@mstar-harness/dsh 3.1.1 → 3.1.2

package/README.md

@@ -2,7 +2,7 @@
 
 English | [中文](README.zh.md)
 
-![dsh](https://img.shields.io/badge/dsh-0.1.0--rc.8-4B32C3.svg)
+![dsh](https://img.shields.io/badge/dsh-0.1.1--rc.1-4B32C3.svg)
 
 [Morning Star](https://github.com/btspoony/mstar-harness) as a first-class dsh (DeepSeek Harness) host — a cordis function plugin that mounts the mstar engine in-process, implements the engine `HostAdapter` (`host: 'dsh'`), guards `{HARNESS_DIR}/status.json` writes (validate + advisory; repair-escape under hard), blocks disallowed subagent dispatches when `Enforcement: hard` is on, lints `SKILL.md` writes under the mounted skill roots, mounts the mstar `skills/` mirror through the dsh skill-filesystem provider (single canonical mount), and appends a durable `mstar-engine-status` catalog row to every composed agent step. Boot with a dsh Loader app; everything acts through the seam's refusal/advisory channels, never by patching the tools.
 
@@ -561,7 +561,7 @@ The catalog row is appended at the END of the composed step messages, after dele
 - **Entry is a module index over `src/gates/*`** — the split shipped: `src/index.ts` (371 lines) re-exports the frozen 47-name export surface (28 value + 19 type-only names; `Config` counts once) from the gate modules (`_shared` / `status` / `skill-lint` / `seams` / `dispatch` / `catalog` / `tools` / `adapter`) and keeps the plugin manifest, the single cordis augmentation point, the command registration, and the `apply()` startup wiring. The surface is frozen by `tests/export-surface.spec.ts` — the runtime value-export set plus, under `typecheck:tests` (`bunx tsc --noEmit -p tests/tsconfig.json`), the value-namespace identity and the per-name type-only probes.
 - **Engine dsh rows are upstreaming-destined** — the dsh changes to engine `host.ts` (`DetectResult`, `ToolSignal`, `resolveSkillRoot`) live in the mstar-workflow engine mirror and are intended for a user-authorized upstream PR into mstar-harness; the `mstar-host` skill mirror (§ Detect / § Resolve loaded skill root / `references/dsh.md`) updates with it.
 - **Iteration stepper: Step 1 is compass-driven, Step 5 is schema-driven** — the zone dashboard's Step 1 (iteration-start) is the current step while the steering compass is `status: active` (Phase 1 in flight — no gate verdict, so no PASS/FAIL badge); Step 5 (merge-ready) is a schema constant the engine gate never lights as current (transition covers Phase 2→3→4 only), so it always renders idle — recorded in the iteration guide, not a defect. The full panel-limitation list lives in the Web client plugin section.
-- **`dsh-llm-fallbacks` is a registry `dependencies` entry with type-only imports** — declared `^0.2.0` (caret range admits 0.2.1+; the probe shape-assertion test is the executable drift gate) and `--external` in the build, so `dist/` carries no bundled runtime import (only three string literals naming the package — the probe's loader-entry match and the two decoration log lines; the advisory logs say `fallbacks`); activation is a SEPARATE explicit install (two-command contract), never transitive. The library-form dependency exists so future value imports resolve without a manifest change; `--external` remains the guard.
+- **`dsh-llm-fallbacks` is a registry `dependencies` entry with type-only imports** — caret range lives in `package.json` (the probe shape-assertion test is the executable drift gate) and `--external` in the build, so `dist/` carries no bundled runtime import (only three string literals naming the package — the probe's loader-entry match and the two decoration log lines; the advisory logs say `fallbacks`); activation is a SEPARATE explicit install (two-command contract), never transitive. The library-form dependency exists so future value imports resolve without a manifest change; `--external` remains the guard.
 - **Role→model override NOT delivered this batch** — routing a role to a fallbacks `model` (or persona via fallbacks rules) would require rewriting the child's `agentOptions` on the start request, but start-request options are caller-controlled (tool-subagent's own Config; call args are `description`/`prompt`/`run_in_background` only, deep-frozen). Awaits upstream `fallbacks-explicit-role-tool` or the N-B1 systemPrompt adoption (roadmap §10.4).
 - **Decoration is a minimal per-child section, not the N-B1 systemPrompt adoption** — `mstar:role-persona` is one agent-scoped section on the child's context; no harness-rules sections, no PromptContext, no variables. N-B1 (roadmap §10.4) may absorb or replace this channel later without changing the observable (AC-3).
 - **Persona injection is fallbacks-independent** — `dsh-llm-fallbacks` only routes LLM failures; it is never required for decoration. Unmounted → the same persona lands from the mstar Config through the same channel with one debug log (AC-4). If `ctx.get('agents')` is absent in a composition (no dsh-agent), decoration is skipped with one debug log.

package/README.zh.md

@@ -2,7 +2,7 @@
 
 [English](README.md) | 中文
 
-![dsh](https://img.shields.io/badge/dsh-0.1.0--rc.8-4B32C3.svg)
+![dsh](https://img.shields.io/badge/dsh-0.1.1--rc.1-4B32C3.svg)
 
 让 [Morning Star](https://github.com/btspoony/mstar-harness) 成为一等公民的 dsh（DeepSeek Harness）宿主——一个 cordis 函数插件，将 mstar engine 进程内挂载，实现 engine `HostAdapter`（`host: 'dsh'`），守护 `{HARNESS_DIR}/status.json` 写入（校验 + 咨询；hard 下按修复逃生放行），在 `Enforcement: hard` 开启时阻止被禁止的 subagent 派发，对挂载技能根下的 `SKILL.md` 写入执行技能撰写 lint，通过 dsh skill-filesystem 提供者挂载 mstar `skills/` 镜像（单一规范挂载），并向每个组合后的 agent 步骤追加一条持久化的 `mstar-engine-status` catalog 行。随 dsh Loader 应用启动；一切均通过 seam 的拒绝/咨询通道行使职责，从不改动工具本身。
 
