@mstar-harness/dsh 3.4.0 → 3.5.0

package/README.md

@@ -50,7 +50,7 @@ The **two-command install is the contract** — folding a `dsh-llm-fallbacks` ro
 | `harnessDir` | `string` | repo `.mstarc` `[config] harness_dir`, else per-session workspace probe (`.mstar/` → `.agents/` → `.plans/` → `plans/`, from the session workspace root — **never the launch cwd**) | Explicit harness root; wins over engine probing. **Required for repos whose harness root is not a probed name**; the probe starts from the session workspace root (never the launch cwd) and STOPS there — it never walks above the session workspace, so a harness dir above it (e.g. a global `~/.mstar`) is never adopted. |
 | `enforcement` | `'hard' \| 'soft'` | compass, else warn-only | Per-deployment override. Precedence: Config wins; else the Assignment's own `**Enforcement**: hard` header flag (dispatch gate only); else the repo `.mstarc` `[config] enforcement`; else the iteration compass frontmatter; else warn-only. Config / `.mstarc` `soft` are the ONLY local rollbacks — an Assignment-level `soft` does NOT override a hard compass. |
 | `dispatchTools` | `string[]` | `['subagent', 'subagent_fork']` | Delegation tool names the dispatch gate matches — the dsh preset's TWO delegation tools, `subagent` and its fork sibling `subagent_fork` (both carry Assignment-shaped `{ description, prompt }` args; a `toolName` config may rename instances). |
-| `dispatchBinding` | `string` | unset (precheck skipped) | The dispatching agent's own harness role; an Assignment whose `Execute as` equals it is self-recursion. |
+| `dispatchBinding` | `string` | unset → fail-closed `empty-binding` under hard | The dispatching agent's own harness role (the anti-recursion CALLER); an Assignment whose `Execute as` equals it is self-recursion. |
 | `roleMap` | `Record<string, string>` | unset | mstar role id (`Execute as`) → dsh-llm-fallbacks role id. A taxonomy bridge for logging + future rule-driven interop ONLY — never consulted by the decoration (see LLM fallbacks integration). |
 | `rolePersonas` | `Record<string, string>` | unset (bundled mirror default) | mstar role id (`Execute as`) → persona text; the role-based subagent decoration's **override** source — a role-matched `subagent/start` registers the persona as the child's `mstar:role-persona` system-prompt section; when unset for a role, the bundled `harness-agents/` mirror default is used (see LLM fallbacks integration). |
 | `skillRoots` | `string[]` | unset (no custom-root registration) | Additional skill roots registered with the dsh skill-filesystem provider (`customSkillDirs` semantics — scanned before user roots). Dev-time: the mirror `<repo-root>/skills` absolute path. |

package/README.zh.md

@@ -50,7 +50,7 @@ dsh plugin --profile web add dsh-llm-fallbacks
 | `harnessDir` | `string` | 仓库 `.mstarc` `[config] harness_dir`，否则按会话工作区探测（`.mstar/` → `.agents/` → `.plans/` → `plans/`，从会话工作区根目录开始——**绝不从启动 cwd**） | 显式 harness 根目录；优先于 engine 探测。**harness 根不在探测名列表中的仓库必须配置**；探测从会话工作区根开始（绝不从启动 cwd）并在那里**停止**——永不越过会话工作区向上，因此其上方的 harness 目录（如全局 `~/.mstar`）永远不会被采纳。 |
 | `enforcement` | `'hard' \| 'soft'` | compass，否则仅告警 | 按部署覆盖。优先级：Config 优先；否则取 Assignment 自身的 `**Enforcement**: hard` 头字段（仅派发闸门）；否则取仓库 `.mstarc` `[config] enforcement`；否则取迭代 compass frontmatter；否则仅告警。Config / `.mstarc` `soft` 是仅有的本地回滚——Assignment 级 `soft` 不能覆盖 hard compass。 |
 | `dispatchTools` | `string[]` | `['subagent', 'subagent_fork']` | 派发闸门匹配的委派工具名——dsh preset 的**两个**委派工具：`subagent` 及其 fork 兄弟 `subagent_fork`（两者都携带 Assignment 形态的 `{ description, prompt }` 参数；`toolName` 配置可重命名实例）。 |
-| `dispatchBinding` | `string` | 未设置（跳过预检） | 派发方 agent 自身的 harness 角色；Assignment 的 `Execute as` 等于它即自我递归。 |
+| `dispatchBinding` | `string` | 未设置 → hard 下 fail-closed `empty-binding` | 派发方 agent 自身的 harness 角色（反递归 caller）；Assignment 的 `Execute as` 等于它即自我递归。 |
 | `roleMap` | `Record<string, string>` | 未设置 | mstar 角色 id（`Execute as`）→ dsh-llm-fallbacks 角色 id。**仅**作日志与未来规则驱动互操作的分类桥——装饰从不读取它（见 LLM fallbacks integration）。 |
 | `rolePersonas` | `Record<string, string>` | 未设置（打包镜像默认） | mstar 角色 id（`Execute as`）→ persona 文本；基于角色的 subagent 装饰的**覆盖**来源——角色匹配的 `subagent/start` 会把 persona 注册为子会话的 `mstar:role-persona` system-prompt 段；某角色未设置时使用打包的 `harness-agents/` 镜像默认值（见 LLM fallbacks integration）。 |
 | `skillRoots` | `string[]` | 未设置（不注册自定义根） | 向 dsh skill-filesystem 提供者注册的额外技能根（`customSkillDirs` 语义——先于用户根扫描）。开发期：镜像 `<repo-root>/skills` 的绝对路径。 |

package/bundle/README.md

@@ -79,7 +79,7 @@ The `mstar` row accepts the plugin `Config` (see `src/index.ts`):
 | `harnessDir` | unset (resolved per session workspace) | explicit `{HARNESS_DIR}` root — **required for repos whose harness root is not a probed name** (`.mstar/` → `.agents/` → `.plans/` → `plans/`); set it to the absolute root in the profile layer (or declare `[config] harness_dir` in a repo `.mstarc` — gitignored local config, honored above probing). Without either, the probe starts from the SESSION workspace root (the session cwd — **never the process/launch cwd**) and **stops there** — it never walks above the session workspace, so a global `~/.mstar` is never adopted |
 | `enforcement` | **unset — default OFF** | `hard` / `soft` override; absent → the repo `.mstarc` `[config] enforcement`, else the iteration compass decides, warn-only when no compass hardens (never a global always-on hard gate) |
 | `dispatchTools` | unset (plugin default `['subagent', 'subagent_fork']`) | delegation tool names the dispatch gate matches — the dsh preset's TWO delegation tools (`subagent` + its fork sibling `subagent_fork`, both Assignment-shaped); a custom list overrides the default wholesale, so it must include `subagent_fork` to keep fork dispatches gated |
-| `dispatchBinding` | unset | the dispatching agent's role for the anti-recursion precheck |
+| `dispatchBinding` | unset → fail-closed `empty-binding` under hard | the dispatching agent's own role (the anti-recursion CALLER) for the precheck |
 | `skillRoots` | unset | additional skill roots (custom mirrors) |
 | `bundledSkillDir` | unset → plugin resolves its OWN packaged `harness-skills/` mirror package-relative | bundled skill mount — the repo-root `skills/` mirror synced by `bundle-assets` at build time (gitignored), resolved package-relative (NOT cwd-anchored). An explicit value wins; a RELATIVE override stays cwd-anchored, so pass an absolute path in the profile layer |
 | `catalogTtlMs` | unset → `60000` | pre-step catalog cache refresh interval (ms) — how often the per-workspace unified `mstar-engine-status` catalog row (watermark + iteration gate + workspace-state digest) re-reads `status.json` / the compass / the knowledge index; the hot path is a timestamp compare + cache hit between refreshes |

