@oharness/engine 0.1.0 → 0.2.0

package/dist/config.d.ts

@@ -9,6 +9,7 @@ import type { ScheduleDefinition } from "./schedule/scheduler.ts";
 import type { ToolFilter } from "./tools/registry.ts";
 import type { LogLevel } from "./util/logger.ts";
 import type { PluginConfig } from "./plugins.ts";
+import type { RuntimePluginConfig } from "./runtime-plugins/types.ts";
 export interface HarnessConfig {
     /** Default model alias, e.g. "sonnet" or "openai/gpt-4.1". */
     model?: string;
@@ -59,6 +60,8 @@ export interface HarnessConfig {
     memoryDir?: string;
     /** Declarative plugin bundles to discover and activate. */
     plugins?: PluginConfig;
+    /** Trusted runtime code: plugins.json or embedding API; legacy user config is read-only compatible. */
+    runtimePlugins?: RuntimePluginConfig[];
     /** Extra or overriding model specs, merged over the built-in catalog. */
     models?: ModelSpec[];
     /** Per-provider credentials and endpoints; env vars still apply as fallback. */
@@ -98,34 +101,11 @@ export interface HarnessConfig {
     };
     /** Where transcripts are mirrored so a second device can continue them. */
     sync?: SyncConfig;
-    /**
-     * The account system `auth login official` signs in to.
-     *
-     * User config only — see `projectSafe`. This is the setting a fork or a
-     * self-hosted deployment uses to point the harness at its own Supabase
-     * project without rebuilding anything, and it beats the ids a published
-     * build was packaged with.
-     */
+    /** @deprecated Read-only migration compatibility. Use cloud.json for the public site URL. */
     account?: AccountConfig;
 }
 export interface AccountConfig {
-    /**
-     * The Supabase project accounts live in, e.g.
-     * `https://<project>.supabase.co`. Set this and `supabaseAnonKey` together;
-     * one without the other is treated as neither.
-     */
-    supabaseUrl?: string;
-    /**
-     * The project's anon key. A publishable client credential — it grants
-     * nothing beyond what an anonymous visitor has, and row level security is
-     * what protects the data — so it is no more sensitive here than in the
-     * browser bundle of the site it belongs to.
-     */
-    supabaseAnonKey?: string;
-    /**
-     * The website that owns those accounts, for the browser sign-in handoff.
-     * Defaults to the official one.
-     */
+    /** @deprecated Use cloud.json; Supabase fields in legacy files are no longer consumed. */
     siteUrl?: string;
 }
 export interface SyncConfig {

package/dist/config.js

@@ -3,6 +3,7 @@ import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { ConfigError } from "./core/errors.js";
 import { parseJson } from "./util/json.js";
+import { readMcpFile, readPluginFile } from "./config-files.js";
 export const CONFIG_FILENAMES = ["oharness.config.json", ".oharness.json"];
 const DEFAULT_INSTRUCTIONS = ["AGENTS.md", "CLAUDE.md", ".oharness/instructions.md"];
 /**
@@ -14,8 +15,18 @@ const DEFAULT_INSTRUCTIONS = ["AGENTS.md", "CLAUDE.md", ".oharness/instructions.
  */
 export async function loadConfig(cwd = process.cwd()) {
     const user = await readConfigFile(userPath("config.json"));
+    // Account deployment data is read separately by the Cloud client, not exposed
+    // to the Harness or plugins through general configuration.
+    const { account: _legacyAccount, ...preferences } = user ?? {};
+    const plugins = readPluginFile();
+    const mcp = readMcpFile();
+    const effective = {
+        ...preferences,
+        ...(plugins ? { runtimePlugins: plugins.runtimePlugins ?? [], plugins: plugins.plugins ?? {} } : {}),
+        ...(mcp ? { mcpServers: mcp.mcpServers ?? {} } : {}),
+    };
     const project = await loadProjectConfig(cwd);
-    return mergeConfig(user ?? {}, projectSafe(project ?? {}));
+    return mergeConfig(effective, projectSafe(project ?? {}));
 }
 /**
  * The project's own config file, unmerged.
