@mengyuly/dsh-ponytail 0.1.2 → 0.1.4

package/CHANGELOG.md

@@ -0,0 +1,95 @@
+# Changelog
+
+All notable changes to `@mengyuly/dsh-ponytail` are documented here.
+Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+
+## [0.1.4] - 2026-08-24
+
+### Fixed
+
+- 修复运行时 JS 与 TypeScript declarations 不一致：v0.1.3 只同步了
+  `lib/index.js`/`lib/invariant.js`，声明文件停留在旧版本。
+- `compileSubagentMatcher` 声明恢复正确（`{ matcher, invalid }`），与运行时一致。
+- 补齐 `readDefaultModeInfo`、`sessionKey` 及诊断类型
+  （`DefaultModeIssueKind` / `DefaultModeIssue` / `DefaultModeResolution`）的声明。
+- `writeDefaultMode` 声明注释补充「写入失败会抛出异常」。
+- 移除失效的 declaration source map 引用：声明生成关闭 `declarationMap`，
+  发布的 `.d.ts` 不再携带指向不存在 `.d.ts.map` 的 `sourceMappingURL`。
+
+### Changed
+
+- 发布流程改为同步**完整** `lib/`（两个运行时 bundle + 全部 `.d.ts`）：
+  `npm run sync:dist`（要求 `DSH_CHECKOUT`，在权威 checkout 中重建后整体同步）。
+- CI 增加防漂移检查：src 导出 ↔ 声明导出、运行时导出 ↔ 声明导出、
+  `modes.d.ts` 关键签名、无悬空 source map、tarball 内容/版本/安装后 smoke、
+  NodeNext + `skipLibCheck:false` 的声明消费测试。
+- tarball 现在包含 `CHANGELOG.md`。
+
+### Tests
+
+- npm tarball smoke test（仅声明 peer 安装后加载）。
+- TypeScript consumer test（打包安装后编译，非相对路径读 src）。
+- 运行时/声明导出一致性验证。
+- src↔d.ts 漂移检查（CI 与 `verify:dist` 双保险）。
+
+## [0.1.3] - 2026-08-23
+
+### Fixed
+
+- Bare `/ponytail` on an `off` session now re-enables at the effective default
+  (or `full` when that default is `off` too), matching the documented "resume
+  anytime with `/ponytail`" behavior. It still only reports when already enabled.
+- `/ponytail default <mode>` no longer bypasses `PONYTAIL_DEFAULT_MODE`: the
+  effective default is recomputed after the write, so the env var keeps its
+  documented highest priority; the result distinguishes saved vs effective.
+- Typo: `Ponyytail default set` → `Ponytail default set`.
+- Deactivation phrases now also strip CJK sentence enders (`。？！`), so
+  `normal mode？` and `stop ponytail。` deactivate as expected.
+- Config writes are now atomic (temp file + rename); a failed write returns an
+  error instead of a false success.
+- A temporarily invalid config during hot-reload keeps the last known good
+  default instead of snapping back to `full`.
+
+### Changed
+
+- `/ponytail status` added as a pure query (never modifies the session).
+- Command hints and error text updated to the new surface
+  (`[status|default <mode>|lite|full|ultra|off]`).
+- Invalid config JSON / `defaultMode` / read failures and invalid
+  `PONYTAIL_SUBAGENT_MATCHER` now warn exactly once (fail-open preserved,
+  missing config file stays silent).
+- Session identity is centralized in one `sessionKey(agent)` helper; mode
+  overrides are released on `agent/disposed`, so long-running hosts do not
+  accumulate stale per-session entries.
+
+### Tests
+
+- 47 unit/integration tests (was 24): command semantics (bare `/ponytail`
+  restore paths, `status`, `default` saved-vs-effective, write failure),
+  priority (env > config > full, invalid env falls back to config),
+  session isolation and disposal cleanup, CJK/ASCII deactivation punctuation,
+  config file edge cases (BOM, empty, invalid JSON, array root, unknown-field
+  preservation, atomic write), hot-reload keep-last-good, and a headless
+  (no command plane) mount.
+
+## [0.1.2] - 2026-08-23
+
+### Changed
+
+- Self-contained bundle: `dsh-llm` / `dsh-skill` are inlined, so the runtime
+  only depends on the `@deepseek-ai/cordis` peer — installable from GitHub,
+  tarball, or npm without a dsh source tree.
+- npm scope renamed to `@mengyuly/dsh-ponytail` (matches the npm account).
+
+### Tests
+
+- CI smoke verifies the bundle leaves no dsh core external and loads with only
+  cordis installed.
+
+## [0.1.0] - 2026-08-23
+
+### Added
+
+- Initial release: always-on lazy-senior-developer ruleset, lite/full/ultra/off
+  intensities, six skills and slash commands, deactivation phrases,
+  `PONYTAIL_DEFAULT_MODE` / config-file defaults, subagent matcher.

