tianshu-harness 3.36.1 → 3.37.1

package/README.en.md

@@ -11,11 +11,26 @@
 
 <p align="center">
   <a href="https://github.com/huiliyi37/Tianshu-harness/releases/latest"><img src="https://img.shields.io/github/v/release/huiliyi37/Tianshu-harness?color=8B5CF6&label=Release&logo=github" alt="Release"></a>
+  <a href="https://github.com/huiliyi37/Tianshu-harness/releases"><img src="https://img.shields.io/github/downloads/huiliyi37/Tianshu-harness/total?color=181717&label=GitHub%20Downloads&logo=github" alt="GitHub Downloads"></a>
   <a href="https://www.npmjs.com/package/tianshu-harness"><img src="https://img.shields.io/npm/v/tianshu-harness?color=CB3837&label=npm&logo=npm" alt="npm"></a>
+  <a href="https://www.npmjs.com/package/tianshu-harness"><img src="https://img.shields.io/npm/d18m/tianshu-harness?color=CB3837&label=npm%20Downloads&logo=npm" alt="npm Downloads"></a>
+  <a href="https://atomgit.com/huiliyi37/Tianshu-harness"><img src="https://atomgit.com/huiliyi37/Tianshu-harness/star/badge.svg" alt="AtomGit Star"></a>
+  <a href="https://atomgit.com/huiliyi37/Tianshu-harness/releases"><img src="https://atomgit.com/huiliyi37/Tianshu-harness/download/badge.svg" alt="AtomGit Downloads"></a>
+</p>
+
+<p align="center">
+  <a href="https://trendshift.io/repositories/100440" target="_blank"><img src="https://trendshift.io/api/badge/trendshift/repositories/100440/daily?language=TypeScript" alt="Trendshift: TypeScript repository of the day" width="250" height="55"></a>
+  &nbsp;
+  <a href="https://atomgit.com/huiliyi37/Tianshu-harness"><img src="https://atomgit.com/huiliyi37/Tianshu-harness/star/new_badge.svg" alt="G-Star Selected by AtomGit" width="250" height="55"></a>
+</p>
+
+<p align="center">
   <a href="https://tianshuharness.com"><img src="https://img.shields.io/badge/Website-tianshuharness.com-4285F4?logo=googlechrome&logoColor=white" alt="Website"></a>
+  <a href="https://tianshu.club/"><img src="https://img.shields.io/badge/Forum-tianshu.club-F59E0B" alt="Starport Forum"></a>
   <a href="docs/user-guide.md"><img src="https://img.shields.io/badge/Docs-User%20Guide-FBBC04" alt="Docs"></a>
-  <a href="https://discord.gg/XjWTATCHB"><img src="https://img.shields.io/badge/Discord-5865F2?logo=discord&logoColor=white" alt="Discord"></a>
+  <a href="https://discord.gg/aNEPzPuYV"><img src="https://img.shields.io/badge/Discord-5865F2?logo=discord&logoColor=white" alt="Discord"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/License-Apache%202.0-34A853" alt="License"></a>
+  <a href="https://github.com/RyanAlberts/best-of-Agent-Harnesses"><img src="https://img.shields.io/badge/%F0%9F%8F%86_Best_of-Agent_Harnesses-5ac4bf" alt="Best of Agent Harnesses"></a>
 </p>
 
 <p align="center">
@@ -38,7 +53,7 @@ A model's **capability ceiling** is not its **runtime behaviour**. Put the same
 **Tianshu** is a coding-agent runtime written in TypeScript. The terminal TUI, the desktop app, and the VS Code extension share one agent kernel. Between the model and the real world it places a **Cognitive Virtual Machine (CVM)** that lifts goals, state, evidence, permissions, and termination conditions out of the conversation history and hands them to the runtime:
 
 * **Task contracts** — Every task gets a `TaskContract` recording goal, scope, constraints, and success criteria. Long sessions are held by the runtime, not by the model's memory.
-* **Evidence-gated delivery** — "Done" has to pass the `deliver_task` gate. Without tests, diffs, or verification commands as evidence, delivery is blocked.
+* **Separated commit, verification and review** — `deliver_task` performs only an ownership-scoped safe commit: it blocks on ownership, cross-session conflicts and version consistency; verification gaps are disclosed honestly, never blocked on and never turned into quality endorsement. Targeted verification uses `run_tests` (explicit scope), independent review uses `review_changes` or `/review`.
 * **A deterministic outer loop** — 75 runtime hook modules across five phases of a turn, together with Sensorium state awareness and stall detection, observe and correct between model output and real action.
 