@@ -334,7 +334,7 @@ catalog 行在委托之后追加到组合步骤消息的**末尾**——请求
 - **入口是 `src/gates/*` 之上的模块索引**——拆分已交付：`src/index.ts`（371 行）从各 gate 模块（`_shared` / `status` / `skill-lint` / `seams` / `dispatch` / `catalog` / `tools` / `adapter`）原样 re-export 冻结的 47 名导出面（28 值导出 + 19 type-only 名；`Config` 计一次），并保留插件 manifest、单一 cordis augmentation 点、命令注册与 `apply()` 启动接线。导出面由 `tests/export-surface.spec.ts` 冻结——运行时值导出集 + `typecheck:tests`（`bunx tsc --noEmit -p tests/tsconfig.json`）下的值命名空间恒等与逐名类型探测。
 - **engine dsh 行待上游化**——engine `host.ts` 的 dsh 改动（`DetectResult`、`ToolSignal`、`resolveSkillRoot`）位于 mstar-workflow engine 镜像，计划经用户授权的上游 PR 合入 mstar-harness；`mstar-host` 技能镜像（§ Detect / § Resolve loaded skill root / `references/dsh.md`）随之一并更新。
 - **迭代 stepper：Step 1 为 compass 驱动，Step 5 为 schema 驱动**——zone dashboard 的 Step 1（iteration-start）在 steering compass `status: active`（Phase 1 进行中）时为当前步（无 gate 判定 → 无 PASS/FAIL 徽标）；Step 5（merge-ready）是 engine 闸门永不点亮为当前的 schema 常量（transition 只覆盖 Phase 2→3→4，merge-ready 从不是 gate transition）；仅当 Step 4 为当前步时作为 `next` 渲染，其余为 idle——已记录于迭代 guide，非缺陷。完整面板限制清单见 Web 客户端插件一节。
-- **`dsh-llm-fallbacks` 为 registry `dependencies` 条目且仅类型导入**——声明 `^0.2.0`（caret 范围允许 0.2.1+；探测形状断言测试是可执行的漂移闸门）并在构建中 `--external`，因此 `dist/` 无打包运行时导入（仅 3 处命名该包的字符串字面量——探测的 loader 条目匹配与两条装饰日志；建议日志写作 `fallbacks`）；激活是**单独显式安装**（双命令契约），绝不传递。库形态依赖存在是为未来值导入无需改 manifest 即可解析；`--external` 仍是护栏。
+- **`dsh-llm-fallbacks` 为 registry `dependencies` 条目且仅类型导入**——caret 范围写在 `package.json`（探测形状断言测试是可执行的漂移闸门）并在构建中 `--external`，因此 `dist/` 无打包运行时导入（仅 3 处命名该包的字符串字面量——探测的 loader 条目匹配与两条装饰日志；建议日志写作 `fallbacks`）；激活是**单独显式安装**（双命令契约），绝不传递。库形态依赖存在是为未来值导入无需改 manifest 即可解析；`--external` 仍是护栏。
 - **本批次未交付角色→模型覆盖**——把角色路由到 fallbacks `model`（或经 fallbacks 规则路由 persona）需要改写启动请求上的子会话 `agentOptions`，但启动请求选项由调用方控制（tool-subagent 自己的 Config；调用参数仅为 `description`/`prompt`/`run_in_background`，且深度冻结）。等待上游 `fallbacks-explicit-role-tool` 或 N-B1 systemPrompt 采纳（roadmap §10.4）。
 - **装饰是最小化的每子会话段，而非 N-B1 systemPrompt 采纳**——`mstar:role-persona` 是子上下文上的一个 agent 作用域段；无 harness 规则段、无 PromptContext、无变量。N-B1（roadmap §10.4）日后可吸收或替换该通道而不改变可观察行为（AC-3）。
 - **persona 注入与 fallbacks 无关**——`dsh-llm-fallbacks` 只路由 LLM 失败；装饰从不依赖它。未挂载 → 同一 persona 经同一通道来自 mstar Config，仅多一条 debug 日志（AC-4）。若组合中缺 `ctx.get('agents')`（无 dsh-agent），装饰以一条 debug 日志跳过。

package/dist/gates/_shared.d.ts

@@ -35,8 +35,10 @@ export interface Config {
      * as the anti-recursion binding: an Assignment whose `Execute as` equals this
      * role is a self-dispatch (critical violation — leaf executors must not
      * re-invoke their own role). dsh exposes no agent role on the tool-execution
-     * context, so the deployment declares it. Absent → the anti-recursion
-     * precheck is skipped (an empty binding is not self-recursion).
+     * context, so the deployment declares it. Absent → the empty binding FAILS
+     * CLOSED: every Assignment-shaped dispatch emits
+     * `dispatch.anti-recursion.empty-binding` (critical) until the binding is
+     * set.
      */
     dispatchBinding?: string;
     /**

package/dist/index.js

@@ -1106,7 +1106,7 @@ var require_lib2 = __commonJS((exports, module) => {
 });
 
