@pi-harness/pi-harness 0.1.2 → 0.1.4

package/packages/core/dist/plugins/dependency-checker.js

@@ -0,0 +1,221 @@
+import { readdir, readFile, stat } from "node:fs/promises";
+import { basename, dirname, join, relative } from "node:path";
+import { Type } from "@earendil-works/pi-ai";
+import { defineTool } from "@earendil-works/pi-coding-agent";
+import { resolveExistingWorkspacePath } from "../workspace-path.js";
+function conflictList(entries) {
+    const grouped = new Map();
+    for (const entry of entries) {
+        const values = grouped.get(entry.name) ?? [];
+        if (!values.includes(entry.constraint))
+            values.push(entry.constraint);
+        grouped.set(entry.name, values);
+    }
+    return [...grouped.entries()].filter(([, constraints]) => constraintsConflict(constraints)).map(([name, constraints]) => ({ name, constraints }));
+}
+function numericVersion(value) {
+    const match = /^v?(\d+(?:\.\d+){0,3})(?:[-+].*)?$/u.exec(value.trim());
+    return match?.[1]?.split(".").map(Number);
+}
+function compareVersions(left, right) {
+    for (let index = 0; index < Math.max(left.length, right.length); index += 1) {
+        const difference = (left[index] ?? 0) - (right[index] ?? 0);
+        if (difference !== 0)
+            return Math.sign(difference);
+    }
+    return 0;
+}
+function constraintAllows(constraint, version) {
+    const parts = constraint
+        .split(",")
+        .map((part) => part.trim())
+        .filter(Boolean);
+    return parts.every((part) => {
+        const match = /^(===|==|=|>=|<=|>|<|\^|~)?\s*(v?\d+(?:\.\d+){0,3}(?:[-+][^\s]+)?)$/u.exec(part);
+        if (match === null)
+            return true;
+        const candidate = numericVersion(match[2] ?? "");
+        if (candidate === undefined)
+            return true;
+        const comparison = compareVersions(version, candidate);
+        switch (match[1] ?? "=") {
+            case ">=":
+                return comparison >= 0;
+            case "<=":
+                return comparison <= 0;
+            case ">":
+                return comparison > 0;
+            case "<":
+                return comparison < 0;
+            case "^":
+                return (comparison >= 0 &&
+                    version[0] === candidate[0] &&
+                    ((candidate[0] ?? 0) > 0 || (version[1] === candidate[1] && ((candidate[1] ?? 0) > 0 || version[2] === candidate[2]))));
+            case "~":
+                return comparison >= 0 && version[0] === candidate[0] && version[1] === candidate[1];
+            default:
+                return comparison === 0;
+        }
+    });
+}
+function constraintsConflict(constraints) {
+    if (constraints.length < 2)
+        return false;
+    const pinned = constraints.flatMap((constraint) => {
+        const match = /^(?:===|==|=)?\s*(v?\d+(?:\.\d+){0,3}(?:[-+][^\s]+)?)$/u.exec(constraint);
+        const version = match === null ? undefined : numericVersion(match[1] ?? "");
+        return version === undefined ? [] : [version];
+    });
+    if (pinned.length === 0)
+        return false;
+    return pinned.some((version) => constraints.some((constraint) => !constraintAllows(constraint, version)));
+}
+export function parseRequirements(source) {
+    const entries = [];
+    for (const rawLine of source.split("\n")) {
+        const line = rawLine.trim();
+        if (line === "" || line.startsWith("#") || line.startsWith("-") || line.startsWith("git+") || line.startsWith("http://") || line.startsWith("https://"))
+            continue;
+        const match = /^([A-Za-z0-9][A-Za-z0-9._-]*)(?:\[[^\]]+\])?\s*(.*)$/u.exec(line);
+        if (!match)
+            continue;
+        const name = match[1].toLowerCase().replaceAll("_", "-");
+        entries.push({ name, constraint: match[2]?.trim() ?? "" });
+    }
+    const names = [...new Set(entries.map((entry) => entry.name))];
+    return { names, constraints: conflictList(entries) };
+}
+async function installedPythonPackage(workspace, name) {
+    const normalized = name.toLowerCase().replaceAll("-", "_");
+    for (const environment of [".venv", "venv"]) {
+        const lib = join(workspace, environment, "lib");
+        const versions = await readdir(lib, { withFileTypes: true }).catch(() => []);
+        for (const version of versions) {
+            if (!version.isDirectory() || !version.name.startsWith("python"))
+                continue;
+            const sitePackages = join(lib, version.name, "site-packages");
+            const entries = await readdir(sitePackages, { withFileTypes: true }).catch(() => []);
+            if (entries.some((entry) => entry.name === normalized || entry.name.startsWith(`${normalized}-`) || entry.name.startsWith(`${normalized}.`)))
+                return true;
+        }
+    }
+    return false;
+}
+async function inspectRequirements(workspace, target) {
