.npmmirror.com'
+node scripts/release-channel.mjs check 1.2.0
+Remove-Item Env:CU_REGISTRY
+```
+
+Exit code `0` means the version has passed the 24-hour publisher check, `2` means it is still cooling, and `1` means the check failed. A network failure does not establish that a package is unpublished, and mirrors can lag. `promote` always rechecks and writes `https://registry.npmjs.org`, ignoring `CU_REGISTRY`; it needs access to that origin, using npm's proxy configuration when necessary. This publisher tool is not part of end-user installation. See [the release procedure](docs/RELEASE-1.2.0.md).
+
 The repository ships the guard suite that protects the invariants above — the cycle lifetime, the
 ask/brake protocol, the operation classification, the skill gate, and the bundled-skill wiring:
 

package/README.zh.md

@@ -1,4 +1,8 @@
-# Computer Use · Codex 风格桌面操控
+# dsh-codex-style-computer-use · Codex 风格桌面操控
+
+**让 DeepSeek 看得见，也点得动。**
+
+把 Windows 应用里的重复操作交给 AI：看屏幕、找控件、点鼠标、敲键盘。你一碰鼠标键盘，它就让出控制，等你操作完再继续；默认保留操作审批。
 
 给 **DeepSeek Harness** 用的 Windows 桌面操控插件：18 个桌面工具加一个 Agent 激活入口，通过一个 C# worker
 观察并驱动原生 Windows 应用。发布包已包含编译好的原生组件，无需安装 PowerShell 7、SDK 或执行编译命令。
@@ -7,6 +11,14 @@
 
 仅支持 Windows（`os: win32`）。需要 Node.js ≥ 22 与 Windows 自带的 .NET Framework 4.x。
 
+**1.2.3 自动修复：**正常安装或更新插件，即会为受影响宿主中的 computer-use 调用安装审批归因修正，无需手工修改宿主。审批决定与审计仍由宿主处理；更新已加载插件后按宿主提示重启。详见 [1.2.3](docs/RELEASE-1.2.3.md)。
+
+**1.2.1 提醒修复：**补齐 crypto 导入，修复 1.2.0 原生 `probe` / `raise` 请求还未发送就抛错的问题。这次是运行时代码修复，需要从 1.2.0 更新；重复安装 1.2.0 无效。新版本先发布到 npm 的 `next`，再提升为 `latest`，市场普通更新跟随 `latest`。详见 [1.2.1 验证和发布状态](docs/RELEASE-1.2.1.md)。
+
+宿主在禁用审批弹窗时仍提示“用户拒绝工具”的问题，详见 [DSH 审批归因补丁与回归测试](docs/APPROVAL-ATTRIBUTION.md)。
+
+**1.2.2 GitHub 预发布：**收录独立部署的宿主审批归因补丁和 14 项回归测试。插件输入与审批行为延续 1.2.1，详见 [发布内容及部署范围](docs/RELEASE-1.2.2.md)。GitHub 发布不会自动更新 npm 或市场版本。
+
 ## 它能做什么
 
 - **观察** —— 窗口列表、截图（区域 / JPEG / PNG / 降采样）、可点元素的 Set-of-Marks 编号图，
@@ -23,12 +35,35 @@
 
 ## 在 dsh-market 安装和更新
 
-搜索 **computer-use**，选择 **dsh-codex-style-computer-use**，作者 **ltmroberthk915**（npm 维护者 **ltmroberthk**），点击**安装**。以后直接点市场里的**更新**或**全部更新**。两份原生组件都已随包提供，无需终端、PowerShell 7、SDK 或手改构建白名单。
+市场收录同步后，搜索 **computer-use**，选择 **dsh-codex-style-computer-use**，作者 **ltmroberthk915**（npm 维护者 **ltmroberthk**），点击**安装**。以后通过市场的**更新**或**全部更新**安装符合宿主发布策略的版本。两份原生组件都已随包提供，无需 PowerShell 7、SDK 或构建白名单。
+
+目录尚未同步时，在 **设置 → 插件 → 添加插件** 输入修复版 **`dsh-codex-style-computer-use@1.2.1`**。正式标签提升前，省略版本号仍会装到 1.2.0。这里填 npm 包名即可；填写 GitHub 仓库网址会转为下载源码，容易受 GitHub 下载线路影响。默认非严格 pnpm 11.7.0 配置可以直接安装 1.2.1；宿主显式启用严格策略时，才可能需要等待冷却。首次新增 bundle 在官方桌面端可热加载；确认工具与 skill 已出现即可使用。替换已经加载的版本、客户端界面未刷新或界面明确提示 **restart-required / 需要重启** 时，再从托盘完整退出 DSH 并重新打开。
 
