dsh-switchman 1.11.2 → 1.11.4

package/README.md

@@ -72,7 +72,7 @@ Worth installing even with a single model — watermark control and tiered verif
 
    - **Interface** — the plugin's own UI language. The dropdown in the shot sits at English — a live preview of switching; the shipped default is Auto (follows the DSH app language). Picking a language flips the whole page on the spot and is remembered after save; switch back to Auto anytime.
    - **Languages** — the languages of agent output. The scope in the shot is "Global (this profile)" (per-project works too, each reading `.switchman/lang.json`); the reply / code comments / documents dropdowns in the shot all sit at English, each displayed as "endonym (tag)" — e.g. "English (en)" — with a "current: …" status line beneath each. Leaving all three unset is fine too: asked once on first use, remembered from then on.
-   - **Dispatch pools** — six cards in two rows of three: economy, mechanical, main on top; hard, vision, review below. Tick candidate models grouped by provider; tick "manual order" and a card becomes a numbered priority list reorderable with ↑ ↓ ×; every route can pin a thinking effort (default "follow lane"). The summary line at the top updates live — in the shot: "4/6 pools configured · 2 ranked · mode advice".
+   - **Dispatch pools** — six cards in two rows of three: economy, mechanical, main on top; hard, vision, review below. Tick candidate models grouped by provider; tick "manual order" and a card becomes a numbered priority list reorderable with ⤒ (Move to top), ↑, ↓, ×; every route can pin a thinking effort (default "follow lane"). The summary line at the top updates live — in the shot: "4/6 pools configured · 2 ranked · mode advice".
    - **Capability ranking + enforcement mode** — the union of selected models across the six pools, ranked by capability, strongest first (the shot anchors glm-5.3 at S and glm-5.3-flash at A), reorderable and removable; enforcement mode advice / force (force = out-of-pool models rejected outright).
    - **Agent teams** — the two toggles for team mode and whitelist sync, both off by default; in the shot they're on, with a sync status line beneath the toggle.
    - **Context watermark** — the three thresholds (80000 / 120000 / 150000 in the shot), the single-read budget (3000), hard-tier behavior (throttle-pass / block), the auto-handover toggle, and subagent independent caps all live here. Bottom command row: `/ctx-pause` pause intervention · `/ctx-resume` resume · `/ctx-handover` write the handover doc and compact now (it steers the session to an idle boundary before compacting — the result can take a few minutes).
@@ -154,7 +154,7 @@ All keys live in Settings → dsh-switchman; defaults from `host/config.js`:
 
 ## How it works
 
-- The host half (`index.js` + `host/`) injects the byte-stable system-prompt sections (language / lanes / watermark protocol / teams) plus the live watermark line through the tail runtime-context snapshot (a channel that appends instead of rewriting the prompt head, so the provider prompt cache stays intact), the read-budget plus enforce double gate, and four slash commands (the ctx trio + `/vision`). A saved setting takes effect at the very next prompt assembly — no restart.
+- The host half (`index.js` + `host/`) injects the byte-stable system-prompt sections (language / lanes / watermark protocol / teams / PTC guard) plus the live watermark line through the tail runtime-context snapshot (a channel that appends instead of rewriting the prompt head, so the provider prompt cache stays intact), the read-budget plus enforce double gate, and four slash commands (the ctx trio + `/vision`). A saved setting takes effect at the very next prompt assembly — no restart. In PTC sessions (programmatic tool calls) the PTC guard renders as the final section and restates that every named tool must be invoked inside a `run_code` program (`await tools.name(args)`), making `unknown tool` rejections much less likely when doctrines or skill catalogs name tools directly (a prompt-level mitigation, not a hard guarantee).
 - The client half (`client.js`) renders the settings page, the ⚡ badge and ◇ model marker in the session header, and the live handover indicator; config snapshots are read and written through the Host route family.
 - The "Switchman Dispatch Center" entry in the home sidebar opens that same settings page as a center panel in one click; the original settings entry stays.
 - `cordis.patch.yml` keeps the factory preset plugin list fully intact and only extends the persona suffix; the Agent Teams tools themselves come from the factory bundle and switch on automatically with teams mode.
@@ -162,7 +162,7 @@ All keys live in Settings → dsh-switchman; defaults from `host/config.js`:
 ## Maintenance notes
 
