dsh-macos-computer-use

DeepSeek Harness (dsh) bundle bridging dsh agents to the macos-computer-use-kit macos-cu CLI: AX-first computer use on macOS.

The plugin registers eleven focused tools that shell out to macos-cu with an argument array (never shell-string concatenation) and return the CLI's JSON output:

Tool	CLI call	Purpose
macos_cu_doctor	macos-cu doctor	Permissions/displays/deps/OCR/policy/Jev diagnostics — run first
macos_ax_find	macos-cu ax find|tree|snapshot	Semantic element lookup with exact geometry and stable refs
macos_ax_press	macos-cu ax press|setvalue|focus	Native AX action by ref with read-back verification
macos_input_click	macos-cu input click	Background click that never moves the user's cursor
macos_type	macos-cu input type	Unicode typing (CJK/emoji safe, clipboard untouched)
macos_key	macos-cu input key	Keys and chords; lock / log-out / force-quit refused
macos_app	macos-cu app	List, launch, activate, hide, quit apps; open URLs and files
macos_menu	macos-cu menu list|select	Menu bar by path, with the app in the background
macos_shot	macos-cu shot capture|check|windows|annotate	Blank-frame-checked screenshots and set-of-mark labels
macos_ocr	macos-cu ocr	On-device OCR with screen coordinates when AX is empty
macos_jev_guard	macos-cu jev guard|select	Optional Jev semantic guard before an irreversible action (needs TYPESAFE_API_KEY)

The AX-first intent is baked into every tool description: locate elements via macos_ax_find and use the returned geometry — use instead of guessing coordinates from a screenshot.

Install

From a profile (npm registry):

dsh plugin --profile <name> add dsh-macos-computer-use

From git sources (builds lib/ via the prepare script — allowlist the build when pnpm asks, then re-run the add):

dsh plugin --profile <name> add github:Sur-Cai/macos-computer-use-kit#packages/dsh

From a tarball (prebuilt, no build permission needed):

npm pack ./packages/dsh
dsh plugin --profile <name> add ./dsh-macos-computer-use-<version>.tgz

Verify the layer without booting, then boot:

dsh --profile <name> --dump-config   # shows a "# == dsh-macos-computer-use" layer
dsh --profile <name>

Prerequisites

• macOS (AX, CGEvent, and ScreenCaptureKit are macOS APIs).
• The macos-cu binary on PATH: pip install macos-computer-use-kit (or run from a checkout; override with MACOS_CU_BIN=/path/to/macos-cu). Every tool detects a missing binary and returns this instruction instead of failing obscurely.
• One-time macOS grants for the process hosting dsh: Accessibility (AX reads, AXPress, setValue, posted events) and Screen Recording (shot, otherwise every frame is black). macos_cu_doctor reports both.
• Optional: TYPESAFE_API_KEY for macos_jev_guard (the CLI's macos-cu jev guard|select). Everything else works without it.

Computer-use slot decision

This bundle only adds tools; it deliberately does NOT call ctx.computerUse.register() and therefore does not claim the single provider slot (@deepseek-ai/dsh-computer-use rejects any second provider):

• The bridge shells out to an external macOS-only CLI rather than implementing a provider-owned tool catalog and desktop-operation lifecycle, so it cannot honor the provider contract (stop tools and await owned work before releasing the registration).
• Claiming the exclusive slot would block Cua Driver (or any other) provider in the same composition on machines where this bundle is installed but unusable (non-macOS hosts, missing permissions).
• Users who want exclusivity can coordinate at the composition level; nothing here prevents a future native provider from registering the slot.

Development

cd packages/dsh
npm install
npm run build      # tsc -> lib/ (also runs automatically as `prepare` on git installs)
npm run typecheck

lib/ is built output and is not committed; npm installs from the registry ship it prebuilt, while git installs rebuild it via prepare (self-contained tsc, no monorepo project references).

License: MIT (see LICENSE).