package/dist/index.js

@@ -1122,24 +1122,24 @@ import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { readFileSync as readFileSync2, statSync } from "node:fs";
 import { dirname as dirname2, isAbsolute, join as join2, relative, resolve as resolve2 } from "node:path";
-import { existsSync as existsSync5, mkdirSync as mkdirSync5, readdirSync as readdirSync4, readFileSync as readFileSync6, realpathSync as realpathSync2, statSync as statSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readdirSync as readdirSync5, readFileSync as readFileSync6, realpathSync as realpathSync2, statSync as statSync3, writeFileSync as writeFileSync3 } from "node:fs";
 import { execFileSync } from "node:child_process";
-import { basename as basename2, dirname as dirname5, isAbsolute as isAbsolute3, join as join8, relative as relative2, resolve as resolve6 } from "node:path";
+import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute4, join as join9, relative as relative2, resolve as resolve7 } from "node:path";
 import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync3 } from "node:fs";
 import { dirname as dirname3, isAbsolute as isAbsolute2, join as join4, resolve as resolve3 } from "node:path";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { existsSync as existsSync3, readFileSync as readFileSync4, readdirSync as readdirSync2, realpathSync } from "node:fs";
-import { dirname as dirname4, join as join6, resolve as resolve4, sep } from "node:path";
+import { existsSync as existsSync4, readFileSync as readFileSync4, readdirSync as readdirSync3, realpathSync } from "node:fs";
+import { dirname as dirname4, join as join7, resolve as resolve5, sep } from "node:path";
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync6 } from "node:fs";
-import { isAbsolute as isAbsolute4, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync7 } from "node:fs";
+import { isAbsolute as isAbsolute5, resolve as resolve8 } from "node:path";
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { mkdirSync as mkdirSync6, readdirSync as readdirSync5, readFileSync as readFileSync7, realpathSync as realpathSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { basename as basename3, dirname as dirname6, isAbsolute as isAbsolute5, join as join9, resolve as resolve8 } from "node:path";
-import { existsSync as existsSync8, readdirSync as readdirSync8, readFileSync as readFileSync10 } from "node:fs";
-import { basename as basename5, isAbsolute as isAbsolute7, join as join12, relative as relative4, resolve as resolve11, sep as sep4 } from "node:path";
-import { existsSync as existsSync9 } from "node:fs";
-import { join as join13 } from "node:path";
+import { mkdirSync as mkdirSync6, readdirSync as readdirSync6, readFileSync as readFileSync7, realpathSync as realpathSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { basename as basename4, dirname as dirname6, isAbsolute as isAbsolute6, join as join10, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync9, readdirSync as readdirSync9, readFileSync as readFileSync10 } from "node:fs";
+import { basename as basename6, isAbsolute as isAbsolute8, join as join13, relative as relative4, resolve as resolve12, sep as sep4 } from "node:path";
+import { existsSync as existsSync10 } from "node:fs";
+import { join as join14 } from "node:path";
 var SEVERITY_ORDER = ["critical", "high", "medium", "low", "nit"];
 function applyEnforcement(gate, opts) {
   return { ...gate, hardBlocked: opts.hard && gate.violations.length > 0 };
@@ -1841,8 +1841,10 @@ function composeDispatchGate(text, opts = {}) {
     const violations = [];
     const writable = opts.writable !== false;
     violations.push(...validateAssignmentFields(text, { writable }).violations);
-    const agent = opts.agent ?? "";
-    violations.push(...antiRecursionPrecheck(agent, parseAssignmentFields(text).executeAs ?? "").violations);
+    const caller = opts.caller ?? "";
+    if (caller.trim() !== "" || opts.callerRequired === true) {
+      violations.push(...antiRecursionPrecheck(caller, parseAssignmentFields(text).executeAs ?? "").violations);
+    }
     if (writable) {
       const forms = parseAssignmentBranchForms(text);
       const branch = forms.createForm?.name ?? forms.workingBranch ?? forms.directOn?.branch ?? process.env.MSTAR_WORKING_BRANCH;
@@ -1865,7 +1867,7 @@ function antiRecursionPrecheck(subagentType, executeAs) {
     return {
       ok: false,
       violations: [
-        violation3("critical", "dispatch.anti-recursion.empty-binding", `empty host role binding — the host cannot report which agent is calling, so anti-recursion cannot be proven (a dispatch could silently recurse)`, "set the host role-binding field (omp task entry `agent` / opencode `subagent` / cursor `subagent_type` / dsh `dispatchBinding`) before dispatching")
+        violation3("critical", "dispatch.anti-recursion.empty-binding", `empty caller role binding — the host cannot report which agent is calling, so anti-recursion cannot be proven (a dispatch could silently recurse)`, "declare the dispatching agent's own role binding (dsh Config `dispatchBinding`) before dispatching")
       ]
     };
   }
@@ -2145,7 +2147,7 @@ function validateStatusV2(docOrPath, opts = {}) {
   if (typeof docOrPath === "string") {
     try {
       doc = readJson(docOrPath);
-      harnessDir = dirname4(resolve4(docOrPath));
+      harnessDir = dirname4(resolve5(docOrPath));
     } catch (error) {
       return {
         ok: false,
@@ -2212,8 +2214,8 @@ function validateStatusV2(docOrPath, opts = {}) {
     for (const entry of doc.workflows) {
       if (!isPlainObject4(entry) || typeof entry.dir !== "string")
         continue;
-      const relSnapshot = join6(entry.dir, WORKFLOW_SNAPSHOT_FILE);
-      const snapshotPath = join6(harnessDir, relSnapshot);
+      const relSnapshot = join7(entry.dir, WORKFLOW_SNAPSHOT_FILE);
+      const snapshotPath = join7(harnessDir, relSnapshot);
       const label = typeof entry.id === "string" ? entry.id : relSnapshot;
       let physical;
       try {
@@ -2249,19 +2251,19 @@ function validateStatusV2(docOrPath, opts = {}) {
 var validateStatus = validateStatusV2;
 function resolveCompassEnforcement(harnessDir) {
   const iterationsDir = resolveIterationDir(harnessDir);
-  if (!existsSync3(iterationsDir))
+  if (!existsSync4(iterationsDir))
     return { hard: false, source: "none" };
   let entries;
   try {
-    entries = readdirSync2(iterationsDir, { withFileTypes: true });
+    entries = readdirSync3(iterationsDir, { withFileTypes: true });
   } catch {
     return { hard: false, source: "none" };
   }
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const compassPath = join6(iterationsDir, entry.name, "delivery-compass.md");
-    if (!existsSync3(compassPath))
+    const compassPath = join7(iterationsDir, entry.name, "delivery-compass.md");
+    if (!existsSync4(compassPath))
       continue;
     let content;
     try {
@@ -2280,7 +2282,7 @@ function resolveCompassEnforcement(harnessDir) {
   return { hard: false, source: "none" };
 }
 function resolveMstarcEnforcement(harnessDir) {
-  const dir = resolve4(harnessDir);
+  const dir = resolve5(harnessDir);
   const rc = loadMstarc(dir, dirname4(dir));
   const value = rc?.config.enforcement;
   if (value === "hard")
@@ -2392,19 +2394,19 @@ function findingsCleanupGate(register, planId, opts) {
   return { ok: violations.length === 0, violations };
 }
 function resolveHarnessDir(startDir = process.cwd(), opts = {}) {
-  const start = resolve6(startDir);
+  const start = resolve7(startDir);
   const explicit = opts.harnessDir ?? process.env.MSTAR_HARNESS_DIR;
   if (explicit)
-    return resolve6(start, explicit);
-  const boundary = resolve6(start, opts.workspaceRoot ?? defaultWorkspaceRoot(start));
+    return resolve7(start, explicit);
+  const boundary = resolve7(start, opts.workspaceRoot ?? defaultWorkspaceRoot(start));
   const rc = loadMstarc(start, boundary);
   if (rc !== null && rc.config.harnessDir)
-    return resolve6(rc.dir, rc.config.harnessDir);
+    return resolve7(rc.dir, rc.config.harnessDir);
   let dir = start;
   for (;; ) {
     if (!isAtOrBelow2(dir, boundary))
       return null;
-    for (const candidate of [join8(dir, ".mstar"), join8(dir, ".agents"), join8(dir, ".plans"), join8(dir, "plans")]) {
+    for (const candidate of [join9(dir, ".mstar"), join9(dir, ".agents"), join9(dir, ".plans"), join9(dir, "plans")]) {
       if (isDirectory(candidate))
         return candidate;
     }
@@ -2430,19 +2432,19 @@ function defaultWorkspaceRoot(startDir) {
       if (segment && segment !== ".")
         boundary = dirname5(boundary);
     }
-    return resolve6(boundary);
+    return resolve7(boundary);
   } catch {}
   return startDir;
 }
 function isAtOrBelow2(dir, root) {
   const rel = relative2(root, dir);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute3(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute4(rel);
 }
 function mstarcDirOverride(harnessDir, key) {
-  const dir = resolve6(harnessDir);
+  const dir = resolve7(harnessDir);
   const rc = loadMstarc(dir, dirname5(dir));
   const declared = rc?.config[key];
-  return declared ? resolve6(rc.dir, declared) : null;
+  return declared ? resolve7(rc.dir, declared) : null;
 }
 function assertSafePathComponent(value, what) {
   if (value === "" || value === "." || value === ".." || !/^[A-Za-z0-9._-]+$/.test(value)) {
@@ -2451,24 +2453,24 @@ function assertSafePathComponent(value, what) {
 }
 function resolveSddDir(harnessDir, planId) {
   assertSafePathComponent(planId, "planId");
-  const base = resolve6(harnessDir);
+  const base = resolve7(harnessDir);
   const declared = mstarcDirOverride(base, "sddDir");
-  const sddBase = declared !== null ? declared : join8(base, "sdd");
-  return join8(sddBase, planId);
+  const sddBase = declared !== null ? declared : join9(base, "sdd");
+  return join9(sddBase, planId);
 }
 function resolveIterationDir(harnessDir) {
   const declared = mstarcDirOverride(harnessDir, "iterationDir");
   if (declared !== null)
     return declared;
-  return join8(resolve6(harnessDir), "iterations");
+  return join9(resolve7(harnessDir), "iterations");
 }
 function resolveHarnessSubdir(startDir, opts, key, fallback) {
   const harness = resolveHarnessDir(startDir, opts);
   if (harness === null) {
-    throw new Error(`harness dir not found from ${resolve6(startDir)} — cannot resolve the ${fallback} dir (run \`mstar harness scaffold\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
+    throw new Error(`harness dir not found from ${resolve7(startDir)} — cannot resolve the ${fallback} dir (run \`mstar harness scaffold\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
   }
   const declared = mstarcDirOverride(harness, key);
-  return declared !== null ? declared : join8(resolve6(harness), fallback);
+  return declared !== null ? declared : join9(resolve7(harness), fallback);
 }
 function resolveWorkflowDir(startDir = process.cwd(), opts = {}) {
   return resolveHarnessSubdir(startDir, opts, "workflowDir", "workflows");
@@ -2558,10 +2560,10 @@ function l1PreDispatchCheck(input, opts = {}) {
   if (leaseWorkingBranch.trim() === "") {
     violations.push(violation7("high", "worktree.l1.lease-branch-missing", `execution_lease.working_branch is empty for plan "${planId}"`, "record the lease working_branch before dispatch"));
   }
-  if (controlWorktreePath !== "" && leaseWorktreePath !== "" && resolve7(controlWorktreePath) === resolve7(leaseWorktreePath)) {
+  if (controlWorktreePath !== "" && leaseWorktreePath !== "" && resolve8(controlWorktreePath) === resolve8(leaseWorktreePath)) {
     violations.push(violation7("critical", "worktree.l1.lease-equals-control", `execution_lease.worktree_path "${leaseWorktreePath}" equals metadata.control_worktree_path — the feature worktree MUST differ from the control worktree (L1 isolation; product edits never land in the control checkout)`, "use a distinct feature worktree for the plan (git worktree add <path> <branch>) and update the lease"));
   }
-  if (leaseWorktreePath !== "" && !existsSync6(leaseWorktreePath)) {
+  if (leaseWorktreePath !== "" && !existsSync7(leaseWorktreePath)) {
     violations.push(violation7("high", "worktree.l1.feature-missing", `feature worktree directory "${leaseWorktreePath}" does not exist for plan "${planId}"`, `create it before dispatch: git worktree add ${leaseWorktreePath} <working-branch>`));
