@chorus-aidlc/chorus 0.16.3 → 0.17.0

package/.next/standalone/public/skill/orchestrate-chorus/SKILL.md

@@ -4,7 +4,7 @@ description: Multi-agent orchestration playbook — coordinate OTHER agents and
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.16.3"
+  version: "0.17.0"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/skill/proposal-chorus/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus Proposal workflow — create proposals with document and tas
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.16.3"
+  version: "0.17.0"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/skill/proposal-reviewer-chorus/SKILL.md

@@ -4,7 +4,7 @@ description: Read-only adversarial Chorus proposal reviewer — audits PRD/task
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.16.3"
+  version: "0.17.0"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/skill/quick-dev-chorus/SKILL.md

@@ -4,7 +4,7 @@ description: Quick Task workflow — skip Idea→Proposal, create tasks directly
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.16.3"
+  version: "0.17.0"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/skill/review-chorus/SKILL.md

@@ -4,7 +4,7 @@ description: Chorus Review workflow — approve/reject proposals, verify tasks,
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.16.3"
+  version: "0.17.0"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/skill/task-reviewer-chorus/SKILL.md

@@ -4,7 +4,7 @@ description: Read-only adversarial Chorus task reviewer — independently verifi
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.16.3"
+  version: "0.17.0"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/skill/yolo-chorus/SKILL.md

@@ -4,7 +4,7 @@ description: Full-auto AI-DLC pipeline — drive a single prompt from Idea throu
 license: AGPL-3.0
 metadata:
   author: chorus
-  version: "0.16.3"
+  version: "0.17.0"
   category: project-management
   mcp_server: chorus
 ---

package/.next/standalone/public/test-dsh-credentials.sh

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+# Tests for public/dsh-credentials.sh — now a DEPRECATION STUB that redirects to
+# `chorus agents add`. Verifies the stub shape: a non-interactive run names the
+# replacement command, prints a deprecation notice, exits non-zero, and writes
+# NO $DSH_HOME/.env (installs/writes nothing). Bash 3.2 compatible.
+set -uo pipefail
+
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+SCRIPT="$HERE/dsh-credentials.sh"
+fail=0
+
+ok() { printf 'ok   %s\n' "$1"; }
+no() { printf 'FAIL %s\n' "$1"; fail=1; }
+
+# 1. Non-interactive (no TTY): prints the chorus agents add command + deprecation
+#    notice, exits non-zero, and writes no .env. stdin from /dev/null and stdout
+#    captured (command substitution) → neither is a TTY → print-and-fail path.
+T="$(mktemp -d)"
+out="$(env -u CHORUS_URL -u CHORUS_API_KEY DSH_HOME="$T" bash "$SCRIPT" </dev/null 2>&1)"
+rc=$?
+[ "$rc" -ne 0 ] && ok "exits non-zero when non-interactive" || no "exits non-zero when non-interactive"
+printf '%s\n' "$out" | grep -q 'npm install -g @chorus-aidlc/chorus' && ok "names npm install -g @chorus-aidlc/chorus" || no "names npm install -g @chorus-aidlc/chorus"
+printf '%s\n' "$out" | grep -q 'chorus agents add' && ok "names chorus agents add" || no "names chorus agents add"
+printf '%s\n' "$out" | grep -qi 'deprecat' && ok "prints a deprecation notice" || no "prints a deprecation notice"
+[ ! -f "$T/.env" ] && ok "writes no .env" || no "writes no .env"
+rm -rf "$T"
+
+# 2. Even with CHORUS_URL/CHORUS_API_KEY set, the stub installs nothing: it still
+#    exits non-zero (no TTY) and writes no .env. This proves the old inline
+#    credential-writing logic is gone.
+T="$(mktemp -d)"
+env DSH_HOME="$T" CHORUS_URL="https://c.example" CHORUS_API_KEY="cho_x" bash "$SCRIPT" </dev/null >/dev/null 2>&1
+rc=$?
+[ "$rc" -ne 0 ] && ok "non-zero even with creds set (installs nothing)" || no "non-zero even with creds set"
+[ ! -f "$T/.env" ] && ok "writes no .env even with creds set" || no "writes no .env even with creds set"
+rm -rf "$T"
+
+if [ "$fail" -eq 0 ]; then printf '\nALL PASS\n'; else printf '\nFAILURES\n'; fi
+exit "$fail"

package/.next/standalone/public/test-install-codex.sh

@@ -1,5 +1,10 @@
 #!/usr/bin/env bash
-# Test public/install-codex.sh for macOS bash 3.2 compatibility.
+# Test public/install-codex.sh — now a DEPRECATION STUB that redirects to
+# `chorus agents add`. Verifies bash 3.2 compatibility + the stub shape:
+#   - names the replacement `npm install -g @chorus-aidlc/chorus@0.17.0` + `chorus agents add`
+#   - prints a deprecation notice
+#   - run non-interactively (no TTY, e.g. curl | bash in CI) it exits non-zero
+#   - installs nothing (writes no config.toml)
 #
 # Usage:
 #   bash public/test-install-codex.sh
@@ -24,7 +29,7 @@ else
   TEST_BASH="$(command -v bash)"
 fi
 
