@pi-harness/pi-harness 0.1.13 → 0.1.15

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/at-file.json

@@ -1,9 +1,9 @@
 {
   "id": "at-file",
   "packageName": "@pi-harness/core/plugins/at-file",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "@file Context",
-  "description": "Attach workspace files with a bounded @file reference and safe relative-path checks.",
+  "description": "Attach a bounded 256 KiB strict UTF-8 workspace file using canonical workspace path confinement and no-follow regular-file reads, framing it as offline, read-only, untrusted model context with closing-tag neutralization and cancellable sequential execution.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,11 +14,17 @@
     "label": "上下文管理"
   },
   "capabilities": [
-    "file context",
-    "workspace"
+    "256 KiB strict UTF-8 text attachments",
+    "canonical workspace path confinement",
+    "no-follow regular-file reads",
+    "untrusted context framing",
+    "closing-tag neutralization",
+    "cancellable sequential execution",
+    "descriptor-safe normalized panel"
   ],
   "hooks": [
-    "message parsing",
+    "file context tool",
+    "workspace file read",
     "plugin UI"
   ],
   "profile": {

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/auto-mode.json

@@ -1,7 +1,7 @@
 {
   "id": "auto-mode",
   "packageName": "@pi-harness/core/plugins/auto-mode",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Auto Mode",
   "description": "Execute argv commands under a safe policy that blocks shell wrappers and requires confirmation for risky operations.",
   "author": "Pi Harness",

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/better-sidebar.json

@@ -1,7 +1,7 @@
 {
   "id": "better-sidebar",
   "packageName": "@pi-harness/core/plugins/better-sidebar",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Better Sidebar",
   "description": "Show a compact workspace, Git, and session overview beside the conversation without modifying files.",
   "author": "Pi Harness",

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/browser-fetch.json

@@ -1,9 +1,9 @@
 {
   "id": "browser-fetch",
   "packageName": "@pi-harness/core/plugins/browser-fetch",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Browser Fetch",
-  "description": "Fetch public HTTP and HTTPS pages as bounded text without executing page scripts or private network targets.",
+  "description": "Fetch public HTTP and HTTPS pages as bounded text with descriptor-safe inputs, DNS pinning, per-redirect private-network validation, textual MIME enforcement, cancellation, a whole-request timeout, and validated fail-closed panel reporting.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,8 +14,12 @@
     "label": "网页与研究"
   },
   "capabilities": [
-    "web fetch",
-    "SSRF protection"
+    "bounded textual HTTP fetch",
+    "DNS rebinding protection",
+    "per-hop SSRF validation",
+    "cancellable request lifecycle",
+    "bounded browser preview",
+    "validated fail-closed panel reporting"
   ],
   "hooks": [
     "network request",
@@ -23,6 +27,9 @@
   ],
   "profile": {
     "name": "@pi-harness/core/plugins/browser-fetch",
-    "config": {}
+    "config": {
+      "allowPrivate": false,
+      "timeoutMs": 20000
+    }
   }
 }

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/browser-session.json

@@ -1,9 +1,9 @@
 {
   "id": "browser-session",
   "packageName": "@pi-harness/core/plugins/browser-session",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Browser Session",
-  "description": "Inspect and control a local Chrome DevTools session through a bounded browser endpoint without embedding browser credentials.",
+  "description": "Control a loopback-only Chrome DevTools session with descriptor-safe commands, bounded discovery, cancellable operations, screenshot metadata protection, and validated fail-closed panel previews.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -11,19 +11,25 @@
   "status": "verified",
   "category": {
     "id": "web",
-    "label": "网页"
+    "label": "网页与研究"
   },
   "capabilities": [
-    "browser session",
-    "DevTools",
-    "page inspection"
+    "loopback-only CDP endpoint",
+    "bounded tab discovery",
+    "navigation read click and screenshot tools",
+    "cancellable request lifecycle",
+    "bounded panel previews",
+    "validated fail-closed panel reporting"
   ],
   "hooks": [
-    "browser endpoint",
+    "browser session tools",
+    "Chrome DevTools Protocol",
     "plugin UI"
   ],
   "profile": {
     "name": "@pi-harness/core/plugins/browser-session",
-    "config": {}
+    "config": {
+      "endpoint": "http://127.0.0.1:9222"
+    }
   }
 }

