Merge current master into debug-pangwenjie

# Conflicts:
#	docs/cordis-catalog/events.md
#	docs/core-data-structures/core.md
#	docs/core-data-structures/tools.md
#	docs/event-producer-consumer.md
#	docs/rfc/implemented/feature/2026-06-30-interception-seams.md
#	docs/tool-execution-pipeline.md
#	packages/core/agent-loop/src/agent.ts
#	packages/core/agent-loop/src/loop.ts
#	packages/core/agent-loop/tests/loop.spec.ts
#	packages/core/agent/README.md
#	packages/core/tools/src/index.ts
#	scripts/gen-doc-graphs.ts

website/zh-CN/api/cordis/context.md

@@ -0,0 +1,254 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# Context
+
+The context is the core cordis object: every service, event, and lifecycle API is reached through `ctx`. Event methods (`ctx.on`, `ctx.emit`, …) are documented on [Events](./events.md); `ctx.effect` and `ctx.fiber` on [Fiber](./fiber.md); `ctx.plugin` and `ctx.inject` on [Registry](./registry.md).
+
+Root and child dependency containers for Cordis plugins.
+A context is a proxy: normal property reads go through the service resolver, while `extend()`, `isolate()`, and `intercept()` create scoped child contexts without mutating their parent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L42)
+
+### ctx.extend(meta?)
+
+```ts website-api
+extend(meta = {}): this
+```
+
+Create a child context with extra metadata on top of the current scope.
+The child prototypally inherits every property of this context; own properties of `meta` shadow the inherited ones. The parent is not mutated.
+
+- `meta` — own properties (including symbol keys) to define on the child.
+
+**Returns** a child context inheriting from this one.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L99)
+
+### ctx.isolate(name, label?)
+
+```ts website-api
+isolate(name: string, label?: symbol)
+```
+
+Create a child context with an independent service scope for `name`.
+Below the returned context, reads and writes of the service `name` resolve against the new label instead of the parent's, so a different implementation can be provided without affecting the parent scope. Passing the same `label` to two `isolate()` calls joins their scopes.
+
+- `name` — the service name to isolate.
+- `label` — scope label to join; defaults to a fresh unique symbol.
+
+**Returns** a child context whose `name` service resolves in the new scope.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L121)
+
+### ctx.intercept(name, config)
+
+```ts website-api
+intercept<K extends InjectKey>(name: K, config: Context[K] extends { [symbols.config]: infer T } ? T : never): this
+intercept(name: string, config: any): this
+```
+
+Add service-specific intercept config for plugins started below this context.
+Plugins loaded under the returned context see `config` merged into the service's resolved config (ancestor entries first; see `Service[symbols.resolveConfig]`). The parent context is not affected.
+
+- `name` — the service name whose config to intercept.
+- `config` — the intercept config to merge for that service.
+
+**Returns** a child context carrying the additional intercept entry.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L139)
+
+### ctx.root
+
+```ts website-api
+root: this
+```
+
+The root context of the application (every child context shares it). @experimental
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L22)
+
+### ctx.baseUrl
+
+```ts website-api
+baseUrl?: string
+```
+
+Base URL used to resolve relative plugin/module specifiers, if the runtime sets one.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L24)
+
+### ctx.events
+
+```ts website-api
+events: EventsService
+```
+
+The event bus. Its methods are also mixed onto `ctx` (`ctx.on`, `ctx.emit`, ...).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L26)
+
+### ctx.logger
+
+```ts website-api
+logger: LoggerService
+```
+
+The logging service. Call `ctx.logger(name)` for a named logger.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L28)
+
+### ctx.reflect
+
+```ts website-api
+reflect: ReflectService
+```
+
+The reflection layer backing the context proxy (`ctx.get`, `ctx.provide`, ...).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L30)
+
+### ctx.registry
+
+```ts website-api
+registry: RegistryService
+```
+
+The plugin registry. Its methods are mixed onto `ctx` (`ctx.plugin`, `ctx.inject`).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L32)
+
+## Static members
+
+### Context.effect
+
+```ts website-api
+static readonly effect: unique symbol
+```
+
+Symbol key under which a disposer exposes its EffectMeta diagnostics tree.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L44)
+
+### Context.filter
+
+```ts website-api
+static readonly filter: unique symbol
+```
+
+Symbol key for a context's listener filter, consulted on every event dispatch.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L46)
+
+### Context.isolate
+
+```ts website-api
+static readonly isolate: unique symbol
+```
+
+Symbol key of the isolation map (see the `Context[symbols.isolate]` property).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L48)
+
+### Context.intercept
+
+```ts website-api
+static readonly intercept: unique symbol
+```
+
+Symbol key of the intercept map (see the `Context[symbols.intercept]` property).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L50)
+
+### Context.is(value)
+
+```ts website-api
+static is(value: any): value is Context
+```
+
+Returns true for Cordis context proxies and context prototypes.
+Works across realms and across multiple copies of cordis, because the brand is keyed by a global symbol rather than by `instanceof`.
+
+- `value` — the value to test.
+
+**Returns** `true` if `value` is a Cordis context, narrowing its type.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/context.ts#L61)
+
+## Service store and mixins
+
+### ctx.get(name, strict?)
+
+```ts website-api
+get<K extends string & keyof this>(name: K, strict?: boolean): undefined | this[K]
+get(name: string, strict?: boolean): any
+```
+
+Read a service from the store without the inject requirement.
+
+- `name` — the service name.
+- `strict` — when `true` (default), only return implementations whose providing fiber is currently active.
+
+**Returns** the service value, or `undefined` when not (yet) provided.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/reflect.ts#L16)
+
+### ctx.set(name, value)
+
+```ts website-api
+set<K extends string & keyof this>(name: K, value: undefined | this[K]): void
+set(name: string, value: any): void
+```
+
+Overwrite a provided service's value.
+Only the fiber that provided the service may set it; setting an unprovided name throws.
+
+- `name` — the service name.
+- `value` — the new service value.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/reflect.ts#L28)
+
+### ctx.provide(name, value)
+
+```ts website-api
+provide<K extends string & keyof this>(name: K, value: undefined | this[K]): () => void
+provide(name: string, value?: any): () => void
+```
+
+Register a service implementation owned by the current fiber.
+The service becomes visible to dependents in the same isolation scope once the fiber is active; it is unregistered (waking dependents) when the returned disposer runs or the fiber unloads. Throws if the name is already provided in this scope or declared as an accessor.
+
+- `name` — the service name.
+- `value` — the service value.
+
+**Returns** a disposer that unregisters the service.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/reflect.ts#L43)
+
+### ctx.accessor(name, options)
+
+```ts website-api
+accessor(name: string, options: Omit<Property.Accessor, 'type'>): void
+```
+
+Define a computed context property backed by get/set hooks.
+The accessor is removed when the current fiber unloads. Throws if the name is already declared.
+
+- `name` — the context property name.
+- `options` — the `get` hook and optional `set` hook.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/reflect.ts#L55)
+
+### ctx.mixin(name, mixins)
+
+```ts website-api
+mixin<K extends string & keyof this>(name: K, mixins: (keyof this & keyof this[K])[] | Dict<string>): void
+mixin<T extends {}>(source: T, mixins: (keyof this & keyof T)[] | Dict<string>): void
+```
+
+Expose selected members of a service directly on `ctx`.
+Each mixed-in key becomes an accessor that forwards to the service (binding methods to it), so e.g. `ctx.on` forwards to `ctx.events.on`. Mixins are removed when the current fiber unloads.
+
+- `name` — the context property holding the source service.
+- `mixins` — keys to forward, or a source-key → ctx-key map.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/reflect.ts#L66)

website/zh-CN/api/cordis/events.md

@@ -0,0 +1,142 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# Events
+
+The event system mixed into every context. Harness-defined events are cataloged on [Harness events](../harness/events.md).
+
+### ctx.parallel(name, ...args)
+
+```ts website-api
+parallel<K extends keyof Events>(name: K, ...args: Parameters<Events[K]>): Promise<void>
+parallel<K extends keyof Events>(thisArg: NoInfer<ThisType<Events[K]>>, name: K, ...args: Parameters<Events[K]>): Promise<void>
+```
+
+Dispatch an event, running all listeners concurrently.
+
+- `name` — the event name.
+- `args` — arguments passed to every listener.
+
+**Returns** a promise resolving once every listener has settled.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/events.ts#L43)
+
+### ctx.emit(name, ...args)
+
+```ts website-api
+emit<K extends keyof Events>(name: K, ...args: Parameters<Events[K]>): void
+emit<K extends keyof Events>(thisArg: NoInfer<ThisType<Events[K]>>, name: K, ...args: Parameters<Events[K]>): void
+```
+
+Dispatch an event synchronously, ignoring listener return values.
+
+- `name` — the event name.
+- `args` — arguments passed to every listener.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/events.ts#L52)
+
+### ctx.serial(name, ...args)
+
+```ts website-api
+serial<K extends keyof Events>(name: K, ...args: Parameters<Events[K]>): Promisify<ReturnType<Events[K]>>
+serial<K extends keyof Events>(thisArg: NoInfer<ThisType<Events[K]>>, name: K, ...args: Parameters<Events[K]>): Promisify<ReturnType<Events[K]>>
+```
+
+Dispatch an event, awaiting listeners in order until one bails.
+
+- `name` — the event name.
+- `args` — arguments passed to each listener.
+
+**Returns** the first bail value (non-null, non-false, non-undefined), if any.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/events.ts#L62)
+
+### ctx.bail(name, ...args)
+
+```ts website-api
+bail<K extends keyof Events>(name: K, ...args: Parameters<Events[K]>): ReturnType<Events[K]>
+bail<K extends keyof Events>(thisArg: NoInfer<ThisType<Events[K]>>, name: K, ...args: Parameters<Events[K]>): ReturnType<Events[K]>
+```
+
+Dispatch an event, calling listeners in order until one bails.
+
+- `name` — the event name.
+- `args` — arguments passed to each listener.
+
+**Returns** the first bail value (non-null, non-false, non-undefined), if any.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/events.ts#L72)
+
+### ctx.waterfall(name, ...args)
+
+```ts website-api
+waterfall<K extends keyof Events>(name: K, ...args: Parameters<Events[K]>): ReturnType<Events[K]>
+waterfall<K extends keyof Events>(thisArg: NoInfer<ThisType<Events[K]>>, name: K, ...args: Parameters<Events[K]>): ReturnType<Events[K]>
+```
+
+Dispatch an event whose last argument is a `next` continuation.
+Each listener wraps the rest of the chain: calling `next()` invokes the next listener (finally the built-in behavior); not calling it vetoes.
+
+- `name` — the event name.
+- `args` — listener arguments; the final one is the innermost `next`.
+
+**Returns** the outermost listener's return value.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/events.ts#L85)
+
+### ctx.on(name, listener, options?)
+
+```ts website-api
+on<K extends keyof Events>(name: K, listener: Events[K], options?: boolean | EventOptions): () => boolean
+```
+
+Register an event listener owned by the current fiber.
+
+- `name` — the event name to listen for.
+- `listener` — called with the dispatch arguments.
+- `options` — listener options; a boolean is shorthand for `prepend`.
+
+**Returns** a disposer removing the listener; `true` if it was still registered.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/events.ts#L96)
+
+### ctx.once(name, listener, options?)
+
+```ts website-api
+once<K extends keyof Events>(name: K, listener: Events[K], options?: boolean | EventOptions): () => boolean
+```
+
+Same as `on()`, but the listener disposes itself after its first call.
+
+- `name` — the event name to listen for.
+- `listener` — called at most once with the dispatch arguments.
+- `options` — listener options; a boolean is shorthand for `prepend`.
+
+**Returns** a disposer removing the listener; `true` if it was still registered.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/events.ts#L105)
+
+## EventOptions
+
+Options accepted by `ctx.on()` and `ctx.once()`.
+
+```ts website-api
+interface EventOptions {
+  /** Add the listener before existing listeners for the same event. */
+  prepend?: boolean
+  /** Receive the event regardless of context filter checks. */
+  global?: boolean
+}
+```
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/events.ts#L111)
+
+## DispatchMode
+
+Event dispatch strategy used by the event service.
+`emit` runs synchronous listeners without awaiting them, `parallel` awaits all listeners together, `serial` awaits them in order until one bails, `bail` stops on the first synchronous bail value, and `waterfall` composes listeners around a final `next` callback.
+
+```ts website-api
+type DispatchMode = 'emit' | 'parallel' | 'serial' | 'bail' | 'waterfall'
+```
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/events.ts#L31)