-目录尚未同步时，可在 **设置 → 插件 → 添加插件** 输入 `dsh-codex-style-computer-use` 安装；这同样是可由市场更新的 npm 安装。如果界面提示**需要重启**，从托盘彻底退出 DSH 后重新打开。
+### 发布未满 24 小时
+
+默认非严格 pnpm 11.7.0 配置会自动记录单版本例外并完成安装；“这台能装”不能推断另一台也允许安装新版本。
+
+只有在 `minimumReleaseAgeStrict: true`（或宿主显式启用严格冷却）、版本未满配置的冷却时间且没有匹配例外时，才会在插件代码运行前被拒绝。已实测在该策略下，裸包名、`dsh-codex-style-computer-use@1.2.0` 和 npm 的 tgz 下载地址都会报 `ERR_PNPM_NO_MATURE_MATCHING_VERSION`。在 pnpm 11.7.0 中，显式设置 `minimumReleaseAge: 1440` 也会启用严格行为，除非另行设置 `minimumReleaseAgeStrict: false`。重启 DSH、反复重装或安装 PowerShell 都不能解决严格策略的拒绝。官方桌面桥接不接受额外 pnpm 参数。
+
+**如果被严格策略拦截，无需改配置的做法是等待该版本满冷却时间后，再安装或更新。** 1.2.0 的 npm 发布时刻为 2026-10-03 11:50:11.586（北京时间），24 小时门槛在 **2026-10-04 11:50:12** 后满足。自定义更长冷却或镜像同步延迟仍以宿主提示为准。默认非严格配置的用户安装本包不需要等待，也不需要手动修改配置。
+
+若明确要在冷却期内安装，经确认后可在目标 profile 的 `pnpm-workspace.yaml` 中，将下面的**单个版本**合并进现有列表，再回到市场重试；不要覆盖原有项，也不需要把全局冷却设为 0：
+
+```yaml
+minimumReleaseAgeExclude:
+  - dsh-codex-style-computer-use@1.2.0
+```
+
+默认 desktop 文件位于 `%USERPROFILE%\.dsh\profiles\desktop\pnpm-workspace.yaml`；设置过 `DSH_HOME` 时以实际目录为准。例外仅限这个版本，过了冷却可删除该项。
+
+此前文档和发布检查修正没有改变 1.2.0 运行时，因此无需重装；**1.2.1 的原生提醒修复则需要更新版本**。某些安装路径重复添加同一来源会触发宿主的 `ambiguous-install`；重复安装 1.2.0 不会得到 1.2.1 的修复。
 
 **已有本仓库旧 Git/tgz 版本：**在市场卸载旧的 **dsh-computer-use**，再安装 **dsh-codex-style-computer-use**。npm 上的无 scope 包 `dsh-computer-use` 属于另一仓库，不能用作本插件的更新。旧 Git 依赖不会因仓库改名自动迁移；完成这一次界面内迁移后，后续使用普通市场更新即可。原有 `computer_*` 工具名与 `computer-use` 设置命名空间保留。
 
+**旧配置也要迁移：**先备份目标 profile 的 `cordis.patch.yml`，仅把 `id: computer-use` 覆盖项里的 `name: dsh-computer-use` 改为 `name: dsh-codex-style-computer-use`，保留整段 `config` 和 `disabled`。只保留设置命名空间并不足够：旧 name 不匹配时，DSH 会跳过覆盖项，连 `read-only`、`dryRun`、禁用状态也可能失效。不要全文替换其他插件或共享 home 层配置。可使用仓库的 `scripts/migrate-profile.mjs`：默认预览，`--apply` 才备份并原子写入，且会拒绝并发修改。
+
+也可下载 [配置迁移工具](https://github.com/ltmroberthk915/dsh-computer-use/releases/download/v1.2.0/computer-use-profile-migration.zip)，解压后双击 `migrate-profile.cmd`。它自动寻找已安装的官方 DSH，使用 Windows 自带的 PowerShell 5.1 和 DSH 自带的 Node，修复默认 desktop profile；新包未安装或旧 bundle 仍在时会停止。它不改变发布冷却策略。自定义 profile 可通过 `migrate-profile.ps1 -ProfileDirectory <完整目录>` 预览，确认后追加 `-Apply`。
+
 GitHub Release 仍提供 `dsh-computer-use.tgz`，供离线或手动安装。市场自动更新优先使用 npm 包。
 
 网页版的命令行安装方式：
@@ -37,6 +72,15 @@ GitHub Release 仍提供 `dsh-computer-use.tgz`，供离线或手动安装。市
 dsh plugin --profile web add dsh-codex-style-computer-use
 ```
 
+桌面版排障必须使用**官方桌面自带的入口**。例如默认安装目录可这样查询：
+
+```powershell
+$CuDshInstall = Join-Path $env:LOCALAPPDATA 'Programs\DeepSeek Harness'
+& "$CuDshInstall\resources\runtime\cli\bin\dsh.cmd" plugin --profile desktop why dsh-codex-style-computer-use
+```
+
+若安装在 D 盘等自定义位置，先将 `$CuDshInstall` 改成桌面快捷方式实际指向的安装目录。PATH 上旧 npm CLI 的 `dsh` 可能拒绝 desktop profile；不要把 `resources/runtime/bin` 加到全局 PATH，也无需自己安装 pnpm。GUI 安装仍是首选。
