@ran-sh/dsh-crew 1.6.2 → 1.7.1

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-crew",
-  "version": "1.6.2",
+  "version": "1.7.1",
   "description": "Dispatch subtasks to DeepSeek Harness (DSH) agents as native subagents with live progress",
   "author": {
     "name": "ZSeven-W"

package/package.json

@@ -1,232 +1,233 @@
-{
-  "name": "@ran-sh/dsh-crew",
-  "version": "1.6.2",
-  "type": "module",
-  "main": "./src/hub/entry.mjs",
-  "bin": {
-    "dsh-crew": "bin/dsh-crew.mjs"
-  },
-  "description": "DeepSeek Harness plugin: dispatch work to DSH agents from Claude Code / Codex, as native subagents with live progress",
-  "dshCrew": {
-    "payloadSchema": 2,
-    "windowsSupervisorHandoff": 1
-  },
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "inject": [
-        "@deepseek-ai/dsh-client-ui-renderer",
-        "@deepseek-ai/dsh-client-locale",
-        "@deepseek-ai/dsh-client-ui-settings"
-      ],
-      "platform": "web"
-    }
-  },
-  "scripts": {
-    "mcp": "node src/server.mjs",
-    "build:client": "tsdown src/client/entry.tsx --format cjs --platform browser --target es2022 --tsconfig tsconfig.client.json --deps.never-bundle react --deps.never-bundle react/jsx-runtime --deps.never-bundle react-dom --deps.never-bundle react-dom/client --out-dir .client-build --clean --logLevel warn && tsdown src/client/quick-entry.tsx --format cjs --platform browser --target es2022 --tsconfig tsconfig.client.json --deps.never-bundle react --deps.never-bundle react/jsx-runtime --deps.never-bundle react-dom --deps.never-bundle react-dom/client --out-dir .client-build --no-clean --logLevel warn && node scripts/build-client.mjs",
-    "verify:npm-install": "node scripts/verify-npm-install.mjs",
-    "verify:npm-install:official": "node scripts/verify-npm-install.mjs --with-official-dsh",
-    "verify:official-bridge": "node scripts/verify-official-bridge-e2e.mjs --diagnostic-only"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.25.4",
-    "zod": "^3.24.0"
-  },
-  "exports": {
-    ".": "./src/hub/entry.mjs",
-    "./client": "./lib/client.js",
-    "./package.json": "./package.json"
-  },
-  "peerDependencies": {
-    "@deepseek-ai/dsh": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-agent-loop": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-agent-presets": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-bash-local": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-locale": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-compaction-basic": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-fs-local": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-fs-observation-policy": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-llm-deepseek": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sandbox-local": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sdk-client": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sdk-jsonrpc-server": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sdk-minimal": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-subprocess-local": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-token-meter": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-tool-fs": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-tool-todo": "0.1.5-rc.2",
-    "react": "^18.0.0",
-    "react-dom": "^18.0.0"
-  },
-  "peerDependenciesMeta": {
-    "@deepseek-ai/dsh": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-agent": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-agent-loop": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-agent-presets": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-bash-local": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-client-locale": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-client-ui-renderer": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-client-ui-settings": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-compaction-basic": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-fs-local": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-fs-observation-policy": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-llm": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-llm-deepseek": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-sandbox-local": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-sandbox-policy": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-sdk-client": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-sdk-jsonrpc-server": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-sdk-minimal": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-session": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-session-persistence-jsonl": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-subprocess-local": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-token-meter": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-tool-fs": {
