@mstar-harness/dsh 3.4.1 → 3.5.0

package/dist/index.js

@@ -1122,24 +1122,24 @@ import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { readFileSync as readFileSync2, statSync } from "node:fs";
 import { dirname as dirname2, isAbsolute, join as join2, relative, resolve as resolve2 } from "node:path";
-import { existsSync as existsSync5, mkdirSync as mkdirSync5, readdirSync as readdirSync4, readFileSync as readFileSync6, realpathSync as realpathSync2, statSync as statSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readdirSync as readdirSync5, readFileSync as readFileSync6, realpathSync as realpathSync2, statSync as statSync3, writeFileSync as writeFileSync3 } from "node:fs";
 import { execFileSync } from "node:child_process";
-import { basename as basename2, dirname as dirname5, isAbsolute as isAbsolute3, join as join8, relative as relative2, resolve as resolve6 } from "node:path";
+import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute4, join as join9, relative as relative2, resolve as resolve7 } from "node:path";
 import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync3 } from "node:fs";
 import { dirname as dirname3, isAbsolute as isAbsolute2, join as join4, resolve as resolve3 } from "node:path";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { existsSync as existsSync3, readFileSync as readFileSync4, readdirSync as readdirSync2, realpathSync } from "node:fs";
-import { dirname as dirname4, join as join6, resolve as resolve4, sep } from "node:path";
+import { existsSync as existsSync4, readFileSync as readFileSync4, readdirSync as readdirSync3, realpathSync } from "node:fs";
+import { dirname as dirname4, join as join7, resolve as resolve5, sep } from "node:path";
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync6 } from "node:fs";
-import { isAbsolute as isAbsolute4, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync7 } from "node:fs";
+import { isAbsolute as isAbsolute5, resolve as resolve8 } from "node:path";
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { mkdirSync as mkdirSync6, readdirSync as readdirSync5, readFileSync as readFileSync7, realpathSync as realpathSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { basename as basename3, dirname as dirname6, isAbsolute as isAbsolute5, join as join9, resolve as resolve8 } from "node:path";
-import { existsSync as existsSync8, readdirSync as readdirSync8, readFileSync as readFileSync10 } from "node:fs";
-import { basename as basename5, isAbsolute as isAbsolute7, join as join12, relative as relative4, resolve as resolve11, sep as sep4 } from "node:path";
-import { existsSync as existsSync9 } from "node:fs";
-import { join as join13 } from "node:path";
+import { mkdirSync as mkdirSync6, readdirSync as readdirSync6, readFileSync as readFileSync7, realpathSync as realpathSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { basename as basename4, dirname as dirname6, isAbsolute as isAbsolute6, join as join10, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync9, readdirSync as readdirSync9, readFileSync as readFileSync10 } from "node:fs";
+import { basename as basename6, isAbsolute as isAbsolute8, join as join13, relative as relative4, resolve as resolve12, sep as sep4 } from "node:path";
+import { existsSync as existsSync10 } from "node:fs";
+import { join as join14 } from "node:path";
 var SEVERITY_ORDER = ["critical", "high", "medium", "low", "nit"];
 function applyEnforcement(gate, opts) {
   return { ...gate, hardBlocked: opts.hard && gate.violations.length > 0 };
@@ -2147,7 +2147,7 @@ function validateStatusV2(docOrPath, opts = {}) {
   if (typeof docOrPath === "string") {
     try {
       doc = readJson(docOrPath);
-      harnessDir = dirname4(resolve4(docOrPath));
+      harnessDir = dirname4(resolve5(docOrPath));
     } catch (error) {
       return {
         ok: false,
@@ -2214,8 +2214,8 @@ function validateStatusV2(docOrPath, opts = {}) {
     for (const entry of doc.workflows) {
       if (!isPlainObject4(entry) || typeof entry.dir !== "string")
         continue;
-      const relSnapshot = join6(entry.dir, WORKFLOW_SNAPSHOT_FILE);
-      const snapshotPath = join6(harnessDir, relSnapshot);
+      const relSnapshot = join7(entry.dir, WORKFLOW_SNAPSHOT_FILE);
+      const snapshotPath = join7(harnessDir, relSnapshot);
       const label = typeof entry.id === "string" ? entry.id : relSnapshot;
       let physical;
       try {
@@ -2251,19 +2251,19 @@ function validateStatusV2(docOrPath, opts = {}) {
 var validateStatus = validateStatusV2;
 function resolveCompassEnforcement(harnessDir) {
   const iterationsDir = resolveIterationDir(harnessDir);
-  if (!existsSync3(iterationsDir))
+  if (!existsSync4(iterationsDir))
     return { hard: false, source: "none" };
   let entries;
   try {
-    entries = readdirSync2(iterationsDir, { withFileTypes: true });
+    entries = readdirSync3(iterationsDir, { withFileTypes: true });
   } catch {
     return { hard: false, source: "none" };
   }
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const compassPath = join6(iterationsDir, entry.name, "delivery-compass.md");
-    if (!existsSync3(compassPath))
+    const compassPath = join7(iterationsDir, entry.name, "delivery-compass.md");
+    if (!existsSync4(compassPath))
       continue;
     let content;
     try {
@@ -2282,7 +2282,7 @@ function resolveCompassEnforcement(harnessDir) {
   return { hard: false, source: "none" };
 }
 function resolveMstarcEnforcement(harnessDir) {
-  const dir = resolve4(harnessDir);
+  const dir = resolve5(harnessDir);
   const rc = loadMstarc(dir, dirname4(dir));
   const value = rc?.config.enforcement;
   if (value === "hard")
@@ -2394,19 +2394,19 @@ function findingsCleanupGate(register, planId, opts) {
   return { ok: violations.length === 0, violations };
 }
 function resolveHarnessDir(startDir = process.cwd(), opts = {}) {
-  const start = resolve6(startDir);
+  const start = resolve7(startDir);
   const explicit = opts.harnessDir ?? process.env.MSTAR_HARNESS_DIR;
   if (explicit)
-    return resolve6(start, explicit);
-  const boundary = resolve6(start, opts.workspaceRoot ?? defaultWorkspaceRoot(start));
+    return resolve7(start, explicit);
+  const boundary = resolve7(start, opts.workspaceRoot ?? defaultWorkspaceRoot(start));
   const rc = loadMstarc(start, boundary);
   if (rc !== null && rc.config.harnessDir)
-    return resolve6(rc.dir, rc.config.harnessDir);
+    return resolve7(rc.dir, rc.config.harnessDir);
   let dir = start;
   for (;; ) {
     if (!isAtOrBelow2(dir, boundary))
       return null;
-    for (const candidate of [join8(dir, ".mstar"), join8(dir, ".agents"), join8(dir, ".plans"), join8(dir, "plans")]) {
+    for (const candidate of [join9(dir, ".mstar"), join9(dir, ".agents"), join9(dir, ".plans"), join9(dir, "plans")]) {
       if (isDirectory(candidate))
         return candidate;
     }
@@ -2432,19 +2432,19 @@ function defaultWorkspaceRoot(startDir) {
       if (segment && segment !== ".")
         boundary = dirname5(boundary);
     }
-    return resolve6(boundary);
+    return resolve7(boundary);
   } catch {}
   return startDir;
 }
 function isAtOrBelow2(dir, root) {
   const rel = relative2(root, dir);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute3(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute4(rel);
 }
 function mstarcDirOverride(harnessDir, key) {
-  const dir = resolve6(harnessDir);
+  const dir = resolve7(harnessDir);
   const rc = loadMstarc(dir, dirname5(dir));
   const declared = rc?.config[key];
-  return declared ? resolve6(rc.dir, declared) : null;
+  return declared ? resolve7(rc.dir, declared) : null;
 }
 function assertSafePathComponent(value, what) {
   if (value === "" || value === "." || value === ".." || !/^[A-Za-z0-9._-]+$/.test(value)) {
