@nanmicoder/dsh-agent-teams 0.1.22 → 0.1.24-rc.1

package/lib/types/types.d.ts

@@ -7,6 +7,7 @@
  * survives harness restarts.
  * @module dsh-agent-teams/types
  */
+import type { MemberToolFilter } from './tool-policies.ts';
 /** Task lifecycle statuses in progression order. */
 export type TaskStatus = 'pending' | 'claimed' | 'in_progress' | 'completed' | 'failed' | 'cancelled';
 /** Statuses after which a task can no longer be claimed or worked on. */
@@ -44,6 +45,49 @@ export interface CommandResult {
     exitCode?: number;
     evidence?: string;
 }
+/**
+ * Identity of one workspace path at one instant. A verdict is evidence about a
+ * revision, so recording the bytes it judged (not only the task id) lets the
+ * delivery check refuse to advertise a revision no review ever saw.
+ */
+export interface ArtifactDigest {
+    /** Workspace-relative POSIX path. */
+    path: string;
+    /** Whether a regular file existed when the digest was taken. */
+    present: boolean;
+    /** Lowercase hex sha256 of the file bytes; absent unless the file was read. */
+    sha256?: string;
+    /** File size in bytes; absent unless the file was read. */
+    size?: number;
+    /** File mtime in epoch ms; lets a legacy record detect a later edit. */
+    mtimeMs?: number;
+    /**
+     * The path exists but could not be read or safely resolved (permissions,
+     * symlink escaping the workspace, I/O error). Never conflated with "absent":
+     * unreadable bytes cannot be claimed as unchanged.
+     */
+    unreadable?: boolean;
+    /** Why the path could not be read, when `unreadable` is set. */
+    reason?: string;
+}
+/**
+ * A declared scope that could not be fully enumerated (file cap reached,
+ * unreadable directory, path that is not workspace-relative). Recorded so a
+ * partial artifact list is never mistaken for complete coverage.
+ */
+export interface ArtifactScopeGap {
+    /** The pattern or path that could not be fully resolved. */
+    pattern: string;
+    reason: string;
+}
+/** One set of artifact digests captured at a single instant. */
+export interface ArtifactSnapshot {
+    /** Epoch ms when these bytes were read. */
+    at: number;
+    artifacts: ArtifactDigest[];
+    /** Present when the recorded coverage is known to be incomplete. */
+    gaps?: ArtifactScopeGap[];
+}
 /** Profile / team review-loop limits. */
 export interface ReviewPolicy {
     requirementsMinRounds?: number;
@@ -121,9 +165,47 @@ export interface TeamTask {
     /** Supplemental observations, attributed to their original execution generation. */
     supplementalEvidence?: TaskEvidence[];
     reviewedTaskId?: string;
+    /** Execution generation of the reviewed task at the moment of judgment. */
     reviewedAttempt?: number;
+    /**
+     * Bytes this verdict judged, read from the workspace when the gate closed.
+     * A later edit, deletion or re-attempt invalidates the verdict.
+     */
+    reviewedArtifacts?: ArtifactDigest[];
+    /** Scope of that verdict that could not be fully enumerated, if any. */
+    reviewedGaps?: ArtifactScopeGap[];
+    /**
+     * Scope patterns the verdict bound (e.g. `lib/`). A file that appears under
+     * one of them later was never reviewed, so the verdict must not claim it.
+     */
+    reviewedScope?: string[];
+    /**
+     * Drift observed while this verdict was being formed (the workspace changed
+     * between claim and close). The verdict cannot be read as binding a stable
+     * revision.
+     */
+    reviewedDuringDrift?: string[];
+    /**
+     * Workspace snapshot taken when this verdict's attempt started, so a close
+     * can tell whether it judged a revision that was changing underneath it.
+     */
+    verdictStartSnapshot?: ArtifactSnapshot;
+    /**
+     * Workspace snapshot an auto-generated contract (acceptance / inScope /
+     * verify) was derived from. When a cited artifact changes underneath it the
+     * work order is marked stale instead of being read as authoritative.
