@pi-harness/pi-harness 0.1.14 → 0.1.15

package/packages/core/src/plugins/auto-mode.ts

@@ -1,190 +0,0 @@
-import { execFile } from "node:child_process";
-import { promisify } from "node:util";
-import type { Context } from "@deepseek-ai/cordis";
-import z from "@deepseek-ai/schemastery";
-import { Type } from "@earendil-works/pi-ai";
-import { defineTool, type AgentToolResult } from "@earendil-works/pi-coding-agent";
-
-const execFileAsync = promisify(execFile);
-const maxArgs = 32;
-const maxArgBytes = 4096;
-const maxOutputBytes = 128 * 1024;
-const defaultTimeoutMs = 30_000;
-const shellWrappers = new Set([
-  "sh",
-  "bash",
-  "zsh",
-  "fish",
-  "cmd",
-  "powershell",
-  "pwsh",
-  "env",
-  "sudo",
-  "su",
-  "nice",
-  "nohup",
-  "time",
-  "timeout",
-  "stdbuf",
-  "xargs",
-]);
-const safeCommands = new Set([
-  "basename",
-  "cat",
-  "cmp",
-  "diff",
-  "dirname",
-  "echo",
-  "file",
-  "grep",
-  "head",
-  "id",
-  "ls",
-  "printf",
-  "pwd",
-  "stat",
-  "tail",
-  "uname",
-  "wc",
-  "which",
-  "whoami",
-]);
-const safeGitSubcommands = new Set(["blame", "cat-file", "describe", "diff", "grep", "log", "ls-files", "ls-tree", "rev-parse", "show", "status"]);
-type AutoModeResult = { command: string[]; allowed: boolean; confirmed: boolean; exitCode: number | null; stdout: string; stderr: string; durationMs: number };
-
-export interface AutoModePluginConfig {
-  mode?: "safe" | "confirm";
-  timeoutMs?: number;
-}
-export const Config: z<AutoModePluginConfig> = z.object({
-  mode: z.union(["safe", "confirm"]).default("safe"),
-  timeoutMs: z.number().default(defaultTimeoutMs),
-});
-
-function commandName(value: string): string {
-  return value
-    .split(/[\\/]/u)
-    .at(-1)!
-    .toLowerCase()
-    .replace(/\.(?:exe|cmd|bat|com)$/u, "");
-}
-
-function validateCommand(command: unknown): asserts command is string[] {
-  if (!Array.isArray(command)) throw new Error("Auto mode command must be an array");
-  const parts: unknown[] = command;
-  if (parts.length === 0 || parts.length > maxArgs) throw new Error(`Auto mode command must contain between 1 and ${maxArgs} arguments`);
-  if (!parts.every((part): part is string => typeof part === "string")) throw new Error("Auto mode command arguments must be strings");
-  if (parts.some((part) => part.length === 0 || Buffer.byteLength(part, "utf8") > maxArgBytes))
-    throw new Error("Auto mode command contains an invalid argument");
-  if (shellWrappers.has(commandName(parts[0] ?? ""))) throw new Error("Auto mode rejects shell wrappers; pass an executable argv directly");
-}
-
-function isRisky(command: string[]): boolean {
-  if (/[\\/]/u.test(command[0] ?? "")) return true;
-  const executable = commandName(command[0] ?? "");
-  if (safeCommands.has(executable)) return false;
-  if (executable !== "git") return true;
-  const subcommand = command[1]?.toLowerCase();
-  return subcommand !== "--version" && subcommand !== "version" && !safeGitSubcommands.has(subcommand ?? "");
-}
-
-export default {
-  name: "pi-auto-mode",
-  inject: ["piHarnessLaunch", "piPluginUi", "piTools"],
-  Config,
-  apply(context: Context, config: AutoModePluginConfig) {
-    const mode = config.mode === "confirm" ? "confirm" : "safe";
-    const configuredTimeoutMs = config.timeoutMs ?? defaultTimeoutMs;
-    const timeoutMs = Number.isFinite(configuredTimeoutMs) ? Math.max(1_000, Math.min(120_000, Math.trunc(configuredTimeoutMs))) : defaultTimeoutMs;
-    const lifecycle = new AbortController();
-    let blocked = 0;
-    let last: AutoModeResult | undefined;
-    const execute = async (command: string[], confirm: boolean, signal?: AbortSignal): Promise<AutoModeResult> => {
-      signal?.throwIfAborted();
-      try {
-        validateCommand(command);
-      } catch (error) {
-        blocked += 1;
