@hydraharness/harness-base 0.1.1-rc.6

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DeepSeek
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,26 @@
+# `@hydraharness/harness-base`
+
+The [media generation plugin](../../media/tool-media/README.md) mounts by default with one live Settings switch for image and video tools. Configure a generation model and its credentials before requesting media; mounting the plugin makes no provider request.
+
+The shared hydra core as a profile bundle: [`cordis.patch.yml`](cordis.patch.yml) inserts every base plugin row — model adapters, the shared [`agent-default-model`](../../core/agent-default-model/README.md) selection, tools, persistence, policy, settings/credentials, telemetry, the [`imported OpenAI/Codex plugin runtime`](../../host/plugin-runtime/README.md), and the core spawn/fork subagent providers — over the empty profile root, as the first layer of every profile's `hydra.profile.bundles` list. The optional Codex and Claude Code providers stay outside this package and its production dependency closure; a Profile installs either [product provider Bundle](../../subagent/README.md) only when needed. The default `@hydraharness/harness` production closure therefore includes neither product provider, the Claude Agent SDK, nor the Codex wrapper and platform payloads. Later bundle layers (e.g. [`@hydraharness/harness-web-app`](../web-app/README.md)) and the user's profile `cordis.patch.yml` override these rows by id; a patch replaces a row's whole `config`, so mode-specific values live in mode bundles, not here. The package has no runtime API; the profile composer resolves the patch through the `hydra.bundle.patch` manifest field, never through code.
+
+The patch gates both shell stacks by platform on its own rows: `bash-sandbox`/`tool-bash` carry `disabled: !!js process.platform === 'win32'` (bash has no Windows runner), and their twins `pwsh-sandbox`/`tool-pwsh` mount on win32 only with the inverted expression — one shared patch file, exactly one shell stack per host. The permission surface stays exactly as on POSIX: `sandbox`/`sandbox-policy` enforce the file-effect policy through the Windows ACL restricted-token runner (the win32 chain of `@hydraharness/harness-sandbox-local` → `@hydraharness/harness-sandbox-windows-acl`), the permission switcher and the approval service run unchanged, and `fs-sandbox` keeps fencing `ctx.fs` writes — mounting `@hydraharness/harness-fs-local` alongside it would double-register `ctx.fs` and fail the load. A Windows host that prefers the unconfined local pwsh executor or full access overrides these rows through its profile or home `cordis.patch.yml` (the bash-restore recipe must be complete: disable `pwsh-sandbox`/`tool-pwsh` AND re-enable `bash-sandbox`/`tool-bash` — both executor families register the same `bash` service, so an incomplete recipe fails loud at load). POSIX hosts see the pwsh rows disabled.
+
+The row set and its rationale are documented inline in the patch file; the [generated composition graph](../../../apps/cli/composition.md) renders it.
+
+The base bundle mounts DeepSeek, Serper, and Other search providers with [explicit Settings selection](../../web/web/README.md#product-search-settings) and public HTTP fetch. Standard and Code presets expose fetch; private origins require an explicit operator grant in the [HTTP provider](../../web/web-fetch-http/README.md). The optional [research policy](../../guard/research-policy/README.md) can impose deployment limits when configured explicitly.
+
+The base also mounts the LSP capability; its stdio provider defaults to disabled unless `HYDRA_LSP_COMMAND` is set. The provider checks executable availability on query, so a saved enablement override or a command unavailable on another machine cannot prevent Desktop or Web startup. Install a compatible server on that host and set `HYDRA_LSP_COMMAND` to its command or absolute path; queries against a missing server return `LSP_UNAVAILABLE`. See [stdio configuration](../../lsp/lsp-stdio/README.md#configuration).
+
+## Model Experience
+
+Indirectly, through the inserted rows: this bundle selects the shipped persona-less prompt base, tool set, and DeepSeek adapter that mode bundles specialize, and contributes no model-visible text of its own.
+
+#### KV Cache effect
+
+None directly; each inserted row's package owns its effect.
+
+## Known Limitations and Deferred Work
+
+- **A patch replaces whole row configs** — profile overrides must restate every field a row keeps; there is no deep-merge layer.
+- **The Windows temp grant is a private per-session subdirectory** — `workspace-write` confines writes to the workspace plus the session's own temp subdirectory (`<temp>\hydra-<hash>`, TMP/TEMP rewritten for confined children); `read-only` grants nothing. See `@hydraharness/harness-sandbox-windows-acl`.

package/cordis.patch.yml

@@ -0,0 +1,617 @@
+# The hydra-base bundle patch: the shared core of every hydra profile, applied as
+# ONE insert over the empty profile root. Later bundle patches and the user's
+# profile cordis.patch.yml address these rows by id, with the last write
+# winning per row.