+
 ## 随包 skill
 
 驱动类工具会被锁住，直到会话给出那句只存在于 `skills/computer-use/SKILL.md` 里的回执短语。
@@ -116,6 +160,16 @@ node mcp/src/index.js
 
 ## 开发
 
+发布者检查默认查询 npm 官方源。若本地无法访问，可用 `CU_REGISTRY` 为只读的 `check` 命令指定镜像；JSON 输出会注明 `registry` 和 `authoritative`。PowerShell 示例（只影响当前终端）：
+
+```powershell
+$env:CU_REGISTRY = 'https://registry.npmmirror.com'
+node scripts/release-channel.mjs check 1.2.0
+Remove-Item Env:CU_REGISTRY
+```
+
+退出码 `0` 表示通过发布者的 24 小时检查，`2` 表示仍在冷却，`1` 表示检查失败。网络失败不代表版本未发布，镜像也可能尚未同步。`promote` 会忽略 `CU_REGISTRY`，始终向 `https://registry.npmjs.org` 重新检查并写入 `latest`，因此需要能访问官方源，必要时使用 npm 的代理配置。本工具只供发布者使用，普通用户安装不需要运行它。详见 [发布流程](docs/RELEASE-1.2.0.md)。
+
 仓库自带守卫套件，保护上面这些不变量——循环生命周期、提问/刹车协议、操作分类、skill 门禁，
 以及随包 skill 的注册接线：
 

package/lib/approval-attribution.js

@@ -0,0 +1,39 @@
+// Compatibility with hosts that conflate policy refusals and answerer refusals.
+// Delegate first so the host still owns every approval and durable audit pair.
+export function installApprovalAttribution (ctx, log) {
+  const tools = ctx.get('tools')
+  const original = tools?.serviceAsk
+  if (typeof original !== 'function') {
+    log.warn('approval attribution: host compatibility seam unavailable')
+    return
+  }
+  const ownDescriptor = Object.getOwnPropertyDescriptor(tools, 'serviceAsk')
+  const wrapped = async function (exec, ask) {
+    let policy
+    if (exec?.name?.startsWith('computer_') && exec.agent) {
+      const approval = this.ctx?.get?.('approval')
+      if (typeof approval?.effectivePolicy === 'function') policy = approval.effectivePolicy(exec.agent.session)
+    }
+    const result = await original.call(this, exec, ask)
+    // Newer/fixed hosts already provide their own reason. Only repair the exact
+    // known legacy attribution; never reinterpret cancellation or a grant.
+    if (!exec?.name?.startsWith('computer_') || result?.decision?.kind !== 'deny' ||
+        result.decision.reason !== `the user rejected tool "${exec.name}"`) return result
+    const reason = (policy === 'never'
+      ? `tool "${exec.name}" requires approval, but approval prompts are disabled in this session (approval policy: never); the request was automatically rejected without asking the user`
+      : `approval for tool "${exec.name}" was rejected by the approval channel`) +
+      (ask?.reason ? `; approval required because: ${ask.reason}` : '')
+    return { ...result, decision: { ...result.decision, reason } }
+  }
+  ctx.effect(() => {
+    tools.serviceAsk = wrapped
+    return () => {
+      // Cordis returns a traced callable on get(); compare the stored method,
+      // not that newly created callable, to identify our own replacement.