-        throw error;
-      }
-      const argv = [...command];
-      const risky = isRisky(argv);
-      if (risky && !confirm) {
-        blocked += 1;
-        throw new Error("Auto mode blocked a risky command; retry with confirm=true");
-      }
-      if (mode === "confirm" && !confirm) {
-        blocked += 1;
-        throw new Error("Auto mode is configured for confirmation; retry with confirm=true");
-      }
-      const started = Date.now();
-      try {
-        const result = await execFileAsync(argv[0]!, argv.slice(1), {
-          cwd: context.piHarnessLaunch.cwd,
-          timeout: timeoutMs,
-          maxBuffer: maxOutputBytes,
-          signal,
-        });
-        last = {
-          command: argv,
-          allowed: true,
-          confirmed: confirm,
-          exitCode: 0,
-          stdout: result.stdout.slice(-maxOutputBytes),
-          stderr: result.stderr.slice(-maxOutputBytes),
-          durationMs: Date.now() - started,
-        };
-      } catch (error) {
-        signal?.throwIfAborted();
-        const failure = error as { code?: number | string; stdout?: string; stderr?: string; message?: string };
-        last = {
-          command: argv,
-          allowed: true,
-          confirmed: confirm,
-          exitCode: typeof failure.code === "number" ? failure.code : 1,
-          stdout: (failure.stdout ?? "").slice(-maxOutputBytes),
-          stderr: (failure.stderr ?? failure.message ?? "").slice(-maxOutputBytes),
-          durationMs: Date.now() - started,
-        };
-      }
-      return last;
-    };
-    const unregisterTool = context.piTools.register(
-      defineTool({
-        name: "auto_mode_exec",
-        label: "Auto mode exec",
-        description: "Execute an argv command under the configured safe/confirmation policy without a shell.",
-        promptSnippet: "run a command through the safe auto-mode policy",
-        parameters: Type.Object(
-          {
-            command: Type.Array(Type.String({ minLength: 1, maxLength: maxArgBytes }), { minItems: 1, maxItems: maxArgs }),
-            confirm: Type.Optional(Type.Boolean({ description: "Confirm a risky or confirmation-mode command" })),
-          },
-          { additionalProperties: false },
-        ),
-        executionMode: "sequential",
-        async execute(_toolCallId, params, signal): Promise<AgentToolResult<AutoModeResult>> {
-          const executionSignal = signal === undefined ? lifecycle.signal : AbortSignal.any([signal, lifecycle.signal]);
-          const result = await execute(params.command, params.confirm === true, executionSignal);
-          return {
-            content: [{ type: "text", text: `${result.command.join(" ")} exited with ${result.exitCode ?? "unknown"}.\n${result.stdout}${result.stderr}` }],
-            details: structuredClone(result),
-          };
-        },
-      }),
-    );
-    const disposePanel = context.piPluginUi.register({
-      id: "auto-mode-panel",
-      pluginId: "@pi-harness/core/plugins/auto-mode",
-      title: "Auto Mode",
-      description: "按安全策略执行 argv 命令，风险操作需要确认。",
-      icon: "◈",
-      read: () => ({ mode, timeoutMs, blocked, last: last === undefined ? null : structuredClone(last) }),
-    });
-    context.effect(() => () => {
-      lifecycle.abort(new Error("Auto mode plugin disposed"));
-      unregisterTool();
-      disposePanel();
-    });
-  },
-};

package/packages/core/src/plugins/better-sidebar.ts

@@ -1,128 +0,0 @@
-import type { Context } from "@deepseek-ai/cordis";
-import { Type } from "@earendil-works/pi-ai";
-import { defineTool, type AgentToolResult } from "@earendil-works/pi-coding-agent";
-import { listWorkspaceNodes, readWorkspaceGitStatus, type WorkspaceGitStatus, type WorkspaceNodeReport } from "./workspace-navigator.js";
-import { EmptyConfig } from "../config.js";