@@ -2453,24 +2453,24 @@ function assertSafePathComponent(value, what) {
 }
 function resolveSddDir(harnessDir, planId) {
   assertSafePathComponent(planId, "planId");
-  const base = resolve6(harnessDir);
+  const base = resolve7(harnessDir);
   const declared = mstarcDirOverride(base, "sddDir");
-  const sddBase = declared !== null ? declared : join8(base, "sdd");
-  return join8(sddBase, planId);
+  const sddBase = declared !== null ? declared : join9(base, "sdd");
+  return join9(sddBase, planId);
 }
 function resolveIterationDir(harnessDir) {
   const declared = mstarcDirOverride(harnessDir, "iterationDir");
   if (declared !== null)
     return declared;
-  return join8(resolve6(harnessDir), "iterations");
+  return join9(resolve7(harnessDir), "iterations");
 }
 function resolveHarnessSubdir(startDir, opts, key, fallback) {
   const harness = resolveHarnessDir(startDir, opts);
   if (harness === null) {
-    throw new Error(`harness dir not found from ${resolve6(startDir)} — cannot resolve the ${fallback} dir (run \`mstar harness scaffold\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
+    throw new Error(`harness dir not found from ${resolve7(startDir)} — cannot resolve the ${fallback} dir (run \`mstar harness scaffold\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
   }
   const declared = mstarcDirOverride(harness, key);
-  return declared !== null ? declared : join8(resolve6(harness), fallback);
+  return declared !== null ? declared : join9(resolve7(harness), fallback);
 }
 function resolveWorkflowDir(startDir = process.cwd(), opts = {}) {
   return resolveHarnessSubdir(startDir, opts, "workflowDir", "workflows");
@@ -2560,10 +2560,10 @@ function l1PreDispatchCheck(input, opts = {}) {
   if (leaseWorkingBranch.trim() === "") {
     violations.push(violation7("high", "worktree.l1.lease-branch-missing", `execution_lease.working_branch is empty for plan "${planId}"`, "record the lease working_branch before dispatch"));
   }
-  if (controlWorktreePath !== "" && leaseWorktreePath !== "" && resolve7(controlWorktreePath) === resolve7(leaseWorktreePath)) {
+  if (controlWorktreePath !== "" && leaseWorktreePath !== "" && resolve8(controlWorktreePath) === resolve8(leaseWorktreePath)) {
     violations.push(violation7("critical", "worktree.l1.lease-equals-control", `execution_lease.worktree_path "${leaseWorktreePath}" equals metadata.control_worktree_path — the feature worktree MUST differ from the control worktree (L1 isolation; product edits never land in the control checkout)`, "use a distinct feature worktree for the plan (git worktree add <path> <branch>) and update the lease"));
   }
-  if (leaseWorktreePath !== "" && !existsSync6(leaseWorktreePath)) {
+  if (leaseWorktreePath !== "" && !existsSync7(leaseWorktreePath)) {
     violations.push(violation7("high", "worktree.l1.feature-missing", `feature worktree directory "${leaseWorktreePath}" does not exist for plan "${planId}"`, `create it before dispatch: git worktree add ${leaseWorktreePath} <working-branch>`));
   } else if (leaseWorktreePath !== "" && leaseWorkingBranch !== "") {
     const probe = probeBranch(leaseWorktreePath, opts);
@@ -2587,17 +2587,17 @@ function l2PreDispatchCheck(input, opts = {}) {
       violations.push(violation7("high", "worktree.l2.track-invalid", `track ${index + 1} is missing worktreePath and/or workingBranch`, "fill both fields for every track"));
       return;
     }
-    if (!isAbsolute4(track.worktreePath)) {
+    if (!isAbsolute5(track.worktreePath)) {
       violations.push(violation7("high", "worktree.l2.track-path-relative", `track ${index + 1} worktreePath "${track.worktreePath}" is not an absolute path — L2 tracks MUST use absolute worktree checkout paths (consistent with the lease validator's absolute worktree_path enforcement)`, `use an absolute path for track ${index + 1} (e.g. /Users/<you>/worktrees/<branch>)`));
       return;
     }
-    const normalized = resolve7(track.worktreePath);
+    const normalized = resolve8(track.worktreePath);
     if (seenPaths.has(normalized)) {
       violations.push(violation7("high", "worktree.l2.track-path-collision", `duplicate worktreePath "${track.worktreePath}" across parallel tracks — L2 parallel-writable isolation requires a distinct absolute Worktree path per track (N parallel invokes ≠ isolation)`, "give every parallel track its own git worktree checkout"));
       return;
     }
     seenPaths.add(normalized);
-    if (!existsSync6(track.worktreePath)) {
+    if (!existsSync7(track.worktreePath)) {
       violations.push(violation7("high", "worktree.l2.track-missing", `track worktree directory "${track.worktreePath}" does not exist`, `create it before dispatch: git worktree add ${track.worktreePath} ${track.workingBranch}`));
       return;
     }
@@ -2632,7 +2632,7 @@ function isFile2(file) {
     return false;
   }
 }
-var GIT_CAPTURE_MAX_BYTES = 64 * 1024 * 1024;
+var GIT_CAPTURE_MAX_BYTES = 67108864;
 function gitOut(cwd, args) {
   try {
     return execFileSync3("git", args, {
@@ -2646,14 +2646,14 @@ function gitOut(cwd, args) {
   }
 }
 function probeHarnessWithStatus(root) {
-  if (isFile2(join9(root, ".mstar", "status.json")))
-    return join9(root, ".mstar");
-  if (isFile2(join9(root, ".agents", "status.json")))
-    return join9(root, ".agents");
-  if (hasWorkflowSnapshot(join9(root, ".mstar")))
-    return join9(root, ".mstar");
-  if (hasWorkflowSnapshot(join9(root, ".agents")))
-    return join9(root, ".agents");
+  if (isFile2(join10(root, ".mstar", "status.json")))
+    return join10(root, ".mstar");
+  if (isFile2(join10(root, ".agents", "status.json")))
+    return join10(root, ".agents");
+  if (hasWorkflowSnapshot(join10(root, ".mstar")))
+    return join10(root, ".mstar");
+  if (hasWorkflowSnapshot(join10(root, ".agents")))
+    return join10(root, ".agents");
   return null;
 }
 function hasWorkflowSnapshot(harnessDir) {
@@ -2661,13 +2661,13 @@ function hasWorkflowSnapshot(harnessDir) {
   try {
     workflowsDir = resolveWorkflowDir(harnessDir, { harnessDir });
   } catch {
-    workflowsDir = join9(harnessDir, "workflows");
+    workflowsDir = join10(harnessDir, "workflows");
   }
   if (!isDirectory2(workflowsDir))
     return false;
   try {
-    for (const entry of readdirSync5(workflowsDir, { withFileTypes: true })) {
-      if (entry.isDirectory() && isFile2(join9(workflowsDir, entry.name, "snapshot.json")))
+    for (const entry of readdirSync6(workflowsDir, { withFileTypes: true })) {
+      if (entry.isDirectory() && isFile2(join10(workflowsDir, entry.name, "snapshot.json")))
         return true;
     }
   } catch {
@@ -2680,14 +2680,14 @@ function isLinkedWorktree(root) {
   const commonRaw = gitOut(root, ["rev-parse", "--git-common-dir"]);
   if (gitDirRaw === null || commonRaw === null)
     return false;
-  const gitDir = isAbsolute5(gitDirRaw) ? gitDirRaw : join9(root, gitDirRaw);
-  const common = isAbsolute5(commonRaw) ? commonRaw : join9(root, commonRaw);
+  const gitDir = isAbsolute6(gitDirRaw) ? gitDirRaw : join10(root, gitDirRaw);
+  const common = isAbsolute6(commonRaw) ? commonRaw : join10(root, commonRaw);
   if (gitDir.includes("/.git/worktrees/") || gitDir.includes("/worktrees/"))
     return true;
   try {
     const gdParent = realpathSync3(dirname6(gitDir));
     const cmAbs = realpathSync3(common);
-    return join9(gdParent, basename3(gitDir)) !== cmAbs && gitDir !== cmAbs;
+    return join10(gdParent, basename4(gitDir)) !== cmAbs && gitDir !== cmAbs;
   } catch {
     return false;
   }
@@ -2695,7 +2695,7 @@ function isLinkedWorktree(root) {
 function sddWorkspace(planId, opts = {}) {
   if (!planId) {
     throw new SddScriptError(`usage: mstar sdd workspace PLAN_ID [CONTROL_ROOT]