+#
+# A patch replaces the targeted row's whole `config` rather than merging into
+# it, so a row whose value differs by mode does NOT live here: it belongs to
+# each mode bundle, keeping any single row down to one bundle layer plus the
+# user's. Mode-specific rows appear below only with shared plugin identity and
+# neutral defaults; each mode bundle restates its complete configuration.
+#
+# Row order carries no load semantics (activation is service-availability
+# driven); the grouping is for readers.
+
+- insert:
+    - id: timer
+      name: '@hydraharness/cordis-plugin-timer'
+      description: Schedules Cordis tasks and timers used by other plugins.
+      application: Run delayed and recurring Host work when a plugin registers a timer.
+      pluginType: core
+
+    - id: hmr
+      name: '@hydraharness/cordis-plugin-hmr'
+      description: Reloads changed plugin modules during development.
+      application: Apply local plugin edits without restarting the entire Host.
+      config:
+        root: ['.']
+
+    - id: llm
+      name: '@hydraharness/harness-llm'
+      pluginType: core
+
+    - id: session
+      name: '@hydraharness/harness-session'
+      pluginType: core
+
+    - id: typert
+      name: '@hydraharness/harness-typert-registry'
+      pluginType: core
+
+    - id: typert-loader
+      name: '@hydraharness/harness-typert-loader'
+      pluginType: core
+
+    - id: typert-gateway
+      name: '@hydraharness/harness-api-gateway'
+      pluginType: core
+
+    - id: session-title
+      name: '@hydraharness/harness-session-title'
+      pluginType: core
+      config:
+        fallbackMaxWords: 5
+        fallbackMaxBytes: 40
+        maxTitleBytes: 80
+
+    - id: session-title-llm
+      name: '@hydraharness/harness-session-title-first-prompt-llm'
+      config:
+        targetWords: 5
+        targetCjkCharacters: 10
+        maxInputBytes: 4096
+        maxOutputTokens: 64
+        timeoutMs: 60000
+
+    - id: user-questions
+      name: '@hydraharness/harness-user-questions'
+
+    - id: agent
+      name: '@hydraharness/harness-agent'
+      pluginType: core
+
+    # The transport-independent default for Agents created by entry points.
+    # Settings may supply a saved selection; consumers read it at creation time.
+    - id: agent-default-model
+      name: '@hydraharness/harness-agent-default-model'
+      pluginType: core
+      config:
+        provider: deepseek-official
+        model: deepseek-v4-flash
+
+    - id: jobs
+      name: '@hydraharness/harness-jobs-local'
+      pluginType: core
+
+    - id: llm-retry
+      name: '@hydraharness/harness-llm-retry'
+
+    - id: llm-call-log
+      name: '@hydraharness/harness-llm-call-log'
+
+    # User-settings document (`$HYDRA_HOME/settings.yaml`, hot-reloaded): a
+    # `llm-deepseek:` or `llm-pi-ai:` section there overrides the adapter entries
+    # below without a restart, and is what the web Models page writes.
+    - id: settings
+      name: '@hydraharness/harness-settings-file'
+      pluginType: core
+
+    # Credential sources: inherited environment over the managed
+    # `$HYDRA_HOME/.credentials.yaml`, with project and user `.env` fallbacks.
+    # Adapters resolve references per request; the Models page writes only the
+    # managed document, which is never materialized into the process environment.
+    - id: credentials
+      name: '@hydraharness/harness-credentials-local'
+      pluginType: core
+
+    # Provider-owned login flows use the shared credential record store and
+    # expose browser-safe notices/prompts through the Host authorization API.
+    - id: authorization
+      name: '@hydraharness/harness-authorization'
+      pluginType: core
+
+    # The pi-ai multi-provider twin, mounted dormant: zero routes (and no extra
+    # models in the picker) until a `llm-pi-ai:` settings section supplies provider
+    # profiles — then those routes register live, keys resolving per request
+    # through their apiKeyEnv references, and drop again when the section empties.
+    # Supplying those profiles is exactly what the web Models page does. Which
+    # adapters exist is composition; which providers run is the user's settings
+    # document.
+    - id: llm-pi-ai
+      name: '@hydraharness/harness-llm-pi-ai'
+      pluginType: core
+
+    # Account SDKs load only for login or requests on an enabled account route.
+    - id: llm-account-auth
+      name: '@hydraharness/harness-llm-account-auth'
+      pluginType: core
+
+    - id: session-persistence-jsonl
+      name: '@hydraharness/harness-session-persistence-jsonl'
+      pluginType: core
+      config:
+        root: !!js hydraHomePath('sessions')
+
+    # Durable image bytes live outside the append-only session log. Messages
+    # keep content-addressed references that this shared backend resolves for
+    # provider requests and authorized history reads.
