@deepseek-ai/dsh-harness-dev-context 0.0.0-stage → 0.2.1-alpha.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.i18n.yaml

@@ -0,0 +1,67 @@
+# Bilingual-pair consistency record for README.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
+#   pnpm run verify-translation-pairing --write packages/context/harness-dev-context/README.md
+/:
+  en: 8fed567b18e9dfa2
+  zh: 2ab54db218cc0197
+/deepseek-ai-dsh-harness-dev-context:
+  en: b47701c093269adb
+  zh: e147a06ec0d6047f
+/deepseek-ai-dsh-harness-dev-context/summary:
+  en: daf618174270461e
+  zh: 4c5b56fe4380c91f
+/deepseek-ai-dsh-harness-dev-context/table-of-contents:
+  en: d152484eb41ac6b4
+  zh: 09388d293f9be9cb
+/deepseek-ai-dsh-harness-dev-context/use-this-package:
+  en: d3192709a416f7fb
+  zh: 479253a5ae1adcb2
+/deepseek-ai-dsh-harness-dev-context/use-this-package/what-the-model-gets:
+  en: d9f5b11af33b3eb8
+  zh: fc96b972503a0b99
+/deepseek-ai-dsh-harness-dev-context/use-this-package/sessions-from-earlier-releases:
+  en: d810950db5118265
+  zh: d20e3965fa78e0f8
+/deepseek-ai-dsh-harness-dev-context/understand-the-implementation:
+  en: 2d21fa2aad5a729d
+  zh: cfbfada0eb647435
+/deepseek-ai-dsh-harness-dev-context/understand-the-implementation/design-concept:
+  en: 401a852a3444aff4
+  zh: 5288a593f61c168b
+/deepseek-ai-dsh-harness-dev-context/understand-the-implementation/source-map:
+  en: 4696b6c3a1f91f96
+  zh: 3a56d257ec768a5e
+/deepseek-ai-dsh-harness-dev-context/understand-the-implementation/main-flow:
+  en: f3844a1825b2e329
+  zh: bdcafbcadbc6d316
+/deepseek-ai-dsh-harness-dev-context/further-exploration:
+  en: f291741c499581ac
+  zh: 8ee0baef51e69ef0
+/deepseek-ai-dsh-harness-dev-context/model-experience:
+  en: 215e7ba838619b7b
+  zh: a311da3843709f90
+/deepseek-ai-dsh-harness-dev-context/model-experience/harness-checkout-and-web-gui:
+  en: ddbe5927f55a6275
+  zh: 1687795c41c16a8c
+/deepseek-ai-dsh-harness-dev-context/model-experience/harness-checkout-and-web-gui/what-the-model-sees:
+  en: f3236c45cf5bc3a6
+  zh: 1a3499b2e21f4761
+/deepseek-ai-dsh-harness-dev-context/model-experience/harness-checkout-and-web-gui/what-the-model-sees/system-prompt-paragraphs:
+  en: c6c9fa4caf6f2f30
+  zh: f501149c17c0ea60
+/deepseek-ai-dsh-harness-dev-context/model-experience/harness-checkout-and-web-gui/what-the-model-sees/runtime-context-lines:
+  en: 37680cbe3eaabef5
+  zh: 8c1b432ddf7d20b5
+/deepseek-ai-dsh-harness-dev-context/model-experience/harness-checkout-and-web-gui/token-effect:
+  en: 2c629df08d801b36
+  zh: 437d43a9c5fdc68a
+/deepseek-ai-dsh-harness-dev-context/model-experience/harness-checkout-and-web-gui/kv-cache-effect:
+  en: e8f89a14bd36dae0
+  zh: bd4ec43e07e234c9
+/deepseek-ai-dsh-harness-dev-context/known-limitations-and-deferred-work:
+  en: 558945e2f537db5b
+  zh: f584fcde6275c2da
+/deepseek-ai-dsh-harness-dev-context/known-limitations-and-deferred-work/dev-note:
+  en: e67f633dc6fe7773
+  zh: e88aeb617ffb74ea

package/README.md

@@ -1,3 +1,132 @@
-# Temporary Holding Version
+---
+description: "Model context for users and maintainers of the Web GUI that names the DeepSeek Harness checkout and GUI URL without letting either change the system prompt."
