freecodego 0.1.7-alpha.2.2 → 0.1.7-rc.2.2

package/README.i18n.yaml

@@ -1,6 +1,46 @@
-# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each
-# side as of the last confirmed-consistent state. Both languages carry equal authority;
-# after editing either side, bring the other along and re-record with:
+# Bilingual-pair consistency record for README.md (docs/i18n/README.md): per heading
+# section, a hash of its English and Chinese blocks outside code blocks and generated regions.
+# After editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/freecodego/bundle-latest/README.md
-README.md: 8d10144b93404bd365c74acfd6ed6e37c5b482b6
-README.zh.md: 59610270a1325f0808de361185235bb2ff9a8f06
+/:
+  en: 8859351e0ca49ac5
+  zh: d8040312aa730430
+/freecodego-harness-bundle:
+  en: 68d0519714131dbf
+  zh: a693e8f24c6e5db0
+/freecodego-harness-bundle/summary:
+  en: 1800109790d5d1e1
+  zh: c8728c1d521e67da
+/freecodego-harness-bundle/table-of-contents:
+  en: 4e073879c5c1a7d6
+  zh: 784434b4cbce068c
+/freecodego-harness-bundle/install:
+  en: da5d2be3aa61b754
+  zh: d40aa7ba7e976d80
+/freecodego-harness-bundle/free-models:
+  en: 75bc42a206b0ca8b
+  zh: 22d1bcda58da09f2
+/freecodego-harness-bundle/code-review:
+  en: 8f68263e2002cc7c
+  zh: a8686114cc3e9e71
+/freecodego-harness-bundle/project-memory:
+  en: 42181f6425464c04
+  zh: 58b099b4413d21ba
+/freecodego-harness-bundle/agent-teams:
+  en: b6baac895fc56d36
+  zh: 85271ccb0de27a58
+/freecodego-harness-bundle/image-and-video-generation:
+  en: b4fb37151a7b291e
+  zh: 6379c5a17b7dd6e3
+/freecodego-harness-bundle/model-experience:
+  en: efa389e274af6ffe
+  zh: 2101a6c435d892b2
+/freecodego-harness-bundle/model-experience/kv-cache-effect:
+  en: 4b878d2f2903709c
+  zh: 3b3c58c7158b7037
+/freecodego-harness-bundle/known-limitations-and-deferred-work:
+  en: 918063c77a92f545
+  zh: b77f36cd8159f414
+/freecodego-harness-bundle/known-limitations-and-deferred-work/dev-note:
+  en: b3627181a926cd2f
+  zh: 3bf92b09c941b40d

package/README.md

@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
 
 ## Summary
 
-Installable single-package FreeCodeGo composition for DeepSeek Harness `freecodego@0.1.7-alpha.2.2`, targeting Harness baseline `0.1.7-alpha.2`. The npm artifact contains the compiled Host plugin, browser client, session-event prerequisite, native worker entrypoints, and the bundled Harness Agent Teams composition. A release publishes on npm's `next` dist-tag, and its plugin version intentionally matches the Harness version it targets exactly; for a reproducible install, name the version (`freecodego@0.1.7-alpha.2`) instead of the channel. Official Codex and Claude runtime binaries remain optional platform downloads — the package does not embed every platform's native binary.
+Installable single-package FreeCodeGo composition for DeepSeek Harness `freecodego@0.1.7-rc.2.2`, targeting Harness baseline `0.1.7-rc.2`. The npm artifact contains the compiled Host plugin, browser client, session-event prerequisite, native worker entrypoints, and the bundled Harness Agent Teams composition. A release publishes on npm's `next` dist-tag, and its plugin version intentionally matches the Harness version it targets exactly; for a reproducible install, name the version (`freecodego@0.1.7-rc.2`) instead of the channel. Official Codex and Claude runtime binaries remain optional platform downloads — the package does not embed every platform's native binary.
 
 ## Table of Contents
 
@@ -32,10 +32,10 @@ Install the release for the Harness baseline you run; each release carries one t
 
 ```sh
 dsh plugin --profile web add --save-exact \
-  https://github.com/XiangSu-ce/dsh-plugin-freecodego/releases/download/freecodego-v0.1.7-alpha.2.2/freecodego-0.1.7-alpha.2.tgz
+  https://github.com/XiangSu-ce/dsh-plugin-freecodego/releases/download/freecodego-v0.1.7-rc.2.2/freecodego-0.1.7-rc.2.tgz
 ```
 
-`freecodego-0.1.7-alpha.2.tgz` is the bundle for Harness `0.1.7-alpha.2`: substitute the version you run, which the settings page shows beside the installed plugin version. The asset name is the naming contract in `packages/freecodego/AGENTS.md`.
+`freecodego-0.1.7-rc.2.tgz` is the bundle for Harness `0.1.7-rc.2`: substitute the version you run, which the settings page shows beside the installed plugin version. The asset name is the naming contract in `packages/freecodego/AGENTS.md`.
 