 // src/index.ts
-import { existsSync as existsSync20, readFileSync as readFileSync18, readdirSync as readdirSync14 } from "node:fs";
+import { existsSync as existsSync21, readFileSync as readFileSync18, readdirSync as readdirSync14 } from "node:fs";
 import { join as join23 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import {
@@ -1122,23 +1122,23 @@ import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { readFileSync as readFileSync2, statSync } from "node:fs";
 import { dirname as dirname2, isAbsolute, join as join2, relative, resolve as resolve2 } from "node:path";
-import { mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, statSync as statSync2 } from "node:fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, realpathSync, statSync as statSync2 } from "node:fs";
 import { execFileSync } from "node:child_process";
 import { basename as basename2, dirname as dirname3, isAbsolute as isAbsolute2, join as join3, relative as relative2, resolve as resolve3 } from "node:path";
-import { existsSync as existsSync2, readFileSync as readFileSync4, readdirSync as readdirSync2, realpathSync } from "node:fs";
+import { existsSync as existsSync3, readFileSync as readFileSync4, readdirSync as readdirSync2, realpathSync as realpathSync2 } from "node:fs";
 import { dirname as dirname5, join as join6, resolve as resolve5, sep } from "node:path";
 import { dirname as dirname4, isAbsolute as isAbsolute3, join as join4, resolve as resolve4 } from "node:path";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync3 } from "node:fs";
+import { existsSync as existsSync4 } from "node:fs";
 import { isAbsolute as isAbsolute4, resolve as resolve6 } from "node:path";
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { mkdirSync as mkdirSync5, readdirSync as readdirSync3, readFileSync as readFileSync5, realpathSync as realpathSync2, statSync as statSync4, writeFileSync as writeFileSync3 } from "node:fs";
+import { mkdirSync as mkdirSync5, readdirSync as readdirSync3, readFileSync as readFileSync5, realpathSync as realpathSync3, statSync as statSync4, writeFileSync as writeFileSync3 } from "node:fs";
 import { basename as basename3, dirname as dirname6, isAbsolute as isAbsolute5, join as join7, resolve as resolve7 } from "node:path";
-import { existsSync as existsSync4, readdirSync as readdirSync4, readFileSync as readFileSync6 } from "node:fs";
-import { existsSync as existsSync6, readdirSync as readdirSync8, readFileSync as readFileSync10 } from "node:fs";
+import { existsSync as existsSync5, readdirSync as readdirSync4, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync7, readdirSync as readdirSync8, readFileSync as readFileSync10 } from "node:fs";
 import { basename as basename4, isAbsolute as isAbsolute7, join as join12, relative as relative4, resolve as resolve10, sep as sep3 } from "node:path";
-import { existsSync as existsSync7 } from "node:fs";
+import { existsSync as existsSync8 } from "node:fs";
 import { join as join13 } from "node:path";
 var SEVERITY_ORDER = ["critical", "high", "medium", "low", "nit"];
 function applyEnforcement(gate, opts) {
@@ -1681,10 +1681,8 @@ function composeDispatchGate(text, opts = {}) {
     const violations = [];
     const writable = opts.writable !== false;
     violations.push(...validateAssignmentFields(text, { writable }).violations);
-    const agent = (opts.agent ?? "").trim();
-    if (agent !== "") {
-      violations.push(...antiRecursionPrecheck(agent, parseAssignmentFields(text).executeAs ?? "").violations);
-    }
+    const agent = opts.agent ?? "";
+    violations.push(...antiRecursionPrecheck(agent, parseAssignmentFields(text).executeAs ?? "").violations);
     if (writable) {
       const forms = parseAssignmentBranchForms(text);
       const branch = forms.createForm?.name ?? forms.workingBranch ?? forms.directOn?.branch ?? process.env.MSTAR_WORKING_BRANCH;
@@ -1703,7 +1701,15 @@ function composeDispatchGate(text, opts = {}) {
 function antiRecursionPrecheck(subagentType, executeAs) {
   const binding = subagentType.trim().toLowerCase();
   const role = executeAs.trim().toLowerCase();
-  if (binding !== "" && binding === role) {
+  if (binding === "") {
+    return {
+      ok: false,
+      violations: [
+        violation2("critical", "dispatch.anti-recursion.empty-binding", `empty host role binding — the host cannot report which agent is calling, so anti-recursion cannot be proven (a dispatch could silently recurse)`, "set the host role-binding field (omp task entry `agent` / opencode `subagent` / cursor `subagent_type` / dsh `dispatchBinding`) before dispatching")
+      ]
+    };
+  }
+  if (binding === role) {
     return {
       ok: false,
       violations: [
@@ -2041,7 +2047,7 @@ function validateStatusV2(docOrPath, opts = {}) {
   if (harnessDir !== undefined && Array.isArray(doc.workflows)) {
     let realHarnessDir = null;
     try {
-      realHarnessDir = realpathSync(harnessDir);
+      realHarnessDir = realpathSync2(harnessDir);
     } catch {}
     for (const entry of doc.workflows) {
       if (!isPlainObject3(entry) || typeof entry.dir !== "string")
@@ -2051,7 +2057,7 @@ function validateStatusV2(docOrPath, opts = {}) {
       const label = typeof entry.id === "string" ? entry.id : relSnapshot;
       let physical;
       try {
-        physical = realpathSync(snapshotPath);
+        physical = realpathSync2(snapshotPath);
       } catch {
         violations.push(violation4("high", "status.workflow.snapshot-missing", `workflows[] lists ${JSON.stringify(label)} but its snapshot does not exist at ${JSON.stringify(relSnapshot)} — the root holds active lifecycles only; unregister the id when its snapshot is removed`));
         continue;