+    const parsed = parseRequirements(await readFile(target, "utf8"));
+    const missing = [];
+    for (const name of parsed.names) {
+        if (!(await installedPythonPackage(dirname(target), name)) && !(await installedPythonPackage(workspace, name)))
+            missing.push(name);
+    }
+    return {
+        manifest: relative(workspace, target) || ".",
+        ecosystem: "python",
+        declared: parsed.names.length,
+        installed: parsed.names.length - missing.length,
+        missing,
+        invalid: [],
+        conflicts: parsed.constraints,
+    };
+}
+export async function inspectManifest(workspace, requested = "package.json") {
+    const resolved = await resolveExistingWorkspacePath(workspace, requested, "Manifest path must stay inside the current workspace");
+    const target = resolved.target;
+    workspace = resolved.root;
+    const source = await readFile(target, "utf8");
+    if (basename(target).toLowerCase().startsWith("requirements") && target.toLowerCase().endsWith(".txt"))
+        return inspectRequirements(workspace, target);
+    let parsed;
+    try {
+        parsed = JSON.parse(source);
+    }
+    catch (error) {
+        throw new Error(`Invalid JSON manifest: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
+        throw new Error("Manifest root must be an object");
+    const record = parsed;
+    const sections = ["dependencies", "devDependencies", "optionalDependencies", "peerDependencies"];
+    const entries = sections.flatMap((section) => {
+        const value = record[section];
+        return value !== null && typeof value === "object" && !Array.isArray(value)
+            ? Object.entries(value).map(([name, constraint]) => ({ name, constraint: typeof constraint === "string" ? constraint : String(constraint) }))
+            : [];
+    });
+    const unique = [...new Set(entries.map((entry) => entry.name))];
+    const moduleRoots = [];
+    for (let directory = dirname(target);; directory = dirname(directory)) {
+        moduleRoots.push(join(directory, "node_modules"));
+        if (directory === workspace)
+            break;
+    }
+    const missing = [];
+    const invalid = [];
+    for (const name of unique) {
+        let found = false;
+        for (const moduleRoot of moduleRoots) {
+            try {
+                const moduleStat = await stat(join(moduleRoot, ...name.split("/")));
+                if (moduleStat.isDirectory()) {
+                    found = true;
+                    break;
+                }
+                invalid.push(name);
+                found = true;
+                break;
+            }
+            catch {
+                continue;
+            }
+        }
+        if (!found)
+            missing.push(name);
+    }
+    return {
+        manifest: relative(workspace, target) || ".",
+        ecosystem: "npm",
+        declared: unique.length,
+        installed: unique.length - missing.length - invalid.length,
+        missing,
+        invalid,
+        conflicts: conflictList(entries),
+    };
+}
+export default {
+    name: "pi-dependency-checker",
+    inject: ["piHarnessLaunch", "piPluginUi", "piTools"],
+    apply(context) {
+        let latest;
+        const inspect = async (manifest) => {
+            latest = await inspectManifest(context.piHarnessLaunch.cwd, manifest);
+            return latest;
+        };
+        const unregisterTool = context.piTools.register(defineTool({
+            name: "dependency_check",
+            label: "Dependency check",
+            description: "Inspect package.json or requirements.txt and report missing dependencies plus conflicting version constraints.",
+            promptSnippet: "check local dependency installation and version conflicts",
+            parameters: Type.Object({ manifest: Type.Optional(Type.String({ description: "package.json or requirements.txt path relative to the workspace" })) }),
+            async execute(_toolCallId, params) {
+                const report = await inspect(params.manifest);
+                return {
+                    content: [{ type: "text", text: `${report.manifest}: ${report.missing.length} missing dependencies, ${report.conflicts.length} conflicts.` }],
+                    details: report,
+                };
+            },
+        }));
+        const disposePanel = context.piPluginUi.register({
+            id: "dependency-checker-panel",
+            pluginId: "@pi-harness/core/plugins/dependency-checker",
+            title: "Dependency Checker",
+            description: "检查 package.json 或 requirements.txt 的依赖安装状态和版本冲突。",
+            icon: "⊙",
+            read: async () => ({ report: latest ?? (await inspect()) }),
+        });
+        context.effect(() => () => {
+            unregisterTool();
+            disposePanel();
+        });
+    },
+};
+//# sourceMappingURL=dependency-checker.js.map