package/README.md

@@ -16,7 +16,10 @@ dsh plugin --profile web add link:$(pwd)
 dsh plugin --profile web add github:MengYuil/dsh-ponytail
 
 # 方式三：Release 打包件（先下 tgz）
-dsh plugin --profile web add file:./mengyuly-dsh-ponytail-0.1.2.tgz
+dsh plugin --profile web add file:./mengyuly-dsh-ponytail-0.1.3.tgz
+
+# 方式四：npm
+dsh plugin --profile web add @mengyuly/dsh-ponytail
 ```
 
 装完重启 profile 生效（`dsh web` / `dsh tui`）。装载完成后，会话技能目录里会出现 6 个 `ponytail*` 技能，发 `/ponytail-help` 立即验证。
@@ -28,17 +31,21 @@ dsh plugin --profile web add file:./mengyuly-dsh-ponytail-0.1.2.tgz
 ## 功能
 
 - **核心模式** `/ponytail` — 每轮注入「懒惰阶梯」：能不做就不做（YAGNI）→ 代码库已有 → 标准库 → 平台原生 → 已装依赖 → 一行能解决 → 才是最少代码。
-  - `full`（默认）/ `lite` / `ultra` / `off` 四档，会话级。
-  - `/ponytail default <mode>` 持久化默认值。
+  - `full`（默认）/ `lite` / `ultra` / `off` 四档，**会话级**（会话 A 的档位不影响会话 B，会话结束自动释放）。
+  - 裸 `/ponytail`：已启用时只报告；会话为 `off` 时恢复到有效默认档（有效默认也是 `off` 则回 `full`）。
+  - `/ponytail status`：只查询、永不修改。
+  - `/ponytail lite|full|ultra|off`：显式切换。
+  - `/ponytail default <mode>`：持久化默认值到配置文件（环境变量仍优先）。
 - **一次性技能**（用哪个载哪个，不进常驻 prompt）：
   - `/ponytail-review` — 针对最近改动找过度工程，一行一条：位置 + 删什么 + 替代。
   - `/ponytail-audit` — 全仓库过度工程审计，排序清单。
   - `/ponytail-debt` — 收割所有 `ponytail:` 注释成债务账本。
   - `/ponytail-gain` — 收益计分板（更少代码/更省成本/更快）。
   - `/ponytail-help` — 参考卡。
-- **停用**：说 `stop ponytail` 或 `normal mode`；随时 `/ponytail` 恢复。
-- **默认值**：环境变量 `PONYTAIL_DEFAULT_MODE` > `~/.config/ponytail/config.json` 的 `{"defaultMode": "lite"}` > `full`。
+- **停用**：说 `stop ponytail` 或 `normal mode`（兼容中英文句末标点）；随时 `/ponytail` 恢复。
+- **默认值**：环境变量 `PONYTAIL_DEFAULT_MODE` > `~/.config/ponytail/config.json`（Windows：`%APPDATA%\ponytail\config.json`）的 `{"defaultMode": "lite"}` > `full`。`/ponytail default` 写入的是配置文件，**环境变量设置且合法时仍压过保存值**（命令会分别提示 saved 与 effective）。
 - **子代理**：常驻段作用于当前会话自身；DSH 内置 `subagent` 工具跑的是隔离的全新子代理、不继承本 persona。`PONYTAIL_SUBAGENT_MATCHER`（匹配子代理 `agentPreset` 的正则）用于在 harness 会下发给子代理的场景里排除指定子代理；缺省全部注入。
+- **配置错误**：非法 JSON / 非法 `defaultMode` / 读取失败 / 非法正则只告警一次（不刷屏）；配置文件不存在属正常、不告警；热更新遇到临时非法内容保留上一个合法默认值。
 
 ## 效率
 
@@ -53,6 +60,27 @@ dsh plugin --profile web add file:./mengyuly-dsh-ponytail-0.1.2.tgz
 - 配置文件的默认档位热更新（fs 轮询 ~1s，作用于无覆盖的会话）；环境变量改动仍需重启。
 - 发行 `lib/` 是预编译产物；改源码请回主仓重建后同步。
 
+## 测试环境与权威关系
+
+- 用 Node.js **v24.16.0** 在本机 deepseek-harness checkout 上测试（`tsc -b` + `tsdown` host 构建通过）。与之精确匹配的已发布 DSH/Cordis 版本**待确认**——checkout 是预发布工作树，非发布 tag。
+- 权威源码在 deepseek-harness monorepo 的 `packages/community/ponytail`（`@deepseek-ai/dsh-ponytail`）；本仓库（`@mengyuly/dsh-ponytail`）是**发行镜像**：随包附构建产物，`scripts/build.sh` 只做源码类型检查，不是独立真源。
+
+## 发行维护
+
+- **权威源码**：deepseek-harness monorepo 的 `packages/community/ponytail`（本仓库是发行镜像，只随包发布构建产物）。
+- **完整重新生成并同步 `lib/`**（JS 与声明必须作为同一产物同步，禁止只复制单个 JS 文件）：
+  ```bash
+  DSH_CHECKOUT=/path/to/deepseek-harness npm run sync:dist
+  ```
+  该命令在权威 checkout 中重建（`tsc` 生成声明 + `tsdown` 打包运行时），同步 `lib/index.js`、`lib/invariant.js`、`lib/types/*.d.ts`，并自动执行一致性校验；`lib/` 有变化时会提示提交。
+- **验证命令**：
+  ```bash
+  npm run verify:dist      # 声明↔src↔运行时导出一致性、关键签名、无悬空 source map
+  npm run verify:pack      # tarball 内容、版本一致、仅 peer 安装后 smoke
+  npm run test:consumer    # NodeNext + skipLibCheck:false 的声明消费测试（对打包产物）
+  ```
+- CI 对已提交产物执行上述全部校验；src 新增导出而 d.ts 未同步、或产物漂移都会失败。
+
 ## 许可
 
 MIT，© 2026 DietrichGebert（上游）+ MengYuil（移植）。详见 [LICENSE](LICENSE)。

package/lib/index.js

@@ -1,6 +1,6 @@
 import { createRequire } from "node:module";
 import { Service } from "@deepseek-ai/cordis";
-import { mkdirSync, readFileSync, unwatchFile, watchFile, writeFileSync } from "node:fs";
+import { mkdirSync, readFileSync, renameSync, unlinkSync, unwatchFile, watchFile, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 //#region ../../llm/llm/src/brand.ts
@@ -1713,7 +1713,7 @@ function errorMessage(error) {
 * `skill` tool). `ponytail` is the source the system-prompt ruleset is
 * filtered from; the other five ship verbatim as runtime skills.
