refactor(paths): collapse harness home resolution into one resolver

Delete @deepseek-ai/dsh-home and make dsh-paths the sole owner of the
single-root harness home ($DSH_HOME || ~/.dsh). Migrate tool-bash,
skill-local, and agent-spine-demo off dsh-home, and fold telemetry's
divergent globalConfigDir onto the shared resolver, dropping its second
XDG/APPDATA policy and the deepseek-harness namespace so the anonymous
id lives under the harness home. Add dshHomeDisplay() for symbolic
user-facing paths, replacing workspace-context's bespoke check.

packages/sdk/telemetry/README.md

@@ -7,7 +7,7 @@ Launcher-side telemetry primitives for the dsh-sdk toolchain. This is a plain li
 | `SecretRedactor` | Conservative safety backstop: replaces secret-shaped values (secret-like keys, known token shapes, PEM blocks, URL credentials, high-entropy opaque tokens) with a placeholder in both parsed values (`redactValue`) and raw text (`redactText`). Never drops a field or line. |
 | `ConsentResolver` | Parses (never boots) a project `cordis.yml` and reads the telemetry entry's enabled/disabled state as consent; `DO_NOT_TRACK`/CI env force a hard opt-out. |
 | `buildTelemetryPayload` | Assembles `{command, durationMs, success, cordisYmlContent, packageJsonContent}`, running the redactor over the full `cordis.yml` and `package.json` text. Never reads `.env`; `package.json` ships only alongside a `cordis.yml`, so a command run in a non-SDK directory never uploads that directory's unrelated manifest. |
-| `getOrCreateAnonymousId` | Random UUID persisted in a per-user GLOBAL config file (never in the project, never derived from git). |
+| `getOrCreateAnonymousId` | Random UUID persisted in the per-user harness home resolved by [`@deepseek-ai/dsh-paths`](../../util/paths/README.md) (never in the project, never derived from git). |
 | `TelemetryReporter` | Fire-and-forget send: `report()` never blocks or throws; delivery resolves on every path; `flush()` optionally drains in-flight sends within a cap. |
 
 Consent is carried by the telemetry entry in `cordis.yml`, so disabling telemetry is disabling that entry. Telemetry reports by default and is off only when a present telemetry entry is explicitly `disabled`: a missing `cordis.yml` (first `create`), an enabled entry, or a `cordis.yml` with no telemetry entry all report. `DO_NOT_TRACK`/CI always deny. The no-config and absent-entry defaults are configurable on `ConsentResolver`.

packages/sdk/telemetry/package.json

@@ -26,10 +26,12 @@
   },
   "peerDependencies": {
     "@deepseek-ai/dsh-brand": "^0.0.1",
+    "@deepseek-ai/dsh-paths": "^0.0.1",
     "cordis": "^4.0.0-rc.7"
   },
   "devDependencies": {
     "@deepseek-ai/dsh-brand": "workspace:^",
+    "@deepseek-ai/dsh-paths": "workspace:^",
     "cordis": "^4.0.0-rc.7"
   }
 }

packages/sdk/telemetry/src/anonymous-id.ts

@@ -1,7 +1,7 @@
 /**
  * Per-machine anonymous telemetry id.
  *
- * The id is a random UUID persisted in a per-user GLOBAL config file — never in
+ * The id is a random UUID persisted in the per-user harness home — never in
  * the project, and never derived from the git remote, repository URL, or any
  * other identifying source (a derived id would make "anonymous" a fiction). The
  * same id is reused across projects on one machine so telemetry counts machines,
@@ -12,52 +12,36 @@
 
 import { randomUUID } from 'node:crypto'
 import { mkdir, readFile, writeFile } from 'node:fs/promises'
-import { homedir } from 'node:os'
 import { dirname, join } from 'node:path'
 import type { Branded } from '@deepseek-ai/dsh-brand'
+import { resolveDshHome } from '@deepseek-ai/dsh-paths'
 
 /** A machine-scoped anonymous telemetry id (random UUID v4). */
 export type AnonymousId = Branded<'AnonymousId'>
 