package/packages/core/dist/plugins/dependency-checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-checker.js","sourceRoot":"","sources":["../../src/plugins/dependency-checker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE9D,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAwB,MAAM,iCAAiC,CAAC;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AAsBpE,SAAS,YAAY,CAAC,OAAwD;IAC5E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;AACpJ,CAAC;AAID,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,eAAe,CAAC,IAAoB,EAAE,KAAqB;IAClE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB,EAAE,OAAuB;IACnE,MAAM,KAAK,GAAG,UAAU;SACrB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,sEAAsE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChG,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACvD,QAAQ,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;YACxB,KAAK,IAAI;gBACP,OAAO,UAAU,IAAI,CAAC,CAAC;YACzB,KAAK,IAAI;gBACP,OAAO,UAAU,IAAI,CAAC,CAAC;YACzB,KAAK,GAAG;gBACN,OAAO,UAAU,GAAG,CAAC,CAAC;YACxB,KAAK,GAAG;gBACN,OAAO,UAAU,GAAG,CAAC,CAAC;YACxB,KAAK,GAAG;gBACN,OAAO,CACL,UAAU,IAAI,CAAC;oBACf,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC;oBAC3B,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvH,CAAC;YACJ,KAAK,GAAG;gBACN,OAAO,UAAU,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC;YACvF;gBACE,OAAO,UAAU,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,WAA8B;IACzD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,yDAAyD,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,OAAO,GAA2C,EAAE,CAAC;IAC3D,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YACrJ,SAAS;QACX,MAAM,KAAK,GAAG,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,SAAiB,EAAE,IAAY;IACnE,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3D,KAAK,MAAM,WAAW,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACrF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC5J,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,MAAc;IAClE,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrI,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,GAAG;QAC5C,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;QAC7B,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;QAC/C,OAAO;QACP,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,MAAM,CAAC,WAAW;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,SAAS,GAAG,cAAc;IACjF,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,SAAS,EAAE,SAAS,EAAE,sDAAsD,CAAC,CAAC;IAClI,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACtJ,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/H,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,MAAM,QAAQ,GAAG,CAAC,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;IACjG,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC7I,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,GAAI,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;QAClD,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM;IACrC,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACpE,IAAI,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC7B,KAAK,GAAG,IAAI,CAAC;oBACb,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,KAAK,GAAG,IAAI,CAAC;gBACb,MAAM;YACR,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,GAAG;QAC5C,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;QAC1D,OAAO;QACP,OAAO;QACP,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,eAAe;IACb,IAAI,EAAE,uBAAuB;IAC7B,MAAM,EAAE,CAAC,iBAAiB,EAAE,YAAY,EAAE,SAAS,CAAC;IACpD,KAAK,CAAC,OAAgB;QACpB,IAAI,MAAoC,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,EAAE,QAAiB,EAA6B,EAAE;YACrE,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACtE,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAC7C,UAAU,CAAC;YACT,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,gHAAgH;YAC7H,aAAa,EAAE,2DAA2D;YAC1E,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iEAAiE,EAAE,CAAC,CAAC,EAAE,CAAC;YACrJ,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM;gBAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC9C,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,0BAA0B,MAAM,CAAC,SAAS,CAAC,MAAM,aAAa,EAAE,CAAC;oBAC7I,OAAO,EAAE,MAAM;iBAChB,CAAC;YACJ,CAAC;SACF,CAAC,CACH,CAAC;QACF,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC/C,EAAE,EAAE,0BAA0B;YAC9B,QAAQ,EAAE,6CAA6C;YACvD,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EAAE,kDAAkD;YAC/D,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,MAAM,OAAO,EAAE,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;YACxB,cAAc,EAAE,CAAC;YACjB,YAAY,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/packages/core/dist/plugins/docker-sandbox.d.ts