 <table>
@@ -46,13 +61,13 @@ A model's **capability ceiling** is not its **runtime behaviour**. Put the same
     <td align="center" width="25%"><b>99.3–99.6%</b><br><sub>prefix-cache hit rate<br>across 5 real long sessions</sub></td>
     <td align="center" width="25%"><b>¥880 → ¥20</b><br><sub>estimated input cost on the same<br>sessions at list price</sub></td>
     <td align="center" width="25%"><b>25</b><br><sub>built-in provider presets, plus any<br>OpenAI-compatible endpoint</sub></td>
-    <td align="center" width="25%"><b>22,000</b><br><sub>test cases, roughly<br>1:1 with source lines</sub></td>
+    <td align="center" width="25%"><b>23,000</b><br><sub>test cases, roughly<br>1:1 with source lines</sub></td>
   </tr>
 </table>
 
 <p align="center">
   <img src="docs/brand/assets/tianshu-harness-screenshot.png" alt="Tianshu terminal TUI: welcome screen and GlanceBar status line" width="49%">
-  <img src="docs/brand/assets/tianshu-gui-screenshot.jpg" alt="Tianshu desktop app: session sidebar and star-domain picker" width="49%">
+  <img src="docs/brand/assets/tianshu-gui-screenshot.jpg" alt="Tianshu desktop app: home and new-task panel" width="49%">
 </p>
 <p align="center"><sub>Left: terminal TUI · Right: desktop app · one agent kernel</sub></p>
 
@@ -105,6 +120,23 @@ Download from [Releases](https://github.com/huiliyi37/Tianshu-harness/releases/l
 </tr>
 </table>
 
+> [!WARNING]
+> **Hard Node.js requirement (v3.36.0+):** the CLI supports only **Node 24.22.1+
+> (24.x line) or Node 26.12.1+ (26.x line)**. Node 22 / 23 / 25 / 27,
+> Node 24.x below 24.22.1, and Node 26.x below 26.12.1 are rejected at startup
+> by the security gate. `/update` may install the new package successfully while
+> the new CLI still cannot start. Run `node -v` first; if it does not match, upgrade
+> via nvm / fnm / Volta or nodejs.org before installing.
+>
+> ```bash
+> node -v   # requires v24.22.1+ or v26.12.1+
+> ```
+>
+> The desktop app bundles its own runtime; no manual Node installation is required.
+> If it still fails after the upgrade, see the
+> [installation guide](docs/guides/installation.md) and
+> [troubleshooting guide](docs/guides/troubleshooting.md).
+
 <details>
 <summary><b>One-line installers · migrating from the legacy package</b></summary>
 
@@ -233,7 +265,7 @@ This is a small pilot: 5 tasks, a single model, LLM review. It also measured the
 
 ### Engineering
 
-As of 2026-10: `src/` holds roughly 1,600 source files and 330K lines; tests are about 1,900 files and 22,000 cases. TypeScript strict with `noUncheckedIndexedAccess`, and every incident fix ships with a regression test. Definitions and milestones: [Engineering Metrics](docs/engineering-metrics.md).
+As of 2026-10 (v3.37): `src/` holds roughly 1,700 source files and 350K lines; tests are about 2,100 files and 23,000 cases. TypeScript strict with `noUncheckedIndexedAccess`, and every incident fix ships with a regression test. Definitions and milestones: [Engineering Metrics](docs/engineering-metrics.md).
 
 <a id="star-domains"></a>
 ## Star Domains
@@ -270,15 +302,16 @@ New sessions default to **Qiming**. Switch with `/domain <name>`, auto-match fro
 | | |
 |---|---|
 | **Multi-agent orchestration** | `/scout` read-only parallel reconnaissance, `/team` wave-based parallel execution, `/council` multi-domain review that only produces a plan, `/galaxy` dimension-split attack with a global review. [Details](docs/user-guide.md#子代理编排) |
+| **Separated review & verification** | Commits never auto-verify or auto-review: targeted verification via `run_tests` (empty input previews the scope), independent review via `review_changes` (pinned snapshot, read-only reviewer, persisted findings); delivery receipts carry no quality endorsement |
 | **Prefix cache engine** | Frozen prefix, delta appendix, read deduplication, resume cache inheritance; `/debug cache` diagnoses hit rate and fragmentation. [Details](docs/user-guide.md#前缀缓存引擎) |
 | **Plan Mode & Goal** | Plan, approve, then execute; `/goal` holds a goal across many turns until it is met or the budget runs out. [Details](docs/user-guide.md#plan-mode计划模式) |
 | **Handoff & rewind** | `/handoff` writes a structured handoff document; double-tap `Esc` rewinds to any earlier point. [Details](docs/user-guide.md#会话交接与恢复handoff--resume) |
-| **Project memory** | Knowledge is written to `.rivet/knowledge/memory.jsonl`; auto-injection carries constraint memories only, older findings need explicit recall and never hijack a new task. [Details](docs/user-guide.md#跨会话记忆) |
+| **Project memory** | Knowledge is written to `.rivet/knowledge/memory.jsonl`; auto-injection carries constraint memories only, older findings need explicit recall and never hijack a new task; automatic memory formation is opt-in (off by default). [Details](docs/user-guide.md#跨会话记忆) |
 | **LSP integration** | 20+ language servers; go-to-definition and find-references become agent tools, and post-edit diagnostics flow back into the turn. Enabled only when installed locally |
 | **MCP & Skills** | External tool servers; reusable workflow playbooks with progressive disclosure, managed by `tianshu skills`. [Details](docs/user-guide.md#mcpmodel-context-protocol) |
 | **Cost control** | Automatic reasoning-effort downgrade, flash-model compaction, peak/off-peak pricing badge, `/usage` for the local token ledger. [Details](docs/user-guide.md#api-成本控制) |
 | **Pure-ANSI TUI** | Zero dependencies: GlanceBar status line, `/steer` mid-stream interrupt, command palette, inline images, plain-text mode for restricted terminals. [Details](docs/user-guide.md#终端-uitui) |
-| **Desktop app** | Integrated terminal, theme studio, offline local voice input, phone remote approval, concurrent sessions, WSL runtime on Windows. [Desktop Guide](docs/desktop-guide.md) |
+| **Desktop app** | Integrated terminal, theme studio, offline local voice input, phone remote approval, concurrent sessions, WSL runtime on Windows; auto-update with resumable downloads, verified sources and self-recovery. [Desktop Guide](docs/desktop-guide.md) |
 