+    - id: attachment-local
+      name: '@hydraharness/harness-attachment-local'
+
+    # Full-text session search is opt-in. `openAt: never` keeps
+    # ctx.sessionQuery mounted — exact reads, titles, and lineage traces
+    # (session export, subagent-fork Workspace inheritance) stay available —
+    # while search calls fail with SESSION_QUERY_SEARCH_DISABLED and SQLite is
+    # never opened; the Web sidebar search matches titles and workspace names
+    # only. Deployments enabling content search override `openAt` to
+    # `first-search` or `startup` in a later patch layer (profile
+    # cordis.patch.yml or a --patch overlay), typically with a durable `path`.
+    - id: session-query-sqlite
+      name: '@hydraharness/harness-session-query-sqlite'
+      config:
+        path: ':memory:'
+        openAt: never
+
+    # Shared projection registry: subagent catalog identity (mode/label) folds
+    # through its registered units, so the `list_agents` surface below fails
+    # loud without it; web layers reuse this same mount for list rows.
+    - id: session-projection
+      name: '@hydraharness/harness-session-projection'
+      pluginType: core
+
+    # Session telemetry is mounted but disabled by default. HYDRA_TELEMETRY_MODE
+    # explicitly opts into FULL or FEEDBACK_ONLY reporting; uploading mirrors
+    # session-log records onto OTLP/HTTP logs with no session-telemetry/record redaction
+    # rule, so exports are the raw captured copy. The deployment stance, env
+    # seams, and follow-ups are pinned in the default-off Agent Note.
+    # HYDRA_TELEMETRY_OTLP_URL overrides the production endpoint. A non-empty
+    # HYDRA_TELEMETRY_DISABLED — any value, including '0'/'false' — opts the
+    # process out (the launchers patch the row disabled; config cannot disable
+    # a row). Exports carry the harness home's anonymous user id ($HYDRA_HOME/.anonymous-user-id,
+    # random UUID; delete the file to reset the identity) as the Resource's
+    # user.id. The exporter/processor values normally bound the shutdown drain
+    # to ~1s against an unreachable collector: exporter.timeoutMillis is both
+    # the per-attempt socket timeout and the retry deadline (1s effectively
+    # disables the SDK's 5-try backoff), while maxExportBatchSize == maxQueueSize
+    # (both explicit) makes the drain a single batch. The SDK awaits
+    # exporter.forceFlush() outside exportTimeoutMillis, so the backend's 3s
+    # shutdownTimeoutMillis is the load-bearing outer bound when a transport
+    # promise never settles. Every CLI exit path drains it by disposing the root
+    # on SIGINT/SIGTERM.
+    - id: session-telemetry-otel
+      name: '@hydraharness/harness-session-telemetry-otel'
+      config:
+        mode: !!js process.env.HYDRA_TELEMETRY_MODE || 'DISABLED'
+        shutdownTimeoutMillis: 3000
+        exporter:
+          url: !!js process.env.HYDRA_TELEMETRY_OTLP_URL ?? 'https://harness-telemetry.deepseeksvc.com/v1/logs'
+          compression: gzip
+          timeoutMillis: 1000
+        processor:
+          scheduledDelayMillis: 10000
+          maxQueueSize: 2048
+          maxExportBatchSize: 2048
+          exportTimeoutMillis: 1500
+
+    - id: subprocess
+      name: '@hydraharness/harness-subprocess-local'
+      pluginType: core
+
+    # HYDRA_LSP_COMMAND enables semantic navigation for coding presets. Resolve
+    # the executable on query so a saved enablement override cannot block
+    # startup on a machine without the configured server.
+    - id: lsp
+      name: '@hydraharness/harness-lsp'
+      pluginType: core
+
+    - id: lsp-stdio
+      name: '@hydraharness/harness-lsp-stdio'
+      pluginType: core
+      disabled: !!js process.env.HYDRA_LSP_COMMAND === undefined
+      config:
+        servers:
+          typescript:
+            command: !!js process.env.HYDRA_LSP_COMMAND ?? 'typescript-language-server'
+            resolveAt: query
+            args: ['--stdio']
+            extensionToLanguage:
+              .ts: typescript
+              .tsx: typescriptreact
+              .js: javascript
+              .jsx: javascriptreact
+
+    # Every shipped CLI mode starts with the same file-effect boundary.
+    # The environment remains an explicit deployment override; otherwise fresh
+    # sessions pin workspace-write + ask through the permission service below.