+kind: "package-reference"
+---
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# @deepseek-ai/dsh-harness-dev-context
+
+English | [中文](README.zh.md)
+
+## Summary
+
+`dsh-harness-dev-context` tells an agent running behind the DeepSeek Harness Web GUI where the harness implementation checkout lives, how the GUI relates to "this page", and which URL serves it. The system prompt carries only value-free guidance; the current checkout path and GUI URL arrive as runtime context, so starting the process from another checkout, port, or installation never rewrites a Session's logged system prompt. Sessions whose prompt still embeds those values from earlier releases keep that text verbatim.
+
+## Table of Contents
+
+- [Use this package](#use-this-package)
+- [Understand the implementation](#understand-the-implementation)
+- [Further Exploration](#further-exploration)
+- [Model Experience](#model-experience)
+- [Known Limitations and Deferred Work](#known-limitations-and-deferred-work)
+- [Dev Note](#dev-note)
+
+-----
+
+<a id="use-this-package"></a>
+## Use this package
+
+The shipped Web bundle mounts this plugin as its `harness-dev-context` row. Disable that row in a profile patch when the agent should not learn the harness checkout or GUI URL. The plugin takes no configuration and activates only where every injected service exists: `systemPrompt`, `sessionProjections`, and the `webApp` service of the Web runtime, so `--help` and non-Web compositions never mount it.
+
+### What the model gets
+
+Two system-prompt sections explain that the checkout differs from the working directory and that "this page" means this GUI, together with the GUI update contract. Two runtime-context lines state the current values: the installation root four directories above this package, and the Web GUI's advertised URL from `webApp.getAdvertisedUrl()`, the same value as `DSH_WEB_URL` and the startup URL. Runtime context follows the shared snapshot rules: an unchanged value adds nothing, and a changed one appends a snapshot before the step's input instead of rewriting earlier messages.
+
+### Sessions from earlier releases
+
+Earlier releases embedded both values in the system prompt. When a Session's latest nonempty system prompt still contains those exact paragraphs, the sections repeat them verbatim, old values included, so upgrading and later port or checkout changes leave that Session's prompt byte-identical; the runtime-context lines still give the current values. Text that only resembles an earlier paragraph receives the current guidance.
+
+-----
+
+<a id="understand-the-implementation"></a>
+## Understand the implementation
+
+<details>
+<summary>Implementation internals — click to expand</summary>
+
+This section explains the design of the plugin; the observable behavior is covered in [Use this package](#use-this-package).
+
+### Design concept
+
+A host-only session projection, `harnessDevLegacyPrompt`, folds every committed nonempty `system/message` into the earlier-format paragraphs it contains, matched by their fixed text around the value on one line. The section text providers read that state through `AssembleContext.agent`; assemblies without an agent use the current guidance. The projection is restored with every other unit when a Session resumes, so no historical event is read synchronously.
+
+### Source map
+
+| File | Role |
+|---|---|
+| [`src/index.ts`](src/index.ts) | Plugin entry: sections, runtime contexts, earlier-format projection |
+
+### Main flow
+
+Activation registers the projection unit, both sections, and both contexts. At each assembly the sections choose the admitted earlier paragraph or the current guidance; at each request admission the contexts read the advertised URL. Disposing the plugin fiber removes every registration.
+
+</details>
+
+-----
+
+<a id="further-exploration"></a>
+## Further Exploration
+
+Read these pages when the package-level contract is not enough. They move from the decision record to the services this plugin reads.
+
+- [Process-specific values as runtime context](../../../.agents/notes/implemented/bug-fix/2026-10-11-process-specific-prompt-values-in-runtime-context.md) — why the values left the system prompt and how earlier Sessions stay stable.
+- [Session projections subsystem](../../../docs/subsystems/session-projection.md) — the projection contract the earlier-format state uses.
+- [Web app bundle](../../bundle/web-app/README.md) — the `webApp` service and the row that mounts this plugin.
+- [Context group map](../README.md) — sibling request-context packages.
+
+-----
+
+<a id="model-experience"></a>
+## Model Experience
+
+### Harness checkout and Web GUI
+
+#### What the model sees
+
+Two system-prompt paragraphs at first-party orders 10000 and 10100, after reusable instructions, and two runtime-context lines at context orders 200 and 210. A Session admitted under an earlier release sees its own earlier paragraphs instead of the two below.