 The `dsh` command is provided by the Harness CLI, not this bundle. In a normal terminal install it first with `npm install --global @deepseek-ai/dsh` (and ensure `pnpm` is available). Desktop launches the same command through its private shims and passes the active `DSH_HOME`, so Web and Desktop use one Profile data directory when they select the same Harness home.
 
@@ -84,7 +84,7 @@ TRAE, Cline, WorkBuddy International, Agnes publish no stable roster, so their r
 
 The bundle mounts a four-tool change reviewer. `engineering_code_review` reviews the workspace (staged, unstaged, *and* untracked changes), a ref range measured from its merge base, or one commit against its first parent, and renders the report as `text`, `json`, or `sarif`; `engineering_review_rules` returns what would be reviewed and under which rule with no model call at all; `engineering_review_status` and `engineering_review_report` show what is running and re-render the last result for another reader. Rules resolve in four layers — a rule file passed for the run, the project's own (`.opencodereview/rule.json`, `.dsh/review.json`, or `.freecodego/review.json`), the user's `~/.opencodereview/rule.json`, then the baseline shipped with the plugin — and the first matching layer wins, so a project override replaces the shipped rule rather than merging into it. Coverage is accounted per file: a run cannot finish while a changed file is still unreviewed, and every skip records why it was skipped.
 
-The reviewer spends model calls, so it is opt-in. `reviewMode` is `off`, `record` (findings become durable session events, so a review is answerable later without re-running it), or `gate` (findings at or above `reviewThreshold` are injected back into the turn once `reviewCooldownTurns` has passed, so the Agent has to answer them before it can finish). `reviewDeep` gives each changed file its own read-only child agent, and `reviewEscalation` re-checks high-severity findings with an independent adjudicator that is asked to *refute* them. Reviews run on the plugin's second-model route (`advisorProvider` / `advisorModel`), so a fresh install reviews without extra configuration.
+The reviewer spends model calls, so it is opt-in. `reviewMode` is `off`, `record` (findings become durable session events, so a review is answerable later without re-running it), or `gate` (findings at or above `reviewThreshold` are injected back into the turn once `reviewCooldownTurns` has passed, so the Agent has to answer them before it can finish). `reviewDeep` gives each changed file its own read-only child agent, and `reviewEscalation` re-checks high-severity findings with an independent adjudicator that is asked to *refute* them. Reviews run on the plugin's second-model route (`advisorProvider` / `advisorModel`), so a fresh install reviews without extra configuration; the settings page's **Second-model route** panel edits that route, and every feature that shares it — the reviewer here, the memory recall selector, the memory-consolidation planner, and the action reviewer — moves with it.
 
 <a id="project-memory"></a>
 ## Project Memory

package/README.zh.md

@@ -9,7 +9,7 @@ kind: "package-bundle"
 
 ## 概述
 
-面向 DeepSeek Harness `freecodego@0.1.7-alpha.2.2` 的可安装单包 FreeCodeGo 组合，目标 Harness 基线为 `0.1.7-alpha.2`。npm 产物包含编译后的 Host 插件、浏览器端 client、会话事件前置包、原生 worker 入口，以及随包交付的 Harness Agent Teams 组合。发布产物使用 npm 的 `next` dist-tag，且其插件版本刻意与所面向的 Harness 版本完全一致；需要可复现安装时请指定版本（`freecodego@0.1.7-alpha.2`），而不是渠道名。官方 Codex 与 Claude 运行时二进制仍按平台可选下载——本包不内嵌每个平台的原生二进制。
+面向 DeepSeek Harness `freecodego@0.1.7-rc.2.2` 的可安装单包 FreeCodeGo 组合，目标 Harness 基线为 `0.1.7-rc.2`。npm 产物包含编译后的 Host 插件、浏览器端 client、会话事件前置包、原生 worker 入口，以及随包交付的 Harness Agent Teams 组合。发布产物使用 npm 的 `next` dist-tag，且其插件版本刻意与所面向的 Harness 版本完全一致；需要可复现安装时请指定版本（`freecodego@0.1.7-rc.2`），而不是渠道名。官方 Codex 与 Claude 运行时二进制仍按平台可选下载——本包不内嵌每个平台的原生二进制。
 
 ## 目录
 
@@ -32,10 +32,10 @@ kind: "package-bundle"
 
 ```sh
 dsh plugin --profile web add --save-exact \
-  https://github.com/XiangSu-ce/dsh-plugin-freecodego/releases/download/freecodego-v0.1.7-alpha.2.2/freecodego-0.1.7-alpha.2.tgz
+  https://github.com/XiangSu-ce/dsh-plugin-freecodego/releases/download/freecodego-v0.1.7-rc.2.2/freecodego-0.1.7-rc.2.tgz
 ```
 