@@ -0,0 +1,8 @@
+import type { Context } from "@deepseek-ai/cordis";
+declare const _default: {
+    name: string;
+    inject: string[];
+    apply(context: Context): void;
+};
+export default _default;
+//# sourceMappingURL=docker-sandbox.d.ts.map

package/packages/core/dist/plugins/docker-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox.d.ts","sourceRoot":"","sources":["../../src/plugins/docker-sandbox.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;;;;mBAelC,OAAO;;AAHxB,wBAoFE"}

package/packages/core/dist/plugins/docker-sandbox.js

@@ -0,0 +1,102 @@
+import { execFile } from "node:child_process";
+import { basename } from "node:path";
+import { promisify } from "node:util";
+import { Type } from "@earendil-works/pi-ai";
+import { defineTool } from "@earendil-works/pi-coding-agent";
+const execFileAsync = promisify(execFile);
+const shellCommands = new Set(["sh", "bash", "zsh", "fish", "cmd", "powershell", "pwsh"]);
+function validateImage(image) {
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9._/@:-]*$/.test(image))
+        throw new Error("Invalid Docker image reference");
+}
+export default {
+    name: "pi-docker-sandbox",
+    inject: ["piHarnessLaunch", "piPluginUi", "piTools"],
+    apply(context) {
+        let latest;
+        const unregisterTool = context.piTools.register(defineTool({
+            name: "sandbox_exec",
+            label: "Docker sandbox",
+            description: "Run an argv command in a no-network Docker container with the workspace mounted read-only by default.",
+            promptSnippet: "run a command in an isolated no-network Docker sandbox",
+            parameters: Type.Object({
+                command: Type.Array(Type.String(), { description: "Executable and arguments; shell wrappers are rejected" }),
+                image: Type.Optional(Type.String({ description: "Local Docker image, default alpine:3.20" })),
+                write: Type.Optional(Type.Boolean({ description: "Mount the workspace read-write" })),
+                confirmWrite: Type.Optional(Type.Boolean({ description: "Must be true when write is enabled" })),
+            }),
+            async execute(_toolCallId, params) {
+                if (params.command.length === 0)
+                    throw new Error("Sandbox command cannot be empty");
+                const executable = params.command[0];
+                if (executable === undefined)
+                    throw new Error("Sandbox command cannot be empty");
+                if (shellCommands.has(basename(executable).toLowerCase()))
+                    throw new Error("Shell wrappers are not allowed; pass an executable argv directly");
+                const image = params.image?.trim() || "alpine:3.20";
+                validateImage(image);
+                const write = params.write === true;
+                if (write && params.confirmWrite !== true)
+                    throw new Error("Writable sandbox requires confirmWrite=true");
+                try {
+                    await execFileAsync("docker", ["image", "inspect", image], { timeout: 30_000, maxBuffer: 1_000_000 });
+                }
+                catch (error) {
+                    const failure = error;
+                    if (failure.code === "ENOENT")
+                        throw new Error("Docker executable is not available on PATH", { cause: error });
+                    throw new Error(`Docker image is not available locally: ${image}`, { cause: error });
+                }
+                const args = [
+                    "run",
+                    "--rm",
+                    "--network",
+                    "none",
+                    "--read-only",
+                    "--tmpfs",
+                    "/tmp:rw,noexec,nosuid",
+                    "--cap-drop",
+                    "ALL",
+                    "--security-opt",
+                    "no-new-privileges",
+                    "--pids-limit",
+                    "256",
+                    "--mount",
+                    `type=bind,src=${context.piHarnessLaunch.cwd},dst=/workspace${write ? "" : ",readonly"}`,
+                    "--workdir",
+                    "/workspace",
+                    image,
+                    ...params.command,
+                ];
+                try {
+                    const result = await execFileAsync("docker", args, { cwd: context.piHarnessLaunch.cwd, timeout: 120_000, maxBuffer: 4 * 1024 * 1024 });
+                    latest = { image, command: [...params.command], write, exitCode: 0, output: `${result.stdout}${result.stderr}`.slice(-12_000) };
+                }
+                catch (error) {
+                    const failure = error;
+                    latest = {
+                        image,
+                        command: [...params.command],
+                        write,
+                        exitCode: typeof failure.code === "number" ? failure.code : 1,
+                        output: `${failure.stdout ?? ""}${failure.stderr ?? failure.message ?? ""}`.slice(-12_000),
+                    };
+                }
+                return { content: [{ type: "text", text: `Docker sandbox exited with ${latest.exitCode}.\n${latest.output}` }], details: latest };
+            },
+        }));
+        const disposePanel = context.piPluginUi.register({
+            id: "docker-sandbox-panel",
+            pluginId: "@pi-harness/core/plugins/docker-sandbox",
+            title: "Docker Sandbox",
+            description: "无网络、只读挂载、去除 Linux capabilities 的隔离执行环境。",
+            icon: "⬡",
+            read: () => ({ latest: latest ?? null, defaults: { network: "none", workspace: "read-only", image: "alpine:3.20" } }),
+        });
+        context.effect(() => () => {
+            unregisterTool();
+            disposePanel();
+        });
+    },
+};
+//# sourceMappingURL=docker-sandbox.js.map