-BOLD=$'\033[1m'; GREEN=$'\033[32m'; RED=$'\033[31m'; DIM=$'\033[2m'; RESET=$'\033[0m'
+BOLD=$'\033[1m'; GREEN=$'\033[32m'; RED=$'\033[31m'; RESET=$'\033[0m'
 
 PASS=0; FAIL=0; FAIL_NOTES=""
 
@@ -36,8 +41,8 @@ echo "${BOLD}Testing:${RESET} $SCRIPT"
 echo "${BOLD}Using:${RESET}   $TEST_BASH ($("$TEST_BASH" --version | head -1))"
 echo ""
 
-# [1/4] Static scan — reject bash 4+ constructs
-echo "${BOLD}[1/4]${RESET} Static scan for bash 4+ constructs"
+# [1/3] Static scan — reject bash 4+ constructs
+echo "${BOLD}[1/3]${RESET} Static scan for bash 4+ constructs"
 scan() {
   local label="$1"; local pattern="$2"
   if grep -nE "$pattern" "$SCRIPT" >/tmp/install-codex-scan.$$ 2>/dev/null; then
@@ -55,9 +60,9 @@ scan 'no "&>" redirection'                    '[^|]&>[^>]'
 scan 'no "|&" redirection'                    '\|&'
 scan 'no ";;&" case fallthrough'              ';;&'
 
-# [2/4] Parse
+# [2/3] Parse
 echo ""
-echo "${BOLD}[2/4]${RESET} Parse with $TEST_BASH -n"
+echo "${BOLD}[2/3]${RESET} Parse with $TEST_BASH -n"
 if "$TEST_BASH" -n "$SCRIPT" 2>/tmp/install-codex-parse.$$; then
   pass "parses without syntax errors"
 else
@@ -66,99 +71,46 @@ else
 fi
 rm -f /tmp/install-codex-parse.$$
 
-# [3/4] End-to-end dry run with an isolated CODEX_HOME
+# [3/3] Non-interactive stub behavior: redirect to `chorus agents add`, exit non-zero,
+# install nothing. Stdin from /dev/null + stdout redirected to a file → neither
+# is a TTY, so the stub must take the print-and-fail path (never exec).
 echo ""
-echo "${BOLD}[3/4]${RESET} End-to-end dry run (isolated CODEX_HOME)"
+echo "${BOLD}[3/3]${RESET} Non-interactive stub behavior (no TTY → print + non-zero)"
 
 TMP_HOME="$(mktemp -d -t chorus-install-test.XXXXXX)"
 trap 'rm -rf "$TMP_HOME"' EXIT
 
-FAKE_BIN="$TMP_HOME/bin"
-mkdir -p "$FAKE_BIN"
-cat > "$FAKE_BIN/codex" <<'FAKE'
-#!/usr/bin/env bash
-case "${1:-}" in
-  --version) echo "codex 0.125.0-test" ;;
-  plugin)
-    if [ "${2:-}" = "marketplace" ] && [ "${3:-}" = "list" ]; then
-      echo ""
-      exit 0
-    fi
-    exit 0
-    ;;
-  *) exit 0 ;;
-esac
-FAKE
-chmod +x "$FAKE_BIN/codex"
-
 run_out="$TMP_HOME/run.log"
 set +e
 env \
-  PATH="$FAKE_BIN:$PATH" \
   HOME="$TMP_HOME" \
   CODEX_HOME="$TMP_HOME/.codex" \
-  CHORUS_URL="https://chorus.test/api/mcp" \
-  CHORUS_API_KEY="cho_test_key_abc123" \
-  CHORUS_MARKETPLACE_SOURCE="https://github.com/Chorus-AIDLC/Chorus" \
-  "$TEST_BASH" "$SCRIPT" >"$run_out" 2>&1
+  "$TEST_BASH" "$SCRIPT" </dev/null >"$run_out" 2>&1
 rc=$?
 set -e
 
 if [ "$rc" -ne 0 ]; then
-  fail "installer exited non-zero ($rc)"
-  sed 's/^/         /' "$run_out"
+  pass "exits non-zero when non-interactive (rc=$rc)"
 else
-  pass "installer exited 0"
+  fail "exited 0 (expected non-zero for a no-TTY deprecation stub)"
+  sed 's/^/         /' "$run_out"
 fi
 