 <a id="supported-models"></a>
 ## Supported Models
@@ -414,7 +447,8 @@ This repository is the sync projection of the development repo; the desktop app
 
 - **Discussion** — [GitHub Discussions](https://github.com/huiliyi37/Tianshu-harness/discussions)
 - **Bugs and feature requests** — [GitHub Issues](https://github.com/huiliyi37/Tianshu-harness/issues); attaching `tianshu logs --json` speeds up triage
-- **Discord** — [Tianshu Harness community](https://discord.gg/XjWTATCHB)
+- **Starport forum** — [tianshu.club](https://tianshu.club/): our self-hosted community for release discussion, tips and long-lived topics
+- **Discord** — [Tianshu Harness community](https://discord.gg/aNEPzPuYV) [![Discord](https://img.shields.io/badge/Discord-Join%20us-5865F2?logo=discord&logoColor=white)](https://discord.gg/aNEPzPuYV)
 - **QQ group** — "TUI", group ID `1017892942`
 - **WeChat group** — scan the QR code; valid for 7 days, ask in Discussions if expired
 

package/README.ja.md

@@ -31,7 +31,7 @@
   <img src="https://img.shields.io/badge/License-Apache%202.0-3B5BDB?style=for-the-badge&logo=apache" alt="License">
   <img src="https://img.shields.io/badge/TypeScript-Strict-blue?style=for-the-badge&logo=typescript" alt="TypeScript">
   <img src="https://img.shields.io/badge/Tests-19%2C000%2B%20Passed-green?style=for-the-badge&logo=testinglibrary" alt="Tests">
-  <a href="https://discord.gg/XjWTATCHB"><img src="https://img.shields.io/badge/Discord-5865F2?style=for-the-badge&logo=discord&logoColor=white" alt="Discord"></a>
+  <a href="https://discord.gg/aNEPzPuYV"><img src="https://img.shields.io/badge/Discord-5865F2?style=for-the-badge&logo=discord&logoColor=white" alt="Discord"></a>
   <a href="https://atomgit.com/huiliyi37/Tianshu-harness"><img src="https://atomgit.com/huiliyi37/Tianshu-harness/star/badge.svg" alt="AtomGit Star"></a>
   <a href="https://github.com/huiliyi37/Tianshu-harness/releases"><img src="https://img.shields.io/github/downloads/huiliyi37/Tianshu-harness/total?logo=github&label=downloads" alt="GitHub downloads"></a>
   <a href="https://www.npmjs.com/package/tianshu-tui"><img src="https://img.shields.io/npm/dm/tianshu-tui?label=npm%20tianshu-tui" alt="npm tianshu-tui downloads"></a>
@@ -150,7 +150,7 @@ Layer 4: RuntimeHookPipeline（75 hooks）→ trap-and-emulate で退化行動
 
 ### 1. 環境要件
 
-- **Node.js ≥ 24**（`engines` で固定）—— `node --version` で確認。低いバージョンは npm インストール時に警告が出るだけでサポート対象外。ワンラインインストールスクリプトは直接ブロックしてアップグレード案内を出します。
+- **Node.js 24.22.1+（24.x 系）または 26.12.1+（26.x 系）**（`engines` 固定）—— `node --version` で確認。Node 22 / 23 / 25 / 27、24.x < 24.22.1、26.x < 26.12.1 は v3.36.0 以降の安全ゲートで起動時に拒否されます。`/update` 後に新 CLI が起動しない場合も、まず Node をアップグレードしてください。ワンラインインストールスクリプトは事前にブロックして案内します。
 - **Git**（強く推奨）—— 任意。無くても天枢は動作します（その場で修正）が、Git があると委譲 worktree 分離・チェックポイントロールバック・`commit`/`diff` レビュー・worker ごとの diff レビューが使えます。インストール：<https://git-scm.com/downloads>。
 
