@mstar-harness/dsh 3.7.0 → 3.7.2

package/harness-skills/mstar-harness-core/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: mstar-harness-core
-description: Morning Star (启明星) harness **生命周期 / 授权语义权威与全局入口** —— 信息源优先级、最小交付循环、状态机与 Done 权限、Task category 路由（含 quick 禁豁免）、@explore 边界、长任务纪律、核心研发守则、护栏不变量、Morning Star Skill 索引与宿主入口。加载**选择**权威在 **`mstar-roles`**（hub § Load Order 按 Assignment `Skill presets:` 决策；本 skill 不另设全局必读表）：PM 与标准路线仍以本 skill 为全局入口；独立直接调用专题时本 skill 是首个依赖；explicit `none` 角色路线以身份 + 角色自有方法自洽（唯一 hub bootstrap 例外）。`@project-manager` 开轮必读 + `mstar-dispatch-gates` / `mstar-phase-gates` / `mstar-conventions` 等；实现/审查/QA 按其角色 preset 清单加载。Prepare/派发/Git/residual/QC 细则在专题 skill，不在此重复。
+description: Morning Star (启明星) harness **生命周期 / 授权语义权威与全局入口** —— 信息源优先级、最小交付循环、状态机与 Done 权限、Task category 路由（含 quick 禁豁免）、@explore 边界、长任务纪律、核心研发守则、护栏不变量、Morning Star Skill 索引与宿主入口。加载**选择**权威在 **`mstar-roles`**（hub § Load Order 按 Assignment `Skill presets:` 决策；本 skill 不另设全局必读表）：PM 与标准路线仍以本 skill 为全局入口；独立直接调用专题时本 skill 是首个依赖；explicit `none` 角色路线以身份 + 角色自有方法自洽（唯一 hub bootstrap 例外）。`@project-manager` 开轮必读 + `mstar-dispatch-gates` / `mstar-phase-gates` / `mstar-conventions` 等；实现/审查/QA 按其角色 preset 清单加载。Prepare/派发/Git/residual/QC 细则在专题 skill，不在此重复。版本漂移（version drift）/ CLI 与插件版本不一致 / 提示更新插件或 CLI → 按「版本对齐」节处理（doctor 检查 + 定向更新提示）。
 ---
 
 # Morning Star Harness Core（启明星核心）
@@ -123,6 +123,13 @@ Read **`mstar-host`** after this skill; detect host per its table, then Read the
 | Kimi | `Agent`/`AgentSwarm`（仅 `coder`/`explore`/`plan`）；角色绑定在 prompt（C5b）；Plan 双写 → `references/kimi.md` · `kimi-plan-mode-bridge.md` |
 | 其它 | 同 `mstar-host` skill；按工具信号选 reference |
 
+## 版本对齐（CLI ↔ host 插件）
+
+- 全局 CLI 与已安装的宿主插件**独立升级**；版本漂移是已知故障源（skills/commands 与 CLI 预期不再匹配）。
+- 检查：`mstar-harness doctor --target <host>`（全部宿主已实现：opencode / cursor / codex / zcode / omp / dsh / kimi）。
+- **CLI 较新** → 提示用户更新宿主插件；**插件较新** → 提示用户更新全局 CLI（`npm i -g @mstar-harness/cli@latest`）。
+- 触发纪律：harness 行为异常/疑似过期、已知新版本发布后、或用户要求时运行——**不是**每个会话都跑。
+
 ## 核心研发守则
 
 全局工程不变量，适用于所有角色；实现级操作细节（The Ladder、surgical、debugging 等）→ **`mstar-coding-behavior`**。