 - After a DSH upgrade, if the factory preset plugin list changed, re-sync `cordis.patch.yml` from the new `presets/*.patch.yml` (keeping the doctrine suffix and the compaction arbitration — `auto: false` on the `compaction-basic` rows), then reinstall.
-- Protocol lines (`[SWITCHMAN:LANG|POOLS|WATERMARK|TEAMS]`) are deliberately English and byte-stable — don't localize them.
+- Protocol lines (`[SWITCHMAN:LANG|POOLS|WATERMARK|TEAMS|PTC]`) are deliberately English and byte-stable — don't localize them.
 - `npm pack --dry-run` should keep the audited 60-file / ~380 kB tarball shape (~1.26 MB unpacked). `docs/` stays out of the package (it is not in `package.json files`), while the 11 `README.*` translations are always shipped by npm.
 - **Zero runtime dependencies — a hard invariant.** Host-plane packages (`@deepseek-ai/schemastery`, cordis, …) are declared as `peerDependencies` only, and the running DSH satisfies them from its own copy. An ordinary `dependencies` entry is physically installed into the profile workspace (`<profile>/node_modules/…`), where it shadows the host's copy for every other profile-resident plugin — this is exactly what crashed the dshmarket plugin market while 1.7.0 carried schemastery as a dependency (two schemastery instances in one process; the market's schemas no longer matched the host's). `scripts/validate.mjs` fails if a `dependencies` entry ever reappears, so installing, updating, or removing dsh-switchman can never touch what dshmarket or any other community bundle resolves at runtime.
 

package/README.zh.md

@@ -72,7 +72,7 @@ dsh-switchman 是一个 [DeepSeek Harness](https://github.com/deepseek-ai/deepse
 
    - **界面**——插件自己的界面语言。图中「自动」即跟随 DSH 应用语言；选具体语言则当场整页切换，保存后记住，随时切回「自动」。
    - **语言**——智能体产出物的语言。作用域图中为「全局（本 profile）」（也可按项目，各自读 `.switchman/lang.json`）；回复 / 代码注释 / 文档三个下拉图中都定在简体中文，每项下方有「当前：…」状态行。全不设也行，首次用到问一次、记住即用。
-   - **派发池**——六张卡片两行三列：上排轻量、机械、主力，下排高难、多模态、复审。卡片按供应商分组勾候选模型；勾上「手动序」变成编号优先列表，用 ↑ ↓ × 调顺序；每条路线可钉思考强度（默认「跟随泳道」）。顶部汇总行实时更新，图中即「已配置 4/6 池 · 排名 2 项 · 模式 建议」。
+   - **派发池**——六张卡片两行三列：上排轻量、机械、主力，下排高难、多模态、复审。卡片按供应商分组勾候选模型；勾上「手动序」变成编号优先列表，用 ⤒（一键登顶）、↑、↓、× 调顺序；每条路线可钉思考强度（默认「跟随泳道」）。顶部汇总行实时更新，图中即「已配置 4/6 池 · 排名 2 项 · 模式 建议」。
    - **能力排序 + 执行模式**——六池选中模型的并集按能力排序、最强在前（图中 glm-5.3 锚 S 档、glm-5.3-flash 锚 A 档），可调序、可删减；执行模式建议 / 强制（强制 = 池外模型直接拒绝）。
    - **智能体团队**——团队模式与白名单同步两个开关，默认全关；图中为开启状态，开关下方有同步状态行。
    - **上下文水位**——三档阈值（图中 80000 / 120000 / 150000）、单次读取预算（3000）、硬档行为（限流放行 / 拦截）、自动交接开关、子智能体独立上限，都在这区。底部一行命令：`/ctx-pause` 暂停干预 · `/ctx-resume` 恢复 · `/ctx-handover` 立即交接（它会把会话引导到空闲边界再压缩，结果可能要等几分钟）。