-      "optional": true
-    },
-    "@deepseek-ai/dsh-tool-todo": {
-      "optional": true
-    },
-    "react": {
-      "optional": true
-    },
-    "react-dom": {
-      "optional": true
-    }
-  },
-  "devDependencies": {
-    "@deepseek-ai/dsh": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-agent-loop": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-agent-presets": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-bash-local": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-locale": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-compaction-basic": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-fs-local": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-fs-observation-policy": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-llm-deepseek": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sandbox-local": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sdk-client": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sdk-jsonrpc-server": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-sdk-minimal": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-subprocess-local": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-token-meter": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-tool-fs": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-tool-todo": "0.1.5-rc.2",
-    "@types/react": "^18.3.0",
-    "react": "^18.3.1",
-    "react-dom": "^18.3.1",
-    "tsdown": "0.22.14",
-    "typescript": "^5.6.0"
-  },
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Ran-sh/dsh-crew.git"
-  },
-  "homepage": "https://github.com/Ran-sh/dsh-crew",
-  "bugs": {
-    "url": "https://github.com/Ran-sh/dsh-crew/issues"
-  },
-  "keywords": [
-    "dsh",
-    "deepseek",
-    "claude-code",
-    "codex",
-    "zcode",
-    "windows",
-    "subagent",
-    "worker",
-    "multimodal",
-    "plugin",
-    "agent"
-  ],
-  "files": [
-    "bin",
-    "lib",
-    "src",
-    "scripts",
-    "agents",
-    "commands",
-    "codex",
-    "zcode",
-    "statusline",
-    "official-web-bridge",
-    "windows",
-    "cordis.patch.yml",
-    "worker.cordis.yml",
-    ".claude-plugin",
-    "README.md",
-    "README.*.md",
-    "docs/job-contracts.md",
-    "docs/readiness-matrix.md",
-    "docs/gpt-relay-extension.md",
-    "docs/ui-surfaces.md",
-    "docs/installation.md",
-    "docs/images/dsh-crew-logo.png",
-    "docs/images/dsh-crew-overview.png",
-    "docs/images/dsh-crew-host.png",
-    "docs/images/dsh-crew-jobs.png",
-    "LICENSE"
-  ]
-}
+{
+  "name": "@ran-sh/dsh-crew",
+  "version": "1.7.1",
+  "type": "module",
+  "main": "./src/hub/entry.mjs",
+  "bin": {
+    "dsh-crew": "bin/dsh-crew.mjs"
+  },
+  "description": "DeepSeek Harness plugin: dispatch work to DSH agents from Claude Code / Codex, as native subagents with live progress",
+  "dshCrew": {
+    "payloadSchema": 2,
+    "windowsSupervisorHandoff": 1
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-ui-renderer",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-settings"
+      ],
+      "platform": "web"
+    }
+  },
+  "scripts": {
+    "mcp": "node src/server.mjs",
+    "build:client": "tsdown src/client/entry.tsx --format cjs --platform browser --target es2022 --tsconfig tsconfig.client.json --deps.never-bundle react --deps.never-bundle react/jsx-runtime --deps.never-bundle react-dom --deps.never-bundle react-dom/client --out-dir .client-build --clean --logLevel warn && tsdown src/client/quick-entry.tsx --format cjs --platform browser --target es2022 --tsconfig tsconfig.client.json --deps.never-bundle react --deps.never-bundle react/jsx-runtime --deps.never-bundle react-dom --deps.never-bundle react-dom/client --out-dir .client-build --no-clean --logLevel warn && node scripts/build-client.mjs",
+    "verify:npm-install": "node scripts/verify-npm-install.mjs",
+    "verify:npm-install:official": "node scripts/verify-npm-install.mjs --with-official-dsh",
+    "verify:official-bridge": "node scripts/verify-official-bridge-e2e.mjs --diagnostic-only"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.25.4",
+    "zod": "^3.24.0"
+  },
+  "exports": {
+    ".": "./src/hub/entry.mjs",
+    "./client": "./lib/client.js",