-` + "  Set MSTAR_CONTROL_ROOT=<control_worktree_path> when running from a feature worktree.", 2);
+  Set MSTAR_CONTROL_ROOT=<control_worktree_path> when running from a feature worktree.`, 2);
   }
   const cwd = opts.cwd ?? process.cwd();
   const controlRoot = opts.controlRoot ?? (process.env.MSTAR_CONTROL_ROOT || undefined);
@@ -2711,35 +2711,35 @@ function sddWorkspace(planId, opts = {}) {
   }
   if (!controlRoot && isLinkedWorktree(root)) {
     throw new SddScriptError(`mstar sdd workspace: linked worktree at ${root} has no {HARNESS_DIR}/status.json (default gitignore).
-` + `  Refusing to create a second SDD tree under the feature checkout.
-` + `  Re-run with MSTAR_CONTROL_ROOT=<control_worktree_path> or: mstar sdd workspace ${planId} <control_worktree_path>
+  Refusing to create a second SDD tree under the feature checkout.
+  Re-run with MSTAR_CONTROL_ROOT=<control_worktree_path> or: mstar sdd workspace ${planId} <control_worktree_path>
 ` + `  See mstar-branch-worktree «Harness path SSOT under default gitignore».`, 1);
   }
   const harnessOverride = opts.harnessDir ?? (process.env.MSTAR_HARNESS_DIR || undefined);
   let harnessDir;
   if (harnessOverride) {
-    harnessDir = resolve8(root, harnessOverride);
+    harnessDir = resolve9(root, harnessOverride);
   } else {
     const rc = findMstarc(root, root);
     const rcHarnessDir = rc !== null ? parseMstarc(readFileSync7(rc, "utf8")).harnessDir : undefined;
     if (rcHarnessDir) {
-      harnessDir = resolve8(rc !== null ? dirname6(rc) : root, rcHarnessDir);
+      harnessDir = resolve9(rc !== null ? dirname6(rc) : root, rcHarnessDir);
     } else {
       const probed = probeHarnessWithStatus(root);
       if (probed) {
         harnessDir = probed;
-      } else if (isDirectory2(join9(root, ".mstar"))) {
-        harnessDir = join9(root, ".mstar");
-      } else if (isDirectory2(join9(root, ".agents"))) {
-        harnessDir = join9(root, ".agents");
+      } else if (isDirectory2(join10(root, ".mstar"))) {
+        harnessDir = join10(root, ".mstar");
+      } else if (isDirectory2(join10(root, ".agents"))) {
+        harnessDir = join10(root, ".agents");
       } else {
-        harnessDir = join9(root, ".mstar");
+        harnessDir = join10(root, ".mstar");
       }
     }
   }
   const sddDir = resolveSddDir(harnessDir, planId);
   mkdirSync6(sddDir, { recursive: true });
-  writeFileSync4(join9(sddDir, ".gitignore"), `*
+  writeFileSync4(join10(sddDir, ".gitignore"), `*
 `);
   return realpathSync3(sddDir);
 }
@@ -2762,7 +2762,7 @@ function taskBrief(planFile, taskN, outFile, opts = {}) {
       throw new SddScriptError("mstar sdd task-brief: set SDD_DIR or pass OUTFILE (run mstar sdd workspace PLAN_ID first)", 2);
     }
     mkdirSync6(sddDir, { recursive: true });
-    out = join9(sddDir, `task-${taskN}-brief.md`);
+    out = join10(sddDir, `task-${taskN}-brief.md`);
   }
   const records = content.endsWith(`
 `) ? content.split(`
@@ -3503,7 +3503,7 @@ function referenceExists(repoRoot, docText) {
     if (ref === "" || seen.has(ref))
       continue;
     seen.add(ref);
-    if (SCHEME_RE.test(ref) || ref.startsWith("{") || ref.startsWith("#") || ref.includes("*") || ref.includes("?") || ref.startsWith("~") || isAbsolute7(ref)) {
+    if (SCHEME_RE.test(ref) || ref.startsWith("{") || ref.startsWith("#") || ref.includes("*") || ref.includes("?") || ref.startsWith("~") || isAbsolute8(ref)) {
       continue;
     }
     if (ref.includes("/") || REF_EXT_RE.test(ref)) {
@@ -3522,7 +3522,7 @@ function referenceExists(repoRoot, docText) {
       const dir = stack.pop();
       let entries;
       try {
-        entries = readdirSync8(dir, { withFileTypes: true });
+        entries = readdirSync9(dir, { withFileTypes: true });
       } catch {
         continue;
       }
@@ -3531,7 +3531,7 @@ function referenceExists(repoRoot, docText) {
           break;
         if (entry.isDirectory()) {
           if (!WALK_SKIP_DIRS.has(entry.name))
-            stack.push(join12(dir, entry.name));
+            stack.push(join13(dir, entry.name));
         } else if (!entry.isSymbolicLink()) {
           const base = entry.name.replace(/\.(?:ts|tsx|js|jsx|mjs|cjs)$/, "");
           if (moduleNames.has(base))
@@ -3543,7 +3543,7 @@ function referenceExists(repoRoot, docText) {
   for (const { ref, isSymbol, module } of refs) {
     if (!isSymbol || module === undefined) {
       const candidate = ref.replace(LINE_SUFFIX_RE, "").replace(ANCHOR_RE, "");
-      if (existsSync8(resolve11(repoRoot, candidate))) {
+      if (existsSync9(resolve12(repoRoot, candidate))) {
         checked++;
       } else {
         violations.push(violation10("medium", "compound.reference.missing-file", `referenced path \`${ref}\` does not exist under ${repoRoot} (compound-refresh Phase 2: referenced code still exists?)`, "update the doc to reference an existing path, or delete the stale reference"));
@@ -3563,14 +3563,14 @@ function collectKnowledgeDocs(dir) {
     const current = stack.pop();
     let entries;
     try {
-      entries = readdirSync8(current, { withFileTypes: true });
+      entries = readdirSync9(current, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (entry.isSymbolicLink())
         continue;
-      const full = join12(current, entry.name);
+      const full = join13(current, entry.name);
       if (entry.isDirectory()) {
         stack.push(full);
       } else if (entry.name.endsWith(".md") && entry.name !== "README.md" && entry.name !== "index.md") {
@@ -3590,8 +3590,8 @@ function normalizeIndexRef(cell) {
 }
 function assertIndexRows(knowledgeDir) {
   const violations = [];
-  const readmePath = join12(knowledgeDir, "README.md");
-  if (!existsSync8(readmePath)) {
+  const readmePath = join13(knowledgeDir, "README.md");
+  if (!existsSync9(readmePath)) {
     violations.push(violation10("medium", "compound.index.missing-readme", `missing ${readmePath} — the knowledge index is required (mstar-compound Phase 6: every doc gets a README.md row)`, "create knowledge/README.md with a Document / Source Plan / Description / Status table"));
     return { ok: false, violations };
   }
@@ -3615,12 +3615,12 @@ function assertIndexRows(knowledgeDir) {
   return { ok: violations.length === 0, violations };
 }
 function isFileLikeRoot(root) {
-  return /^[^.]*\.[A-Za-z0-9]{1,10}$/.test(basename5(root));
+  return /^[^.]*\.[A-Za-z0-9]{1,10}$/.test(basename6(root));
 }
 function scopeGuard(path, allowedRoots) {
-  const resolved = resolve11(path);
+  const resolved = resolve12(path);
   for (const root of allowedRoots) {
-    const r = resolve11(root);
+    const r = resolve12(root);
     if (isFileLikeRoot(r)) {
       if (resolved === r)
         return { ok: true, violations: [] };
@@ -3778,8 +3778,8 @@ function validateRoleMapping(rolesDir, options = {}) {
   const violations = [];
   const referenceById = new Map(mapping.map((m) => [m.agentId, m.reference]));
   for (const { agentId, reference } of mapping) {
-    if (!existsSync9(join13(rolesDir, reference))) {
-      violations.push(violation12("medium", "roles.mapping.reference.missing", `role "${agentId}" maps to ${reference} which does not exist under ${rolesDir} (mstar-roles § Role Reference Mapping)`, `create ${join13(rolesDir, reference)} or fix the mapping row`));
+    if (!existsSync10(join14(rolesDir, reference))) {
+      violations.push(violation12("medium", "roles.mapping.reference.missing", `role "${agentId}" maps to ${reference} which does not exist under ${rolesDir} (mstar-roles § Role Reference Mapping)`, `create ${join14(rolesDir, reference)} or fix the mapping row`));
     }
   }
   for (const { family, memberIds } of families) {
@@ -3992,8 +3992,8 @@ class DshMstar extends Service {
 