website/zh-CN/api/cordis/fiber.md

@@ -0,0 +1,282 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# Fiber
+
+A fiber is one loaded plugin instance: its lifecycle state, validated config, and registered effects. `ctx.fiber` is the current fiber; `ctx.effect()` delegates to it.
+
+### ctx.effect(execute, label?)
+
+```ts website-api
+effect(execute: () => SyncEffect, label?: string): Disposable<Promise<void>>
+effect(execute: () => Effect, label?: string): AsyncDisposable<Promise<void>>
+```
+
+Register a cleanup-aware effect on this fiber.
+`execute` runs immediately; the disposers it produces are collected and run (in reverse order) either when the returned disposer is called or when the fiber unloads, whichever comes first. Calling the disposer twice is a no-op. Throws `CordisError('INACTIVE_EFFECT')` if the fiber is already disposed, and `TypeError` if `execute` returns an invalid shape.
+
+- `execute` — the effect body; see `Effect` for accepted shapes.
+- `label` — effect label shown in `getEffects()` diagnostics.
+
+**Returns** a disposer that tears the effect down and settles once done.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L419)
+
+### ctx.fiber
+
+```ts website-api
+fiber: Fiber
+```
+
+The fiber (plugin runtime instance) that owns this context.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L11)
+
+## The Fiber class
+
+Runtime instance of one plugin application.
+A fiber tracks dependency state, validated config, lifecycle effects, and cleanup for the plugin context returned by `ctx.plugin()`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L183)
+
+### fiber.uid
+
+```ts website-api
+public uid: number | null
+```
+
+Unique id within the registry; 0 for the root fiber, `null` once disposed.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L185)
+
+### fiber.ctx
+
+```ts website-api
+public readonly ctx: Context
+```
+
+The context this fiber's plugin runs in (extends the parent context).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L187)
+
+### fiber.config
+
+```ts website-api
+public config: any
+```
+
+The validated plugin config (updated by `update()`).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L189)
+
+### fiber.state
+
+```ts website-api
+public state
+```
+
+Current lifecycle state; transitions emit `internal/status`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L191)
+
+### fiber.dispose
+
+```ts website-api
+public readonly dispose: () => Promise<void>
+```
+
+Dispose this fiber: unload the plugin, then settle once cleanup finished.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L193)
+
+### fiber.store
+
+```ts website-api
+public store: Dict<Impl> | undefined
+```
+
+Snapshot of required service implementations while loaded; `undefined` otherwise.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L195)
+
+### fiber.inertia
+
+```ts website-api
+public inertia: Promise<void> | undefined
+```
+
+The in-flight load/unload transition, if one is currently running.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L197)
+
+### fiber.name
+
+```ts website-api
+get name()
+```
+
+The plugin's display name, inherited from the nearest named ancestor, else `'root'`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L340)
+
+### fiber.assertActive()
+
+```ts website-api
+assertActive()
+```
+
+Throw if the fiber has already been disposed.
+
+**Returns** nothing when the fiber is still active.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L355)
+
+### fiber.effect(execute, label?)
+
+```ts website-api
+effect(execute: () => SyncEffect, label?: string): Disposable<Promise<void>>
+effect(execute: () => Effect, label?: string): AsyncDisposable<Promise<void>>
+```
+
+Register a cleanup-aware effect on this fiber.
+`execute` runs immediately; the disposers it produces are collected and run (in reverse order) either when the returned disposer is called or when the fiber unloads, whichever comes first. Calling the disposer twice is a no-op. Throws `CordisError('INACTIVE_EFFECT')` if the fiber is already disposed, and `TypeError` if `execute` returns an invalid shape.
+
+- `execute` — the effect body; see `Effect` for accepted shapes.
+- `label` — effect label shown in `getEffects()` diagnostics.
+
+**Returns** a disposer that tears the effect down and settles once done.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L419)
+
+### fiber.getEffects()
+
+```ts website-api
+getEffects()
+```
+
+Return metadata for currently registered effects.
+
+**Returns** one `EffectMeta` tree per labeled live effect.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L572)
+
+### fiber.await()
+
+```ts website-api
+async await()
+```
+
+Wait for current lifecycle work and rethrow startup errors.
+
+**Returns** this fiber, once it has settled into a stable state.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L701)
+
+### fiber.restart()
+
+```ts website-api
+async restart()
+```
+
+Dispose and immediately reload this plugin with its current config.
+
+**Returns** a promise resolving once the reload settled.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L715)
+
+### fiber.update(config, noSave?)
+
+```ts website-api
+update(config: any, noSave = false)
+```
+
+Validate and apply new config, then restart the plugin.
+Runs the `internal/update` waterfall first, so update hooks (and HMR) can veto or replace the restart.
+
+- `config` — the new raw config; validated before anything restarts.
+- `noSave` — hint for persistence hooks not to write the change back.
+
+**Returns** nothing; the restart runs behind the `internal/update` waterfall.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L733)
+
+## Effect
+
+Effect body result accepted by `ctx.effect()` and plugin startup.
+Either a single disposer, a promise of one, or a (possibly async) iterable yielding several — generator effects register each yielded disposer as it is produced.
+
+```ts website-api
+type Effect<T = any> =
+  | SyncEffect<T>
+  | AsyncEffect<T>
+```
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L82)
+
+## Disposable
+
+Function returned by an effect to release resources during disposal.
+Disposers run in reverse registration order when the owning fiber unloads; they may be async, in which case unloading awaits them.
+
+```ts website-api
+type Disposable<T = any> = () => T
+```
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L73)
+
+## EffectMeta
+
+Tree node used to expose nested effect labels for diagnostics.
+
+```ts website-api
+interface EffectMeta {
+  /** Human-readable effect label, e.g. `ctx.on("event")` or `ctx.provide("name")`. */
+  label: string
+  /** Metadata of nested effects registered while this effect ran. */
+  children: EffectMeta[]
+}
+```
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L95)
+
+## CordisError
+
+Framework error with a stable machine-readable code.
+
+```ts website-api
+class CordisError extends Error {
+  /**
+   * @param code — the stable error code; also the default message.
+   * @param message — optional human-readable override.
+   */
+  constructor(public code: CordisError.Code, message?: string)
+}
+
+namespace CordisError {
+  export type Code = keyof typeof Code
+
+  export const Code = {
+    INACTIVE_EFFECT: 'cannot create effect on inactive context',
+  } as const
+}
+```
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L156)
+
+## ValidationError
+
+Error raised when plugin configuration fails standard-schema validation.
+
+```ts website-api
+class ValidationError extends TypeError {
+  name = 'ValidationError'
+
+  /**
+   * Build the aggregated message from schema issues.
+   *
+   * @param issues — the standard-schema issues, one message line each.
+   */
+  constructor(issues: readonly StandardSchemaV1.Issue[])
+}
+```
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/fiber.ts#L18)

website/zh-CN/api/cordis/registry.md

@@ -0,0 +1,121 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# Registry
+
+Plugin loading and dependency injection.
+
+### ctx.inject(deps, callback)
+
+```ts website-api
+inject(deps: Inject, callback: Plugin.Function<void>): Fiber & PromiseLike<Fiber>
+```
+
+Run a callback once the requested services are available.
+Shorthand for `ctx.plugin({ inject, apply: callback })`: the callback is unloaded and re-run whenever a required service changes.
+
+- `deps` — required services, as an array or a name → config map.
+- `callback` — plugin body called with `(ctx, config)`.
+
+**Returns** the fiber; awaiting it settles once loading finished.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/registry.ts#L175)
+
+### ctx.plugin(plugin, ...args)
+
+```ts website-api
+plugin<P extends Plugin>(plugin: P, ...args: Spread<GetPluginConfig<P>>): Fiber & PromiseLike<Fiber>
+```
+
+Load a plugin in the current context.
+
+- `plugin` — a function, class, or `{ apply }` object plugin.
+- `args` — the plugin config, validated against its `Config` schema.
+
+**Returns** the fiber; awaiting it settles once loading finished (rejecting on config or startup errors).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/registry.ts#L184)
+
+## Plugin
+
+Supported plugin entrypoint shapes.
+
+```ts website-api
+type Plugin<T = any> =
+  | Plugin.Function<T>
+  | Plugin.Constructor<T>
+  | Plugin.Object<T>
+
+namespace Plugin {
+  /** Shared metadata understood by the plugin registry and related tooling. */
+  export interface Base<T = any> {
+    /** Display name used for fiber diagnostics and logger names. */
+    name?: string
+    /** Standard-schema validator applied to config before the plugin starts. */
+    Config?: StandardSchemaV1<any, T>
+    /** Services the plugin requires; it only loads while all are available. */
+    inject?: Inject
+    /** Service name(s) the plugin provides (read by `Service` and by loaders). */
+    provide?: string | string[]
+    /** Service names whose intercept config the plugin declares it consumes. */
+    intercept?: Dict<boolean>
+  }
+
+  export interface Transform<S, T> {
+    /** Marks the transform object as a schema/config transform. */
+    schema?: true
+    /** Convert user-facing config to runtime config. */
+    Config: (config: S) => T
+  }
+
+  /** Function plugin called with `(ctx, config)`. */
+  export interface Function<T = any> extends Base<T> {
+    (ctx: Context, config: T): any
+  }
+
+  /** Class plugin constructed with `(ctx, config)`. */
+  export interface Constructor<T = any> extends Base<T> {
+    new (ctx: Context, config: T): any
+  }
+
+  /** Object plugin with an `apply(ctx, config)` method. */
+  export interface Object<T = any> extends Base<T> {
+    apply(ctx: Context, config: T): any
+  }
+
+  /** Mutable registry record shared by all fibers of one plugin callback. */
+  export interface Runtime {
+    /** Display name copied from the first registered plugin shape. */
+    name?: string
+    /** Every live fiber of this plugin (one per `ctx.plugin()` call). */
+    fibers: DisposableList<Fiber>
+    /** The executable entrypoint all fibers share (registry identity key). */
+    callback: globalThis.Function
+    /** Standard-schema validator applied to each fiber's config. */
+    Config?: StandardSchemaV1
+  }
+}
+```
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/registry.ts#L91)
+
+## Inject
+
+Service dependency declaration accepted by plugins and the `@Inject` decorator.
+Array form requests services without intercept config. Object form maps each service name to optional intercept config for the plugin context.
+
+```ts website-api
+type Inject<M = Dict> = (keyof M)[] | { [K in keyof M]?: M[K] }
+
+namespace Inject {
+  /**
+   * Convert array/object/class-inherited inject metadata into a plain map.
+   *
+   * @param inject — the declaration to normalize; `null`/`undefined` add nothing.
+   * @param result — the map to fill (service name → intercept config or `null`).
+   * @returns `result`.
+   */
+  export function resolve(inject: Inject | null | undefined, result: Dict = Object.create(null))
+}
+```
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/registry.ts#L18)

website/zh-CN/api/cordis/service.md

@@ -0,0 +1,92 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# Service
+
+Base class for context services: subclass it and load the subclass as a plugin to register `ctx.<name>`.
+
+Base class for services that expose a named API on `ctx`.
+Subclasses call `super(ctx, name)` from their constructor. The service is registered immediately and is automatically removed with the owning fiber.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/service.ts#L11)
+
+### service.name
+
+```ts website-api
+public name!: string
+```
+
+The service name this instance is registered under.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/service.ts#L30)
+
+## Static members
+
+### Service.init
+
+```ts website-api
+static readonly init: unique symbol
+```
+
+Symbol key of an instance method run after construction (class plugins).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/service.ts#L13)
+
+### Service.check
+
+```ts website-api
+static readonly check: unique symbol
+```
+
+Symbol key of the availability predicate passed to `ctx.provide()`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/service.ts#L15)
+
+### Service.config
+
+```ts website-api
+static readonly config: unique symbol
+```
+
+Symbol key of the phantom intercept-config type parameter.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/service.ts#L17)
+
+### Service.invoke
+
+```ts website-api
+static readonly invoke: unique symbol
+```
+
+Symbol key of the call body making a service callable (e.g. `ctx.logger()`).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/service.ts#L19)
+
+### Service.extend
+
+```ts website-api
+static readonly extend: unique symbol
+```
+
+Symbol key of the helper deriving an extended service instance.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/service.ts#L21)
+
+### Service.tracker
+
+```ts website-api
+static readonly tracker: unique symbol
+```
+
+Symbol key of the tracker metadata used for context tracing.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/service.ts#L23)
+
+### Service.resolveConfig
+
+```ts website-api
+static readonly resolveConfig: unique symbol
+```
+
+Symbol key of the intercept-config resolution helper below.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/vendor/cordis/src/service.ts#L25)

website/zh-CN/api/harness/agent-loop.md

@@ -0,0 +1,55 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.agentLoop
+
+`AgentLoop` — provided by `@deepseek-ai/dsh-agent-loop`.
+
+Concrete ReactLoopAgent factory and driver service.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent-loop/src/index.ts#L335)
+
+### ctx.agentLoop.create(id, options?, meta?)
+
+```ts website-api
+create(id: AgentId, options: AgentOptions = {}, meta: Pick<SessionHeader, 'cwd'> = {}): ReactLoopAgent
+```
+
+Create an agent on a fresh per-run session, owned by the accessing fiber. Constructor-driven config calls use the loop fiber itself.
+
+- `id` — agent registry id.
+- `options` — concrete loop options.
+- `meta` — optional fresh-session workspace metadata.
+
+**Returns** the published running agent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent-loop/src/index.ts#L391)
+
+### ctx.agentLoop.createAgent(ownerCtx, options)
+
+```ts website-api
+async createAgent(ownerCtx: Context, options: CreateAgentOptions): Promise<AgentHandle>
+```
+
+Create an owned agent on a caller-supplied session id.
+
+- `ownerCtx` — caller context that structurally owns the transaction.
+- `options` — identities, session seed/metadata, loop options, setup, and cancellation.
+
+**Returns** the published handle.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent-loop/src/index.ts#L414)
+
+### ctx.agentLoop.resume(ownerCtx, options)
+
+```ts website-api
+async resume(ownerCtx: Context, options: ResumeAgentOptions): Promise<AgentHandle>
+```
+
+Resume an owned agent from the configured persistence service.
+
+- `ownerCtx` — caller context that owns load, setup, and the live lifecycle.
+- `options` — persisted identity, loop options, setup, and cancellation.
+
+**Returns** the published handle.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent-loop/src/index.ts#L445)