+      if (Object.getOwnPropertyDescriptor(tools, 'serviceAsk')?.value !== wrapped) return
+      if (ownDescriptor) Object.defineProperty(tools, 'serviceAsk', ownDescriptor)
+      else delete tools.serviceAsk
+    }
+  })
+  log.info('approval attribution: installed for computer-use; host approvals and audit retained')
+}

package/lib/attention-native.js

@@ -3,6 +3,7 @@ import path from 'node:path'
 import os from 'node:os'
 import { fileURLToPath } from 'node:url'
 import { spawn } from 'node:child_process'
+import { randomUUID } from 'node:crypto'
 import { prepareNativeBinary } from './core/native-runtime.js'
 
 export class AttentionNative {

package/lib/index.js

@@ -1,4 +1,5 @@
 import { installHumanAttention } from './attention.js'
+import { installApprovalAttribution } from './approval-attribution.js'
 // dsh-computer-use — DSH Cordis plugin
 //
 // Native DSH integration for computer use. Mirrors the @anweat/dsh-browser
@@ -438,6 +439,7 @@ export function apply (ctx, config) {
     return
   }
   if (!config.enabled) return
+  installApprovalAttribution(ctx, log)
   registerBundledSkill(ctx, log)
   raiseHuman = enableHumanAttention(ctx, log)
   // THE QUESTION SERVICE, INJECTED LAZILY (merge-design.md §5.3 item 16 — defence in depth).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-codex-style-computer-use",
-  "version": "1.2.0",
+  "version": "1.2.3",
   "description": "Codex-style Computer Use for DeepSeek Harness: Windows desktop control, screenshots, UI Automation, human input handoff, approval gates and prebuilt native workers. Install and update from dsh-market without PowerShell 7 or build steps.",
   "type": "module",
   "main": "lib/index.js",

package/scripts/migrate-profile.cmd

@@ -0,0 +1,8 @@
+@echo off
+setlocal
+echo Restoring saved Computer Use configuration after the package rename.
+echo A backup is created before changing the desktop profile.
+"%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -File "%~dp0migrate-profile.ps1" -Apply
+set "CU_RESULT=%ERRORLEVEL%"
+pause
+exit /b %CU_RESULT%

package/scripts/migrate-profile.mjs

@@ -0,0 +1,65 @@
+// Explicit one-time user-patch migration. No install hook and no plugin startup write.
+import fs from 'node:fs'
+import path from 'node:path'
+import { createRequire } from 'node:module'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+import { randomUUID } from 'node:crypto'
+
+export const OLD_NAME = 'dsh-computer-use'
+export const NEW_NAME = 'dsh-codex-style-computer-use'
+
+export function planMigration(source, yaml) {
+  const doc = yaml.parseDocument(source, { keepSourceTokens: true, uniqueKeys: true })
+  if (doc.errors.length) throw Error(`Invalid patch YAML: ${doc.errors[0].message}`)
+  if (!yaml.isSeq(doc.contents)) throw Error('The patch file must be a YAML list')
+  const replacements = [], unsupported = []
+  for (const item of doc.contents.items) {
+    if (!yaml.isMap(item) || item.get('id') !== 'computer-use') continue
+    const name = item.get('name', true)
+    if (!yaml.isScalar(name) || name.value !== OLD_NAME) continue
+    if (item.has('insert') || !name.range) { unsupported.push('A computer-use insert patch needs manual review'); continue }
+    replacements.push({ start: name.range[0], end: name.range[1], value: JSON.stringify(NEW_NAME) })
+  }
+  if (unsupported.length) throw Error(unsupported.join('; '))
+  let updated = source
+  for (const replacement of replacements.sort((a, b) => b.start - a.start)) updated = updated.slice(0, replacement.start) + replacement.value + updated.slice(replacement.end)
+  // Only exact name scalars are replaced; config values, disabled state, comments,
+  // other plugins, line endings and !!js expressions keep their original bytes.