 ### 2. インストール（いずれかを選択）
@@ -161,7 +161,7 @@ Layer 4: RuntimeHookPipeline（75 hooks）→ trap-and-emulate で退化行動
 > **Windows サポート範囲**：Windows 10（1809+、22H2 推奨）/ Windows 11。画面描画は **WebView2 Runtime（推奨 ≥ 120）** に依存——v3.5 以降のスクロール・描画最適化には新しいランタイムが必要で、古いとセッション領域のスクロールがカクつきます。3.5.3 以降インストーラーは完全なオフラインインストールパッケージを同梱（ネット不要・システムレベル登録）。既存ユーザーが自動更新で古すぎる旨の表示が出た場合：通知バーまたは「設定 → ランタイムとバージョン情報」で「修復ツールを実行」。**ウィンドウが完全に開かない**場合は、スタートメニューの「WebView2 を修復」、または [Releases](https://github.com/huiliyi37/Tianshu-harness/releases/latest) の `windows-repair` ディレクトリから `repair-webview2.cmd` をダブルクリック。[WebView2 オフラインインストールパッケージ](https://go.microsoft.com/fwlink/p/?LinkId=2124703) を手動インストールして再起動しても構いません。
 > **Win10 タブレットモードの既知動作**：タブレットモードでアプリを切り替えると前のアプリが画面外へスライドします——computer_use のスナップショットは遮へい／バックグラウンド自己修復（PrintWindow 描画）済みで、タブレットモードを切る必要はありません。
 
-**方法 B：ワンラインインストールスクリプト（推奨）** —— Node ≥ 24 を検証 → `tianshu-harness` をグローバルインストール（デフォルトは npmmirror ミラー加速、`NPM_CONFIG_REGISTRY` で上書き可）→ `tianshu` を起動。冪等で再実行可能：
+**方法 B：ワンラインインストールスクリプト（推奨）** —— Node 24.22.1+ / 26.12.1+ を検証 → `tianshu-harness` をグローバルインストール（デフォルトは npmmirror ミラー加速、`NPM_CONFIG_REGISTRY` で上書き可）→ `tianshu` を起動。冪等で再実行可能：
 
 ```bash
 # macOS / Linux（bash）
@@ -1166,7 +1166,8 @@ tianshu logs open desktop            # sidecar ログディレクトリを開く
 ## 🤝 コミュニティとサポート
 
 - **使い方の質問 / ディスカッション** → [GitHub Discussions](https://github.com/huiliyi37/Tianshu-harness/discussions)
-- **Discord コミュニティ** → [「天枢 tianshu-harness 官方交流群」に参加](https://discord.gg/XjWTATCHB)
+- **Starport フォーラム** → [tianshu.club](https://tianshu.club/)（自建コミュニティ「天枢星港」）
+- **Discord コミュニティ** → [「天枢 tianshu-harness 官方交流群」に参加](https://discord.gg/aNEPzPuYV)
 - **バグ報告 / 機能リクエスト** → [GitHub Issues](https://github.com/huiliyi37/Tianshu-harness/issues)
 - **セキュリティ脆弱性** → [プライベート報告](https://github.com/huiliyi37/Tianshu-harness/security/advisories/new)（公開 issue を開かないでください）
 - **コードへのコントリビュート** → [CONTRIBUTING.md](CONTRIBUTING.md) を参照

package/README.ko.md

@@ -31,7 +31,7 @@
   <img src="https://img.shields.io/badge/License-Apache%202.0-3B5BDB?style=for-the-badge&logo=apache" alt="License">
   <img src="https://img.shields.io/badge/TypeScript-Strict-blue?style=for-the-badge&logo=typescript" alt="TypeScript">
   <img src="https://img.shields.io/badge/Tests-19%2C000%2B%20Passed-green?style=for-the-badge&logo=testinglibrary" alt="Tests">
-  <a href="https://discord.gg/XjWTATCHB"><img src="https://img.shields.io/badge/Discord-5865F2?style=for-the-badge&logo=discord&logoColor=white" alt="Discord"></a>
+  <a href="https://discord.gg/aNEPzPuYV"><img src="https://img.shields.io/badge/Discord-5865F2?style=for-the-badge&logo=discord&logoColor=white" alt="Discord"></a>
   <a href="https://atomgit.com/huiliyi37/Tianshu-harness"><img src="https://atomgit.com/huiliyi37/Tianshu-harness/star/badge.svg" alt="AtomGit Star"></a>
   <a href="https://github.com/huiliyi37/Tianshu-harness/releases"><img src="https://img.shields.io/github/downloads/huiliyi37/Tianshu-harness/total?logo=github&label=downloads" alt="GitHub downloads"></a>
   <a href="https://www.npmjs.com/package/tianshu-tui"><img src="https://img.shields.io/npm/dm/tianshu-tui?label=npm%20tianshu-tui" alt="npm tianshu-tui downloads"></a>
@@ -150,7 +150,7 @@ Layer 4: RuntimeHookPipeline（75 hooks） → trap-and-emulate로 퇴화 행동
 
 ### 1. 환경 요구사항
 
-- **Node.js ≥ 24**（`engines` 고정）—— `node --version`으로 확인하세요. 낮은 버전은 npm 설치 시 경고만 뜨며 지원 범위가 아닙니다. 원클릭 설치 스크립트는 직접 차단하고 업그레이드 안내를 제시합니다.
+- **Node.js 24.22.1+（24.x 계열）또는 26.12.1+（26.x 계열）**（`engines` 고정）—— `node --version`으로 확인하세요. Node 22 / 23 / 25 / 27, 24.x < 24.22.1, 26.x < 26.12.1은 v3.36.0 이후 안전 게이트에서 시작 시 거부됩니다. `/update` 후 새 CLI가 시작되지 않는 경우에도 먼저 Node를 업그레이드하세요. 원클릭 설치 스크립트는 사전에 차단하고 안내를 제시합니다.
 - **Git**（강력 권장）—— 선택 사항. 없어도 天枢는 동작하지만（그 자리에서 수정）, Git이 있으면 위임 worktree 격리, 체크포인트 롤백, `commit`/`diff` 검토, worker별 diff 검토가 가능합니다. 설치: <https://git-scm.com/downloads>.
 
 ### 2. 설치（택一）
@@ -161,7 +161,7 @@ Layer 4: RuntimeHookPipeline（75 hooks） → trap-and-emulate로 퇴화 행동
 > **Windows 지원 범위**: Windows 10（1809+, 22H2 권장）/ Windows 11. 화면 렌더링은 **WebView2 Runtime（≥ 120 권장）**에 의존합니다——v3.5부터의 스크롤·렌더링 최적화는 최신 런타임이 필요하며, 구버전은 세션 영역 스크롤이 끊깁니다. 3.5.3부터 설치 프로그램에 완전한 오프라인 설치 패키지가 내장됩니다（네트워크 불필요, 시스템 레벨 등록）. 기존 사용자가 자동 업데이트 후 "너무 오래됨" 안내를 받으면: 안내 바 또는 「설정 → 런타임 및 정보」에서 「복구 도구 실행」. **창이 아예 열리지 않을 때**는 시작 메뉴의 「WebView2 복구」를 사용하거나, [Releases](https://github.com/huiliyi37/Tianshu-harness/releases/latest)에서 `windows-repair` 디렉터리의 `repair-webview2.cmd`를 더블클릭하세요. 또는 [WebView2 오프라인 설치 패키지](https://go.microsoft.com/fwlink/p/?LinkId=2124703)를 수동 설치 후 재시작하세요.
 > **Win10 태블릿 모드 알려진 동작**: 태블릿 모드에서 앱 전환 시 이전 앱이 화면 밖으로 밀려납니다——computer_use 스냅샷이 가림/백그라운드 자가복구를 수행하므로（PrintWindow 렌더링）태블릿 모드를 끌 필요가 없습니다.
 
-**방식 B: 원클릭 설치 스크립트（권장）** —— Node ≥ 24 확인 → `tianshu-harness` 전역 설치（기본 npmmirror 미러 가속, `NPM_CONFIG_REGISTRY`로 덮어쓰기 가능）→ `tianshu` 실행. 멱등하게 반복 실행 가능:
+**방식 B: 원클릭 설치 스크립트（권장）** —— Node 24.22.1+ / 26.12.1+ 확인 → `tianshu-harness` 전역 설치（기본 npmmirror 미러 가속, `NPM_CONFIG_REGISTRY`로 덮어쓰기 가능）→ `tianshu` 실행. 멱등하게 반복 실행 가능:
 