package/client.js

@@ -845,6 +845,7 @@ window.__ModuleLoader__.load({
 					'开启后按列表顺序派发（首个即首选）；未开启按能力排序自动排。',
 				poolManualSelected: '已选 · 派发优先序',
 				poolManualAddable: '可添加',
+				poolMoveTop: '登顶',
 				poolMoveUp: '上移',
 				poolMoveDown: '下移',
 				poolRemoveOne: '移除',
@@ -1113,6 +1114,7 @@ window.__ModuleLoader__.load({
 					'When on, dispatch follows the listed order (head = first choice); when off, lanes are ordered by capability automatically.',
 				poolManualSelected: 'Selected · dispatch priority',
 				poolManualAddable: 'Add models',
+				poolMoveTop: 'Move to top',
 				poolMoveUp: 'Move up',
 				poolMoveDown: 'Move down',
 				poolRemoveOne: 'Remove',
@@ -1397,6 +1399,7 @@ window.__ModuleLoader__.load({
 				poolManualHelp: '開啟後按清單順序派發（首個即首選）；未開啟按能力排序自動排。',
 				poolManualSelected: '已選 · 派發優先序',
 				poolManualAddable: '可新增',
+				poolMoveTop: '登頂',
 				poolMoveUp: '上移',
 				poolMoveDown: '下移',
 				poolRemoveOne: '移除',
@@ -1644,6 +1647,7 @@ window.__ModuleLoader__.load({
 				poolManualHelp: 'オンにするとリストの順序でディスパッチします（先頭＝第一候補）。オフなら能力順で自動的に並びます。',
 				poolManualSelected: '選択済み · ディスパッチ優先順',
 				poolManualAddable: 'モデルを追加',
+				poolMoveTop: '先頭へ',
 				poolMoveUp: '上へ',
 				poolMoveDown: '下へ',
 				poolRemoveOne: '削除',
@@ -1875,6 +1879,7 @@ window.__ModuleLoader__.load({
 				poolManualHelp: '켜면 목록 순서대로 디스패치합니다(맨 앞이 제1순위). 끄면 능력 순으로 자동 정렬됩니다.',
 				poolManualSelected: '선택됨 · 디스패치 우선순위',
 				poolManualAddable: '모델 추가',
+				poolMoveTop: '맨 위로',
 				poolMoveUp: '위로',
 				poolMoveDown: '아래로',
 				poolRemoveOne: '제거',
@@ -2105,6 +2110,7 @@ window.__ModuleLoader__.load({
 				poolManualHelp: 'Ein: Der Versand folgt der gelisteten Reihenfolge (oben = erste Wahl); aus: Lanes werden automatisch nach Fähigkeit sortiert.',
 				poolManualSelected: 'Ausgewählt · Dispatch-Priorität',
 				poolManualAddable: 'Modelle hinzufügen',
+				poolMoveTop: 'Ganz nach oben',
 				poolMoveUp: 'Nach oben',
 				poolMoveDown: 'Nach unten',
 				poolRemoveOne: 'Entfernen',
@@ -2338,6 +2344,7 @@ window.__ModuleLoader__.load({
 				poolManualHelp: 'Activado, el despacho sigue el orden de la lista (el primero es la primera opción); desactivado, los carriles se ordenan automáticamente por capacidad.',
 				poolManualSelected: 'Seleccionados · prioridad de despacho',
 				poolManualAddable: 'Añadir modelos',
+				poolMoveTop: 'Mover al principio',
 				poolMoveUp: 'Subir',
 				poolMoveDown: 'Bajar',
 				poolRemoveOne: 'Quitar',
@@ -2572,6 +2579,7 @@ window.__ModuleLoader__.load({
 				poolManualHelp: 'Activé, le dispatch suit l’ordre affiché (la tête = premier choix) ; désactivé, les couloirs sont ordonnés par capacité automatiquement.',
 				poolManualSelected: 'Sélectionnés · priorité de dispatch',
 				poolManualAddable: 'Ajouter des modèles',
+				poolMoveTop: 'Placer en tête',
 				poolMoveUp: 'Monter',
 				poolMoveDown: 'Descendre',
 				poolRemoveOne: 'Retirer',
@@ -2806,6 +2814,7 @@ window.__ModuleLoader__.load({
 				poolManualHelp: 'Attivo, il dispatch segue l’ordine elencato (il primo della lista = prima scelta); spento, le corsie vengono ordinate per capacità automaticamente.',
 				poolManualSelected: 'Selezionati · priorità di dispatch',
 				poolManualAddable: 'Aggiungi modelli',
+				poolMoveTop: 'Porta in cima',
 				poolMoveUp: 'Sposta su',
 				poolMoveDown: 'Sposta giù',
 				poolRemoveOne: 'Rimuovi',
@@ -3040,6 +3049,7 @@ window.__ModuleLoader__.load({
 				poolManualHelp: 'Ligado, o despacho segue a ordem listada (o primeiro = primeira escolha); desligado, as faixas são ordenadas por capacidade automaticamente.',
 				poolManualSelected: 'Selecionados · prioridade de despacho',
 				poolManualAddable: 'Adicionar modelos',
+				poolMoveTop: 'Mover para o topo',
 				poolMoveUp: 'Mover para cima',
 				poolMoveDown: 'Mover para baixo',
 				poolRemoveOne: 'Remover',
@@ -3274,6 +3284,7 @@ window.__ModuleLoader__.load({
 				poolManualHelp: 'Включено — диспетчеризация идёт по списку (голова списка = первый выбор); выключено — полосы упорядочиваются по силе автоматически.',
 				poolManualSelected: 'Выбрано · приоритет диспетчеризации',
 				poolManualAddable: 'Добавить модели',
+				poolMoveTop: 'В начало',
 				poolMoveUp: 'Выше',
 				poolMoveDown: 'Ниже',
 				poolRemoveOne: 'Убрать',
@@ -4613,6 +4624,7 @@ window.__ModuleLoader__.load({
 			onToggleManual,
 			onSetEffort,
 			onMove,
+			onMoveTop,
 			onRemove,
 			onSelectAll,
 			onClear,
@@ -4774,6 +4786,20 @@ window.__ModuleLoader__.load({
 											h(
 												'div',
 												{ style: STYLE.rankActions },
+												h(
+													'button',
+													{
+														type: 'button',
+														onClick: () => {
+															onMoveTop(index);
+														},
+														disabled: !editable || index === 0,
+														title: t('poolMoveTop'),
+														'aria-label': t('poolMoveTop'),
+														style: STYLE.iconButton,
+													},
+													'⤒',
+												),
 												h(
 													'button',
 													{
@@ -5268,6 +5294,18 @@ window.__ModuleLoader__.load({
 				})));
 			}
 