+
+##### System-prompt paragraphs
+
+```markdown
+The runtime context names the DeepSeek Harness implementation checkout. The checkout location and current working directory are separate values and may differ; never infer the working directory from the checkout path. Use pwd to determine the current working directory. Use this checkout only to inspect or extend DSH itself.
+
+You are interacting with the user through the DeepSeek Harness Web GUI whose URL the runtime context names. When the user refers to "this page", "this GUI", or "this app" without naming another target, they mean this GUI. The browser provides no implicit DOM, route, or screenshot context. The client-plugin HMR receiver is active, but client-plugin changes reload without a refresh only while `pnpm run dev:web` is also running from this same checkout to rebuild their bundles; verify that watcher before promising automatic updates. Every other change — the apps/web shell and plain packages — requires rebuilding the affected Web artifacts and verifying this existing URL after a page refresh. Starting another server does not update this GUI. The apps/web Vite entry builds the shell but is not a standalone application because only dsh web injects window.__DSH_BOOT__. Do not start a replacement server unless the user asks; if one is needed, use a managed background job and verify its exact URL.
+```
+
+##### Runtime-context lines
+
+```markdown
+Current DeepSeek Harness implementation checkout: "<installation root>".
+
+Current DeepSeek Harness Web GUI URL: "<advertised URL>".
+```
+
+#### Token effect
+
+Two prompt paragraphs per Session and two lines in each runtime-context snapshot. A changed checkout or URL adds one snapshot.
+
+#### KV Cache effect
+
+The system prompt is identical across checkouts, ports, and installations, so a process started elsewhere leaves the cached prefix intact; a changed value appends one runtime-context snapshot after it.
+
+## Known Limitations and Deferred Work
+
+<a id="known-limitations-and-deferred-work"></a>
+
+These limits describe what the stability guarantee covers. They are current package constraints.
+
+- **Two paragraphs only** — other system-prompt text that changes between releases still rewrites the first system message on routes without in-history prompt updates.
+- **Earlier values stay** — an earlier-format Session keeps its old checkout path and URL in the system prompt for its whole lifetime; only the later runtime-context lines are current.
+- **Mixed releases** — a release without this package rewrites the first system message of a Session started with it, so every checkout that serves a shared `DSH_HOME` needs this package before they alternate.
+- **Optional values** — the two runtime-context lines are optional, so a custom persona that sets `includeRuntimeContext: false` without `complete: true` keeps the sections that point at values its requests never carry. The shipped `minimal` persona sets both.
+- **Sessions without the sections** — a Session created while `surfaceContext: false` hid both paragraphs has neither in its log, so the first resumed request adds the new sections and rewrites the first system message on routes without in-history prompt updates.
+- **One earlier wording** — the projection recognizes the paragraphs as the release immediately before this package rendered them; a Session holding an older wording gets the current guidance.
+
+<a id="dev-note"></a>
+### Dev Note
+
+<details>
+<summary>Working context for maintainers — click to expand</summary>
+
+None.