-`freecodego-0.1.7-alpha.2.tgz` 就是面向 Harness `0.1.7-alpha.2` 的 bundle：请替换为你实际运行的版本，设置页会把它显示在已装插件版本旁边。资产名即 `packages/freecodego/AGENTS.md` 里的命名约定。
+`freecodego-0.1.7-rc.2.tgz` 就是面向 Harness `0.1.7-rc.2` 的 bundle：请替换为你实际运行的版本，设置页会把它显示在已装插件版本旁边。资产名即 `packages/freecodego/AGENTS.md` 里的命名约定。
 
 `dsh` 命令由 Harness CLI 提供，不来自本 bundle。普通终端里请先用 `npm install --global @deepseek-ai/dsh` 安装它（并确保 `pnpm` 可用）。桌面端通过自己的私有 shim 运行同一条命令并传入当前 `DSH_HOME`，因此 Web 与桌面端选择同一个 Harness home 时共用同一份 Profile 数据目录。
 
@@ -84,7 +84,7 @@ Logfare 有 20 行位于训练数据授权之后，选择器会标注而不是
 
 这个包挂载一个四工具的改动审查器。`engineering_code_review` 会审查工作区（已暂存、未暂存**以及**未跟踪的改动）、从 merge base 起算的一段引用范围、或某个提交对其第一父提交的差异，并按 `text`、`json` 或 `sarif` 渲染报告；`engineering_review_rules` 完全不花模型调用，直接返回会审查什么、按哪条规则；`engineering_review_status` 与 `engineering_review_report` 分别显示正在跑什么、以及把上一次结果按另一位读者重新渲染。规则分四层解析 —— 本次运行传入的规则文件、项目自己的（`.opencodereview/rule.json`、`.dsh/review.json` 或 `.freecodego/review.json`）、用户级 `~/.opencodereview/rule.json`、以及随插件发布的基线 —— 命中的第一层胜出，所以项目覆盖是替换而不是并入。覆盖面按文件核算：只要还有改动过的文件没被审到，这次运行就不能结束，而每次跳过都会记录原因。
 
-审查要花模型调用，所以是可选的。`reviewMode` 取 `off`、`record`（结论成为持久会话事件，所以事后不必重跑就能回答"那次审查说了什么"）或 `gate`（达到 `reviewThreshold` 的结论会在 `reviewCooldownTurns` 过去后注入回这一回合，Agent 必须回应它才能结束）。`reviewDeep` 为每个改动文件各开一个只读子 Agent，`reviewEscalation` 会用独立裁定者复核高危结论，并要求它去**反驳**。审查跑在本插件的第二模型路由（`advisorProvider` / `advisorModel`）上，所以全新安装无需额外配置即可使用。
+审查要花模型调用，所以是可选的。`reviewMode` 取 `off`、`record`（结论成为持久会话事件，所以事后不必重跑就能回答"那次审查说了什么"）或 `gate`（达到 `reviewThreshold` 的结论会在 `reviewCooldownTurns` 过去后注入回这一回合，Agent 必须回应它才能结束）。`reviewDeep` 为每个改动文件各开一个只读子 Agent，`reviewEscalation` 会用独立裁定者复核高危结论，并要求它去**反驳**。审查跑在本插件的第二模型路由（`advisorProvider` / `advisorModel`）上，所以全新安装无需额外配置即可使用；设置页的**第二模型路由**面板就是改这条路由的地方，凡共用它的功能 —— 这里的审查器、记忆召回选择器、记忆整合规划与待执行操作复核 —— 都会跟着改。
 