+    - id: sandbox
+      name: '@hydraharness/harness-sandbox-local'
+      pluginType: core
+
+    - id: sandbox-policy
+      name: '@hydraharness/harness-sandbox-policy'
+      pluginType: core
+      config:
+        mode: !!js process.env.HYDRA_PERMISSION_MODE ?? 'workspace-write'
+        workspaceRoot: !!js process.cwd()
+
+    - id: bash-sandbox
+      name: '@hydraharness/harness-bash-sandbox'
+      pluginType: core
+      disabled: !!js process.platform === 'win32'
+      config:
+        timeoutMs: 60000
+
+    - id: pwsh-sandbox
+      name: '@hydraharness/harness-pwsh-sandbox'
+      pluginType: core
+      disabled: !!js process.platform !== 'win32'
+
+    - id: approval
+      name: '@hydraharness/harness-user-approval'
+      pluginType: core
+      config:
+        policy: !!js "(process.env.HYDRA_PERMISSION_MODE ?? 'workspace-write') === 'danger-full-access' ? 'never' : 'ask'"
+
+    - id: permission
+      name: '@hydraharness/harness-permission-presets'
+      pluginType: core
+      config:
+        presets:
+          read-only:
+            sandbox: read-only
+            approval: ask
+          workspace-write:
+            sandbox: workspace-write
+            approval: ask
+          danger-full-access:
+            sandbox: danger-full-access
+            approval: never
+
+    - id: shell-env
+      name: '@hydraharness/harness-shell-env'
+      pluginType: core
+
+    - id: tool-bash
+      name: '@hydraharness/harness-tool-bash'
+      disabled: !!js process.platform === 'win32'
+
+    - id: tool-pwsh
+      name: '@hydraharness/harness-tool-pwsh'
+      disabled: !!js process.platform !== 'win32'
+
+    - id: tool-jobs
+      name: '@hydraharness/harness-tool-jobs'
+
+    - id: fs-observation-policy
+      name: '@hydraharness/harness-fs-observation-policy'
+      pluginType: core
+
+    - id: tool-fs
+      name: '@hydraharness/harness-tool-fs'
+
+    - id: fs-review
+      name: '@hydraharness/harness-fs-review'
+
+    - id: tool-fs-search
+      name: '@hydraharness/harness-tool-fs-search'
+      config:
+        sampleOverCapGlobResults: false
+
+    - id: agent-instructions
+      name: '@hydraharness/harness-agent-instructions'
+      config:
+        maxBytes: 65536
+
+    # Personality preference: settings-backed tone selector for the system
+    # prompt, logged to each session as durable prompt provenance.
+    - id: personalization
+      name: '@hydraharness/harness-personalization'
+
+    - id: skill
+      name: '@hydraharness/harness-skill'
+      pluginType: core
+
+    - id: skill-filesystem
+      name: '@hydraharness/harness-skill-filesystem'
+
+    - id: skill-badge
+      name: '@hydraharness/harness-skill-badge'
+      disabled: true
+
+    - id: tool-skill
+      name: '@hydraharness/harness-tool-skill'
+
+    - id: commands
+      name: '@hydraharness/harness-commands'
+      pluginType: core
+
+    # Imported OpenAI/Codex plugin bundles are shared by every profile. The
+    # runtime owns immutable bundles, per-plugin data, and reversible loading.
+    - id: plugin-runtime
+      name: '@hydraharness/harness-plugin-runtime'
+      pluginType: core
+
+    # The user's own MCP servers and hooks, stored in `$HYDRA_HOME/settings.yaml`
+    # rather than composed here: each registry mounts what its settings section
+    # declares and unmounts it again when the record is disabled or removed, so
+    # a server or hook added from the Settings page survives a restart and one
+    # added by hand-editing the document takes effect without one.
+    - id: mcp-registry
+      name: '@hydraharness/harness-mcp-registry'
+      pluginType: core
+
+    - id: hooks-registry
+      name: '@hydraharness/harness-hooks-registry'
+      pluginType: core
+
+    - id: command-feedback
+      name: '@hydraharness/harness-command-feedback'
+
+    - id: goal
+      name: '@hydraharness/harness-goal'
+      pluginType: core
+
+    - id: goal-round-driver
+      name: '@hydraharness/harness-goal-round-driver'
+
+    - id: command-goal
+      name: '@hydraharness/harness-command-goal'
+
+    - id: plan-mode
+      name: '@hydraharness/harness-plan-mode'
+      config:
+        section: |
+              You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the user switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
+
+              Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
+
+              The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed only to keep the request shape stable. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
+
+              Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
+
+              Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
+
+              When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
+
+    - id: token-meter
+      name: '@hydraharness/harness-token-meter'
+      pluginType: core
+
+    - id: compaction-basic
+      name: '@hydraharness/harness-compaction-basic'
+
+    # Human `/compact`: one useful reduction below the automatic threshold. Backend
+    # independent, so it follows whichever compaction service this leaf mounts.
