ns-zzj/dsh-scrcpy-core

ns-zzj/dsh-scrcpy-core is a DeepSeek Harness (DSH) desktop plugin core package, published on npm as @nszzj/dsh-scrcpy-core and self-described as the single facade for both users and AI. It is a bundle-layer plugin with dsh.bundle plus dsh.client declared in its package.json, and it ships a cordis.patch.yml that only inserts its own loader entry. The core itself recognizes no device platform: it owns the per-device tabbed screen-mirroring UI, jmuxer decoding, AI tool registration, prompt authoring, the four-gate permission model, focused-device state, and command routing. Actual device transport is delegated to provider packages — dsh-hos-scrcpy for HarmonyOS via hdc plus a Java sidecar using the HOScrcpy SDK, and dsh-android-scrcpy for Android via adb plus the official scrcpy-server.

Installation on the desktop profile must go through the in-app plugin panel because dsh plugin --profile desktop is rejected by the CLI with "profile 'desktop' is managed exclusively by the Electron application." The panel accepts an npm package name, a local .tgz path, or a github: spec, and both core plus the chosen platform provider must be installed together. For other CLI profiles such as web, the command dsh plugin --profile <profile> add dsh-scrcpy-core dsh-hos-scrcpy (or dsh-android-scrcpy) followed by restarting dsh web makes a "scrcpy menu" appear in the session header. The web GUI mostly works since the client half is browser code and RPC travels over the local HTTP loopback, yet it is not fully verified and the desktop build is the supported reference.

The AI tool surface is registered exactly once with neutral names: scrcpy_devices lists devices, the focused unit, and per-device permission states; scrcpy_screenshot captures and runs the bundled vision model; scrcpy_locate returns the control tree with normalized 0..1 coordinates; scrcpy_tap, scrcpy_longpress, scrcpy_key, and scrcpy_input execute taps, long-presses, provider-declared keys (Android currently back/home), and text injection into the focused input field including Chinese. All tools explicitly error when no device is focused and never guess. Each device independently gates four permissions — screenshot, control, key, and input — across three states: forbidden, require confirmation, or no confirmation, with control/key/input depending on screenshot. Typical users are DSH agents and humans running visual understanding, UI automation, or remote-assist flows against HarmonyOS or Android phones.

Dependencies and operational caveats: three packages version and install independently, providers declare a coreCompat string such as "1.0.0", "^1.0.0", or ">=1.0.0", and only core decides compatibility — failing providers are disabled without affecting siblings, and no provider-version table is maintained. Installing a provider without core leaves it pending (waiting for service: scrcpyProviders), which is by design, silent, and unusable. On desktop, enabling a plugin is hot while disabling is persistent but only takes effect after a restart, though dependencies are kept so re-enabling requires no reinstall. The Android provider has no log stream yet, the HarmonyOS provider exposes hilog, mirroring is change-driven so idle frames do not advance, and HarmonyOS pushes frames only on change. Android supports a real UHID external keyboard with on-device IME candidate selection, while HarmonyOS uses uinput whose IME feeding is untested. The repo is MIT-licensed.