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/canvas-draw.json

@@ -1,9 +1,9 @@
 {
   "id": "canvas-draw",
   "packageName": "@pi-harness/core/plugins/canvas-draw",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Canvas Draw",
-  "description": "Build structured nodes and edges for architecture, flow, and dependency diagrams in the workspace UI.",
+  "description": "Generate validated, bounded Mermaid flowchart source from structured nodes and edges in the workspace UI.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,12 +14,11 @@
     "label": "多模态"
   },
   "capabilities": [
-    "diagram",
+    "Mermaid flowchart",
     "nodes and edges",
     "visual planning"
   ],
   "hooks": [
-    "canvas state",
     "plugin UI"
   ],
   "profile": {

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/change-verifier.json

@@ -1,7 +1,7 @@
 {
   "id": "change-verifier",
   "packageName": "@pi-harness/core/plugins/change-verifier",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Change Verifier",
   "description": "Combine project tests and Git change review into one explicit verification gate before handoff.",
   "author": "Pi Harness",

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/cleaner.json

@@ -1,9 +1,9 @@
 {
   "id": "cleaner",
   "packageName": "@pi-harness/core/plugins/cleaner",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Cleaner",
-  "description": "Remove bounded Pi Harness cache and transient files through an explicit, previewable cleanup operation.",
+  "description": "Strict descriptor-safe configuration and parameters, display-safe bounded Pi Harness Git capsule inventory, removal with explicit confirmation and retention controls, symlink and replacement defenses, cancellable serialization, and a fail-closed normalized panel.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,12 +14,17 @@
     "label": "开发工具"
   },
   "capabilities": [
-    "cache cleanup",
-    "transient files",
-    "preview"
+    "strict configuration and parameters",
+    "bounded capsule inventory",
+    "display-safe capsule filtering",
+    "confirmed retention cleanup",
+    "symlink and replacement defenses",
+    "cancellable serialized cleanup",
+    "fail-closed normalized panel"
   ],
   "hooks": [
-    "agent directory",
+    "capsule cleanup tool",
+    "agent capsule directory",
     "plugin UI"
   ],
   "profile": {

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/cli-notifier.json

@@ -1,9 +1,9 @@
 {
   "id": "cli-notifier",
   "packageName": "@pi-harness/core/plugins/cli-notifier",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "CLI Notifier",
-  "description": "Notify a local command or webhook when a long-running Pi session finishes, fails, or is aborted.",
+  "description": "Send local desktop notifications when an agent turn completes, fails, or is aborted, and when context compaction fails.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,13 +14,13 @@
     "label": "工作流"
   },
   "capabilities": [
+    "desktop notification",
     "completion notice",
-    "failure notice",
-    "webhook"
+    "failure and abort notice"
   ],
   "hooks": [
     "agent end",
-    "session error",
+    "compaction error",
     "plugin UI"
   ],
   "profile": {

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/code2skill.json

@@ -1,9 +1,9 @@
 {
   "id": "code2skill",
   "packageName": "@pi-harness/core/plugins/code2skill",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Code2Skill",
-  "description": "Package a reviewed source snippet into a portable skill artifact with bounded input and explicit metadata.",
+  "description": "Package selected workspace source files into a bounded local Pi skill with a generated SKILL.md manifest and preserved references.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,9 +14,9 @@
     "label": "工具"
   },
   "capabilities": [
-    "skill packaging",
-    "source extraction",
-    "artifact generation"
+    "bounded skill packaging",
+    "source file preservation",
+    "SKILL.md generation"
   ],
   "hooks": [
     "workspace files",