-
-const maxChangedFiles = 12;
-
-export interface SidebarOverviewInput {
-  readonly cwd: string;
-  readonly gitAvailable: boolean;
-  readonly branch: string | null;
-  readonly clean: boolean;
-  readonly changedFiles: readonly { readonly path: string; readonly status: string }[];
-  readonly directoryCount: number;
-  readonly fileCount: number;
-  readonly truncated: boolean;
-  readonly sessionId: string;
-}
-
-export interface SidebarOverview extends SidebarOverviewInput {
-  readonly changedCount: number;
-  readonly summary: string;
-}
-
-export function summarizeSidebar(input: SidebarOverviewInput): SidebarOverview {
-  const changedCount = input.changedFiles.length;
-  const summary = !input.gitAvailable
-    ? `非 Git 工作区 · ${changedCount > 0 ? `${changedCount} 个变更` : "无变更"}`
-    : `${input.branch ?? "detached HEAD"} · ${changedCount > 0 ? `${changedCount} 个变更` : "clean"}`;
-  return {
-    ...input,
-    changedFiles: input.changedFiles.slice(0, maxChangedFiles),
-    changedCount,
-    truncated: input.truncated || changedCount > maxChangedFiles,
-    summary,
-  };
-}
-
-export function createSidebarInspector(input: {
-  readonly cwd: string;
-  readonly getSessionId: () => string;
-  readonly listNodes?: (root: string, options: { maxDepth: number; maxNodes: number }) => Promise<WorkspaceNodeReport>;
-  readonly readGitStatus?: (root: string) => Promise<WorkspaceGitStatus>;
-}): () => Promise<SidebarOverview> {
-  const readNodes = input.listNodes ?? listWorkspaceNodes;
-  const readGit = input.readGitStatus ?? readWorkspaceGitStatus;
-  let tree: WorkspaceNodeReport | undefined;
-  let inFlight: Promise<SidebarOverview> | undefined;
-
-  const inspect = async (): Promise<SidebarOverview> => {
-    const [currentTree, git] = await Promise.all([
-      tree === undefined
-        ? readNodes(input.cwd, { maxDepth: 2, maxNodes: 80 }).then((result) => {
-            tree = result;
-            return result;
-          })
-        : Promise.resolve(tree),
-      readGit(input.cwd),
-    ]);
-    return summarizeSidebar({
-      cwd: input.cwd,
-      gitAvailable: git.available,
-      branch: git.available ? git.branch : null,
-      clean: git.available && git.clean,
-      changedFiles: git.entries,
-      directoryCount: currentTree.directoryCount,
-      fileCount: currentTree.fileCount,
-      truncated: currentTree.truncated,
-      sessionId: input.getSessionId(),
-    });
-  };
-
-  return () => {
-    if (inFlight !== undefined) return inFlight;
-    const current = inspect().finally(() => {
-      if (inFlight === current) inFlight = undefined;
-    });
-    inFlight = current;
-    return current;
-  };
-}
-
-function textSummary(report: SidebarOverview): string {
-  const files = report.changedFiles
-    .slice(0, 8)
-    .map((entry) => `${entry.status} ${entry.path}`)
-    .join(", ");
-  return `${report.summary}; ${report.directoryCount} 个目录，${report.fileCount} 个文件${files ? `; ${files}` : ""}`;
-}
-
-export default {
-  name: "pi-better-sidebar",
-  inject: ["piHarnessLaunch", "piSession", "piPluginUi", "piTools"],
-  Config: EmptyConfig,
-  apply(context: Context) {
-    const inspect = createSidebarInspector({
-      cwd: context.piHarnessLaunch.cwd,
-      getSessionId: () => context.piSession.manager.getSessionId(),
-    });
-    const unregisterTool = context.piTools.register(
-      defineTool({
-        name: "sidebar_overview",
-        label: "Sidebar overview",
-        description: "Read a compact workspace and Git overview for the current session without modifying files.",
-        promptSnippet: "inspect the workspace overview shown in the sidebar",
-        parameters: Type.Object({}, { additionalProperties: false }),
-        executionMode: "sequential",
-        async execute(): Promise<AgentToolResult<SidebarOverview>> {