+  return { source, updated, changes: replacements.length }
+}
+
+export async function applyMigration(filename, plan, atomic) {
+  if (!plan.changes) return { changed: false, changes: 0 }
+  return atomic.withFileLock(filename, async () => {
+    const stat = fs.lstatSync(filename)
+    if (!stat.isFile() || stat.isSymbolicLink()) throw Error('Refusing to replace a non-regular patch file')
+    if (fs.readFileSync(filename, 'utf8') !== plan.source) throw Error('The patch changed after inspection; read it again before applying')
+    const backup = `${filename}.before-computer-use-rename-${randomUUID()}.bak`
+    fs.writeFileSync(backup, plan.source, { flag: 'wx', mode: stat.mode & 0o777 })
+    await atomic.writeFileAtomic(filename, plan.updated, { mode: stat.mode & 0o777 })
+    return { changed: true, changes: plan.changes, backup }
+  })
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  try {
+    const args = process.argv.slice(2)
+    const value = key => { const i = args.indexOf(key); return i < 0 ? undefined : args[i + 1] }
+    const filename = value('--patch')
+    if (!filename || !path.isAbsolute(filename)) throw Error('Usage: migrate-profile.mjs --patch <absolute cordis.patch.yml> [--host-root <absolute DSH runtime>] [--apply]')
+    const host = value('--host-root') || path.join(path.dirname(process.execPath), 'resources/app.asar/dsh')
+    const require = createRequire(path.join(host, 'package.json'))
+    const yaml = require('yaml')
+    const atomic = await import(pathToFileURL(require.resolve('@deepseek-ai/dsh-atomic-write')).href)
+    const plan = planMigration(fs.readFileSync(filename, 'utf8'), yaml)
+    if (args.includes('--apply') && plan.changes) {
+      const profile = JSON.parse(fs.readFileSync(path.join(path.dirname(filename), 'package.json'), 'utf8'))
+      const bundles = profile.dsh?.profile?.bundles || []
+      if (!bundles.includes(NEW_NAME) || bundles.includes(OLD_NAME)) throw Error('Install the new bundle and remove the old bundle first; this tool only migrates one profile, never the shared home patch')
+      const installed = JSON.parse(fs.readFileSync(path.join(path.dirname(filename), 'node_modules', NEW_NAME, 'package.json'), 'utf8'))
+      if (installed.name !== NEW_NAME) throw Error('The new package identity does not match')
+    }
+    const result = args.includes('--apply') ? await applyMigration(filename, plan, atomic) : { changed: false, changes: plan.changes, preview: true }
+    console.log(JSON.stringify({ patch: filename, oldName: OLD_NAME, newName: NEW_NAME, ...result }, null, 2))
+  } catch (error) { console.error(error.message); process.exitCode = 1 }
+}

package/scripts/migrate-profile.ps1

@@ -0,0 +1,35 @@
+#Requires -Version 5.1
+param([switch]$Apply, [string]$DshInstall = '', [string]$ProfileDirectory = '')
+$ErrorActionPreference = 'Stop'
+$cuPreviousNodeMode = $env:ELECTRON_RUN_AS_NODE
+try {
+    if (-not $DshInstall) {
+        $cuCandidates = @(Join-Path $env:LOCALAPPDATA 'Programs/DeepSeek Harness')
+        foreach ($cuRegistry in @('HKCU:/Software/Microsoft/Windows/CurrentVersion/Uninstall/*', 'HKLM:/Software/Microsoft/Windows/CurrentVersion/Uninstall/*')) {
+            $cuEntries = Get-ItemProperty $cuRegistry -ErrorAction SilentlyContinue | Where-Object { $_.DisplayName -like 'DeepSeek Harness*' }
+            foreach ($cuEntry in $cuEntries) { if ($cuEntry.InstallLocation) { $cuCandidates += [string]$cuEntry.InstallLocation } }
+        }
+        $DshInstall = $cuCandidates | Where-Object { Test-Path -LiteralPath (Join-Path $_ 'DeepSeek Harness.exe') } | Select-Object -First 1
+    }
+    if (-not $DshInstall) { throw 'DSH Desktop was not found. Pass -DshInstall with its installation directory.' }
+    if (-not $ProfileDirectory) {
+        $cuDshDirectory = if ($env:DSH_HOME) { $env:DSH_HOME } else { Join-Path $env:USERPROFILE '.dsh' }
+        $ProfileDirectory = Join-Path $cuDshDirectory 'profiles/desktop'
+    }
+    $cuPatch = [IO.Path]::GetFullPath((Join-Path $ProfileDirectory 'cordis.patch.yml'))
+    if (-not (Test-Path -LiteralPath $cuPatch)) { throw "Profile patch not found: $cuPatch" }
+    $cuExecutable = Join-Path $DshInstall 'DeepSeek Harness.exe'
+    $cuScript = Join-Path $PSScriptRoot 'migrate-profile.mjs'
+    $cuArguments = @('--expose-internals', $cuScript, '--patch', $cuPatch)
+    if ($Apply) { $cuArguments += '--apply' }
+    $env:ELECTRON_RUN_AS_NODE = '1'
+    # Piping makes Windows PowerShell wait for Electron's GUI-subsystem exe.