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/colleague-skill.json

@@ -1,7 +1,7 @@
 {
   "id": "colleague-skill",
   "packageName": "@pi-harness/core/plugins/colleague-skill",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Colleague Skill",
   "description": "Create durable, structured handoff packets for another role without hidden agents or external message delivery.",
   "author": "Pi Harness",
@@ -20,7 +20,6 @@
   ],
   "hooks": [
     "session storage",
-    "bounded input",
     "plugin UI"
   ],
   "profile": {

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/context-doctor.json

@@ -1,9 +1,9 @@
 {
   "id": "context-doctor",
   "packageName": "@pi-harness/core/plugins/context-doctor",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Context Doctor",
-  "description": "Audit context pressure, oversized messages, and tool errors before a long task runs out of context.",
+  "description": "Descriptor-safe bounded context audits detect pressure, oversized or uninspectable messages, and tool errors. Compaction requests are queued until the agent has settled; confirmed model-backed compaction may incur cost and provides cancellable waits with dedicated cancellation.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,13 +14,18 @@
     "label": "可观测性"
   },
   "capabilities": [
-    "context audit",
-    "compaction guidance",
-    "tool error detection"
+    "descriptor-safe bounded context audit",
+    "pressure oversized uninspectable and tool-error diagnostics",
+    "confirmed settled-session compaction",
+    "dedicated compaction cancellation",
+    "single-flight bounded operation status",
+    "cached normalized panel"
   ],
   "hooks": [
-    "session messages",
-    "context usage",
+    "context doctor tool",
+    "session messages and usage",
+    "Pi session lifecycle",
+    "manual compaction",
     "plugin UI"
   ],
   "profile": {

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/context.json

@@ -1,9 +1,9 @@
 {
   "id": "context-insights",
   "packageName": "@pi-harness/core/plugins/context",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Context Insights",
-  "description": "Expose bounded runtime context diagnostics so agents can reason about loaded resources and session state.",
+  "description": "Inspect context usage and descriptor-safe bounded message composition with cached active-session lifecycle counters and a fixed-limit normalized browser panel.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,11 +14,16 @@
     "label": "上下文管理"
   },
   "capabilities": [
-    "context",
-    "diagnostics"
+    "descriptor-safe bounded message composition",
+    "resilient context usage inspection",
+    "active-session lifecycle counters",
+    "cached session-aware panel",
+    "bounded normalized browser view"
   ],
   "hooks": [
-    "session event",
+    "context inspection tool",
+    "active runtime session",
+    "Pi session lifecycle",
     "plugin UI"
   ],
   "profile": {

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/cordis-group.json

@@ -10,7 +10,7 @@
   "source": "official",
   "status": "verified",
   "category": { "id": "composition", "label": "组合编排" },
-  "capabilities": ["composition", "lifecycle"],
-  "hooks": ["nested plugin tree"],
+  "capabilities": ["nested plugin composition", "transactional rollback", "lifecycle ownership"],
+  "hooks": ["loader entry tree"],
   "profile": { "name": "@deepseek-ai/cordis-plugin-group", "group": true, "config": [] }
 }

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/cordis-logger-console.json

@@ -3,14 +3,14 @@
   "packageName": "@deepseek-ai/cordis-plugin-logger-console",
   "version": "1.0.1",
   "name": "Console logger",
-  "description": "Exports lifecycle and runtime diagnostics to the host console.",
+  "description": "Exports bounded Cordis diagnostics to the host console with severity filters and a safe recent-log panel.",
   "author": "DeepSeek AI",
   "repository": "https://github.com/deepseek-ai/deepseek-harness",
   "license": "MIT",
   "source": "official",
   "status": "verified",
   "category": { "id": "observability", "label": "可观测性" },
-  "capabilities": ["logging", "diagnostics"],
-  "hooks": ["context lifecycle"],
-  "profile": { "name": "@deepseek-ai/cordis-plugin-logger-console", "config": {} }
+  "capabilities": ["bounded console logging", "per-logger severity filtering", "safe recent-log panel"],
+  "hooks": ["Cordis logger exporter", "plugin UI"],
+  "profile": { "name": "@deepseek-ai/cordis-plugin-logger-console", "config": { "levels": { "default": 2 }, "maxLength": 8192 } }
 }