-cfg="$TMP_HOME/.codex/config.toml"
-if [ ! -f "$cfg" ]; then
-  fail "config.toml not created at $cfg"
-else
-  pass "config.toml created"
-  grep -q '^\[mcp_servers\.chorus\]' "$cfg" && pass "[mcp_servers.chorus] block present" || fail "[mcp_servers.chorus] missing"
-  grep -q 'url = "https://chorus.test/api/mcp"' "$cfg" && pass "url written literally" || fail "url not literal"
-  grep -q 'Authorization = "Bearer cho_test_key_abc123"' "$cfg" && pass "Authorization header literal" || fail "Authorization not literal"
-  grep -q '^hooks = true' "$cfg" && pass "hooks feature enabled" || fail "hooks feature not enabled"
-  grep -q '^codex_hooks =' "$cfg" && fail "deprecated codex_hooks key written" || pass "deprecated codex_hooks key not written"
-  [ ! -f "$TMP_HOME/.codex/hooks.json" ] && pass "installer does not write user hooks.json" || fail "installer wrote user hooks.json"
-  [ ! -e "$TMP_HOME/.codex/hooks/chorus/run-hook.sh" ] && pass "installer does not write hook wrapper" || fail "installer wrote hook wrapper"
-  if command -v stat >/dev/null 2>&1; then
-    mode="$(stat -c '%a' "$cfg" 2>/dev/null || stat -f '%OLp' "$cfg" 2>/dev/null || echo "")"
-    if [ "$mode" = "600" ]; then
-      pass "config.toml mode=600"
-    elif [ -n "$mode" ]; then
-      fail "config.toml mode=$mode (expected 600)"
-    fi
-  fi
-fi
+grep -q 'npm install -g @chorus-aidlc/chorus' "$run_out" \
+  && pass "names 'npm install -g @chorus-aidlc/chorus'" \
+  || { fail "did not print the npm install guidance"; sed 's/^/         /' "$run_out"; }
 
-# [4/4] Idempotent re-run with a rotated key
-echo ""
-echo "${BOLD}[4/4]${RESET} Idempotent re-run with a rotated key"
-set +e
-env \
-  PATH="$FAKE_BIN:$PATH" \
-  HOME="$TMP_HOME" \
-  CODEX_HOME="$TMP_HOME/.codex" \
-  CHORUS_URL="https://chorus.test/api/mcp" \
-  CHORUS_API_KEY="cho_rotated_key_xyz789" \
-  "$TEST_BASH" "$SCRIPT" >"$run_out" 2>&1
-rc=$?
-set -e
-[ "$rc" -eq 0 ] && pass "rerun exited 0" || { fail "rerun exited non-zero ($rc)"; sed 's/^/         /' "$run_out"; }
-
-blocks="$(grep -c '^\[mcp_servers\.chorus\]' "$cfg" 2>/dev/null || echo 0)"
-[ "$blocks" = "1" ] && pass "exactly one [mcp_servers.chorus] block" || fail "found $blocks [mcp_servers.chorus] blocks"
+grep -q 'chorus agents add' "$run_out" \
+  && pass "names 'chorus agents add'" \
+  || { fail "did not print the chorus agents add command"; sed 's/^/         /' "$run_out"; }
 
-hdr_blocks="$(grep -c '^\[mcp_servers\.chorus\.http_headers\]' "$cfg" 2>/dev/null || echo 0)"
-[ "$hdr_blocks" = "1" ] && pass "exactly one [mcp_servers.chorus.http_headers] block" || fail "found $hdr_blocks http_headers blocks"
+grep -qi 'deprecat' "$run_out" \
+  && pass "prints a deprecation notice" \
+  || { fail "no deprecation notice printed"; sed 's/^/         /' "$run_out"; }
 
-if grep -q 'Authorization = "Bearer cho_rotated_key_xyz789"' "$cfg" && ! grep -q 'cho_test_key_abc123' "$cfg"; then
-  pass "rotated key replaced the previous key"
-else
-  fail "rotated key not applied cleanly"
-fi
+[ ! -f "$TMP_HOME/.codex/config.toml" ] \
+  && pass "installs nothing (no config.toml written)" \
+  || fail "wrote config.toml (stub must install nothing)"
 
 echo ""
 echo "${BOLD}Summary:${RESET} $PASS passed, $FAIL failed"

package/README.ja.md

@@ -38,13 +38,15 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 
 ## 最近の更新
 
+**[v0.16.4](https://chorus-ai.dev/blog/chorus-v0.16.4-release/)** — DeepSeek Harness（dsh）が 6 つ目の接続方法に。`@chorus-aidlc/chorus-dsh` バンドルが Chorus のスキル・ペルソナ・MCP 設定を任意の dsh プロファイルに追加します。現時点は対話的な利用のみ、デーモンウェイクは後日対応。
+
 **[v0.16.1](https://chorus-ai.dev/blog/chorus-v0.16.1-release/)** — 1 つの `chorus daemon` が、互いに独立した複数のエージェントを同時に扱えるようになりました。各エージェントは `agents[]` 配列で自分のキー・作業ディレクトリ・バックエンド・権限を持ちます。エージェント同士は @メンションで作業を渡し合え、各ウェイクはそのエージェント自身のプロジェクトディレクトリに届きます。
 