+    - id: command-compact
+      name: '@hydraharness/harness-command-compact'
+
+    - id: subagent
+      name: '@hydraharness/harness-subagent'
+      config:
+        maxActivePerTree: 4
+        maxChildrenPerTree: 8
+      pluginType: core
+
+    - id: subagent-spawn-in-process
+      name: '@hydraharness/harness-subagent-spawn-in-process'
+      pluginType: core
+      config:
+        providerName: spawn
+
+    - id: subagent-fork-in-process
+      name: '@hydraharness/harness-subagent-fork-in-process'
+      pluginType: core
+      config:
+        providerName: fork
+
+    # Continuable background children are selected per delegation tool. The
+    # separately loaded follow-up tool registers the one global `send_message`.
+    - id: tool-subagent-control
+      name: '@hydraharness/harness-tool-subagent-control'
+
+    - id: tool-subagent-list-agents
+      name: '@hydraharness/harness-tool-subagent-control/list-agents'
+
+    - id: tool-subagent
+      name: '@hydraharness/harness-tool-subagent'
+      config:
+        provider: spawn
+        toolName: subagent
+        backgroundMode: continuable
+
+    # Fork stays one-shot: a continuable child's `report` tool and prompt
+    # section precede the inherited history a fork exists to reuse; one-shot
+    # fork children install neither, keeping the parent's request prefix.
+    # See .agents/notes/implemented/architecture/2026-08-10-fork-children-stay-one-shot.md.
+    - id: tool-subagent-fork
+      name: '@hydraharness/harness-tool-subagent'
+      config:
+        provider: fork
+        toolName: subagent_fork
+        backgroundMode: one-shot
+
+    # Optional direct-child return channel; absent from roots and one-shot agents.
+    - id: tool-subagent-report
+      name: '@hydraharness/harness-tool-subagent-report'
+
+    - id: workflow-worker-thread
+      name: '@hydraharness/harness-workflow-worker-thread'
+      config:
+        provider: spawn
+
+    - id: tool-workflow
+      name: '@hydraharness/harness-tool-workflow'
+
+    - id: timeout-policy
+      name: '@hydraharness/harness-tool-call-timeout-policy'
+
+    - id: spill-local
+      name: '@hydraharness/harness-spill-local'
+      pluginType: core
+
+    - id: spill-policy
+      name: '@hydraharness/harness-spill-policy'
+      pluginType: core
+      config:
+        maxInlineBytes: 50000
+
+    # Durability checkpoints before each model request and top-level dispatch.
+    - id: session-checkpoint-policy
+      name: '@hydraharness/harness-session-checkpoint-policy'
+      pluginType: core
+
+    # Compacts oversized tool results before the broader conversation compactor
+    # runs, preserving the model-visible result within the configured budget.
+    - id: tool-result-pruner
+      name: '@hydraharness/harness-compaction-tool-result-pruner'
+      config:
+        thresholdChars: 8192
+        headChars: 4096
+        tailChars: 1024
+
+    - id: tool-media
+      name: '@hydraharness/harness-tool-media'
+
+    - id: tool-session-version
+      name: '@hydraharness/harness-tool-session-version'
+
+    - id: tool-todo
+      name: '@hydraharness/harness-tool-todo'
+      config:
+        allowParallelInProgress: true
+
+    # Persisted same-session goals reach the model and the slash menu here; the
+    # domain, driver, and `/goal` command are above.
+    - id: tool-goal
+      name: '@hydraharness/harness-tool-goal'
+
+    # Fresh-agent Ralph iteration over a build-time-fixed script.
+    - id: tool-ralph
+      name: '@hydraharness/harness-tool-ralph'
+      config:
+        subagentProvider: spawn
+        maxRounds: 64
+
+    - id: tool-str-replace-editor
+      name: '@hydraharness/harness-tool-str-replace-editor'
+      config:
+        maxOutputChars: 16000
+
+    # Consecutive-repeat reminders on the tool chain.
+    - id: repeat-tool-reminder
+      name: '@hydraharness/harness-repeat-tool-reminder'
+      config:
+        thresholds: [3, 5, 8]
+        argumentsPreviewChars: 500
+
+    # Every mode enables the stable model-facing web_search tool. Search provider
+    # selection is saved independently of the active chat model in Settings.