-/** Config directory name owned by the DeepSeek Harness across tools. */
-const CONFIG_NAMESPACE = 'deepseek-harness'
-
-/** Default file, inside the global config dir, storing the anonymous id. */
+/** Default file, inside the harness home, storing the anonymous id. */
 export const ANONYMOUS_ID_FILE_NAME = 'telemetry.json'
 
 const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i
 
 /** Ambient seams for locating and generating the id; every field has a default. */
 export interface AnonymousIdOptions {
-  /** Environment consulted for `DSH_CONFIG_HOME`/`XDG_CONFIG_HOME`/`APPDATA`; defaults to `process.env`. */
+  /** Environment consulted for `DSH_HOME`; defaults to `process.env`. */
   env?: NodeJS.ProcessEnv
-  /** Platform string used to pick the Windows path; defaults to `process.platform`. */
-  platform?: NodeJS.Platform
-  /** Home directory resolver; defaults to `os.homedir`. */
-  homeDir?: () => string
   /** UUID generator; defaults to `crypto.randomUUID` (test seam). */
   randomUUID?: () => string
 }
 
 /**
- * Resolve the per-user global config directory for harness tooling.
- * Precedence: `DSH_CONFIG_HOME` (explicit override) > `XDG_CONFIG_HOME` >
- * platform default (`%APPDATA%` on Windows, else `~/.config`).
- * @param options - environment, platform, and home-directory seams.
- * @returns absolute config directory path for the harness namespace.
+ * Resolve the single-root harness home that stores the anonymous id.
+ * Delegates to {@link resolveDshHome} so telemetry shares the harness's one
+ * home-resolution policy (`DSH_HOME` > `~/.dsh`) instead of maintaining a
+ * second config-directory convention.
+ * @param options - environment seam.
+ * @returns absolute harness home path.
  */
 export function globalConfigDir(options: AnonymousIdOptions = {}): string {
-  const env = options.env ?? process.env
-  const platform = options.platform ?? process.platform
-  const home = options.homeDir ?? homedir
-  if (env.DSH_CONFIG_HOME !== undefined && env.DSH_CONFIG_HOME.length > 0) return env.DSH_CONFIG_HOME
-  if (env.XDG_CONFIG_HOME !== undefined && env.XDG_CONFIG_HOME.length > 0) {
-    return join(env.XDG_CONFIG_HOME, CONFIG_NAMESPACE)
-  }
-  if (platform === 'win32' && env.APPDATA !== undefined && env.APPDATA.length > 0) {
-    return join(env.APPDATA, CONFIG_NAMESPACE)
-  }
-  return join(home(), '.config', CONFIG_NAMESPACE)
+  return resolveDshHome(undefined, options.env ?? process.env)
 }
 
 /** Read a valid persisted id from the store, or `undefined` when absent/corrupt. */

packages/sdk/telemetry/tests/anonymous-id.spec.ts

@@ -1,6 +1,7 @@
 import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
-import { join } from 'node:path'
+import { join, resolve } from 'node:path'
+import { defaultDshHome } from '@deepseek-ai/dsh-paths'
 import { afterEach, describe, expect, it } from 'vitest'
 import {
   ANONYMOUS_ID_FILE_NAME,
@@ -23,37 +24,24 @@ afterEach(async () => {
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i
 
 describe('globalConfigDir', () => {
-  it('prefers an explicit DSH_CONFIG_HOME override', () => {
-    expect(globalConfigDir({ env: { DSH_CONFIG_HOME: '/custom/dsh' } })).toBe('/custom/dsh')
+  it('prefers an explicit DSH_HOME override', () => {
+    expect(globalConfigDir({ env: { DSH_HOME: '/custom/dsh' } })).toBe('/custom/dsh')
   })
 
-  it('falls back to XDG_CONFIG_HOME under the harness namespace', () => {
-    expect(globalConfigDir({ env: { XDG_CONFIG_HOME: '/xdg' } })).toBe(join('/xdg', 'deepseek-harness'))
-  })
-
-  it('uses %APPDATA% on Windows', () => {
-    expect(globalConfigDir({ env: { APPDATA: 'C:/Users/x/AppData/Roaming' }, platform: 'win32' }))
-      .toBe(join('C:/Users/x/AppData/Roaming', 'deepseek-harness'))
-  })
-
-  it('falls back to ~/.config on Windows without APPDATA and on posix', () => {
-    const home = () => '/home/dev'
-    expect(globalConfigDir({ env: {}, platform: 'win32', homeDir: home }))
-      .toBe(join('/home/dev', '.config', 'deepseek-harness'))
-    expect(globalConfigDir({ env: {}, platform: 'linux', homeDir: home }))
-      .toBe(join('/home/dev', '.config', 'deepseek-harness'))
+  it('falls back to ~/.dsh when DSH_HOME is unset', () => {
+    expect(globalConfigDir({ env: {} })).toBe(resolve(defaultDshHome()))
   })
 