   } else if (leaseWorktreePath !== "" && leaseWorkingBranch !== "") {
     const probe = probeBranch(leaseWorktreePath, opts);
@@ -2585,17 +2587,17 @@ function l2PreDispatchCheck(input, opts = {}) {
       violations.push(violation7("high", "worktree.l2.track-invalid", `track ${index + 1} is missing worktreePath and/or workingBranch`, "fill both fields for every track"));
       return;
     }
-    if (!isAbsolute4(track.worktreePath)) {
+    if (!isAbsolute5(track.worktreePath)) {
       violations.push(violation7("high", "worktree.l2.track-path-relative", `track ${index + 1} worktreePath "${track.worktreePath}" is not an absolute path — L2 tracks MUST use absolute worktree checkout paths (consistent with the lease validator's absolute worktree_path enforcement)`, `use an absolute path for track ${index + 1} (e.g. /Users/<you>/worktrees/<branch>)`));
       return;
     }
-    const normalized = resolve7(track.worktreePath);
+    const normalized = resolve8(track.worktreePath);
     if (seenPaths.has(normalized)) {
       violations.push(violation7("high", "worktree.l2.track-path-collision", `duplicate worktreePath "${track.worktreePath}" across parallel tracks — L2 parallel-writable isolation requires a distinct absolute Worktree path per track (N parallel invokes ≠ isolation)`, "give every parallel track its own git worktree checkout"));
       return;
     }
     seenPaths.add(normalized);
-    if (!existsSync6(track.worktreePath)) {
+    if (!existsSync7(track.worktreePath)) {
       violations.push(violation7("high", "worktree.l2.track-missing", `track worktree directory "${track.worktreePath}" does not exist`, `create it before dispatch: git worktree add ${track.worktreePath} ${track.workingBranch}`));
       return;
     }
@@ -2630,7 +2632,7 @@ function isFile2(file) {
     return false;
   }
 }
-var GIT_CAPTURE_MAX_BYTES = 64 * 1024 * 1024;
+var GIT_CAPTURE_MAX_BYTES = 67108864;
 function gitOut(cwd, args) {
   try {
     return execFileSync3("git", args, {
@@ -2644,14 +2646,14 @@ function gitOut(cwd, args) {
   }
 }
 function probeHarnessWithStatus(root) {
-  if (isFile2(join9(root, ".mstar", "status.json")))
-    return join9(root, ".mstar");
-  if (isFile2(join9(root, ".agents", "status.json")))
-    return join9(root, ".agents");
-  if (hasWorkflowSnapshot(join9(root, ".mstar")))
-    return join9(root, ".mstar");
-  if (hasWorkflowSnapshot(join9(root, ".agents")))
-    return join9(root, ".agents");
+  if (isFile2(join10(root, ".mstar", "status.json")))
+    return join10(root, ".mstar");
+  if (isFile2(join10(root, ".agents", "status.json")))
+    return join10(root, ".agents");
+  if (hasWorkflowSnapshot(join10(root, ".mstar")))
+    return join10(root, ".mstar");
+  if (hasWorkflowSnapshot(join10(root, ".agents")))
+    return join10(root, ".agents");
   return null;
 }
 function hasWorkflowSnapshot(harnessDir) {
@@ -2659,13 +2661,13 @@ function hasWorkflowSnapshot(harnessDir) {
   try {
     workflowsDir = resolveWorkflowDir(harnessDir, { harnessDir });
   } catch {
-    workflowsDir = join9(harnessDir, "workflows");
+    workflowsDir = join10(harnessDir, "workflows");
   }
   if (!isDirectory2(workflowsDir))
     return false;
   try {
-    for (const entry of readdirSync5(workflowsDir, { withFileTypes: true })) {
-      if (entry.isDirectory() && isFile2(join9(workflowsDir, entry.name, "snapshot.json")))
+    for (const entry of readdirSync6(workflowsDir, { withFileTypes: true })) {
+      if (entry.isDirectory() && isFile2(join10(workflowsDir, entry.name, "snapshot.json")))
         return true;
     }
   } catch {
@@ -2678,14 +2680,14 @@ function isLinkedWorktree(root) {
   const commonRaw = gitOut(root, ["rev-parse", "--git-common-dir"]);
   if (gitDirRaw === null || commonRaw === null)
     return false;
-  const gitDir = isAbsolute5(gitDirRaw) ? gitDirRaw : join9(root, gitDirRaw);
-  const common = isAbsolute5(commonRaw) ? commonRaw : join9(root, commonRaw);
+  const gitDir = isAbsolute6(gitDirRaw) ? gitDirRaw : join10(root, gitDirRaw);
+  const common = isAbsolute6(commonRaw) ? commonRaw : join10(root, commonRaw);
   if (gitDir.includes("/.git/worktrees/") || gitDir.includes("/worktrees/"))
     return true;
   try {
     const gdParent = realpathSync3(dirname6(gitDir));
     const cmAbs = realpathSync3(common);
-    return join9(gdParent, basename3(gitDir)) !== cmAbs && gitDir !== cmAbs;
+    return join10(gdParent, basename4(gitDir)) !== cmAbs && gitDir !== cmAbs;
   } catch {
     return false;
   }
@@ -2693,7 +2695,7 @@ function isLinkedWorktree(root) {
 function sddWorkspace(planId, opts = {}) {
   if (!planId) {
     throw new SddScriptError(`usage: mstar sdd workspace PLAN_ID [CONTROL_ROOT]
-` + "  Set MSTAR_CONTROL_ROOT=<control_worktree_path> when running from a feature worktree.", 2);
+  Set MSTAR_CONTROL_ROOT=<control_worktree_path> when running from a feature worktree.`, 2);
   }
   const cwd = opts.cwd ?? process.cwd();
   const controlRoot = opts.controlRoot ?? (process.env.MSTAR_CONTROL_ROOT || undefined);
@@ -2709,35 +2711,35 @@ function sddWorkspace(planId, opts = {}) {
   }
   if (!controlRoot && isLinkedWorktree(root)) {
     throw new SddScriptError(`mstar sdd workspace: linked worktree at ${root} has no {HARNESS_DIR}/status.json (default gitignore).
-` + `  Refusing to create a second SDD tree under the feature checkout.
-` + `  Re-run with MSTAR_CONTROL_ROOT=<control_worktree_path> or: mstar sdd workspace ${planId} <control_worktree_path>
+  Refusing to create a second SDD tree under the feature checkout.
+  Re-run with MSTAR_CONTROL_ROOT=<control_worktree_path> or: mstar sdd workspace ${planId} <control_worktree_path>
 ` + `  See mstar-branch-worktree «Harness path SSOT under default gitignore».`, 1);
   }
   const harnessOverride = opts.harnessDir ?? (process.env.MSTAR_HARNESS_DIR || undefined);
   let harnessDir;
   if (harnessOverride) {
-    harnessDir = resolve8(root, harnessOverride);
+    harnessDir = resolve9(root, harnessOverride);
   } else {
     const rc = findMstarc(root, root);
     const rcHarnessDir = rc !== null ? parseMstarc(readFileSync7(rc, "utf8")).harnessDir : undefined;
     if (rcHarnessDir) {
-      harnessDir = resolve8(rc !== null ? dirname6(rc) : root, rcHarnessDir);
+      harnessDir = resolve9(rc !== null ? dirname6(rc) : root, rcHarnessDir);
     } else {
       const probed = probeHarnessWithStatus(root);
       if (probed) {
         harnessDir = probed;
-      } else if (isDirectory2(join9(root, ".mstar"))) {
-        harnessDir = join9(root, ".mstar");
-      } else if (isDirectory2(join9(root, ".agents"))) {
-        harnessDir = join9(root, ".agents");
+      } else if (isDirectory2(join10(root, ".mstar"))) {
+        harnessDir = join10(root, ".mstar");
+      } else if (isDirectory2(join10(root, ".agents"))) {
+        harnessDir = join10(root, ".agents");
       } else {
-        harnessDir = join9(root, ".mstar");
+        harnessDir = join10(root, ".mstar");
       }
     }
   }
   const sddDir = resolveSddDir(harnessDir, planId);
   mkdirSync6(sddDir, { recursive: true });
-  writeFileSync4(join9(sddDir, ".gitignore"), `*
+  writeFileSync4(join10(sddDir, ".gitignore"), `*
 `);
   return realpathSync3(sddDir);
 }
@@ -2760,7 +2762,7 @@ function taskBrief(planFile, taskN, outFile, opts = {}) {
       throw new SddScriptError("mstar sdd task-brief: set SDD_DIR or pass OUTFILE (run mstar sdd workspace PLAN_ID first)", 2);
     }
     mkdirSync6(sddDir, { recursive: true });
-    out = join9(sddDir, `task-${taskN}-brief.md`);
+    out = join10(sddDir, `task-${taskN}-brief.md`);
   }
   const records = content.endsWith(`
 `) ? content.split(`
@@ -3501,7 +3503,7 @@ function referenceExists(repoRoot, docText) {
     if (ref === "" || seen.has(ref))
       continue;
     seen.add(ref);
-    if (SCHEME_RE.test(ref) || ref.startsWith("{") || ref.startsWith("#") || ref.includes("*") || ref.includes("?") || ref.startsWith("~") || isAbsolute7(ref)) {
+    if (SCHEME_RE.test(ref) || ref.startsWith("{") || ref.startsWith("#") || ref.includes("*") || ref.includes("?") || ref.startsWith("~") || isAbsolute8(ref)) {
       continue;
     }
     if (ref.includes("/") || REF_EXT_RE.test(ref)) {
@@ -3520,7 +3522,7 @@ function referenceExists(repoRoot, docText) {
       const dir = stack.pop();
       let entries;
       try {
-        entries = readdirSync8(dir, { withFileTypes: true });
+        entries = readdirSync9(dir, { withFileTypes: true });
       } catch {
         continue;
       }
@@ -3529,7 +3531,7 @@ function referenceExists(repoRoot, docText) {
           break;
         if (entry.isDirectory()) {
           if (!WALK_SKIP_DIRS.has(entry.name))
-            stack.push(join12(dir, entry.name));
+            stack.push(join13(dir, entry.name));
         } else if (!entry.isSymbolicLink()) {
           const base = entry.name.replace(/\.(?:ts|tsx|js|jsx|mjs|cjs)$/, "");
           if (moduleNames.has(base))
@@ -3541,7 +3543,7 @@ function referenceExists(repoRoot, docText) {
   for (const { ref, isSymbol, module } of refs) {
     if (!isSymbol || module === undefined) {
       const candidate = ref.replace(LINE_SUFFIX_RE, "").replace(ANCHOR_RE, "");
-      if (existsSync8(resolve11(repoRoot, candidate))) {
+      if (existsSync9(resolve12(repoRoot, candidate))) {
         checked++;
       } else {
         violations.push(violation10("medium", "compound.reference.missing-file", `referenced path \`${ref}\` does not exist under ${repoRoot} (compound-refresh Phase 2: referenced code still exists?)`, "update the doc to reference an existing path, or delete the stale reference"));
@@ -3561,14 +3563,14 @@ function collectKnowledgeDocs(dir) {
     const current = stack.pop();
     let entries;
     try {
-      entries = readdirSync8(current, { withFileTypes: true });
+      entries = readdirSync9(current, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (entry.isSymbolicLink())
         continue;
-      const full = join12(current, entry.name);
+      const full = join13(current, entry.name);
       if (entry.isDirectory()) {
         stack.push(full);
       } else if (entry.name.endsWith(".md") && entry.name !== "README.md" && entry.name !== "index.md") {
@@ -3588,8 +3590,8 @@ function normalizeIndexRef(cell) {
 }
 function assertIndexRows(knowledgeDir) {
   const violations = [];
-  const readmePath = join12(knowledgeDir, "README.md");
-  if (!existsSync8(readmePath)) {
+  const readmePath = join13(knowledgeDir, "README.md");
+  if (!existsSync9(readmePath)) {
     violations.push(violation10("medium", "compound.index.missing-readme", `missing ${readmePath} — the knowledge index is required (mstar-compound Phase 6: every doc gets a README.md row)`, "create knowledge/README.md with a Document / Source Plan / Description / Status table"));
     return { ok: false, violations };
   }
@@ -3613,12 +3615,12 @@ function assertIndexRows(knowledgeDir) {
   return { ok: violations.length === 0, violations };
 }
 function isFileLikeRoot(root) {
-  return /^[^.]*\.[A-Za-z0-9]{1,10}$/.test(basename5(root));
+  return /^[^.]*\.[A-Za-z0-9]{1,10}$/.test(basename6(root));
 }
 function scopeGuard(path, allowedRoots) {
-  const resolved = resolve11(path);
+  const resolved = resolve12(path);
   for (const root of allowedRoots) {
-    const r = resolve11(root);
+    const r = resolve12(root);
     if (isFileLikeRoot(r)) {
       if (resolved === r)
         return { ok: true, violations: [] };
@@ -3776,8 +3778,8 @@ function validateRoleMapping(rolesDir, options = {}) {
   const violations = [];
   const referenceById = new Map(mapping.map((m) => [m.agentId, m.reference]));
   for (const { agentId, reference } of mapping) {
-    if (!existsSync9(join13(rolesDir, reference))) {
-      violations.push(violation12("medium", "roles.mapping.reference.missing", `role "${agentId}" maps to ${reference} which does not exist under ${rolesDir} (mstar-roles § Role Reference Mapping)`, `create ${join13(rolesDir, reference)} or fix the mapping row`));
+    if (!existsSync10(join14(rolesDir, reference))) {
+      violations.push(violation12("medium", "roles.mapping.reference.missing", `role "${agentId}" maps to ${reference} which does not exist under ${rolesDir} (mstar-roles § Role Reference Mapping)`, `create ${join14(rolesDir, reference)} or fix the mapping row`));
     }
   }
   for (const { family, memberIds } of families) {
@@ -3990,8 +3992,8 @@ class DshMstar extends Service {
 