 **[v0.16.0](https://chorus-ai.dev/blog/chorus-v0.16.0-release/)** — エージェントをドキュメントサイト（[doc.chorus-ai.dev](https://doc.chorus-ai.dev)）へ案内する `docs` スキルを追加し、記憶に頼らず現在のドキュメントを読んで回答するようにしました。
 
 **[v0.15.0](https://chorus-ai.dev/blog/chorus-v0.15.0-release/)** — プロジェクト単位の Agent 作業ディレクトリ：各ユーザーがプロジェクト内の Agent ごとにホストと cwd を設定し、デーモンが許可したルートだけを参照できます。割り当て、ウェイク、再開、後続ターンで同じ実行先を使い、進行中のセッションは移動しません。Codex は再開可能なバックエンド thread ID を別に保存し、不要になった Chorus の session 管理手順を削除しました。
 
-**[v0.14.1](https://chorus-ai.dev/blog/chorus-v0.14.1-release/)** — Amazon Kiro CLI が 4 つ目の接続方法になりました（Kiro CLI v2）：ワンコマンドの `install-kiro.sh` プラグインと `--agent kiro` デーモンバックエンド、加えていくつかのデーモン修正。
+**[v0.14.1](https://chorus-ai.dev/blog/chorus-v0.14.1-release/)** — Amazon Kiro CLI が 4 つ目の接続方法になりました（Kiro CLI v2）：`chorus agents add` によるワンコマンドの Kiro プラグイン導入と `--agent kiro` デーモンバックエンド、加えていくつかのデーモン修正。
 
 **[v0.14.0](https://chorus-ai.dev/blog/chorus-v0.14.0-release/)** — アプリ全体のダークモード（ライト / ダーク / システム）。参考資料をあらゆる着想・提案・課題に添付でき、インラインでも MCP 経由でも読み取れます。韓国語と日本語を追加（韓国語はコミュニティによる貢献）。グループ化のための**テーマ**着想、デーモンの「開発を開始」/「Yolo」ボタン、対話式の着想入力、クラッシュからの再開、`chorus daemon install`。
 
@@ -57,7 +59,7 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 2 つのコマンドだけです — データベースも Docker も設定ファイルも不要です。
 
 ```bash
-npm install -g @chorus-aidlc/chorus
+npm install -g @chorus-aidlc/chorus@0.17.0
 chorus
 ```
 
@@ -99,7 +101,7 @@ PM エージェントが要件を分析し、PRD と課題 DAG を含む提案
 
 ## AI エージェントを接続する
 
-最も手早い方法は、アプリ内のセットアップウィザードです：**Settings → Setup Guide** を開いてください。ウィザードが API キーを作成し、お使いのクライアント（Claude Code、Codex、Kiro、OpenCode、OpenClaw、Pi、その他 MCP 互換のエージェント）向けの正確なコマンドを表示します。
+最も手早い方法は、アプリ内のセットアップウィザードです：**Settings → Setup Guide** を開いてください。ウィザードが API キーを作成し、お使いのクライアント（Claude Code、Codex、Kiro、dsh、OpenCode、OpenClaw、Pi、その他 MCP 互換のエージェント）向けの正確なコマンドを表示します。
 
 クライアントごとの詳細なガイド → **[エージェントプラットフォーム](https://doc.chorus-ai.dev/ja/reference/agents/)**。
 

package/README.ko.md

@@ -38,13 +38,15 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 
 ## 최근 업데이트
 
+**[v0.16.4](https://chorus-ai.dev/blog/chorus-v0.16.4-release/)** — DeepSeek Harness(dsh)가 여섯 번째 연결 방식으로 추가됩니다: `@chorus-aidlc/chorus-dsh` 번들이 Chorus의 스킬·페르소나·MCP 설정을 임의의 dsh 프로파일에 추가합니다. 현재는 대화식 사용만, 데몬 웨이크는 추후 지원.
+
 **[v0.16.1](https://chorus-ai.dev/blog/chorus-v0.16.1-release/)** — 이제 하나의 `chorus daemon`이 서로 독립적인 여러 에이전트를 동시에 서비스합니다. 각 에이전트는 `agents[]` 배열로 자신의 키·작업 디렉터리·백엔드·권한을 가집니다. 에이전트끼리 @멘션으로 작업을 넘길 수 있고, 각 웨이크는 해당 에이전트 자신의 프로젝트 디렉터리에 도착합니다.
 
 **[v0.16.0](https://chorus-ai.dev/blog/chorus-v0.16.0-release/)** — 에이전트를 문서 사이트([doc.chorus-ai.dev](https://doc.chorus-ai.dev))로 안내하는 `docs` 스킬을 추가해, 기억에 의존하지 않고 현재 문서를 읽고 답하도록 했습니다.
 