website/zh-CN/api/harness/agents.md

@@ -0,0 +1,117 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.agents
+
+`AgentRegistry` — provided by `@deepseek-ai/dsh-agent`.
+
+Agent registry (`ctx.agents`): tracks live agents so UI, hook, and orchestrator plugins can find them without depending on the concrete loop package. Agent *creation* is provided by whichever plugin implements the AgentFactory (`@deepseek-ai/dsh-agent-loop`), registered via setFactory.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/index.ts#L133)
+
+### ctx.agents.setFactory(factory)
+
+```ts website-api
+setFactory(factory: AgentFactory): () => void
+```
+
+Register the effect-scoped creation factory, rejecting a duplicate. Service factories are retraced through each create/resume caller for ownership.
+
+- `factory` — the loop-owned factory `create`/`resume` delegate to.
+
+**Returns** the exact Cordis effect disposer.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/index.ts#L152)
+
+### ctx.agents.create(options)
+
+```ts website-api
+async create(options: CreateAgentOptions): Promise<AgentHandle>
+```
+
+Create and publish an owned agent and session through the active factory. Rejects if no factory is registered or creation, setup, or publication fails.
+
+- `options` — agent id, session id/seed/metadata, and agent options.
+
+**Returns** the handle after setup, rollback-covered publication, and loop start complete.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/index.ts#L177)
+
+### ctx.agents.resume(options)
+
+```ts website-api
+async resume(options: ResumeAgentOptions): Promise<AgentHandle>
+```
+
+Load a persisted session and resume an agent on it through the registered factory. Rejects if no factory is registered; the factory rejects if session persistence is not configured or persistence/setup fails.
+
+- `options` — persisted identity, configuration, and optional setup.
+
+**Returns** the handle after setup, rollback-covered publication, and loop start complete.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/index.ts#L193)
+
+### ctx.agents.register(agent)
+
+```ts website-api
+register(agent: Agent): () => void
+```
+
+Register a live agent in the calling effect scope, with scope-filtered creation and disposal events. Duplicate ids throw.
+
+- `agent` — the already-constructed agent to record in the store.
+
+**Returns** the exact Cordis effect disposer for nested teardown ordering.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/index.ts#L207)
+
+### ctx.agents.enter(agent)
+
+```ts website-api
+enter(agent: Agent): () => void
+```
+
+Insert an unpublished agent for an ordered factory transaction.
+
+- `agent` — the prepared, unpublished agent.
+
+**Returns** an idempotent closure that removes this exact entry and emits the paired disposal edge; detachment during creation dispatch is deferred.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/index.ts#L222)
+
+### ctx.agents.announce(agent)
+
+```ts website-api
+announce(agent: Agent): void
+```
+
+Announce an agent previously inserted with enter.
+
+- `agent` — the live inserted agent to announce.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/index.ts#L290)
+
+### ctx.agents.get(id)
+
+```ts website-api
+get(id: AgentId): Agent | undefined
+```
+
+Look up a live agent.
+
+- `id` — the agent id to look up.
+
+**Returns** the agent, or undefined when no live agent has that id.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/index.ts#L324)
+
+### ctx.agents.list()
+
+```ts website-api
+list(): Agent[]
+```
+
+All live agents, in registration order.
+
+**Returns** a fresh array; mutating it does not affect the registry.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/index.ts#L332)

website/zh-CN/api/harness/approval.md

@@ -0,0 +1,23 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.approval
+
+`ApprovalService` — provided by `@deepseek-ai/dsh-user-approval`.
+
+Approval service that applies session policy before answerers and logs every ask/outcome pair to the requesting session. It exposes deterministic policy changes to the model through prompt and pre-step notices.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/ui/user-approval/src/index.ts#L229)
+
+### ctx.approval.request(req)
+
+```ts website-api
+async request(req: ApprovalRequest): Promise<ApprovalOutcome>
+```
+
+Ask the composed answerers to decide one readonly same-process request. The service borrows the request, agent, session, and live signal directly. The request requires an open turn because the audit pair must be enclosed by the durable log's commit/replay boundary; an idle ask rejects before appending anything. The answerer phase always produces an outcome: an aborted signal yields `'cancelled'`, a missing or throwing answerer yields `'unavailable'` (fail closed), and a rogue non-vocabulary return value is normalized to `'unavailable'`. A failure that prevents either audit append from committing still rejects because returning an unlogged decision would violate the pair. Session contains post-commit observer failures, so an authoritative append cannot reject the request or suppress its matching audit event.
+
+- `req` — the pending decision (agent, tool identity, reason, signal).
+
+**Returns** the closed outcome; `'allowed-once'` is the only grant.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/ui/user-approval/src/index.ts#L313)

website/zh-CN/api/harness/bash-env.md

@@ -0,0 +1,49 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.bashEnv
+
+`BashEnvRegistry` — provided by `@deepseek-ai/dsh-tool-bash`.
+
+Registry (`ctx.bashEnv`) for trusted, per-execution `DSH_*` variables. The namespace is rebuilt for every model bash call: ambient `DSH_*` values are discarded by the executor, then the registry's current snapshot is injected. Built-in shell facts remain owned by the registry itself while plugins can register additional, enumerable facts with effect-scoped disposal.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/tool-bash/src/index.ts#L102)
+
+### ctx.bashEnv.register(contributor)
+
+```ts website-api
+register(contributor: BashEnvContributor): () => void
+```
+
+Register one environment contributor. Names and keys are unique; built-in keys are reserved. Registration is disposed with the calling plugin fiber.
+
+- `contributor` — declared key ownership and per-execution resolver.
+
+**Returns** the disposer that unregisters the contribution.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/tool-bash/src/index.ts#L123)
+
+### ctx.bashEnv.collect(execution)
+
+```ts website-api
+collect(execution: ToolExecution): DshEnvironment
+```
+
+Build the trusted `DSH_*` snapshot for one bash tool execution.
+
+- `execution` — the current tool execution.
+
+**Returns** an immutable environment overlay containing built-ins and current contributions.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/tool-bash/src/index.ts#L165)
+
+### ctx.bashEnv.list()
+
+```ts website-api
+list(): BashEnvVariableInfo[]
+```
+
+Enumerate plugin-contributed variables without executing their resolvers.
+
+**Returns** declarations sorted by environment variable name.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/tool-bash/src/index.ts#L197)

website/zh-CN/api/harness/bash.md

@@ -0,0 +1,66 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.bash
+
+`BashExecutor` (abstract seam) — provided by `@deepseek-ai/dsh-bash`.
+
+Abstract bash execution service. Subclass, implement the abstract methods, and load the subclass as a plugin — it registers as `ctx.bash` (one implementation per context; loading a second throws, which is cordis' standard duplicate-service behavior).
+Implementations must honor these semantics:
+- run rejects only for infrastructure failures. Nonzero exits, timeout kills, and abort kills resolve with a BashRunResult.
+- start returns immediately; no timeout applies to background processes. `done` settles at process close and never rejects; spawn failures settle as `killed` with the error on stderr.
+- BashProcess.readOutput is incremental: consecutive reads never repeat output. Lossy reads report truncation and available spill files.
+- Disposal kills all running background processes and awaits their exit.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/bash/src/index.ts#L49)
+
+### ctx.bash.sandboxMode
+
+```ts website-api
+get sandboxMode(): SandboxMode | undefined
+```
+
+The sandbox mode this executor applies by default, or `undefined` when it does not sandbox commands.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/bash/src/index.ts#L59)
+
+### ctx.bash.resolve(request)
+
+```ts website-api
+abstract resolve(request: BashExecRequest): BashExecSpec
+```
+
+Apply implementation-owned defaults and caps to a request before execution.
+
+- `request` — the caller's request; omitted fields get this implementation's defaults, capped fields are clamped.
+
+**Returns** the fully-specified spec to hand to `run`/`start`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/bash/src/index.ts#L69)
+
+### ctx.bash.run(spec)
+
+```ts website-api
+abstract run(spec: BashExecSpec): Promise<BashRunResult>
+```
+
+Run a command in the foreground; resolves when it finishes.
+
+- `spec` — a resolved spec from `resolve`, never a raw request.
+
+**Returns** the outcome; nonzero exits, timeout kills, and abort kills resolve with a descriptive result rather than reject.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/bash/src/index.ts#L77)
+
+### ctx.bash.start(spec)
+
+```ts website-api
+abstract start(spec: BashExecSpec): BashProcess
+```
+
+Start a background process and return its handle immediately.
+
+- `spec` — a resolved spec from `resolve`, never a raw request.
+
+**Returns** the live process handle (reads, kill, quiescence promise).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/bash/bash/src/index.ts#L84)

website/zh-CN/api/harness/code-runtime.md

@@ -0,0 +1,43 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.codeRuntime
+
+`CodeRuntime` (abstract seam) — provided by `@deepseek-ai/dsh-code-runtime`.
+
+Registers one `ctx.codeRuntime` implementation. Program, budget, abort, and substrate failures resolve in CodeRunResult; only seam misuse rejects. Implementations bridge structured-cloneable bindings while treating programs as hostile peers, isolate runs from one another, and terminate and await in-flight runs during disposal.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/code-runtime/code-runtime/src/index.ts#L30)
+
+### ctx.codeRuntime.language
+
+```ts website-api
+abstract readonly language: string
+```
+
+The source language run expects `program` to be written in, as a lowercase identifier. Informational, not gating — a consumer that generates language-specific presentation (typed SDK stubs, usage instructions) switches on it and fails loud on a language it cannot present. Well-known value: `'typescript'`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/code-runtime/code-runtime/src/index.ts#L38)
+
+### ctx.codeRuntime.isolation
+
+```ts website-api
+abstract readonly isolation: string
+```
+
+The execution substrate, as a lowercase identifier. Informational, not gating — a descriptor so deployments and diagnostics can tell backends apart, not a security claim. Well-known values: `'worker-thread'`, `'process'`, `'container'`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/code-runtime/code-runtime/src/index.ts#L46)
+
+### ctx.codeRuntime.run(request)
+
+```ts website-api
+abstract run(request: CodeRunRequest): Promise<CodeRunResult>
+```
+
+Execute one program against the request's bindings and capture what it emitted. See the class doc for the resolution contract (error is a result field; rejection means seam misuse only).
+
+- `request` — the program, its bindings, and the abort signal; the request carries everything the runtime acts on, with no hidden defaults.
+
+**Returns** the run's outcome: completion value (when transferable), the ordered log capture, and the failure (if any).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/code-runtime/code-runtime/src/index.ts#L61)

website/zh-CN/api/harness/compact.md

@@ -0,0 +1,44 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.compact
+
+`CompactService` (abstract seam) — provided by `@deepseek-ai/dsh-compact`.
+
+Abstract compaction service. Implementations own trigger policy, retention, and summarization, and may consume a separate measurement service. A successful run replaces the selected surface span with one summary node and prevents concurrent compaction of the same session. Load one implementation per context as `ctx.compact`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/compact/compact/src/index.ts#L38)
+
+### ctx.compact.compactIfNeeded(agent, fullSystemPrompt, sessionPrefix, signal)
+
+```ts website-api
+abstract compactIfNeeded( agent: CompactAgentContext, fullSystemPrompt: string, sessionPrefix: readonly Message[], signal: AbortSignal, ): Promise<CompactionResult | null>
+```
+
+Check token pressure and compact if the conversation is too large. Estimate the next request, including its session prefix, derived history, and system prompt. Above threshold, compact a head-anchored range ending at a balanced tool boundary and reconsolidate any prior automatic checkpoint. Return `null` when no compaction is needed or an open tail leaves no safe cutoff. A single oversized retained unit or prefix cannot be repaired here.
+
+- `agent` — agent context owning the session surface and model options.
+- `fullSystemPrompt` — assembled system prompt, counted toward the estimate.
+- `sessionPrefix` — the instance's composed session prefix, counted toward the estimate.
+- `signal` — cancellation signal; model-backed implementations must forward it.
+
+**Returns** the compaction result, or `null` if no compaction was needed.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/compact/compact/src/index.ts#L58)
+
+### ctx.compact.compactRegion(session, start, end, agent, signal?)
+
+```ts website-api
+abstract compactRegion( session: Session, start: number, end: number, agent: CompactAgentContext, signal?: AbortSignal, ): Promise<CompactionResult>
+```
+
+Forcibly compact a range of surface nodes into a single summary node. `start` and `end` name an inclusive span by surface position, not numeric seq order; replacements can make visible seqs non-monotonic. Both edges must be balanced so assistant tool calls remain paired with their results. A model- backed implementation forwards cancellation. The agent must own the exact target session object; implementations reject an ownership mismatch before model resolution, lock acquisition, summarization, or log mutation, and reject active, missing, reversed, or unbalanced ranges. Use toolPairingBalancedBefore and toolPairingBalancedAfter for the edge checks.
+
+- `session` — session to mutate; must be identical to `agent.session`.
+- `start` — first surface seq, inclusive.
+- `end` — last surface seq, inclusive.
+- `agent` — owner of the target session and summarizer context.
+- `signal` — optional cancellation; model-backed implementations must forward it.
+
+**Returns** the replaced range and summary.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/compact/compact/src/index.ts#L85)