@@ -36,6 +47,8 @@ export async function loadProjectConfig(cwd = process.cwd()) {
 }
 /**
  * A project config with the parts a repository may not decide removed.
+ * Runtime plugin modules/options are user-owned too: a repository may not
+ * introduce executable code or redirect the credentials/endpoints it uses.
  *
  * Applied here rather than inside `mergeConfig`, because this is the only
  * place that knows which side is the person and which is the repository —
@@ -55,7 +68,7 @@ export async function loadProjectConfig(cwd = process.cwd()) {
  * keep.
  */
 function projectSafe(project) {
-    const { account: _account, ...rest } = project;
+    const { account: _account, runtimePlugins: _runtimePlugins, ...rest } = project;
     if (!rest.sync)
         return rest;
     const { url: _url, token: _token, team: _team, ...allowed } = rest.sync;
@@ -104,6 +117,7 @@ export function mergeConfig(base, override) {
         writableRoots: [...(base.writableRoots ?? []), ...(override.writableRoots ?? [])],
         readableRoots: [...(base.readableRoots ?? []), ...(override.readableRoots ?? [])],
         plugins: mergePlugins(base.plugins, override.plugins),
+        runtimePlugins: override.runtimePlugins ?? base.runtimePlugins,
         models: [...(base.models ?? []), ...(override.models ?? [])],
         providers: { ...base.providers, ...override.providers },
         openAiCompatible: [...(base.openAiCompatible ?? []), ...(override.openAiCompatible ?? [])],

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAU/C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AA0J3C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;AAC3E,MAAM,oBAAoB,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,2BAA2B,CAAC,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAClD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,WAAW,CAAC,IAAI,IAAI,EAAE,EAAE,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACzD,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,WAAW,CAAC,OAAsB;IACzC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;IACxE,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAiD;IAEjD,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAE7B,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC1C,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAmB,EAAE,QAAuB;IACtE,OAAO;QACL,GAAG,IAAI;QACP,GAAG,QAAQ;QACX,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;QAC/D,KAAK,EAAE;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK;YACjD,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;SACrE;QACD,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE;QAC1D,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;QAC7C,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACrE,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACrE,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACrE,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACrE,aAAa,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACjF,aAAa,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACjF,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;QACrD,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC5D,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE;QACvD,gBAAgB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAC1F,cAAc,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QACpF,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,SAAS,CAAC,IAAiB,EAAE,QAAqB;IACzD,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,OAAO,GACX,IAAI,EAAE,OAAO,KAAK,KAAK,IAAI,QAAQ,EAAE,OAAO,KAAK,KAAK;QACpD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC;IAC1C,OAAO;QACL,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAmB,EAAE,QAAuB;IAChE,OAAO;QACL,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,IAAI,EAAE,OAAO;QAC3C,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAW,EACX,UAAmB;IAEnB,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACpE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;YAClE,IAAI,IAAI,CAAC,IAAI,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAgB,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,uBAAuB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CACjB,IAAiC,EACjC,QAAqC;IAErC,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC3D,0EAA0E;QAC1E,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACxD,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAiB,EAAE,QAAqB;IAC1D,MAAM,MAAM,GAAe,EAAE,GAAG,IAAI,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAU/C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAI3C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAmIhE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;AAC3E,MAAM,oBAAoB,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,2BAA2B,CAAC,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAClD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3D,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,MAAM,SAAS,GAAG;QAChB,GAAG,WAAW;QACd,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACzD,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,WAAW,CAAC,OAAsB;IACzC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAChF,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;IACxE,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAiD;IAEjD,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAE7B,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC1C,