 // src/gates/_shared.ts
 var import_schemastery = __toESM(require_lib2(), 1);
-import { existsSync as existsSync4 } from "node:fs";
-import { resolve as resolve5 } from "node:path";
+import { existsSync as existsSync3 } from "node:fs";
+import { resolve as resolve4 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var STATUS_FILE = "status.json";
 var PERSONA_INTERPOLATION_HAZARD = /\{\{[\s\S]*\}\}/;
@@ -4047,7 +4047,7 @@ function resolvePackagedSkillsDir(fileUrl) {
   for (const rel of ["../harness-skills", "../../harness-skills"]) {
     try {
       const dir = fileURLToPath2(new URL(rel, fileUrl));
-      if (existsSync4(dir))
+      if (existsSync3(dir))
         return dir;
     } catch {}
   }
@@ -4066,7 +4066,7 @@ function resolvePackagedAgentsDir(fileUrl) {
   for (const rel of ["../harness-agents", "../../harness-agents"]) {
     try {
       const dir = fileURLToPath2(new URL(rel, fileUrl));
-      if (existsSync4(dir))
+      if (existsSync3(dir))
         return dir;
     } catch {}
   }
@@ -4086,14 +4086,14 @@ class HarnessResolver {
   explicit;
   cache = new Map;
   constructor(explicit) {
-    this.explicit = explicit !== undefined && explicit.trim() !== "" ? resolve5(process.cwd(), explicit) : null;
+    this.explicit = explicit !== undefined && explicit.trim() !== "" ? resolve4(process.cwd(), explicit) : null;
   }
   forWorkspace(cwd) {
     if (this.explicit !== null)
       return this.explicit;
     if (cwd === undefined || cwd.trim() === "")
       return null;
-    const abs = resolve5(cwd);
+    const abs = resolve4(cwd);
     const hit = this.cache.get(abs);
     if (hit !== undefined)
       return hit;
@@ -4134,20 +4134,20 @@ function skillLocalConfig(config) {
 }
 