+    "./package.json": "./package.json"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent-loop": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent-presets": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-bash-local": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-compaction-basic": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-fs-local": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-fs-observation-policy": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm-deepseek": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sdk-client": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sdk-jsonrpc-server": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sdk-minimal": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-token-meter": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tool-fs": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tool-todo": "0.1.5-rc.2",
+    "react": "^18.0.0",
+    "react-dom": "^18.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-agent": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-agent-loop": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-agent-presets": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-bash-local": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-locale": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-renderer": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-client-ui-settings": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-compaction-basic": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-fs-local": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-fs-observation-policy": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-llm-deepseek": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-sandbox-local": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-sandbox-policy": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-sdk-client": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-sdk-jsonrpc-server": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-sdk-minimal": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-session": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-session-persistence-jsonl": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-subprocess-local": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-token-meter": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-fs": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tool-todo": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    },
+    "react-dom": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@deepseek-ai/dsh": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent-loop": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent-presets": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-bash-local": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-compaction-basic": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-fs-local": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-fs-observation-policy": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm-deepseek": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sandbox-local": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sdk-client": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sdk-jsonrpc-server": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-sdk-minimal": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session-persistence-jsonl": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-token-meter": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tool-fs": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tool-todo": "0.1.5-rc.2",
+    "@types/react": "^18.3.0",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "tsdown": "0.22.14",
+    "typescript": "^5.6.0"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Ran-sh/dsh-crew.git"
+  },
+  "homepage": "https://github.com/Ran-sh/dsh-crew",
+  "bugs": {
+    "url": "https://github.com/Ran-sh/dsh-crew/issues"
+  },
+  "keywords": [
+    "dsh",
+    "deepseek",
+    "claude-code",
+    "codex",
+    "zcode",
+    "windows",
+    "subagent",
+    "worker",
+    "multimodal",
+    "plugin",
+    "agent"
+  ],
+  "files": [
+    "bin",
+    "lib",
+    "src",
+    "scripts",
+    "agents",
+    "commands",
+    "codex",
+    "zcode",
+    "skills",
+    "statusline",
+    "official-web-bridge",
+    "windows",
+    "cordis.patch.yml",
+    "worker.cordis.yml",
+    ".claude-plugin",
+    "README.md",
+    "README.*.md",
+    "docs/job-contracts.md",
+    "docs/readiness-matrix.md",
+    "docs/gpt-relay-extension.md",
+    "docs/ui-surfaces.md",
+    "docs/installation.md",
+    "docs/images/dsh-crew-logo.png",
+    "docs/images/dsh-crew-overview.png",
+    "docs/images/dsh-crew-host.png",
+    "docs/images/dsh-crew-jobs.png",
+    "LICENSE"
+  ]
+}