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/cordis-timer.json

@@ -3,14 +3,14 @@
   "packageName": "@deepseek-ai/cordis-plugin-timer",
   "version": "1.1.3",
   "name": "Timer",
-  "description": "Provides a lifecycle-owned timer service to runtime plugins.",
+  "description": "Provides bounded lifecycle-owned scheduling with async intervals, throttling, and debouncing.",
   "author": "DeepSeek AI",
   "repository": "https://github.com/deepseek-ai/deepseek-harness",
   "license": "MIT",
   "source": "official",
   "status": "verified",
   "category": { "id": "runtime", "label": "运行时" },
-  "capabilities": ["runtime", "scheduling"],
-  "hooks": ["context lifecycle"],
+  "capabilities": ["scheduling", "lifecycle-owned cancellation", "async interval iteration", "throttle and debounce"],
+  "hooks": ["Cordis timer service", "plugin UI"],
   "profile": { "name": "@deepseek-ai/cordis-plugin-timer", "config": {} }
 }

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/cost-meter.json

@@ -1,9 +1,9 @@
 {
   "id": "cost-meter",
   "packageName": "@pi-harness/core/plugins/cost-meter",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Cost Meter",
-  "description": "Track current-session, daily, and persisted model costs with optional budget thresholds.",
+  "description": "Track runtime-reported costs as UTC daily increments in a bounded local ledger, with session snapshots and optional daily budget monitoring; no model prices are guessed.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,18 +14,21 @@
     "label": "可观测性"
   },
   "capabilities": [
-    "cost",
-    "budget",
-    "usage"
+    "UTC daily cost ledger",
+    "session cost snapshots",
+    "daily budget monitoring",
+    "bounded local persistence"
   ],
   "hooks": [
     "agent end",
+    "cost report tool",
     "plugin UI"
   ],
   "profile": {
     "name": "@pi-harness/core/plugins/cost-meter",
     "config": {
-      "dailyBudget": 0
+      "dailyBudget": 0,
+      "maxEntries": 365
     }
   }
 }

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/dependency-checker.json

@@ -1,27 +1,30 @@
 {
   "id": "dependency-checker",
   "packageName": "@pi-harness/core/plugins/dependency-checker",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Dependency Checker",
-  "description": "Inspect package.json or requirements.txt, report missing dependencies, and flag conflicting version constraints.",
+  "description": "Run a bounded, offline, read-only check of workspace package.json and requirements*.txt manifests for local package presence, duplicate declaration consistency, unresolved constraints, and unsupported Python directives.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
   "source": "official",
   "status": "verified",
   "category": {
-    "id": "workflow",
-    "label": "工作流"
+    "id": "developer",
+    "label": "开发效率"
   },
   "capabilities": [
-    "npm dependencies",
-    "Python requirements",
-    "version conflicts",
-    "package health"
+    "2000-declaration local presence scan",
+    "4096-entry workspace-contained virtualenv scan",
+    "npm common-intersection conflict detection",
+    "bounded Python numeric constraint analysis",
+    "unresolved constraint and directive reporting",
+    "optional dependency reporting",
+    "descriptor-safe normalized panel"
   ],
   "hooks": [
-    "workspace access",
-    "virtualenv scan",
+    "dependency check tool",
+    "workspace manifest read",
     "plugin UI"
   ],
   "profile": {