@@ -2083,7 +2089,7 @@ function validateStatusV2(docOrPath, opts = {}) {
 var validateStatus = validateStatusV2;
 function resolveCompassEnforcement(harnessDir) {
   const iterationsDir = resolveIterationDir(harnessDir);
-  if (!existsSync2(iterationsDir))
+  if (!existsSync3(iterationsDir))
     return { hard: false, source: "none" };
   let entries;
   try {
@@ -2095,7 +2101,7 @@ function resolveCompassEnforcement(harnessDir) {
     if (!entry.isDirectory())
       continue;
     const compassPath = join6(iterationsDir, entry.name, "delivery-compass.md");
-    if (!existsSync2(compassPath))
+    if (!existsSync3(compassPath))
       continue;
     let content;
     try {
@@ -2182,7 +2188,7 @@ function l1PreDispatchCheck(input, opts = {}) {
   if (controlWorktreePath !== "" && leaseWorktreePath !== "" && resolve6(controlWorktreePath) === resolve6(leaseWorktreePath)) {
     violations.push(violation5("critical", "worktree.l1.lease-equals-control", `execution_lease.worktree_path "${leaseWorktreePath}" equals metadata.control_worktree_path — the feature worktree MUST differ from the control worktree (L1 isolation; product edits never land in the control checkout)`, "use a distinct feature worktree for the plan (git worktree add <path> <branch>) and update the lease"));
   }
-  if (leaseWorktreePath !== "" && !existsSync3(leaseWorktreePath)) {
+  if (leaseWorktreePath !== "" && !existsSync4(leaseWorktreePath)) {
     violations.push(violation5("high", "worktree.l1.feature-missing", `feature worktree directory "${leaseWorktreePath}" does not exist for plan "${planId}"`, `create it before dispatch: git worktree add ${leaseWorktreePath} <working-branch>`));
   } else if (leaseWorktreePath !== "" && leaseWorkingBranch !== "") {
     const probe = probeBranch(leaseWorktreePath, opts);
@@ -2216,7 +2222,7 @@ function l2PreDispatchCheck(input, opts = {}) {
       return;
     }
     seenPaths.add(normalized);
-    if (!existsSync3(track.worktreePath)) {
+    if (!existsSync4(track.worktreePath)) {
       violations.push(violation5("high", "worktree.l2.track-missing", `track worktree directory "${track.worktreePath}" does not exist`, `create it before dispatch: git worktree add ${track.worktreePath} ${track.workingBranch}`));
       return;
     }
@@ -2304,8 +2310,8 @@ function isLinkedWorktree(root) {
   if (gitDir.includes("/.git/worktrees/") || gitDir.includes("/worktrees/"))
     return true;
   try {
-    const gdParent = realpathSync2(dirname6(gitDir));
-    const cmAbs = realpathSync2(common);
+    const gdParent = realpathSync3(dirname6(gitDir));
+    const cmAbs = realpathSync3(common);
     return join7(gdParent, basename3(gitDir)) !== cmAbs && gitDir !== cmAbs;
   } catch {
     return false;
@@ -2323,10 +2329,10 @@ function sddWorkspace(planId, opts = {}) {
     if (!isDirectory2(controlRoot)) {
       throw new SddScriptError(`mstar sdd workspace: CONTROL_ROOT / MSTAR_CONTROL_ROOT is not a directory: ${controlRoot}`, 1);
     }
-    root = realpathSync2(controlRoot);
+    root = realpathSync3(controlRoot);
   } else {
     const topLevel = gitOut(cwd, ["rev-parse", "--show-toplevel"]);
-    root = realpathSync2(topLevel ?? cwd);
+    root = realpathSync3(topLevel ?? cwd);
   }
   if (!controlRoot && isLinkedWorktree(root)) {
     throw new SddScriptError(`mstar sdd workspace: linked worktree at ${root} has no {HARNESS_DIR}/status.json (default gitignore).
@@ -2360,7 +2366,7 @@ function sddWorkspace(planId, opts = {}) {
   mkdirSync5(sddDir, { recursive: true });
   writeFileSync3(join7(sddDir, ".gitignore"), `*
 `);
-  return realpathSync2(sddDir);
+  return realpathSync3(sddDir);
 }
 function taskBrief(planFile, taskN, outFile, opts = {}) {
   if (!planFile || !Number.isInteger(taskN) || taskN < 1) {
@@ -3600,7 +3606,7 @@ function referenceExists(repoRoot, docText) {
   for (const { ref, isSymbol, module } of refs) {
     if (!isSymbol || module === undefined) {
       const candidate = ref.replace(LINE_SUFFIX_RE, "").replace(ANCHOR_RE, "");
-      if (existsSync6(resolve10(repoRoot, candidate))) {
+      if (existsSync7(resolve10(repoRoot, candidate))) {
         checked++;
       } else {
         violations.push(violation10("medium", "compound.reference.missing-file", `referenced path \`${ref}\` does not exist under ${repoRoot} (compound-refresh Phase 2: referenced code still exists?)`, "update the doc to reference an existing path, or delete the stale reference"));
@@ -3648,7 +3654,7 @@ function normalizeIndexRef(cell) {
 function assertIndexRows(knowledgeDir) {
   const violations = [];
   const readmePath = join12(knowledgeDir, "README.md");
-  if (!existsSync6(readmePath)) {
+  if (!existsSync7(readmePath)) {
     violations.push(violation10("medium", "compound.index.missing-readme", `missing ${readmePath} — the knowledge index is required (mstar-compound Phase 6: every doc gets a README.md row)`, "create knowledge/README.md with a Document / Source Plan / Description / Status table"));
     return { ok: false, violations };
   }
@@ -3835,7 +3841,7 @@ function validateRoleMapping(rolesDir, options = {}) {
   const violations = [];
   const referenceById = new Map(mapping.map((m) => [m.agentId, m.reference]));
   for (const { agentId, reference } of mapping) {
-    if (!existsSync7(join13(rolesDir, reference))) {
+    if (!existsSync8(join13(rolesDir, reference))) {
       violations.push(violation12("medium", "roles.mapping.reference.missing", `role "${agentId}" maps to ${reference} which does not exist under ${rolesDir} (mstar-roles § Role Reference Mapping)`, `create ${join13(rolesDir, reference)} or fix the mapping row`));
     }
   }
@@ -4046,7 +4052,7 @@ class DshMstar extends Service {
 