 // src/gates/catalog.ts
-import { existsSync as existsSync13, readFileSync as readFileSync8, readdirSync as readdirSync6 } from "node:fs";
-import { join as join10 } from "node:path";
+import { existsSync as existsSync13, readFileSync as readFileSync8, readdirSync as readdirSync4 } from "node:fs";
+import { join as join8 } from "node:path";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
 
 // src/gates/agent-flow.ts
-import { appendFileSync, closeSync, existsSync as existsSync12, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync5, readSync, renameSync as renameSync2, rmdirSync, statSync as statSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join7 } from "node:path";
+import { appendFileSync, closeSync, existsSync as existsSync11, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync5, readSync, renameSync as renameSync2, rmdirSync, statSync as statSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join6 } from "node:path";
 
 // src/gates/dispatch.ts
-import { existsSync as existsSync10 } from "node:fs";
-import { basename as basename4, join as join5, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync8 } from "node:fs";
+import { basename as basename2, join as join5, resolve as resolve6 } from "node:path";
 
 // src/gates/workflow-selection.ts
-import { existsSync as existsSync7, readdirSync as readdirSync3, statSync as statSync2 } from "node:fs";
+import { existsSync as existsSync5, readdirSync as readdirSync2, statSync as statSync2 } from "node:fs";
 import { dirname as dirname7, join as join3, relative as relative3 } from "node:path";
 var TERMINAL_STATUS_CACHE_MAX = 64;
 var terminalStatusCache = new Map;
@@ -4182,7 +4182,7 @@ function terminalStatusOf(snapshotPath) {
 }
 function resolveActiveWorkflow(harnessDir) {
   const statusPath = join3(harnessDir, STATUS_FILE);
-  if (!existsSync7(statusPath)) {
+  if (!existsSync5(statusPath)) {
     return {
       kind: "error",
       code: "status.missing",
@@ -4240,7 +4240,7 @@ function resolveReadWorkflow(harnessDir) {
   if (active.kind === "error" && active.code !== "workflow.selection.no-active")
     return active;
   const workflowsDir = resolveWorkflowDir(harnessDir, { harnessDir });
-  if (!existsSync7(workflowsDir)) {
+  if (!existsSync5(workflowsDir)) {
     return {
       kind: "error",
       code: "workflow.selection.no-snapshot",
@@ -4249,7 +4249,7 @@ function resolveReadWorkflow(harnessDir) {
   }
   let entries;
   try {
-    entries = readdirSync3(workflowsDir, { withFileTypes: true });
+    entries = readdirSync2(workflowsDir, { withFileTypes: true });
   } catch {
     return {
       kind: "error",
@@ -4262,7 +4262,7 @@ function resolveReadWorkflow(harnessDir) {
     if (!entry.isDirectory())
       continue;
     const snapshotPath = join3(workflowsDir, entry.name, WORKFLOW_SNAPSHOT_FILE);
-    if (!existsSync7(snapshotPath)) {
+    if (!existsSync5(snapshotPath)) {
       terminalStatusCache.delete(snapshotPath);
       continue;
     }
@@ -4274,7 +4274,7 @@ function resolveReadWorkflow(harnessDir) {
     }
   }
   for (const cachedPath of terminalStatusCache.keys()) {
-    if (!existsSync7(join3(dirname7(cachedPath), WORKFLOW_SNAPSHOT_FILE))) {
+    if (!existsSync5(join3(dirname7(cachedPath), WORKFLOW_SNAPSHOT_FILE))) {
       terminalStatusCache.delete(cachedPath);
     }
   }
@@ -4437,12 +4437,12 @@ function isNaValue(value) {
 function planIdOf(headerRegion) {
   const planPath = assignmentHeaderValue(headerRegion, "Plan Path");
   if (!isNaValue(planPath)) {
-    const id = basename4(firstToken(planPath) ?? "");
+    const id = basename2(firstToken(planPath) ?? "");
     return id.endsWith(".md") ? id.slice(0, -3) : id;
   }
   const sddDir = assignmentHeaderValue(headerRegion, "SDD dir");
   if (!isNaValue(sddDir)) {
-    const id = basename4(firstToken(sddDir) ?? "");
+    const id = basename2(firstToken(sddDir) ?? "");
     return id === "" ? undefined : id;
   }
   const planId = assignmentHeaderValue(headerRegion, "plan_id");
@@ -4472,7 +4472,7 @@ function leaseGateViolations(harnessDir, exec, writable, prompt) {
     return [leaseViolation("lease.dispatch.unverifiable", `${join5(harnessDir, STATUS_FILE)}: ${selection.kind === "error" ? selection.message : "no active workflow"} — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "create a valid v2 status.json registering an active workflow (first implement dispatch requires a plan row + lease)")];
   }
   const snapshotPath = join5(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
-  if (!existsSync10(snapshotPath)) {
+  if (!existsSync8(snapshotPath)) {
     if (!sdd)
       return [];
     return [leaseViolation("lease.dispatch.unverifiable", `${snapshotPath} is missing — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "create a valid workflow snapshot registering the plan row (first implement dispatch requires a plan row)")];
@@ -4505,7 +4505,7 @@ function leaseGateViolations(harnessDir, exec, writable, prompt) {
     const wt = worktree === undefined ? undefined : firstToken(worktree);
     if (isNaValue(wt)) {
       violations.push(leaseViolation("lease.dispatch.worktree-mismatch", "Assignment declares no Worktree path — cannot confirm this dispatch matches execution_lease.worktree_path", "add the absolute Worktree path to the Assignment (must equal the lease worktree_path)"));
-    } else if (resolve9(wt) !== resolve9(String(lease.worktree_path ?? ""))) {
+    } else if (resolve6(wt) !== resolve6(String(lease.worktree_path ?? ""))) {
       violations.push(leaseViolation("lease.dispatch.worktree-mismatch", `Assignment Worktree path "${wt}" differs from execution_lease.worktree_path "${String(lease.worktree_path)}"`, "align the Assignment with the lease worktree path (or update the lease)"));
     }
     const forms = parseAssignmentBranchForms(header);
@@ -4546,7 +4546,7 @@ function worktreeL2Violations(header) {
   return violations;
 }
 function activeSnapshotRows(harnessDir) {
-  if (!existsSync10(join5(harnessDir, STATUS_FILE)))
+  if (!existsSync8(join5(harnessDir, STATUS_FILE)))
     return { rows: null, controlWorktreePath: undefined, unreadable: false };
   const selection = resolveActiveWorkflow(harnessDir);
   if (selection.kind !== "active") {
@@ -4557,7 +4557,7 @@ function activeSnapshotRows(harnessDir) {
     };
   }
   const snapshotPath = join5(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
-  if (!existsSync10(snapshotPath))
+  if (!existsSync8(snapshotPath))
     return { rows: null, controlWorktreePath: undefined, unreadable: true };
   let doc;
   try {