package/packages/core/dist/plugins/docker-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox.js","sourceRoot":"","sources":["../../src/plugins/docker-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAwB,MAAM,iCAAiC,CAAC;AAEnF,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;AAG1F,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;AACxG,CAAC;AAED,eAAe;IACb,IAAI,EAAE,mBAAmB;IACzB,MAAM,EAAE,CAAC,iBAAiB,EAAE,YAAY,EAAE,SAAS,CAAC;IACpD,KAAK,CAAC,OAAgB;QACpB,IAAI,MAA8B,CAAC;QACnC,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAC7C,UAAU,CAAC;YACT,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,uGAAuG;YACpH,aAAa,EAAE,wDAAwD;YACvE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;gBACtB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,uDAAuD,EAAE,CAAC;gBAC5G,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yCAAyC,EAAE,CAAC,CAAC;gBAC7F,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC,CAAC;gBACrF,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC,CAAC;aACjG,CAAC;YACF,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM;gBAC/B,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACpF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACrC,IAAI,UAAU,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACjF,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;gBAC/I,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC;gBACpD,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;gBACpC,IAAI,KAAK,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBAC1G,IAAI,CAAC;oBACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;gBACxG,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,KAAqD,CAAC;oBACtE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC/G,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvF,CAAC;gBACD,MAAM,IAAI,GAAG;oBACX,KAAK;oBACL,MAAM;oBACN,WAAW;oBACX,MAAM;oBACN,aAAa;oBACb,SAAS;oBACT,uBAAuB;oBACvB,YAAY;oBACZ,KAAK;oBACL,gBAAgB;oBAChB,mBAAmB;oBACnB,cAAc;oBACd,KAAK;oBACL,SAAS;oBACT,iBAAiB,OAAO,CAAC,eAAe,CAAC,GAAG,kBAAkB,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE;oBACxF,WAAW;oBACX,YAAY;oBACZ,KAAK;oBACL,GAAG,MAAM,CAAC,OAAO;iBAClB,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;oBACvI,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClI,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,KAAuF,CAAC;oBACxG,MAAM,GAAG;wBACP,KAAK;wBACL,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;wBAC5B,KAAK;wBACL,QAAQ,EAAE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBAC7D,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;qBAC3F,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACpI,CAAC;SACF,CAAC,CACH,CAAC;QACF,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC/C,EAAE,EAAE,sBAAsB;YAC1B,QAAQ,EAAE,yCAAyC;YACnD,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,yCAAyC;YACtD,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC;SACtH,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;YACxB,cAAc,EAAE,CAAC;YACjB,YAAY,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/packages/core/dist/plugins/fail-logger.d.ts

@@ -0,0 +1,8 @@
+import type { Context } from "@deepseek-ai/cordis";
+declare const _default: {
+    name: string;
+    inject: string[];
+    apply(context: Context): void;
+};
+export default _default;
+//# sourceMappingURL=fail-logger.d.ts.map

package/packages/core/dist/plugins/fail-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fail-logger.d.ts","sourceRoot":"","sources":["../../src/plugins/fail-logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;;;;mBAiBlC,OAAO;;AAHxB,wBAoCE"}

package/packages/core/dist/plugins/fail-logger.js

@@ -0,0 +1,51 @@
+function messageOf(error) {
+    if (error instanceof Error)
+        return error.message;
+    if (typeof error === "object" && error !== null && "error" in error) {
+        const { error: message, extensionPath } = error;
+        const text = typeof message === "string" ? message : String(message);
+        return typeof extensionPath === "string" ? `${extensionPath}: ${text}` : text;
+    }
+    return typeof error === "string" ? error : (JSON.stringify(error) ?? String(error));
+}
+export default {
+    name: "pi-fail-logger",
+    inject: ["piPluginUi"],
+    apply(context) {
+        const failures = [];
+        let previous;
+        const record = (source, error) => {
+            const message = messageOf(error);
+            const fingerprint = `${source}:${message}`;
+            if (fingerprint === previous)
+                return;
+            previous = fingerprint;
+            failures.push({ time: new Date().toISOString(), source, message });
+            if (failures.length > 50)
+                failures.shift();
+        };
+        const unsubscribeExtension = context.on("pi/extension-error", (error) => record("extension", error));
+        const unsubscribeSession = context.on("pi/session-event", (event) => {
+            const last = event.type === "agent_end" ? event.messages.at(-1) : undefined;
+            if (last?.role === "assistant" && last.stopReason === "error") {
+                record("agent", last.errorMessage ?? "Agent turn failed");
+            }
+            if (event.type === "compaction_end" && event.errorMessage)
+                record("compaction", event.errorMessage);
+        });
+        const disposePanel = context.piPluginUi.register({
+            id: "fail-logger-panel",
+            pluginId: "@pi-harness/core/plugins/fail-logger",
+            title: "Failure Logger",
+            description: "集中记录扩展、Agent 和上下文压缩错误，并去重重复故障。",
+            icon: "!",
+            read: () => ({ total: failures.length, failures: [...failures].reverse() }),
+        });
+        context.effect(() => () => {
+            unsubscribeExtension();
+            unsubscribeSession();
+            disposePanel();
+        });
+    },
+};
+//# sourceMappingURL=fail-logger.js.map