 // src/gates/_shared.ts
 var import_schemastery = __toESM(require_lib2(), 1);
-import { existsSync as existsSync4 } from "node:fs";
-import { resolve as resolve5 } from "node:path";
+import { existsSync as existsSync3 } from "node:fs";
+import { resolve as resolve4 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var STATUS_FILE = "status.json";
 var PERSONA_INTERPOLATION_HAZARD = /\{\{[\s\S]*\}\}/;
@@ -4045,7 +4047,7 @@ function resolvePackagedSkillsDir(fileUrl) {
   for (const rel of ["../harness-skills", "../../harness-skills"]) {
     try {
       const dir = fileURLToPath2(new URL(rel, fileUrl));
-      if (existsSync4(dir))
+      if (existsSync3(dir))
         return dir;
     } catch {}
   }
@@ -4064,7 +4066,7 @@ function resolvePackagedAgentsDir(fileUrl) {
   for (const rel of ["../harness-agents", "../../harness-agents"]) {
     try {
       const dir = fileURLToPath2(new URL(rel, fileUrl));
-      if (existsSync4(dir))
+      if (existsSync3(dir))
         return dir;
     } catch {}
   }
@@ -4084,14 +4086,14 @@ class HarnessResolver {
   explicit;
   cache = new Map;
   constructor(explicit) {
-    this.explicit = explicit !== undefined && explicit.trim() !== "" ? resolve5(process.cwd(), explicit) : null;
+    this.explicit = explicit !== undefined && explicit.trim() !== "" ? resolve4(process.cwd(), explicit) : null;
   }
   forWorkspace(cwd) {
     if (this.explicit !== null)
       return this.explicit;
     if (cwd === undefined || cwd.trim() === "")
       return null;
-    const abs = resolve5(cwd);
+    const abs = resolve4(cwd);
     const hit = this.cache.get(abs);
     if (hit !== undefined)
       return hit;
@@ -4132,20 +4134,20 @@ function skillLocalConfig(config) {
 }
 