 *
-* @module @mengyuly/dsh-ponytail
+* @module @deepseek-ai/dsh-ponytail
 */
 /** The always-on lazy-senior-dev ruleset: also registered as a loadable skill. */
 const PONYTAIL_SKILL_BODY = `
@@ -2007,7 +2007,9 @@ You can also load any of these with the \`skill\` tool.
 
 ## Deactivate
 
-Say "stop ponytail" or "normal mode". Resume anytime with \`/ponytail\`.
+Say "stop ponytail" or "normal mode". Resume anytime with \`/ponytail\` —
+it re-enables at the effective default (or \`full\` when that is off too).
+\`/ponytail status\` only shows the current level, never changes it.
 \`/ponytail off\` also works. Level is session-scoped; a new session starts
 from the configured default.
 
@@ -2027,7 +2029,8 @@ export PONYTAIL_DEFAULT_MODE=ultra
 
 Set \`"off"\` to disable auto-activation on session start, activate manually
 with \`/ponytail\` when wanted. \`/ponytail default <mode>\` persists a new
-default from inside a session.
+default to the config file; an exported \`PONYTAIL_DEFAULT_MODE\` still
+outranks the saved value for new sessions.
 
 Resolution: env var > config file > \`full\`.
 
@@ -2111,7 +2114,7 @@ function ponytailSkills() {
 * level via the `/ponytail` command is session-scoped and lives in an
 * in-memory, per-agent {@link ModeStore}.
 *
-* @module @mengyuly/dsh-ponytail
+* @module @deepseek-ai/dsh-ponytail
 */
 const DEFAULT_MODE = "full";
 const RUNTIME_MODES = [
@@ -2140,7 +2143,7 @@ function normalizeRuntimeMode(mode) {
 * toggle".
 */
 function isDeactivationCommand(text) {
-	const normalized = (typeof text === "string" ? text : "").trim().toLowerCase().replace(/[.!?\s]+$/, "");
+	const normalized = (typeof text === "string" ? text : "").trim().toLowerCase().replace(/[\s.!?。？！]+$/, "");
 	return normalized === "stop ponytail" || normalized === "normal mode";
 }
 /** Config directory: `$XDG_CONFIG_HOME/ponytail`, `%APPDATA%\ponytail`, else `~/.config/ponytail`. */
@@ -2154,38 +2157,70 @@ function configPath(env = process.env) {
 	return join(configDir(env), "config.json");
 }
 /**
-* Resolve a default from the environment value, then a parsed config document,
-* then {@link DEFAULT_MODE}. Pure so callers can supply fixtures.
+* Read the configured default with diagnostics: environment variable first,
+* then the config file, then `full`. A missing config file is normal and
+* yields no issue; a broken one yields the fallback mode plus one issue for
+* the caller to warn about once.
 */
-function resolveDefaultMode(envMode, configText) {
-	const fromEnv = normalizeRuntimeMode(envMode);
-	if (fromEnv) return fromEnv;
-	if (configText !== void 0) try {
-		const config = JSON.parse(stripBom(configText));
-		if (config && typeof config === "object" && !Array.isArray(config)) {
-			const fromConfig = normalizeRuntimeMode(config.defaultMode);
-			if (fromConfig) return fromConfig;
+function readDefaultModeInfo(env = process.env) {
+	const path = configPath(env);
+	const envMode = normalizeRuntimeMode(env.PONYTAIL_DEFAULT_MODE);
+	let configText;
+	try {
+		configText = readFileSync(path, "utf8");
+	} catch (error) {
+		if (error.code === "ENOENT") return { mode: envMode ?? "full" };
+		return {
+			mode: envMode ?? "full",
+			issue: {
+				kind: "read",
+				detail: `${path}: ${error.message}`
+			}
+		};
+	}
+	let configIssue;
+	let fromConfig = null;
+	try {
+		const parsed = JSON.parse(stripBom(configText));
+		if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) configIssue = {
+			kind: "shape",
+			detail: `${path}: root must be a JSON object`
+		};
+		else if ("defaultMode" in parsed) {
+			fromConfig = normalizeRuntimeMode(parsed.defaultMode);
+			if (!fromConfig) configIssue = {
+				kind: "value",
+				detail: `${path}: defaultMode is not lite|full|ultra|off`
+			};
 		}
-	} catch {}
-	return DEFAULT_MODE;
+	} catch (error) {
+		configIssue = {
+			kind: "json",
+			detail: `${path}: ${error.message}`
+		};
+	}
+	if (envMode) return {
+		mode: envMode,
+		...configIssue ? { issue: configIssue } : {}
+	};
+	if (configIssue) return {
+		mode: DEFAULT_MODE,
+		issue: configIssue
+	};
+	return { mode: fromConfig ?? "full" };
 }
 /**
 * Read the configured default for this host: environment variable first, then
 * the config file, then `full`.
