@kinocode/dsh-lcu
日本語 | English
LCU (Codex computer use, decoupled from the Codex app) as a
DeepSeek Harness plugin. The agent gets
mcp__lcu__js / mcp__lcu__js_reset to read and operate native macOS apps.
DSH's stock dsh-mcp-client cannot answer LCU's per-app approval requests (MCP elicitation), so a plain
MCP mount fails with createElicitation is unavailable. This plugin launches LCU behind a small adapter
(lib/adapter.mjs) that handles approval.
Requirements
- macOS (Apple Silicon) with the official ChatGPT desktop app installed
- LCU installed, e.g.
~/.local/share/lcu (installation guide); --runtime-only is enough
- macOS permissions: Accessibility (ChatGPT Computer Use) and Screen Recording (ChatGPT)
Install
dsh plugin --profile desktop add @kinocode/dsh-lcu
Restart DSH and start a new session. Other LCU location: set prefix (below) or LCU_PREFIX.
Approval modes
Set in your profile patch:
- id: lcu
config:
approval: ask # ask (default) | all | deny
approval | Behavior |
|---|
ask | A macOS dialog asks you: Deny / Allow this time / Always allow (Touch ID, same as lcu apps allow). Closed, timed out, or answered faster than a human → denied |
all | Approve every app without asking |
deny | Always deny |
In every mode the adapter refuses apps the agent could use to approve itself: DSH, terminals, Claude,
osascript / System Events. Other config: prefix, toolCallTimeoutMs.
What the adapter does
- Exposes only
js and js_reset (host-only tools such as turn_ended are hidden)
- Saves screenshots as files under
$TMPDIR/dsh-lcu-shots/ and returns the path (view with read_image),
because the MCP client turns images into placeholders
- Reconnects to LCU on the next call if it exits
Safety
all lets the agent operate any app, including browsers and password managers. Prefer ask.
This is an unofficial community plugin; it is not affiliated with OpenAI or amontlabs. The ChatGPT app and
its runtime keep their own terms; this package contains neither.
License
MIT