 ```bash
 # macOS / Linux（bash）
@@ -1171,7 +1171,8 @@ tianshu logs open desktop            # sidecar 로그 디렉터리 열기（GUI
 ## 🤝 커뮤니티와 지원
 
 - **사용 문제 / 토론** → [GitHub Discussions](https://github.com/huiliyi37/Tianshu-harness/discussions)
-- **Discord 커뮤니티** → [Tianshu Harness Discord 참여](https://discord.gg/XjWTATCHB)
+- **Starport 포럼** → [tianshu.club](https://tianshu.club/)（자체 커뮤니티 「天枢星港」）
+- **Discord 커뮤니티** → [Tianshu Harness Discord 참여](https://discord.gg/aNEPzPuYV)
 - **버그 리포트 / 기능 요청** → [GitHub Issues](https://github.com/huiliyi37/Tianshu-harness/issues)
 - **보안 취약점** → [비공개 보고](https://github.com/huiliyi37/Tianshu-harness/security/advisories/new)（공개 issue를 열지 말 것）
 - **코드 기여** → [CONTRIBUTING.md](CONTRIBUTING.md) 참조

package/README.md

@@ -5,17 +5,32 @@
 <h1 align="center">天枢 Tianshu Harness</h1>
 
 <p align="center">
-  <b>面向编程智能体的认知运行时</b><br>
+  <b>面向编程智能体的终端运行时，把东方的星辰带给世界的每一个开发者。</b><br>
   <sub>目标不漂移 · 完成有证据 · 验证有闭环</sub>
 </p>
 