package/packages/core/dist/plugins/fail-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fail-logger.js","sourceRoot":"","sources":["../../src/plugins/fail-logger.ts"],"names":[],"mappings":"AAIA,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;QACpE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,KAAoD,CAAC;QAC/F,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrE,OAAO,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,aAAa,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,eAAe;IACb,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,CAAC,YAAY,CAAC;IACtB,KAAK,CAAC,OAAgB;QACpB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,IAAI,QAA4B,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,KAAc,EAAQ,EAAE;YACtD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,WAAW,GAAG,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3C,IAAI,WAAW,KAAK,QAAQ;gBAAE,OAAO;YACrC,QAAQ,GAAG,WAAW,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACnE,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE;gBAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC7C,CAAC,CAAC;QACF,MAAM,oBAAoB,GAAG,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QACrG,MAAM,kBAAkB,GAAG,OAAO,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YAClE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,IAAI,IAAI,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;gBAC9D,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,YAAY;gBAAE,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACtG,CAAC,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC/C,EAAE,EAAE,mBAAmB;YACvB,QAAQ,EAAE,sCAAsC;YAChD,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,gCAAgC;YAC7C,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;SAC5E,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;YACxB,oBAAoB,EAAE,CAAC;YACvB,kBAAkB,EAAE,CAAC;YACrB,YAAY,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/packages/core/dist/plugins/genui.d.ts

@@ -0,0 +1,8 @@
+import type { Context } from "@deepseek-ai/cordis";
+declare const _default: {
+    name: string;
+    inject: string[];
+    apply(context: Context): void;
+};
+export default _default;
+//# sourceMappingURL=genui.d.ts.map

package/packages/core/dist/plugins/genui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"genui.d.ts","sourceRoot":"","sources":["../../src/plugins/genui.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;;;;mBA8BlC,OAAO;;AAHxB,wBA4DE"}

package/packages/core/dist/plugins/genui.js

@@ -0,0 +1,79 @@
+import { Type } from "@earendil-works/pi-ai";
+import { defineTool } from "@earendil-works/pi-coding-agent";
+const maxBlocks = 12;
+const maxTextLength = 4000;
+function cleanText(value, field) {
+    const text = value.trim();
+    if (text.length === 0)
+        throw new Error(`${field} must not be empty`);
+    if (text.length > maxTextLength)
+        throw new Error(`${field} must be at most ${maxTextLength} characters`);
+    return text;
+}
+function normalizeBlock(block) {
+    const label = cleanText(block.label, "Block label");
+    const rawValue = cleanText(block.value, "Block value");
+    if (block.type !== "progress")
+        return { type: block.type, label, value: rawValue, tone: block.tone ?? "neutral" };
+    const value = Number(rawValue);
+    if (!Number.isFinite(value) || value < 0 || value > 100)
+        throw new Error("Progress value must be a number from 0 to 100");
+    return { type: "progress", label, value, tone: block.tone ?? "info" };
+}
+export default {
+    name: "pi-genui",
+    inject: ["piPluginUi", "piTools"],
+    apply(context) {
+        let rendered = 0;
+        let latest;
+        const unregisterTool = context.piTools.register(defineTool({
+            name: "genui_render",
+            label: "Render structured UI",
+            description: "Render safe structured text, badge, and progress blocks in the GenUI panel; HTML and scripts are treated as plain text.",
+            promptSnippet: "render a structured status card for the user",
+            parameters: Type.Object({
+                title: Type.String(),
+                blocks: Type.Array(Type.Object({
+                    type: Type.Union(["text", "badge", "progress"]),
+                    label: Type.String(),
+                    value: Type.String(),
+                    tone: Type.Optional(Type.Union(["neutral", "info", "success", "warning", "danger"])),
+                })),
+            }),
+            execute(_toolCallId, params) {
+                return Promise.resolve().then(() => {
+                    if (params.blocks.length === 0 || params.blocks.length > maxBlocks)
+                        throw new Error(`GenUI requires 1 to ${maxBlocks} blocks`);
+                    latest = {
+                        title: cleanText(params.title, "Title"),
+                        blocks: params.blocks.map((block) => normalizeBlock({
+                            type: block.type,
+                            label: block.label,
+                            value: block.value,
+                            ...(block.tone === undefined ? {} : { tone: block.tone }),
+                        })),
+                        renderedAt: new Date().toISOString(),
+                    };
+                    rendered += 1;
+                    return {
+                        content: [{ type: "text", text: `Rendered ${latest.blocks.length} structured UI block(s): ${latest.title}` }],
+                        details: latest,
+                    };
+                });
+            },
+        }));
+        const disposePanel = context.piPluginUi.register({
+            id: "genui-panel",
+            pluginId: "@pi-harness/core/plugins/genui",
+            title: "GenUI",
+            description: "渲染安全的结构化状态卡片；文本中的 HTML 和脚本不会被执行。",
+            icon: "▤",
+            read: () => ({ rendered, latest: latest ?? null }),
+        });
+        context.effect(() => () => {
+            unregisterTool();
+            disposePanel();
+        });
+    },
+};
+//# sourceMappingURL=genui.js.map