package/harness-skills/mstar-host/references/omp.md

@@ -11,7 +11,7 @@ Parallel PM dispatch: read **`parallel-dispatch.md`** when dispatching **N ≥ 2
 - Plugin markers: **`.omp-plugin/plugin.json`** (Morning Star host marker) and **`.claude-plugin/plugin.json`** (Claude-compatible marketplace discovery). The **npm package** (`@mstar-harness/omp`) ships its own package-root `plugin.json` + `skills/` + `commands/` + `agents/` + `hooks/` + `tools/` mirrors; the **maintainer link path** is now `<repo>/packages/omp` (built) — hooks/tools moved into the package (2026-09-03), so linking the repo root provides skills/commands/agents only, with NO runtime gates.
 - Runtime skills: package `skills/` (or repo `skills/` on the link path) discovered after `omp plugin install` / `omp plugin link` (OMP extension-package sub-discovery) or Claude marketplace install.
 - Plugin commands: `commands/<name>.md` → slash **`/<name>`** (e.g. `/iteration-start`). omp uses the **filename** as the command name (no `morning-star-harness:` prefix).
-- Plugin agents: **`agents/*.md`** are discovered into the live **`task.agent`** list after install/link + reload. Morning Star **subagent** role ids (`product-manager`, `architect`, `fullstack-dev`, `qc-specialist`, …) are valid `agent` values **when listed** — see C5. `project-manager` is **`mode: primary`** (orchestration seat), not a typical `task` dispatch target.
+- Plugin agents: **`agents/*.md`** are discovered into the live **`task.agent`** list after install/link + reload. Morning Star **subagent** role ids (`product-manager`, `architect`, `fullstack-dev`, `qc-specialist`, …) are valid `agent` values **when listed** — see C5. `project-manager` ships **no agent shell here** — the `mode: primary` seat is OpenCode-only (`packages/opencode/agents/`); PM enters via the `pm` skill and is never a `task` dispatch target.
 - **No Kimi-style `sessionStart.skill`** — enter PM manually via **`/skill:pm`** (or the `pm` skill), then **Read next** → `mstar-harness-core` → `project-manager.md`.
 - Install (user-scoped, recommended):
   - `omp plugin install @mstar-harness/omp`
@@ -101,7 +101,7 @@ Single-task shorthand may exist depending on host version — always match the l
 
 ### Notes
 
-- `project-manager` is the **primary** orchestration agent (`agents/project-manager.md` `mode: primary`). Do not dispatch PM-to-PM via `task` unless the live schema explicitly lists it **and** the Assignment requires it.
+- PM is the **primary** orchestration seat via the `pm` skill (no PM agent shell is bundled here — the `mode: primary` shell is OpenCode-only, `packages/opencode/agents/`). Do not dispatch PM-to-PM via `task` unless the live schema explicitly lists it **and** the Assignment requires it.
 - Host generics (`scout`, `reviewer`, `designer`, …) remain useful for non-role orientation / assist — they do not replace a listed Morning Star role agent for role-owned deliverables.
 