 <p align="center">
   <a href="https://github.com/huiliyi37/Tianshu-harness/releases/latest"><img src="https://img.shields.io/github/v/release/huiliyi37/Tianshu-harness?color=8B5CF6&label=Release&logo=github" alt="Release"></a>
+  <a href="https://github.com/huiliyi37/Tianshu-harness/releases"><img src="https://img.shields.io/github/downloads/huiliyi37/Tianshu-harness/total?color=181717&label=GitHub%20%E4%B8%8B%E8%BD%BD&logo=github" alt="GitHub Downloads"></a>
   <a href="https://www.npmjs.com/package/tianshu-harness"><img src="https://img.shields.io/npm/v/tianshu-harness?color=CB3837&label=npm&logo=npm" alt="npm"></a>
+  <a href="https://www.npmjs.com/package/tianshu-harness"><img src="https://img.shields.io/npm/d18m/tianshu-harness?color=CB3837&label=npm%20%E4%B8%8B%E8%BD%BD&logo=npm" alt="npm Downloads"></a>
+  <a href="https://atomgit.com/huiliyi37/Tianshu-harness"><img src="https://atomgit.com/huiliyi37/Tianshu-harness/star/badge.svg" alt="AtomGit Star"></a>
+  <a href="https://atomgit.com/huiliyi37/Tianshu-harness/releases"><img src="https://atomgit.com/huiliyi37/Tianshu-harness/download/badge.svg" alt="AtomGit Downloads"></a>
+</p>
+
+<p align="center">
+  <a href="https://trendshift.io/repositories/100440" target="_blank"><img src="https://trendshift.io/api/badge/trendshift/repositories/100440/daily?language=TypeScript" alt="Trendshift: TypeScript repository of the day" width="250" height="55"></a>
+  &nbsp;
+  <a href="https://atomgit.com/huiliyi37/Tianshu-harness"><img src="https://atomgit.com/huiliyi37/Tianshu-harness/star/new_badge.svg" alt="G-Star Selected by AtomGit" width="250" height="55"></a>
+</p>
+
+<p align="center">
   <a href="https://tianshuharness.com"><img src="https://img.shields.io/badge/Website-tianshuharness.com-4285F4?logo=googlechrome&logoColor=white" alt="Website"></a>
+  <a href="https://tianshu.club/"><img src="https://img.shields.io/badge/%E6%98%9F%E6%B8%AF%E8%AE%BA%E5%9D%9B-tianshu.club-F59E0B" alt="星港论坛"></a>
   <a href="docs/user-guide.md"><img src="https://img.shields.io/badge/Docs-%E7%94%A8%E6%88%B7%E6%89%8B%E5%86%8C-FBBC04" alt="Docs"></a>
-  <a href="https://discord.gg/XjWTATCHB"><img src="https://img.shields.io/badge/Discord-%E4%BA%A4%E6%B5%81%E7%BE%A4-5865F2?logo=discord&logoColor=white" alt="Discord"></a>
+  <a href="https://discord.gg/aNEPzPuYV"><img src="https://img.shields.io/badge/Discord-%E4%BA%A4%E6%B5%81%E7%BE%A4-5865F2?logo=discord&logoColor=white" alt="Discord"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/License-Apache%202.0-34A853" alt="License"></a>
+  <a href="https://github.com/RyanAlberts/best-of-Agent-Harnesses"><img src="https://img.shields.io/badge/%F0%9F%8F%86_Best_of-Agent_Harnesses-5ac4bf" alt="Best of Agent Harnesses"></a>
 </p>
 
 <p align="center">
@@ -37,7 +52,7 @@
 **天枢**是一个 TypeScript 编写的编程 agent 运行时，终端 TUI、桌面端和 VS Code 插件共用同一个内核。它在模型和真实世界之间加了一层**认知执行环境 CVM**（Cognitive Virtual Machine），把目标、状态、证据、权限和终止条件从对话历史里拿出来，交给运行时持续管理：
 
 * **任务契约**：每个任务有独立的 `TaskContract`，记录目标、范围、约束和成功标准。长会话里的目标由运行时持有，不依赖模型「记得」。
-* **证据门控的交付**：「完成」要过 `deliver_task` 交付门。没有测试、diff 或验证命令作为证据，交付会被拦下。
+* **提交、验证、审查分离的交付**：`deliver_task` 只做归属限定的安全提交——所有权、跨会话冲突、版本一致性不合格就拦下；验证缺口如实披露但不阻断、也不冒充质量背书。定向验证用 `run_tests`（显式范围），独立审查用 `review_changes` 或 `/review`。
 * **确定性监督外环**：75 个运行时 hook 模块分布在一个回合的五个阶段，配合 Sensorium 状态感知与收敛、空转检测，在模型输出与真实动作之间做观测和纠偏。
 
