cursor-route 0.1.7 → 0.1.9

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## Unreleased
+
+_(none)_
+
+## 0.1.9 — 2026-08-18
+
+- Health proves mid DeepSeek: dedicated `lane:mid` check is ✓ only when mid is a `claude-ds` / `deepseek-claude` shim or stock `claude` with DeepSeek `ANTHROPIC_BASE_URL`. `CURSOR_ROUTE_ALLOW_ANTHROPIC=1` is not proof. Overall `ok` still uses the existing OR-gate (any worker + `CURSOR_ROUTE_RELAXED=1`); grok-only installs stay OK with `lane:mid` ✗ plus a fix tip.
+- Health JSON includes `lanes.mid.{ worker, deepseek, detail }` (`worker` is always `"claude-ds"`).
+- `status --json` adds an evidence tree (`spawn` / `execute` / `verify`). `verify.claim` is always `"unverified"` — the parent must capture; status never auto-greens.
+- Headless pid liveness: if `ps` is unreadable (`EPERM` / non-zero), treat the pid as **alive** (fail-safe), not dead — avoids false-completed kills on sandboxed `ps`.
+- `route-orch` skill: health-before-mid, evidence-tree closeout, always-approve is coding-worktrees-only (not LIVE Discord/trading), do not fork the mid harness; `--worker deepseek` stays experimental / cheap-to-abandon.
+- Docs: `route-orch` **Eval & skill hygiene** (folded from Unreleased) — external eval contract (AutoDesign): never rewrite Verify / Success criteria mid-run to make a failing job look green (capture + exit status are the contract); skill misevolution: no auto-edit / promote skill variants from worker trajectories without operator HITL (write-time approval ≠ safe retrieval later); verify fail → prefer reconsidering the plan/definition over grinding the same tactic, with stage attribution when possible (spawn vs execute vs verify). Mid stays `claude-ds`.
+
+## 0.1.8 — 2026-08-14
+
+- Experimental `--worker deepseek`: official DeepSeek Harness (`dsh`, `@deepseek-ai/dsh`) runs headless — `dsh --profile headless` with a per-job Cordis patch pinning the model. Not a mid default: `laneWorkers.mid` stays `claude-ds`.
+- `--model flash|pro` (and `deepseek-v4-pro[1m]`) now applies to both `claude-ds` and `deepseek`; patch sets `agent-default-model` → `provider: deepseek-official` (never rewrites `~/.dsh/settings.yaml`, so parallel jobs don't race).
+- Always-approve → `DSH_PERMISSION_MODE=danger-full-access`; `--ask` → `workspace-write`. `DEEPSEEK_API_KEY` travels via env only — never in the launch command or patch.
+- Health: `worker:deepseek` ✓ only when `dsh` is on PATH (override `CURSOR_ROUTE_DSH_BIN`) **and** `DEEPSEEK_API_KEY` is set.
+- Dry-run for `--worker deepseek` works without `dsh` installed (falls back to plain `dsh` in the printed command); real starts stay gated by health.
+- `clean` also removes leftover `.dsh-patch.yml` files; patch path never overwrites a non-`.prompt` prompt file.
+
 ## 0.1.7 — 2026-08-12
 
 - Fix: `CURSOR_ROUTE_DS_MODEL` / `ANTHROPIC_MODEL` now apply on the `start` product path (live default)