+
+</details>

package/README.zh.md

@@ -0,0 +1,132 @@
+---
+description: "面向 Web GUI 用户与维护者的模型上下文：给出 DeepSeek Harness checkout 与 GUI URL，且两者都不会改变系统提示词。"
+kind: "package-reference"
+---
+
+# @deepseek-ai/dsh-harness-dev-context
+
+[English](README.md) | 中文
+
+## 概述
+
+`dsh-harness-dev-context` 告诉运行在 DeepSeek Harness Web GUI 背后的 agent：harness 实现 checkout 在哪里、GUI 与「this page」是什么关系，以及哪个 URL 提供该 GUI。系统提示词只包含不含值的说明；当前 checkout 路径与 GUI URL 以运行时上下文送达，因此从别的 checkout、端口或安装位置启动进程，绝不会改写会话已记录的系统提示词。提示词仍嵌有早期版本这些值的会话会原样保留那段文本。
+
+## 目录
+
+- [使用本包](#use-this-package)
+- [理解实现](#understand-the-implementation)
+- [进一步探索](#further-exploration)
+- [模型体验](#model-experience)
+- [已知限制与延期工作](#known-limitations-and-deferred-work)
+- [开发备注](#dev-note)
+
+-----
+
+<a id="use-this-package"></a>
+## 使用本包
+
+随附的 Web bundle 以 `harness-dev-context` 行挂载此插件。不希望 agent 得知 harness checkout 或 GUI URL 时，在 profile patch 中禁用该行。插件不接受配置，只在每个注入服务都存在时激活：`systemPrompt`、`sessionProjections`，以及 Web 运行时的 `webApp` 服务，因此 `--help` 与非 Web 组合永远不会挂载它。
+
+### 模型得到什么
+
+两个系统提示词段落说明 checkout 与工作目录不同、「this page」指此 GUI，并给出 GUI 的更新约定。两行运行时上下文给出当前值：本包上方四层目录处的安装根，以及 `webApp.getAdvertisedUrl()` 给出的 Web GUI 公告 URL，与 `DSH_WEB_URL` 和启动 URL 相同。运行时上下文遵循共享的快照规则：值不变不追加内容，值变化时在本步输入之前追加一份快照，而不是改写更早的消息。
+
+### 早期版本的会话
+
+早期版本把两个值都嵌在系统提示词里。会话最新的非空系统提示词仍含那两段原文时，两个段落会原样重复它们（包括旧值），因此升级以及之后更换端口或 checkout 都不会改变该会话提示词的任何字节；运行时上下文行仍给出当前值。只是看起来像早期段落的文本会得到当前说明。
+
+-----
+
+<a id="understand-the-implementation"></a>
+## 理解实现
+
+<details>
+<summary>实现细节——点击展开</summary>
+
+本节解释插件的设计；可观察行为见[使用本包](#use-this-package)。
+
+### 设计思路
+
+仅限宿主的会话投影 `harnessDevLegacyPrompt` 把每个已提交的非空 `system/message` 折叠为其中包含的早期格式段落，按值两侧的固定文本在同一行内匹配。段落文本提供函数通过 `AssembleContext.agent` 读取该状态；没有 agent 的组装使用当前说明。会话恢复时该投影与其他单元一起恢复，因此不同步读取任何历史事件。
+
+### 源码地图
+
+| 文件 | 职责 |
+|---|---|
+| [`src/index.ts`](src/index.ts) | 插件入口：段落、运行时上下文、早期格式投影 |
+
+### 主流程
+
+激活时注册投影单元、两个段落与两个上下文。每次组装时，段落在已提交的早期段落与当前说明之间选择；每次请求准入时，上下文读取公告 URL。销毁插件 fiber 会移除全部注册。
+
+</details>
+
+-----
+
+<a id="further-exploration"></a>
+## 进一步探索
+
+包级约定不够用时阅读这些页面。它们从决策记录走到本插件读取的服务。
+
+- [进程相关值改走运行时上下文](../../../.agents/notes/implemented/bug-fix/2026-10-11-process-specific-prompt-values-in-runtime-context.zh.md)——这些值为什么离开系统提示词，以及早期会话如何保持稳定。
+- [会话投影子系统](../../../docs/subsystems/session-projection.zh.md)——早期格式状态使用的投影约定。
+- [Web app bundle](../../bundle/web-app/README.zh.md)——`webApp` 服务与挂载本插件的行。
+- [Context 组地图](../README.zh.md)——同组的请求上下文包。
+
+-----
+
+<a id="model-experience"></a>
+## 模型体验
+
+### Harness checkout 与 Web GUI
+
+#### 模型看到什么
+
+两个系统提示词段落，位于可复用指令之后的第一方顺序 10000 与 10100；两行运行时上下文，位于上下文顺序 200 与 210。在早期版本下提交过提示词的会话看到的是自己的早期段落，而不是下面两段。
+
+##### 系统提示词段落
+
+```markdown
+The runtime context names the DeepSeek Harness implementation checkout. The checkout location and current working directory are separate values and may differ; never infer the working directory from the checkout path. Use pwd to determine the current working directory. Use this checkout only to inspect or extend DSH itself.