 */
 function readDefaultMode(env = process.env) {
-	const path = configPath(env);
-	let configText;
-	try {
-		configText = readFileSync(path, "utf8");
-	} catch {
-		configText = void 0;
-	}
-	return resolveDefaultMode(env.PONYTAIL_DEFAULT_MODE, configText);
+	return readDefaultModeInfo(env).mode;
 }
 /**
 * Persist a new default level to the config file, preserving other fields.
 * Returns the normalized mode, or `null` when the value is not a runtime mode.
+* Throws when the write itself fails, so callers never report success for a
+* file that was not written.
 */
 function writeDefaultMode(mode, env = process.env) {
 	const normalized = normalizeRuntimeMode(mode);
@@ -2197,8 +2232,18 @@ function writeDefaultMode(mode, env = process.env) {
 		if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) config = parsed;
 	} catch {}
 	config.defaultMode = normalized;
+	const text = `${JSON.stringify(config, null, 2)}\n`;
 	mkdirSync(dirname(path), { recursive: true });
-	writeFileSync(path, `${JSON.stringify(config, null, 2)}\n`, "utf8");
+	const temp = join(dirname(path), `.config-${process.pid}-${Date.now()}.tmp`);
+	try {
+		writeFileSync(temp, text, "utf8");
+		renameSync(temp, path);
+	} catch (error) {
+		try {
+			unlinkSync(temp);
+		} catch {}
+		throw new Error(`failed to write ${path}: ${error.message}`);
+	}
 	return normalized;
 }
 /**
@@ -2222,18 +2267,37 @@ var ModeStore = class {
 	}
 };
 /**
-* Compile `PONYTAIL_SUBAGENT_MATCHER` into a case-insensitive regex, or `null`
-* — for "no matcher" and for invalid patterns, both of which mean the ruleset
-* applies to every agent (fail open, like upstream).
+* Compile `PONYTAIL_SUBAGENT_MATCHER` into a case-insensitive regex. An unset
+* matcher yields `null`; an invalid pattern stays fail-open (every agent gets
+* the ruleset) but is reported so the caller can warn exactly once.
 */
 function compileSubagentMatcher(raw) {
-	if (!raw) return null;
+	if (!raw) return {
+		matcher: null,
+		invalid: false
+	};
 	try {
-		return new RegExp(raw, "i");
+		return {
+			matcher: new RegExp(raw, "i"),
+			invalid: false
+		};
 	} catch {
-		return null;
+		return {
+			matcher: null,
+			invalid: true
+		};
 	}
 }
+/**
+* The stable per-session identity backing every mode override. DSH's `Agent`
+* type documents `id` as "the single identity shared with session", so the
+* agent id IS the SessionId: one entry per live session, never shared between
+* two sessions, and stable across the session's lifetime. Centralized so the
+* key choice lives in exactly one place.
+*/
+function sessionKey(agent) {
+	return agent.id;
+}
 /** Whether a session is a subagent child (origin, or any delegation depth with no origin). */
 function isSubagentSession(header) {
 	return header.origin === "subagent" || (header.delegationDepth ?? 0) > 0;
@@ -2245,7 +2309,7 @@ function isSubagentSession(header) {
 * `hooks/ponytail-instructions.js`, so the injected text is byte-for-byte the
 * same ruleset every other host emits, filtered to the active intensity.
 *
-* @module @mengyuly/dsh-ponytail
+* @module @deepseek-ai/dsh-ponytail
 */
 /**
 * Keep a line of the skill body only when it belongs to every mode or to the
@@ -2309,7 +2373,7 @@ const instructionCache = /* @__PURE__ */ new Map();
 * from `PONYTAIL_DEFAULT_MODE` then `~/.config/ponytail/config.json` (see
 * {@link readDefaultMode}).
 *
-* @module @mengyuly/dsh-ponytail
+* @module @deepseek-ai/dsh-ponytail
 */
 const name = "ponytail";
 const inject = ["systemPrompt", "skills"];
@@ -2331,7 +2395,7 @@ function containsDeactivation(messages) {
 }
 /** Mode visible to one agent: its session override, else the configured default. */
 function modeFor(deps, agent) {
-	return deps.store.modeFor(String(agent.id), deps.defaultMode());
+	return deps.store.modeFor(sessionKey(agent), deps.defaultMode());
 }
 /**
 * Queue one skill's full `<skill_content>` rendering as the model's next
@@ -2369,21 +2433,46 @@ function registerCommands(deps, commandCtx) {
 	commandCtx.commands.register({
 		name: "ponytail",
 		description: "Set or show Ponytail lazy senior dev intensity",
-		input: { hint: "[lite|full|ultra|off|default <mode>]" },
+		input: { hint: "[status|default <mode>|lite|full|ultra|off]" },
 		handler: ({ agent, rawInput }) => {
 			const input = rawInput.trim().toLowerCase();
 			const [head, ...rest] = input.split(/\s+/).filter(Boolean);
 			if ((head ?? "") === "default") {
-				const written = writeDefaultMode(rest[0]);
+				let written;
+				try {
+					written = writeDefaultMode(rest[0]);
+				} catch (error) {
+					return {
+						kind: "error",
+						text: `Failed to save default: ${error.message}`
+					};
+				}
 				if (!written) return {
 					kind: "error",
 					text: "Usage: /ponytail default [lite|full|ultra|off]"
 				};
-				deps.setDefault(written);
+				const effective = readDefaultMode();
+				deps.setDefault(effective);
+				if (written === effective) {
+					agent.steer(createUserMessage({
+						content: [{
+							type: "text",
+							text: `PONYTAIL DEFAULT SET — new sessions start in ${written}.`
+						}],
+						source: {
+							kind: "plugin",
+							plugin: name
+						}
+					}));
+					return {
+						kind: "success",
+						text: `Ponytail default set — new sessions start in ${written}.`