 <a id="project-memory"></a>
 ## 项目记忆

package/cordis.patch.yml

@@ -1,10 +1,13 @@
-# Standard DeepSeek Harness 0.1.7-alpha.2 FreeCodeGo composition.
-# Neither official route is disabled. `llm-deepseek` is the only row that
+# Standard DeepSeek Harness 0.1.7-rc.2 FreeCodeGo composition.
+# Neither official route is disabled. The `llm-deepseek` row (which mounts
+# `@deepseek-ai/dsh-llm-deepseek-api-key` since 0.1.7-rc.2) is the only row that
 # registers provider `deepseek-official`, and the base composition names that
 # provider twice (`agent-default-model.provider`, `web.searchProvider`) — so
 # disabling it leaves both the default model selection and the deepseek search
-# provider pointing at an id no mounted row supplies. The plugin registers its
-# own model adapters beside the official one rather than in place of it.
+# provider pointing at an id no mounted row supplies. rc.2's second DeepSeek row,
+# `llm-deepseek-account`, registers `deepseek-account` instead and stays mounted
+# with it. The plugin registers its own model adapters beside the official one
+# rather than in place of it.
 #
 # The Harness's own search provider stays enabled. The base composition pins
 # `web.searchProvider: deepseek-official`, and `@deepseek-ai/dsh-web-search-deepseek`
@@ -26,92 +29,176 @@
 - id: session-persistence-jsonl
   inject:
     - freeCodeGoSessionEvents
+# The Harness's own reminder scheduler, and the clock it resolves dates against —
+# plus, below, the session index the default-on history tools need. All three are
+# rows another layer declares, which this layer turns on rather than re-mounting.
+#
+# 0.1.7-rc.2 declares both rows in the Web composition
+# (`packages/bundle/web-app/cordis.patch.yml`) and leaves them `disabled: true`,
+# so the capability has an official home now: this layer *enables the rows the
+# composition already declares* instead of inserting a second copy of the same
+# package. That is the whole difference between an enhancement and a duplicate —
+# the plugin used to ship `packages/schedule/schedule` compiled into its own
+# payload because no upstream bundle mounted it (the plugin's own cron tools were
+# the stand-in before that).
+#
+# Enabling the pair together is not tidiness: `schedule` resolves an unqualified
+# date or time through `time-context`, so a scheduler mounted without it is a
+# scheduler whose dates resolve against nothing. Upstream says the same beside
+# both rows.
+#
+# A patch naming a row the composition does not declare is a stderr warning, not
+# a failure (`app-boot/README.md`), so a composition without the Web bundle boots
+# with no scheduler at all rather than failing to boot — which is what happened
+# when this layer shipped a compiled copy of the package for that case instead.
+- id: schedule
+  disabled: false
+- id: time-context
+  disabled: false
+# The session-history tools are on by default, and their content search is the
+# half that needs this row: the base mounts `session-query-sqlite` with
+# `openAt: never`, which keeps `ctx.sessionQuery` mounted but never opens SQLite.
+# Enabling the tools without this override is three working tools and two that
+# answer SESSION_QUERY_SEARCH_DISABLED for good, and a sidebar that can search
+# titles but not content. `first-search` rather than `startup` because the index
+# is only worth building once somebody searches; `dshHomePath` is provided to
+# Loader expressions by `app-boot` (`packages/boot/app-boot/src/index.ts`).
+- id: session-query-sqlite
+  config:
+    path: !!js dshHomePath('session-index.db')
+    openAt: first-search
 - insert:
     - id: freecodego-session-events
       name: 'freecodego/session-events'
-    # The Harness's team runtime, mounted before the FreeCodeGo plugin's own row.
-    # Nothing in the plugin depends on that position: it registers no team board
-    # and no member lifecycle of its own.
-    #
-    # These two rows are upstream's own modules — `packages/experimental/agent-team`
-    # and `-tool-agent-team`, published as `@deepseek-ai/dsh-experimental-agent-team`
-    # and `-tool-agent-team` — compiled into this bundle, and they exist only so a
-    # composition that never selected the official team bundles still has
-    # `ctx.agentTeams` and the team tools. When the official
-    # `@deepseek-ai/dsh-experimental-agent-team-profile` IS selected the official
-    # layer already mounts both, and this pair would then claim `spawn_teammate`
-    # twice. The installer's conflict guard resolves that by disabling one of two
-    # identical implementations, which is a coin flip the user cannot see; standing
-    # down here is the same outcome, decided before mounting. Official-first costs
-    # no capability, because the plugin owns no team service to lose: it classifies
-    # `spawn_teammate` (`plan-mode.ts`'s mutating set, `verify-on-stop.ts`'s
-    # delegation set) and its `engineering_team_*` tools orchestrate engines
-    # directly — a council over Codex/Claude/DeepSeek in `agent-tools.ts`, a
-    # different mechanism from this service rather than a second copy of it.
-    - id: freecodego-agent-team
-      name: 'freecodego/agent-team'
-      disabled: !!js "ctx.get('profileContext')?.startedBundles?.includes('@deepseek-ai/dsh-experimental-agent-team-profile') ?? false"
-      config:
-        maxMembers: 8
-        maxTasks: 256
-        maxPendingMessagesPerMember: 64
-        maxMessageBytes: 65536
-        disposalTimeoutMs: 5000
-    - id: freecodego-tool-agent-team
-      name: 'freecodego/tool-agent-team'
-      disabled: !!js "ctx.get('profileContext')?.startedBundles?.includes('@deepseek-ai/dsh-experimental-agent-team-profile') ?? false"
-      config:
-        freshProvider: spawn
-        forkProvider: fork
-    # The Harness's own reminder scheduler. It is not mounted by any upstream
-    # bundle — only by an example config — so without this row the composition has
-    # `@deepseek-ai/dsh-client-ui-schedule` on the client plane with no host
-    # projection behind it, and no `schedule_create`/`schedule_list`/
-    # `schedule_delete` for a model to call. The plugin's own cron tools used to
-    # stand in for those three verbs; this row is what replaced them.
-    - id: freecodego-schedule
-      name: 'freecodego/schedule'