package/CONTRIBUTING.md

@@ -11,6 +11,7 @@ CURSOR_ROUTE_RELAXED=1 ./bin/cursor-route health   # without tmux
 ./bin/cursor-route start --dry-run --worker grok "ping"
 ./bin/cursor-route start --dry-run --lane mid --model flash "ping"
 ./bin/cursor-route start --dry-run --lane mid --model pro "ping"
+./bin/cursor-route start --dry-run --worker deepseek --model flash "ping"   # needs dsh + DEEPSEEK_API_KEY for real starts
 ```
 
 Keep `skills/route-orch/SKILL.md` and `.cursor/skills/route-orch/SKILL.md` identical when editing the skill.

package/README.md

@@ -91,10 +91,10 @@ Working notes for this repo (edit in place): [docs/briefs/WORKING.md](./docs/bri
 
 | Command | Description |
 |---------|-------------|
-| `health` | Gate #1 — tmux, runtime, workers |
+| `health` | Gate #1 — tmux, runtime, workers; proves `lane:mid` is DeepSeek (`lanes.mid` in `--json`) |
 | `start <prompt>` | Spawn worker job (`--worker` / `--lane` / `--model` / `--dir` / `--ask` / `--dry-run` / `--no-tmux`) |
 | `jobs [--json]` | List jobs |
-| `status <id>` | Job + sessionAlive |
+| `status <id>` | Job + sessionAlive; `--json` includes evidence tree (`spawn` / `execute` / `verify`) |
 | `capture <id> [n]` | Last n pane/log lines |
 | `send <id> <msg>` | Mid-task redirect (tmux send-keys) |
 | `attach <id>` | Print `tmux attach` hint |
@@ -102,6 +102,36 @@ Working notes for this repo (edit in place): [docs/briefs/WORKING.md](./docs/bri
 | `sessions` | Managed tmux sessions |
 | `clean [--days N]` | Drop old job files |
 
+## Demo
+
+A dry-run capture (no live workers, no secrets) is committed as a reproducible fixture:
+
+```bash
+# Needs Bun or Node 20+ and a runnable ./bin/cursor-route (clone: bun install)
+docs/fixtures/generate-hero-demo.sh      # regenerate docs/fixtures/hero-demo.log
+```
+
+```text
+$ cursor-route --version
+0.1.9
+
+$ CURSOR_ROUTE_RELAXED=1 cursor-route health
+cursor-route v0.1.9
+health: OK
+
+$ cursor-route start --lane mid --model flash --dry-run "Add a unit test for shellQuote"
+dry-run job a1b2c3d4
+worker: claude-ds
+model:  flash
+command: cd '~/Projects/cursor-route' && '~/.local/bin/claude-ds' -PromptFile '~/.local/share/cursor-route/jobs/a1b2c3d4.prompt' -Model 'deepseek-v4-flash' --dangerously-skip-permissions
+
+$ cursor-route jobs --json
+[]
+```
+
+Full capture: [docs/fixtures/hero-demo.log](./docs/fixtures/hero-demo.log).
+A real hero GIF is still pending — recording steps live in [docs/DEMO_GIF.md](./docs/DEMO_GIF.md).
+
 ## Lanes
 
 | Lane | Worker | Intent |
@@ -110,7 +140,7 @@ Working notes for this repo (edit in place): [docs/briefs/WORKING.md](./docs/bri
 | `mid` | `claude-ds` | Default implement on DeepSeek (**Flash** by default) |
 | `hard` | `grok` | Hard implement on Grok CLI |
 
-Always-approve is **on** by default. Opt out: `--ask` or `CURSOR_ROUTE_ASK=1`.
+Always-approve is **on** by default for **coding worktrees only**. It does not authorize LIVE Discord, trading, or irreversible SaaS. Opt out: `--ask` or `CURSOR_ROUTE_ASK=1`.
 
 ### Mid models (Flash vs Pro)
 
@@ -133,7 +163,7 @@ export CURSOR_ROUTE_DS_MODEL=pro   # also honors ANTHROPIC_MODEL; --model overri
 
 ## DeepSeek setup (the cheap mid-lane — this is the point)
 
-`cursor-route` mid lane runs **DeepSeek**, not Anthropic. Claude Code is only the terminal harness; bills go to DeepSeek when `ANTHROPIC_BASE_URL` points at them.
+`cursor-route` mid lane runs **DeepSeek**, not Anthropic. Claude Code is only the terminal harness; bills go to DeepSeek when `ANTHROPIC_BASE_URL` points at them. `cursor-route health` shows `lane:mid` ✓ only when DeepSeek is proven (`claude-ds` / `deepseek-claude` shim, or stock `claude` with DeepSeek `ANTHROPIC_BASE_URL`) — `CURSOR_ROUTE_ALLOW_ANTHROPIC=1` is not proof.
 
 **Recommended (official DeepSeek → Claude Code):**
 
@@ -146,7 +176,7 @@ export ANTHROPIC_AUTH_TOKEN=YOUR_DEEPSEEK_API_KEY   # from platform.deepseek.com
 export ANTHROPIC_DEFAULT_HAIKU_MODEL=deepseek-v4-flash
 export CLAUDE_CODE_SUBAGENT_MODEL=deepseek-v4-flash
 
-cursor-route health          # worker:claude-ds should be ✓
+cursor-route health          # worker:claude-ds should be ✓; `lane:mid` is ✓ only when DeepSeek is proven
 cursor-route start --lane mid "…"                 # Flash (default)
 cursor-route start --lane mid --model pro "…"     # Pro when you need it
 ```
@@ -155,7 +185,18 @@ Persist the same vars under `~/.claude/settings.json` → `"env": { … }` if yo
 
 **Also accepted:** `claude-ds` or `deepseek-claude` on PATH (Cemini shims). The adapter passes `-Model deepseek-v4-flash|deepseek-v4-pro`.
 
-**Reserved:** `--worker deepseek` is a slot for an official DeepSeek coding harness — not wired yet. Mid stays on `claude-ds`.
+**Experimental:** `--worker deepseek` runs the official DeepSeek Harness (`dsh`, npm `@deepseek-ai/dsh`) as an opt-in worker — **mid stays on `claude-ds`**; don't default lanes here.
+
+```bash
+npm i -g @deepseek-ai/dsh
+export DEEPSEEK_API_KEY=YOUR_DEEPSEEK_API_KEY   # from platform.deepseek.com
+
+cursor-route health                              # worker:deepseek should be ✓
+cursor-route start --worker deepseek "…"         # Flash (default)
+cursor-route start --worker deepseek --model pro "…"   # Pro when you need it
+```
+
+The adapter launches `dsh --profile headless` with a **per-job Cordis patch** (`jobs/<id>.dsh-patch.yml`, mode 0600) that pins `--model flash|pro` (`deepseek-v4-pro[1m]` preserved) — it never rewrites `~/.dsh/settings.yaml`, so parallel jobs don't race. Always-approve maps to `DSH_PERMISSION_MODE=danger-full-access`; `--ask` drops to `workspace-write`. Your `DEEPSEEK_API_KEY` travels via env only — never in the launch command or patch. Override the binary with `CURSOR_ROUTE_DSH_BIN`.
 