+
+You are interacting with the user through the DeepSeek Harness Web GUI whose URL the runtime context names. When the user refers to "this page", "this GUI", or "this app" without naming another target, they mean this GUI. The browser provides no implicit DOM, route, or screenshot context. The client-plugin HMR receiver is active, but client-plugin changes reload without a refresh only while `pnpm run dev:web` is also running from this same checkout to rebuild their bundles; verify that watcher before promising automatic updates. Every other change — the apps/web shell and plain packages — requires rebuilding the affected Web artifacts and verifying this existing URL after a page refresh. Starting another server does not update this GUI. The apps/web Vite entry builds the shell but is not a standalone application because only dsh web injects window.__DSH_BOOT__. Do not start a replacement server unless the user asks; if one is needed, use a managed background job and verify its exact URL.
+```
+
+##### 运行时上下文行
+
+```markdown
+Current DeepSeek Harness implementation checkout: "<installation root>".
+
+Current DeepSeek Harness Web GUI URL: "<advertised URL>".
+```
+
+#### Token 影响
+
+每个会话两段提示词，每份运行时上下文快照两行。checkout 或 URL 变化时追加一份快照。
+
+#### KV Cache 影响
+
+系统提示词在不同 checkout、端口与安装位置下完全相同，因此在别处启动的进程不会破坏已缓存的前缀；值变化时在其后追加一份运行时上下文快照。
+
+## 已知限制与延期工作
+
+<a id="known-limitations-and-deferred-work"></a>
+
+这些限制说明稳定性保证覆盖哪些内容。它们是当前包约束。
+
+- **只覆盖两段**——版本之间变化的其他系统提示词文本，在不支持 in-history 提示词更新的路由上仍会改写第一条 system 消息。
+- **早期值保留**——早期格式会话在整个生命周期内都在系统提示词里保留旧 checkout 路径与 URL；只有之后的运行时上下文行是当前值。
+- **混用版本**——不含本包的版本会改写以本包启动的会话的第一条 system 消息，因此共用同一 `DSH_HOME` 的每个 checkout 都需要先包含本包，才能交替运行。
+- **可选值**——两行运行时上下文是可选的，因此设置 `includeRuntimeContext: false` 但未设置 `complete: true` 的自定义 persona 会保留指向其请求从不携带之值的段落。随附的 `minimal` persona 两者都设置。
+- **没有段落的会话**——在 `surfaceContext: false` 隐藏两段时创建的会话，日志中两段都没有，因此恢复后的第一个请求会加入新段落，并在不支持 in-history 提示词更新的路由上改写第一条 system 消息。
+- **只认一版早期措辞**——投影按本包之前紧邻的版本渲染的段落识别；保存更早措辞的会话会得到当前说明。
+
+<a id="dev-note"></a>
+### 开发备注
+
+<details>
+<summary>维护者工作上下文——点击展开</summary>
+
+无。
+
+</details>

package/lib/index.js

@@ -0,0 +1,124 @@
+import { fileURLToPath } from "node:url";
+import { z } from "zod";
+//#region lib/types/index.js
+/**
+* @deepseek-ai/dsh-harness-dev-context — model context for an agent that can
+* inspect and extend the DeepSeek Harness serving its Web GUI. It registers
+* path- and URL-free prompt sections and states the current implementation
+* checkout and Web GUI URL as runtime context, so a process started from
+* another checkout, port, or installation leaves the system prompt unchanged.
+* A Session whose admitted prompt holds the paragraphs that embedded those
+* values keeps them verbatim, so resuming it never rewrites its logged prompt.