@@ -4837,7 +4837,7 @@ function callPairingKey(exec) {
 function resolveAgentFlowWriteDir(harnessDir) {
   const selection = resolveActiveWorkflow(harnessDir);
   if (selection.kind === "active")
-    return join7(harnessDir, selection.dir);
+    return join6(harnessDir, selection.dir);
   const message = selection.kind === "error" ? selection.message : "no active lifecycle (unexpected terminal selection — the active-set resolver has no history view)";
   if (!noActiveWarned) {
     noActiveWarned = true;
@@ -4854,7 +4854,7 @@ function sleepSync(ms) {
   Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 }
 function withWorkflowDirLock(workflowDir, fn, opts = {}) {
-  const lockDir = join7(workflowDir, WORKFLOW_LEDGER_LOCKDIR);
+  const lockDir = join6(workflowDir, WORKFLOW_LEDGER_LOCKDIR);
   if (heldWorkflowLocks.has(lockDir)) {
     throw new Error(`${lockDir} is already held by this process — withWorkflowDirLock is not reentrant; a nested acquisition on the same workflow dir is a bug`);
   }
@@ -4880,7 +4880,7 @@ function withWorkflowDirLock(workflowDir, fn, opts = {}) {
   heldWorkflowLocks.add(lockDir);
   try {
     try {
-      writeFileSync2(join7(lockDir, WORKFLOW_LOCKER_HOLDER_PID), String(process.pid), "utf8");
+      writeFileSync2(join6(lockDir, WORKFLOW_LOCKER_HOLDER_PID), String(process.pid), "utf8");
     } catch {}
     return fn();
   } finally {
@@ -4889,7 +4889,7 @@ function withWorkflowDirLock(workflowDir, fn, opts = {}) {
       const current = statSync5(lockDir);
       if (acquired !== null && current.dev === acquired.dev && current.ino === acquired.ino) {
         try {
-          unlinkSync2(join7(lockDir, WORKFLOW_LOCKER_HOLDER_PID));
+          unlinkSync2(join6(lockDir, WORKFLOW_LOCKER_HOLDER_PID));
         } catch {}
         rmdirSync(lockDir);
       }
@@ -4897,7 +4897,7 @@ function withWorkflowDirLock(workflowDir, fn, opts = {}) {
   }
 }
 function appendEvent(workflowDir, event) {
-  const file = join7(workflowDir, AGENT_FLOW_FILE);
+  const file = join6(workflowDir, AGENT_FLOW_FILE);
   withWorkflowDirLock(workflowDir, () => {
     appendFileSync(file, `${JSON.stringify(event)}
 `);
@@ -5286,8 +5286,8 @@ function ledgerContent(file, n) {
   }
 }
 function readAgentFlow(workflowDir, limit) {
-  const file = join7(workflowDir, AGENT_FLOW_FILE);
-  if (!existsSync12(file)) {
+  const file = join6(workflowDir, AGENT_FLOW_FILE);
+  if (!existsSync11(file)) {
     return { events: [], summary: [] };
   }
   const n = limit === undefined ? AGENT_FLOW_DEFAULT_LIMIT : Math.max(0, Math.floor(limit));
@@ -5541,7 +5541,7 @@ function hhmm(ts) {
 function harnessStateSource(harnessDir) {
   if (harnessDir === null)
     return null;
-  const statusPath = join10(harnessDir, STATUS_FILE);
+  const statusPath = join8(harnessDir, STATUS_FILE);
   if (!existsSync13(statusPath))
     return null;
   try {
@@ -5561,7 +5561,7 @@ function harnessStateSource(harnessDir) {
     if (selection.kind === "error") {
       return selectionErrorState(selection, rollup, harnessDir, compass);
     }
-    const snapshotPath = join10(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
+    const snapshotPath = join8(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
     let snapshot;
     if (!existsSync13(snapshotPath)) {
       return selectionErrorState({
@@ -5625,7 +5625,7 @@ function harnessStateSource(harnessDir) {
       leases,
       knowledge: knowledgeDigest(harnessDir),
       direction: compass !== undefined ? compassDirection(compass.compassPath) : null,
-      agentFlow: readAgentFlow(join10(harnessDir, selection.dir), 50)
+      agentFlow: readAgentFlow(join8(harnessDir, selection.dir), 50)
     };
   } catch {
     return null;
@@ -5658,14 +5658,14 @@ function projectRollupSource(harnessDir, residuals) {
   if (existsSync13(projectsDir)) {
     let entries;
     try {
-      entries = readdirSync6(projectsDir, { withFileTypes: true });
+      entries = readdirSync4(projectsDir, { withFileTypes: true });
     } catch {
       entries = [];
     }
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const roadmapPath = join10(projectsDir, entry.name, PROJECT_ROADMAP_FILE);
+      const roadmapPath = join8(projectsDir, entry.name, PROJECT_ROADMAP_FILE);
       if (!existsSync13(roadmapPath))
         continue;
       try {
@@ -5735,7 +5735,7 @@ function projectRegisters(harnessDir) {
     return [];
   let entries;
   try {
-    entries = readdirSync6(projectsDir, { withFileTypes: true });
+    entries = readdirSync4(projectsDir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -5743,7 +5743,7 @@ function projectRegisters(harnessDir) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const registerPath = join10(projectsDir, entry.name, PROJECT_REGISTER_FILE);
+    const registerPath = join8(projectsDir, entry.name, PROJECT_REGISTER_FILE);
     if (!existsSync13(registerPath))
       continue;
     try {
@@ -5755,7 +5755,7 @@ function projectRegisters(harnessDir) {
   return registers;
 }
 function knowledgeDigest(harnessDir) {
-  const indexPath = join10(harnessDir, "knowledge", "README.md");
+  const indexPath = join8(harnessDir, "knowledge", "README.md");
   if (!existsSync13(indexPath))
     return null;
   try {
@@ -5805,14 +5805,14 @@ function steeringCompassPath(harnessDir) {
     return;
   let entries;
   try {
-    entries = readdirSync6(iterationsDir, { withFileTypes: true });
+    entries = readdirSync4(iterationsDir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const compassPath = join10(iterationsDir, entry.name, "delivery-compass.md");
+    const compassPath = join8(iterationsDir, entry.name, "delivery-compass.md");
     if (!existsSync13(compassPath))
       continue;
     let content;
@@ -5831,7 +5831,7 @@ function steeringCompassPath(harnessDir) {
 function iterationGateSource(harnessDir) {
   if (harnessDir === null)
     return;
-  const statusPath = join10(harnessDir, STATUS_FILE);
+  const statusPath = join8(harnessDir, STATUS_FILE);
   if (!existsSync13(statusPath))
     return;
   const compass = steeringCompassPath(harnessDir);
@@ -5840,7 +5840,7 @@ function iterationGateSource(harnessDir) {
   const selection = resolveReadWorkflow(harnessDir);
   if (selection.kind === "error")
     return;
-  const snapshotPath = join10(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
+  const snapshotPath = join8(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
   try {
     const snapshotDoc = readJson(snapshotPath);
     const compassDoc = parseCompassFrontmatter(compass.compassPath);
@@ -5894,12 +5894,12 @@ function agentDigestKey(agent, cwd) {
 }
 