 **[v0.15.0](https://chorus-ai.dev/blog/chorus-v0.15.0-release/)** — 프로젝트별 Agent 작업 디렉터리: 각 사용자가 프로젝트의 Agent마다 호스트와 cwd를 지정하고, 데몬이 허용한 루트만 탐색할 수 있습니다. 배정, 웨이크, 재개, 후속 턴에서 같은 실행 위치를 사용하며 진행 중인 세션은 이동하지 않습니다. Codex는 재개 가능한 백엔드 thread ID를 별도로 저장하고, 더 이상 필요하지 않은 Chorus session 관리 단계를 제거했습니다.
 
-**[v0.14.1](https://chorus-ai.dev/blog/chorus-v0.14.1-release/)** — Amazon Kiro CLI가 네 번째 연결 방식이 되었습니다(Kiro CLI v2): 명령 한 줄로 설치하는 `install-kiro.sh` 플러그인과 `--agent kiro` 데몬 백엔드, 여기에 몇 가지 데몬 수정.
+**[v0.14.1](https://chorus-ai.dev/blog/chorus-v0.14.1-release/)** — Amazon Kiro CLI가 네 번째 연결 방식이 되었습니다(Kiro CLI v2): `chorus agents add` 명령 한 줄로 설치하는 Kiro 플러그인과 `--agent kiro` 데몬 백엔드, 여기에 몇 가지 데몬 수정.
 
 **[v0.14.0](https://chorus-ai.dev/blog/chorus-v0.14.0-release/)** — 앱 전체 다크 모드(라이트 / 다크 / 시스템). 참고 자료를 어떤 아이디어·제안·작업에도 첨부할 수 있고, 인라인으로도 MCP를 통해서도 읽을 수 있습니다. 한국어와 일본어 추가(한국어는 커뮤니티 기여). 그룹화를 위한 **테마** 아이디어, 그리고 데몬의 개발 시작 / Yolo 버튼, 대화식 아이디어 입력, 크래시 복구, `chorus daemon install`.
 
@@ -57,7 +59,7 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 두 개의 명령이면 됩니다. 데이터베이스도, Docker도, 설정 파일도 필요 없습니다.
 
 ```bash
-npm install -g @chorus-aidlc/chorus
+npm install -g @chorus-aidlc/chorus@0.17.0
 chorus
 ```
 
@@ -99,7 +101,7 @@ PM 에이전트가 요구사항을 분석해 PRD와 작업 DAG를 생성하며,
 
 ## 에이전트 연결하기
 
-가장 빠른 방법은 앱 내 마법사입니다: **Settings → Setup Guide**를 여세요. 마법사가 API 키를 만들고, 사용하는 클라이언트(Claude Code, Codex, Kiro, OpenCode, OpenClaw, Pi, 또는 그 밖의 MCP 호환 에이전트)에 맞는 정확한 명령을 보여줍니다.
+가장 빠른 방법은 앱 내 마법사입니다: **Settings → Setup Guide**를 여세요. 마법사가 API 키를 만들고, 사용하는 클라이언트(Claude Code, Codex, Kiro, dsh, OpenCode, OpenClaw, Pi, 또는 그 밖의 MCP 호환 에이전트)에 맞는 정확한 명령을 보여줍니다.
 
 클라이언트별 전체 가이드 → **[에이전트 플랫폼](https://doc.chorus-ai.dev/ko/reference/agents/)**.
 

package/README.md

@@ -38,13 +38,15 @@ The labels under each stage are the **permissions** an actor needs there — gra
 
 ## What's New
 
+**[v0.16.4](https://chorus-ai.dev/blog/chorus-v0.16.4-release/)** — DeepSeek Harness (dsh) is the sixth way to connect: the `@chorus-aidlc/chorus-dsh` bundle drops Chorus's skills, persona, and MCP config into any dsh profile. Interactive for now; daemon wake comes later.
+
 **[v0.16.1](https://chorus-ai.dev/blog/chorus-v0.16.1-release/)** — One `chorus daemon` now serves many independent agents at once — each with its own key, working directories, backend, and permissions via an `agents[]` array — and agents can hand work to each other by @-mention, with each wake landing in that agent's own project directory.
 
 **[v0.16.0](https://chorus-ai.dev/blog/chorus-v0.16.0-release/)** — A `docs` skill that points agents at the live docs site ([doc.chorus-ai.dev](https://doc.chorus-ai.dev)), so they answer from the current docs instead of reciting from memory.
 
 **[v0.15.0](https://chorus-ai.dev/blog/chorus-v0.15.0-release/)** — Project-level Agent working directories: each user can bind every Agent in a project to a host and cwd, browse only daemon-approved roots, and use the same target across assignment, wake, resume, and later turns without moving active sessions. Codex now persists its resumable backend thread ID separately and drops obsolete Chorus session-management steps.
 