package/skills/dsh-crew/SKILL.md

@@ -0,0 +1,118 @@
+---
+name: dsh-crew
+description: "DSH Crew worker/reviewer dispatch (dsh-crew MCP tools): dispatch coding work, configure models and review gates, and maintain session history. Load only when the operator asks to use dsh-crew."
+---
+
+# DSH Crew
+
+**On demand only.** Do not dispatch Crew work because it might help — dispatch
+because the operator asked for it in this turn ("use dsh-crew", "call dsh-crew",
+"派给 crew", and the like). Crew is a capability the operator chooses, not a
+standing policy, so nothing here should shape how you work until it is invoked.
+That is the whole point of it living in a skill rather than in a global
+instruction file: the host's own way of working stays untouched.
+
+Once invoked, this is the operating guide.
+
+## What it is
+
+A plugin on the official DeepSeek Harness. A hub on 3210 dispatches jobs to
+worker/reviewer models, optionally in an isolated git worktree, and returns a
+compact structured result. Codex, ZCode and Claude Code all reach it through the
+same `dsh-crew` MCP server, so the behaviour below is identical from any host.
+
+## Tools
+
+| Tool | Use |
+|---|---|
+| `dsh_run_worker` | dispatch one unit and wait for the result |
+| `dsh_spawn_worker` | dispatch and return a workflow id immediately |
+| `dsh_worker_status` | list workflows with phase, role, model, tokens |
+| `dsh_worker_result` | fetch or wait for one workflow (`wait_seconds`) |
+| `dsh_worker_cancel` | cancel a workflow |
+| `dsh_worker_config` | read/update session settings: enable dispatch, tier, effort, timeout, presets, policy |
+
+`dsh_worker_config` with no arguments is the cheapest way to answer "what is
+Crew set to right now". Its settings last for the session only; persisted
+changes belong in the 3210 panel.
+
+## Choosing what to dispatch
+
+Delegate a bounded, independently verifiable unit when isolation,
+specialization, parallel work or independent review earns its cost. Give each
+unit its objective, owned files, workspace, constraints and acceptance
+evidence. Keep ambiguity, integration, external effects and final communication
+yourself. Trivial work stays local.
+
+Continue authorized work after a successful subtask; a returned workflow is a
+checkpoint, not the end of the task. If a worker's result is incomplete or its
+review asks for changes, that is a task result to act on — not approval.
+
+## Configuration
+
+Two surfaces, and they are not equivalent:
+
+- **3210** — the full control plane: workflow, model priority, routing, provider
+  lifecycle, history, and the peak/off-peak schedule.
+- **3080** — the quick surface (sub-agent switch, model priority order). It
+  writes through the same config via a restricted key allowlist.
+
+Everything lands in `~/.config/dsh-crew/config.json`. Prefer the panel over hand
+editing: the write path validates, and a hand edit can be silently dropped by
+the loader.
+
+## Model routing
+
+Worker and reviewer each walk an ordered `{provider, model}` priority list and
+take the first admissible candidate; an empty list falls through to Harness
+Default. Candidates are skipped when the provider is unhealthy, tombstoned, or
+inside a peak window it is blocked for. A `warn` rule keeps the model selectable
+and records the advisory in the selection trace.
+
+The **peak/off-peak schedule** (panel → 波峰波谷调度) restricts chosen models by
+local wall clock: `block` skips the model during peak so the next candidate
+serves the job, `warn` uses it and flags the choice, and an unlisted model is
+unrestricted. Defaults mirror DeepSeek's published peak hours.
+
+## Work
+
+`isolation: worktree` is the default: a coding worker runs in a per-job git
+worktree and the primary tree is untouched. Non-git workspaces fail with
+`NOT_GIT_REPOSITORY` rather than silently sharing the tree; use `shared`
+explicitly if that is what you want. Concurrent jobs are capped by
+`max_parallel`.
+
+The reviewer gate is `required` by default: an unreviewed change fails. Review
+findings and failing tests are results to address, never a reason to bypass the
+gate.
+
+## History
+
+Session storage is shared between 3080 and 3210 — clearing one clears both.
+Cleanup is scoped by provenance, and the default scope is **Crew-created only**,
+so the operator's own conversations survive. `all` removes theirs too; use it
+deliberately. Archived batches are restorable from the panel.
+
+## When Crew is unavailable
+
+If a capability needed by a work unit you already dispatched becomes unavailable
+or non-callable, **stop and ask**. Do not implement further on that unit, do not
+repair or reconfigure Crew, do not silently fall back to doing it yourself.
+Perform bounded read-only diagnosis, report the evidence and what already
+completed, and wait for the operator to choose: repair Crew and continue through
+it, or leave Crew alone and continue with the host agent.
+
+A nonterminal wait is not an outage — keep polling the same workflow rather than
+dispatching a duplicate. This gate applies only once Crew has been selected for
+a work unit; it does not apply when planning chose local work.
+
+## Host boundaries
+
+- Never install, update, register, unlink, repair or mutate anything under
+  `~/.dsh`. Crew's runtime lives in its own `DSH_HOME`.
+- Runtime upgrades go through the Crew-owned installer (`dsh-crew update`), never
+  through direct pnpm/npm/dsh plugin operations.
+- Preparing an upgrade must not restart 3080 or 3210.
+- The legacy 3080 bridge must never be used for 3210 lifecycle or rollback.
+- Delegation grants no new authority: pushing, publishing, messaging, changing
+  credentials or deleting data still need their own authorization.