+     */
+    contractSnapshot?: ArtifactSnapshot;
     /** Repair source: the implementation / previous successful artifact. */
     sourceTaskId?: string;
+    /**
+     * The failed gate task(s) whose findings this repair fixes. Recorded as an
+     * explicit causal edge because `dependencies` cannot carry it: a failed task
+     * never reaches `completed`, so a dependency on it would make the repair
+     * permanently unclaimable. Delivery reads this to tell a closed loop from
+     * genuinely unresolved work (issue #175A).
+     */
+    findingSourceTaskIds?: string[];
     sourceFindingIds?: string[];
     /** User-constraint / goal items this task claims to cover. */
     coverageOf?: string[];
@@ -157,6 +239,24 @@ export interface TeamMember {
     activeModel?: string;
     /** Whether the fallback route is currently active. */
     fallbackActive?: boolean;
+    /**
+     * Owner-declared tool-policy id this member selected (`#59`), absent for a
+     * member without a policy (the unchanged default behavior). The Captain
+     * model may only select a configured id; it never submits raw tool lists.
+     */
+    toolPolicy?: string;
+    /**
+     * The immutable effective tool filter resolved when the member was created
+     * and handed to the child's `toolFilter`. `team.json` keeps it for audit,
+     * status, and recovery diagnostics; the continuable descriptor remains the
+     * authority that reapplies the filter to a cold-resumed child.
+     */
+    toolFilter?: MemberToolFilter;
+    /** Exact child-scoped setup restored on hosts with managed activations. */
+    runtimeSetup?: {
+        persona: string;
+        toolFilter: MemberToolFilter;
+    };
     joinedAt: number;
     status: MemberStatus;
     /** Execution admission is closed while a failed/pending handoff is drained. */

package/lib/types/workspace-audit.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The single workspace audit shared by every surface that reports a delivery
+ * or quality-loop conclusion.
+ *
+ * `agent_teams_status`, the activity-panel route and any Web API consumer must
+ * read the same current bytes: if only one of them compared recorded verdicts
+ * against the workspace, the other would keep advertising a passing gate over
+ * a revision no review ever saw (issue #161).
+ *
+ * The audit consumes the artifact reader's *complete* result — digests, the
+ * enumeration gaps and unreadable paths — because a partial read must never
+ * look like a clean one: a scope that outgrew its cap after the review would
+ * otherwise be reported as fully verified.
+ * @module dsh-agent-teams/workspace-audit
+ */
+import type { DeliveryAudit } from './quality-gates.ts';
+import type { TeamState } from './types.ts';
+/**
+ * Read the current workspace bytes a team's recorded verdicts and generated
+ * work orders depend on.
+ * @param workspace - absolute path of the owning workspace.
+ * @param team - the durable team record.
+ * @returns digests of every recorded path, the current contents of the scopes
+ * the verdicts bound (so a new file cannot slip into a broad scope), and every
+ * gap that makes this audit incomplete.
+ */
+export declare function auditTeamWorkspace(workspace: string, team: TeamState): DeliveryAudit;

package/lib/workspace-audit.js

@@ -0,0 +1,52 @@
+/**
+ * The single workspace audit shared by every surface that reports a delivery
+ * or quality-loop conclusion.
+ *
+ * `agent_teams_status`, the activity-panel route and any Web API consumer must
+ * read the same current bytes: if only one of them compared recorded verdicts
+ * against the workspace, the other would keep advertising a passing gate over
+ * a revision no review ever saw (issue #161).
+ *
+ * The audit consumes the artifact reader's *complete* result — digests, the
+ * enumeration gaps and unreadable paths — because a partial read must never
+ * look like a clean one: a scope that outgrew its cap after the review would
+ * otherwise be reported as fully verified.
+ * @module dsh-agent-teams/workspace-audit
+ */
+import { readArtifactScope } from "./artifacts.js";
+import { deliveryArtifactPaths, deliveryScopePatterns } from "./quality-gates.js";
+/**
+ * Read the current workspace bytes a team's recorded verdicts and generated
+ * work orders depend on.
+ * @param workspace - absolute path of the owning workspace.
+ * @param team - the durable team record.
+ * @returns digests of every recorded path, the current contents of the scopes
+ * the verdicts bound (so a new file cannot slip into a broad scope), and every
+ * gap that makes this audit incomplete.