+* @module @deepseek-ai/dsh-harness-dev-context
+*/
+/** Stable Cordis plugin name. */
+const name = "harness-dev-context";
+/** Prompt registries, the projection registry, and the Web GUI whose URL the model learns. */
+const inject = [
+	"systemPrompt",
+	"sessionProjections",
+	"webApp"
+];
+/** This installation's root, four directories above this package's source or built entry. */
+const SOURCE_ROOT = fileURLToPath(new URL("../../../..", import.meta.url));
+/** Prompt-section and runtime-context name for the implementation checkout. */
+const HARNESS_SOURCE = "harness:source";
+/** Prompt-section and runtime-context name for the Web GUI orientation and its URL. */
+const WEB_SURFACE = "app:web-surface";
+const HARNESS_SOURCE_PROMPT = `The runtime context names the DeepSeek Harness implementation checkout. The checkout location and current working directory are separate values and may differ; never infer the working directory from the checkout path. Use pwd to determine the current working directory. Use this checkout only to inspect or extend DSH itself.`;
+const WEB_SURFACE_PROMPT = `You are interacting with the user through the DeepSeek Harness Web GUI whose URL the runtime context names. When the user refers to "this page", "this GUI", or "this app" without naming another target, they mean this GUI. The browser provides no implicit DOM, route, or screenshot context. The client-plugin HMR receiver is active, but client-plugin changes reload without a refresh only while \`pnpm run dev:web\` is also running from this same checkout to rebuild their bundles; verify that watcher before promising automatic updates. Every other change — the apps/web shell and plain packages — requires rebuilding the affected Web artifacts and verifying this existing URL after a page refresh. Starting another server does not update this GUI. The apps/web Vite entry builds the shell but is not a standalone application because only dsh web injects window.__DSH_BOOT__. Do not start a replacement server unless the user asks; if one is needed, use a managed background job and verify its exact URL.`;
+/**
+* Fixed text around the value in each paragraph that embedded it, frozen as
+* those releases rendered it: never edit these together with the current
+* guidance, or Sessions holding the earlier paragraphs stop matching and
+* rewrite their logged prompt.
+*/
+const LEGACY_SOURCE = {
+	prefix: "The DeepSeek Harness implementation checkout is at ",
+	suffix: ". The checkout location and current working directory are separate values and may differ; never infer the working directory from this path. Use pwd to determine the current working directory. Use this checkout only to inspect or extend DSH itself."
+};
+const LEGACY_WEB_SURFACE = {
+	prefix: "You are interacting with the user through the DeepSeek Harness Web GUI at ",
+	suffix: ". When the user refers to \"this page\", \"this GUI\", or \"this app\" without naming another target, they mean this GUI. The browser provides no implicit DOM, route, or screenshot context. The client-plugin HMR receiver is active, but client-plugin changes reload without a refresh only while `pnpm run dev:web` is also running from this same checkout to rebuild their bundles; verify that watcher before promising automatic updates. Every other change — the apps/web shell and plain packages — requires rebuilding the affected Web artifacts and verifying this existing URL after a page refresh. Starting another server does not update this GUI. The apps/web Vite entry builds the shell but is not a standalone application because only dsh web injects window.__DSH_BOOT__. Do not start a replacement server unless the user asks; if one is needed, use a managed background job and verify its exact URL."
+};
+/** Host-only projection key of the value-bearing paragraphs a Session admitted. */
+const LEGACY_PROMPT = "harnessDevLegacyPrompt";
+const legacyPromptSchema = z.object({
+	source: z.string().nullable(),
+	web: z.string().nullable()
+});
+/** The complete single-line paragraph between `prefix` and `suffix`, or `null` when the prompt has none. */
+function legacyParagraph(prompt, { prefix, suffix }) {
+	const start = prompt.indexOf(prefix);
+	if (start < 0) return null;
+	const end = prompt.indexOf(suffix, start + prefix.length);
+	if (end < 0) return null;
+	const paragraph = prompt.slice(start, end + suffix.length);
+	return paragraph.includes("\n") ? null : paragraph;
+}
+/**
+* Fold one committed event into the admitted paragraphs. Like the loop's own
+* prompt-version reading, only a single nonempty text block is a prompt
+* version; an emptied or other version keeps the previous state, because a
+* series consolidation can log only the emptied later version.
+*/
+function foldLegacyPrompt(state, event) {
+	if (event.type !== "system/message") return state;
+	const { content } = event.data.message;
+	const [block] = content;
+	if (content.length !== 1 || block?.type !== "text" || block.text === "") return state;
+	const source = legacyParagraph(block.text, LEGACY_SOURCE);
+	const web = legacyParagraph(block.text, LEGACY_WEB_SURFACE);
+	return source === state.source && web === state.web ? state : {
+		source,
+		web
+	};
+}
+const ADMITS_NOTHING = {
+	source: null,
+	web: null
+};
+/**
+* Register the two sections, their runtime-context values, and the
+* projection that keeps a Session's admitted paragraphs.
+* @param ctx - plugin context with every {@link inject} service.