package/src/install/crew-skill.mjs

@@ -0,0 +1,91 @@
+// On-demand Crew guidance, installed as a user skill.
+//
+// Crew used to inject a "capability-aware delegation policy" block into the
+// host's global instruction file. That made every host session — Codex, ZCode —
+// carry Crew's delegation rules whether or not the operator wanted Crew that
+// turn, which shapes how the host does its own work.
+//
+// The guidance now lives in a skill instead, loaded only when the operator asks
+// for Crew. Nothing about the host's default behaviour changes; the knowledge is
+// there the moment it is wanted.
+//
+// Each host reads its own skill directory, so the skill is copied to all of them
+// — the same layout the Oracle skill uses, plus the shared `~/.agents/skills`
+// that ZCode reads. Installing a skill replaces writing a policy block, so the
+// host installers also *remove* any block a previous release left behind.
+
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+
+export const CREW_SKILL_NAME = 'dsh-crew';
+
+/**
+ * Skill roots, in the order they are installed. `.agents/skills` is the shared
+ * directory ZCode reads; the other two are what Codex and Claude Code read. The
+ * Codex one is resolved through `CODEX_HOME` because Codex may point elsewhere —
+// writing only to `~/.codex` would put the skill where Codex never looks.
+ */
+export function crewSkillRoots({ home = homedir(), env = process.env } = {}) {
+  const codexHome = typeof env?.CODEX_HOME === 'string' && env.CODEX_HOME.trim()
+    ? resolve(env.CODEX_HOME.trim())
+    : join(home, '.codex');
+  return [
+    join(home, '.agents', 'skills'),
+    join(codexHome, 'skills'),
+    join(home, '.claude', 'skills'),
+  ];
+}
+
+export function crewSkillFiles({ home = homedir(), env = process.env } = {}) {
+  return crewSkillRoots({ home, env }).map((root) => join(root, CREW_SKILL_NAME, 'SKILL.md'));
+}
+
+/** The skill template shipped in the payload. */
+export function crewSkillSource({ root }) {
+  return join(root, 'skills', CREW_SKILL_NAME, 'SKILL.md');
+}
+
+export function readCrewSkill({ root }) {
+  const file = crewSkillSource({ root });
+  return existsSync(file) ? readFileSync(file, 'utf8') : null;
+}
+
+/**
+ * Copy the skill template into every host skill directory. Idempotent: a file
+ * that already matches is left alone, so a repeat install stays quiet.
+ */
+export function installCrewSkill({ home = homedir(), root, env = process.env } = {}) {
+  if (!root) return { ok: false, code: 'CREW_SKILL_SOURCE_REQUIRED' };
+  const content = readCrewSkill({ root });
+  if (content === null) return { ok: false, code: 'CREW_SKILL_TEMPLATE_MISSING', source: crewSkillSource({ root }) };
+  const written = [];
+  const files = crewSkillFiles({ home, env });
+  for (const file of files) {
+    let current = null;
+    try { current = readFileSync(file, 'utf8'); } catch { /* absent or unreadable */ }
+    if (current === content) continue;
+    try {
+      mkdirSync(dirname(file), { recursive: true });
+      writeFileSync(file, content);
+      written.push(file);
+    } catch (error) {
+      return { ok: false, code: 'CREW_SKILL_WRITE_FAILED', file, error: String(error?.message ?? error) };
+    }
+  }
+  return { ok: true, changed: written.length > 0, written, files, file: files[0] };
+}
+
+/**
+ * Remove the installed skill from every host directory. Only Crew's own skill
+ * folder is touched, so a user's other skills are never affected.
+ */
+export function removeCrewSkill({ home = homedir(), env = process.env } = {}) {
+  const removed = [];
+  for (const dir of crewSkillRoots({ home, env }).map((root) => join(root, CREW_SKILL_NAME))) {
+    if (!existsSync(dir)) continue;
+    try { rmSync(dir, { recursive: true, force: true }); removed.push(dir); }
+    catch { /* best effort: a locked file is not worth failing an uninstall */ }
+  }
+  return { ok: true, changed: removed.length > 0, removed, file: removed[0] ?? null };
+}

package/src/install/install-legacy.mjs

@@ -7,7 +7,8 @@ import { createHash } from 'node:crypto';
 import { dirname, join, resolve, relative } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { homedir } from 'node:os';
-import { normalizeModelPriority } from '../model-routing.mjs';
+import { normalizeModelPriority } from '../model-routing.mjs';
+import { crewSkillFiles, installCrewSkill, readCrewSkill, removeCrewSkill } from './crew-skill.mjs';
 import { zcodeStatus } from './zcode.mjs';
 
 const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..', '..');
@@ -94,32 +95,13 @@ export function stripKnownLegacyCodexPolicy(text, { knownHashes = CODEX_LEGACY_P
   return `${keptPrefix}${match[0]}${keptSuffix}`;
 }
 