+    - id: research-policy
+      name: '@hydraharness/harness-research-policy'
+
+    - id: web
+      name: '@hydraharness/harness-web'
+      pluginType: core
+      config:
+        requireSearchSelection: true
+
+    - id: web-search-deepseek
+      name: '@hydraharness/harness-web-search-deepseek'
+      pluginType: core
+
+    - id: web-search-http
+      name: '@hydraharness/harness-web-search-http'
+      pluginType: core
+
+    - id: web-fetch-http
+      name: '@hydraharness/harness-web-fetch-http'
+      pluginType: core
+      config:
+        timeoutMs: 45000
+
+    - id: tool-web
+      name: '@hydraharness/harness-tool-web'
+      config:
+        fetch: true
+        searchTimeoutMs: 60000
+
+    # The embedded browser seam. It starts no Electron process until an agent's
+    # first browser action, so mounting it here costs nothing in a session that
+    # never browses; without the optional `electron` package every call fails
+    # with BROWSER_UNAVAILABLE and the rest of the harness is unaffected. The
+    # profile directory persists so an SSO login survives the session — and
+    # carries the prompt-injection exposure the package README documents.
+    - id: browser-electron
+      name: '@hydraharness/harness-browser-electron'
+      pluginType: core
+
+    # Recalls graph-linked Obsidian knowledge through MCP, plus approval-gated
+    # knowledge saves. Independent of Browser tooling.
+    - id: obsidian-knowledge
+      name: '@hydraharness/harness-obsidian-knowledge'
+
+    # Verified per-page task guidance in private SQLite, scoped to this
+    # workspace. Dormant by default: a role is an operator's own vocabulary
+    # for their deployment (order-operator, support-agent, ...), so there is
+    # no neutral default to mount unconditionally. Setting HYDRA_PAGE_MEMORY_ROLE
+    # opts in; Settings → Plugins overrides role/locale/storageDir afterward,
+    # taking effect after a restart.
+    - id: page-memory
+      name: '@hydraharness/harness-page-memory'
+      disabled: !!js process.env.HYDRA_PAGE_MEMORY_ROLE === undefined
+      config:
+        workspaceDir: !!js process.cwd()
+        role: !!js process.env.HYDRA_PAGE_MEMORY_ROLE ?? ''
+        locale: !!js process.env.HYDRA_PAGE_MEMORY_LOCALE ?? 'en-US'
+
+    # ── rows every mode mounts, whose values each overlay may state ──────────────
+
+    # The tool registry. Presentation mode is a deployment choice; omitting it here
+    # keeps the schema default (native).
+    - id: tools
+      name: '@hydraharness/harness-tools'
+      pluginType: core
+
+    # The deployment persona is a deployment choice; plan-mode and tool plugins own
+    # their own prompt sections.
+    - id: system-prompt
+      name: '@hydraharness/harness-system-prompt'
+      pluginType: core
+      config:
+        persona: ''
+
+    # Agents created at startup. The base stays empty; raw overlays may create
+    # agents, while Web creates sessions on client request.
+    - id: agent-loop
+      name: '@hydraharness/harness-agent-loop'
+      pluginType: core
+      config:
+        agents: []
+
+    # The sandboxed filesystem provider. `cwd` defaults to `process.cwd()`; an
+    # overlay can pin another workspace.
+    - id: fs-sandbox
+      name: '@hydraharness/harness-fs-sandbox'
+      pluginType: core
+
+    # The native DeepSeek adapter. No key or endpoint is inlined: both resolve per
+    # request from the `llm-deepseek:` settings section over this entry, with the
+    # key coming from the credential store below. Thinking defaults are a deployment
+    # choice.
+    - id: llm-deepseek
+      name: '@hydraharness/harness-llm-deepseek'
+      pluginType: core
+
+    # Optional TypeSafe Jev decision capability. It is dormant by default;
+    # enabling it never changes the LLM provider catalog.
+    - id: jev
+      name: '@hydraharness/harness-jev'
+      pluginGroup: jev
+      disabled: true
+
+    # Jev's bounded consumer: the model may ask for a candidate browser-action
+    # decision, while the existing browser executor retains authority.
+    - id: browser-decisions
+      name: '@hydraharness/harness-browser-decisions'
+      pluginGroup: jev
+      disabled: true

package/lib/index.js

@@ -0,0 +1 @@
+export {};

package/lib/invariant.js

@@ -0,0 +1,19 @@
+//#region lib/types/invariant.js
+/**
+* Package-owned invariant companion for `@hydraharness/harness-base`.
+* @module @hydraharness/harness-base/invariant
+*/
+const PACKAGE_NAME = "@hydraharness/harness-base";
+/** Cordis companion plugin name. */
+const name = "base-bundle-invariant";
+/** Service required before the companion can register. */
+const inject = ["invariants"];
+const install = () => {};
+/**
+* Register this package's invariant companion.