 // src/gates/_shared.ts
 var import_schemastery = __toESM(require_lib2(), 1);
-import { existsSync as existsSync5 } from "node:fs";
+import { existsSync as existsSync6 } from "node:fs";
 import { resolve as resolve8 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var STATUS_FILE = "status.json";
@@ -4101,7 +4107,7 @@ function resolvePackagedSkillsDir(fileUrl) {
   for (const rel of ["../harness-skills", "../../harness-skills"]) {
     try {
       const dir = fileURLToPath2(new URL(rel, fileUrl));
-      if (existsSync5(dir))
+      if (existsSync6(dir))
         return dir;
     } catch {}
   }
@@ -4120,7 +4126,7 @@ function resolvePackagedAgentsDir(fileUrl) {
   for (const rel of ["../harness-agents", "../../harness-agents"]) {
     try {
       const dir = fileURLToPath2(new URL(rel, fileUrl));
-      if (existsSync5(dir))
+      if (existsSync6(dir))
         return dir;
     } catch {}
   }
@@ -4188,20 +4194,20 @@ function skillLocalConfig(config) {
 }
 
 // src/gates/catalog.ts
-import { existsSync as existsSync12, readFileSync as readFileSync9, readdirSync as readdirSync7 } from "node:fs";
+import { existsSync as existsSync13, readFileSync as readFileSync9, readdirSync as readdirSync7 } from "node:fs";
 import { join as join11 } from "node:path";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
 
 // src/gates/agent-flow.ts
-import { appendFileSync, closeSync, existsSync as existsSync11, mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync7, readSync, renameSync as renameSync2, rmdirSync, statSync as statSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { appendFileSync, closeSync, existsSync as existsSync12, mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync7, readSync, renameSync as renameSync2, rmdirSync, statSync as statSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { join as join10 } from "node:path";
 
 // src/gates/dispatch.ts
-import { existsSync as existsSync10 } from "node:fs";
+import { existsSync as existsSync11 } from "node:fs";
 import { basename as basename5, join as join8, resolve as resolve11 } from "node:path";
 