website/zh-CN/api/harness/events.md

@@ -0,0 +1,603 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# Harness events
+
+Every event the harness packages declare on the cordis event bus (39 total), grouped by scope. The **mode** is the dispatch semantics (`emit` fire-and-forget, `parallel` awaited, `serial` first-bail, `waterfall` veto-chain — a waterfall listener MUST call `next()` to delegate).
+
+## agent/*
+
+### agent/created
+
+**Mode:** `emit`
+
+```ts website-api
+'agent/created'(this: Scoped<Agent>, agent: Agent): void
+```
+
+A fully configured agent and live session were published. Setup is composition-only; `agent/session-start` is the first startup-driving seam. Synchronous listener failure vetoes publication, while returned-promise rejection is reported. Detach requested during dispatch waits until every creation listener has observed the stable entry.
+
+- `agent` — the newly registered agent with its live session and completed setup. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L154)
+
+### agent/disposed
+
+**Mode:** `emit`
+
+```ts website-api
+'agent/disposed'(this: Scoped<Agent>, agent: Agent): void
+```
+
+An agent left the registry; AgentLoop emits this after driver quiescence but before session detachment and scoped-registration unwind. Custom registry users own their driver-ordering contract.
+
+- `agent` — the exact agent removed from the registry. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L163)
+
+### agent/error
+
+**Mode:** `emit`
+
+```ts website-api
+'agent/error'(this: Scoped<Agent>, agent: Agent, turn: number, step: number, error: Error): void
+```
+
+A step or turn errored. The loop reports a failure here (plus the logger) even when the error has no in-turn position for a session `error` event.
+
+- `agent` — the agent whose turn errored.
+- `turn` — the turn in which the failure surfaced.
+- `step` — the step at which the failure surfaced.
+- `error` — the failure, verbatim. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L298)
+
+### agent/pre-step
+
+**Mode:** `serial`
+
+```ts website-api
+'agent/pre-step'(this: Scoped<Agent>, agent: Agent, turn: number, step: number, fullSystemPrompt: string, sessionPrefix: readonly Message[], signal: AbortSignal): Promise<void> | void
+```
+
+Awaited serial checkpoint for session-surface mutation after prompt assembly and before `step/start`; appends land outside the pending step. The loop derives history once afterward, so compaction records and replacements are included without rewriting an assembled request. The prompt and prefix are the exact pressure inputs for that request, and `signal` cancels listener work. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+- `agent` — the agent opening the step.
+- `turn` — the open turn number.
+- `step` — the pending step number.
+- `fullSystemPrompt` — the assembled prompt.
+- `sessionPrefix` — the frozen request prefix.
+- `signal` — the turn abort signal.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L217)
+
+### agent/prompt-submit
+
+**Mode:** `waterfall`
+
+```ts website-api
+'agent/prompt-submit'(this: Scoped<Agent>, agent: Agent, content: ContentBlock[], source: MessageSource, next: () => Promise<PromptDecision>): Promise<PromptDecision>
+```
+
+Allow, rewrite, or block one drained prompt before it becomes a user message. Call `next()` for the unchanged default.
+
+- `agent` — the agent draining its inbox.
+- `content` — the drained message's blocks, as queued.
+- `source` — the message's resolved source. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L227)
+
+### agent/queued
+
+**Mode:** `emit`
+
+```ts website-api
+'agent/queued'(this: Scoped<Agent>, agent: Agent, content: ContentBlock[], info: { source: MessageSource; steering: boolean }): void
+```
+
+Detached, frozen content entered the agent's inbox. Source defaults have already been applied, so these are the exact values retained for the log.
+
+- `agent` — the agent whose inbox received the message.
+- `content` — the accepted content blocks retained by the inbox.
+- `info` — the accepted source plus whether it entered as steering. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L182)
+
+### agent/request
+
+**Mode:** `waterfall`
+
+```ts website-api
+'agent/request'(this: Scoped<Agent>, agent: Agent, turn: number, step: number, config: LlmCallConfig, next: () => Promise<LlmCallConfig>): Promise<LlmCallConfig>
+```
+
+Replace the frozen call configuration. Model-visible content must use logged channels; this seam cannot mutate messages. Injection here joins the next request because the current step boundary is already fixed.
+
+- `agent` — the agent making the model call.
+- `turn` — the open turn number.
+- `step` — the step whose request this is.
+- `config` — the config the loop would use (frozen); return a replacement to switch. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L239)
+
+### agent/session-prefix
+
+**Mode:** `waterfall`
+
+```ts website-api
+'agent/session-prefix'(this: Scoped<Agent>, agent: Agent, prefix: Message[], signal: AbortSignal, next: () => Promise<Message[]>): Promise<Message[]>
+```
+
+Compose request-only messages placed before derived history. The frozen result is computed once per loop instance, logged on its anchoring request header, and reused so the provider prefix remains stable. Interrupted composition is discarded. Composition precedes the first `agent/pre-step` and request boundary, so listener appends join the current request and pressure accounting sees the composed prefix. Changing context belongs in history; contributors should prepend to `await next()` to preserve registration order. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+- `agent` — the agent whose session prefix is being composed.
+- `prefix` — the frozen seed; return an extended replacement.
+- `signal` — aborts composition when the step is torn down.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L254)
+
+### agent/session-start
+
+**Mode:** `emit`
+
+```ts website-api
+'agent/session-start'(this: Scoped<Agent>, agent: Agent, source: SessionStartSource): void
+```
+
+The session lifecycle began, once before the first turn. Use `agent.inject()` to seed model-facing context. This is a notification, not a veto; disposal requested by a lifecycle owner is rechecked before the driver starts.
+
+- `agent` — the agent whose session lifecycle began.
+- `source` — why the session started (fresh startup, resume, …). Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L195)
+
+### agent/status
+
+**Mode:** `emit`
+
+```ts website-api
+'agent/status'(this: Scoped<Agent>, agent: Agent, status: AgentStatus): void
+```
+
+Agent status changed (`idle` ⇄ `running`, or → `disposed`). `send()` does not enter `running` synchronously; drive lifecycle from this event.
+
+- `agent` — the agent whose status flipped.
+- `status` — the status just entered (the transition's destination). Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L172)
+
+### agent/step-result
+
+**Mode:** `waterfall`
+
+```ts website-api
+'agent/step-result'(this: Scoped<Agent>, agent: Agent, turn: number, step: number, message: Message, next: () => Promise<Message>): Promise<Message>
+```
+
+Waterfall: post-process the assembled assistant Message before tool dispatch (validation, content rewriting, …).
+
+- `agent` — the agent that received the step's response.
+- `turn` — the open turn number.
+- `step` — the step that produced the message.
+- `message` — the assistant message as assembled from the stream. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L265)
+
+### agent/turn-continuation
+
+**Mode:** `waterfall`
+
+```ts website-api
+'agent/turn-continuation'(this: Scoped<Agent>, agent: Agent, turn: number, defaultDecision: ContinuationDecision, next: () => Promise<ContinuationDecision>): Promise<ContinuationDecision>
+```
+
+Override whether the turn continues. The default continues after tool calls or steering and stops otherwise; a continue reason becomes steering.
+
+- `agent` — the agent deciding whether to run another step.
+- `turn` — the turn being continued or stopped.
+- `defaultDecision` — what the loop would do absent an override. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L275)
+
+### agent/turn-stop
+
+**Mode:** `serial`
+
+```ts website-api
+'agent/turn-stop'(this: Scoped<Agent>, agent: Agent, turn: number): ContinuationStop | undefined
+```
+
+Monotonic terminal-stop checkpoint after continuation and steering are folded; a stop remains authoritative through turn close and flush: steering queued in that window is discarded, while ordinary sends survive.
+
+- `agent` — the agent whose composed continuation outcome may be stopped.
+- `turn` — the turn at its terminal-stop checkpoint. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/agent/src/types.ts#L285)
+
+## approval/*
+
+### approval/request
+
+**Mode:** `waterfall`
+
+```ts website-api
+'approval/request'(this: Scoped<ApprovalService>, req: ApprovalRequest, next: () => Promise<ApprovalOutcome>): Promise<ApprovalOutcome>
+```
+
+Ask composed answerers for one decision. Return an outcome to claim the request or call `next()`; failure yields the fail-closed default. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.
+
+- `req` — the pending decision (agent, tool identity, reason, signal).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/ui/user-approval/src/index.ts#L31)
+
+## fs/*
+
+### fs/edit-intent
+
+**Mode:** `waterfall`
+
+```ts website-api
+'fs/edit-intent'(target: FsTarget, actor: object | undefined, next: () => { version: FsVersion } | undefined | Promise<{ version: FsVersion } | undefined>): Promise<{ version: FsVersion } | undefined>
+```
+
+Single-slot decision for the next FileSystem.editText. Calling `next()` yields an unconditional edit; the first returned guard wins.
+
+- `target` — the resolved target about to be edited.
+- `actor` — the opaque tool-execution context the decider keys off.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/fs/fs/src/index.ts#L61)
+
+### fs/observed
+
+**Mode:** `emit`
+
+```ts website-api
+'fs/observed'(target: FsTarget, version: FsVersion, actor: object | undefined): void
+```
+
+Record a successful observation. Listeners must be synchronous recorders: throws fail the tool call and returned promises are not awaited.
+
+- `target` — the target that was read/written/edited.
+- `version` — the version the actor now holds as its observation.
+- `actor` — the observing tool-execution context; undefined records nothing useful.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/fs/fs/src/index.ts#L70)
+
+### fs/write-intent
+
+**Mode:** `waterfall`
+
+```ts website-api
+'fs/write-intent'(target: FsTarget, actor: object | undefined, next: () => FsWriteIntent | undefined | Promise<FsWriteIntent | undefined>): Promise<FsWriteIntent | undefined>
+```
+
+Single-slot decision for the next FileSystem.writeText. Calling `next()` yields the bare provider's unconditional write; the first listener that returns an intent owns the decision rather than composing with peers.
+
+- `target` — the resolved target about to be written.
+- `actor` — the opaque tool-execution context the decider keys off.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/fs/fs/src/index.ts#L53)
+
+## llm/*
+
+### llm/stream
+
+**Mode:** `waterfall`
+
+```ts website-api
+'llm/stream'(this: LlmService, options: GenerateOptions, next: () => AsyncIterable<StreamChunk>): AsyncIterable<StreamChunk>
+```
+
+Waterfall around every streaming model call (retry, replay, routing). Bound to the LlmService; call `next()` to reach the resolved adapter's stream, or yield your own chunks to short-circuit.
+
+- `options` — the full request. A LOOP-built request arrives deep-frozen (mutation throws): its content is a pure function of the session log (the reconstructability RFC), so listeners read it, never rewrite it. A hand-built one-shot (compaction summarize) is the caller's own object and stays mutable here.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/llm/llm/src/index.ts#L40)
+
+## session/*
+
+### session/created
+
+**Mode:** `emit`
+
+```ts website-api
+'session/created'(this: Scoped<Session>, session: Session): void
+```
+
+Creation announcement during session publication. A synchronous throw vetoes and rolls back with a paired disposal; detach requested during dispatch is deferred. A returned-promise rejection is logged but cannot retroactively veto this synchronous boundary. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only sessions entered through that agent's context.
+
+- `session` — the session just entered and announced.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L46)
+
+### session/disposed
+
+**Mode:** `emit`
+
+```ts website-api
+'session/disposed'(this: Scoped<Session>, session: Session): void
+```
+
+Emitted once when an announced session leaves the store, including publication rollback, but never for an entry whose creation announcement did not begin. Listener failures are logged and contained. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`) reuses the owner scope.
+
+- `session` — the session that is no longer live in the store.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L56)
+
+### session/event
+
+**Mode:** `emit`
+
+```ts website-api
+'session/event'(this: Scoped<Session>, session: Session, event: SessionEvent): void
+```
+
+Post-commit, fire-and-forget append feed. The listener snapshot resolves before the log push, but callbacks run after it; observer failures are logged and contained without making the committed append fail. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only events from sessions entered through that agent's context.
+
+- `session` — the session whose log grew.
+- `event` — the appended event, exactly as recorded.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L68)
+
+### session/flush
+
+**Mode:** `parallel`
+
+```ts website-api
+'session/flush'(this: Scoped<Session>, session: Session): Promise<void> | void
+```
+
+Awaited parallel durability checkpoint: every listener runs and the caller awaits all of them, with no waterfall veto. Dispatch through SessionStore.flush. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`) reuses the session's owner scope.
+
+- `session` — the session whose buffered events must reach durable storage.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L78)
+
+## subagent/*
+
+### subagent/end
+
+**Mode:** `emit`
+
+```ts website-api
+'subagent/end'(this: Scoped<SubagentService>, info: SubagentRunEndInfo): void
+```
+
+A ready child settled. Scope-filtered dispatch uses the same delegating parent carrier as `subagent/start`, so the lifecycle pair reaches the same scoped audience.
+
+- `info` — the run identity and terminal outcome.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/subagent/subagent/src/index.ts#L108)
+
+### subagent/provider-added
+
+**Mode:** `emit`
+
+```ts website-api
+'subagent/provider-added'(provider: SubagentProvider): void
+```
+
+A provider became resolvable in the registry.
+
+- `provider` — the registered provider.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/subagent/subagent/src/index.ts#L82)
+
+### subagent/provider-removed
+
+**Mode:** `emit`
+
+```ts website-api
+'subagent/provider-removed'(name: string): void
+```
+
+A provider left the registry. Accepted runs remain holder-owned.
+
+- `name` — the provider name that no longer resolves.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/subagent/subagent/src/index.ts#L88)
+
+### subagent/start
+
+**Mode:** `emit`
+
+```ts website-api
+'subagent/start'(this: Scoped<SubagentService>, info: SubagentRunInfo): void
+```
+
+A provider established a ready child. For in-process providers, `ctx.agents.get(info.id)` resolves during this notification. Scope-filtered dispatch keys the carrier by the delegating parent, so a parent-scoped listener observes only its own delegations. Paired with `subagent/end`.
+
+- `info` — the provider and ready child identity.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/subagent/subagent/src/index.ts#L99)
+
+## system-prompt/*
+
+### system-prompt/assemble
+
+**Mode:** `waterfall`
+
+```ts website-api
+'system-prompt/assemble'(this: Scoped<SystemPrompt>, assembly: PromptAssembly, context: AssembleContext, next: () => Promise<PromptAssembly>): Promise<PromptAssembly>
+```
+
+Expert waterfall over the assembled sections, tools, and variables. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): scoped listeners receive only that scope's assemblies. The returned value is authoritative.
+
+- `assembly` — the mutable assembly built from registered providers.
+- `context` — the caller's per-assembly context.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/system-prompt/src/index.ts#L27)
+
+### system-prompt/change
+
+**Mode:** `emit`
+
+```ts website-api
+'system-prompt/change'(): void
+```
+
+Emitted when any prompt provider changes. This registry notification is unfiltered because a global change affects every scope.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/system-prompt/src/index.ts#L33)
+
+## tools/*
+
+### tools/change
+
+**Mode:** `emit`
+
+```ts website-api
+'tools/change'(): void
+```
+
+A tool was registered or unregistered, or a scoped restriction changed (the available tool set changed — possibly for one scope only). An UNFILTERED registry-subject notification, deliberately not scope-filtered dispatch: a global change concerns every agent's next assembly, so a scoped listener subscribing here sees every change, not just its own scope's.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/tools/src/index.ts#L116)
+
+### tools/execute
+
+**Mode:** `waterfall`
+
+```ts website-api
+'tools/execute'(this: Scoped<ToolRegistry>, exec: ToolExecution, next: () => Promise<ToolExecutionResult>): Promise<ToolExecutionResult>
+```
+
+Around-dispatch waterfall for timeout, retry, or metrics. `next()` returns a normalized result; wrappers may change only `exec.signal`, while call identity remains immutable. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent's calls.
+
+- `exec` — the allowed call about to dispatch (name, parsed arguments, caller agent, signal).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/tools/src/index.ts#L89)
+
+### tools/post-execute
+
+**Mode:** `waterfall`
+
+```ts website-api
+'tools/post-execute'(this: Scoped<ToolRegistry>, exec: ToolExecution, result: Readonly<ToolExecutionResult>, next: () => Promise<PostToolDecision>): Promise<PostToolDecision>
+```
+
+Accept, replace, enrich, or block a normalized dispatch result. `next()` accepts it unchanged; thrown tools still reach this seam as errors. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent's calls.
+
+- `exec` — the call that just ran (name, parsed arguments, caller agent).
+- `result` — the dispatch outcome a listener may accept, replace, or block.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/tools/src/index.ts#L98)
+
+### tools/pre-execute
+
+**Mode:** `waterfall`
+
+```ts website-api
+'tools/pre-execute'(this: Scoped<ToolRegistry>, exec: ToolExecution, next: () => Promise<PreToolDecision>): Promise<PreToolDecision>
+```
+
+Allow, deny, or ask before dispatch. `next()` delegates to allow; missing approval support turns `ask` into denial. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent's calls.
+
+- `exec` — the pending call (name, parsed arguments, caller agent).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/tools/src/index.ts#L80)
+
+### tools/result
+
+**Mode:** `emit`
+
+```ts website-api
+'tools/result'(this: Scoped<ToolRegistry>, exec: Readonly<ToolExecution>, result: Readonly<ToolExecutionResult>): undefined
+```
+
+Observe the frozen, lossless-JSON final outcome. Listener failures are contained. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): keyed by `exec.agent`.
+
+- `exec` — the execution object that traversed the pipeline.
+- `result` — a deep-frozen snapshot of the final returned result.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/tools/src/index.ts#L106)
+
+## workflow/*
+
+### workflow/agent-end
+
+**Mode:** `emit`
+
+```ts website-api
+'workflow/agent-end'(info: WorkflowRunInfo, agent: WorkflowAgentEndInfo): void
+```
+
+One `agent()` call settled (clean result, child failure, or run cancellation). Paired with Events['workflow/agent-start'] by `agent.seq`, exactly once per started call on every stop path — on an engine termination path (a worker killed past its grace) the end is engine-synthesized with outcome `'cancelled'`.
+
+- `info` — the run's identity snapshot.
+- `agent` — the call identity plus its outcome.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/workflow/workflow/src/index.ts#L81)
+
+### workflow/agent-start
+
+**Mode:** `emit`
+
+```ts website-api
+'workflow/agent-start'(info: WorkflowRunInfo, agent: WorkflowAgentInfo): void
+```
+
+One `agent()` call established a ready child run. Paired with Events['workflow/agent-end'] by `agent.seq`. A call that never receives a ready run from the provider emits neither event in this pair.
+
+- `info` — the run's identity snapshot.
+- `agent` — the call's sequence number, label, phase, and child id.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/workflow/workflow/src/index.ts#L70)
+
+### workflow/end
+
+**Mode:** `emit`
+
+```ts website-api
+'workflow/end'(info: WorkflowRunInfo, result: WorkflowResultInfo): void
+```
+
+A workflow run settled (any stop reason). Fired when WorkflowRun.result resolves. Paired with Events['workflow/start'].
+
+- `info` — the run's identity snapshot.
+- `result` — the outcome data (stop reason, error, agent count) — deliberately WITHOUT the result value (see `WorkflowResultInfo`).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/workflow/workflow/src/index.ts#L91)
+
+### workflow/log
+
+**Mode:** `emit`
+
+```ts website-api
+'workflow/log'(info: WorkflowRunInfo, message: string): void
+```
+
+The script emitted a narration line (a `log(message)` call).
+
+- `info` — the run's identity snapshot.
+- `message` — the logged message, verbatim.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/workflow/workflow/src/index.ts#L60)
+
+### workflow/phase
+
+**Mode:** `emit`
+
+```ts website-api
+'workflow/phase'(info: WorkflowRunInfo, title: string): void
+```
+
+The script entered a phase (a `phase(title)` call) — progress grouping for observers; no execution semantics.
+
+- `info` — the run's identity snapshot.
+- `title` — the phase title, verbatim.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/workflow/workflow/src/index.ts#L53)
+
+### workflow/start
+
+**Mode:** `emit`
+
+```ts website-api
+'workflow/start'(info: WorkflowRunInfo): void
+```
+
+A workflow run started — the script's meta block validated, the body about to execute. Paired with Events['workflow/end'].
+
+- `info` — the run's identity snapshot (id + meta).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/workflow/workflow/src/index.ts#L45)