+* @param ctx - Cordis context carrying the invariant service.
+* @returns the installed registration's disposer after setup succeeds.
+*/
+const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
+//#endregion
+export { apply, inject, name };

package/lib/types/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @hydraharness/harness-base — the shared hydra core as a profile bundle. The
+ * package's substance is `cordis.patch.yml`, declared by the `hydra.bundle.patch`
+ * manifest field and resolved by the profile composer through that field;
+ * this module carries no runtime API.
+ * @module @hydraharness/harness-base
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/lib/types/invariant.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Package-owned invariant companion for `@hydraharness/harness-base`.
+ * @module @hydraharness/harness-base/invariant
+ */
+import type { Context } from '@hydraharness/cordis';
+/** Cordis companion plugin name. */
+export declare const name = "base-bundle-invariant";
+/** Service required before the companion can register. */
+export declare const inject: string[];
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Cordis context carrying the invariant service.
+ * @returns the installed registration's disposer after setup succeeds.
+ */
+export declare const apply: (ctx: Context) => Promise<() => void>;
+//# sourceMappingURL=invariant.d.ts.map

package/package.json

@@ -0,0 +1,152 @@
+{
+  "name": "@hydraharness/harness-base",
+  "description": "The shared hydra core as a profile bundle: every profile's first patch layer, inserting the base plugin rows over the empty profile root",
+  "version": "0.1.1-rc.6",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/MaiHongPhong1902/Hydra-Harness.git",
+    "directory": "packages/bundle/base"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./invariant": {
+      "types": "./lib/types/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/invariant.js",
+    "cordis.patch.yml",
+    "lib/types/**/*.d.ts"
+  ],
+  "license": "MIT",
+  "hydra": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "dependencies": {
+    "@hydraharness/cordis-plugin-hmr": "^1.0.17",
+    "@hydraharness/cordis-plugin-timer": "^1.1.4",
+    "@hydraharness/harness-agent": "^0.1.1-rc.6",
+    "@hydraharness/harness-agent-default-model": "^0.1.1-rc.6",
+    "@hydraharness/harness-agent-loop": "^0.1.1-rc.6",
+    "@hydraharness/harness-agent-instructions": "^0.1.1-rc.6",
+    "@hydraharness/harness-api-gateway": "^0.1.1-rc.6",
+    "@hydraharness/harness-attachment-local": "^0.1.1-rc.6",
+    "@hydraharness/harness-authorization": "^0.1.1-rc.6",
+    "@hydraharness/harness-bash-sandbox": "^0.1.1-rc.6",
+    "@hydraharness/harness-browser-decisions": "^0.1.1-rc.6",
+    "@hydraharness/harness-browser-electron": "^0.1.1-rc.6",
+    "@hydraharness/harness-command-compact": "^0.1.1-rc.6",
+    "@hydraharness/harness-command-feedback": "^0.1.1-rc.6",
+    "@hydraharness/harness-command-goal": "^0.1.1-rc.6",
+    "@hydraharness/harness-commands": "^0.1.1-rc.6",
+    "@hydraharness/harness-compaction-basic": "^0.1.1-rc.6",
+    "@hydraharness/harness-compaction-tool-result-pruner": "^0.1.1-rc.6",
+    "@hydraharness/harness-fs-local": "^0.1.1-rc.6",
+    "@hydraharness/harness-credentials-local": "^0.1.1-rc.6",
+    "@hydraharness/harness-fs-review": "^0.1.1-rc.6",
+    "@hydraharness/harness-fs-observation-policy": "^0.1.1-rc.6",
+    "@hydraharness/harness-fs-sandbox": "^0.1.1-rc.6",
+    "@hydraharness/harness-goal": "^0.1.1-rc.6",
+    "@hydraharness/harness-hook-protocol": "^0.1.1-rc.6",
+    "@hydraharness/harness-goal-round-driver": "^0.1.1-rc.6",
+    "@hydraharness/harness-hooks-registry": "^0.1.1-rc.6",
+    "@hydraharness/harness-hooks-codex": "^0.1.1-rc.6",
+    "@hydraharness/harness-jev": "^0.1.1-rc.6",
+    "@hydraharness/harness-jobs-local": "^0.1.1-rc.6",
+    "@hydraharness/harness-llm": "^0.1.1-rc.6",
+    "@hydraharness/harness-llm-account-auth": "^0.1.1-rc.6",
+    "@hydraharness/harness-llm-call-log": "^0.1.1-rc.6",
+    "@hydraharness/harness-llm-deepseek": "^0.1.1-rc.6",
+    "@hydraharness/harness-llm-pi-ai": "^0.1.1-rc.6",
+    "@hydraharness/harness-llm-retry": "^0.1.1-rc.6",