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAmB,EAAE,QAAuB;IACtE,OAAO;QACL,GAAG,IAAI;QACP,GAAG,QAAQ;QACX,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC;QAC/D,KAAK,EAAE;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK;YACjD,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;SACrE;QACD,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE;QAC1D,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;QAC7C,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACrE,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACrE,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACrE,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACrE,aAAa,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACjF,aAAa,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACjF,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;QACrD,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;QAC9D,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC5D,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE;QACvD,gBAAgB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAC1F,cAAc,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QACpF,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,SAAS,CAAC,IAAiB,EAAE,QAAqB;IACzD,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,OAAO,GACX,IAAI,EAAE,OAAO,KAAK,KAAK,IAAI,QAAQ,EAAE,OAAO,KAAK,KAAK;QACpD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC;IAC1C,OAAO;QACL,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAmB,EAAE,QAAuB;IAChE,OAAO;QACL,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,IAAI,EAAE,OAAO;QAC3C,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAW,EACX,UAAmB;IAEnB,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACpE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;YAClE,IAAI,IAAI,CAAC,IAAI,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAgB,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,uBAAuB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CACjB,IAAiC,EACjC,QAAqC;IAErC,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC3D,0EAA0E;QAC1E,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACxD,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAiB,EAAE,QAAqB;IAC1D,MAAM,MAAM,GAAe,EAAE,GAAG,IAAI,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/audit.d.ts

@@ -0,0 +1,20 @@
+import type { AuditEntry } from "../agent/permissions.ts";
+/** Observation only: sinks cannot authorize a call or rewrite its outcome. */
+export type RuntimeAuditEvent = {
+    type: "permission";
+    timestamp: number;
+    sessionId: string;
+    entry: AuditEntry;
+} | {
+    type: "tool_execution";
+    timestamp: number;
+    sessionId: string;
+    agentId: string;
+    toolCallId: string;
+    toolName: string;
+    pluginId?: string;
+    durationMs: number;
+    isError: boolean;
+};
+/** Inputs, outputs and credentials are deliberately excluded from execution events. */
+export type AuditSink = (event: RuntimeAuditEvent) => void | Promise<void>;

package/dist/core/audit.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=audit.js.map

package/dist/core/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/core/audit.ts"],"names":[],"mappings":""}

package/dist/harness.d.ts

@@ -11,18 +11,23 @@ import { SubagentRegistry } from "./agent/subagent.ts";
 import { SkillRegistry } from "./agent/skills.ts";
 import { SettingsStore } from "./agent/settings.ts";
 import type { WorkspacePolicy } from "./agent/workspace.ts";
-import { MemoryStore } from "./agent/memory.ts";
+import type { MemoryStore } from "./agent/memory.ts";
+import { PluginExtensions } from "./runtime-plugins/extensions.ts";
+import { MemoryService } from "./runtime-plugins/builtin/memory.ts";
 import type { HarnessConfig } from "./config.ts";
 import type { PluginDefinition } from "./plugins.ts";
 import { McpManager } from "./mcp/manager.ts";
 import { Scheduler } from "./schedule/scheduler.ts";
 import type { McpServerStatus } from "./mcp/manager.ts";
 import { ProviderRegistry } from "./providers/registry.ts";
+import type { VerifyResult } from "./providers/registry.ts";
 import type { Catalog, CatalogProvider } from "./providers/catalog.ts";
 import type { ModelSpec } from "./providers/types.ts";
 import { ToolRegistry } from "./tools/registry.ts";
 import type { Tool } from "./tools/types.ts";
 import type { Logger, LogSink } from "./util/logger.ts";
+import type { RuntimePluginRegistration, RuntimePluginStatus } from "./runtime-plugins/types.ts";
+import { CloudConnectorService } from "./runtime-plugins/cloud-connector.ts";
 /** Whether decisions are recorded, where else, and whose call that is. */
 export interface AuditStatus {
     on: boolean;
@@ -40,6 +45,12 @@ export interface HarnessOptions {
     tools?: Tool[];
     /** Extra auth providers, e.g. a subscription vendor with your own client id. */
     authProviders?: AuthProvider[];
+    /** Explicitly trusted in-process plugins; separate from declarative resource bundles. */
+    runtimePlugins?: RuntimePluginRegistration[];
+    /** Platform connector tools; default on outside ephemeral/test Harness instances. */
+    cloudConnectors?: boolean;
+    /** Optional broker for embedders/tests; config files cannot inject a service. */
+    cloudConnectorService?: CloudConnectorService;
     logger?: Logger;
     /**
      * Where diagnostics go, when the default stderr is the wrong place.