website/zh-CN/api/harness/fs.md

@@ -0,0 +1,135 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.fs
+
+`FileSystem` (abstract seam) — provided by `@deepseek-ai/dsh-fs`.
+
+Abstract filesystem provider. Targets must preserve identity across aliases; reads expose regular UTF-8 text or typed errors, listings are stable and content-free, and mutations are atomic. Optional guards add stale protection without changing the unguarded provider contract.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/fs/fs/src/index.ts#L80)
+
+### ctx.fs.resolve(path, opts?)
+
+```ts website-api
+abstract resolve(path: string, opts?: { cwd?: string; signal?: AbortSignal }): Promise<FsTarget>
+```
+
+Resolve a model/plugin-supplied path into a stable FsTarget. May perform I/O (a remote/sandboxed backend may need a round-trip to map a path to a stable identity), hence async even though the local backend only normalizes + realpaths.
+
+- `path` — the path to resolve; relative paths resolve against `opts.cwd`.
+- `opts` — optional cwd override and cancellation signal.
+
+**Returns** the stable target; the same file yields the same `targetKey`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/fs/fs/src/index.ts#L94)
+
+### ctx.fs.stat(target, signal?)
+
+```ts website-api
+abstract stat(target: FsTarget, signal?: AbortSignal): Promise<FsInfo | undefined>
+```
+
+Return target metadata, or `undefined` when the target does not exist.
+
+- `target` — the resolved target to stat.
+- `signal` — aborts the metadata round-trip.
+
+**Returns** metadata only, never content; undefined for an absent target.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/fs/fs/src/index.ts#L102)
+
+### ctx.fs.lstat(path, opts?, signal?)
+
+```ts website-api
+abstract lstat(path: string, opts?: { cwd?: string }, signal?: AbortSignal): Promise<FsPathInfo | undefined>
+```
+
+Return path metadata without following the final path component when it is a symbolic link. This is intentionally path-shaped, not target-shaped: resolve follows symlinks to produce the stable identity used by normal reads/writes, while `lstat` lets a consumer reject the path itself before that follow happens.
+`opts.cwd` follows resolve's cwd rules. `undefined` means the path is absent.
+
+- `path` — the path to inspect; relative paths resolve against `opts.cwd`.
+- `opts` — `cwd` overrides the backend's default base for relative paths.
+- `signal` — aborts the metadata round-trip.
+
+**Returns** metadata only, never content; undefined for an absent path.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/fs/fs/src/index.ts#L118)
+
+### ctx.fs.readText(target, signal?)
+
+```ts website-api
+abstract readText(target: FsTarget, signal?: AbortSignal): Promise<string>
+```
+
+Read the whole regular text file as a single decoded string.
+
+- `target` — the resolved target to read.
+- `signal` — aborts the read.
+
+**Returns** the full decoded UTF-8 content.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/fs/fs/src/index.ts#L126)
+
+### ctx.fs.streamText(target, signal?)
+
+```ts website-api
+abstract streamText(target: FsTarget, signal?: AbortSignal): Promise<AsyncIterable<string>>
+```
+
+Stream the whole regular text file as decoded text chunks (same text semantics as readText, for large files). The backend owns cross-chunk UTF-8 decoding and binary rejection so the policy layer never touches raw bytes.
+
+- `target` — the resolved target to read.
+- `signal` — aborts the stream, including between chunks.
+
+**Returns** the chunk iterable, decoded and validated like `readText`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/fs/fs/src/index.ts#L137)
+
+### ctx.fs.listDir(target, signal?)
+
+```ts website-api
+abstract listDir(target: FsTarget, signal?: AbortSignal): Promise<FsDirEntry[]>
+```
+
+List direct children of a directory in stable name order. Returns resolved child targets plus cheap metadata only; never reads file contents.
+
+- `target` — the resolved directory target.
+- `signal` — aborts the listing.
+
+**Returns** one entry per direct child, in stable name order.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/fs/fs/src/index.ts#L146)
+
+### ctx.fs.writeText(target, content, expected?, signal?)
+
+```ts website-api
+abstract writeText(target: FsTarget, content: string, expected?: FsWriteIntent, signal?: AbortSignal): Promise<FsWriteOutcome>
+```
+
+Atomically create or replace UTF-8 text. `expected` guards intent and staleness; omission allows unconditional overwrite.
+
+- `target` — the resolved target to write.
+- `content` — the full new file content.
+- `expected` — the write intent guarding the write; omit for unconditional.
+- `signal` — aborts before the atomic rename takes effect.
+
+**Returns** the outcome, including the version the write produced.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/fs/fs/src/index.ts#L157)
+
+### ctx.fs.editText(target, edit, expected?, signal?)
+
+```ts website-api
+abstract editText(target: FsTarget, edit: FsEditRequest, expected?: { version: FsVersion }, signal?: AbortSignal): Promise<FsEditOutcome>
+```
+
+Atomically edit literal text. When supplied, the version guard is checked before matching so stale content reports `FS_STALE_VERSION`; omission edits the current content without a freshness precondition.
+
+- `target` — the resolved target to edit.
+- `edit` — the literal search/replace request.
+- `expected` — the version guard; omit for an unconditional edit.
+- `signal` — aborts before the atomic rename takes effect.
+
+**Returns** the outcome, including the version the edit produced.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/fs/fs/src/index.ts#L169)