+			/** Manual order: move the route at index to the head of the
+			 *  pool in one step (boundary-guarded: a no-op when already first). */
+			function movePoolRouteToTop(field, index) {
+				const pool = values[field];
+				if (index <= 0 || index >= pool.length) return;
+				const next = [pool[index], ...pool.slice(0, index), ...pool.slice(index + 1)];
+				edit(field, next.map((route) => ({
+					provider: route.provider,
+					model: route.model,
+				})));
+			}
+
 			/** Manual order: remove the route at index. */
 			function removePoolRoute(field, index) {
 				const next = [...values[field]];
@@ -6383,6 +6421,9 @@ window.__ModuleLoader__.load({
 								onMove: (index, delta) => {
 									movePoolRoute(field, index, delta);
 								},
+								onMoveTop: (index) => {
+									movePoolRouteToTop(field, index);
+								},
 								onRemove: (index) => {
 									removePoolRoute(field, index);
 								},

package/host/ptc-guard.js

@@ -0,0 +1,114 @@
+/** dsh-switchman PTC direct-call guard layer.
+ *
+ * Symptom (observed 2026-11-12, session-level): in PTC sessions the model
+ * calls a named tool DIRECTLY — e.g. `spawn_teammate` or `skill` after the
+ * teams doctrine or the skill catalog names it — and the harness rejects the
+ * whole call with `unknown tool "x": only \`run_code\` is callable directly`.
+ * The PTC executor's own `PTC_ONLY` section (order 800) states the rule once
+ * near the top, but every later doctrine that names tools directly erodes it.
+ *
+ * Second symptom (same day, session 22ced69f): the model sets `sandbox_permissions`
+ * on a call while the session already runs `danger-full-access`; the escalation
+ * request is rejected outright with `sandbox escalation to "workspace-write" is
+ * not strictly wider than this call's current "danger-full-access" mode` — an
+ * error with no correction hint. The clause below also states the never-set
+ * default and the retry-without-the-field fix.
+ *
+ * Fix: one extra dynamic systemPrompt section (order 10510 — AFTER every
+ * other dsh-switchman section: teams 10250, lang 10300, dispatch 10400,
+ * context-trim 10450, context-watch 10500) that re-states the transport rule
+ * as the LAST word whenever the viewing scope actually resolves to the PTC
+ * executor. Native scopes render an empty string (status quo).
+ *
+ * Detection mirrors the ToolsService's own per-scope resolution: the section
+ * text closure receives the assemble context, whose `scope` is the viewing
+ * Agent/preset scope key; `ctx.tools.selectExecutor(scope)` (TS-private but
+ * present at runtime — verified in the packaged app, `selectExecutor` survives
+ * bundling) resolves the nearest scoped executor or the deployment default.
+ * The executor is then discriminated BEHAVIORALLY via its public `describe()`:
+ * the PTC executor declares `knownNames: ["run_code"]` exactly; the native
+ * executor returns no `knownNames` at all. No class-name sniffing, no config
+ * reads, no false positives for other executor implementations (they simply
+ * get no guard).
+ *
+ * Fail-open everywhere: a missing/renamed private API, a throwing describe(),
+ * or an unavailable executor selection all render "" — the session keeps its
+ * current behavior and only loses the mitigation. Zero new dependencies.
+ *
+ * The clause is English, byte-stable protocol text (same convention as the
+ * lang layer) with a `[SWITCHMAN:PTC]` anchor, `interpolate: false` because
+ * the text contains braces.
+ */
+