 **Not the default:** bare `claude` still talking to Anthropic. Health refuses that so a misconfigured install cannot silently burn frontier $ rates. Escape hatch only: `CURSOR_ROUTE_ALLOW_ANTHROPIC=1`.
 
@@ -235,6 +276,7 @@ If you’d like to tip, use the **donation-only** addresses below (not trading o
 
 | Chain family | Address |
 |--------------|---------|
+| **X Money** (fiat, US) | Request [@Cemini23](https://x.com/Cemini23) in the X app — scan the Request QR |
 | **EVM** (Ethereum, Polygon, Base, Arbitrum, …) | `0x444C5C2eC439E0382aa5a17F70313c536BcC5D58` |
 | **Solana / SVM** | `J4zNn4hK9jTrKBFY8sbAGJHLoZvXvQf4B9pQSbSrocZE` |
 | **Polymarket** (referral) | [polymarket.com/?r=Cemini23](https://polymarket.com/?r=Cemini23) |
@@ -249,8 +291,8 @@ MIT © Cemini — see [LICENSE](LICENSE).
 
 ## Roadmap (explicitly later)
 
-- Homebrew tap  
-- Native DeepSeek harness adapter  
-- Codebase map injection (`--map`)  
-- Cursor CLI `agent` as alternate supervisor  
+- Homebrew tap
+- Stabilize the DeepSeek harness adapter (experimental `--worker deepseek` since 0.1.8)
+- Codebase map injection (`--map`)
+- Cursor CLI `agent` as alternate supervisor
 - Web UI / CAO-style MCP supervisor

package/SUPPORT.md

@@ -6,6 +6,7 @@ Voluntary tips fund wikis, OSS tooling, and public research. **Donation-only add
 
 | Chain family | Address |
 |--------------|---------|
+| **X Money** (fiat, US) | Request [@Cemini23](https://x.com/Cemini23) in the X app — scan the Request QR |
 | **EVM** (Ethereum, Polygon, Base, Arbitrum, …) | `0x444C5C2eC439E0382aa5a17F70313c536BcC5D58` |
 | **Solana / SVM** | `J4zNn4hK9jTrKBFY8sbAGJHLoZvXvQf4B9pQSbSrocZE` |
 | **Polymarket** (referral) | [polymarket.com/?r=Cemini23](https://polymarket.com/?r=Cemini23) |

package/dist/adapters/claude-ds.js

@@ -108,6 +108,24 @@ function resolveClaudeDs() {
     }
     return null;
 }
+/**
+ * Mid lane is proven DeepSeek only via shim (`claude-ds` / `deepseek-claude`)
+ * or stock `claude` routed to DeepSeek. The Anthropic escape hatch is not proof.
+ */
+export function isMidDeepSeekProven() {
+    const resolved = resolveClaudeDs();
+    if (!resolved)
+        return false;
+    return !resolved.mode.startsWith("claude → Anthropic");
+}
+/** Human detail for health `lane:mid` (mode when proven; install hint otherwise). */
+export function midDeepSeekProofDetail() {
+    const resolved = resolveClaudeDs();
+    if (!resolved || resolved.mode.startsWith("claude → Anthropic")) {
+        return "mid not proven DeepSeek — install claude-ds / set ANTHROPIC_BASE_URL=https://api.deepseek.com/anthropic. CURSOR_ROUTE_ALLOW_ANTHROPIC=1 is not proof.";
+    }
+    return `DeepSeek proven (${resolved.mode})`;
+}
 function pickModel(requested, modelId) {
     if (modelId) {
         const alias = requested ?? resolveDsModel(modelId).alias;