-**[v0.14.1](https://chorus-ai.dev/blog/chorus-v0.14.1-release/)** — Amazon Kiro CLI is the fourth way to connect (Kiro CLI v2): a one-command `install-kiro.sh` plugin and a `--agent kiro` daemon backend, plus daemon fixes.
+**[v0.14.1](https://chorus-ai.dev/blog/chorus-v0.14.1-release/)** — Amazon Kiro CLI is the fourth way to connect (Kiro CLI v2): a one-command Kiro plugin via `chorus agents add` and a `--agent kiro` daemon backend, plus daemon fixes.
 
 **[v0.14.0](https://chorus-ai.dev/blog/chorus-v0.14.0-release/)** — Dark mode across the app (light / dark / system). Reference artifacts: attach docs, repos, issues, and articles to any idea, proposal, or task, readable inline and over MCP. Korean and Japanese locales (Korean contributed by the community). **Theme** ideas for grouping, plus daemon Start Development / Yolo buttons, conversational idea entry, crash-resume, and `chorus daemon install`.
 
@@ -57,7 +59,7 @@ The labels under each stage are the **permissions** an actor needs there — gra
 Two commands. No database, no Docker, no config files.
 
 ```bash
-npm install -g @chorus-aidlc/chorus
+npm install -g @chorus-aidlc/chorus@0.17.0
 chorus
 ```
 
@@ -99,7 +101,7 @@ Task cards flow between To Do → In Progress → To Verify as agents work, with
 
 ## Connect an Agent
 
-The fastest path is the in-app wizard: open **Settings → Setup Guide**. It creates the API key and shows the exact commands for your client — Claude Code, Codex, Kiro, OpenCode, OpenClaw, Pi, or any MCP-compatible agent.
+The fastest path is the in-app wizard: open **Settings → Setup Guide**. It creates the API key and shows the exact commands for your client — Claude Code, Codex, Kiro, dsh, OpenCode, OpenClaw, Pi, or any MCP-compatible agent.
 
 Full per-client guides → **[Agent platforms](https://doc.chorus-ai.dev/reference/agents/)**.
 

package/README.zh.md

@@ -29,13 +29,15 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 
 ## 最近更新
 
+**[v0.16.4](https://chorus-ai.dev/zh/blog/chorus-v0.16.4-release/)** — DeepSeek Harness（dsh）成为第六种接入方式：`@chorus-aidlc/chorus-dsh` bundle 把 Chorus 的 skill、persona 和 MCP 配置装进任意 dsh profile。目前仅交互式使用，daemon 唤醒稍后支持。
+
 **[v0.16.1](https://chorus-ai.dev/zh/blog/chorus-v0.16.1-release/)** — 一个 `chorus daemon` 现在可以同时服务多个互相独立的 agent，每个都有自己的密钥、工作目录、后端和权限（通过 `agents[]` 配置）；agent 之间还能通过 @ 把活递给对方，每次唤醒都落在该 agent 自己的项目目录里。
 
 **[v0.16.0](https://chorus-ai.dev/zh/blog/chorus-v0.16.0-release/)** — 新增 `docs` skill，引导 Agent 查阅文档站点（[doc.chorus-ai.dev](https://doc.chorus-ai.dev)），基于当前文档作答，而不是凭记忆复述。
 
 **[v0.15.0](https://chorus-ai.dev/zh/blog/chorus-v0.15.0-release/)** — 项目级 Agent 工作目录：每位用户可以为项目中的每个 Agent 绑定主机和 cwd，只浏览 daemon 允许的目录，并让任务分配、唤醒、恢复和后续对话使用同一个执行位置，且不迁移进行中的会话。Codex 现在会单独保存可恢复的后端 thread ID，并移除不再需要的 Chorus session 管理步骤。
 
-**[v0.14.1](https://chorus-ai.dev/zh/blog/chorus-v0.14.1-release/)** — Amazon Kiro CLI 成为第四种接入方式（Kiro CLI v2）：一条命令的 `install-kiro.sh` 插件，以及 `--agent kiro` 的 daemon 后端，另有若干 daemon 修复。
+**[v0.14.1](https://chorus-ai.dev/zh/blog/chorus-v0.14.1-release/)** — Amazon Kiro CLI 成为第四种接入方式（Kiro CLI v2）：通过 `chorus agents add` 一条命令安装的 Kiro 插件，以及 `--agent kiro` 的 daemon 后端，另有若干 daemon 修复。
 
 **[v0.14.0](https://chorus-ai.dev/zh/blog/chorus-v0.14.0-release/)** — 全应用深色模式（浅色 / 深色 / 跟随系统）。参考资料可挂到任意想法、提案或任务上，行内可读，也能通过 MCP 读写。新增韩语和日语（韩语由社区贡献）。用于归类的**主题**想法，以及 daemon 的「开始开发」/「Yolo」按钮、对话式建想法、崩溃恢复与 `chorus daemon install`。
 
@@ -48,7 +50,7 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 两条命令即可，无需数据库、无需 Docker、无需配置文件。
 
 ```bash
-npm install -g @chorus-aidlc/chorus
+npm install -g @chorus-aidlc/chorus@0.17.0
 chorus
 ```
 