website/zh-CN/api/harness/llm.md

@@ -0,0 +1,64 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.llm
+
+`LlmService` — provided by `@deepseek-ai/dsh-llm`.
+
+The abstract `llm` service: an adapter registry plus a streaming model-call surface, interceptable via the `llm/stream` waterfall.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/llm/llm/src/index.ts#L96)
+
+### ctx.llm.registerAdapter(providers, adapter)
+
+```ts website-api
+registerAdapter(providers: string[], adapter: LlmAdapter): () => void
+```
+
+Register an adapter for the given provider routes. Throws `LlmError` with code `DUPLICATE_ADAPTER` if any provider already has an adapter (all-or-nothing). Disposed with the fiber.
+
+- `providers` — every provider route this adapter should serve.
+- `adapter` — the adapter that streams calls for those providers.
+
+**Returns** the disposer that unregisters all of them.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/llm/llm/src/index.ts#L111)
+
+### ctx.llm.listProviders()
+
+```ts website-api
+listProviders(): LlmProviderInfo[]
+```
+
+Describe provider routes with a registered adapter.
+
+**Returns** detached provider metadata in registration order.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/llm/llm/src/index.ts#L142)
+
+### ctx.llm.listModels(provider)
+
+```ts website-api
+async listModels(provider: string): Promise<LlmModelInfo[]>
+```
+
+Discover models advertised by one registered provider. Catalog membership is advisory and never changes routing or request validation.
+
+- `provider` — registered provider route to inspect.
+
+**Returns** detached model metadata in adapter-preferred order.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/llm/llm/src/index.ts#L152)
+
+### ctx.llm.stream(options)
+
+```ts website-api
+stream(options: GenerateOptions): AsyncIterable<StreamChunk>
+```
+
+Stream one model call as raw chunks (token-level deltas). Throws `LlmError` with code `NO_ADAPTER` if no adapter is registered for `options.provider`. Replay state is retained only when the same adapter instance owns its historical provider and the target provider. Dispatches through the `llm/stream` waterfall.
+
+- `options` — the full request; `options.provider` selects the adapter.
+
+**Returns** the chunk stream, possibly wrapped by `llm/stream` listeners.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/llm/llm/src/index.ts#L210)

website/zh-CN/api/harness/permission.md

@@ -0,0 +1,74 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.permission
+
+`PermissionService` — provided by `@deepseek-ai/dsh-permission`.
+
+Owns the deployment's permission presets and their write path. Requires a confining `ctx.bash` executor and `ctx.approval`; unmatched knob values are reported as CUSTOM_PRESET, not an error.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/ui/permission/src/index.ts#L94)
+
+### ctx.permission.names
+
+```ts website-api
+get names(): readonly string[]
+```
+
+The advertised preset names, in the preset table's declaration order.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/ui/permission/src/index.ts#L134)
+
+### ctx.permission.current(events)
+
+```ts website-api
+current(events: readonly SessionEvent[]): string
+```
+
+Resolve the preset matching the effective knob values. A still-matching last selection wins shared-bundle ties; otherwise the first table match wins, or CUSTOM_PRESET when no entry matches.
+
+- `events` — the session's events in log order.
+
+**Returns** the effective preset name, or `custom` when nothing matches.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/ui/permission/src/index.ts#L145)
+
+### ctx.permission.resolve(name)
+
+```ts website-api
+resolve(name: string): PresetSpec
+```
+
+Resolve a preset's knob bundle.
+
+- `name` — the preset name to resolve.
+
+**Returns** the configured bundle.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/ui/permission/src/index.ts#L166)
+
+### ctx.permission.optionOf(name)
+
+```ts website-api
+optionOf(name: string): PresetOption
+```
+
+Build the client option for a table entry or CUSTOM_PRESET. A missing label falls back to the table key.
+
+- `name` — a table key, or `custom`.
+
+**Returns** the option a client renders.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/ui/permission/src/index.ts#L181)
+
+### ctx.permission.set(session, name)
+
+```ts website-api
+set(session: Session, name: string): void
+```
+
+Record a changed preset, then update each changed knob through its own setter. Selecting the effective preset again appends nothing.
+
+- `session` — the session the switch belongs to.
+- `name` — the preset to switch to; unknown names throw.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/ui/permission/src/index.ts#L195)

website/zh-CN/api/harness/sandbox.md

@@ -0,0 +1,24 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.sandbox
+
+`SandboxProvider` (abstract seam) — provided by `@deepseek-ai/dsh-sandbox`.
+
+Abstract process-sandbox service. confine must return enforcing argv or fail closed at wrap or runner-execution time; silent unconfined passthrough is forbidden. Functional probes arbitrate multi-runner chains and may be skipped for a sole candidate, whose own refusal remains the fail-closed end.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/sandbox/sandbox/src/index.ts#L111)
+
+### ctx.sandbox.confine(argv, policy)
+
+```ts website-api
+abstract confine(argv: readonly string[], policy: SandboxPolicy): ConfinedArgv
+```
+
+Wrap `argv` so it executes confined under `policy` on this host; the caller spawns the returned argv in place of its own.
+
+- `argv` — the exact argv the caller is about to spawn (program plus arguments), NOT a shell string — a shell-shaped consumer passes `['bash', '-c', command]`.
+- `policy` — the file-effect policy this execution runs under, carried per call (see `SandboxPolicy`).
+
+**Returns** the argv to spawn instead, plus the enforcement completeness the selected backend achieves for it.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/sandbox/sandbox/src/index.ts#L127)

website/zh-CN/api/harness/session-persistence.md

@@ -0,0 +1,74 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.sessionPersistence
+
+`SessionPersistence` (abstract seam) — provided by `@deepseek-ai/dsh-session-persistence`.
+
+Durable append-only session storage. Implementations preserve contiguous, losslessly JSON-serializable events; append resolves only after durability, and load balances a complete interrupted tail without rewriting committed events.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/session-persistence/session-persistence/src/index.ts#L42)
+
+### ctx.sessionPersistence.locate(meta)
+
+```ts website-api
+abstract locate(meta: SessionHeader): SessionLocation | undefined
+```
+
+Resolve this backend's independent local artifact for a session without reading, creating, flushing, or otherwise materializing it. Backends such as SQLite that do not own one artifact per session return `undefined`.
+
+- `meta` — the immutable session header whose artifact is requested.
+
+**Returns** the backend-specific absolute location, when one exists.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/session-persistence/session-persistence/src/index.ts#L54)
+
+### ctx.sessionPersistence.create(meta)
+
+```ts website-api
+abstract create(meta: SessionHeader): Promise<void>
+```
+
+Register a new session's metadata. A backend MAY defer the physical write until the first append (lazy materialization), in which case a created-but-never-appended session is absent from list — abandoned sessions leave nothing behind.
+
+- `meta` — the immutable header (id, version, cwd, lineage) to record.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/session-persistence/session-persistence/src/index.ts#L63)
+
+### ctx.sessionPersistence.append(id, events)
+
+```ts website-api
+abstract append(id: SessionId, events: readonly SessionEvent[]): Promise<void>
+```
+
+Durably persist a batch of events (called from the write-behind drain at the `session/flush` checkpoint). Honors the append-only and contiguous-seq contracts: the first event's `seq` MUST equal the stored next-seq (after `load` has durably closed any interrupted turn). Rejects non-JSON- serializable `event.data` with an error naming the offending event type.
+
+- `id` — the session the batch belongs to.
+- `events` — the contiguous batch to persist, in seq order.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/session-persistence/session-persistence/src/index.ts#L74)
+
+### ctx.sessionPersistence.load(id)
+
+```ts website-api
+abstract load(id: SessionId): Promise<{ meta: SessionHeader; events: SessionEvent[] }>
+```
+
+Load a header and balanced contiguous log. A complete interrupted final turn is preserved and durably closed with missing tool errors plus any open step and turn boundaries; only a torn final record is discarded. Unknown versions and corruption in the committed prefix reject.
+
+- `id` — the persisted session to reload.
+
+**Returns** the header and a log ending on a balanced `turn/end`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/session-persistence/session-persistence/src/index.ts#L84)
+
+### ctx.sessionPersistence.list()
+
+```ts website-api
+abstract list(): Promise<SessionHeader[]>
+```
+
+Lightweight listing from metadata, without a full-log parse.
+
+**Returns** one header per materialized session.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/session-persistence/session-persistence/src/index.ts#L90)

website/zh-CN/api/harness/session-query.md

@@ -0,0 +1,77 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.sessionQuery
+
+`SessionQueryService` — provided by `@deepseek-ai/dsh-session-query`.
+
+Live-preferred logical-corpus exact-read and relationship-tracing service.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/session-query/session-query/src/index.ts#L38)
+
+### ctx.sessionQuery.listSessions()
+
+```ts website-api
+listSessions(): Promise<SessionRecord[]>
+```
+
+List the complete logical corpus using live-preferred records.
+
+**Returns** deterministic newest-first cloned session records.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/session-query/session-query/src/index.ts#L63)
+
+### ctx.sessionQuery.listEvents(sessionId)
+
+```ts website-api
+async listEvents(sessionId: SessionId): Promise<SessionEventRecord[]>
+```
+
+List lightweight raw-log event records for one logical session.
+
+- `sessionId` — live-preferred session id to read.
+
+**Returns** event records in ascending seq order.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/session-query/session-query/src/index.ts#L72)
+
+### ctx.sessionQuery.traceSession(sessionId)
+
+```ts website-api
+async traceSession(sessionId: SessionId): Promise<SessionLineageTrace>
+```
+
+Trace known ancestry and descendants from one corpus observation.
+
+- `sessionId` — logical session id to trace.
+
+**Returns** a complete lineage or an explicit unresolved parent boundary.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/session-query/session-query/src/index.ts#L83)
+
+### ctx.sessionQuery.traceEvent(request)
+
+```ts website-api
+async traceEvent(request: SessionEventTraceRequest): Promise<SessionEventTrace>
+```
+
+Trace one event's direct positional and provenance relationships.
+
+- `request` — target session id and event seq.
+
+**Returns** direct links plus the target's positional replacement chain.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/session-query/session-query/src/index.ts#L94)
+
+### ctx.sessionQuery.readEvent(request)
+
+```ts website-api
+async readEvent(request: SessionEventReadRequest): Promise<SessionEventWindow>
+```
+
+Read one full event plus a bounded raw-log context window.
+
+- `request` — target session/seq and context sizes.
+
+**Returns** cloned target and neighboring events.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/session-query/session-query/src/index.ts#L104)

website/zh-CN/api/harness/sessions.md

@@ -0,0 +1,124 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.sessions
+
+`SessionStore` — provided by `@deepseek-ai/dsh-session`.
+
+In-memory session store (`ctx.sessions`).
+Persistence is intentionally not implemented here — persistence plugins subscribe to `session/event` and flush on `session/flush` / dispose.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L580)
+
+### ctx.sessions.create(id?, options?)
+
+```ts website-api
+create(id?: SessionId, options?: CreateSessionOptions): Session
+```
+
+Create a session owned by the calling fiber: disposing that fiber stops event notification and removes the session from the store. `options.seed` populates the session with a copy of those events (replay/fork); `options.meta` attaches creation metadata (validated absolute `cwd`, `parentSession` lineage) as the immutable SessionHeader (the store fills `version`/`id`/`createdAt`).
+For an agent whose session must be torn down IN ORDER with its loop (so the loop's final flush is captured before the store attachment ends), do NOT use this — fold the session lifecycle into the agent's own effect via prepare + enter + announce (see `dsh-agent-loop`'s creation transaction).
+
+- `id` — the session id; omitted, the store mints `session-<n>`.
+- `options` — seed events and/or creation metadata for the header.
+
+**Returns** the live session, already entered and announced.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L609)
+
+### ctx.sessions.prepare(id?, options?)
+
+```ts website-api
+prepare(id?: SessionId, options?: CreateSessionOptions): Session
+```
+
+Build a session WITHOUT entering it into the store — validate the id/cwd and construct the Session (with its immutable SessionHeader). Pairs with enter + announce: a caller that owns a composite `ctx.effect` (the agent factory) folds the session lifecycle into that ONE effect so a fiber unload tears the session + agent down as a single ORDERED chain rather than as racing sibling effects — which would remove the publication hooks before the loop's closing `session/flush`, dropping the closing events.
+
+- `id` — the session id; omitted, the store mints `session-<n>`.
+- `options` — seed events and/or creation metadata for the header.
+
+**Returns** the constructed session, NOT yet in the store.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L638)
+
+### ctx.sessions.enter(session)
+
+```ts website-api
+enter(session: Session): () => void
+```
+
+Enter a prepared session into the store: install the module-private append publication hooks and add it to the store. Returns the DETACH disposer (hooks + store removal). Does NOT emit `session/created` — the caller yields this disposer inside its effect and THEN calls announce, so a throwing `session/created` listener rolls the attach back instead of leaking it.
+Re-checks the id for a duplicate: `prepare` and `enter` are public cross-package primitives and a caller may interleave arbitrary work (or another create) between them, so a stale prepared session must NOT overwrite a live store entry of the same id — its detach disposer would later delete the REAL session. The create convenience and the agent factory call the two back-to-back so they never trip this, but the public seam cannot assume that.
+
+- `session` — a `prepare`d session not yet in the store.
+
+**Returns** the detach disposer (publication hooks + store removal). When called from a synchronous `session/created` listener, removal and disposal wait until that creation dispatch unwinds.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L682)
+
+### ctx.sessions.announce(session)
+
+```ts website-api
+announce(session: Session): void
+```
+
+Emit `session/created` exactly once for an entered session (with the carrier enter captured). Separate from enter so the caller can yield the detach disposer first (rollback safety — see enter).
+
+- `session` — the entered session to announce to listeners.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L737)
+
+### ctx.sessions.flush(session)
+
+```ts website-api
+async flush(session: Session): Promise<void>
+```
+
+Dispatch the awaited `session/flush` durability checkpoint for `session`, with the carrier captured at enter. THE flush entry point: the store owns the carrier, so callers (the loop's turn-end checkpoint, idle injection, teardown drains) must come through here rather than dispatch a raw `ctx.parallel('session/flush', …)` — one owner, one spelling, and the scoped-dispatch invariant can pin it.
+
+- `session` — the session whose buffered events must reach durable storage.
+
+**Returns** resolves when every flush listener has settled; after all settle, rejects with the first registered listener failure if any listener failed.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L789)
+
+### ctx.sessions.get(id)
+
+```ts website-api
+get(id: SessionId): Session | undefined
+```
+
+Look up a live session.
+
+- `id` — the session id to look up.
+
+**Returns** the session, or undefined when no live session has that id.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L821)
+
+### ctx.sessions.list()
+
+```ts website-api
+list(): Session[]
+```
+
+All live sessions, in creation order.
+
+**Returns** a fresh array; mutating it does not affect the store.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L829)
+
+### ctx.sessions.fork(source, boundary?, childSessionId?)
+
+```ts website-api
+fork(source: SessionForkSource, boundary?: number, childSessionId?: SessionId): Session
+```
+
+Create a live child session from a turn-enclosed prefix of a live source. `boundary` is an inclusive source event seq; omitted means the source's current last event. A non-empty selected slice must end at `turn/end`.
+
+- `source` — Live source session object or id.
+- `boundary` — Inclusive source event seq to fork through; omitted means the source's current last event, and omitted on an empty source forks an empty child.
+- `childSessionId` — Optional child session id; omitted delegates to `SessionStore`'s id policy.
+
+**Returns** The created live child session.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/session/src/index.ts#L846)