 // src/gates/workflow-selection.ts
-import { existsSync as existsSync8, readdirSync as readdirSync5, statSync as statSync3 } from "node:fs";
+import { existsSync as existsSync9, readdirSync as readdirSync5, statSync as statSync3 } from "node:fs";
 import { join as join5, relative as relative3 } from "node:path";
 var TERMINAL_STATUS_CACHE_MAX = 64;
 var terminalStatusCache = new Map;
@@ -4235,7 +4241,7 @@ function terminalStatusOf(snapshotPath) {
 }
 function resolveActiveWorkflow(harnessDir) {
   const statusPath = join5(harnessDir, STATUS_FILE);
-  if (!existsSync8(statusPath)) {
+  if (!existsSync9(statusPath)) {
     return {
       kind: "error",
       code: "status.missing",
@@ -4293,7 +4299,7 @@ function resolveReadWorkflow(harnessDir) {
   if (active.kind === "error" && active.code !== "workflow.selection.no-active")
     return active;
   const workflowsDir = resolveWorkflowDir(harnessDir, { harnessDir });
-  if (!existsSync8(workflowsDir)) {
+  if (!existsSync9(workflowsDir)) {
     return {
       kind: "error",
       code: "workflow.selection.no-snapshot",
@@ -4315,7 +4321,7 @@ function resolveReadWorkflow(harnessDir) {
     if (!entry.isDirectory())
       continue;
     const snapshotPath = join5(workflowsDir, entry.name, WORKFLOW_SNAPSHOT_FILE);
-    if (!existsSync8(snapshotPath))
+    if (!existsSync9(snapshotPath))
       continue;
     const verdict = terminalStatusOf(snapshotPath);
     if (verdict === undefined || !verdict.terminal)
@@ -4518,7 +4524,7 @@ function leaseGateViolations(harnessDir, exec, writable, prompt) {
     return [leaseViolation("lease.dispatch.unverifiable", `${join8(harnessDir, STATUS_FILE)}: ${selection.kind === "error" ? selection.message : "no active workflow"} — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "create a valid v2 status.json registering an active workflow (first implement dispatch requires a plan row + lease)")];
   }
   const snapshotPath = join8(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
-  if (!existsSync10(snapshotPath)) {
+  if (!existsSync11(snapshotPath)) {
     if (!sdd)
       return [];
     return [leaseViolation("lease.dispatch.unverifiable", `${snapshotPath} is missing — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "create a valid workflow snapshot registering the plan row (first implement dispatch requires a plan row)")];
@@ -4592,7 +4598,7 @@ function worktreeL2Violations(header) {
   return violations;
 }
 function activeSnapshotRows(harnessDir) {
-  if (!existsSync10(join8(harnessDir, STATUS_FILE)))
+  if (!existsSync11(join8(harnessDir, STATUS_FILE)))
     return { rows: null, controlWorktreePath: undefined, unreadable: false };
   const selection = resolveActiveWorkflow(harnessDir);
   if (selection.kind !== "active") {
@@ -4603,7 +4609,7 @@ function activeSnapshotRows(harnessDir) {
     };
   }
   const snapshotPath = join8(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
-  if (!existsSync10(snapshotPath))
+  if (!existsSync11(snapshotPath))
     return { rows: null, controlWorktreePath: undefined, unreadable: true };
   let doc;
   try {
@@ -5333,7 +5339,7 @@ function ledgerContent(file, n) {
 }
 function readAgentFlow(workflowDir, limit) {
   const file = join10(workflowDir, AGENT_FLOW_FILE);
-  if (!existsSync11(file)) {
+  if (!existsSync12(file)) {
     return { events: [], summary: [] };
   }
   const n = limit === undefined ? AGENT_FLOW_DEFAULT_LIMIT : Math.max(0, Math.floor(limit));
@@ -5588,7 +5594,7 @@ function harnessStateSource(harnessDir) {
   if (harnessDir === null)
     return null;
   const statusPath = join11(harnessDir, STATUS_FILE);
-  if (!existsSync12(statusPath))
+  if (!existsSync13(statusPath))
     return null;
   try {
     const selection = resolveReadWorkflow(harnessDir);
@@ -5609,7 +5615,7 @@ function harnessStateSource(harnessDir) {
     }
     const snapshotPath = join11(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
     let snapshot;
-    if (!existsSync12(snapshotPath)) {
+    if (!existsSync13(snapshotPath)) {
       return selectionErrorState({
         kind: "error",
         code: "workflow.selection.snapshot-unreadable",
@@ -5701,7 +5707,7 @@ function selectionErrorState(selection, rollup, harnessDir, compass) {
 function projectRollupSource(harnessDir, residuals) {
   const milestones = [];
   const projectsDir = resolveProjectDir(harnessDir, { harnessDir });
-  if (existsSync12(projectsDir)) {
+  if (existsSync13(projectsDir)) {
     let entries;
     try {
       entries = readdirSync7(projectsDir, { withFileTypes: true });
@@ -5712,7 +5718,7 @@ function projectRollupSource(harnessDir, residuals) {
       if (!entry.isDirectory())
         continue;
       const roadmapPath = join11(projectsDir, entry.name, PROJECT_ROADMAP_FILE);
-      if (!existsSync12(roadmapPath))
+      if (!existsSync13(roadmapPath))
         continue;
       try {
         const doc = parseCompassFrontmatterText(readFileSync9(roadmapPath, "utf8"), roadmapPath);
@@ -5777,7 +5783,7 @@ function residualRollup(harnessDir) {
 }
 function projectRegisters(harnessDir) {
   const projectsDir = resolveProjectDir(harnessDir, { harnessDir });
-  if (!existsSync12(projectsDir))
+  if (!existsSync13(projectsDir))
     return [];
   let entries;
   try {
@@ -5790,7 +5796,7 @@ function projectRegisters(harnessDir) {
     if (!entry.isDirectory())
       continue;
     const registerPath = join11(projectsDir, entry.name, PROJECT_REGISTER_FILE);
-    if (!existsSync12(registerPath))
+    if (!existsSync13(registerPath))
       continue;
     try {
       registers.push({ projectId: entry.name, doc: readJson(registerPath) });
@@ -5802,7 +5808,7 @@ function projectRegisters(harnessDir) {
 }
 function knowledgeDigest(harnessDir) {
   const indexPath = join11(harnessDir, "knowledge", "README.md");
-  if (!existsSync12(indexPath))
+  if (!existsSync13(indexPath))
     return null;
   try {
     const categories = new Set;
@@ -5847,7 +5853,7 @@ function compassDirection(compassPath) {
 }
 function steeringCompassPath(harnessDir) {
   const iterationsDir = resolveIterationDir(harnessDir);
-  if (!existsSync12(iterationsDir))
+  if (!existsSync13(iterationsDir))
     return;
   let entries;
   try {
@@ -5859,7 +5865,7 @@ function steeringCompassPath(harnessDir) {
     if (!entry.isDirectory())
       continue;
     const compassPath = join11(iterationsDir, entry.name, "delivery-compass.md");
-    if (!existsSync12(compassPath))
+    if (!existsSync13(compassPath))
       continue;
     let content;
     try {
@@ -5878,7 +5884,7 @@ function iterationGateSource(harnessDir) {
   if (harnessDir === null)
     return;
   const statusPath = join11(harnessDir, STATUS_FILE);
-  if (!existsSync12(statusPath))
+  if (!existsSync13(statusPath))
     return;
   const compass = steeringCompassPath(harnessDir);
   if (compass === undefined)
@@ -5940,7 +5946,7 @@ function agentDigestKey(agent, cwd) {
 }
 
 // src/gates/status.ts
-import { existsSync as existsSync13, readdirSync as readdirSync9 } from "node:fs";
+import { existsSync as existsSync14, readdirSync as readdirSync9 } from "node:fs";
 import { basename as basename7, join as join14, relative as relative5, resolve as resolve13 } from "node:path";
 var LOGGER_NAME = "mstar/status-gate";
 function harnessDocKindOfTarget(harnessDir, targetPath) {
@@ -6023,7 +6029,7 @@ function projectRegisterDocs(harnessDir) {
     if (!entry.isDirectory())
       continue;
     const registerPath = join14(projectsDir, entry.name, PROJECT_REGISTER_FILE);
-    if (!existsSync13(registerPath))
+    if (!existsSync14(registerPath))
       continue;
     try {
       registers.push({ projectId: entry.name, doc: readJson(registerPath) });
@@ -6092,7 +6098,7 @@ async function editIntentListener(ctx, resolver, config, adapter, target, actor,
 }
 
 // src/gates/skill-lint.ts
-import { existsSync as existsSync14, readFileSync as readFileSync11 } from "node:fs";
+import { existsSync as existsSync15, readFileSync as readFileSync11 } from "node:fs";
 import { basename as basename8, dirname as dirname7, resolve as resolve14, sep as sep2 } from "node:path";
 var SKILL_LINT_LOGGER = "mstar/skill-lint";
 