 // src/gates/catalog.ts
-import { existsSync as existsSync13, readFileSync as readFileSync8, readdirSync as readdirSync6 } from "node:fs";
-import { join as join10 } from "node:path";
+import { existsSync as existsSync13, readFileSync as readFileSync8, readdirSync as readdirSync4 } from "node:fs";
+import { join as join8 } from "node:path";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
 
 // src/gates/agent-flow.ts
-import { appendFileSync, closeSync, existsSync as existsSync12, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync5, readSync, renameSync as renameSync2, rmdirSync, statSync as statSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join7 } from "node:path";
+import { appendFileSync, closeSync, existsSync as existsSync11, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync5, readSync, renameSync as renameSync2, rmdirSync, statSync as statSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join6 } from "node:path";
 
 // src/gates/dispatch.ts
-import { existsSync as existsSync10 } from "node:fs";
-import { basename as basename4, join as join5, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync8 } from "node:fs";
+import { basename as basename2, join as join5, resolve as resolve6 } from "node:path";
 
 // src/gates/workflow-selection.ts
-import { existsSync as existsSync7, readdirSync as readdirSync3, statSync as statSync2 } from "node:fs";
+import { existsSync as existsSync5, readdirSync as readdirSync2, statSync as statSync2 } from "node:fs";
 import { dirname as dirname7, join as join3, relative as relative3 } from "node:path";
 var TERMINAL_STATUS_CACHE_MAX = 64;
 var terminalStatusCache = new Map;
@@ -4180,7 +4182,7 @@ function terminalStatusOf(snapshotPath) {
 }
 function resolveActiveWorkflow(harnessDir) {
   const statusPath = join3(harnessDir, STATUS_FILE);
-  if (!existsSync7(statusPath)) {
+  if (!existsSync5(statusPath)) {
     return {
       kind: "error",
       code: "status.missing",
@@ -4238,7 +4240,7 @@ function resolveReadWorkflow(harnessDir) {
   if (active.kind === "error" && active.code !== "workflow.selection.no-active")
     return active;
   const workflowsDir = resolveWorkflowDir(harnessDir, { harnessDir });
-  if (!existsSync7(workflowsDir)) {
+  if (!existsSync5(workflowsDir)) {
     return {
       kind: "error",
       code: "workflow.selection.no-snapshot",
@@ -4247,7 +4249,7 @@ function resolveReadWorkflow(harnessDir) {
   }
   let entries;
   try {
-    entries = readdirSync3(workflowsDir, { withFileTypes: true });
+    entries = readdirSync2(workflowsDir, { withFileTypes: true });
   } catch {
     return {
       kind: "error",
@@ -4260,7 +4262,7 @@ function resolveReadWorkflow(harnessDir) {
     if (!entry.isDirectory())
       continue;
     const snapshotPath = join3(workflowsDir, entry.name, WORKFLOW_SNAPSHOT_FILE);
-    if (!existsSync7(snapshotPath)) {
+    if (!existsSync5(snapshotPath)) {
       terminalStatusCache.delete(snapshotPath);
       continue;
     }
@@ -4272,7 +4274,7 @@ function resolveReadWorkflow(harnessDir) {
     }
   }
   for (const cachedPath of terminalStatusCache.keys()) {
-    if (!existsSync7(join3(dirname7(cachedPath), WORKFLOW_SNAPSHOT_FILE))) {
+    if (!existsSync5(join3(dirname7(cachedPath), WORKFLOW_SNAPSHOT_FILE))) {
       terminalStatusCache.delete(cachedPath);
     }
   }
@@ -4435,12 +4437,12 @@ function isNaValue(value) {
 function planIdOf(headerRegion) {
   const planPath = assignmentHeaderValue(headerRegion, "Plan Path");
   if (!isNaValue(planPath)) {
-    const id = basename4(firstToken(planPath) ?? "");
+    const id = basename2(firstToken(planPath) ?? "");
     return id.endsWith(".md") ? id.slice(0, -3) : id;
   }
   const sddDir = assignmentHeaderValue(headerRegion, "SDD dir");
   if (!isNaValue(sddDir)) {
-    const id = basename4(firstToken(sddDir) ?? "");
+    const id = basename2(firstToken(sddDir) ?? "");
     return id === "" ? undefined : id;
   }
   const planId = assignmentHeaderValue(headerRegion, "plan_id");
@@ -4470,7 +4472,7 @@ function leaseGateViolations(harnessDir, exec, writable, prompt) {
     return [leaseViolation("lease.dispatch.unverifiable", `${join5(harnessDir, STATUS_FILE)}: ${selection.kind === "error" ? selection.message : "no active workflow"} — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "create a valid v2 status.json registering an active workflow (first implement dispatch requires a plan row + lease)")];
   }
   const snapshotPath = join5(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
-  if (!existsSync10(snapshotPath)) {
+  if (!existsSync8(snapshotPath)) {
     if (!sdd)
       return [];
     return [leaseViolation("lease.dispatch.unverifiable", `${snapshotPath} is missing — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "create a valid workflow snapshot registering the plan row (first implement dispatch requires a plan row)")];
@@ -4503,7 +4505,7 @@ function leaseGateViolations(harnessDir, exec, writable, prompt) {
     const wt = worktree === undefined ? undefined : firstToken(worktree);
     if (isNaValue(wt)) {
       violations.push(leaseViolation("lease.dispatch.worktree-mismatch", "Assignment declares no Worktree path — cannot confirm this dispatch matches execution_lease.worktree_path", "add the absolute Worktree path to the Assignment (must equal the lease worktree_path)"));
-    } else if (resolve9(wt) !== resolve9(String(lease.worktree_path ?? ""))) {
+    } else if (resolve6(wt) !== resolve6(String(lease.worktree_path ?? ""))) {
       violations.push(leaseViolation("lease.dispatch.worktree-mismatch", `Assignment Worktree path "${wt}" differs from execution_lease.worktree_path "${String(lease.worktree_path)}"`, "align the Assignment with the lease worktree path (or update the lease)"));
     }
     const forms = parseAssignmentBranchForms(header);
@@ -4544,7 +4546,7 @@ function worktreeL2Violations(header) {
   return violations;
 }
 function activeSnapshotRows(harnessDir) {
-  if (!existsSync10(join5(harnessDir, STATUS_FILE)))
+  if (!existsSync8(join5(harnessDir, STATUS_FILE)))
     return { rows: null, controlWorktreePath: undefined, unreadable: false };
   const selection = resolveActiveWorkflow(harnessDir);
   if (selection.kind !== "active") {
@@ -4555,7 +4557,7 @@ function activeSnapshotRows(harnessDir) {
     };
   }
   const snapshotPath = join5(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
-  if (!existsSync10(snapshotPath))
+  if (!existsSync8(snapshotPath))
     return { rows: null, controlWorktreePath: undefined, unreadable: true };
   let doc;
   try {
@@ -4609,7 +4611,7 @@ function dispatchGateCore(config, harnessDir, prompt) {
   const header = assignmentHeaderRegion(prompt);
   const violations = [...worktreeL2Violations(header), ...worktreeL1Violations(harnessDir, header)];
   const writable = isReadOnlyAssignmentRole(parseAssignmentFields(header).executeAs ?? "") ? false : undefined;
-  violations.push(...composeDispatchGate(header, { agent: config.dispatchBinding ?? "", writable }).violations);
+  violations.push(...composeDispatchGate(header, { caller: config.dispatchBinding ?? "", callerRequired: true, writable }).violations);
   return { violations, writable };
 }
 function workflowGateInputOf(exec) {
@@ -4835,7 +4837,7 @@ function callPairingKey(exec) {
 function resolveAgentFlowWriteDir(harnessDir) {
   const selection = resolveActiveWorkflow(harnessDir);
   if (selection.kind === "active")
-    return join7(harnessDir, selection.dir);
+    return join6(harnessDir, selection.dir);
   const message = selection.kind === "error" ? selection.message : "no active lifecycle (unexpected terminal selection — the active-set resolver has no history view)";
   if (!noActiveWarned) {
     noActiveWarned = true;
@@ -4852,7 +4854,7 @@ function sleepSync(ms) {
   Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 }
 function withWorkflowDirLock(workflowDir, fn, opts = {}) {
-  const lockDir = join7(workflowDir, WORKFLOW_LEDGER_LOCKDIR);
+  const lockDir = join6(workflowDir, WORKFLOW_LEDGER_LOCKDIR);
   if (heldWorkflowLocks.has(lockDir)) {
     throw new Error(`${lockDir} is already held by this process — withWorkflowDirLock is not reentrant; a nested acquisition on the same workflow dir is a bug`);
   }
@@ -4878,7 +4880,7 @@ function withWorkflowDirLock(workflowDir, fn, opts = {}) {
   heldWorkflowLocks.add(lockDir);
   try {
     try {
-      writeFileSync2(join7(lockDir, WORKFLOW_LOCKER_HOLDER_PID), String(process.pid), "utf8");
+      writeFileSync2(join6(lockDir, WORKFLOW_LOCKER_HOLDER_PID), String(process.pid), "utf8");
     } catch {}
     return fn();
   } finally {
@@ -4887,7 +4889,7 @@ function withWorkflowDirLock(workflowDir, fn, opts = {}) {
       const current = statSync5(lockDir);
       if (acquired !== null && current.dev === acquired.dev && current.ino === acquired.ino) {
         try {
-          unlinkSync2(join7(lockDir, WORKFLOW_LOCKER_HOLDER_PID));
+          unlinkSync2(join6(lockDir, WORKFLOW_LOCKER_HOLDER_PID));
         } catch {}
         rmdirSync(lockDir);
       }
@@ -4895,7 +4897,7 @@ function withWorkflowDirLock(workflowDir, fn, opts = {}) {
   }
 }
 function appendEvent(workflowDir, event) {
-  const file = join7(workflowDir, AGENT_FLOW_FILE);
+  const file = join6(workflowDir, AGENT_FLOW_FILE);
   withWorkflowDirLock(workflowDir, () => {
     appendFileSync(file, `${JSON.stringify(event)}
 `);
@@ -5284,8 +5286,8 @@ function ledgerContent(file, n) {
   }
 }
 function readAgentFlow(workflowDir, limit) {
-  const file = join7(workflowDir, AGENT_FLOW_FILE);
-  if (!existsSync12(file)) {
+  const file = join6(workflowDir, AGENT_FLOW_FILE);
+  if (!existsSync11(file)) {
     return { events: [], summary: [] };
   }
   const n = limit === undefined ? AGENT_FLOW_DEFAULT_LIMIT : Math.max(0, Math.floor(limit));
@@ -5539,7 +5541,7 @@ function hhmm(ts) {
 function harnessStateSource(harnessDir) {
   if (harnessDir === null)
     return null;
-  const statusPath = join10(harnessDir, STATUS_FILE);
+  const statusPath = join8(harnessDir, STATUS_FILE);
   if (!existsSync13(statusPath))
     return null;
   try {
@@ -5559,7 +5561,7 @@ function harnessStateSource(harnessDir) {
     if (selection.kind === "error") {
       return selectionErrorState(selection, rollup, harnessDir, compass);
     }
-    const snapshotPath = join10(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
+    const snapshotPath = join8(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
     let snapshot;
     if (!existsSync13(snapshotPath)) {
       return selectionErrorState({
@@ -5623,7 +5625,7 @@ function harnessStateSource(harnessDir) {
       leases,
       knowledge: knowledgeDigest(harnessDir),
       direction: compass !== undefined ? compassDirection(compass.compassPath) : null,
-      agentFlow: readAgentFlow(join10(harnessDir, selection.dir), 50)
+      agentFlow: readAgentFlow(join8(harnessDir, selection.dir), 50)
     };
   } catch {
     return null;
@@ -5656,14 +5658,14 @@ function projectRollupSource(harnessDir, residuals) {
   if (existsSync13(projectsDir)) {
     let entries;
     try {
-      entries = readdirSync6(projectsDir, { withFileTypes: true });
+      entries = readdirSync4(projectsDir, { withFileTypes: true });
     } catch {
       entries = [];
     }
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const roadmapPath = join10(projectsDir, entry.name, PROJECT_ROADMAP_FILE);
+      const roadmapPath = join8(projectsDir, entry.name, PROJECT_ROADMAP_FILE);
       if (!existsSync13(roadmapPath))
         continue;
       try {
@@ -5733,7 +5735,7 @@ function projectRegisters(harnessDir) {
     return [];
   let entries;
   try {
-    entries = readdirSync6(projectsDir, { withFileTypes: true });
+    entries = readdirSync4(projectsDir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -5741,7 +5743,7 @@ function projectRegisters(harnessDir) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const registerPath = join10(projectsDir, entry.name, PROJECT_REGISTER_FILE);
+    const registerPath = join8(projectsDir, entry.name, PROJECT_REGISTER_FILE);
     if (!existsSync13(registerPath))
       continue;
     try {
@@ -5753,7 +5755,7 @@ function projectRegisters(harnessDir) {
   return registers;
 }
 function knowledgeDigest(harnessDir) {
-  const indexPath = join10(harnessDir, "knowledge", "README.md");
+  const indexPath = join8(harnessDir, "knowledge", "README.md");
   if (!existsSync13(indexPath))
     return null;
   try {
@@ -5803,14 +5805,14 @@ function steeringCompassPath(harnessDir) {
     return;
   let entries;
   try {
-    entries = readdirSync6(iterationsDir, { withFileTypes: true });
+    entries = readdirSync4(iterationsDir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const compassPath = join10(iterationsDir, entry.name, "delivery-compass.md");
+    const compassPath = join8(iterationsDir, entry.name, "delivery-compass.md");
     if (!existsSync13(compassPath))
       continue;
     let content;
@@ -5829,7 +5831,7 @@ function steeringCompassPath(harnessDir) {
 function iterationGateSource(harnessDir) {
   if (harnessDir === null)
     return;
-  const statusPath = join10(harnessDir, STATUS_FILE);
+  const statusPath = join8(harnessDir, STATUS_FILE);
   if (!existsSync13(statusPath))
     return;
   const compass = steeringCompassPath(harnessDir);
@@ -5838,7 +5840,7 @@ function iterationGateSource(harnessDir) {
   const selection = resolveReadWorkflow(harnessDir);
   if (selection.kind === "error")
     return;
-  const snapshotPath = join10(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
+  const snapshotPath = join8(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
   try {
     const snapshotDoc = readJson(snapshotPath);
     const compassDoc = parseCompassFrontmatter(compass.compassPath);
@@ -5892,12 +5894,12 @@ function agentDigestKey(agent, cwd) {
 }
 