website/zh-CN/api/harness/skills.md

@@ -0,0 +1,66 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.skills
+
+`SkillService` — provided by `@deepseek-ai/dsh-skill`.
+
+Registry of skill providers. It merges provider catalogs with stable first-wins duplicate handling, exposes sorted model-visible summaries, and loads full skill bodies on demand.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/skill/skill/src/index.ts#L141)
+
+### ctx.skills.registerProvider(provider)
+
+```ts website-api
+registerProvider(provider: SkillProvider): () => void
+```
+
+Register a borrowed same-process provider synchronously during plugin apply. Duplicate and reserved names throw; remote initialization belongs in `list()`. Fiber disposal unregisters the provider and invalidates catalog caches.
+
+- `provider` — the provider to register by `provider.name`.
+
+**Returns** the exact Cordis effect disposer that unregisters this provider; composite effects may yield it directly to preserve teardown ordering.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/skill/skill/src/index.ts#L168)
+
+### ctx.skills.register(skill)
+
+```ts website-api
+register(skill: SkillRegistration): () => void
+```
+
+Register a borrowed readonly runtime skill. Project entries outrank runtime entries, which outrank user entries. Same-name runtime entries are first-wins; a duplicate logs a warning and receives a no-op disposer so it cannot remove the winner.
+
+- `skill` — the complete skill definition to expose for discovery.
+
+**Returns** the exact Cordis effect disposer, preserving composite teardown order and invalidating caches.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/skill/skill/src/index.ts#L199)
+
+### ctx.skills.list(options?)
+
+```ts website-api
+async list(options: SkillLookupOptions = {}): Promise<SkillSummary[]>
+```
+
+List model-invocable skill summaries for a workspace. Lookup options and provider candidates are readonly same-process values borrowed throughout discovery.
+
+- `options` — lookup options; `cwd` selects project roots and `signal` cancels discovery.
+
+**Returns** sorted summaries, excluding skills disabled for model invocation.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/skill/skill/src/index.ts#L230)
+
+### ctx.skills.get(name, options?)
+
+```ts website-api
+async get(name: string, options: SkillLookupOptions = {}): Promise<SkillDefinition | undefined>
+```
+
+Load and validate the winning candidate, passing its opaque discovery locator back to the provider. Cancellation is rechecked after selection, including cache hits, and raced against loading so an uncooperative provider cannot hang the caller.
+
+- `name` — kebab-case skill name.
+- `options` — lookup options; `cwd` selects workspace-sensitive skills and `signal` cancels work.
+
+**Returns** the full skill, including body content, or `undefined`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/skill/skill/src/index.ts#L246)

website/zh-CN/api/harness/spill-store.md

@@ -0,0 +1,27 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.spillStore
+
+`SpillStore` (abstract seam) — provided by `@deepseek-ai/dsh-spill`.
+
+Abstract spill storage service. Subclass, implement saveText, and load the subclass as a plugin — it registers as `ctx.spillStore` (one implementation per context; loading a second throws, cordis' standard duplicate-service behavior).
+Semantics every implementation must honor:
+- saveText persists the FULL `content` verbatim and returns an opaque locator, exact byte length, and model-facing retrieval guidance.
+- Storage is scoped by the request's SaveTextSpill.owner session; the backend chooses a private (not world-readable) location and a collision-free name derived from — never equal to — the caller's `suggestedName`.
+- `saveText` REJECTS on a real storage failure (permissions, ENOSPC, backend unavailable); the caller decides how to degrade (the spill policy treats a rejection as best-effort and keeps the inline result).
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/spill/spill/src/index.ts#L45)
+
+### ctx.spillStore.saveText(input)
+
+```ts website-api
+abstract saveText(input: SaveTextSpill): Promise<SpillRef>
+```
+
+Persist `input.content` to a session-scoped spill artifact.
+
+- `input` — the owner, provenance, suggested name, and full text to save.
+
+**Returns** the saved artifact's `SpillRef`; rejects on a storage failure.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/spill/spill/src/index.ts#L55)

website/zh-CN/api/harness/subagents.md

@@ -0,0 +1,64 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.subagents
+
+`SubagentService` — provided by `@deepseek-ai/dsh-subagent`.
+
+Named provider registry and capability-checked start surface.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/subagent/subagent/src/index.ts#L141)
+
+### ctx.subagents.registerProvider(provider)
+
+```ts website-api
+registerProvider(provider: SubagentProvider): () => void
+```
+
+Register a provider under its name. Registration is effect-scoped and HMR safe; removing a provider blocks new starts but does not revoke runs that were already returned to their holders.
+
+- `provider` — the trusted provider implementation.
+
+**Returns** the exact Cordis effect disposer.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/subagent/subagent/src/index.ts#L155)
+
+### ctx.subagents.getProvider(name)
+
+```ts website-api
+getProvider(name: string): SubagentProvider | undefined
+```
+
+Look up a provider by name.
+
+- `name` — the provider name.
+
+**Returns** the provider, or undefined when absent.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/subagent/subagent/src/index.ts#L178)
+
+### ctx.subagents.list()
+
+```ts website-api
+list(): string[]
+```
+
+List registered provider names in insertion order.
+
+**Returns** the registered names.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/subagent/subagent/src/index.ts#L186)
+
+### ctx.subagents.start(name, request)
+
+```ts website-api
+async start(name: string, request: SubagentStartRequest): Promise<SubagentRun>
+```
+
+Establish a ready child on the named provider. Capability and semantic checks run before delegation. Provider ownership lasts until its promise fulfills; a rejection therefore has no run for the caller to dispose and emits no run lifecycle events.
+
+- `name` — the provider to use.
+- `request` — child prompt, parent, signal, and optional capabilities.
+
+**Returns** the ready holder-owned run.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/subagent/subagent/src/index.ts#L199)

website/zh-CN/api/harness/system-prompt.md

@@ -0,0 +1,66 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.systemPrompt
+
+`SystemPrompt` — provided by `@deepseek-ai/dsh-system-prompt`.
+
+Registry service for the prompt inputs assembled before each model step.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/system-prompt/src/index.ts#L209)
+
+### ctx.systemPrompt.section(section)
+
+```ts website-api
+section(section: PromptSection): () => void
+```
+
+Register an ordered prompt section in the calling context's scope. A scoped section shadows a global section with the same name; duplicates within one layer and non-finite orders throw. Registration and disposal emit `system-prompt/change`.
+
+- `section` — the section to register.
+
+**Returns** the exact Cordis effect disposer.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/system-prompt/src/index.ts#L250)
+
+### ctx.systemPrompt.tools(provider)
+
+```ts website-api
+tools(provider: (context: AssembleContext) => ToolProviderResult): () => void
+```
+
+Register a tool-schema provider in the calling context's scope. Global and matching scoped providers both contribute; returning the reserved TOOL_ORDER_REST name makes assembly fail.
+
+- `provider` — evaluated for each assembly with its context.
+
+**Returns** the exact Cordis effect disposer.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/system-prompt/src/index.ts#L291)
+
+### ctx.systemPrompt.variable(name, provider)
+
+```ts website-api
+variable(name: string, provider: (context: AssembleContext) => string | undefined): () => void
+```
+
+Register a prompt variable in the calling context's scope. Scoped values shadow globals; invalid or duplicate names throw. A provider may return `undefined`, but rendering a section that references that value then fails.
+
+- `name` — the `[a-z][a-z0-9_]*` reference name.
+- `provider` — evaluated for each assembly.
+
+**Returns** the exact Cordis effect disposer.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/system-prompt/src/index.ts#L325)
+
+### ctx.systemPrompt.assemble(context?)
+
+```ts website-api
+async assemble(context: AssembleContext = {}): Promise<PromptAssembly>
+```
+
+Assemble global and scoped providers, detach tool parameters, apply canonical ordering, then run the assembly waterfall. Scoped sections and variables shadow globals; the returned waterfall value is authoritative.
+
+- `context` — the optional scope and plugin-defined assembly fields.
+
+**Returns** the authoritative post-waterfall assembly.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/system-prompt/src/index.ts#L365)

website/zh-CN/api/harness/tasks.md

@@ -0,0 +1,128 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.tasks
+
+`TaskService` — provided by `@deepseek-ai/dsh-tasks`.
+
+The `tasks` service: the runtime-global background task registry. See the module doc for the ownership, isolation, and lifecycle contracts.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/tasks/tasks/src/index.ts#L76)
+
+### ctx.tasks.start(spec)
+
+```ts website-api
+start(spec: TaskStart): TaskId
+```
+
+Preflight access, validation, and owner cleanup before starting and atomically registering work. A throwing starter leaves nothing registered; after it returns, registration cannot fail. Settlement records the outcome, notifies listeners, and releases waiters.
+
+- `spec` — task identity, owner, and synchronous starter.
+
+**Returns** the registry-issued `<kind>-N` id.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/tasks/tasks/src/index.ts#L101)
+
+### ctx.tasks.list(caller?)
+
+```ts website-api
+list(caller?: Agent): TaskSnapshot[]
+```
+
+List caller-owned and unowned tasks in registration order without exposing another session's labels.
+
+- `caller` — reading agent; a non-agent caller sees only unowned tasks.
+
+**Returns** fresh snapshots.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/tasks/tasks/src/index.ts#L153)
+
+### ctx.tasks.get(id, caller?)
+
+```ts website-api
+get(id: TaskId, caller?: Agent): TaskSnapshot
+```
+
+Return a non-consuming snapshot without changing its read cursor or notice state. Throws for an unknown or foreign task.
+
+- `id` — task to look up.
+- `caller` — reading agent checked against the owner.
+
+**Returns** a fresh snapshot.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/tasks/tasks/src/index.ts#L167)
+
+### ctx.tasks.read(id, caller?)
+
+```ts website-api
+read(id: TaskId, caller?: Agent): TaskRead
+```
+
+Read the next stream delta, or the idempotent final output after settlement. A terminal read marks the task reported. Throws for an unknown or foreign task.
+
+- `id` — task to read.
+- `caller` — reading agent checked against the owner.
+
+**Returns** output text and the post-read snapshot.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/tasks/tasks/src/index.ts#L181)
+
+### ctx.tasks.kill(id, caller?, reason?)
+
+```ts website-api
+kill(id: TaskId, caller?: Agent, reason?: string): 'requested' | 'already-finished'
+```
+
+Request cancellation, then mark the task stopping and reported. A producer throw propagates without changing task state. Throws for an unknown or foreign task.
+
+- `id` — task to cancel.
+- `caller` — killing agent checked against the owner.
+- `reason` — logged reason forwarded to the producer.
+
+**Returns** `requested` for live work, otherwise `already-finished`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/tasks/tasks/src/index.ts#L200)
+
+### ctx.tasks.wait(id, timeoutMs, caller?, signal?)
+
+```ts website-api
+async wait(id: TaskId, timeoutMs: number, caller?: Agent, signal?: AbortSignal): Promise<TaskSnapshot>
+```
+
+Wait for settlement or timeout without cancelling the task. Caller abort rejects only while the task is live; after settlement it returns the terminal snapshot so a notice suppressed for this waiter is still delivered. Timed-out and aborted waits detach their resolvers. Throws for invalid, unknown, or foreign input.
+
+- `id` — task to wait for.
+- `timeoutMs` — positive finite wait bound in milliseconds.
+- `caller` — waiting agent checked against the owner.
+- `signal` — optional cancellation of the wait itself.
+
+**Returns** snapshot at settlement or timeout.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/tasks/tasks/src/index.ts#L226)
+
+### ctx.tasks.onTaskDone(listener)
+
+```ts website-api
+onTaskDone(listener: TaskDoneListener): () => void
+```
+
+Register an effect-scoped completion listener. Each listener is contained; returned promises are observed but not awaited. No listener runs after service disposal.
+
+- `listener` — receives each terminal snapshot and its exact owner.
+
+**Returns** disposer that unregisters the listener.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/tasks/tasks/src/index.ts#L283)
+
+### ctx.tasks.attachSurface(name)
+
+```ts website-api
+attachSurface(name: string): () => void
+```
+
+Attach an effect-scoped surface that can read and stop tasks. start refuses work while none is attached.
+
+- `name` — diagnostic label; duplicate names remain independent.
+
+**Returns** disposer that detaches this surface.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/tasks/tasks/src/index.ts#L297)