-          const report = await inspect();
-          return { content: [{ type: "text", text: textSummary(report) }], details: structuredClone(report) };
-        },
-      }),
-    );
-    const disposePanel = context.piPluginUi.register({
-      id: "better-sidebar-panel",
-      pluginId: "@pi-harness/core/plugins/better-sidebar",
-      title: "Better Sidebar",
-      description: "在会话旁显示当前工作区、Git 变更和文件概览。",
-      icon: "▤",
-      read: async () => structuredClone(await inspect()),
-    });
-    context.effect(() => () => {
-      unregisterTool();
-      disposePanel();
-    });
-  },
-};

package/packages/core/src/plugins/browser-fetch.ts

@@ -1,362 +0,0 @@
-import type { LookupAddress } from "node:dns";
-import { lookup } from "node:dns/promises";
-import { BlockList, isIP, type LookupFunction } from "node:net";
-import type { Context } from "@deepseek-ai/cordis";
-import z from "@deepseek-ai/schemastery";
-import { Type } from "@earendil-works/pi-ai";
-import { defineTool, type AgentToolResult } from "@earendil-works/pi-coding-agent";
-import { Agent } from "undici";
-
-const maxResponseBytes = 512 * 1024;
-const maxPanelTextChars = 12_000;
-const maxRedirects = 3;
-const maxUrlLength = 4096;
-const defaultRequestTimeoutMs = 20_000;
-const redirectStatuses = new Set([301, 302, 303, 307, 308]);
-const textualApplicationTypes = new Set([
-  "application/ecmascript",
-  "application/graphql",
-  "application/javascript",
-  "application/json",
-  "application/sql",
-  "application/x-httpd-php",
-  "application/x-ndjson",
-  "application/x-www-form-urlencoded",
-  "application/xml",
-]);
-
-type BrowserFetchResult = { url: string; finalUrl: string; status: number; contentType: string; bytes: number; truncated: boolean; text: string };
-type ValidatedTarget = { url: URL; addresses?: LookupAddress[] };
-
-const nonPublicIpv4Networks = new BlockList();
-for (const [network, prefix] of [
-  ["0.0.0.0", 8],
-  ["10.0.0.0", 8],
-  ["100.64.0.0", 10],
-  ["127.0.0.0", 8],
-  ["169.254.0.0", 16],
-  ["172.16.0.0", 12],
-  ["192.0.0.0", 24],
-  ["192.0.2.0", 24],
-  ["192.88.99.0", 24],
-  ["192.168.0.0", 16],
-  ["198.18.0.0", 15],
-  ["198.51.100.0", 24],
-  ["203.0.113.0", 24],
-  ["224.0.0.0", 4],
-  ["240.0.0.0", 4],
-] as const)
-  nonPublicIpv4Networks.addSubnet(network, prefix, "ipv4");
-
-const globallyReachableIpv4SpecialNetworks = new BlockList();
-globallyReachableIpv4SpecialNetworks.addAddress("192.0.0.9", "ipv4");
-globallyReachableIpv4SpecialNetworks.addAddress("192.0.0.10", "ipv4");
-
-const globalIpv6UnicastNetworks = new BlockList();
-globalIpv6UnicastNetworks.addSubnet("2000::", 3, "ipv6");
-
-const globallyReachableIpv6SpecialNetworks = new BlockList();
-for (const [network, prefix] of [
-  ["2001:1::1", 128],
-  ["2001:1::2", 128],
-  ["2001:1::3", 128],
-  ["2001:3::", 32],
-  ["2001:4:112::", 48],
-  ["2001:20::", 28],
-  ["2001:30::", 28],
-] as const)
-  globallyReachableIpv6SpecialNetworks.addSubnet(network, prefix, "ipv6");
-
-const nonPublicIpv6Networks = new BlockList();
-for (const [network, prefix] of [
-  ["::", 128],
-  ["::1", 128],
-  ["::ffff:0:0", 96],
-  ["64:ff9b::", 96],
-  ["64:ff9b:1::", 48],
-  ["100::", 64],
-  ["2001::", 23],
-  ["2001:db8::", 32],
-  ["2002::", 16],
-  ["3fff::", 20],
-  ["fc00::", 7],
-  ["fe80::", 10],
-  ["fec0::", 10],
-  ["ff00::", 8],
-] as const)
-  nonPublicIpv6Networks.addSubnet(network, prefix, "ipv6");
-
-function privateIp(address: string): boolean {
-  const family = isIP(address);
-  if (family === 0) return true;
-  if (family === 4) {
-    if (globallyReachableIpv4SpecialNetworks.check(address, "ipv4")) return false;
-    return nonPublicIpv4Networks.check(address, "ipv4");
-  }
-  if (!globalIpv6UnicastNetworks.check(address, "ipv6")) return true;