package/dist/adapters/deepseek.js

@@ -1,19 +1,138 @@
+import { execSync } from "node:child_process";
+import { existsSync, writeFileSync, unlinkSync } from "node:fs";
+import { shellQuote } from "../util.js";
+import { DS_MODEL_IDS, resolveDsModel, } from "../config.js";
 /**
- * Reserved slot for the official DeepSeek coding harness when it ships.
- * Mid lane stays on claude-ds until then — do not route jobs here.
+ * Experimental official DeepSeek Harness (`dsh`, npm @deepseek-ai/dsh) as a
+ * coding worker — `dsh --profile headless` with a per-job Cordis patch that
+ * pins the model. Mid lane stays on claude-ds; this is an opt-in worker only
+ * (`--worker deepseek`), not a mid replacement.
+ *
+ * We never write ~/.dsh/settings.yaml (parallel jobs would race) and never
+ * put DEEPSEEK_API_KEY in the command or patch — the key travels via plan.env.
  */
+function findDsh() {
+    // Env override lets tests pin a fake dsh — but it must exist, so a stale
+    // override cannot pass health with a dangling path.
+    const override = process.env.CURSOR_ROUTE_DSH_BIN;
+    if (override)
+        return existsSync(override) ? override : null;
+    try {
+        return (execSync("command -v dsh", {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+            // Bun may ignore mutated process.env.PATH unless env is passed explicitly
+            env: { ...process.env },
+        }).trim() || null);
+    }
+    catch {
+        return null;
+    }
+}
+/** Same resolution as claude-ds: passed model/modelId wins, else env, else Flash. */
+function pickModel(requested, modelId) {
+    if (modelId) {
+        const alias = requested ?? resolveDsModel(modelId).alias;
+        return { alias, id: modelId };
+    }
+    if (requested) {
+        return { alias: requested, id: DS_MODEL_IDS[requested] };
+    }
+    // Env default (startJob normally resolves this; kept for direct buildLaunch callers)
+    return resolveDsModel(process.env.CURSOR_ROUTE_DS_MODEL || process.env.ANTHROPIC_MODEL);
+}
+/** Whitelist model ids before interpolating into YAML (no newlines / injection). */
+function assertPatchModelId(modelId) {
+    if (!/^[a-z0-9][a-z0-9.\-[\]]*$/i.test(modelId)) {
+        throw new Error(`Invalid DeepSeek model id for dsh patch: ${modelId}`);
+    }
+    return modelId;
+}
+/** Per-job Cordis patch path. Never reuse the prompt path (would overwrite it). */
+export function patchPathForPrompt(promptFile) {
+    return promptFile.endsWith(".prompt")
+        ? promptFile.replace(/\.prompt$/, ".dsh-patch.yml")
+        : `${promptFile}.dsh-patch.yml`;
+}
+/** Per-job Cordis patch (whole-row replace). `name` is required or dsh silently skips. */
+function patchYaml(modelId) {
+    const id = assertPatchModelId(modelId);
+    return [
+        "- id: agent-default-model",
+        "  name: '@deepseek-ai/dsh-agent-default-model'",
+        "  config:",
+        "    provider: deepseek-official",
+        `    model: '${id}'`,
+    ].join("\n") + "\n";
+}
 export const deepseekAdapter = {
     kind: "deepseek",
-    label: "Official DeepSeek harness (unreleased)",
+    label: "Official DeepSeek Harness (dsh)",
     health() {
+        const binary = findDsh();
+        if (!binary) {
+            return {
+                worker: "deepseek",
+                ok: false,
+                binary: null,
+                detail: "dsh (@deepseek-ai/dsh) not found — install: npm i -g @deepseek-ai/dsh. Mid default remains claude-ds.",
+            };
+        }
+        if (!process.env.DEEPSEEK_API_KEY) {
+            return {
+                worker: "deepseek",
+                ok: false,
+                binary,
+                detail: "DEEPSEEK_API_KEY not set — export your DeepSeek API key to use dsh (@deepseek-ai/dsh). Mid default remains claude-ds.",
+            };
+        }
         return {
             worker: "deepseek",
-            ok: false,
-            binary: null,
-            detail: "unreleased — mid lane uses claude-ds (DeepSeek behind Claude Code). See README.",
+            ok: true,
+            binary,
+            detail: "ok (dsh @deepseek-ai/dsh headless; mid default remains claude-ds)",
         };
     },
-    buildLaunch() {
-        throw new Error("Official DeepSeek harness is not available yet — use --lane mid / --worker claude-ds");
+    buildLaunch({ promptFile, cwd, alwaysApprove, model, modelId, dryRun }) {
+        // Missing dsh is tolerated here so `--dry-run` can still print the command;
+        // real starts are gated by the health preflight (binary + DEEPSEEK_API_KEY).
+        const binary = findDsh() || "dsh";
+        const choice = pickModel(model, modelId);
+        // Per-job patch next to the prompt file (never touch ~/.dsh/settings.yaml).
+        const patchFile = patchPathForPrompt(promptFile);
+        writeFileSync(patchFile, patchYaml(choice.id), { mode: 0o600 });
+        if (dryRun) {
+            // Dry-run keeps no durable artifacts (jobs.ts removes the prompt likewise).
+            try {
+                unlinkSync(patchFile);
+            }
+            catch {
+                /* ignore */
+            }
+        }
+        // Launcher flags before the task; prompt inlined via cat (never the key).
+        const parts = [
+            shellQuote(binary),
+            "--profile",
+            "headless",
+            "--patch",
+            shellQuote(patchFile),
+            `"$(cat ${shellQuote(promptFile)})"`,
+        ];
+        const ask = process.env.CURSOR_ROUTE_ASK === "1";
+        const skip = alwaysApprove && !ask;
+        const env = {
+            DSH_PERMISSION_MODE: skip ? "danger-full-access" : "workspace-write",
+        };
+        // Key travels via env only — never interpolated into command or patch.
+        if (process.env.DEEPSEEK_API_KEY) {
+            env.DEEPSEEK_API_KEY = process.env.DEEPSEEK_API_KEY;
+        }
+        return {
+            worker: "deepseek",
+            command: `cd ${shellQuote(cwd)} && ${parts.join(" ")}`,
+            alwaysApprove: skip,
+            env,
+        };
     },
 };