@@ -68,7 +79,9 @@ export declare class Harness {
     readonly hooks: HookRegistry;
     readonly subagents: SubagentRegistry;
     readonly skills: SkillRegistry;
-    readonly memory: MemoryStore;
+    readonly extensions: PluginExtensions;
+    memoryService?: MemoryService;
+    get memory(): MemoryStore | undefined;
     readonly settings: SettingsStore;
     readonly workspace: WorkspacePolicy;
     readonly mcp: McpManager;
@@ -85,8 +98,16 @@ export declare class Harness {
     readonly logger: Logger;
     private readonly options;
     private projectInstructions?;
+    private readonly pluginHost;
+    readonly cloudConnectors: CloudConnectorService;
+    private readonly runtimeAudit;
+    private readonly lifecycle;
+    private closing?;
+    private readonly activeRuns;
     private constructor();
     static create(opts?: HarnessOptions): Promise<Harness>;
+    /** Includes disabled/failed instances; contains neither config nor credentials. */
+    runtimePluginStatus(): RuntimePluginStatus[];
     /**
      * Begin mirroring, if this machine is configured and signed in for it.
      *
@@ -209,6 +230,17 @@ export declare class Harness {
      * the user catalog so the next run starts with a current list.
      */
     refreshModels(providerId?: string): Promise<ModelSpec[]>;
+    /**
+     * Check a provider's credential by asking it what it serves, and keep the
+     * answer.
+     *
+     * The one call does both halves of what a login needs afterwards: a key that
+     * cannot list models is a key that will not complete one either, and a key
+     * that can has just produced the roster the user is about to pick from. Done
+     * separately, the check is a wasted round trip and the roster is a second
+     * thing to remember to ask for.
+     */
+    verifyProvider(providerId: string): Promise<VerifyResult>;
     /** Merge discovered models into the user catalog on disk. */
     private saveDiscovered;
     /**
@@ -293,6 +325,7 @@ export declare class Harness {
         signal?: AbortSignal;
     }): AsyncGenerator<AgentEvent, void, void>;
     close(): Promise<void>;
+    private shutdown;
     /**
      * First model whose provider has credentials. Only the cheap synchronous
      * check runs here — a subscription-only provider is picked up once the

package/dist/harness.js

@@ -9,7 +9,9 @@ import { BUILTIN_SUBAGENTS, SubagentRegistry, loadMarkdownSubagents } from "./ag
 import { SkillRegistry } from "./agent/skills.js";
 import { SettingsStore } from "./agent/settings.js";
 import { createPolicy } from "./agent/workspace.js";
-import { MemoryStore } from "./agent/memory.js";
+import { PluginExtensions } from "./runtime-plugins/extensions.js";
+import { createMemoryPlugin, MemoryService } from "./runtime-plugins/builtin/memory.js";
+import { siteUrl } from "./auth/providers/account.js";
 import { loadConfig, loadProjectConfig, loadProjectInstructions, mergeConfig } from "./config.js";
 import { discoverPlugins, pluginContributions } from "./plugins.js";
 import { McpManager } from "./mcp/manager.js";
@@ -18,7 +20,7 @@ import { expandSecrets } from "./mcp/secrets.js";
 import { Scheduler } from "./schedule/scheduler.js";
 import { SyncClient } from "./sync/client.js";
 import { SessionMirror } from "./sync/mirror.js";
-import { isExcluded, resolveSync } from "./sync/settings.js";
+import { isExcluded, resolveSync, resolveSyncUrl } from "./sync/settings.js";
 import { projectId } from "./storage/project.js";
 import { updateUserConfig } from "./config.js";
 import { ProviderRegistry } from "./providers/registry.js";
@@ -28,6 +30,9 @@ import { ToolRegistry } from "./tools/registry.js";
 import { appendFile, mkdir, readFile, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { createLogger } from "./util/logger.js";
+import { PluginHost } from "./runtime-plugins/host.js";
+import { RuntimeAuditBus } from "./runtime-plugins/audit.js";
+import { CloudConnectorService, createCloudConnectorPlugin } from "./runtime-plugins/cloud-connector.js";
 /**
  * Top-level facade: owns providers, tools, MCP connections, hooks and
  * subagents, and hands out `Agent` instances bound to a `Session`.