+    # The Harness's team runtime and team tools are deliberately NOT mounted here.
+    #
+    # This layer used to compile `@deepseek-ai/dsh-experimental-agent-team` and
+    # `-tool-agent-team` into its own payload and mount them as
+    # `freecodego/agent-team` / `freecodego/tool-agent-team`, standing down only
+    # when the official `@deepseek-ai/dsh-experimental-agent-team-profile` was
+    # selected. That was a second copy of upstream's own modules, and the copy is
+    # what made the arbitration necessary: the two rows named the same
+    # `packages/experimental/*` sources this repository carries (`tsconfig.base.json`
+    # mapped the ids straight onto them), neither package is in this bundle's
+    # `peerDependencies`, and the official bundle mounts both **by name**. So the
+    # fallback bought nothing a composition could not get by selecting that bundle
+    # — which every FreeCodeGo profile ships selected — while costing a boot-time
+    # stand-in, a live handover, and a measured
+    # `service "agentTeams" has been registered` race whenever the official bundle
+    # was switched on while the copy served.
+    #
+    # Deleting it removes that whole class of collision instead of arbitrating it:
+    # `ctx.agentTeams` has exactly one possible owner, and the capability arrives
+    # with the bundle that owns it. What this plugin adds *beside* that runtime is
+    # unchanged and mounted below — the two cross-engine subagent providers, and
+    # the plugin-side reader of the official team events (`team-workflow.ts`) that
+    # turns the official board into stop-gate evidence. The plugin owns no team
+    # service to lose either: it classifies `spawn_teammate` (`plan-mode.ts`'s
+    # mutating set, `verify-on-stop.ts`'s delegation set), and its
+    # `engineering_team_*` tools orchestrate engines directly — a council over
+    # Codex/Claude/DeepSeek in `agent-tools.ts`, a different mechanism from this
+    # service rather than a second copy of it.
+    # The Harness's own cross-engine subagent providers. Mounting them is the
+    # whole difference between a team that can only delegate to its own model and
+    # one that can put a Codex or a Claude teammate behind `spawn_teammate`: each
+    # registers a provider on `ctx.subagents` (`codex` and `claude-code`), and the
+    # official team tool selects a provider by name — so the official board, mailbox and
+    # task list carry the cross-engine member with no tool of ours involved.
+    #
+    # No upstream bundle mounts either one. The base composition mounts
+    # `subagent-spawn-in-process` and `subagent-fork-in-process` only, so the two
+    # names `spawn_teammate` documents as its defaults are the only ones an
+    # unmodified install can select. That is the gap this pair closes, and it
+    # closes it the way the schedule pair above does: by mounting upstream's own
+    # package rather than shipping an engine client of this plugin's own.
+    #
+    # Both artifacts inline the Harness packages neither a published install nor
+    # this bundle's peers carry (`dsh-timeout`, `dsh-sdk-protocol`,
+    # `dsh-subprocess` — see `upstreamProviders` in the bundle build script), and
+    # the Codex one keeps `@openai/codex` as a real dependency because it locates
+    # its `app-server` binary through that package's manifest.
+    #
+    # Official-first still decides: `@deepseek-ai/dsh-subagent-codex` and
+    # `-claude-code` are in the plugin's handover table, so a composition that
+    # mounts the official package itself keeps it, and these rows stand down.
+    # They stay in this bundle, unlike the team pair that used to be mounted here,
+    # because no upstream bundle mounts either package: without these rows the two
+    # provider names `spawn_teammate` documents as its defaults are simply
+    # unselectable, which is a gap rather than a duplicate.
+    - id: freecodego-subagent-codex
+      name: 'freecodego/subagent-codex'
+      disabled: !!js "ctx.get('freecodegoOfficialRows')?.holds('@deepseek-ai/dsh-subagent-codex') ?? false"
+    - id: freecodego-subagent-claude-code
+      name: 'freecodego/subagent-claude-code'
+      disabled: !!js "ctx.get('freecodegoOfficialRows')?.holds('@deepseek-ai/dsh-subagent-claude-code') ?? false"
+    # No scheduler row of this bundle's own. The two overrides at the top of this
+    # file turn on the rows the Web composition already declares, so the Harness
+    # owns the reminder store, the `schedule` projection and the three tools. The
+    # compiled copy that used to sit here (`packages/schedule/schedule`, mounted as
+    # `freecodego/schedule`) served only a composition with no Web bundle at all —
+    # the same upstream source this repository already carries, kept as a fallback
+    # for a case this plugin ships no profile for. What this plugin adds is instead
+    # arithmetic the Harness's three rule shapes cannot express ("weekdays at
+    # 09:00"), and it hands the resulting instants *to* the Harness
+    # (`automation.ts`): one owner of a reminder either way.
     # The Harness's Auto-preset authorization gate: while a session's permission
     # preset is `auto`, every native call is classified by a reviewer before its
     # body runs. Mounting it also advertises the preset, which is the only way a
     # user can select it. The plugin's own approval reviewer stands down on this
     # preset (see action-reviewer.ts), so an Auto action gets one verdict, not two.
+    #
+    # Official-first stand-down, and it was missing at first: switching the
+    # official Auto-review bundle on mounted both copies, and the official row
+    # failed on what this row had already registered. This row stays because the
+    # official bundle is not selected by any profile this plugin ships, so here
+    # the fallback is the capability itself rather than a copy of a mounted one.
     - id: freecodego-auto-review
       name: 'freecodego/auto-review'
+      # This optional bundle's package name is its bundle name — there is no
+      # `-profile` suffix to add, unlike the team bundle these rows used to stand
+      # in for.
+      disabled: !!js "ctx.get('freecodegoOfficialRows')?.holds('@deepseek-ai/dsh-experimental-auto-review') ?? ctx.get('profileContext')?.startedBundles?.includes('@deepseek-ai/dsh-experimental-auto-review') ?? false"
 