   it('reads process.env by default', () => {
     // No override supplied: the call must not throw and must return an absolute path.
-    expect(globalConfigDir()).toContain('deepseek-harness')
+    expect(globalConfigDir()).toContain('.dsh')
   })
 })
 
 describe('getOrCreateAnonymousId', () => {
   it('creates, persists, and returns a UUID on first use', async () => {
     const dir = await tempDir()
-    const id = await getOrCreateAnonymousId({ env: { DSH_CONFIG_HOME: dir } })
+    const id = await getOrCreateAnonymousId({ env: { DSH_HOME: dir } })
     expect(id).toMatch(UUID)
     const stored: unknown = JSON.parse(await readFile(join(dir, ANONYMOUS_ID_FILE_NAME), 'utf8'))
     expect(stored).toEqual({ anonymousId: id })
@@ -61,15 +49,15 @@ describe('getOrCreateAnonymousId', () => {
 
   it('returns the same persisted id on subsequent calls', async () => {
     const dir = await tempDir()
-    const first = await getOrCreateAnonymousId({ env: { DSH_CONFIG_HOME: dir } })
-    const second = await getOrCreateAnonymousId({ env: { DSH_CONFIG_HOME: dir } })
+    const first = await getOrCreateAnonymousId({ env: { DSH_HOME: dir } })
+    const second = await getOrCreateAnonymousId({ env: { DSH_HOME: dir } })
     expect(second).toBe(first)
   })
 
   it('uses the injected UUID generator', async () => {
     const dir = await tempDir()
     const id = await getOrCreateAnonymousId({
-      env: { DSH_CONFIG_HOME: dir },
+      env: { DSH_HOME: dir },
       randomUUID: () => '00000000-0000-4000-8000-000000000000',
     })
     expect(id).toBe('00000000-0000-4000-8000-000000000000')
@@ -78,23 +66,23 @@ describe('getOrCreateAnonymousId', () => {
   it('regenerates when the stored file is corrupt JSON', async () => {
     const dir = await tempDir()
     await writeFile(join(dir, ANONYMOUS_ID_FILE_NAME), 'not json', 'utf8')
-    const id = await getOrCreateAnonymousId({ env: { DSH_CONFIG_HOME: dir } })
+    const id = await getOrCreateAnonymousId({ env: { DSH_HOME: dir } })
     expect(id).toMatch(UUID)
   })
 
   it('regenerates when the stored value is not a valid UUID or object', async () => {
     const dir = await tempDir()
     await writeFile(join(dir, ANONYMOUS_ID_FILE_NAME), JSON.stringify({ anonymousId: 'nope' }), 'utf8')
-    expect(await getOrCreateAnonymousId({ env: { DSH_CONFIG_HOME: dir } })).toMatch(UUID)
+    expect(await getOrCreateAnonymousId({ env: { DSH_HOME: dir } })).toMatch(UUID)
     await writeFile(join(dir, ANONYMOUS_ID_FILE_NAME), '123', 'utf8')
-    expect(await getOrCreateAnonymousId({ env: { DSH_CONFIG_HOME: dir } })).toMatch(UUID)
+    expect(await getOrCreateAnonymousId({ env: { DSH_HOME: dir } })).toMatch(UUID)
   })
 
   it('returns a usable id even when persistence fails', async () => {
     const dir = await tempDir()
     // A regular file where a directory is expected makes mkdir/writeFile fail.
     await writeFile(join(dir, 'blocker'), 'x', 'utf8')
-    const id = await getOrCreateAnonymousId({ env: { DSH_CONFIG_HOME: join(dir, 'blocker') } })
+    const id = await getOrCreateAnonymousId({ env: { DSH_HOME: join(dir, 'blocker') } })
     expect(id).toMatch(UUID)
   })
 })

packages/sdk/telemetry/tsconfig.json

@@ -8,6 +8,7 @@
     "src"
   ],
   "references": [
-    { "path": "../../util/brand" }
+    { "path": "../../util/brand" },
+    { "path": "../../util/paths" }
   ]
 }