+					};
+				}
 				agent.steer(createUserMessage({
 					content: [{
 						type: "text",
-						text: `PONYTAIL DEFAULT SET — new sessions start in ${written}.`
+						text: `PONYTAIL DEFAULT SET — saved ${written}, effective ${effective} (PONYTAIL_DEFAULT_MODE).`
 					}],
 					source: {
 						kind: "plugin",
@@ -2392,11 +2481,50 @@ function registerCommands(deps, commandCtx) {
 				}));
 				return {
 					kind: "success",
-					text: `Ponyytail default set — new sessions start in ${written}.`
+					text: `Saved default: ${written}. Effective default: ${effective}, overridden by PONYTAIL_DEFAULT_MODE.`
 				};
 			}
+			if (input === "status") return {
+				kind: "success",
+				text: `Ponytail mode: ${modeFor(deps, agent)}. Use /ponytail lite|full|ultra|off.`
+			};
 			if (input === "") {
 				const current = modeFor(deps, agent);
+				const effectiveDefault = deps.defaultMode();
+				if (current === "off") {
+					if (effectiveDefault === "off") {
+						deps.store.set(sessionKey(agent), "full");
+						agent.steer(createUserMessage({
+							content: [{
+								type: "text",
+								text: "PONYTAIL MODE CHANGED — level: full"
+							}],
+							source: {
+								kind: "plugin",
+								plugin: name
+							}
+						}));
+						return {
+							kind: "success",
+							text: "Ponytail re-enabled at full (the effective default is off)."
+						};
+					}
+					deps.store.clear(sessionKey(agent));
+					agent.steer(createUserMessage({
+						content: [{
+							type: "text",
+							text: `PONYTAIL MODE ACTIVE — level: ${effectiveDefault}`
+						}],
+						source: {
+							kind: "plugin",
+							plugin: name
+						}
+					}));
+					return {
+						kind: "success",
+						text: `Ponytail re-enabled. Effective default: ${effectiveDefault}.`
+					};
+				}
 				agent.steer(createUserMessage({
 					content: [{
 						type: "text",
@@ -2415,9 +2543,9 @@ function registerCommands(deps, commandCtx) {
 			const mode = normalizeRuntimeMode(input);
 			if (!mode) return {
 				kind: "error",
-				text: "Usage: /ponytail [lite|full|ultra|off]"
+				text: "Usage: /ponytail [status|default <mode>|lite|full|ultra|off]"
 			};
-			deps.store.set(String(agent.id), mode);
+			deps.store.set(sessionKey(agent), mode);
 			agent.steer(createUserMessage({
 				content: [{
 					type: "text",
@@ -2464,18 +2592,42 @@ function descriptionFor(skill) {
 */
 function apply(ctx) {
 	let defaultMode = null;
-	const readDefault = () => defaultMode ??= readDefaultMode();
+	const warned = /* @__PURE__ */ new Set();
+	const warnOnce = (key, message) => {
+		if (warned.has(key)) return;
+		warned.add(key);
+		ctx.logger.warn(`[ponytail] ${message}`);
+	};
+	const refreshDefault = () => {
+		const resolution = readDefaultModeInfo();
+		if (resolution.issue) warnOnce(`default:${resolution.issue.kind}`, `${resolution.issue.detail}; using ${resolution.mode}`);
+		defaultMode = resolution.mode;
+		return defaultMode;
+	};
+	const readDefault = () => defaultMode ?? refreshDefault();
 	const setDefault = (mode) => {
 		defaultMode = mode;
 	};
 	const store = new ModeStore();
-	const matcher = compileSubagentMatcher(process.env.PONYTAIL_SUBAGENT_MATCHER);
+	const matcherResult = compileSubagentMatcher(process.env.PONYTAIL_SUBAGENT_MATCHER);
+	const matcher = matcherResult.matcher;
+	if (matcherResult.invalid) warnOnce("matcher:invalid", "PONYTAIL_SUBAGENT_MATCHER is not a valid regular expression; ignoring it (fail-open).");
 	const configFile = configPath();
 	const onConfigChange = () => {
-		defaultMode = readDefaultMode();
+		const resolution = readDefaultModeInfo();
+		if (resolution.issue) {
+			warnOnce(`config:${resolution.issue.kind}`, `${resolution.issue.detail}; keeping the previous default`);
+			return;
+		}
+		defaultMode = resolution.mode;
 	};
 	watchFile(configFile, { interval: 1e3 }, onConfigChange).unref();
-	ctx.effect(() => () => unwatchFile(configFile, onConfigChange), "ponytail: config hot reload");
+	ctx.effect(() => () => {
+		unwatchFile(configFile, onConfigChange);
+	}, "ponytail: config hot reload");
+	ctx.on("agent/disposed", ({ agent }) => {
+		store.clear(sessionKey(agent));
+	});
 	ctx.systemPrompt.section({
 		name: "ponytail",
 		order: SECTION_ORDER,
@@ -2484,7 +2636,7 @@ function apply(ctx) {
 				const preset = agent.session.header.agentPreset;
 				if (preset && !matcher.test(preset)) return "";
 			}
-			return getPonytailInstructions(agent ? store.modeFor(String(agent.id), readDefault()) : readDefault());
+			return getPonytailInstructions(agent ? store.modeFor(sessionKey(agent), readDefault()) : readDefault());
 		}
 	});
 	for (const skill of ponytailSkills()) ctx.skills.register(skill);
@@ -2498,7 +2650,7 @@ function apply(ctx) {
 	});
 	ctx.on("agent/pre-step", async (payload, next) => {
 		const deactivated = containsDeactivation(payload.messages);
-		if (deactivated) store.set(String(payload.agent.id), "off");
+		if (deactivated) store.set(sessionKey(payload.agent), "off");
 		const decision = await next();
 		if (deactivated && decision.kind === "enter") return {
 			kind: "enter",

package/lib/invariant.js

@@ -1,9 +1,9 @@
 //#region lib/types/invariant.js
 /**
-* Package-owned invariant companion for `@mengyuly/dsh-ponytail`.