@@ -43,7 +48,9 @@ export class Harness {
     hooks;
     subagents;
     skills;
-    memory;
+    extensions = new PluginExtensions();
+    memoryService;
+    get memory() { return this.memoryService?.store; }
     settings;
     workspace;
     mcp;
@@ -63,6 +70,12 @@ export class Harness {
     logger;
     options;
     projectInstructions;
+    pluginHost;
+    cloudConnectors;
+    runtimeAudit;
+    lifecycle = new AbortController();
+    closing;
+    activeRuns = new Set();
     constructor(opts, config, catalog, plugins = []) {
         this.options = opts;
         this.cwd = opts.cwd ?? process.cwd();
@@ -130,13 +143,25 @@ export class Harness {
             ],
             ...(config.readableRoots !== undefined ? { readableRoots: config.readableRoots } : {}),
         });
-        this.memory = new MemoryStore(config.memoryDir
-            ? path.resolve(this.cwd, config.memoryDir)
-            : path.join(this.cwd, ".oharness", "memory"));
         this.mcp = new McpManager(this.logger, this.auth.store);
         this.store = new SessionStore(config.sessionDir);
         this.scheduler = new Scheduler(this, config.schedules ?? []);
         this.ephemeral = opts.ephemeral === true;
+        this.runtimeAudit = new RuntimeAuditBus(this.logger);
+        this.cloudConnectors = opts.cloudConnectorService ?? new CloudConnectorService({ token: async (origin) => {
+                // A still-valid access token must not leak to a newly configured Cloud,
+                // even when no refresh (which also verifies the origin) is necessary.
+                const credential = await this.auth.store.get("official");
+                if (credential?.type === "oauth" && credential.metadata?.cloudOrigin && credential.metadata.cloudOrigin !== origin) {
+                    throw new Error("Cloud 地址已改变，请重新登录后连接应用。");
+                }
+                return this.accountToken();
+            } });
+        this.pluginHost = new PluginHost({
+            tools: this.tools, hooks: this.hooks, models: this.providers,
+            auth: this.auth, audit: this.runtimeAudit, logger: this.logger.child("plugins"),
+            extensions: this.extensions,
+        });
     }
     static async create(opts = {}) {
         const cwd = opts.cwd ?? process.cwd();
@@ -148,51 +173,82 @@ export class Harness {
         // The catalog is data on disk, so it can be updated without a release.
         const catalog = await loadCatalog(config.catalog ? [config.catalog] : []);
         const harness = new Harness(opts, config, catalog, plugins);
-        harness.projectInstructions = await loadProjectInstructions(cwd, config.instructionsFile);
-        // Rules the user approved in earlier sessions live in settings files, not
-        // in the config the project checks in.
-        const persisted = await harness.settings.readAll();
-        harness.config.permissions = {
-            allow: [...(config.permissions?.allow ?? []), ...(persisted.allow ?? [])],
-            deny: [...(config.permissions?.deny ?? []), ...(persisted.deny ?? [])],
-            ask: [...(config.permissions?.ask ?? []), ...(persisted.ask ?? [])],
-        };
-        // Best effort: reclaiming disk should never block or fail a session.
-        if (config.sessionRetention && !opts.ephemeral) {
-            harness.store
-                .prune(config.sessionRetention)
-                .then((removed) => {
-                if (removed.length > 0) {
-                    harness.logger.info("pruned old sessions", { count: removed.length });
-                }
-            })
-                .catch((err) => harness.logger.warn("session pruning failed", { error: String(err) }));
-        }
-        await harness.skills.discover(cwd, config.skillDirs ?? []);
-        // Markdown definitions layer over the JSON ones, so a repo can drop in an
-        // agent file without editing config.
-        for (const definition of await loadMarkdownSubagents(cwd, config.agentDirs ?? [])) {
-            harness.subagents.register(definition);
-        }
-        if (config.mcpServers && Object.keys(config.mcpServers).length > 0) {
-            const statuses = await harness.mcp.connectAll(config.mcpServers);
-            harness.tools.registerAll(harness.mcp.tools());
-            for (const status of statuses) {
-                if (status.error) {
-                    harness.logger.warn("MCP server unavailable", {
-                        server: status.name,
-                        error: status.error,
-                    });
+        try {
+            harness.projectInstructions = await loadProjectInstructions(cwd, config.instructionsFile);
+            // Rules the user approved in earlier sessions live in settings files, not
+            // in the config the project checks in.