+*/
+function apply(ctx) {
+	ctx.sessionProjections.register({
+		key: LEGACY_PROMPT,
+		stateVersion: 1,
+		stateSchema: legacyPromptSchema,
+		init: () => ADMITS_NOTHING,
+		apply: foldLegacyPrompt
+	});
+	const admitted = (context) => {
+		const session = context.agent?.session;
+		return session === void 0 ? ADMITS_NOTHING : ctx.sessionProjections.stateOf(session, LEGACY_PROMPT);
+	};
+	ctx.systemPrompt.section({
+		name: HARNESS_SOURCE,
+		order: ctx.systemPrompt.getSectionOrder("HARNESS_SOURCE"),
+		interpolate: false,
+		text: (context) => admitted(context).source ?? HARNESS_SOURCE_PROMPT
+	});
+	ctx.systemPrompt.context({
+		name: HARNESS_SOURCE,
+		order: ctx.systemPrompt.getContextOrder("HARNESS_SOURCE"),
+		interpolate: false,
+		text: `Current DeepSeek Harness implementation checkout: ${JSON.stringify(SOURCE_ROOT)}.`
+	});
+	ctx.systemPrompt.section({
+		name: WEB_SURFACE,
+		order: ctx.systemPrompt.getSectionOrder("WEB_SURFACE"),
+		interpolate: false,
+		text: (context) => admitted(context).web ?? WEB_SURFACE_PROMPT
+	});
+	ctx.systemPrompt.context({
+		name: WEB_SURFACE,
+		order: ctx.systemPrompt.getContextOrder("WEB_SURFACE"),
+		interpolate: false,
+		text: () => `Current DeepSeek Harness Web GUI URL: ${JSON.stringify(ctx.webApp.getAdvertisedUrl())}.`
+	});
+}
+//#endregion
+export { apply, inject, name };

package/lib/types/index.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @deepseek-ai/dsh-harness-dev-context — model context for an agent that can
+ * inspect and extend the DeepSeek Harness serving its Web GUI. It registers
+ * path- and URL-free prompt sections and states the current implementation
+ * checkout and Web GUI URL as runtime context, so a process started from
+ * another checkout, port, or installation leaves the system prompt unchanged.
+ * A Session whose admitted prompt holds the paragraphs that embedded those
+ * values keeps them verbatim, so resuming it never rewrites its logged prompt.
+ * @module @deepseek-ai/dsh-harness-dev-context
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import { z as zod } from 'zod';
+/** Stable Cordis plugin name. */
+export declare const name = "harness-dev-context";
+/** Prompt registries, the projection registry, and the Web GUI whose URL the model learns. */
+export declare const inject: string[];
+declare const legacyPromptSchema: zod.ZodObject<{
+    source: zod.ZodNullable<zod.ZodString>;
+    web: zod.ZodNullable<zod.ZodString>;
+}, zod.core.$strip>;
+/** Value-bearing paragraphs of the latest nonempty system prompt a Session committed; `null` where it has none. */
+type LegacyPrompt = zod.infer<typeof legacyPromptSchema>;
+declare module '@deepseek-ai/dsh-session-projection/types' {
+    interface SessionProjectionStateMap {
+        /** Value-bearing harness-source and Web-surface paragraphs of the latest nonempty admitted system prompt. */
+        harnessDevLegacyPrompt: LegacyPrompt;
+    }
+}
+/**
+ * Register the two sections, their runtime-context values, and the
+ * projection that keeps a Session's admitted paragraphs.
+ * @param ctx - plugin context with every {@link inject} service.
+ */
+export declare function apply(ctx: Context): void;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/package.json

@@ -1,6 +1,49 @@
 {
   "name": "@deepseek-ai/dsh-harness-dev-context",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "description": "Model context naming the DeepSeek Harness checkout and Web GUI URL without letting either change the system prompt",
+  "version": "0.2.1-alpha.3",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/deepseek-ai/deepseek-harness.git",
+    "directory": "packages/context/harness-dev-context"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/types/**/*.d.ts"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "zod": "4.4.3"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "~4.0.5-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.3"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "~4.0.5-alpha.2",
+    "@deepseek-ai/dsh-agent": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-agent-loop-testkit": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-llm": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-session": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-session-projection": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-system-prompt": "0.2.1-alpha.3",
+    "@deepseek-ai/dsh-web-app": "0.2.1-alpha.3"
+  }
 }