+    "@hydraharness/harness-lsp": "^0.1.1-rc.6",
+    "@hydraharness/harness-lsp-stdio": "^0.1.1-rc.6",
+    "@hydraharness/harness-mcp-client": "^0.1.1-rc.6",
+    "@hydraharness/harness-mcp-registry": "^0.1.1-rc.6",
+    "@hydraharness/harness-obsidian-knowledge": "^0.1.1-rc.6",
+    "@hydraharness/harness-permission-presets": "^0.1.1-rc.6",
+    "@hydraharness/harness-page-memory": "^0.1.1-rc.6",
+    "@hydraharness/harness-plan-mode": "^0.1.1-rc.6",
+    "@hydraharness/harness-personalization": "^0.1.1-rc.6",
+    "@hydraharness/harness-plugin-runtime": "^0.1.1-rc.6",
+    "@hydraharness/harness-pwsh-sandbox": "^0.1.1-rc.6",
+    "@hydraharness/harness-repeat-tool-reminder": "^0.1.1-rc.6",
+    "@hydraharness/harness-sandbox-local": "^0.1.1-rc.6",
+    "@hydraharness/harness-research-policy": "^0.1.1-rc.6",
+    "@hydraharness/harness-sandbox-policy": "^0.1.1-rc.6",
+    "@hydraharness/harness-session": "^0.1.1-rc.6",
+    "@hydraharness/harness-session-checkpoint-policy": "^0.1.1-rc.6",
+    "@hydraharness/harness-session-persistence-jsonl": "^0.1.1-rc.6",
+    "@hydraharness/harness-session-projection": "^0.1.1-rc.6",
+    "@hydraharness/harness-session-query-sqlite": "^0.1.1-rc.6",
+    "@hydraharness/harness-session-telemetry-otel": "^0.1.1-rc.6",
+    "@hydraharness/harness-session-title": "^0.1.1-rc.6",
+    "@hydraharness/harness-session-title-first-prompt-llm": "^0.1.1-rc.6",
+    "@hydraharness/harness-settings-file": "^0.1.1-rc.6",
+    "@hydraharness/harness-skill-badge": "^0.1.1-rc.6",
+    "@hydraharness/harness-shell-env": "^0.1.1-rc.6",
+    "@hydraharness/harness-skill": "^0.1.1-rc.6",
+    "@hydraharness/harness-skill-filesystem": "^0.1.1-rc.6",
+    "@hydraharness/harness-spill-local": "^0.1.1-rc.6",
+    "@hydraharness/harness-subagent": "^0.1.1-rc.6",
+    "@hydraharness/harness-spill-policy": "^0.1.1-rc.6",
+    "@hydraharness/harness-subagent-fork-in-process": "^0.1.1-rc.6",
+    "@hydraharness/harness-subagent-spawn-in-process": "^0.1.1-rc.6",
+    "@hydraharness/harness-system-prompt": "^0.1.1-rc.6",
+    "@hydraharness/harness-subprocess-local": "^0.1.1-rc.6",
+    "@hydraharness/harness-token-meter": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-bash": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-call-timeout-policy": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-fs": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-fs-search": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-goal": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-pwsh": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-jobs": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-lsp": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-ralph": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-session-version": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-skill": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-media": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-str-replace-editor": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-subagent": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-subagent-control": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-todo": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-subagent-report": "^0.1.1-rc.6",
+    "@hydraharness/harness-tools": "^0.1.1-rc.6",
+    "@hydraharness/harness-typert-loader": "^0.1.1-rc.6",
+    "@hydraharness/harness-typert-registry": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-web": "^0.1.1-rc.6",
+    "@hydraharness/harness-tool-workflow": "^0.1.1-rc.6",
+    "@hydraharness/harness-user-approval": "^0.1.1-rc.6",
+    "@hydraharness/harness-web": "^0.1.1-rc.6",
+    "@hydraharness/harness-web-fetch-http": "^0.1.1-rc.6",
+    "@hydraharness/harness-workflow-worker-thread": "^0.1.1-rc.6",
+    "@hydraharness/harness-user-questions": "^0.1.1-rc.6",
+    "@hydraharness/harness-web-search-deepseek": "^0.1.1-rc.6",
+    "@hydraharness/harness-web-search-http": "^0.1.1-rc.6"
+  },
+  "peerDependencies": {
+    "@hydraharness/cordis": "^4.0.2",
+    "@hydraharness/harness-invariants": "^0.1.1-rc.6"
+  },
+  "devDependencies": {
+    "@hydraharness/cordis": "^4.0.2",
+    "@hydraharness/harness-invariants": "^0.1.1-rc.6"
+  }
+}