+    & $cuExecutable @cuArguments | Out-Host
+    if ($LASTEXITCODE -ne 0) { throw "Migration failed (exit $LASTEXITCODE). No success is claimed; inspect the message above." }
+} catch {
+    Write-Host $_.Exception.Message -ForegroundColor Red
+    exit 1
+} finally {
+    if ($null -eq $cuPreviousNodeMode) { Remove-Item Env:ELECTRON_RUN_AS_NODE -ErrorAction SilentlyContinue }
+    else { $env:ELECTRON_RUN_AS_NODE = $cuPreviousNodeMode }
+}

package/scripts/patch-approval-attribution.mjs

@@ -0,0 +1,86 @@
+import fs from 'node:fs'
+import path from 'node:path'
+import { createHash } from 'node:crypto'
+import { fileURLToPath } from 'node:url'
+
+const automaticReason = 'the request was automatically rejected without asking the user'
+const channelReason = 'was rejected by the approval channel'
+
+function replaceOnce (source, before, after) {
+  if (source.split(before).length !== 2) throw new Error('Unsupported DSH tools source: missing or ambiguous patch anchor')
+  return source.replace(before, after)
+}
+
+/** Patch the compiled DSH 0.2.1-rc.2 tool runtime; policy and audit stay unchanged. */
+export function patchApprovalAttribution (source) {
+  const start = source.indexOf('\tasync serviceAsk(exec, ask) {')
+  const end = source.indexOf('\n\t/**', start)
+  if (start < 0 || end < start) throw new Error('Unsupported DSH tools source: serviceAsk not found')
+  const method = source.slice(start, end)
+  const originalReason = '\t\t\t\t\treason: `the user rejected tool "${exec.name}"`'
+  if (method.includes(automaticReason) && method.includes(channelReason) &&
+      method.includes('const approvalPolicy = approval.effectivePolicy(exec.agent.session);') &&
+      !method.includes(originalReason)) return { source, changed: false }
+  let patched = replaceOnce(method,
+    '\t\tconst outcome = await approval.request({',
+    '\t\tconst approvalPolicy = approval.effectivePolicy(exec.agent.session);\n\t\tconst outcome = await approval.request({')
+  patched = replaceOnce(patched, originalReason,
+    '\t\t\t\t\treason: (approvalPolicy === "never"\n' +
+    '\t\t\t\t\t\t? `tool "${exec.name}" requires approval, but approval prompts are disabled in this session (approval policy: never); the request was automatically rejected without asking the user`\n' +
+    '\t\t\t\t\t\t: `approval for tool "${exec.name}" was rejected by the approval channel`) + (ask.reason ? `; approval required because: ${ask.reason}` : "")')
+  // Replace the obsolete attribution comment; this also keeps the verified
+  // compiled module small enough for a separate fixed-layout ASAR deployment.
+  const docStart = source.lastIndexOf('\t/**\n\t* Resolve an `ask` decision', start)
+  if (docStart < 0) throw new Error('Unsupported DSH tools source: expected serviceAsk documentation')
+  const doc = '\t/**\n\t* Resolve asks through approval, retaining fail-closed behavior.\n\t* Snapshot policy before requesting: the never policy skips all answerers.\n\t* A channel rejection alone does not identify a human as its source.\n\t*/\n'
+  return { source: source.slice(0, docStart) + doc + patched + source.slice(end), changed: true }
+}
+
+/** Preserve the original UTF-8 byte length, using trailing whitespace only. */
+export function fixedLengthPayload (original, patched) {
+  const size = Buffer.byteLength(original)
+  const content = Buffer.from(patched)
+  if (content.length > size) throw new Error('Patched source exceeds the original byte length')
+  const output = Buffer.alloc(size, 0x20)
+  content.copy(output)
+  if (content.length < size) output[output.length - 1] = 0x0a
+  return output
+}
+
+function main (args) {
+  let input, output, fixedLength = false
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === '--input' || args[i] === '--output') {
+      const option = args[i], value = args[++i]
+      if (!value || value.startsWith('--')) throw new Error(`Missing value for ${option}`)
+      if (option === '--input') {
+        if (input) throw new Error('Duplicate --input')
+        input = path.resolve(value)
+      } else {
+        if (output) throw new Error('Duplicate --output')
+        output = path.resolve(value)
+      }
+    } else if (args[i] === '--fixed-length') fixedLength = true
+    else throw new Error(`Unknown option: ${args[i]}`)
+  }
+  if (!input) throw new Error('Usage: node scripts/patch-approval-attribution.mjs --input <extracted dsh-tools/lib/index.js> [--output <new file>] [--fixed-length]')
+  if (output === input) throw new Error('--output must be a new file; installation replacement is a separate step')
+  const original = fs.readFileSync(input, 'utf8')
+  const patch = patchApprovalAttribution(original)
+  const payload = fixedLength ? fixedLengthPayload(original, patch.source) : Buffer.from(patch.source)
+  if (output) fs.writeFileSync(output, payload, { flag: 'wx' })
+  const hash = bytes => createHash('sha256').update(bytes).digest('hex')
+  console.log(JSON.stringify({
+    status: patch.changed ? 'patched' : 'already-patched',
+    preview: !output,
+    originalBytes: Buffer.byteLength(original), patchedBytes: payload.length,
+    originalSha256: hash(Buffer.from(original)), patchedSha256: hash(payload),
+  }, null, 2))
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  try { main(process.argv.slice(2)) } catch (error) {
+    console.error(error.message)
+    process.exitCode = 1
+  }
+}

package/scripts/release-channel.mjs

@@ -0,0 +1,78 @@
+// Publisher tool. This file is never an npm lifecycle hook.