+/** Reserved transport-tool name the PTC executor declares as its only direct call. */
+const RUN_CODE_NAME = "run_code";
+
+/** Final-say section position: after context-watch (10500), the last existing section. */
+const PTC_GUARD_ORDER = 10510;
+
+/** True when an executor description declares exactly the reserved run_code transport. */
+function isPtcDescription(description) {
+	if (description === null || typeof description !== "object") return false;
+	const known = description.knownNames;
+	return Array.isArray(known) && known.length === 1 && known[0] === RUN_CODE_NAME;
+}
+
+/** Selected executor for one assemble scope, or null when the private probe
+ *  is unusable (missing service, missing/renamed method, unavailable selection). */
+function selectedExecutor(ctx, scope) {
+	const tools = ctx?.tools;
+	if (tools === null || typeof tools !== "object") return null;
+	if (typeof tools.selectExecutor !== "function") return null;
+	try {
+		const executor = tools.selectExecutor(scope);
+		return executor === null || typeof executor !== "object" ? null : executor;
+	} catch {
+		return null;
+	}
+}
+
+/** True when the scope's selected executor is the PTC executor. `describe([])`
+ *  is safe for every known executor: the PTC implementation lazily creates its
+ *  transport there (the ToolsService calls it on every model call anyway) and
+ *  the native one maps over the empty list. */
+function isPtcScope(ctx, scope) {
+	const executor = selectedExecutor(ctx, scope);
+	if (executor === null || typeof executor.describe !== "function") return false;
+	try {
+		return isPtcDescription(executor.describe([]));
+	} catch {
+		return false;
+	}
+}
+
+/** Byte-stable protocol clause. The SDK call shape `await tools.name(args)` is
+ *  quoted verbatim from the run_code tool's own model-facing description. */
+function renderPtcGuard() {
+	return [
+		`[SWITCHMAN:PTC] This session runs in PTC (programmatic tool call) mode: \`${RUN_CODE_NAME}\` is the ONLY tool callable directly.`,
+		`- Every other tool MUST be invoked as an awaited SDK function inside a ${RUN_CODE_NAME} program: \`await tools.name(args)\` — e.g. \`await tools.skill({ name: "git-commit-message" })\` or \`await tools.spawn_teammate({ ... })\`.`,
+		`- A direct call fails with: unknown tool "x": only \`${RUN_CODE_NAME}\` is callable directly — call \`x\` from inside a \`${RUN_CODE_NAME}\` program instead. Never retry the direct form; wrap the call.`,
+		`- Wherever this prompt says "call the X tool" (skill catalog, doctrines, per-turn reminders), read it as "call X inside a ${RUN_CODE_NAME} program". Batch independent calls as parallel awaits inside ONE program.`,
+		`- Never set \`sandbox_permissions\` on any call, direct or SDK: it is a privilege-escalation request and fails with "not strictly wider than this call's current ... mode" whenever the session already runs at least that access level — retry without the field.`,
+	].join("\n");
+}
+
+/** Mount the PTC guard section. Section registration itself relies on the
+ *  injected systemPrompt service (same as every other layer); the text closure
+ *  is fully defensive so an assembly in an unexpected shape renders "". */
+function applyPtcGuard(ctx) {
+	ctx.systemPrompt.section({
+		name: "switchman:ptc-guard",
+		order: PTC_GUARD_ORDER,
+		interpolate: false,
+		text: (context) => {
+			try {
+				return isPtcScope(ctx, context?.scope) ? renderPtcGuard() : "";
+			} catch {
+				return "";
+			}
+		},
+	});
+}
+
+export { applyPtcGuard, isPtcDescription, isPtcScope, renderPtcGuard, selectedExecutor };