-  if (globallyReachableIpv6SpecialNetworks.check(address, "ipv6")) return false;
-  return nonPublicIpv6Networks.check(address, "ipv6");
-}
-
-function abortError(signal: AbortSignal): Error {
-  return signal.reason instanceof Error ? signal.reason : new Error("Browser fetch aborted", { cause: signal.reason });
-}
-
-function throwIfAborted(signal: AbortSignal): void {
-  if (signal.aborted) throw abortError(signal);
-}
-
-function urlParameter(value: unknown): unknown {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) return undefined;
-  let descriptors: PropertyDescriptorMap;
-  try {
-    const prototype = Object.getPrototypeOf(value) as unknown;
-    if (prototype !== Object.prototype && prototype !== null) throw new Error("Browser fetch parameters must be a plain object");
-    descriptors = Object.getOwnPropertyDescriptors(value);
-  } catch (error) {
-    if (error instanceof Error && error.message === "Browser fetch parameters must be a plain object") throw error;
-    throw new Error("Browser fetch parameters must be an accessible plain object", { cause: error });
-  }
-  if (Reflect.ownKeys(descriptors).some((key) => key !== "url")) throw new Error("Browser fetch parameters contain an unknown property");
-  const descriptor = descriptors.url;
-  if (descriptor === undefined) return undefined;
-  if (!("value" in descriptor)) throw new Error("Browser fetch parameters must use data properties");
-  return descriptor.value as unknown;
-}
-
-function abortable<T>(operation: Promise<T>, signal: AbortSignal): Promise<T> {
-  return new Promise<T>((resolve, reject) => {
-    let settled = false;
-    const cleanup = () => signal.removeEventListener("abort", onAbort);
-    const onAbort = () => {
-      if (settled) return;
-      settled = true;
-      cleanup();
-      reject(abortError(signal));
-    };
-    signal.addEventListener("abort", onAbort, { once: true });
-    if (signal.aborted) onAbort();
-    void operation.then(
-      (value) => {
-        if (settled) return;
-        settled = true;
-        cleanup();
-        resolve(value);
-      },
-      (error: unknown) => {
-        if (settled) return;
-        settled = true;
-        cleanup();
-        reject(error instanceof Error ? error : new Error("Browser target resolution failed", { cause: error }));
-      },
-    );
-  });
-}
-
-async function validateTarget(rawUrl: unknown, allowPrivate: boolean, signal: AbortSignal): Promise<ValidatedTarget> {
-  throwIfAborted(signal);
-  if (typeof rawUrl !== "string") throw new Error("Browser URL must be a string");
-  if (rawUrl.length === 0 || rawUrl.length > maxUrlLength) throw new Error(`Browser URL must be between 1 and ${maxUrlLength} characters`);
-  let url: URL;
-  try {
-    url = new URL(rawUrl);
-  } catch {
-    throw new Error("Browser URL is invalid");
-  }
-  if (url.protocol !== "http:" && url.protocol !== "https:") throw new Error("Browser fetch only supports http and https URLs");
-  if (url.username !== "" || url.password !== "") throw new Error("Browser URL must not contain credentials");
-  if (!allowPrivate) {
-    const hostname = url.hostname.startsWith("[") && url.hostname.endsWith("]") ? url.hostname.slice(1, -1) : url.hostname;
-    const addresses = await abortable(lookup(hostname, { all: true, verbatim: true }), signal);
-    if (addresses.length === 0) throw new Error("Browser target did not resolve to an IP address");
-    if (addresses.some(({ address }) => privateIp(address))) throw new Error("Browser fetch blocked a private or local network target");
-    return { url, addresses };
-  }
-  return { url };
-}
-
-function createPinnedLookup(addresses: readonly LookupAddress[]): LookupFunction {
-  return (_hostname, options, callback) => {
-    if (options.all === true) {
-      callback(
-        null,