 // src/gates/status.ts
-import { existsSync as existsSync14, readdirSync as readdirSync9 } from "node:fs";
-import { basename as basename6, join as join14, relative as relative5, resolve as resolve12 } from "node:path";
+import { existsSync as existsSync14, readdirSync as readdirSync7 } from "node:fs";
+import { basename as basename5, join as join11, relative as relative5, resolve as resolve10 } from "node:path";
 var LOGGER_NAME = "mstar/status-gate";
 function harnessDocKindOfTarget(harnessDir, targetPath) {
-  const resolved = resolve12(targetPath);
-  const name = basename6(resolved);
+  const resolved = resolve10(targetPath);
+  const name = basename5(resolved);
   if (name !== STATUS_FILE && name !== WORKFLOW_SNAPSHOT_FILE && name !== PROJECT_REGISTER_FILE)
     return null;
   const rel = relative5(harnessDir, resolved);
@@ -5911,8 +5911,8 @@ function harnessDocKindOfTarget(harnessDir, targetPath) {
     workflowDir = resolveWorkflowDir(harnessDir, { harnessDir });
     projectDir = resolveProjectDir(harnessDir, { harnessDir });
   } catch {
-    workflowDir = join14(harnessDir, "workflows");
-    projectDir = join14(harnessDir, "projects");
+    workflowDir = join11(harnessDir, "workflows");
+    projectDir = join11(harnessDir, "projects");
   }
   if (name === WORKFLOW_SNAPSHOT_FILE && /^[^/]+\/snapshot\.json$/.test(relative5(workflowDir, resolved)))
     return "snapshot";
@@ -5968,7 +5968,7 @@ function projectRegisterDocs(harnessDir) {
   const projectsDir = resolveProjectDir(harnessDir, { harnessDir });
   let entries;
   try {
-    entries = readdirSync9(projectsDir, { withFileTypes: true });
+    entries = readdirSync7(projectsDir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -5976,7 +5976,7 @@ function projectRegisterDocs(harnessDir) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const registerPath = join14(projectsDir, entry.name, PROJECT_REGISTER_FILE);
+    const registerPath = join11(projectsDir, entry.name, PROJECT_REGISTER_FILE);
     if (!existsSync14(registerPath))
       continue;
     try {
@@ -6051,7 +6051,7 @@ async function editIntentListener(ctx, resolver, config, adapter, target, actor,
 
 // src/gates/skill-lint.ts
 import { existsSync as existsSync15, readFileSync as readFileSync11 } from "node:fs";
-import { basename as basename7, dirname as dirname9, resolve as resolve14, sep as sep2 } from "node:path";
+import { basename as basename7, dirname as dirname9, resolve as resolve13, sep as sep2 } from "node:path";
 var SKILL_LINT_LOGGER = "mstar/skill-lint";
 
 class SkillLintVetoError extends Error {
@@ -6114,8 +6114,8 @@ function skillRootsOf(config) {
 function isSkillTarget(roots, target) {
   if (basename7(target.displayPath) !== "SKILL.md")
     return false;
-  const resolvedPath = resolve14(target.displayPath);
-  return roots.some((root) => resolvedPath.startsWith(resolve14(root) + sep2));
+  const resolvedPath = resolve13(target.displayPath);
+  return roots.some((root) => resolvedPath.startsWith(resolve13(root) + sep2));
 }
 function skillNameOf(target) {
   return basename7(dirname9(target.displayPath));
@@ -6130,7 +6130,7 @@ function gateSkillIntent(ctx, harnessDir, config, target) {
       return;
     if (!isSkillTarget(roots, target))
       return;
-    const skillPath = resolve14(target.displayPath);
+    const skillPath = resolve13(target.displayPath);
     if (!existsSync15(skillPath))
       return;
     let doc;
@@ -6182,8 +6182,8 @@ async function skillWriteIntentListener(ctx, resolver, config, target, actor, ne
 }
 
 // src/gates/seams.ts
-import { existsSync as existsSync16, readFileSync as readFileSync13, readdirSync as readdirSync11 } from "node:fs";
-import { basename as basename8, dirname as dirname10, join as join16, resolve as resolve15, sep as sep3 } from "node:path";
+import { existsSync as existsSync16, readFileSync as readFileSync13, readdirSync as readdirSync10 } from "node:fs";
+import { basename as basename8, dirname as dirname10, join as join15, resolve as resolve15, sep as sep3 } from "node:path";
 
 // ../engine/dist/audit.js
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
@@ -6416,7 +6416,7 @@ function rolesDirOf(path) {
   const idx = segments.indexOf("mstar-roles");
   if (idx === -1)
     return dirname10(path);
-  return idx === 0 ? sep3 : join16(sep3, ...segments.slice(1, idx + 1));
+  return idx === 0 ? sep3 : join15(sep3, ...segments.slice(1, idx + 1));
 }
 function isSeamTarget(seam, harnessDir, target) {
   const path = resolve15(target.displayPath);
@@ -6430,7 +6430,7 @@ function isSeamTarget(seam, harnessDir, target) {
     case "compound": {
       if (harnessDir === null)
         return false;
-      return path.startsWith(resolve15(join16(harnessDir, "knowledge")) + sep3) && isMarkdownDoc(path);
+      return path.startsWith(resolve15(join15(harnessDir, "knowledge")) + sep3) && isMarkdownDoc(path);
     }
     case "roles":
       return isRolesTarget(path);
@@ -6448,7 +6448,7 @@ function auditSecretsViolations(findings, file) {
 function validateDesignDoc(doc, path) {
   const violations = [...validateDesignTokenFrontmatter(doc).violations];
   const isDark = basename8(path) === "DESIGN.dark.md";
-  const sibling = join16(dirname10(path), isDark ? "DESIGN.md" : "DESIGN.dark.md");
+  const sibling = join15(dirname10(path), isDark ? "DESIGN.md" : "DESIGN.dark.md");
   if (existsSync16(sibling)) {
     const light = isDark ? readFileSync13(sibling, "utf8") : doc;
     const dark = isDark ? doc : readFileSync13(sibling, "utf8");
@@ -6472,10 +6472,10 @@ function validateCompoundDoc(doc, _path, harnessDir) {
 function validateRolesState(rolesDir, skillsRoot = dirname10(rolesDir)) {
   const violations = [...validateRoleMapping(rolesDir).violations];
   const skillTexts = {};
-  for (const entry of readdirSync11(skillsRoot, { withFileTypes: true })) {
+  for (const entry of readdirSync10(skillsRoot, { withFileTypes: true })) {
     if (!entry.isDirectory() || !entry.name.startsWith("mstar-"))
       continue;
-    const skillFile = join16(skillsRoot, entry.name, "SKILL.md");
+    const skillFile = join15(skillsRoot, entry.name, "SKILL.md");
     if (!existsSync16(skillFile))
       continue;
     try {