package/host/teams.js

@@ -86,6 +86,7 @@ const TEAMS_SECTION_TEXT = [
 	"- teams 不可用即降级，不重试：工具目录没有 spawn_teammate/list_agents（bundle 未生效或本会话不支持），或 spawn_teammate 报 provisioning failed / 创建失败时，直接改用 subagent/subagent_fork 派发并继续工作，不要反复重试 teams 通道。你自身是 teammate（非 Lead）时维持原规则：不 spawn_teammate，需要子委派时用 subagent。workflow 仅在用户明确要求工作流或脚本化大规模编排时使用，默认不主动使用。",
 	"- 写作域隔离：共享任务上写明互不重叠的 write_scopes；用 team_task_* 维护任务板与依赖顺序；Lead 汇总最终 diff、复核关键改动并运行测试；用 wait_agent 等到必需的 teammate 完成，绝不在结果未回前下最终结论。",
 	"- 子智能体消息通道：subagent/workflow 返回的子会话 id 只能经 child_message 桥接送达——send_message 只解析 teammate 名字，对子会话 id 必报 active teammate「…」not found；该报错不代表子会话死亡，先改用 child_message，不要据此重派或判定死亡。",
+	"- run_code 并行隔离：spawn_teammate / send_message 这类会改变团队环境（成员目录、工具表）的调用不要与文件/搜索工具放进同一 run_code 程序里 Promise.all 并行——并发窗口内其它工具绑定可能误报 unknown tool「…」（UNKNOWN_TOOL）；让这类调用单独占一步执行。某工具此前可用却突然报 UNKNOWN_TOOL 时，下一步原样重试即可，不要换工具名或放弃任务。",
 ].join("\n");
 
 // ---- shared volatile-read helpers (mirrors dispatch.js) --------------------

package/index.js

@@ -51,6 +51,13 @@
  * defensive ctx.get reads (NOT declared in inject): a deployment without the
  * llm service leaves this layer a warn-once no-op — a documented runtime
  * precondition, like sessionQuery/pluginManager above.
+ * The PTC direct-call guard (host/ptc-guard.js) is a final-say prompt section
+ * (order 10510) rendered only when the viewing scope resolves to the PTC tool
+ * executor — detected per assembly via ctx.tools.selectExecutor(context.scope)
+ * plus the executor's describe() knownNames — restating that every named tool
+ * must be called inside a run_code program (`await tools.name(args)`), so
+ * doctrines and skill catalogs that name tools directly can no longer trigger
+ * `unknown tool` rejections in PTC sessions.
  */
 
 import { readdirSync, readFileSync } from "node:fs";
@@ -70,6 +77,8 @@ import { applyDispatch } from "./host/dispatch.js";
 // Agent Teams layer (teams-mode doctrine section + bundle/whitelist
 // orchestration; the clause text extracted from the cordis.patch.yml suffix).
 import { applyTeams } from "./host/teams.js";
+// PTC direct-call guard (final-say transport rule for PTC-executor scopes).
+import { applyPtcGuard } from "./host/ptc-guard.js";
 // Subagent model-visibility layer (post-execute `model:` annotation).
 import { applySubagentModel } from "./host/subagent-model.js";
 
@@ -197,7 +206,8 @@ function loadSkillCandidates(root, warn) {
 /** Register the bundled dsh-switchman skill provider on `ctx.skills` and
  *  mount the language (lang), dispatch (dispatch), teams (teams), watermark
  *  (context-watch), vision (vision), intent routing (intent), subagent model
- *  visibility (subagent-model), and client-bridge (routes) layers. */
+ *  visibility (subagent-model), client-bridge (routes), and the PTC
+ *  direct-call guard (ptc-guard) layers. */
 function apply(ctx, config) {
 	const root = fileURLToPath(new URL("./skills/", import.meta.url));
 	const warn = (message) => ctx.logger.warn(`dsh-switchman: ${message}`);
@@ -214,6 +224,7 @@ function apply(ctx, config) {
 	applyLanguage(ctx, config);
 	applyDispatch(ctx, config);
 	applyTeams(ctx, config);
+	applyPtcGuard(ctx);
 	applyContextWatch(ctx, config);
 	applyContextTrim(ctx, config);
 	applyVision(ctx, config);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "dsh-switchman",
-	"version": "1.11.2",
+	"version": "1.11.4",
 	"description": "Autonomous Agent Teams doctrine for the four shipped DeepSeek Harness presets, plus language preferences, dispatch pools with model ranking, and context watermark control.",
 	"license": "MIT",
 	"keywords": [