-    # ── optional Harness capabilities, off by default ──────────────────────
-    #
-    # Browser control, desktop control, and session-history retrieval each ship
-    # in the Harness as a service plus one provider or tool package, and no
-    # bundle mounts any of them: mounting them is how a deployment says yes.
-    # Every row below is `disabled` for two reasons that hold for all three,
-    # plus the capability-specific ones stated beside each row.
-    #
-    # 1. **They are not part of the install contract.** This bundle's
-    #    `peerDependencies` is what the Harness must supply for the composition
-    #    to load, and none of these packages is in it — upstream's own words are
-    #    that the browser and desktop providers "activate only when explicitly
-    #    mounted", and `tool-session-query` documents itself as opt-in. An
-    #    *enabled* row naming a package the Harness need not supply is a row that
-    #    fails on an install that lacks it, so these rows are `disabled` and carry
-    #    the recipe for whoever wants them.
-    # 2. **They fail closed at different grains, so the grain decides.** Mounted
-    #    in a *preset*, one unusable enabled row makes the whole preset
-    #    unselectable: 0.1.6 reached that verdict in
-    #    `packages/preset/agent-presets/src/discovery.ts` (`unresolvableRows`,
-    #    which skipped a row only while `Boolean(row.disabled)`), and 0.1.7
-    #    reaches the same one in `packages/preset/agent-preset-registry/src/mount.ts`
-    #    (`auditRows`, which reports import failures, activation failures, and
-    #    rows still waiting for a service). Either way it is the "Failed to
-    #    load" failure the bundled presets already record once. Mounted here, an
-    #    enabled row that cannot load fails *that entry alone*:
-    #    `Entry._init` catches the import error, logs it and returns, and the rest
-    #    of the tree keeps running. The host plane is therefore the plane that can
-    #    hold an optional capability at all.
-    #
-    # Enabling one is a Loader decision, not an edit here: the Loader owns entry
-    # enablement (`plugin-conflicts.ts` says the same about entry ownership), so a
-    # row is turned on where the user's other entries are managed.
+    # ── optional Harness capabilities, on when the install carries them ─────
+    #
+    # Browser control and desktop control each ship in the Harness as a service
+    # plus one provider, and no bundle mounts either: mounting them is how a
+    # deployment says yes. This layer mounts both, because a capability the user
+    # has to find in a panel they do not open is a capability the deployment does
+    # not have — and every row below is gated on the install rather than stated,
+    # which `harness-plugin/src/capability-rows.ts` implements and this file states
+    # the reasons for.
+    #
+    # **Why not a plain `disabled: false`.** These packages are not in the
+    # install contract: upstream's own words are that the browser and desktop
+    # providers "activate only when explicitly mounted", and neither package is in
+    # this bundle's `peerDependencies` — the list that *is* the contract. An
+    # *enabled* row naming a package the Harness need not supply is a row that
+    # fails: `Entry._init` catches the import error, logs it and returns, so the
+    # install boots with one more `did not activate` per row on every boot and the
+    # panel shows 未运行 — a permanently broken plugin rather than an unused one.
+    # Mounted here that failure is only ever that entry's own, never the preset's
+    # (a preset audits its rows and reports an unresolvable one as making the whole
+    # preset unselectable), which is why the host plane is the only place an
+    # optional capability can live at all.
+    #
+    # **So `disabled` is a selector.** Each row asks the plugin's own
+    # `freecodegoCapabilities` service whether the capability can run here, and the
+    # fallback is `true` — before the plugin mounts, the row is already off, and
+    # `!undefined` keeps it off when the question cannot be asked. The plugin then
+    # starts the rows whose packages this install resolves, so **installing the
+    # packages is the opt-in**: there is no second switch to find, and removing
+    # them puts the rows quietly back off on the next boot instead of leaving a