-function installGlobalCodexPolicy({ home, root, env = process.env }) {
-  const file = join(codexHomeDir(home, env), 'AGENTS.md');
-  const block = managedPolicyBlock(root);
-  if (!block) return { ok: false, action: 'global policy template missing' };
-  mkdirSync(dirname(file), { recursive: true });
-  const current = readText(file) ?? '';
-  const managed = new RegExp(`${POLICY_START.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}[\\s\\S]*?${POLICY_END.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`, 'm');
-  const template = readText(join(root, 'codex', 'AGENTS.md'))?.trim() ?? '';
-  let next;
-  if (managed.test(current)) next = current.replace(managed, block);
-  else if (current.trim() === template) next = `${block}\n`;
-  else next = `${current.trimEnd()}${current.trim() ? '\n\n' : ''}${block}\n`;
-  next = stripKnownLegacyCodexPolicy(next);
-  if (next !== current) {
-    backup(file);
-    writeFileSync(file, next);
-  }
-  return { ok: true, action: `global policy: ${file}` };
+/** The installed skill is present and still matches the payload template. */
+function crewSkillInstalled({ home, root, env = process.env }) {
+  const expected = readCrewSkill({ root });
+  if (expected === null) return false;
+  // Every host directory must hold the current template, not just the first.
+  return crewSkillFiles({ home, env }).every((file) => readText(file) === expected);
 }
-
-function globalCodexPolicyReady({ home, root = ROOT, env = process.env }) {
-  const block = managedPolicyBlock(root);
-  const text = readText(join(codexHomeDir(home, env), 'AGENTS.md'));
-  return !!block && typeof text === 'string' && text.includes(block);
-}
-
 function uninstallGlobalCodexPolicy({ home, env = process.env }) {
   const file = join(codexHomeDir(home, env), 'AGENTS.md');
   const current = readText(file);
@@ -432,7 +414,7 @@ export function installStatus({ home = homedir(), root = ROOT, env = process.env
     status_prompt: expectedStatusPrompt !== null && readText(join(codexRoot, 'prompts', 'dsh-status.md')) === expectedStatusPrompt,
     mcp: !!expectedTarget && mcpTarget === expectedTarget,
     target_alignment: !!expectedTarget && workerTarget === expectedTarget && reviewerTarget === expectedTarget && mcpTarget === expectedTarget,
-    global_policy: globalCodexPolicyReady({ home, root, env }),
+    skill: crewSkillInstalled({ home, root, env }),
   };
   const codexInstalled = Object.values(components).some(Boolean)
     || existsSync(join(codexRoot, 'agents', 'ds-flash.toml'))
@@ -466,6 +448,8 @@ export function uninstallCodex({ home = homedir(), env = process.env } = {}) {
   }
   const policyAction = uninstallGlobalCodexPolicy({ home, env });
   if (policyAction) actions.push(policyAction);
+  const skillAction = removeCrewSkill({ home, env });
+  if (skillAction.changed) actions.push(...skillAction.removed.map((dir) => `removed: ${dir}`));
   // Remove only the dsh-crew entry from [mcp_servers], keeping any other
   // MCP servers the user configured.
   const configFile = join(codexHomeDir(home, env), 'config.toml');
@@ -622,9 +606,15 @@ export function installCodex({ home = homedir(), scope, root = ROOT, env = proce
   if (scope !== 'project') {
     const act = writeGlobalCodexMcpServer(home, renderedPath, env);
     actions.push(...act);
-    const policy = installGlobalCodexPolicy({ home, root, env });
-    if (!policy.ok) return { ok: false, actions: [...actions, policy.action] };
-    actions.push(policy.action);
+    // Crew guidance is a skill now, loaded only when the operator asks for it.
+    // Removing the policy block here cleans up what an earlier release put in
+    // the host instruction file; ignoring the result keeps the first install on
+    // a machine that never had one quiet.
+    const droppedPolicy = uninstallGlobalCodexPolicy({ home, env });
+    if (droppedPolicy) actions.push(`removed delegating policy block: ${join(codexHomeDir(home, env), 'AGENTS.md')}`);
+    const skill = installCrewSkill({ home, root, env });
+    if (!skill.ok) return { ok: false, actions: [...actions, `crew skill: ${skill.code}`] };
+    actions.push(...skill.written.map((file) => `skill: ${file}`));
   }
   return { ok: true, actions };
 }

package/src/install/zcode.mjs

@@ -9,6 +9,8 @@ import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { homedir } from 'node:os';
 