@@ -6173,7 +6179,7 @@ function gateSkillIntent(ctx, harnessDir, config, target) {
     if (!isSkillTarget(roots, target))
       return;
     const skillPath = resolve14(target.displayPath);
-    if (!existsSync14(skillPath))
+    if (!existsSync15(skillPath))
       return;
     let doc;
     try {
@@ -6224,7 +6230,7 @@ async function skillWriteIntentListener(ctx, resolver, config, target, actor, ne
 }
 
 // src/gates/seams.ts
-import { existsSync as existsSync15, readFileSync as readFileSync13, readdirSync as readdirSync11 } from "node:fs";
+import { existsSync as existsSync16, readFileSync as readFileSync13, readdirSync as readdirSync11 } from "node:fs";
 import { basename as basename9, dirname as dirname9, join as join16, resolve as resolve15, sep as sep4 } from "node:path";
 var SEAM_LOGGERS = {
   "design-md": "mstar/design-md-lint",
@@ -6300,7 +6306,7 @@ function validateDesignDoc(doc, path) {
   const violations = [...validateDesignTokenFrontmatter(doc).violations];
   const isDark = basename9(path) === "DESIGN.dark.md";
   const sibling = join16(dirname9(path), isDark ? "DESIGN.md" : "DESIGN.dark.md");
-  if (existsSync15(sibling)) {
+  if (existsSync16(sibling)) {
     const light = isDark ? readFileSync13(sibling, "utf8") : doc;
     const dark = isDark ? doc : readFileSync13(sibling, "utf8");
     violations.push(...assertLightDarkParity(light, dark).violations);
@@ -6327,7 +6333,7 @@ function validateRolesState(rolesDir, skillsRoot = dirname9(rolesDir)) {
     if (!entry.isDirectory() || !entry.name.startsWith("mstar-"))
       continue;
     const skillFile = join16(skillsRoot, entry.name, "SKILL.md");
-    if (!existsSync15(skillFile))
+    if (!existsSync16(skillFile))
       continue;
     try {
       skillTexts[entry.name] = readFileSync13(skillFile, "utf8");
@@ -6361,7 +6367,7 @@ function gateSeamIntent(ctx, harnessDir, config, seam, target) {
     if (!isSeamTarget(seam, harnessDir, target))
       return;
     const path = resolve15(target.displayPath);
-    if (!existsSync15(path))
+    if (!existsSync16(path))
       return;
     let doc;
     try {
@@ -6431,7 +6437,7 @@ function lintRolesWrite(doc, options) {
 }
 
 // src/gates/tools.ts
-import { existsSync as existsSync16, readFileSync as readFileSync14 } from "node:fs";
+import { existsSync as existsSync17, readFileSync as readFileSync14 } from "node:fs";
 import { join as join17, resolve as resolve16 } from "node:path";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 var ITERATION_VIOLATION_SCHEMA = {
@@ -6597,9 +6603,9 @@ function registerSddIterationTools(ctx, resolver) {
       presentResult: (_args, _result) => ({ card: "generic", title: "Iteration gate evaluation" }),
       isConcurrencySafe: () => false,
       async execute(args) {
-        if (!existsSync16(args.snapshot_path))
+        if (!existsSync17(args.snapshot_path))
           throw new Error(`workflow snapshot not found: ${args.snapshot_path}`);
-        if (!existsSync16(args.compass_path))
+        if (!existsSync17(args.compass_path))
           throw new Error(`compass file not found: ${args.compass_path}`);
         const snapshotDoc = readJson(args.snapshot_path);
         const compassDoc = parseCompassFrontmatter(args.compass_path);
@@ -6654,7 +6660,7 @@ function registerSeamTools(ctx, resolver) {
       async execute(args) {
         const abs = resolve16(args.dir);
         const lightPath = join17(abs, "DESIGN.md");
-        if (!existsSync16(lightPath))
+        if (!existsSync17(lightPath))
           throw new Error(`design file not found: ${lightPath}`);
         const light = readFileSync14(lightPath, "utf8");
         const result = validateDesignDoc(light, lightPath);
@@ -6707,7 +6713,7 @@ function registerSeamTools(ctx, resolver) {
       isConcurrencySafe: () => false,
       async execute(args) {
         const abs = resolve16(args.plan_path);
-        if (!existsSync16(abs))
+        if (!existsSync17(abs))
           throw new Error(`plan file not found: ${abs}`);
         const text = readFileSync14(abs, "utf8");
         const result = validateAuditDoc(text, abs);
@@ -6747,7 +6753,7 @@ function registerSeamTools(ctx, resolver) {
       isConcurrencySafe: () => false,
       async execute(args, exec) {
         const abs = resolve16(args.doc_path);
-        if (!existsSync16(abs))
+        if (!existsSync17(abs))
           throw new Error(`knowledge doc not found: ${abs}`);
         const text = readFileSync14(abs, "utf8");
         const base = validateCompoundDoc(text, abs, args.repo_root !== undefined ? null : resolver.forAgent(exec.agent));
@@ -6792,7 +6798,7 @@ function registerSeamTools(ctx, resolver) {
       isConcurrencySafe: () => false,
       async execute(args) {
         const rolesDir = resolve16(args.roles_dir);
-        if (!existsSync16(join17(rolesDir, "SKILL.md")))
+        if (!existsSync17(join17(rolesDir, "SKILL.md")))
           throw new Error(`roles dir not found: ${rolesDir}`);
         const result = validateRolesState(rolesDir, args.skills_root !== undefined ? resolve16(args.skills_root) : undefined);
         return { ok: result.ok, violations: result.violations.map(iterationViolationView) };
@@ -6802,7 +6808,7 @@ function registerSeamTools(ctx, resolver) {
 }
 