@@ -90,7 +92,7 @@ Kanban 看板随 Agent 工作进度自动更新，任务卡片在 To Do → In P
 
 ## 连接 Agent
 
-最快的方式是应用内的 setup 向导：打开 **Settings → Setup Guide**。它会创建 API Key，并给出适配你所用客户端的完整命令，无论是 Claude Code、Codex、Kiro、OpenCode、OpenClaw、Pi，还是任何兼容 MCP 的 agent。
+最快的方式是应用内的 setup 向导：打开 **Settings → Setup Guide**。它会创建 API Key，并给出适配你所用客户端的完整命令，无论是 Claude Code、Codex、Kiro、dsh、OpenCode、OpenClaw、Pi，还是任何兼容 MCP 的 agent。
 
 按客户端分的完整接入指南 → **[Agent 接入平台](https://doc.chorus-ai.dev/zh/reference/agents/)**。
 

package/chorus.mjs

@@ -24,7 +24,7 @@ const __dirname = dirname(fileURLToPath(import.meta.url));
 // client commands that connect OUT to a remote Chorus server. Their modules are
 // lazy-imported so the server-launch path pays no startup cost.
 
-const SUBCOMMANDS = new Set(["daemon", "login"]);
+const SUBCOMMANDS = new Set(["daemon", "login", "mcp", "agents"]);
 
 // Client-subcommand arg parsing + help text live in cli/client-args.mjs so they
 // are pure and unit-testable (this entry module runs side effects at import).
@@ -54,6 +54,19 @@ function pkgVersion() {
 }
 
 async function runSubcommand(name, rest) {
+  // `agents` and `mcp` own their arg parsing + help (they handle `--help`
+  // themselves), so they are dispatched before the shared client-flag/help
+  // block below. (`chorus init` was renamed to `chorus agents add` — the bare
+  // `chorus init` word is intercepted with a rename hint before server boot.)
+  if (name === "mcp") {
+    const { runMcp } = await import("./cli/mcp.mjs");
+    return runMcp(rest, { version: pkgVersion() });
+  }
+  if (name === "agents") {
+    const { runAgents } = await import("./cli/agents.mjs");
+    return runAgents(rest, { version: pkgVersion() });
+  }
+
   const flags = parseClientFlags(rest);
 
   // Per-subcommand --help / -h fast-path: print subcommand-specific help and
@@ -82,6 +95,18 @@ async function runSubcommand(name, rest) {
 
 {
   const sub = process.argv[2];
+  // `chorus init` was renamed to `chorus agents add`. Intercept the old word
+  // with an actionable hint and exit — never fall through to the server-launch
+  // path below (a muscle-memory `chorus init` must not silently boot Postgres).
+  if (sub === "init") {
+    process.stderr.write(
+      "`chorus init` has been renamed to `chorus agents add`.\n" +
+        "  • configure agents:  chorus agents add   (same flags as before)\n" +
+        "  • list configured:   chorus agents\n" +
+        "  • remove one:        chorus agents remove <name|uuid>\n",
+    );
+    process.exit(1);
+  }
   if (sub && SUBCOMMANDS.has(sub)) {
     runSubcommand(sub, process.argv.slice(3))
       .then((code) => process.exit(typeof code === "number" ? code : 0))
@@ -146,10 +171,16 @@ Chorus v${pkg.version} — AI Agent & Human collaboration platform
 
 USAGE
   chorus [options]                 Start the Chorus server (default)
+  chorus agents [list|add|remove]  Manage this machine's configured agents:
+                                   list (default), add (detect + install plugin + seed
+                                   creds; formerly 'chorus init'), remove <name|uuid>
+                                   (see 'chorus agents --help')
   chorus login [--url --api-key]   Authenticate as an agent; saves ~/.chorus/daemon.json
   chorus daemon [--url --api-key]  Connect to a remote Chorus server, subscribe to the
                                    agent notification stream, and wake a local headless
                                    Claude Code on task dispatch
+  chorus mcp <call|whoami|list>    Native MCP client — call any tool, print this agent's
+                                   UUID, or list callable tools (see 'chorus mcp --help')
 
 SERVER OPTIONS
   -p, --port <port>        HTTP server port             (default: 8637, env: PORT)
@@ -203,6 +234,9 @@ EXAMPLES
   chorus daemon                              # Connect & wake local Claude Code (full autonomy by default)
   chorus daemon --chorus-only                # Restrict the woken Claude to Chorus MCP tools only
   CHORUS_URL=https://... CHORUS_API_KEY=cho_... chorus daemon
+  chorus mcp whoami                          # Print this agent's own UUID
+  chorus mcp call chorus_get_task '{"taskUuid":"..."}'      # Call a tool with JSON args
+  chorus mcp call chorus_pm_add_document_draft --arg proposalUuid=P1 --arg type=prd --arg-file content=doc.md
 `);
   process.exit(0);
 }