 // src/gates/status.ts
-import { existsSync as existsSync14, readdirSync as readdirSync9 } from "node:fs";
-import { basename as basename6, join as join14, relative as relative5, resolve as resolve12 } from "node:path";
+import { existsSync as existsSync14, readdirSync as readdirSync7 } from "node:fs";
+import { basename as basename5, join as join11, relative as relative5, resolve as resolve10 } from "node:path";
 var LOGGER_NAME = "mstar/status-gate";
 function harnessDocKindOfTarget(harnessDir, targetPath) {
-  const resolved = resolve12(targetPath);
-  const name = basename6(resolved);
+  const resolved = resolve10(targetPath);
+  const name = basename5(resolved);
   if (name !== STATUS_FILE && name !== WORKFLOW_SNAPSHOT_FILE && name !== PROJECT_REGISTER_FILE)
     return null;
   const rel = relative5(harnessDir, resolved);
@@ -5909,8 +5911,8 @@ function harnessDocKindOfTarget(harnessDir, targetPath) {
     workflowDir = resolveWorkflowDir(harnessDir, { harnessDir });
     projectDir = resolveProjectDir(harnessDir, { harnessDir });
   } catch {
-    workflowDir = join14(harnessDir, "workflows");
-    projectDir = join14(harnessDir, "projects");
+    workflowDir = join11(harnessDir, "workflows");
+    projectDir = join11(harnessDir, "projects");
   }
   if (name === WORKFLOW_SNAPSHOT_FILE && /^[^/]+\/snapshot\.json$/.test(relative5(workflowDir, resolved)))
     return "snapshot";
@@ -5966,7 +5968,7 @@ function projectRegisterDocs(harnessDir) {
   const projectsDir = resolveProjectDir(harnessDir, { harnessDir });
   let entries;
   try {
-    entries = readdirSync9(projectsDir, { withFileTypes: true });
+    entries = readdirSync7(projectsDir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -5974,7 +5976,7 @@ function projectRegisterDocs(harnessDir) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const registerPath = join14(projectsDir, entry.name, PROJECT_REGISTER_FILE);
+    const registerPath = join11(projectsDir, entry.name, PROJECT_REGISTER_FILE);
     if (!existsSync14(registerPath))
       continue;
     try {
@@ -6049,7 +6051,7 @@ async function editIntentListener(ctx, resolver, config, adapter, target, actor,
 
