release: mancode 0.6.0 with DeepSeek Harness

[whitelonng]

What changed

• add first-class DeepSeek Harness support to the registry, CLI onboarding, legacy installer, Continuity adapter, status, migration, beta gate, and platform session spike surfaces
• install isolated user-invoked mode skills under .dsh/skills/ while preserving shared AGENTS.md content and other platform adapters
• reject symlinked DSH artifact paths during legacy install and uninstall, with atomic AGENTS.md replacement
• document the provisional DSH capability boundary in the bilingual README, adapter guide, and website
• bump the package to 0.6.0 and extend the dist smoke test to verify the DSH skill output

Why

DeepSeek Harness now publishes an official project instruction and skill discovery contract. mancode needs a native adapter that follows those paths without allowing DSH cleanup to touch Codex/ZCode/Kimi skills or trusting unproven host session identity.

Impact

Users can initialize or upgrade with --platform dsh. mancode writes a dedicated managed block to AGENTS.md and user-only /man* skills to .dsh/skills/. The adapter remains provisional until GUI discovery, two-window session isolation, and subagent propagation are verified on the real host.

Security fix

The initial legacy installer used direct path writes and could follow a repository-controlled AGENTS.md symlink outside the workspace. The release now preflights every fixed DSH artifact segment, rejects symlinks/non-file targets, and atomically replaces AGENTS.md.

Validation

• npm run prepublishOnly
• 127 test files / 926 tests
• 0 npm audit vulnerabilities
• 10 compiled adapter outputs verified by test:dist
• npm pack --dry-run --json --ignore-scripts
• TypeScript, Biome, build, coverage, legacy install/uninstall, V3 crash recovery, and website documentation contracts passed