 <table>
@@ -45,13 +60,13 @@
     <td align="center" width="25%"><b>99.3–99.6%</b><br><sub>5 个真实长会话的<br>前缀缓存命中率</sub></td>
     <td align="center" width="25%"><b>¥880 → ¥20</b><br><sub>同一批会话按刊例价<br>估算的 input 成本</sub></td>
     <td align="center" width="25%"><b>25 项</b><br><sub>模型服务商预设<br>另支持 OpenAI 兼容端点</sub></td>
-    <td align="center" width="25%"><b>2.2 万条</b><br><sub>测试用例<br>与源码规模约 1:1</sub></td>
+    <td align="center" width="25%"><b>2.3 万条</b><br><sub>测试用例<br>与源码规模约 1:1</sub></td>
   </tr>
 </table>
 
 <p align="center">
   <img src="docs/brand/assets/tianshu-harness-screenshot.png" alt="天枢终端 TUI：欢迎页与 GlanceBar 状态栏" width="49%">
-  <img src="docs/brand/assets/tianshu-gui-screenshot.jpg" alt="天枢桌面端：会话侧栏与星域速选" width="49%">
+  <img src="docs/brand/assets/tianshu-gui-screenshot.jpg" alt="天枢桌面端：首页与新任务面板" width="49%">
 </p>
 <p align="center"><sub>左：终端 TUI　·　右：桌面端　·　同一个 agent 内核</sub></p>
 
@@ -103,6 +118,19 @@ tianshu
 </tr>
 </table>
 
+> [!WARNING]
+> **Node.js 版本硬门槛（v3.36.0 起）**：CLI 仅支持 **Node 24.22.1+（24.x 线）或 26.12.1+（26.x 线）**。
+> Node 22 / 23 / 25 / 27、24.x < 24.22.1、26.x < 26.12.1 会在启动时被安全闸门拒绝；
+> `/update` 可能已经装上新包，但新 CLI 仍无法启动。先运行 `node -v`，不满足时用
+> nvm / fnm / Volta 或 nodejs.org 升级后再安装。
+>
+> ```bash
+> node -v   # 需要 v24.22.1+ 或 v26.12.1+
+> ```
+>
+> 桌面端自带运行时，不需要手动安装 Node。升级后仍失败时见
+> [安装指南](docs/guides/installation.md) 与 [排障指南](docs/guides/troubleshooting.md)。
+
 <details>
 <summary><b>一键安装脚本 · 从旧包迁移</b></summary>
 
@@ -225,7 +253,7 @@ CVM 不改权重，也不把模型变成确定性程序，而是在概率认知
 
 ### 工程
 
-截至 2026-10：`src/` 约 1,600 个源码文件、33 万行，测试约 1,900 个文件、2.2 万条用例。TypeScript strict，开启 `noUncheckedIndexedAccess`，事故修复必须附回归测试。口径与里程碑见 [工程质量指标](docs/engineering-metrics.md)。
+截至 2026-10（v3.37）：`src/` 约 1,700 个源码文件、35 万行，测试约 2,100 个文件、2.3 万条用例。TypeScript strict，开启 `noUncheckedIndexedAccess`，事故修复必须附回归测试。口径与里程碑见 [工程质量指标](docs/engineering-metrics.md)。
 
 ## 星域
 
@@ -242,15 +270,16 @@ CVM 不改权重，也不把模型变成确定性程序，而是在概率认知
 | | |
 |---|---|
 | **多代理编排** | `/scout` 只读并行侦察，`/team` 按文件分波并行施工，`/council` 多星域会诊只出计划，`/galaxy` 按维度拆分并做全局审查。[详情](docs/user-guide.md#子代理编排) |
+| **审查与验证分离** | 提交不自动验证也不自动派审查：定向验证 `run_tests`（空参数只给范围预览），独立审查 `review_changes`（固定快照、只读 reviewer、发现持久化），交付回执不作质量背书 |
 | **前缀缓存引擎** | 冻结前缀、增量附录、Read 去重、resume 缓存继承，`/debug cache` 诊断命中率与碎裂原因。[详情](docs/user-guide.md#前缀缓存引擎) |
 | **Plan Mode 与 Goal** | 先计划、审批、再执行；`/goal` 设定跨多轮目标，持续迭代到达成或预算耗尽。[详情](docs/user-guide.md#plan-mode计划模式) |
 | **交接与倒带** | `/handoff` 生成结构化交接文档；双击 `Esc` 倒带到任一历史点。[详情](docs/user-guide.md#会话交接与恢复handoff--resume) |
-| **项目记忆** | 知识写入 `.rivet/knowledge/memory.jsonl`；自动注入只带约束类记忆，旧问题显式 recall，不劫持新任务。[详情](docs/user-guide.md#跨会话记忆) |
+| **项目记忆** | 知识写入 `.rivet/knowledge/memory.jsonl`；自动注入只带约束类记忆，旧问题显式 recall，不劫持新任务；自动记忆形成为 opt-in（默认关闭）。[详情](docs/user-guide.md#跨会话记忆) |
 | **LSP 集成** | 20+ 种语言服务器，跳转定义与查找引用作为 agent 工具，编辑后的诊断自动回注。本机装了才启用 |
 | **MCP 与 Skills** | 接入外部工具服务器；可复用的工作流剧本，渐进披露，`tianshu skills` 统一管理。[详情](docs/user-guide.md#mcpmodel-context-protocol) |
 | **成本控制** | 推理强度自动降档、压缩走轻量模型、峰谷计价提醒，`/usage` 查看本地 Token 账本。[详情](docs/user-guide.md#api-成本控制) |
 | **自研 TUI** | 纯 ANSI 零依赖：GlanceBar 状态栏、流式中 `/steer` 打断、命令面板、内联图片、受限终端纯文本模式。[详情](docs/user-guide.md#终端-uitui) |
-| **桌面端** | 集成终端、主题工作室、本地离线语音输入、手机遥控审批、多会话并发、Windows 下连接 WSL 运行时。[桌面端指南](docs/desktop-guide.md) |
+| **桌面端** | 集成终端、主题工作室、本地离线语音输入、手机遥控审批、多会话并发、Windows 下连接 WSL 运行时；自动更新断点续传、来源校验、损坏自恢复。[桌面端指南](docs/desktop-guide.md) |
 