 // src/gates/skill-lint.ts
 import { existsSync as existsSync15, readFileSync as readFileSync11 } from "node:fs";
-import { basename as basename7, dirname as dirname9, resolve as resolve14, sep as sep2 } from "node:path";
+import { basename as basename7, dirname as dirname9, resolve as resolve13, sep as sep2 } from "node:path";
 var SKILL_LINT_LOGGER = "mstar/skill-lint";
 
 class SkillLintVetoError extends Error {
@@ -6112,8 +6114,8 @@ function skillRootsOf(config) {
 function isSkillTarget(roots, target) {
   if (basename7(target.displayPath) !== "SKILL.md")
     return false;
-  const resolvedPath = resolve14(target.displayPath);
-  return roots.some((root) => resolvedPath.startsWith(resolve14(root) + sep2));
+  const resolvedPath = resolve13(target.displayPath);
+  return roots.some((root) => resolvedPath.startsWith(resolve13(root) + sep2));
 }
 function skillNameOf(target) {
   return basename7(dirname9(target.displayPath));
@@ -6128,7 +6130,7 @@ function gateSkillIntent(ctx, harnessDir, config, target) {
       return;
     if (!isSkillTarget(roots, target))
       return;
-    const skillPath = resolve14(target.displayPath);
+    const skillPath = resolve13(target.displayPath);
     if (!existsSync15(skillPath))
       return;
     let doc;
@@ -6180,8 +6182,8 @@ async function skillWriteIntentListener(ctx, resolver, config, target, actor, ne
 }
 
 // src/gates/seams.ts
-import { existsSync as existsSync16, readFileSync as readFileSync13, readdirSync as readdirSync11 } from "node:fs";
-import { basename as basename8, dirname as dirname10, join as join16, resolve as resolve15, sep as sep3 } from "node:path";
+import { existsSync as existsSync16, readFileSync as readFileSync13, readdirSync as readdirSync10 } from "node:fs";
+import { basename as basename8, dirname as dirname10, join as join15, resolve as resolve15, sep as sep3 } from "node:path";
 
 // ../engine/dist/audit.js
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
@@ -6414,7 +6416,7 @@ function rolesDirOf(path) {
   const idx = segments.indexOf("mstar-roles");
   if (idx === -1)
     return dirname10(path);
-  return idx === 0 ? sep3 : join16(sep3, ...segments.slice(1, idx + 1));
+  return idx === 0 ? sep3 : join15(sep3, ...segments.slice(1, idx + 1));
 }
 function isSeamTarget(seam, harnessDir, target) {
   const path = resolve15(target.displayPath);
@@ -6428,7 +6430,7 @@ function isSeamTarget(seam, harnessDir, target) {
     case "compound": {
       if (harnessDir === null)
         return false;
-      return path.startsWith(resolve15(join16(harnessDir, "knowledge")) + sep3) && isMarkdownDoc(path);
+      return path.startsWith(resolve15(join15(harnessDir, "knowledge")) + sep3) && isMarkdownDoc(path);
     }
     case "roles":
       return isRolesTarget(path);
@@ -6446,7 +6448,7 @@ function auditSecretsViolations(findings, file) {
 function validateDesignDoc(doc, path) {
   const violations = [...validateDesignTokenFrontmatter(doc).violations];
   const isDark = basename8(path) === "DESIGN.dark.md";
-  const sibling = join16(dirname10(path), isDark ? "DESIGN.md" : "DESIGN.dark.md");
+  const sibling = join15(dirname10(path), isDark ? "DESIGN.md" : "DESIGN.dark.md");
   if (existsSync16(sibling)) {
     const light = isDark ? readFileSync13(sibling, "utf8") : doc;
     const dark = isDark ? doc : readFileSync13(sibling, "utf8");
@@ -6470,10 +6472,10 @@ function validateCompoundDoc(doc, _path, harnessDir) {
 function validateRolesState(rolesDir, skillsRoot = dirname10(rolesDir)) {
   const violations = [...validateRoleMapping(rolesDir).violations];
   const skillTexts = {};
-  for (const entry of readdirSync11(skillsRoot, { withFileTypes: true })) {
+  for (const entry of readdirSync10(skillsRoot, { withFileTypes: true })) {
     if (!entry.isDirectory() || !entry.name.startsWith("mstar-"))
       continue;
-    const skillFile = join16(skillsRoot, entry.name, "SKILL.md");
+    const skillFile = join15(skillsRoot, entry.name, "SKILL.md");
     if (!existsSync16(skillFile))
       continue;
     try {

package/harness-commands/amazing-pr-review.md

@@ -52,3 +52,5 @@ Execute **`mstar-audit`** § `pr` variant end to end（SKILL.md common core：re
 Review findings that need fixing can be turned into self-contained plans for the normal Prepare → Execute flow (reusing `mstar-audit` SKILL.md **`## Plan output (all variants)`** — same contract as the `pr` variant).
 
 Output verdict + findings to the user, with the posted GitHub Review URL. Posting procedure (when a PR number exists) → **`references/pr-review.md`** § Comment posting; the main agent saves the Stage 3 report and writes/consolidates the evidence files — every seat returns evidence / findings in its **result payload** (any seat may be write-blocked); writable seats may **best-effort** write files in addition → **`references/pr-review.md`** § Local report archive. Never auto-approve or merge.
+
+**Stage 3 envelope (mandatory):** after the tally, the main agent **must** fold the accepted findings into a `mstar.review/v1` envelope (`synthesizeReview` — or the equivalent engine call) and persist it via `mstar-harness persist review --key <plan-or-pr-id> --stdin` (or `getArtifactStore().put`). The Markdown archive is an optional human copy — **not** a substitute for the envelope. Procedure → **`references/pr-review.md`** § Review pipeline (Stage 3).

package/harness-skills/mstar-audit/references/pr-review.md

@@ -8,9 +8,11 @@ Deep PR review is a **three-stage pipeline**: collect → domain review → synt
 
 - **Stage 1 — Collect**: PM fans out lightweight read-only agents by **domain** — business domain / change surface / tech stack; use the host's lightest read-only agent (`scout` / `explorer` / `general` — whatever the host offers). Each collect seat reads the changed files in its domain plus related context and returns **evidence in its result payload** (any seat may be **write-blocked** — read-only sandbox / EPERM; the main agent extracts the payload and writes the evidence file — § Local report archive / `references/pr-review-seat-evidence.md`): `file:line` observations, potential issue surfaces, and security-surface observations (the seat carries a security lens per `security-review.md` §2/§3 **research** discipline — trace origin, never invent an attacker, never record secret values — and still records MEDIUM / unverified items as **leads** in its evidence payload; the HIGH-only filter applies to formal findings, not leads). Collect seats produce **no** findings table, compute **no** verdict, and publish **nothing**.
 - **Stage 2 — Domain review**: mstar built-in roles (`code-reviewer` / `fullstack-dev` / `frontend-dev`) split along the same domain framing, each reviewing code + security in its domain (security via the `security-review.md` lens) and producing findings with **Merge class** (§ Merge class). Each domain seat returns its findings in the **result payload** — any seat may be **write-blocked**; the main agent writes the Stage 2 evidence file (§ Local report archive / `references/pr-review-seat-evidence.md`). A large PR (>~300 changed lines, or spanning multiple change surfaces/domains) or a security-sensitive surface (auth, LLM, supply chain, data — `security-review.md` §9 extended surfaces) adds an **independent cross-domain security seat**.
-- **Stage 3 — Synthesis (main agent)**: the main agent (the command's orchestrator) collects all domain findings + evidence files → **dedupe** → **three-way vet** (open each cited file yourself; `file:line` must genuinely support the claim) → **tally** (§ Tally and derived score — formula unchanged) → **verdict** → report + **publish GitHub Review** (§ Comment posting — publishing authority belongs to the main agent). The main agent does not backfill uncollected / unreviewed domains — a missing domain is declared in the report under `- unverified:` / `- notes:`.
+- **Stage 3 — Synthesis (main agent)**: the main agent (the command's orchestrator) collects all domain findings + evidence files → **dedupe** → **three-way vet** (open each cited file yourself; `file:line` must genuinely support the claim) → **tally** (§ Tally and derived score — formula unchanged) → **verdict** → report + **publish GitHub Review** (§ Comment posting — publishing authority belongs to the main agent). The main agent does not backfill uncollected / unreviewed domains — a missing domain is declared in the report under `- unverified:` / `- notes:`. **The envelope is mandatory**: after the tally, the main agent **must** fold the accepted findings into a `mstar.review/v1` envelope (`synthesizeReview` — or the equivalent engine call) and persist it via `mstar-harness persist review --key <plan-or-pr-id> --stdin` (or `getArtifactStore().put`); the Markdown archive is an optional human copy, **not** a substitute for the envelope.
 - A domain whose seat returned **no evidence** (crashed / Blocked / empty output) is an **uncollected domain**, declared the same way under `- unverified:` / `- notes:`.
 