+import fs from 'node:fs'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { execFileSync } from 'node:child_process'
+
+export const PACKAGE = 'dsh-codex-style-computer-use'
+export const MIN_AGE_MS = 24 * 60 * 60 * 1000
+export const OFFICIAL_REGISTRY = 'https://registry.npmjs.org'
+
+// A mirror is useful for a read-only local check. Promotion must recheck and
+// write the authoritative registry, even when CU_REGISTRY remains in the shell.
+export function releaseRegistry(operation, override = process.env.CU_REGISTRY) {
+  if (operation === 'promote') return OFFICIAL_REGISTRY
+  if (operation !== 'check') throw Error('Expected check or promote')
+  let registry
+  try { registry = new URL(override?.trim() || OFFICIAL_REGISTRY) }
+  catch { throw Error('CU_REGISTRY must be an HTTPS registry URL') }
+  if (registry.protocol !== 'https:' || registry.username || registry.password || registry.search || registry.hash) {
+    throw Error('CU_REGISTRY must be an HTTPS registry URL without credentials, query or fragment')
+  }
+  return registry.href.replace(/\/+$/, '')
+}
+
+export function releaseReadiness(metadata, version, now = Date.now()) {
+  if (!/^\d+\.\d+\.\d+$/.test(version)) throw Error('Promotion requires an exact stable version, e.g. 1.2.1')
+  const manifest = metadata.versions?.[version]
+  if (manifest?.name !== PACKAGE || manifest.version !== version) throw Error('The requested published version is missing or has the wrong identity')
+  const repository = typeof manifest.repository === 'string' ? manifest.repository : manifest.repository?.url
+  if (repository?.replace(/^git\+/, '').replace(/\.git$/, '').replace(/\/$/, '') !== 'https://github.com/ltmroberthk915/dsh-computer-use') throw Error('Published repository identity does not match')
+  const publishedText = metadata.time?.[version]
+  const publishedAt = typeof publishedText === 'string' && /^\d{4}-\d{2}-\d{2}T/.test(publishedText) ? Date.parse(publishedText) : NaN
+  if (!Number.isFinite(publishedAt) || publishedAt > now) throw Error('Missing or invalid registry publication time; refusing promotion')
+  const latest = metadata['dist-tags']?.latest
+  if (latest && /^\d+\.\d+\.\d+$/.test(latest)) {
+    const a = version.split('.').map(Number), b = latest.split('.').map(Number)
+    for (let i = 0; i < 3; i++) {
+      if (a[i] < b[i]) throw Error('Refusing to move latest backwards')
+      if (a[i] > b[i]) break
+    }
+  }
+  const eligibleAt = publishedAt + MIN_AGE_MS
+  return { package: PACKAGE, version, ready: now >= eligibleAt, publishedAt: new Date(publishedAt).toISOString(), eligibleAt: new Date(eligibleAt).toISOString(), remainingSeconds: Math.max(0, Math.ceil((eligibleAt - now) / 1000)) }
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  const [operation, version] = process.argv.slice(2)
+  let registry
+  try {
+    if (!['check', 'promote'].includes(operation) || !/^\d+\.\d+\.\d+$/.test(version || '')) throw Error('Usage: node scripts/release-channel.mjs check|promote <stable-version>')
+    registry = releaseRegistry(operation)
+    const npm = path.join(path.dirname(process.execPath), 'node_modules/npm/bin/npm-cli.js')
+    if (!fs.existsSync(npm)) throw Error('Run this publisher command with the Node.js installation that includes npm')
+    const npmArgs = [`--registry=${registry}`, '--fetch-retries=0', '--fetch-timeout=20000']
+    const view = args => {
+      let stdout
+      try {
+        stdout = execFileSync(process.execPath, [npm, 'view', ...args, '--json', ...npmArgs], { encoding: 'utf8', windowsHide: true, stdio: ['ignore', 'pipe', 'pipe'] })