website/zh-CN/api/harness/token-meter.md

@@ -0,0 +1,50 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.tokenMeter
+
+`TokenMeterService` — provided by `@deepseek-ai/dsh-token-meter`.
+
+Replay owner for one service-wide estimator and isolated per-session folds.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/llm/token-meter/src/index.ts#L106)
+
+### ctx.tokenMeter.contextWindow
+
+```ts website-api
+readonly contextWindow: number
+```
+
+Provider context-window capacity used by pressure consumers.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/llm/token-meter/src/index.ts#L112)
+
+### ctx.tokenMeter.measure(session, requestHeader?)
+
+```ts website-api
+measure(session: Session, requestHeader?: EpochHeader): TokenMeasurement
+```
+
+Measure current request pressure and surface through the durable tail.
+Provider usage is reused only when the latest successful call's canonical request envelope matches `requestHeader` and its total is no lower than that call's full heuristic anchor; otherwise the complete envelope and surface are heuristically repriced.
+`requestHeader` affects request pressure only; surface fields always describe the current session surface. Every call clones those positional nodes, so measurement is O(surface).
+
+- `session` — session to replay through its current durable tail.
+- `requestHeader` — optional effective request envelope replacing the latest logged header.
+
+**Returns** a detached deeply immutable pressure and surface measurement.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/llm/token-meter/src/index.ts#L143)
+
+### ctx.tokenMeter.estimateMessage(message)
+
+```ts website-api
+estimateMessage(message: Message): number
+```
+
+Heuristically price one model-visible message.
+
+- `message` — message to price without mutation.
+
+**Returns** content and role-framing tokens under the fixed service heuristic.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/llm/token-meter/src/index.ts#L181)

website/zh-CN/api/harness/tools.md

@@ -0,0 +1,94 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.tools
+
+`ToolRegistry` — provided by `@deepseek-ai/dsh-tools`.
+
+Tool registry and execution pipeline. Scoped registrations shadow globals; one visibility resolver feeds presentation, lookup, and dispatch.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/tools/src/index.ts#L378)
+
+### ctx.tools.register(definition)
+
+```ts website-api
+register(definition: ToolDefinition): () => void
+```
+
+Register globally or in the calling agent scope. Scoped tools shadow globals; duplicates within one layer and the reserved `run_code` name fail.
+
+- `definition` — the tool schema, execution, and optional presentation functions.
+
+**Returns** the exact disposer that unregisters the tool.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/tools/src/index.ts#L468)
+
+### ctx.tools.restrict(filter)
+
+```ts website-api
+restrict(filter: ToolRestriction): () => void
+```
+
+Restrict global tools for the calling agent scope. Empty filters, unknown names, scope-local names, and reserved transport names fail. Restrictions intersect; scoped registrations remain visible.
+
+- `filter` — global-surface mask: `allow` (keep only) and/or `deny` (remove).
+
+**Returns** the exact disposer that lifts this restriction.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/tools/src/index.ts#L508)
+
+### ctx.tools.guard(guard)
+
+```ts website-api
+guard(guard: ToolGuard): () => void
+```
+
+Register a monotonic guard after the extensible `tools/pre-execute` waterfall. A plain-context guard applies globally; one registered through `agent.ctx` applies only to that agent. Any matching guard may deny by returning a reason, while no guard can force-allow a call another guard denied. The exact effect disposer is returned for ordered ownership and HMR cleanup.
+
+- `guard` — synchronous check; a returned string denies the execution.
+
+**Returns** the exact disposer that unregisters the guard.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/tools/src/index.ts#L559)
+
+### ctx.tools.get(name, scope?)
+
+```ts website-api
+get(name: string, scope?: ScopeKey): ToolDefinition | undefined
+```
+
+Look up a tool as one scope sees it (scoped shadows global; a restricted-away global reads as absent). Presenters pass the calling agent so the rendered card matches the definition that actually executed.
+
+- `name` — the tool name as registered.
+- `scope` — the viewing scope (the agent); omitted = the global view.
+
+**Returns** the definition the scope resolves, or undefined when none is visible.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/tools/src/index.ts#L661)
+
+### ctx.tools.schemas(scope?)
+
+```ts website-api
+schemas(scope?: ScopeKey): ToolSchema[]
+```
+
+Project visible definitions onto the allowlisted model-facing schema fields, excluding execution and presentation callbacks.
+
+- `scope` — the viewing scope (the agent); omitted = the global view.
+
+**Returns** one deep-cloned schema per visible tool.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/tools/src/index.ts#L671)
+
+### ctx.tools.execute(exec)
+
+```ts website-api
+async execute(exec: ToolExecutionInput): Promise<ToolExecutionResult>
+```
+
+Execute through pre-policy, guards, around-dispatch, post-policy, and final notification. Tool and listener failures resolve as materialized error results; an invisible tool reports `UNKNOWN_TOOL`. The returned outcome is the same lossless, frozen snapshot final observers receive.
+
+- `exec` — the typed same-process call input. The registry assigns its correlation token before policy begins.
+
+**Returns** the materialized final result.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/core/tools/src/index.ts#L694)

website/zh-CN/api/harness/user-interaction.md

@@ -0,0 +1,37 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.userInteraction
+
+`UserInteractionService` — provided by `@deepseek-ai/dsh-user-interaction`.
+
+`ctx.userInteraction`: one active UI provider plus an `ask()` surface.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/ui/user-interaction/src/index.ts#L82)
+
+### ctx.userInteraction.registerProvider(provider)
+
+```ts website-api
+registerProvider(provider: UserInteractionProvider): () => void
+```
+
+Register the UI provider. Only one provider may be active in a context.
+
+- `provider` — UI-side implementation that collects answers.
+
+**Returns** Disposer that unregisters this provider.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/ui/user-interaction/src/index.ts#L95)
+
+### ctx.userInteraction.ask(request)
+
+```ts website-api
+async ask(request: AskUserQuestionRequest): Promise<AskUserQuestionAnswer>
+```
+
+Ask the active UI provider and wait for the user's answer.
+
+- `request` — Questions, owner agent, and abort signal.
+
+**Returns** The answer chosen or typed by the human.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/ui/user-interaction/src/index.ts#L114)

website/zh-CN/api/harness/web.md

@@ -0,0 +1,74 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.web
+
+`WebService` — provided by `@deepseek-ai/dsh-web`.
+
+The web access service. Registered as `ctx.web` (one instance per context).
+Selection semantics (resolved at execution time, never order-dependent):
+- A configured id that is registered and `available()` → that provider.
+- A configured id not registered → `WEB_PROVIDER_CONFIGURED_MISSING`.
+- A configured id registered but unavailable → `WEB_PROVIDER_CONFIGURED_UNAVAILABLE`.
+- No id configured, exactly one registered usable provider → that provider.
+- No id configured, multiple usable providers → `WEB_PROVIDER_AMBIGUOUS`.
+- No id configured, no usable provider → `WEB_PROVIDER_UNAVAILABLE`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/web/web/src/index.ts#L74)
+
+### ctx.web.registerSearchProvider(provider)
+
+```ts website-api
+registerSearchProvider(provider: WebSearchProvider): () => void
+```
+
+Register a search provider. Throws WebError `WEB_DUPLICATE_PROVIDER` if its id is already registered for search. Returns a disposer; disposed with the calling fiber.
+
+- `provider` — the provider; its `id` is the registry key.
+
+**Returns** the disposer that unregisters the provider.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/web/web/src/index.ts#L103)
+
+### ctx.web.registerFetchProvider(provider)
+
+```ts website-api
+registerFetchProvider(provider: WebFetchProvider): () => void
+```
+
+Register a fetch provider. Throws WebError `WEB_DUPLICATE_PROVIDER` if its id is already registered for fetch. Returns a disposer; disposed with the calling fiber.
+
+- `provider` — the provider; its `id` is the registry key.
+
+**Returns** the disposer that unregisters the provider.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/web/web/src/index.ts#L114)
+
+### ctx.web.search(request, signal?)
+
+```ts website-api
+async search(request: WebSearchRequest, signal?: AbortSignal): Promise<WebSearchResult>
+```
+
+Run one search through the selected provider. Resolves the provider at call time with the selection rules above; throws WebError when the capability cannot run. The seam enforces `request.maxResults` on the result: if the provider over-returns, `sources[]` is truncated and `truncated` set.
+
+- `request` — the query plus result-shaping options.
+- `signal` — optional cancellation signal forwarded to the provider.
+
+**Returns** the provider's results, capped to `request.maxResults`.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/web/web/src/index.ts#L140)
+
+### ctx.web.fetch(request, signal?)
+
+```ts website-api
+async fetch(request: WebFetchRequest, signal?: AbortSignal): Promise<WebFetchResult>
+```
+
+Retrieve one URL through the selected provider. Resolves the provider at call time with the selection rules above; throws WebError when the capability cannot run. A non-2xx response is a result, not a throw.
+
+- `request` — the URL plus retrieval options.
+- `signal` — optional cancellation signal forwarded to the provider.
+
+**Returns** the retrieval outcome; non-2xx responses resolve descriptively.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/web/web/src/index.ts#L157)

website/zh-CN/api/harness/workflows.md

@@ -0,0 +1,23 @@
+<!-- Generated by scripts/gen-website-api.ts — do not edit by hand. Run `pnpm run gen-website-api` to regenerate. -->
+
+# ctx.workflows
+
+`WorkflowService` (abstract seam) — provided by `@deepseek-ai/dsh-workflow`.
+
+Workflow execution seam. Invalid requests throw before publication; a live run is holder-owned, its result never rejects, cancellation and disposal are bounded, and disposal waits for child cleanup within that bound. Lifecycle listener failures are contained, and `workflow/end` fires exactly once as the result settles.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/workflow/workflow/src/index.ts#L159)
+
+### ctx.workflows.start(request)
+
+```ts website-api
+abstract start(request: WorkflowStartRequest): WorkflowRun
+```
+
+Parse and execute a workflow script.
+
+- `request` — the script, its `args`, the parent agent, and an optional cancel signal.
+
+**Returns** the live run; its `result` resolves when the script settles.
+
+[Source](https://github.com/deepseek-harness/deepseek-harness/blob/master/packages/workflow/workflow/src/index.ts#L170)

website/zh-CN/api/index.md

@@ -0,0 +1,43 @@
+# API 参考
+
+本节是 DeepSeek Harness 的 API 参考。除本页外，`cordis/` 与 `harness/` 下的所有页面**由脚本从源码生成**（`pnpm run gen-website-api`，CI 校验新鲜度），签名与说明永远与代码一致；生成页目前为英文，中文版将随统一翻译流程提供。
+
+## 框架 API
+
+Cordis 微内核提供的基础能力，所有插件开发都建立在这些 API 之上：
+
+- [Context](./cordis/context) — 上下文对象，所有服务和方法的入口
+- [Events](./cordis/events) — 事件系统 API（on / emit / bail / serial / waterfall）
+- [Fiber](./cordis/fiber) — 插件生命周期（状态机、effect、dispose）
+- [Registry](./cordis/registry) — 插件注册（plugin / inject）
+- [Service](./cordis/service) — 服务基类
+
+## Harness API
+
+每个 `ctx.*` 服务一页，按服务名索引：
+
+- [ctx.agentLoop](./harness/agent-loop) — ReAct 循环的创建与恢复
+- [ctx.agents](./harness/agents) — Agent 注册表与工厂
+- [ctx.approval](./harness/approval) — 用户审批
+- [ctx.bash](./harness/bash) — Bash 执行接口（抽象缝）
+- [ctx.codeRuntime](./harness/code-runtime) — 代码执行接口（抽象缝）
+- [ctx.compact](./harness/compact) — 上下文压缩接口（抽象缝）
+- [ctx.fs](./harness/fs) — 文件系统接口（抽象缝）
+- [ctx.llm](./harness/llm) — LLM 服务与适配器注册
+- [ctx.permission](./harness/permission) — 权限策略
+- [ctx.sandbox](./harness/sandbox) — 沙箱执行接口（抽象缝）
+- [ctx.sessionPersistence](./harness/session-persistence) — 会话持久化接口（抽象缝）
+- [ctx.sessionQuery](./harness/session-query) — 会话检索
+- [ctx.sessions](./harness/sessions) — 会话存储
+- [ctx.skills](./harness/skills) — 技能加载
+- [ctx.subagents](./harness/subagents) — 子代理委派
+- [ctx.systemPrompt](./harness/system-prompt) — 系统提示词组装
+- [ctx.tasks](./harness/tasks) — 后台任务
+- [ctx.tools](./harness/tools) — Tool 注册表
+- [ctx.userInteraction](./harness/user-interaction) — 用户交互接口
+- [ctx.web](./harness/web) — Web 搜索与抓取
+- [ctx.workflows](./harness/workflows) — 动态工作流引擎（抽象缝）
+
+事件总表：[Harness events](./harness/events) — 全部事件按作用域分组，含触发模式与载荷签名。
+
+想学"怎么写一个 tool / 插件"？教程在[开发指南](../develop/basic/)；本节只做精确的接口参考。