package/dist/cli.js

@@ -6,7 +6,7 @@ import { readFileSync, existsSync, realpathSync, statSync } from "node:fs";
 import { resolve, basename } from "node:path";
 import { config, WORKERS, LANES, resolveDsModel, } from "./config.js";
 import { runHealth, printHealth } from "./health.js";
-import { startJob, listJobs, readJob, killJob, cleanJobs, jobPaths, refreshStatus, } from "./jobs.js";
+import { startJob, listJobs, readJob, killJob, cleanJobs, jobPaths, refreshStatus, jobEvidence, } from "./jobs.js";
 import { capturePane, sendKeys, attachHint, listManagedSessions, sessionExists, } from "./tmux.js";
 import { looksLikeSecretMaterial, redactSecrets } from "./secrets.js";
 function usage(exitCode = 0) {
@@ -16,11 +16,11 @@ Cursor stays the brain. Grok CLI + DeepSeek (claude-ds) + OpenRouter (easy) are
 
 Usage:
   cursor-route --version
-  cursor-route health [--json]
+  cursor-route health [--json]          # JSON includes lanes.mid (DeepSeek proof)
   cursor-route start <prompt> [options]
   cursor-route start --prompt-file <path> [options]
   cursor-route jobs [--json] [--limit N]
-  cursor-route status <jobId> [--json]
+  cursor-route status <jobId> [--json]  # JSON includes evidence spawn/execute/verify
   cursor-route capture <jobId> [lines]
   cursor-route send <jobId> <message>
   cursor-route attach <jobId>
@@ -29,9 +29,9 @@ Usage:
   cursor-route clean [--days N]
 
 Start options:
-  --worker <grok|claude-ds|openrouter>  Worker adapter (default: grok; deepseek = reserved slot)
+  --worker <grok|claude-ds|openrouter|deepseek>  Worker adapter (default: grok; deepseek = experimental official dsh)
   --lane <easy|mid|hard>                Lane → worker (easy=openrouter, mid=claude-ds, hard=grok)
-  --model <flash|pro>                   Mid DeepSeek only (default: flash / CURSOR_ROUTE_DS_MODEL). Parsed only for claude-ds
+  --model <flash|pro>                   Mid DeepSeek only (default: flash / CURSOR_ROUTE_DS_MODEL). Parsed for claude-ds + deepseek
   --dir <path>                          Working directory (default: cwd)
   --ask                                 Disable always-approve for this job
   --dry-run                             Print launch command; do not start
@@ -47,6 +47,8 @@ Env:
   CURSOR_ROUTE_DS_MODEL              Default mid model flash|pro (or deepseek-v4-pro[1m]); overridden by --model
   CURSOR_ROUTE_GROK_BIN              Override the grok binary path (tests / power users)
   CURSOR_ROUTE_CLAUDE_DS_BIN         Override the claude-ds binary path (tests / power users)
+  CURSOR_ROUTE_DSH_BIN               Override the dsh binary path (tests / power users)
+  DEEPSEEK_API_KEY                   DeepSeek API key (required for --worker deepseek)
   OPENROUTER_API_KEY                 OpenRouter key (required for --worker openrouter / --lane easy)
   CURSOR_ROUTE_OPENROUTER_MODEL      OpenRouter model (default: openrouter/free)
   OPENROUTER_BASE_URL                OpenRouter API base (default: https://openrouter.ai/api/v1)
@@ -221,8 +223,9 @@ async function main() {
         const resolvedWorker = worker ?? (lane ? config.laneWorkers[lane] : config.defaultWorker);
         let model;
         let modelId;
-        // --model is DeepSeek/claude-ds only; ignore (do not validate) for other workers
-        if (f.model !== undefined && resolvedWorker === "claude-ds") {
+        // --model is DeepSeek-only (claude-ds mid lane + experimental deepseek worker);
+        // ignore (do not validate) for other workers
+        if (f.model !== undefined && (resolvedWorker === "claude-ds" || resolvedWorker === "deepseek")) {
             try {
                 const choice = asDsModelChoice(f.model);
                 if (choice) {
@@ -353,11 +356,13 @@ async function main() {
                 }
             })())
             : sessionExists(job.tmuxSession);
-        const view = { ...job, sessionAlive: alive };
+        const evidence = jobEvidence(job, alive);
+        const view = { ...job, sessionAlive: alive, evidence };
         if (json)
             console.log(JSON.stringify(view, null, 2));
         else {
             console.log(`${job.id}  ${job.status}  worker=${job.worker}${job.model ? `  model=${job.model}` : ""}  sessionAlive=${alive}`);
+            console.log("evidence: spawn/execute/verify (claim=unverified)");
             if (job.error)
                 console.log(`error: ${job.error}`);
         }