-        addresses.map(({ address, family }) => ({ address, family })),
-      );
-      return;
-    }
-    const requestedFamily = options.family === "IPv4" ? 4 : options.family === "IPv6" ? 6 : options.family;
-    const selected = addresses.find(({ family }) => requestedFamily === undefined || requestedFamily === 0 || requestedFamily === family) ?? addresses[0]!;
-    callback(null, selected.address, selected.family);
-  };
-}
-
-function contentType(response: Response): string {
-  return (response.headers.get("content-type") ?? "text/plain").split(";", 1)[0]!.trim().toLowerCase();
-}
-
-function textualContentType(value: string): boolean {
-  return value.startsWith("text/") || value.endsWith("+json") || value.endsWith("+xml") || value === "image/svg+xml" || textualApplicationTypes.has(value);
-}
-
-async function readBody(response: Response): Promise<{ bytes: number; truncated: boolean; text: string }> {
-  if (response.body === null) return { bytes: 0, truncated: false, text: "" };
-  const reader = response.body.getReader();
-  const chunks: Uint8Array[] = [];
-  let bytes = 0;
-  let truncated = false;
-  try {
-    while (true) {
-      const next = await reader.read();
-      if (next.done) break;
-      const chunk = next.value;
-      if (bytes + chunk.byteLength > maxResponseBytes) {
-        const remaining = maxResponseBytes - bytes;
-        if (remaining > 0) chunks.push(chunk.subarray(0, remaining));
-        bytes = maxResponseBytes;
-        truncated = true;
-        await reader.cancel();
-        break;
-      }
-      chunks.push(chunk);
-      bytes += chunk.byteLength;
-    }
-  } finally {
-    reader.releaseLock();
-  }
-  try {
-    const decoder = new TextDecoder("utf-8", { fatal: true });
-    const text = decoder.decode(Buffer.concat(chunks.map((chunk) => Buffer.from(chunk))));
-    return { bytes, truncated, text };
-  } catch (error) {
-    throw new Error("Browser response body is not valid UTF-8", { cause: error });
-  }
-}
-
-async function fetchPage(rawUrl: unknown, allowPrivate: boolean, timeoutMs: number, signal?: AbortSignal): Promise<BrowserFetchResult> {
-  if (signal !== undefined) throwIfAborted(signal);
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), timeoutMs);
-  const requestSignal = signal === undefined ? controller.signal : AbortSignal.any([signal, controller.signal]);
-  try {
-    let current = await validateTarget(rawUrl, allowPrivate, requestSignal);
-    const original = current.url.toString();
-    for (let redirect = 0; redirect <= maxRedirects; redirect += 1) {
-      const dispatcher = current.addresses === undefined ? undefined : new Agent({ connect: { lookup: createPinnedLookup(current.addresses) } });
-      try {
-        const requestInit: RequestInit & { dispatcher?: Agent } = {
-          redirect: "manual",
-          signal: requestSignal,
-          ...(dispatcher === undefined ? {} : { dispatcher }),
-          headers: { accept: "text/html, text/plain, application/json;q=0.9, */*;q=0.1", "user-agent": "pi-harness-browser-fetch/0.1" },
-        };
-        const response = await fetch(current.url, requestInit);
-        if (redirectStatuses.has(response.status)) {
-          await response.body?.cancel?.();
-          const location = response.headers.get("location");
-          if (location === null) throw new Error(`Browser redirect ${response.status} has no Location header`);
-          if (redirect === maxRedirects) throw new Error(`Browser fetch exceeded the ${maxRedirects}-redirect limit`);
-          current = await validateTarget(new URL(location, current.url).toString(), allowPrivate, requestSignal);
-          continue;
-        }
-        const responseContentType = contentType(response);
-        if (!textualContentType(responseContentType)) {
-          await response.body?.cancel?.();