+> **Engine check (when available):** run `mstar-harness persist review --key <plan-or-pr-id> --stdin` (or `import { synthesizeReview, validateMstarReviewV1 } from "@mstar-harness/engine"` in a host hook) to fold the accepted findings into the `mstar.review/v1` envelope and persist it — `synthesizeReview` derives verdict/tally from `computePrTally` (pure, no I/O), and `kind: review` runs `validateMstarReviewV1` before put, refusing invalid envelopes (exit 1, nothing written). On `fail` -> do not proceed; fix and re-run. Skill text below remains authoritative when the runtime is absent.
+
 **Scale-driven fan-out** (reuses the existing sizing bands — no new thresholds): Stage 1 collect seats scale with PR size; the extra security seat stays in Stage 2:
 
 | Size | Stage 1 collect seats | Extra Stage 2 |

package/harness-skills/mstar-dispatch-gates/SKILL.md

@@ -40,6 +40,8 @@ description: Morning Star 派发与委派门禁 —— 仅 PM 可增派 subagent
 
 **Assignment 顶部反模式块**：每个 PM Assignment 开头均有 **`**You are a leaf executor. You MUST NOT:**`** 块（含 IDENTITY + CAPABILITY BOUNDARY + prohibitions），PM 按此 Assignment 的角色+上下文定制反模式清单。leaf executor 收到 Assignment 后须 **首先** 阅读该块；命中任一条 → **停止**（亲自完成或 `Blocked`）。详见 **`mstar-roles/references/project-manager/dispatch-and-assignment.md`**。
 
+> **Engine 执行范围（caller-scoped，#156）**：engine `antiRecursionPrecheck` 比较的是**派发方自身角色**（caller）与新 Assignment 的 `Execute as`（target）。只有 **dsh**（Config `dispatchBinding`）能观察派发方身份并在 engine 层硬执行（含 `callerRequired` 空绑定 fail-closed）；omp / OpenCode / Cursor 的角色绑定字段是**派发目标**——目标 == `Execute as` 正是 C5 合规派发模式——这些宿主上红线保持 prompt 级约束（本节），engine 不做判定。
+
 ## 调度防串扰（强制；leaf executor 已在上方读过反递归红线，此处为完整规则供 PM/对照用）
 
 - 只有 **`project-manager`** 可以决定增加/并行 subagent；承接方**默认不得二次分派**。
@@ -58,7 +60,7 @@ description: Morning Star 派发与委派门禁 —— 仅 PM 可增派 subagent
 - **QC 单席（例外）**：`Execution mode: inline`（hotfix 等），或 Assignment 显式 `QC mode: single` / `QC mode: single — override: <reason>` → `qc-specialist` ×1，`N=1`，写 `{SDD_DIR}/review/qc.md`。
 - **QC targeted re-review**：Assignment 含 **`QC re-review: targeted — reviewers: …`** 时，**N** = 所列席位数（1–3），同条消息发满 **N**。
 - **先自检再发送**：发送前核对「Assignment 条数 = 本条消息中的实际 **派发** 调用条数」。
-- **先自检字段再发送（与 count 同级门禁）**：核对**每条** invoke 都携带与 **`Execute as`** 匹配的角色绑定字段——omp **`agent`** / Cursor **`subagent_type`** / OpenCode **`subagent`** / Kimi·ZCode **`subagent_type`**。**漏写或取默认通用值**（omp 漏 `agent` ⇒ 自动回退 generic `task`，无报错）= **派发未完成**，与 paste-only（零 invoke）**同等级**：当场补齐重发，不得进入下一 gate。**N=1 顺序链（Review & Edit）不豁免**——count 门在 N=1 恒过，**字段门是唯一保护**。
+- **先自检字段再发送（与 count 同级门禁）**：核对**每条** invoke 都携带与 **`Execute as`** 匹配的角色绑定字段——omp **`agent`** / Cursor **`subagent_type`** / OpenCode **`subagent`** / Kimi·ZCode **`subagent_type`**；宿主列以 **`mstar-host`** §Detect active host 的 tool-shape 检测为准（禁以 config 路径/仓库内容判定）。**漏写或取默认通用值**（omp 漏 `agent` ⇒ 自动回退 generic `task`，无报错）= **派发未完成**，与 paste-only（零 invoke）**同等级**：当场补齐重发，不得进入下一 gate。**N=1 顺序链（Review & Edit）不豁免**——count 门在 N=1 恒过，**字段门是唯一保护**。
 - **前置步骤与派发回合分离（防串行 rollout）**：为派发准备的 **`bash` / `read` / `glob` / `grep`**（如 `merge-base`、`Review range`、`git rev-parse`）**不计入** `N` 次派发；可在上一条仅含准备的消息完成。准备完成后，**下一条派发消息**须**一次性**含 **`N` 次** Task / subagent invoke。**禁止**先发 `1` 次、等返回再补发其余 `N-1` 次。
 - **未齐不发（emit zero until batch-ready）**：需并发 `N≥2` 而当前只能发 `1` 条时，本条应发 **`0` 条派发 invoke`**（可继续 read/bash 补齐），**禁止**「先发一个顶一下」；`N` 份 payload 就绪后**单次消息发满 `N`**。见 **`mstar-host`** → `references/parallel-dispatch.md`（具备 invoke / Task / subagent 工具的宿主共用）。
 

package/harness-skills/mstar-host/references/dsh.md

@@ -472,7 +472,9 @@ The dsh web client resolves slash commands against a client-side lexicon driven
 - The dispatch gate needs the dispatching agent's own role for the
   anti-recursion precheck: declare it via Config **`dispatchBinding`** (dsh
   exposes no per-agent role on the tool-execution context). Under hard
-  enforcement with no binding, the plugin logs the absence.
+  enforcement with no binding, the plugin logs the absence AND every
+  Assignment-shaped dispatch fails closed (`dispatch.anti-recursion.
+  empty-binding` → deny) until the binding is set.
 
 ## Files, shell, and approvals
 

package/harness-skills/mstar-host/references/omp.md

@@ -211,7 +211,8 @@ Cannot emit required **N** → **`Blocked`**.
 ## In-process engine binding (omp ≥ 17.2.11)
 
 - **Surfaces** (repo root = plugin root): `hooks/pre/mstar-gates.ts` — one `tool_call` pre-hook that returns `{ block: true, reason }` (structured refusal the model sees as the tool error) or `undefined` (pass); `tools/mstar_{status_validate,dispatch_validate,lease_verify,path_resolve,iteration_gate,worktree_check}/index.ts` — six model-callable validator tools (engine validators only, Zod params via `pi.zod`).
-|- **Enforcement semantics**: block ONLY under `Enforcement: hard`. The status gate reads the repo `.mstarc` `[config] enforcement`, else the harness compass frontmatter (`enforcement: hard`, active/locked iterations only); the dispatch gate reads each Assignment's own header flag (`assignmentHeaderRegion` — a body example never hardens). Soft / no flag → silent pass. Rollback = unset the flag (or `.mstarc` `soft`). Never global.
+|- **Enforcement semantics**: block ONLY under `Enforcement: hard`. Both gates read the repo `.mstarc` `[config] enforcement`, else the harness compass frontmatter (`enforcement: hard`, active/locked iterations only); the dispatch gate ALSO honors each Assignment's own header flag (`assignmentHeaderRegion` — a body example never hardens). A hard repo setting therefore hardens flag-less dispatches (Gate 1 / dsh `resolveDispatchHard` parity). Soft-mode dispatch violations are warn-logged through the extension logger (never blocked); soft status-write violations stay a silent pass. Rollback = unset the flag (or `.mstarc` `soft`). Never global.
+- **Anti-recursion scope (issue #156)**: the engine's `antiRecursionPrecheck` is **caller-scoped** — it compares the DISPATCHING agent's own role against the new Assignment's `Execute as`. omp's `tool_call` event carries no caller identity and the task entry `agent` is the spawn TARGET, which equals `Execute as` on every compliant dispatch (C5 above) — so Gate 2 does NOT run the precheck on omp (the pre-#156 wiring hard-blocked every compliant hard-mode dispatch on `self-type`, or on `empty-binding` when `agent` was omitted). The NEVER red line stays prompt-level on this host (`mstar-dispatch-gates`); dsh enforces it in-engine via Config `dispatchBinding`.
 - **Engine dependency**: the adapters import the published engine package (root `package.json` `dependencies` entry). omp git/npm plugin installs run `bun install <spec>` in the plugins tree → declared deps installed; a bare `-l` / `omp plugin link` symlink install without `node_modules` cannot resolve the modules.
 - **Graceful degradation (explicit)**: module load failure → `mstar_*` tools skipped, hook absent (no blocking), `commands/*.md` shell-out fallback intact. Caveat: a partial failure is SILENT — no in-band signal that gates are off; verify with `omp -p '/extensions'`.
 |- **`MSTAR_HARNESS_DIR` override / `.mstarc`**: the hook and tools discover `{HARNESS_DIR}` via `resolveHarnessDir` — a repo `.mstarc` `[config] harness_dir` (gitignored local config) first, then the probe `.mstar/` → `.agents/` → `.plans/`/`plans/`. Repos using a non-standard harness root can declare it in `.mstarc` or MUST export `MSTAR_HARNESS_DIR` (absolute path) in the omp session env — without either the status gate does not cover those roots and tools like `mstar_path_resolve` / `mstar_lease_verify` error out (parity with the opencode binding).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mstar-harness/dsh",
-  "version": "3.4.0",
+  "version": "3.5.0",
   "description": "Morning Star harness dsh (DeepSeek Harness) cordis function plugin — in-process engine gates (status/dispatch/lease) with hard refusal channels.",
   "keywords": [
     "dsh",