+import { crewSkillFiles, installCrewSkill, readCrewSkill, removeCrewSkill } from './crew-skill.mjs';
+
 const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..', '..');
 const HOST = 'zcode';
 const SERVER = 'dsh-crew';
@@ -103,27 +105,6 @@ function expectedTarget({ root = ROOT } = {}) {
   return resolve(join(root, 'src', 'server.mjs'));
 }
 
-function managedPolicyBlock(root) {
-  const template = readText(join(root, 'zcode', 'AGENTS.md'))?.trim();
-  return template ? `${POLICY_START}\n${template}\n${POLICY_END}` : null;
-}
-
-function installPolicy({ home, root }) {
-  const file = join(home, '.zcode', 'AGENTS.md');
-  const block = managedPolicyBlock(root);
-  if (!block) return { ok: false, code: 'ZCODE_POLICY_TEMPLATE_MISSING' };
-  mkdirSync(dirname(file), { recursive: true });
-  const current = readText(file) ?? '';
-  const escapedStart = POLICY_START.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-  const escapedEnd = POLICY_END.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-  const managed = new RegExp(`${escapedStart}[\\s\\S]*?${escapedEnd}`, 'm');
-  const next = managed.test(current)
-    ? current.replace(managed, block)
-    : `${current.trimEnd()}${current.trim() ? '\n\n' : ''}${block}\n`;
-  if (next !== current) { backup(file); writeFileSync(file, next); }
-  return { ok: true, file };
-}
-
 function removePolicy({ home }) {
   const file = join(home, '.zcode', 'AGENTS.md');
   const current = readText(file);
@@ -277,7 +258,8 @@ function updateMcp({ home, root }) {
   return { ok: true, changed, config_file: source.file, config_kind: source.kind, target };
 }
 
-export function installZCode({ home = homedir(), root = ROOT } = {}) {
+export function installZCode({ home = homedir(), root = ROOT, env = process.env } = {}) {
+  const actions = [];
   const templates = templateFiles({ home, root });
   const missing = templates.find(({ source }) => !existsSync(source));
   if (missing) return { ok: false, code: 'ZCODE_TEMPLATE_MISSING', source: missing.source };
@@ -287,8 +269,14 @@ export function installZCode({ home = homedir(), root = ROOT } = {}) {
   // failed install is transaction-like and leaves user files untouched.
   const mcp = updateMcp({ home, root });
   if (!mcp.ok) return mcp;
-  const policy = installPolicy({ home, root });
-  if (!policy.ok) return policy;
+  // Crew guidance is a skill now, loaded only when the operator asks for it.
+  // The removal cleans up the policy block an earlier release wrote into the
+  // host instruction file; ignoring its result keeps a first install quiet.
+  const droppedPolicy = removePolicy({ home });
+  if (droppedPolicy) actions.push('policy: removed managed ZCode block');
+  const skill = installCrewSkill({ home, root, env });
+  if (!skill.ok) return { ok: false, code: skill.code, source: skill.source };
+  actions.push(...skill.written.map((file) => `skill: ${file}`));
   const installed = installTemplates({ home, root, priorFiles });
   if (!installed.ok) return installed;
   cleanupPriorMcpSources({ owned: previousOwnership, exceptFile: mcp.config_file });
@@ -303,16 +291,20 @@ export function installZCode({ home = homedir(), root = ROOT } = {}) {
     files: installed.records,
     configFiles: [currentSourceRecord, ...priorSourceRecords],
   });
-  return { ok: true, ...mcp, policy_file: policy.file, files: installed.actions };
+  return { ok: true, ...mcp, skill_files: skill.written, files: installed.actions };
 }
 