+ */
+export function auditTeamWorkspace(workspace, team) {
+    const paths = deliveryArtifactPaths(team);
+    const scopePatterns = deliveryScopePatterns(team);
+    const pathRead = paths.length === 0 ? { artifacts: [], gaps: [] } : readArtifactScope(workspace, paths);
+    const scopeRead = scopePatterns.length === 0 ? { artifacts: [], gaps: [] } : readArtifactScope(workspace, scopePatterns);
+    const gaps = [...pathRead.gaps, ...scopeRead.gaps];
+    const seen = new Set(gaps.map((gap) => `${gap.pattern}\u0000${gap.reason}`));
+    const recordGap = (pattern, reason) => {
+        const key = `${pattern}\u0000${reason}`;
+        if (seen.has(key))
+            return;
+        seen.add(key);
+        gaps.push({ pattern, reason });
+    };
+    for (const artifact of [...pathRead.artifacts, ...scopeRead.artifacts]) {
+        // An unreadable path is not a gap in enumeration but a gap in evidence:
+        // report it the same way so no surface treats it as a clean read.
+        if (artifact.unreadable === true)
+            recordGap(artifact.path, artifact.reason ?? 'path could not be read');
+    }
+    return {
+        artifacts: pathRead.artifacts,
+        expandedScope: scopeRead.artifacts.map((artifact) => ({ path: artifact.path, present: artifact.present })),
+        ...gaps.length === 0 ? {} : { gaps },
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nanmicoder/dsh-agent-teams",
-  "version": "0.1.22",
+  "version": "0.1.24-rc.1",
   "description": "AgentTeams for DeepSeek Harness: multi-agent team collaboration (captain, members, tasks with dependencies, messaging) driven by natural language, with a tree monitor in the web GUI",
   "type": "module",
   "main": "lib/index.js",
@@ -29,7 +29,8 @@
     "compatibility.json",
     "scripts/doctor.mjs",
     "scripts/compatibility.mjs",
-    "pnpm-workspace.yaml"
+    "pnpm-workspace.yaml",
+    "scripts/legacy-session-source-repair.mjs"
   ],
   "license": "MIT",
   "author": {
@@ -60,7 +61,7 @@
   },
   "publishConfig": {
     "access": "public",
-    "tag": "latest",
+    "tag": "next",
     "registry": "https://registry.npmjs.org/"
   },
   "dsh": {
@@ -83,27 +84,27 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/dsh-agent": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-api-session-controller": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-connection": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-store": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-ui-chat": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-ui-layout": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-ui-model-selection": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-ui-session": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-commands": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-llm": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-session-projection": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-subagent": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-tools": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
-    "@deepseek-ai/dsh-util-values": "0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-api-session-controller": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-locale": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-store": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-chat": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-layout": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-model-selection": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-session": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-commands": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-llm": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-session": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-subagent": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
+    "@deepseek-ai/dsh-util-values": "0.2.1-rc.1 || 0.2.0-rc.2 || 0.1.7-rc.2 || 0.1.5-rc.3 || 0.1.5-rc.2 || 0.1.5-rc.1 || 0.1.2-rc.1 || 0.1.2-alpha.5 || 0.1.2-alpha.2",
     "@deepseek-ai/schemastery": "^3.18.2",
     "react": "^18.2.0"
   },
@@ -182,33 +183,33 @@
     }
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.4",
-    "@deepseek-ai/dsh": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-agent": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-api-session-controller": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-connection": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-locale": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-store": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-chat": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-layout": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-model-selection": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-session": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-sidebar-right": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-commands": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-llm": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-llm-retry": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-session": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-session-projection": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-subagent": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-tools": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-util-values": "0.2.0-rc.2",