-* @module @mengyuly/dsh-ponytail/invariant
+* Package-owned invariant companion for `@deepseek-ai/dsh-ponytail`.
+* @module @deepseek-ai/dsh-ponytail/invariant
 */
-const PACKAGE_NAME = "@mengyuly/dsh-ponytail";
+const PACKAGE_NAME = "@deepseek-ai/dsh-ponytail";
 /** Cordis companion plugin name. */
 const name = "ponytail-invariant";
 /** Service required before the companion can reserve package ownership. */

package/lib/types/content.d.ts

@@ -4,7 +4,7 @@
  * `skill` tool). `ponytail` is the source the system-prompt ruleset is
  * filtered from; the other five ship verbatim as runtime skills.
  *
- * @module @mengyuly/dsh-ponytail
+ * @module @deepseek-ai/dsh-ponytail
  */
 import type { SkillRegistration } from '@deepseek-ai/dsh-skill';
 /** The always-on lazy-senior-dev ruleset: also registered as a loadable skill. */
@@ -18,8 +18,7 @@ export declare const DEBT_SKILL_BODY = "\nEvery deliberate ponytail shortcut is
 export declare const DEBT_DESCRIPTION: string;
 export declare const GAIN_SKILL_BODY = "\nDisplay this scoreboard when invoked. One-shot: do NOT change mode, write flag\nfiles, or persist anything.\n\nThe figures are the published benchmark medians (5 everyday tasks: email\nvalidator, debounce, CSV sum, countdown timer, rate limiter; three models:\nHaiku, Sonnet, Opus). They are measured, not computed from the current repo.\nSource: the upstream `benchmarks/` directory and README.\n\n## Scoreboard\n\nRender plain ASCII bars. The bar length shows the measured range; the label\ncarries the exact figure:\n\n```\n  ponytail gain                     benchmark median \u00B7 5 tasks \u00B7 3 models\n\n  Lines of code   no-skill  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  100%\n                  ponytail  \u2588\u2588\u258C\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7    6\u201320%   \u25BC 80\u201394%\n  Cost            no-skill  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  100%\n                  ponytail  \u2588\u2588\u2588\u2588\u2588\u258C\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7   23\u201353%  \u25BC 47\u201377%\n  Speed           ponytail  \u25B8 3\u20136\u00D7 faster\n\n  This repo:  /ponytail-debt  (shortcuts you deferred)\n              /ponytail-audit (what's still cuttable)\n```\n\n## Honesty boundary\n\nThese are benchmark medians, not this repo. NEVER print a per-repo savings\nnumber (\"you saved X lines/tokens here\"): the unbuilt version was never\nwritten, so there is no real baseline to subtract from in a live repo. The\nonly real per-repo figures come from `/ponytail-debt` (a counted ledger), and\nthis card points there instead of inventing one.\n\n## Boundaries\n\nOne-shot display. Edits nothing, changes no mode.\n\"stop ponytail\" or \"normal mode\": revert.\n";
 export declare const GAIN_DESCRIPTION: string;
-export declare const HELP_SKILL_BODY = "\nDisplay this reference card when invoked. One-shot, do NOT change mode,\nwrite flag files, or persist anything.\n\n## Levels\n\n| Level | Trigger | What change |\n|-------|---------|-------------|\n| **Lite** | `/ponytail lite` | Build what's asked, name the lazier alternative in one line. |\n| **Full** | `/ponytail` | The ladder enforced: YAGNI \u2192 stdlib \u2192 native \u2192 one line \u2192 minimum. Default. |\n| **Ultra** | `/ponytail ultra` | YAGNI extremist. Deletion before addition. Challenges requirements before building. |\n| **Off** | `/ponytail off` | Ponytail stops injecting its ruleset for this session. |\n\nLevel is session-scoped until changed.\n\n## Skills\n\n| Skill | Trigger | What it does |\n|-------|---------|--------------|\n| **ponytail** | `/ponytail` | Lazy mode itself. Simplest solution that works. |\n| **ponytail-review** | `/ponytail-review` | Over-engineering review: `L42: yagni: factory, one product. Inline.` |\n| **ponytail-audit** | `/ponytail-audit` | Whole-repo over-engineering audit: ranked list of what to delete. |\n| **ponytail-debt** | `/ponytail-debt` | Harvest `ponytail:` shortcut comments into a tracked ledger. |\n| **ponytail-gain** | `/ponytail-gain` | Measured-impact scoreboard: less code, less cost, more speed. |\n| **ponytail-help** | `/ponytail-help` | This card. |\n\nYou can also load any of these with the `skill` tool.\n\n## Deactivate\n\nSay \"stop ponytail\" or \"normal mode\". Resume anytime with `/ponytail`.\n`/ponytail off` also works. Level is session-scoped; a new session starts\nfrom the configured default.\n\n## Configure Default Mode\n\nDefault mode = `full`, auto-active every session. Change it:\n\n**Environment variable** (highest priority):\n```bash\nexport PONYTAIL_DEFAULT_MODE=ultra\n```\n\n**Config file** (`~/.config/ponytail/config.json`, Windows: `%APPDATA%\\ponytail\\config.json`):\n```json\n{ \"defaultMode\": \"lite\" }\n```\n\nSet `\"off\"` to disable auto-activation on session start, activate manually\nwith `/ponytail` when wanted. `/ponytail default <mode>` persists a new\ndefault from inside a session.\n\nResolution: env var > config file > `full`.\n\n## More\n\nFull docs + examples: https://github.com/DietrichGebert/ponytail\n";