package/packages/core/dist/plugins/genui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"genui.js","sourceRoot":"","sources":["../../src/plugins/genui.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAwB,MAAM,iCAAiC,CAAC;AAEnF,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,aAAa,GAAG,IAAI,CAAC;AAM3B,SAAS,SAAS,CAAC,KAAa,EAAE,KAAa;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,aAAa,aAAa,CAAC,CAAC;IACzG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAqE;IAC3F,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;IAClH,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC1H,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC;AACxE,CAAC;AAED,eAAe;IACb,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;IACjC,KAAK,CAAC,OAAgB;QACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,MAA+B,CAAC;QACpC,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAC7C,UAAU,CAAC;YACT,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,yHAAyH;YACtI,aAAa,EAAE,8CAA8C;YAC7D,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;gBACtB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;gBACpB,MAAM,EAAE,IAAI,CAAC,KAAK,CAChB,IAAI,CAAC,MAAM,CAAC;oBACV,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;oBAC/C,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;oBACpB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;oBACpB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;iBACrF,CAAC,CACH;aACF,CAAC;YACF,OAAO,CAAC,WAAW,EAAE,MAAM;gBACzB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS;wBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,SAAS,CAAC,CAAC;oBAC/H,MAAM,GAAG;wBACP,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;wBACvC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAClC,cAAc,CAAC;4BACb,IAAI,EAAE,KAAK,CAAC,IAAiB;4BAC7B,KAAK,EAAE,KAAK,CAAC,KAAK;4BAClB,KAAK,EAAE,KAAK,CAAC,KAAK;4BAClB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAY,EAAE,CAAC;yBAClE,CAAC,CACH;wBACD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACrC,CAAC;oBACF,QAAQ,IAAI,CAAC,CAAC;oBACd,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,YAAY,MAAM,CAAC,MAAM,CAAC,MAAM,4BAA4B,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;wBACtH,OAAO,EAAE,MAAM;qBAChB,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CACH,CAAC;QACF,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC/C,EAAE,EAAE,aAAa;YACjB,QAAQ,EAAE,gCAAgC;YAC1C,KAAK,EAAE,OAAO;YACd,WAAW,EAAE,kCAAkC;YAC/C,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;YACxB,cAAc,EAAE,CAAC;YACjB,YAAY,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/packages/core/dist/plugins/git-time-capsule.d.ts

@@ -0,0 +1,9 @@
+import type { Context } from "@deepseek-ai/cordis";
+export declare function applyCapsule(cwd: string, capsulePath: string): Promise<void>;
+declare const _default: {
+    name: string;
+    inject: string[];
+    apply(context: Context): void;
+};
+export default _default;
+//# sourceMappingURL=git-time-capsule.d.ts.map

package/packages/core/dist/plugins/git-time-capsule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-time-capsule.d.ts","sourceRoot":"","sources":["../../src/plugins/git-time-capsule.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAYnD,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOlF;;;;mBAcgB,OAAO;;AAHxB,wBA6DE"}