+    # failed entry per row.
+    #
+    # A user who would rather state the answer can still toggle the row where they
+    # manage their other entries: that writes a plain boolean, which the plugin does
+    # not treat as its own, so it is never overruled.
+    #
+    # Enabling one is otherwise a Loader decision, not an edit here — the Loader owns
+    # entry enablement (`plugin-conflicts.ts` says the same about entry ownership) —
+    # and the recipe for supplying them is stated in `capability-rows.ts`, which is
+    # also what reports the reason in the Host log when a capability is off.
     #
     # ── browser and desktop control ─────────────────────────────────────────
     #
@@ -124,71 +211,88 @@
     #   desktop — dsh-experimental-computer-use-cua-driver-mcp (an already
     #             installed `cua-driver` executable owns permissions instead)
     #
-    # A third reason holds for these two rows alone: their prerequisites are the
-    # user's machine, not ours. A launched browser follows the upstream Playwright
-    # runtime's browser installation, and the native desktop provider needs OS
-    # permission grants plus npm optional dependencies left enabled — and it
-    # shares the host process, so a native crash can take the Host with it (its
-    # README says so in those words).
+    # A third condition holds for the browser pair alone, and the plugin checks it:
+    # the launched browser follows the Playwright runtime's own browser
+    # installation, and the provider opens it from `agent/created` with
+    # `failOnStartupError: true` — upstream's README says the consequence in those
+    # words, "Startup failure or cancellation rejects Session creation or resume".
+    # So the pair also requires a browser Playwright can launch (its own cache, or
+    # the `executablePath` a user configured), which is what keeps "the packages are
+    # installed but no browser is" from turning into sessions that cannot be created.
+    #
+    # Desktop control is not gated on more than its packages: OS permission grants
+    # cannot be read from here, its failures are reported per call rather than at
+    # startup, and it shares the host process — a native crash can take the Host with
+    # it, which its README says in those words, and which is why the driver package
+    # alone is the probe.
     #
     # `mode` is required by the Playwright provider and has no default; `launch`
-    # with `headless: true` is the pair its README documents. The native desktop
-    # provider takes no configuration at all. Both providers are mounted before
+    # with `headless: true` is the pair its README documents. A later layer that
+    # wants to override this row's `config:` has to restate `mode` with it, because
+    # an id-targeted `config:` entry replaces the configuration rather than merging
+    # into it — measured, and the failure it produces is a row that does not start.
+    # The native desktop provider takes no configuration at all. Both providers are mounted before
     # the plugin's own row, which is the position the provider README asks for
-    # ("mount both entries before creating or resuming a Session").
+    # ("mount both entries before creating or resuming a Session") — and is why the
+    # plugin, not the expression, is what starts them: their selectors are read
+    # before the plugin that answers them has mounted.
     - id: browser-use
       name: '@deepseek-ai/dsh-browser-use'
-      disabled: true
+      disabled: !!js "!ctx.get('freecodegoCapabilities')?.usable('@deepseek-ai/dsh-browser-use')"
     - id: browser-use-playwright-mcp
       name: '@deepseek-ai/dsh-experimental-browser-use-playwright-mcp'
-      disabled: true
+      disabled: !!js "!ctx.get('freecodegoCapabilities')?.usable('@deepseek-ai/dsh-experimental-browser-use-playwright-mcp')"
       config:
         mode: launch
         headless: true
     - id: computer-use
       name: '@deepseek-ai/dsh-computer-use'
-      disabled: true
+      disabled: !!js "!ctx.get('freecodegoCapabilities')?.usable('@deepseek-ai/dsh-computer-use')"
     - id: computer-use-cua-driver-native
       name: '@deepseek-ai/dsh-experimental-computer-use-cua-driver-native'
-      disabled: true
+      disabled: !!js "!ctx.get('freecodegoCapabilities')?.usable('@deepseek-ai/dsh-experimental-computer-use-cua-driver-native')"
 