package/dist/config.js

@@ -65,13 +65,16 @@ function maxConcurrentJobsFromEnv() {
  */
 export const config = {
     product: "cursor-route",
-    version: "0.1.7",
+    version: "0.1.9",
     get jobsDir() {
         return defaultJobsDir();
     },
     tmuxPrefix: "cursor-route",
     defaultWorker: "grok",
-    /** Lane → default worker (Cemini /route public core). */
+    /**
+     * Lane → default worker (Cemini /route public core).
+     * `deepseek` is experimental only — mid stays on claude-ds.
+     */
     laneWorkers: {
         easy: "openrouter",
         mid: "claude-ds",

package/dist/health.js

@@ -1,5 +1,6 @@
 import { execSync } from "node:child_process";
 import { allAdapters } from "./adapters/index.js";
+import { isMidDeepSeekProven, midDeepSeekProofDetail } from "./adapters/claude-ds.js";
 import { config } from "./config.js";
 import { isTmuxAvailable } from "./tmux.js";
 import { commandExists } from "./util.js";
@@ -42,6 +43,14 @@ export function runHealth() {
             detail: h.binary ? `${h.detail} @ ${h.binary}` : h.detail,
         });
     }
+    // Informational: mid is proven DeepSeek (not the overall OR-gate).
+    const midOk = isMidDeepSeekProven();
+    const midDetail = midDeepSeekProofDetail();
+    checks.push({
+        name: "lane:mid",
+        ok: midOk,
+        detail: midDetail,
+    });
     // Optional supervisor probe (v0 skill-only; Cursor CLI agent is informational)
     const agentBin = (commandExists("agent") && "agent") ||
         (commandExists("cursor-agent") && "cursor-agent") ||
@@ -78,6 +87,9 @@ export function runHealth() {
         product: config.product,
         version: config.version,
         checks,
+        lanes: {
+            mid: { worker: "claude-ds", deepseek: midOk, detail: midDetail },
+        },
     };
 }
 export function printHealth(report, asJson) {
@@ -97,4 +109,8 @@ export function printHealth(report, asJson) {
         console.log("Fix the ✗ items, then re-run: cursor-route health");
         console.log("Tip: start with one worker (grok OR claude-ds) before parallel demos.");
     }
+    else if (report.checks.some((c) => c.name === "lane:mid" && !c.ok)) {
+        console.log("");
+        console.log("Tip: health OK without a DeepSeek mid — --lane mid will fail until lane:mid is ✓.");
+    }
 }

package/dist/jobs.js

@@ -59,6 +59,29 @@ export function readJob(id) {
 export function writeJob(job) {
     writeSecure(jobPaths(job.id).json, JSON.stringify(job, null, 2));
 }
+export function jobEvidence(job, sessionAlive) {
+    return {
+        spawn: {
+            jobId: job.id,
+            worker: job.worker,
+            lane: job.lane ?? null,
+            model: job.model ?? null,
+            startedAt: job.startedAt ?? job.createdAt,
+        },
+        execute: {
+            status: job.status,
+            exitCode: job.exitCode ?? null,
+            tmuxSession: job.tmuxSession,
+            pid: job.pid ?? null,
+            sessionAlive,
+        },
+        verify: {
+            captureHint: `cursor-route capture ${job.id}`,
+            logBytes: job.logBytes ?? null,
+            claim: "unverified",
+        },
+    };
+}
 function pidAlive(pid) {
     try {
         process.kill(pid, 0);
@@ -73,6 +96,9 @@ function pidAlive(pid) {
             encoding: "utf8",
             stdio: ["ignore", "pipe", "ignore"],
         });
+        // spawnSync does not throw on EPERM (macOS sandbox); empty stdout is not "dead".
+        if (r.error || r.status !== 0)
+            return true;
         const state = (r.stdout || "").trim();
         return state !== "" && !state.startsWith("Z");
     }
@@ -219,7 +245,7 @@ export function startJob(opts) {
     writeSecure(paths.prompt, opts.prompt);
     let model;
     let modelId;
-    if (worker === "claude-ds") {
+    if (worker === "claude-ds" || worker === "deepseek") {
         if (opts.model) {
             model = opts.model;
             modelId = opts.modelId ?? DS_MODEL_IDS[opts.model];
@@ -249,6 +275,7 @@ export function startJob(opts) {
             alwaysApprove,
             model,
             modelId,
+            dryRun: Boolean(opts.dryRun),
         });
     }
     catch (e) {
@@ -421,7 +448,7 @@ export function cleanJobs(olderThanDays = 7) {
             if (Number.isFinite(t) &&
                 t < cutoff &&
                 (job.status === "completed" || job.status === "failed" || job.status === "killed")) {
-                for (const ext of [".json", ".prompt", ".log"]) {
+                for (const ext of [".json", ".prompt", ".log", ".dsh-patch.yml"]) {
                     const fp = underJobsDir(id, ext);
                     if (existsSync(fp))
                         unlinkSync(fp);

package/docs/DEMO_GIF.md

@@ -1,5 +1,21 @@
 # Hero demo recording (GIF)
 