-          throw new Error(`Browser fetch rejected unsupported content type: ${responseContentType}`);
-        }
-        const body = await readBody(response);
-        return {
-          url: original,
-          finalUrl: current.url.toString(),
-          status: response.status,
-          contentType: responseContentType,
-          ...body,
-        };
-      } finally {
-        await dispatcher?.close();
-      }
-    }
-    throw new Error("Browser fetch did not produce a response");
-  } catch (error) {
-    if (signal?.aborted === true) throw abortError(signal);
-    if (controller.signal.aborted) throw new Error(`Browser fetch timed out after ${timeoutMs} ms`, { cause: error });
-    throw error;
-  } finally {
-    clearTimeout(timer);
-  }
-}
-
-export interface BrowserFetchPluginConfig {
-  allowPrivate?: boolean;
-  timeoutMs?: number;
-}
-
-export const Config: z<BrowserFetchPluginConfig> = z.object({
-  allowPrivate: z.boolean().default(false),
-  timeoutMs: z.number().min(100).max(60_000).step(1).default(defaultRequestTimeoutMs),
-});
-
-export default {
-  name: "pi-browser-fetch",
-  inject: ["piHarnessLaunch", "piPluginUi", "piTools"],
-  Config,
-  apply(context: Context, config: BrowserFetchPluginConfig) {
-    const lifecycle = new AbortController();
-    const configuredTimeoutMs = config.timeoutMs ?? defaultRequestTimeoutMs;
-    const timeoutMs = Number.isFinite(configuredTimeoutMs) ? Math.max(100, Math.min(60_000, Math.trunc(configuredTimeoutMs))) : defaultRequestTimeoutMs;
-    let latest: BrowserFetchResult | undefined;
-    let unregisterTool: () => void = () => undefined;
-    let disposePanel: () => void = () => undefined;
-    try {
-      unregisterTool = context.piTools.register(
-        defineTool({
-          name: "browser_fetch",
-          label: "Browser fetch",
-          description: "Fetch a public HTTP or HTTPS page as bounded text without executing page scripts.",
-          promptSnippet: "fetch a public web page for inspection",
-          parameters: Type.Object(
-            { url: Type.String({ description: "HTTP or HTTPS URL", minLength: 1, maxLength: maxUrlLength }) },
-            { additionalProperties: false },
-          ),
-          executionMode: "sequential",
-          async execute(_toolCallId, params, signal): Promise<AgentToolResult<BrowserFetchResult>> {
-            const executionSignal = signal === undefined ? lifecycle.signal : AbortSignal.any([signal, lifecycle.signal]);
-            latest = await fetchPage(urlParameter(params), config.allowPrivate === true, timeoutMs, executionSignal);
-            return { content: [{ type: "text", text: latest.text }], details: structuredClone(latest) };
-          },
-        }),
-      );
-      disposePanel = context.piPluginUi.register({
-        id: "browser-fetch-panel",
-        pluginId: "@pi-harness/core/plugins/browser-fetch",
-        title: "Browser Fetch",
-        description: "受限抓取公开网页文本，不执行页面脚本。",
-        icon: "◎",
-        read: () => ({
-          latest:
-            latest === undefined
-              ? null
-              : {
-                  ...latest,
-                  text: latest.text.slice(0, maxPanelTextChars),
-                  previewTruncated: latest.text.length > maxPanelTextChars,
-                },
-          allowPrivate: config.allowPrivate === true,
-          maxResponseBytes,
-          maxPanelTextChars,
-          maxRedirects,
-          timeoutMs,
-        }),
-      });
-    } catch (error) {
-      disposePanel();
-      unregisterTool();
-      lifecycle.abort(new Error("Browser fetch plugin registration failed"));
-      throw error;
-    }
-    context.effect(() => () => {
-      lifecycle.abort(new Error("Browser fetch plugin disposed"));
-      unregisterTool();
-      disposePanel();
-    });
-  },
-};