-    "@deepseek-ai/dsh-workspace": "0.2.0-rc.2",
-    "@deepseek-ai/schemastery": "3.18.4",
+    "@deepseek-ai/cordis": "4.0.5",
+    "@deepseek-ai/dsh": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-agent": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-api-session-controller": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-connection": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-locale": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-store": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-chat": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-layout": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-model-selection": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-session": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-sidebar-right": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-commands": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-llm": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-llm-retry": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-session": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-subagent": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-tools": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-util-values": "0.2.1-rc.1",
+    "@deepseek-ai/dsh-workspace": "0.2.1-rc.1",
+    "@deepseek-ai/schemastery": "3.18.5",
     "@types/node": "^24.13.3",
     "@types/react": "~18.3.1",
     "@types/react-dom": "^18.3.7",
@@ -228,8 +229,10 @@
     "update:skills": "node scripts/update-skills.mjs",
     "test:skills-updater": "node --test scripts/update-skills.test.mjs",
     "verify:skill": "node scripts/sync-skill.mjs --check",
-    "verify": "node scripts/verify.mjs && node scripts/fallback-tdd.mjs && node scripts/member-failure-tdd.mjs && pnpm verify:quality-gates && node scripts/lifecycle-verify.mjs && node scripts/stress-verify.mjs && node --test scripts/issue-159.test.mjs && pnpm verify:web-routes && pnpm verify:release && pnpm verify:readme && pnpm verify:skill && pnpm verify:harness-contract && pnpm verify:http-body && pnpm verify:compatibility && pnpm verify:capabilities && pnpm verify:member-spawn-recovery && pnpm test:git-install && pnpm verify:source-runner && pnpm verify:git-artifact",
-    "verify:quality-gates": "node scripts/quality-gates-tdd.mjs && node --test scripts/quality-gates-repair-scope.test.mjs scripts/quality-gates-amend.test.mjs",
+    "verify": "node scripts/verify.mjs && node scripts/fallback-tdd.mjs && node scripts/member-failure-tdd.mjs && pnpm verify:issue-regressions && pnpm verify:quality-gates && node scripts/lifecycle-verify.mjs && node scripts/stress-verify.mjs && node --test scripts/issue-159.test.mjs && pnpm verify:issue-203 && pnpm verify:corrupt-state && pnpm verify:web-routes && pnpm verify:release && pnpm verify:readme && pnpm verify:skill && pnpm verify:harness-contract && pnpm verify:http-body && pnpm verify:compatibility && pnpm verify:capabilities && pnpm verify:tool-policies && pnpm verify:member-spawn-recovery && pnpm test:git-install && pnpm verify:source-runner && pnpm verify:lineage-identity && pnpm verify:legacy-session-repair && pnpm verify:git-artifact",
+    "verify:quality-gates": "node scripts/quality-gates-tdd.mjs && node --test scripts/quality-gates-repair-scope.test.mjs scripts/quality-gates-amend.test.mjs scripts/quality-gates-content-bound.test.mjs scripts/quality-gates-work-order.test.mjs scripts/quality-gates-repair-wiring.test.mjs scripts/quality-gates-excluded-scope.test.mjs scripts/quality-gates-cross-binding.test.mjs",
+    "verify:issue-203": "node --test scripts/issue-203-card.test.mjs",
+    "verify:corrupt-state": "node --test scripts/corrupt-teamjson.test.mjs",
     "verify:web-routes": "node scripts/web-routes-verify.mjs",
     "verify:release": "node --test scripts/release-metadata.test.mjs",
     "verify:readme": "node scripts/readme-version.mjs && node --test scripts/readme-version.test.mjs",
@@ -238,9 +241,13 @@
     "verify:http-body": "node --test scripts/http-body.test.mjs",
     "doctor": "node scripts/doctor.mjs",
     "verify:capabilities": "node --test scripts/capabilities.test.mjs",
+    "verify:tool-policies": "node --test scripts/tool-policies.test.mjs",
     "verify:member-spawn-recovery": "node --test scripts/member-spawn-recovery.test.mjs",
     "test:git-install": "node --test scripts/git-artifacts.test.mjs",
     "verify:source-runner": "node --test scripts/harness-source-verify.test.mjs",
-    "verify:git-artifact": "node scripts/git-artifacts.mjs"
+    "verify:git-artifact": "node scripts/git-artifacts.mjs",
+    "verify:issue-regressions": "node --test scripts/issue-188.test.mjs scripts/issue-189.test.mjs scripts/issue-205.test.mjs",
+    "verify:legacy-session-repair": "node --test scripts/legacy-session-source-repair.test.mjs",
+    "verify:lineage-identity": "node --test scripts/lineage-identity.test.mjs"
   }
 }