+## Status
+
+No real GIF yet — the checkbox stays open until a `docs/fixtures/hero.gif` exists.
+
+Committed fixture for now: [docs/fixtures/hero-demo.log](./fixtures/hero-demo.log),
+a reproducible dry-run capture (no live workers, no secrets). Regenerate it with:
+
+```bash
+docs/fixtures/generate-hero-demo.sh
+```
+
+Also see [docs/fixtures/claude-ds-smoke.log](./fixtures/claude-ds-smoke.log)
+(headless `claude-ds` smoke proof). Both are machine-agnostic.
+
+## Recording the real GIF (later)
+
 tmux is required for the viral attach/send demo. On this laptop brew needs sudo — record after:
 
 ```bash
@@ -27,4 +43,4 @@ If you previously exported `$HOME/.cursor-route/bin`, that dir is stale — remo
 
 Record with [asciinema](https://asciinema.org/) or CleanShot → export GIF → `docs/fixtures/hero.gif`.
 
-Until then, use `docs/fixtures/claude-ds-smoke.log` as the committed proof fixture.
+When a real GIF lands, check off the **Hero GIF** item in `docs/briefs/WORKING.md` and reference it here.

package/docs/briefs/WORKING.md

@@ -1,9 +1,9 @@
 ---
 title: cursor-route workspace — working brief (edit in place)
 repo: ~/Projects/cursor-route
-npm: cursor-route@0.1.7 (LIVE on npm latest)
+npm: cursor-route@0.1.9 (not published — this WorkDir only)
 created: 2026-08-12
-updated: 2026-08-12
+updated: 2026-08-18
 ---
 
 # cursor-route — living brief
@@ -22,9 +22,9 @@ Cursor Agent plans. Workers run in tmux via `cursor-route`:
 | `mid` | claude-ds (DeepSeek behind Claude Code) | Default implement (**Flash**; `--model pro` when needed) |
 | `hard` | Grok CLI | Hard implement |
 
-Always-approve on (`--ask` / `CURSOR_ROUTE_ASK=1` to opt out). Jobs live in `~/.local/share/cursor-route/jobs`, not in this clone.
+Always-approve on for coding worktrees (`--ask` / `CURSOR_ROUTE_ASK=1` to opt out) — not LIVE Discord/trading. Jobs live in `~/.local/share/cursor-route/jobs`, not in this clone.
 
-Install: `npm i -g cursor-route` → **0.1.7**. Release notes: [CHANGELOG.md](../../CHANGELOG.md).
+Install: `npm i -g cursor-route` → **0.1.9** once published. Release notes: [CHANGELOG.md](../../CHANGELOG.md).
 
 ## Open (edit / check off)
 
@@ -33,9 +33,12 @@ Install: `npm i -g cursor-route` → **0.1.7**. Release notes: [CHANGELOG.md](..
   - [x] add `--model flash|pro` on `start`
   - [x] document Grok **auth** ≠ usage-out (`grok login`) vs quota → Pro stand-in
 - [x] **Skill `route-orch`** — Flash/Pro table in `skills/` + `.cursor/skills/`
-- [x] **Official DeepSeek Harness** — `deepseek` adapter slot present; mid stays on claude-ds
+- [x] **Official DeepSeek Harness** — `deepseek` adapter slot present; `@deepseek-ai/dsh` 0.1.0-rc.6 (2026-08-13, github.com/deepseek-ai/deepseek-harness, MIT) is a developer-preview plugin kernel (web UI + `dsh --profile headless "job"`), not a Claude Code replacement; mid does not swap
 - [x] **0.1.7 debug fixes** — env default wired through `startJob`; Anthropic hatch omits DS ids; preserve `[1m]`
-- [ ] **Hero GIF** — still outstanding (`docs/DEMO_GIF.md`)
+- [x] **Experimental `--worker deepseek`** — 0.1.8: real dsh adapter (`dsh --profile headless` + per-job Cordis patch pins the model; never writes `~/.dsh/settings.yaml`). Always-approve → `DSH_PERMISSION_MODE=danger-full-access`, `--ask` → `workspace-write`; key via env only. Health ✓ needs `dsh` + `DEEPSEEK_API_KEY` (override `CURSOR_ROUTE_DSH_BIN`). Mid stays **claude-ds**.
+- [x] **route-orch brief steals (2026-08-14)** — AutoDesign / misevolution / Vero habits into the public skill: **Verify / claim closeout** (external eval contract; activity ≠ verification), **Eval & skill hygiene** (mid-run Verify-rewrite ban; skill misevolution HITL — no auto-promotion of worker-trajectory variants; verify-fail → reconsider plan/definition + stage attribution spawn/execute/verify); handoff shape Success criteria + Verify + NEVER; skills synced; mid stays claude-ds.