+      } catch (error) {
+        const code = String(error.stderr ?? '').match(/npm (?:error|ERR!) code ([A-Z0-9_]+)/i)?.[1] || error.code || error.status || 'unknown'
+        throw Error(`Registry query failed (${code}). Check network/proxy access and mirror synchronization; a failed query does not prove the package is unpublished. For a read-only check, set CU_REGISTRY to an accessible mirror. Promotion requires access to registry.npmjs.org.`)
+      }
+      try { return JSON.parse(stdout) }
+      catch { throw Error('Registry query did not return valid JSON; release readiness is unknown') }
+    }
+    const manifest = view([`${PACKAGE}@${version}`])
+    const metadata = { ...manifest, versions: { [version]: manifest } }
+    const verdict = { ...releaseReadiness(metadata, version), registry, authoritative: registry === OFFICIAL_REGISTRY }
+    console.log(JSON.stringify(verdict, null, 2))
+    if (!verdict.ready) { process.exitCode = 2 }
+    else if (operation === 'promote') {
+      execFileSync(process.execPath, [npm, 'dist-tag', 'add', `${PACKAGE}@${version}`, 'latest', ...npmArgs], { stdio: 'inherit', windowsHide: true })
+      const tag = view([PACKAGE, 'dist-tags.latest'])
+      if (tag !== version) throw Error('Registry latest did not match after promotion')
+      console.log(`Verified latest: ${PACKAGE}@${version}`)
+    }
+  } catch (error) { console.error(JSON.stringify({ operation, registry, error: error.message }, null, 2)); process.exitCode = 1 }
+}

package/scripts/smoke-native.mjs

@@ -23,10 +23,14 @@ try {
   assert.equal(typeof cursor.x, 'number')
   const shot = await cu.screenshot({ maxWidth: 320 })
   assert(shot.image.length > 100)
-  attention = new AttentionNative({ dataDir: path.join(scratch, 'attention') })
+  attention = new AttentionNative({ exe: path.join(scratch, 'absent-host.exe'), hostPid: 0, dataDir: path.join(scratch, 'attention') })
   assert.match(await attention.compile(), /prebuilt/)
   await attention.start()
-  console.log(JSON.stringify({ ok: true, pathEmpty: true, coldCache: true, prebuiltWorker: true, ping: true, screenshotBytes: shot.image.length, attentionReady: true }))
+  const probe = await attention.request('probe')
+  assert.equal(probe.status, 'no-window')
+  assert.equal(probe.visible, false)
+  assert.match(probe.requestId, /^[0-9a-f-]{36}$/i)
+  console.log(JSON.stringify({ ok: true, pathEmpty: true, coldCache: true, prebuiltWorker: true, ping: true, screenshotBytes: shot.image.length, attentionReady: true, attentionProbe: true }))
 } finally {
   await attention?.close()
   await cu?.kill()

package/scripts/verify-package.mjs

@@ -22,7 +22,7 @@ for (const [source, binary] of [
   assert.equal(manifest.platform, 'win32')
   assert.equal(manifest.architecture, 'x64')
 }
-for (const file of ['lib/index.js', 'lib/core/native-runtime.js', 'lib/attention-native.js', 'skills/computer-use/SKILL.md', 'mcp/src/index.js']) assert(fs.existsSync(path.join(root, file)), file)
+for (const file of ['lib/index.js', 'lib/approval-attribution.js', 'lib/core/native-runtime.js', 'lib/attention-native.js', 'skills/computer-use/SKILL.md', 'mcp/src/index.js']) assert(fs.existsSync(path.join(root, file)), file)
 const attention = fs.readFileSync(path.join(root, 'lib/attention-native.js'), 'utf8')
 assert(attention.includes("'./core/native-runtime.js'"), 'attention helper must use the bundled core')
 console.log(`ok package: ${pkg.name}@${pkg.version}; prebuilt helpers verified; no install hooks`)