+export declare const HELP_SKILL_BODY = "\nDisplay this reference card when invoked. One-shot, do NOT change mode,\nwrite flag files, or persist anything.\n\n## Levels\n\n| Level | Trigger | What change |\n|-------|---------|-------------|\n| **Lite** | `/ponytail lite` | Build what's asked, name the lazier alternative in one line. |\n| **Full** | `/ponytail` | The ladder enforced: YAGNI \u2192 stdlib \u2192 native \u2192 one line \u2192 minimum. Default. |\n| **Ultra** | `/ponytail ultra` | YAGNI extremist. Deletion before addition. Challenges requirements before building. |\n| **Off** | `/ponytail off` | Ponytail stops injecting its ruleset for this session. |\n\nLevel is session-scoped until changed.\n\n## Skills\n\n| Skill | Trigger | What it does |\n|-------|---------|--------------|\n| **ponytail** | `/ponytail` | Lazy mode itself. Simplest solution that works. |\n| **ponytail-review** | `/ponytail-review` | Over-engineering review: `L42: yagni: factory, one product. Inline.` |\n| **ponytail-audit** | `/ponytail-audit` | Whole-repo over-engineering audit: ranked list of what to delete. |\n| **ponytail-debt** | `/ponytail-debt` | Harvest `ponytail:` shortcut comments into a tracked ledger. |\n| **ponytail-gain** | `/ponytail-gain` | Measured-impact scoreboard: less code, less cost, more speed. |\n| **ponytail-help** | `/ponytail-help` | This card. |\n\nYou can also load any of these with the `skill` tool.\n\n## Deactivate\n\nSay \"stop ponytail\" or \"normal mode\". Resume anytime with `/ponytail` \u2014\nit re-enables at the effective default (or `full` when that is off too).\n`/ponytail status` only shows the current level, never changes it.\n`/ponytail off` also works. Level is session-scoped; a new session starts\nfrom the configured default.\n\n## Configure Default Mode\n\nDefault mode = `full`, auto-active every session. Change it:\n\n**Environment variable** (highest priority):\n```bash\nexport PONYTAIL_DEFAULT_MODE=ultra\n```\n\n**Config file** (`~/.config/ponytail/config.json`, Windows: `%APPDATA%\\ponytail\\config.json`):\n```json\n{ \"defaultMode\": \"lite\" }\n```\n\nSet `\"off\"` to disable auto-activation on session start, activate manually\nwith `/ponytail` when wanted. `/ponytail default <mode>` persists a new\ndefault to the config file; an exported `PONYTAIL_DEFAULT_MODE` still\noutranks the saved value for new sessions.\n\nResolution: env var > config file > `full`.\n\n## More\n\nFull docs + examples: https://github.com/DietrichGebert/ponytail\n";
 export declare const HELP_DESCRIPTION: string;
 /** Ordered set of runtime skills surfaced to the model catalog and `/` menu. */
 export declare function ponytailSkills(): readonly SkillRegistration[];
-//# sourceMappingURL=content.d.ts.map

package/lib/types/index.d.ts

@@ -10,7 +10,7 @@
  * from `PONYTAIL_DEFAULT_MODE` then `~/.config/ponytail/config.json` (see
  * {@link readDefaultMode}).
  *
- * @module @mengyuly/dsh-ponytail
+ * @module @deepseek-ai/dsh-ponytail
  */
 import type { Context } from '@deepseek-ai/cordis';
 export declare const name = "ponytail";
@@ -34,4 +34,3 @@ export declare function containsDeactivation(messages: readonly {
  * commands, and the plain-text deactivation listener.
  */
 export declare function apply(ctx: Context): void;
-//# sourceMappingURL=index.d.ts.map

package/lib/types/instructions.d.ts

@@ -3,7 +3,7 @@
  * `hooks/ponytail-instructions.js`, so the injected text is byte-for-byte the
  * same ruleset every other host emits, filtered to the active intensity.
  *
- * @module @mengyuly/dsh-ponytail
+ * @module @deepseek-ai/dsh-ponytail
  */
 import { type PonytailRuntimeMode } from './modes.ts';
 /**
@@ -21,4 +21,3 @@ export declare function fallbackInstructions(mode: PonytailRuntimeMode): string;
  * Returns an empty string for `off` (ponytail contributes nothing).
  */
 export declare function getPonytailInstructions(mode: PonytailRuntimeMode | null | undefined): string;
-//# sourceMappingURL=instructions.d.ts.map

package/lib/types/invariant.d.ts

@@ -1,6 +1,6 @@
 /**
- * Package-owned invariant companion for `@mengyuly/dsh-ponytail`.