-    # ── session-history retrieval ──────────────────────────────────────────
+    # ── session-history retrieval (on by default) ──────────────────────────
     #
-    # `tool-session-query` gives the model five read-only tools over earlier
-    # sessions (`session_search`, `session_event_search`, `session_trace`,
+    # Upstream's `tool-session-query` gives the model five read-only tools over
+    # earlier sessions (`session_search`, `session_event_search`, `session_trace`,
     # `session_event_trace`, `session_event_read`), authorized per call by exact
-    # `cwd` equality with the caller's session. This one row is the whole opt-in:
-    # the package injects `['tools', 'systemPrompt', 'sessionQuery',
-    # 'sessionProjections']`, and the base composition already mounts both
-    # services — `session-query-sqlite` is the owner of `ctx.sessionQuery` and
-    # `session-projection` is mounted beside it. Nothing else has to be added for
-    # the tools to load and work.
-    #
-    # ⚠ Content search is a second, separate switch, and this caveat is the
-    # reason this note is long. The base mounts `session-query-sqlite` with
-    # `openAt: never` on purpose: `ctx.sessionQuery` stays mounted (exact reads,
-    # titles, lineage traces) while SQLite is never opened, so `session_search`
-    # and `session_event_search` answer `SESSION_QUERY_SEARCH_DISABLED` — and the
-    # Web sidebar searches titles and workspace names only. Enabling the tools
-    # without the override below is therefore three working tools and two that
-    # always fail. This file is exactly the "later patch layer" the base comment
-    # points at, so the pair belongs together; it is stated rather than mounted
-    # because it changes search for *every* deployment, sidebar included, and
-    # that is the same decision as turning the tools on rather than a default:
-    #
-    #     - id: session-query-sqlite
-    #       config:
-    #         path: !!js dshHomePath('session-index.db')   # durable, or `:memory:`
-    #         openAt: first-search                          # or `startup`
-    #
-    # Upstream has a second reason for keeping this opt-in, and it is measurable
-    # here: the package's README states that enabling it adds fixed guidance plus
-    # five tool schemas to every model request, which
-    # `engineering_surface_report` reports as injected bytes against the reviewed
-    # lock in `.freecodego/surface-lock.json`.
+    # `cwd` equality with the caller's session. It is a *gap* rather than an
+    # opt-in on an unmodified install: the package injects `['tools',
+    # 'systemPrompt', 'sessionQuery', 'sessionProjections']` and the base mounts
+    # both services already, but no upstream bundle mounts the tool package and
+    # the `dsh` install contract does not carry it — so out of the box the model
+    # can search no prior session at all.
+    #
+    # The row therefore names *this* bundle's artifact (`freecodego/
+    # tool-session-query`, built from upstream's own package by
+    # `scripts/build-freecodego-bundle.mjs`) instead of the official package, and
+    # it is on by default because there is nothing for a user to install. It is
+    # the same shape as the two cross-engine providers above, and the same
+    # official-first rule decides: a composition that mounts
+    # `@deepseek-ai/dsh-tool-session-query` itself keeps it, and this row stands
+    # down through the plugin's own `freecodegoOfficialRows` service
+    # (`stand-in-rows.ts`), so the five tools never exist twice.
+    #
+    # Content search is a second switch, and it is turned on beside the first in
+    # this file — see `session-query-sqlite` in the override block at the top. The
+    # base mounts that row with `openAt: never` on purpose, leaving
+    # `ctx.sessionQuery` mounted (exact reads, titles, lineage traces) while
+    # SQLite is never opened; without the override, `session_search` and
+    # `session_event_search` answer `SESSION_QUERY_SEARCH_DISABLED` and the Web
+    # sidebar searches titles and workspace names only. Enabling the tools
+    # without it would be three working tools and two that always fail, so the
+    # pair is one decision here rather than two.
+    #
+    # Upstream's own reason for keeping this opt-in is measurable and is the
+    # honest cost of the default: the package adds fixed guidance plus five tool
+    # schemas to every model request, which `engineering_surface_report` reports
+    # as injected bytes against the reviewed lock in
+    # `.freecodego/surface-lock.json`. A deployment that would rather not pay it
+    # turns this row off where it manages its other entries.
     - id: tool-session-query
-      name: '@deepseek-ai/dsh-tool-session-query'
-      disabled: true
+      name: 'freecodego/tool-session-query'
+      disabled: !!js "ctx.get('freecodegoOfficialRows')?.holds('@deepseek-ai/dsh-tool-session-query') ?? false"
 
     # ── the Harness plugin's own row ───────────────────────────────────────
     #

package/dist/assets/design/craft/FUTURE_SECTIONS.md

@@ -0,0 +1,9 @@
+# Future Craft Sections
+
+These slugs are intentionally referenced by skills before their matching
+`craft/<slug>.md` sections ship. `pnpm lint:craft` treats them as planned
+forward references while still failing on unlisted typos.
+
+- motion-discipline
+- pixel-discipline
+- typographic-rhythm