dsh-codex-style-computer-use 2.2.7 → 2.2.9

package/README.md

@@ -1,5 +1,7 @@
 # Codex-style Computer Use
 
+[![开放插件市场](https://img.shields.io/endpoint?url=https%3A%2F%2Fdshopen.org%2Fbadge%2Fdsh-codex-style-computer-use.json)](https://dshopen.org/zh/plugins/dsh-codex-style-computer-use/)
+
 **The most precise way to drive Windows from DeepSeek Harness — and the cheapest per task.**
 
 Describe the goal. Your agent reads exact control identities, acts through the controls themselves, verifies the result — and finishes a known sequence in one model round trip instead of ten.

package/README.zh.md

@@ -1,5 +1,7 @@
 # Codex 风格 Computer Use
 
+[![开放插件市场](https://img.shields.io/endpoint?url=https%3A%2F%2Fdshopen.org%2Fbadge%2Fdsh-codex-style-computer-use.json)](https://dshopen.org/zh/plugins/dsh-codex-style-computer-use/)
+
 **全市场最精准的 Windows 桌面操控，也是单个任务成本最低的。**
 
 你描述目标，AI 读准控件身份、按真实控件执行、回读结果——一段已知流程一轮模型往返就跑完，而不是每个动作各花一轮。

package/lib/core/bin/dsh-computer-use-worker.exe.json

@@ -2,6 +2,6 @@
   "format": 1,
   "platform": "win32",
   "architecture": "x64",
-  "sourceSha256": "2d2ff71a50d48fede11a11518c65da4cf69f66707e1e4fecbc77d05efe34688c",
-  "binarySha256": "efa81f7a9d87acbc7a2133e234d3357f1793a1ffa5a36d93e70a3e08d845db36"
+  "sourceSha256": "327d3f04c983bfffd22b26d852364224eca839a6110c48379a815757d7312b70",
+  "binarySha256": "baed6576f360f9dc777a0c8e718bb82b4edec40593b077e887d0fcc31fd74452"
 }

package/lib/core/worker.cs

@@ -4938,6 +4938,12 @@ namespace DshComputerUse.Worker
                 // no button), so it is allowed even while the brake is on — which is exactly when
                 // you want to ask "would this click land where I think?" before re-arming. It must
                 // never THROW: a failed precondition is the answer it was asked for.
+                // A host click that passed GuardHostDriving (debug mode + full permission) must not
+                // fall through to the generic `blocked != null` refusal below: the gate ALLOWS it,
+                // while `blocked` still carries the preliminary "HOST-GUARDED" label. Clearing both
+                // fields here is what makes the two gates actually usable (the 2026-11-09 report:
+                // host-debug ON, danger-full-access, click still refused as HOST-GUARDED).
+                bool hostClickAllowed = hostVictim && HostDrivingAllowed();
                 if (dryRun)
                 {
                     Dictionary<string, object> dry = Dict(
@@ -4945,11 +4951,17 @@ namespace DshComputerUse.Worker
                         "receives", under == IntPtr.Zero ? null : (object)(Short(WinTitleOf(under), 50) + " (pid " + PidOf(under) + ")"),
                         "receivesHwnd", under.ToInt64(),
                         "expected", want == IntPtr.Zero ? null : (object)(Short(WinTitleOf(want), 50) + " (pid " + PidOf(want) + ")"),
-                        "wouldBlock", blocked,
-                        "verdict", detail == null ? "ok — the pixel belongs to the intended window" : (blocked + ": " + detail));
+                        "wouldBlock", hostClickAllowed ? null : blocked,
+                        "verdict", hostClickAllowed ? "ok — host-driving gates are open for this click"
+                            : detail == null ? "ok — the pixel belongs to the intended window" : (blocked + ": " + detail));
                     return dry;
                 }
-                if (hostVictim) GuardHostDriving(unchecked((int)PidOf(under)), "click");
+                if (hostVictim)
+                {
+                    GuardHostDriving(unchecked((int)PidOf(under)), "click");
+                    blocked = null;
+                    detail = null;
+                }
                 bool allowCovered = GetB(a, "allowCovered", false);
                 // NARROWED (2026-11-07): allowCovered is an escape for the target app's OWN embedded
                 // renderer only. It used to authorise the click whatever owned the pixel, so an

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-codex-style-computer-use",
-  "version": "2.2.7",
+  "version": "2.2.9",
   "description": "Codex-style Computer Use for DeepSeek Harness: Windows desktop control, screenshots, UI Automation, human input handoff, approval gates and prebuilt native workers. Install and update from dsh-market without PowerShell 7 or build steps.",
   "type": "module",
   "main": "lib/index.js",
@@ -11,7 +11,8 @@
   "exports": {
     ".": "./lib/index.js",
     "./package.json": "./package.json",
-    "./cordis.patch.yml": "./cordis.patch.yml"
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./client": "./client.js"
   },
   "files": [
     "icon.svg",

package/scripts/check-behavior.mjs

@@ -32,7 +32,7 @@ const excluded = {
 }
 const reviewed = new Set([
   'action-feedback', 'agent-pointer', 'approval-attribution', 'ask-invariants', 'ask-merge', 'ask-orphan', 'ask-release',
-  'attention-native', 'attention', 'audit-completion', 'batch-coverage', 'buildusermessage', 'bundled-skill',
+  'attention-native', 'attention', 'audit-completion', 'batch-coverage', 'buildusermessage', 'bundled-skill', 'client-export',
   'coactive', 'compact-feedback', 'control-targets', 'core-system-recovery', 'cursor', 'cycle-completion',
   'cycle-no-timeout', 'cycle-open', 'desktop-acceptance-io', 'desktop-ownership', 'drag-options', 'evidence-protocol',
   'exit-coherence', 'feedback-cache-integration', 'feedback-policy', 'glow-pump', 'glow-visual', 'handoff-continuation',

package/scripts/verify-package.mjs

@@ -6,6 +6,14 @@ const root = path.resolve(process.argv[2] || path.join(import.meta.dirname, '..'
 const pkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'))
 assert.equal(pkg.name, 'dsh-codex-style-computer-use')
 assert.equal(pkg.dsh?.bundle?.patch, './cordis.patch.yml')
+// dsh-client-modules discovers the settings bundle through exports["./client"]; without it the
+// client.js below becomes a silent dead file and the settings section never appears.
+assert.equal(pkg.dsh?.client?.platform, 'web', 'dsh.client platform must be web')
+const clientExport = pkg.exports?.['./client']
+assert.ok(clientExport, 'exports["./client"] is required for the settings client bundle')
+const clientTarget = typeof clientExport === 'string' ? clientExport : clientExport?.default
+assert.equal(clientTarget, './client.js', 'exports["./client"] must resolve to ./client.js')
+assert(fs.existsSync(path.join(root, 'client.js')), 'client.js is missing')
 assert.equal(pkg.packageManager, undefined, 'git installs must not invoke a nested package manager')
 for (const hook of ['prepare', 'prepack', 'prepublish', 'prepublishOnly', 'preinstall', 'install', 'postinstall']) assert.equal(pkg.scripts?.[hook], undefined, hook)
 const patch = fs.readFileSync(path.join(root, 'cordis.patch.yml'), 'utf8')