- * @module @mengyuly/dsh-ponytail/invariant
+ * Package-owned invariant companion for `@deepseek-ai/dsh-ponytail`.
+ * @module @deepseek-ai/dsh-ponytail/invariant
  */
 import type { Context } from '@deepseek-ai/cordis';
 /** Cordis companion plugin name. */
@@ -13,4 +13,3 @@ export declare const inject: string[];
  * @returns the installed registration's disposer after setup succeeds.
  */
 export declare const apply: (ctx: Context) => Promise<() => void>;
-//# sourceMappingURL=invariant.d.ts.map

package/lib/types/modes.d.ts

@@ -5,7 +5,7 @@
  * level via the `/ponytail` command is session-scoped and lives in an
  * in-memory, per-agent {@link ModeStore}.
  *
- * @module @mengyuly/dsh-ponytail
+ * @module @deepseek-ai/dsh-ponytail
  */
 /** One settable runtime intensity. `review` is command-only and never a default. */
 export type PonytailRuntimeMode = 'off' | 'lite' | 'full' | 'ultra';
@@ -31,6 +31,28 @@ export declare function configPath(env?: NodeJS.ProcessEnv): string;
  * then {@link DEFAULT_MODE}. Pure so callers can supply fixtures.
  */
 export declare function resolveDefaultMode(envMode: unknown, configText: string | undefined): PonytailRuntimeMode;
+/**
+ * One configuration problem worth surfacing exactly once. `read` covers
+ * permission/IO failures, `json` malformed documents, `shape` a root that is
+ * not an object, and `value` a `defaultMode` that is not a runtime level.
+ */
+export type DefaultModeIssueKind = 'read' | 'json' | 'shape' | 'value';
+export interface DefaultModeIssue {
+    readonly kind: DefaultModeIssueKind;
+    readonly detail: string;
+}
+/** The resolved default plus the first config problem found, if any. */
+export interface DefaultModeResolution {
+    readonly mode: PonytailRuntimeMode;
+    readonly issue?: DefaultModeIssue;
+}
+/**
+ * Read the configured default with diagnostics: environment variable first,
+ * then the config file, then `full`. A missing config file is normal and
+ * yields no issue; a broken one yields the fallback mode plus one issue for
+ * the caller to warn about once.
+ */
+export declare function readDefaultModeInfo(env?: NodeJS.ProcessEnv): DefaultModeResolution;
 /**
  * Read the configured default for this host: environment variable first, then
  * the config file, then `full`.
@@ -39,6 +61,8 @@ export declare function readDefaultMode(env?: NodeJS.ProcessEnv): PonytailRuntim
 /**
  * Persist a new default level to the config file, preserving other fields.
  * Returns the normalized mode, or `null` when the value is not a runtime mode.
+ * Throws when the write itself fails, so callers never report success for a
+ * file that was not written.
  */
 export declare function writeDefaultMode(mode: unknown, env?: NodeJS.ProcessEnv): PonytailRuntimeMode | null;
 /**
@@ -56,14 +80,26 @@ export declare class ModeStore {
     clear(agentId: string): void;
 }
 /**
- * Compile `PONYTAIL_SUBAGENT_MATCHER` into a case-insensitive regex, or `null`
- * — for "no matcher" and for invalid patterns, both of which mean the ruleset
- * applies to every agent (fail open, like upstream).
+ * Compile `PONYTAIL_SUBAGENT_MATCHER` into a case-insensitive regex. An unset
+ * matcher yields `null`; an invalid pattern stays fail-open (every agent gets
+ * the ruleset) but is reported so the caller can warn exactly once.
+ */
+export declare function compileSubagentMatcher(raw: string | undefined): {
+    matcher: RegExp | null;
+    invalid: boolean;
+};
+/**
+ * The stable per-session identity backing every mode override. DSH's `Agent`
+ * type documents `id` as "the single identity shared with session", so the
+ * agent id IS the SessionId: one entry per live session, never shared between
+ * two sessions, and stable across the session's lifetime. Centralized so the
+ * key choice lives in exactly one place.
  */
-export declare function compileSubagentMatcher(raw: string | undefined): RegExp | null;
+export declare function sessionKey(agent: {
+    readonly id: string;
+}): string;
 /** Whether a session is a subagent child (origin, or any delegation depth with no origin). */
 export declare function isSubagentSession(header: {
     origin?: 'subagent';
     delegationDepth?: number;
 }): boolean;
-//# sourceMappingURL=modes.d.ts.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mengyuly/dsh-ponytail",
   "description": "Lazy senior dev mode for DeepSeek Harness: always-on minimal-code ruleset, intensity switching, and short review/audit/debt/gain/help skills",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "publishConfig": {
     "access": "public"
   },
@@ -25,6 +25,7 @@
     "./package.json": "./package.json"
   },
   "files": [
+    "CHANGELOG.md",
     "lib/index.js",
     "lib/invariant.js",
     "lib/types/**/*.d.ts",
@@ -43,5 +44,11 @@
     "@deepseek-ai/dsh-llm": ">=0.0.1-rc <2",
     "@deepseek-ai/dsh-skill": ">=0.0.1-rc <2",
     "@deepseek-ai/dsh-system-prompt": ">=0.0.1-rc <2"
+  },
+  "scripts": {
+    "sync:dist": "node scripts/sync-dist.mjs",
+    "verify:dist": "node scripts/verify-dist.mjs",
+    "verify:pack": "node scripts/verify-pack.mjs",
+    "test:consumer": "node scripts/test-consumer.mjs"
   }
-}
+}