 ## 支持的模型
 
@@ -361,7 +390,8 @@ node dist/cli/entry.js
 
 - **讨论与提问**：[GitHub Discussions](https://github.com/huiliyi37/Tianshu-harness/discussions)
 - **Bug 与功能请求**：[GitHub Issues](https://github.com/huiliyi37/Tianshu-harness/issues)，附上 `tianshu logs --json` 的输出能更快定位
-- **Discord**：[天枢 tianshu-harness 官方交流群](https://discord.gg/XjWTATCHB)
+- **星港论坛**：[tianshu.club](https://tianshu.club/) — 自建社区「天枢星港」，版本讨论、经验分享与长期话题的存档地（Token 台账可选同步展示）
+- **Discord**：[天枢 tianshu-harness 官方交流群](https://discord.gg/aNEPzPuYV) [![Discord](https://img.shields.io/badge/Discord-%E5%8A%A0%E5%85%A5%E4%BA%A4%E6%B5%81%E7%BE%A4-5865F2?logo=discord&logoColor=white)](https://discord.gg/aNEPzPuYV)
 - **QQ 群**：「TUI」，群号 `1017892942`
 - **微信群**：扫码加入，二维码 7 天有效，过期请在 Discussions 留言补码
 

package/dist/{account-login-T7LTLQXS.js → account-login-JZHSEBGU.js}

@@ -18,7 +18,7 @@ async function handleAccountLogin(app) {
     saveAccountToken,
     isTerminalPollStatus
   } = await import("./account-SIZF2YV5.js");
-  const { openInBrowser } = await import("./login-flow-HZHRWDMP.js");
+  const { openInBrowser } = await import("./login-flow-WBIW4TPG.js");
   const { rivetHome } = await import("./paths-PE56RINB.js");
   app.commitStatic("\u6B63\u5728\u5411\u5929\u67A2\u7533\u8BF7\u8BBE\u5907\u6388\u6743\u2026");
   let created;
@@ -42,7 +42,7 @@ ${created.verifyUrl}
   });
   if (result.status === "approved" && result.accessToken) {
     const token = saveAccountToken(accountStore(rivetHome()), result);
-    const { primeStellarIdentity } = await import("./account-status-YCVLHU6B.js");
+    const { primeStellarIdentity } = await import("./account-status-I42D2QJQ.js");
     const identityLine = await primeStellarIdentity(token.accessToken);
     app.commitStatic("\u2705 \u5DF2\u767B\u5F55\u5929\u67A2\u8D26\u53F7\u2014\u2014\u684C\u9762\u7AEF\u4E0E\u7F51\u9875\u7AEF\u73B0\u5728\u770B\u5230\u540C\u4E00\u4EFD\u8BBE\u5907\u4E0E\u8BA2\u9605\u3002");
     if (identityLine) app.commitStatic(`\u661F\u7C4D\uFF1A${identityLine}`);

package/dist/{account-status-YCVLHU6B.js → account-status-I42D2QJQ.js}

@@ -5,14 +5,14 @@ import {
   commitWelcomeStellarIdentityLine,
   formatStellarIdentityLine,
   primeStellarIdentity
-} from "./chunk-C6JA6N5E.js";
+} from "./chunk-32GXAYAY.js";
 import "./chunk-QMNTSDWW.js";
 import "./chunk-GH4JI6BC.js";
-import "./chunk-ALC2MQJ6.js";
+import "./chunk-6I2YCDUJ.js";
 import "./chunk-XUMXRP3L.js";
 import "./chunk-MUIODEN6.js";
-import "./chunk-36UFT42V.js";
-import "./chunk-R44ENUT2.js";
+import "./chunk-3DZ5UT3I.js";
+import "./chunk-GP37UWT4.js";
 import "./chunk-R5Q7AA2C.js";
 import "./chunk-M5U2TMZN.js";
 import "./chunk-4I2HDYJG.js";