 ### Role binding in prompt (C5b — required)

package/harness-skills/mstar-host/references/zcode.md

@@ -13,7 +13,7 @@ Parallel PM dispatch: read **`parallel-dispatch.md`** when dispatching **N ≥ 2
 - Plugin commands: repo `commands/` → `/morning-star-harness:<name>` (e.g. `/morning-star-harness:iteration-start`).
 - Plugin agents: repo `agents/*.md` (role frontmatter `name` + **single-line quoted English `description`** — ZCode's flat frontmatter parser cannot read `|-` block scalars and silently drops nested `tools`/`permission` maps). ZCode registers them as callable `subagent_type`s in both bare (`fullstack-dev`) and plugin-qualified (`morning-star-harness:fullstack-dev`) forms (see C5).
 - **No `sessionStart.skill`** (ZCode has no Kimi-style session auto-load) — enter PM manually via **`/morning-star-harness:pm`** or the **`pm`** skill, then **Read next** → `mstar-harness-core` → `project-manager.md`.
-- **Plugin hooks** (`hooks/hooks.json`, ZCode-only surface): **SessionStart** injects harness-workspace context ({HARNESS_DIR} + `status.json` summary) when a harness workspace is detected — a partial substitute for the missing session auto-load; **PreToolUse (Bash)** enforces the `mstar-branch-worktree` gates deterministically (no direct commit on the default protected branch → `MSTAR_ALLOW_DEFAULT_BRANCH_COMMIT=1` escape; no bare `git push --force` → use `--force-with-lease`; disable all with `MSTAR_BRANCH_GUARD=off`). Silent no-op outside git repos / harness workspaces. Skill text stays authoritative; these hooks only backstop it.
+- **Plugin hooks** (`hooks/hooks.json`, ZCode-only surface): **SessionStart** injects harness-workspace context ({HARNESS_DIR} + `status.json` summary) when a harness workspace is detected — a partial substitute for the missing session auto-load; **PreToolUse (Bash)** enforces the `mstar-branch-worktree` gates deterministically (no direct commit on the default protected branch → `MSTAR_ALLOW_DEFAULT_BRANCH_COMMIT=1` escape; no bare `git push --force` → use `--force-with-lease`; disable with `MSTAR_BRANCH_GUARD=off`); **PreToolUse (Write|Edit)** runs the engine-backed coordination-write gate (blocks writes to harness coordination documents under opt-in `.mstarc`/compass hard enforcement; disable with `MSTAR_WRITE_GATE=off`). Silent no-op outside git repos / harness workspaces. Skill text stays authoritative; these hooks only backstop it.
 - Install (user-scoped, recommended): `npx @mstar-harness/cli init --target zcode --scope global`, then in ZCode **Settings → Plugin Management → Discover** install **morning-star-harness** from the **mstar-local** marketplace. Direct-add also works without the CLI: the repo ships `.claude-plugin/marketplace.json` (root `marketplace.json` fallback), which ZCode discovers when refreshing a `github`-source marketplace.
 - Plugins are **user-scoped** (all projects); managed copy lives under `~/.zcode/cli/plugins/` after install.
 - Project `.agents/skills/` symlinks are **not** required when using the plugin — commands and skills come from the plugin mount.
@@ -156,3 +156,9 @@ Cannot emit required **N** → **`Blocked`**.
 - Session todos (`TodoWrite`) are not durable SSOT unless mirrored to `{HARNESS_DIR}`.
 - Morning Star roles **are** registered as ZCode subagent types from `agents/*.md` — but the shells are thin, so role binding is **still always** prompt + skill load (C5b); prefer bare role ids, the qualified form can fall back to the default prompt.
 - ZCode has no `sessionStart.skill`; new sessions do **not** auto-load PM — invoke `/morning-star-harness:pm` or `/skill:pm` manually.
+
+## Plugin/CLI version alignment
+
+- Installed plugin versions live under `~/.zcode/cli/plugins/cache/<marketplace>/morning-star-harness/<version>/` (one version directory per install; highest semver wins).
+- Update entry: **Settings → Plugin Management → update from the `mstar-local` marketplace**.
+- Behavioral contract (when to check, which side to update) → **`mstar-harness-core`**「版本对齐（CLI ↔ host 插件）」.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mstar-harness/dsh",
-  "version": "3.7.0",
+  "version": "3.7.2",
   "description": "Morning Star harness dsh (DeepSeek Harness) cordis function plugin — in-process engine gates (status/dispatch/lease) with hard refusal channels.",
   "keywords": [
     "dsh",

package/harness-agents/project-manager.md

@@ -1,30 +0,0 @@
----
-name: project-manager
-description: "Project Manager - coordinate the team, track progress, and orchestrate execution across roles."
-mode: primary
-tools:
-  write: true
-  edit: true
-  bash: true
-permission:
-  task:
-    "*": allow
----
-
-## Morning Star Role Binding
-
-You are `project-manager`. The complete role prompt is provided by the `mstar-roles` skill.
-
-- Skill: `mstar-roles` skill
-- Role reference: `references/project-manager.md` in the `mstar-roles` skill
-- Role parameters: `role_id=project-manager`, `mode=primary`
-
-## Mandatory First Steps
-
-This file is a routing shell — NOT your complete role prompt. **Before any work, load in order:**
-
-1. `skill` → `mstar-harness-core` (state machine, gates, routing — global SSOT)
-2. `skill` → `mstar-roles` (role mapping & parameter table)
-3. `Read` → `references/project-manager.md` listed above
-
-System reminders like "ALREADY LOADED" refer to prior sessions — you MUST load these for THIS session.