-function zcodeComponents({ home = homedir(), root = ROOT } = {}) {
+function zcodeComponents({ home = homedir(), root = ROOT, env = process.env } = {}) {
   const expected = normalizePath(expectedTarget({ root }));
   const source = configSource({ home });
   const configured = serverTarget(source.servers[SERVER]);
   const owned = ownership({ home });
-  const expectedPolicy = managedPolicyBlock(root);
-  const installedPolicy = readText(join(home, '.zcode', 'AGENTS.md'));
+  // The guidance is a skill now; a policy block in the host instruction file is
+  // no longer written and no longer part of readiness.
+  const expectedSkill = readCrewSkill({ root });
+  // A block written by an earlier release still counts as an installed
+  // footprint, so uninstall knows there is something of ours to clean up.
+  const legacyPolicyText = readText(join(home, '.zcode', 'AGENTS.md'));
   const templates = templateFiles({ home, root });
   const templateReady = (entry) => {
     if (!entry) return false;
@@ -335,7 +327,7 @@ function zcodeComponents({ home = homedir(), root = ROOT } = {}) {
   });
   const components = {
     mcp: configured === expected,
-    policy: !!expectedPolicy && typeof installedPolicy === 'string' && installedPolicy.includes(expectedPolicy),
+    skill: expectedSkill !== null && readText(crewSkillFiles({ home, env })[0]) === expectedSkill,
     worker_agent: templateReady(templateBySuffix(join('agents', 'ds-worker.md'))),
     reviewer_agent: templateReady(templateBySuffix(join('agents', 'ds-reviewer.md'))),
     config_prompt: templateReady(templateBySuffix(join('commands', 'dsh-config.md'))),
@@ -345,9 +337,9 @@ function zcodeComponents({ home = homedir(), root = ROOT } = {}) {
       && normalizePath(owned.target) === expected
       && ownershipFilesReady,
   };
-  const policyFootprint = typeof installedPolicy === 'string'
-    && installedPolicy.includes(POLICY_START)
-    && installedPolicy.includes(POLICY_END);
+  const policyFootprint = typeof legacyPolicyText === 'string'
+    && legacyPolicyText.includes(POLICY_START)
+    && legacyPolicyText.includes(POLICY_END);
   const installed = Object.hasOwn(source.servers, SERVER)
     || !!owned
     || policyFootprint
@@ -355,8 +347,8 @@ function zcodeComponents({ home = homedir(), root = ROOT } = {}) {
   return { components, source, expected, configured, owned, installed };
 }
 
-export function zcodeStatus({ home = homedir(), root = ROOT } = {}) {
-  const { components, source, expected, configured, installed } = zcodeComponents({ home, root });
+export function zcodeStatus({ home = homedir(), root = ROOT, env = process.env } = {}) {
+  const { components, source, expected, configured, installed } = zcodeComponents({ home, root, env });
   const missing = Object.entries(components).filter(([, value]) => !value).map(([key]) => key);
   return {
     installed,
@@ -369,7 +361,7 @@ export function zcodeStatus({ home = homedir(), root = ROOT } = {}) {
   };
 }
 
-export function uninstallZCode({ home = homedir() } = {}) {
+export function uninstallZCode({ home = homedir(), env = process.env } = {}) {
   const actions = [];
   const owned = ownership({ home });
   if (owned) {
@@ -381,6 +373,8 @@ export function uninstallZCode({ home = homedir() } = {}) {
     rmSync(OWNERSHIP_FILE({ home }), { force: true });
   }
   if (removePolicy({ home })) actions.push('policy: removed managed ZCode block');
+  const skillAction = removeCrewSkill({ home, env });
+  if (skillAction.changed) actions.push(...skillAction.removed.map((dir) => `removed: ${dir}`));
   const managedFiles = Array.isArray(owned?.files) && owned.files.length
     ? owned.files
     : ['agents/ds-worker.md', 'agents/ds-reviewer.md', 'commands/dsh-config.md', 'commands/dsh-status.md']

package/src/runtime-identity.mjs

@@ -36,7 +36,7 @@ export {
 // included in the identity contract.
 const RUNTIME_ID = randomUUID();
 
-export const RUNTIME_VERSION = '1.6.2';
+export const RUNTIME_VERSION = '1.7.1';
 export const HUB_PROTOCOL_VERSION = 1;
 
 export const HUB_CAPABILITIES = Object.freeze([