+            const persisted = await harness.settings.readAll();
+            harness.config.permissions = {
+                allow: [...(config.permissions?.allow ?? []), ...(persisted.allow ?? [])],
+                deny: [...(config.permissions?.deny ?? []), ...(persisted.deny ?? [])],
+                ask: [...(config.permissions?.ask ?? []), ...(persisted.ask ?? [])],
+            };
+            // Best effort: reclaiming disk should never block or fail a session.
+            if (config.sessionRetention && !opts.ephemeral) {
+                harness.store
+                    .prune(config.sessionRetention)
+                    .then((removed) => {
+                    if (removed.length > 0) {
+                        harness.logger.info("pruned old sessions", { count: removed.length });
+                    }
+                })
+                    .catch((err) => harness.logger.warn("session pruning failed", { error: String(err) }));
+            }
+            await harness.skills.discover(cwd, config.skillDirs ?? []);
+            // Markdown definitions layer over the JSON ones, so a repo can drop in an
+            // agent file without editing config.
+            for (const definition of await loadMarkdownSubagents(cwd, config.agentDirs ?? [])) {
+                harness.subagents.register(definition);
+            }
+            if (config.mcpServers && Object.keys(config.mcpServers).length > 0) {
+                const statuses = await harness.mcp.connectAll(config.mcpServers);
+                harness.tools.registerAll(harness.mcp.tools());
+                for (const status of statuses) {
+                    if (status.error) {
+                        harness.logger.warn("MCP server unavailable", {
+                            server: status.name,
+                            error: status.error,
+                        });
+                    }
                 }
             }
+            const platform = (opts.cloudConnectors ?? !opts.ephemeral)
+                ? [{ plugin: createCloudConnectorPlugin(harness.cloudConnectors), required: false }] : [];
+            const memory = createMemoryPlugin({ cwd, directory: config.memoryDir ? path.resolve(cwd, config.memoryDir) : path.join(cwd, ".oharness", "memory"),
+                identity: async () => {
+                    const credential = await harness.auth.store.get("official");
+                    if (credential?.type !== "oauth")
+                        return undefined;
+                    const origin = siteUrl();
+                    if (credential.metadata?.cloudOrigin && credential.metadata.cloudOrigin !== origin)
+                        return undefined;
+                    // This claim is only a local account label/consent pin, never Cloud authorization.
+                    try {
+                        const payload = JSON.parse(Buffer.from(credential.access.split(".")[1] ?? "", "base64url").toString("utf8"));
+                        return typeof payload.sub === "string" && /^[a-zA-Z0-9_-]{1,128}$/.test(payload.sub) ? { userId: payload.sub, origin } : undefined;
+                    }
+                    catch {
+                        return undefined;
+                    }
+                }, token: () => harness.accountToken(), syncUrl: () => resolveSyncUrl(harness.config.sync),
+            }, (service) => { harness.memoryService = service; });
+            await harness.pluginHost.boot([{ plugin: memory }, ...platform, ...(opts.runtimePlugins ?? [])], config.runtimePlugins);
+            // Awaited, though it touches no network: deciding whether to mirror reads
+            // config and asks git for the project id, and both are local. Leaving it
+            // unawaited made `syncStatus()` lie for the first few milliseconds of
+            // every process, which is exactly when a UI asks. The connecting happens
+            // inside the mirror and is not waited for.
+            await harness.startSync();
+            return harness;
         }
-        // Awaited, though it touches no network: deciding whether to mirror reads
-        // config and asks git for the project id, and both are local. Leaving it
-        // unawaited made `syncStatus()` lie for the first few milliseconds of
-        // every process, which is exactly when a UI asks. The connecting happens
-        // inside the mirror and is not waited for.