+- [x] **Health proves mid DeepSeek + evidence tree** — 0.1.9: `lane:mid` ✓ only when DeepSeek is proven (shim or DeepSeek `ANTHROPIC_BASE_URL`; Anthropic hatch is not proof); health JSON `lanes.mid`; `status --json` evidence tree (`spawn` / `execute` / `verify.claim=unverified`); skill health-before-mid + evidence-tree closeout. Mid stays **claude-ds**.
+- [ ] **Hero GIF** — still outstanding; dry-run fixture ships as the substitute for now (`docs/fixtures/hero-demo.log` — see `docs/DEMO_GIF.md`)
 - [x] **Do not** paste private `ROUTE_KIT`, SIP, prod paths, or hang-watchdog env into this public repo
 
 ## Repo map
@@ -44,7 +47,7 @@ Install: `npm i -g cursor-route` → **0.1.7**. Release notes: [CHANGELOG.md](..
 |------|------|
 | `src/cli.ts` | `health` / `start` / `jobs` / `capture` / `send` / `kill` |
 | `src/adapters/claude-ds.ts` | Mid worker; DeepSeek URL required; `--model` → `-Model` |
-| `src/adapters/deepseek.ts` | Reserved unreleased harness slot |
+| `src/adapters/deepseek.ts` | Experimental dsh worker (`--worker deepseek`; mid stays claude-ds) |
 | `src/adapters/grok.ts` | Hard worker |
 | `src/adapters/openrouter.ts` | Easy worker |
 | `skills/route-orch/SKILL.md` | Cursor skill — spawn CLI, do not implement in-session |
@@ -59,3 +62,9 @@ Install: `npm i -g cursor-route` → **0.1.7**. Release notes: [CHANGELOG.md](..
 | 2026-08-12 | Shipped Flash default + `--model pro`, deepseek slot, skill table → 0.1.6. |
 | 2026-08-12 | npm `cursor-route@0.1.6` LIVE; CHANGELOG + README skill-install path fixed. |
 | 2026-08-12 | Grok debug → 0.1.7: env DS default, Anthropic hatch, `[1m]` preserve. |
+| 2026-08-13 | Hero demo dry-run fixture + docs: `docs/fixtures/generate-hero-demo.sh` → `hero-demo.log`; README Demo, DEMO_GIF.md, demo-notes pointer. Real GIF still open. |
+| 2026-08-13 | GPTSOL fixes: scrub inherited env/paths, stable job ids, ignore `docs/briefs/handoffs/`, GIF checkbox wording. |
+| 2026-08-14 | DeepSeek Harness eval: `@deepseek-ai/dsh` 0.1.0-rc.6 is a developer-preview plugin kernel, not a mid replacement; `--worker deepseek` stays unhealthy; mid remains claude-ds (docs-only, no version bump). |
+| 2026-08-14 | Experimental `--worker deepseek` wired to official dsh (headless + per-job patch + `DSH_PERMISSION_MODE` + key-via-env); `--model` applies to claude-ds + deepseek; mid stays claude-ds → 0.1.8 LIVE. |
+| 2026-08-14 | route-orch brief steals (AutoDesign / misevolution / Vero): **Verify / claim closeout** + **Eval & skill hygiene**; handoff Success criteria + Verify + NEVER; both skill copies synced; mid stays claude-ds. Docs-only, no version bump. |
+| 2026-08-18 | Health `lane:mid` + `lanes.mid` prove DeepSeek; status evidence tree (`verify.claim` stays unverified); skill health-before-mid + closeout tree; mid stays claude-ds → 0.1.9 (not published). |

package/docs/demo-notes.md

@@ -1,13 +1,15 @@
 # Demo fixture log (no secrets)
 
+> **Current fixture:** [docs/fixtures/hero-demo.log](./fixtures/hero-demo.log) — generated, dry-run, machine-agnostic (regenerate: `docs/fixtures/generate-hero-demo.sh`). Real GIF still pending: [DEMO_GIF.md](./DEMO_GIF.md).
+
 Simulated capture output for README / tweet assets — replace with a real GIF once tmux is available.
 
 ```
 $ cursor-route --version
-0.1.6
+0.1.9
 
 $ cursor-route health
-cursor-route v0.1.6
+cursor-route v0.1.9
 health: OK
   ✓ tmux
   ✓ runtime          bun ok
@@ -15,7 +17,8 @@ health: OK
   ✓ worker:grok
   ✓ worker:claude-ds
   ✓ worker:openrouter
-  ✗ worker:deepseek  unreleased — mid lane uses claude-ds
+  ✗ worker:deepseek  dsh not found — mid default remains claude-ds
+  ✓ lane:mid         DeepSeek proven (claude-ds (DeepSeek shim))
   ✓ jobs_dir         ~/.local/share/cursor-route/jobs
 
 $ cursor-route start --lane mid "Add a failing test then make it pass"