package/harness-commands/amazing-pr-review.md

@@ -52,3 +52,5 @@ Execute **`mstar-audit`** § `pr` variant end to end（SKILL.md common core：re
 Review findings that need fixing can be turned into self-contained plans for the normal Prepare → Execute flow (reusing `mstar-audit` SKILL.md **`## Plan output (all variants)`** — same contract as the `pr` variant).
 
 Output verdict + findings to the user, with the posted GitHub Review URL. Posting procedure (when a PR number exists) → **`references/pr-review.md`** § Comment posting; the main agent saves the Stage 3 report and writes/consolidates the evidence files — every seat returns evidence / findings in its **result payload** (any seat may be write-blocked); writable seats may **best-effort** write files in addition → **`references/pr-review.md`** § Local report archive. Never auto-approve or merge.
+
+**Stage 3 envelope (mandatory):** after the tally, the main agent **must** fold the accepted findings into a `mstar.review/v1` envelope (`synthesizeReview` — or the equivalent engine call) and persist it via `mstar-harness persist review --key <plan-or-pr-id> --stdin` (or `getArtifactStore().put`). The Markdown archive is an optional human copy — **not** a substitute for the envelope. Procedure → **`references/pr-review.md`** § Review pipeline (Stage 3).

package/harness-skills/mstar-audit/references/pr-review.md

@@ -8,9 +8,11 @@ Deep PR review is a **three-stage pipeline**: collect → domain review → synt
 
 - **Stage 1 — Collect**: PM fans out lightweight read-only agents by **domain** — business domain / change surface / tech stack; use the host's lightest read-only agent (`scout` / `explorer` / `general` — whatever the host offers). Each collect seat reads the changed files in its domain plus related context and returns **evidence in its result payload** (any seat may be **write-blocked** — read-only sandbox / EPERM; the main agent extracts the payload and writes the evidence file — § Local report archive / `references/pr-review-seat-evidence.md`): `file:line` observations, potential issue surfaces, and security-surface observations (the seat carries a security lens per `security-review.md` §2/§3 **research** discipline — trace origin, never invent an attacker, never record secret values — and still records MEDIUM / unverified items as **leads** in its evidence payload; the HIGH-only filter applies to formal findings, not leads). Collect seats produce **no** findings table, compute **no** verdict, and publish **nothing**.
 - **Stage 2 — Domain review**: mstar built-in roles (`code-reviewer` / `fullstack-dev` / `frontend-dev`) split along the same domain framing, each reviewing code + security in its domain (security via the `security-review.md` lens) and producing findings with **Merge class** (§ Merge class). Each domain seat returns its findings in the **result payload** — any seat may be **write-blocked**; the main agent writes the Stage 2 evidence file (§ Local report archive / `references/pr-review-seat-evidence.md`). A large PR (>~300 changed lines, or spanning multiple change surfaces/domains) or a security-sensitive surface (auth, LLM, supply chain, data — `security-review.md` §9 extended surfaces) adds an **independent cross-domain security seat**.
-- **Stage 3 — Synthesis (main agent)**: the main agent (the command's orchestrator) collects all domain findings + evidence files → **dedupe** → **three-way vet** (open each cited file yourself; `file:line` must genuinely support the claim) → **tally** (§ Tally and derived score — formula unchanged) → **verdict** → report + **publish GitHub Review** (§ Comment posting — publishing authority belongs to the main agent). The main agent does not backfill uncollected / unreviewed domains — a missing domain is declared in the report under `- unverified:` / `- notes:`.
+- **Stage 3 — Synthesis (main agent)**: the main agent (the command's orchestrator) collects all domain findings + evidence files → **dedupe** → **three-way vet** (open each cited file yourself; `file:line` must genuinely support the claim) → **tally** (§ Tally and derived score — formula unchanged) → **verdict** → report + **publish GitHub Review** (§ Comment posting — publishing authority belongs to the main agent). The main agent does not backfill uncollected / unreviewed domains — a missing domain is declared in the report under `- unverified:` / `- notes:`. **The envelope is mandatory**: after the tally, the main agent **must** fold the accepted findings into a `mstar.review/v1` envelope (`synthesizeReview` — or the equivalent engine call) and persist it via `mstar-harness persist review --key <plan-or-pr-id> --stdin` (or `getArtifactStore().put`); the Markdown archive is an optional human copy, **not** a substitute for the envelope.
 - A domain whose seat returned **no evidence** (crashed / Blocked / empty output) is an **uncollected domain**, declared the same way under `- unverified:` / `- notes:`.
 
+> **Engine check (when available):** run `mstar-harness persist review --key <plan-or-pr-id> --stdin` (or `import { synthesizeReview, validateMstarReviewV1 } from "@mstar-harness/engine"` in a host hook) to fold the accepted findings into the `mstar.review/v1` envelope and persist it — `synthesizeReview` derives verdict/tally from `computePrTally` (pure, no I/O), and `kind: review` runs `validateMstarReviewV1` before put, refusing invalid envelopes (exit 1, nothing written). On `fail` -> do not proceed; fix and re-run. Skill text below remains authoritative when the runtime is absent.
+
 **Scale-driven fan-out** (reuses the existing sizing bands — no new thresholds): Stage 1 collect seats scale with PR size; the extra security seat stays in Stage 2:
 
 | Size | Stage 1 collect seats | Extra Stage 2 |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mstar-harness/dsh",
-  "version": "3.4.1",
+  "version": "3.5.0",
   "description": "Morning Star harness dsh (DeepSeek Harness) cordis function plugin — in-process engine gates (status/dispatch/lease) with hard refusal channels.",
   "keywords": [
     "dsh",