 // src/gates/adapter.ts
-import { existsSync as existsSync17 } from "node:fs";
+import { existsSync as existsSync18 } from "node:fs";
 import { join as join18 } from "node:path";
 import { Service as Service2 } from "@deepseek-ai/cordis";
 var HOST_LOGGER = "mstar/host-adapter";
@@ -6839,7 +6845,7 @@ class DshHostAdapter extends Service2 {
     this.logSink(level, msg);
   }
   statusGate(path, kind, harnessDir) {
-    if (!existsSync17(path))
+    if (!existsSync18(path))
       return { ok: true, violations: [] };
     return validateStatusDoc(path, kind, harnessDir);
   }
@@ -7451,7 +7457,7 @@ function registerWorkflowLedger(ctx, resolver, workflowAskCache) {
 }
 
 // src/gates/goal-bridge.ts
-import { existsSync as existsSync18, readFileSync as readFileSync17, readdirSync as readdirSync13 } from "node:fs";
+import { existsSync as existsSync19, readFileSync as readFileSync17, readdirSync as readdirSync13 } from "node:fs";
 import { join as join21 } from "node:path";
 var GOAL_BRIDGE_LOGGER = "mstar/goal-bridge";
 var DEFAULT_MAX_GOAL_ROUNDS = 256;
@@ -7480,7 +7486,7 @@ function projectRegisterPointer(harnessDir) {
       if (!entry.isDirectory())
         continue;
       const registerPath = join21(projectsDir, entry.name, PROJECT_REGISTER_FILE);
-      if (existsSync18(registerPath))
+      if (existsSync19(registerPath))
         return registerPath;
     }
   } catch {}
@@ -7495,7 +7501,7 @@ function iterationGoalObjective(iterationId) {
 }
 function steeringCompass(harnessDir) {
   const iterationsDir = resolveIterationDir(harnessDir);
-  if (!existsSync18(iterationsDir))
+  if (!existsSync19(iterationsDir))
     return;
   let entries;
   try {
@@ -7507,7 +7513,7 @@ function steeringCompass(harnessDir) {
     if (!entry.isDirectory())
       continue;
     const compassPath = join21(iterationsDir, entry.name, "delivery-compass.md");
-    if (!existsSync18(compassPath))
+    if (!existsSync19(compassPath))
       continue;
     let content;
     try {
@@ -7687,7 +7693,7 @@ function registerGoalBridge(ctx, resolver, config) {
 }
 
 // src/gates/plan-mode-bridge.ts
-import { existsSync as existsSync19 } from "node:fs";
+import { existsSync as existsSync20 } from "node:fs";
 import { join as join22 } from "node:path";
 var PLAN_MODE_BRIDGE_LOGGER = "mstar/plan-mode-bridge";
 var PLAN_STATUS_TODO = "Todo";
@@ -7705,7 +7711,7 @@ function errorMessage5(error) {
 }
 function hasPrepareWindow(harnessDir) {
   const statusPath = join22(harnessDir, STATUS_FILE);
-  if (!existsSync19(statusPath))
+  if (!existsSync20(statusPath))
     return false;
   const selection = resolveReadWorkflow(harnessDir);
   if (selection.kind === "error")
@@ -8164,7 +8170,7 @@ var inject = ["loader"];
 function packagedCommandsDir() {
   try {
     const dir = fileURLToPath3(new URL("../harness-commands", import.meta.url));
-    return existsSync20(dir) ? dir : undefined;
+    return existsSync21(dir) ? dir : undefined;
   } catch {
     return;
   }
@@ -8364,7 +8370,7 @@ function apply(ctx, config) {
   }
   const effectiveHard = config.enforcement === "hard" || bootHarnessDir !== null && resolveRepoEnforcement(bootHarnessDir).hard;
   if (effectiveHard && (config.dispatchBinding ?? "").trim() === "") {
-    ctx.logger(DISPATCH_LOGGER).warn("Enforcement: hard is active but dispatchBinding is unset — the anti-recursion precheck is skipped (an Assignment whose Execute as equals the dispatching agent cannot be detected)");
+    ctx.logger(DISPATCH_LOGGER).warn("Enforcement: hard is active but dispatchBinding is unset — the empty host binding fails closed: every Assignment-shaped dispatch emits dispatch.anti-recursion.empty-binding (critical) until dispatchBinding is set");
   }
   if (effectiveHard && config.dispatchTools === undefined) {
     ctx.logger(DISPATCH_LOGGER).warn('Enforcement: hard is active but dispatchTools is unset — the dispatch gate matches the default tool names "subagent" and "subagent_fork"; a deployment renaming either dsh subagent tool (toolName) without declaring dispatchTools silently disables the gate');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mstar-harness/dsh",
-  "version": "3.1.1",
+  "version": "3.1.2",
   "description": "Morning Star harness dsh (DeepSeek Harness) cordis function plugin — in-process engine gates (status/dispatch/lease) with hard refusal channels.",
   "keywords": [
     "dsh",
@@ -64,23 +64,23 @@
     "bun": ">=1.2.17"
   },
   "dependencies": {
-    "dsh-llm-fallbacks": "^0.2.0"
+    "dsh-llm-fallbacks": "^0.3.0"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-client-locale": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-client-runtime": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-commands": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-fs": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-invariants": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-jobs": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-llm": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-skill": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-skill-filesystem": "^0.1.0-rc.8",
-    "@deepseek-ai/dsh-tools": "^0.1.0-rc.8"
+    "@deepseek-ai/dsh-agent": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-client-locale": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-client-runtime": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-commands": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-fs": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-invariants": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-jobs": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-llm": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-skill": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-skill-filesystem": "^0.1.1-rc.1",
+    "@deepseek-ai/dsh-tools": "^0.1.1-rc.1"
   },
   "publishConfig": {
     "access": "public"