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/docker-sandbox.json

@@ -1,9 +1,9 @@
 {
   "id": "docker-sandbox",
   "packageName": "@pi-harness/core/plugins/docker-sandbox",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Docker Sandbox",
-  "description": "Run approved commands inside an isolated Docker container with bounded resources and explicit image settings.",
+  "description": "Run descriptor-safe argv commands with local-only Docker images, no container network, a read-only workspace by default, fixed CPU, memory, and PID limits, sanitized output, strict panel reporting, and cancellation cleanup.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,11 +14,16 @@
     "label": "安全"
   },
   "capabilities": [
-    "container isolation",
-    "resource limits",
-    "safe execution"
+    "local-only image execution",
+    "no-network containers",
+    "read-only workspace by default",
+    "CPU memory and PID limits",
+    "sanitized bounded output",
+    "strict panel reporting",
+    "cancellation cleanup"
   ],
   "hooks": [
+    "sandbox execution tool",
     "Docker CLI",
     "plugin UI"
   ],

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/fail-logger.json

@@ -1,9 +1,9 @@
 {
   "id": "fail-logger",
   "packageName": "@pi-harness/core/plugins/fail-logger",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Failure Logger",
-  "description": "Deduplicate extension and runtime failures into a bounded diagnostic panel without retaining full message payloads.",
+  "description": "Aggregate bounded extension, Agent, and non-aborted compaction failures through descriptor-safe event inspection, safe diagnostic summaries, and occurrence counts without retaining full payloads.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,12 +14,17 @@
     "label": "可观测性"
   },
   "capabilities": [
-    "error deduplication",
-    "runtime diagnostics",
-    "failure panel"
+    "bounded failure aggregation",
+    "descriptor-safe event inspection",
+    "abort-aware compaction diagnostics",
+    "occurrence counting",
+    "safe diagnostic summaries",
+    "capacity visibility"
   ],
   "hooks": [
-    "extension errors",
+    "extension error",
+    "agent end",
+    "compaction end",
     "plugin UI"
   ],
   "profile": {

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/genui.json

@@ -1,9 +1,9 @@
 {
   "id": "genui",
   "packageName": "@pi-harness/core/plugins/genui",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "GenUI",
-  "description": "Render bounded structured UI blocks from agent output without executing arbitrary HTML or scripts.",
+  "description": "Render bounded structured cards with text, badge, and decimal progress blocks while displaying HTML and scripts as plain text.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,11 +14,13 @@
     "label": "界面增强"
   },
   "capabilities": [
-    "structured UI",
-    "rendering"
+    "bounded structured cards",
+    "typed text badge and progress blocks",
+    "decimal progress validation",
+    "plain-text HTML handling"
   ],
   "hooks": [
-    "session event",
+    "GenUI render tool",
     "plugin UI"
   ],
   "profile": {

package/node_modules/@pi-harness/api-gateway/dist/marketplace-entries/official/git-time-capsule.json

@@ -1,9 +1,9 @@
 {
   "id": "git-time-capsule",
   "packageName": "@pi-harness/core/plugins/git-time-capsule",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "name": "Git Time Capsule",
-  "description": "Create lightweight Git savepoints before agent changes so a task can be reviewed or restored safely.",
+  "description": "Capture the current unstaged tracked Git diff as a byte-exact, validated undo capsule without external diff or textconv helpers, then reverse-apply it only after explicit confirmation.",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,17 +14,22 @@
     "label": "工作流"
   },
   "capabilities": [
-    "git savepoint",
-    "change recovery",
-    "rollback"
+    "byte-exact validated unstaged diff capture",
+    "exclusive no-clobber capsule publication",
+    "confirmed deterministic reverse apply",
+    "bounded 256-capsule inventory",
+    "cancellable serialized Git operations",
+    "descriptor-safe normalized panel"
   ],
   "hooks": [
-    "Git repository",
-    "explicit restore",
+    "Git snapshot tool",
+    "Git restore tool",
     "plugin UI"
   ],
   "profile": {
     "name": "@pi-harness/core/plugins/git-time-capsule",
-    "config": {}
+    "config": {
+      "timeoutMs": 15000
+    }
   }
 }