-        await harness.startSync();
-        return harness;
+        catch (error) {
+            await harness.close();
+            throw error;
+        }
+    }
+    /** Includes disabled/failed instances; contains neither config nor credentials. */
+    runtimePluginStatus() {
+        return this.pluginHost.status();
     }
     /**
      * Begin mirroring, if this machine is configured and signed in for it.
@@ -479,6 +535,25 @@ export class Harness {
         }
         return discovered;
     }
+    /**
+     * Check a provider's credential by asking it what it serves, and keep the
+     * answer.
+     *
+     * The one call does both halves of what a login needs afterwards: a key that
+     * cannot list models is a key that will not complete one either, and a key
+     * that can has just produced the roster the user is about to pick from. Done
+     * separately, the check is a wasted round trip and the roster is a second
+     * thing to remember to ask for.
+     */
+    async verifyProvider(providerId) {
+        const result = await this.providers.verify(providerId);
+        if (result.status === "ok" && result.models.length > 0) {
+            await this.saveDiscovered(result.models).catch((err) => this.logger.warn("could not persist the discovered catalog", {
+                error: String(err),
+            }));
+        }
+        return result;
+    }
     /** Merge discovered models into the user catalog on disk. */
     async saveDiscovered(models) {
         const file = userCatalogPath();
@@ -520,6 +595,8 @@ export class Harness {
     }
     /** Start a fresh session. */
     createSession(overrides = {}) {
+        if (this.lifecycle.signal.aborted)
+            throw new ConfigError("Harness is closed");
         return this.equip(new Session({
             cwd: this.cwd,
             model: overrides.model ?? this.config.model ?? this.defaultModel(),
@@ -576,6 +653,7 @@ export class Harness {
      * path, not just louder.
      */
     record(sessionId, entry) {
+        this.runtimeAudit.publish({ type: "permission", timestamp: Date.now(), sessionId, entry });
         const configured = this.config.auditLog;
         this.auditQueue = this.auditQueue
             .then(async () => {
@@ -640,13 +718,15 @@ export class Harness {
     }
     /** Build an agent bound to a session, wired with everything the harness owns. */
     agent(session, overrides = {}) {
+        if (this.lifecycle.signal.aborted)
+            throw new ConfigError("Harness is closed");
         return new Agent({
             session,
             tools: this.tools,
             hooks: this.hooks,
             subagents: this.subagents,
             skills: this.skills,
-            memory: this.memory,
+            promptSections: () => this.extensions.promptSections(),
             onSkillsChanged: () => this.reloadSkills(),
             mcp: this.mcp,
             permissionPrompt: this.options.permissionPrompt,
@@ -660,6 +740,15 @@ export class Harness {
             maxTurns: this.config.maxTurns,
             cache: this.config.cache,
             logger: this.logger,
+            lifecycleSignal: this.lifecycle.signal,
+            onRunStart: () => {
+                let finish;
+                const done = new Promise((resolve) => { finish = resolve; });
+                this.activeRuns.add(done);
+                return () => { this.activeRuns.delete(done); finish(); };
+            },
+            onAudit: (event) => { if (this.config.audit !== false)
+                this.runtimeAudit.publish(event); },
             ...overrides,
         });
     }
@@ -672,11 +761,34 @@ export class Harness {
         const agent = this.agent(session);
         yield* agent.run(prompt, { signal: opts.signal });
     }
-    async close() {
+    close() {
+        return this.closing ??= this.shutdown();
+    }
+    async shutdown() {
+        this.lifecycle.abort();
+        this.cloudConnectors.close();
+        this.scheduler.stop();
         // Stopped before MCP, because it is the only thing here holding a socket
         // open on purpose — a long poll would otherwise keep the process alive for
         // up to thirty seconds after everything else had shut down.
         this.mirror?.stop();
+        let timer;
+        try {
+            await Promise.race([
+                Promise.all(this.activeRuns),
+                new Promise((resolve) => {
+                    timer = setTimeout(() => {
+                        this.logger.warn("Agent drain timed out during shutdown");
+                        resolve();
+                    }, 5000);
+                }),
+            ]);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        await this.pluginHost.close();
+        await this.auditQueue;
         await this.mcp.closeAll();
     }
     /**