package/packages/core/dist/plugins/git-time-capsule.js

@@ -0,0 +1,90 @@
+import { execFile } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { mkdir, readdir, stat, writeFile } from "node:fs/promises";
+import { promisify } from "node:util";
+import { basename, join } from "node:path";
+import { Type } from "@earendil-works/pi-ai";
+import { defineTool } from "@earendil-works/pi-coding-agent";
+const execFileAsync = promisify(execFile);
+const capsuleDirectory = "capsules";
+async function git(cwd, args) {
+    const result = await execFileAsync("git", [...args], { cwd, maxBuffer: 8 * 1024 * 1024 });
+    return result.stdout;
+}
+export async function applyCapsule(cwd, capsulePath) {
+    try {
+        await git(cwd, ["apply", "--reverse", "--check", "--binary", capsulePath]);
+    }
+    catch (cause) {
+        throw new Error("Git capsule does not apply cleanly", { cause });
+    }
+    await git(cwd, ["apply", "--reverse", "--binary", capsulePath]);
+}
+async function listCapsules(directory) {
+    const names = (await readdir(directory).catch(() => []))
+        .filter((name) => name.endsWith(".patch"))
+        .sort()
+        .reverse()
+        .slice(0, 20);
+    return Promise.all(names.map(async (name) => ({ name, bytes: (await stat(join(directory, name))).size })));
+}
+export default {
+    name: "pi-git-time-capsule",
+    inject: ["piHarnessLaunch", "piPluginUi", "piTools"],
+    apply(context) {
+        const directory = join(context.piHarnessLaunch.agentDir, capsuleDirectory);
+        let latest;
+        const unregisterTool = context.piTools.register(defineTool({
+            name: "git_snapshot",
+            label: "Git snapshot",
+            description: "Save the current tracked Git diff as a timestamped patch outside the workspace for rollback or review.",
+            promptSnippet: "save a rollback patch before changing code",
+            parameters: Type.Object({}),
+            async execute() {
+                const status = await git(context.piHarnessLaunch.cwd, ["status", "--short"]);
+                const patch = await git(context.piHarnessLaunch.cwd, ["diff", "HEAD", "--binary", "--no-ext-diff", "--", ".", ":(exclude).pi-harness/capsules"]);
+                await mkdir(directory, { recursive: true });
+                const timestamp = new Date().toISOString().replace(/[-:.]/g, "");
+                const name = `${timestamp}-${randomUUID().slice(0, 8)}.patch`;
+                const path = join(directory, name);
+                await writeFile(path, patch, { encoding: "utf8", mode: 0o600, flag: "wx" });
+                const files = status.split("\n").filter((line) => line.trim() !== "" && !line.startsWith("??")).length;
+                latest = { name, bytes: Buffer.byteLength(patch), files };
+                return { content: [{ type: "text", text: `Git snapshot saved: ${name}` }], details: { path, bytes: latest.bytes, files } };
+            },
+        }));
+        const unregisterRestore = context.piTools.register(defineTool({
+            name: "git_restore",
+            label: "Restore Git snapshot",
+            description: "Apply a saved Git time capsule after an explicit confirmation; the patch is checked before it changes the workspace.",
+            promptSnippet: "restore a previously saved Git snapshot",
+            parameters: Type.Object({ name: Type.String({ description: "Capsule filename from the recent snapshots list" }), confirm: Type.Boolean() }),
+            async execute(_toolCallId, params) {
+                if (!params.confirm)
+                    throw new Error("Git capsule restore writes the workspace and requires confirm=true");
+                const name = params.name.trim();
+                if (name.length === 0 || name.length > 255 || basename(name) !== name || !name.endsWith(".patch"))
+                    throw new Error("Capsule name must be a .patch filename");
+                const path = join(directory, name);
+                await applyCapsule(context.piHarnessLaunch.cwd, path);
+                const bytes = (await stat(path)).size;
+                latest = { name, bytes, files: 0, restored: true };
+                return { content: [{ type: "text", text: `Git snapshot restored: ${name}` }], details: { name, restored: true } };
+            },
+        }));
+        const disposePanel = context.piPluginUi.register({
+            id: "git-time-capsule-panel",
+            pluginId: "@pi-harness/core/plugins/git-time-capsule",
+            title: "Git Time Capsule",
+            description: "查看最近的代码快照；快照保存在工作区之外，不会污染项目文件。",
+            icon: "◫",
+            read: async () => ({ latest: latest ?? null, capsules: await listCapsules(directory) }),
+        });
+        context.effect(() => () => {
+            unregisterTool();
+            unregisterRestore();
+            disposePanel();
+        });
+    },
+};
+//# sourceMappingURL=git-time-capsule.js.map