package/cli/agent-backend-prompt.mjs

@@ -0,0 +1,94 @@
+// cli/agent-backend-prompt.mjs
+// Single source of truth for the interactive "which agent backend?" menu shared
+// by the daemon credential-capture entry points: `chorus login` (single-agent),
+// `chorus login --add` / `chorus daemon add`, and the `chorus install` "add
+// another agent" loop (see cli/login.mjs, cli/daemon-install-config.mjs).
+//
+// The same AGENT_MENU list also feeds resolveInstallAgent's daemon-level backend
+// prompt in daemon-install-config.mjs, so every surface advertises EXACTLY the
+// same backends and never drifts — re-advertising a backend (e.g. dsh) is a
+// one-line edit here that all prompts pick up.
+//
+// promptAgentBackend deliberately differs from resolveInstallAgent's inline menu
+// in ONE way: an empty / unrecognized answer returns `undefined` ("no explicit
+// choice") rather than DEFAULT_AGENT, so the add/login callers can OMIT the
+// backend field and let resolve-time inheritance apply (the daemon top-level
+// default). resolveInstallAgent must always produce a concrete daemon-level
+// backend, so it keeps its own empty→DEFAULT_AGENT behavior and does NOT use
+// this helper.
+//
+// Lives in its own module to avoid an import cycle: daemon-install-config.mjs
+// already imports appendAgentConfig from login.mjs, so the shared menu cannot
+// live in either of those files.
+
+import { KNOWN_AGENTS } from "./daemon-agent.mjs";
+
+/**
+ * The interactive agent-backend menu. Order mirrors KNOWN_AGENTS with claude-code
+ * first (it is the default). Kept as the single shared list so the numbered
+ * prompt and the accepted values never drift across entry points.
+ *
+ * NOTE: the dsh JSON-RPC daemon backend is temporarily de-advertised (offline).
+ * The code path (probeAgentCli/resolveDshPath, spawner-select, dsh-spawner) is
+ * kept dormant — re-add this menu entry to bring it back online. It remains
+ * reachable by name (e.g. `--agent dsh`, or typing "dsh" at the prompt).
+ */
+export const AGENT_MENU = [
+  { value: "claude-code", label: "Claude Code (default)" },
+  { value: "codex", label: "Codex CLI" },
+  { value: "kiro", label: "Kiro CLI" },
+];
+
+/** A non-empty trimmed string, or undefined. */
+function nonEmpty(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : undefined;
+}
+
+/**
+ * Prompt the operator to pick an agent backend for the agent being configured,
+ * shared by the add / login / install-add flows.
+ *
+ * Returns the chosen backend value, or `undefined` when the operator makes no
+ * explicit choice — meaning "inherit the daemon default" (the caller then omits
+ * the `agentType` / top-level `agent` field). `undefined` is returned when:
+ *   - `isTTY` is false (non-interactive / piped) — returns immediately, prints
+ *     nothing, never blocks (mirrors resolveInstallAgent / resolveDaemonCwds);
+ *   - the answer is empty (Enter);
+ *   - the answer is an out-of-range number or is otherwise unrecognized.
+ *
+ * Accepts either a menu number (1..AGENT_MENU.length) or a KNOWN_AGENTS value
+ * typed by name (e.g. "codex", or "dsh" even though it is de-advertised).
+ *
+ * @param {{
+ *   ask: (query: string, opts?: object) => Promise<string>,
+ *   log?: (m: string) => void,
+ *   isTTY?: boolean,
+ * }} deps
+ * @returns {Promise<string|undefined>}
+ */
+export async function promptAgentBackend({ ask, log = () => {}, isTTY = false } = {}) {
+  // Non-TTY (piped / scripted) must never block on a menu — return immediately
+  // with no output. The caller falls back to --agent or inherits the default.
+  if (!isTTY || typeof ask !== "function") return undefined;
+
+  log("[Chorus] Which agent backend should this agent use?");
+  for (let i = 0; i < AGENT_MENU.length; i += 1) {
+    log(`[Chorus]   ${i + 1}) ${AGENT_MENU[i].label}`);
+  }
+  const answer = nonEmpty(
+    await ask(`Select [1-${AGENT_MENU.length}] (Enter to inherit the daemon default): `),
+  );
+  if (!answer) return undefined; // Enter → inherit default.
+
+  const n = Number(answer);
+  if (Number.isInteger(n) && n >= 1 && n <= AGENT_MENU.length) {
+    return AGENT_MENU[n - 1].value;
+  }
+  // A backend typed by name (muscle memory). KNOWN_AGENTS includes the
+  // de-advertised `dsh` backend AND the non-wakeable `offline` classification, so a
+  // by-name pick can still reach either even though neither is in the numbered menu.
+  if (KNOWN_AGENTS.includes(answer)) return answer;
+
+  // Out-of-range / garbage → no explicit choice; the caller inherits the default.
+  return undefined;
+}